@icure/api 8.6.18 → 8.7.0

package/icc-x-api/icc-receipt-x-api.js

@@ -17,6 +17,7 @@ const ShareMetadataBehaviour_1 = require("./crypto/ShareMetadataBehaviour");
 const SecureDelegation_1 = require("../icc-api/model/SecureDelegation");
 var AccessLevelEnum = SecureDelegation_1.SecureDelegation.AccessLevelEnum;
 const utils_1 = require("./utils");
+const compression_utils_1 = require("./utils/compression-utils");
 class IccReceiptXApi extends icc_api_1.IccReceiptApi {
     get headers() {
         return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, utils_1.EntityWithDelegationTypeName.Receipt));
@@ -126,7 +127,84 @@ class IccReceiptXApi extends icc_api_1.IccReceiptApi {
      */
     getAndTryDecryptReceiptAttachment(receipt_1, attachmentId_1) {
         return __awaiter(this, arguments, void 0, function* (receipt, attachmentId, validator = () => Promise.resolve(true)) {
-            return yield this.crypto.xapi.tryDecryptDataOf({ entity: receipt, type: utils_1.EntityWithDelegationTypeName.Receipt }, yield this.getReceiptAttachment(receipt.id, attachmentId), (x) => validator(x));
+            return yield this.crypto.xapi.tryDecryptDataOf({ entity: receipt, type: utils_1.EntityWithDelegationTypeName.Receipt }, yield this.getReceiptAttachment(receipt.id, attachmentId), (x) => __awaiter(this, void 0, void 0, function* () { return ((yield validator(x)) ? x : undefined); }));
+        });
+    }
+    // --- New data attachment methods (with compression support) ---
+    /**
+     * Compresses, encrypts, and uploads a receipt attachment using the new data attachment endpoint.
+     * Compression is attempted automatically; if the compressed result is not smaller, the original data is used.
+     * @param receipt a receipt.
+     * @param blobType the type of the attachment.
+     * @param attachment the raw attachment data.
+     * @param deflate if true, compress the attachment before uploading. Reliable decompression of compressed data requires version 26.5 of the API and all users to be using at least version 8.7.0 of the SDK    * @return the updated receipt.
+     */
+    encryptCompressAndSetReceiptDataAttachment(receipt_1, blobType_1, attachment_1) {
+        return __awaiter(this, arguments, void 0, function* (receipt, blobType, attachment, deflate = false) {
+            var _a;
+            const realDataSize = (0, utils_1.ua2ab)(attachment).byteLength;
+            const { data: dataToEncrypt, algorithm: compressionAlgorithm } = deflate
+                ? yield (0, compression_utils_1.compressData)(attachment)
+                : { data: (0, utils_1.ua2ab)(attachment), algorithm: undefined };
+            const { encryptedData, updatedEntity } = yield this.crypto.xapi.encryptDataOf(receipt, utils_1.EntityWithDelegationTypeName.Receipt, dataToEncrypt, (r) => this.modifyReceipt(r));
+            return yield this.setReceiptDataAttachment(receipt.id, blobType, (_a = updatedEntity === null || updatedEntity === void 0 ? void 0 : updatedEntity.rev) !== null && _a !== void 0 ? _a : receipt.rev, encryptedData, compressionAlgorithm, (0, compression_utils_1.getCompressionVersion)(), realDataSize);
+        });
+    }
+    /**
+     * Compresses and uploads an unencrypted receipt attachment using the new data attachment endpoint.
+     * Compression is attempted automatically; if the compressed result is not smaller, the original data is used.
+     * @param receipt a receipt.
+     * @param blobType the type of the attachment.
+     * @param attachment the raw attachment data.
+     * @param deflate if true, compress the attachment before uploading. Reliable decompression of compressed data requires version 26.5 of the API and all users to be using at least version 8.7.0 of the SDK    * @return the updated receipt.
+     */
+    setClearReceiptDataAttachment(receipt_1, blobType_1, attachment_1) {
+        return __awaiter(this, arguments, void 0, function* (receipt, blobType, attachment, deflate = false) {
+            const realDataSize = (0, utils_1.ua2ab)(attachment).byteLength;
+            const { data: dataToUpload, algorithm: compressionAlgorithm } = deflate
+                ? yield (0, compression_utils_1.compressData)(attachment)
+                : { data: (0, utils_1.ua2ab)(attachment), algorithm: undefined };
+            return yield this.setReceiptDataAttachment(receipt.id, blobType, receipt.rev, dataToUpload, compressionAlgorithm, (0, compression_utils_1.getCompressionVersion)(), realDataSize);
+        });
+    }
+    /**
+     * Gets a receipt's data attachment by blob type, decrypts it, and decompresses if needed.
+     * Throws if decryption fails.
+     * @param receipt a receipt.
+     * @param blobType the blob type of the attachment to retrieve.
+     * @param validator optionally a validator function which checks if the decryption was successful.
+     * @return the decrypted (and decompressed) attachment.
+     */
+    getAndDecryptReceiptDataAttachment(receipt_1, blobType_1) {
+        return __awaiter(this, arguments, void 0, function* (receipt, blobType, validator = () => Promise.resolve(true)) {
+            const retrieved = yield this.getAndTryDecryptReceiptDataAttachment(receipt, blobType, validator);
+            if (!retrieved.wasDecrypted)
+                throw new Error(`No valid key found to decrypt data of receipt ${receipt.id}.`);
+            return retrieved.data;
+        });
+    }
+    /**
+     * Gets a receipt's data attachment by blob type, tries to decrypt it, and decompresses if needed.
+     * @param receipt a receipt.
+     * @param blobType the blob type of the attachment to retrieve.
+     * @param validator optionally a validator function which checks if the decryption was successful.
+     * @return an object containing:
+     * - data: the decrypted (and decompressed) attachment, or the raw data if decryption failed.
+     * - wasDecrypted: if the data was successfully decrypted or not.
+     */
+    getAndTryDecryptReceiptDataAttachment(receipt_1, blobType_1) {
+        return __awaiter(this, arguments, void 0, function* (receipt, blobType, validator = () => Promise.resolve(true)) {
+            var _a, _b;
+            const compressionAlgorithm = (_b = (_a = receipt.attachmentInfos) === null || _a === void 0 ? void 0 : _a[blobType]) === null || _b === void 0 ? void 0 : _b.compressionAlgorithm;
+            return yield this.crypto.xapi.tryDecryptDataOf({ entity: receipt, type: utils_1.EntityWithDelegationTypeName.Receipt }, yield this.getReceiptAttachmentByBlobType(receipt.id, blobType), (decrypted) => __awaiter(this, void 0, void 0, function* () {
+                try {
+                    const data = compressionAlgorithm ? yield (0, compression_utils_1.decompressData)(decrypted, compressionAlgorithm) : decrypted;
+                    return (yield validator(data)) ? data : undefined;
+                }
+                catch (_a) {
+                    return undefined;
+                }
+            }));
         });
     }
     /**

package/icc-x-api/icc-receipt-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-receipt-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-receipt-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA0C;AAG1C,kDAAiD;AAEjD,0EAAgG;AAChG,4EAAwE;AAIxE,wEAAoE;AACpE,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AAIzD,mCAA6D;AAE7D,MAAa,cAAe,SAAQ,uBAAa;IAC/C,IAAI,OAAO;QACT,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,CAAC,EAAE,oCAA4B,CAAC,OAAO,CAAC,CAAC,CAAA;IAC7I,CAAC;IAED,YACE,IAAY,EACZ,OAAkC,EACjB,MAAqB,EACrB,YAA8B,EAC9B,cAAuB,EACxC,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAVtC,WAAM,GAAN,MAAM,CAAe;QACrB,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,mBAAc,GAAd,cAAc,CAAS;QASxC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IAClC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACG,WAAW;6DACf,IAAiB,EACjB,CAAM,EACN,UAII,EAAE;;YAEN,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,iCAC7B,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,KAAK,EAAE,mCAAmC,EAC1C,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAChD,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAC3G,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAChE,KAAK,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,mCAAI,EAAE,EACrB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,EAAE,IACnB,CAAA;YAEF,MAAM,gBAAgB,mCACjB,CAAC,OAAO,CAAC,qBAAqB,IAAI,IAAI;gBACvC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,CAAC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CACnI,CAAC,GACH,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,mBAAmB,mCAAI,EAAE,CAAC,CACxC,CAAA;YACD,OAAO,IAAI,MAAM,CAAC,OAAO,CACvB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI;iBACnB,sCAAsC,CACrC,OAAO,EACP,oCAA4B,CAAC,OAAO,EACpC,SAAS,EACT,SAAS,EACT,IAAI,EACJ,gBAAgB,EAChB,OAAO,CAAC,uBAAuB,CAChC;iBACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;QACH,CAAC;KAAA;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,IAAiB,EAAE,KAAa,EAAE,IAAmB,EAAE,QAAgB,EAAE,IAAiB;QACnG,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;aACnE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;aACxC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,EAAG,EAAE,IAAI,CAAC,GAAI,EAAE,QAAQ,EAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACpJ,CAAC;IAED;;;;;;OAMG;IACG,8BAA8B,CAAC,OAAuB,EAAE,QAAgB,EAAE,UAAoC;;;YAClH,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,oCAA4B,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAC7I,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CACtB,CAAA;YACD,OAAO,MAAM,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,EAAG,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,GAAG,mCAAI,OAAO,CAAC,GAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAA;QAC7H,CAAC;KAAA;IAED;;;;;;OAMG;IACG,yBAAyB,CAAC,OAAuB,EAAE,QAAgB,EAAE,UAAoC;;YAC7G,OAAO,MAAM,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,EAAG,EAAE,OAAO,CAAC,GAAI,EAAE,QAAQ,EAAE,IAAA,aAAK,EAAC,UAAU,CAAC,CAAC,CAAA;QAC3G,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,8BAA8B;6DAClC,OAAuB,EACvB,YAAoB,EACpB,YAA0D,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YAErF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;YAC1G,IAAI,CAAC,SAAS,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,OAAO,CAAC,EAAE,GAAG,CAAC,CAAA;YAC5G,OAAO,SAAS,CAAC,IAAI,CAAA;QACvB,CAAC;KAAA;IAED;;;;;;;;;OASG;IACG,iCAAiC;6DACrC,OAAuB,EACvB,YAAoB,EACpB,YAA0D,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YAErF,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAC5C,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,EAC/D,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAG,EAAE,YAAY,CAAC,EAC1D,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CACpB,CAAA;QACH,CAAC;KAAA;IAED;;OAEG;IACG,cAAc,CAAC,OAAuB;;YAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,CAAC,CAAA;QACzG,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,SAAS;6DACb,UAAkB,EAClB,OAAuB,EACvB,UAII,EAAE;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC;KAAA;IAED;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,OAAuB,EACvB,SAMC;;YAED,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAA;QAC/E,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,gBAAgB,CACpB,OAAuB,EACvB,SAMC;;YAED,8CAA8C;YAC9C,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,OAAO,EAAE,oCAA4B,CAAC,OAAO,CAAC,CAAA;YACrI,MAAM,aAAa,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;YAC3G,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAChE;gBACE,MAAM,EAAE,aAAa;gBACrB,IAAI,EAAE,oCAA4B,CAAC,OAAO;aAC3C,EACD,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;oBAClD,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;oBAC/C,oBAAoB,EAAE,+CAAsB,CAAC,KAAK;oBAClD,cAAc,EAAE,OAAO,CAAC,cAAc;iBACvC;aACF,CAAC,CACH,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAChC,CAAA;QACH,CAAC;KAAA;IAED;;;;OAIG;IACH,yBAAyB,CACvB,MAAsB;QAEtB,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,CAAC,CAAA;IACjI,CAAC;IAED;;;;OAIG;IACH,mBAAmB,CAAC,MAAsB;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IAC7G,CAAC;IAED;;;;;OAKG;IACH,uCAAuC,CAAC,MAAsB,EAAE,SAAmB;QACjF,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,iCAAiC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IACpJ,CAAC;CACF;AApSD,wCAoSC","sourcesContent":["import { IccReceiptApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport * as _ from 'lodash'\nimport * as models from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { ShareResult } from './utils/ShareResult'\nimport { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest'\nimport RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum\nimport { SecureDelegation } from '../icc-api/model/SecureDelegation'\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport { XHR } from '../icc-api/api/XHR'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\nimport { MaintenanceTask } from '../icc-api/model/models'\nimport { EntityWithDelegationTypeName, ua2ab } from './utils'\n\nexport class IccReceiptXApi extends IccReceiptApi implements EncryptedEntityXApi<models.Receipt> {\n  get headers(): Promise<Array<XHR.Header>> {\n    return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, EntityWithDelegationTypeName.Receipt))\n  }\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    private readonly crypto: IccCryptoXApi,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly autofillAuthor: boolean,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.dataOwnerApi = dataOwnerApi\n  }\n\n  /**\n   * Creates a new instance of receipt with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param r initialised data for the receipt. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used.\n   * - ignoreAutoDelegations: if true the data won't be shared with the autodelegations of the user, but only with additional delegates\n   * - alternateRootDelegation: by default a new entity is created with a root delegation from self to self. In keyless mode this is not possible,\n   * and instead the root delegation will be from self to another. You have to specify which delegate will be part of the root delegation.\n   * @return a new instance of receipt.\n   */\n  async newInstance(\n    user: models.User,\n    r: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: AccessLevelEnum }\n      ignoreAutoDelegations?: boolean\n      alternateRootDelegation?: string\n    } = {}\n  ): Promise<models.Receipt> {\n    const receipt = new models.Receipt({\n      ...(r ?? {}),\n      _type: 'org.taktik.icure.entities.Receipt',\n      id: r?.id ?? this.crypto.primitives.randomUuid(),\n      created: r?.created ?? new Date().getTime(),\n      modified: r?.modified ?? new Date().getTime(),\n      responsible: r?.responsible ?? (this.autofillAuthor ? this.dataOwnerApi.getDataOwnerIdOf(user) : undefined),\n      author: r?.author ?? (this.autofillAuthor ? user.id : undefined),\n      codes: r?.codes ?? [],\n      tags: r?.tags ?? [],\n    })\n\n    const extraDelegations = {\n      ...(options.ignoreAutoDelegations == true\n        ? {}\n        : Object.fromEntries(\n            [...(user.autoDelegations?.all ?? []), ...(user.autoDelegations?.medicalInformation ?? [])].map((d) => [d, AccessLevelEnum.WRITE])\n          )),\n      ...(options?.additionalDelegates ?? {}),\n    }\n    return new models.Receipt(\n      await this.crypto.xapi\n        .entityWithInitialisedEncryptedMetadata(\n          receipt,\n          EntityWithDelegationTypeName.Receipt,\n          undefined,\n          undefined,\n          true,\n          extraDelegations,\n          options.alternateRootDelegation\n        )\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  /**\n   * Creates a new receipt linked to a document and optionally attaches a blob to it.\n   * @param user the current user.\n   * @param docId the id of the document this receipt refers to.\n   * @param refs an array of reference strings to associate with the receipt.\n   * @param blobType the type of the blob attachment.\n   * @param blob the binary content to attach; if empty (byteLength == 0), no attachment is set.\n   * @return the created receipt, with the attachment set if the blob was non-empty.\n   */\n  logReceipt(user: models.User, docId: string, refs: Array<string>, blobType: string, blob: ArrayBuffer) {\n    return this.newInstance(user, { documentId: docId, references: refs })\n      .then((rcpt) => this.createReceipt(rcpt))\n      .then((rcpt) => (blob.byteLength != 0 ? this.setReceiptAttachmentForBlobType(rcpt.id!, rcpt.rev!, blobType, <any>blob) : Promise.resolve(rcpt)))\n  }\n\n  /**\n   * Adds an attachment to a receipt, encrypting it on client side using the encryption keys of the provided receipt.\n   * @param receipt a receipt.\n   * @param blobType the type of the attachment.\n   * @param attachment a attachment for the receipt.\n   * @return the updated receipt.\n   */\n  async encryptAndSetReceiptAttachment(receipt: models.Receipt, blobType: string, attachment: ArrayBuffer | Uint8Array): Promise<models.Receipt> {\n    const { encryptedData, updatedEntity } = await this.crypto.xapi.encryptDataOf(receipt, EntityWithDelegationTypeName.Receipt, attachment, (r) =>\n      this.modifyReceipt(r)\n    )\n    return await this.setReceiptAttachmentForBlobType(receipt.id!, updatedEntity?.rev ?? receipt.rev!, blobType, encryptedData)\n  }\n\n  /**\n   * Adds an unencrypted attachment to a receipt.\n   * @param receipt a receipt.\n   * @param blobType the type of the attachment.\n   * @param attachment a attachment for the receipt.\n   * @return the updated receipt.\n   */\n  async setClearReceiptAttachment(receipt: models.Receipt, blobType: string, attachment: ArrayBuffer | Uint8Array): Promise<models.Receipt> {\n    return await this.setReceiptAttachmentForBlobType(receipt.id!, receipt.rev!, blobType, ua2ab(attachment))\n  }\n\n  /**\n   * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt.\n   * @param receipt a receipt.\n   * @param attachmentId id of the attachment of this receipt to retrieve.\n   * @param validator optionally a validator function which checks if the decryption was successful. In cases where the receipt has many encryption\n   * keys and it is unclear which one should be used this function can help to detect bad decryptions.\n   * @return the decrypted attachment, if it could be decrypted, else the encrypted attachment.\n   */\n  async getAndDecryptReceiptAttachment(\n    receipt: models.Receipt,\n    attachmentId: string,\n    validator: (decrypted: ArrayBuffer) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<ArrayBuffer> {\n    const retrieved = await this.getAndTryDecryptReceiptAttachment(receipt, attachmentId, (x) => validator(x))\n    if (!retrieved.wasDecrypted) throw new Error(`No valid key found to decrypt data of receipt ${receipt.id}.`)\n    return retrieved.data\n  }\n\n  /**\n   * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt.\n   * @param receipt a receipt.\n   * @param attachmentId id of the attachment of this receipt to retrieve.\n   * @param validator optionally a validator function which checks if the decryption was successful. In cases where the receipt has many encryption\n   * keys and it is unclear which one should be used this function can help to detect bad decryptions.\n   * @return an object containing:\n   * - data: the decrypted attachment, if it could be decrypted, else the encrypted attachment.\n   * - wasDecrypted: if the data was successfully decrypted or not\n   */\n  async getAndTryDecryptReceiptAttachment(\n    receipt: models.Receipt,\n    attachmentId: string,\n    validator: (decrypted: ArrayBuffer) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<{ data: ArrayBuffer; wasDecrypted: boolean }> {\n    return await this.crypto.xapi.tryDecryptDataOf(\n      { entity: receipt, type: EntityWithDelegationTypeName.Receipt },\n      await this.getReceiptAttachment(receipt.id!, attachmentId),\n      (x) => validator(x)\n    )\n  }\n\n  /**\n   * @return if the logged data owner has write access to the content of the given receipt\n   */\n  async hasWriteAccess(receipt: models.Receipt): Promise<boolean> {\n    return this.crypto.xapi.hasWriteAccess({ entity: receipt, type: EntityWithDelegationTypeName.Receipt })\n  }\n\n  /**\n   * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the receipt.\n   * @param receipt the receipt to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareSecretIds: specifies which secret ids of the entity should be shared. If not provided all secret ids available to the current user will be shared\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * receipt does not have encrypted content.\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWith(\n    delegateId: string,\n    receipt: models.Receipt,\n    options: {\n      shareSecretIds?: string[]\n      requestedPermissions?: RequestedPermissionEnum\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.Receipt> {\n    return this.shareWithMany(receipt, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param receipt the receipt to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareSecretIds: specifies which secret ids of the entity should be shared. If not provided all secret ids available to the current user will be shared\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * receipt does not have encrypted content.\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWithMany(\n    receipt: models.Receipt,\n    delegates: {\n      [delegateId: string]: {\n        shareSecretIds?: string[]\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.Receipt> {\n    return (await this.tryShareWithMany(receipt, delegates)).updatedEntityOrThrow\n  }\n\n  /**\n   * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param receipt the receipt to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareSecretIds: specifies which secret ids of the entity should be shared. If not provided all secret ids available to the current user will be shared\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * receipt does not have encrypted content.\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async tryShareWithMany(\n    receipt: models.Receipt,\n    delegates: {\n      [delegateId: string]: {\n        shareSecretIds?: string[]\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<ShareResult<models.Receipt>> {\n    // All entities should have an encryption key.\n    const entityWithEncryptionKey = await this.crypto.xapi.ensureEncryptionKeysInitialised(receipt, EntityWithDelegationTypeName.Receipt)\n    const updatedEntity = entityWithEncryptionKey ? await this.modifyReceipt(entityWithEncryptionKey) : receipt\n    return this.crypto.xapi.simpleShareOrUpdateEncryptedEntityMetadata(\n      {\n        entity: updatedEntity,\n        type: EntityWithDelegationTypeName.Receipt,\n      },\n      Object.fromEntries(\n        Object.entries(delegates).map(([delegateId, options]) => [\n          delegateId,\n          {\n            requestedPermissions: options.requestedPermissions,\n            shareEncryptionKeys: options.shareEncryptionKey,\n            shareOwningEntityIds: ShareMetadataBehaviour.NEVER,\n            shareSecretIds: options.shareSecretIds,\n          },\n        ])\n      ),\n      (x) => this.bulkShareReceipt(x)\n    )\n  }\n\n  /**\n   * Retrieves the data owners that have access to the given receipt, along with their access levels.\n   * @param entity the receipt.\n   * @return an object containing a map of data owner ids to their access levels, and a flag indicating if there are unknown anonymous data owners.\n   */\n  getDataOwnersWithAccessTo(\n    entity: models.Receipt\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: AccessLevelEnum }; hasUnknownAnonymousDataOwners: boolean }> {\n    return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: EntityWithDelegationTypeName.Receipt })\n  }\n\n  /**\n   * Retrieves the encryption keys of the given receipt.\n   * @param entity the receipt.\n   * @return the encryption key ids.\n   */\n  getEncryptionKeysOf(entity: models.Receipt): Promise<string[]> {\n    return this.crypto.xapi.encryptionKeysOf({ entity, type: EntityWithDelegationTypeName.Receipt }, undefined)\n  }\n\n  /**\n   * Creates or updates de-anonymization metadata for the given receipt, allowing the specified delegates to\n   * identify the data owners that have access to it.\n   * @param entity the receipt.\n   * @param delegates the data owner ids for which to create de-anonymization metadata.\n   */\n  createDelegationDeAnonymizationMetadata(entity: models.Receipt, delegates: string[]): Promise<void> {\n    return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo({ entity, type: EntityWithDelegationTypeName.Receipt }, delegates)\n  }\n}\n"]}
+{"version":3,"file":"icc-receipt-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-receipt-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA0C;AAE1C,kDAAiD;AAEjD,0EAAgG;AAChG,4EAAwE;AAIxE,wEAAoE;AACpE,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AAIzD,mCAA6D;AAC7D,iEAA+F;AAE/F,MAAa,cAAe,SAAQ,uBAAa;IAC/C,IAAI,OAAO;QACT,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,CAAC,EAAE,oCAA4B,CAAC,OAAO,CAAC,CAAC,CAAA;IAC7I,CAAC;IAED,YACE,IAAY,EACZ,OAAkC,EACjB,MAAqB,EACrB,YAA8B,EAC9B,cAAuB,EACxC,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAVtC,WAAM,GAAN,MAAM,CAAe;QACrB,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,mBAAc,GAAd,cAAc,CAAS;QASxC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IAClC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACG,WAAW;6DACf,IAAiB,EACjB,CAAM,EACN,UAII,EAAE;;YAEN,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,iCAC7B,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,KAAK,EAAE,mCAAmC,EAC1C,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAChD,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAC3G,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAChE,KAAK,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,mCAAI,EAAE,EACrB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,EAAE,IACnB,CAAA;YAEF,MAAM,gBAAgB,mCACjB,CAAC,OAAO,CAAC,qBAAqB,IAAI,IAAI;gBACvC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,CAAC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CACnI,CAAC,GACH,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,mBAAmB,mCAAI,EAAE,CAAC,CACxC,CAAA;YACD,OAAO,IAAI,MAAM,CAAC,OAAO,CACvB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI;iBACnB,sCAAsC,CACrC,OAAO,EACP,oCAA4B,CAAC,OAAO,EACpC,SAAS,EACT,SAAS,EACT,IAAI,EACJ,gBAAgB,EAChB,OAAO,CAAC,uBAAuB,CAChC;iBACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;QACH,CAAC;KAAA;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,IAAiB,EAAE,KAAa,EAAE,IAAmB,EAAE,QAAgB,EAAE,IAAiB;QACnG,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;aACnE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;aACxC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,EAAG,EAAE,IAAI,CAAC,GAAI,EAAE,QAAQ,EAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACpJ,CAAC;IAED;;;;;;OAMG;IACG,8BAA8B,CAAC,OAAuB,EAAE,QAAgB,EAAE,UAAoC;;;YAClH,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,oCAA4B,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAC7I,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CACtB,CAAA;YACD,OAAO,MAAM,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,EAAG,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,GAAG,mCAAI,OAAO,CAAC,GAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAA;QAC7H,CAAC;KAAA;IAED;;;;;;OAMG;IACG,yBAAyB,CAAC,OAAuB,EAAE,QAAgB,EAAE,UAAoC;;YAC7G,OAAO,MAAM,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,EAAG,EAAE,OAAO,CAAC,GAAI,EAAE,QAAQ,EAAE,IAAA,aAAK,EAAC,UAAU,CAAC,CAAC,CAAA;QAC3G,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,8BAA8B;6DAClC,OAAuB,EACvB,YAAoB,EACpB,YAA0D,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YAErF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;YAC1G,IAAI,CAAC,SAAS,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,OAAO,CAAC,EAAE,GAAG,CAAC,CAAA;YAC5G,OAAO,SAAS,CAAC,IAAI,CAAA;QACvB,CAAC;KAAA;IAED;;;;;;;;;OASG;IACG,iCAAiC;6DACrC,OAAuB,EACvB,YAAoB,EACpB,YAA0D,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YAErF,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAC5C,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,EAC/D,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAG,EAAE,YAAY,CAAC,EAC1D,CAAO,CAAC,EAAE,EAAE,gDAAC,OAAA,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA,GAAA,CACpD,CAAA;QACH,CAAC;KAAA;IAED,iEAAiE;IAEjE;;;;;;;OAOG;IACG,0CAA0C;6DAC9C,OAAuB,EACvB,QAAgB,EAChB,UAAoC,EACpC,UAAmB,KAAK;;YAExB,MAAM,YAAY,GAAG,IAAA,aAAK,EAAC,UAAU,CAAC,CAAC,UAAU,CAAA;YACjD,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,oBAAoB,EAAE,GAAG,OAAO;gBACtE,CAAC,CAAC,MAAM,IAAA,gCAAY,EAAC,UAAU,CAAC;gBAChC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAA,aAAK,EAAC,UAAU,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;YAErD,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAC3E,OAAO,EACP,oCAA4B,CAAC,OAAO,EACpC,aAAa,EACb,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAC7B,CAAA;YACD,OAAO,MAAM,IAAI,CAAC,wBAAwB,CACxC,OAAO,CAAC,EAAG,EACX,QAAQ,EACR,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,GAAG,mCAAI,OAAO,CAAC,GAAI,EAClC,aAAa,EACb,oBAAoB,EACpB,IAAA,yCAAqB,GAAE,EACvB,YAAY,CACb,CAAA;QACH,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,6BAA6B;6DACjC,OAAuB,EACvB,QAAgB,EAChB,UAAoC,EACpC,UAAmB,KAAK;YAExB,MAAM,YAAY,GAAG,IAAA,aAAK,EAAC,UAAU,CAAC,CAAC,UAAU,CAAA;YACjD,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,oBAAoB,EAAE,GAAG,OAAO;gBACrE,CAAC,CAAC,MAAM,IAAA,gCAAY,EAAC,UAAU,CAAC;gBAChC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAA,aAAK,EAAC,UAAU,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;YAErD,OAAO,MAAM,IAAI,CAAC,wBAAwB,CACxC,OAAO,CAAC,EAAG,EACX,QAAQ,EACR,OAAO,CAAC,GAAI,EACZ,YAAY,EACZ,oBAAoB,EACpB,IAAA,yCAAqB,GAAE,EACvB,YAAY,CACb,CAAA;QACH,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,kCAAkC;6DACtC,OAAuB,EACvB,QAAgB,EAChB,YAA0D,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YAErF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,qCAAqC,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAChG,IAAI,CAAC,SAAS,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,OAAO,CAAC,EAAE,GAAG,CAAC,CAAA;YAC5G,OAAO,SAAS,CAAC,IAAI,CAAA;QACvB,CAAC;KAAA;IAED;;;;;;;;OAQG;IACG,qCAAqC;6DACzC,OAAuB,EACvB,QAAgB,EAChB,YAA0D,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;YAErF,MAAM,oBAAoB,GAAG,MAAA,MAAA,OAAO,CAAC,eAAe,0CAAG,QAAQ,CAAC,0CAAE,oBAAoB,CAAA;YACtF,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAC5C,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,EAC/D,MAAM,IAAI,CAAC,8BAA8B,CAAC,OAAO,CAAC,EAAG,EAAE,QAAQ,CAAC,EAChE,CAAO,SAAS,EAAE,EAAE;gBAClB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,oBAAoB,CAAC,CAAC,CAAC,MAAM,IAAA,kCAAc,EAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;oBACrG,OAAO,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;gBACnD,CAAC;gBAAC,WAAM,CAAC;oBACP,OAAO,SAAS,CAAA;gBAClB,CAAC;YACH,CAAC,CAAA,CACF,CAAA;QACH,CAAC;KAAA;IAED;;OAEG;IACG,cAAc,CAAC,OAAuB;;YAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,CAAC,CAAA;QACzG,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,SAAS;6DACb,UAAkB,EAClB,OAAuB,EACvB,UAII,EAAE;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC;KAAA;IAED;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,OAAuB,EACvB,SAMC;;YAED,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAA;QAC/E,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,gBAAgB,CACpB,OAAuB,EACvB,SAMC;;YAED,8CAA8C;YAC9C,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,OAAO,EAAE,oCAA4B,CAAC,OAAO,CAAC,CAAA;YACrI,MAAM,aAAa,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;YAC3G,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAChE;gBACE,MAAM,EAAE,aAAa;gBACrB,IAAI,EAAE,oCAA4B,CAAC,OAAO;aAC3C,EACD,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;oBAClD,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;oBAC/C,oBAAoB,EAAE,+CAAsB,CAAC,KAAK;oBAClD,cAAc,EAAE,OAAO,CAAC,cAAc;iBACvC;aACF,CAAC,CACH,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAChC,CAAA;QACH,CAAC;KAAA;IAED;;;;OAIG;IACH,yBAAyB,CACvB,MAAsB;QAEtB,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,CAAC,CAAA;IACjI,CAAC;IAED;;;;OAIG;IACH,mBAAmB,CAAC,MAAsB;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IAC7G,CAAC;IAED;;;;;OAKG;IACH,uCAAuC,CAAC,MAAsB,EAAE,SAAmB;QACjF,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,iCAAiC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IACpJ,CAAC;CACF;AAvZD,wCAuZC","sourcesContent":["import { IccReceiptApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport * as models from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { ShareResult } from './utils/ShareResult'\nimport { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest'\nimport RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum\nimport { SecureDelegation } from '../icc-api/model/SecureDelegation'\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport { XHR } from '../icc-api/api/XHR'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\nimport { MaintenanceTask } from '../icc-api/model/models'\nimport { EntityWithDelegationTypeName, ua2ab } from './utils'\nimport { compressData, decompressData, getCompressionVersion } from './utils/compression-utils'\n\nexport class IccReceiptXApi extends IccReceiptApi implements EncryptedEntityXApi<models.Receipt> {\n  get headers(): Promise<Array<XHR.Header>> {\n    return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, EntityWithDelegationTypeName.Receipt))\n  }\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    private readonly crypto: IccCryptoXApi,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly autofillAuthor: boolean,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.dataOwnerApi = dataOwnerApi\n  }\n\n  /**\n   * Creates a new instance of receipt with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param r initialised data for the receipt. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used.\n   * - ignoreAutoDelegations: if true the data won't be shared with the autodelegations of the user, but only with additional delegates\n   * - alternateRootDelegation: by default a new entity is created with a root delegation from self to self. In keyless mode this is not possible,\n   * and instead the root delegation will be from self to another. You have to specify which delegate will be part of the root delegation.\n   * @return a new instance of receipt.\n   */\n  async newInstance(\n    user: models.User,\n    r: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: AccessLevelEnum }\n      ignoreAutoDelegations?: boolean\n      alternateRootDelegation?: string\n    } = {}\n  ): Promise<models.Receipt> {\n    const receipt = new models.Receipt({\n      ...(r ?? {}),\n      _type: 'org.taktik.icure.entities.Receipt',\n      id: r?.id ?? this.crypto.primitives.randomUuid(),\n      created: r?.created ?? new Date().getTime(),\n      modified: r?.modified ?? new Date().getTime(),\n      responsible: r?.responsible ?? (this.autofillAuthor ? this.dataOwnerApi.getDataOwnerIdOf(user) : undefined),\n      author: r?.author ?? (this.autofillAuthor ? user.id : undefined),\n      codes: r?.codes ?? [],\n      tags: r?.tags ?? [],\n    })\n\n    const extraDelegations = {\n      ...(options.ignoreAutoDelegations == true\n        ? {}\n        : Object.fromEntries(\n            [...(user.autoDelegations?.all ?? []), ...(user.autoDelegations?.medicalInformation ?? [])].map((d) => [d, AccessLevelEnum.WRITE])\n          )),\n      ...(options?.additionalDelegates ?? {}),\n    }\n    return new models.Receipt(\n      await this.crypto.xapi\n        .entityWithInitialisedEncryptedMetadata(\n          receipt,\n          EntityWithDelegationTypeName.Receipt,\n          undefined,\n          undefined,\n          true,\n          extraDelegations,\n          options.alternateRootDelegation\n        )\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  /**\n   * Creates a new receipt linked to a document and optionally attaches a blob to it.\n   * @param user the current user.\n   * @param docId the id of the document this receipt refers to.\n   * @param refs an array of reference strings to associate with the receipt.\n   * @param blobType the type of the blob attachment.\n   * @param blob the binary content to attach; if empty (byteLength == 0), no attachment is set.\n   * @return the created receipt, with the attachment set if the blob was non-empty.\n   */\n  logReceipt(user: models.User, docId: string, refs: Array<string>, blobType: string, blob: ArrayBuffer) {\n    return this.newInstance(user, { documentId: docId, references: refs })\n      .then((rcpt) => this.createReceipt(rcpt))\n      .then((rcpt) => (blob.byteLength != 0 ? this.setReceiptAttachmentForBlobType(rcpt.id!, rcpt.rev!, blobType, <any>blob) : Promise.resolve(rcpt)))\n  }\n\n  /**\n   * Adds an attachment to a receipt, encrypting it on client side using the encryption keys of the provided receipt.\n   * @param receipt a receipt.\n   * @param blobType the type of the attachment.\n   * @param attachment a attachment for the receipt.\n   * @return the updated receipt.\n   */\n  async encryptAndSetReceiptAttachment(receipt: models.Receipt, blobType: string, attachment: ArrayBuffer | Uint8Array): Promise<models.Receipt> {\n    const { encryptedData, updatedEntity } = await this.crypto.xapi.encryptDataOf(receipt, EntityWithDelegationTypeName.Receipt, attachment, (r) =>\n      this.modifyReceipt(r)\n    )\n    return await this.setReceiptAttachmentForBlobType(receipt.id!, updatedEntity?.rev ?? receipt.rev!, blobType, encryptedData)\n  }\n\n  /**\n   * Adds an unencrypted attachment to a receipt.\n   * @param receipt a receipt.\n   * @param blobType the type of the attachment.\n   * @param attachment a attachment for the receipt.\n   * @return the updated receipt.\n   */\n  async setClearReceiptAttachment(receipt: models.Receipt, blobType: string, attachment: ArrayBuffer | Uint8Array): Promise<models.Receipt> {\n    return await this.setReceiptAttachmentForBlobType(receipt.id!, receipt.rev!, blobType, ua2ab(attachment))\n  }\n\n  /**\n   * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt.\n   * @param receipt a receipt.\n   * @param attachmentId id of the attachment of this receipt to retrieve.\n   * @param validator optionally a validator function which checks if the decryption was successful. In cases where the receipt has many encryption\n   * keys and it is unclear which one should be used this function can help to detect bad decryptions.\n   * @return the decrypted attachment, if it could be decrypted, else the encrypted attachment.\n   */\n  async getAndDecryptReceiptAttachment(\n    receipt: models.Receipt,\n    attachmentId: string,\n    validator: (decrypted: ArrayBuffer) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<ArrayBuffer> {\n    const retrieved = await this.getAndTryDecryptReceiptAttachment(receipt, attachmentId, (x) => validator(x))\n    if (!retrieved.wasDecrypted) throw new Error(`No valid key found to decrypt data of receipt ${receipt.id}.`)\n    return retrieved.data\n  }\n\n  /**\n   * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt.\n   * @param receipt a receipt.\n   * @param attachmentId id of the attachment of this receipt to retrieve.\n   * @param validator optionally a validator function which checks if the decryption was successful. In cases where the receipt has many encryption\n   * keys and it is unclear which one should be used this function can help to detect bad decryptions.\n   * @return an object containing:\n   * - data: the decrypted attachment, if it could be decrypted, else the encrypted attachment.\n   * - wasDecrypted: if the data was successfully decrypted or not\n   */\n  async getAndTryDecryptReceiptAttachment(\n    receipt: models.Receipt,\n    attachmentId: string,\n    validator: (decrypted: ArrayBuffer) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<{ data: ArrayBuffer; wasDecrypted: boolean }> {\n    return await this.crypto.xapi.tryDecryptDataOf(\n      { entity: receipt, type: EntityWithDelegationTypeName.Receipt },\n      await this.getReceiptAttachment(receipt.id!, attachmentId),\n      async (x) => ((await validator(x)) ? x : undefined)\n    )\n  }\n\n  // --- New data attachment methods (with compression support) ---\n\n  /**\n   * Compresses, encrypts, and uploads a receipt attachment using the new data attachment endpoint.\n   * Compression is attempted automatically; if the compressed result is not smaller, the original data is used.\n   * @param receipt a receipt.\n   * @param blobType the type of the attachment.\n   * @param attachment the raw attachment data.\n   * @param deflate if true, compress the attachment before uploading. Reliable decompression of compressed data requires version 26.5 of the API and all users to be using at least version 8.7.0 of the SDK    * @return the updated receipt.\n   */\n  async encryptCompressAndSetReceiptDataAttachment(\n    receipt: models.Receipt,\n    blobType: string,\n    attachment: ArrayBuffer | Uint8Array,\n    deflate: boolean = false\n  ): Promise<models.Receipt> {\n    const realDataSize = ua2ab(attachment).byteLength\n    const { data: dataToEncrypt, algorithm: compressionAlgorithm } = deflate\n      ? await compressData(attachment)\n      : { data: ua2ab(attachment), algorithm: undefined }\n\n    const { encryptedData, updatedEntity } = await this.crypto.xapi.encryptDataOf(\n      receipt,\n      EntityWithDelegationTypeName.Receipt,\n      dataToEncrypt,\n      (r) => this.modifyReceipt(r)\n    )\n    return await this.setReceiptDataAttachment(\n      receipt.id!,\n      blobType,\n      updatedEntity?.rev ?? receipt.rev!,\n      encryptedData,\n      compressionAlgorithm,\n      getCompressionVersion(),\n      realDataSize\n    )\n  }\n\n  /**\n   * Compresses and uploads an unencrypted receipt attachment using the new data attachment endpoint.\n   * Compression is attempted automatically; if the compressed result is not smaller, the original data is used.\n   * @param receipt a receipt.\n   * @param blobType the type of the attachment.\n   * @param attachment the raw attachment data.\n   * @param deflate if true, compress the attachment before uploading. Reliable decompression of compressed data requires version 26.5 of the API and all users to be using at least version 8.7.0 of the SDK    * @return the updated receipt.\n   */\n  async setClearReceiptDataAttachment(\n    receipt: models.Receipt,\n    blobType: string,\n    attachment: ArrayBuffer | Uint8Array,\n    deflate: boolean = false\n  ): Promise<models.Receipt> {\n    const realDataSize = ua2ab(attachment).byteLength\n    const { data: dataToUpload, algorithm: compressionAlgorithm } = deflate\n      ? await compressData(attachment)\n      : { data: ua2ab(attachment), algorithm: undefined }\n\n    return await this.setReceiptDataAttachment(\n      receipt.id!,\n      blobType,\n      receipt.rev!,\n      dataToUpload,\n      compressionAlgorithm,\n      getCompressionVersion(),\n      realDataSize\n    )\n  }\n\n  /**\n   * Gets a receipt's data attachment by blob type, decrypts it, and decompresses if needed.\n   * Throws if decryption fails.\n   * @param receipt a receipt.\n   * @param blobType the blob type of the attachment to retrieve.\n   * @param validator optionally a validator function which checks if the decryption was successful.\n   * @return the decrypted (and decompressed) attachment.\n   */\n  async getAndDecryptReceiptDataAttachment(\n    receipt: models.Receipt,\n    blobType: string,\n    validator: (decrypted: ArrayBuffer) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<ArrayBuffer> {\n    const retrieved = await this.getAndTryDecryptReceiptDataAttachment(receipt, blobType, validator)\n    if (!retrieved.wasDecrypted) throw new Error(`No valid key found to decrypt data of receipt ${receipt.id}.`)\n    return retrieved.data\n  }\n\n  /**\n   * Gets a receipt's data attachment by blob type, tries to decrypt it, and decompresses if needed.\n   * @param receipt a receipt.\n   * @param blobType the blob type of the attachment to retrieve.\n   * @param validator optionally a validator function which checks if the decryption was successful.\n   * @return an object containing:\n   * - data: the decrypted (and decompressed) attachment, or the raw data if decryption failed.\n   * - wasDecrypted: if the data was successfully decrypted or not.\n   */\n  async getAndTryDecryptReceiptDataAttachment(\n    receipt: models.Receipt,\n    blobType: string,\n    validator: (decrypted: ArrayBuffer) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<{ data: ArrayBuffer; wasDecrypted: boolean }> {\n    const compressionAlgorithm = receipt.attachmentInfos?.[blobType]?.compressionAlgorithm\n    return await this.crypto.xapi.tryDecryptDataOf(\n      { entity: receipt, type: EntityWithDelegationTypeName.Receipt },\n      await this.getReceiptAttachmentByBlobType(receipt.id!, blobType),\n      async (decrypted) => {\n        try {\n          const data = compressionAlgorithm ? await decompressData(decrypted, compressionAlgorithm) : decrypted\n          return (await validator(data)) ? data : undefined\n        } catch {\n          return undefined\n        }\n      }\n    )\n  }\n\n  /**\n   * @return if the logged data owner has write access to the content of the given receipt\n   */\n  async hasWriteAccess(receipt: models.Receipt): Promise<boolean> {\n    return this.crypto.xapi.hasWriteAccess({ entity: receipt, type: EntityWithDelegationTypeName.Receipt })\n  }\n\n  /**\n   * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the receipt.\n   * @param receipt the receipt to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareSecretIds: specifies which secret ids of the entity should be shared. If not provided all secret ids available to the current user will be shared\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * receipt does not have encrypted content.\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWith(\n    delegateId: string,\n    receipt: models.Receipt,\n    options: {\n      shareSecretIds?: string[]\n      requestedPermissions?: RequestedPermissionEnum\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.Receipt> {\n    return this.shareWithMany(receipt, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param receipt the receipt to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareSecretIds: specifies which secret ids of the entity should be shared. If not provided all secret ids available to the current user will be shared\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * receipt does not have encrypted content.\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWithMany(\n    receipt: models.Receipt,\n    delegates: {\n      [delegateId: string]: {\n        shareSecretIds?: string[]\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.Receipt> {\n    return (await this.tryShareWithMany(receipt, delegates)).updatedEntityOrThrow\n  }\n\n  /**\n   * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param receipt the receipt to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareSecretIds: specifies which secret ids of the entity should be shared. If not provided all secret ids available to the current user will be shared\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * receipt does not have encrypted content.\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async tryShareWithMany(\n    receipt: models.Receipt,\n    delegates: {\n      [delegateId: string]: {\n        shareSecretIds?: string[]\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<ShareResult<models.Receipt>> {\n    // All entities should have an encryption key.\n    const entityWithEncryptionKey = await this.crypto.xapi.ensureEncryptionKeysInitialised(receipt, EntityWithDelegationTypeName.Receipt)\n    const updatedEntity = entityWithEncryptionKey ? await this.modifyReceipt(entityWithEncryptionKey) : receipt\n    return this.crypto.xapi.simpleShareOrUpdateEncryptedEntityMetadata(\n      {\n        entity: updatedEntity,\n        type: EntityWithDelegationTypeName.Receipt,\n      },\n      Object.fromEntries(\n        Object.entries(delegates).map(([delegateId, options]) => [\n          delegateId,\n          {\n            requestedPermissions: options.requestedPermissions,\n            shareEncryptionKeys: options.shareEncryptionKey,\n            shareOwningEntityIds: ShareMetadataBehaviour.NEVER,\n            shareSecretIds: options.shareSecretIds,\n          },\n        ])\n      ),\n      (x) => this.bulkShareReceipt(x)\n    )\n  }\n\n  /**\n   * Retrieves the data owners that have access to the given receipt, along with their access levels.\n   * @param entity the receipt.\n   * @return an object containing a map of data owner ids to their access levels, and a flag indicating if there are unknown anonymous data owners.\n   */\n  getDataOwnersWithAccessTo(\n    entity: models.Receipt\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: AccessLevelEnum }; hasUnknownAnonymousDataOwners: boolean }> {\n    return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: EntityWithDelegationTypeName.Receipt })\n  }\n\n  /**\n   * Retrieves the encryption keys of the given receipt.\n   * @param entity the receipt.\n   * @return the encryption key ids.\n   */\n  getEncryptionKeysOf(entity: models.Receipt): Promise<string[]> {\n    return this.crypto.xapi.encryptionKeysOf({ entity, type: EntityWithDelegationTypeName.Receipt }, undefined)\n  }\n\n  /**\n   * Creates or updates de-anonymization metadata for the given receipt, allowing the specified delegates to\n   * identify the data owners that have access to it.\n   * @param entity the receipt.\n   * @param delegates the data owner ids for which to create de-anonymization metadata.\n   */\n  createDelegationDeAnonymizationMetadata(entity: models.Receipt, delegates: string[]): Promise<void> {\n    return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo({ entity, type: EntityWithDelegationTypeName.Receipt }, delegates)\n  }\n}\n"]}

package/icc-x-api/icc-topic-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-topic-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-topic-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAAoD;AAIpD,kDAAiD;AAGjD,0EAAgG;AAChG,wEAAoE;AAGpE,qFAAiF;AAKjF,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AACzD,IAAO,uBAAuB,GAAG,uCAAkB,CAAC,uBAAuB,CAAA;AAC3E,mCAAmJ;AAEnJ,4DAAwE;AACxE,kEAA8D;AAE9D,qCAAqC;AACrC,MAAa,YAAa,SAAQ,qBAAW;IAG3C,YACE,IAAY,EACZ,OAAkC,EACjB,MAAqB,EACrB,YAA8B,EAC9B,OAAmB,EACnB,cAAuB,EACxC,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,gBAA+B,CAAC,aAAa,CAAC,EAC9C,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAZtC,WAAM,GAAN,MAAM,CAAe;QACrB,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,YAAO,GAAP,OAAO,CAAY;QACnB,mBAAc,GAAd,cAAc,CAAS;QAWxC,IAAI,CAAC,eAAe,GAAG,IAAA,4BAAoB,EAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;IACtE,CAAC;IAED,IAAI,OAAO;QACT,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,CAAC,EAAE,oCAA4B,CAAC,KAAK,CAAC,CAAC,CAAA;IAC3I,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACG,WAAW;6DACf,IAAiB,EACjB,OAA8B,EAC9B,IAAW,EAAE,EAAE,8BAA8B;QAC7C,UAKI,EAAE;;YAEN,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;YAEjH,MAAM,KAAK,mCACN,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAChD,KAAK,EAAE,iCAAiC,EACxC,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAC3G,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAChE,KAAK,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,mCAAI,EAAE,EACrB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,EAAE,GACpB,CAAA;YAED,MAAM,gBAAgB,mCACjB,CAAC,OAAO,CAAC,qBAAqB,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAC3I,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,mBAAmB,mCAAI,EAAE,CAAC,CACxC,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GAAG,OAAO;gBACjB,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAC9C,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,EAC/D,MAAA,OAAO,CAAC,SAAS,mCAAI,qCAAiB,CAAC,sBAAsB,CAC9D;gBACH,CAAC,CAAC,SAAS,CAAA;YAEb,IAAI,OAAO,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAE7F,OAAO,IAAI,MAAM,CAAC,KAAK,CACrB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI;iBACnB,sCAAsC,CACrC,KAAK,EACL,oCAA4B,CAAC,KAAK,EAClC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,EACX,GAAG,EACH,IAAI,EACJ,gBAAgB,EAChB,OAAO,CAAC,uBAAuB,CAChC;iBACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;QACH,CAAC;KAAA;IAEK,OAAO,CAAC,MAA2B;;YACvC,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,oCAA4B,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAC5H,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CACvB,CAAA;QACH,CAAC;KAAA;IAEK,OAAO,CAAC,MAA2B;;YACvC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CACxC,MAAM,EACN,oCAA4B,CAAC,KAAK,EAClC,IAAI,CAAC,eAAe,EACpB,IAAI,EACJ,KAAK,EACL,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAC3B,CAAA;QACH,CAAC;KAAA;IAED;;;;OAIG;IACY,WAAW,CAAC,IAAW;;;;;YACpC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YAClD,MAAM,YAAY,GAAG,MAAM,OAAM,WAAW,YAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;YAChE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAA;YAC1D,OAAO,eAAe,CAAC,CAAC,CAAC,CAAA;QAC3B,CAAC;KAAA;IAED;;;;OAIG;IACG,kBAAkB,CAAC,KAAmB;;YAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oCAA4B,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;QACnH,CAAC;KAAA;IAED;;OAEG;IACG,cAAc,CAAC,KAAmB;;YACtC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oCAA4B,CAAC,KAAK,EAAE,CAAC,CAAA;QACrG,CAAC;KAAA;IAED;;;;;;;;;;;;;OAaG;IACG,SAAS;6DACb,UAAkB,EAClB,KAAmB,EACnB,UAKI,EAAE;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7D,CAAC;KAAA;IAED;;;;;;;;;;;;;OAaG;IACG,aAAa,CACjB,KAAmB,EACnB,SAOC;;YAED,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAA;QAC7E,CAAC;KAAA;IAED;;;;;;;;;;;;;;OAcG;IACG,gBAAgB,CACpB,KAAmB,EACnB,SAOC;;YAED,8CAA8C;YAC9C,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,KAAK,EAAE,oCAA4B,CAAC,KAAK,CAAC,CAAA;YACjI,MAAM,aAAa,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;YACvG,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI;iBACpB,0CAA0C,CACzC;gBACE,MAAM,EAAE,aAAa;gBACrB,IAAI,EAAE,oCAA4B,CAAC,KAAK;aACzC,EACD,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;oBAClD,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;oBAC/C,oBAAoB,EAAE,OAAO,CAAC,cAAc;oBAC5C,cAAc,EAAE,OAAO,CAAC,cAAc;iBACvC;aACF,CAAC,CACH,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAC/B;iBACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACjF,CAAC;KAAA;IAED,yBAAyB,CACvB,MAAoB;QAEpB,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,KAAK,EAAE,CAAC,CAAA;IAC/H,CAAC;IAED,mBAAmB,CAAC,MAAoB;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;IAC3G,CAAC;IAYc,cAAc;;;;6DAAC,IAAsB,EAAE,eAAwB,EAAE,KAAc,EAAE,gBAAyB,KAAK;;YAC5H,MAAM,IAAI,GAAG,MAAM,OAAM,cAAc,YAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAoB,CAAC,CAAA;YAC3F,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAA,IAAI,CAAC,IAAI,mCAAI,EAAE,CAAC,CAAA;YAC3D,uCACK,IAAI,KACP,IAAI,EAAE,eAAe,IACtB;QACH,CAAC;KAAA;IAED;;;;OAIG;IACY,QAAQ,CAAC,EAAU;;;;;YAChC,MAAM,KAAK,GAAG,MAAM,OAAM,QAAQ,YAAC,EAAE,CAAC,CAAA;YACtC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;YACnD,OAAO,eAAe,CAAC,CAAC,CAAC,CAAA;QAC3B,CAAC;KAAA;IAED;;;;OAIG;IACY,SAAS,CAAC,IAAe;;;;;YACtC,MAAM,MAAM,GAAG,MAAM,OAAM,SAAS,YAAC,IAAI,CAAC,CAAA;YAC1C,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACnC,CAAC;KAAA;IAED;;;;OAIG;IACY,WAAW,CAAC,IAAW;;;;;YACpC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YAClD,MAAM,aAAa,GAAG,MAAM,OAAM,WAAW,YAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;YACjE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAA;YAC3D,OAAO,eAAe,CAAC,CAAC,CAAC,CAAA;QAC3B,CAAC;KAAA;IAED;;;;OAIG;IACY,cAAc,CAAC,IAAmD,EAAE,OAAe;;YAChG,MAAM,IAAI,KAAK,CAAC,2GAA2G,CAAC,CAAA;QAC9H,CAAC;KAAA;IAED;;;;;OAKG;IACG,uBAAuB,CAAC,IAAmD,EAAE,KAAY;;;;;YAC7F,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE;gBACjE,oBAAoB,EAAE,uBAAuB,CAAC,UAAU;aACzD,CAAC,CAAA;YAEF,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,OAAM,cAAc,YAAC,IAAI,EAAE,YAAY,CAAC,EAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACtF,CAAC;KAAA;IAED;;;;;OAKG;IACG,iBAAiB,CAAC,IAA6B,EAAE,OAAe;;;;;YACpE,MAAM,YAAY,GAAG,MAAM,OAAM,iBAAiB,YAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YACjE,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAChD,CAAC;KAAA;IAEK,sBAAsB;6DAC1B,UAA8C,EAC9C,MAAyC,EACzC,UAA6C,EAC7C,UAA+B,EAAE;YAEjC,OAAO,MAAM,IAAA,+BAAuB,EAClC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,oCAA4B,CAAC,KAAK,EAClC,UAAU,EACV,MAAM,EACN,UAAU,EACV,OAAO,EACP,CAAO,SAAS,EAAE,EAAE,gDAAC,OAAA,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA,GAAA,CAC1D,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAA;QACxC,CAAC;KAAA;IAED,uCAAuC,CAAC,MAAa,EAAE,SAAmB;QACxE,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,iCAAiC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;IAClJ,CAAC;CACF;AA/WD,oCA+WC","sourcesContent":["import { IccAuthApi, IccTopicApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\n\nimport * as _ from 'lodash'\nimport * as models from '../icc-api/model/models'\nimport { ListOfIds, MaintenanceTask, TimingInfo, Topic, TopicRole } from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { SecureDelegation } from '../icc-api/model/SecureDelegation'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { ShareResult } from './utils/ShareResult'\nimport { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest'\nimport { XHR } from '../icc-api/api/XHR'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\nimport { FilterChainTopic } from '../icc-api/model/FilterChainTopic'\nimport { PaginatedListTopic } from '../icc-api/model/PaginatedListTopic'\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum\nimport { EncryptedFieldsManifest, EntityWithDelegationTypeName, parseEncryptedFields, subscribeToEntityEvents, SubscriptionOptions } from './utils'\nimport { AbstractFilter } from './filters/filters'\nimport { Connection, ConnectionImpl } from '../icc-api/model/Connection'\nimport { SecretIdUseOption } from './crypto/SecretIdUseOption'\n\n// noinspection JSUnusedGlobalSymbols\nexport class IccTopicXApi extends IccTopicApi implements EncryptedEntityXApi<models.Topic> {\n  private readonly encryptedFields: EncryptedFieldsManifest\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    private readonly crypto: IccCryptoXApi,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly authApi: IccAuthApi,\n    private readonly autofillAuthor: boolean,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    encryptedKeys: Array<string> = ['description'],\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n\n    this.encryptedFields = parseEncryptedFields(encryptedKeys, 'Topic.')\n  }\n\n  get headers(): Promise<Array<XHR.Header>> {\n    return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, EntityWithDelegationTypeName.Topic))\n  }\n\n  /**\n   * Creates a new instance of topic with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this topic refers to.\n   * @param c initialised data for the topic. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used.\n   * - sfkOption: specifies which sfk of the owning entity to use.\n   * - ignoreAutoDelegations: if true the data won't be shared with the autodelegations of the user, but only with additional delegates\n   * - alternateRootDelegation: by default a new entity is created with a root delegation from self to self. In keyless mode this is not possible,\n   * and instead the root delegation will be from self to another. You have to specify which delegate will be part of the root delegation.\n   * @return a new instance of topic.\n   */\n  async newInstance(\n    user: models.User,\n    patient: models.Patient | null,\n    c: Topic = {}, // TODO: Why this isn't Topic?\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: AccessLevelEnum }\n      sfkOption?: SecretIdUseOption\n      ignoreAutoDelegations?: boolean\n      alternateRootDelegation?: string\n    } = {}\n  ) {\n    if (!patient && options.sfkOption) throw new Error('preferredSfk can only be specified if patient is specified.')\n\n    const topic = {\n      ...(c ?? {}),\n      id: c?.id ?? this.crypto.primitives.randomUuid(),\n      _type: 'org.taktik.icure.entities.Topic',\n      created: c?.created ?? new Date().getTime(),\n      modified: c?.modified ?? new Date().getTime(),\n      responsible: c?.responsible ?? (this.autofillAuthor ? this.dataOwnerApi.getDataOwnerIdOf(user) : undefined),\n      author: c?.author ?? (this.autofillAuthor ? user.id : undefined),\n      codes: c?.codes ?? [],\n      tags: c?.tags ?? [],\n    }\n\n    const extraDelegations = {\n      ...(options.ignoreAutoDelegations == true ? {} : Object.fromEntries((user.autoDelegations?.all ?? []).map((d) => [d, AccessLevelEnum.WRITE]))),\n      ...(options?.additionalDelegates ?? {}),\n    }\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk = patient\n      ? await this.crypto.xapi.resolveSecretIdUseOptions(\n          { entity: patient, type: EntityWithDelegationTypeName.Patient },\n          options.sfkOption ?? SecretIdUseOption.UseAnySharedWithParent\n        )\n      : undefined\n\n    if (patient && !sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`)\n\n    return new models.Topic(\n      await this.crypto.xapi\n        .entityWithInitialisedEncryptedMetadata(\n          topic,\n          EntityWithDelegationTypeName.Topic,\n          patient?.id,\n          sfk,\n          true,\n          extraDelegations,\n          options.alternateRootDelegation\n        )\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  async decrypt(topics: Array<models.Topic>) {\n    return (await this.crypto.xapi.tryDecryptEntities(topics, EntityWithDelegationTypeName.Topic, (x) => new models.Topic(x))).map(\n      ({ entity }) => entity\n    )\n  }\n\n  async encrypt(topics: Array<models.Topic>): Promise<Array<models.Topic>> {\n    return this.crypto.xapi.tryEncryptEntities(\n      topics,\n      EntityWithDelegationTypeName.Topic,\n      this.encryptedFields,\n      true,\n      false,\n      (x) => new models.Topic(x)\n    )\n  }\n\n  /**\n   * Create and share a new topic with other participants.\n   * @param body the topic to create.\n   * @return the created topic.\n   */\n  override async createTopic(body: Topic): Promise<Topic> {\n    const encryptedTopics = await this.encrypt([body])\n    const createdTopic = await super.createTopic(encryptedTopics[0])\n    const decryptedTopics = await this.decrypt([createdTopic])\n    return decryptedTopics[0]\n  }\n\n  /**\n   * @param topic a topic\n   * @return the id of the patient that the topic refers to, retrieved from the encrypted metadata. Normally there should only be one element\n   * in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(topic: models.Topic): Promise<string[]> {\n    return this.crypto.xapi.owningEntityIdsOf({ entity: topic, type: EntityWithDelegationTypeName.Topic }, undefined)\n  }\n\n  /**\n   * @return if the logged data owner has write access to the content of the given topic\n   */\n  async hasWriteAccess(topic: models.Topic): Promise<boolean> {\n    return this.crypto.xapi.hasWriteAccess({ entity: topic, type: EntityWithDelegationTypeName.Topic })\n  }\n\n  /**\n   * Share an existing topic with other data owners, allowing them to access the non-encrypted data of the topic and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the topic.\n   * @param topic the topic to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareSecretIds: specifies which secret ids of the entity should be shared. If not provided all secret ids available to the current user will be shared\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - sharePatientId: specifies if the id of the patient that this topic refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWith(\n    delegateId: string,\n    topic: models.Topic,\n    options: {\n      shareSecretIds?: string[]\n      requestedPermissions?: RequestedPermissionEnum\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.Topic> {\n    return this.shareWithMany(topic, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing topic with other data owners, allowing them to access the non-encrypted data of the topic and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param topic the topic to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareSecretIds: specifies which secret ids of the entity should be shared. If not provided all secret ids available to the current user will be shared\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * topic does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this topic refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWithMany(\n    topic: models.Topic,\n    delegates: {\n      [delegateId: string]: {\n        shareSecretIds?: string[]\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.Topic> {\n    return (await this.tryShareWithMany(topic, delegates)).updatedEntityOrThrow\n  }\n\n  /**\n   * Share an existing topic with other data owners, allowing them to access the non-encrypted data of the topic and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param topic the topic to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareSecretIds: specifies which secret ids of the entity should be shared. If not provided all secret ids available to the current user will be shared\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * topic does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this topic refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async tryShareWithMany(\n    topic: models.Topic,\n    delegates: {\n      [delegateId: string]: {\n        shareSecretIds?: string[]\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<ShareResult<models.Topic>> {\n    // All entities should have an encryption key.\n    const entityWithEncryptionKey = await this.crypto.xapi.ensureEncryptionKeysInitialised(topic, EntityWithDelegationTypeName.Topic)\n    const updatedEntity = entityWithEncryptionKey ? await this.modifyTopic(entityWithEncryptionKey) : topic\n    return this.crypto.xapi\n      .simpleShareOrUpdateEncryptedEntityMetadata(\n        {\n          entity: updatedEntity,\n          type: EntityWithDelegationTypeName.Topic,\n        },\n        Object.fromEntries(\n          Object.entries(delegates).map(([delegateId, options]) => [\n            delegateId,\n            {\n              requestedPermissions: options.requestedPermissions,\n              shareEncryptionKeys: options.shareEncryptionKey,\n              shareOwningEntityIds: options.sharePatientId,\n              shareSecretIds: options.shareSecretIds,\n            },\n          ])\n        ),\n        (x) => this.bulkShareTopics(x)\n      )\n      .then((r) => r.mapSuccessAsync((e) => this.decrypt([e]).then((es) => es[0])))\n  }\n\n  getDataOwnersWithAccessTo(\n    entity: models.Topic\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: AccessLevelEnum }; hasUnknownAnonymousDataOwners: boolean }> {\n    return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: EntityWithDelegationTypeName.Topic })\n  }\n\n  getEncryptionKeysOf(entity: models.Topic): Promise<string[]> {\n    return this.crypto.xapi.encryptionKeysOf({ entity, type: EntityWithDelegationTypeName.Topic }, undefined)\n  }\n\n  /**\n   * Filter and decrypt topics by the given filter.\n   * @param body the filter to apply.\n   * @param startDocumentId the document id to start from (inclusive).\n   * @param limit the maximum number of topics to return in the page.\n   * @param collectTiming add timing information to the response\n   * @return a paginated list of topics.\n   */\n  override async filterTopicsBy(body: FilterChainTopic, startDocumentId?: string, limit?: number, collectTiming?: false): Promise<PaginatedListTopic>\n  override async filterTopicsBy(body: FilterChainTopic, startDocumentId?: string, limit?: number, collectTiming?: true): Promise<PaginatedListTopic & TimingInfo>\n  override async filterTopicsBy(body: FilterChainTopic, startDocumentId?: string, limit?: number, collectTiming: boolean = false): Promise<PaginatedListTopic> {\n    const page = await super.filterTopicsBy(body, startDocumentId, limit, collectTiming as any)\n    const decryptedTopics = await this.decrypt(page.rows ?? [])\n    return {\n      ...page,\n      rows: decryptedTopics,\n    }\n  }\n\n  /**\n   * Obtain the topic with the given id and decrypt it.\n   * @param id the id of the topic to retrieve.\n   * @return the decrypted topic.\n   */\n  override async getTopic(id: string): Promise<Topic> {\n    const topic = await super.getTopic(id)\n    const decryptedTopics = await this.decrypt([topic])\n    return decryptedTopics[0]\n  }\n\n  /**\n   * Obtain the topics with the given ids and decrypt them.\n   * @param body the ids of the topics to retrieve.\n   * @return the decrypted topics.\n   */\n  override async getTopics(body: ListOfIds): Promise<Array<Topic>> {\n    const topics = await super.getTopics(body)\n    return await this.decrypt(topics)\n  }\n\n  /**\n   * Update and encrypt the given topic.\n   * @param body the topic to update.\n   * @return the updated decrypted topic.\n   */\n  override async modifyTopic(body: Topic): Promise<Topic> {\n    const encryptedTopics = await this.encrypt([body])\n    const modifiedTopic = await super.modifyTopic(encryptedTopics[0])\n    const decryptedTopics = await this.decrypt([modifiedTopic])\n    return decryptedTopics[0]\n  }\n\n  /**\n   * @internal this method is for internal use only and may be changed without notice\n   * @param body data owner id of the data owner to which the participant should be added and the topic role of the participant.\n   * @param topicId Id of the topic to which the participant should be added.\n   */\n  override async addParticipant(body: { dataOwnerId: string; topicRole: TopicRole }, topicId: string): Promise<Topic> {\n    throw new Error('Cannot add participant to topic without sharing it first. You should use addParticipantWithTopic instead.')\n  }\n\n  /**\n   * This method is similar to {@link addParticipant} but it also shares the topic with the data owner before adding the participant.\n   * @param body data owner id of the data owner to which the participant should be added and the topic role of the participant.\n   * @param topic the topic to share and to which the participant should be added.\n   * @return the updated topic.\n   */\n  async addParticipantWithTopic(body: { dataOwnerId: string; topicRole: TopicRole }, topic: Topic): Promise<Topic> {\n    const updatedTopic = await this.shareWith(body.dataOwnerId, topic, {\n      requestedPermissions: RequestedPermissionEnum.FULL_WRITE,\n    })\n\n    return (await this.decrypt([await super.addParticipant(body, updatedTopic.id!)]))[0]\n  }\n\n  /**\n   * Remove the participant with the given data owner id from the topic with the given id.\n   * @param body data owner id of the participant to remove.\n   * @param topicId Id of the topic from which the participant should be removed.\n   * @return the updated decrypted topic.\n   */\n  async removeParticipant(body: { dataOwnerId: string }, topicId: string): Promise<Topic> {\n    const updatedTopic = await super.removeParticipant(body, topicId)\n    return (await this.decrypt([updatedTopic]))[0]\n  }\n\n  async subscribeToTopicEvents(\n    eventTypes: ('CREATE' | 'UPDATE' | 'DELETE')[],\n    filter: AbstractFilter<Topic> | undefined,\n    eventFired: (message: Topic) => Promise<void>,\n    options: SubscriptionOptions = {}\n  ): Promise<Connection> {\n    return await subscribeToEntityEvents(\n      this.host,\n      this.authApi,\n      EntityWithDelegationTypeName.Topic,\n      eventTypes,\n      filter,\n      eventFired,\n      options,\n      async (encrypted) => (await this.decrypt([encrypted]))[0]\n    ).then((rs) => new ConnectionImpl(rs))\n  }\n\n  createDelegationDeAnonymizationMetadata(entity: Topic, delegates: string[]): Promise<void> {\n    return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo({ entity, type: EntityWithDelegationTypeName.Topic }, delegates)\n  }\n}\n"]}
+{"version":3,"file":"icc-topic-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-topic-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAAoD;AAGpD,kDAAiD;AAGjD,0EAAgG;AAChG,wEAAoE;AAGpE,qFAAiF;AAKjF,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AACzD,IAAO,uBAAuB,GAAG,uCAAkB,CAAC,uBAAuB,CAAA;AAC3E,mCAAmJ;AAEnJ,4DAAwE;AACxE,kEAA8D;AAE9D,qCAAqC;AACrC,MAAa,YAAa,SAAQ,qBAAW;IAG3C,YACE,IAAY,EACZ,OAAkC,EACjB,MAAqB,EACrB,YAA8B,EAC9B,OAAmB,EACnB,cAAuB,EACxC,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,gBAA+B,CAAC,aAAa,CAAC,EAC9C,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAZtC,WAAM,GAAN,MAAM,CAAe;QACrB,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,YAAO,GAAP,OAAO,CAAY;QACnB,mBAAc,GAAd,cAAc,CAAS;QAWxC,IAAI,CAAC,eAAe,GAAG,IAAA,4BAAoB,EAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;IACtE,CAAC;IAED,IAAI,OAAO;QACT,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,CAAC,EAAE,oCAA4B,CAAC,KAAK,CAAC,CAAC,CAAA;IAC3I,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACG,WAAW;6DACf,IAAiB,EACjB,OAA8B,EAC9B,IAAW,EAAE,EAAE,8BAA8B;QAC7C,UAKI,EAAE;;YAEN,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;YAEjH,MAAM,KAAK,mCACN,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAChD,KAAK,EAAE,iCAAiC,EACxC,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAC3G,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAChE,KAAK,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,mCAAI,EAAE,EACrB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,EAAE,GACpB,CAAA;YAED,MAAM,gBAAgB,mCACjB,CAAC,OAAO,CAAC,qBAAqB,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAC3I,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,mBAAmB,mCAAI,EAAE,CAAC,CACxC,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GAAG,OAAO;gBACjB,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAC9C,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAA4B,CAAC,OAAO,EAAE,EAC/D,MAAA,OAAO,CAAC,SAAS,mCAAI,qCAAiB,CAAC,sBAAsB,CAC9D;gBACH,CAAC,CAAC,SAAS,CAAA;YAEb,IAAI,OAAO,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAE7F,OAAO,IAAI,MAAM,CAAC,KAAK,CACrB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI;iBACnB,sCAAsC,CACrC,KAAK,EACL,oCAA4B,CAAC,KAAK,EAClC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,EACX,GAAG,EACH,IAAI,EACJ,gBAAgB,EAChB,OAAO,CAAC,uBAAuB,CAChC;iBACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;QACH,CAAC;KAAA;IAEK,OAAO,CAAC,MAA2B;;YACvC,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,oCAA4B,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAC5H,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CACvB,CAAA;QACH,CAAC;KAAA;IAEK,OAAO,CAAC,MAA2B;;YACvC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CACxC,MAAM,EACN,oCAA4B,CAAC,KAAK,EAClC,IAAI,CAAC,eAAe,EACpB,IAAI,EACJ,KAAK,EACL,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAC3B,CAAA;QACH,CAAC;KAAA;IAED;;;;OAIG;IACY,WAAW,CAAC,IAAW;;;;;YACpC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YAClD,MAAM,YAAY,GAAG,MAAM,OAAM,WAAW,YAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;YAChE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAA;YAC1D,OAAO,eAAe,CAAC,CAAC,CAAC,CAAA;QAC3B,CAAC;KAAA;IAED;;;;OAIG;IACG,kBAAkB,CAAC,KAAmB;;YAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oCAA4B,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;QACnH,CAAC;KAAA;IAED;;OAEG;IACG,cAAc,CAAC,KAAmB;;YACtC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oCAA4B,CAAC,KAAK,EAAE,CAAC,CAAA;QACrG,CAAC;KAAA;IAED;;;;;;;;;;;;;OAaG;IACG,SAAS;6DACb,UAAkB,EAClB,KAAmB,EACnB,UAKI,EAAE;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7D,CAAC;KAAA;IAED;;;;;;;;;;;;;OAaG;IACG,aAAa,CACjB,KAAmB,EACnB,SAOC;;YAED,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAA;QAC7E,CAAC;KAAA;IAED;;;;;;;;;;;;;;OAcG;IACG,gBAAgB,CACpB,KAAmB,EACnB,SAOC;;YAED,8CAA8C;YAC9C,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,KAAK,EAAE,oCAA4B,CAAC,KAAK,CAAC,CAAA;YACjI,MAAM,aAAa,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;YACvG,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI;iBACpB,0CAA0C,CACzC;gBACE,MAAM,EAAE,aAAa;gBACrB,IAAI,EAAE,oCAA4B,CAAC,KAAK;aACzC,EACD,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;oBAClD,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;oBAC/C,oBAAoB,EAAE,OAAO,CAAC,cAAc;oBAC5C,cAAc,EAAE,OAAO,CAAC,cAAc;iBACvC;aACF,CAAC,CACH,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAC/B;iBACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACjF,CAAC;KAAA;IAED,yBAAyB,CACvB,MAAoB;QAEpB,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,KAAK,EAAE,CAAC,CAAA;IAC/H,CAAC;IAED,mBAAmB,CAAC,MAAoB;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;IAC3G,CAAC;IAYc,cAAc;;;;6DAAC,IAAsB,EAAE,eAAwB,EAAE,KAAc,EAAE,gBAAyB,KAAK;;YAC5H,MAAM,IAAI,GAAG,MAAM,OAAM,cAAc,YAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAoB,CAAC,CAAA;YAC3F,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAA,IAAI,CAAC,IAAI,mCAAI,EAAE,CAAC,CAAA;YAC3D,uCACK,IAAI,KACP,IAAI,EAAE,eAAe,IACtB;QACH,CAAC;KAAA;IAED;;;;OAIG;IACY,QAAQ,CAAC,EAAU;;;;;YAChC,MAAM,KAAK,GAAG,MAAM,OAAM,QAAQ,YAAC,EAAE,CAAC,CAAA;YACtC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;YACnD,OAAO,eAAe,CAAC,CAAC,CAAC,CAAA;QAC3B,CAAC;KAAA;IAED;;;;OAIG;IACY,SAAS,CAAC,IAAe;;;;;YACtC,MAAM,MAAM,GAAG,MAAM,OAAM,SAAS,YAAC,IAAI,CAAC,CAAA;YAC1C,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACnC,CAAC;KAAA;IAED;;;;OAIG;IACY,WAAW,CAAC,IAAW;;;;;YACpC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YAClD,MAAM,aAAa,GAAG,MAAM,OAAM,WAAW,YAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;YACjE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAA;YAC3D,OAAO,eAAe,CAAC,CAAC,CAAC,CAAA;QAC3B,CAAC;KAAA;IAED;;;;OAIG;IACY,cAAc,CAAC,IAAmD,EAAE,OAAe;;YAChG,MAAM,IAAI,KAAK,CAAC,2GAA2G,CAAC,CAAA;QAC9H,CAAC;KAAA;IAED;;;;;OAKG;IACG,uBAAuB,CAAC,IAAmD,EAAE,KAAY;;;;;YAC7F,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE;gBACjE,oBAAoB,EAAE,uBAAuB,CAAC,UAAU;aACzD,CAAC,CAAA;YAEF,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,OAAM,cAAc,YAAC,IAAI,EAAE,YAAY,CAAC,EAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACtF,CAAC;KAAA;IAED;;;;;OAKG;IACG,iBAAiB,CAAC,IAA6B,EAAE,OAAe;;;;;YACpE,MAAM,YAAY,GAAG,MAAM,OAAM,iBAAiB,YAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YACjE,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAChD,CAAC;KAAA;IAEK,sBAAsB;6DAC1B,UAA8C,EAC9C,MAAyC,EACzC,UAA6C,EAC7C,UAA+B,EAAE;YAEjC,OAAO,MAAM,IAAA,+BAAuB,EAClC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,oCAA4B,CAAC,KAAK,EAClC,UAAU,EACV,MAAM,EACN,UAAU,EACV,OAAO,EACP,CAAO,SAAS,EAAE,EAAE,gDAAC,OAAA,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA,GAAA,CAC1D,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAA;QACxC,CAAC;KAAA;IAED,uCAAuC,CAAC,MAAa,EAAE,SAAmB;QACxE,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,iCAAiC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,oCAA4B,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;IAClJ,CAAC;CACF;AA/WD,oCA+WC","sourcesContent":["import { IccAuthApi, IccTopicApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\n\nimport * as models from '../icc-api/model/models'\nimport { ListOfIds, MaintenanceTask, TimingInfo, Topic, TopicRole } from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { SecureDelegation } from '../icc-api/model/SecureDelegation'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { ShareResult } from './utils/ShareResult'\nimport { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest'\nimport { XHR } from '../icc-api/api/XHR'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\nimport { FilterChainTopic } from '../icc-api/model/FilterChainTopic'\nimport { PaginatedListTopic } from '../icc-api/model/PaginatedListTopic'\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum\nimport { EncryptedFieldsManifest, EntityWithDelegationTypeName, parseEncryptedFields, subscribeToEntityEvents, SubscriptionOptions } from './utils'\nimport { AbstractFilter } from './filters/filters'\nimport { Connection, ConnectionImpl } from '../icc-api/model/Connection'\nimport { SecretIdUseOption } from './crypto/SecretIdUseOption'\n\n// noinspection JSUnusedGlobalSymbols\nexport class IccTopicXApi extends IccTopicApi implements EncryptedEntityXApi<models.Topic> {\n  private readonly encryptedFields: EncryptedFieldsManifest\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    private readonly crypto: IccCryptoXApi,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly authApi: IccAuthApi,\n    private readonly autofillAuthor: boolean,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    encryptedKeys: Array<string> = ['description'],\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n\n    this.encryptedFields = parseEncryptedFields(encryptedKeys, 'Topic.')\n  }\n\n  get headers(): Promise<Array<XHR.Header>> {\n    return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, EntityWithDelegationTypeName.Topic))\n  }\n\n  /**\n   * Creates a new instance of topic with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this topic refers to.\n   * @param c initialised data for the topic. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used.\n   * - sfkOption: specifies which sfk of the owning entity to use.\n   * - ignoreAutoDelegations: if true the data won't be shared with the autodelegations of the user, but only with additional delegates\n   * - alternateRootDelegation: by default a new entity is created with a root delegation from self to self. In keyless mode this is not possible,\n   * and instead the root delegation will be from self to another. You have to specify which delegate will be part of the root delegation.\n   * @return a new instance of topic.\n   */\n  async newInstance(\n    user: models.User,\n    patient: models.Patient | null,\n    c: Topic = {}, // TODO: Why this isn't Topic?\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: AccessLevelEnum }\n      sfkOption?: SecretIdUseOption\n      ignoreAutoDelegations?: boolean\n      alternateRootDelegation?: string\n    } = {}\n  ) {\n    if (!patient && options.sfkOption) throw new Error('preferredSfk can only be specified if patient is specified.')\n\n    const topic = {\n      ...(c ?? {}),\n      id: c?.id ?? this.crypto.primitives.randomUuid(),\n      _type: 'org.taktik.icure.entities.Topic',\n      created: c?.created ?? new Date().getTime(),\n      modified: c?.modified ?? new Date().getTime(),\n      responsible: c?.responsible ?? (this.autofillAuthor ? this.dataOwnerApi.getDataOwnerIdOf(user) : undefined),\n      author: c?.author ?? (this.autofillAuthor ? user.id : undefined),\n      codes: c?.codes ?? [],\n      tags: c?.tags ?? [],\n    }\n\n    const extraDelegations = {\n      ...(options.ignoreAutoDelegations == true ? {} : Object.fromEntries((user.autoDelegations?.all ?? []).map((d) => [d, AccessLevelEnum.WRITE]))),\n      ...(options?.additionalDelegates ?? {}),\n    }\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk = patient\n      ? await this.crypto.xapi.resolveSecretIdUseOptions(\n          { entity: patient, type: EntityWithDelegationTypeName.Patient },\n          options.sfkOption ?? SecretIdUseOption.UseAnySharedWithParent\n        )\n      : undefined\n\n    if (patient && !sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`)\n\n    return new models.Topic(\n      await this.crypto.xapi\n        .entityWithInitialisedEncryptedMetadata(\n          topic,\n          EntityWithDelegationTypeName.Topic,\n          patient?.id,\n          sfk,\n          true,\n          extraDelegations,\n          options.alternateRootDelegation\n        )\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  async decrypt(topics: Array<models.Topic>) {\n    return (await this.crypto.xapi.tryDecryptEntities(topics, EntityWithDelegationTypeName.Topic, (x) => new models.Topic(x))).map(\n      ({ entity }) => entity\n    )\n  }\n\n  async encrypt(topics: Array<models.Topic>): Promise<Array<models.Topic>> {\n    return this.crypto.xapi.tryEncryptEntities(\n      topics,\n      EntityWithDelegationTypeName.Topic,\n      this.encryptedFields,\n      true,\n      false,\n      (x) => new models.Topic(x)\n    )\n  }\n\n  /**\n   * Create and share a new topic with other participants.\n   * @param body the topic to create.\n   * @return the created topic.\n   */\n  override async createTopic(body: Topic): Promise<Topic> {\n    const encryptedTopics = await this.encrypt([body])\n    const createdTopic = await super.createTopic(encryptedTopics[0])\n    const decryptedTopics = await this.decrypt([createdTopic])\n    return decryptedTopics[0]\n  }\n\n  /**\n   * @param topic a topic\n   * @return the id of the patient that the topic refers to, retrieved from the encrypted metadata. Normally there should only be one element\n   * in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(topic: models.Topic): Promise<string[]> {\n    return this.crypto.xapi.owningEntityIdsOf({ entity: topic, type: EntityWithDelegationTypeName.Topic }, undefined)\n  }\n\n  /**\n   * @return if the logged data owner has write access to the content of the given topic\n   */\n  async hasWriteAccess(topic: models.Topic): Promise<boolean> {\n    return this.crypto.xapi.hasWriteAccess({ entity: topic, type: EntityWithDelegationTypeName.Topic })\n  }\n\n  /**\n   * Share an existing topic with other data owners, allowing them to access the non-encrypted data of the topic and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the topic.\n   * @param topic the topic to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareSecretIds: specifies which secret ids of the entity should be shared. If not provided all secret ids available to the current user will be shared\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - sharePatientId: specifies if the id of the patient that this topic refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWith(\n    delegateId: string,\n    topic: models.Topic,\n    options: {\n      shareSecretIds?: string[]\n      requestedPermissions?: RequestedPermissionEnum\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.Topic> {\n    return this.shareWithMany(topic, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing topic with other data owners, allowing them to access the non-encrypted data of the topic and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param topic the topic to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareSecretIds: specifies which secret ids of the entity should be shared. If not provided all secret ids available to the current user will be shared\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * topic does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this topic refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWithMany(\n    topic: models.Topic,\n    delegates: {\n      [delegateId: string]: {\n        shareSecretIds?: string[]\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.Topic> {\n    return (await this.tryShareWithMany(topic, delegates)).updatedEntityOrThrow\n  }\n\n  /**\n   * Share an existing topic with other data owners, allowing them to access the non-encrypted data of the topic and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param topic the topic to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareSecretIds: specifies which secret ids of the entity should be shared. If not provided all secret ids available to the current user will be shared\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * topic does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this topic refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async tryShareWithMany(\n    topic: models.Topic,\n    delegates: {\n      [delegateId: string]: {\n        shareSecretIds?: string[]\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<ShareResult<models.Topic>> {\n    // All entities should have an encryption key.\n    const entityWithEncryptionKey = await this.crypto.xapi.ensureEncryptionKeysInitialised(topic, EntityWithDelegationTypeName.Topic)\n    const updatedEntity = entityWithEncryptionKey ? await this.modifyTopic(entityWithEncryptionKey) : topic\n    return this.crypto.xapi\n      .simpleShareOrUpdateEncryptedEntityMetadata(\n        {\n          entity: updatedEntity,\n          type: EntityWithDelegationTypeName.Topic,\n        },\n        Object.fromEntries(\n          Object.entries(delegates).map(([delegateId, options]) => [\n            delegateId,\n            {\n              requestedPermissions: options.requestedPermissions,\n              shareEncryptionKeys: options.shareEncryptionKey,\n              shareOwningEntityIds: options.sharePatientId,\n              shareSecretIds: options.shareSecretIds,\n            },\n          ])\n        ),\n        (x) => this.bulkShareTopics(x)\n      )\n      .then((r) => r.mapSuccessAsync((e) => this.decrypt([e]).then((es) => es[0])))\n  }\n\n  getDataOwnersWithAccessTo(\n    entity: models.Topic\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: AccessLevelEnum }; hasUnknownAnonymousDataOwners: boolean }> {\n    return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: EntityWithDelegationTypeName.Topic })\n  }\n\n  getEncryptionKeysOf(entity: models.Topic): Promise<string[]> {\n    return this.crypto.xapi.encryptionKeysOf({ entity, type: EntityWithDelegationTypeName.Topic }, undefined)\n  }\n\n  /**\n   * Filter and decrypt topics by the given filter.\n   * @param body the filter to apply.\n   * @param startDocumentId the document id to start from (inclusive).\n   * @param limit the maximum number of topics to return in the page.\n   * @param collectTiming add timing information to the response\n   * @return a paginated list of topics.\n   */\n  override async filterTopicsBy(body: FilterChainTopic, startDocumentId?: string, limit?: number, collectTiming?: false): Promise<PaginatedListTopic>\n  override async filterTopicsBy(body: FilterChainTopic, startDocumentId?: string, limit?: number, collectTiming?: true): Promise<PaginatedListTopic & TimingInfo>\n  override async filterTopicsBy(body: FilterChainTopic, startDocumentId?: string, limit?: number, collectTiming: boolean = false): Promise<PaginatedListTopic> {\n    const page = await super.filterTopicsBy(body, startDocumentId, limit, collectTiming as any)\n    const decryptedTopics = await this.decrypt(page.rows ?? [])\n    return {\n      ...page,\n      rows: decryptedTopics,\n    }\n  }\n\n  /**\n   * Obtain the topic with the given id and decrypt it.\n   * @param id the id of the topic to retrieve.\n   * @return the decrypted topic.\n   */\n  override async getTopic(id: string): Promise<Topic> {\n    const topic = await super.getTopic(id)\n    const decryptedTopics = await this.decrypt([topic])\n    return decryptedTopics[0]\n  }\n\n  /**\n   * Obtain the topics with the given ids and decrypt them.\n   * @param body the ids of the topics to retrieve.\n   * @return the decrypted topics.\n   */\n  override async getTopics(body: ListOfIds): Promise<Array<Topic>> {\n    const topics = await super.getTopics(body)\n    return await this.decrypt(topics)\n  }\n\n  /**\n   * Update and encrypt the given topic.\n   * @param body the topic to update.\n   * @return the updated decrypted topic.\n   */\n  override async modifyTopic(body: Topic): Promise<Topic> {\n    const encryptedTopics = await this.encrypt([body])\n    const modifiedTopic = await super.modifyTopic(encryptedTopics[0])\n    const decryptedTopics = await this.decrypt([modifiedTopic])\n    return decryptedTopics[0]\n  }\n\n  /**\n   * @internal this method is for internal use only and may be changed without notice\n   * @param body data owner id of the data owner to which the participant should be added and the topic role of the participant.\n   * @param topicId Id of the topic to which the participant should be added.\n   */\n  override async addParticipant(body: { dataOwnerId: string; topicRole: TopicRole }, topicId: string): Promise<Topic> {\n    throw new Error('Cannot add participant to topic without sharing it first. You should use addParticipantWithTopic instead.')\n  }\n\n  /**\n   * This method is similar to {@link addParticipant} but it also shares the topic with the data owner before adding the participant.\n   * @param body data owner id of the data owner to which the participant should be added and the topic role of the participant.\n   * @param topic the topic to share and to which the participant should be added.\n   * @return the updated topic.\n   */\n  async addParticipantWithTopic(body: { dataOwnerId: string; topicRole: TopicRole }, topic: Topic): Promise<Topic> {\n    const updatedTopic = await this.shareWith(body.dataOwnerId, topic, {\n      requestedPermissions: RequestedPermissionEnum.FULL_WRITE,\n    })\n\n    return (await this.decrypt([await super.addParticipant(body, updatedTopic.id!)]))[0]\n  }\n\n  /**\n   * Remove the participant with the given data owner id from the topic with the given id.\n   * @param body data owner id of the participant to remove.\n   * @param topicId Id of the topic from which the participant should be removed.\n   * @return the updated decrypted topic.\n   */\n  async removeParticipant(body: { dataOwnerId: string }, topicId: string): Promise<Topic> {\n    const updatedTopic = await super.removeParticipant(body, topicId)\n    return (await this.decrypt([updatedTopic]))[0]\n  }\n\n  async subscribeToTopicEvents(\n    eventTypes: ('CREATE' | 'UPDATE' | 'DELETE')[],\n    filter: AbstractFilter<Topic> | undefined,\n    eventFired: (message: Topic) => Promise<void>,\n    options: SubscriptionOptions = {}\n  ): Promise<Connection> {\n    return await subscribeToEntityEvents(\n      this.host,\n      this.authApi,\n      EntityWithDelegationTypeName.Topic,\n      eventTypes,\n      filter,\n      eventFired,\n      options,\n      async (encrypted) => (await this.decrypt([encrypted]))[0]\n    ).then((rs) => new ConnectionImpl(rs))\n  }\n\n  createDelegationDeAnonymizationMetadata(entity: Topic, delegates: string[]): Promise<void> {\n    return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo({ entity, type: EntityWithDelegationTypeName.Topic }, delegates)\n  }\n}\n"]}

package/icc-x-api/index.js

@@ -177,7 +177,7 @@ var IcureApi;
             const params = new IcureApiOptions.WithDefaults(options);
             let authenticationProviderInfo = yield initialiseAuthProviderWithGroupSelector(host, authenticationOptions, params.headers, fetchImpl, params.groupSelector);
             const cryptoInitInfo = yield initialiseCryptoWithProvider(host, fetchImpl, authenticationProviderInfo.groupSpecificAuthenticationProvider, params, cryptoStrategies, crypto, (_a = options.useLiteCompatibilityMode) !== null && _a !== void 0 ? _a : false);
-            return new IcureApiImpl(cryptoInitInfo, host, authenticationProviderInfo.groupSpecificAuthenticationProvider, fetch, authenticationProviderInfo.grouplessUserApi, authenticationProviderInfo.matches, authenticationProviderInfo.matches.find((match) => match.groupId === authenticationProviderInfo.chosenGroupId), params, cryptoStrategies, (_b = options.useLiteCompatibilityMode) !== null && _b !== void 0 ? _b : false);
+            return new IcureApiImpl(cryptoInitInfo, host, authenticationProviderInfo.groupSpecificAuthenticationProvider, fetchImpl, authenticationProviderInfo.grouplessUserApi, authenticationProviderInfo.matches, authenticationProviderInfo.matches.find((match) => match.groupId === authenticationProviderInfo.chosenGroupId), params, cryptoStrategies, (_b = options.useLiteCompatibilityMode) !== null && _b !== void 0 ? _b : false);
         });
     }
     IcureApi.initialise = initialise;