@icure/cardinal-sdk 2.14.0 → 2.16.0

package/Kotlin-DateTime-library-kotlinx-datetime.mjs

@@ -367,7 +367,7 @@ function addFormatStructureForDate(structure) {
 function addFormatStructureForTime(structure) {
   this.y3z(structure);
 }
-initMetadataForInterface(AbstractWithDateTimeBuilder, 'AbstractWithDateTimeBuilder', VOID, VOID, [AbstractWithDateBuilder, AbstractWithTimeBuilder, WithDate, WithTime]);
+initMetadataForInterface(AbstractWithDateTimeBuilder, 'AbstractWithDateTimeBuilder', VOID, VOID, [AbstractWithDateBuilder, AbstractWithTimeBuilder, WithTime, WithDate]);
 initMetadataForClass(Builder_0, 'Builder', VOID, VOID, [AbstractDateTimeFormatBuilder, AbstractWithDateTimeBuilder]);
 initMetadataForClass(LocalDateTimeFormat, 'LocalDateTimeFormat', VOID, AbstractDateTimeFormat);
 function set_fractionOfSecond(value) {

package/api/AccessLogApi.d.mts

@@ -1,6 +1,7 @@
 import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
 import { AccessLogDelegateOptions } from '../crypto/entities/AccessLogDelegateOptions.mjs';
 import { AccessLogShareOptions } from '../crypto/entities/AccessLogShareOptions.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
 import { AccessLog, DecryptedAccessLog, EncryptedAccessLog } from '../model/AccessLog.mjs';
 import { EntityReferenceInGroup } from '../model/EntityReferenceInGroup.mjs';
@@ -228,6 +229,16 @@ export interface AccessLogApi {
      *  because you had no write access to them) they will not be included in this list.
      */
     purgeAccessLogs(accessLogs: Array<AccessLog>): Promise<Array<StoredDocumentIdentifier>>;
+    /**
+     *
+     *  Get all data owners with access to the provided access log, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param accessLog an access log
+     *  @return information on users with access to the provided access log
+     */
+    getDataOwnersWithAccessTo(accessLog: AccessLog): Promise<EntityAccessInformation>;
     /**
      *
      *  Share an access log with another data owner.

package/api/AccessLogBasicApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { AccessLog, EncryptedAccessLog } from '../model/AccessLog.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
 import { AccessLogBasicInGroupApi } from './AccessLogBasicInGroupApi.mjs';
@@ -119,6 +120,16 @@ export interface AccessLogBasicApi {
      *  because you had no write access to them) they will not be included in this list.
      */
     purgeAccessLogs(accessLogs: Array<AccessLog>): Promise<Array<StoredDocumentIdentifier>>;
+    /**
+     *
+     *  Get all data owners with access to the provided access log, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param accessLog an access log
+     *  @return information on users with access to the provided access log
+     */
+    getDataOwnersWithAccessTo(accessLog: AccessLog): Promise<EntityAccessInformation>;
     /**
      *
      *  Create a new access log. The provided access log must have the encryption metadata initialized.

package/api/AccessLogBasicInGroupApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { AccessLog, EncryptedAccessLog } from '../model/AccessLog.mjs';
 import { GroupScoped } from '../model/GroupScoped.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
@@ -59,6 +60,11 @@ export interface AccessLogBasicInGroupApi {
      */
     purgeAccessLog(accessLog: GroupScoped<AccessLog>): Promise<void>;
     purgeAccessLogs(accessLogs: Array<GroupScoped<AccessLog>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [AccessLogBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(accessLog: GroupScoped<AccessLog>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [AccessLogBasicFlavouredApi.createAccessLog].

package/api/AccessLogInGroupApi.d.mts

@@ -1,5 +1,7 @@
-import { FilterOptions, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
+import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
 import { AccessLogDelegateOptions } from '../crypto/entities/AccessLogDelegateOptions.mjs';
+import { AccessLogShareOptions } from '../crypto/entities/AccessLogShareOptions.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
 import { AccessLog, DecryptedAccessLog, EncryptedAccessLog } from '../model/AccessLog.mjs';
 import { EntityReferenceInGroup } from '../model/EntityReferenceInGroup.mjs';
@@ -117,6 +119,36 @@ export interface AccessLogInGroupApi {
      */
     purgeAccessLog(accessLog: GroupScoped<AccessLog>): Promise<void>;
     purgeAccessLogs(accessLogs: Array<GroupScoped<AccessLog>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [AccessLogBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(accessLog: GroupScoped<AccessLog>): Promise<EntityAccessInformation>;
+    /**
+     *
+     *  In-group version of [AccessLogFlavouredApi.shareWith]
+     */
+    shareWith(delegate: EntityReferenceInGroup, accessLog: GroupScoped<DecryptedAccessLog>, options?: {
+        options?: AccessLogShareOptions | undefined;
+    }): Promise<GroupScoped<DecryptedAccessLog>>;
+    /**
+     *
+     *  In-group version of [AccessLogFlavouredApi.shareWithMany]
+     */
+    shareWithMany(accessLog: GroupScoped<DecryptedAccessLog>, delegates: ArrayWithUniqueKeys<{
+        delegate: EntityReferenceInGroup;
+        shareOptions: AccessLogShareOptions;
+    }, 'delegate'>): Promise<GroupScoped<DecryptedAccessLog>>;
+    /**
+     *
+     *  In-group version of [AccessLogFlavouredApi.filterAccessLogsBy]
+     */
+    filterAccessLogsBy(groupId: string, filter: FilterOptions<AccessLog>): Promise<PaginatedListIterator<GroupScoped<DecryptedAccessLog>>>;
+    /**
+     *
+     *  In-group version of [AccessLogFlavouredApi.filterAccessLogsBySorted]
+     */
+    filterAccessLogsBySorted(groupId: string, filter: SortableFilterOptions<AccessLog>): Promise<PaginatedListIterator<GroupScoped<DecryptedAccessLog>>>;
     /**
      *
      *  In-group version of [AccessLogBasicFlavouredApi.createAccessLog].

package/api/AuthApi.d.mts

@@ -1,3 +1,14 @@
 export interface AuthApi {
     getBearerToken(): Promise<string>;
+    /**
+     *
+     *  Get the refresh token currently used by the sdk.
+     *
+     *  The refresh token is bound to the group (and data owner scope) of this sdk instance, and can be used to initialize
+     *  a new sdk instance through the `existingRefreshJwt` of [com.icure.cardinal.sdk.options.AuthenticationMethod.UsingSecretProvider],
+     *  without having to provide any secret while the refresh token is valid.
+     *  Note that if the user can access multiple groups, the initialization of the new sdk still requires a group selector,
+     *  and the new sdk will be bound to the group chosen by the selector, regardless of the group of the refresh token.
+     */
+    getRefreshToken(): Promise<string>;
 }

package/api/CalendarItemApi.d.mts

@@ -1,6 +1,7 @@
 import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
 import { CalendarItemDelegateOptions } from '../crypto/entities/CalendarItemDelegateOptions.mjs';
 import { CalendarItemShareOptions } from '../crypto/entities/CalendarItemShareOptions.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
 import { CalendarItem, DecryptedCalendarItem, EncryptedCalendarItem } from '../model/CalendarItem.mjs';
 import { CalendarItemOccupancy } from '../model/CalendarItemOccupancy.mjs';
@@ -279,6 +280,16 @@ export interface CalendarItemApi {
      *  because you had no write access to them) they will not be included in this list.
      */
     purgeCalendarItems(calendarItems: Array<CalendarItem>): Promise<Array<StoredDocumentIdentifier>>;
+    /**
+     *
+     *  Get all data owners with access to the provided calendar item, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param calendarItem a calendar item
+     *  @return information on users with access to the provided calendar item
+     */
+    getDataOwnersWithAccessTo(calendarItem: CalendarItem): Promise<EntityAccessInformation>;
     /**
      *
      *  Share a calendar item with another data owner. The calendar item must already exist in the database for this method to

package/api/CalendarItemBasicApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, FilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { CalendarItem, EncryptedCalendarItem } from '../model/CalendarItem.mjs';
 import { CalendarItemOccupancy } from '../model/CalendarItemOccupancy.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
@@ -158,6 +159,16 @@ export interface CalendarItemBasicApi {
      *  because you had no write access to them) they will not be included in this list.
      */
     purgeCalendarItems(calendarItems: Array<CalendarItem>): Promise<Array<StoredDocumentIdentifier>>;
+    /**
+     *
+     *  Get all data owners with access to the provided calendar item, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param calendarItem a calendar item
+     *  @return information on users with access to the provided calendar item
+     */
+    getDataOwnersWithAccessTo(calendarItem: CalendarItem): Promise<EntityAccessInformation>;
     /**
      *
      *  Create a new calendar item. The provided calendar item must have the encryption metadata initialized.

package/api/CalendarItemBasicInGroupApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { CalendarItem, EncryptedCalendarItem } from '../model/CalendarItem.mjs';
 import { CalendarItemOccupancy } from '../model/CalendarItemOccupancy.mjs';
 import { GroupScoped } from '../model/GroupScoped.mjs';
@@ -79,6 +80,11 @@ export interface CalendarItemBasicInGroupApi {
      *  In-group version of [CalendarItemBasicFlavourlessApi.purgeCalendarItems]
      */
     purgeCalendarItems(calendarItems: Array<GroupScoped<CalendarItem>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [CalendarItemBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(calendarItem: GroupScoped<CalendarItem>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [CalendarItemBasicFlavouredApi.createCalendarItem].

package/api/CalendarItemInGroupApi.d.mts

@@ -1,6 +1,7 @@
 import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
 import { CalendarItemDelegateOptions } from '../crypto/entities/CalendarItemDelegateOptions.mjs';
 import { CalendarItemShareOptions } from '../crypto/entities/CalendarItemShareOptions.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
 import { CalendarItem, DecryptedCalendarItem, EncryptedCalendarItem } from '../model/CalendarItem.mjs';
 import { CalendarItemOccupancy } from '../model/CalendarItemOccupancy.mjs';
@@ -140,6 +141,11 @@ export interface CalendarItemInGroupApi {
      *  In-group version of [CalendarItemBasicFlavourlessApi.purgeCalendarItems]
      */
     purgeCalendarItems(calendarItems: Array<GroupScoped<CalendarItem>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [CalendarItemBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(calendarItem: GroupScoped<CalendarItem>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [CalendarItemFlavouredApi.shareWith]

package/api/ContactApi.d.mts

@@ -1,6 +1,7 @@
 import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
 import { ContactDelegateOptions } from '../crypto/entities/ContactDelegateOptions.mjs';
 import { ContactShareOptions } from '../crypto/entities/ContactShareOptions.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
 import { Contact, DecryptedContact, EncryptedContact } from '../model/Contact.mjs';
 import { EntityReferenceInGroup } from '../model/EntityReferenceInGroup.mjs';
@@ -297,6 +298,27 @@ export interface ContactApi {
      *  @return the occurrences for codes of type [codeType] in services.
      */
     getServiceCodesOccurrences(codeType: string, minOccurrences: number): Promise<Array<LabelledOccurence>>;
+    /**
+     *
+     *  Get all data owners with access to the provided contact, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param contact a contact
+     *  @return information on users with access to the provided contact
+     */
+    getDataOwnersWithAccessTo(contact: Contact): Promise<EntityAccessInformation>;
+    /**
+     *
+     *  Get all data owners with access to the provided service, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata. Services share the security metadata of the contact containing them,
+     *  so this reflects the access to that contact.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param service a service
+     *  @return information on users with access to the provided service
+     */
+    getDataOwnersWithAccessToService(service: Service): Promise<EntityAccessInformation>;
     /**
      *
      *  Share a contact with another data owner. The contact must already exist in the database for this method to

package/api/ContactBasicApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { Contact, EncryptedContact } from '../model/Contact.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
 import { LabelledOccurence } from '../model/data/LabelledOccurence.mjs';
@@ -196,6 +197,27 @@ export interface ContactBasicApi {
      *  @return the occurrences for codes of type [codeType] in services.
      */
     getServiceCodesOccurrences(codeType: string, minOccurrences: number): Promise<Array<LabelledOccurence>>;
+    /**
+     *
+     *  Get all data owners with access to the provided contact, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param contact a contact
+     *  @return information on users with access to the provided contact
+     */
+    getDataOwnersWithAccessTo(contact: Contact): Promise<EntityAccessInformation>;
+    /**
+     *
+     *  Get all data owners with access to the provided service, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata. Services share the security metadata of the contact containing them,
+     *  so this reflects the access to that contact.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param service a service
+     *  @return information on users with access to the provided service
+     */
+    getDataOwnersWithAccessToService(service: Service): Promise<EntityAccessInformation>;
     /**
      *
      *  Create a new contact. The provided contact must have the encryption metadata initialized.

package/api/ContactBasicInGroupApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { Contact, EncryptedContact } from '../model/Contact.mjs';
 import { GroupScoped } from '../model/GroupScoped.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
@@ -84,6 +85,16 @@ export interface ContactBasicInGroupApi {
      *  In-group version of [ContactBasicFlavourlessApi.purgeContacts]
      */
     purgeContacts(contacts: Array<GroupScoped<Contact>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [ContactBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(contact: GroupScoped<Contact>): Promise<EntityAccessInformation>;
+    /**
+     *
+     *  In-group version of [ContactBasicFlavourlessApi.getDataOwnersWithAccessToService].
+     */
+    getDataOwnersWithAccessToService(service: GroupScoped<Service>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [ContactBasicFlavouredApi.createContact].

package/api/ContactInGroupApi.d.mts

@@ -1,6 +1,7 @@
 import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
 import { ContactDelegateOptions } from '../crypto/entities/ContactDelegateOptions.mjs';
 import { ContactShareOptions } from '../crypto/entities/ContactShareOptions.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
 import { Contact, DecryptedContact, EncryptedContact } from '../model/Contact.mjs';
 import { EntityReferenceInGroup } from '../model/EntityReferenceInGroup.mjs';
@@ -146,6 +147,16 @@ export interface ContactInGroupApi {
      *  In-group version of [ContactBasicFlavourlessApi.purgeContacts]
      */
     purgeContacts(contacts: Array<GroupScoped<Contact>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [ContactBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(contact: GroupScoped<Contact>): Promise<EntityAccessInformation>;
+    /**
+     *
+     *  In-group version of [ContactBasicFlavourlessApi.getDataOwnersWithAccessToService].
+     */
+    getDataOwnersWithAccessToService(service: GroupScoped<Service>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [ContactFlavouredApi.shareWith]

package/api/DocumentApi.d.mts

@@ -1,6 +1,7 @@
 import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
 import { DocumentDelegateOptions } from '../crypto/entities/DocumentDelegateOptions.mjs';
 import { DocumentShareOptions } from '../crypto/entities/DocumentShareOptions.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
 import { DecryptedDocument, Document, EncryptedDocument } from '../model/Document.mjs';
 import { EntityReferenceInGroup } from '../model/EntityReferenceInGroup.mjs';
@@ -476,6 +477,16 @@ export interface DocumentApi {
      *  @return the updated document
      */
     deleteSecondaryAttachment(documentId: string, key: string, rev: string): Promise<EncryptedDocument>;
+    /**
+     *
+     *  Get all data owners with access to the provided document, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param document a document
+     *  @return information on users with access to the provided document
+     */
+    getDataOwnersWithAccessTo(document: Document): Promise<EntityAccessInformation>;
     /**
      *
      *  Share a document with another data owner. The document must already exist in the database for this method to

package/api/DocumentBasicApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { Document, EncryptedDocument } from '../model/Document.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
 import { DocumentBasicInGroupApi } from './DocumentBasicInGroupApi.mjs';
@@ -190,6 +191,16 @@ export interface DocumentBasicApi {
      *  @return the updated document
      */
     deleteSecondaryAttachment(documentId: string, key: string, rev: string): Promise<EncryptedDocument>;
+    /**
+     *
+     *  Get all data owners with access to the provided document, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param document a document
+     *  @return information on users with access to the provided document
+     */
+    getDataOwnersWithAccessTo(document: Document): Promise<EntityAccessInformation>;
     /**
      *
      *  Create a new document. The provided document must have the encryption metadata initialized.

package/api/DocumentBasicInGroupApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { Document, EncryptedDocument } from '../model/Document.mjs';
 import { GroupScoped } from '../model/GroupScoped.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
@@ -63,6 +64,11 @@ export interface DocumentBasicInGroupApi {
      *  In-group version of [DocumentBasicFlavourlessApi.purgeDocuments]
      */
     purgeDocuments(documents: Array<GroupScoped<Document>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [DocumentBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(document: GroupScoped<Document>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [DocumentBasicFlavouredApi.createDocument].

package/api/DocumentInGroupApi.d.mts

@@ -1,6 +1,7 @@
 import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
 import { DocumentDelegateOptions } from '../crypto/entities/DocumentDelegateOptions.mjs';
 import { DocumentShareOptions } from '../crypto/entities/DocumentShareOptions.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
 import { DecryptedDocument, Document, EncryptedDocument } from '../model/Document.mjs';
 import { EntityReferenceInGroup } from '../model/EntityReferenceInGroup.mjs';
@@ -163,6 +164,11 @@ export interface DocumentInGroupApi {
      *  In-group version of [DocumentBasicFlavourlessApi.purgeDocuments]
      */
     purgeDocuments(documents: Array<GroupScoped<Document>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [DocumentBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(document: GroupScoped<Document>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [DocumentFlavouredApi.shareWith]

package/api/FormApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { FormDelegateOptions } from '../crypto/entities/FormDelegateOptions.mjs';
 import { FormShareOptions } from '../crypto/entities/FormShareOptions.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
@@ -227,6 +228,16 @@ export interface FormApi {
      *  because you had no write access to them) they will not be included in this list.
      */
     purgeForms(forms: Array<Form>): Promise<Array<StoredDocumentIdentifier>>;
+    /**
+     *
+     *  Get all data owners with access to the provided form, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param form a form
+     *  @return information on users with access to the provided form
+     */
+    getDataOwnersWithAccessTo(form: Form): Promise<EntityAccessInformation>;
     getFormTemplate(formTemplateId: string, options?: {
         raw?: boolean | undefined;
     }): Promise<FormTemplate>;

package/api/FormBasicApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { EncryptedForm, Form } from '../model/Form.mjs';
 import { FormTemplate } from '../model/FormTemplate.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
@@ -120,6 +121,16 @@ export interface FormBasicApi {
      *  because you had no write access to them) they will not be included in this list.
      */
     purgeForms(forms: Array<Form>): Promise<Array<StoredDocumentIdentifier>>;
+    /**
+     *
+     *  Get all data owners with access to the provided form, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param form a form
+     *  @return information on users with access to the provided form
+     */
+    getDataOwnersWithAccessTo(form: Form): Promise<EntityAccessInformation>;
     getFormTemplate(formTemplateId: string, options?: {
         raw?: boolean | undefined;
     }): Promise<FormTemplate>;

package/api/FormBasicInGroupApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { EncryptedForm, Form } from '../model/Form.mjs';
 import { FormTemplate } from '../model/FormTemplate.mjs';
 import { GroupScoped } from '../model/GroupScoped.mjs';
@@ -64,6 +65,11 @@ export interface FormBasicInGroupApi {
      *  In-group version of [FormBasicFlavourlessApi.purgeForms]
      */
     purgeForms(forms: Array<GroupScoped<Form>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [FormBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(form: GroupScoped<Form>): Promise<EntityAccessInformation>;
     createFormTemplate(formTemplate: GroupScoped<FormTemplate>): Promise<GroupScoped<FormTemplate>>;
     createFormTemplates(formTemplates: Array<GroupScoped<FormTemplate>>): Promise<Array<GroupScoped<FormTemplate>>>;
     getFormTemplate(groupId: string, formTemplateId: string): Promise<GroupScoped<FormTemplate> | undefined>;

package/api/FormInGroupApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { FormDelegateOptions } from '../crypto/entities/FormDelegateOptions.mjs';
 import { FormShareOptions } from '../crypto/entities/FormShareOptions.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
@@ -121,6 +122,11 @@ export interface FormInGroupApi {
      *  In-group version of [FormBasicFlavourlessApi.purgeForms]
      */
     purgeForms(forms: Array<GroupScoped<Form>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [FormBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(form: GroupScoped<Form>): Promise<EntityAccessInformation>;
     createFormTemplate(formTemplate: GroupScoped<FormTemplate>): Promise<GroupScoped<FormTemplate>>;
     createFormTemplates(formTemplates: Array<GroupScoped<FormTemplate>>): Promise<Array<GroupScoped<FormTemplate>>>;
     getFormTemplate(groupId: string, formTemplateId: string): Promise<GroupScoped<FormTemplate> | undefined>;

package/api/GroupApi.d.mts

@@ -81,4 +81,42 @@ export interface GroupApi {
     modifyGroupApplicationId(id: string, applicationId: string): Promise<Group>;
     addTagToGroup(id: string, rev: string, tag: CodeStub): Promise<Group>;
     removeTagFromGroup(id: string, rev: string, tagId: string): Promise<Group>;
+    createApplicationGroup(id: string, name: string, options?: {
+        server?: string | undefined;
+        q?: number | undefined;
+        n?: number | undefined;
+        superGroup?: string | undefined;
+        projectId?: string | undefined;
+    }): Promise<Group>;
+    createTenantGroup(id: string, name: string, options?: {
+        server?: string | undefined;
+        q?: number | undefined;
+        n?: number | undefined;
+        superGroup?: string | undefined;
+        projectId?: string | undefined;
+    }): Promise<Group>;
+    /**
+     *
+     *  Sets a design doc schema version as available on or more groups. This operation will fail if the schema version [schemaVersion]
+     *  does not exist for the application or if there is at least one group among [groupIds] where the indexation task were not run.
+     *
+     *  @param applicationGroupId the id of the application group. All the groups specified in [groupIds] must be children of this group.
+     *  @param schemaVersion the version of the schema to enable.
+     *  @param groupIds the ids of the groups to update.
+     */
+    addSchemaVersionOnGroups(applicationGroupId: string, schemaVersion: number, groupIds: Array<string>): Promise<Array<Group>>;
+    /**
+     *
+     *  Removes a design doc schema version as available on or more groups. This operation will fail if that schema version is the only one
+     *  to be enabled on at least one group, unless [failIfSingleSchema] is set to false.
+     *
+     *  @param applicationGroupId the id of the application group. All the groups specified in [groupIds] must be children of this group.
+     *  @param schemaVersion the version of the schema to enable.
+     *  @param groupIds the ids of the groups to update.
+     *  @param failIfSingleSchema if false, the operation will not fail if the specified version is the only one enabled on one or more of the
+     *  groups.
+     */
+    removeSchemaVersionFromGroups(applicationGroupId: string, schemaVersion: number, groupIds: Array<string>, options?: {
+        failIfSingleSchema?: boolean;
+    }): Promise<Array<Group>>;
 }

package/api/HealthElementApi.d.mts

@@ -1,4 +1,5 @@
 import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { HealthElementDelegateOptions } from '../crypto/entities/HealthElementDelegateOptions.mjs';
 import { HealthElementShareOptions } from '../crypto/entities/HealthElementShareOptions.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
@@ -239,6 +240,16 @@ export interface HealthElementApi {
      *  because you had no write access to them) they will not be included in this list.
      */
     purgeHealthElements(healthElements: Array<HealthElement>): Promise<Array<StoredDocumentIdentifier>>;
+    /**
+     *
+     *  Get all data owners with access to the provided health element, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param healthElement a health element
+     *  @return information on users with access to the provided health element
+     */
+    getDataOwnersWithAccessTo(healthElement: HealthElement): Promise<EntityAccessInformation>;
     /**
      *
      *  Share a health element with another data owner. The health element must already exist in the database for this method to

package/api/HealthElementBasicApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { EncryptedHealthElement, HealthElement } from '../model/HealthElement.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
 import { EntitySubscription } from '../subscription/EntitySubscription.mjs';
@@ -122,6 +123,16 @@ export interface HealthElementBasicApi {
      *  because you had no write access to them) they will not be included in this list.
      */
     purgeHealthElements(healthElements: Array<HealthElement>): Promise<Array<StoredDocumentIdentifier>>;
+    /**
+     *
+     *  Get all data owners with access to the provided health element, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param healthElement a health element
+     *  @return information on users with access to the provided health element
+     */
+    getDataOwnersWithAccessTo(healthElement: HealthElement): Promise<EntityAccessInformation>;
     /**
      *
      *  Create a new health element. The provided health element must have the encryption metadata initialized.

package/api/HealthElementBasicInGroupApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { GroupScoped } from '../model/GroupScoped.mjs';
 import { EncryptedHealthElement, HealthElement } from '../model/HealthElement.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
@@ -63,6 +64,11 @@ export interface HealthElementBasicInGroupApi {
      *  In-group version of [HealthElementBasicFlavourlessApi.purgeHealthElements]
      */
     purgeHealthElements(healthElements: Array<GroupScoped<HealthElement>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [HealthElementBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(healthElement: GroupScoped<HealthElement>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [HealthElementApi.createHealthElement]