@icure/api 8.0.42 → 8.0.44

package/icc-api/model/Contact.d.ts

@@ -102,6 +102,10 @@ export declare class Contact {
      * Set of all services provided to the patient during the contact.
      */
     services?: Array<Service>;
+    /**
+     * The participants to the contact. The key is the type of participant, the value is the id of the participant data owner id
+     */
+    participants?: Record<ParticipantType, string>;
     healthcarePartyId?: string;
     modifiedContactId?: string;
     /**
@@ -136,3 +140,4 @@ export declare class Contact {
      */
     notes?: Array<Annotation>;
 }
+export type ParticipantType = 'admitter' | 'attender' | 'callback' | 'consultant' | 'discharger' | 'escort' | 'referrer' | 'secondaryPerformer' | 'primaryPerformer' | 'participation' | 'translator' | 'emergency' | 'location';

package/icc-api/model/Contact.js.map

@@ -1 +1 @@
-{"version":3,"file":"Contact.js","sourceRoot":"","sources":["../../../icc-api/model/Contact.ts"],"names":[],"mappings":";;;AAcA,uCAAmC;AAKnC;;GAEG;AACH,MAAa,OAAO;IAClB,YAAY,IAAgB;QAC1B,MAAM,CAAC,MAAM,CACX,IAAe,EACf,IAAI,CACL,CAAA;QAED,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE;YACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAmB,EAAE,EAAE,CAAC,IAAI,iBAAO,CAAC,OAAO,CAAC,CAAC,CAAA;SACjF;IACH,CAAC;CA8GF;AAxHD,0BAwHC","sourcesContent":["/**\n * iCure Data Stack API Documentation\n * The iCure Data Stack Application API is the native interface to iCure. This version is obsolete, please use v2.\n *\n * OpenAPI spec version: v1\n *\n *\n * NOTE: This class is auto generated by the swagger code generator program.\n * https://github.com/swagger-api/swagger-codegen.git\n * Do not edit the class manually.\n */\nimport { CodeStub } from './CodeStub'\nimport { Delegation } from './Delegation'\nimport { Identifier } from './Identifier'\nimport { Service } from './Service'\nimport { SubContact } from './SubContact'\nimport { SecurityMetadata } from './SecurityMetadata'\nimport {Annotation} from \"./Annotation\"\n\n/**\n * This entity is a root-level object. It represents a contact. It is serialized in JSON and saved in the underlying icure-contact CouchDB database. The contact is the entity that records the medical information about the patient chronologically. A visit to the patient's house, a consultation at the practice, a phone call between the patient and the healthcare party or integrating lab reports into the medical file are examples of when a contact can be recorded. A contact can occur with or without direct interaction between the patient and the healthcare party. For example, when a healthcare party encodes data received from laboratory's test result, this is done in the absence of a patient. A contact groups together pieces of information collected during one single event, for one single patient and for one or more healthcare parties. Patient's complaints, the diagnosis of a new problem, a surgical procedure, etc. are collected inside a contact. The main sub-element of the contact is the service. Each atomic piece of information collected during a contact is a service and is stored inside the services list of a contact.\n */\nexport class Contact {\n  constructor(json: JSON | any) {\n    Object.assign(\n      this as Contact,\n      json,\n    )\n\n    if (!!this.services) {\n      this.services = this.services.map((service: JSON | any) => new Service(service))\n    }\n  }\n\n  /**\n   * the Id of the contact. We encourage using either a v4 UUID or a HL7 Id.\n   */\n  id?: string\n  /**\n   * the revision of the contact in the database, used for conflict management / optimistic locking.\n   */\n  rev?: string\n  /**\n   * The timestamp (unix epoch in ms) of creation of this entity, will be filled automatically if missing. Not enforced by the application server.\n   */\n  created?: number\n  /**\n   * The date (unix epoch in ms) of the latest modification of this entity, will be filled automatically if missing. Not enforced by the application server.\n   */\n  modified?: number\n  /**\n   * The id of the User that has created this entity, will be filled automatically if missing. Not enforced by the application server.\n   */\n  author?: string\n  /**\n   * The id of the HealthcareParty that is responsible for this entity, will be filled automatically if missing. Not enforced by the application server.\n   */\n  responsible?: string\n  /**\n   * The id of the medical location where this entity was created.\n   */\n  medicalLocationId?: string\n  /**\n   * A tag is an item from a codification system that qualifies an entity as being member of a certain class, whatever the value it might have taken. If the tag qualifies the content of a field, it means that whatever the content of the field, the tag will always apply. For example, the label of a field is qualified using a tag. LOINC is a codification system typically used for tags.\n   */\n  tags?: Array<CodeStub>\n  /**\n   * A code is an item from a codification system that qualifies the content of this entity. SNOMED-CT, ICPC-2 or ICD-10 codifications systems can be used for codes\n   */\n  codes?: Array<CodeStub>\n  /**\n   * The identifiers of the Contact\n   */\n  identifier?: Array<Identifier>\n  /**\n   * Soft delete (unix epoch in ms) timestamp of the object.\n   */\n  endOfLife?: number\n  /**\n   * hard delete (unix epoch in ms) timestamp of the object. Filled automatically when deletePatient is called.\n   */\n  deletionDate?: number\n  /**\n   * Separate contacts can merged in one logical contact if they share the same groupId. When a contact must be split to selectively assign rights to healthcare parties, the split contacts all share the same groupId\n   */\n  groupId?: string\n  /**\n   * The date (YYYYMMDDhhmmss) of the start of the contact.\n   */\n  openingDate?: number\n  /**\n   * The date (YYYYMMDDhhmmss) marking the end of the contact.\n   */\n  closingDate?: number\n  /**\n   * Description of the contact\n   */\n  descr?: string\n  /**\n   * Location where the contact was recorded.\n   */\n  location?: string\n  /**\n   * An external (from another source) id with no guarantee or requirement for unicity.\n   */\n  externalId?: string\n  encounterType?: CodeStub\n  /**\n   * Set of all sub-contacts recorded during the given contact. Sub-contacts are used to link services embedded inside this contact to healthcare elements, healthcare approaches and/or forms.\n   */\n  subContacts?: Array<SubContact>\n  /**\n   * Set of all services provided to the patient during the contact.\n   */\n  services?: Array<Service>\n  healthcarePartyId?: string\n  modifiedContactId?: string\n  /**\n   * The secretForeignKeys are filled at the to many end of a one to many relationship (for example inside Contact for the Patient -> Contacts relationship). Used when we want to find all contacts for a specific patient. These keys are in clear. You can have several to partition the medical document space.\n   */\n  secretForeignKeys?: Array<string>\n  /**\n   * The secretForeignKeys are filled at the to many end of a one to many relationship (for example inside Contact for the Patient -> Contacts relationship). Used when we want to find the patient for a specific contact. These keys are the encrypted id (using the hcParty key for the delegate) that can be found in clear inside the patient. ids encrypted using the hcParty keys.\n   */\n  cryptedForeignKeys?: { [key: string]: Array<Delegation> }\n  /**\n   * When a document is created, the responsible generates a cryptographically random master key (never to be used for something else than referencing from other entities). He/she encrypts it using his own AES exchange key and stores it as a delegation. The responsible is thus always in the delegations as well\n   */\n  delegations?: { [key: string]: Array<Delegation> }\n  /**\n   * When a document needs to be encrypted, the responsible generates a cryptographically random master key (different from the delegation key, never to appear in clear anywhere in the db. He/she encrypts it using his own AES exchange key and stores it as a delegation\n   */\n  encryptionKeys?: { [key: string]: Array<Delegation> }\n  /**\n   * The base64 encoded data of this object, formatted as JSON and encrypted in AES using the random master key from encryptionKeys.\n   */\n  encryptedSelf?: string\n  securityMetadata?: SecurityMetadata\n  /**\n   * Comments - Notes recorded by a HCP about this service\n   */\n  notes?: Array<Annotation>\n}\n"]}
+{"version":3,"file":"Contact.js","sourceRoot":"","sources":["../../../icc-api/model/Contact.ts"],"names":[],"mappings":";;;AAcA,uCAAmC;AAKnC;;GAEG;AACH,MAAa,OAAO;IAClB,YAAY,IAAgB;QAC1B,MAAM,CAAC,MAAM,CACX,IAAe,EACf,IAAI,CACL,CAAA;QAED,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE;YACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAmB,EAAE,EAAE,CAAC,IAAI,iBAAO,CAAC,OAAO,CAAC,CAAC,CAAA;SACjF;IACH,CAAC;CAkHF;AA5HD,0BA4HC","sourcesContent":["/**\n * iCure Data Stack API Documentation\n * The iCure Data Stack Application API is the native interface to iCure. This version is obsolete, please use v2.\n *\n * OpenAPI spec version: v1\n *\n *\n * NOTE: This class is auto generated by the swagger code generator program.\n * https://github.com/swagger-api/swagger-codegen.git\n * Do not edit the class manually.\n */\nimport { CodeStub } from './CodeStub'\nimport { Delegation } from './Delegation'\nimport { Identifier } from './Identifier'\nimport { Service } from './Service'\nimport { SubContact } from './SubContact'\nimport { SecurityMetadata } from './SecurityMetadata'\nimport {Annotation} from \"./Annotation\"\n\n/**\n * This entity is a root-level object. It represents a contact. It is serialized in JSON and saved in the underlying icure-contact CouchDB database. The contact is the entity that records the medical information about the patient chronologically. A visit to the patient's house, a consultation at the practice, a phone call between the patient and the healthcare party or integrating lab reports into the medical file are examples of when a contact can be recorded. A contact can occur with or without direct interaction between the patient and the healthcare party. For example, when a healthcare party encodes data received from laboratory's test result, this is done in the absence of a patient. A contact groups together pieces of information collected during one single event, for one single patient and for one or more healthcare parties. Patient's complaints, the diagnosis of a new problem, a surgical procedure, etc. are collected inside a contact. The main sub-element of the contact is the service. Each atomic piece of information collected during a contact is a service and is stored inside the services list of a contact.\n */\nexport class Contact {\n  constructor(json: JSON | any) {\n    Object.assign(\n      this as Contact,\n      json,\n    )\n\n    if (!!this.services) {\n      this.services = this.services.map((service: JSON | any) => new Service(service))\n    }\n  }\n\n  /**\n   * the Id of the contact. We encourage using either a v4 UUID or a HL7 Id.\n   */\n  id?: string\n  /**\n   * the revision of the contact in the database, used for conflict management / optimistic locking.\n   */\n  rev?: string\n  /**\n   * The timestamp (unix epoch in ms) of creation of this entity, will be filled automatically if missing. Not enforced by the application server.\n   */\n  created?: number\n  /**\n   * The date (unix epoch in ms) of the latest modification of this entity, will be filled automatically if missing. Not enforced by the application server.\n   */\n  modified?: number\n  /**\n   * The id of the User that has created this entity, will be filled automatically if missing. Not enforced by the application server.\n   */\n  author?: string\n  /**\n   * The id of the HealthcareParty that is responsible for this entity, will be filled automatically if missing. Not enforced by the application server.\n   */\n  responsible?: string\n  /**\n   * The id of the medical location where this entity was created.\n   */\n  medicalLocationId?: string\n  /**\n   * A tag is an item from a codification system that qualifies an entity as being member of a certain class, whatever the value it might have taken. If the tag qualifies the content of a field, it means that whatever the content of the field, the tag will always apply. For example, the label of a field is qualified using a tag. LOINC is a codification system typically used for tags.\n   */\n  tags?: Array<CodeStub>\n  /**\n   * A code is an item from a codification system that qualifies the content of this entity. SNOMED-CT, ICPC-2 or ICD-10 codifications systems can be used for codes\n   */\n  codes?: Array<CodeStub>\n  /**\n   * The identifiers of the Contact\n   */\n  identifier?: Array<Identifier>\n  /**\n   * Soft delete (unix epoch in ms) timestamp of the object.\n   */\n  endOfLife?: number\n  /**\n   * hard delete (unix epoch in ms) timestamp of the object. Filled automatically when deletePatient is called.\n   */\n  deletionDate?: number\n  /**\n   * Separate contacts can merged in one logical contact if they share the same groupId. When a contact must be split to selectively assign rights to healthcare parties, the split contacts all share the same groupId\n   */\n  groupId?: string\n  /**\n   * The date (YYYYMMDDhhmmss) of the start of the contact.\n   */\n  openingDate?: number\n  /**\n   * The date (YYYYMMDDhhmmss) marking the end of the contact.\n   */\n  closingDate?: number\n  /**\n   * Description of the contact\n   */\n  descr?: string\n  /**\n   * Location where the contact was recorded.\n   */\n  location?: string\n  /**\n   * An external (from another source) id with no guarantee or requirement for unicity.\n   */\n  externalId?: string\n  encounterType?: CodeStub\n  /**\n   * Set of all sub-contacts recorded during the given contact. Sub-contacts are used to link services embedded inside this contact to healthcare elements, healthcare approaches and/or forms.\n   */\n  subContacts?: Array<SubContact>\n  /**\n   * Set of all services provided to the patient during the contact.\n   */\n  services?: Array<Service>\n  /**\n   * The participants to the contact. The key is the type of participant, the value is the id of the participant data owner id\n   */\n  participants?: Record<ParticipantType, string>\n  healthcarePartyId?: string\n  modifiedContactId?: string\n  /**\n   * The secretForeignKeys are filled at the to many end of a one to many relationship (for example inside Contact for the Patient -> Contacts relationship). Used when we want to find all contacts for a specific patient. These keys are in clear. You can have several to partition the medical document space.\n   */\n  secretForeignKeys?: Array<string>\n  /**\n   * The secretForeignKeys are filled at the to many end of a one to many relationship (for example inside Contact for the Patient -> Contacts relationship). Used when we want to find the patient for a specific contact. These keys are the encrypted id (using the hcParty key for the delegate) that can be found in clear inside the patient. ids encrypted using the hcParty keys.\n   */\n  cryptedForeignKeys?: { [key: string]: Array<Delegation> }\n  /**\n   * When a document is created, the responsible generates a cryptographically random master key (never to be used for something else than referencing from other entities). He/she encrypts it using his own AES exchange key and stores it as a delegation. The responsible is thus always in the delegations as well\n   */\n  delegations?: { [key: string]: Array<Delegation> }\n  /**\n   * When a document needs to be encrypted, the responsible generates a cryptographically random master key (different from the delegation key, never to appear in clear anywhere in the db. He/she encrypts it using his own AES exchange key and stores it as a delegation\n   */\n  encryptionKeys?: { [key: string]: Array<Delegation> }\n  /**\n   * The base64 encoded data of this object, formatted as JSON and encrypted in AES using the random master key from encryptionKeys.\n   */\n  encryptedSelf?: string\n  securityMetadata?: SecurityMetadata\n  /**\n   * Comments - Notes recorded by a HCP about this service\n   */\n  notes?: Array<Annotation>\n}\n\nexport type ParticipantType =\n  | 'admitter'\n  | 'attender'\n  | 'callback'\n  | 'consultant'\n  | 'discharger'\n  | 'escort'\n  | 'referrer'\n  | 'secondaryPerformer'\n  | 'primaryPerformer'\n  | 'participation'\n  | 'translator'\n  | 'emergency'\n  | 'location'\n"]}

package/icc-x-api/auth/SmartAuthProvider.js

@@ -115,7 +115,7 @@ class SmartAuthProvider {
         });
     }
     getIcureTokens() {
-        return Promise.resolve(undefined);
+        return this.tokenProvider.getCachedTokensOrLoad();
     }
 }
 exports.SmartAuthProvider = SmartAuthProvider;
@@ -154,6 +154,14 @@ class TokenProvider {
             }
         });
     }
+    getCachedTokensOrLoad() {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!this.cachedToken || !this.cachedRefreshToken) {
+                yield this.getAndCacheNewToken(undefined);
+            }
+            return { token: this.cachedToken, refreshToken: this.cachedRefreshToken };
+        });
+    }
     getNewTokenWithClass(minimumAuthenticationClass) {
         return __awaiter(this, void 0, void 0, function* () {
             return yield this.getAndCacheNewToken(minimumAuthenticationClass);

package/icc-x-api/auth/SmartAuthProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"SmartAuthProvider.js","sourceRoot":"","sources":["../../../icc-x-api/auth/SmartAuthProvider.ts"],"names":[],"mappings":";;;;;;;;;;;;AAGA,2CAA2D;AAC3D,+CAA2C;AAC3C,IAAO,QAAQ,GAAG,SAAG,CAAC,QAAQ,CAAA;AAC9B,yCAAmE;AAmDnE;;GAEG;AACH,IAAY,cA8BX;AA9BD,WAAY,cAAc;IACxB;;OAEG;IACH,uCAAqB,CAAA;IACrB;;;OAGG;IACH,qFAAmE,CAAA;IACnE;;;OAGG;IACH,yDAAuC,CAAA;IACvC;;;OAGG;IACH,uDAAqC,CAAA;IACrC;;;OAGG;IACH,qEAAmD,CAAA;IACnD;;;OAGG;IACH,6BAA6B;AAC/B,CAAC,EA9BW,cAAc,GAAd,sBAAc,KAAd,sBAAc,QA8BzB;AAED,kEAAkE;AAElE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAa,iBAAiB;IAC5B;;;;;;OAMG;IACH,MAAM,CAAC,UAAU,CACf,OAAmB,EACnB,KAAa,EACb,cAAkC,EAClC,QAKI,EAAE;QAEN,IAAI,aAAa,GAAiC,SAAS,CAAA;QAC3D,IAAI,KAAK,CAAC,aAAa,EAAE;YACvB,IAAI,UAAU,IAAI,KAAK,CAAC,aAAa,EAAE;gBACrC,aAAa,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,yBAAyB,CAAC,QAAQ,EAAE,CAAA;aAClG;iBAAM,IAAI,WAAW,IAAI,KAAK,CAAC,aAAa,EAAE;gBAC7C,aAAa,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,yBAAyB,CAAC,gBAAgB,EAAE,CAAA;aAC3G;iBAAM;gBACL,aAAa,GAAG;oBACd,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,UAAU;oBACrC,IAAI,EAAE,yBAAyB,CAAC,uBAAuB;oBACvD,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS;iBACzC,CAAA;aACF;SACF;QACD,OAAO,IAAI,iBAAiB,CAC1B,IAAI,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,mBAAmB,EAAE,OAAO,EAAE,cAAc,CAAC,EACvI,KAAK,CAAC,YAAY,CACnB,CAAA;IACH,CAAC;IAED,YAAqC,aAA4B,EAAmB,OAA2B;QAA1E,kBAAa,GAAb,aAAa,CAAe;QAAmB,YAAO,GAAP,OAAO,CAAoB;IAAG,CAAC;IAEnH,cAAc;QACZ,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACjD,CAAC;IAEK,WAAW,CAAC,UAAkB,EAAE,OAAyB;;YAC7D,IAAI,UAAU,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAC5D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,UAAU,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;YAChH,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;YAC3E,OAAO,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9D,CAAC;KAAA;IAED,cAAc;QACZ,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACnC,CAAC;CACF;AAvDD,8CAuDC;AAED,IAAK,yBAOJ;AAPD,WAAK,yBAAyB;IAC5B,mBAAmB;IACnB,oHAA8B,CAAA;IAC9B,oGAAsB,CAAA;IACtB,gHAA4B,CAAA;IAC5B,kFAAa,CAAA;IACb,kGAAqB,CAAA;AACvB,CAAC,EAPI,yBAAyB,KAAzB,yBAAyB,QAO7B;AAMD,qJAAqJ;AACrJ,oCAAoC;AACpC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,yBAAe,CAAC,MAAM,CAAC,CAAC,CAAA;AAC9D,MAAM,aAAa;IACjB,YACU,KAAa,EACb,OAA2B,EAC3B,sBAAoD,EACpD,WAA+B,EAC/B,kBAAsC,EAC7B,OAAmB,EACnB,kBAAsC;QAN/C,UAAK,GAAL,KAAK,CAAQ;QACb,YAAO,GAAP,OAAO,CAAoB;QAC3B,2BAAsB,GAAtB,sBAAsB,CAA8B;QACpD,gBAAW,GAAX,WAAW,CAAoB;QAC/B,uBAAkB,GAAlB,kBAAkB,CAAoB;QAC7B,YAAO,GAAP,OAAO,CAAY;QACnB,uBAAkB,GAAlB,kBAAkB,CAAoB;IACtD,CAAC;IAEE,8BAA8B;;YAClC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAA,gCAAqB,EAAC,IAAI,CAAC,WAAW,CAAC,EAAE;gBAClE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,kBAAkB,CAAC,MAAM,EAAE,CAAA;aACpE;iBAAM,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAA,gCAAqB,EAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE;gBACvF,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;aAC1D;iBAAM;gBACL,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,CAAC,GAAG,EAAE,CAAA;aAC1F;QACH,CAAC;KAAA;IAEK,oBAAoB,CAAC,0BAAkC;;YAC3D,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,0BAA0B,CAAC,CAAA;QACnE,CAAC;KAAA;IAEa,mBAAmB,CAAC,+BAAmD;;YACnF,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,+BAA+B,aAA/B,+BAA+B,cAA/B,+BAA+B,GAAI,CAAC,CAAC,CAAA;YAC5F,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;YACxB,IAAI,CAAC,kBAAkB,GAAG,YAAY,CAAA;YACtC,OAAO,KAAK,CAAA;QACd,CAAC;KAAA;IAEa,oBAAoB,CAAC,YAAoB;;YACrD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,IAAI,CACnE,CAAC,UAAU,EAAE,EAAE;gBACb,IAAI,CAAC,UAAU,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAA;gBACnI,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,KAAK,CAAA;gBACnC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,kBAAkB,CAAC,SAAS,EAAE,CAAA;YACxE,CAAC,EACD,GAAS,EAAE,gDAAC,OAAA,CAAC,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAA,GAAA,CACjG,CAAA;QACH,CAAC;KAAA;IAEa,WAAW,CAAC,+BAAuC;;YAC/D,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,IAAI,+BAA+B,CAAC,EAAE;gBAC/I,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,sBAAsB,EAAE,+BAA+B,CAAC,CAAA;gBAC5H,IAAI,SAAS,IAAI,sBAAsB,EAAE;oBACvC,OAAO,sBAAsB,CAAC,OAAO,CAAA;iBACtC;qBAAM,IACL,sBAAsB,CAAC,OAAO,KAAK,6BAA6B,CAAC,SAAS;oBAC1E,+BAA+B,IAAI,yBAAyB,CAAC,yBAAyB,EACtF;oBACA,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAA;iBACnG;;oBAAM,OAAO,IAAI,CAAC,oBAAoB,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAA;aAC/E;iBAAM;gBACL,OAAO,IAAI,CAAC,oBAAoB,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAA;aACxE;QACH,CAAC;KAAA;IAEa,oBAAoB,CAChC,+BAAuC,EACvC,oBAA6B;;YAE7B,MAAM,eAAe,GAAG;gBACtB,+BAA+B,IAAI,yBAAyB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE;gBACtH,+BAA+B,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE;gBACxH,+BAA+B,IAAI,yBAAyB,CAAC,yBAAyB;oBACtF,CAAC,oBAAoB,IAAI,+BAA+B,IAAI,yBAAyB,CAAC,QAAQ,CAAC;oBAC7F,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAC3B,CAAC,CAAC,EAAE;aACP,CAAC,IAAI,EAAE,CAAA;YACR,IAAI,CAAC,eAAe,CAAC,MAAM;gBACzB,MAAM,IAAI,KAAK,CAAC,qHAAqH,CAAC,CAAA;YACxI,MAAM,QAAQ,GAAwB,EAAE,CAAA;YACxC,OAAO,IAAI,EAAE;gBACX,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,GAAG,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAA;gBAC7F,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,8BAA8B,aAAa,CAAC,UAAU,GAAG,CAAC,CAAA;gBACxI,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;gBAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAA;gBAC9F,IAAI,SAAS,IAAI,MAAM,EAAE;oBACvB,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAA;oBACtC,OAAO,MAAM,CAAC,OAAO,CAAA;iBACtB;qBAAM,IAAI,MAAM,CAAC,OAAO,IAAI,6BAA6B,CAAC,SAAS,EAAE;oBACpE,OAAO,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAA;iBACrF;qBAAM,IAAI,aAAa,CAAC,KAAK,IAAI,cAAc,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,IAAI,6BAA6B,CAAC,wBAAwB,EAAE;oBACrI,wHAAwH;oBACxH,OAAO,IAAI,CAAC,oBAAoB,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;iBACzE,CAAC,aAAa;aAChB;QACH,CAAC;KAAA;IAEa,kBAAkB,CAAC,QAAgB,EAAE,+BAAuC;;YACxF,IAAI,+BAA+B,GAAG,yBAAyB,CAAC,yBAAyB;gBACvF,MAAM,IAAI,KAAK,CACb,gIAAgI,CACjI,CAAA;YACH,MAAM,QAAQ,GAAwB,EAAE,CAAA;YACxC,OAAO,IAAI,EAAE;gBACX,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,+BAA+B,CAAC,EAAE,QAAQ,CAAC,CAAA;gBACnH,IAAI,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,+BAA+B;oBACtE,MAAM,IAAI,KAAK,CAAC,sDAAsD,OAAO,CAAC,UAAU,GAAG,CAAC,CAAA;gBAC9F,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,GAAG,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,+BAA+B,CAAC,CAAA;gBAC1H,IAAI,SAAS,IAAI,MAAM,EAAE;oBACvB,IAAI,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAA;oBACjF,OAAO,MAAM,CAAC,OAAO,CAAA;iBACtB;qBAAM,IAAI,MAAM,CAAC,OAAO,IAAI,6BAA6B,CAAC,WAAW,EAAE;oBACtE,MAAM,IAAI,KAAK,CAAC,yFAAyF,MAAM,CAAC,OAAO,GAAG,CAAC,CAAA;iBAC5H,CAAC,aAAa;aAChB;QACH,CAAC;KAAA;IAEa,oBAAoB,CAChC,MAAsD,EACtD,+BAAuC;;YAEvC,IAAI,iBAAkD,CAAA;YACtD,IAAI,WAAW,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE;gBAC/C,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,oBAAoB;aAC/G;iBAAM;gBACL,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;aACvG;YACD,OAAO,iBAAiB,CAAC,IAAI,CAC3B,CAAC,UAAU,EAAE,EAAE;gBACb,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,UAAU,CAAA;gBAC1C,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAA;gBACvI,MAAM,MAAM,GAAG,IAAA,0BAAe,EAAC,KAAK,CAAC,CAAA;gBACrC,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;gBACpC,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE;oBACzD,IAAI,+BAA+B,GAAG,CAAC,EAAE;wBACvC,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;qBAChG;;wBAAM,OAAO,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAA;iBACnD;gBACD,IAAI,cAAc,GAAG,+BAA+B,EAAE;oBACpD,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,wBAAwB,EAAE,CAAA;iBAC3E;qBAAM;oBACL,OAAO,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAA;iBAC5C;YACH,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;gBACR,IAAI,CAAC,CAAC,KAAK,YAAY,QAAQ,CAAC;oBAAE,MAAM,KAAK,CAAA;gBAC7C,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE;oBACtD,gEAAgE;oBAChE,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,mBAAmB,EAAE,CAAA;iBACtE;qBAAM,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE;oBAClC,4CAA4C;oBAC5C,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,WAAW,EAAE,CAAA;iBAC9D;qBAAM,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE;oBAClC,kFAAkF;oBAClF,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,SAAS,EAAE,CAAA;iBAC5D;;oBAAM,MAAM,KAAK,CAAA;YACpB,CAAC,CACF,CAAA;QACH,CAAC;KAAA;IAEK,aAAa,CAAC,UAAkB;;YACpC,MAAM,mBAAmB,GAAG,IAAI,CAAC,kBAAkB;gBACjD,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC,IAAI,CACtE,CAAC,QAAQ,EAAE,EAAE;oBACX,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,YAAY;wBAC3C,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;oBACnH,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAA;gBACvE,CAAC,EACD,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CACtD;gBACH,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;YACjD,OAAO,IAAI,aAAa,CACtB,IAAI,CAAC,KAAK,EACV,UAAU,EACV,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,EACvG,mBAAmB,CAAC,KAAK,EACzB,mBAAmB,CAAC,YAAY,EAChC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,kBAAkB,CACxB,CAAA;QACH,CAAC;KAAA;IAEO,kBAAkB,CAAC,OAA0B;QACnD,QAAQ,OAAO,CAAC,UAAU,EAAE;YAC1B,KAAK,cAAc,CAAC,QAAQ;gBAC1B,IAAI,CAAC,sBAAsB,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,yBAAyB,CAAC,QAAQ,EAAE,CAAA;gBAChG,MAAK;YACP,KAAK,cAAc,CAAC,gBAAgB;gBAClC,IAAI,CAAC,sBAAsB,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,yBAAyB,CAAC,gBAAgB,EAAE,CAAA;gBACxG,MAAK;YACP,KAAK,cAAc,CAAC,uBAAuB;gBACzC,IAAI,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;oBAC/C,IAAI,CAAC,sBAAsB,GAAG;wBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,IAAI,EAAE,yBAAyB,CAAC,uBAAuB;wBACvD,SAAS,EAAE,OAAO,CAAC,SAAS;qBAC7B,CAAA;iBACF;gBACD,MAAK;SACR;IACH,CAAC;CACF;AAED,IAAK,6BAKJ;AALD,WAAK,6BAA6B;IAChC,2FAAS,CAAA;IACT,+FAAW,CAAA;IACX,+GAAmB,CAAA;IACnB,yHAAwB,CAAA;AAC1B,CAAC,EALI,6BAA6B,KAA7B,6BAA6B,QAKjC;AACD,IAAK,kBAIJ;AAJD,WAAK,kBAAkB;IACrB,+DAAM,CAAA;IACN,qEAAS,CAAA;IACT,yDAAG,CAAA;AACL,CAAC,EAJI,kBAAkB,KAAlB,kBAAkB,QAItB;AAED,IAAK,qBAQJ;AARD,WAAK,qBAAqB;IACxB,uEAAO,CAAA;IACP,iFAAY,CAAA;IACZ,2EAAS,CAAA;IACT,6HAAkC,CAAA;IAClC,6IAA0C,CAAA;IAC1C,uIAAuC,CAAA;IACvC,qFAAc,CAAA;AAChB,CAAC,EARI,qBAAqB,KAArB,qBAAqB,QAQzB;AACD,MAAM,gBAAgB;IAUpB,YAA6B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;QATjD,iBAAY,GAO6C,EAAE,EAAE,EAAE,qBAAqB,CAAC,OAAO,EAAE,CAAA;IAE1C,CAAC;IAEvD,SAAS;;YACb,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;YAChD,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;QAC3C,CAAC;KAAA;IAEK,cAAc,CAAC,+BAAmD;;YACtE,OAAO,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,CAAA;QAChH,CAAC;KAAA;IAEa,YAAY,CAAC,+BAAmD;;YAC5E,QAAQ,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE;gBAC5B,KAAK,qBAAqB,CAAC,OAAO;oBAChC,IAAI,+BAA+B,IAAI,SAAS,EAAE;wBAChD,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAA;qBAC3G;yBAAM;wBACL,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,8BAA8B,EAAE,CAAA;wBAC3E,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;wBACnF,OAAO,KAAK,CAAA;qBACb;gBACH,KAAK,qBAAqB,CAAC,SAAS;oBAClC,IAAI,+BAA+B,IAAI,SAAS,EAAE;wBAChD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAA;wBAC5F,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,0CAA0C,EAAE,CAAA;wBAC5F,OAAO,KAAK,CAAA;qBACb;yBAAM;wBACL,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,8BAA8B,EAAE,CAAA;wBAC3E,IAAI,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY;4BAAE,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAA;wBACjF,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,kCAAkC,EAAE,CAAA;wBACpF,OAAO,KAAK,CAAA;qBACb;gBACH,KAAK,qBAAqB,CAAC,uCAAuC;oBAChE,IAAI,+BAA+B,IAAI,SAAS,EAAE;wBAChD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAA;wBAC5F,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,0CAA0C,EAAE,CAAA;wBAC5F,OAAO,KAAK,CAAA;qBACb;;wBAAM,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAA;gBAClD,KAAK,qBAAqB,CAAC,cAAc;oBACvC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAA;gBAC/B;oBACE,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;aACvF;QACH,CAAC;KAAA;IAED,gBAAgB,CAAC,KAAY;QAC3B,QAAQ,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE;YAC5B,KAAK,qBAAqB,CAAC,YAAY;gBACrC,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;gBAC9H,MAAK;YACP,KAAK,qBAAqB,CAAC,kCAAkC;gBAC3D,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,uCAAuC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAA;gBACnH,MAAK;YACP,KAAK,qBAAqB,CAAC,0CAA0C;gBACnE,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;gBAC9E,MAAK;YACP;gBACE,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;SAC/F;IACH,CAAC;CACF","sourcesContent":["import { AuthenticationProvider } from './AuthenticationProvider'\nimport { UserGroup } from '../../icc-api/model/UserGroup'\nimport { AuthService } from './AuthService'\nimport { IccAuthApi, OAuthThirdParty } from '../../icc-api'\nimport { XHR } from '../../icc-api/api/XHR'\nimport XHRError = XHR.XHRError\nimport { decodeJwtClaims, isJwtInvalidOrExpired } from './JwtUtils'\nimport { AuthenticationResponse } from '../../icc-api/model/AuthenticationResponse'\n\n/**\n * Needed by a {@link SmartAuthProvider} to get the secrets (password, token, etc.) for authentication to the iCure SDK as needed.\n */\nexport interface AuthSecretProvider {\n  /**\n   * Provides a secret for authentication to the iCure SDK.\n   *\n   * ## Accepted secrets\n   *\n   * The method will be provided with an array of the secrets types that are acceptable (`acceptedSecrets`). Usually this array will contain multiple\n   * elements, but this depends on the group configuration, the user (if he has 2fa setup or not), or the operation being performed. For groups using\n   * default configurations and for patients without 2fa enabled for example the array will always contain the {@link AuthSecretType.PASSWORD} element.\n   * Usually the array contain also the {@link AuthSecretType.LONG_LIVED_TOKEN} element, but if the user is attempting to perform a sensitive operations\n   * such as changing his password the default group configuration does not allow for the user to authenticate using a JWT obtained from a long-lived\n   * token for this operation, meaning the array will not contain the {@link AuthSecretType.LONG_LIVED_TOKEN} element.\n   *\n   * Regardless of the number of elements in the array only one secret of the accepted types is sufficient for the operation to succeed.\n   *\n   * ## TWO_FACTOR_AUTHENTICATION_TOKEN secret type\n   *\n   * The {@link AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN} secret type is only used when the user has 2fa enabled. In this case the SDK will call\n   * this method twice, once containing the {@link AuthSecretType.PASSWORD} element in the `acceptedSecrets` array, and if the provided secret is a\n   * valid password the SDK will immediately call this method again, this time containing the {@link AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN}\n   * instead of the {@link AuthSecretType.PASSWORD} element.\n   *\n   * Any future call to this method from the same provider instance will not contain the {@link AuthSecretType.PASSWORD} element anymore, as it is\n   * cached, but it may contain the {@link AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN} element instead.\n   *\n   * Note that the 2fa token is not needed for logging in through a long-lived or short-lived token, it is only used in combination with a password.\n   * If the user is using 2fa, and you get in input as `acceptedSecrets` an array `[PASSWORD, LONG_LIVED_TOKEN, SHORT_LIVED_TOKEN]`, and you pass to\n   * authenticate a long-lived token, the SDK will not call this method again to ask for the 2fa token.\n   *\n   * @param acceptedSecrets the types of secrets that are acceptable for the operation being performed.\n   * @param previousAttempts the secrets that were previously attempted by the SDK for this operation. This array will be empty the first time this\n   * method is called for a given operation, but it may contain multiple elements if the SDK has already called this method multiple times because the\n   * previously returned secrets were not valid. The first element is the first secret that was attempted, and the last element is the most recently\n   * attempted.\n   * @return a promise that resolves with the secret and the secret type to use for authentication. If the promise rejects then the ongoing SDK\n   * operation will fail without being re-attempted.\n   */\n  getSecret(acceptedSecrets: AuthSecretType[], previousAttempts: AuthSecretDetails[]): Promise<AuthSecretDetails>\n}\n\n// We may want to add some onSuccess callback in future or similar\nexport type AuthSecretDetails =\n  | { value: string; secretType: Exclude<AuthSecretType, AuthSecretType.EXTERNAL_AUTHENTICATION> }\n  | { value: string; secretType: AuthSecretType.EXTERNAL_AUTHENTICATION; oauthType: OAuthThirdParty }\n\n/**\n * Represents a type of secret that can be used for authentication with iCure.\n */\nexport enum AuthSecretType {\n  /**\n   * Password chosen by the user.\n   */\n  PASSWORD = 'PASSWORD', // pragma: allowlist secret\n  /**\n   * Time based one time password provided by authenticator applications, generated on the basis of a timestamp and a shared secret between the iCure\n   * server and the authenticator application.\n   */\n  TWO_FACTOR_AUTHENTICATION_TOKEN = 'TWO_FACTOR_AUTHENTICATION_TOKEN',\n  /**\n   * A short-lived iCure token, an internal authentication token that lasts 5 minutes or less. Unlike passwords these tokens usually are generated by\n   * some component of iCure, and are not chosen by the user.\n   */\n  SHORT_LIVED_TOKEN = 'SHORT_LIVED_TOKEN',\n  /**\n   * A long-lived iCure token, an internal authentication token that lasts longer than 5 minutes. Unlike passwords these tokens usually are generated\n   * by some component of iCure, and are not chosen by the user.\n   */\n  LONG_LIVED_TOKEN = 'LONG_LIVED_TOKEN',\n  /**\n   * A token provided by an external authentication provider (e.g. Oauth/Google).\n   * Not yet in use.\n   */\n  EXTERNAL_AUTHENTICATION = 'EXTERNAL_AUTHENTICATION',\n  /**\n   * A special case of external authentication where the provider is a digital identity provider.\n   * Not yet in use.\n   */\n  // DIGITAL_ID = 'DIGITAL_ID',\n}\n\n// Here starts internal entities that should not be used directly.\n\n/**\n * @internal this class is meant for internal use only and may be changed without notice. The SmartAuthProvider will be initialised automatically\n * by the iCure api depending on the authentication options you provide.\n *\n * An authentication provider that automatically requests secrets for authentication as needed.\n *\n * This authentication provider can be initialised already with some secrets or tokens, and the provider will cache them and use them as needed for\n * as long as they remain valid. If at any point however the provider needs an updated secret or a secret of a different kind it will automatically\n * request this to the {@link SmartAuthProvider} to get the secret.\n *\n * An advantage of using this provider over others is that in case all the cached tokens and secrets were to expire while performing a request,\n * instead of having the request fail the provider will ask for new secrets from the {@link SmartAuthProvider} and the request will automatically\n * be retried with the new secret. Additionally, the provider may request updated secrets also for performing some sensitive operations (e.g. changing\n * password of the user) even if the cached tokens and/or did not expire. This could be the case for example if the cached secret is a long-lived\n * token, but in order to change the password the user needs to provide his current password.\n *\n * Note that in this context the cache of secrets and token is in memory only, and is not persisted in any way. Different instances of this provider\n * will not share the same cache.\n *\n */\nexport class SmartAuthProvider implements AuthenticationProvider {\n  /**\n   * Initialises a {@link SmartAuthProvider}.\n   * @param authApi an \"anonymous\" {@link IccAuthApi} to use for authentication.\n   * @param login\n   * @param secretProvider\n   * @param props optional initialisation properties.\n   */\n  static initialise(\n    authApi: IccAuthApi,\n    login: string,\n    secretProvider: AuthSecretProvider,\n    props: {\n      initialSecret?: { password: string } | { longToken: string } | { oauthToken: string; oauthType: OAuthThirdParty }\n      initialAuthToken?: string\n      initialRefreshToken?: string\n      loginGroupId?: string\n    } = {}\n  ): SmartAuthProvider {\n    let initialSecret: CachedSecretType | undefined = undefined\n    if (props.initialSecret) {\n      if ('password' in props.initialSecret) {\n        initialSecret = { value: props.initialSecret.password, type: ServerAuthenticationClass.PASSWORD }\n      } else if ('longToken' in props.initialSecret) {\n        initialSecret = { value: props.initialSecret.longToken, type: ServerAuthenticationClass.LONG_LIVED_TOKEN }\n      } else {\n        initialSecret = {\n          value: props.initialSecret.oauthToken,\n          type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION,\n          oauthType: props.initialSecret.oauthType,\n        }\n      }\n    }\n    return new SmartAuthProvider(\n      new TokenProvider(login, props.loginGroupId, initialSecret, props.initialAuthToken, props.initialRefreshToken, authApi, secretProvider),\n      props.loginGroupId\n    )\n  }\n\n  private constructor(private readonly tokenProvider: TokenProvider, private readonly groupId: string | undefined) {}\n\n  getAuthService(): AuthService {\n    return new SmartAuthService(this.tokenProvider)\n  }\n\n  async switchGroup(newGroupId: string, matches: Array<UserGroup>): Promise<AuthenticationProvider> {\n    if (newGroupId == this.groupId) return Promise.resolve(this)\n    if (!matches.find((match) => match.groupId == newGroupId)) throw new Error('New group id not found in matches.')\n    const switchedProvider = await this.tokenProvider.switchedGroup(newGroupId)\n    return new SmartAuthProvider(switchedProvider, this.groupId)\n  }\n\n  getIcureTokens(): Promise<{ token: string; refreshToken: string } | undefined> {\n    return Promise.resolve(undefined)\n  }\n}\n\nenum ServerAuthenticationClass {\n  // DIGITAL_ID = 60,\n  TWO_FACTOR_AUTHENTICATION = 50,\n  SHORT_LIVED_TOKEN = 40,\n  EXTERNAL_AUTHENTICATION = 30,\n  PASSWORD = 20,\n  LONG_LIVED_TOKEN = 10,\n}\n// Secrets lasting more than 5 minutes -> makes sense to reuse them to get an elevated security jwt\ntype LongLivedSecretType = ServerAuthenticationClass.LONG_LIVED_TOKEN | ServerAuthenticationClass.PASSWORD\ntype CachedSecretType =\n  | { value: string; type: LongLivedSecretType | undefined }\n  | { value: string; type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION; oauthType: OAuthThirdParty }\n// In some providers Oauth tokens may have short duration or may be usable only once. We only want to cache them if they are going to be reusable and\n// if they last more than 5 minutes.\nconst longLivedOAuthTokens = new Set([OAuthThirdParty.GOOGLE])\nclass TokenProvider {\n  constructor(\n    private login: string,\n    private groupId: string | undefined,\n    private currentLongLivedSecret: CachedSecretType | undefined,\n    private cachedToken: string | undefined,\n    private cachedRefreshToken: string | undefined,\n    private readonly authApi: IccAuthApi,\n    private readonly authSecretProvider: AuthSecretProvider\n  ) {}\n\n  async getCachedOrRefreshedOrNewToken(): Promise<{ token: string; type: RetrievedTokenType }> {\n    if (!!this.cachedToken && !isJwtInvalidOrExpired(this.cachedToken)) {\n      return { token: this.cachedToken, type: RetrievedTokenType.CACHED }\n    } else if (!!this.cachedRefreshToken && !isJwtInvalidOrExpired(this.cachedRefreshToken)) {\n      return this.refreshAndCacheToken(this.cachedRefreshToken)\n    } else {\n      return { token: await this.getAndCacheNewToken(undefined), type: RetrievedTokenType.NEW }\n    }\n  }\n\n  async getNewTokenWithClass(minimumAuthenticationClass: number): Promise<string> {\n    return await this.getAndCacheNewToken(minimumAuthenticationClass)\n  }\n\n  private async getAndCacheNewToken(minimumAuthenticationClassLevel: number | undefined): Promise<string> {\n    const { token, refreshToken } = await this.getNewToken(minimumAuthenticationClassLevel ?? 0)\n    this.cachedToken = token\n    this.cachedRefreshToken = refreshToken\n    return token\n  }\n\n  private async refreshAndCacheToken(refreshToken: string): Promise<{ token: string; type: RetrievedTokenType }> {\n    return await this.authApi.refreshAuthenticationJWT(refreshToken).then(\n      (authResult) => {\n        if (!authResult.token) throw new Error('Internal error: refresh succeeded but no token was returned. Unsupported backend version?')\n        this.cachedToken = authResult.token\n        return { token: authResult.token, type: RetrievedTokenType.REFRESHED }\n      },\n      async () => ({ token: await this.getAndCacheNewToken(undefined), type: RetrievedTokenType.NEW })\n    )\n  }\n\n  private async getNewToken(minimumAuthenticationClassLevel: number): Promise<{ token: string; refreshToken: string }> {\n    if (!!this.currentLongLivedSecret && (!this.currentLongLivedSecret.type || this.currentLongLivedSecret.type >= minimumAuthenticationClassLevel)) {\n      const resultWithCachedSecret = await this.doGetTokenWithSecret(this.currentLongLivedSecret, minimumAuthenticationClassLevel)\n      if ('success' in resultWithCachedSecret) {\n        return resultWithCachedSecret.success\n      } else if (\n        resultWithCachedSecret.failure === DoGetTokenResultFailureReason.NEEDS_2FA &&\n        minimumAuthenticationClassLevel <= ServerAuthenticationClass.TWO_FACTOR_AUTHENTICATION\n      ) {\n        return this.askTotpAndGetToken(this.currentLongLivedSecret.value, minimumAuthenticationClassLevel)\n      } else return this.askSecretAndGetToken(minimumAuthenticationClassLevel, true)\n    } else {\n      return this.askSecretAndGetToken(minimumAuthenticationClassLevel, true)\n    }\n  }\n\n  private async askSecretAndGetToken(\n    minimumAuthenticationClassLevel: number,\n    passwordIsValidAs2fa: boolean\n  ): Promise<{ token: string; refreshToken: string }> {\n    const acceptedSecrets = [\n      minimumAuthenticationClassLevel <= ServerAuthenticationClass.LONG_LIVED_TOKEN ? [AuthSecretType.LONG_LIVED_TOKEN] : [],\n      minimumAuthenticationClassLevel <= ServerAuthenticationClass.SHORT_LIVED_TOKEN ? [AuthSecretType.SHORT_LIVED_TOKEN] : [],\n      minimumAuthenticationClassLevel <= ServerAuthenticationClass.TWO_FACTOR_AUTHENTICATION &&\n      (passwordIsValidAs2fa || minimumAuthenticationClassLevel <= ServerAuthenticationClass.PASSWORD)\n        ? [AuthSecretType.PASSWORD]\n        : [],\n    ].flat()\n    if (!acceptedSecrets.length)\n      throw new Error('Internal error: no secret type is accepted for this request. Group may be misconfigured, or client may be outdated.')\n    const attempts: AuthSecretDetails[] = []\n    while (true) {\n      const secretDetails = await this.authSecretProvider.getSecret([...acceptedSecrets], attempts)\n      if (!acceptedSecrets.includes(secretDetails.secretType))\n        throw new Error(`Accepted secret types are ${JSON.stringify(acceptedSecrets)}, but got a secret of type ${secretDetails.secretType}.`)\n      attempts.push(secretDetails)\n      const result = await this.doGetTokenWithSecret(secretDetails, minimumAuthenticationClassLevel)\n      if ('success' in result) {\n        this.updateCachedSecret(secretDetails)\n        return result.success\n      } else if (result.failure == DoGetTokenResultFailureReason.NEEDS_2FA) {\n        return this.askTotpAndGetToken(secretDetails.value, minimumAuthenticationClassLevel)\n      } else if (secretDetails.value == AuthSecretType.PASSWORD && result.failure == DoGetTokenResultFailureReason.INVALID_AUTH_CLASS_LEVEL) {\n        // If we tried a password, and it turns out that the user has 2fa not enabled next time we don't consider password valid\n        return this.askSecretAndGetToken(minimumAuthenticationClassLevel, false)\n      } // else retry\n    }\n  }\n\n  private async askTotpAndGetToken(password: string, minimumAuthenticationClassLevel: number): Promise<{ token: string; refreshToken: string }> {\n    if (minimumAuthenticationClassLevel > ServerAuthenticationClass.TWO_FACTOR_AUTHENTICATION)\n      throw new Error(\n        \"Internal error: asking for totp to login but minimumAuthenticationClassLevel is higher than TWO_FACTOR_AUTHENTICATION's level.\"\n      )\n    const attempts: AuthSecretDetails[] = []\n    while (true) {\n      const details = await this.authSecretProvider.getSecret([AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN], attempts)\n      if (details.secretType != AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN)\n        throw new Error(`Was expecting a 2fa token but got a secret of type ${details.secretType}.`)\n      attempts.push(details)\n      const result = await this.doGetTokenWithSecret({ value: `${password}|${details.value}` }, minimumAuthenticationClassLevel)\n      if ('success' in result) {\n        this.updateCachedSecret({ value: password, secretType: AuthSecretType.PASSWORD })\n        return result.success\n      } else if (result.failure != DoGetTokenResultFailureReason.INVALID_2FA) {\n        throw new Error(`Unexpected error while trying to login with (previously) valid password and 2fa token ${result.failure}.`)\n      } // else retry\n    }\n  }\n\n  private async doGetTokenWithSecret(\n    secret: { value: string; oauthType?: OAuthThirdParty },\n    minimumAuthenticationClassLevel: number\n  ): Promise<DoGetTokenResult> {\n    let authResultPromise: Promise<AuthenticationResponse>\n    if ('oauthType' in secret && !!secret.oauthType) {\n      authResultPromise = this.authApi.loginWithThirdPartyToken(secret.oauthType, secret.value) // TODO add group id\n    } else {\n      authResultPromise = this.authApi.login({ username: this.login, password: secret.value }, this.groupId)\n    }\n    return authResultPromise.then(\n      (authResult) => {\n        const { token, refreshToken } = authResult\n        if (!token || !refreshToken) throw new Error('Internal error: login succeeded but no token was returned. Unsupported backend version?')\n        const claims = decodeJwtClaims(token)\n        const authClassLevel = claims['tac']\n        if (!authClassLevel || typeof authClassLevel !== 'number') {\n          if (minimumAuthenticationClassLevel > 0) {\n            throw new Error('Internal error: authClassLevel is not a number. Unsupported backend version?')\n          } else return { success: { token, refreshToken } }\n        }\n        if (authClassLevel < minimumAuthenticationClassLevel) {\n          return { failure: DoGetTokenResultFailureReason.INVALID_AUTH_CLASS_LEVEL }\n        } else {\n          return { success: { token, refreshToken } }\n        }\n      },\n      (error) => {\n        if (!(error instanceof XHRError)) throw error\n        if (error.statusCode == 401 || error.statusCode == 412) {\n          // Password is wrong (401) or unacceptable (e.g. too short, 412)\n          return { failure: DoGetTokenResultFailureReason.INVALID_PW_OR_TOKEN }\n        } else if (error.statusCode == 406) {\n          // Password is correct, but 2fa token is not\n          return { failure: DoGetTokenResultFailureReason.INVALID_2FA }\n        } else if (error.statusCode == 417) {\n          // Password is correct, but the user has 2fa enabled and no 2fa token was provided\n          return { failure: DoGetTokenResultFailureReason.NEEDS_2FA }\n        } else throw error\n      }\n    )\n  }\n\n  async switchedGroup(newGroupId: string): Promise<TokenProvider> {\n    const groupSwitchedTokens = this.cachedRefreshToken\n      ? await this.authApi.switchGroup(this.cachedRefreshToken, newGroupId).then(\n          (response) => {\n            if (!response.token || !response.refreshToken)\n              throw new Error('Internal error: group switch succeeded but no token was returned. Unsupported backend version?')\n            return { token: response.token, refreshToken: response.refreshToken }\n          },\n          () => ({ token: undefined, refreshToken: undefined })\n        )\n      : { token: undefined, refreshToken: undefined }\n    return new TokenProvider(\n      this.login,\n      newGroupId,\n      this.currentLongLivedSecret ? { value: this.currentLongLivedSecret.value, type: undefined } : undefined,\n      groupSwitchedTokens.token,\n      groupSwitchedTokens.refreshToken,\n      this.authApi,\n      this.authSecretProvider\n    )\n  }\n\n  private updateCachedSecret(details: AuthSecretDetails) {\n    switch (details.secretType) {\n      case AuthSecretType.PASSWORD:\n        this.currentLongLivedSecret = { value: details.value, type: ServerAuthenticationClass.PASSWORD }\n        break\n      case AuthSecretType.LONG_LIVED_TOKEN:\n        this.currentLongLivedSecret = { value: details.value, type: ServerAuthenticationClass.LONG_LIVED_TOKEN }\n        break\n      case AuthSecretType.EXTERNAL_AUTHENTICATION:\n        if (longLivedOAuthTokens.has(details.oauthType)) {\n          this.currentLongLivedSecret = {\n            value: details.value,\n            type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION,\n            oauthType: details.oauthType,\n          }\n        }\n        break\n    }\n  }\n}\ntype DoGetTokenResult = { success: { token: string; refreshToken: string } } | { failure: DoGetTokenResultFailureReason }\nenum DoGetTokenResultFailureReason {\n  NEEDS_2FA,\n  INVALID_2FA,\n  INVALID_PW_OR_TOKEN,\n  INVALID_AUTH_CLASS_LEVEL,\n}\nenum RetrievedTokenType {\n  CACHED,\n  REFRESHED,\n  NEW,\n}\n\nenum SmartAuthServiceState {\n  INITIAL,\n  DONE_INITIAL,\n  REATTEMPT,\n  REATTEMPTED_WITH_NEW_UNBOUND_TOKEN,\n  REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN,\n  EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS,\n  TERMINAL_ERROR,\n}\nclass SmartAuthService implements AuthService {\n  private currentState:\n    | { id: SmartAuthServiceState.INITIAL }\n    | { id: SmartAuthServiceState.DONE_INITIAL; initialToken: string }\n    | { id: SmartAuthServiceState.REATTEMPT; initialToken: string; initialError: Error }\n    | { id: SmartAuthServiceState.REATTEMPTED_WITH_NEW_UNBOUND_TOKEN }\n    | { id: SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN }\n    | { id: SmartAuthServiceState.EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS; errorFromNewToken: Error }\n    | { id: SmartAuthServiceState.TERMINAL_ERROR; error: Error } = { id: SmartAuthServiceState.INITIAL }\n\n  constructor(private readonly tokenProvider: TokenProvider) {}\n\n  async jwtGetter(): Promise<{ token: string; refreshToken: string | undefined }> {\n    const token = await this.getAuthToken(undefined)\n    return { token, refreshToken: undefined }\n  }\n\n  async getAuthHeaders(minimumAuthenticationClassLevel: number | undefined): Promise<Array<XHR.Header>> {\n    return [new XHR.Header('Authorization', `Bearer ${await this.getAuthToken(minimumAuthenticationClassLevel)}`)]\n  }\n\n  private async getAuthToken(minimumAuthenticationClassLevel: number | undefined): Promise<string> {\n    switch (this.currentState.id) {\n      case SmartAuthServiceState.INITIAL:\n        if (minimumAuthenticationClassLevel != undefined) {\n          throw new Error('Illegal state: cannot ask for a specific auth class level at the first request attempt.')\n        } else {\n          const { token } = await this.tokenProvider.getCachedOrRefreshedOrNewToken()\n          this.currentState = { id: SmartAuthServiceState.DONE_INITIAL, initialToken: token }\n          return token\n        }\n      case SmartAuthServiceState.REATTEMPT:\n        if (minimumAuthenticationClassLevel != undefined) {\n          const token = await this.tokenProvider.getNewTokenWithClass(minimumAuthenticationClassLevel)\n          this.currentState = { id: SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN }\n          return token\n        } else {\n          const { token } = await this.tokenProvider.getCachedOrRefreshedOrNewToken()\n          if (token == this.currentState.initialToken) throw this.currentState.initialError\n          this.currentState = { id: SmartAuthServiceState.REATTEMPTED_WITH_NEW_UNBOUND_TOKEN }\n          return token\n        }\n      case SmartAuthServiceState.EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS:\n        if (minimumAuthenticationClassLevel != undefined) {\n          const token = await this.tokenProvider.getNewTokenWithClass(minimumAuthenticationClassLevel)\n          this.currentState = { id: SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN }\n          return token\n        } else throw this.currentState.errorFromNewToken\n      case SmartAuthServiceState.TERMINAL_ERROR:\n        throw this.currentState.error\n      default:\n        throw new Error(`Illegal state: cannot get token in state ${this.currentState.id}.`)\n    }\n  }\n\n  invalidateHeader(error: Error): void {\n    switch (this.currentState.id) {\n      case SmartAuthServiceState.DONE_INITIAL:\n        this.currentState = { id: SmartAuthServiceState.REATTEMPT, initialToken: this.currentState.initialToken, initialError: error }\n        break\n      case SmartAuthServiceState.REATTEMPTED_WITH_NEW_UNBOUND_TOKEN:\n        this.currentState = { id: SmartAuthServiceState.EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS, errorFromNewToken: error }\n        break\n      case SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN:\n        this.currentState = { id: SmartAuthServiceState.TERMINAL_ERROR, error: error }\n        break\n      default:\n        throw new Error(`Illegal state: cannot invalidate header in state ${this.currentState.id}.`)\n    }\n  }\n}\n"]}
+{"version":3,"file":"SmartAuthProvider.js","sourceRoot":"","sources":["../../../icc-x-api/auth/SmartAuthProvider.ts"],"names":[],"mappings":";;;;;;;;;;;;AAGA,2CAA2D;AAC3D,+CAA2C;AAC3C,IAAO,QAAQ,GAAG,SAAG,CAAC,QAAQ,CAAA;AAC9B,yCAAmE;AAmDnE;;GAEG;AACH,IAAY,cA8BX;AA9BD,WAAY,cAAc;IACxB;;OAEG;IACH,uCAAqB,CAAA;IACrB;;;OAGG;IACH,qFAAmE,CAAA;IACnE;;;OAGG;IACH,yDAAuC,CAAA;IACvC;;;OAGG;IACH,uDAAqC,CAAA;IACrC;;;OAGG;IACH,qEAAmD,CAAA;IACnD;;;OAGG;IACH,6BAA6B;AAC/B,CAAC,EA9BW,cAAc,GAAd,sBAAc,KAAd,sBAAc,QA8BzB;AAED,kEAAkE;AAElE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAa,iBAAiB;IAC5B;;;;;;OAMG;IACH,MAAM,CAAC,UAAU,CACf,OAAmB,EACnB,KAAa,EACb,cAAkC,EAClC,QAKI,EAAE;QAEN,IAAI,aAAa,GAAiC,SAAS,CAAA;QAC3D,IAAI,KAAK,CAAC,aAAa,EAAE;YACvB,IAAI,UAAU,IAAI,KAAK,CAAC,aAAa,EAAE;gBACrC,aAAa,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,yBAAyB,CAAC,QAAQ,EAAE,CAAA;aAClG;iBAAM,IAAI,WAAW,IAAI,KAAK,CAAC,aAAa,EAAE;gBAC7C,aAAa,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,yBAAyB,CAAC,gBAAgB,EAAE,CAAA;aAC3G;iBAAM;gBACL,aAAa,GAAG;oBACd,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,UAAU;oBACrC,IAAI,EAAE,yBAAyB,CAAC,uBAAuB;oBACvD,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS;iBACzC,CAAA;aACF;SACF;QACD,OAAO,IAAI,iBAAiB,CAC1B,IAAI,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,mBAAmB,EAAE,OAAO,EAAE,cAAc,CAAC,EACvI,KAAK,CAAC,YAAY,CACnB,CAAA;IACH,CAAC;IAED,YAAqC,aAA4B,EAAmB,OAA2B;QAA1E,kBAAa,GAAb,aAAa,CAAe;QAAmB,YAAO,GAAP,OAAO,CAAoB;IAAG,CAAC;IAEnH,cAAc;QACZ,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACjD,CAAC;IAEK,WAAW,CAAC,UAAkB,EAAE,OAAyB;;YAC7D,IAAI,UAAU,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAC5D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,UAAU,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;YAChH,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;YAC3E,OAAO,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9D,CAAC;KAAA;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,aAAa,CAAC,qBAAqB,EAAE,CAAA;IACnD,CAAC;CACF;AAvDD,8CAuDC;AAED,IAAK,yBAOJ;AAPD,WAAK,yBAAyB;IAC5B,mBAAmB;IACnB,oHAA8B,CAAA;IAC9B,oGAAsB,CAAA;IACtB,gHAA4B,CAAA;IAC5B,kFAAa,CAAA;IACb,kGAAqB,CAAA;AACvB,CAAC,EAPI,yBAAyB,KAAzB,yBAAyB,QAO7B;AAMD,qJAAqJ;AACrJ,oCAAoC;AACpC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,yBAAe,CAAC,MAAM,CAAC,CAAC,CAAA;AAC9D,MAAM,aAAa;IACjB,YACU,KAAa,EACb,OAA2B,EAC3B,sBAAoD,EACpD,WAA+B,EAC/B,kBAAsC,EAC7B,OAAmB,EACnB,kBAAsC;QAN/C,UAAK,GAAL,KAAK,CAAQ;QACb,YAAO,GAAP,OAAO,CAAoB;QAC3B,2BAAsB,GAAtB,sBAAsB,CAA8B;QACpD,gBAAW,GAAX,WAAW,CAAoB;QAC/B,uBAAkB,GAAlB,kBAAkB,CAAoB;QAC7B,YAAO,GAAP,OAAO,CAAY;QACnB,uBAAkB,GAAlB,kBAAkB,CAAoB;IACtD,CAAC;IAEE,8BAA8B;;YAClC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAA,gCAAqB,EAAC,IAAI,CAAC,WAAW,CAAC,EAAE;gBAClE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,kBAAkB,CAAC,MAAM,EAAE,CAAA;aACpE;iBAAM,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAA,gCAAqB,EAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE;gBACvF,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;aAC1D;iBAAM;gBACL,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,CAAC,GAAG,EAAE,CAAA;aAC1F;QACH,CAAC;KAAA;IAEK,qBAAqB;;YACzB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE;gBACjD,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAA;aAC1C;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,WAAY,EAAE,YAAY,EAAE,IAAI,CAAC,kBAAmB,EAAE,CAAA;QAC7E,CAAC;KAAA;IAEK,oBAAoB,CAAC,0BAAkC;;YAC3D,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,0BAA0B,CAAC,CAAA;QACnE,CAAC;KAAA;IAEa,mBAAmB,CAAC,+BAAmD;;YACnF,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,+BAA+B,aAA/B,+BAA+B,cAA/B,+BAA+B,GAAI,CAAC,CAAC,CAAA;YAC5F,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;YACxB,IAAI,CAAC,kBAAkB,GAAG,YAAY,CAAA;YACtC,OAAO,KAAK,CAAA;QACd,CAAC;KAAA;IAEa,oBAAoB,CAAC,YAAoB;;YACrD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,IAAI,CACnE,CAAC,UAAU,EAAE,EAAE;gBACb,IAAI,CAAC,UAAU,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAA;gBACnI,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,KAAK,CAAA;gBACnC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,kBAAkB,CAAC,SAAS,EAAE,CAAA;YACxE,CAAC,EACD,GAAS,EAAE,gDAAC,OAAA,CAAC,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAA,GAAA,CACjG,CAAA;QACH,CAAC;KAAA;IAEa,WAAW,CAAC,+BAAuC;;YAC/D,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,IAAI,+BAA+B,CAAC,EAAE;gBAC/I,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,sBAAsB,EAAE,+BAA+B,CAAC,CAAA;gBAC5H,IAAI,SAAS,IAAI,sBAAsB,EAAE;oBACvC,OAAO,sBAAsB,CAAC,OAAO,CAAA;iBACtC;qBAAM,IACL,sBAAsB,CAAC,OAAO,KAAK,6BAA6B,CAAC,SAAS;oBAC1E,+BAA+B,IAAI,yBAAyB,CAAC,yBAAyB,EACtF;oBACA,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAA;iBACnG;;oBAAM,OAAO,IAAI,CAAC,oBAAoB,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAA;aAC/E;iBAAM;gBACL,OAAO,IAAI,CAAC,oBAAoB,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAA;aACxE;QACH,CAAC;KAAA;IAEa,oBAAoB,CAChC,+BAAuC,EACvC,oBAA6B;;YAE7B,MAAM,eAAe,GAAG;gBACtB,+BAA+B,IAAI,yBAAyB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE;gBACtH,+BAA+B,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE;gBACxH,+BAA+B,IAAI,yBAAyB,CAAC,yBAAyB;oBACtF,CAAC,oBAAoB,IAAI,+BAA+B,IAAI,yBAAyB,CAAC,QAAQ,CAAC;oBAC7F,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAC3B,CAAC,CAAC,EAAE;aACP,CAAC,IAAI,EAAE,CAAA;YACR,IAAI,CAAC,eAAe,CAAC,MAAM;gBACzB,MAAM,IAAI,KAAK,CAAC,qHAAqH,CAAC,CAAA;YACxI,MAAM,QAAQ,GAAwB,EAAE,CAAA;YACxC,OAAO,IAAI,EAAE;gBACX,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,GAAG,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAA;gBAC7F,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,8BAA8B,aAAa,CAAC,UAAU,GAAG,CAAC,CAAA;gBACxI,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;gBAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAA;gBAC9F,IAAI,SAAS,IAAI,MAAM,EAAE;oBACvB,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAA;oBACtC,OAAO,MAAM,CAAC,OAAO,CAAA;iBACtB;qBAAM,IAAI,MAAM,CAAC,OAAO,IAAI,6BAA6B,CAAC,SAAS,EAAE;oBACpE,OAAO,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAA;iBACrF;qBAAM,IAAI,aAAa,CAAC,KAAK,IAAI,cAAc,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,IAAI,6BAA6B,CAAC,wBAAwB,EAAE;oBACrI,wHAAwH;oBACxH,OAAO,IAAI,CAAC,oBAAoB,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;iBACzE,CAAC,aAAa;aAChB;QACH,CAAC;KAAA;IAEa,kBAAkB,CAAC,QAAgB,EAAE,+BAAuC;;YACxF,IAAI,+BAA+B,GAAG,yBAAyB,CAAC,yBAAyB;gBACvF,MAAM,IAAI,KAAK,CACb,gIAAgI,CACjI,CAAA;YACH,MAAM,QAAQ,GAAwB,EAAE,CAAA;YACxC,OAAO,IAAI,EAAE;gBACX,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,+BAA+B,CAAC,EAAE,QAAQ,CAAC,CAAA;gBACnH,IAAI,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,+BAA+B;oBACtE,MAAM,IAAI,KAAK,CAAC,sDAAsD,OAAO,CAAC,UAAU,GAAG,CAAC,CAAA;gBAC9F,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,GAAG,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,+BAA+B,CAAC,CAAA;gBAC1H,IAAI,SAAS,IAAI,MAAM,EAAE;oBACvB,IAAI,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAA;oBACjF,OAAO,MAAM,CAAC,OAAO,CAAA;iBACtB;qBAAM,IAAI,MAAM,CAAC,OAAO,IAAI,6BAA6B,CAAC,WAAW,EAAE;oBACtE,MAAM,IAAI,KAAK,CAAC,yFAAyF,MAAM,CAAC,OAAO,GAAG,CAAC,CAAA;iBAC5H,CAAC,aAAa;aAChB;QACH,CAAC;KAAA;IAEa,oBAAoB,CAChC,MAAsD,EACtD,+BAAuC;;YAEvC,IAAI,iBAAkD,CAAA;YACtD,IAAI,WAAW,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE;gBAC/C,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,oBAAoB;aAC/G;iBAAM;gBACL,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;aACvG;YACD,OAAO,iBAAiB,CAAC,IAAI,CAC3B,CAAC,UAAU,EAAE,EAAE;gBACb,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,UAAU,CAAA;gBAC1C,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAA;gBACvI,MAAM,MAAM,GAAG,IAAA,0BAAe,EAAC,KAAK,CAAC,CAAA;gBACrC,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;gBACpC,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE;oBACzD,IAAI,+BAA+B,GAAG,CAAC,EAAE;wBACvC,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;qBAChG;;wBAAM,OAAO,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAA;iBACnD;gBACD,IAAI,cAAc,GAAG,+BAA+B,EAAE;oBACpD,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,wBAAwB,EAAE,CAAA;iBAC3E;qBAAM;oBACL,OAAO,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAA;iBAC5C;YACH,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;gBACR,IAAI,CAAC,CAAC,KAAK,YAAY,QAAQ,CAAC;oBAAE,MAAM,KAAK,CAAA;gBAC7C,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE;oBACtD,gEAAgE;oBAChE,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,mBAAmB,EAAE,CAAA;iBACtE;qBAAM,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE;oBAClC,4CAA4C;oBAC5C,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,WAAW,EAAE,CAAA;iBAC9D;qBAAM,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE;oBAClC,kFAAkF;oBAClF,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,SAAS,EAAE,CAAA;iBAC5D;;oBAAM,MAAM,KAAK,CAAA;YACpB,CAAC,CACF,CAAA;QACH,CAAC;KAAA;IAEK,aAAa,CAAC,UAAkB;;YACpC,MAAM,mBAAmB,GAAG,IAAI,CAAC,kBAAkB;gBACjD,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC,IAAI,CACtE,CAAC,QAAQ,EAAE,EAAE;oBACX,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,YAAY;wBAC3C,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;oBACnH,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAA;gBACvE,CAAC,EACD,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CACtD;gBACH,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;YACjD,OAAO,IAAI,aAAa,CACtB,IAAI,CAAC,KAAK,EACV,UAAU,EACV,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,EACvG,mBAAmB,CAAC,KAAK,EACzB,mBAAmB,CAAC,YAAY,EAChC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,kBAAkB,CACxB,CAAA;QACH,CAAC;KAAA;IAEO,kBAAkB,CAAC,OAA0B;QACnD,QAAQ,OAAO,CAAC,UAAU,EAAE;YAC1B,KAAK,cAAc,CAAC,QAAQ;gBAC1B,IAAI,CAAC,sBAAsB,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,yBAAyB,CAAC,QAAQ,EAAE,CAAA;gBAChG,MAAK;YACP,KAAK,cAAc,CAAC,gBAAgB;gBAClC,IAAI,CAAC,sBAAsB,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,yBAAyB,CAAC,gBAAgB,EAAE,CAAA;gBACxG,MAAK;YACP,KAAK,cAAc,CAAC,uBAAuB;gBACzC,IAAI,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;oBAC/C,IAAI,CAAC,sBAAsB,GAAG;wBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,IAAI,EAAE,yBAAyB,CAAC,uBAAuB;wBACvD,SAAS,EAAE,OAAO,CAAC,SAAS;qBAC7B,CAAA;iBACF;gBACD,MAAK;SACR;IACH,CAAC;CACF;AAED,IAAK,6BAKJ;AALD,WAAK,6BAA6B;IAChC,2FAAS,CAAA;IACT,+FAAW,CAAA;IACX,+GAAmB,CAAA;IACnB,yHAAwB,CAAA;AAC1B,CAAC,EALI,6BAA6B,KAA7B,6BAA6B,QAKjC;AACD,IAAK,kBAIJ;AAJD,WAAK,kBAAkB;IACrB,+DAAM,CAAA;IACN,qEAAS,CAAA;IACT,yDAAG,CAAA;AACL,CAAC,EAJI,kBAAkB,KAAlB,kBAAkB,QAItB;AAED,IAAK,qBAQJ;AARD,WAAK,qBAAqB;IACxB,uEAAO,CAAA;IACP,iFAAY,CAAA;IACZ,2EAAS,CAAA;IACT,6HAAkC,CAAA;IAClC,6IAA0C,CAAA;IAC1C,uIAAuC,CAAA;IACvC,qFAAc,CAAA;AAChB,CAAC,EARI,qBAAqB,KAArB,qBAAqB,QAQzB;AACD,MAAM,gBAAgB;IAUpB,YAA6B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;QATjD,iBAAY,GAO6C,EAAE,EAAE,EAAE,qBAAqB,CAAC,OAAO,EAAE,CAAA;IAE1C,CAAC;IAEvD,SAAS;;YACb,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;YAChD,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;QAC3C,CAAC;KAAA;IAEK,cAAc,CAAC,+BAAmD;;YACtE,OAAO,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,CAAA;QAChH,CAAC;KAAA;IAEa,YAAY,CAAC,+BAAmD;;YAC5E,QAAQ,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE;gBAC5B,KAAK,qBAAqB,CAAC,OAAO;oBAChC,IAAI,+BAA+B,IAAI,SAAS,EAAE;wBAChD,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAA;qBAC3G;yBAAM;wBACL,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,8BAA8B,EAAE,CAAA;wBAC3E,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;wBACnF,OAAO,KAAK,CAAA;qBACb;gBACH,KAAK,qBAAqB,CAAC,SAAS;oBAClC,IAAI,+BAA+B,IAAI,SAAS,EAAE;wBAChD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAA;wBAC5F,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,0CAA0C,EAAE,CAAA;wBAC5F,OAAO,KAAK,CAAA;qBACb;yBAAM;wBACL,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,8BAA8B,EAAE,CAAA;wBAC3E,IAAI,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY;4BAAE,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAA;wBACjF,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,kCAAkC,EAAE,CAAA;wBACpF,OAAO,KAAK,CAAA;qBACb;gBACH,KAAK,qBAAqB,CAAC,uCAAuC;oBAChE,IAAI,+BAA+B,IAAI,SAAS,EAAE;wBAChD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAA;wBAC5F,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,0CAA0C,EAAE,CAAA;wBAC5F,OAAO,KAAK,CAAA;qBACb;;wBAAM,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAA;gBAClD,KAAK,qBAAqB,CAAC,cAAc;oBACvC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAA;gBAC/B;oBACE,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;aACvF;QACH,CAAC;KAAA;IAED,gBAAgB,CAAC,KAAY;QAC3B,QAAQ,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE;YAC5B,KAAK,qBAAqB,CAAC,YAAY;gBACrC,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;gBAC9H,MAAK;YACP,KAAK,qBAAqB,CAAC,kCAAkC;gBAC3D,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,uCAAuC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAA;gBACnH,MAAK;YACP,KAAK,qBAAqB,CAAC,0CAA0C;gBACnE,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;gBAC9E,MAAK;YACP;gBACE,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;SAC/F;IACH,CAAC;CACF","sourcesContent":["import { AuthenticationProvider } from './AuthenticationProvider'\nimport { UserGroup } from '../../icc-api/model/UserGroup'\nimport { AuthService } from './AuthService'\nimport { IccAuthApi, OAuthThirdParty } from '../../icc-api'\nimport { XHR } from '../../icc-api/api/XHR'\nimport XHRError = XHR.XHRError\nimport { decodeJwtClaims, isJwtInvalidOrExpired } from './JwtUtils'\nimport { AuthenticationResponse } from '../../icc-api/model/AuthenticationResponse'\n\n/**\n * Needed by a {@link SmartAuthProvider} to get the secrets (password, token, etc.) for authentication to the iCure SDK as needed.\n */\nexport interface AuthSecretProvider {\n  /**\n   * Provides a secret for authentication to the iCure SDK.\n   *\n   * ## Accepted secrets\n   *\n   * The method will be provided with an array of the secrets types that are acceptable (`acceptedSecrets`). Usually this array will contain multiple\n   * elements, but this depends on the group configuration, the user (if he has 2fa setup or not), or the operation being performed. For groups using\n   * default configurations and for patients without 2fa enabled for example the array will always contain the {@link AuthSecretType.PASSWORD} element.\n   * Usually the array contain also the {@link AuthSecretType.LONG_LIVED_TOKEN} element, but if the user is attempting to perform a sensitive operations\n   * such as changing his password the default group configuration does not allow for the user to authenticate using a JWT obtained from a long-lived\n   * token for this operation, meaning the array will not contain the {@link AuthSecretType.LONG_LIVED_TOKEN} element.\n   *\n   * Regardless of the number of elements in the array only one secret of the accepted types is sufficient for the operation to succeed.\n   *\n   * ## TWO_FACTOR_AUTHENTICATION_TOKEN secret type\n   *\n   * The {@link AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN} secret type is only used when the user has 2fa enabled. In this case the SDK will call\n   * this method twice, once containing the {@link AuthSecretType.PASSWORD} element in the `acceptedSecrets` array, and if the provided secret is a\n   * valid password the SDK will immediately call this method again, this time containing the {@link AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN}\n   * instead of the {@link AuthSecretType.PASSWORD} element.\n   *\n   * Any future call to this method from the same provider instance will not contain the {@link AuthSecretType.PASSWORD} element anymore, as it is\n   * cached, but it may contain the {@link AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN} element instead.\n   *\n   * Note that the 2fa token is not needed for logging in through a long-lived or short-lived token, it is only used in combination with a password.\n   * If the user is using 2fa, and you get in input as `acceptedSecrets` an array `[PASSWORD, LONG_LIVED_TOKEN, SHORT_LIVED_TOKEN]`, and you pass to\n   * authenticate a long-lived token, the SDK will not call this method again to ask for the 2fa token.\n   *\n   * @param acceptedSecrets the types of secrets that are acceptable for the operation being performed.\n   * @param previousAttempts the secrets that were previously attempted by the SDK for this operation. This array will be empty the first time this\n   * method is called for a given operation, but it may contain multiple elements if the SDK has already called this method multiple times because the\n   * previously returned secrets were not valid. The first element is the first secret that was attempted, and the last element is the most recently\n   * attempted.\n   * @return a promise that resolves with the secret and the secret type to use for authentication. If the promise rejects then the ongoing SDK\n   * operation will fail without being re-attempted.\n   */\n  getSecret(acceptedSecrets: AuthSecretType[], previousAttempts: AuthSecretDetails[]): Promise<AuthSecretDetails>\n}\n\n// We may want to add some onSuccess callback in future or similar\nexport type AuthSecretDetails =\n  | { value: string; secretType: Exclude<AuthSecretType, AuthSecretType.EXTERNAL_AUTHENTICATION> }\n  | { value: string; secretType: AuthSecretType.EXTERNAL_AUTHENTICATION; oauthType: OAuthThirdParty }\n\n/**\n * Represents a type of secret that can be used for authentication with iCure.\n */\nexport enum AuthSecretType {\n  /**\n   * Password chosen by the user.\n   */\n  PASSWORD = 'PASSWORD', // pragma: allowlist secret\n  /**\n   * Time based one time password provided by authenticator applications, generated on the basis of a timestamp and a shared secret between the iCure\n   * server and the authenticator application.\n   */\n  TWO_FACTOR_AUTHENTICATION_TOKEN = 'TWO_FACTOR_AUTHENTICATION_TOKEN',\n  /**\n   * A short-lived iCure token, an internal authentication token that lasts 5 minutes or less. Unlike passwords these tokens usually are generated by\n   * some component of iCure, and are not chosen by the user.\n   */\n  SHORT_LIVED_TOKEN = 'SHORT_LIVED_TOKEN',\n  /**\n   * A long-lived iCure token, an internal authentication token that lasts longer than 5 minutes. Unlike passwords these tokens usually are generated\n   * by some component of iCure, and are not chosen by the user.\n   */\n  LONG_LIVED_TOKEN = 'LONG_LIVED_TOKEN',\n  /**\n   * A token provided by an external authentication provider (e.g. Oauth/Google).\n   * Not yet in use.\n   */\n  EXTERNAL_AUTHENTICATION = 'EXTERNAL_AUTHENTICATION',\n  /**\n   * A special case of external authentication where the provider is a digital identity provider.\n   * Not yet in use.\n   */\n  // DIGITAL_ID = 'DIGITAL_ID',\n}\n\n// Here starts internal entities that should not be used directly.\n\n/**\n * @internal this class is meant for internal use only and may be changed without notice. The SmartAuthProvider will be initialised automatically\n * by the iCure api depending on the authentication options you provide.\n *\n * An authentication provider that automatically requests secrets for authentication as needed.\n *\n * This authentication provider can be initialised already with some secrets or tokens, and the provider will cache them and use them as needed for\n * as long as they remain valid. If at any point however the provider needs an updated secret or a secret of a different kind it will automatically\n * request this to the {@link SmartAuthProvider} to get the secret.\n *\n * An advantage of using this provider over others is that in case all the cached tokens and secrets were to expire while performing a request,\n * instead of having the request fail the provider will ask for new secrets from the {@link SmartAuthProvider} and the request will automatically\n * be retried with the new secret. Additionally, the provider may request updated secrets also for performing some sensitive operations (e.g. changing\n * password of the user) even if the cached tokens and/or did not expire. This could be the case for example if the cached secret is a long-lived\n * token, but in order to change the password the user needs to provide his current password.\n *\n * Note that in this context the cache of secrets and token is in memory only, and is not persisted in any way. Different instances of this provider\n * will not share the same cache.\n *\n */\nexport class SmartAuthProvider implements AuthenticationProvider {\n  /**\n   * Initialises a {@link SmartAuthProvider}.\n   * @param authApi an \"anonymous\" {@link IccAuthApi} to use for authentication.\n   * @param login\n   * @param secretProvider\n   * @param props optional initialisation properties.\n   */\n  static initialise(\n    authApi: IccAuthApi,\n    login: string,\n    secretProvider: AuthSecretProvider,\n    props: {\n      initialSecret?: { password: string } | { longToken: string } | { oauthToken: string; oauthType: OAuthThirdParty }\n      initialAuthToken?: string\n      initialRefreshToken?: string\n      loginGroupId?: string\n    } = {}\n  ): SmartAuthProvider {\n    let initialSecret: CachedSecretType | undefined = undefined\n    if (props.initialSecret) {\n      if ('password' in props.initialSecret) {\n        initialSecret = { value: props.initialSecret.password, type: ServerAuthenticationClass.PASSWORD }\n      } else if ('longToken' in props.initialSecret) {\n        initialSecret = { value: props.initialSecret.longToken, type: ServerAuthenticationClass.LONG_LIVED_TOKEN }\n      } else {\n        initialSecret = {\n          value: props.initialSecret.oauthToken,\n          type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION,\n          oauthType: props.initialSecret.oauthType,\n        }\n      }\n    }\n    return new SmartAuthProvider(\n      new TokenProvider(login, props.loginGroupId, initialSecret, props.initialAuthToken, props.initialRefreshToken, authApi, secretProvider),\n      props.loginGroupId\n    )\n  }\n\n  private constructor(private readonly tokenProvider: TokenProvider, private readonly groupId: string | undefined) {}\n\n  getAuthService(): AuthService {\n    return new SmartAuthService(this.tokenProvider)\n  }\n\n  async switchGroup(newGroupId: string, matches: Array<UserGroup>): Promise<AuthenticationProvider> {\n    if (newGroupId == this.groupId) return Promise.resolve(this)\n    if (!matches.find((match) => match.groupId == newGroupId)) throw new Error('New group id not found in matches.')\n    const switchedProvider = await this.tokenProvider.switchedGroup(newGroupId)\n    return new SmartAuthProvider(switchedProvider, this.groupId)\n  }\n\n  getIcureTokens(): Promise<{ token: string; refreshToken: string } | undefined> {\n    return this.tokenProvider.getCachedTokensOrLoad()\n  }\n}\n\nenum ServerAuthenticationClass {\n  // DIGITAL_ID = 60,\n  TWO_FACTOR_AUTHENTICATION = 50,\n  SHORT_LIVED_TOKEN = 40,\n  EXTERNAL_AUTHENTICATION = 30,\n  PASSWORD = 20,\n  LONG_LIVED_TOKEN = 10,\n}\n// Secrets lasting more than 5 minutes -> makes sense to reuse them to get an elevated security jwt\ntype LongLivedSecretType = ServerAuthenticationClass.LONG_LIVED_TOKEN | ServerAuthenticationClass.PASSWORD\ntype CachedSecretType =\n  | { value: string; type: LongLivedSecretType | undefined }\n  | { value: string; type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION; oauthType: OAuthThirdParty }\n// In some providers Oauth tokens may have short duration or may be usable only once. We only want to cache them if they are going to be reusable and\n// if they last more than 5 minutes.\nconst longLivedOAuthTokens = new Set([OAuthThirdParty.GOOGLE])\nclass TokenProvider {\n  constructor(\n    private login: string,\n    private groupId: string | undefined,\n    private currentLongLivedSecret: CachedSecretType | undefined,\n    private cachedToken: string | undefined,\n    private cachedRefreshToken: string | undefined,\n    private readonly authApi: IccAuthApi,\n    private readonly authSecretProvider: AuthSecretProvider\n  ) {}\n\n  async getCachedOrRefreshedOrNewToken(): Promise<{ token: string; type: RetrievedTokenType }> {\n    if (!!this.cachedToken && !isJwtInvalidOrExpired(this.cachedToken)) {\n      return { token: this.cachedToken, type: RetrievedTokenType.CACHED }\n    } else if (!!this.cachedRefreshToken && !isJwtInvalidOrExpired(this.cachedRefreshToken)) {\n      return this.refreshAndCacheToken(this.cachedRefreshToken)\n    } else {\n      return { token: await this.getAndCacheNewToken(undefined), type: RetrievedTokenType.NEW }\n    }\n  }\n\n  async getCachedTokensOrLoad(): Promise<{ token: string; refreshToken: string }> {\n    if (!this.cachedToken || !this.cachedRefreshToken) {\n      await this.getAndCacheNewToken(undefined)\n    }\n    return { token: this.cachedToken!, refreshToken: this.cachedRefreshToken! }\n  }\n\n  async getNewTokenWithClass(minimumAuthenticationClass: number): Promise<string> {\n    return await this.getAndCacheNewToken(minimumAuthenticationClass)\n  }\n\n  private async getAndCacheNewToken(minimumAuthenticationClassLevel: number | undefined): Promise<string> {\n    const { token, refreshToken } = await this.getNewToken(minimumAuthenticationClassLevel ?? 0)\n    this.cachedToken = token\n    this.cachedRefreshToken = refreshToken\n    return token\n  }\n\n  private async refreshAndCacheToken(refreshToken: string): Promise<{ token: string; type: RetrievedTokenType }> {\n    return await this.authApi.refreshAuthenticationJWT(refreshToken).then(\n      (authResult) => {\n        if (!authResult.token) throw new Error('Internal error: refresh succeeded but no token was returned. Unsupported backend version?')\n        this.cachedToken = authResult.token\n        return { token: authResult.token, type: RetrievedTokenType.REFRESHED }\n      },\n      async () => ({ token: await this.getAndCacheNewToken(undefined), type: RetrievedTokenType.NEW })\n    )\n  }\n\n  private async getNewToken(minimumAuthenticationClassLevel: number): Promise<{ token: string; refreshToken: string }> {\n    if (!!this.currentLongLivedSecret && (!this.currentLongLivedSecret.type || this.currentLongLivedSecret.type >= minimumAuthenticationClassLevel)) {\n      const resultWithCachedSecret = await this.doGetTokenWithSecret(this.currentLongLivedSecret, minimumAuthenticationClassLevel)\n      if ('success' in resultWithCachedSecret) {\n        return resultWithCachedSecret.success\n      } else if (\n        resultWithCachedSecret.failure === DoGetTokenResultFailureReason.NEEDS_2FA &&\n        minimumAuthenticationClassLevel <= ServerAuthenticationClass.TWO_FACTOR_AUTHENTICATION\n      ) {\n        return this.askTotpAndGetToken(this.currentLongLivedSecret.value, minimumAuthenticationClassLevel)\n      } else return this.askSecretAndGetToken(minimumAuthenticationClassLevel, true)\n    } else {\n      return this.askSecretAndGetToken(minimumAuthenticationClassLevel, true)\n    }\n  }\n\n  private async askSecretAndGetToken(\n    minimumAuthenticationClassLevel: number,\n    passwordIsValidAs2fa: boolean\n  ): Promise<{ token: string; refreshToken: string }> {\n    const acceptedSecrets = [\n      minimumAuthenticationClassLevel <= ServerAuthenticationClass.LONG_LIVED_TOKEN ? [AuthSecretType.LONG_LIVED_TOKEN] : [],\n      minimumAuthenticationClassLevel <= ServerAuthenticationClass.SHORT_LIVED_TOKEN ? [AuthSecretType.SHORT_LIVED_TOKEN] : [],\n      minimumAuthenticationClassLevel <= ServerAuthenticationClass.TWO_FACTOR_AUTHENTICATION &&\n      (passwordIsValidAs2fa || minimumAuthenticationClassLevel <= ServerAuthenticationClass.PASSWORD)\n        ? [AuthSecretType.PASSWORD]\n        : [],\n    ].flat()\n    if (!acceptedSecrets.length)\n      throw new Error('Internal error: no secret type is accepted for this request. Group may be misconfigured, or client may be outdated.')\n    const attempts: AuthSecretDetails[] = []\n    while (true) {\n      const secretDetails = await this.authSecretProvider.getSecret([...acceptedSecrets], attempts)\n      if (!acceptedSecrets.includes(secretDetails.secretType))\n        throw new Error(`Accepted secret types are ${JSON.stringify(acceptedSecrets)}, but got a secret of type ${secretDetails.secretType}.`)\n      attempts.push(secretDetails)\n      const result = await this.doGetTokenWithSecret(secretDetails, minimumAuthenticationClassLevel)\n      if ('success' in result) {\n        this.updateCachedSecret(secretDetails)\n        return result.success\n      } else if (result.failure == DoGetTokenResultFailureReason.NEEDS_2FA) {\n        return this.askTotpAndGetToken(secretDetails.value, minimumAuthenticationClassLevel)\n      } else if (secretDetails.value == AuthSecretType.PASSWORD && result.failure == DoGetTokenResultFailureReason.INVALID_AUTH_CLASS_LEVEL) {\n        // If we tried a password, and it turns out that the user has 2fa not enabled next time we don't consider password valid\n        return this.askSecretAndGetToken(minimumAuthenticationClassLevel, false)\n      } // else retry\n    }\n  }\n\n  private async askTotpAndGetToken(password: string, minimumAuthenticationClassLevel: number): Promise<{ token: string; refreshToken: string }> {\n    if (minimumAuthenticationClassLevel > ServerAuthenticationClass.TWO_FACTOR_AUTHENTICATION)\n      throw new Error(\n        \"Internal error: asking for totp to login but minimumAuthenticationClassLevel is higher than TWO_FACTOR_AUTHENTICATION's level.\"\n      )\n    const attempts: AuthSecretDetails[] = []\n    while (true) {\n      const details = await this.authSecretProvider.getSecret([AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN], attempts)\n      if (details.secretType != AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN)\n        throw new Error(`Was expecting a 2fa token but got a secret of type ${details.secretType}.`)\n      attempts.push(details)\n      const result = await this.doGetTokenWithSecret({ value: `${password}|${details.value}` }, minimumAuthenticationClassLevel)\n      if ('success' in result) {\n        this.updateCachedSecret({ value: password, secretType: AuthSecretType.PASSWORD })\n        return result.success\n      } else if (result.failure != DoGetTokenResultFailureReason.INVALID_2FA) {\n        throw new Error(`Unexpected error while trying to login with (previously) valid password and 2fa token ${result.failure}.`)\n      } // else retry\n    }\n  }\n\n  private async doGetTokenWithSecret(\n    secret: { value: string; oauthType?: OAuthThirdParty },\n    minimumAuthenticationClassLevel: number\n  ): Promise<DoGetTokenResult> {\n    let authResultPromise: Promise<AuthenticationResponse>\n    if ('oauthType' in secret && !!secret.oauthType) {\n      authResultPromise = this.authApi.loginWithThirdPartyToken(secret.oauthType, secret.value) // TODO add group id\n    } else {\n      authResultPromise = this.authApi.login({ username: this.login, password: secret.value }, this.groupId)\n    }\n    return authResultPromise.then(\n      (authResult) => {\n        const { token, refreshToken } = authResult\n        if (!token || !refreshToken) throw new Error('Internal error: login succeeded but no token was returned. Unsupported backend version?')\n        const claims = decodeJwtClaims(token)\n        const authClassLevel = claims['tac']\n        if (!authClassLevel || typeof authClassLevel !== 'number') {\n          if (minimumAuthenticationClassLevel > 0) {\n            throw new Error('Internal error: authClassLevel is not a number. Unsupported backend version?')\n          } else return { success: { token, refreshToken } }\n        }\n        if (authClassLevel < minimumAuthenticationClassLevel) {\n          return { failure: DoGetTokenResultFailureReason.INVALID_AUTH_CLASS_LEVEL }\n        } else {\n          return { success: { token, refreshToken } }\n        }\n      },\n      (error) => {\n        if (!(error instanceof XHRError)) throw error\n        if (error.statusCode == 401 || error.statusCode == 412) {\n          // Password is wrong (401) or unacceptable (e.g. too short, 412)\n          return { failure: DoGetTokenResultFailureReason.INVALID_PW_OR_TOKEN }\n        } else if (error.statusCode == 406) {\n          // Password is correct, but 2fa token is not\n          return { failure: DoGetTokenResultFailureReason.INVALID_2FA }\n        } else if (error.statusCode == 417) {\n          // Password is correct, but the user has 2fa enabled and no 2fa token was provided\n          return { failure: DoGetTokenResultFailureReason.NEEDS_2FA }\n        } else throw error\n      }\n    )\n  }\n\n  async switchedGroup(newGroupId: string): Promise<TokenProvider> {\n    const groupSwitchedTokens = this.cachedRefreshToken\n      ? await this.authApi.switchGroup(this.cachedRefreshToken, newGroupId).then(\n          (response) => {\n            if (!response.token || !response.refreshToken)\n              throw new Error('Internal error: group switch succeeded but no token was returned. Unsupported backend version?')\n            return { token: response.token, refreshToken: response.refreshToken }\n          },\n          () => ({ token: undefined, refreshToken: undefined })\n        )\n      : { token: undefined, refreshToken: undefined }\n    return new TokenProvider(\n      this.login,\n      newGroupId,\n      this.currentLongLivedSecret ? { value: this.currentLongLivedSecret.value, type: undefined } : undefined,\n      groupSwitchedTokens.token,\n      groupSwitchedTokens.refreshToken,\n      this.authApi,\n      this.authSecretProvider\n    )\n  }\n\n  private updateCachedSecret(details: AuthSecretDetails) {\n    switch (details.secretType) {\n      case AuthSecretType.PASSWORD:\n        this.currentLongLivedSecret = { value: details.value, type: ServerAuthenticationClass.PASSWORD }\n        break\n      case AuthSecretType.LONG_LIVED_TOKEN:\n        this.currentLongLivedSecret = { value: details.value, type: ServerAuthenticationClass.LONG_LIVED_TOKEN }\n        break\n      case AuthSecretType.EXTERNAL_AUTHENTICATION:\n        if (longLivedOAuthTokens.has(details.oauthType)) {\n          this.currentLongLivedSecret = {\n            value: details.value,\n            type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION,\n            oauthType: details.oauthType,\n          }\n        }\n        break\n    }\n  }\n}\ntype DoGetTokenResult = { success: { token: string; refreshToken: string } } | { failure: DoGetTokenResultFailureReason }\nenum DoGetTokenResultFailureReason {\n  NEEDS_2FA,\n  INVALID_2FA,\n  INVALID_PW_OR_TOKEN,\n  INVALID_AUTH_CLASS_LEVEL,\n}\nenum RetrievedTokenType {\n  CACHED,\n  REFRESHED,\n  NEW,\n}\n\nenum SmartAuthServiceState {\n  INITIAL,\n  DONE_INITIAL,\n  REATTEMPT,\n  REATTEMPTED_WITH_NEW_UNBOUND_TOKEN,\n  REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN,\n  EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS,\n  TERMINAL_ERROR,\n}\nclass SmartAuthService implements AuthService {\n  private currentState:\n    | { id: SmartAuthServiceState.INITIAL }\n    | { id: SmartAuthServiceState.DONE_INITIAL; initialToken: string }\n    | { id: SmartAuthServiceState.REATTEMPT; initialToken: string; initialError: Error }\n    | { id: SmartAuthServiceState.REATTEMPTED_WITH_NEW_UNBOUND_TOKEN }\n    | { id: SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN }\n    | { id: SmartAuthServiceState.EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS; errorFromNewToken: Error }\n    | { id: SmartAuthServiceState.TERMINAL_ERROR; error: Error } = { id: SmartAuthServiceState.INITIAL }\n\n  constructor(private readonly tokenProvider: TokenProvider) {}\n\n  async jwtGetter(): Promise<{ token: string; refreshToken: string | undefined }> {\n    const token = await this.getAuthToken(undefined)\n    return { token, refreshToken: undefined }\n  }\n\n  async getAuthHeaders(minimumAuthenticationClassLevel: number | undefined): Promise<Array<XHR.Header>> {\n    return [new XHR.Header('Authorization', `Bearer ${await this.getAuthToken(minimumAuthenticationClassLevel)}`)]\n  }\n\n  private async getAuthToken(minimumAuthenticationClassLevel: number | undefined): Promise<string> {\n    switch (this.currentState.id) {\n      case SmartAuthServiceState.INITIAL:\n        if (minimumAuthenticationClassLevel != undefined) {\n          throw new Error('Illegal state: cannot ask for a specific auth class level at the first request attempt.')\n        } else {\n          const { token } = await this.tokenProvider.getCachedOrRefreshedOrNewToken()\n          this.currentState = { id: SmartAuthServiceState.DONE_INITIAL, initialToken: token }\n          return token\n        }\n      case SmartAuthServiceState.REATTEMPT:\n        if (minimumAuthenticationClassLevel != undefined) {\n          const token = await this.tokenProvider.getNewTokenWithClass(minimumAuthenticationClassLevel)\n          this.currentState = { id: SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN }\n          return token\n        } else {\n          const { token } = await this.tokenProvider.getCachedOrRefreshedOrNewToken()\n          if (token == this.currentState.initialToken) throw this.currentState.initialError\n          this.currentState = { id: SmartAuthServiceState.REATTEMPTED_WITH_NEW_UNBOUND_TOKEN }\n          return token\n        }\n      case SmartAuthServiceState.EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS:\n        if (minimumAuthenticationClassLevel != undefined) {\n          const token = await this.tokenProvider.getNewTokenWithClass(minimumAuthenticationClassLevel)\n          this.currentState = { id: SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN }\n          return token\n        } else throw this.currentState.errorFromNewToken\n      case SmartAuthServiceState.TERMINAL_ERROR:\n        throw this.currentState.error\n      default:\n        throw new Error(`Illegal state: cannot get token in state ${this.currentState.id}.`)\n    }\n  }\n\n  invalidateHeader(error: Error): void {\n    switch (this.currentState.id) {\n      case SmartAuthServiceState.DONE_INITIAL:\n        this.currentState = { id: SmartAuthServiceState.REATTEMPT, initialToken: this.currentState.initialToken, initialError: error }\n        break\n      case SmartAuthServiceState.REATTEMPTED_WITH_NEW_UNBOUND_TOKEN:\n        this.currentState = { id: SmartAuthServiceState.EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS, errorFromNewToken: error }\n        break\n      case SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN:\n        this.currentState = { id: SmartAuthServiceState.TERMINAL_ERROR, error: error }\n        break\n      default:\n        throw new Error(`Illegal state: cannot invalidate header in state ${this.currentState.id}.`)\n    }\n  }\n}\n"]}

package/icc-x-api/icc-hcparty-x-api.d.ts

@@ -30,9 +30,6 @@ export declare class IccHcpartyXApi extends IccHcpartyApi {
     getHealthcarePartyHierarchyIds(healthcarePartyId: string, bypassCache?: boolean): Promise<string[]>;
     getHealthcareParties(healthcarePartyIds: ListOfIds): Promise<Array<HealthcareParty> | any>;
     getCurrentHealthcareParty(): Promise<HealthcareParty>;
-    getHcPartyKeysForDelegate(healthcarePartyId: string, bypassCache?: boolean): Promise<{
-        [key: string]: string;
-    }>;
     isValidCbe(cbe: string): boolean;
     subscribeToHealthcarePartyEvents(eventTypes: ('CREATE' | 'UPDATE' | 'DELETE')[], filter: AbstractFilter<HealthcareParty> | undefined, eventFired: (dataSample: HealthcareParty) => Promise<void>, options?: SubscriptionOptions): Promise<Connection>;
 }

package/icc-x-api/icc-hcparty-x-api.js

@@ -108,12 +108,6 @@ class IccHcpartyXApi extends icc_api_1.IccHcpartyApi {
     getCurrentHealthcareParty() {
         return super.getCurrentHealthcareParty().then((hcp) => this.putHcPartyInCache(hcp.id, Promise.resolve(hcp)));
     }
-    getHcPartyKeysForDelegate(healthcarePartyId, bypassCache = false) {
-        const cached = bypassCache ? null : this.hcPartyKeysCache[healthcarePartyId];
-        return cached
-            ? Promise.resolve(cached)
-            : super.getHcPartyKeysForDelegate(healthcarePartyId).then((r) => (this.hcPartyKeysCache[healthcarePartyId] = r));
-    }
     isValidCbe(cbe) {
         cbe = cbe.replace(new RegExp('[^(0-9)]', 'g'), '');
         cbe = cbe.length == 9 ? '0' + cbe : cbe;

package/icc-x-api/icc-hcparty-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-hcparty-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-hcparty-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAAsD;AAEtD,kDAAiD;AACjD,qDAA8E;AAC9E,0EAAgG;AAEhG,mCAAsE;AACtE,4DAAwE;AACxE,oDAAmD;AAEnD,qCAAqC;AACrC,MAAa,cAAe,SAAQ,uBAAa;IAK/C,YACE,IAAY,EACZ,OAAkC,EAClC,yBAAiD,IAAI,iDAAwB,EAAE,EAC9D,OAAmB,EACpC,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAPtC,YAAO,GAAP,OAAO,CAAY;QARtC,qBAAgB,GAAiD,EAAE,CAAA;QACnE,iBAAY,GAA0D,EAAE,CAAA;QAEhE,0BAAqB,GAAG,MAAO,CAAA;IAavC,CAAC;IAEO,mBAAmB,CAAC,GAAW;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE;YACrC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAA;SACrB;QACD,IAAI,CAAC,UAAU,EAAE;YACf,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,uBAAuB,CAAC,CAAA;SAC9D;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;SAC3E;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,aAAa,CAAC,OAAgC;QAC5C,IAAI,CAAC,OAAO,EAAE;YACZ,OAAO,OAAO,CAAA;SACf;QAED,IAAI,YAAY,GAAG,OAAO,CAAA;QAE1B,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAA,qBAAO,EAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;YAClH,YAAY,GAAG,IAAA,mCAAqB,EAClC,YAAY,EACZ,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,EAClC,YAAY,CAAC,QAAQ,EACrB,YAAY,CAAC,SAAS,EACtB,YAAY,CAAC,IAAI,CAClB,CAAA;SACF;QAED,IAAI,CAAC,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAA,qBAAO,EAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;YACjH,IAAI,YAAY,GAAG,IAAA,sBAAQ,EAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YAC7E,YAAY,mCACP,YAAY,KACf,QAAQ,EAAE,YAAa,CAAC,QAAQ,EAChC,SAAS,EAAE,YAAa,CAAC,UAAU,CAAC,CAAC,CAAC,YAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAC7E,IAAI,EAAE,YAAa,CAAC,IAAI,GACzB,CAAA;SACF;QAED,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,iBAAiB,CAAC,GAAW,EAAE,QAAyC,IAAI;QAC1E,MAAM,GAAG,GACP,KAAK;YACL,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxC,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,mBAAmB,CAAC,CAAA;gBAChD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;gBAC7B,MAAM,CAAC,CAAA;YACT,CAAC,CAAC,CAAA;QACJ,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAA;QACvE,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,qBAAqB,CAAC,IAAsB;QAC1C,OAAO,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9D,CAAC;IAED,4BAA4B,CAAC,OAAe,EAAE,IAAsB;QAClE,OAAO,KAAK,CAAC,4BAA4B,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9E,CAAC;IAED,qBAAqB,CAAC,IAAsB;QAC1C,IAAI,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE;YACnB,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAA;YAC3D,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;SAClC;QAED,OAAO,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACnI,CAAC;IAED,kBAAkB,CAAC,iBAAyB,EAAE,WAAW,GAAG,KAAK;QAC/D,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAA;QACvF,OAAO,SAAS,IAAI,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAA;IAC/D,CAAC;IAED,8BAA8B,CAAC,iBAAyB,EAAE,WAAW,GAAG,KAAK;QAC3E,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAA;QACvF,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAO,GAAoB,EAAE,EAAE;YAClG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,QAAS,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1I,CAAC,CAAA,CAAC,CAAA;IACJ,CAAC;IAED,oBAAoB,CAAC,kBAA6B;QAChD,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAA;QAClC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YACvB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;SAC3B;QACD,MAAM,MAAM,GAAqD,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACpH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAE5D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YACnB,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAA;SAC7C;QAED,MAAM,IAAI,GAA+B,KAAK,CAAC,oBAAoB,CAAC,IAAI,kBAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;QACpG,OAAO,OAAO,CAAC,GAAG,CAChB,MAAM,CAAC,GAAG,CACR,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,CAAC;YACJ,IAAI,CAAC,iBAAiB,CACpB,CAAC,CAAC,CAAC,CAAC,EACJ,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CACtD,CACJ,CACF,CAAA;IACH,CAAC;IAED,yBAAyB;QACvB,OAAO,KAAK,CAAC,yBAAyB,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC/G,CAAC;IAED,yBAAyB,CAAC,iBAAyB,EAAE,WAAW,GAAG,KAAK;QACtE,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAA;QAC5E,OAAO,MAAM;YACX,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YACzB,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACpH,CAAC;IAED,UAAU,CAAC,GAAW;QACpB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;QAClD,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;QAEvC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAChF,CAAC;IAEK,gCAAgC,CACpC,UAA8C,EAC9C,MAAmD,EACnD,UAA0D,EAC1D,UAA+B,EAAE;;YAEjC,OAAO,IAAA,+BAAuB,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CACtH,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAC/B,CAAA;QACH,CAAC;KAAA;CACF;AA7JD,wCA6JC","sourcesContent":["import { IccAuthApi, IccHcpartyApi } from '../icc-api'\nimport { HealthcareParty } from '../icc-api/model/HealthcareParty'\nimport * as models from '../icc-api/model/models'\nimport { findName, garnishPersonWithName, hasName } from './utils/person-util'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { AbstractFilter } from './filters/filters'\nimport { subscribeToEntityEvents, SubscriptionOptions } from './utils'\nimport { Connection, ConnectionImpl } from '../icc-api/model/Connection'\nimport { ListOfIds } from '../icc-api/model/models'\n\n// noinspection JSUnusedGlobalSymbols\nexport class IccHcpartyXApi extends IccHcpartyApi {\n  hcPartyKeysCache: { [key: string]: { [key: string]: string } } = {}\n  hcPartyCache: { [key: string]: [number, Promise<HealthcareParty>] } = {}\n\n  private CACHE_RETENTION_IN_MS = 300_000\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    private readonly authApi: IccAuthApi,\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n  }\n\n  private getHcPartyFromCache(key: string) {\n    const hcpInCache = this.hcPartyCache[key]\n    const now = Date.now()\n    if (hcpInCache && hcpInCache[0] > now) {\n      return hcpInCache[1]\n    }\n    if (!hcpInCache) {\n      console.log(`Cache miss for key ${key} because not in cache`)\n    } else {\n      console.log(`Cache miss for key ${key} because ${hcpInCache[0]} > ${now}`)\n    }\n    return null\n  }\n\n  completeNames(hcParty?: models.HealthcareParty): models.HealthcareParty | undefined {\n    if (!hcParty) {\n      return hcParty\n    }\n\n    let finalHcParty = hcParty\n\n    if ((!!finalHcParty.lastName || !!finalHcParty.name) && !hasName(finalHcParty, models.PersonName.UseEnum.Official)) {\n      finalHcParty = garnishPersonWithName(\n        finalHcParty,\n        models.PersonName.UseEnum.Official,\n        finalHcParty.lastName,\n        finalHcParty.firstName,\n        finalHcParty.name\n      )\n    }\n\n    if ((!finalHcParty.lastName || !finalHcParty.name) && !!hasName(finalHcParty, models.PersonName.UseEnum.Official)) {\n      let officialName = findName(finalHcParty, models.PersonName.UseEnum.Official)\n      finalHcParty = {\n        ...finalHcParty,\n        lastName: officialName!.lastName,\n        firstName: officialName!.firstNames ? officialName!.firstNames[0] : undefined,\n        name: officialName!.text,\n      }\n    }\n\n    return finalHcParty\n  }\n\n  putHcPartyInCache(key: string, value: Promise<HealthcareParty> | null = null): Promise<HealthcareParty> {\n    const hcp =\n      value ||\n      super.getHealthcareParty(key).catch((e) => {\n        console.log(`Evict key ${key} because of error`)\n        delete this.hcPartyCache[key]\n        throw e\n      })\n    this.hcPartyCache[key] = [Date.now() + this.CACHE_RETENTION_IN_MS, hcp]\n    return hcp\n  }\n\n  createHealthcareParty(body?: HealthcareParty): Promise<HealthcareParty> {\n    return super.createHealthcareParty(this.completeNames(body))\n  }\n\n  createHealthcarePartyInGroup(groupId: string, body?: HealthcareParty): Promise<HealthcareParty> {\n    return super.createHealthcarePartyInGroup(groupId, this.completeNames(body))\n  }\n\n  modifyHealthcareParty(body?: HealthcareParty): Promise<HealthcareParty | any> {\n    if (body && body.id) {\n      console.log(`Evict key ${body.id} because of modification`)\n      delete this.hcPartyCache[body.id]\n    }\n\n    return super.modifyHealthcareParty(this.completeNames(body)).then((hcp) => this.putHcPartyInCache(hcp.id!, Promise.resolve(hcp)))\n  }\n\n  getHealthcareParty(healthcarePartyId: string, bypassCache = false): Promise<HealthcareParty | any> {\n    const fromCache = bypassCache ? undefined : this.getHcPartyFromCache(healthcarePartyId)\n    return fromCache || this.putHcPartyInCache(healthcarePartyId)\n  }\n\n  getHealthcarePartyHierarchyIds(healthcarePartyId: string, bypassCache = false): Promise<string[]> {\n    const fromCache = bypassCache ? undefined : this.getHcPartyFromCache(healthcarePartyId)\n    return (fromCache || this.putHcPartyInCache(healthcarePartyId)).then(async (hcp: HealthcareParty) => {\n      return hcp ? (hcp.parentId ? (await this.getHealthcarePartyHierarchyIds(hcp.parentId!, bypassCache)).concat([hcp.id!]) : [hcp.id!]) : []\n    })\n  }\n\n  getHealthcareParties(healthcarePartyIds: ListOfIds): Promise<Array<HealthcareParty> | any> {\n    const ids = healthcarePartyIds.ids\n    if (!ids || !ids.length) {\n      return Promise.resolve([])\n    }\n    const cached: Array<[string, Promise<HealthcareParty> | null]> = ids.map((id) => [id, this.getHcPartyFromCache(id)])\n    const toFetch = cached.filter((x) => !x[1]).map((x) => x[0])\n\n    if (!toFetch.length) {\n      return Promise.all(cached.map((x) => x[1]!))\n    }\n\n    const prom: Promise<HealthcareParty[]> = super.getHealthcareParties(new ListOfIds({ ids: toFetch }))\n    return Promise.all(\n      cached.map(\n        (x) =>\n          x[1] ||\n          this.putHcPartyInCache(\n            x[0],\n            prom.then((hcps) => hcps.find((h) => h.id === x[0])!)\n          )\n      )\n    )\n  }\n\n  getCurrentHealthcareParty(): Promise<HealthcareParty> {\n    return super.getCurrentHealthcareParty().then((hcp) => this.putHcPartyInCache(hcp.id!, Promise.resolve(hcp)))\n  }\n\n  getHcPartyKeysForDelegate(healthcarePartyId: string, bypassCache = false): Promise<{ [key: string]: string }> {\n    const cached = bypassCache ? null : this.hcPartyKeysCache[healthcarePartyId]\n    return cached\n      ? Promise.resolve(cached)\n      : super.getHcPartyKeysForDelegate(healthcarePartyId).then((r) => (this.hcPartyKeysCache[healthcarePartyId] = r))\n  }\n\n  isValidCbe(cbe: string) {\n    cbe = cbe.replace(new RegExp('[^(0-9)]', 'g'), '')\n    cbe = cbe.length == 9 ? '0' + cbe : cbe\n\n    return 97 - (Number(cbe.substring(0, 8)) % 97) === Number(cbe.substring(8, 2))\n  }\n\n  async subscribeToHealthcarePartyEvents(\n    eventTypes: ('CREATE' | 'UPDATE' | 'DELETE')[],\n    filter: AbstractFilter<HealthcareParty> | undefined,\n    eventFired: (dataSample: HealthcareParty) => Promise<void>,\n    options: SubscriptionOptions = {}\n  ): Promise<Connection> {\n    return subscribeToEntityEvents(this.host, this.authApi, 'HealthcareParty', eventTypes, filter, eventFired, options).then(\n      (rs) => new ConnectionImpl(rs)\n    )\n  }\n}\n"]}
+{"version":3,"file":"icc-hcparty-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-hcparty-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAAsD;AAEtD,kDAAiD;AACjD,qDAA8E;AAC9E,0EAAgG;AAEhG,mCAAsE;AACtE,4DAAwE;AACxE,oDAAmD;AAEnD,qCAAqC;AACrC,MAAa,cAAe,SAAQ,uBAAa;IAK/C,YACE,IAAY,EACZ,OAAkC,EAClC,yBAAiD,IAAI,iDAAwB,EAAE,EAC9D,OAAmB,EACpC,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAPtC,YAAO,GAAP,OAAO,CAAY;QARtC,qBAAgB,GAAiD,EAAE,CAAA;QACnE,iBAAY,GAA0D,EAAE,CAAA;QAEhE,0BAAqB,GAAG,MAAO,CAAA;IAavC,CAAC;IAEO,mBAAmB,CAAC,GAAW;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE;YACrC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAA;SACrB;QACD,IAAI,CAAC,UAAU,EAAE;YACf,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,uBAAuB,CAAC,CAAA;SAC9D;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;SAC3E;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,aAAa,CAAC,OAAgC;QAC5C,IAAI,CAAC,OAAO,EAAE;YACZ,OAAO,OAAO,CAAA;SACf;QAED,IAAI,YAAY,GAAG,OAAO,CAAA;QAE1B,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAA,qBAAO,EAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;YAClH,YAAY,GAAG,IAAA,mCAAqB,EAClC,YAAY,EACZ,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,EAClC,YAAY,CAAC,QAAQ,EACrB,YAAY,CAAC,SAAS,EACtB,YAAY,CAAC,IAAI,CAClB,CAAA;SACF;QAED,IAAI,CAAC,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAA,qBAAO,EAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;YACjH,IAAI,YAAY,GAAG,IAAA,sBAAQ,EAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YAC7E,YAAY,mCACP,YAAY,KACf,QAAQ,EAAE,YAAa,CAAC,QAAQ,EAChC,SAAS,EAAE,YAAa,CAAC,UAAU,CAAC,CAAC,CAAC,YAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAC7E,IAAI,EAAE,YAAa,CAAC,IAAI,GACzB,CAAA;SACF;QAED,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,iBAAiB,CAAC,GAAW,EAAE,QAAyC,IAAI;QAC1E,MAAM,GAAG,GACP,KAAK;YACL,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxC,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,mBAAmB,CAAC,CAAA;gBAChD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;gBAC7B,MAAM,CAAC,CAAA;YACT,CAAC,CAAC,CAAA;QACJ,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAA;QACvE,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,qBAAqB,CAAC,IAAsB;QAC1C,OAAO,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9D,CAAC;IAED,4BAA4B,CAAC,OAAe,EAAE,IAAsB;QAClE,OAAO,KAAK,CAAC,4BAA4B,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9E,CAAC;IAED,qBAAqB,CAAC,IAAsB;QAC1C,IAAI,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE;YACnB,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAA;YAC3D,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;SAClC;QAED,OAAO,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACnI,CAAC;IAED,kBAAkB,CAAC,iBAAyB,EAAE,WAAW,GAAG,KAAK;QAC/D,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAA;QACvF,OAAO,SAAS,IAAI,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAA;IAC/D,CAAC;IAED,8BAA8B,CAAC,iBAAyB,EAAE,WAAW,GAAG,KAAK;QAC3E,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAA;QACvF,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAO,GAAoB,EAAE,EAAE;YAClG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,QAAS,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1I,CAAC,CAAA,CAAC,CAAA;IACJ,CAAC;IAED,oBAAoB,CAAC,kBAA6B;QAChD,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAA;QAClC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YACvB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;SAC3B;QACD,MAAM,MAAM,GAAqD,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACpH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAE5D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YACnB,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAA;SAC7C;QAED,MAAM,IAAI,GAA+B,KAAK,CAAC,oBAAoB,CAAC,IAAI,kBAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;QACpG,OAAO,OAAO,CAAC,GAAG,CAChB,MAAM,CAAC,GAAG,CACR,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,CAAC;YACJ,IAAI,CAAC,iBAAiB,CACpB,CAAC,CAAC,CAAC,CAAC,EACJ,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CACtD,CACJ,CACF,CAAA;IACH,CAAC;IAED,yBAAyB;QACvB,OAAO,KAAK,CAAC,yBAAyB,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC/G,CAAC;IAED,UAAU,CAAC,GAAW;QACpB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;QAClD,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;QAEvC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAChF,CAAC;IAEK,gCAAgC,CACpC,UAA8C,EAC9C,MAAmD,EACnD,UAA0D,EAC1D,UAA+B,EAAE;;YAEjC,OAAO,IAAA,+BAAuB,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CACtH,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAC/B,CAAA;QACH,CAAC;KAAA;CACF;AAtJD,wCAsJC","sourcesContent":["import { IccAuthApi, IccHcpartyApi } from '../icc-api'\nimport { HealthcareParty } from '../icc-api/model/HealthcareParty'\nimport * as models from '../icc-api/model/models'\nimport { findName, garnishPersonWithName, hasName } from './utils/person-util'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { AbstractFilter } from './filters/filters'\nimport { subscribeToEntityEvents, SubscriptionOptions } from './utils'\nimport { Connection, ConnectionImpl } from '../icc-api/model/Connection'\nimport { ListOfIds } from '../icc-api/model/models'\n\n// noinspection JSUnusedGlobalSymbols\nexport class IccHcpartyXApi extends IccHcpartyApi {\n  hcPartyKeysCache: { [key: string]: { [key: string]: string } } = {}\n  hcPartyCache: { [key: string]: [number, Promise<HealthcareParty>] } = {}\n\n  private CACHE_RETENTION_IN_MS = 300_000\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    private readonly authApi: IccAuthApi,\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n  }\n\n  private getHcPartyFromCache(key: string) {\n    const hcpInCache = this.hcPartyCache[key]\n    const now = Date.now()\n    if (hcpInCache && hcpInCache[0] > now) {\n      return hcpInCache[1]\n    }\n    if (!hcpInCache) {\n      console.log(`Cache miss for key ${key} because not in cache`)\n    } else {\n      console.log(`Cache miss for key ${key} because ${hcpInCache[0]} > ${now}`)\n    }\n    return null\n  }\n\n  completeNames(hcParty?: models.HealthcareParty): models.HealthcareParty | undefined {\n    if (!hcParty) {\n      return hcParty\n    }\n\n    let finalHcParty = hcParty\n\n    if ((!!finalHcParty.lastName || !!finalHcParty.name) && !hasName(finalHcParty, models.PersonName.UseEnum.Official)) {\n      finalHcParty = garnishPersonWithName(\n        finalHcParty,\n        models.PersonName.UseEnum.Official,\n        finalHcParty.lastName,\n        finalHcParty.firstName,\n        finalHcParty.name\n      )\n    }\n\n    if ((!finalHcParty.lastName || !finalHcParty.name) && !!hasName(finalHcParty, models.PersonName.UseEnum.Official)) {\n      let officialName = findName(finalHcParty, models.PersonName.UseEnum.Official)\n      finalHcParty = {\n        ...finalHcParty,\n        lastName: officialName!.lastName,\n        firstName: officialName!.firstNames ? officialName!.firstNames[0] : undefined,\n        name: officialName!.text,\n      }\n    }\n\n    return finalHcParty\n  }\n\n  putHcPartyInCache(key: string, value: Promise<HealthcareParty> | null = null): Promise<HealthcareParty> {\n    const hcp =\n      value ||\n      super.getHealthcareParty(key).catch((e) => {\n        console.log(`Evict key ${key} because of error`)\n        delete this.hcPartyCache[key]\n        throw e\n      })\n    this.hcPartyCache[key] = [Date.now() + this.CACHE_RETENTION_IN_MS, hcp]\n    return hcp\n  }\n\n  createHealthcareParty(body?: HealthcareParty): Promise<HealthcareParty> {\n    return super.createHealthcareParty(this.completeNames(body))\n  }\n\n  createHealthcarePartyInGroup(groupId: string, body?: HealthcareParty): Promise<HealthcareParty> {\n    return super.createHealthcarePartyInGroup(groupId, this.completeNames(body))\n  }\n\n  modifyHealthcareParty(body?: HealthcareParty): Promise<HealthcareParty | any> {\n    if (body && body.id) {\n      console.log(`Evict key ${body.id} because of modification`)\n      delete this.hcPartyCache[body.id]\n    }\n\n    return super.modifyHealthcareParty(this.completeNames(body)).then((hcp) => this.putHcPartyInCache(hcp.id!, Promise.resolve(hcp)))\n  }\n\n  getHealthcareParty(healthcarePartyId: string, bypassCache = false): Promise<HealthcareParty | any> {\n    const fromCache = bypassCache ? undefined : this.getHcPartyFromCache(healthcarePartyId)\n    return fromCache || this.putHcPartyInCache(healthcarePartyId)\n  }\n\n  getHealthcarePartyHierarchyIds(healthcarePartyId: string, bypassCache = false): Promise<string[]> {\n    const fromCache = bypassCache ? undefined : this.getHcPartyFromCache(healthcarePartyId)\n    return (fromCache || this.putHcPartyInCache(healthcarePartyId)).then(async (hcp: HealthcareParty) => {\n      return hcp ? (hcp.parentId ? (await this.getHealthcarePartyHierarchyIds(hcp.parentId!, bypassCache)).concat([hcp.id!]) : [hcp.id!]) : []\n    })\n  }\n\n  getHealthcareParties(healthcarePartyIds: ListOfIds): Promise<Array<HealthcareParty> | any> {\n    const ids = healthcarePartyIds.ids\n    if (!ids || !ids.length) {\n      return Promise.resolve([])\n    }\n    const cached: Array<[string, Promise<HealthcareParty> | null]> = ids.map((id) => [id, this.getHcPartyFromCache(id)])\n    const toFetch = cached.filter((x) => !x[1]).map((x) => x[0])\n\n    if (!toFetch.length) {\n      return Promise.all(cached.map((x) => x[1]!))\n    }\n\n    const prom: Promise<HealthcareParty[]> = super.getHealthcareParties(new ListOfIds({ ids: toFetch }))\n    return Promise.all(\n      cached.map(\n        (x) =>\n          x[1] ||\n          this.putHcPartyInCache(\n            x[0],\n            prom.then((hcps) => hcps.find((h) => h.id === x[0])!)\n          )\n      )\n    )\n  }\n\n  getCurrentHealthcareParty(): Promise<HealthcareParty> {\n    return super.getCurrentHealthcareParty().then((hcp) => this.putHcPartyInCache(hcp.id!, Promise.resolve(hcp)))\n  }\n\n  isValidCbe(cbe: string) {\n    cbe = cbe.replace(new RegExp('[^(0-9)]', 'g'), '')\n    cbe = cbe.length == 9 ? '0' + cbe : cbe\n\n    return 97 - (Number(cbe.substring(0, 8)) % 97) === Number(cbe.substring(8, 2))\n  }\n\n  async subscribeToHealthcarePartyEvents(\n    eventTypes: ('CREATE' | 'UPDATE' | 'DELETE')[],\n    filter: AbstractFilter<HealthcareParty> | undefined,\n    eventFired: (dataSample: HealthcareParty) => Promise<void>,\n    options: SubscriptionOptions = {}\n  ): Promise<Connection> {\n    return subscribeToEntityEvents(this.host, this.authApi, 'HealthcareParty', eventTypes, filter, eventFired, options).then(\n      (rs) => new ConnectionImpl(rs)\n    )\n  }\n}\n"]}

package/icc-x-api/icc-helement-x-api.d.ts

@@ -60,7 +60,6 @@ export declare class IccHelementXApi extends IccHelementApi implements Encrypted
     getHealthElements(body?: models.ListOfIds): never;
     getHealthElementsWithUser(user: models.User, body?: models.ListOfIds): Promise<models.HealthElement[]>;
     newHealthElementDelegations(healthElementId: string, body?: Array<models.Delegation>): never;
-    newHealthElementDelegationsWithUser(user: models.User, healthElementId: string, body?: Array<models.Delegation>): Promise<models.HealthElement>;
     findHealthElementsByHCPartyPatientForeignKeys(hcPartyId: string, secretFKeys: string): never;
     findHealthElementsByHCPartyPatientForeignKeysWithUser(user: models.User, hcPartyId: string, secretFKeys: string): Promise<HealthElement[]>;
     findHealthElementsByHCPartyPatientForeignKeysArrayWithUser(user: models.User, hcPartyId: string, secretFKeys: string[]): Promise<HealthElement[]>;

package/icc-x-api/icc-helement-x-api.js

@@ -112,12 +112,6 @@ class IccHelementXApi extends icc_api_1.IccHelementApi {
     newHealthElementDelegations(healthElementId, body) {
         throw new Error('Cannot call a method that returns health element without providing a user for de/encryption');
     }
-    newHealthElementDelegationsWithUser(user, healthElementId, body) {
-        return super
-            .newHealthElementDelegations(healthElementId, body)
-            .then((he) => this.decryptWithUser(user, [he]))
-            .then((he) => he[0]);
-    }
     findHealthElementsByHCPartyPatientForeignKeys(hcPartyId, secretFKeys) {
         throw new Error('Cannot call a method that returns health element without providing a user for de/encryption');
     }

package/icc-x-api/icc-helement-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-helement-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-helement-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAAuD;AAGvD,kDAAiD;AAEjD,4BAA2B;AAC3B,iCAAgC;AAGhC,0EAAgG;AAChG,wEAAoE;AACpE,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AAOzD,mCAAmJ;AAGnJ,4DAAwE;AAExE,MAAa,eAAgB,SAAQ,wBAAc;IAGjD,IAAI,OAAO;QACT,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,CAAC,EAAE,oCAA4B,CAAC,aAAa,CAAC,CAAC,CAAA;IACnJ,CAAC;IAED,YACE,IAAY,EACZ,OAAkC,EACjB,MAAqB,EACrB,YAA8B,EAC9B,OAAoB,EACpB,OAAmB,EACnB,cAAuB,EACxC,gBAA+B,CAAC,OAAO,EAAE,MAAM,CAAC,EAChD,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAbtC,WAAM,GAAN,MAAM,CAAe;QACrB,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,YAAO,GAAP,OAAO,CAAa;QACpB,YAAO,GAAP,OAAO,CAAY;QACnB,mBAAc,GAAd,cAAc,CAAS;QAUxC,IAAI,CAAC,eAAe,GAAG,IAAA,4BAAoB,EAAC,aAAa,EAAE,gBAAgB,CAAC,CAAA;IAC9E,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACG,WAAW,CACf,IAAiB,EACjB,OAAuB,EACvB,CAAM,EACN,UAII,EAAE;;;YAEN,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YAC5D,MAAM,QAAQ,mCACT,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,KAAK,EAAE,yCAAyC,EAChD,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAChD,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,EAC9E,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAChE,KAAK,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,mCAAI,EAAE,EACrB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,EAAE,EACnB,eAAe,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,eAAe,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAC1E,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAC3E,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GACP,MAAA,OAAO,CAAC,YAAY,mCACpB,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY;gBACpB,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,CAAC;gBACzH,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YACtI,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,qBAAqB,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,mCAAI,KAAK,EAAE,CAAC,CAAA;YACrI,MAAM,gBAAgB,mCACjB,CAAC,OAAO,CAAC,YAAY;gBACtB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,CAAC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CACnI,CAAC,GACH,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,mBAAmB,mCAAI,EAAE,CAAC,CACxC,CAAA;YACD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,CACtF,QAAQ,EACR,oCAA4B,CAAC,aAAa,EAC1C,OAAO,CAAC,EAAE,EACV,GAAG,EACH,IAAI,EACJ,KAAK,EACL,gBAAgB,CACjB,CAAA;YACD,OAAO,IAAI,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAA;;KAClE;IAED,mBAAmB,CAAC,IAA2B;QAC7C,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,2BAA2B,CAAC,IAAiB,EAAE,IAA2B;QACxE,OAAO,IAAI;YACT,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;iBACpC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBAChD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;iBAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,oBAAoB,CAAC,IAA2B;QAC9C,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,4BAA4B,CAAC,IAAiB,EAAE,MAA+B;QAC7E,OAAO,MAAM;YACX,CAAC,CAAC,IAAI,CAAC,OAAO,CACV,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAClC;iBACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;iBAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,gBAAgB,CAAC,eAAuB;QACtC,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,wBAAwB,CAAC,IAAiB,EAAE,eAAuB;QACjE,OAAO,KAAK;aACT,gBAAgB,CAAC,eAAe,CAAC;aACjC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,iBAAiB,CAAC,IAAuB;QACvC,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,yBAAyB,CAAC,IAAiB,EAAE,IAAuB;QAClE,OAAO,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;IACjH,CAAC;IAED,2BAA2B,CAAC,eAAuB,EAAE,IAA+B;QAClF,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,mCAAmC,CAAC,IAAiB,EAAE,eAAuB,EAAE,IAA+B;QAC7G,OAAO,KAAK;aACT,2BAA2B,CAAC,eAAe,EAAE,IAAI,CAAC;aAClD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aAC9C,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,CAAC;IAED,6CAA6C,CAAC,SAAiB,EAAE,WAAmB;QAClF,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,qDAAqD,CAAC,IAAiB,EAAE,SAAiB,EAAE,WAAmB;QAC7G,OAAO,KAAK,CAAC,6CAA6C,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IACnI,CAAC;IAED,0DAA0D,CAAC,IAAiB,EAAE,SAAiB,EAAE,WAAqB;QACpH,OAAO,KAAK,CAAC,sDAAsD,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IAC5I,CAAC;IAEK,6CAA6C,CACjD,IAAiB,EACjB,SAAiB,EACjB,OAAuB,EACvB,YAAqB,KAAK;;;YAE1B,IAAI,gBAAgB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,CAAC,CAAA;YACzI,MAAM,IAAI,GAAG,MAAA,gBAAgB,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,IAAI,SAAS,CAAC,0CAAE,SAAS,CAAA;YAC5G,IAAI,IAAI,IAAI,SAAS,EAAE;gBACrB,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAA;aACtC;YACD,OAAO,SAAS;gBACd,CAAC,CAAC,IAAI,CAAC,0DAA0D,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC;gBACxF,CAAC,CAAC,IAAI,CAAC,qDAAqD,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;;KAChG;IAED,mBAAmB,CAAC,IAAoB;QACtC,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,2BAA2B,CAAC,IAAiB,EAAE,IAAoB;QACjE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAClH,CAAC;IACO,qBAAqB,CAAC,SAAiB,EAAE,IAAmB;QAClE,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;aAClD,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aAChD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aAC3C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,oBAAoB,CAAC,IAA2B;QAC9C,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,4BAA4B,CAAC,IAAiB,EAAE,MAAwB;QACtE,OAAO,MAAM;YACX,CAAC,CAAC,IAAI,CAAC,OAAO,CACV,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAClC;iBACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;iBAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,qCAAqC;IACrC;;;;;;;;;;;;;;;;OAgBG;IAEH,MAAM,CAAC,SAAiB,EAAE,OAAuB,EAAE,oBAAoB,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK;QAChG,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI;aACpB,0BAA0B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,CAAC;aAC3F,IAAI,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAC1B,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC;YAC/C,CAAC,CAAC,OAAO,CAAC,GAAG,CACT,iBAAiB;iBACd,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBACrB,OAAO,GAAG,CAAC,MAAM,CAAC;oBAChB;wBACE,SAAS,EAAE,KAAK,CAAC,OAAO;wBACxB,aAAa,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;qBACxH;iBACF,CAAC,CAAA;YACJ,CAAC,EAAE,EAAgE,CAAC;iBACnE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;iBACzC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,EAAE,CACpC,SAAS;gBACP,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC7E,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CACrF,CACJ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CACxB;aACA,IAAI,CAAC,CAAC,kBAA+C,EAAE,EAAE;YACxD,MAAM,KAAK,GAA4C,EAAE,CAAA;YAEzD,IAAI,oBAAoB,EAAE;gBACxB,OAAO,kBAAkB,CAAA;aAC1B;iBAAM;gBACL,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;oBAChC,IAAI,EAAE,CAAC,eAAe,EAAE;wBACtB,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,CAAA;wBACrC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;4BACxE,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,CAAA;yBAC/B;qBACF;gBACH,CAAC,CAAC,CAAA;gBACF,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;aACxD;QACH,CAAC,CAAC,CAAA;IACN,CAAC;IAED,+BAA+B,CAAC,SAAiB,EAAE,WAAmB;QACpE,OAAO,KAAK,CAAC,6CAA6C,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IAC5I,CAAC;IAED,oCAAoC,CAAC,SAAiB,EAAE,WAAqB;QAC3E,OAAO,KAAK;aACT,sDAAsD,CAAC,SAAS,EAAE,WAAW,CAAC;aAC9E,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IAC5D,CAAC;IAED,OAAO,CAAC,IAAiB,EAAE,cAA2C;QACpE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,CAAA;IACjF,CAAC;IAEO,SAAS,CAAC,KAAa,EAAE,cAA2C;QAC1E,OAAO,OAAO,CAAC,GAAG,CAChB,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAC/B,EAAE,EACF,oCAA4B,CAAC,aAAa,EAC1C,IAAI,CAAC,eAAe,EACpB,KAAK,EACL,KAAK,EACL,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CACnC,CACF,CACF,CAAA;IACH,CAAC;IAED,eAAe,CAAC,IAAiB,EAAE,GAAgC;QACjE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;IACpE,CAAC;IAED,OAAO,CAAC,WAAmB,EAAE,GAAgC;QAC3D,OAAO,OAAO,CAAC,GAAG,CAChB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACb,IAAI,CAAC,MAAM,CAAC,IAAI;aACb,aAAa,CAAC,EAAE,EAAE,oCAA4B,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;aACjG,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAChC,CACF,CAAA;IACH,CAAC;IAED,sBAAsB,CAAC,eAAwB,EAAE,KAAc,EAAE,IAA+B;QAC9F,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,gBAAgB,CACd,IAAiB,EACjB,eAAwB,EACxB,KAAc,EACd,IAA+B;QAE/B,OAAO,KAAK;aACT,sBAAsB,CAAC,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC;aACpD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,IAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACrG,CAAC;IAED,qCAAqC;IACrC,sBAAsB,CAAC,IAAiB,EAAE,OAAuB,EAAE,KAAqB,EAAE,KAAa;QACrG,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE;YACrC,SAAS,EAAE,KAAK,CAAC,EAAE;YACnB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW;YACjD,KAAK,EAAE,KAAK;YACZ,gBAAgB,EAAE,KAAK,CAAC,SAAS;YACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;YACb,OAAO,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,0DAA0D;IAC1D,YAAY,CAAC,IAAY;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACzB,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC;YACrB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACV,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACV,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACb,EAAE,EAAE,IAAI;SACT,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACG,kBAAkB,CAAC,aAAmC;;YAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,oCAA4B,CAAC,aAAa,EAAE,EAAE,SAAS,CAAC,CAAA;QACnI,CAAC;KAAA;IAED;;OAEG;IACG,cAAc,CAAC,aAAmC;;YACtD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,oCAA4B,CAAC,aAAa,EAAE,CAAC,CAAA;QACrH,CAAC;KAAA;IAED;;;;;;;;;;;;;OAaG;IACG,SAAS,CACb,UAAkB,EAClB,aAAmC,EACnC,UAII,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACrE,CAAC;KAAA;IACD;;;;;;;;;;;;;OAaG;IACG,aAAa,CACjB,aAAmC,EACnC,SAMC;;YAED,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAA;QACrF,CAAC;KAAA;IACD;;;;;;;;;;;;;OAaG;IACG,gBAAgB,CACpB,aAAmC,EACnC,SAMC;;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,8CAA8C;YAC9C,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,aAAa,EAAE,oCAA4B,CAAC,aAAa,CAAC,CAAA;YACjJ,MAAM,aAAa,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAA;YAC/H,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI;iBACpB,0CAA0C,CACzC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,oCAA4B,CAAC,aAAa,EAAE,EAC3E,IAAI,EACJ,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;oBAClD,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;oBAC/C,oBAAoB,EAAE,OAAO,CAAC,cAAc;oBAC5C,cAAc,EAAE,SAAS;iBAC1B;aACF,CAAC,CACH,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,CACvC;iBACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACvF,CAAC;KAAA;IAED,yBAAyB,CACvB,MAA4B;QAE5B,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,aAAa,EAAE,CAAC,CAAA;IACvI,CAAC;IAED,mBAAmB,CAAC,MAA4B;QAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,aAAa,EAAE,EAAE,SAAS,CAAC,CAAA;IACnH,CAAC;IAEK,8BAA8B,CAClC,UAA8C,EAC9C,MAAiD,EACjD,UAA2D,EAC3D,UAA+B,EAAE;;YAEjC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAEvD,OAAO,MAAM,IAAA,+BAAuB,EAClC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,oCAA4B,CAAC,aAAa,EAC1C,UAAU,EACV,MAAM,EACN,UAAU,EACV,OAAO,EACP,CAAO,SAAS,EAAE,EAAE,gDAAC,OAAA,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA,GAAA,CAC3G,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAA;QACxC,CAAC;KAAA;IAED,uCAAuC,CAAC,MAAqB,EAAE,SAAmB;QAChF,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,iCAAiC,CAC7E,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,aAAa,EAAE,EAC5D,SAAS,CACV,CAAA;IACH,CAAC;CACF;AAhgBD,0CAggBC","sourcesContent":["import { IccAuthApi, IccHelementApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\n\nimport * as models from '../icc-api/model/models'\n\nimport * as _ from 'lodash'\nimport * as moment from 'moment'\nimport { FilterChainHealthElement, HealthElement, PaginatedListHealthElement } from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { SecureDelegation } from '../icc-api/model/SecureDelegation'\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { ShareResult } from './utils/ShareResult'\nimport { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest'\nimport RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum\nimport { XHR } from '../icc-api/api/XHR'\nimport { IccUserXApi } from './icc-user-x-api'\nimport { EncryptedFieldsManifest, EntityWithDelegationTypeName, parseEncryptedFields, subscribeToEntityEvents, SubscriptionOptions } from './utils'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\nimport { AbstractFilter } from './filters/filters'\nimport { Connection, ConnectionImpl } from '../icc-api/model/Connection'\n\nexport class IccHelementXApi extends IccHelementApi implements EncryptedEntityXApi<models.HealthElement> {\n  private readonly encryptedFields: EncryptedFieldsManifest\n\n  get headers(): Promise<Array<XHR.Header>> {\n    return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, EntityWithDelegationTypeName.HealthElement))\n  }\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    private readonly crypto: IccCryptoXApi,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly userApi: IccUserXApi,\n    private readonly authApi: IccAuthApi,\n    private readonly autofillAuthor: boolean,\n    encryptedKeys: Array<string> = ['descr', 'note'],\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.encryptedFields = parseEncryptedFields(encryptedKeys, 'HealthElement.')\n  }\n\n  /**\n   * Creates a new instance of health element with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this health element refers to.\n   * @param h initialised data for the health element. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used.\n   * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the health element. The default value will be a\n   * secret id of patient known by the topmost parent in the current data owner hierarchy if the confidential is set to false, else a secret id that\n   * the data owner did not share with any of his parents.\n   * - confidential: if true, the entity will be created as confidential. Confidential entities are not shared with auto-delegations, and the default\n   * foreign key used is any key that is not shared with any of the data owner parents. By default entities are created as non-confidential.\n   * @return a new instance of health element.\n   */\n  async newInstance(\n    user: models.User,\n    patient: models.Patient,\n    h: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: AccessLevelEnum }\n      preferredSfk?: string\n      confidential?: boolean\n    } = {}\n  ) {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    const helement = {\n      ...(h ?? {}),\n      _type: 'org.taktik.icure.entities.HealthElement',\n      id: h?.id ?? this.crypto.primitives.randomUuid(),\n      created: h?.created ?? new Date().getTime(),\n      modified: h?.modified ?? new Date().getTime(),\n      responsible: h?.responsible ?? (this.autofillAuthor ? dataOwnerId : undefined),\n      author: h?.author ?? (this.autofillAuthor ? user.id : undefined),\n      codes: h?.codes ?? [],\n      tags: h?.tags ?? [],\n      healthElementId: h?.healthElementId ?? this.crypto.primitives.randomUuid(),\n      openingDate: h?.openingDate ?? parseInt(moment().format('YYYYMMDDHHmmss')),\n    }\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk =\n      options.preferredSfk ??\n      (options?.confidential\n        ? await this.crypto.confidential.getConfidentialSecretId({ entity: patient, type: EntityWithDelegationTypeName.Patient })\n        : await this.crypto.confidential.getAnySecretIdSharedWithParents({ entity: patient, type: EntityWithDelegationTypeName.Patient }))\n    if (!sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id} for confidential=${options?.confidential ?? false}`)\n    const extraDelegations = {\n      ...(options.confidential\n        ? {}\n        : Object.fromEntries(\n            [...(user.autoDelegations?.all ?? []), ...(user.autoDelegations?.medicalInformation ?? [])].map((d) => [d, AccessLevelEnum.WRITE])\n          )),\n      ...(options?.additionalDelegates ?? {}),\n    }\n    const initialisationInfo = await this.crypto.xapi.entityWithInitialisedEncryptedMetadata(\n      helement,\n      EntityWithDelegationTypeName.HealthElement,\n      patient.id,\n      sfk,\n      true,\n      false,\n      extraDelegations\n    )\n    return new models.HealthElement(initialisationInfo.updatedEntity)\n  }\n\n  createHealthElement(body?: models.HealthElement): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  createHealthElementWithUser(user: models.User, body?: models.HealthElement): Promise<models.HealthElement | any> {\n    return body\n      ? this.encrypt(user, [_.cloneDeep(body)])\n          .then((hes) => super.createHealthElement(hes[0]))\n          .then((he) => this.decryptWithUser(user, [he]))\n          .then((hes) => hes[0])\n      : Promise.resolve(null)\n  }\n\n  createHealthElements(body?: Array<HealthElement>): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  createHealthElementsWithUser(user: models.User, bodies?: models.HealthElement[]): Promise<models.HealthElement[] | any> {\n    return bodies\n      ? this.encrypt(\n          user,\n          bodies.map((c) => _.cloneDeep(c))\n        )\n          .then((hes) => super.createHealthElements(hes))\n          .then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes))\n      : Promise.resolve(null)\n  }\n\n  getHealthElement(healthElementId: string): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  getHealthElementWithUser(user: models.User, healthElementId: string): Promise<models.HealthElement> {\n    return super\n      .getHealthElement(healthElementId)\n      .then((he) => this.decryptWithUser(user, [he]))\n      .then((hes) => hes[0])\n  }\n\n  getHealthElements(body?: models.ListOfIds): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  getHealthElementsWithUser(user: models.User, body?: models.ListOfIds): Promise<models.HealthElement[]> {\n    return super.getHealthElements(body).then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes))\n  }\n\n  newHealthElementDelegations(healthElementId: string, body?: Array<models.Delegation>): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  newHealthElementDelegationsWithUser(user: models.User, healthElementId: string, body?: Array<models.Delegation>): Promise<models.HealthElement> {\n    return super\n      .newHealthElementDelegations(healthElementId, body)\n      .then((he) => this.decryptWithUser(user, [he]))\n      .then((he) => he[0])\n  }\n\n  findHealthElementsByHCPartyPatientForeignKeys(hcPartyId: string, secretFKeys: string): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  findHealthElementsByHCPartyPatientForeignKeysWithUser(user: models.User, hcPartyId: string, secretFKeys: string): Promise<HealthElement[]> {\n    return super.findHealthElementsByHCPartyPatientForeignKeys(hcPartyId, secretFKeys).then((hes) => this.decryptWithUser(user, hes))\n  }\n\n  findHealthElementsByHCPartyPatientForeignKeysArrayWithUser(user: models.User, hcPartyId: string, secretFKeys: string[]): Promise<HealthElement[]> {\n    return super.findHealthElementsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys).then((hes) => this.decryptWithUser(user, hes))\n  }\n\n  async findHealthElementsByHCPartyAndPatientWithUser(\n    user: models.User,\n    hcPartyId: string,\n    patient: models.Patient,\n    usingPost: boolean = false\n  ): Promise<models.HealthElement[]> {\n    let keysAndHcPartyId = await this.crypto.xapi.secretIdsForHcpHierarchyOf({ entity: patient, type: EntityWithDelegationTypeName.Patient })\n    const keys = keysAndHcPartyId.find((secretForeignKeys) => secretForeignKeys.ownerId == hcPartyId)?.extracted\n    if (keys == undefined) {\n      throw Error('No delegation for user')\n    }\n    return usingPost\n      ? this.findHealthElementsByHCPartyPatientForeignKeysArrayWithUser(user, hcPartyId, keys)\n      : this.findHealthElementsByHCPartyPatientForeignKeysWithUser(user, hcPartyId, keys.join(','))\n  }\n\n  modifyHealthElement(body?: HealthElement): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  modifyHealthElementWithUser(user: models.User, body?: HealthElement): Promise<HealthElement | any> {\n    return body ? this.modifyHealthElementAs(this.dataOwnerApi.getDataOwnerIdOf(user), body) : Promise.resolve(null)\n  }\n  private modifyHealthElementAs(dataOwner: string, body: HealthElement): Promise<HealthElement> {\n    return this.encryptAs(dataOwner, [_.cloneDeep(body)])\n      .then((hes) => super.modifyHealthElement(hes[0]))\n      .then((he) => this.decrypt(dataOwner, [he]))\n      .then((hes) => hes[0])\n  }\n\n  modifyHealthElements(body?: Array<HealthElement>): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  modifyHealthElementsWithUser(user: models.User, bodies?: HealthElement[]): Promise<HealthElement[] | any> {\n    return bodies\n      ? this.encrypt(\n          user,\n          bodies.map((c) => _.cloneDeep(c))\n        )\n          .then((hes) => super.modifyHealthElements(hes))\n          .then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes))\n      : Promise.resolve(null)\n  }\n\n  // noinspection JSUnusedGlobalSymbols\n  /**\n   * 1. Check whether there is a delegation with 'hcpartyId' or not.\n   * 2. 'fetchHcParty[hcpartyId][1]': is encrypted AES exchange key by RSA public key of him.\n   * 3. Obtain the AES exchange key, by decrypting the previous step value with hcparty private key\n   *      3.1.  KeyPair should be fetch from cache (in jwk)\n   *      3.2.  if it doesn't exist in the cache, it has to be loaded from Browser Local store, and then import it to WebCrypto\n   * 4. Obtain the array of delegations which are delegated to his ID (hcpartyId) in this patient\n   * 5. Decrypt and collect all keys (secretForeignKeys) within delegations of previous step (with obtained AES key of step 4)\n   * 6. Do the REST call to get all helements with (allSecretForeignKeysDelimitedByComa, hcpartyId)\n   *\n   * After these painful steps, you have the helements of the patient.\n   *\n   * @param hcpartyId\n   * @param patient (Promise)\n   * @param keepObsoleteVersions\n   * @param usingPost\n   */\n\n  findBy(hcpartyId: string, patient: models.Patient, keepObsoleteVersions = false, usingPost = false) {\n    return this.crypto.xapi\n      .secretIdsForHcpHierarchyOf({ entity: patient, type: EntityWithDelegationTypeName.Patient })\n      .then((secretForeignKeys) =>\n        secretForeignKeys && secretForeignKeys.length > 0\n          ? Promise.all(\n              secretForeignKeys\n                .reduce((acc, level) => {\n                  return acc.concat([\n                    {\n                      hcpartyId: level.ownerId,\n                      extractedKeys: level.extracted.filter((key) => !acc.some((previousLevel) => previousLevel.extractedKeys.includes(key))),\n                    },\n                  ])\n                }, [] as Array<{ hcpartyId: string; extractedKeys: Array<string> }>)\n                .filter((l) => l.extractedKeys.length > 0)\n                .map(({ hcpartyId, extractedKeys }) =>\n                  usingPost\n                    ? this.findByHCPartyPatientSecretFKeysArray(hcpartyId, _.uniq(extractedKeys))\n                    : this.findByHCPartyPatientSecretFKeys(hcpartyId, _.uniq(extractedKeys).join(','))\n                )\n            ).then((results) => _.uniqBy(_.flatMap(results), (x) => x.id))\n          : Promise.resolve([])\n      )\n      .then((decryptedHelements: Array<models.HealthElement>) => {\n        const byIds: { [key: string]: models.HealthElement } = {}\n\n        if (keepObsoleteVersions) {\n          return decryptedHelements\n        } else {\n          decryptedHelements.forEach((he) => {\n            if (he.healthElementId) {\n              const phe = byIds[he.healthElementId]\n              if (!phe || !phe.modified || (he.modified && phe.modified < he.modified)) {\n                byIds[he.healthElementId] = he\n              }\n            }\n          })\n          return _.values(byIds).filter((s: any) => !s.endOfLife)\n        }\n      })\n  }\n\n  findByHCPartyPatientSecretFKeys(hcPartyId: string, secretFKeys: string): Promise<Array<models.Contact> | any> {\n    return super.findHealthElementsByHCPartyPatientForeignKeys(hcPartyId, secretFKeys).then((helements) => this.decrypt(hcPartyId, helements))\n  }\n\n  findByHCPartyPatientSecretFKeysArray(hcPartyId: string, secretFKeys: string[]): Promise<Array<models.Contact> | any> {\n    return super\n      .findHealthElementsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys)\n      .then((helements) => this.decrypt(hcPartyId, helements))\n  }\n\n  encrypt(user: models.User, healthElements: Array<models.HealthElement>): Promise<Array<models.HealthElement>> {\n    return this.encryptAs(this.dataOwnerApi.getDataOwnerIdOf(user), healthElements)\n  }\n\n  private encryptAs(owner: string, healthElements: Array<models.HealthElement>): Promise<Array<models.HealthElement>> {\n    return Promise.all(\n      healthElements.map((he) =>\n        this.crypto.xapi.tryEncryptEntity(\n          he,\n          EntityWithDelegationTypeName.HealthElement,\n          this.encryptedFields,\n          false,\n          false,\n          (x) => new models.HealthElement(x)\n        )\n      )\n    )\n  }\n\n  decryptWithUser(user: models.User, hes: Array<models.HealthElement>): Promise<Array<models.HealthElement>> {\n    return this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes)\n  }\n\n  decrypt(dataOwnerId: string, hes: Array<models.HealthElement>): Promise<Array<models.HealthElement>> {\n    return Promise.all(\n      hes.map((he) =>\n        this.crypto.xapi\n          .decryptEntity(he, EntityWithDelegationTypeName.HealthElement, (x) => new models.HealthElement(x))\n          .then(({ entity }) => entity)\n      )\n    )\n  }\n\n  filterHealthElementsBy(startDocumentId?: string, limit?: number, body?: FilterChainHealthElement): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  filterByWithUser(\n    user: models.User,\n    startDocumentId?: string,\n    limit?: number,\n    body?: FilterChainHealthElement\n  ): Promise<PaginatedListHealthElement> {\n    return super\n      .filterHealthElementsBy(startDocumentId, limit, body)\n      .then((pl) => this.decryptWithUser(user, pl.rows!).then((dr) => Object.assign(pl, { rows: dr })))\n  }\n\n  // noinspection JSUnusedGlobalSymbols\n  serviceToHealthElement(user: models.User, patient: models.Patient, heSvc: models.Service, descr: string) {\n    return this.newInstance(user, patient, {\n      idService: heSvc.id,\n      author: heSvc.author,\n      responsible: heSvc.responsible,\n      openingDate: heSvc.valueDate || heSvc.openingDate,\n      descr: descr,\n      idOpeningContact: heSvc.contactId,\n      modified: heSvc.modified,\n      created: heSvc.created,\n      codes: heSvc.codes,\n      tags: heSvc.tags,\n    }).then((he) => {\n      return this.createHealthElement(he)\n    })\n  }\n\n  // noinspection JSUnusedGlobalSymbols, JSMethodCanBeStatic\n  stringToCode(code: string) {\n    const c = code.split('|')\n    return new models.Code({\n      type: c[0],\n      code: c[1],\n      version: c[2],\n      id: code,\n    })\n  }\n\n  /**\n   * @param healthElement a health element\n   * @return the id of the patient that the health element refers to, retrieved from the encrypted metadata. Normally there should only be one element\n   * in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(healthElement: models.HealthElement): Promise<string[]> {\n    return this.crypto.xapi.owningEntityIdsOf({ entity: healthElement, type: EntityWithDelegationTypeName.HealthElement }, undefined)\n  }\n\n  /**\n   * @return if the logged data owner has write access to the content of the given health element\n   */\n  async hasWriteAccess(healthElement: models.HealthElement): Promise<boolean> {\n    return this.crypto.xapi.hasWriteAccess({ entity: healthElement, type: EntityWithDelegationTypeName.HealthElement })\n  }\n\n  /**\n   * Share an existing health element with other data owners, allowing them to access the non-encrypted data of the health element and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the health element.\n   * @param healthElement the health element to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * health element does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this health element refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWith(\n    delegateId: string,\n    healthElement: models.HealthElement,\n    options: {\n      requestedPermissions?: RequestedPermissionEnum\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.HealthElement> {\n    return this.shareWithMany(healthElement, { [delegateId]: options })\n  }\n  /**\n   * Share an existing health element with other data owners, allowing them to access the non-encrypted data of the health element and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the health element.\n   * @param healthElement the health element to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * health element does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this health element refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWithMany(\n    healthElement: models.HealthElement,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.HealthElement> {\n    return (await this.tryShareWithMany(healthElement, delegates)).updatedEntityOrThrow\n  }\n  /**\n   * Share an existing health element with other data owners, allowing them to access the non-encrypted data of the health element and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param healthElement the health element to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * health element does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this health element refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async tryShareWithMany(\n    healthElement: models.HealthElement,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<ShareResult<models.HealthElement>> {\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    // All entities should have an encryption key.\n    const entityWithEncryptionKey = await this.crypto.xapi.ensureEncryptionKeysInitialised(healthElement, EntityWithDelegationTypeName.HealthElement)\n    const updatedEntity = entityWithEncryptionKey ? await this.modifyHealthElementAs(self, entityWithEncryptionKey) : healthElement\n    return this.crypto.xapi\n      .simpleShareOrUpdateEncryptedEntityMetadata(\n        { entity: updatedEntity, type: EntityWithDelegationTypeName.HealthElement },\n        true,\n        Object.fromEntries(\n          Object.entries(delegates).map(([delegateId, options]) => [\n            delegateId,\n            {\n              requestedPermissions: options.requestedPermissions,\n              shareEncryptionKeys: options.shareEncryptionKey,\n              shareOwningEntityIds: options.sharePatientId,\n              shareSecretIds: undefined,\n            },\n          ])\n        ),\n        (x) => this.bulkShareHealthElements(x)\n      )\n      .then((r) => r.mapSuccessAsync((e) => this.decrypt(self, [e]).then((es) => es[0])))\n  }\n\n  getDataOwnersWithAccessTo(\n    entity: models.HealthElement\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: AccessLevelEnum }; hasUnknownAnonymousDataOwners: boolean }> {\n    return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: EntityWithDelegationTypeName.HealthElement })\n  }\n\n  getEncryptionKeysOf(entity: models.HealthElement): Promise<string[]> {\n    return this.crypto.xapi.encryptionKeysOf({ entity, type: EntityWithDelegationTypeName.HealthElement }, undefined)\n  }\n\n  async subscribeToHealthElementEvents(\n    eventTypes: ('CREATE' | 'UPDATE' | 'DELETE')[],\n    filter: AbstractFilter<HealthElement> | undefined,\n    eventFired: (healthElement: HealthElement) => Promise<void>,\n    options: SubscriptionOptions = {}\n  ): Promise<Connection> {\n    const currentUser = await this.userApi.getCurrentUser()\n\n    return await subscribeToEntityEvents(\n      this.host,\n      this.authApi,\n      EntityWithDelegationTypeName.HealthElement,\n      eventTypes,\n      filter,\n      eventFired,\n      options,\n      async (encrypted) => (await this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(currentUser), [encrypted]))[0]\n    ).then((rs) => new ConnectionImpl(rs))\n  }\n\n  createDelegationDeAnonymizationMetadata(entity: HealthElement, delegates: string[]): Promise<void> {\n    return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo(\n      { entity, type: EntityWithDelegationTypeName.HealthElement },\n      delegates\n    )\n  }\n}\n"]}
+{"version":3,"file":"icc-helement-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-helement-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAAuD;AAGvD,kDAAiD;AAEjD,4BAA2B;AAC3B,iCAAgC;AAGhC,0EAAgG;AAChG,wEAAoE;AACpE,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AAOzD,mCAAmJ;AAGnJ,4DAAwE;AAExE,MAAa,eAAgB,SAAQ,wBAAc;IAGjD,IAAI,OAAO;QACT,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,CAAC,EAAE,oCAA4B,CAAC,aAAa,CAAC,CAAC,CAAA;IACnJ,CAAC;IAED,YACE,IAAY,EACZ,OAAkC,EACjB,MAAqB,EACrB,YAA8B,EAC9B,OAAoB,EACpB,OAAmB,EACnB,cAAuB,EACxC,gBAA+B,CAAC,OAAO,EAAE,MAAM,CAAC,EAChD,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAbtC,WAAM,GAAN,MAAM,CAAe;QACrB,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,YAAO,GAAP,OAAO,CAAa;QACpB,YAAO,GAAP,OAAO,CAAY;QACnB,mBAAc,GAAd,cAAc,CAAS;QAUxC,IAAI,CAAC,eAAe,GAAG,IAAA,4BAAoB,EAAC,aAAa,EAAE,gBAAgB,CAAC,CAAA;IAC9E,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACG,WAAW,CACf,IAAiB,EACjB,OAAuB,EACvB,CAAM,EACN,UAII,EAAE;;;YAEN,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YAC5D,MAAM,QAAQ,mCACT,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,KAAK,EAAE,yCAAyC,EAChD,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAChD,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,EAC9E,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAChE,KAAK,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,mCAAI,EAAE,EACrB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,EAAE,EACnB,eAAe,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,eAAe,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAC1E,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAC3E,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GACP,MAAA,OAAO,CAAC,YAAY,mCACpB,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY;gBACpB,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,CAAC;gBACzH,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YACtI,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,qBAAqB,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,mCAAI,KAAK,EAAE,CAAC,CAAA;YACrI,MAAM,gBAAgB,mCACjB,CAAC,OAAO,CAAC,YAAY;gBACtB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,CAAC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CACnI,CAAC,GACH,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,mBAAmB,mCAAI,EAAE,CAAC,CACxC,CAAA;YACD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,CACtF,QAAQ,EACR,oCAA4B,CAAC,aAAa,EAC1C,OAAO,CAAC,EAAE,EACV,GAAG,EACH,IAAI,EACJ,KAAK,EACL,gBAAgB,CACjB,CAAA;YACD,OAAO,IAAI,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAA;;KAClE;IAED,mBAAmB,CAAC,IAA2B;QAC7C,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,2BAA2B,CAAC,IAAiB,EAAE,IAA2B;QACxE,OAAO,IAAI;YACT,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;iBACpC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBAChD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;iBAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,oBAAoB,CAAC,IAA2B;QAC9C,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,4BAA4B,CAAC,IAAiB,EAAE,MAA+B;QAC7E,OAAO,MAAM;YACX,CAAC,CAAC,IAAI,CAAC,OAAO,CACV,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAClC;iBACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;iBAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,gBAAgB,CAAC,eAAuB;QACtC,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,wBAAwB,CAAC,IAAiB,EAAE,eAAuB;QACjE,OAAO,KAAK;aACT,gBAAgB,CAAC,eAAe,CAAC;aACjC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,iBAAiB,CAAC,IAAuB;QACvC,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,yBAAyB,CAAC,IAAiB,EAAE,IAAuB;QAClE,OAAO,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;IACjH,CAAC;IAED,2BAA2B,CAAC,eAAuB,EAAE,IAA+B;QAClF,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,6CAA6C,CAAC,SAAiB,EAAE,WAAmB;QAClF,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,qDAAqD,CAAC,IAAiB,EAAE,SAAiB,EAAE,WAAmB;QAC7G,OAAO,KAAK,CAAC,6CAA6C,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IACnI,CAAC;IAED,0DAA0D,CAAC,IAAiB,EAAE,SAAiB,EAAE,WAAqB;QACpH,OAAO,KAAK,CAAC,sDAAsD,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IAC5I,CAAC;IAEK,6CAA6C,CACjD,IAAiB,EACjB,SAAiB,EACjB,OAAuB,EACvB,YAAqB,KAAK;;;YAE1B,IAAI,gBAAgB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,CAAC,CAAA;YACzI,MAAM,IAAI,GAAG,MAAA,gBAAgB,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,IAAI,SAAS,CAAC,0CAAE,SAAS,CAAA;YAC5G,IAAI,IAAI,IAAI,SAAS,EAAE;gBACrB,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAA;aACtC;YACD,OAAO,SAAS;gBACd,CAAC,CAAC,IAAI,CAAC,0DAA0D,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC;gBACxF,CAAC,CAAC,IAAI,CAAC,qDAAqD,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;;KAChG;IAED,mBAAmB,CAAC,IAAoB;QACtC,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,2BAA2B,CAAC,IAAiB,EAAE,IAAoB;QACjE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAClH,CAAC;IACO,qBAAqB,CAAC,SAAiB,EAAE,IAAmB;QAClE,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;aAClD,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aAChD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aAC3C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,oBAAoB,CAAC,IAA2B;QAC9C,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,4BAA4B,CAAC,IAAiB,EAAE,MAAwB;QACtE,OAAO,MAAM;YACX,CAAC,CAAC,IAAI,CAAC,OAAO,CACV,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAClC;iBACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;iBAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,qCAAqC;IACrC;;;;;;;;;;;;;;;;OAgBG;IAEH,MAAM,CAAC,SAAiB,EAAE,OAAuB,EAAE,oBAAoB,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK;QAChG,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI;aACpB,0BAA0B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,CAAC;aAC3F,IAAI,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAC1B,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC;YAC/C,CAAC,CAAC,OAAO,CAAC,GAAG,CACT,iBAAiB;iBACd,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBACrB,OAAO,GAAG,CAAC,MAAM,CAAC;oBAChB;wBACE,SAAS,EAAE,KAAK,CAAC,OAAO;wBACxB,aAAa,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;qBACxH;iBACF,CAAC,CAAA;YACJ,CAAC,EAAE,EAAgE,CAAC;iBACnE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;iBACzC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,EAAE,CACpC,SAAS;gBACP,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC7E,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CACrF,CACJ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CACxB;aACA,IAAI,CAAC,CAAC,kBAA+C,EAAE,EAAE;YACxD,MAAM,KAAK,GAA4C,EAAE,CAAA;YAEzD,IAAI,oBAAoB,EAAE;gBACxB,OAAO,kBAAkB,CAAA;aAC1B;iBAAM;gBACL,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;oBAChC,IAAI,EAAE,CAAC,eAAe,EAAE;wBACtB,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,CAAA;wBACrC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;4BACxE,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,CAAA;yBAC/B;qBACF;gBACH,CAAC,CAAC,CAAA;gBACF,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;aACxD;QACH,CAAC,CAAC,CAAA;IACN,CAAC;IAED,+BAA+B,CAAC,SAAiB,EAAE,WAAmB;QACpE,OAAO,KAAK,CAAC,6CAA6C,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IAC5I,CAAC;IAED,oCAAoC,CAAC,SAAiB,EAAE,WAAqB;QAC3E,OAAO,KAAK;aACT,sDAAsD,CAAC,SAAS,EAAE,WAAW,CAAC;aAC9E,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IAC5D,CAAC;IAED,OAAO,CAAC,IAAiB,EAAE,cAA2C;QACpE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,CAAA;IACjF,CAAC;IAEO,SAAS,CAAC,KAAa,EAAE,cAA2C;QAC1E,OAAO,OAAO,CAAC,GAAG,CAChB,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAC/B,EAAE,EACF,oCAA4B,CAAC,aAAa,EAC1C,IAAI,CAAC,eAAe,EACpB,KAAK,EACL,KAAK,EACL,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CACnC,CACF,CACF,CAAA;IACH,CAAC;IAED,eAAe,CAAC,IAAiB,EAAE,GAAgC;QACjE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;IACpE,CAAC;IAED,OAAO,CAAC,WAAmB,EAAE,GAAgC;QAC3D,OAAO,OAAO,CAAC,GAAG,CAChB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACb,IAAI,CAAC,MAAM,CAAC,IAAI;aACb,aAAa,CAAC,EAAE,EAAE,oCAA4B,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;aACjG,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAChC,CACF,CAAA;IACH,CAAC;IAED,sBAAsB,CAAC,eAAwB,EAAE,KAAc,EAAE,IAA+B;QAC9F,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,gBAAgB,CACd,IAAiB,EACjB,eAAwB,EACxB,KAAc,EACd,IAA+B;QAE/B,OAAO,KAAK;aACT,sBAAsB,CAAC,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC;aACpD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,IAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACrG,CAAC;IAED,qCAAqC;IACrC,sBAAsB,CAAC,IAAiB,EAAE,OAAuB,EAAE,KAAqB,EAAE,KAAa;QACrG,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE;YACrC,SAAS,EAAE,KAAK,CAAC,EAAE;YACnB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW;YACjD,KAAK,EAAE,KAAK;YACZ,gBAAgB,EAAE,KAAK,CAAC,SAAS;YACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;YACb,OAAO,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,0DAA0D;IAC1D,YAAY,CAAC,IAAY;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACzB,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC;YACrB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACV,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACV,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACb,EAAE,EAAE,IAAI;SACT,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACG,kBAAkB,CAAC,aAAmC;;YAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,oCAA4B,CAAC,aAAa,EAAE,EAAE,SAAS,CAAC,CAAA;QACnI,CAAC;KAAA;IAED;;OAEG;IACG,cAAc,CAAC,aAAmC;;YACtD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,oCAA4B,CAAC,aAAa,EAAE,CAAC,CAAA;QACrH,CAAC;KAAA;IAED;;;;;;;;;;;;;OAaG;IACG,SAAS,CACb,UAAkB,EAClB,aAAmC,EACnC,UAII,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACrE,CAAC;KAAA;IACD;;;;;;;;;;;;;OAaG;IACG,aAAa,CACjB,aAAmC,EACnC,SAMC;;YAED,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAA;QACrF,CAAC;KAAA;IACD;;;;;;;;;;;;;OAaG;IACG,gBAAgB,CACpB,aAAmC,EACnC,SAMC;;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,8CAA8C;YAC9C,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,aAAa,EAAE,oCAA4B,CAAC,aAAa,CAAC,CAAA;YACjJ,MAAM,aAAa,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAA;YAC/H,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI;iBACpB,0CAA0C,CACzC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,oCAA4B,CAAC,aAAa,EAAE,EAC3E,IAAI,EACJ,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;oBAClD,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;oBAC/C,oBAAoB,EAAE,OAAO,CAAC,cAAc;oBAC5C,cAAc,EAAE,SAAS;iBAC1B;aACF,CAAC,CACH,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,CACvC;iBACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACvF,CAAC;KAAA;IAED,yBAAyB,CACvB,MAA4B;QAE5B,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,aAAa,EAAE,CAAC,CAAA;IACvI,CAAC;IAED,mBAAmB,CAAC,MAA4B;QAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,aAAa,EAAE,EAAE,SAAS,CAAC,CAAA;IACnH,CAAC;IAEK,8BAA8B,CAClC,UAA8C,EAC9C,MAAiD,EACjD,UAA2D,EAC3D,UAA+B,EAAE;;YAEjC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAEvD,OAAO,MAAM,IAAA,+BAAuB,EAClC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,oCAA4B,CAAC,aAAa,EAC1C,UAAU,EACV,MAAM,EACN,UAAU,EACV,OAAO,EACP,CAAO,SAAS,EAAE,EAAE,gDAAC,OAAA,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA,GAAA,CAC3G,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAA;QACxC,CAAC;KAAA;IAED,uCAAuC,CAAC,MAAqB,EAAE,SAAmB;QAChF,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,iCAAiC,CAC7E,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,aAAa,EAAE,EAC5D,SAAS,CACV,CAAA;IACH,CAAC;CACF;AAzfD,0CAyfC","sourcesContent":["import { IccAuthApi, IccHelementApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\n\nimport * as models from '../icc-api/model/models'\n\nimport * as _ from 'lodash'\nimport * as moment from 'moment'\nimport { FilterChainHealthElement, HealthElement, PaginatedListHealthElement } from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { SecureDelegation } from '../icc-api/model/SecureDelegation'\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { ShareResult } from './utils/ShareResult'\nimport { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest'\nimport RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum\nimport { XHR } from '../icc-api/api/XHR'\nimport { IccUserXApi } from './icc-user-x-api'\nimport { EncryptedFieldsManifest, EntityWithDelegationTypeName, parseEncryptedFields, subscribeToEntityEvents, SubscriptionOptions } from './utils'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\nimport { AbstractFilter } from './filters/filters'\nimport { Connection, ConnectionImpl } from '../icc-api/model/Connection'\n\nexport class IccHelementXApi extends IccHelementApi implements EncryptedEntityXApi<models.HealthElement> {\n  private readonly encryptedFields: EncryptedFieldsManifest\n\n  get headers(): Promise<Array<XHR.Header>> {\n    return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, EntityWithDelegationTypeName.HealthElement))\n  }\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    private readonly crypto: IccCryptoXApi,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly userApi: IccUserXApi,\n    private readonly authApi: IccAuthApi,\n    private readonly autofillAuthor: boolean,\n    encryptedKeys: Array<string> = ['descr', 'note'],\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.encryptedFields = parseEncryptedFields(encryptedKeys, 'HealthElement.')\n  }\n\n  /**\n   * Creates a new instance of health element with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this health element refers to.\n   * @param h initialised data for the health element. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used.\n   * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the health element. The default value will be a\n   * secret id of patient known by the topmost parent in the current data owner hierarchy if the confidential is set to false, else a secret id that\n   * the data owner did not share with any of his parents.\n   * - confidential: if true, the entity will be created as confidential. Confidential entities are not shared with auto-delegations, and the default\n   * foreign key used is any key that is not shared with any of the data owner parents. By default entities are created as non-confidential.\n   * @return a new instance of health element.\n   */\n  async newInstance(\n    user: models.User,\n    patient: models.Patient,\n    h: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: AccessLevelEnum }\n      preferredSfk?: string\n      confidential?: boolean\n    } = {}\n  ) {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    const helement = {\n      ...(h ?? {}),\n      _type: 'org.taktik.icure.entities.HealthElement',\n      id: h?.id ?? this.crypto.primitives.randomUuid(),\n      created: h?.created ?? new Date().getTime(),\n      modified: h?.modified ?? new Date().getTime(),\n      responsible: h?.responsible ?? (this.autofillAuthor ? dataOwnerId : undefined),\n      author: h?.author ?? (this.autofillAuthor ? user.id : undefined),\n      codes: h?.codes ?? [],\n      tags: h?.tags ?? [],\n      healthElementId: h?.healthElementId ?? this.crypto.primitives.randomUuid(),\n      openingDate: h?.openingDate ?? parseInt(moment().format('YYYYMMDDHHmmss')),\n    }\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk =\n      options.preferredSfk ??\n      (options?.confidential\n        ? await this.crypto.confidential.getConfidentialSecretId({ entity: patient, type: EntityWithDelegationTypeName.Patient })\n        : await this.crypto.confidential.getAnySecretIdSharedWithParents({ entity: patient, type: EntityWithDelegationTypeName.Patient }))\n    if (!sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id} for confidential=${options?.confidential ?? false}`)\n    const extraDelegations = {\n      ...(options.confidential\n        ? {}\n        : Object.fromEntries(\n            [...(user.autoDelegations?.all ?? []), ...(user.autoDelegations?.medicalInformation ?? [])].map((d) => [d, AccessLevelEnum.WRITE])\n          )),\n      ...(options?.additionalDelegates ?? {}),\n    }\n    const initialisationInfo = await this.crypto.xapi.entityWithInitialisedEncryptedMetadata(\n      helement,\n      EntityWithDelegationTypeName.HealthElement,\n      patient.id,\n      sfk,\n      true,\n      false,\n      extraDelegations\n    )\n    return new models.HealthElement(initialisationInfo.updatedEntity)\n  }\n\n  createHealthElement(body?: models.HealthElement): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  createHealthElementWithUser(user: models.User, body?: models.HealthElement): Promise<models.HealthElement | any> {\n    return body\n      ? this.encrypt(user, [_.cloneDeep(body)])\n          .then((hes) => super.createHealthElement(hes[0]))\n          .then((he) => this.decryptWithUser(user, [he]))\n          .then((hes) => hes[0])\n      : Promise.resolve(null)\n  }\n\n  createHealthElements(body?: Array<HealthElement>): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  createHealthElementsWithUser(user: models.User, bodies?: models.HealthElement[]): Promise<models.HealthElement[] | any> {\n    return bodies\n      ? this.encrypt(\n          user,\n          bodies.map((c) => _.cloneDeep(c))\n        )\n          .then((hes) => super.createHealthElements(hes))\n          .then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes))\n      : Promise.resolve(null)\n  }\n\n  getHealthElement(healthElementId: string): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  getHealthElementWithUser(user: models.User, healthElementId: string): Promise<models.HealthElement> {\n    return super\n      .getHealthElement(healthElementId)\n      .then((he) => this.decryptWithUser(user, [he]))\n      .then((hes) => hes[0])\n  }\n\n  getHealthElements(body?: models.ListOfIds): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  getHealthElementsWithUser(user: models.User, body?: models.ListOfIds): Promise<models.HealthElement[]> {\n    return super.getHealthElements(body).then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes))\n  }\n\n  newHealthElementDelegations(healthElementId: string, body?: Array<models.Delegation>): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  findHealthElementsByHCPartyPatientForeignKeys(hcPartyId: string, secretFKeys: string): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  findHealthElementsByHCPartyPatientForeignKeysWithUser(user: models.User, hcPartyId: string, secretFKeys: string): Promise<HealthElement[]> {\n    return super.findHealthElementsByHCPartyPatientForeignKeys(hcPartyId, secretFKeys).then((hes) => this.decryptWithUser(user, hes))\n  }\n\n  findHealthElementsByHCPartyPatientForeignKeysArrayWithUser(user: models.User, hcPartyId: string, secretFKeys: string[]): Promise<HealthElement[]> {\n    return super.findHealthElementsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys).then((hes) => this.decryptWithUser(user, hes))\n  }\n\n  async findHealthElementsByHCPartyAndPatientWithUser(\n    user: models.User,\n    hcPartyId: string,\n    patient: models.Patient,\n    usingPost: boolean = false\n  ): Promise<models.HealthElement[]> {\n    let keysAndHcPartyId = await this.crypto.xapi.secretIdsForHcpHierarchyOf({ entity: patient, type: EntityWithDelegationTypeName.Patient })\n    const keys = keysAndHcPartyId.find((secretForeignKeys) => secretForeignKeys.ownerId == hcPartyId)?.extracted\n    if (keys == undefined) {\n      throw Error('No delegation for user')\n    }\n    return usingPost\n      ? this.findHealthElementsByHCPartyPatientForeignKeysArrayWithUser(user, hcPartyId, keys)\n      : this.findHealthElementsByHCPartyPatientForeignKeysWithUser(user, hcPartyId, keys.join(','))\n  }\n\n  modifyHealthElement(body?: HealthElement): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  modifyHealthElementWithUser(user: models.User, body?: HealthElement): Promise<HealthElement | any> {\n    return body ? this.modifyHealthElementAs(this.dataOwnerApi.getDataOwnerIdOf(user), body) : Promise.resolve(null)\n  }\n  private modifyHealthElementAs(dataOwner: string, body: HealthElement): Promise<HealthElement> {\n    return this.encryptAs(dataOwner, [_.cloneDeep(body)])\n      .then((hes) => super.modifyHealthElement(hes[0]))\n      .then((he) => this.decrypt(dataOwner, [he]))\n      .then((hes) => hes[0])\n  }\n\n  modifyHealthElements(body?: Array<HealthElement>): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  modifyHealthElementsWithUser(user: models.User, bodies?: HealthElement[]): Promise<HealthElement[] | any> {\n    return bodies\n      ? this.encrypt(\n          user,\n          bodies.map((c) => _.cloneDeep(c))\n        )\n          .then((hes) => super.modifyHealthElements(hes))\n          .then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes))\n      : Promise.resolve(null)\n  }\n\n  // noinspection JSUnusedGlobalSymbols\n  /**\n   * 1. Check whether there is a delegation with 'hcpartyId' or not.\n   * 2. 'fetchHcParty[hcpartyId][1]': is encrypted AES exchange key by RSA public key of him.\n   * 3. Obtain the AES exchange key, by decrypting the previous step value with hcparty private key\n   *      3.1.  KeyPair should be fetch from cache (in jwk)\n   *      3.2.  if it doesn't exist in the cache, it has to be loaded from Browser Local store, and then import it to WebCrypto\n   * 4. Obtain the array of delegations which are delegated to his ID (hcpartyId) in this patient\n   * 5. Decrypt and collect all keys (secretForeignKeys) within delegations of previous step (with obtained AES key of step 4)\n   * 6. Do the REST call to get all helements with (allSecretForeignKeysDelimitedByComa, hcpartyId)\n   *\n   * After these painful steps, you have the helements of the patient.\n   *\n   * @param hcpartyId\n   * @param patient (Promise)\n   * @param keepObsoleteVersions\n   * @param usingPost\n   */\n\n  findBy(hcpartyId: string, patient: models.Patient, keepObsoleteVersions = false, usingPost = false) {\n    return this.crypto.xapi\n      .secretIdsForHcpHierarchyOf({ entity: patient, type: EntityWithDelegationTypeName.Patient })\n      .then((secretForeignKeys) =>\n        secretForeignKeys && secretForeignKeys.length > 0\n          ? Promise.all(\n              secretForeignKeys\n                .reduce((acc, level) => {\n                  return acc.concat([\n                    {\n                      hcpartyId: level.ownerId,\n                      extractedKeys: level.extracted.filter((key) => !acc.some((previousLevel) => previousLevel.extractedKeys.includes(key))),\n                    },\n                  ])\n                }, [] as Array<{ hcpartyId: string; extractedKeys: Array<string> }>)\n                .filter((l) => l.extractedKeys.length > 0)\n                .map(({ hcpartyId, extractedKeys }) =>\n                  usingPost\n                    ? this.findByHCPartyPatientSecretFKeysArray(hcpartyId, _.uniq(extractedKeys))\n                    : this.findByHCPartyPatientSecretFKeys(hcpartyId, _.uniq(extractedKeys).join(','))\n                )\n            ).then((results) => _.uniqBy(_.flatMap(results), (x) => x.id))\n          : Promise.resolve([])\n      )\n      .then((decryptedHelements: Array<models.HealthElement>) => {\n        const byIds: { [key: string]: models.HealthElement } = {}\n\n        if (keepObsoleteVersions) {\n          return decryptedHelements\n        } else {\n          decryptedHelements.forEach((he) => {\n            if (he.healthElementId) {\n              const phe = byIds[he.healthElementId]\n              if (!phe || !phe.modified || (he.modified && phe.modified < he.modified)) {\n                byIds[he.healthElementId] = he\n              }\n            }\n          })\n          return _.values(byIds).filter((s: any) => !s.endOfLife)\n        }\n      })\n  }\n\n  findByHCPartyPatientSecretFKeys(hcPartyId: string, secretFKeys: string): Promise<Array<models.Contact> | any> {\n    return super.findHealthElementsByHCPartyPatientForeignKeys(hcPartyId, secretFKeys).then((helements) => this.decrypt(hcPartyId, helements))\n  }\n\n  findByHCPartyPatientSecretFKeysArray(hcPartyId: string, secretFKeys: string[]): Promise<Array<models.Contact> | any> {\n    return super\n      .findHealthElementsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys)\n      .then((helements) => this.decrypt(hcPartyId, helements))\n  }\n\n  encrypt(user: models.User, healthElements: Array<models.HealthElement>): Promise<Array<models.HealthElement>> {\n    return this.encryptAs(this.dataOwnerApi.getDataOwnerIdOf(user), healthElements)\n  }\n\n  private encryptAs(owner: string, healthElements: Array<models.HealthElement>): Promise<Array<models.HealthElement>> {\n    return Promise.all(\n      healthElements.map((he) =>\n        this.crypto.xapi.tryEncryptEntity(\n          he,\n          EntityWithDelegationTypeName.HealthElement,\n          this.encryptedFields,\n          false,\n          false,\n          (x) => new models.HealthElement(x)\n        )\n      )\n    )\n  }\n\n  decryptWithUser(user: models.User, hes: Array<models.HealthElement>): Promise<Array<models.HealthElement>> {\n    return this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes)\n  }\n\n  decrypt(dataOwnerId: string, hes: Array<models.HealthElement>): Promise<Array<models.HealthElement>> {\n    return Promise.all(\n      hes.map((he) =>\n        this.crypto.xapi\n          .decryptEntity(he, EntityWithDelegationTypeName.HealthElement, (x) => new models.HealthElement(x))\n          .then(({ entity }) => entity)\n      )\n    )\n  }\n\n  filterHealthElementsBy(startDocumentId?: string, limit?: number, body?: FilterChainHealthElement): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  filterByWithUser(\n    user: models.User,\n    startDocumentId?: string,\n    limit?: number,\n    body?: FilterChainHealthElement\n  ): Promise<PaginatedListHealthElement> {\n    return super\n      .filterHealthElementsBy(startDocumentId, limit, body)\n      .then((pl) => this.decryptWithUser(user, pl.rows!).then((dr) => Object.assign(pl, { rows: dr })))\n  }\n\n  // noinspection JSUnusedGlobalSymbols\n  serviceToHealthElement(user: models.User, patient: models.Patient, heSvc: models.Service, descr: string) {\n    return this.newInstance(user, patient, {\n      idService: heSvc.id,\n      author: heSvc.author,\n      responsible: heSvc.responsible,\n      openingDate: heSvc.valueDate || heSvc.openingDate,\n      descr: descr,\n      idOpeningContact: heSvc.contactId,\n      modified: heSvc.modified,\n      created: heSvc.created,\n      codes: heSvc.codes,\n      tags: heSvc.tags,\n    }).then((he) => {\n      return this.createHealthElement(he)\n    })\n  }\n\n  // noinspection JSUnusedGlobalSymbols, JSMethodCanBeStatic\n  stringToCode(code: string) {\n    const c = code.split('|')\n    return new models.Code({\n      type: c[0],\n      code: c[1],\n      version: c[2],\n      id: code,\n    })\n  }\n\n  /**\n   * @param healthElement a health element\n   * @return the id of the patient that the health element refers to, retrieved from the encrypted metadata. Normally there should only be one element\n   * in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(healthElement: models.HealthElement): Promise<string[]> {\n    return this.crypto.xapi.owningEntityIdsOf({ entity: healthElement, type: EntityWithDelegationTypeName.HealthElement }, undefined)\n  }\n\n  /**\n   * @return if the logged data owner has write access to the content of the given health element\n   */\n  async hasWriteAccess(healthElement: models.HealthElement): Promise<boolean> {\n    return this.crypto.xapi.hasWriteAccess({ entity: healthElement, type: EntityWithDelegationTypeName.HealthElement })\n  }\n\n  /**\n   * Share an existing health element with other data owners, allowing them to access the non-encrypted data of the health element and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the health element.\n   * @param healthElement the health element to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * health element does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this health element refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWith(\n    delegateId: string,\n    healthElement: models.HealthElement,\n    options: {\n      requestedPermissions?: RequestedPermissionEnum\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.HealthElement> {\n    return this.shareWithMany(healthElement, { [delegateId]: options })\n  }\n  /**\n   * Share an existing health element with other data owners, allowing them to access the non-encrypted data of the health element and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the health element.\n   * @param healthElement the health element to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * health element does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this health element refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWithMany(\n    healthElement: models.HealthElement,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.HealthElement> {\n    return (await this.tryShareWithMany(healthElement, delegates)).updatedEntityOrThrow\n  }\n  /**\n   * Share an existing health element with other data owners, allowing them to access the non-encrypted data of the health element and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param healthElement the health element to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * health element does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this health element refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async tryShareWithMany(\n    healthElement: models.HealthElement,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<ShareResult<models.HealthElement>> {\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    // All entities should have an encryption key.\n    const entityWithEncryptionKey = await this.crypto.xapi.ensureEncryptionKeysInitialised(healthElement, EntityWithDelegationTypeName.HealthElement)\n    const updatedEntity = entityWithEncryptionKey ? await this.modifyHealthElementAs(self, entityWithEncryptionKey) : healthElement\n    return this.crypto.xapi\n      .simpleShareOrUpdateEncryptedEntityMetadata(\n        { entity: updatedEntity, type: EntityWithDelegationTypeName.HealthElement },\n        true,\n        Object.fromEntries(\n          Object.entries(delegates).map(([delegateId, options]) => [\n            delegateId,\n            {\n              requestedPermissions: options.requestedPermissions,\n              shareEncryptionKeys: options.shareEncryptionKey,\n              shareOwningEntityIds: options.sharePatientId,\n              shareSecretIds: undefined,\n            },\n          ])\n        ),\n        (x) => this.bulkShareHealthElements(x)\n      )\n      .then((r) => r.mapSuccessAsync((e) => this.decrypt(self, [e]).then((es) => es[0])))\n  }\n\n  getDataOwnersWithAccessTo(\n    entity: models.HealthElement\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: AccessLevelEnum }; hasUnknownAnonymousDataOwners: boolean }> {\n    return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: EntityWithDelegationTypeName.HealthElement })\n  }\n\n  getEncryptionKeysOf(entity: models.HealthElement): Promise<string[]> {\n    return this.crypto.xapi.encryptionKeysOf({ entity, type: EntityWithDelegationTypeName.HealthElement }, undefined)\n  }\n\n  async subscribeToHealthElementEvents(\n    eventTypes: ('CREATE' | 'UPDATE' | 'DELETE')[],\n    filter: AbstractFilter<HealthElement> | undefined,\n    eventFired: (healthElement: HealthElement) => Promise<void>,\n    options: SubscriptionOptions = {}\n  ): Promise<Connection> {\n    const currentUser = await this.userApi.getCurrentUser()\n\n    return await subscribeToEntityEvents(\n      this.host,\n      this.authApi,\n      EntityWithDelegationTypeName.HealthElement,\n      eventTypes,\n      filter,\n      eventFired,\n      options,\n      async (encrypted) => (await this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(currentUser), [encrypted]))[0]\n    ).then((rs) => new ConnectionImpl(rs))\n  }\n\n  createDelegationDeAnonymizationMetadata(entity: HealthElement, delegates: string[]): Promise<void> {\n    return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo(\n      { entity, type: EntityWithDelegationTypeName.HealthElement },\n      delegates\n    )\n  }\n}\n"]}

package/icc-x-api/index.d.ts

@@ -66,7 +66,7 @@ export { StorageFacade } from './storage/StorageFacade';
 export { KeyStorageImpl } from './storage/KeyStorageImpl';
 export { CryptoStrategies } from './crypto/CryptoStrategies';
 export { NativeCryptoPrimitivesBridge } from './crypto/NativeCryptoPrimitivesBridge';
-export { getShaVersionForKey } from './crypto/utils';
+export { hexPublicKeysWithSha1Of, hexPublicKeysWithSha256Of, getShaVersionForKey } from './crypto/utils';
 export interface BasicApis {
     readonly authApi: IccAuthApi;
     readonly codeApi: IccCodeXApi;

package/icc-x-api/index.js

@@ -23,7 +23,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.IcureBasicApi = exports.IcureApi = exports.EncryptedFieldsConfig = exports.getShaVersionForKey = exports.NativeCryptoPrimitivesBridge = exports.KeyStorageImpl = exports.LocalStorageImpl = exports.AuthSecretType = void 0;
+exports.IcureBasicApi = exports.IcureApi = exports.EncryptedFieldsConfig = exports.getShaVersionForKey = exports.hexPublicKeysWithSha256Of = exports.hexPublicKeysWithSha1Of = exports.NativeCryptoPrimitivesBridge = exports.KeyStorageImpl = exports.LocalStorageImpl = exports.AuthSecretType = void 0;
 const icc_api_1 = require("../icc-api");
 const icc_user_x_api_1 = require("./icc-user-x-api");
 const icc_crypto_x_api_1 = require("./icc-crypto-x-api");
@@ -121,6 +121,8 @@ Object.defineProperty(exports, "KeyStorageImpl", { enumerable: true, get: functi
 var NativeCryptoPrimitivesBridge_1 = require("./crypto/NativeCryptoPrimitivesBridge");
 Object.defineProperty(exports, "NativeCryptoPrimitivesBridge", { enumerable: true, get: function () { return NativeCryptoPrimitivesBridge_1.NativeCryptoPrimitivesBridge; } });
 var utils_2 = require("./crypto/utils");
+Object.defineProperty(exports, "hexPublicKeysWithSha1Of", { enumerable: true, get: function () { return utils_2.hexPublicKeysWithSha1Of; } });
+Object.defineProperty(exports, "hexPublicKeysWithSha256Of", { enumerable: true, get: function () { return utils_2.hexPublicKeysWithSha256Of; } });
 Object.defineProperty(exports, "getShaVersionForKey", { enumerable: true, get: function () { return utils_2.getShaVersionForKey; } });
 var IcureApiOptions;
 (function (IcureApiOptions) {

package/icc-x-api/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../icc-x-api/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wCA8BmB;AACnB,qDAA8C;AAC9C,yDAAkD;AAClD,2DAAoD;AACpD,2DAAoD;AACpD,6DAAsD;AACtD,2DAAoD;AACpD,qDAA8C;AAC9C,6DAAsD;AACtD,yEAAkE;AAClE,uEAA+D;AAC/D,2DAAoD;AACpD,2DAAoD;AACpD,2DAAoD;AACpD,+DAAwD;AACxD,iEAAyD;AACzD,qDAA8C;AAC9C,6EAAqE;AACrE,iEAAyD;AAGzD,iEAA6D;AAC7D,6DAAyD;AACzD,0EAKsC;AACtC,gEAAiF;AACjF,kFAA8E;AAC9E,qEAAiE;AACjE,6FAAyF;AACzF,sDAAkD;AAClD,8EAA0E;AAG1E,sEAAkE;AAClE,kEAA8D;AAC9D,sEAAkE;AAClE,+EAAuE;AACvE,wEAAoE;AACpE,0CAAwD;AACxD,oHAAgH;AAChH,sEAA+F;AAC/F,8EAA0E;AAC1E,mFAA+E;AAC/E,gFAA4E;AAC5E,gFAA4E;AAC5E,sFAAkF;AAClF,kHAA8G;AAC9G,0EAAsE;AACtE,gFAA4E;AAC5E,gGAA4F;AAC5F,yFAAqF;AACrF,4EAAwE;AACxE,yDAAkD;AAClD,2DAAoD;AACpD,mEAA4D;AAE5D,uDAAgD;AAChD,0DAAsD;AACtD,0EAAsE;AACtE,oFAAgF;AAChF,wEAAoE;AACpE,gEAAgF;AAChF,gEAA4D;AAC5D,mFAA+E;AAC/E,4EAAwE;AACxE,6DAAsD;AACtD,8CAA+C;AAE/C,wDAAqC;AACrC,sDAAmC;AACnC,4DAAyC;AACzC,6DAA0C;AAC1C,mDAAgC;AAChC,sDAAmC;AACnC,qDAAkC;AAClC,0DAAuC;AACvC,uDAAoC;AACpC,mDAAgC;AAChC,sDAAmC;AACnC,uDAAoC;AACpC,sDAAmC;AACnC,sDAAmC;AACnC,sDAAmC;AACnC,mDAAgC;AAChC,yDAAsC;AACtC,sDAAmC;AACnC,yDAAsC;AACtC,gEAA6C;AAC7C,+DAA4C;AAC5C,uDAAoC;AACpC,0CAAuB;AAEvB,+CAA4B;AAC5B,4DAAyC;AACzC,kEAA+C;AAC/C,gEAA6C;AAE7C,8DAAgG;AAApE,mHAAA,cAAc,OAAA;AAE1C,+DAA6D;AAApD,oHAAA,gBAAgB,OAAA;AAEzB,2DAAyD;AAAhD,gHAAA,cAAc,OAAA;AAEvB,sFAAoF;AAA3E,4IAAA,4BAA4B,OAAA;AACrC,wCAAoD;AAA3C,4GAAA,mBAAmB,OAAA;AAyH5B,IAAU,eAAe,CA4BxB;AA5BD,WAAU,eAAe;IACvB,IAAiB,QAAQ,CAIxB;IAJD,WAAiB,QAAQ;QACV,yBAAgB,GAAG,IAAI,+DAA8B,EAAE,CAAA;QACvD,uCAA8B,GAAG,IAAI,CAAA;QACrC,gBAAO,GAAG,EAAE,CAAA;IAC3B,CAAC,EAJgB,QAAQ,GAAR,wBAAQ,KAAR,wBAAQ,QAIxB;IAED,MAAa,YAAY;QAUvB,YAAY,MAAuB;;YACjC,IAAI,CAAC,gBAAgB,GAAG,MAAA,MAAM,CAAC,gBAAgB,mCAAI,QAAQ,CAAC,gBAAgB,CAAA;YAC5E,IAAI,CAAC,8BAA8B,GAAG,MAAA,MAAM,CAAC,8BAA8B,mCAAI,QAAQ,CAAC,8BAA8B,CAAA;YACtH,IAAI,CAAC,OAAO,GAAG,MAAA,MAAM,CAAC,OAAO,mCAAI,IAAI,mCAAgB,EAAE,CAAA;YACvD,IAAI,CAAC,UAAU,GAAG,MAAA,MAAM,CAAC,UAAU,mCAAI,IAAI,+BAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACvE,IAAI,CAAC,OAAO,GAAG,MAAA,MAAM,CAAC,OAAO,mCAAI,QAAQ,CAAC,OAAO,CAAA;YACjD,IAAI,CAAC,qBAAqB,GAAG,MAAA,MAAM,CAAC,qBAAqB,mCAAI,EAAE,CAAA;YAC/D,IAAI,CAAC,aAAa,GAAG,MAAA,MAAM,CAAC,aAAa,mCAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAQ,CAAC,CAAC,CAAA;YAC9F,IAAI,CAAC,+BAA+B,GAAG,MAAA,MAAM,CAAC,+BAA+B,mCAAI,KAAK,CAAA;QACxF,CAAC;KACF;IApBY,4BAAY,eAoBxB,CAAA;AACH,CAAC,EA5BS,eAAe,KAAf,eAAe,QA4BxB;AAwJD,IAAiB,qBAAqB,CAYrC;AAZD,WAAiB,qBAAqB;IACvB,8BAAQ,GAAG;QACtB,SAAS,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;QACjC,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC;QAC/C,OAAO,EAAE,CAAC,OAAO,EAAE,kBAAkB,CAAC;QACtC,OAAO,EAAE,CAAC,kBAAkB,CAAC;QAC7B,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC;QACpD,eAAe,EAAE,CAAC,YAAY,CAAC;QAC/B,OAAO,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC;QACrC,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,CAAC,aAAa,EAAE,gBAAgB,EAAE,sBAAsB,CAAC;KACjE,CAAA;AACH,CAAC,EAZgB,qBAAqB,GAArB,6BAAqB,KAArB,6BAAqB,QAYrC;AAsFD,IAAiB,QAAQ,CA4CxB;AA5CD,WAAiB,QAAQ;IACvB;;OAEG;IACH,SAAsB,UAAU,CAC9B,IAAY,EACZ,qBAAqE,EACrE,gBAAkC,EAClC,SAAoC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,EAAa,EAC9I,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK,EACT,UAA2B,EAAE;;YAE7B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;YACxD,IAAI,0BAA0B,GAAG,MAAM,uCAAuC,CAC5E,IAAI,EACJ,qBAAqB,EACrB,MAAM,CAAC,OAAO,EACd,SAAS,EACT,MAAM,CAAC,aAAa,CACrB,CAAA;YACD,MAAM,cAAc,GAAG,MAAM,4BAA4B,CACvD,IAAI,EACJ,SAAS,EACT,0BAA0B,CAAC,mCAAmC,EAC9D,MAAM,EACN,gBAAgB,EAChB,MAAM,CACP,CAAA;YACD,OAAO,IAAI,YAAY,CACrB,cAAc,EACd,IAAI,EACJ,0BAA0B,CAAC,mCAAmC,EAC9D,KAAK,EACL,0BAA0B,CAAC,gBAAgB,EAC3C,0BAA0B,CAAC,OAAO,EAClC,0BAA0B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,0BAA0B,CAAC,aAAa,CAAC,EAC9G,MAAM,EACN,gBAAgB,CACjB,CAAA;QACH,CAAC;KAAA;IAvCqB,mBAAU,aAuC/B,CAAA;AACH,CAAC,EA5CgB,QAAQ,GAAR,gBAAQ,KAAR,gBAAQ,QA4CxB;AAED,SAAe,yBAAyB,CACtC,IAAY,EACZ,qBAAqE,EACrE,OAAyC,EACzC,SAAwE;;;QAExE,IAAI,sBAA8C,CAAA;QAClD,IAAI,gBAAgB,IAAI,qBAAqB,IAAI,aAAa,IAAI,qBAAqB,IAAI,gBAAgB,IAAI,qBAAqB,EAAE;YACpI,sBAAsB,GAAG,qBAAqB,CAAA;SAC/C;aAAM,IAAI,aAAa,IAAI,qBAAqB,IAAI,CAAC,CAAC,qBAAqB,CAAC,WAAW,EAAE;YACxF,sBAAsB,GAAG,IAAI,kDAAyB,CACpD,IAAI,oBAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,iDAAwB,EAAE,EAAE,SAAS,CAAC,EACxE,MAAA,qBAAqB,aAArB,qBAAqB,uBAArB,qBAAqB,CAAE,WAAW,0CAAE,QAAQ,EAC5C,MAAA,qBAAqB,aAArB,qBAAqB,uBAArB,qBAAqB,CAAE,WAAW,0CAAE,QAAQ,EAC5C,SAAS,EACT,qBAAqB,CAAC,WAAW,CAClC,CAAA;SACF;aAAM,IACL,UAAU,IAAI,qBAAqB;YACnC,UAAU,IAAI,qBAAqB;YACnC,CAAC,CAAC,qBAAqB,CAAC,QAAQ;YAChC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,EAChC;YACA,sBAAsB,GAAG,IAAI,uDAA8B,CACzD,IAAI,oBAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,iDAAwB,EAAE,EAAE,SAAS,CAAC,EACxE,qBAAqB,CAAC,QAAQ,EAC9B,qBAAqB,CAAC,QAAQ,EAC9B,IAAI,EACJ,SAAS,EACT,SAAS,EACT,qBAAqB,CAAC,gBAAgB,CACvC,CAAA;SACF;aAAM,IAAI,kBAAkB,IAAI,qBAAqB,IAAI,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,EAAE;YAClG,sBAAsB,GAAG,IAAI,kDAAyB,CACpD,IAAI,oBAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,iDAAwB,EAAE,EAAE,SAAS,CAAC,EACxE,SAAS,EACT,SAAS,EACT,IAAI,6CAAqB,CACvB,IAAI,oBAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,iDAAwB,EAAE,EAAE,SAAS,CAAC,EACxE,SAAS,EACT,SAAS,EACT,qBAAqB,CAAC,gBAAgB,EACtC,SAAS,CACV,CACF,CAAA;SACF;aAAM,IAAI,UAAU,IAAI,qBAAqB,IAAI,gBAAgB,IAAI,qBAAqB,EAAE;YAC3F,sBAAsB,GAAG,qCAAiB,CAAC,UAAU,CACnD,IAAI,oBAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,iDAAwB,EAAE,EAAE,SAAS,CAAC,EACxE,qBAAqB,CAAC,QAAQ,EAC9B,qBAAqB,CAAC,cAAc,EACpC;gBACE,aAAa,EAAE,qBAAqB,CAAC,aAAa;gBAClD,gBAAgB,EAAE,qBAAqB,CAAC,gBAAgB;gBACxD,mBAAmB,EAAE,qBAAqB,CAAC,mBAAmB;aAC/D,CACF,CAAA;SACF;aAAM;YACL,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;SAC3D;QACD,OAAO,sBAAsB,CAAA;;CAC9B;AAED,SAAe,uCAAuC,CACpD,IAAY,EACZ,qBAAqE,EACrE,OAAyC,EACzC,SAAwE,EACxE,aAA2G;;;QAE3G,IAAI,+BAA+B,GAAG,MAAM,yBAAyB,CAAC,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;QACtH,MAAM,gBAAgB,GAAG,IAAI,oBAAU,CAAC,IAAI,EAAE,OAAO,EAAE,+BAA+B,EAAE,SAAS,CAAC,CAAA;QAClG,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,gBAAgB,CAAC,CAAA;QACzD,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAAC,cAAc,EAAE,CAAA;QACrE,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,IAAA,wBAAa,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACvE,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,MAAA,OAAO,CAAC,CAAC,CAAC,0CAAE,OAAO,CAAA;QAChI;;;WAGG;QACH;;;;;;;WAOG;QACH,MAAM,mCAAmC,GAAG,CAAC,CAAC,aAAa;YACzD,CAAC,CAAC,MAAM,+BAA+B,CAAC,WAAW,CAAC,aAAa,EAAE,OAAO,CAAC;YAC3E,CAAC,CAAC,+BAA+B,CAAA;QACnC,OAAO;YACL,mCAAmC;YACnC,2EAA2E;YAC3E,gBAAgB,EAAE,mCAAmC,YAAY,qCAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB;YACjH,OAAO;YACP,aAAa;SACd,CAAA;;CACF;AAiBD,MAAM,gCAAgC,GAAG,iCAAiC,CAAA;AAE1E,SAAe,4BAA4B,CACzC,IAAY,EACZ,SAAwE,EACxE,mCAA2D,EAC3D,MAAoC,EACpC,gBAAkC,EAClC,MAAiC;;;QAEjC,MAAM,oBAAoB,GAAG,MAAM,IAAI,uCAAgB,CACrD,IAAI,EACJ,MAAM,CAAC,OAAO,EACd,mCAAmC,EACnC,SAAS,CACV,CAAC,uBAAuB,EAAE,CAAA;QAC3B,MAAM,oCAAoC,GAAG,gBAAgB,CAAC,oCAAoC,CAAC,oBAAoB,CAAC,CAAA;QACxH,IAAI,cAAc,GAAG,MAAM,CAAC,OAAO,CAAA;QACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAAE;YAC3E,IAAI,oBAAoB,CAAC,IAAI,IAAI,qCAAiB,CAAC,OAAO,IAAI,oBAAoB,CAAC,IAAI,IAAI,qCAAiB,CAAC,MAAM,EAAE;gBACnH,IAAI,CAAC,oCAAoC,EAAE;oBACzC,cAAc,mCAAQ,cAAc,KAAE,CAAC,gCAAgC,CAAC,EAAE,OAAO,GAAE,CAAA;iBACpF;aACF;iBAAM;gBACL,IAAI,oCAAoC,EAAE;oBACxC,cAAc,mCAAQ,cAAc,KAAE,CAAC,gCAAgC,CAAC,EAAE,MAAM,GAAE,CAAA;iBACnF;aACF;SACF;QAED,MAAM,OAAO,GAAG,IAAI,oBAAU,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAAA;QACpG,MAAM,OAAO,GAAG,IAAI,4BAAW,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;QAC9G,MAAM,kBAAkB,GAAG,IAAI,kCAAc,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;QAC5H,MAAM,SAAS,GAAG,IAAI,gCAAa,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;QAC3H,MAAM,cAAc,GAAG,IAAI,uBAAa,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAAA;QAC9G,MAAM,YAAY,GAAG,IAAI,uCAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAAA;QAC/G,MAAM,eAAe,GAAG,IAAI,uCAAkB,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAAA;QACpH,MAAM,mBAAmB,GAAG,IAAI,uCAAkB,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAAA;QACxH,wBAAwB;QACxB,MAAM,YAAY,GAAG,IAAI,uCAAkB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;QACvG,MAAM,gBAAgB,GAAG,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,sCAAmB,CAAC,MAAM,CAAC,CAAA;QAC1H,MAAM,uBAAuB,GAAG,IAAI,iDAAuB,CAAC,gBAAgB,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAA;QAC1I,MAAM,uBAAuB,GAAG,IAAI,iDAAuB,CAAC,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,oCAAoC,CAAC,CAAA;QAClJ,MAAM,WAAW,GAAG,IAAI,yBAAW,CAAC,gBAAgB,EAAE,YAAY,EAAE,uBAAuB,EAAE,uBAAuB,CAAC,CAAA;QACrH,MAAM,sBAAsB,GAAG,IAAI,+CAAsB,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAA;QAChG,MAAM,gBAAgB,GAAG,IAAI,mCAAgB,CAAC,sBAAsB,CAAC,CAAA;QACrE,MAAM,yBAAyB,GAAG,IAAI,qDAAyB,CAC7D,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,CAAC,MAAM,CAAC,+BAA+B,EACvC,gBAAgB,CACjB,CAAA;QACD,MAAM,wBAAwB,GAAG,IAAI,mDAAwB,CAAC,YAAY,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAA;QAC3G,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,cAAc,EAAE,CAAA;QAC/D,MAAM,IAAI,yCAAmB,CAC3B,gBAAgB,EAChB,uBAAuB,EACvB,YAAY,EACZ,yBAAyB,EACzB,wBAAwB,EACxB,YAAY,CACb,CAAC,kBAAkB,CAAC,MAAM,YAAY,CAAC,uBAAuB,EAAE,CAAC,CAAA;QAClE,6BAA6B;QAC7B,MAAM,mBAAmB,GAAG,IAAI,yCAAmB,CACjD,GAAG,EACH,GAAG,EACH,MAAM,EACN,KAAK,EACL,gBAAgB,EAChB,gBAAgB,EAChB,yBAAyB,EACzB,uBAAuB,EACvB,YAAY,EACZ,CAAC,MAAM,CAAC,+BAA+B,EACvC,YAAY,CACb,CAAA;QACD,MAAM,wBAAwB,GAAG,IAAI,mDAAwB,CAAC,gBAAgB,CAAC,CAAA;QAC/E,MAAM,mBAAmB,GAAG,MAAM,IAAA,sEAAgD,EAChF,uBAAuB,EACvB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,CAAC,MAAM,CAAC,+BAA+B,CACxC,CAAA;QACD,MAAM,sBAAsB,GAAG,IAAI,+CAAsB,CACvD,IAAI,6CAAqB,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAChG,CAAA;QACD,MAAM,2BAA2B,GAAG,IAAI,yDAA2B,CAAC,yBAAyB,EAAE,gBAAgB,CAAC,CAAA;QAChH,MAAM,2CAA2C,GAAG,IAAI,uFAA0C,CAChG,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,YAAY,CACb,CAAA;QACD,MAAM,SAAS,GAAG,IAAI,6CAAqB,CACzC,gBAAgB,EAChB,YAAY,EACZ,IAAI,qFAAyC,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,EACpF,2CAA2C,EAC3C,IAAI,mDAAwB,CAC1B,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,oCAAoC,CACrC,EACD,OAAO,EACP,CAAC,MAAM,CAAC,+BAA+B,CACxC,CAAA;QACD,MAAM,aAAa,GAAG,IAAI,qCAAiB,CAAC,gBAAgB,EAAE,YAAY,EAAE,yBAAyB,EAAE,mBAAmB,CAAC,CAAA;QAC3H,MAAM,qBAAqB,GAAG,IAAI,2CAAoB,CAAC,SAAS,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAA;QACjG,MAAM,IAAA,+BAAuB,EAAC,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAA;QACxF,MAAM,gCAAgC,GAAG,IAAI,mEAAgC,CAAC,mBAAmB,CAAC,CAAA;QAClG,MAAM,0BAA0B,GAAG,IAAI,uDAA0B,CAC/D,YAAY,EACZ,2CAA2C,EAC3C,SAAS,EACT,gBAAgB,EAChB,wBAAwB,EACxB,IAAI,EACJ,cAAc,EACd,mCAAmC,EACnC,SAAS,EACT,gCAAgC,CACjC,CAAA;QACD,MAAM,SAAS,GAAG,IAAI,gCAAa,CACjC,mBAAmB,EACnB,gBAAgB,EAChB,yBAAyB,EACzB,YAAY,EACZ,SAAS,EACT,aAAa,EACb,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,UAAU,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,0BAA0B,CAC3B,CAAA;QACD,MAAM,kBAAkB,GAAG,IAAI,mDAAsB,CACnD,IAAI,EACJ,cAAc,EACd,SAAS,EACT,kBAAkB,EAClB,YAAY,EACZ,OAAO,EACP,OAAO,EACP,CAAC,oCAAoC,EACrC,MAAA,MAAM,CAAC,qBAAqB,CAAC,eAAe,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,eAAe,EAC9F,mCAAmC,EACnC,SAAS,CACV,CAAA;QACD,MAAM,uBAAuB,GAAG,IAAI,qDAAuB,CAAC,SAAS,EAAE,kBAAkB,EAAE,YAAY,EAAE,eAAe,CAAC,CAAA;QAEzH,IAAI,MAAM,IAAI,MAAM,CAAC,8BAA8B,EAAE;YACnD,MAAM,uBAAuB,CAAC,mCAAmC,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;SACrH;QACD,OAAO;YACL,SAAS;YACT,OAAO;YACP,kBAAkB;YAClB,SAAS;YACT,kBAAkB;YAClB,YAAY;YACZ,uBAAuB;YACvB,OAAO,EAAE,cAAc;YACvB,oCAAoC;YACpC,WAAW,EAAE,IAAI,oCAAe,CAC9B,mBAAmB,EACnB,sBAAsB,EACtB,yBAAyB,EACzB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,CACpB;SACF,CAAA;;CACF;AAED,MAAM,YAAY;IAGhB,YACmB,eAAyC,EACzC,IAAY,EACZ,mCAA2D,EAC3D,KAAoE,EACpE,gBAAwC,EACzD,aAA0B,EACT,gBAAuC,EACvC,MAAoC,EACpC,gBAAkC;QARlC,oBAAe,GAAf,eAAe,CAA0B;QACzC,SAAI,GAAJ,IAAI,CAAQ;QACZ,wCAAmC,GAAnC,mCAAmC,CAAwB;QAC3D,UAAK,GAAL,KAAK,CAA+D;QACpE,qBAAgB,GAAhB,gBAAgB,CAAwB;QAExC,qBAAgB,GAAhB,gBAAgB,CAAuB;QACvC,WAAM,GAAN,MAAM,CAA8B;QACpC,qBAAgB,GAAhB,gBAAgB,CAAkB;QAEnD,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAC3D,CAAC;IAID,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAA;IACzC,CAAC;IAED,IAAI,OAAO;;QACT,OAAO,CACL,MAAA,IAAI,CAAC,QAAQ,mCAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,oBAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACjJ,CAAA;IACH,CAAC;IAID,IAAI,OAAO;;QACT,OAAO,CACL,MAAA,IAAI,CAAC,QAAQ,mCACb,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,4BAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACjI,CAAA;IACH,CAAC;IAID,IAAI,mBAAmB;;QACrB,OAAO,CACL,MAAA,IAAI,CAAC,oBAAoB,mCACzB,CAAC,IAAI,CAAC,oBAAoB,GAAG,IAAI,gCAAsB,CACrD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,kBAAkB;;QACpB,OAAO,CACL,MAAA,IAAI,CAAC,mBAAmB,mCACxB,CAAC,IAAI,CAAC,mBAAmB,GAAG,IAAI,+BAAqB,CACnD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,OAAO;;QACT,OAAO,MAAA,IAAI,CAAC,QAAQ,mCAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,uBAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAChJ,CAAC;IAID,IAAI,kBAAkB;;QACpB,OAAO,CACL,MAAA,IAAI,CAAC,mBAAmB,mCACxB,CAAC,IAAI,CAAC,mBAAmB,GAAG,IAAI,yBAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAChJ,CAAA;IACH,CAAC;IAID,IAAI,aAAa;;QACf,OAAO,CACL,MAAA,IAAI,CAAC,cAAc,mCACnB,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,0BAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAC5I,CAAA;IACH,CAAC;IAID,IAAI,YAAY;;QACd,OAAO,CACL,MAAA,IAAI,CAAC,aAAa,mCAClB,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,sCAAgB,CACxC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,SAAS,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,SAAS,EACvF,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,SAAS;;QACX,OAAO,CACL,MAAA,IAAI,CAAC,UAAU,mCACf,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,sBAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACpI,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,kCAAc,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,OAAO,EACZ,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,EACV,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,OAAO,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,OAAO,EACnF,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,OAAO,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,OAAO,CACpF,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,OAAO;;QACT,OAAO,CACL,MAAA,IAAI,CAAC,QAAQ,mCACb,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,4BAAW,CAC9B,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,QAAQ;;QACV,OAAO,CACL,MAAA,IAAI,CAAC,SAAS,mCACd,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,qBAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAClI,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,kCAAc,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,YAAY;;QACd,OAAO,CACL,MAAA,IAAI,CAAC,aAAa,mCAClB,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,yBAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAC1I,CAAA;IACH,CAAC;IAID,IAAI,WAAW;;QACb,OAAO,CACL,MAAA,IAAI,CAAC,YAAY,mCACjB,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,oCAAe,CACtC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,oBAAoB;;QACtB,OAAO,CACL,MAAA,IAAI,CAAC,qBAAqB,mCAC1B,CAAC,IAAI,CAAC,qBAAqB,GAAG,IAAI,oCAAe,CAC/C,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,OAAO,EACZ,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,aAAa,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,aAAa,EAC/F,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,iBAAiB;;QACnB,OAAO,CACL,MAAA,IAAI,CAAC,kBAAkB,mCACvB,CAAC,IAAI,CAAC,kBAAkB,GAAG,IAAI,gDAAqB,CAClD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,eAAe;;QACjB,OAAO,CACL,MAAA,IAAI,CAAC,gBAAgB,mCACrB,CAAC,IAAI,CAAC,gBAAgB,GAAG,IAAI,6CAAmB,CAC9C,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,YAAY,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,YAAY,EAC7F,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,kCAAc,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,YAAY;;QACd,OAAO,CACL,MAAA,IAAI,CAAC,aAAa,mCAClB,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,uCAAgB,CACxC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,kCAAc,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,oBAAoB,EACzB,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,OAAO,EACZ,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,OAAO,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,OAAO,EACnF,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,kCAAc,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,OAAO,EACZ,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,OAAO,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,OAAO,EACnF,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,QAAQ;;QACV,OAAO,CACL,MAAA,IAAI,CAAC,SAAS,mCACd,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,8BAAY,CAChC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,OAAO,EACZ,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,KAAK,EAC/E,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,kBAAkB;;QACpB,OAAO,CACL,MAAA,IAAI,CAAC,mBAAmB,mCACxB,CAAC,IAAI,CAAC,mBAAmB,GAAG,IAAI,+BAAqB,CACnD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,sBAAsB;;QACxB,OAAO,CACL,MAAA,IAAI,CAAC,uBAAuB,mCAC5B,CAAC,IAAI,CAAC,uBAAuB,GAAG,IAAI,mCAAyB,CAC3D,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,uBAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACtI,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,kCAAc,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,oBAAoB,EACzB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,uBAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACtI,CAAA;IACH,CAAC;IAID,IAAI,iBAAiB;;QACnB,OAAO,CACL,MAAA,IAAI,CAAC,kBAAkB,mCACvB,CAAC,IAAI,CAAC,kBAAkB,GAAG,IAAI,8BAAoB,CACjD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,iBAAiB;;QACnB,OAAO,CACL,MAAA,IAAI,CAAC,kBAAkB,mCACvB,CAAC,IAAI,CAAC,kBAAkB,GAAG,IAAI,8BAAoB,CACjD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,uBAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACtI,CAAA;IACH,CAAC;IAID,IAAI,yBAAyB;;QAC3B,OAAO,CACL,MAAA,IAAI,CAAC,0BAA0B,mCAC/B,CAAC,IAAI,CAAC,0BAA0B,GAAG,IAAI,sCAA4B,CACjE,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,cAAc;;QAChB,OAAO,CACL,MAAA,IAAI,CAAC,eAAe,mCACpB,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,0CAAkB,CAC5C,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,iBAAiB;;QACnB,OAAO,CACL,MAAA,IAAI,CAAC,kBAAkB,mCACvB,CAAC,IAAI,CAAC,kBAAkB,GAAG,IAAI,8BAAoB,CACjD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,oBAAoB;;QACtB,OAAO,CACL,MAAA,IAAI,CAAC,qBAAqB,mCAC1B,CAAC,IAAI,CAAC,qBAAqB,GAAG,IAAI,iCAAuB,CACvD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,QAAQ;;QACV,OAAO,CACL,MAAA,IAAI,CAAC,SAAS,mCACd,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,qBAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAClI,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,uBAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACtI,CAAA;IACH,CAAC;IAID,IAAI,QAAQ;;QACV,OAAO,CACL,MAAA,IAAI,CAAC,SAAS,mCACd,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,qBAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAClI,CAAA;IACH,CAAC;IAID,IAAI,QAAQ;;QACV,OAAO,CACL,MAAA,IAAI,CAAC,SAAS,mCACd,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,qBAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAClI,CAAA;IACH,CAAC;IAID,IAAI,SAAS;;QACX,OAAO,CACL,MAAA,IAAI,CAAC,UAAU,mCACf,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,sBAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACpI,CAAA;IACH,CAAC;IAID,IAAI,cAAc;;QAChB,OAAO,CACL,MAAA,IAAI,CAAC,eAAe,mCACpB,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,2BAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAC9I,CAAA;IACH,CAAC;IAID,IAAI,eAAe;;QACjB,OAAO,CACL,MAAA,IAAI,CAAC,gBAAgB,mCACrB,CAAC,IAAI,CAAC,gBAAgB,GAAG,IAAI,4BAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAChJ,CAAA;IACH,CAAC;IAID,IAAI,MAAM;;QACR,OAAO,CACL,MAAA,IAAI,CAAC,OAAO,mCAAI,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,mBAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAC9I,CAAA;IACH,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,CAAA;IACvC,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,eAAe,CAAC,YAAY,CAAA;IAC1C,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,CAAA;IACvC,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAA;IAChD,CAAC;IAED,IAAI,uBAAuB;QACzB,OAAO,IAAI,CAAC,eAAe,CAAC,uBAAuB,CAAA;IACrD,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAA;IAChD,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAA;IACrC,CAAC;IAEK,aAAa;;;YACjB,IAAI,CAAC,mBAAmB,GAAG,CAAC,MAAA,IAAI,CAAC,gBAAgB,mCAAI,IAAI,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,CAAA;YACrF,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,gBAAgB,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAA;;KAChG;IAEK,WAAW,CAAC,UAAkB;;YAClC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAA;YACtD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mCAAmC,CAAC,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;YAChH,MAAM,eAAe,GAAG,MAAM,4BAA4B,CACxD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,KAAK,EACV,gBAAgB,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,SAAS,CAAC,UAAU,CAC1B,CAAA;YACD,OAAO,IAAI,YAAY,CACrB,eAAe,EACf,IAAI,CAAC,IAAI,EACT,gBAAgB,EAChB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,gBAAgB,EACrB,eAAe,EACf,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAE,EACtD,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,gBAAgB,CACtB,CAAA;QACH,CAAC;KAAA;CACF;AAqBD,MAAM,iBAAiB;IAerB,IAAI,SAAS;;QACX,OAAO,CACL,MAAA,IAAI,CAAC,UAAU,mCAAI,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,sBAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAC9I,CAAA;IACH,CAAC;IACD,IAAI,OAAO;;QACT,OAAO,MAAA,IAAI,CAAC,QAAQ,mCAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,oBAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAChJ,CAAC;IACD,IAAI,OAAO;;QACT,OAAO,MAAA,IAAI,CAAC,QAAQ,mCAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,4BAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACjJ,CAAC;IACD,IAAI,SAAS;;QACX,OAAO,CACL,MAAA,IAAI,CAAC,UAAU,mCACf,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,gCAAa,CAClC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IACD,IAAI,kBAAkB;;QACpB,OAAO,CACL,MAAA,IAAI,CAAC,mBAAmB,mCACxB,CAAC,IAAI,CAAC,mBAAmB,GAAG,IAAI,yBAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACvI,CAAA;IACH,CAAC;IACD,IAAI,QAAQ;;QACV,OAAO,MAAA,IAAI,CAAC,SAAS,mCAAI,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,qBAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACnJ,CAAC;IACD,IAAI,kBAAkB;;QACpB,OAAO,CACL,MAAA,IAAI,CAAC,mBAAmB,mCACxB,CAAC,IAAI,CAAC,mBAAmB,GAAG,IAAI,kCAAc,CAC5C,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IACD,IAAI,YAAY;;QACd,OAAO,CACL,MAAA,IAAI,CAAC,aAAa,mCAClB,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,yBAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACjI,CAAA;IACH,CAAC;IACD,IAAI,aAAa;;QACf,OAAO,CACL,MAAA,IAAI,CAAC,cAAc,mCACnB,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,0BAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACnI,CAAA;IACH,CAAC;IACD,IAAI,OAAO;;QACT,OAAO,CACL,MAAA,IAAI,CAAC,QAAQ,mCACb,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,4BAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACtI,CAAA;IACH,CAAC;IAEK,aAAa;;;YACjB,IAAI,CAAC,IAAI,CAAC,gBAAgB;gBAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,EAAE,CAAA;YACnF,IAAI,CAAC,mBAAmB,GAAG,CAAC,MAAA,IAAI,CAAC,gBAAgB,mCAAI,IAAI,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,CAAA;YACrF,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,gBAAgB,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAA;;KAChG;IAED,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAAI,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,uBAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACjJ,CAAA;IACH,CAAC;IAED,IAAI,OAAO;;QACT,OAAO,MAAA,IAAI,CAAC,QAAQ,mCAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,uBAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAChJ,CAAC;IAEK,WAAW,CAAC,UAAkB;;YAClC,IAAI,CAAC,IAAI,CAAC,gBAAgB;gBAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAA;YAC7H,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAA;YACtD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mCAAmC,CAAC,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;YAChH,OAAO,IAAI,iBAAiB,CAC1B,IAAI,CAAC,IAAI,EACT,gBAAgB,EAChB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,gBAAgB,EACrB,eAAe,EACf,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAE,EACtD,IAAI,CAAC,MAAM,CACZ,CAAA;QACH,CAAC;KAAA;IAED,YACmB,IAAY,EACZ,mCAA2D,EAC3D,KAAoE,EACpE,gBAAwC,EACzD,aAA0B,EACT,gBAAuC,EACvC,MAAyC;QANzC,SAAI,GAAJ,IAAI,CAAQ;QACZ,wCAAmC,GAAnC,mCAAmC,CAAwB;QAC3D,UAAK,GAAL,KAAK,CAA+D;QACpE,qBAAgB,GAAhB,gBAAgB,CAAwB;QAExC,qBAAgB,GAAhB,gBAAgB,CAAuB;QACvC,WAAM,GAAN,MAAM,CAAmC;QAE1D,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAC3D,CAAC;CACF;AAqBD,IAAU,oBAAoB,CAa7B;AAbD,WAAU,oBAAoB;IAC5B,IAAiB,QAAQ,CAExB;IAFD,WAAiB,QAAQ;QACV,gBAAO,GAAG,EAAE,CAAA;IAC3B,CAAC,EAFgB,QAAQ,GAAR,6BAAQ,KAAR,6BAAQ,QAExB;IACD,MAAa,YAAY;QACvB,YAAY,MAA4B;;YACtC,IAAI,CAAC,OAAO,GAAG,MAAA,MAAM,CAAC,OAAO,mCAAI,QAAQ,CAAC,OAAO,CAAA;YACjD,IAAI,CAAC,aAAa,GAAG,MAAA,MAAM,CAAC,aAAa,mCAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAQ,CAAC,CAAC,CAAA;QAChG,CAAC;KAIF;IARY,iCAAY,eAQxB,CAAA;AACH,CAAC,EAbS,oBAAoB,KAApB,oBAAoB,QAa7B;AAED,IAAiB,aAAa,CAgC7B;AAhCD,WAAiB,aAAa;IAC5B;;OAEG;IACH,SAAsB,UAAU,CAC9B,IAAY,EACZ,qBAAqE,EACrE,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK,EACT,UAAgC,EAAE;;;YAElC,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;YAC7D,MAAM,gBAAgB,GAAG,MAAM,uCAAuC,CACpE,IAAI,EACJ,qBAAqB,EACrB,MAAA,MAAM,CAAC,OAAO,mCAAI,EAAE,EACpB,SAAS,EACT,MAAM,CAAC,aAAa,CACrB,CAAA;YACD,OAAO,IAAI,iBAAiB,CAC1B,IAAI,EACJ,gBAAgB,CAAC,mCAAmC,EACpD,KAAK,EACL,gBAAgB,CAAC,gBAAgB,EACjC,gBAAgB,CAAC,OAAO,EACxB,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,gBAAgB,CAAC,aAAa,CAAC,EAC1F,MAAM,CACP,CAAA;;KACF;IA3BqB,wBAAU,aA2B/B,CAAA;AACH,CAAC,EAhCgB,aAAa,GAAb,qBAAa,KAAb,qBAAa,QAgC7B;AAED,SAAe,iBAAiB,CAAC,OAAmB;;QAClD,IAAI;YACF,OAAO,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAA;SACxC;QAAC,OAAO,GAAG,EAAE;YACZ,IAAI,GAAG,YAAY,KAAK,IAAI,YAAY,IAAI,GAAG,IAAK,GAAW,CAAC,UAAU,KAAK,GAAG;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;;gBACzG,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;SAChC;IACH,CAAC;CAAA","sourcesContent":["import {\n  IccAgendaApi,\n  IccAnonymousAccessApi,\n  IccApplicationsettingsApi,\n  IccArticleApi,\n  IccAuthApi,\n  IccBeefactApi,\n  IccBeresultexportApi,\n  IccBeresultimportApi,\n  IccBesamv2Api,\n  IccCalendarItemTypeApi,\n  IccClassificationTemplateApi,\n  IccEntityrefApi,\n  IccEntitytemplateApi,\n  IccFrontendmigrationApi,\n  IccGroupApi,\n  IccIcureApi,\n  IccInsuranceApi,\n  IccKeywordApi,\n  IccMedexApi,\n  IccMedicallocationApi,\n  IccPatientApi,\n  IccPermissionApi,\n  IccPlaceApi,\n  IccPubsubApi,\n  IccReplicationApi,\n  IccTarificationApi,\n  IccTmpApi,\n  IccUserApi,\n  OAuthThirdParty,\n} from '../icc-api'\nimport { IccUserXApi } from './icc-user-x-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport { IccContactXApi } from './icc-contact-x-api'\nimport { IccInvoiceXApi } from './icc-invoice-x-api'\nimport { IccDocumentXApi } from './icc-document-x-api'\nimport { IccHcpartyXApi } from './icc-hcparty-x-api'\nimport { IccFormXApi } from './icc-form-x-api'\nimport { IccHelementXApi } from './icc-helement-x-api'\nimport { IccClassificationXApi } from './icc-classification-x-api'\nimport { IccCalendarItemXApi } from './icc-calendar-item-x-api'\nimport { IccPatientXApi } from './icc-patient-x-api'\nimport { IccMessageXApi } from './icc-message-x-api'\nimport { IccReceiptXApi } from './icc-receipt-x-api'\nimport { IccAccesslogXApi } from './icc-accesslog-x-api'\nimport { IccTimeTableXApi } from './icc-time-table-x-api'\nimport { IccCodeXApi } from './icc-code-x-api'\nimport { IccMaintenanceTaskXApi } from './icc-maintenance-task-x-api'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { StorageFacade } from './storage/StorageFacade'\nimport { KeyStorageFacade } from './storage/KeyStorageFacade'\nimport { LocalStorageImpl } from './storage/LocalStorageImpl'\nimport { KeyStorageImpl } from './storage/KeyStorageImpl'\nimport {\n  AuthenticationProvider,\n  EnsembleAuthenticationProvider,\n  JwtAuthenticationProvider,\n  NoAuthenticationProvider,\n} from './auth/AuthenticationProvider'\nimport { CryptoPrimitives, WebCryptoPrimitives } from './crypto/CryptoPrimitives'\nimport { UserEncryptionKeysManager } from './crypto/UserEncryptionKeysManager'\nimport { IcureStorageFacade } from './storage/IcureStorageFacade'\nimport { DefaultStorageEntryKeysFactory } from './storage/DefaultStorageEntryKeysFactory'\nimport { KeyRecovery } from './crypto/KeyRecovery'\nimport { BaseExchangeKeysManager } from './crypto/BaseExchangeKeysManager'\nimport { StorageEntryKeysFactory } from './storage/StorageEntryKeysFactory'\nimport { CryptoStrategies } from './crypto/CryptoStrategies'\nimport { ExchangeKeysManager } from './crypto/ExchangeKeysManager'\nimport { ShamirKeysManager } from './crypto/ShamirKeysManager'\nimport { TransferKeysManager } from './crypto/TransferKeysManager'\nimport { IccIcureMaintenanceXApi } from './icc-icure-maintenance-x-api'\nimport { ConfidentialEntities } from './crypto/ConfidentialEntities'\nimport { ensureDelegationForSelf } from './crypto/utils'\nimport { SecureDelegationsSecurityMetadataDecryptor } from './crypto/SecureDelegationsSecurityMetadataDecryptor'\nimport { initialiseExchangeDataManagerForCurrentDataOwner } from './crypto/ExchangeDataManager'\nimport { BaseExchangeDataManager } from './crypto/BaseExchangeDataManager'\nimport { IccExchangeDataApi } from '../icc-api/api/internal/IccExchangeDataApi'\nimport { UserSignatureKeysManager } from './crypto/UserSignatureKeysManager'\nimport { AccessControlSecretUtils } from './crypto/AccessControlSecretUtils'\nimport { SecureDelegationsEncryption } from './crypto/SecureDelegationsEncryption'\nimport { LegacyDelegationSecurityMetadataDecryptor } from './crypto/LegacyDelegationSecurityMetadataDecryptor'\nimport { ExtendedApisUtilsImpl } from './crypto/ExtendedApisUtilsImpl'\nimport { SecureDelegationsManager } from './crypto/SecureDelegationsManager'\nimport { AccessControlKeysHeadersProvider } from './crypto/AccessControlKeysHeadersProvider'\nimport { IccExchangeDataMapApi } from '../icc-api/api/internal/IccExchangeDataMapApi'\nimport { ExchangeDataMapManager } from './crypto/ExchangeDataMapManager'\nimport { IccDeviceXApi } from './icc-device-x-api'\nimport { IccBekmehrXApi } from './icc-bekmehr-x-api'\nimport { IccDoctemplateXApi } from './icc-doctemplate-x-api'\nimport { UserGroup } from '../icc-api/model/UserGroup'\nimport { IccTopicXApi } from './icc-topic-x-api'\nimport { IccRoleApi } from '../icc-api/api/IccRoleApi'\nimport { DataOwnerTypeEnum } from '../icc-api/model/DataOwnerTypeEnum'\nimport { DelegationsDeAnonymization } from './crypto/DelegationsDeAnonymization'\nimport { JwtBridgedAuthService } from './auth/JwtBridgedAuthService'\nimport { AuthSecretProvider, SmartAuthProvider } from './auth/SmartAuthProvider'\nimport { KeyPairRecoverer } from './crypto/KeyPairRecoverer'\nimport { IccRecoveryDataApi } from '../icc-api/api/internal/IccRecoveryDataApi'\nimport { RecoveryDataEncryption } from './crypto/RecoveryDataEncryption'\nimport { IccRecoveryXApi } from './icc-recovery-x-api'\nimport { getGroupOfJwt } from './auth/JwtUtils'\n\nexport * from './icc-accesslog-x-api'\nexport * from './icc-bekmehr-x-api'\nexport * from './icc-calendar-item-x-api'\nexport * from './icc-classification-x-api'\nexport * from './icc-code-x-api'\nexport * from './icc-contact-x-api'\nexport * from './icc-crypto-x-api'\nexport * from './icc-doctemplate-x-api'\nexport * from './icc-document-x-api'\nexport * from './icc-form-x-api'\nexport * from './icc-hcparty-x-api'\nexport * from './icc-helement-x-api'\nexport * from './icc-invoice-x-api'\nexport * from './icc-message-x-api'\nexport * from './icc-patient-x-api'\nexport * from './icc-user-x-api'\nexport * from './icc-time-table-x-api'\nexport * from './icc-receipt-x-api'\nexport * from './icc-data-owner-x-api'\nexport * from './icc-icure-maintenance-x-api'\nexport * from './icc-maintenance-task-x-api'\nexport * from './icc-recovery-x-api'\nexport * from './utils'\n\nexport * from './crypto/RSA'\nexport * from './crypto/CryptoPrimitives'\nexport * from './crypto/ShareMetadataBehaviour'\nexport * from './auth/AuthenticationProvider'\n\nexport { AuthSecretDetails, AuthSecretType, AuthSecretProvider } from './auth/SmartAuthProvider'\nexport { KeyStorageFacade } from './storage/KeyStorageFacade'\nexport { LocalStorageImpl } from './storage/LocalStorageImpl'\nexport { StorageFacade } from './storage/StorageFacade'\nexport { KeyStorageImpl } from './storage/KeyStorageImpl'\nexport { CryptoStrategies } from './crypto/CryptoStrategies'\nexport { NativeCryptoPrimitivesBridge } from './crypto/NativeCryptoPrimitivesBridge'\nexport { getShaVersionForKey } from './crypto/utils'\n\nexport interface BasicApis {\n  readonly authApi: IccAuthApi\n  readonly codeApi: IccCodeXApi\n  readonly userApi: IccUserXApi\n  readonly permissionApi: IccPermissionApi\n  readonly insuranceApi: IccInsuranceApi\n  readonly entityReferenceApi: IccEntityrefApi\n  readonly agendaApi: IccAgendaApi\n  readonly groupApi: IccGroupApi\n  readonly healthcarePartyApi: IccHcpartyXApi\n  readonly deviceApi: IccDeviceXApi\n  readonly patientApi: IccPatientApi\n  readonly roleApi: IccRoleApi\n}\nexport interface Apis extends BasicApis {\n  readonly calendarItemTypeApi: IccCalendarItemTypeApi\n  readonly medicalLocationApi: IccMedicallocationApi\n  readonly cryptoApi: IccCryptoXApi\n  readonly accessLogApi: IccAccesslogXApi\n  readonly contactApi: IccContactXApi\n  readonly formApi: IccFormXApi\n  readonly invoiceApi: IccInvoiceXApi\n  readonly documentApi: IccDocumentXApi\n  readonly healthcareElementApi: IccHelementXApi\n  readonly classificationApi: IccClassificationXApi\n  readonly calendarItemApi: IccCalendarItemXApi\n  readonly receiptApi: IccReceiptXApi\n  readonly timetableApi: IccTimeTableXApi\n  readonly patientApi: IccPatientXApi\n  readonly messageApi: IccMessageXApi\n  readonly maintenanceTaskApi: IccMaintenanceTaskXApi\n  readonly dataOwnerApi: IccDataOwnerXApi\n  readonly icureMaintenanceTaskApi: IccIcureMaintenanceXApi\n  readonly anonymousAccessApi: IccAnonymousAccessApi\n  readonly applicationSettingsApi: IccApplicationsettingsApi\n  readonly articleApi: IccArticleApi\n  readonly bekmehrApi: IccBekmehrXApi\n  readonly beefactApi: IccBeefactApi\n  readonly beresultexportApi: IccBeresultexportApi\n  readonly beresultimportApi: IccBeresultimportApi\n  readonly besamv2Api: IccBesamv2Api\n  readonly classificationTemplateApi: IccClassificationTemplateApi\n  readonly doctemplateApi: IccDoctemplateXApi\n  readonly entitytemplateApi: IccEntitytemplateApi\n  readonly frontendmigrationApi: IccFrontendmigrationApi\n  readonly icureApi: IccIcureApi\n  readonly keywordApi: IccKeywordApi\n  readonly medexApi: IccMedexApi\n  readonly placeApi: IccPlaceApi\n  readonly pubsubApi: IccPubsubApi\n  readonly replicationApi: IccReplicationApi\n  readonly tarificationApi: IccTarificationApi\n  readonly tmpApi: IccTmpApi\n  readonly topicApi: IccTopicXApi\n  readonly recoveryApi: IccRecoveryXApi\n}\n\n/**\n * Allows to customise the behaviour of the iCure API by providing various optional parameters.\n */\nexport interface IcureApiOptions {\n  /**\n   * Specifies how iCure can store string values (e.g. json). In production this should be persistent storage.\n   * @default the browser's localStorage.\n   */\n  readonly storage?: StorageFacade<string>\n  /**\n   * Specifies how iCure can store cryptographic keys. Preferably this should be some ad-hoc storage key storage.\n   * @default stores the json of the jwk representation of the key in {@link storage}.\n   */\n  readonly keyStorage?: KeyStorageFacade\n  /**\n   * Specifies where iCure should store his data within the {@link storage} and {@link keyStorage}.\n   * @default {@link DefaultStorageEntryKeysFactory}\n   */\n  readonly entryKeysFactory?: StorageEntryKeysFactory\n  /**\n   * Specifies if iCure should automatically create maintenance tasks for requesting access back when a new key is generated at initialisation time.\n   * Note that the maintenance task will be created only towards HCP data owners: if you want to create a maintenance task also to other types of data\n   * owners you should disable this and call {@link IccIcureMaintenanceXApi.createMaintenanceTasksForNewKeypair} yourself.\n   * @default true\n   */\n  readonly createMaintenanceTasksOnNewKey?: boolean\n  /**\n   * Additional headers to use on each request made by the iCure api.\n   * @default no additional headers\n   */\n  readonly headers?: { [headerName: string]: string }\n  /**\n   * Specifies which fields should be encrypted for each kind of encryptable entity. You should make sure that every application in your environment\n   * specifies the same values for this configuration.\n   * @default see documentation for {@link EncryptedFieldsConfig}\n   */\n  readonly encryptedFieldsConfig?: EncryptedFieldsConfig\n  /**\n   * Each user may exist in multiple groups, but an instance of {@link IcureApi} is specialised for a single group. This function allows you to decide\n   * the group to use for a given user.\n   * This functions will be called only if a user exists in at least 2 groups, and takes in input:\n   * - the information on the groups the user can access (in no specific order)\n   * - if the authentication method uses JWT also the current group id (undefined otherwise)\n   * The function must return the id of one of the available groups.\n   * @default takes the first group provided. The group chosen by this method may vary between different instantiations of the {@link IcureApi} even\n   * if for the same user and if the groups available for the user do not change.\n   */\n  readonly groupSelector?: (availableGroupsInfo: UserGroup[], currentGroupId?: string) => Promise<string>\n  /**\n   * Temporary value to support EHR Lite and MedTech api implementations.\n   *\n   * Currently, all hcps are able to access encrypted data shared with any of their parents, and on initialisation the api will verify that there is a\n   * key pair available for the current user and for every parent of the user. If this option is set to true, the api will not load keys for the\n   * parent users.\n   *\n   * This \"implicit data-sharing scheme\" (each parent HCP is essentially sharing data with all its children HCPs), however, may not be ideal for all\n   * use cases, and it will be changed in future to be configurable in order to make it more general.\n   * @default false, equivalent to previous behaviour.\n   */\n  readonly disableParentKeysInitialisation?: boolean\n}\n\nnamespace IcureApiOptions {\n  export namespace Defaults {\n    export const entryKeysFactory = new DefaultStorageEntryKeysFactory()\n    export const createMaintenanceTasksOnNewKey = true\n    export const headers = {}\n  }\n\n  export class WithDefaults implements IcureApiOptions {\n    readonly entryKeysFactory: StorageEntryKeysFactory\n    readonly createMaintenanceTasksOnNewKey: boolean\n    readonly storage: StorageFacade<string>\n    readonly keyStorage: KeyStorageFacade\n    readonly headers: { [headerName: string]: string }\n    readonly encryptedFieldsConfig: EncryptedFieldsConfig\n    readonly groupSelector: (availableGroupsInfo: UserGroup[]) => Promise<string>\n    readonly disableParentKeysInitialisation: boolean\n\n    constructor(custom: IcureApiOptions) {\n      this.entryKeysFactory = custom.entryKeysFactory ?? Defaults.entryKeysFactory\n      this.createMaintenanceTasksOnNewKey = custom.createMaintenanceTasksOnNewKey ?? Defaults.createMaintenanceTasksOnNewKey\n      this.storage = custom.storage ?? new LocalStorageImpl()\n      this.keyStorage = custom.keyStorage ?? new KeyStorageImpl(this.storage)\n      this.headers = custom.headers ?? Defaults.headers\n      this.encryptedFieldsConfig = custom.encryptedFieldsConfig ?? {}\n      this.groupSelector = custom.groupSelector ?? ((groups) => Promise.resolve(groups[0].groupId!))\n      this.disableParentKeysInitialisation = custom.disableParentKeysInitialisation ?? false\n    }\n  }\n}\n\n/**\n * Specifies which fields should be encrypted for each kind of encryptable entity.\n *\n * Note that any value you specify here overrides the default values. For example if you specify `['medicalLocationId']` for `healthElement` the\n * fields `['descr', 'note']` which are usually encrypted by default will no longer be encrypted. If you want to add fields to the default values\n * you can use {@link EncryptedFieldsConfig.Defaults}, for example `[...EncryptedFieldsConfig.Defaults.healthElement, 'medicalLocationId'].\n *\n * # Encrypted fields syntax\n *\n * ## Grammar\n *\n * The grammar for each encrypted field is the following:\n * ```\n * fieldName :=\n *   regex([a-zA-Z_][a-zA-Z0-9_]+)\n * encryptedField :=\n *   fieldName\n *   | fieldName + (\".\" | \".*.\" | \"[].\") + encryptedField\n * ```\n *\n * This grammar allows you to specify the fields to encrypt for the object and recursively for nested objects.\n * - A string containing only a single `fieldName` will encrypt the field with the given name.\n * - A string starting with `fieldName.` allows to specify the encrypted fields of a nested object. The encrypted values of the\n *   fields in the nested object will be saved in the nested object.\n * - A string starting with `fieldName.*.` treats `fieldName` as a map/dictionary data structure and allows to specify the encrypted fields of the\n *   values of the map. Note that the values of the map must be objects as well. The encrypted content of each map value is stored in that value.\n * - A string starting with `fieldName[].` treats `fieldName` as an array and allows to specify the encrypted fields of the values of the array.\n *   Note that the values of the array must be objects as well. The encrypted content of each array element is stored in that element.\n *\n * ## Example\n *\n * Consider the following object and encryption keys:\n * ```javascript\n * const obj = {\n *   a: { x: 0, y: 1 },\n *   b: \"hello\",\n *   c: [ { public: \"a\", secret: \"b\" }, { public: \"c\", secret: \"d\" } ],\n *   d: \"ok\",\n *   e: {\n *     info: \"something\",\n *     private: \"secret\",\n *     dataMap: {\n *       \"en\": {\n *         a: 1,\n *         b: 2\n *       },\n *       \"fr\": {\n *         a: 3,\n *         b: 4\n *       }\n *     }\n *   }\n * }\n * const encryptedFields = [\n *   \"a\",\n *   \"c[].secret\",\n *   \"d\",\n *   \"e.private\",\n *   \"e.datamap.*.a\"\n * ]\n * ```\n * If you use them with the crypt method you will get the following result:\n * ```json\n * {\n *   b: \"hello\",\n *   c: [\n *     { public: \"a\", encryptedSelf: 'encrypted+encoded { secret: \"b\" }' },\n *     { public: \"c\", encryptedSelf: 'encrypted+encoded { secret: \"d\" }' }\n *   ],\n *   e: {\n *     info: \"something\",\n *     dataMap: {\n *       \"en\": { b: 2, encryptedSelf: 'encrypted+encoded { a: 1 }' },\n *       \"fr\": { b: 4, encryptedSelf: 'encrypted+encoded { a: 3 }' }\n *     },\n *     encryptedSelf: 'encrypted+encoded { private: \"secret\" }'\n *   },\n *   encryptedSelf: 'encrypted+encoded { a: { x: 0, y: 1 }, d: \"ok\" }'\n * }\n * ```\n *\n * ## Shortened representation\n *\n * You can also group encrypted fields having the same prefix by concatenating to the prefix the JSON representation of an array of all the postfixes.\n * For example the following encrypted fields:\n * ```javascript\n * const encryptedFields = [\"a.b.c.d.e.f1\", \"a.b.c.d.e.f2\", \"a.b.c.d.e.f3\", \"a.b.c.d.e.f4\"]\n * ```\n * can be shortened to\n * ```javascript\n * const encryptedFields = ['a.b.c.d.e.[\"f1\",\"f2\",\"f3\",\"f4\"]'] // Note the use of single quotes to avoid escaping the double quotes\n * ```\n * If you use the shortened representation you may need to escape nested json representations. In that case the use of `JSON.stringify` is\n * recommended.\n */\nexport interface EncryptedFieldsConfig {\n  /**\n   * Fields to encrypt for entities of type {@link AccessLog}\n   * @default ['detail', 'objectId']\n   */\n  readonly accessLog?: string[]\n  /**\n   * Fields to encrypt for entities of type {@link CalendarItem}\n   * @default ['details', 'title', 'patientId']\n   */\n  readonly calendarItem?: string[]\n  /**\n   * Fields to encrypt for entities of type {@link Contact}, excluding `services`. You can specify which fields of `services` should be encrypted\n   * using {@link service}.\n   * @default ['descr'] // encryption of `services` is managed through {@link service}\n   */\n  readonly contact?: string[]\n  /**\n   * Fields to encrypt for entities of type {@link Service}. Note that encryption of the `content` field and recursively contained `Services` through\n   * `content.compoundValue` is automatically managed by the sdk, and you are not allowed to modify it.\n   *\n   * Note: any non-empty values for this field will break bi-directional data compatibility between v7 and previous: Contacts created with\n   * v7 will not be read properly by previous versions. If you want\n   * @default ['notes[].markdown'] // encryption of `content` is managed in a special way\n   */\n  readonly service?: string[]\n  /**\n   * Fields to encrypt for entities of type {@link HealthElement}\n   * @default ['descr', 'note', 'notes[].markdown']\n   */\n  readonly healthElement?: string[]\n  /**\n   * Fields to encrypt for entities of type {@link MaintenanceTask}\n   * @default ['properties']\n   */\n  readonly maintenanceTask?: string[]\n  /**\n   * Fields to encrypt for entities of type {@link Patient}\n   * @default ['note', 'notes[].markdown']\n   */\n  readonly patient?: string[]\n\n  /**\n   * Fields to encrypt for entities of type {@link Message}\n   * @default []\n   */\n  readonly message?: string[]\n\n  /**\n   * Fields to encrypt for entities of type {@link Topic}\n   * @default ['description']\n   */\n  readonly topic?: string[]\n}\n\nexport namespace EncryptedFieldsConfig {\n  export const Defaults = {\n    accessLog: ['detail', 'objectId'],\n    calendarItem: ['details', 'title', 'patientId'],\n    contact: ['descr', 'notes[].markdown'],\n    service: ['notes[].markdown'],\n    healthElement: ['descr', 'note', 'notes[].markdown'],\n    maintenanceTask: ['properties'],\n    patient: ['note', 'notes[].markdown'],\n    message: [],\n    topic: ['description', 'linkedServices', 'linkedHealthElements'],\n  }\n}\n\n/**\n * Details for the authentication of a user\n */\nexport type AuthenticationDetails =\n  | {\n      username: string\n      password: string\n      thirdPartyTokens?: { [thirdParty: string]: string }\n    }\n  | {\n      icureTokens: { token: string; refreshToken: string }\n      credentials?: { username: string; password: string }\n    }\n  | {\n      thirdPartyTokens: { [thirdParty: string]: string }\n    }\n  | SmartAuthenticationDetails\n\n/**\n * Allows to perform authentication through an {@link AuthSecretProvider}.\n *\n * The iCure SDK can authenticate to the backend using different kinds of secrets, such as passwords, long-lived authentication tokens, and\n * short-lived authentication tokens generated through the message gateway. iCure associates to each kind of secret a certain security level, and for\n * some sensitive operations, depending on the configurations of the user and his group, some operations may require a secret of a certain security\n * level. For example, with the default configurations, in order to change his own email the user can't have logged in with a long-lived token, but he\n * needs to provide his current password or a short-lived token.\n *\n * By using this authentication option, the iCure SDK will automatically request and cache the secret from the {@link AuthSecretProvider} only when\n * needed, which should help to minimise the interaction with the user.\n *\n * Another advantage of using this authentication option over others is that in case all the cached tokens and secrets were to expire while performing\n * a request, instead of having the request fail the SDK will ask for a new secret from the {@link SmartAuthProvider} and the request will\n * automatically be retried with the new secret.\n *\n * You must provide the following information:\n * - username: any kind of value that can identify the user (userId, groupId/userId, username, email, ...). More generic identifiers, valid\n *   on multiple groups, allow for simpler group switching by using {@link IcureApi.switchGroup}.\n * - secretProvider: the secret provider to use for authentication. Will handle interaction with the gui.\n *\n * You can also provide the following optional information, which may allow to reduce the requests for secrets initially:\n * - initialSecret: an initial secret (password, token, ...) that will be used to get new authentication tokens as needed. If it is expired it will be ignored.\n * - initialAuthToken: an initial authentication token used on each request. If it is expired it will be ignored.\n * - initialRefreshToken: an initial refresh token used to get new authentication tokens as needed. If it is expired it will be ignored.\n */\nexport type SmartAuthenticationDetails = {\n  username: string\n  secretProvider: AuthSecretProvider\n  initialSecret?:\n    | {\n        password: string\n      }\n    | {\n        longToken: string\n      }\n    | {\n        oauthToken: string\n        oauthType: OAuthThirdParty\n      }\n  initialAuthToken?: string\n  initialRefreshToken?: string\n}\n\n/**\n * Main entry point for the iCure API. Provides entity-specific sub-apis and some general methods which are not related to a specific entity.\n */\nexport interface IcureApi extends Apis {\n  /**\n   * Get the information on groups that the current user can access and the current group that this api instance is working on.\n   * Note that the values you will get for `availableGroups` may differ from the values you would get if you call {@link IccUserApi.getMatchingUsers}\n   * on {@link Apis.userApi}, since the latter is specialised on the specific instance of the user in `currentGroup`.\n   * - `currentGroup`: the group that this api instance is working on, or undefined if the backend environment is not multi-group.\n   * - `availableGroups`: the list of groups that the current user can access with the provided secret. Empty if the backend environment is not\n   * multi-group.\n   */\n  getGroupsInfo(): Promise<{ currentGroup: UserGroup | undefined; availableGroups: UserGroup[] }>\n\n  /**\n   * Switches the api to allow the user to work on a different group.\n   * @param newGroupId the id of the group to switch to.\n   * @return a new api for the specified group.\n   */\n  switchGroup(newGroupId: string): Promise<IcureApi>\n}\n\nexport namespace IcureApi {\n  /**\n   * Initialises a new instance of the iCure API.\n   */\n  export async function initialise(\n    host: string,\n    authenticationOptions: AuthenticationDetails | AuthenticationProvider,\n    cryptoStrategies: CryptoStrategies,\n    crypto: Crypto | CryptoPrimitives = typeof window !== 'undefined' ? window.crypto : typeof self !== 'undefined' ? self.crypto : ({} as Crypto),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch,\n    options: IcureApiOptions = {}\n  ): Promise<IcureApi> {\n    const params = new IcureApiOptions.WithDefaults(options)\n    let authenticationProviderInfo = await initialiseAuthProviderWithGroupSelector(\n      host,\n      authenticationOptions,\n      params.headers,\n      fetchImpl,\n      params.groupSelector\n    )\n    const cryptoInitInfo = await initialiseCryptoWithProvider(\n      host,\n      fetchImpl,\n      authenticationProviderInfo.groupSpecificAuthenticationProvider,\n      params,\n      cryptoStrategies,\n      crypto\n    )\n    return new IcureApiImpl(\n      cryptoInitInfo,\n      host,\n      authenticationProviderInfo.groupSpecificAuthenticationProvider,\n      fetch,\n      authenticationProviderInfo.grouplessUserApi,\n      authenticationProviderInfo.matches,\n      authenticationProviderInfo.matches.find((match) => match.groupId === authenticationProviderInfo.chosenGroupId),\n      params,\n      cryptoStrategies\n    )\n  }\n}\n\nasync function getAuthenticationProvider(\n  host: string,\n  authenticationOptions: AuthenticationDetails | AuthenticationProvider,\n  headers: { [headerName: string]: string },\n  fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response>\n) {\n  let authenticationProvider: AuthenticationProvider\n  if ('getIcureTokens' in authenticationOptions && 'switchGroup' in authenticationOptions && 'getAuthService' in authenticationOptions) {\n    authenticationProvider = authenticationOptions\n  } else if ('icureTokens' in authenticationOptions && !!authenticationOptions.icureTokens) {\n    authenticationProvider = new JwtAuthenticationProvider(\n      new IccAuthApi(host, headers, new NoAuthenticationProvider(), fetchImpl),\n      authenticationOptions?.credentials?.username,\n      authenticationOptions?.credentials?.password,\n      undefined,\n      authenticationOptions.icureTokens\n    )\n  } else if (\n    'username' in authenticationOptions &&\n    'password' in authenticationOptions &&\n    !!authenticationOptions.username &&\n    !!authenticationOptions.password\n  ) {\n    authenticationProvider = new EnsembleAuthenticationProvider(\n      new IccAuthApi(host, headers, new NoAuthenticationProvider(), fetchImpl),\n      authenticationOptions.username,\n      authenticationOptions.password,\n      3600,\n      undefined,\n      undefined,\n      authenticationOptions.thirdPartyTokens\n    )\n  } else if ('thirdPartyTokens' in authenticationOptions && !!authenticationOptions.thirdPartyTokens) {\n    authenticationProvider = new JwtAuthenticationProvider(\n      new IccAuthApi(host, headers, new NoAuthenticationProvider(), fetchImpl),\n      undefined,\n      undefined,\n      new JwtBridgedAuthService(\n        new IccAuthApi(host, headers, new NoAuthenticationProvider(), fetchImpl),\n        undefined,\n        undefined,\n        authenticationOptions.thirdPartyTokens,\n        undefined\n      )\n    )\n  } else if ('username' in authenticationOptions && 'secretProvider' in authenticationOptions) {\n    authenticationProvider = SmartAuthProvider.initialise(\n      new IccAuthApi(host, headers, new NoAuthenticationProvider(), fetchImpl),\n      authenticationOptions.username,\n      authenticationOptions.secretProvider,\n      {\n        initialSecret: authenticationOptions.initialSecret,\n        initialAuthToken: authenticationOptions.initialAuthToken,\n        initialRefreshToken: authenticationOptions.initialRefreshToken,\n      }\n    )\n  } else {\n    throw new Error('Invalid authentication options provided')\n  }\n  return authenticationProvider\n}\n\nasync function initialiseAuthProviderWithGroupSelector(\n  host: string,\n  authenticationOptions: AuthenticationDetails | AuthenticationProvider,\n  headers: { [headerName: string]: string },\n  fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response>,\n  groupSelector: ((availableGroupsInfo: UserGroup[], currentGroupId?: string) => Promise<string>) | undefined\n) {\n  let grouplessAuthenticationProvider = await getAuthenticationProvider(host, authenticationOptions, headers, fetchImpl)\n  const grouplessUserApi = new IccUserApi(host, headers, grouplessAuthenticationProvider, fetchImpl)\n  const matches = await getMatchesOrEmpty(grouplessUserApi)\n  const tokens = await grouplessAuthenticationProvider.getIcureTokens()\n  const currentGroupId = tokens ? getGroupOfJwt(tokens.token) : undefined\n  const chosenGroupId = matches.length > 1 && !!groupSelector ? await groupSelector(matches, currentGroupId) : matches[0]?.groupId\n  /*TODO\n   * On new very new users switching the authentication provider to a specific group may fail and block the user for too many requests. This is\n   * probably linked to replication of the user in the fallback database.\n   */\n  /*\n   * If the auth provider is initialized with credentials and jwt not switching the group will may cause issues:\n   * 1. The default group for the user is group A\n   * 2. The user logs in to group B -> the provider is switched\n   * 3. The user refreshes the page -> a new instance of the api with initial iCure tokens is created\n   * 4. The refresh token is expired / the user needs to do a high security operation -> a new login is done .If we did\n   *    not switch the provider here the login would default to group A, potentially causing a lot of issues...\n   */\n  const groupSpecificAuthenticationProvider = !!chosenGroupId\n    ? await grouplessAuthenticationProvider.switchGroup(chosenGroupId, matches)\n    : grouplessAuthenticationProvider\n  return {\n    groupSpecificAuthenticationProvider,\n    // No need for a groupless user api on a group-specific smart auth provider\n    grouplessUserApi: groupSpecificAuthenticationProvider instanceof SmartAuthProvider ? undefined : grouplessUserApi,\n    matches,\n    chosenGroupId,\n  }\n}\n\n// Apis which are used during crypto api initialisation, to avoid re-instantiating them later\ntype CryptoInitialisationInfo = {\n  cryptoApi: IccCryptoXApi\n  healthcarePartyApi: IccHcpartyXApi\n  deviceApi: IccDeviceXApi\n  // no patient api since it is base\n  dataOwnerApi: IccDataOwnerXApi\n  userApi: IccUserXApi\n  icureMaintenanceTaskApi: IccIcureMaintenanceXApi\n  maintenanceTaskApi: IccMaintenanceTaskXApi\n  headers: { [headerName: string]: string }\n  dataOwnerRequiresAnonymousDelegation: boolean\n  recoveryApi: IccRecoveryXApi\n}\n\nconst REQUEST_AUTOFIX_ANONYMITY_HEADER = 'Icure-Request-Autofix-Anonymity'\n\nasync function initialiseCryptoWithProvider(\n  host: string,\n  fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response>,\n  groupSpecificAuthenticationProvider: AuthenticationProvider,\n  params: IcureApiOptions.WithDefaults,\n  cryptoStrategies: CryptoStrategies,\n  crypto: Crypto | CryptoPrimitives\n): Promise<CryptoInitialisationInfo> {\n  const initialDataOwnerStub = await new IccDataOwnerXApi(\n    host,\n    params.headers,\n    groupSpecificAuthenticationProvider,\n    fetchImpl\n  ).getCurrentDataOwnerStub()\n  const dataOwnerRequiresAnonymousDelegation = cryptoStrategies.dataOwnerRequiresAnonymousDelegation(initialDataOwnerStub)\n  let updatedHeaders = params.headers\n  if (!Object.keys(updatedHeaders).includes(REQUEST_AUTOFIX_ANONYMITY_HEADER)) {\n    if (initialDataOwnerStub.type == DataOwnerTypeEnum.Patient || initialDataOwnerStub.type == DataOwnerTypeEnum.Device) {\n      if (!dataOwnerRequiresAnonymousDelegation) {\n        updatedHeaders = { ...updatedHeaders, [REQUEST_AUTOFIX_ANONYMITY_HEADER]: 'false' }\n      }\n    } else {\n      if (dataOwnerRequiresAnonymousDelegation) {\n        updatedHeaders = { ...updatedHeaders, [REQUEST_AUTOFIX_ANONYMITY_HEADER]: 'true' }\n      }\n    }\n  }\n\n  const authApi = new IccAuthApi(host, updatedHeaders, groupSpecificAuthenticationProvider, fetchImpl)\n  const userApi = new IccUserXApi(host, updatedHeaders, groupSpecificAuthenticationProvider, authApi, fetchImpl)\n  const healthcarePartyApi = new IccHcpartyXApi(host, updatedHeaders, groupSpecificAuthenticationProvider, authApi, fetchImpl)\n  const deviceApi = new IccDeviceXApi(host, updatedHeaders, groupSpecificAuthenticationProvider, userApi, authApi, fetchImpl)\n  const basePatientApi = new IccPatientApi(host, updatedHeaders, groupSpecificAuthenticationProvider, fetchImpl)\n  const dataOwnerApi = new IccDataOwnerXApi(host, updatedHeaders, groupSpecificAuthenticationProvider, fetchImpl)\n  const exchangeDataApi = new IccExchangeDataApi(host, updatedHeaders, groupSpecificAuthenticationProvider, fetchImpl)\n  const baseRecoveryDataApi = new IccRecoveryDataApi(host, updatedHeaders, groupSpecificAuthenticationProvider, fetchImpl)\n  // Crypto initialisation\n  const icureStorage = new IcureStorageFacade(params.keyStorage, params.storage, params.entryKeysFactory)\n  const cryptoPrimitives = 'AES' in crypto && 'RSA' in crypto && 'HMAC' in crypto ? crypto : new WebCryptoPrimitives(crypto)\n  const baseExchangeKeysManager = new BaseExchangeKeysManager(cryptoPrimitives, dataOwnerApi, healthcarePartyApi, basePatientApi, deviceApi)\n  const baseExchangeDataManager = new BaseExchangeDataManager(exchangeDataApi, dataOwnerApi, cryptoPrimitives, dataOwnerRequiresAnonymousDelegation)\n  const keyRecovery = new KeyRecovery(cryptoPrimitives, dataOwnerApi, baseExchangeKeysManager, baseExchangeDataManager)\n  const recoveryDataEncryption = new RecoveryDataEncryption(cryptoPrimitives, baseRecoveryDataApi)\n  const keyPairRecoverer = new KeyPairRecoverer(recoveryDataEncryption)\n  const userEncryptionKeysManager = new UserEncryptionKeysManager(\n    cryptoPrimitives,\n    dataOwnerApi,\n    icureStorage,\n    keyRecovery,\n    cryptoStrategies,\n    !params.disableParentKeysInitialisation,\n    keyPairRecoverer\n  )\n  const userSignatureKeysManager = new UserSignatureKeysManager(icureStorage, dataOwnerApi, cryptoPrimitives)\n  const newKey = await userEncryptionKeysManager.initialiseKeys()\n  await new TransferKeysManager(\n    cryptoPrimitives,\n    baseExchangeDataManager,\n    dataOwnerApi,\n    userEncryptionKeysManager,\n    userSignatureKeysManager,\n    icureStorage\n  ).updateTransferKeys(await dataOwnerApi.getCurrentDataOwnerStub())\n  // TODO customise cache size?\n  const exchangeKeysManager = new ExchangeKeysManager(\n    100,\n    500,\n    600000,\n    60000,\n    cryptoStrategies,\n    cryptoPrimitives,\n    userEncryptionKeysManager,\n    baseExchangeKeysManager,\n    dataOwnerApi,\n    !params.disableParentKeysInitialisation,\n    icureStorage\n  )\n  const accessControlSecretUtils = new AccessControlSecretUtils(cryptoPrimitives)\n  const exchangeDataManager = await initialiseExchangeDataManagerForCurrentDataOwner(\n    baseExchangeDataManager,\n    userEncryptionKeysManager,\n    userSignatureKeysManager,\n    accessControlSecretUtils,\n    cryptoStrategies,\n    dataOwnerApi,\n    cryptoPrimitives,\n    !params.disableParentKeysInitialisation\n  )\n  const exchangeDataMapManager = new ExchangeDataMapManager(\n    new IccExchangeDataMapApi(host, updatedHeaders, groupSpecificAuthenticationProvider, fetchImpl)\n  )\n  const secureDelegationsEncryption = new SecureDelegationsEncryption(userEncryptionKeysManager, cryptoPrimitives)\n  const secureDelegationsSecurityMetadataEncryption = new SecureDelegationsSecurityMetadataDecryptor(\n    exchangeDataManager,\n    exchangeDataMapManager,\n    secureDelegationsEncryption,\n    dataOwnerApi\n  )\n  const xApiUtils = new ExtendedApisUtilsImpl(\n    cryptoPrimitives,\n    dataOwnerApi,\n    new LegacyDelegationSecurityMetadataDecryptor(exchangeKeysManager, cryptoPrimitives),\n    secureDelegationsSecurityMetadataEncryption,\n    new SecureDelegationsManager(\n      exchangeDataManager,\n      exchangeDataMapManager,\n      secureDelegationsEncryption,\n      accessControlSecretUtils,\n      userEncryptionKeysManager,\n      cryptoPrimitives,\n      dataOwnerApi,\n      cryptoStrategies,\n      dataOwnerRequiresAnonymousDelegation\n    ),\n    userApi,\n    !params.disableParentKeysInitialisation\n  )\n  const shamirManager = new ShamirKeysManager(cryptoPrimitives, dataOwnerApi, userEncryptionKeysManager, exchangeDataManager)\n  const confidentialEntitites = new ConfidentialEntities(xApiUtils, cryptoPrimitives, dataOwnerApi)\n  await ensureDelegationForSelf(dataOwnerApi, xApiUtils, basePatientApi, cryptoPrimitives)\n  const accessControlKeysHeadersProvider = new AccessControlKeysHeadersProvider(exchangeDataManager)\n  const delegationsDeAnonymisation = new DelegationsDeAnonymization(\n    dataOwnerApi,\n    secureDelegationsSecurityMetadataEncryption,\n    xApiUtils,\n    cryptoPrimitives,\n    accessControlSecretUtils,\n    host,\n    updatedHeaders,\n    groupSpecificAuthenticationProvider,\n    fetchImpl,\n    accessControlKeysHeadersProvider\n  )\n  const cryptoApi = new IccCryptoXApi(\n    exchangeKeysManager,\n    cryptoPrimitives,\n    userEncryptionKeysManager,\n    dataOwnerApi,\n    xApiUtils,\n    shamirManager,\n    params.storage,\n    params.keyStorage,\n    confidentialEntitites,\n    exchangeDataManager,\n    accessControlKeysHeadersProvider,\n    delegationsDeAnonymisation\n  )\n  const maintenanceTaskApi = new IccMaintenanceTaskXApi(\n    host,\n    updatedHeaders,\n    cryptoApi,\n    healthcarePartyApi,\n    dataOwnerApi,\n    userApi,\n    authApi,\n    !dataOwnerRequiresAnonymousDelegation,\n    params.encryptedFieldsConfig.maintenanceTask ?? EncryptedFieldsConfig.Defaults.maintenanceTask,\n    groupSpecificAuthenticationProvider,\n    fetchImpl\n  )\n  const icureMaintenanceTaskApi = new IccIcureMaintenanceXApi(cryptoApi, maintenanceTaskApi, dataOwnerApi, exchangeDataApi)\n\n  if (newKey && params.createMaintenanceTasksOnNewKey) {\n    await icureMaintenanceTaskApi.createMaintenanceTasksForNewKeypair(await userApi.getCurrentUser(), newKey.newKeyPair)\n  }\n  return {\n    cryptoApi,\n    userApi,\n    healthcarePartyApi,\n    deviceApi,\n    maintenanceTaskApi,\n    dataOwnerApi,\n    icureMaintenanceTaskApi,\n    headers: updatedHeaders,\n    dataOwnerRequiresAnonymousDelegation,\n    recoveryApi: new IccRecoveryXApi(\n      baseRecoveryDataApi,\n      recoveryDataEncryption,\n      userEncryptionKeysManager,\n      dataOwnerApi,\n      cryptoPrimitives,\n      exchangeDataManager\n    ),\n  }\n}\n\nclass IcureApiImpl implements IcureApi {\n  private latestGroupsRequest: Promise<UserGroup[]>\n\n  constructor(\n    private readonly cryptoInitInfos: CryptoInitialisationInfo,\n    private readonly host: string,\n    private readonly groupSpecificAuthenticationProvider: AuthenticationProvider,\n    private readonly fetch: (input: RequestInfo, init?: RequestInit) => Promise<Response>,\n    private readonly grouplessUserApi: IccUserApi | undefined,\n    latestMatches: UserGroup[],\n    private readonly currentGroupInfo: UserGroup | undefined,\n    private readonly params: IcureApiOptions.WithDefaults,\n    private readonly cryptoStrategies: CryptoStrategies\n  ) {\n    this.latestGroupsRequest = Promise.resolve(latestMatches)\n  }\n\n  private _authApi: IccAuthApi | undefined\n\n  get recoveryApi(): IccRecoveryXApi {\n    return this.cryptoInitInfos.recoveryApi\n  }\n\n  get authApi(): IccAuthApi {\n    return (\n      this._authApi ?? (this._authApi = new IccAuthApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _codeApi: IccCodeXApi | undefined\n\n  get codeApi(): IccCodeXApi {\n    return (\n      this._codeApi ??\n      (this._codeApi = new IccCodeXApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _calendarItemTypeApi: IccCalendarItemTypeApi | undefined\n\n  get calendarItemTypeApi(): IccCalendarItemTypeApi {\n    return (\n      this._calendarItemTypeApi ??\n      (this._calendarItemTypeApi = new IccCalendarItemTypeApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _medicalLocationApi: IccMedicallocationApi | undefined\n\n  get medicalLocationApi(): IccMedicallocationApi {\n    return (\n      this._medicalLocationApi ??\n      (this._medicalLocationApi = new IccMedicallocationApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _roleApi: IccRoleApi | undefined\n\n  get roleApi(): IccRoleApi {\n    return this._roleApi ?? (this._roleApi = new IccRoleApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n  }\n\n  private _entityReferenceApi: IccEntityrefApi | undefined\n\n  get entityReferenceApi(): IccEntityrefApi {\n    return (\n      this._entityReferenceApi ??\n      (this._entityReferenceApi = new IccEntityrefApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _permissionApi: IccPermissionApi | undefined\n\n  get permissionApi(): IccPermissionApi {\n    return (\n      this._permissionApi ??\n      (this._permissionApi = new IccPermissionApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _accessLogApi: IccAccesslogXApi | undefined\n\n  get accessLogApi(): IccAccesslogXApi {\n    return (\n      this._accessLogApi ??\n      (this._accessLogApi = new IccAccesslogXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.params.encryptedFieldsConfig.accessLog ?? EncryptedFieldsConfig.Defaults.accessLog,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _agendaApi: IccAgendaApi | undefined\n\n  get agendaApi(): IccAgendaApi {\n    return (\n      this._agendaApi ??\n      (this._agendaApi = new IccAgendaApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _contactApi: IccContactXApi | undefined\n\n  get contactApi(): IccContactXApi {\n    return (\n      this._contactApi ??\n      (this._contactApi = new IccContactXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        this.userApi,\n        this.authApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch,\n        this.params.encryptedFieldsConfig.contact ?? EncryptedFieldsConfig.Defaults.contact,\n        this.params.encryptedFieldsConfig.service ?? EncryptedFieldsConfig.Defaults.service\n      ))\n    )\n  }\n\n  private _formApi: IccFormXApi | undefined\n\n  get formApi(): IccFormXApi {\n    return (\n      this._formApi ??\n      (this._formApi = new IccFormXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _groupApi: IccGroupApi | undefined\n\n  get groupApi(): IccGroupApi {\n    return (\n      this._groupApi ??\n      (this._groupApi = new IccGroupApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _invoiceApi: IccInvoiceXApi | undefined\n\n  get invoiceApi(): IccInvoiceXApi {\n    return (\n      this._invoiceApi ??\n      (this._invoiceApi = new IccInvoiceXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.entityReferenceApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _insuranceApi: IccInsuranceApi | undefined\n\n  get insuranceApi(): IccInsuranceApi {\n    return (\n      this._insuranceApi ??\n      (this._insuranceApi = new IccInsuranceApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _documentApi: IccDocumentXApi | undefined\n\n  get documentApi(): IccDocumentXApi {\n    return (\n      this._documentApi ??\n      (this._documentApi = new IccDocumentXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.authApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _healthcareElementApi: IccHelementXApi | undefined\n\n  get healthcareElementApi(): IccHelementXApi {\n    return (\n      this._healthcareElementApi ??\n      (this._healthcareElementApi = new IccHelementXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        this.userApi,\n        this.authApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.params.encryptedFieldsConfig.healthElement ?? EncryptedFieldsConfig.Defaults.healthElement,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _classificationApi: IccClassificationXApi | undefined\n\n  get classificationApi(): IccClassificationXApi {\n    return (\n      this._classificationApi ??\n      (this._classificationApi = new IccClassificationXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _calendarItemApi: IccCalendarItemXApi | undefined\n\n  get calendarItemApi(): IccCalendarItemXApi {\n    return (\n      this._calendarItemApi ??\n      (this._calendarItemApi = new IccCalendarItemXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.params.encryptedFieldsConfig.calendarItem ?? EncryptedFieldsConfig.Defaults.calendarItem,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _receiptApi: IccReceiptXApi | undefined\n\n  get receiptApi(): IccReceiptXApi {\n    return (\n      this._receiptApi ??\n      (this._receiptApi = new IccReceiptXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _timetableApi: IccTimeTableXApi | undefined\n\n  get timetableApi(): IccTimeTableXApi {\n    return (\n      this._timetableApi ??\n      (this._timetableApi = new IccTimeTableXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _patientApi: IccPatientXApi | undefined\n\n  get patientApi(): IccPatientXApi {\n    return (\n      this._patientApi ??\n      (this._patientApi = new IccPatientXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.contactApi,\n        this.formApi,\n        this.healthcareElementApi,\n        this.invoiceApi,\n        this.documentApi,\n        this.healthcarePartyApi,\n        this.classificationApi,\n        this.dataOwnerApi,\n        this.calendarItemApi,\n        this.userApi,\n        this.authApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.params.encryptedFieldsConfig.patient ?? EncryptedFieldsConfig.Defaults.patient,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _messageApi: IccMessageXApi | undefined\n\n  get messageApi(): IccMessageXApi {\n    return (\n      this._messageApi ??\n      (this._messageApi = new IccMessageXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        this.authApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.params.encryptedFieldsConfig.message ?? EncryptedFieldsConfig.Defaults.message,\n        this.fetch\n      ))\n    )\n  }\n\n  private _topicApi: IccTopicXApi | undefined\n\n  get topicApi(): IccTopicXApi {\n    return (\n      this._topicApi ??\n      (this._topicApi = new IccTopicXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        this.authApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.params.encryptedFieldsConfig.topic ?? EncryptedFieldsConfig.Defaults.topic,\n        this.fetch\n      ))\n    )\n  }\n\n  private _anonymousAccessApi: IccAnonymousAccessApi | undefined\n\n  get anonymousAccessApi(): IccAnonymousAccessApi {\n    return (\n      this._anonymousAccessApi ??\n      (this._anonymousAccessApi = new IccAnonymousAccessApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _applicationSettingsApi: IccApplicationsettingsApi | undefined\n\n  get applicationSettingsApi(): IccApplicationsettingsApi {\n    return (\n      this._applicationSettingsApi ??\n      (this._applicationSettingsApi = new IccApplicationsettingsApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _articleApi: IccArticleApi | undefined\n\n  get articleApi(): IccArticleApi {\n    return (\n      this._articleApi ??\n      (this._articleApi = new IccArticleApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _bekmehrApi: IccBekmehrXApi | undefined\n\n  get bekmehrApi(): IccBekmehrXApi {\n    return (\n      this._bekmehrApi ??\n      (this._bekmehrApi = new IccBekmehrXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.contactApi,\n        this.healthcareElementApi,\n        this.documentApi,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _beefactApi: IccBeefactApi | undefined\n\n  get beefactApi(): IccBeefactApi {\n    return (\n      this._beefactApi ??\n      (this._beefactApi = new IccBeefactApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _beresultexportApi: IccBeresultexportApi | undefined\n\n  get beresultexportApi(): IccBeresultexportApi {\n    return (\n      this._beresultexportApi ??\n      (this._beresultexportApi = new IccBeresultexportApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _beresultimportApi: IccBeresultimportApi | undefined\n\n  get beresultimportApi(): IccBeresultimportApi {\n    return (\n      this._beresultimportApi ??\n      (this._beresultimportApi = new IccBeresultimportApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _besamv2Api: IccBesamv2Api | undefined\n\n  get besamv2Api(): IccBesamv2Api {\n    return (\n      this._besamv2Api ??\n      (this._besamv2Api = new IccBesamv2Api(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _classificationTemplateApi: IccClassificationTemplateApi | undefined\n\n  get classificationTemplateApi(): IccClassificationTemplateApi {\n    return (\n      this._classificationTemplateApi ??\n      (this._classificationTemplateApi = new IccClassificationTemplateApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _doctemplateApi: IccDoctemplateXApi | undefined\n\n  get doctemplateApi(): IccDoctemplateXApi {\n    return (\n      this._doctemplateApi ??\n      (this._doctemplateApi = new IccDoctemplateXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _entitytemplateApi: IccEntitytemplateApi | undefined\n\n  get entitytemplateApi(): IccEntitytemplateApi {\n    return (\n      this._entitytemplateApi ??\n      (this._entitytemplateApi = new IccEntitytemplateApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _frontendmigrationApi: IccFrontendmigrationApi | undefined\n\n  get frontendmigrationApi(): IccFrontendmigrationApi {\n    return (\n      this._frontendmigrationApi ??\n      (this._frontendmigrationApi = new IccFrontendmigrationApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _icureApi: IccIcureApi | undefined\n\n  get icureApi(): IccIcureApi {\n    return (\n      this._icureApi ??\n      (this._icureApi = new IccIcureApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _keywordApi: IccKeywordApi | undefined\n\n  get keywordApi(): IccKeywordApi {\n    return (\n      this._keywordApi ??\n      (this._keywordApi = new IccKeywordApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _medexApi: IccMedexApi | undefined\n\n  get medexApi(): IccMedexApi {\n    return (\n      this._medexApi ??\n      (this._medexApi = new IccMedexApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _placeApi: IccPlaceApi | undefined\n\n  get placeApi(): IccPlaceApi {\n    return (\n      this._placeApi ??\n      (this._placeApi = new IccPlaceApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _pubsubApi: IccPubsubApi | undefined\n\n  get pubsubApi(): IccPubsubApi {\n    return (\n      this._pubsubApi ??\n      (this._pubsubApi = new IccPubsubApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _replicationApi: IccReplicationApi | undefined\n\n  get replicationApi(): IccReplicationApi {\n    return (\n      this._replicationApi ??\n      (this._replicationApi = new IccReplicationApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _tarificationApi: IccTarificationApi | undefined\n\n  get tarificationApi(): IccTarificationApi {\n    return (\n      this._tarificationApi ??\n      (this._tarificationApi = new IccTarificationApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _tmpApi: IccTmpApi | undefined\n\n  get tmpApi(): IccTmpApi {\n    return (\n      this._tmpApi ?? (this._tmpApi = new IccTmpApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  get cryptoApi(): IccCryptoXApi {\n    return this.cryptoInitInfos.cryptoApi\n  }\n\n  get dataOwnerApi(): IccDataOwnerXApi {\n    return this.cryptoInitInfos.dataOwnerApi\n  }\n\n  get deviceApi(): IccDeviceXApi {\n    return this.cryptoInitInfos.deviceApi\n  }\n\n  get healthcarePartyApi(): IccHcpartyXApi {\n    return this.cryptoInitInfos.healthcarePartyApi\n  }\n\n  get icureMaintenanceTaskApi(): IccIcureMaintenanceXApi {\n    return this.cryptoInitInfos.icureMaintenanceTaskApi\n  }\n\n  get maintenanceTaskApi(): IccMaintenanceTaskXApi {\n    return this.cryptoInitInfos.maintenanceTaskApi\n  }\n\n  get userApi(): IccUserXApi {\n    return this.cryptoInitInfos.userApi\n  }\n\n  async getGroupsInfo(): Promise<{ currentGroup: UserGroup | undefined; availableGroups: UserGroup[] }> {\n    this.latestGroupsRequest = (this.grouplessUserApi ?? this.userApi).getMatchingUsers()\n    return { currentGroup: this.currentGroupInfo, availableGroups: await this.latestGroupsRequest }\n  }\n\n  async switchGroup(newGroupId: string): Promise<IcureApi> {\n    const availableGroups = await this.latestGroupsRequest\n    const switchedProvider = await this.groupSpecificAuthenticationProvider.switchGroup(newGroupId, availableGroups)\n    const cryptoInitInfos = await initialiseCryptoWithProvider(\n      this.host,\n      this.fetch,\n      switchedProvider,\n      this.params,\n      this.cryptoStrategies,\n      this.cryptoApi.primitives\n    )\n    return new IcureApiImpl(\n      cryptoInitInfos,\n      this.host,\n      switchedProvider,\n      this.fetch,\n      this.grouplessUserApi,\n      availableGroups,\n      availableGroups.find((x) => x.groupId === newGroupId)!,\n      this.params,\n      this.cryptoStrategies\n    )\n  }\n}\n\nexport interface IcureBasicApi extends BasicApis {\n  /**\n   * Get the information on groups that the current user can access and the current group that this api instance is working on.\n   * Note that the values you will get for `availableGroups` may differ from the values you would get if you call {@link IccUserApi.getMatchingUsers}\n   * on {@link Apis.userApi}, since the latter is specialised on the specific instance of the user in `currentGroup`.\n   * - `currentGroup`: the group that this api instance is working on, or undefined if the backend environment is not multi-group.\n   * - `availableGroups`: the list of groups that the current user can access with the provided secret. Empty if the backend environment is not\n   * multi-group.\n   */\n  getGroupsInfo(): Promise<{ currentGroup: UserGroup | undefined; availableGroups: UserGroup[] }>\n\n  /**\n   * Switches the api to allow the user to work on a different group.\n   * @param newGroupId the id of the group to switch to.\n   * @return a new api for the specified group.\n   */\n  switchGroup(newGroupId: string): Promise<IcureBasicApi>\n}\n\nclass IcureBasicApiImpl implements IcureBasicApi {\n  private latestGroupsRequest: Promise<UserGroup[]>\n  private _agendaApi: IccAgendaApi | undefined\n  private _authApi: IccAuthApi | undefined\n  private _codeApi: IccCodeXApi | undefined\n  private _deviceApi: IccDeviceXApi | undefined\n  private _entityReferenceApi: IccEntityrefApi | undefined\n  private _groupApi: IccGroupApi | undefined\n  private _healthcarePartyApi: IccHcpartyXApi | undefined\n  private _insuranceApi: IccInsuranceApi | undefined\n  private _permissionApi: IccPermissionApi | undefined\n  private _userApi: IccUserXApi | undefined\n  private _patientApi: IccPatientApi | undefined\n  private _roleApi: IccRoleApi | undefined\n\n  get agendaApi(): IccAgendaApi {\n    return (\n      this._agendaApi ?? (this._agendaApi = new IccAgendaApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n  get authApi(): IccAuthApi {\n    return this._authApi ?? (this._authApi = new IccAuthApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n  }\n  get codeApi(): IccCodeXApi {\n    return this._codeApi ?? (this._codeApi = new IccCodeXApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n  }\n  get deviceApi(): IccDeviceXApi {\n    return (\n      this._deviceApi ??\n      (this._deviceApi = new IccDeviceXApi(\n        this.host,\n        this.params.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.userApi,\n        this.authApi,\n        this.fetch\n      ))\n    )\n  }\n  get entityReferenceApi(): IccEntityrefApi {\n    return (\n      this._entityReferenceApi ??\n      (this._entityReferenceApi = new IccEntityrefApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n  get groupApi(): IccGroupApi {\n    return this._groupApi ?? (this._groupApi = new IccGroupApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n  }\n  get healthcarePartyApi(): IccHcpartyXApi {\n    return (\n      this._healthcarePartyApi ??\n      (this._healthcarePartyApi = new IccHcpartyXApi(\n        this.host,\n        this.params.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.authApi,\n        this.fetch\n      ))\n    )\n  }\n  get insuranceApi(): IccInsuranceApi {\n    return (\n      this._insuranceApi ??\n      (this._insuranceApi = new IccInsuranceApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n  get permissionApi(): IccPermissionApi {\n    return (\n      this._permissionApi ??\n      (this._permissionApi = new IccPermissionApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n  get userApi(): IccUserXApi {\n    return (\n      this._userApi ??\n      (this._userApi = new IccUserXApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.authApi, this.fetch))\n    )\n  }\n\n  async getGroupsInfo(): Promise<{ currentGroup: UserGroup | undefined; availableGroups: UserGroup[] }> {\n    if (!this.currentGroupInfo) return { currentGroup: undefined, availableGroups: [] }\n    this.latestGroupsRequest = (this.grouplessUserApi ?? this.userApi).getMatchingUsers()\n    return { currentGroup: this.currentGroupInfo, availableGroups: await this.latestGroupsRequest }\n  }\n\n  get patientApi(): IccPatientApi {\n    return (\n      this._patientApi ?? (this._patientApi = new IccPatientApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  get roleApi(): IccRoleApi {\n    return this._roleApi ?? (this._roleApi = new IccRoleApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n  }\n\n  async switchGroup(newGroupId: string): Promise<IcureBasicApi> {\n    if (!this.currentGroupInfo) throw new Error('Cannot switch group: the backend environment does not support multiple groups.')\n    const availableGroups = await this.latestGroupsRequest\n    const switchedProvider = await this.groupSpecificAuthenticationProvider.switchGroup(newGroupId, availableGroups)\n    return new IcureBasicApiImpl(\n      this.host,\n      switchedProvider,\n      this.fetch,\n      this.grouplessUserApi,\n      availableGroups,\n      availableGroups.find((x) => x.groupId === newGroupId)!,\n      this.params\n    )\n  }\n\n  constructor(\n    private readonly host: string,\n    private readonly groupSpecificAuthenticationProvider: AuthenticationProvider,\n    private readonly fetch: (input: RequestInfo, init?: RequestInit) => Promise<Response>,\n    private readonly grouplessUserApi: IccUserApi | undefined,\n    latestMatches: UserGroup[],\n    private readonly currentGroupInfo: UserGroup | undefined,\n    private readonly params: IcureBasicApiOptions.WithDefaults\n  ) {\n    this.latestGroupsRequest = Promise.resolve(latestMatches)\n  }\n}\n\nexport interface IcureBasicApiOptions {\n  /**\n   * Additional headers to use on each request made by the iCure api.\n   * @default no additional headers\n   */\n  readonly headers?: { [headerName: string]: string }\n  /**\n   * Each user may exist in multiple groups, but an instance of {@link IcureApi} is specialised for a single group. This function allows you to decide\n   * the group to use for a given user.\n   * This functions will be called only if a user exists in at least 2 groups, and takes in input:\n   * - the information on the groups the user can access (in no specific order)\n   * - if the authentication method uses JWT also the current group id (undefined otherwise)\n   * The function must return the id of one of the available groups.\n   * @default takes the first group provided. The group chosen by this method may vary between different instantiations of the {@link IcureApi} even\n   * if for the same user and if the groups available for the user do not change.\n   */\n  readonly groupSelector?: (availableGroupsInfo: UserGroup[], currentGroupId?: string) => Promise<string>\n}\n\nnamespace IcureBasicApiOptions {\n  export namespace Defaults {\n    export const headers = {}\n  }\n  export class WithDefaults implements IcureBasicApiOptions {\n    constructor(custom: IcureBasicApiOptions) {\n      this.headers = custom.headers ?? Defaults.headers\n      this.groupSelector = custom.groupSelector ?? ((groups) => Promise.resolve(groups[0].groupId!))\n    }\n\n    readonly headers: { [headerName: string]: string }\n    readonly groupSelector: (availableGroupsInfo: UserGroup[]) => Promise<string>\n  }\n}\n\nexport namespace IcureBasicApi {\n  /**\n   * Initialises a new instance of the iCure API.\n   */\n  export async function initialise(\n    host: string,\n    authenticationOptions: AuthenticationDetails | AuthenticationProvider,\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch,\n    options: IcureBasicApiOptions = {}\n  ): Promise<IcureBasicApi> {\n    const params = new IcureBasicApiOptions.WithDefaults(options)\n    const authProviderInfo = await initialiseAuthProviderWithGroupSelector(\n      host,\n      authenticationOptions,\n      params.headers ?? {},\n      fetchImpl,\n      params.groupSelector\n    )\n    return new IcureBasicApiImpl(\n      host,\n      authProviderInfo.groupSpecificAuthenticationProvider,\n      fetch,\n      authProviderInfo.grouplessUserApi,\n      authProviderInfo.matches,\n      authProviderInfo.matches.find((match) => match.groupId === authProviderInfo.chosenGroupId),\n      params\n    )\n  }\n}\n\nasync function getMatchesOrEmpty(userApi: IccUserApi): Promise<UserGroup[]> {\n  try {\n    return await userApi.getMatchingUsers()\n  } catch (err) {\n    if (err instanceof Error && 'statusCode' in err && (err as any).statusCode === 404) return Promise.resolve([])\n    else return Promise.reject(err)\n  }\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../icc-x-api/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wCA8BmB;AACnB,qDAA8C;AAC9C,yDAAkD;AAClD,2DAAoD;AACpD,2DAAoD;AACpD,6DAAsD;AACtD,2DAAoD;AACpD,qDAA8C;AAC9C,6DAAsD;AACtD,yEAAkE;AAClE,uEAA+D;AAC/D,2DAAoD;AACpD,2DAAoD;AACpD,2DAAoD;AACpD,+DAAwD;AACxD,iEAAyD;AACzD,qDAA8C;AAC9C,6EAAqE;AACrE,iEAAyD;AAGzD,iEAA6D;AAC7D,6DAAyD;AACzD,0EAKsC;AACtC,gEAAiF;AACjF,kFAA8E;AAC9E,qEAAiE;AACjE,6FAAyF;AACzF,sDAAkD;AAClD,8EAA0E;AAG1E,sEAAkE;AAClE,kEAA8D;AAC9D,sEAAkE;AAClE,+EAAuE;AACvE,wEAAoE;AACpE,0CAAwD;AACxD,oHAAgH;AAChH,sEAA+F;AAC/F,8EAA0E;AAC1E,mFAA+E;AAC/E,gFAA4E;AAC5E,gFAA4E;AAC5E,sFAAkF;AAClF,kHAA8G;AAC9G,0EAAsE;AACtE,gFAA4E;AAC5E,gGAA4F;AAC5F,yFAAqF;AACrF,4EAAwE;AACxE,yDAAkD;AAClD,2DAAoD;AACpD,mEAA4D;AAE5D,uDAAgD;AAChD,0DAAsD;AACtD,0EAAsE;AACtE,oFAAgF;AAChF,wEAAoE;AACpE,gEAAgF;AAChF,gEAA4D;AAC5D,mFAA+E;AAC/E,4EAAwE;AACxE,6DAAsD;AACtD,8CAA+C;AAE/C,wDAAqC;AACrC,sDAAmC;AACnC,4DAAyC;AACzC,6DAA0C;AAC1C,mDAAgC;AAChC,sDAAmC;AACnC,qDAAkC;AAClC,0DAAuC;AACvC,uDAAoC;AACpC,mDAAgC;AAChC,sDAAmC;AACnC,uDAAoC;AACpC,sDAAmC;AACnC,sDAAmC;AACnC,sDAAmC;AACnC,mDAAgC;AAChC,yDAAsC;AACtC,sDAAmC;AACnC,yDAAsC;AACtC,gEAA6C;AAC7C,+DAA4C;AAC5C,uDAAoC;AACpC,0CAAuB;AAEvB,+CAA4B;AAC5B,4DAAyC;AACzC,kEAA+C;AAC/C,gEAA6C;AAE7C,8DAAgG;AAApE,mHAAA,cAAc,OAAA;AAE1C,+DAA6D;AAApD,oHAAA,gBAAgB,OAAA;AAEzB,2DAAyD;AAAhD,gHAAA,cAAc,OAAA;AAEvB,sFAAoF;AAA3E,4IAAA,4BAA4B,OAAA;AACrC,wCAAwG;AAA/F,gHAAA,uBAAuB,OAAA;AAAE,kHAAA,yBAAyB,OAAA;AAAE,4GAAA,mBAAmB,OAAA;AAyHhF,IAAU,eAAe,CA4BxB;AA5BD,WAAU,eAAe;IACvB,IAAiB,QAAQ,CAIxB;IAJD,WAAiB,QAAQ;QACV,yBAAgB,GAAG,IAAI,+DAA8B,EAAE,CAAA;QACvD,uCAA8B,GAAG,IAAI,CAAA;QACrC,gBAAO,GAAG,EAAE,CAAA;IAC3B,CAAC,EAJgB,QAAQ,GAAR,wBAAQ,KAAR,wBAAQ,QAIxB;IAED,MAAa,YAAY;QAUvB,YAAY,MAAuB;;YACjC,IAAI,CAAC,gBAAgB,GAAG,MAAA,MAAM,CAAC,gBAAgB,mCAAI,QAAQ,CAAC,gBAAgB,CAAA;YAC5E,IAAI,CAAC,8BAA8B,GAAG,MAAA,MAAM,CAAC,8BAA8B,mCAAI,QAAQ,CAAC,8BAA8B,CAAA;YACtH,IAAI,CAAC,OAAO,GAAG,MAAA,MAAM,CAAC,OAAO,mCAAI,IAAI,mCAAgB,EAAE,CAAA;YACvD,IAAI,CAAC,UAAU,GAAG,MAAA,MAAM,CAAC,UAAU,mCAAI,IAAI,+BAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACvE,IAAI,CAAC,OAAO,GAAG,MAAA,MAAM,CAAC,OAAO,mCAAI,QAAQ,CAAC,OAAO,CAAA;YACjD,IAAI,CAAC,qBAAqB,GAAG,MAAA,MAAM,CAAC,qBAAqB,mCAAI,EAAE,CAAA;YAC/D,IAAI,CAAC,aAAa,GAAG,MAAA,MAAM,CAAC,aAAa,mCAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAQ,CAAC,CAAC,CAAA;YAC9F,IAAI,CAAC,+BAA+B,GAAG,MAAA,MAAM,CAAC,+BAA+B,mCAAI,KAAK,CAAA;QACxF,CAAC;KACF;IApBY,4BAAY,eAoBxB,CAAA;AACH,CAAC,EA5BS,eAAe,KAAf,eAAe,QA4BxB;AAwJD,IAAiB,qBAAqB,CAYrC;AAZD,WAAiB,qBAAqB;IACvB,8BAAQ,GAAG;QACtB,SAAS,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;QACjC,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC;QAC/C,OAAO,EAAE,CAAC,OAAO,EAAE,kBAAkB,CAAC;QACtC,OAAO,EAAE,CAAC,kBAAkB,CAAC;QAC7B,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC;QACpD,eAAe,EAAE,CAAC,YAAY,CAAC;QAC/B,OAAO,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC;QACrC,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,CAAC,aAAa,EAAE,gBAAgB,EAAE,sBAAsB,CAAC;KACjE,CAAA;AACH,CAAC,EAZgB,qBAAqB,GAArB,6BAAqB,KAArB,6BAAqB,QAYrC;AAsFD,IAAiB,QAAQ,CA4CxB;AA5CD,WAAiB,QAAQ;IACvB;;OAEG;IACH,SAAsB,UAAU,CAC9B,IAAY,EACZ,qBAAqE,EACrE,gBAAkC,EAClC,SAAoC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,EAAa,EAC9I,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK,EACT,UAA2B,EAAE;;YAE7B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;YACxD,IAAI,0BAA0B,GAAG,MAAM,uCAAuC,CAC5E,IAAI,EACJ,qBAAqB,EACrB,MAAM,CAAC,OAAO,EACd,SAAS,EACT,MAAM,CAAC,aAAa,CACrB,CAAA;YACD,MAAM,cAAc,GAAG,MAAM,4BAA4B,CACvD,IAAI,EACJ,SAAS,EACT,0BAA0B,CAAC,mCAAmC,EAC9D,MAAM,EACN,gBAAgB,EAChB,MAAM,CACP,CAAA;YACD,OAAO,IAAI,YAAY,CACrB,cAAc,EACd,IAAI,EACJ,0BAA0B,CAAC,mCAAmC,EAC9D,KAAK,EACL,0BAA0B,CAAC,gBAAgB,EAC3C,0BAA0B,CAAC,OAAO,EAClC,0BAA0B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,0BAA0B,CAAC,aAAa,CAAC,EAC9G,MAAM,EACN,gBAAgB,CACjB,CAAA;QACH,CAAC;KAAA;IAvCqB,mBAAU,aAuC/B,CAAA;AACH,CAAC,EA5CgB,QAAQ,GAAR,gBAAQ,KAAR,gBAAQ,QA4CxB;AAED,SAAe,yBAAyB,CACtC,IAAY,EACZ,qBAAqE,EACrE,OAAyC,EACzC,SAAwE;;;QAExE,IAAI,sBAA8C,CAAA;QAClD,IAAI,gBAAgB,IAAI,qBAAqB,IAAI,aAAa,IAAI,qBAAqB,IAAI,gBAAgB,IAAI,qBAAqB,EAAE;YACpI,sBAAsB,GAAG,qBAAqB,CAAA;SAC/C;aAAM,IAAI,aAAa,IAAI,qBAAqB,IAAI,CAAC,CAAC,qBAAqB,CAAC,WAAW,EAAE;YACxF,sBAAsB,GAAG,IAAI,kDAAyB,CACpD,IAAI,oBAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,iDAAwB,EAAE,EAAE,SAAS,CAAC,EACxE,MAAA,qBAAqB,aAArB,qBAAqB,uBAArB,qBAAqB,CAAE,WAAW,0CAAE,QAAQ,EAC5C,MAAA,qBAAqB,aAArB,qBAAqB,uBAArB,qBAAqB,CAAE,WAAW,0CAAE,QAAQ,EAC5C,SAAS,EACT,qBAAqB,CAAC,WAAW,CAClC,CAAA;SACF;aAAM,IACL,UAAU,IAAI,qBAAqB;YACnC,UAAU,IAAI,qBAAqB;YACnC,CAAC,CAAC,qBAAqB,CAAC,QAAQ;YAChC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,EAChC;YACA,sBAAsB,GAAG,IAAI,uDAA8B,CACzD,IAAI,oBAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,iDAAwB,EAAE,EAAE,SAAS,CAAC,EACxE,qBAAqB,CAAC,QAAQ,EAC9B,qBAAqB,CAAC,QAAQ,EAC9B,IAAI,EACJ,SAAS,EACT,SAAS,EACT,qBAAqB,CAAC,gBAAgB,CACvC,CAAA;SACF;aAAM,IAAI,kBAAkB,IAAI,qBAAqB,IAAI,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,EAAE;YAClG,sBAAsB,GAAG,IAAI,kDAAyB,CACpD,IAAI,oBAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,iDAAwB,EAAE,EAAE,SAAS,CAAC,EACxE,SAAS,EACT,SAAS,EACT,IAAI,6CAAqB,CACvB,IAAI,oBAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,iDAAwB,EAAE,EAAE,SAAS,CAAC,EACxE,SAAS,EACT,SAAS,EACT,qBAAqB,CAAC,gBAAgB,EACtC,SAAS,CACV,CACF,CAAA;SACF;aAAM,IAAI,UAAU,IAAI,qBAAqB,IAAI,gBAAgB,IAAI,qBAAqB,EAAE;YAC3F,sBAAsB,GAAG,qCAAiB,CAAC,UAAU,CACnD,IAAI,oBAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,iDAAwB,EAAE,EAAE,SAAS,CAAC,EACxE,qBAAqB,CAAC,QAAQ,EAC9B,qBAAqB,CAAC,cAAc,EACpC;gBACE,aAAa,EAAE,qBAAqB,CAAC,aAAa;gBAClD,gBAAgB,EAAE,qBAAqB,CAAC,gBAAgB;gBACxD,mBAAmB,EAAE,qBAAqB,CAAC,mBAAmB;aAC/D,CACF,CAAA;SACF;aAAM;YACL,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;SAC3D;QACD,OAAO,sBAAsB,CAAA;;CAC9B;AAED,SAAe,uCAAuC,CACpD,IAAY,EACZ,qBAAqE,EACrE,OAAyC,EACzC,SAAwE,EACxE,aAA2G;;;QAE3G,IAAI,+BAA+B,GAAG,MAAM,yBAAyB,CAAC,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;QACtH,MAAM,gBAAgB,GAAG,IAAI,oBAAU,CAAC,IAAI,EAAE,OAAO,EAAE,+BAA+B,EAAE,SAAS,CAAC,CAAA;QAClG,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,gBAAgB,CAAC,CAAA;QACzD,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAAC,cAAc,EAAE,CAAA;QACrE,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,IAAA,wBAAa,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACvE,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,MAAA,OAAO,CAAC,CAAC,CAAC,0CAAE,OAAO,CAAA;QAChI;;;WAGG;QACH;;;;;;;WAOG;QACH,MAAM,mCAAmC,GAAG,CAAC,CAAC,aAAa;YACzD,CAAC,CAAC,MAAM,+BAA+B,CAAC,WAAW,CAAC,aAAa,EAAE,OAAO,CAAC;YAC3E,CAAC,CAAC,+BAA+B,CAAA;QACnC,OAAO;YACL,mCAAmC;YACnC,2EAA2E;YAC3E,gBAAgB,EAAE,mCAAmC,YAAY,qCAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB;YACjH,OAAO;YACP,aAAa;SACd,CAAA;;CACF;AAiBD,MAAM,gCAAgC,GAAG,iCAAiC,CAAA;AAE1E,SAAe,4BAA4B,CACzC,IAAY,EACZ,SAAwE,EACxE,mCAA2D,EAC3D,MAAoC,EACpC,gBAAkC,EAClC,MAAiC;;;QAEjC,MAAM,oBAAoB,GAAG,MAAM,IAAI,uCAAgB,CACrD,IAAI,EACJ,MAAM,CAAC,OAAO,EACd,mCAAmC,EACnC,SAAS,CACV,CAAC,uBAAuB,EAAE,CAAA;QAC3B,MAAM,oCAAoC,GAAG,gBAAgB,CAAC,oCAAoC,CAAC,oBAAoB,CAAC,CAAA;QACxH,IAAI,cAAc,GAAG,MAAM,CAAC,OAAO,CAAA;QACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAAE;YAC3E,IAAI,oBAAoB,CAAC,IAAI,IAAI,qCAAiB,CAAC,OAAO,IAAI,oBAAoB,CAAC,IAAI,IAAI,qCAAiB,CAAC,MAAM,EAAE;gBACnH,IAAI,CAAC,oCAAoC,EAAE;oBACzC,cAAc,mCAAQ,cAAc,KAAE,CAAC,gCAAgC,CAAC,EAAE,OAAO,GAAE,CAAA;iBACpF;aACF;iBAAM;gBACL,IAAI,oCAAoC,EAAE;oBACxC,cAAc,mCAAQ,cAAc,KAAE,CAAC,gCAAgC,CAAC,EAAE,MAAM,GAAE,CAAA;iBACnF;aACF;SACF;QAED,MAAM,OAAO,GAAG,IAAI,oBAAU,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAAA;QACpG,MAAM,OAAO,GAAG,IAAI,4BAAW,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;QAC9G,MAAM,kBAAkB,GAAG,IAAI,kCAAc,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;QAC5H,MAAM,SAAS,GAAG,IAAI,gCAAa,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;QAC3H,MAAM,cAAc,GAAG,IAAI,uBAAa,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAAA;QAC9G,MAAM,YAAY,GAAG,IAAI,uCAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAAA;QAC/G,MAAM,eAAe,GAAG,IAAI,uCAAkB,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAAA;QACpH,MAAM,mBAAmB,GAAG,IAAI,uCAAkB,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAAA;QACxH,wBAAwB;QACxB,MAAM,YAAY,GAAG,IAAI,uCAAkB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;QACvG,MAAM,gBAAgB,GAAG,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,sCAAmB,CAAC,MAAM,CAAC,CAAA;QAC1H,MAAM,uBAAuB,GAAG,IAAI,iDAAuB,CAAC,gBAAgB,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAA;QAC1I,MAAM,uBAAuB,GAAG,IAAI,iDAAuB,CAAC,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,oCAAoC,CAAC,CAAA;QAClJ,MAAM,WAAW,GAAG,IAAI,yBAAW,CAAC,gBAAgB,EAAE,YAAY,EAAE,uBAAuB,EAAE,uBAAuB,CAAC,CAAA;QACrH,MAAM,sBAAsB,GAAG,IAAI,+CAAsB,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAA;QAChG,MAAM,gBAAgB,GAAG,IAAI,mCAAgB,CAAC,sBAAsB,CAAC,CAAA;QACrE,MAAM,yBAAyB,GAAG,IAAI,qDAAyB,CAC7D,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,CAAC,MAAM,CAAC,+BAA+B,EACvC,gBAAgB,CACjB,CAAA;QACD,MAAM,wBAAwB,GAAG,IAAI,mDAAwB,CAAC,YAAY,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAA;QAC3G,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,cAAc,EAAE,CAAA;QAC/D,MAAM,IAAI,yCAAmB,CAC3B,gBAAgB,EAChB,uBAAuB,EACvB,YAAY,EACZ,yBAAyB,EACzB,wBAAwB,EACxB,YAAY,CACb,CAAC,kBAAkB,CAAC,MAAM,YAAY,CAAC,uBAAuB,EAAE,CAAC,CAAA;QAClE,6BAA6B;QAC7B,MAAM,mBAAmB,GAAG,IAAI,yCAAmB,CACjD,GAAG,EACH,GAAG,EACH,MAAM,EACN,KAAK,EACL,gBAAgB,EAChB,gBAAgB,EAChB,yBAAyB,EACzB,uBAAuB,EACvB,YAAY,EACZ,CAAC,MAAM,CAAC,+BAA+B,EACvC,YAAY,CACb,CAAA;QACD,MAAM,wBAAwB,GAAG,IAAI,mDAAwB,CAAC,gBAAgB,CAAC,CAAA;QAC/E,MAAM,mBAAmB,GAAG,MAAM,IAAA,sEAAgD,EAChF,uBAAuB,EACvB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,CAAC,MAAM,CAAC,+BAA+B,CACxC,CAAA;QACD,MAAM,sBAAsB,GAAG,IAAI,+CAAsB,CACvD,IAAI,6CAAqB,CAAC,IAAI,EAAE,cAAc,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAChG,CAAA;QACD,MAAM,2BAA2B,GAAG,IAAI,yDAA2B,CAAC,yBAAyB,EAAE,gBAAgB,CAAC,CAAA;QAChH,MAAM,2CAA2C,GAAG,IAAI,uFAA0C,CAChG,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,YAAY,CACb,CAAA;QACD,MAAM,SAAS,GAAG,IAAI,6CAAqB,CACzC,gBAAgB,EAChB,YAAY,EACZ,IAAI,qFAAyC,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,EACpF,2CAA2C,EAC3C,IAAI,mDAAwB,CAC1B,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,oCAAoC,CACrC,EACD,OAAO,EACP,CAAC,MAAM,CAAC,+BAA+B,CACxC,CAAA;QACD,MAAM,aAAa,GAAG,IAAI,qCAAiB,CAAC,gBAAgB,EAAE,YAAY,EAAE,yBAAyB,EAAE,mBAAmB,CAAC,CAAA;QAC3H,MAAM,qBAAqB,GAAG,IAAI,2CAAoB,CAAC,SAAS,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAA;QACjG,MAAM,IAAA,+BAAuB,EAAC,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAA;QACxF,MAAM,gCAAgC,GAAG,IAAI,mEAAgC,CAAC,mBAAmB,CAAC,CAAA;QAClG,MAAM,0BAA0B,GAAG,IAAI,uDAA0B,CAC/D,YAAY,EACZ,2CAA2C,EAC3C,SAAS,EACT,gBAAgB,EAChB,wBAAwB,EACxB,IAAI,EACJ,cAAc,EACd,mCAAmC,EACnC,SAAS,EACT,gCAAgC,CACjC,CAAA;QACD,MAAM,SAAS,GAAG,IAAI,gCAAa,CACjC,mBAAmB,EACnB,gBAAgB,EAChB,yBAAyB,EACzB,YAAY,EACZ,SAAS,EACT,aAAa,EACb,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,UAAU,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,0BAA0B,CAC3B,CAAA;QACD,MAAM,kBAAkB,GAAG,IAAI,mDAAsB,CACnD,IAAI,EACJ,cAAc,EACd,SAAS,EACT,kBAAkB,EAClB,YAAY,EACZ,OAAO,EACP,OAAO,EACP,CAAC,oCAAoC,EACrC,MAAA,MAAM,CAAC,qBAAqB,CAAC,eAAe,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,eAAe,EAC9F,mCAAmC,EACnC,SAAS,CACV,CAAA;QACD,MAAM,uBAAuB,GAAG,IAAI,qDAAuB,CAAC,SAAS,EAAE,kBAAkB,EAAE,YAAY,EAAE,eAAe,CAAC,CAAA;QAEzH,IAAI,MAAM,IAAI,MAAM,CAAC,8BAA8B,EAAE;YACnD,MAAM,uBAAuB,CAAC,mCAAmC,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;SACrH;QACD,OAAO;YACL,SAAS;YACT,OAAO;YACP,kBAAkB;YAClB,SAAS;YACT,kBAAkB;YAClB,YAAY;YACZ,uBAAuB;YACvB,OAAO,EAAE,cAAc;YACvB,oCAAoC;YACpC,WAAW,EAAE,IAAI,oCAAe,CAC9B,mBAAmB,EACnB,sBAAsB,EACtB,yBAAyB,EACzB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,CACpB;SACF,CAAA;;CACF;AAED,MAAM,YAAY;IAGhB,YACmB,eAAyC,EACzC,IAAY,EACZ,mCAA2D,EAC3D,KAAoE,EACpE,gBAAwC,EACzD,aAA0B,EACT,gBAAuC,EACvC,MAAoC,EACpC,gBAAkC;QARlC,oBAAe,GAAf,eAAe,CAA0B;QACzC,SAAI,GAAJ,IAAI,CAAQ;QACZ,wCAAmC,GAAnC,mCAAmC,CAAwB;QAC3D,UAAK,GAAL,KAAK,CAA+D;QACpE,qBAAgB,GAAhB,gBAAgB,CAAwB;QAExC,qBAAgB,GAAhB,gBAAgB,CAAuB;QACvC,WAAM,GAAN,MAAM,CAA8B;QACpC,qBAAgB,GAAhB,gBAAgB,CAAkB;QAEnD,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAC3D,CAAC;IAID,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAA;IACzC,CAAC;IAED,IAAI,OAAO;;QACT,OAAO,CACL,MAAA,IAAI,CAAC,QAAQ,mCAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,oBAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACjJ,CAAA;IACH,CAAC;IAID,IAAI,OAAO;;QACT,OAAO,CACL,MAAA,IAAI,CAAC,QAAQ,mCACb,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,4BAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACjI,CAAA;IACH,CAAC;IAID,IAAI,mBAAmB;;QACrB,OAAO,CACL,MAAA,IAAI,CAAC,oBAAoB,mCACzB,CAAC,IAAI,CAAC,oBAAoB,GAAG,IAAI,gCAAsB,CACrD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,kBAAkB;;QACpB,OAAO,CACL,MAAA,IAAI,CAAC,mBAAmB,mCACxB,CAAC,IAAI,CAAC,mBAAmB,GAAG,IAAI,+BAAqB,CACnD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,OAAO;;QACT,OAAO,MAAA,IAAI,CAAC,QAAQ,mCAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,uBAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAChJ,CAAC;IAID,IAAI,kBAAkB;;QACpB,OAAO,CACL,MAAA,IAAI,CAAC,mBAAmB,mCACxB,CAAC,IAAI,CAAC,mBAAmB,GAAG,IAAI,yBAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAChJ,CAAA;IACH,CAAC;IAID,IAAI,aAAa;;QACf,OAAO,CACL,MAAA,IAAI,CAAC,cAAc,mCACnB,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,0BAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAC5I,CAAA;IACH,CAAC;IAID,IAAI,YAAY;;QACd,OAAO,CACL,MAAA,IAAI,CAAC,aAAa,mCAClB,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,sCAAgB,CACxC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,SAAS,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,SAAS,EACvF,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,SAAS;;QACX,OAAO,CACL,MAAA,IAAI,CAAC,UAAU,mCACf,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,sBAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACpI,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,kCAAc,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,OAAO,EACZ,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,EACV,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,OAAO,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,OAAO,EACnF,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,OAAO,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,OAAO,CACpF,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,OAAO;;QACT,OAAO,CACL,MAAA,IAAI,CAAC,QAAQ,mCACb,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,4BAAW,CAC9B,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,QAAQ;;QACV,OAAO,CACL,MAAA,IAAI,CAAC,SAAS,mCACd,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,qBAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAClI,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,kCAAc,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,YAAY;;QACd,OAAO,CACL,MAAA,IAAI,CAAC,aAAa,mCAClB,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,yBAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAC1I,CAAA;IACH,CAAC;IAID,IAAI,WAAW;;QACb,OAAO,CACL,MAAA,IAAI,CAAC,YAAY,mCACjB,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,oCAAe,CACtC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,oBAAoB;;QACtB,OAAO,CACL,MAAA,IAAI,CAAC,qBAAqB,mCAC1B,CAAC,IAAI,CAAC,qBAAqB,GAAG,IAAI,oCAAe,CAC/C,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,OAAO,EACZ,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,aAAa,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,aAAa,EAC/F,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,iBAAiB;;QACnB,OAAO,CACL,MAAA,IAAI,CAAC,kBAAkB,mCACvB,CAAC,IAAI,CAAC,kBAAkB,GAAG,IAAI,gDAAqB,CAClD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,eAAe;;QACjB,OAAO,CACL,MAAA,IAAI,CAAC,gBAAgB,mCACrB,CAAC,IAAI,CAAC,gBAAgB,GAAG,IAAI,6CAAmB,CAC9C,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,YAAY,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,YAAY,EAC7F,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,kCAAc,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,YAAY;;QACd,OAAO,CACL,MAAA,IAAI,CAAC,aAAa,mCAClB,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,uCAAgB,CACxC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,kCAAc,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,oBAAoB,EACzB,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,OAAO,EACZ,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,OAAO,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,OAAO,EACnF,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,kCAAc,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,OAAO,EACZ,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,OAAO,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,OAAO,EACnF,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,QAAQ;;QACV,OAAO,CACL,MAAA,IAAI,CAAC,SAAS,mCACd,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,8BAAY,CAChC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,OAAO,EACZ,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC,EAC1D,IAAI,CAAC,mCAAmC,EACxC,MAAA,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,mCAAI,qBAAqB,CAAC,QAAQ,CAAC,KAAK,EAC/E,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,kBAAkB;;QACpB,OAAO,CACL,MAAA,IAAI,CAAC,mBAAmB,mCACxB,CAAC,IAAI,CAAC,mBAAmB,GAAG,IAAI,+BAAqB,CACnD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,sBAAsB;;QACxB,OAAO,CACL,MAAA,IAAI,CAAC,uBAAuB,mCAC5B,CAAC,IAAI,CAAC,uBAAuB,GAAG,IAAI,mCAAyB,CAC3D,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,uBAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACtI,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,kCAAc,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,oBAAoB,EACzB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,uBAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACtI,CAAA;IACH,CAAC;IAID,IAAI,iBAAiB;;QACnB,OAAO,CACL,MAAA,IAAI,CAAC,kBAAkB,mCACvB,CAAC,IAAI,CAAC,kBAAkB,GAAG,IAAI,8BAAoB,CACjD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,iBAAiB;;QACnB,OAAO,CACL,MAAA,IAAI,CAAC,kBAAkB,mCACvB,CAAC,IAAI,CAAC,kBAAkB,GAAG,IAAI,8BAAoB,CACjD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,uBAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACtI,CAAA;IACH,CAAC;IAID,IAAI,yBAAyB;;QAC3B,OAAO,CACL,MAAA,IAAI,CAAC,0BAA0B,mCAC/B,CAAC,IAAI,CAAC,0BAA0B,GAAG,IAAI,sCAA4B,CACjE,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,cAAc;;QAChB,OAAO,CACL,MAAA,IAAI,CAAC,eAAe,mCACpB,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,0CAAkB,CAC5C,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,iBAAiB;;QACnB,OAAO,CACL,MAAA,IAAI,CAAC,kBAAkB,mCACvB,CAAC,IAAI,CAAC,kBAAkB,GAAG,IAAI,8BAAoB,CACjD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,oBAAoB;;QACtB,OAAO,CACL,MAAA,IAAI,CAAC,qBAAqB,mCAC1B,CAAC,IAAI,CAAC,qBAAqB,GAAG,IAAI,iCAAuB,CACvD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAC5B,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IAID,IAAI,QAAQ;;QACV,OAAO,CACL,MAAA,IAAI,CAAC,SAAS,mCACd,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,qBAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAClI,CAAA;IACH,CAAC;IAID,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAChB,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,uBAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACtI,CAAA;IACH,CAAC;IAID,IAAI,QAAQ;;QACV,OAAO,CACL,MAAA,IAAI,CAAC,SAAS,mCACd,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,qBAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAClI,CAAA;IACH,CAAC;IAID,IAAI,QAAQ;;QACV,OAAO,CACL,MAAA,IAAI,CAAC,SAAS,mCACd,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,qBAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAClI,CAAA;IACH,CAAC;IAID,IAAI,SAAS;;QACX,OAAO,CACL,MAAA,IAAI,CAAC,UAAU,mCACf,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,sBAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACpI,CAAA;IACH,CAAC;IAID,IAAI,cAAc;;QAChB,OAAO,CACL,MAAA,IAAI,CAAC,eAAe,mCACpB,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,2BAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAC9I,CAAA;IACH,CAAC;IAID,IAAI,eAAe;;QACjB,OAAO,CACL,MAAA,IAAI,CAAC,gBAAgB,mCACrB,CAAC,IAAI,CAAC,gBAAgB,GAAG,IAAI,4BAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAChJ,CAAA;IACH,CAAC;IAID,IAAI,MAAM;;QACR,OAAO,CACL,MAAA,IAAI,CAAC,OAAO,mCAAI,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,mBAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAC9I,CAAA;IACH,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,CAAA;IACvC,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,eAAe,CAAC,YAAY,CAAA;IAC1C,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,CAAA;IACvC,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAA;IAChD,CAAC;IAED,IAAI,uBAAuB;QACzB,OAAO,IAAI,CAAC,eAAe,CAAC,uBAAuB,CAAA;IACrD,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAA;IAChD,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAA;IACrC,CAAC;IAEK,aAAa;;;YACjB,IAAI,CAAC,mBAAmB,GAAG,CAAC,MAAA,IAAI,CAAC,gBAAgB,mCAAI,IAAI,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,CAAA;YACrF,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,gBAAgB,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAA;;KAChG;IAEK,WAAW,CAAC,UAAkB;;YAClC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAA;YACtD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mCAAmC,CAAC,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;YAChH,MAAM,eAAe,GAAG,MAAM,4BAA4B,CACxD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,KAAK,EACV,gBAAgB,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,SAAS,CAAC,UAAU,CAC1B,CAAA;YACD,OAAO,IAAI,YAAY,CACrB,eAAe,EACf,IAAI,CAAC,IAAI,EACT,gBAAgB,EAChB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,gBAAgB,EACrB,eAAe,EACf,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAE,EACtD,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,gBAAgB,CACtB,CAAA;QACH,CAAC;KAAA;CACF;AAqBD,MAAM,iBAAiB;IAerB,IAAI,SAAS;;QACX,OAAO,CACL,MAAA,IAAI,CAAC,UAAU,mCAAI,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,sBAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAC9I,CAAA;IACH,CAAC;IACD,IAAI,OAAO;;QACT,OAAO,MAAA,IAAI,CAAC,QAAQ,mCAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,oBAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAChJ,CAAC;IACD,IAAI,OAAO;;QACT,OAAO,MAAA,IAAI,CAAC,QAAQ,mCAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,4BAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACjJ,CAAC;IACD,IAAI,SAAS;;QACX,OAAO,CACL,MAAA,IAAI,CAAC,UAAU,mCACf,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,gCAAa,CAClC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IACD,IAAI,kBAAkB;;QACpB,OAAO,CACL,MAAA,IAAI,CAAC,mBAAmB,mCACxB,CAAC,IAAI,CAAC,mBAAmB,GAAG,IAAI,yBAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACvI,CAAA;IACH,CAAC;IACD,IAAI,QAAQ;;QACV,OAAO,MAAA,IAAI,CAAC,SAAS,mCAAI,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,qBAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACnJ,CAAC;IACD,IAAI,kBAAkB;;QACpB,OAAO,CACL,MAAA,IAAI,CAAC,mBAAmB,mCACxB,CAAC,IAAI,CAAC,mBAAmB,GAAG,IAAI,kCAAc,CAC5C,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,mCAAmC,EACxC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,KAAK,CACX,CAAC,CACH,CAAA;IACH,CAAC;IACD,IAAI,YAAY;;QACd,OAAO,CACL,MAAA,IAAI,CAAC,aAAa,mCAClB,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,yBAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACjI,CAAA;IACH,CAAC;IACD,IAAI,aAAa;;QACf,OAAO,CACL,MAAA,IAAI,CAAC,cAAc,mCACnB,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,0BAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACnI,CAAA;IACH,CAAC;IACD,IAAI,OAAO;;QACT,OAAO,CACL,MAAA,IAAI,CAAC,QAAQ,mCACb,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,4BAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACtI,CAAA;IACH,CAAC;IAEK,aAAa;;;YACjB,IAAI,CAAC,IAAI,CAAC,gBAAgB;gBAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,EAAE,CAAA;YACnF,IAAI,CAAC,mBAAmB,GAAG,CAAC,MAAA,IAAI,CAAC,gBAAgB,mCAAI,IAAI,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,CAAA;YACrF,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,gBAAgB,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAA;;KAChG;IAED,IAAI,UAAU;;QACZ,OAAO,CACL,MAAA,IAAI,CAAC,WAAW,mCAAI,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,uBAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACjJ,CAAA;IACH,CAAC;IAED,IAAI,OAAO;;QACT,OAAO,MAAA,IAAI,CAAC,QAAQ,mCAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,uBAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAChJ,CAAC;IAEK,WAAW,CAAC,UAAkB;;YAClC,IAAI,CAAC,IAAI,CAAC,gBAAgB;gBAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAA;YAC7H,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAA;YACtD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mCAAmC,CAAC,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;YAChH,OAAO,IAAI,iBAAiB,CAC1B,IAAI,CAAC,IAAI,EACT,gBAAgB,EAChB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,gBAAgB,EACrB,eAAe,EACf,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAE,EACtD,IAAI,CAAC,MAAM,CACZ,CAAA;QACH,CAAC;KAAA;IAED,YACmB,IAAY,EACZ,mCAA2D,EAC3D,KAAoE,EACpE,gBAAwC,EACzD,aAA0B,EACT,gBAAuC,EACvC,MAAyC;QANzC,SAAI,GAAJ,IAAI,CAAQ;QACZ,wCAAmC,GAAnC,mCAAmC,CAAwB;QAC3D,UAAK,GAAL,KAAK,CAA+D;QACpE,qBAAgB,GAAhB,gBAAgB,CAAwB;QAExC,qBAAgB,GAAhB,gBAAgB,CAAuB;QACvC,WAAM,GAAN,MAAM,CAAmC;QAE1D,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAC3D,CAAC;CACF;AAqBD,IAAU,oBAAoB,CAa7B;AAbD,WAAU,oBAAoB;IAC5B,IAAiB,QAAQ,CAExB;IAFD,WAAiB,QAAQ;QACV,gBAAO,GAAG,EAAE,CAAA;IAC3B,CAAC,EAFgB,QAAQ,GAAR,6BAAQ,KAAR,6BAAQ,QAExB;IACD,MAAa,YAAY;QACvB,YAAY,MAA4B;;YACtC,IAAI,CAAC,OAAO,GAAG,MAAA,MAAM,CAAC,OAAO,mCAAI,QAAQ,CAAC,OAAO,CAAA;YACjD,IAAI,CAAC,aAAa,GAAG,MAAA,MAAM,CAAC,aAAa,mCAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAQ,CAAC,CAAC,CAAA;QAChG,CAAC;KAIF;IARY,iCAAY,eAQxB,CAAA;AACH,CAAC,EAbS,oBAAoB,KAApB,oBAAoB,QAa7B;AAED,IAAiB,aAAa,CAgC7B;AAhCD,WAAiB,aAAa;IAC5B;;OAEG;IACH,SAAsB,UAAU,CAC9B,IAAY,EACZ,qBAAqE,EACrE,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK,EACT,UAAgC,EAAE;;;YAElC,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;YAC7D,MAAM,gBAAgB,GAAG,MAAM,uCAAuC,CACpE,IAAI,EACJ,qBAAqB,EACrB,MAAA,MAAM,CAAC,OAAO,mCAAI,EAAE,EACpB,SAAS,EACT,MAAM,CAAC,aAAa,CACrB,CAAA;YACD,OAAO,IAAI,iBAAiB,CAC1B,IAAI,EACJ,gBAAgB,CAAC,mCAAmC,EACpD,KAAK,EACL,gBAAgB,CAAC,gBAAgB,EACjC,gBAAgB,CAAC,OAAO,EACxB,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,gBAAgB,CAAC,aAAa,CAAC,EAC1F,MAAM,CACP,CAAA;;KACF;IA3BqB,wBAAU,aA2B/B,CAAA;AACH,CAAC,EAhCgB,aAAa,GAAb,qBAAa,KAAb,qBAAa,QAgC7B;AAED,SAAe,iBAAiB,CAAC,OAAmB;;QAClD,IAAI;YACF,OAAO,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAA;SACxC;QAAC,OAAO,GAAG,EAAE;YACZ,IAAI,GAAG,YAAY,KAAK,IAAI,YAAY,IAAI,GAAG,IAAK,GAAW,CAAC,UAAU,KAAK,GAAG;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;;gBACzG,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;SAChC;IACH,CAAC;CAAA","sourcesContent":["import {\n  IccAgendaApi,\n  IccAnonymousAccessApi,\n  IccApplicationsettingsApi,\n  IccArticleApi,\n  IccAuthApi,\n  IccBeefactApi,\n  IccBeresultexportApi,\n  IccBeresultimportApi,\n  IccBesamv2Api,\n  IccCalendarItemTypeApi,\n  IccClassificationTemplateApi,\n  IccEntityrefApi,\n  IccEntitytemplateApi,\n  IccFrontendmigrationApi,\n  IccGroupApi,\n  IccIcureApi,\n  IccInsuranceApi,\n  IccKeywordApi,\n  IccMedexApi,\n  IccMedicallocationApi,\n  IccPatientApi,\n  IccPermissionApi,\n  IccPlaceApi,\n  IccPubsubApi,\n  IccReplicationApi,\n  IccTarificationApi,\n  IccTmpApi,\n  IccUserApi,\n  OAuthThirdParty,\n} from '../icc-api'\nimport { IccUserXApi } from './icc-user-x-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport { IccContactXApi } from './icc-contact-x-api'\nimport { IccInvoiceXApi } from './icc-invoice-x-api'\nimport { IccDocumentXApi } from './icc-document-x-api'\nimport { IccHcpartyXApi } from './icc-hcparty-x-api'\nimport { IccFormXApi } from './icc-form-x-api'\nimport { IccHelementXApi } from './icc-helement-x-api'\nimport { IccClassificationXApi } from './icc-classification-x-api'\nimport { IccCalendarItemXApi } from './icc-calendar-item-x-api'\nimport { IccPatientXApi } from './icc-patient-x-api'\nimport { IccMessageXApi } from './icc-message-x-api'\nimport { IccReceiptXApi } from './icc-receipt-x-api'\nimport { IccAccesslogXApi } from './icc-accesslog-x-api'\nimport { IccTimeTableXApi } from './icc-time-table-x-api'\nimport { IccCodeXApi } from './icc-code-x-api'\nimport { IccMaintenanceTaskXApi } from './icc-maintenance-task-x-api'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { StorageFacade } from './storage/StorageFacade'\nimport { KeyStorageFacade } from './storage/KeyStorageFacade'\nimport { LocalStorageImpl } from './storage/LocalStorageImpl'\nimport { KeyStorageImpl } from './storage/KeyStorageImpl'\nimport {\n  AuthenticationProvider,\n  EnsembleAuthenticationProvider,\n  JwtAuthenticationProvider,\n  NoAuthenticationProvider,\n} from './auth/AuthenticationProvider'\nimport { CryptoPrimitives, WebCryptoPrimitives } from './crypto/CryptoPrimitives'\nimport { UserEncryptionKeysManager } from './crypto/UserEncryptionKeysManager'\nimport { IcureStorageFacade } from './storage/IcureStorageFacade'\nimport { DefaultStorageEntryKeysFactory } from './storage/DefaultStorageEntryKeysFactory'\nimport { KeyRecovery } from './crypto/KeyRecovery'\nimport { BaseExchangeKeysManager } from './crypto/BaseExchangeKeysManager'\nimport { StorageEntryKeysFactory } from './storage/StorageEntryKeysFactory'\nimport { CryptoStrategies } from './crypto/CryptoStrategies'\nimport { ExchangeKeysManager } from './crypto/ExchangeKeysManager'\nimport { ShamirKeysManager } from './crypto/ShamirKeysManager'\nimport { TransferKeysManager } from './crypto/TransferKeysManager'\nimport { IccIcureMaintenanceXApi } from './icc-icure-maintenance-x-api'\nimport { ConfidentialEntities } from './crypto/ConfidentialEntities'\nimport { ensureDelegationForSelf } from './crypto/utils'\nimport { SecureDelegationsSecurityMetadataDecryptor } from './crypto/SecureDelegationsSecurityMetadataDecryptor'\nimport { initialiseExchangeDataManagerForCurrentDataOwner } from './crypto/ExchangeDataManager'\nimport { BaseExchangeDataManager } from './crypto/BaseExchangeDataManager'\nimport { IccExchangeDataApi } from '../icc-api/api/internal/IccExchangeDataApi'\nimport { UserSignatureKeysManager } from './crypto/UserSignatureKeysManager'\nimport { AccessControlSecretUtils } from './crypto/AccessControlSecretUtils'\nimport { SecureDelegationsEncryption } from './crypto/SecureDelegationsEncryption'\nimport { LegacyDelegationSecurityMetadataDecryptor } from './crypto/LegacyDelegationSecurityMetadataDecryptor'\nimport { ExtendedApisUtilsImpl } from './crypto/ExtendedApisUtilsImpl'\nimport { SecureDelegationsManager } from './crypto/SecureDelegationsManager'\nimport { AccessControlKeysHeadersProvider } from './crypto/AccessControlKeysHeadersProvider'\nimport { IccExchangeDataMapApi } from '../icc-api/api/internal/IccExchangeDataMapApi'\nimport { ExchangeDataMapManager } from './crypto/ExchangeDataMapManager'\nimport { IccDeviceXApi } from './icc-device-x-api'\nimport { IccBekmehrXApi } from './icc-bekmehr-x-api'\nimport { IccDoctemplateXApi } from './icc-doctemplate-x-api'\nimport { UserGroup } from '../icc-api/model/UserGroup'\nimport { IccTopicXApi } from './icc-topic-x-api'\nimport { IccRoleApi } from '../icc-api/api/IccRoleApi'\nimport { DataOwnerTypeEnum } from '../icc-api/model/DataOwnerTypeEnum'\nimport { DelegationsDeAnonymization } from './crypto/DelegationsDeAnonymization'\nimport { JwtBridgedAuthService } from './auth/JwtBridgedAuthService'\nimport { AuthSecretProvider, SmartAuthProvider } from './auth/SmartAuthProvider'\nimport { KeyPairRecoverer } from './crypto/KeyPairRecoverer'\nimport { IccRecoveryDataApi } from '../icc-api/api/internal/IccRecoveryDataApi'\nimport { RecoveryDataEncryption } from './crypto/RecoveryDataEncryption'\nimport { IccRecoveryXApi } from './icc-recovery-x-api'\nimport { getGroupOfJwt } from './auth/JwtUtils'\n\nexport * from './icc-accesslog-x-api'\nexport * from './icc-bekmehr-x-api'\nexport * from './icc-calendar-item-x-api'\nexport * from './icc-classification-x-api'\nexport * from './icc-code-x-api'\nexport * from './icc-contact-x-api'\nexport * from './icc-crypto-x-api'\nexport * from './icc-doctemplate-x-api'\nexport * from './icc-document-x-api'\nexport * from './icc-form-x-api'\nexport * from './icc-hcparty-x-api'\nexport * from './icc-helement-x-api'\nexport * from './icc-invoice-x-api'\nexport * from './icc-message-x-api'\nexport * from './icc-patient-x-api'\nexport * from './icc-user-x-api'\nexport * from './icc-time-table-x-api'\nexport * from './icc-receipt-x-api'\nexport * from './icc-data-owner-x-api'\nexport * from './icc-icure-maintenance-x-api'\nexport * from './icc-maintenance-task-x-api'\nexport * from './icc-recovery-x-api'\nexport * from './utils'\n\nexport * from './crypto/RSA'\nexport * from './crypto/CryptoPrimitives'\nexport * from './crypto/ShareMetadataBehaviour'\nexport * from './auth/AuthenticationProvider'\n\nexport { AuthSecretDetails, AuthSecretType, AuthSecretProvider } from './auth/SmartAuthProvider'\nexport { KeyStorageFacade } from './storage/KeyStorageFacade'\nexport { LocalStorageImpl } from './storage/LocalStorageImpl'\nexport { StorageFacade } from './storage/StorageFacade'\nexport { KeyStorageImpl } from './storage/KeyStorageImpl'\nexport { CryptoStrategies } from './crypto/CryptoStrategies'\nexport { NativeCryptoPrimitivesBridge } from './crypto/NativeCryptoPrimitivesBridge'\nexport { hexPublicKeysWithSha1Of, hexPublicKeysWithSha256Of, getShaVersionForKey } from './crypto/utils'\n\nexport interface BasicApis {\n  readonly authApi: IccAuthApi\n  readonly codeApi: IccCodeXApi\n  readonly userApi: IccUserXApi\n  readonly permissionApi: IccPermissionApi\n  readonly insuranceApi: IccInsuranceApi\n  readonly entityReferenceApi: IccEntityrefApi\n  readonly agendaApi: IccAgendaApi\n  readonly groupApi: IccGroupApi\n  readonly healthcarePartyApi: IccHcpartyXApi\n  readonly deviceApi: IccDeviceXApi\n  readonly patientApi: IccPatientApi\n  readonly roleApi: IccRoleApi\n}\nexport interface Apis extends BasicApis {\n  readonly calendarItemTypeApi: IccCalendarItemTypeApi\n  readonly medicalLocationApi: IccMedicallocationApi\n  readonly cryptoApi: IccCryptoXApi\n  readonly accessLogApi: IccAccesslogXApi\n  readonly contactApi: IccContactXApi\n  readonly formApi: IccFormXApi\n  readonly invoiceApi: IccInvoiceXApi\n  readonly documentApi: IccDocumentXApi\n  readonly healthcareElementApi: IccHelementXApi\n  readonly classificationApi: IccClassificationXApi\n  readonly calendarItemApi: IccCalendarItemXApi\n  readonly receiptApi: IccReceiptXApi\n  readonly timetableApi: IccTimeTableXApi\n  readonly patientApi: IccPatientXApi\n  readonly messageApi: IccMessageXApi\n  readonly maintenanceTaskApi: IccMaintenanceTaskXApi\n  readonly dataOwnerApi: IccDataOwnerXApi\n  readonly icureMaintenanceTaskApi: IccIcureMaintenanceXApi\n  readonly anonymousAccessApi: IccAnonymousAccessApi\n  readonly applicationSettingsApi: IccApplicationsettingsApi\n  readonly articleApi: IccArticleApi\n  readonly bekmehrApi: IccBekmehrXApi\n  readonly beefactApi: IccBeefactApi\n  readonly beresultexportApi: IccBeresultexportApi\n  readonly beresultimportApi: IccBeresultimportApi\n  readonly besamv2Api: IccBesamv2Api\n  readonly classificationTemplateApi: IccClassificationTemplateApi\n  readonly doctemplateApi: IccDoctemplateXApi\n  readonly entitytemplateApi: IccEntitytemplateApi\n  readonly frontendmigrationApi: IccFrontendmigrationApi\n  readonly icureApi: IccIcureApi\n  readonly keywordApi: IccKeywordApi\n  readonly medexApi: IccMedexApi\n  readonly placeApi: IccPlaceApi\n  readonly pubsubApi: IccPubsubApi\n  readonly replicationApi: IccReplicationApi\n  readonly tarificationApi: IccTarificationApi\n  readonly tmpApi: IccTmpApi\n  readonly topicApi: IccTopicXApi\n  readonly recoveryApi: IccRecoveryXApi\n}\n\n/**\n * Allows to customise the behaviour of the iCure API by providing various optional parameters.\n */\nexport interface IcureApiOptions {\n  /**\n   * Specifies how iCure can store string values (e.g. json). In production this should be persistent storage.\n   * @default the browser's localStorage.\n   */\n  readonly storage?: StorageFacade<string>\n  /**\n   * Specifies how iCure can store cryptographic keys. Preferably this should be some ad-hoc storage key storage.\n   * @default stores the json of the jwk representation of the key in {@link storage}.\n   */\n  readonly keyStorage?: KeyStorageFacade\n  /**\n   * Specifies where iCure should store his data within the {@link storage} and {@link keyStorage}.\n   * @default {@link DefaultStorageEntryKeysFactory}\n   */\n  readonly entryKeysFactory?: StorageEntryKeysFactory\n  /**\n   * Specifies if iCure should automatically create maintenance tasks for requesting access back when a new key is generated at initialisation time.\n   * Note that the maintenance task will be created only towards HCP data owners: if you want to create a maintenance task also to other types of data\n   * owners you should disable this and call {@link IccIcureMaintenanceXApi.createMaintenanceTasksForNewKeypair} yourself.\n   * @default true\n   */\n  readonly createMaintenanceTasksOnNewKey?: boolean\n  /**\n   * Additional headers to use on each request made by the iCure api.\n   * @default no additional headers\n   */\n  readonly headers?: { [headerName: string]: string }\n  /**\n   * Specifies which fields should be encrypted for each kind of encryptable entity. You should make sure that every application in your environment\n   * specifies the same values for this configuration.\n   * @default see documentation for {@link EncryptedFieldsConfig}\n   */\n  readonly encryptedFieldsConfig?: EncryptedFieldsConfig\n  /**\n   * Each user may exist in multiple groups, but an instance of {@link IcureApi} is specialised for a single group. This function allows you to decide\n   * the group to use for a given user.\n   * This functions will be called only if a user exists in at least 2 groups, and takes in input:\n   * - the information on the groups the user can access (in no specific order)\n   * - if the authentication method uses JWT also the current group id (undefined otherwise)\n   * The function must return the id of one of the available groups.\n   * @default takes the first group provided. The group chosen by this method may vary between different instantiations of the {@link IcureApi} even\n   * if for the same user and if the groups available for the user do not change.\n   */\n  readonly groupSelector?: (availableGroupsInfo: UserGroup[], currentGroupId?: string) => Promise<string>\n  /**\n   * Temporary value to support EHR Lite and MedTech api implementations.\n   *\n   * Currently, all hcps are able to access encrypted data shared with any of their parents, and on initialisation the api will verify that there is a\n   * key pair available for the current user and for every parent of the user. If this option is set to true, the api will not load keys for the\n   * parent users.\n   *\n   * This \"implicit data-sharing scheme\" (each parent HCP is essentially sharing data with all its children HCPs), however, may not be ideal for all\n   * use cases, and it will be changed in future to be configurable in order to make it more general.\n   * @default false, equivalent to previous behaviour.\n   */\n  readonly disableParentKeysInitialisation?: boolean\n}\n\nnamespace IcureApiOptions {\n  export namespace Defaults {\n    export const entryKeysFactory = new DefaultStorageEntryKeysFactory()\n    export const createMaintenanceTasksOnNewKey = true\n    export const headers = {}\n  }\n\n  export class WithDefaults implements IcureApiOptions {\n    readonly entryKeysFactory: StorageEntryKeysFactory\n    readonly createMaintenanceTasksOnNewKey: boolean\n    readonly storage: StorageFacade<string>\n    readonly keyStorage: KeyStorageFacade\n    readonly headers: { [headerName: string]: string }\n    readonly encryptedFieldsConfig: EncryptedFieldsConfig\n    readonly groupSelector: (availableGroupsInfo: UserGroup[]) => Promise<string>\n    readonly disableParentKeysInitialisation: boolean\n\n    constructor(custom: IcureApiOptions) {\n      this.entryKeysFactory = custom.entryKeysFactory ?? Defaults.entryKeysFactory\n      this.createMaintenanceTasksOnNewKey = custom.createMaintenanceTasksOnNewKey ?? Defaults.createMaintenanceTasksOnNewKey\n      this.storage = custom.storage ?? new LocalStorageImpl()\n      this.keyStorage = custom.keyStorage ?? new KeyStorageImpl(this.storage)\n      this.headers = custom.headers ?? Defaults.headers\n      this.encryptedFieldsConfig = custom.encryptedFieldsConfig ?? {}\n      this.groupSelector = custom.groupSelector ?? ((groups) => Promise.resolve(groups[0].groupId!))\n      this.disableParentKeysInitialisation = custom.disableParentKeysInitialisation ?? false\n    }\n  }\n}\n\n/**\n * Specifies which fields should be encrypted for each kind of encryptable entity.\n *\n * Note that any value you specify here overrides the default values. For example if you specify `['medicalLocationId']` for `healthElement` the\n * fields `['descr', 'note']` which are usually encrypted by default will no longer be encrypted. If you want to add fields to the default values\n * you can use {@link EncryptedFieldsConfig.Defaults}, for example `[...EncryptedFieldsConfig.Defaults.healthElement, 'medicalLocationId'].\n *\n * # Encrypted fields syntax\n *\n * ## Grammar\n *\n * The grammar for each encrypted field is the following:\n * ```\n * fieldName :=\n *   regex([a-zA-Z_][a-zA-Z0-9_]+)\n * encryptedField :=\n *   fieldName\n *   | fieldName + (\".\" | \".*.\" | \"[].\") + encryptedField\n * ```\n *\n * This grammar allows you to specify the fields to encrypt for the object and recursively for nested objects.\n * - A string containing only a single `fieldName` will encrypt the field with the given name.\n * - A string starting with `fieldName.` allows to specify the encrypted fields of a nested object. The encrypted values of the\n *   fields in the nested object will be saved in the nested object.\n * - A string starting with `fieldName.*.` treats `fieldName` as a map/dictionary data structure and allows to specify the encrypted fields of the\n *   values of the map. Note that the values of the map must be objects as well. The encrypted content of each map value is stored in that value.\n * - A string starting with `fieldName[].` treats `fieldName` as an array and allows to specify the encrypted fields of the values of the array.\n *   Note that the values of the array must be objects as well. The encrypted content of each array element is stored in that element.\n *\n * ## Example\n *\n * Consider the following object and encryption keys:\n * ```javascript\n * const obj = {\n *   a: { x: 0, y: 1 },\n *   b: \"hello\",\n *   c: [ { public: \"a\", secret: \"b\" }, { public: \"c\", secret: \"d\" } ],\n *   d: \"ok\",\n *   e: {\n *     info: \"something\",\n *     private: \"secret\",\n *     dataMap: {\n *       \"en\": {\n *         a: 1,\n *         b: 2\n *       },\n *       \"fr\": {\n *         a: 3,\n *         b: 4\n *       }\n *     }\n *   }\n * }\n * const encryptedFields = [\n *   \"a\",\n *   \"c[].secret\",\n *   \"d\",\n *   \"e.private\",\n *   \"e.datamap.*.a\"\n * ]\n * ```\n * If you use them with the crypt method you will get the following result:\n * ```json\n * {\n *   b: \"hello\",\n *   c: [\n *     { public: \"a\", encryptedSelf: 'encrypted+encoded { secret: \"b\" }' },\n *     { public: \"c\", encryptedSelf: 'encrypted+encoded { secret: \"d\" }' }\n *   ],\n *   e: {\n *     info: \"something\",\n *     dataMap: {\n *       \"en\": { b: 2, encryptedSelf: 'encrypted+encoded { a: 1 }' },\n *       \"fr\": { b: 4, encryptedSelf: 'encrypted+encoded { a: 3 }' }\n *     },\n *     encryptedSelf: 'encrypted+encoded { private: \"secret\" }'\n *   },\n *   encryptedSelf: 'encrypted+encoded { a: { x: 0, y: 1 }, d: \"ok\" }'\n * }\n * ```\n *\n * ## Shortened representation\n *\n * You can also group encrypted fields having the same prefix by concatenating to the prefix the JSON representation of an array of all the postfixes.\n * For example the following encrypted fields:\n * ```javascript\n * const encryptedFields = [\"a.b.c.d.e.f1\", \"a.b.c.d.e.f2\", \"a.b.c.d.e.f3\", \"a.b.c.d.e.f4\"]\n * ```\n * can be shortened to\n * ```javascript\n * const encryptedFields = ['a.b.c.d.e.[\"f1\",\"f2\",\"f3\",\"f4\"]'] // Note the use of single quotes to avoid escaping the double quotes\n * ```\n * If you use the shortened representation you may need to escape nested json representations. In that case the use of `JSON.stringify` is\n * recommended.\n */\nexport interface EncryptedFieldsConfig {\n  /**\n   * Fields to encrypt for entities of type {@link AccessLog}\n   * @default ['detail', 'objectId']\n   */\n  readonly accessLog?: string[]\n  /**\n   * Fields to encrypt for entities of type {@link CalendarItem}\n   * @default ['details', 'title', 'patientId']\n   */\n  readonly calendarItem?: string[]\n  /**\n   * Fields to encrypt for entities of type {@link Contact}, excluding `services`. You can specify which fields of `services` should be encrypted\n   * using {@link service}.\n   * @default ['descr'] // encryption of `services` is managed through {@link service}\n   */\n  readonly contact?: string[]\n  /**\n   * Fields to encrypt for entities of type {@link Service}. Note that encryption of the `content` field and recursively contained `Services` through\n   * `content.compoundValue` is automatically managed by the sdk, and you are not allowed to modify it.\n   *\n   * Note: any non-empty values for this field will break bi-directional data compatibility between v7 and previous: Contacts created with\n   * v7 will not be read properly by previous versions. If you want\n   * @default ['notes[].markdown'] // encryption of `content` is managed in a special way\n   */\n  readonly service?: string[]\n  /**\n   * Fields to encrypt for entities of type {@link HealthElement}\n   * @default ['descr', 'note', 'notes[].markdown']\n   */\n  readonly healthElement?: string[]\n  /**\n   * Fields to encrypt for entities of type {@link MaintenanceTask}\n   * @default ['properties']\n   */\n  readonly maintenanceTask?: string[]\n  /**\n   * Fields to encrypt for entities of type {@link Patient}\n   * @default ['note', 'notes[].markdown']\n   */\n  readonly patient?: string[]\n\n  /**\n   * Fields to encrypt for entities of type {@link Message}\n   * @default []\n   */\n  readonly message?: string[]\n\n  /**\n   * Fields to encrypt for entities of type {@link Topic}\n   * @default ['description']\n   */\n  readonly topic?: string[]\n}\n\nexport namespace EncryptedFieldsConfig {\n  export const Defaults = {\n    accessLog: ['detail', 'objectId'],\n    calendarItem: ['details', 'title', 'patientId'],\n    contact: ['descr', 'notes[].markdown'],\n    service: ['notes[].markdown'],\n    healthElement: ['descr', 'note', 'notes[].markdown'],\n    maintenanceTask: ['properties'],\n    patient: ['note', 'notes[].markdown'],\n    message: [],\n    topic: ['description', 'linkedServices', 'linkedHealthElements'],\n  }\n}\n\n/**\n * Details for the authentication of a user\n */\nexport type AuthenticationDetails =\n  | {\n      username: string\n      password: string\n      thirdPartyTokens?: { [thirdParty: string]: string }\n    }\n  | {\n      icureTokens: { token: string; refreshToken: string }\n      credentials?: { username: string; password: string }\n    }\n  | {\n      thirdPartyTokens: { [thirdParty: string]: string }\n    }\n  | SmartAuthenticationDetails\n\n/**\n * Allows to perform authentication through an {@link AuthSecretProvider}.\n *\n * The iCure SDK can authenticate to the backend using different kinds of secrets, such as passwords, long-lived authentication tokens, and\n * short-lived authentication tokens generated through the message gateway. iCure associates to each kind of secret a certain security level, and for\n * some sensitive operations, depending on the configurations of the user and his group, some operations may require a secret of a certain security\n * level. For example, with the default configurations, in order to change his own email the user can't have logged in with a long-lived token, but he\n * needs to provide his current password or a short-lived token.\n *\n * By using this authentication option, the iCure SDK will automatically request and cache the secret from the {@link AuthSecretProvider} only when\n * needed, which should help to minimise the interaction with the user.\n *\n * Another advantage of using this authentication option over others is that in case all the cached tokens and secrets were to expire while performing\n * a request, instead of having the request fail the SDK will ask for a new secret from the {@link SmartAuthProvider} and the request will\n * automatically be retried with the new secret.\n *\n * You must provide the following information:\n * - username: any kind of value that can identify the user (userId, groupId/userId, username, email, ...). More generic identifiers, valid\n *   on multiple groups, allow for simpler group switching by using {@link IcureApi.switchGroup}.\n * - secretProvider: the secret provider to use for authentication. Will handle interaction with the gui.\n *\n * You can also provide the following optional information, which may allow to reduce the requests for secrets initially:\n * - initialSecret: an initial secret (password, token, ...) that will be used to get new authentication tokens as needed. If it is expired it will be ignored.\n * - initialAuthToken: an initial authentication token used on each request. If it is expired it will be ignored.\n * - initialRefreshToken: an initial refresh token used to get new authentication tokens as needed. If it is expired it will be ignored.\n */\nexport type SmartAuthenticationDetails = {\n  username: string\n  secretProvider: AuthSecretProvider\n  initialSecret?:\n    | {\n        password: string\n      }\n    | {\n        longToken: string\n      }\n    | {\n        oauthToken: string\n        oauthType: OAuthThirdParty\n      }\n  initialAuthToken?: string\n  initialRefreshToken?: string\n}\n\n/**\n * Main entry point for the iCure API. Provides entity-specific sub-apis and some general methods which are not related to a specific entity.\n */\nexport interface IcureApi extends Apis {\n  /**\n   * Get the information on groups that the current user can access and the current group that this api instance is working on.\n   * Note that the values you will get for `availableGroups` may differ from the values you would get if you call {@link IccUserApi.getMatchingUsers}\n   * on {@link Apis.userApi}, since the latter is specialised on the specific instance of the user in `currentGroup`.\n   * - `currentGroup`: the group that this api instance is working on, or undefined if the backend environment is not multi-group.\n   * - `availableGroups`: the list of groups that the current user can access with the provided secret. Empty if the backend environment is not\n   * multi-group.\n   */\n  getGroupsInfo(): Promise<{ currentGroup: UserGroup | undefined; availableGroups: UserGroup[] }>\n\n  /**\n   * Switches the api to allow the user to work on a different group.\n   * @param newGroupId the id of the group to switch to.\n   * @return a new api for the specified group.\n   */\n  switchGroup(newGroupId: string): Promise<IcureApi>\n}\n\nexport namespace IcureApi {\n  /**\n   * Initialises a new instance of the iCure API.\n   */\n  export async function initialise(\n    host: string,\n    authenticationOptions: AuthenticationDetails | AuthenticationProvider,\n    cryptoStrategies: CryptoStrategies,\n    crypto: Crypto | CryptoPrimitives = typeof window !== 'undefined' ? window.crypto : typeof self !== 'undefined' ? self.crypto : ({} as Crypto),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch,\n    options: IcureApiOptions = {}\n  ): Promise<IcureApi> {\n    const params = new IcureApiOptions.WithDefaults(options)\n    let authenticationProviderInfo = await initialiseAuthProviderWithGroupSelector(\n      host,\n      authenticationOptions,\n      params.headers,\n      fetchImpl,\n      params.groupSelector\n    )\n    const cryptoInitInfo = await initialiseCryptoWithProvider(\n      host,\n      fetchImpl,\n      authenticationProviderInfo.groupSpecificAuthenticationProvider,\n      params,\n      cryptoStrategies,\n      crypto\n    )\n    return new IcureApiImpl(\n      cryptoInitInfo,\n      host,\n      authenticationProviderInfo.groupSpecificAuthenticationProvider,\n      fetch,\n      authenticationProviderInfo.grouplessUserApi,\n      authenticationProviderInfo.matches,\n      authenticationProviderInfo.matches.find((match) => match.groupId === authenticationProviderInfo.chosenGroupId),\n      params,\n      cryptoStrategies\n    )\n  }\n}\n\nasync function getAuthenticationProvider(\n  host: string,\n  authenticationOptions: AuthenticationDetails | AuthenticationProvider,\n  headers: { [headerName: string]: string },\n  fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response>\n) {\n  let authenticationProvider: AuthenticationProvider\n  if ('getIcureTokens' in authenticationOptions && 'switchGroup' in authenticationOptions && 'getAuthService' in authenticationOptions) {\n    authenticationProvider = authenticationOptions\n  } else if ('icureTokens' in authenticationOptions && !!authenticationOptions.icureTokens) {\n    authenticationProvider = new JwtAuthenticationProvider(\n      new IccAuthApi(host, headers, new NoAuthenticationProvider(), fetchImpl),\n      authenticationOptions?.credentials?.username,\n      authenticationOptions?.credentials?.password,\n      undefined,\n      authenticationOptions.icureTokens\n    )\n  } else if (\n    'username' in authenticationOptions &&\n    'password' in authenticationOptions &&\n    !!authenticationOptions.username &&\n    !!authenticationOptions.password\n  ) {\n    authenticationProvider = new EnsembleAuthenticationProvider(\n      new IccAuthApi(host, headers, new NoAuthenticationProvider(), fetchImpl),\n      authenticationOptions.username,\n      authenticationOptions.password,\n      3600,\n      undefined,\n      undefined,\n      authenticationOptions.thirdPartyTokens\n    )\n  } else if ('thirdPartyTokens' in authenticationOptions && !!authenticationOptions.thirdPartyTokens) {\n    authenticationProvider = new JwtAuthenticationProvider(\n      new IccAuthApi(host, headers, new NoAuthenticationProvider(), fetchImpl),\n      undefined,\n      undefined,\n      new JwtBridgedAuthService(\n        new IccAuthApi(host, headers, new NoAuthenticationProvider(), fetchImpl),\n        undefined,\n        undefined,\n        authenticationOptions.thirdPartyTokens,\n        undefined\n      )\n    )\n  } else if ('username' in authenticationOptions && 'secretProvider' in authenticationOptions) {\n    authenticationProvider = SmartAuthProvider.initialise(\n      new IccAuthApi(host, headers, new NoAuthenticationProvider(), fetchImpl),\n      authenticationOptions.username,\n      authenticationOptions.secretProvider,\n      {\n        initialSecret: authenticationOptions.initialSecret,\n        initialAuthToken: authenticationOptions.initialAuthToken,\n        initialRefreshToken: authenticationOptions.initialRefreshToken,\n      }\n    )\n  } else {\n    throw new Error('Invalid authentication options provided')\n  }\n  return authenticationProvider\n}\n\nasync function initialiseAuthProviderWithGroupSelector(\n  host: string,\n  authenticationOptions: AuthenticationDetails | AuthenticationProvider,\n  headers: { [headerName: string]: string },\n  fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response>,\n  groupSelector: ((availableGroupsInfo: UserGroup[], currentGroupId?: string) => Promise<string>) | undefined\n) {\n  let grouplessAuthenticationProvider = await getAuthenticationProvider(host, authenticationOptions, headers, fetchImpl)\n  const grouplessUserApi = new IccUserApi(host, headers, grouplessAuthenticationProvider, fetchImpl)\n  const matches = await getMatchesOrEmpty(grouplessUserApi)\n  const tokens = await grouplessAuthenticationProvider.getIcureTokens()\n  const currentGroupId = tokens ? getGroupOfJwt(tokens.token) : undefined\n  const chosenGroupId = matches.length > 1 && !!groupSelector ? await groupSelector(matches, currentGroupId) : matches[0]?.groupId\n  /*TODO\n   * On new very new users switching the authentication provider to a specific group may fail and block the user for too many requests. This is\n   * probably linked to replication of the user in the fallback database.\n   */\n  /*\n   * If the auth provider is initialized with credentials and jwt not switching the group will may cause issues:\n   * 1. The default group for the user is group A\n   * 2. The user logs in to group B -> the provider is switched\n   * 3. The user refreshes the page -> a new instance of the api with initial iCure tokens is created\n   * 4. The refresh token is expired / the user needs to do a high security operation -> a new login is done .If we did\n   *    not switch the provider here the login would default to group A, potentially causing a lot of issues...\n   */\n  const groupSpecificAuthenticationProvider = !!chosenGroupId\n    ? await grouplessAuthenticationProvider.switchGroup(chosenGroupId, matches)\n    : grouplessAuthenticationProvider\n  return {\n    groupSpecificAuthenticationProvider,\n    // No need for a groupless user api on a group-specific smart auth provider\n    grouplessUserApi: groupSpecificAuthenticationProvider instanceof SmartAuthProvider ? undefined : grouplessUserApi,\n    matches,\n    chosenGroupId,\n  }\n}\n\n// Apis which are used during crypto api initialisation, to avoid re-instantiating them later\ntype CryptoInitialisationInfo = {\n  cryptoApi: IccCryptoXApi\n  healthcarePartyApi: IccHcpartyXApi\n  deviceApi: IccDeviceXApi\n  // no patient api since it is base\n  dataOwnerApi: IccDataOwnerXApi\n  userApi: IccUserXApi\n  icureMaintenanceTaskApi: IccIcureMaintenanceXApi\n  maintenanceTaskApi: IccMaintenanceTaskXApi\n  headers: { [headerName: string]: string }\n  dataOwnerRequiresAnonymousDelegation: boolean\n  recoveryApi: IccRecoveryXApi\n}\n\nconst REQUEST_AUTOFIX_ANONYMITY_HEADER = 'Icure-Request-Autofix-Anonymity'\n\nasync function initialiseCryptoWithProvider(\n  host: string,\n  fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response>,\n  groupSpecificAuthenticationProvider: AuthenticationProvider,\n  params: IcureApiOptions.WithDefaults,\n  cryptoStrategies: CryptoStrategies,\n  crypto: Crypto | CryptoPrimitives\n): Promise<CryptoInitialisationInfo> {\n  const initialDataOwnerStub = await new IccDataOwnerXApi(\n    host,\n    params.headers,\n    groupSpecificAuthenticationProvider,\n    fetchImpl\n  ).getCurrentDataOwnerStub()\n  const dataOwnerRequiresAnonymousDelegation = cryptoStrategies.dataOwnerRequiresAnonymousDelegation(initialDataOwnerStub)\n  let updatedHeaders = params.headers\n  if (!Object.keys(updatedHeaders).includes(REQUEST_AUTOFIX_ANONYMITY_HEADER)) {\n    if (initialDataOwnerStub.type == DataOwnerTypeEnum.Patient || initialDataOwnerStub.type == DataOwnerTypeEnum.Device) {\n      if (!dataOwnerRequiresAnonymousDelegation) {\n        updatedHeaders = { ...updatedHeaders, [REQUEST_AUTOFIX_ANONYMITY_HEADER]: 'false' }\n      }\n    } else {\n      if (dataOwnerRequiresAnonymousDelegation) {\n        updatedHeaders = { ...updatedHeaders, [REQUEST_AUTOFIX_ANONYMITY_HEADER]: 'true' }\n      }\n    }\n  }\n\n  const authApi = new IccAuthApi(host, updatedHeaders, groupSpecificAuthenticationProvider, fetchImpl)\n  const userApi = new IccUserXApi(host, updatedHeaders, groupSpecificAuthenticationProvider, authApi, fetchImpl)\n  const healthcarePartyApi = new IccHcpartyXApi(host, updatedHeaders, groupSpecificAuthenticationProvider, authApi, fetchImpl)\n  const deviceApi = new IccDeviceXApi(host, updatedHeaders, groupSpecificAuthenticationProvider, userApi, authApi, fetchImpl)\n  const basePatientApi = new IccPatientApi(host, updatedHeaders, groupSpecificAuthenticationProvider, fetchImpl)\n  const dataOwnerApi = new IccDataOwnerXApi(host, updatedHeaders, groupSpecificAuthenticationProvider, fetchImpl)\n  const exchangeDataApi = new IccExchangeDataApi(host, updatedHeaders, groupSpecificAuthenticationProvider, fetchImpl)\n  const baseRecoveryDataApi = new IccRecoveryDataApi(host, updatedHeaders, groupSpecificAuthenticationProvider, fetchImpl)\n  // Crypto initialisation\n  const icureStorage = new IcureStorageFacade(params.keyStorage, params.storage, params.entryKeysFactory)\n  const cryptoPrimitives = 'AES' in crypto && 'RSA' in crypto && 'HMAC' in crypto ? crypto : new WebCryptoPrimitives(crypto)\n  const baseExchangeKeysManager = new BaseExchangeKeysManager(cryptoPrimitives, dataOwnerApi, healthcarePartyApi, basePatientApi, deviceApi)\n  const baseExchangeDataManager = new BaseExchangeDataManager(exchangeDataApi, dataOwnerApi, cryptoPrimitives, dataOwnerRequiresAnonymousDelegation)\n  const keyRecovery = new KeyRecovery(cryptoPrimitives, dataOwnerApi, baseExchangeKeysManager, baseExchangeDataManager)\n  const recoveryDataEncryption = new RecoveryDataEncryption(cryptoPrimitives, baseRecoveryDataApi)\n  const keyPairRecoverer = new KeyPairRecoverer(recoveryDataEncryption)\n  const userEncryptionKeysManager = new UserEncryptionKeysManager(\n    cryptoPrimitives,\n    dataOwnerApi,\n    icureStorage,\n    keyRecovery,\n    cryptoStrategies,\n    !params.disableParentKeysInitialisation,\n    keyPairRecoverer\n  )\n  const userSignatureKeysManager = new UserSignatureKeysManager(icureStorage, dataOwnerApi, cryptoPrimitives)\n  const newKey = await userEncryptionKeysManager.initialiseKeys()\n  await new TransferKeysManager(\n    cryptoPrimitives,\n    baseExchangeDataManager,\n    dataOwnerApi,\n    userEncryptionKeysManager,\n    userSignatureKeysManager,\n    icureStorage\n  ).updateTransferKeys(await dataOwnerApi.getCurrentDataOwnerStub())\n  // TODO customise cache size?\n  const exchangeKeysManager = new ExchangeKeysManager(\n    100,\n    500,\n    600000,\n    60000,\n    cryptoStrategies,\n    cryptoPrimitives,\n    userEncryptionKeysManager,\n    baseExchangeKeysManager,\n    dataOwnerApi,\n    !params.disableParentKeysInitialisation,\n    icureStorage\n  )\n  const accessControlSecretUtils = new AccessControlSecretUtils(cryptoPrimitives)\n  const exchangeDataManager = await initialiseExchangeDataManagerForCurrentDataOwner(\n    baseExchangeDataManager,\n    userEncryptionKeysManager,\n    userSignatureKeysManager,\n    accessControlSecretUtils,\n    cryptoStrategies,\n    dataOwnerApi,\n    cryptoPrimitives,\n    !params.disableParentKeysInitialisation\n  )\n  const exchangeDataMapManager = new ExchangeDataMapManager(\n    new IccExchangeDataMapApi(host, updatedHeaders, groupSpecificAuthenticationProvider, fetchImpl)\n  )\n  const secureDelegationsEncryption = new SecureDelegationsEncryption(userEncryptionKeysManager, cryptoPrimitives)\n  const secureDelegationsSecurityMetadataEncryption = new SecureDelegationsSecurityMetadataDecryptor(\n    exchangeDataManager,\n    exchangeDataMapManager,\n    secureDelegationsEncryption,\n    dataOwnerApi\n  )\n  const xApiUtils = new ExtendedApisUtilsImpl(\n    cryptoPrimitives,\n    dataOwnerApi,\n    new LegacyDelegationSecurityMetadataDecryptor(exchangeKeysManager, cryptoPrimitives),\n    secureDelegationsSecurityMetadataEncryption,\n    new SecureDelegationsManager(\n      exchangeDataManager,\n      exchangeDataMapManager,\n      secureDelegationsEncryption,\n      accessControlSecretUtils,\n      userEncryptionKeysManager,\n      cryptoPrimitives,\n      dataOwnerApi,\n      cryptoStrategies,\n      dataOwnerRequiresAnonymousDelegation\n    ),\n    userApi,\n    !params.disableParentKeysInitialisation\n  )\n  const shamirManager = new ShamirKeysManager(cryptoPrimitives, dataOwnerApi, userEncryptionKeysManager, exchangeDataManager)\n  const confidentialEntitites = new ConfidentialEntities(xApiUtils, cryptoPrimitives, dataOwnerApi)\n  await ensureDelegationForSelf(dataOwnerApi, xApiUtils, basePatientApi, cryptoPrimitives)\n  const accessControlKeysHeadersProvider = new AccessControlKeysHeadersProvider(exchangeDataManager)\n  const delegationsDeAnonymisation = new DelegationsDeAnonymization(\n    dataOwnerApi,\n    secureDelegationsSecurityMetadataEncryption,\n    xApiUtils,\n    cryptoPrimitives,\n    accessControlSecretUtils,\n    host,\n    updatedHeaders,\n    groupSpecificAuthenticationProvider,\n    fetchImpl,\n    accessControlKeysHeadersProvider\n  )\n  const cryptoApi = new IccCryptoXApi(\n    exchangeKeysManager,\n    cryptoPrimitives,\n    userEncryptionKeysManager,\n    dataOwnerApi,\n    xApiUtils,\n    shamirManager,\n    params.storage,\n    params.keyStorage,\n    confidentialEntitites,\n    exchangeDataManager,\n    accessControlKeysHeadersProvider,\n    delegationsDeAnonymisation\n  )\n  const maintenanceTaskApi = new IccMaintenanceTaskXApi(\n    host,\n    updatedHeaders,\n    cryptoApi,\n    healthcarePartyApi,\n    dataOwnerApi,\n    userApi,\n    authApi,\n    !dataOwnerRequiresAnonymousDelegation,\n    params.encryptedFieldsConfig.maintenanceTask ?? EncryptedFieldsConfig.Defaults.maintenanceTask,\n    groupSpecificAuthenticationProvider,\n    fetchImpl\n  )\n  const icureMaintenanceTaskApi = new IccIcureMaintenanceXApi(cryptoApi, maintenanceTaskApi, dataOwnerApi, exchangeDataApi)\n\n  if (newKey && params.createMaintenanceTasksOnNewKey) {\n    await icureMaintenanceTaskApi.createMaintenanceTasksForNewKeypair(await userApi.getCurrentUser(), newKey.newKeyPair)\n  }\n  return {\n    cryptoApi,\n    userApi,\n    healthcarePartyApi,\n    deviceApi,\n    maintenanceTaskApi,\n    dataOwnerApi,\n    icureMaintenanceTaskApi,\n    headers: updatedHeaders,\n    dataOwnerRequiresAnonymousDelegation,\n    recoveryApi: new IccRecoveryXApi(\n      baseRecoveryDataApi,\n      recoveryDataEncryption,\n      userEncryptionKeysManager,\n      dataOwnerApi,\n      cryptoPrimitives,\n      exchangeDataManager\n    ),\n  }\n}\n\nclass IcureApiImpl implements IcureApi {\n  private latestGroupsRequest: Promise<UserGroup[]>\n\n  constructor(\n    private readonly cryptoInitInfos: CryptoInitialisationInfo,\n    private readonly host: string,\n    private readonly groupSpecificAuthenticationProvider: AuthenticationProvider,\n    private readonly fetch: (input: RequestInfo, init?: RequestInit) => Promise<Response>,\n    private readonly grouplessUserApi: IccUserApi | undefined,\n    latestMatches: UserGroup[],\n    private readonly currentGroupInfo: UserGroup | undefined,\n    private readonly params: IcureApiOptions.WithDefaults,\n    private readonly cryptoStrategies: CryptoStrategies\n  ) {\n    this.latestGroupsRequest = Promise.resolve(latestMatches)\n  }\n\n  private _authApi: IccAuthApi | undefined\n\n  get recoveryApi(): IccRecoveryXApi {\n    return this.cryptoInitInfos.recoveryApi\n  }\n\n  get authApi(): IccAuthApi {\n    return (\n      this._authApi ?? (this._authApi = new IccAuthApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _codeApi: IccCodeXApi | undefined\n\n  get codeApi(): IccCodeXApi {\n    return (\n      this._codeApi ??\n      (this._codeApi = new IccCodeXApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _calendarItemTypeApi: IccCalendarItemTypeApi | undefined\n\n  get calendarItemTypeApi(): IccCalendarItemTypeApi {\n    return (\n      this._calendarItemTypeApi ??\n      (this._calendarItemTypeApi = new IccCalendarItemTypeApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _medicalLocationApi: IccMedicallocationApi | undefined\n\n  get medicalLocationApi(): IccMedicallocationApi {\n    return (\n      this._medicalLocationApi ??\n      (this._medicalLocationApi = new IccMedicallocationApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _roleApi: IccRoleApi | undefined\n\n  get roleApi(): IccRoleApi {\n    return this._roleApi ?? (this._roleApi = new IccRoleApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n  }\n\n  private _entityReferenceApi: IccEntityrefApi | undefined\n\n  get entityReferenceApi(): IccEntityrefApi {\n    return (\n      this._entityReferenceApi ??\n      (this._entityReferenceApi = new IccEntityrefApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _permissionApi: IccPermissionApi | undefined\n\n  get permissionApi(): IccPermissionApi {\n    return (\n      this._permissionApi ??\n      (this._permissionApi = new IccPermissionApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _accessLogApi: IccAccesslogXApi | undefined\n\n  get accessLogApi(): IccAccesslogXApi {\n    return (\n      this._accessLogApi ??\n      (this._accessLogApi = new IccAccesslogXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.params.encryptedFieldsConfig.accessLog ?? EncryptedFieldsConfig.Defaults.accessLog,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _agendaApi: IccAgendaApi | undefined\n\n  get agendaApi(): IccAgendaApi {\n    return (\n      this._agendaApi ??\n      (this._agendaApi = new IccAgendaApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _contactApi: IccContactXApi | undefined\n\n  get contactApi(): IccContactXApi {\n    return (\n      this._contactApi ??\n      (this._contactApi = new IccContactXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        this.userApi,\n        this.authApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch,\n        this.params.encryptedFieldsConfig.contact ?? EncryptedFieldsConfig.Defaults.contact,\n        this.params.encryptedFieldsConfig.service ?? EncryptedFieldsConfig.Defaults.service\n      ))\n    )\n  }\n\n  private _formApi: IccFormXApi | undefined\n\n  get formApi(): IccFormXApi {\n    return (\n      this._formApi ??\n      (this._formApi = new IccFormXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _groupApi: IccGroupApi | undefined\n\n  get groupApi(): IccGroupApi {\n    return (\n      this._groupApi ??\n      (this._groupApi = new IccGroupApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _invoiceApi: IccInvoiceXApi | undefined\n\n  get invoiceApi(): IccInvoiceXApi {\n    return (\n      this._invoiceApi ??\n      (this._invoiceApi = new IccInvoiceXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.entityReferenceApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _insuranceApi: IccInsuranceApi | undefined\n\n  get insuranceApi(): IccInsuranceApi {\n    return (\n      this._insuranceApi ??\n      (this._insuranceApi = new IccInsuranceApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _documentApi: IccDocumentXApi | undefined\n\n  get documentApi(): IccDocumentXApi {\n    return (\n      this._documentApi ??\n      (this._documentApi = new IccDocumentXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.authApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _healthcareElementApi: IccHelementXApi | undefined\n\n  get healthcareElementApi(): IccHelementXApi {\n    return (\n      this._healthcareElementApi ??\n      (this._healthcareElementApi = new IccHelementXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        this.userApi,\n        this.authApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.params.encryptedFieldsConfig.healthElement ?? EncryptedFieldsConfig.Defaults.healthElement,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _classificationApi: IccClassificationXApi | undefined\n\n  get classificationApi(): IccClassificationXApi {\n    return (\n      this._classificationApi ??\n      (this._classificationApi = new IccClassificationXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _calendarItemApi: IccCalendarItemXApi | undefined\n\n  get calendarItemApi(): IccCalendarItemXApi {\n    return (\n      this._calendarItemApi ??\n      (this._calendarItemApi = new IccCalendarItemXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.params.encryptedFieldsConfig.calendarItem ?? EncryptedFieldsConfig.Defaults.calendarItem,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _receiptApi: IccReceiptXApi | undefined\n\n  get receiptApi(): IccReceiptXApi {\n    return (\n      this._receiptApi ??\n      (this._receiptApi = new IccReceiptXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _timetableApi: IccTimeTableXApi | undefined\n\n  get timetableApi(): IccTimeTableXApi {\n    return (\n      this._timetableApi ??\n      (this._timetableApi = new IccTimeTableXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _patientApi: IccPatientXApi | undefined\n\n  get patientApi(): IccPatientXApi {\n    return (\n      this._patientApi ??\n      (this._patientApi = new IccPatientXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.contactApi,\n        this.formApi,\n        this.healthcareElementApi,\n        this.invoiceApi,\n        this.documentApi,\n        this.healthcarePartyApi,\n        this.classificationApi,\n        this.dataOwnerApi,\n        this.calendarItemApi,\n        this.userApi,\n        this.authApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.params.encryptedFieldsConfig.patient ?? EncryptedFieldsConfig.Defaults.patient,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _messageApi: IccMessageXApi | undefined\n\n  get messageApi(): IccMessageXApi {\n    return (\n      this._messageApi ??\n      (this._messageApi = new IccMessageXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        this.authApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.params.encryptedFieldsConfig.message ?? EncryptedFieldsConfig.Defaults.message,\n        this.fetch\n      ))\n    )\n  }\n\n  private _topicApi: IccTopicXApi | undefined\n\n  get topicApi(): IccTopicXApi {\n    return (\n      this._topicApi ??\n      (this._topicApi = new IccTopicXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.dataOwnerApi,\n        this.authApi,\n        !this.cryptoInitInfos.dataOwnerRequiresAnonymousDelegation,\n        this.groupSpecificAuthenticationProvider,\n        this.params.encryptedFieldsConfig.topic ?? EncryptedFieldsConfig.Defaults.topic,\n        this.fetch\n      ))\n    )\n  }\n\n  private _anonymousAccessApi: IccAnonymousAccessApi | undefined\n\n  get anonymousAccessApi(): IccAnonymousAccessApi {\n    return (\n      this._anonymousAccessApi ??\n      (this._anonymousAccessApi = new IccAnonymousAccessApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _applicationSettingsApi: IccApplicationsettingsApi | undefined\n\n  get applicationSettingsApi(): IccApplicationsettingsApi {\n    return (\n      this._applicationSettingsApi ??\n      (this._applicationSettingsApi = new IccApplicationsettingsApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _articleApi: IccArticleApi | undefined\n\n  get articleApi(): IccArticleApi {\n    return (\n      this._articleApi ??\n      (this._articleApi = new IccArticleApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _bekmehrApi: IccBekmehrXApi | undefined\n\n  get bekmehrApi(): IccBekmehrXApi {\n    return (\n      this._bekmehrApi ??\n      (this._bekmehrApi = new IccBekmehrXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.contactApi,\n        this.healthcareElementApi,\n        this.documentApi,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _beefactApi: IccBeefactApi | undefined\n\n  get beefactApi(): IccBeefactApi {\n    return (\n      this._beefactApi ??\n      (this._beefactApi = new IccBeefactApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _beresultexportApi: IccBeresultexportApi | undefined\n\n  get beresultexportApi(): IccBeresultexportApi {\n    return (\n      this._beresultexportApi ??\n      (this._beresultexportApi = new IccBeresultexportApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _beresultimportApi: IccBeresultimportApi | undefined\n\n  get beresultimportApi(): IccBeresultimportApi {\n    return (\n      this._beresultimportApi ??\n      (this._beresultimportApi = new IccBeresultimportApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _besamv2Api: IccBesamv2Api | undefined\n\n  get besamv2Api(): IccBesamv2Api {\n    return (\n      this._besamv2Api ??\n      (this._besamv2Api = new IccBesamv2Api(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _classificationTemplateApi: IccClassificationTemplateApi | undefined\n\n  get classificationTemplateApi(): IccClassificationTemplateApi {\n    return (\n      this._classificationTemplateApi ??\n      (this._classificationTemplateApi = new IccClassificationTemplateApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _doctemplateApi: IccDoctemplateXApi | undefined\n\n  get doctemplateApi(): IccDoctemplateXApi {\n    return (\n      this._doctemplateApi ??\n      (this._doctemplateApi = new IccDoctemplateXApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.cryptoApi,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _entitytemplateApi: IccEntitytemplateApi | undefined\n\n  get entitytemplateApi(): IccEntitytemplateApi {\n    return (\n      this._entitytemplateApi ??\n      (this._entitytemplateApi = new IccEntitytemplateApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _frontendmigrationApi: IccFrontendmigrationApi | undefined\n\n  get frontendmigrationApi(): IccFrontendmigrationApi {\n    return (\n      this._frontendmigrationApi ??\n      (this._frontendmigrationApi = new IccFrontendmigrationApi(\n        this.host,\n        this.cryptoInitInfos.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.fetch\n      ))\n    )\n  }\n\n  private _icureApi: IccIcureApi | undefined\n\n  get icureApi(): IccIcureApi {\n    return (\n      this._icureApi ??\n      (this._icureApi = new IccIcureApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _keywordApi: IccKeywordApi | undefined\n\n  get keywordApi(): IccKeywordApi {\n    return (\n      this._keywordApi ??\n      (this._keywordApi = new IccKeywordApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _medexApi: IccMedexApi | undefined\n\n  get medexApi(): IccMedexApi {\n    return (\n      this._medexApi ??\n      (this._medexApi = new IccMedexApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _placeApi: IccPlaceApi | undefined\n\n  get placeApi(): IccPlaceApi {\n    return (\n      this._placeApi ??\n      (this._placeApi = new IccPlaceApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _pubsubApi: IccPubsubApi | undefined\n\n  get pubsubApi(): IccPubsubApi {\n    return (\n      this._pubsubApi ??\n      (this._pubsubApi = new IccPubsubApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _replicationApi: IccReplicationApi | undefined\n\n  get replicationApi(): IccReplicationApi {\n    return (\n      this._replicationApi ??\n      (this._replicationApi = new IccReplicationApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _tarificationApi: IccTarificationApi | undefined\n\n  get tarificationApi(): IccTarificationApi {\n    return (\n      this._tarificationApi ??\n      (this._tarificationApi = new IccTarificationApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  private _tmpApi: IccTmpApi | undefined\n\n  get tmpApi(): IccTmpApi {\n    return (\n      this._tmpApi ?? (this._tmpApi = new IccTmpApi(this.host, this.cryptoInitInfos.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  get cryptoApi(): IccCryptoXApi {\n    return this.cryptoInitInfos.cryptoApi\n  }\n\n  get dataOwnerApi(): IccDataOwnerXApi {\n    return this.cryptoInitInfos.dataOwnerApi\n  }\n\n  get deviceApi(): IccDeviceXApi {\n    return this.cryptoInitInfos.deviceApi\n  }\n\n  get healthcarePartyApi(): IccHcpartyXApi {\n    return this.cryptoInitInfos.healthcarePartyApi\n  }\n\n  get icureMaintenanceTaskApi(): IccIcureMaintenanceXApi {\n    return this.cryptoInitInfos.icureMaintenanceTaskApi\n  }\n\n  get maintenanceTaskApi(): IccMaintenanceTaskXApi {\n    return this.cryptoInitInfos.maintenanceTaskApi\n  }\n\n  get userApi(): IccUserXApi {\n    return this.cryptoInitInfos.userApi\n  }\n\n  async getGroupsInfo(): Promise<{ currentGroup: UserGroup | undefined; availableGroups: UserGroup[] }> {\n    this.latestGroupsRequest = (this.grouplessUserApi ?? this.userApi).getMatchingUsers()\n    return { currentGroup: this.currentGroupInfo, availableGroups: await this.latestGroupsRequest }\n  }\n\n  async switchGroup(newGroupId: string): Promise<IcureApi> {\n    const availableGroups = await this.latestGroupsRequest\n    const switchedProvider = await this.groupSpecificAuthenticationProvider.switchGroup(newGroupId, availableGroups)\n    const cryptoInitInfos = await initialiseCryptoWithProvider(\n      this.host,\n      this.fetch,\n      switchedProvider,\n      this.params,\n      this.cryptoStrategies,\n      this.cryptoApi.primitives\n    )\n    return new IcureApiImpl(\n      cryptoInitInfos,\n      this.host,\n      switchedProvider,\n      this.fetch,\n      this.grouplessUserApi,\n      availableGroups,\n      availableGroups.find((x) => x.groupId === newGroupId)!,\n      this.params,\n      this.cryptoStrategies\n    )\n  }\n}\n\nexport interface IcureBasicApi extends BasicApis {\n  /**\n   * Get the information on groups that the current user can access and the current group that this api instance is working on.\n   * Note that the values you will get for `availableGroups` may differ from the values you would get if you call {@link IccUserApi.getMatchingUsers}\n   * on {@link Apis.userApi}, since the latter is specialised on the specific instance of the user in `currentGroup`.\n   * - `currentGroup`: the group that this api instance is working on, or undefined if the backend environment is not multi-group.\n   * - `availableGroups`: the list of groups that the current user can access with the provided secret. Empty if the backend environment is not\n   * multi-group.\n   */\n  getGroupsInfo(): Promise<{ currentGroup: UserGroup | undefined; availableGroups: UserGroup[] }>\n\n  /**\n   * Switches the api to allow the user to work on a different group.\n   * @param newGroupId the id of the group to switch to.\n   * @return a new api for the specified group.\n   */\n  switchGroup(newGroupId: string): Promise<IcureBasicApi>\n}\n\nclass IcureBasicApiImpl implements IcureBasicApi {\n  private latestGroupsRequest: Promise<UserGroup[]>\n  private _agendaApi: IccAgendaApi | undefined\n  private _authApi: IccAuthApi | undefined\n  private _codeApi: IccCodeXApi | undefined\n  private _deviceApi: IccDeviceXApi | undefined\n  private _entityReferenceApi: IccEntityrefApi | undefined\n  private _groupApi: IccGroupApi | undefined\n  private _healthcarePartyApi: IccHcpartyXApi | undefined\n  private _insuranceApi: IccInsuranceApi | undefined\n  private _permissionApi: IccPermissionApi | undefined\n  private _userApi: IccUserXApi | undefined\n  private _patientApi: IccPatientApi | undefined\n  private _roleApi: IccRoleApi | undefined\n\n  get agendaApi(): IccAgendaApi {\n    return (\n      this._agendaApi ?? (this._agendaApi = new IccAgendaApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n  get authApi(): IccAuthApi {\n    return this._authApi ?? (this._authApi = new IccAuthApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n  }\n  get codeApi(): IccCodeXApi {\n    return this._codeApi ?? (this._codeApi = new IccCodeXApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n  }\n  get deviceApi(): IccDeviceXApi {\n    return (\n      this._deviceApi ??\n      (this._deviceApi = new IccDeviceXApi(\n        this.host,\n        this.params.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.userApi,\n        this.authApi,\n        this.fetch\n      ))\n    )\n  }\n  get entityReferenceApi(): IccEntityrefApi {\n    return (\n      this._entityReferenceApi ??\n      (this._entityReferenceApi = new IccEntityrefApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n  get groupApi(): IccGroupApi {\n    return this._groupApi ?? (this._groupApi = new IccGroupApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n  }\n  get healthcarePartyApi(): IccHcpartyXApi {\n    return (\n      this._healthcarePartyApi ??\n      (this._healthcarePartyApi = new IccHcpartyXApi(\n        this.host,\n        this.params.headers,\n        this.groupSpecificAuthenticationProvider,\n        this.authApi,\n        this.fetch\n      ))\n    )\n  }\n  get insuranceApi(): IccInsuranceApi {\n    return (\n      this._insuranceApi ??\n      (this._insuranceApi = new IccInsuranceApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n  get permissionApi(): IccPermissionApi {\n    return (\n      this._permissionApi ??\n      (this._permissionApi = new IccPermissionApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n  get userApi(): IccUserXApi {\n    return (\n      this._userApi ??\n      (this._userApi = new IccUserXApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.authApi, this.fetch))\n    )\n  }\n\n  async getGroupsInfo(): Promise<{ currentGroup: UserGroup | undefined; availableGroups: UserGroup[] }> {\n    if (!this.currentGroupInfo) return { currentGroup: undefined, availableGroups: [] }\n    this.latestGroupsRequest = (this.grouplessUserApi ?? this.userApi).getMatchingUsers()\n    return { currentGroup: this.currentGroupInfo, availableGroups: await this.latestGroupsRequest }\n  }\n\n  get patientApi(): IccPatientApi {\n    return (\n      this._patientApi ?? (this._patientApi = new IccPatientApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n    )\n  }\n\n  get roleApi(): IccRoleApi {\n    return this._roleApi ?? (this._roleApi = new IccRoleApi(this.host, this.params.headers, this.groupSpecificAuthenticationProvider, this.fetch))\n  }\n\n  async switchGroup(newGroupId: string): Promise<IcureBasicApi> {\n    if (!this.currentGroupInfo) throw new Error('Cannot switch group: the backend environment does not support multiple groups.')\n    const availableGroups = await this.latestGroupsRequest\n    const switchedProvider = await this.groupSpecificAuthenticationProvider.switchGroup(newGroupId, availableGroups)\n    return new IcureBasicApiImpl(\n      this.host,\n      switchedProvider,\n      this.fetch,\n      this.grouplessUserApi,\n      availableGroups,\n      availableGroups.find((x) => x.groupId === newGroupId)!,\n      this.params\n    )\n  }\n\n  constructor(\n    private readonly host: string,\n    private readonly groupSpecificAuthenticationProvider: AuthenticationProvider,\n    private readonly fetch: (input: RequestInfo, init?: RequestInit) => Promise<Response>,\n    private readonly grouplessUserApi: IccUserApi | undefined,\n    latestMatches: UserGroup[],\n    private readonly currentGroupInfo: UserGroup | undefined,\n    private readonly params: IcureBasicApiOptions.WithDefaults\n  ) {\n    this.latestGroupsRequest = Promise.resolve(latestMatches)\n  }\n}\n\nexport interface IcureBasicApiOptions {\n  /**\n   * Additional headers to use on each request made by the iCure api.\n   * @default no additional headers\n   */\n  readonly headers?: { [headerName: string]: string }\n  /**\n   * Each user may exist in multiple groups, but an instance of {@link IcureApi} is specialised for a single group. This function allows you to decide\n   * the group to use for a given user.\n   * This functions will be called only if a user exists in at least 2 groups, and takes in input:\n   * - the information on the groups the user can access (in no specific order)\n   * - if the authentication method uses JWT also the current group id (undefined otherwise)\n   * The function must return the id of one of the available groups.\n   * @default takes the first group provided. The group chosen by this method may vary between different instantiations of the {@link IcureApi} even\n   * if for the same user and if the groups available for the user do not change.\n   */\n  readonly groupSelector?: (availableGroupsInfo: UserGroup[], currentGroupId?: string) => Promise<string>\n}\n\nnamespace IcureBasicApiOptions {\n  export namespace Defaults {\n    export const headers = {}\n  }\n  export class WithDefaults implements IcureBasicApiOptions {\n    constructor(custom: IcureBasicApiOptions) {\n      this.headers = custom.headers ?? Defaults.headers\n      this.groupSelector = custom.groupSelector ?? ((groups) => Promise.resolve(groups[0].groupId!))\n    }\n\n    readonly headers: { [headerName: string]: string }\n    readonly groupSelector: (availableGroupsInfo: UserGroup[]) => Promise<string>\n  }\n}\n\nexport namespace IcureBasicApi {\n  /**\n   * Initialises a new instance of the iCure API.\n   */\n  export async function initialise(\n    host: string,\n    authenticationOptions: AuthenticationDetails | AuthenticationProvider,\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch,\n    options: IcureBasicApiOptions = {}\n  ): Promise<IcureBasicApi> {\n    const params = new IcureBasicApiOptions.WithDefaults(options)\n    const authProviderInfo = await initialiseAuthProviderWithGroupSelector(\n      host,\n      authenticationOptions,\n      params.headers ?? {},\n      fetchImpl,\n      params.groupSelector\n    )\n    return new IcureBasicApiImpl(\n      host,\n      authProviderInfo.groupSpecificAuthenticationProvider,\n      fetch,\n      authProviderInfo.grouplessUserApi,\n      authProviderInfo.matches,\n      authProviderInfo.matches.find((match) => match.groupId === authProviderInfo.chosenGroupId),\n      params\n    )\n  }\n}\n\nasync function getMatchesOrEmpty(userApi: IccUserApi): Promise<UserGroup[]> {\n  try {\n    return await userApi.getMatchingUsers()\n  } catch (err) {\n    if (err instanceof Error && 'statusCode' in err && (err as any).statusCode === 404) return Promise.resolve([])\n    else return Promise.reject(err)\n  }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@icure/api",
-  "version": "8.0.42",
+  "version": "8.0.44",
   "description": "Typescript version of iCure standalone API client",
   "main": "index.js",
   "types": "index.d.ts",