@icure/api 8.0.78 → 8.1.0

package/icc-x-api/icc-crypto-x-api.d.ts

@@ -6,7 +6,6 @@ import { UserEncryptionKeysManager } from './crypto/UserEncryptionKeysManager';
 import { IccDataOwnerXApi } from './icc-data-owner-x-api';
 import { ExtendedApisUtils } from './crypto/ExtendedApisUtils';
 import { ShamirKeysManager } from './crypto/ShamirKeysManager';
-import { ConfidentialEntities } from './crypto/ConfidentialEntities';
 import { ExchangeDataManager } from './crypto/ExchangeDataManager';
 import { AccessControlKeysHeadersProvider } from './crypto/AccessControlKeysHeadersProvider';
 import { KeyPair } from './crypto/RSA';
@@ -20,7 +19,6 @@ export declare class IccCryptoXApi {
     private readonly _shamirManager;
     private readonly _storage;
     private readonly _keyStorage;
-    private readonly _confidentialEntities;
     private readonly _exchangeDataManager;
     private readonly _accessControlKeysHeaders;
     private readonly _delegationsDeAnonymisation;
@@ -48,10 +46,6 @@ export declare class IccCryptoXApi {
      * @internal this is for internal use only and may be changed without notice.
      */
     get exchangeData(): ExchangeDataManager;
-    /**
-     * @internal this is for internal use only and may be changed without notice.
-     */
-    get confidential(): ConfidentialEntities;
     /**
      * @internal this is for internal use only and may be changed without notice.
      */
@@ -71,7 +65,7 @@ export declare class IccCryptoXApi {
     /**
      * @internal
      */
-    constructor(_exchangeKeysManager: ExchangeKeysManager, _cryptoPrimitives: CryptoPrimitives, _keyManager: UserEncryptionKeysManager, _dataOwnerApi: IccDataOwnerXApi, xapiUtils: ExtendedApisUtils, _shamirManager: ShamirKeysManager, _storage: StorageFacade<string>, _keyStorage: KeyStorageFacade, _confidentialEntities: ConfidentialEntities, _exchangeDataManager: ExchangeDataManager, _accessControlKeysHeaders: AccessControlKeysHeadersProvider, _delegationsDeAnonymisation: DelegationsDeAnonymization);
+    constructor(_exchangeKeysManager: ExchangeKeysManager, _cryptoPrimitives: CryptoPrimitives, _keyManager: UserEncryptionKeysManager, _dataOwnerApi: IccDataOwnerXApi, xapiUtils: ExtendedApisUtils, _shamirManager: ShamirKeysManager, _storage: StorageFacade<string>, _keyStorage: KeyStorageFacade, _exchangeDataManager: ExchangeDataManager, _accessControlKeysHeaders: AccessControlKeysHeadersProvider, _delegationsDeAnonymisation: DelegationsDeAnonymization);
     /**
      * Deletes values cached by the crypto api, to allow to detect changes in stored key pairs, exchange keys and/or current data owner details.
      * This method may be useful in cases where a user is logged in from multiple devices or in cases where other users have just shared some data with

package/icc-x-api/icc-crypto-x-api.js

@@ -47,12 +47,6 @@ class IccCryptoXApi {
     get exchangeData() {
         return this._exchangeDataManager;
     }
-    /**
-     * @internal this is for internal use only and may be changed without notice.
-     */
-    get confidential() {
-        return this._confidentialEntities;
-    }
     /**
      * @internal this is for internal use only and may be changed without notice.
      */
@@ -80,7 +74,7 @@ class IccCryptoXApi {
     /**
      * @internal
      */
-    constructor(_exchangeKeysManager, _cryptoPrimitives, _keyManager, _dataOwnerApi, xapiUtils, _shamirManager, _storage, _keyStorage, _confidentialEntities, _exchangeDataManager, _accessControlKeysHeaders, _delegationsDeAnonymisation) {
+    constructor(_exchangeKeysManager, _cryptoPrimitives, _keyManager, _dataOwnerApi, xapiUtils, _shamirManager, _storage, _keyStorage, _exchangeDataManager, _accessControlKeysHeaders, _delegationsDeAnonymisation) {
         this._exchangeKeysManager = _exchangeKeysManager;
         this._cryptoPrimitives = _cryptoPrimitives;
         this._keyManager = _keyManager;
@@ -89,7 +83,6 @@ class IccCryptoXApi {
         this._shamirManager = _shamirManager;
         this._storage = _storage;
         this._keyStorage = _keyStorage;
-        this._confidentialEntities = _confidentialEntities;
         this._exchangeDataManager = _exchangeDataManager;
         this._accessControlKeysHeaders = _accessControlKeysHeaders;
         this._delegationsDeAnonymisation = _delegationsDeAnonymisation;

package/icc-x-api/icc-crypto-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-crypto-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-crypto-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAcA,MAAa,aAAa;IACxB;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,iBAAiB,CAAA;IAC/B,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,oBAAoB,CAAA;IAClC,CAAC;IAED;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,SAAS,CAAA;IACvB,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,oBAAoB,CAAA;IAClC,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,qBAAqB,CAAA;IACnC,CAAC;IAED;;OAEG;IACH,IAAI,wBAAwB;QAC1B,OAAO,IAAI,CAAC,yBAAyB,CAAA;IACvC,CAAC;IAED;;OAEG;IACH,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,cAAc,CAAA;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,0BAA0B;QAC5B,OAAO,IAAI,CAAC,2BAA2B,CAAA;IACzC,CAAC;IAED;;OAEG;IACH,YACmB,oBAAyC,EACzC,iBAAmC,EACnC,WAAsC,EACtC,aAA+B,EAC/B,SAA4B,EAC5B,cAAiC,EACjC,QAA+B,EAC/B,WAA6B,EAC7B,qBAA2C,EAC3C,oBAAyC,EACzC,yBAA2D,EAC3D,2BAAuD;QAXvD,yBAAoB,GAApB,oBAAoB,CAAqB;QACzC,sBAAiB,GAAjB,iBAAiB,CAAkB;QACnC,gBAAW,GAAX,WAAW,CAA2B;QACtC,kBAAa,GAAb,aAAa,CAAkB;QAC/B,cAAS,GAAT,SAAS,CAAmB;QAC5B,mBAAc,GAAd,cAAc,CAAmB;QACjC,aAAQ,GAAR,QAAQ,CAAuB;QAC/B,gBAAW,GAAX,WAAW,CAAkB;QAC7B,0BAAqB,GAArB,qBAAqB,CAAsB;QAC3C,yBAAoB,GAApB,oBAAoB,CAAqB;QACzC,8BAAyB,GAAzB,yBAAyB,CAAkC;QAC3D,gCAA2B,GAA3B,2BAA2B,CAA4B;IACvE,CAAC;IAEJ;;;;OAIG;IACG,WAAW;;YACf,MAAM,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,CAAA;YAC7C,IAAI,CAAC,aAAa,CAAC,6BAA6B,EAAE,CAAA;YAClD,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAA;YACnC,MAAM,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,EAAE,CAAA;QAC1D,CAAC;KAAA;IAED;;;;;;;OAOG;IACH,oDAAoD;QAUlD,OAAO,IAAI,CAAC,WAAW,CAAC,wCAAwC,EAAE,CAAA;IACpE,CAAC;IAED;;;;OAIG;IACH,wBAAwB,CAAC,WAAmB;QAC1C,OAAO,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAA;IAC/D,CAAC;IAED;;;;;OAKG;IACG,6CAA6C;;YACjD,OAAO,IAAI,CAAC,WAAW,CAAC,6CAA6C,EAAE,CAAA;QACzE,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,oCAAoC,CAAC,YAAqB;;YAC9D,OAAO,IAAI,CAAC,WAAW,CAAC,oCAAoC,CAAC,YAAY,CAAC,CAAA;QAC5E,CAAC;KAAA;CACF;AA/JD,sCA+JC","sourcesContent":["import { StorageFacade } from './storage/StorageFacade'\nimport { KeyStorageFacade } from './storage/KeyStorageFacade'\nimport { ExchangeKeysManager } from './crypto/ExchangeKeysManager'\nimport { CryptoPrimitives } from './crypto/CryptoPrimitives'\nimport { UserEncryptionKeysManager } from './crypto/UserEncryptionKeysManager'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { ExtendedApisUtils } from './crypto/ExtendedApisUtils'\nimport { ShamirKeysManager } from './crypto/ShamirKeysManager'\nimport { ConfidentialEntities } from './crypto/ConfidentialEntities'\nimport { ExchangeDataManager } from './crypto/ExchangeDataManager'\nimport { AccessControlKeysHeadersProvider } from './crypto/AccessControlKeysHeadersProvider'\nimport { KeyPair } from './crypto/RSA'\nimport { DelegationsDeAnonymization } from './crypto/DelegationsDeAnonymization'\n\nexport class IccCryptoXApi {\n  /**\n   * The instance of {@link CryptoPrimitives} used by this instance of the iCure SDK.\n   */\n  get primitives(): CryptoPrimitives {\n    return this._cryptoPrimitives\n  }\n\n  /**\n   * @internal this method is for internal use only and may be changed without notice.\n   */\n  get exchangeKeys(): ExchangeKeysManager {\n    return this._exchangeKeysManager\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get keyStorage(): KeyStorageFacade {\n    return this._keyStorage\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get storage(): StorageFacade<string> {\n    return this._storage\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get xapi(): ExtendedApisUtils {\n    return this.xapiUtils\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get exchangeData(): ExchangeDataManager {\n    return this._exchangeDataManager\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get confidential(): ConfidentialEntities {\n    return this._confidentialEntities\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get accessControlKeysHeaders(): AccessControlKeysHeadersProvider {\n    return this._accessControlKeysHeaders\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get userKeysManager(): UserEncryptionKeysManager {\n    return this._keyManager\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get shamirKeysManager(): ShamirKeysManager {\n    return this._shamirManager\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get delegationsDeAnonymization(): DelegationsDeAnonymization {\n    return this._delegationsDeAnonymisation\n  }\n\n  /**\n   * @internal\n   */\n  constructor(\n    private readonly _exchangeKeysManager: ExchangeKeysManager,\n    private readonly _cryptoPrimitives: CryptoPrimitives,\n    private readonly _keyManager: UserEncryptionKeysManager,\n    private readonly _dataOwnerApi: IccDataOwnerXApi,\n    private readonly xapiUtils: ExtendedApisUtils,\n    private readonly _shamirManager: ShamirKeysManager,\n    private readonly _storage: StorageFacade<string>,\n    private readonly _keyStorage: KeyStorageFacade,\n    private readonly _confidentialEntities: ConfidentialEntities,\n    private readonly _exchangeDataManager: ExchangeDataManager,\n    private readonly _accessControlKeysHeaders: AccessControlKeysHeadersProvider,\n    private readonly _delegationsDeAnonymisation: DelegationsDeAnonymization\n  ) {}\n\n  /**\n   * Deletes values cached by the crypto api, to allow to detect changes in stored key pairs, exchange keys and/or current data owner details.\n   * This method may be useful in cases where a user is logged in from multiple devices or in cases where other users have just shared some data with\n   * the current user for the first time.\n   */\n  async forceReload() {\n    await this._exchangeKeysManager.reloadCache()\n    this._dataOwnerApi.clearCurrentDataOwnerIdsCache()\n    await this._keyManager.reloadKeys()\n    await this._exchangeDataManager.clearOrRepopulateCache()\n  }\n\n  /**\n   * Get all key pairs available for the decrpytion and encryption of data to the current data owner. These include the key pairs from the data owner\n   * and his parents.\n   * @return an object with:\n   * - `self` an object containing the current data owner id and the list of key pairs available for the current data owner with verification details.\n   * - `parents` the list of parents to the current data owner with the list of key pairs available for each parent. The list is ordered from the\n   *   topmost ancestor (at index 0) to the direct parent of the current data owner (at the last index, may be 0).\n   */\n  getEncryptionDecryptionKeypairsForDataOwnerHierarchy(): Promise<{\n    self: {\n      dataOwnerId: string\n      keys: { pair: KeyPair<CryptoKey>; verified: boolean }[]\n    }\n    parents: {\n      dataOwnerId: string\n      keys: { pair: KeyPair<CryptoKey>; verified: boolean }[]\n    }[]\n  }> {\n    return this._keyManager.getCurrentUserHierarchyAvailableKeypairs()\n  }\n\n  /**\n   * Get a key pair with the provided fingerprint if present.\n   * @param fingerprint a key-pair/public-key fingerprint\n   * @return the pair associated to the fingerprint and a boolean indicating if the pair is verified, if present, else undefined\n   */\n  getKeyPairForFingerprint(fingerprint: string): { pair: KeyPair<CryptoKey>; verified: boolean } | undefined {\n    return this._keyManager.getKeyPairForFingerprint(fingerprint)\n  }\n\n  /**\n   * Get the public keys of available key pairs for the current user and his parents in hex-encoded spki representation (uses cached keys: no request\n   * is done to the server).\n   * Note that this will also include unverified keys.\n   * @return the spki representation of public keys of available keypairs for the current user.\n   */\n  async getCurrentUserHierarchyAvailablePublicKeysHex(): Promise<string[]> {\n    return this._keyManager.getCurrentUserHierarchyAvailablePublicKeysHex()\n  }\n\n  /**\n   * Get the public keys of available key pairs for the current user in hex-encoded spki representation (uses cached keys: no request is done to the\n   * server).\n   * By setting {@link verifiedOnly} to true only the public keys for verified key pairs will be returned: these will include only key pairs created\n   * on this device or which have been verified using {@link CryptoStrategies} on this device.\n   * @param verifiedOnly if true only the verified public keys will be returned.\n   * @return the spki representation of public keys of available keypairs for the current user.\n   */\n  async getCurrentUserAvailablePublicKeysHex(verifiedOnly: boolean): Promise<string[]> {\n    return this._keyManager.getCurrentUserAvailablePublicKeysHex(verifiedOnly)\n  }\n}\n"]}
+{"version":3,"file":"icc-crypto-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-crypto-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAaA,MAAa,aAAa;IACxB;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,iBAAiB,CAAA;IAC/B,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,oBAAoB,CAAA;IAClC,CAAC;IAED;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,SAAS,CAAA;IACvB,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,oBAAoB,CAAA;IAClC,CAAC;IAED;;OAEG;IACH,IAAI,wBAAwB;QAC1B,OAAO,IAAI,CAAC,yBAAyB,CAAA;IACvC,CAAC;IAED;;OAEG;IACH,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,cAAc,CAAA;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,0BAA0B;QAC5B,OAAO,IAAI,CAAC,2BAA2B,CAAA;IACzC,CAAC;IAED;;OAEG;IACH,YACmB,oBAAyC,EACzC,iBAAmC,EACnC,WAAsC,EACtC,aAA+B,EAC/B,SAA4B,EAC5B,cAAiC,EACjC,QAA+B,EAC/B,WAA6B,EAC7B,oBAAyC,EACzC,yBAA2D,EAC3D,2BAAuD;QAVvD,yBAAoB,GAApB,oBAAoB,CAAqB;QACzC,sBAAiB,GAAjB,iBAAiB,CAAkB;QACnC,gBAAW,GAAX,WAAW,CAA2B;QACtC,kBAAa,GAAb,aAAa,CAAkB;QAC/B,cAAS,GAAT,SAAS,CAAmB;QAC5B,mBAAc,GAAd,cAAc,CAAmB;QACjC,aAAQ,GAAR,QAAQ,CAAuB;QAC/B,gBAAW,GAAX,WAAW,CAAkB;QAC7B,yBAAoB,GAApB,oBAAoB,CAAqB;QACzC,8BAAyB,GAAzB,yBAAyB,CAAkC;QAC3D,gCAA2B,GAA3B,2BAA2B,CAA4B;IACvE,CAAC;IAEJ;;;;OAIG;IACG,WAAW;;YACf,MAAM,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,CAAA;YAC7C,IAAI,CAAC,aAAa,CAAC,6BAA6B,EAAE,CAAA;YAClD,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAA;YACnC,MAAM,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,EAAE,CAAA;QAC1D,CAAC;KAAA;IAED;;;;;;;OAOG;IACH,oDAAoD;QAUlD,OAAO,IAAI,CAAC,WAAW,CAAC,wCAAwC,EAAE,CAAA;IACpE,CAAC;IAED;;;;OAIG;IACH,wBAAwB,CAAC,WAAmB;QAC1C,OAAO,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAA;IAC/D,CAAC;IAED;;;;;OAKG;IACG,6CAA6C;;YACjD,OAAO,IAAI,CAAC,WAAW,CAAC,6CAA6C,EAAE,CAAA;QACzE,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,oCAAoC,CAAC,YAAqB;;YAC9D,OAAO,IAAI,CAAC,WAAW,CAAC,oCAAoC,CAAC,YAAY,CAAC,CAAA;QAC5E,CAAC;KAAA;CACF;AAvJD,sCAuJC","sourcesContent":["import { StorageFacade } from './storage/StorageFacade'\nimport { KeyStorageFacade } from './storage/KeyStorageFacade'\nimport { ExchangeKeysManager } from './crypto/ExchangeKeysManager'\nimport { CryptoPrimitives } from './crypto/CryptoPrimitives'\nimport { UserEncryptionKeysManager } from './crypto/UserEncryptionKeysManager'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { ExtendedApisUtils } from './crypto/ExtendedApisUtils'\nimport { ShamirKeysManager } from './crypto/ShamirKeysManager'\nimport { ExchangeDataManager } from './crypto/ExchangeDataManager'\nimport { AccessControlKeysHeadersProvider } from './crypto/AccessControlKeysHeadersProvider'\nimport { KeyPair } from './crypto/RSA'\nimport { DelegationsDeAnonymization } from './crypto/DelegationsDeAnonymization'\n\nexport class IccCryptoXApi {\n  /**\n   * The instance of {@link CryptoPrimitives} used by this instance of the iCure SDK.\n   */\n  get primitives(): CryptoPrimitives {\n    return this._cryptoPrimitives\n  }\n\n  /**\n   * @internal this method is for internal use only and may be changed without notice.\n   */\n  get exchangeKeys(): ExchangeKeysManager {\n    return this._exchangeKeysManager\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get keyStorage(): KeyStorageFacade {\n    return this._keyStorage\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get storage(): StorageFacade<string> {\n    return this._storage\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get xapi(): ExtendedApisUtils {\n    return this.xapiUtils\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get exchangeData(): ExchangeDataManager {\n    return this._exchangeDataManager\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get accessControlKeysHeaders(): AccessControlKeysHeadersProvider {\n    return this._accessControlKeysHeaders\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get userKeysManager(): UserEncryptionKeysManager {\n    return this._keyManager\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get shamirKeysManager(): ShamirKeysManager {\n    return this._shamirManager\n  }\n\n  /**\n   * @internal this is for internal use only and may be changed without notice.\n   */\n  get delegationsDeAnonymization(): DelegationsDeAnonymization {\n    return this._delegationsDeAnonymisation\n  }\n\n  /**\n   * @internal\n   */\n  constructor(\n    private readonly _exchangeKeysManager: ExchangeKeysManager,\n    private readonly _cryptoPrimitives: CryptoPrimitives,\n    private readonly _keyManager: UserEncryptionKeysManager,\n    private readonly _dataOwnerApi: IccDataOwnerXApi,\n    private readonly xapiUtils: ExtendedApisUtils,\n    private readonly _shamirManager: ShamirKeysManager,\n    private readonly _storage: StorageFacade<string>,\n    private readonly _keyStorage: KeyStorageFacade,\n    private readonly _exchangeDataManager: ExchangeDataManager,\n    private readonly _accessControlKeysHeaders: AccessControlKeysHeadersProvider,\n    private readonly _delegationsDeAnonymisation: DelegationsDeAnonymization\n  ) {}\n\n  /**\n   * Deletes values cached by the crypto api, to allow to detect changes in stored key pairs, exchange keys and/or current data owner details.\n   * This method may be useful in cases where a user is logged in from multiple devices or in cases where other users have just shared some data with\n   * the current user for the first time.\n   */\n  async forceReload() {\n    await this._exchangeKeysManager.reloadCache()\n    this._dataOwnerApi.clearCurrentDataOwnerIdsCache()\n    await this._keyManager.reloadKeys()\n    await this._exchangeDataManager.clearOrRepopulateCache()\n  }\n\n  /**\n   * Get all key pairs available for the decrpytion and encryption of data to the current data owner. These include the key pairs from the data owner\n   * and his parents.\n   * @return an object with:\n   * - `self` an object containing the current data owner id and the list of key pairs available for the current data owner with verification details.\n   * - `parents` the list of parents to the current data owner with the list of key pairs available for each parent. The list is ordered from the\n   *   topmost ancestor (at index 0) to the direct parent of the current data owner (at the last index, may be 0).\n   */\n  getEncryptionDecryptionKeypairsForDataOwnerHierarchy(): Promise<{\n    self: {\n      dataOwnerId: string\n      keys: { pair: KeyPair<CryptoKey>; verified: boolean }[]\n    }\n    parents: {\n      dataOwnerId: string\n      keys: { pair: KeyPair<CryptoKey>; verified: boolean }[]\n    }[]\n  }> {\n    return this._keyManager.getCurrentUserHierarchyAvailableKeypairs()\n  }\n\n  /**\n   * Get a key pair with the provided fingerprint if present.\n   * @param fingerprint a key-pair/public-key fingerprint\n   * @return the pair associated to the fingerprint and a boolean indicating if the pair is verified, if present, else undefined\n   */\n  getKeyPairForFingerprint(fingerprint: string): { pair: KeyPair<CryptoKey>; verified: boolean } | undefined {\n    return this._keyManager.getKeyPairForFingerprint(fingerprint)\n  }\n\n  /**\n   * Get the public keys of available key pairs for the current user and his parents in hex-encoded spki representation (uses cached keys: no request\n   * is done to the server).\n   * Note that this will also include unverified keys.\n   * @return the spki representation of public keys of available keypairs for the current user.\n   */\n  async getCurrentUserHierarchyAvailablePublicKeysHex(): Promise<string[]> {\n    return this._keyManager.getCurrentUserHierarchyAvailablePublicKeysHex()\n  }\n\n  /**\n   * Get the public keys of available key pairs for the current user in hex-encoded spki representation (uses cached keys: no request is done to the\n   * server).\n   * By setting {@link verifiedOnly} to true only the public keys for verified key pairs will be returned: these will include only key pairs created\n   * on this device or which have been verified using {@link CryptoStrategies} on this device.\n   * @param verifiedOnly if true only the verified public keys will be returned.\n   * @return the spki representation of public keys of available keypairs for the current user.\n   */\n  async getCurrentUserAvailablePublicKeysHex(verifiedOnly: boolean): Promise<string[]> {\n    return this._keyManager.getCurrentUserAvailablePublicKeysHex(verifiedOnly)\n  }\n}\n"]}

package/icc-x-api/icc-document-x-api.d.ts

@@ -11,6 +11,7 @@ import { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest
 import { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi';
 import AccessLevelEnum = SecureDelegation.AccessLevelEnum;
 import RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum;
+import { SecretIdUseOption } from './crypto/SecretIdUseOption';
 export declare class IccDocumentXApi extends IccDocumentApi implements EncryptedEntityXApi<models.Document> {
     private crypto;
     private authApi;
@@ -53,7 +54,7 @@ export declare class IccDocumentXApi extends IccDocumentApi implements Encrypted
         additionalDelegates?: {
             [dataOwnerId: string]: AccessLevelEnum;
         };
-        preferredSfk?: string;
+        sfkOption?: SecretIdUseOption;
     }): Promise<models.Document>;
     /**
      * @deprecated use {@link findIdsByMessage} instead.

package/icc-x-api/icc-document-x-api.js

@@ -19,6 +19,7 @@ const AuthenticationProvider_1 = require("./auth/AuthenticationProvider");
 const SecureDelegation_1 = require("../icc-api/model/SecureDelegation");
 const utils_1 = require("./utils");
 var AccessLevelEnum = SecureDelegation_1.SecureDelegation.AccessLevelEnum;
+const SecretIdUseOption_1 = require("./crypto/SecretIdUseOption");
 // noinspection JSUnusedGlobalSymbols
 class IccDocumentXApi extends icc_api_1.IccDocumentApi {
     constructor(host, headers, crypto, authApi, dataOwnerApi, autofillAuthor, authenticationProvider = new AuthenticationProvider_1.NoAuthenticationProvider(), fetchImpl = typeof window !== 'undefined'
@@ -443,17 +444,13 @@ class IccDocumentXApi extends icc_api_1.IccDocumentApi {
     newInstance(user, message, c = {}, options = {}) {
         var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o;
         return __awaiter(this, void 0, void 0, function* () {
-            if (!message && options.preferredSfk)
-                throw new Error('You need to specify parent message in order to use secret foreign keys.');
             const document = Object.assign(Object.assign({}, (c !== null && c !== void 0 ? c : {})), { _type: 'org.taktik.icure.entities.Document', id: (_a = c === null || c === void 0 ? void 0 : c.id) !== null && _a !== void 0 ? _a : this.crypto.primitives.randomUuid(), created: (_b = c === null || c === void 0 ? void 0 : c.created) !== null && _b !== void 0 ? _b : new Date().getTime(), modified: (_c = c === null || c === void 0 ? void 0 : c.modified) !== null && _c !== void 0 ? _c : new Date().getTime(), responsible: (_d = c === null || c === void 0 ? void 0 : c.responsible) !== null && _d !== void 0 ? _d : (this.autofillAuthor ? this.dataOwnerApi.getDataOwnerIdOf(user) : undefined), author: (_e = c === null || c === void 0 ? void 0 : c.author) !== null && _e !== void 0 ? _e : (this.autofillAuthor ? user.id : undefined), codes: (_f = c === null || c === void 0 ? void 0 : c.codes) !== null && _f !== void 0 ? _f : [], tags: (_g = c === null || c === void 0 ? void 0 : c.tags) !== null && _g !== void 0 ? _g : [] });
             const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user);
             if (ownerId !== (yield this.dataOwnerApi.getCurrentDataOwnerId()))
                 throw new Error('Can only initialise entities as current data owner.');
             const sfk = message
-                ? (_h = options.preferredSfk) !== null && _h !== void 0 ? _h : (yield this.crypto.confidential.getAnySecretIdSharedWithParents({ entity: message, type: utils_1.EntityWithDelegationTypeName.Message }))
-                : undefined;
-            if (message && !sfk)
-                throw new Error(`Couldn't find any sfk of parent message ${message.id}`);
+                ? yield this.crypto.xapi.resolveSecretIdUseOptions({ entity: message, type: utils_1.EntityWithDelegationTypeName.Message }, (_h = options.sfkOption) !== null && _h !== void 0 ? _h : SecretIdUseOption_1.SecretIdUseOption.UseAnySharedWithParent)
+                : [];
             const extraDelegations = Object.assign(Object.assign({}, Object.fromEntries([...((_k = (_j = user.autoDelegations) === null || _j === void 0 ? void 0 : _j.all) !== null && _k !== void 0 ? _k : []), ...((_m = (_l = user.autoDelegations) === null || _l === void 0 ? void 0 : _l.medicalInformation) !== null && _m !== void 0 ? _m : [])].map((d) => [d, AccessLevelEnum.WRITE]))), ((_o = options === null || options === void 0 ? void 0 : options.additionalDelegates) !== null && _o !== void 0 ? _o : {}));
             return new models.Document(yield this.crypto.xapi
                 .entityWithInitialisedEncryptedMetadata(document, utils_1.EntityWithDelegationTypeName.Document, message === null || message === void 0 ? void 0 : message.id, sfk, true, extraDelegations)