@icure/api 8.0.8 → 8.0.10

package/test/icc-x-api/crypto/cryptoTest.js

@@ -0,0 +1,302 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const icc_api_1 = require("../../../icc-api");
+require("isomorphic-fetch");
+const chai_1 = require("chai");
+require("mocha");
+const Patient_1 = require("../../../icc-api/model/Patient");
+const test_utils_1 = require("../../utils/test_utils");
+const types_1 = require("@icure/test-setup/types");
+const icc_x_api_1 = require("../../../icc-x-api");
+var initApi = test_utils_1.TestUtils.initApi;
+(0, chai_1.use)(require('chai-as-promised'));
+let env;
+(0, test_utils_1.setLocalStorage)(fetch);
+describe('Create a patient from scratch', () => {
+    before(function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.timeout(600000);
+            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+            env = yield initializer.execute((0, types_1.getEnvVariables)());
+        });
+    });
+    it('should create a patient in the database', () => __awaiter(void 0, void 0, void 0, function* () {
+        const api = yield initApi(env, test_utils_1.hcp1Username);
+        const user = yield api.userApi.getCurrentUser();
+        const note = 'A secured note that is encrypted';
+        const patient = yield api.patientApi.createPatientWithUser(user, yield api.patientApi.newInstance(user, new Patient_1.Patient({
+            lastName: 'Biden',
+            firstName: 'Joe',
+            note,
+        })));
+        (0, chai_1.expect)(patient.note).to.equal(note);
+        console.log(`Created patient (decrypted): ${patient.id}: ${patient.firstName} ${patient.lastName} [note:${patient.note}, encryptedSelf:${patient.encryptedSelf}]`);
+        const fetched = yield api.patientApi.getPatientWithUser(user, patient.id);
+        console.log(`Fetched patient (decrypted): ${fetched.id}: ${fetched.firstName} ${fetched.lastName} [note:${fetched.note}, encryptedSelf:${fetched.encryptedSelf}]`);
+        (0, chai_1.expect)(fetched.id).to.equal(patient.id);
+        (0, chai_1.expect)(fetched.note).to.equal(note);
+        const fetchedWithoutDecryption = yield new icc_api_1.IccPatientApi(env.iCureUrl, {}, new icc_x_api_1.BasicAuthenticationProvider(env.dataOwnerDetails[test_utils_1.hcp1Username].user, env.dataOwnerDetails[test_utils_1.hcp1Username].password), fetch).getPatient(patient.id);
+        console.log(`Fetched patient (encrypted):${fetchedWithoutDecryption.id}: ${fetchedWithoutDecryption.firstName} ${fetchedWithoutDecryption.lastName} [note: ${fetchedWithoutDecryption.note}]`);
+        (0, chai_1.expect)(fetchedWithoutDecryption.id).to.equal(patient.id);
+        (0, chai_1.expect)(fetchedWithoutDecryption.note).to.be.undefined;
+    }));
+});
+describe('Init confidential delegation in patient', () => {
+    before(function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.timeout(600000);
+            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+            env = yield initializer.execute((0, types_1.getEnvVariables)());
+        });
+    });
+    it('should return a patient with a confidential delegation', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = yield (0, test_utils_1.createHcpHierarchyApis)(env);
+        const others = [
+            { api: child2Api, user: child2User },
+            { api: parentApi, user: parentUser },
+            { api: grandApi, user: grandUser },
+        ];
+        const note = 'Some note';
+        const pat = yield childApi.patientApi.createPatientWithUser(childUser, yield childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe', note }));
+        // All parents and siblings should have access to the decrypted data and to the initial secret id
+        (0, chai_1.expect)(yield childApi.patientApi.decryptSecretIdsOf(pat)).to.have.length(1);
+        (0, chai_1.expect)((yield childApi.patientApi.getPatientWithUser(childUser, pat.id)).note).to.equal(note);
+        const originalSecretId = (yield childApi.patientApi.decryptSecretIdsOf(pat))[0];
+        for (const { api, user } of others) {
+            (0, chai_1.expect)(yield api.patientApi.decryptSecretIdsOf(pat)).to.have.length(1);
+            (0, chai_1.expect)((yield api.patientApi.decryptSecretIdsOf(pat))[0]).to.equal(originalSecretId);
+            (0, chai_1.expect)((yield api.patientApi.getPatientWithUser(user, pat.id)).note).to.equal(note);
+        }
+        // Initially there shouldn't be any secret confidential secret id
+        (0, chai_1.expect)(yield childApi.patientApi.decryptConfidentialSecretIdsOf(pat)).to.be.empty;
+        // Now create a confidential delegation
+        const patWithConfidential = yield childApi.patientApi.initConfidentialSecretId(pat, childUser);
+        // Confidential secret id should be different from the original secret id
+        const confidentialDelegationKeys = yield childApi.patientApi.decryptConfidentialSecretIdsOf(patWithConfidential);
+        const nonConfidentialDelegationKeys = yield childApi.patientApi.decryptNonConfidentialSecretIdsOf(patWithConfidential);
+        (0, chai_1.expect)(confidentialDelegationKeys).to.have.length(1);
+        (0, chai_1.expect)(nonConfidentialDelegationKeys).to.have.length(1);
+        (0, chai_1.expect)(confidentialDelegationKeys[0]).to.not.equal(nonConfidentialDelegationKeys);
+        (0, chai_1.expect)(nonConfidentialDelegationKeys[0]).to.equal(originalSecretId);
+        // Child has access to confidential and not confidential secret ids.
+        const childSecretIds = yield childApi.patientApi.decryptSecretIdsOf(patWithConfidential);
+        (0, chai_1.expect)(childSecretIds).to.have.length(2);
+        (0, chai_1.expect)(childSecretIds).to.have.contain(nonConfidentialDelegationKeys[0]);
+        (0, chai_1.expect)(childSecretIds).to.have.contain(confidentialDelegationKeys[0]);
+        // All parents and siblings should have access to the decrypted data even after initialising confidential delegations...
+        (0, chai_1.expect)((yield childApi.patientApi.getPatientWithUser(childUser, pat.id)).note).to.equal(note);
+        for (const { api, user } of others) {
+            (0, chai_1.expect)((yield api.patientApi.getPatientWithUser(user, pat.id)).note).to.equal(note);
+        }
+        // ...but not to the confidential secret id
+        for (const { api } of others) {
+            const secretIds = yield api.patientApi.decryptSecretIdsOf(patWithConfidential);
+            (0, chai_1.expect)(secretIds).to.have.length(1);
+            (0, chai_1.expect)(secretIds).to.contain(nonConfidentialDelegationKeys[0]);
+        }
+        // If a secret delegation is already available there is no need to create a new one
+        const patWithConfidentialAgain = yield childApi.patientApi.initConfidentialSecretId(patWithConfidential, childUser);
+        (0, chai_1.expect)(patWithConfidentialAgain.rev).to.equal(patWithConfidentialAgain.rev);
+        (0, chai_1.expect)(yield childApi.patientApi.decryptSecretIdsOf(patWithConfidentialAgain)).to.have.length(2);
+        // Different users will have different confidential secret ids...
+        (0, chai_1.expect)(yield child2Api.patientApi.decryptConfidentialSecretIdsOf(patWithConfidential)).to.be.empty;
+        const patWithMoreConfidentialIds = yield child2Api.patientApi.initConfidentialSecretId(patWithConfidential, child2User);
+        // ...child continues to know the same secret ids...
+        const childSecretIdsRepeat = yield childApi.patientApi.decryptSecretIdsOf(patWithMoreConfidentialIds);
+        (0, chai_1.expect)(childSecretIdsRepeat).to.have.length(2);
+        (0, chai_1.expect)(childSecretIdsRepeat).to.have.contain(nonConfidentialDelegationKeys[0]);
+        (0, chai_1.expect)(childSecretIdsRepeat).to.have.contain(confidentialDelegationKeys[0]);
+        // ...but child2 now also knows a different secret id...
+        const child2secretIds = yield child2Api.patientApi.decryptSecretIdsOf(patWithMoreConfidentialIds);
+        const child2confidential = yield child2Api.patientApi.decryptConfidentialSecretIdsOf(patWithMoreConfidentialIds);
+        (0, chai_1.expect)(child2confidential).to.have.length(1);
+        (0, chai_1.expect)(child2confidential[0]).to.not.equal(confidentialDelegationKeys[0]);
+        (0, chai_1.expect)(child2confidential[0]).to.not.equal(nonConfidentialDelegationKeys[0]);
+        (0, chai_1.expect)(child2secretIds).to.have.length(2);
+        (0, chai_1.expect)(child2secretIds).to.contain(nonConfidentialDelegationKeys[0]);
+        (0, chai_1.expect)(child2secretIds).to.contain(child2confidential[0]);
+        // ...and their parents still don't know them
+        (0, chai_1.expect)(yield grandApi.patientApi.decryptSecretIdsOf(patWithMoreConfidentialIds)).to.have.length(1);
+        (0, chai_1.expect)(yield grandApi.patientApi.decryptSecretIdsOf(patWithMoreConfidentialIds)).to.have.contain(nonConfidentialDelegationKeys[0]);
+        (0, chai_1.expect)(yield parentApi.patientApi.decryptSecretIdsOf(patWithMoreConfidentialIds)).to.have.length(1);
+        (0, chai_1.expect)(yield parentApi.patientApi.decryptSecretIdsOf(patWithMoreConfidentialIds)).to.have.contain(nonConfidentialDelegationKeys[0]);
+    }));
+});
+describe('Test that contact information can be decrypted', () => {
+    before(function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.timeout(600000);
+            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+            env = yield initializer.execute((0, types_1.getEnvVariables)());
+        });
+    });
+    it('should return a contact with decrypted information', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = yield (0, test_utils_1.createHcpHierarchyApis)(env);
+        const allApis = [
+            { api: childApi, user: childUser },
+            { api: child2Api, user: child2User },
+            { api: parentApi, user: parentUser },
+            { api: grandApi, user: grandUser },
+        ];
+        const pat = yield childApi.patientApi.createPatientWithUser(childUser, yield childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe' }));
+        const idFlat = childApi.cryptoApi.primitives.randomUuid();
+        const idCompound = childApi.cryptoApi.primitives.randomUuid();
+        const idSalut = childApi.cryptoApi.primitives.randomUuid();
+        const idAtoi = childApi.cryptoApi.primitives.randomUuid();
+        const instance = yield childApi.contactApi.newInstance(childUser, pat, {
+            services: [
+                {
+                    id: idFlat,
+                    content: { fr: { stringValue: 'Salut' }, nl: { stringValue: 'Halo' } },
+                },
+                {
+                    id: idCompound,
+                    content: {
+                        fr: {
+                            compoundValue: [
+                                { id: idSalut, content: { fr: { stringValue: 'Salut' } } },
+                                { id: idAtoi, content: { fr: { stringValue: 'à toi' } } },
+                            ],
+                        },
+                    },
+                },
+            ],
+        });
+        const created = yield childApi.contactApi.createContactWithUser(childUser, instance);
+        const createdFlat = created.services.find((x) => x.id === idFlat);
+        const createdCompound = created.services.find((x) => x.id === idCompound);
+        const createdSalut = createdCompound.content.fr.compoundValue.find((x) => x.id === idSalut);
+        const createdAtoi = createdCompound.content.fr.compoundValue.find((x) => x.id === idAtoi);
+        for (const { api, user } of allApis) {
+            console.log('Trying with user: ' + user.login);
+            const check = yield api.contactApi.getContactWithUser(user, created.id);
+            const checkFlat = check.services.find((x) => x.id == idFlat);
+            const checkCompound = check.services.find((x) => x.id == idCompound);
+            const checkSalut = checkCompound.content.fr.compoundValue.find((x) => x.id === idSalut);
+            const checkAtoi = checkCompound.content.fr.compoundValue.find((x) => x.id === idAtoi);
+            (0, chai_1.expect)(checkFlat).to.not.be.undefined;
+            (0, chai_1.expect)(checkFlat).to.not.be.null;
+            (0, chai_1.expect)(checkSalut).to.not.be.undefined;
+            (0, chai_1.expect)(checkSalut).to.not.be.null;
+            (0, chai_1.expect)(checkAtoi).to.not.be.undefined;
+            (0, chai_1.expect)(checkAtoi).to.not.be.null;
+            (0, chai_1.expect)(checkFlat.content.fr.stringValue).to.equal(createdFlat.content.fr.stringValue);
+            (0, chai_1.expect)(checkFlat.content.nl.stringValue).to.equal(createdFlat.content.nl.stringValue);
+            (0, chai_1.expect)(checkFlat.content.encryptedSelf).to.not.be.null;
+            (0, chai_1.expect)(checkSalut.content.fr.stringValue).to.equal(createdSalut.content.fr.stringValue);
+            (0, chai_1.expect)(checkSalut.encryptedSelf).to.not.be.null;
+            (0, chai_1.expect)(checkAtoi.content.fr.stringValue).to.equal(createdAtoi.content.fr.stringValue);
+            (0, chai_1.expect)(checkAtoi.encryptedSelf).to.not.be.null;
+        }
+    }));
+});
+describe('test that confidential helement information cannot be retrieved at MH level', () => {
+    before(function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.timeout(600000);
+            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+            env = yield initializer.execute((0, types_1.getEnvVariables)());
+        });
+    });
+    it('should find the confidential data only when logged as the user', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = yield (0, test_utils_1.createHcpHierarchyApis)(env);
+        const others = [
+            { api: child2Api, user: child2User },
+            { api: parentApi, user: parentUser },
+            { api: grandApi, user: grandUser },
+        ];
+        const pat = yield childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe' });
+        const modifiedPatient = (yield childApi.patientApi.initConfidentialSecretId(pat, childUser));
+        const confidentialHe = yield childApi.healthcareElementApi.createHealthElementWithUser(childUser, yield childApi.healthcareElementApi.newInstance(childUser, modifiedPatient, { descr: 'Confidential info' }, { confidential: true }));
+        const retrievedHesAsUser = yield childApi.healthcareElementApi.findBy(childUser.healthcarePartyId, modifiedPatient);
+        (0, chai_1.expect)(retrievedHesAsUser.length).to.equal(1, 'User should see its confidential data');
+        for (const { api, user } of others) {
+            const retrievedHesAsMh = yield api.healthcareElementApi.findBy(user.healthcarePartyId, modifiedPatient);
+            (0, chai_1.expect)(retrievedHesAsMh.length).to.equal(0, 'MH should not see confidential data');
+            let failedToRetrieve = false;
+            try {
+                yield api.healthcareElementApi.getHealthElementWithUser(user, confidentialHe.id);
+            }
+            catch (e) {
+                console.log(e);
+                failedToRetrieve = true;
+            }
+            if (!(0, test_utils_1.isLiteTest)()) {
+                (0, chai_1.expect)(failedToRetrieve).to.equal(true, 'MH should fail to retrieve confidential data');
+            }
+            // Even if in some way I could get the contact I should not be able to decrypt it
+            (0, chai_1.expect)(yield api.cryptoApi.xapi.encryptionKeysOf({ entity: confidentialHe, type: icc_x_api_1.EntityWithDelegationTypeName.HealthElement }, undefined)).to.have.length(0);
+        }
+    }));
+});
+describe('test that confidential contact information cannot be retrieved at MH level', () => {
+    before(function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.timeout(600000);
+            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+            env = yield initializer.execute((0, types_1.getEnvVariables)());
+        });
+    });
+    it('should find the confidential data only when logged as the user', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = yield (0, test_utils_1.createHcpHierarchyApis)(env);
+        const others = [
+            { api: child2Api, user: child2User },
+            { api: parentApi, user: parentUser },
+            { api: grandApi, user: grandUser },
+        ];
+        const pat = yield childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe' });
+        const modifiedPatient = (yield childApi.patientApi.initConfidentialSecretId(pat, childUser));
+        const confidentialCtc = yield childApi.contactApi.createContactWithUser(childUser, yield childApi.contactApi.newInstance(childUser, modifiedPatient, { descr: 'Confidential info', services: [], subContacts: [] }, { confidential: true }));
+        yield childApi.contactApi.createContactWithUser(childUser, yield childApi.contactApi.newInstance(childUser, modifiedPatient, { descr: 'Non confidential info', services: [], subContacts: [] }, { confidential: false }));
+        const retrievedCtcsAsUser = yield childApi.contactApi.findBy(childUser.healthcarePartyId, modifiedPatient);
+        (0, chai_1.expect)(retrievedCtcsAsUser.length).to.equal(2, 'User should see its confidential data');
+        for (const { api, user } of others) {
+            const retrievedCtcsAsMh = yield api.contactApi.findBy(user.healthcarePartyId, modifiedPatient);
+            (0, chai_1.expect)(retrievedCtcsAsMh.length).to.equal(1, 'MH should not see confidential data');
+            // Even if in some way I could get the contact id I should not be able to get it
+            let failedToRetrieve = false;
+            try {
+                yield api.contactApi.getContactWithUser(user, confidentialCtc.id);
+            }
+            catch (e) {
+                console.log(e);
+                failedToRetrieve = true;
+            }
+            if (!(0, test_utils_1.isLiteTest)()) {
+                (0, chai_1.expect)(failedToRetrieve).to.equal(true, 'MH should fail to retrieve confidential data');
+            }
+            // Even if in some way I could get the contact I should not be able to decrypt it
+            (0, chai_1.expect)(yield api.cryptoApi.xapi.encryptionKeysOf({ entity: confidentialCtc, type: icc_x_api_1.EntityWithDelegationTypeName.Contact }, undefined)).to.have.length(0);
+        }
+    }));
+});
+describe('Share entity behaviour', () => {
+    before(function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.timeout(600000);
+            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+            env = yield initializer.execute((0, types_1.getEnvVariables)());
+        });
+    });
+    it("share method should fail if the user attempts to share an entity he can't access", () => __awaiter(void 0, void 0, void 0, function* () {
+        const hcp1 = yield (0, test_utils_1.createNewHcpApi)(env);
+        const hcp2 = yield (0, test_utils_1.createNewHcpApi)(env);
+        const hcp3 = yield (0, test_utils_1.createNewHcpApi)(env);
+        const patient = yield hcp1.api.patientApi.createPatientWithUser(hcp1.user, yield hcp1.api.patientApi.newInstance(hcp1.user, { firstName: 'John', lastName: 'Doe', note: 'Secret' }));
+        const encryptedPatient = yield new icc_api_1.IccPatientApi(env.iCureUrl, {}, hcp1.api.authApi.authenticationProvider, fetch).getPatient(patient.id);
+        yield (0, chai_1.expect)(hcp2.api.patientApi.shareWith(hcp3.credentials.dataOwnerId, encryptedPatient, [], { requestedPermissions: 'FULL_WRITE' })).to.be
+            .rejected;
+        const shared = yield hcp1.api.patientApi.shareWith(hcp2.credentials.dataOwnerId, patient, [], { requestedPermissions: 'FULL_WRITE' });
+        yield hcp2.api.patientApi.shareWith(hcp3.credentials.dataOwnerId, shared, [], { requestedPermissions: 'FULL_WRITE' });
+    }));
+});
+//# sourceMappingURL=cryptoTest.js.map

package/test/icc-x-api/crypto/cryptoTest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoTest.js","sourceRoot":"","sources":["../../../../test/icc-x-api/crypto/cryptoTest.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,8CAAgD;AAChD,4BAAyB;AACzB,+BAA6C;AAC7C,iBAAc;AAEd,4DAAwD;AACxD,uDAQ+B;AAC/B,mDAAmE;AACnE,kDAA8F;AAC9F,IAAO,OAAO,GAAG,sBAAS,CAAC,OAAO,CAAA;AAElC,IAAA,UAAO,EAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAA;AAEpC,IAAI,GAAa,CAAA;AAEjB,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;AAEtB,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,MAAM,CAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;QACpD,CAAC;KAAA,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAS,EAAE;QACvD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,yBAAY,CAAC,CAAA;QAC5C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QAE/C,MAAM,IAAI,GAAG,kCAAkC,CAAA;QAC/C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,qBAAqB,CACxD,IAAI,EACJ,MAAM,GAAG,CAAC,UAAU,CAAC,WAAW,CAC9B,IAAI,EACJ,IAAI,iBAAO,CAAC;YACV,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,KAAK;YAChB,IAAI;SACL,CAAC,CACH,CACF,CAAA;QACD,IAAA,aAAM,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAEnC,OAAO,CAAC,GAAG,CACT,gCAAgC,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,UAAU,OAAO,CAAC,IAAI,mBAAmB,OAAO,CAAC,aAAa,GAAG,CACtJ,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;QACzE,OAAO,CAAC,GAAG,CACT,gCAAgC,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,UAAU,OAAO,CAAC,IAAI,mBAAmB,OAAO,CAAC,aAAa,GAAG,CACtJ,CAAA;QACD,IAAA,aAAM,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACvC,IAAA,aAAM,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAEnC,MAAM,wBAAwB,GAAG,MAAM,IAAI,uBAAa,CACtD,GAAG,CAAC,QAAQ,EACZ,EAAE,EACF,IAAI,uCAA2B,CAAC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,QAAQ,CAAC,EACrH,KAAY,CACb,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAExB,OAAO,CAAC,GAAG,CACT,+BAA+B,wBAAwB,CAAC,EAAE,KAAK,wBAAwB,CAAC,SAAS,IAAI,wBAAwB,CAAC,QAAQ,WAAW,wBAAwB,CAAC,IAAI,GAAG,CAClL,CAAA;QACD,IAAA,aAAM,EAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACxD,IAAA,aAAM,EAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAA;IACvD,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,MAAM,CAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;QACpD,CAAC;KAAA,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAS,EAAE;QACtE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,mCAAsB,EAAC,GAAI,CAAC,CAAA;QACrI,MAAM,MAAM,GAAG;YACb,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;SACnC,CAAA;QAED,MAAM,IAAI,GAAG,WAAW,CAAA;QACxB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,qBAAqB,CACzD,SAAS,EACT,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAC/F,CAAA;QAED,iGAAiG;QACjG,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC3E,IAAA,aAAM,EAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7F,MAAM,gBAAgB,GAAG,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/E,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE;YAClC,IAAA,aAAM,EAAC,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YACtE,IAAA,aAAM,EAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;YACpF,IAAA,aAAM,EAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;SACpF;QAED,iEAAiE;QACjE,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,8BAA8B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;QAEjF,uCAAuC;QACvC,MAAM,mBAAmB,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,wBAAwB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;QAE9F,yEAAyE;QACzE,MAAM,0BAA0B,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,8BAA8B,CAAC,mBAAmB,CAAC,CAAA;QAChH,MAAM,6BAA6B,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,iCAAiC,CAAC,mBAAmB,CAAC,CAAA;QACtH,IAAA,aAAM,EAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACpD,IAAA,aAAM,EAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACvD,IAAA,aAAM,EAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAA;QACjF,IAAA,aAAM,EAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;QAEnE,oEAAoE;QACpE,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;QACxF,IAAA,aAAM,EAAC,cAAc,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACxC,IAAA,aAAM,EAAC,cAAc,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAA;QACxE,IAAA,aAAM,EAAC,cAAc,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAA;QAErE,wHAAwH;QACxH,IAAA,aAAM,EAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7F,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE;YAClC,IAAA,aAAM,EAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;SACpF;QAED,2CAA2C;QAC3C,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,MAAM,EAAE;YAC5B,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;YAC9E,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YACnC,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAA;SAC/D;QAED,mFAAmF;QACnF,MAAM,wBAAwB,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,wBAAwB,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAA;QACnH,IAAA,aAAM,EAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAA;QAC3E,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAEhG,iEAAiE;QACjE,IAAA,aAAM,EAAC,MAAM,SAAS,CAAC,UAAU,CAAC,8BAA8B,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;QAClG,MAAM,0BAA0B,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,wBAAwB,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAA;QAEvH,oDAAoD;QACpD,MAAM,oBAAoB,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;QACrG,IAAA,aAAM,EAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC9C,IAAA,aAAM,EAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9E,IAAA,aAAM,EAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAA;QAE3E,wDAAwD;QACxD,MAAM,eAAe,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;QACjG,MAAM,kBAAkB,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,8BAA8B,CAAC,0BAA0B,CAAC,CAAA;QAChH,IAAA,aAAM,EAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC5C,IAAA,aAAM,EAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAA;QACzE,IAAA,aAAM,EAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5E,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACzC,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAA;QACpE,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAA;QAEzD,6CAA6C;QAC7C,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAClG,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAA;QAClI,IAAA,aAAM,EAAC,MAAM,SAAS,CAAC,UAAU,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACnG,IAAA,aAAM,EAAC,MAAM,SAAS,CAAC,UAAU,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAA;IACrI,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,MAAM,CAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;QACpD,CAAC;KAAA,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAS,EAAE;QAClE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,mCAAsB,EAAC,GAAI,CAAC,CAAA;QACrI,MAAM,OAAO,GAAG;YACd,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;YAClC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;SACnC,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,qBAAqB,CACzD,SAAS,EACT,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CACzF,CAAA;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;QACzD,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;QAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;QAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;QACzD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,EAAE;YACrE,QAAQ,EAAE;gBACR;oBACE,EAAE,EAAE,MAAM;oBACV,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;iBACvE;gBACD;oBACE,EAAE,EAAE,UAAU;oBACd,OAAO,EAAE;wBACP,EAAE,EAAE;4BACF,aAAa,EAAE;gCACb,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE;gCAC1D,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE;6BAC1D;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QACpF,MAAM,WAAW,GAAG,OAAQ,CAAC,QAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAE,CAAA;QACpE,MAAM,eAAe,GAAG,OAAQ,CAAC,QAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAE,CAAA;QAC5E,MAAM,YAAY,GAAG,eAAe,CAAC,OAAQ,CAAC,EAAE,CAAC,aAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAE,CAAA;QAC9F,MAAM,WAAW,GAAG,eAAe,CAAC,OAAQ,CAAC,EAAE,CAAC,aAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAE,CAAA;QAE5F,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE;YACnC,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;YAC9C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAQ,CAAC,EAAG,CAAC,CAAA;YACzE,MAAM,SAAS,GAAG,KAAM,CAAC,QAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,CAAE,CAAA;YAC/D,MAAM,aAAa,GAAG,KAAM,CAAC,QAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,UAAU,CAAE,CAAA;YACvE,MAAM,UAAU,GAAG,aAAa,CAAC,OAAQ,CAAC,EAAE,CAAC,aAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAE,CAAA;YAC1F,MAAM,SAAS,GAAG,aAAa,CAAC,OAAQ,CAAC,EAAE,CAAC,aAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAE,CAAA;YAExF,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;YACrC,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAA;YAChC,IAAA,aAAM,EAAC,UAAU,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;YACtC,IAAA,aAAM,EAAC,UAAU,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAA;YACjC,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;YACrC,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAA;YAEhC,IAAA,aAAM,EAAC,SAAS,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAY,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAA;YACxF,IAAA,aAAM,EAAC,SAAS,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAY,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAA;YACxF,IAAA,aAAM,EAAC,SAAS,CAAC,OAAQ,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAA;YAEvD,IAAA,aAAM,EAAC,UAAU,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAA;YACzF,IAAA,aAAM,EAAC,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAA;YAE/C,IAAA,aAAM,EAAC,SAAS,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAA;YACvF,IAAA,aAAM,EAAC,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAA;SAC/C;IACH,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,6EAA6E,EAAE,GAAG,EAAE;IAC3F,MAAM,CAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;QACpD,CAAC;KAAA,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,GAAS,EAAE;QAC9E,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,mCAAsB,EAAC,GAAI,CAAC,CAAA;QACrI,MAAM,MAAM,GAAG;YACb,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;SACnC,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QACpG,MAAM,eAAe,GAAG,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,wBAAwB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAE,CAAA;QAE7F,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAAC,2BAA2B,CACpF,SAAS,EACT,MAAM,QAAQ,CAAC,oBAAoB,CAAC,WAAW,CAAC,SAAS,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CACpI,CAAA;QAED,MAAM,kBAAkB,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAkB,EAAE,eAAe,CAAC,CAAA;QACpH,IAAA,aAAM,EAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,uCAAuC,CAAC,CAAA;QAEtF,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE;YAClC,MAAM,gBAAgB,GAAG,MAAM,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAkB,EAAE,eAAe,CAAC,CAAA;YACxG,IAAA,aAAM,EAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,qCAAqC,CAAC,CAAA;YAClF,IAAI,gBAAgB,GAAG,KAAK,CAAA;YAC5B,IAAI;gBACF,MAAM,GAAG,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,IAAI,EAAE,cAAc,CAAC,EAAG,CAAC,CAAA;aAClF;YAAC,OAAO,CAAC,EAAE;gBACV,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;gBACd,gBAAgB,GAAG,IAAI,CAAA;aACxB;YACD,IAAI,CAAC,IAAA,uBAAU,GAAE,EAAE;gBACjB,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,8CAA8C,CAAC,CAAA;aACxF;YACD,iFAAiF;YACjF,IAAA,aAAM,EACJ,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,cAAe,EAAE,IAAI,EAAE,wCAA4B,CAAC,aAAa,EAAE,EAAE,SAAS,CAAC,CACpI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;SACpB;IACH,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,4EAA4E,EAAE,GAAG,EAAE;IAC1F,MAAM,CAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;QACpD,CAAC;KAAA,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,GAAS,EAAE;QAC9E,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,mCAAsB,EAAC,GAAI,CAAC,CAAA;QACrI,MAAM,MAAM,GAAG;YACb,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;SACnC,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QACpG,MAAM,eAAe,GAAG,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,wBAAwB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAE,CAAA;QAE7F,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,qBAAqB,CACrE,SAAS,EACT,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CACnC,SAAS,EACT,eAAe,EAEf,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAC7D,EAAE,YAAY,EAAE,IAAI,EAAE,CACvB,CACF,CAAA;QAED,MAAM,QAAQ,CAAC,UAAU,CAAC,qBAAqB,CAC7C,SAAS,EACT,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CACnC,SAAS,EACT,eAAe,EACf,EAAE,KAAK,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EACjE,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB,CACF,CAAA;QAED,MAAM,mBAAmB,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAkB,EAAE,eAAe,CAAC,CAAA;QAC3G,IAAA,aAAM,EAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,uCAAuC,CAAC,CAAA;QAEvF,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE;YAClC,MAAM,iBAAiB,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAkB,EAAE,eAAe,CAAC,CAAA;YAC/F,IAAA,aAAM,EAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,qCAAqC,CAAC,CAAA;YACnF,gFAAgF;YAChF,IAAI,gBAAgB,GAAG,KAAK,CAAA;YAC5B,IAAI;gBACF,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,EAAE,eAAgB,CAAC,EAAG,CAAC,CAAA;aACpE;YAAC,OAAO,CAAC,EAAE;gBACV,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;gBACd,gBAAgB,GAAG,IAAI,CAAA;aACxB;YACD,IAAI,CAAC,IAAA,uBAAU,GAAE,EAAE;gBACjB,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,8CAA8C,CAAC,CAAA;aACxF;YACD,iFAAiF;YACjF,IAAA,aAAM,EACJ,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,eAAgB,EAAE,IAAI,EAAE,wCAA4B,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAC/H,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;SACpB;IACH,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,MAAM,CAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;QACpD,CAAC;KAAA,CAAC,CAAA;IAEF,EAAE,CAAC,kFAAkF,EAAE,GAAS,EAAE;QAChG,MAAM,IAAI,GAAG,MAAM,IAAA,4BAAe,EAAC,GAAG,CAAC,CAAA;QACvC,MAAM,IAAI,GAAG,MAAM,IAAA,4BAAe,EAAC,GAAG,CAAC,CAAA;QACvC,MAAM,IAAI,GAAG,MAAM,IAAA,4BAAe,EAAC,GAAG,CAAC,CAAA;QACvC,MAAM,OAAO,GAAY,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,qBAAqB,CACtE,IAAI,CAAC,IAAI,EACT,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CACzG,CAAA;QACD,MAAM,gBAAgB,GAAG,MAAM,IAAI,uBAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAG,CAAC,CAAA;QAC1I,MAAM,IAAA,aAAM,EAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;aAC1I,QAAQ,CAAA;QACX,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE,YAAY,EAAE,CAAC,CAAA;QACrI,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE,YAAY,EAAE,CAAC,CAAA;IACvH,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import { IccPatientApi } from '../../../icc-api'\nimport 'isomorphic-fetch'\nimport { expect, use as chaiUse } from 'chai'\nimport 'mocha'\n\nimport { Patient } from '../../../icc-api/model/Patient'\nimport {\n  createHcpHierarchyApis,\n  createNewHcpApi,\n  getEnvironmentInitializer,\n  hcp1Username,\n  isLiteTest,\n  setLocalStorage,\n  TestUtils,\n} from '../../utils/test_utils'\nimport { getEnvVariables, TestVars } from '@icure/test-setup/types'\nimport { BasicAuthenticationProvider, EntityWithDelegationTypeName } from '../../../icc-x-api'\nimport initApi = TestUtils.initApi\n\nchaiUse(require('chai-as-promised'))\n\nlet env: TestVars\n\nsetLocalStorage(fetch)\n\ndescribe('Create a patient from scratch', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  it('should create a patient in the database', async () => {\n    const api = await initApi(env, hcp1Username)\n    const user = await api.userApi.getCurrentUser()\n\n    const note = 'A secured note that is encrypted'\n    const patient = await api.patientApi.createPatientWithUser(\n      user,\n      await api.patientApi.newInstance(\n        user,\n        new Patient({\n          lastName: 'Biden',\n          firstName: 'Joe',\n          note,\n        })\n      )\n    )\n    expect(patient.note).to.equal(note)\n\n    console.log(\n      `Created patient (decrypted): ${patient.id}: ${patient.firstName} ${patient.lastName} [note:${patient.note}, encryptedSelf:${patient.encryptedSelf}]`\n    )\n\n    const fetched = await api.patientApi.getPatientWithUser(user, patient.id)\n    console.log(\n      `Fetched patient (decrypted): ${fetched.id}: ${fetched.firstName} ${fetched.lastName} [note:${fetched.note}, encryptedSelf:${fetched.encryptedSelf}]`\n    )\n    expect(fetched.id).to.equal(patient.id)\n    expect(fetched.note).to.equal(note)\n\n    const fetchedWithoutDecryption = await new IccPatientApi(\n      env.iCureUrl,\n      {},\n      new BasicAuthenticationProvider(env.dataOwnerDetails[hcp1Username].user, env.dataOwnerDetails[hcp1Username].password),\n      fetch as any\n    ).getPatient(patient.id)\n\n    console.log(\n      `Fetched patient (encrypted):${fetchedWithoutDecryption.id}: ${fetchedWithoutDecryption.firstName} ${fetchedWithoutDecryption.lastName} [note: ${fetchedWithoutDecryption.note}]`\n    )\n    expect(fetchedWithoutDecryption.id).to.equal(patient.id)\n    expect(fetchedWithoutDecryption.note).to.be.undefined\n  })\n})\n\ndescribe('Init confidential delegation in patient', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  it('should return a patient with a confidential delegation', async () => {\n    const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = await createHcpHierarchyApis(env!)\n    const others = [\n      { api: child2Api, user: child2User },\n      { api: parentApi, user: parentUser },\n      { api: grandApi, user: grandUser },\n    ]\n\n    const note = 'Some note'\n    const pat = await childApi.patientApi.createPatientWithUser(\n      childUser,\n      await childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe', note })\n    )\n\n    // All parents and siblings should have access to the decrypted data and to the initial secret id\n    expect(await childApi.patientApi.decryptSecretIdsOf(pat)).to.have.length(1)\n    expect((await childApi.patientApi.getPatientWithUser(childUser, pat.id)).note).to.equal(note)\n    const originalSecretId = (await childApi.patientApi.decryptSecretIdsOf(pat))[0]\n    for (const { api, user } of others) {\n      expect(await api.patientApi.decryptSecretIdsOf(pat)).to.have.length(1)\n      expect((await api.patientApi.decryptSecretIdsOf(pat))[0]).to.equal(originalSecretId)\n      expect((await api.patientApi.getPatientWithUser(user, pat.id)).note).to.equal(note)\n    }\n\n    // Initially there shouldn't be any secret confidential secret id\n    expect(await childApi.patientApi.decryptConfidentialSecretIdsOf(pat)).to.be.empty\n\n    // Now create a confidential delegation\n    const patWithConfidential = await childApi.patientApi.initConfidentialSecretId(pat, childUser)\n\n    // Confidential secret id should be different from the original secret id\n    const confidentialDelegationKeys = await childApi.patientApi.decryptConfidentialSecretIdsOf(patWithConfidential)\n    const nonConfidentialDelegationKeys = await childApi.patientApi.decryptNonConfidentialSecretIdsOf(patWithConfidential)\n    expect(confidentialDelegationKeys).to.have.length(1)\n    expect(nonConfidentialDelegationKeys).to.have.length(1)\n    expect(confidentialDelegationKeys[0]).to.not.equal(nonConfidentialDelegationKeys)\n    expect(nonConfidentialDelegationKeys[0]).to.equal(originalSecretId)\n\n    // Child has access to confidential and not confidential secret ids.\n    const childSecretIds = await childApi.patientApi.decryptSecretIdsOf(patWithConfidential)\n    expect(childSecretIds).to.have.length(2)\n    expect(childSecretIds).to.have.contain(nonConfidentialDelegationKeys[0])\n    expect(childSecretIds).to.have.contain(confidentialDelegationKeys[0])\n\n    // All parents and siblings should have access to the decrypted data even after initialising confidential delegations...\n    expect((await childApi.patientApi.getPatientWithUser(childUser, pat.id)).note).to.equal(note)\n    for (const { api, user } of others) {\n      expect((await api.patientApi.getPatientWithUser(user, pat.id)).note).to.equal(note)\n    }\n\n    // ...but not to the confidential secret id\n    for (const { api } of others) {\n      const secretIds = await api.patientApi.decryptSecretIdsOf(patWithConfidential)\n      expect(secretIds).to.have.length(1)\n      expect(secretIds).to.contain(nonConfidentialDelegationKeys[0])\n    }\n\n    // If a secret delegation is already available there is no need to create a new one\n    const patWithConfidentialAgain = await childApi.patientApi.initConfidentialSecretId(patWithConfidential, childUser)\n    expect(patWithConfidentialAgain.rev).to.equal(patWithConfidentialAgain.rev)\n    expect(await childApi.patientApi.decryptSecretIdsOf(patWithConfidentialAgain)).to.have.length(2)\n\n    // Different users will have different confidential secret ids...\n    expect(await child2Api.patientApi.decryptConfidentialSecretIdsOf(patWithConfidential)).to.be.empty\n    const patWithMoreConfidentialIds = await child2Api.patientApi.initConfidentialSecretId(patWithConfidential, child2User)\n\n    // ...child continues to know the same secret ids...\n    const childSecretIdsRepeat = await childApi.patientApi.decryptSecretIdsOf(patWithMoreConfidentialIds)\n    expect(childSecretIdsRepeat).to.have.length(2)\n    expect(childSecretIdsRepeat).to.have.contain(nonConfidentialDelegationKeys[0])\n    expect(childSecretIdsRepeat).to.have.contain(confidentialDelegationKeys[0])\n\n    // ...but child2 now also knows a different secret id...\n    const child2secretIds = await child2Api.patientApi.decryptSecretIdsOf(patWithMoreConfidentialIds)\n    const child2confidential = await child2Api.patientApi.decryptConfidentialSecretIdsOf(patWithMoreConfidentialIds)\n    expect(child2confidential).to.have.length(1)\n    expect(child2confidential[0]).to.not.equal(confidentialDelegationKeys[0])\n    expect(child2confidential[0]).to.not.equal(nonConfidentialDelegationKeys[0])\n    expect(child2secretIds).to.have.length(2)\n    expect(child2secretIds).to.contain(nonConfidentialDelegationKeys[0])\n    expect(child2secretIds).to.contain(child2confidential[0])\n\n    // ...and their parents still don't know them\n    expect(await grandApi.patientApi.decryptSecretIdsOf(patWithMoreConfidentialIds)).to.have.length(1)\n    expect(await grandApi.patientApi.decryptSecretIdsOf(patWithMoreConfidentialIds)).to.have.contain(nonConfidentialDelegationKeys[0])\n    expect(await parentApi.patientApi.decryptSecretIdsOf(patWithMoreConfidentialIds)).to.have.length(1)\n    expect(await parentApi.patientApi.decryptSecretIdsOf(patWithMoreConfidentialIds)).to.have.contain(nonConfidentialDelegationKeys[0])\n  })\n})\n\ndescribe('Test that contact information can be decrypted', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  it('should return a contact with decrypted information', async () => {\n    const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = await createHcpHierarchyApis(env!)\n    const allApis = [\n      { api: childApi, user: childUser },\n      { api: child2Api, user: child2User },\n      { api: parentApi, user: parentUser },\n      { api: grandApi, user: grandUser },\n    ]\n\n    const pat = await childApi.patientApi.createPatientWithUser(\n      childUser,\n      await childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe' })\n    )\n    const idFlat = childApi.cryptoApi.primitives.randomUuid()\n    const idCompound = childApi.cryptoApi.primitives.randomUuid()\n    const idSalut = childApi.cryptoApi.primitives.randomUuid()\n    const idAtoi = childApi.cryptoApi.primitives.randomUuid()\n    const instance = await childApi.contactApi.newInstance(childUser, pat, {\n      services: [\n        {\n          id: idFlat,\n          content: { fr: { stringValue: 'Salut' }, nl: { stringValue: 'Halo' } },\n        },\n        {\n          id: idCompound,\n          content: {\n            fr: {\n              compoundValue: [\n                { id: idSalut, content: { fr: { stringValue: 'Salut' } } },\n                { id: idAtoi, content: { fr: { stringValue: 'à toi' } } },\n              ],\n            },\n          },\n        },\n      ],\n    })\n    const created = await childApi.contactApi.createContactWithUser(childUser, instance)\n    const createdFlat = created!.services!.find((x) => x.id === idFlat)!\n    const createdCompound = created!.services!.find((x) => x.id === idCompound)!\n    const createdSalut = createdCompound.content!.fr.compoundValue!.find((x) => x.id === idSalut)!\n    const createdAtoi = createdCompound.content!.fr.compoundValue!.find((x) => x.id === idAtoi)!\n\n    for (const { api, user } of allApis) {\n      console.log('Trying with user: ' + user.login)\n      const check = await api.contactApi.getContactWithUser(user, created!.id!)\n      const checkFlat = check!.services!.find((x) => x.id == idFlat)!\n      const checkCompound = check!.services!.find((x) => x.id == idCompound)!\n      const checkSalut = checkCompound.content!.fr.compoundValue!.find((x) => x.id === idSalut)!\n      const checkAtoi = checkCompound.content!.fr.compoundValue!.find((x) => x.id === idAtoi)!\n\n      expect(checkFlat).to.not.be.undefined\n      expect(checkFlat).to.not.be.null\n      expect(checkSalut).to.not.be.undefined\n      expect(checkSalut).to.not.be.null\n      expect(checkAtoi).to.not.be.undefined\n      expect(checkAtoi).to.not.be.null\n\n      expect(checkFlat.content!.fr.stringValue).to.equal(createdFlat!.content!.fr.stringValue)\n      expect(checkFlat.content!.nl.stringValue).to.equal(createdFlat!.content!.nl.stringValue)\n      expect(checkFlat.content!.encryptedSelf).to.not.be.null\n\n      expect(checkSalut.content!.fr.stringValue).to.equal(createdSalut.content!.fr.stringValue)\n      expect(checkSalut.encryptedSelf).to.not.be.null\n\n      expect(checkAtoi.content!.fr.stringValue).to.equal(createdAtoi.content!.fr.stringValue)\n      expect(checkAtoi.encryptedSelf).to.not.be.null\n    }\n  })\n})\n\ndescribe('test that confidential helement information cannot be retrieved at MH level', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  it('should find the confidential data only when logged as the user', async () => {\n    const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = await createHcpHierarchyApis(env!)\n    const others = [\n      { api: child2Api, user: child2User },\n      { api: parentApi, user: parentUser },\n      { api: grandApi, user: grandUser },\n    ]\n\n    const pat = await childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe' })\n    const modifiedPatient = (await childApi.patientApi.initConfidentialSecretId(pat, childUser))!\n\n    const confidentialHe = await childApi.healthcareElementApi.createHealthElementWithUser(\n      childUser,\n      await childApi.healthcareElementApi.newInstance(childUser, modifiedPatient, { descr: 'Confidential info' }, { confidential: true })\n    )\n\n    const retrievedHesAsUser = await childApi.healthcareElementApi.findBy(childUser.healthcarePartyId!, modifiedPatient)\n    expect(retrievedHesAsUser.length).to.equal(1, 'User should see its confidential data')\n\n    for (const { api, user } of others) {\n      const retrievedHesAsMh = await api.healthcareElementApi.findBy(user.healthcarePartyId!, modifiedPatient)\n      expect(retrievedHesAsMh.length).to.equal(0, 'MH should not see confidential data')\n      let failedToRetrieve = false\n      try {\n        await api.healthcareElementApi.getHealthElementWithUser(user, confidentialHe.id!)\n      } catch (e) {\n        console.log(e)\n        failedToRetrieve = true\n      }\n      if (!isLiteTest()) {\n        expect(failedToRetrieve).to.equal(true, 'MH should fail to retrieve confidential data')\n      }\n      // Even if in some way I could get the contact I should not be able to decrypt it\n      expect(\n        await api.cryptoApi.xapi.encryptionKeysOf({ entity: confidentialHe!, type: EntityWithDelegationTypeName.HealthElement }, undefined)\n      ).to.have.length(0)\n    }\n  })\n})\n\ndescribe('test that confidential contact information cannot be retrieved at MH level', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  it('should find the confidential data only when logged as the user', async () => {\n    const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = await createHcpHierarchyApis(env!)\n    const others = [\n      { api: child2Api, user: child2User },\n      { api: parentApi, user: parentUser },\n      { api: grandApi, user: grandUser },\n    ]\n\n    const pat = await childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe' })\n    const modifiedPatient = (await childApi.patientApi.initConfidentialSecretId(pat, childUser))!\n\n    const confidentialCtc = await childApi.contactApi.createContactWithUser(\n      childUser,\n      await childApi.contactApi.newInstance(\n        childUser,\n        modifiedPatient,\n\n        { descr: 'Confidential info', services: [], subContacts: [] },\n        { confidential: true }\n      )\n    )\n\n    await childApi.contactApi.createContactWithUser(\n      childUser,\n      await childApi.contactApi.newInstance(\n        childUser,\n        modifiedPatient,\n        { descr: 'Non confidential info', services: [], subContacts: [] },\n        { confidential: false }\n      )\n    )\n\n    const retrievedCtcsAsUser = await childApi.contactApi.findBy(childUser.healthcarePartyId!, modifiedPatient)\n    expect(retrievedCtcsAsUser.length).to.equal(2, 'User should see its confidential data')\n\n    for (const { api, user } of others) {\n      const retrievedCtcsAsMh = await api.contactApi.findBy(user.healthcarePartyId!, modifiedPatient)\n      expect(retrievedCtcsAsMh.length).to.equal(1, 'MH should not see confidential data')\n      // Even if in some way I could get the contact id I should not be able to get it\n      let failedToRetrieve = false\n      try {\n        await api.contactApi.getContactWithUser(user, confidentialCtc!.id!)\n      } catch (e) {\n        console.log(e)\n        failedToRetrieve = true\n      }\n      if (!isLiteTest()) {\n        expect(failedToRetrieve).to.equal(true, 'MH should fail to retrieve confidential data')\n      }\n      // Even if in some way I could get the contact I should not be able to decrypt it\n      expect(\n        await api.cryptoApi.xapi.encryptionKeysOf({ entity: confidentialCtc!, type: EntityWithDelegationTypeName.Contact }, undefined)\n      ).to.have.length(0)\n    }\n  })\n})\n\ndescribe('Share entity behaviour', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  it(\"share method should fail if the user attempts to share an entity he can't access\", async () => {\n    const hcp1 = await createNewHcpApi(env)\n    const hcp2 = await createNewHcpApi(env)\n    const hcp3 = await createNewHcpApi(env)\n    const patient: Patient = await hcp1.api.patientApi.createPatientWithUser(\n      hcp1.user,\n      await hcp1.api.patientApi.newInstance(hcp1.user, { firstName: 'John', lastName: 'Doe', note: 'Secret' })\n    )\n    const encryptedPatient = await new IccPatientApi(env.iCureUrl, {}, hcp1.api.authApi.authenticationProvider, fetch).getPatient(patient.id!)\n    await expect(hcp2.api.patientApi.shareWith(hcp3.credentials.dataOwnerId, encryptedPatient, [], { requestedPermissions: 'FULL_WRITE' })).to.be\n      .rejected\n    const shared = await hcp1.api.patientApi.shareWith(hcp2.credentials.dataOwnerId, patient, [], { requestedPermissions: 'FULL_WRITE' })\n    await hcp2.api.patientApi.shareWith(hcp3.credentials.dataOwnerId, shared, [], { requestedPermissions: 'FULL_WRITE' })\n  })\n})\n"]}

package/test/icc-x-api/crypto/delegate-ci-to-patient-with-missing-keys-test.d.ts

@@ -0,0 +1 @@
+import 'isomorphic-fetch';

package/test/icc-x-api/crypto/delegate-ci-to-patient-with-missing-keys-test.js

@@ -0,0 +1,166 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const icc_x_api_1 = require("../../../icc-x-api");
+const CalendarItem_1 = require("../../../icc-api/model/CalendarItem");
+const models_1 = require("../../../icc-api/model/models");
+const mocha_1 = require("mocha");
+const crypto_1 = require("crypto");
+require("isomorphic-fetch");
+const chai_1 = require("chai");
+const MaintenanceTaskAfterDateFilter_1 = require("../../../icc-x-api/filters/MaintenanceTaskAfterDateFilter");
+const test_utils_1 = require("../../utils/test_utils");
+const TestStorage_1 = require("../../utils/TestStorage");
+const TestCryptoStrategies_1 = require("../../utils/TestCryptoStrategies");
+const KeyPairUpdateRequest_1 = require("../../../icc-x-api/maintenance/KeyPairUpdateRequest");
+const SecureDelegation_1 = require("../../../icc-api/model/SecureDelegation");
+const types_1 = require("@icure/test-setup/types");
+var AccessLevel = SecureDelegation_1.SecureDelegation.AccessLevelEnum;
+function _getHcpKeyUpdateMaintenanceTask(delegateApi) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const delegateUser = yield delegateApi.userApi.getCurrentUser();
+        const notifications = yield delegateApi.maintenanceTaskApi.filterMaintenanceTasksByWithUser(delegateUser, undefined, undefined, new models_1.FilterChainMaintenanceTask({
+            filter: new MaintenanceTaskAfterDateFilter_1.MaintenanceTaskAfterDateFilter({
+                date: new Date().getTime() - 100000,
+            }),
+        }));
+        return notifications.rows.sort((a, b) => a.created - b.created)[notifications.rows.length - 1];
+    });
+}
+(0, test_utils_1.setLocalStorage)(fetch);
+let env;
+(0, mocha_1.describe)('Full battery of tests on crypto and keys', function () {
+    return __awaiter(this, void 0, void 0, function* () {
+        (0, mocha_1.before)(function () {
+            return __awaiter(this, void 0, void 0, function* () {
+                this.timeout(600000);
+                const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+                env = yield initializer.execute((0, types_1.getEnvVariables)());
+            });
+        });
+        // TODO should give access back to old and new keys
+        (0, mocha_1.it)(`Create calendar item as a patient and get access back`, () => __awaiter(this, void 0, void 0, function* () {
+            function decryptDataForPair(api, dataOwner1, dataOwner2) {
+                return __awaiter(this, void 0, void 0, function* () {
+                    const allExchangeData = [
+                        ...(yield api.cryptoApi.exchangeData.base.getExchangeDataByDelegatorDelegatePair(dataOwner1, dataOwner2)),
+                        ...(yield api.cryptoApi.exchangeData.base.getExchangeDataByDelegatorDelegatePair(dataOwner2, dataOwner1)),
+                    ];
+                    let failedDecryptionsCount = 0;
+                    const successfulDecryptions = [];
+                    for (const exchangeData of allExchangeData) {
+                        const decryptedKey = yield api.cryptoApi.exchangeData.base.tryDecryptExchangeKeys([exchangeData], api.cryptoApi.userKeysManager.getDecryptionKeys());
+                        const decryptedAccessControlSecret = yield api.cryptoApi.exchangeData.base.tryDecryptAccessControlSecret([exchangeData], api.cryptoApi.userKeysManager.getDecryptionKeys());
+                        if (decryptedKey.failedDecryptions.length > 0 || decryptedAccessControlSecret.failedDecryptions.length > 0) {
+                            failedDecryptionsCount++;
+                        }
+                        else {
+                            successfulDecryptions.push({
+                                rawKey: (0, icc_x_api_1.ua2hex)(yield api.cryptoApi.primitives.AES.exportKey(decryptedKey.successfulDecryptions[0], 'raw')),
+                                accessControlSecret: decryptedAccessControlSecret.successfulDecryptions[0],
+                            });
+                        }
+                    }
+                    return { failedDecryptionsCount, successfulDecryptions };
+                });
+            }
+            function checkDecryptedDataHas(decryptedData, expected) {
+                (0, chai_1.expect)(decryptedData.filter((d) => d.rawKey === expected.rawKey && d.accessControlSecret === expected.accessControlSecret)).to.have.length(1);
+            }
+            const previousPubKey = env.dataOwnerDetails[test_utils_1.patUsername].publicKey;
+            const api = yield (0, test_utils_1.getApiAndAddPrivateKeysForUser)(env.iCureUrl, env.dataOwnerDetails[test_utils_1.patUsername]);
+            const u = yield api.userApi.getCurrentUser();
+            const delegateInfo = yield (0, test_utils_1.createNewHcpApi)(env);
+            const delegateApi = delegateInfo.api;
+            const delegateUser = delegateInfo.user;
+            const delegateHcp = yield delegateApi.healthcarePartyApi.getHealthcareParty(delegateUser.healthcarePartyId);
+            const patient = yield api.patientApi.getPatientWithUser(u, u.patientId);
+            // Create a Record to share with delegateHcp: this will trigger the creation of a new aes exchange key as well
+            const initialRecordToDelegate = yield api.calendarItemApi.createCalendarItemWithHcParty(u, yield api.calendarItemApi.newInstance(u, new CalendarItem_1.CalendarItem({ id: `${u.id}-ci-initial-to`, title: 'CI-INITIAL-TO' }), {
+                additionalDelegates: {
+                    [delegateHcp.id]: AccessLevel.WRITE,
+                },
+            }));
+            const initialRecordFromDelegate = yield delegateApi.calendarItemApi.createCalendarItemWithHcParty(u, yield delegateApi.calendarItemApi.newInstance(delegateUser, new CalendarItem_1.CalendarItem({ id: `${u.id}-ci-initial-from`, title: 'CI-INITIAL-FROM' }), {
+                additionalDelegates: {
+                    [u.patientId]: AccessLevel.WRITE,
+                },
+            }));
+            // Decrypting this AES Key to compare it with AES key decrypted with new key in the next steps
+            yield api.cryptoApi.forceReload();
+            const originalDecryptedData = yield decryptDataForPair(api, u.patientId, delegateUser.healthcarePartyId);
+            (0, chai_1.expect)(originalDecryptedData.failedDecryptionsCount).to.equal(0);
+            (0, chai_1.expect)(originalDecryptedData.successfulDecryptions.length).to.equal(2);
+            // And creates a new one
+            const newKey = yield api.cryptoApi.primitives.RSA.generateKeyPair(icc_x_api_1.ShaVersion.Sha256);
+            const publicKey = (0, icc_x_api_1.ua2hex)(yield api.cryptoApi.primitives.RSA.exportKey(newKey.publicKey, 'spki'));
+            const apiAfterNewKey = yield icc_x_api_1.IcureApi.initialise(env.iCureUrl, {
+                username: env.dataOwnerDetails[test_utils_1.patUsername].user,
+                password: env.dataOwnerDetails[test_utils_1.patUsername].password,
+            }, new TestCryptoStrategies_1.TestCryptoStrategies(newKey), crypto_1.webcrypto, fetch, {
+                storage: new TestStorage_1.TestStorage(),
+                keyStorage: new TestStorage_1.TestKeyStorage(),
+            });
+            const user = yield apiAfterNewKey.userApi.getCurrentUser();
+            yield apiAfterNewKey.icureMaintenanceTaskApi.createMaintenanceTasksForNewKeypair(user, newKey);
+            // User can get not encrypted information from iCure (HCP, ...)
+            const hcp = yield apiAfterNewKey.healthcarePartyApi.getHealthcareParty(delegateUser.healthcarePartyId);
+            // User can create new data, using its new keyPair
+            const newRecordToDelegate = yield apiAfterNewKey.calendarItemApi.createCalendarItemWithHcParty(u, yield apiAfterNewKey.calendarItemApi.newInstance(u, new CalendarItem_1.CalendarItem({ id: `${u.id}-ci-to`, title: 'CI-TO' }), {
+                additionalDelegates: {
+                    [hcp.id]: SecureDelegation_1.SecureDelegation.AccessLevelEnum.WRITE,
+                },
+            }));
+            (0, chai_1.expect)(newRecordToDelegate.id).to.be.not.null;
+            (0, chai_1.expect)(newRecordToDelegate.rev).to.be.not.null;
+            // But user can not decrypt data he previously created
+            const decryptedWithNewKey = yield decryptDataForPair(apiAfterNewKey, u.patientId, delegateUser.healthcarePartyId);
+            (0, chai_1.expect)(decryptedWithNewKey.failedDecryptionsCount).to.equal(2);
+            (0, chai_1.expect)(decryptedWithNewKey.successfulDecryptions.length).to.equal(1);
+            // Delegate user will therefore give user access back to data he previously created
+            // Hcp gets his maintenance tasks
+            yield delegateApi.cryptoApi.forceReload();
+            const maintenanceTask = KeyPairUpdateRequest_1.KeyPairUpdateRequest.fromMaintenanceTask(yield _getHcpKeyUpdateMaintenanceTask(delegateApi));
+            (0, chai_1.expect)(maintenanceTask.concernedDataOwnerId).equals(patient.id);
+            (0, chai_1.expect)(maintenanceTask.newPublicKey).equals(publicKey);
+            yield delegateApi.icureMaintenanceTaskApi.applyKeyPairUpdate(maintenanceTask);
+            const updatedDataOwner = yield delegateApi.dataOwnerApi.getCryptoActorStub(maintenanceTask.concernedDataOwnerId);
+            (0, chai_1.expect)(updatedDataOwner.type).to.be.equal('patient');
+            (0, chai_1.expect)(updatedDataOwner.stub).to.not.be.undefined;
+            (0, chai_1.expect)(updatedDataOwner.stub).to.not.be.null;
+            const apiAfterSharedBack = yield icc_x_api_1.IcureApi.initialise(env.iCureUrl, {
+                username: env.dataOwnerDetails[test_utils_1.patUsername].user,
+                password: env.dataOwnerDetails[test_utils_1.patUsername].password,
+            }, new TestCryptoStrategies_1.TestCryptoStrategies(newKey), crypto_1.webcrypto, fetch, {
+                storage: new TestStorage_1.TestStorage(),
+                keyStorage: new TestStorage_1.TestKeyStorage(),
+            });
+            // User can access his previous data again
+            yield apiAfterSharedBack.cryptoApi.forceReload();
+            const decryptedAfterShareBack = yield decryptDataForPair(apiAfterSharedBack, u.patientId, delegateUser.healthcarePartyId);
+            (0, chai_1.expect)(decryptedAfterShareBack.failedDecryptionsCount).to.equal(0);
+            (0, chai_1.expect)(decryptedAfterShareBack.successfulDecryptions.length).to.equal(3);
+            checkDecryptedDataHas(decryptedAfterShareBack.successfulDecryptions, originalDecryptedData.successfulDecryptions[0]);
+            checkDecryptedDataHas(decryptedAfterShareBack.successfulDecryptions, originalDecryptedData.successfulDecryptions[1]);
+            checkDecryptedDataHas(decryptedAfterShareBack.successfulDecryptions, decryptedWithNewKey.successfulDecryptions[0]);
+            const initialRecordFromDelegateAfterSharedBack = yield apiAfterSharedBack.calendarItemApi.getCalendarItemWithUser(u, initialRecordFromDelegate.id);
+            (0, chai_1.expect)(initialRecordFromDelegateAfterSharedBack.id).to.be.equal(initialRecordFromDelegate.id);
+            (0, chai_1.expect)(initialRecordFromDelegateAfterSharedBack.rev).to.be.equal(initialRecordFromDelegate.rev);
+            (0, chai_1.expect)(initialRecordFromDelegateAfterSharedBack.title).to.be.equal(initialRecordFromDelegate.title);
+            const initialRecordToDelegateAfterSharedBack = yield apiAfterSharedBack.calendarItemApi.getCalendarItemWithUser(u, initialRecordToDelegate.id);
+            (0, chai_1.expect)(initialRecordToDelegateAfterSharedBack.id).to.be.equal(initialRecordToDelegate.id);
+            (0, chai_1.expect)(initialRecordToDelegateAfterSharedBack.rev).to.be.equal(initialRecordToDelegate.rev);
+            (0, chai_1.expect)(initialRecordToDelegateAfterSharedBack.title).to.be.equal(initialRecordToDelegate.title);
+        }));
+    });
+});
+// TODO test that EXACTLY ONE maintenance task is created for each delegator AND delegate in a exchange key with the data owner with the new key
+//# sourceMappingURL=delegate-ci-to-patient-with-missing-keys-test.js.map

package/test/icc-x-api/crypto/delegate-ci-to-patient-with-missing-keys-test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegate-ci-to-patient-with-missing-keys-test.js","sourceRoot":"","sources":["../../../../test/icc-x-api/crypto/delegate-ci-to-patient-with-missing-keys-test.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,kDAAuE;AACvE,sEAAkE;AAClE,0DAAyH;AACzH,iCAA4C;AAE5C,mCAAkC;AAClC,4BAAyB;AAEzB,+BAA6B;AAC7B,8GAA0G;AAC1G,uDAAiJ;AACjJ,yDAAqE;AACrE,2EAAuE;AACvE,8FAA0F;AAC1F,8EAA0E;AAC1E,mDAAmE;AACnE,IAAO,WAAW,GAAG,mCAAgB,CAAC,eAAe,CAAA;AAErD,SAAe,+BAA+B,CAAC,WAAiB;;QAC9D,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QAC/D,MAAM,aAAa,GAAiC,MAAM,WAAW,CAAC,kBAAkB,CAAC,gCAAgC,CACvH,YAAa,EACb,SAAS,EACT,SAAS,EACT,IAAI,mCAA0B,CAAC;YAC7B,MAAM,EAAE,IAAI,+DAA8B,CAAC;gBACzC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM;aACpC,CAAC;SACH,CAAC,CACH,CAAA;QAED,OAAO,aAAa,CAAC,IAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAQ,GAAG,CAAC,CAAC,OAAQ,CAAC,CAAC,aAAa,CAAC,IAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACpG,CAAC;CAAA;AAED,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;AAEtB,IAAI,GAAa,CAAA;AAEjB,IAAA,gBAAQ,EAAC,0CAA0C,EAAE;;QACnD,IAAA,cAAM,EAAC;;gBACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;gBACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;gBACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;YACpD,CAAC;SAAA,CAAC,CAAA;QAEF,mDAAmD;QACnD,IAAA,UAAE,EAAC,uDAAuD,EAAE,GAAS,EAAE;YACrE,SAAe,kBAAkB,CAC/B,GAAS,EACT,UAAkB,EAClB,UAAkB;;oBAKlB,MAAM,eAAe,GAAG;wBACtB,GAAG,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,sCAAsC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;wBACzG,GAAG,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,sCAAsC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;qBAC1G,CAAA;oBACD,IAAI,sBAAsB,GAAG,CAAC,CAAA;oBAC9B,MAAM,qBAAqB,GAAsD,EAAE,CAAA;oBACnF,KAAK,MAAM,YAAY,IAAI,eAAe,EAAE;wBAC1C,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAC/E,CAAC,YAAY,CAAC,EACd,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAClD,CAAA;wBACD,MAAM,4BAA4B,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,6BAA6B,CACtG,CAAC,YAAY,CAAC,EACd,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAClD,CAAA;wBACD,IAAI,YAAY,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,4BAA4B,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE;4BAC1G,sBAAsB,EAAE,CAAA;yBACzB;6BAAM;4BACL,qBAAqB,CAAC,IAAI,CAAC;gCACzB,MAAM,EAAE,IAAA,kBAAM,EAAC,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gCAC1G,mBAAmB,EAAE,4BAA4B,CAAC,qBAAqB,CAAC,CAAC,CAAC;6BAC3E,CAAC,CAAA;yBACH;qBACF;oBACD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,CAAA;gBAC1D,CAAC;aAAA;YAED,SAAS,qBAAqB,CAC5B,aAAgE,EAChE,QAAyD;gBAEzD,IAAA,aAAM,EAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,mBAAmB,KAAK,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YAC/I,CAAC;YAED,MAAM,cAAc,GAAG,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,SAAS,CAAA;YACnE,MAAM,GAAG,GAAG,MAAM,IAAA,2CAA8B,EAAC,GAAI,CAAC,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,CAAA;YACnG,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAE5C,MAAM,YAAY,GAAG,MAAM,IAAA,4BAAe,EAAC,GAAI,CAAC,CAAA;YAChD,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAA;YACpC,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAA;YACtC,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,YAAY,CAAC,iBAAkB,CAAC,CAAA;YAE5G,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC,SAAU,CAAC,CAAA;YAExE,8GAA8G;YAC9G,MAAM,uBAAuB,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,6BAA6B,CACrF,CAAC,EACD,MAAM,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,2BAAY,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE;gBAClH,mBAAmB,EAAE;oBACnB,CAAC,WAAY,CAAC,EAAG,CAAC,EAAE,WAAW,CAAC,KAAK;iBACtC;aACF,CAAC,CACH,CAAA;YACD,MAAM,yBAAyB,GAAG,MAAM,WAAW,CAAC,eAAe,CAAC,6BAA6B,CAC/F,CAAC,EACD,MAAM,WAAW,CAAC,eAAe,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,2BAAY,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,EAAE;gBACzI,mBAAmB,EAAE;oBACnB,CAAC,CAAC,CAAC,SAAU,CAAC,EAAE,WAAW,CAAC,KAAK;iBAClC;aACF,CAAC,CACH,CAAA;YAED,8FAA8F;YAC9F,MAAM,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAA;YACjC,MAAM,qBAAqB,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC,SAAU,EAAE,YAAY,CAAC,iBAAkB,CAAC,CAAA;YAC1G,IAAA,aAAM,EAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAChE,IAAA,aAAM,EAAC,qBAAqB,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAEtE,wBAAwB;YACxB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,sBAAU,CAAC,MAAM,CAAC,CAAA;YACpF,MAAM,SAAS,GAAG,IAAA,kBAAM,EAAC,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;YAChG,MAAM,cAAc,GAAG,MAAM,oBAAQ,CAAC,UAAU,CAC9C,GAAI,CAAC,QAAQ,EACb;gBACE,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,IAAI;gBACjD,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,QAAQ;aACtD,EACD,IAAI,2CAAoB,CAAC,MAAM,CAAC,EAChC,kBAA8B,EAC9B,KAAK,EACL;gBACE,OAAO,EAAE,IAAI,yBAAW,EAAE;gBAC1B,UAAU,EAAE,IAAI,4BAAc,EAAE;aACjC,CACF,CAAA;YACD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAC1D,MAAM,cAAc,CAAC,uBAAuB,CAAC,mCAAmC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YAE9F,+DAA+D;YAC/D,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,YAAa,CAAC,iBAAkB,CAAC,CAAA;YAExG,kDAAkD;YAClD,MAAM,mBAAmB,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,6BAA6B,CAC5F,CAAC,EACD,MAAM,cAAc,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,2BAAY,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE;gBAC7G,mBAAmB,EAAE;oBACnB,CAAC,GAAI,CAAC,EAAG,CAAC,EAAE,mCAAgB,CAAC,eAAe,CAAC,KAAK;iBACnD;aACF,CAAC,CACH,CAAA;YACD,IAAA,aAAM,EAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAA;YAC7C,IAAA,aAAM,EAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAA;YAE9C,sDAAsD;YACtD,MAAM,mBAAmB,GAAG,MAAM,kBAAkB,CAAC,cAAc,EAAE,CAAC,CAAC,SAAU,EAAE,YAAY,CAAC,iBAAkB,CAAC,CAAA;YACnH,IAAA,aAAM,EAAC,mBAAmB,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC9D,IAAA,aAAM,EAAC,mBAAmB,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAEpE,mFAAmF;YAEnF,iCAAiC;YACjC,MAAM,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,CAAA;YACzC,MAAM,eAAe,GAAG,2CAAoB,CAAC,mBAAmB,CAAC,MAAM,+BAA+B,CAAC,WAAW,CAAC,CAAC,CAAA;YAEpH,IAAA,aAAM,EAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAC/D,IAAA,aAAM,EAAC,eAAe,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAEtD,MAAM,WAAW,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAA;YAC7E,MAAM,gBAAgB,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,kBAAkB,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAA;YAEhH,IAAA,aAAM,EAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;YACpD,IAAA,aAAM,EAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;YACjD,IAAA,aAAM,EAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAA;YAE5C,MAAM,kBAAkB,GAAG,MAAM,oBAAQ,CAAC,UAAU,CAClD,GAAI,CAAC,QAAQ,EACb;gBACE,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,IAAI;gBACjD,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,QAAQ;aACtD,EACD,IAAI,2CAAoB,CAAC,MAAM,CAAC,EAChC,kBAA8B,EAC9B,KAAK,EACL;gBACE,OAAO,EAAE,IAAI,yBAAW,EAAE;gBAC1B,UAAU,EAAE,IAAI,4BAAc,EAAE;aACjC,CACF,CAAA;YACD,0CAA0C;YAC1C,MAAM,kBAAkB,CAAC,SAAS,CAAC,WAAW,EAAE,CAAA;YAChD,MAAM,uBAAuB,GAAG,MAAM,kBAAkB,CAAC,kBAAkB,EAAE,CAAC,CAAC,SAAU,EAAE,YAAY,CAAC,iBAAkB,CAAC,CAAA;YAC3H,IAAA,aAAM,EAAC,uBAAuB,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAClE,IAAA,aAAM,EAAC,uBAAuB,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACxE,qBAAqB,CAAC,uBAAuB,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAA;YACpH,qBAAqB,CAAC,uBAAuB,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAA;YACpH,qBAAqB,CAAC,uBAAuB,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAA;YAElH,MAAM,wCAAwC,GAAG,MAAM,kBAAkB,CAAC,eAAe,CAAC,uBAAuB,CAC/G,CAAC,EACD,yBAAyB,CAAC,EAAG,CAC9B,CAAA;YACD,IAAA,aAAM,EAAC,wCAAwC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAA;YAC7F,IAAA,aAAM,EAAC,wCAAwC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAA;YAC/F,IAAA,aAAM,EAAC,wCAAwC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAA;YACnG,MAAM,sCAAsC,GAAG,MAAM,kBAAkB,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC,EAAE,uBAAuB,CAAC,EAAG,CAAC,CAAA;YAC/I,IAAA,aAAM,EAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAA;YACzF,IAAA,aAAM,EAAC,sCAAsC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAA;YAC3F,IAAA,aAAM,EAAC,sCAAsC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAA;QACjG,CAAC,CAAA,CAAC,CAAA;IACJ,CAAC;CAAA,CAAC,CAAA;AAEF,gJAAgJ","sourcesContent":["import { Apis, IcureApi, ShaVersion, ua2hex } from '../../../icc-x-api'\nimport { CalendarItem } from '../../../icc-api/model/CalendarItem'\nimport { FilterChainMaintenanceTask, MaintenanceTask, PaginatedListMaintenanceTask } from '../../../icc-api/model/models'\nimport { before, describe, it } from 'mocha'\n\nimport { webcrypto } from 'crypto'\nimport 'isomorphic-fetch'\n\nimport { expect } from 'chai'\nimport { MaintenanceTaskAfterDateFilter } from '../../../icc-x-api/filters/MaintenanceTaskAfterDateFilter'\nimport { createNewHcpApi, getApiAndAddPrivateKeysForUser, getEnvironmentInitializer, patUsername, setLocalStorage } from '../../utils/test_utils'\nimport { TestKeyStorage, TestStorage } from '../../utils/TestStorage'\nimport { TestCryptoStrategies } from '../../utils/TestCryptoStrategies'\nimport { KeyPairUpdateRequest } from '../../../icc-x-api/maintenance/KeyPairUpdateRequest'\nimport { SecureDelegation } from '../../../icc-api/model/SecureDelegation'\nimport { getEnvVariables, TestVars } from '@icure/test-setup/types'\nimport AccessLevel = SecureDelegation.AccessLevelEnum\n\nasync function _getHcpKeyUpdateMaintenanceTask(delegateApi: Apis): Promise<MaintenanceTask> {\n  const delegateUser = await delegateApi.userApi.getCurrentUser()\n  const notifications: PaginatedListMaintenanceTask = await delegateApi.maintenanceTaskApi.filterMaintenanceTasksByWithUser(\n    delegateUser!,\n    undefined,\n    undefined,\n    new FilterChainMaintenanceTask({\n      filter: new MaintenanceTaskAfterDateFilter({\n        date: new Date().getTime() - 100000,\n      }),\n    })\n  )\n\n  return notifications.rows!.sort((a, b) => a.created! - b.created!)[notifications.rows!.length - 1]\n}\n\nsetLocalStorage(fetch)\n\nlet env: TestVars\n\ndescribe('Full battery of tests on crypto and keys', async function () {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  // TODO should give access back to old and new keys\n  it(`Create calendar item as a patient and get access back`, async () => {\n    async function decryptDataForPair(\n      api: Apis,\n      dataOwner1: string,\n      dataOwner2: string\n    ): Promise<{\n      failedDecryptionsCount: number\n      successfulDecryptions: { rawKey: string; accessControlSecret: string }[]\n    }> {\n      const allExchangeData = [\n        ...(await api.cryptoApi.exchangeData.base.getExchangeDataByDelegatorDelegatePair(dataOwner1, dataOwner2)),\n        ...(await api.cryptoApi.exchangeData.base.getExchangeDataByDelegatorDelegatePair(dataOwner2, dataOwner1)),\n      ]\n      let failedDecryptionsCount = 0\n      const successfulDecryptions: { rawKey: string; accessControlSecret: string }[] = []\n      for (const exchangeData of allExchangeData) {\n        const decryptedKey = await api.cryptoApi.exchangeData.base.tryDecryptExchangeKeys(\n          [exchangeData],\n          api.cryptoApi.userKeysManager.getDecryptionKeys()\n        )\n        const decryptedAccessControlSecret = await api.cryptoApi.exchangeData.base.tryDecryptAccessControlSecret(\n          [exchangeData],\n          api.cryptoApi.userKeysManager.getDecryptionKeys()\n        )\n        if (decryptedKey.failedDecryptions.length > 0 || decryptedAccessControlSecret.failedDecryptions.length > 0) {\n          failedDecryptionsCount++\n        } else {\n          successfulDecryptions.push({\n            rawKey: ua2hex(await api.cryptoApi.primitives.AES.exportKey(decryptedKey.successfulDecryptions[0], 'raw')),\n            accessControlSecret: decryptedAccessControlSecret.successfulDecryptions[0],\n          })\n        }\n      }\n      return { failedDecryptionsCount, successfulDecryptions }\n    }\n\n    function checkDecryptedDataHas(\n      decryptedData: { rawKey: string; accessControlSecret: string }[],\n      expected: { rawKey: string; accessControlSecret: string }\n    ) {\n      expect(decryptedData.filter((d) => d.rawKey === expected.rawKey && d.accessControlSecret === expected.accessControlSecret)).to.have.length(1)\n    }\n\n    const previousPubKey = env!.dataOwnerDetails[patUsername].publicKey\n    const api = await getApiAndAddPrivateKeysForUser(env!.iCureUrl, env!.dataOwnerDetails[patUsername])\n    const u = await api.userApi.getCurrentUser()\n\n    const delegateInfo = await createNewHcpApi(env!)\n    const delegateApi = delegateInfo.api\n    const delegateUser = delegateInfo.user\n    const delegateHcp = await delegateApi.healthcarePartyApi.getHealthcareParty(delegateUser.healthcarePartyId!)\n\n    const patient = await api.patientApi.getPatientWithUser(u, u.patientId!)\n\n    // Create a Record to share with delegateHcp: this will trigger the creation of a new aes exchange key as well\n    const initialRecordToDelegate = await api.calendarItemApi.createCalendarItemWithHcParty(\n      u,\n      await api.calendarItemApi.newInstance(u, new CalendarItem({ id: `${u.id}-ci-initial-to`, title: 'CI-INITIAL-TO' }), {\n        additionalDelegates: {\n          [delegateHcp!.id!]: AccessLevel.WRITE,\n        },\n      })\n    )\n    const initialRecordFromDelegate = await delegateApi.calendarItemApi.createCalendarItemWithHcParty(\n      u,\n      await delegateApi.calendarItemApi.newInstance(delegateUser, new CalendarItem({ id: `${u.id}-ci-initial-from`, title: 'CI-INITIAL-FROM' }), {\n        additionalDelegates: {\n          [u.patientId!]: AccessLevel.WRITE,\n        },\n      })\n    )\n\n    // Decrypting this AES Key to compare it with AES key decrypted with new key in the next steps\n    await api.cryptoApi.forceReload()\n    const originalDecryptedData = await decryptDataForPair(api, u.patientId!, delegateUser.healthcarePartyId!)\n    expect(originalDecryptedData.failedDecryptionsCount).to.equal(0)\n    expect(originalDecryptedData.successfulDecryptions.length).to.equal(2)\n\n    // And creates a new one\n    const newKey = await api.cryptoApi.primitives.RSA.generateKeyPair(ShaVersion.Sha256)\n    const publicKey = ua2hex(await api.cryptoApi.primitives.RSA.exportKey(newKey.publicKey, 'spki'))\n    const apiAfterNewKey = await IcureApi.initialise(\n      env!.iCureUrl,\n      {\n        username: env!.dataOwnerDetails[patUsername].user,\n        password: env!.dataOwnerDetails[patUsername].password,\n      },\n      new TestCryptoStrategies(newKey),\n      webcrypto as unknown as Crypto,\n      fetch,\n      {\n        storage: new TestStorage(),\n        keyStorage: new TestKeyStorage(),\n      }\n    )\n    const user = await apiAfterNewKey.userApi.getCurrentUser()\n    await apiAfterNewKey.icureMaintenanceTaskApi.createMaintenanceTasksForNewKeypair(user, newKey)\n\n    // User can get not encrypted information from iCure (HCP, ...)\n    const hcp = await apiAfterNewKey.healthcarePartyApi.getHealthcareParty(delegateUser!.healthcarePartyId!)\n\n    // User can create new data, using its new keyPair\n    const newRecordToDelegate = await apiAfterNewKey.calendarItemApi.createCalendarItemWithHcParty(\n      u,\n      await apiAfterNewKey.calendarItemApi.newInstance(u, new CalendarItem({ id: `${u.id}-ci-to`, title: 'CI-TO' }), {\n        additionalDelegates: {\n          [hcp!.id!]: SecureDelegation.AccessLevelEnum.WRITE,\n        },\n      })\n    )\n    expect(newRecordToDelegate.id).to.be.not.null\n    expect(newRecordToDelegate.rev).to.be.not.null\n\n    // But user can not decrypt data he previously created\n    const decryptedWithNewKey = await decryptDataForPair(apiAfterNewKey, u.patientId!, delegateUser.healthcarePartyId!)\n    expect(decryptedWithNewKey.failedDecryptionsCount).to.equal(2)\n    expect(decryptedWithNewKey.successfulDecryptions.length).to.equal(1)\n\n    // Delegate user will therefore give user access back to data he previously created\n\n    // Hcp gets his maintenance tasks\n    await delegateApi.cryptoApi.forceReload()\n    const maintenanceTask = KeyPairUpdateRequest.fromMaintenanceTask(await _getHcpKeyUpdateMaintenanceTask(delegateApi))\n\n    expect(maintenanceTask.concernedDataOwnerId).equals(patient.id)\n    expect(maintenanceTask.newPublicKey).equals(publicKey)\n\n    await delegateApi.icureMaintenanceTaskApi.applyKeyPairUpdate(maintenanceTask)\n    const updatedDataOwner = await delegateApi.dataOwnerApi.getCryptoActorStub(maintenanceTask.concernedDataOwnerId)\n\n    expect(updatedDataOwner.type).to.be.equal('patient')\n    expect(updatedDataOwner.stub).to.not.be.undefined\n    expect(updatedDataOwner.stub).to.not.be.null\n\n    const apiAfterSharedBack = await IcureApi.initialise(\n      env!.iCureUrl,\n      {\n        username: env!.dataOwnerDetails[patUsername].user,\n        password: env!.dataOwnerDetails[patUsername].password,\n      },\n      new TestCryptoStrategies(newKey),\n      webcrypto as unknown as Crypto,\n      fetch,\n      {\n        storage: new TestStorage(),\n        keyStorage: new TestKeyStorage(),\n      }\n    )\n    // User can access his previous data again\n    await apiAfterSharedBack.cryptoApi.forceReload()\n    const decryptedAfterShareBack = await decryptDataForPair(apiAfterSharedBack, u.patientId!, delegateUser.healthcarePartyId!)\n    expect(decryptedAfterShareBack.failedDecryptionsCount).to.equal(0)\n    expect(decryptedAfterShareBack.successfulDecryptions.length).to.equal(3)\n    checkDecryptedDataHas(decryptedAfterShareBack.successfulDecryptions, originalDecryptedData.successfulDecryptions[0])\n    checkDecryptedDataHas(decryptedAfterShareBack.successfulDecryptions, originalDecryptedData.successfulDecryptions[1])\n    checkDecryptedDataHas(decryptedAfterShareBack.successfulDecryptions, decryptedWithNewKey.successfulDecryptions[0])\n\n    const initialRecordFromDelegateAfterSharedBack = await apiAfterSharedBack.calendarItemApi.getCalendarItemWithUser(\n      u,\n      initialRecordFromDelegate.id!\n    )\n    expect(initialRecordFromDelegateAfterSharedBack.id).to.be.equal(initialRecordFromDelegate.id)\n    expect(initialRecordFromDelegateAfterSharedBack.rev).to.be.equal(initialRecordFromDelegate.rev)\n    expect(initialRecordFromDelegateAfterSharedBack.title).to.be.equal(initialRecordFromDelegate.title)\n    const initialRecordToDelegateAfterSharedBack = await apiAfterSharedBack.calendarItemApi.getCalendarItemWithUser(u, initialRecordToDelegate.id!)\n    expect(initialRecordToDelegateAfterSharedBack.id).to.be.equal(initialRecordToDelegate.id)\n    expect(initialRecordToDelegateAfterSharedBack.rev).to.be.equal(initialRecordToDelegate.rev)\n    expect(initialRecordToDelegateAfterSharedBack.title).to.be.equal(initialRecordToDelegate.title)\n  })\n})\n\n// TODO test that EXACTLY ONE maintenance task is created for each delegator AND delegate in a exchange key with the data owner with the new key\n"]}

package/test/icc-x-api/crypto/exchange-data-manager-test.d.ts

@@ -0,0 +1 @@
+import 'isomorphic-fetch';