@icure/cardinal-sdk 2.14.0 → 2.16.0

package/api/HealthElementInGroupApi.d.mts

@@ -1,4 +1,5 @@
 import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { HealthElementDelegateOptions } from '../crypto/entities/HealthElementDelegateOptions.mjs';
 import { HealthElementShareOptions } from '../crypto/entities/HealthElementShareOptions.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
@@ -125,6 +126,11 @@ export interface HealthElementInGroupApi {
      *  In-group version of [HealthElementBasicFlavourlessApi.purgeHealthElements]
      */
     purgeHealthElements(healthElements: Array<GroupScoped<HealthElement>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [HealthElementBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(healthElement: GroupScoped<HealthElement>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [HealthElementFlavouredApi.shareWith]

package/api/InvoiceApi.d.mts

@@ -1,4 +1,5 @@
 import { PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { InvoiceDelegateOptions } from '../crypto/entities/InvoiceDelegateOptions.mjs';
 import { InvoiceShareOptions } from '../crypto/entities/InvoiceShareOptions.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
@@ -218,6 +219,16 @@ export interface InvoiceApi {
      *  @return the occurrences for each invoicing code that is used at least [minOccurrence] times.
      */
     getTarificationsCodesOccurrences(minOccurrence: number): Promise<Array<LabelledOccurence>>;
+    /**
+     *
+     *  Get all data owners with access to the provided invoice, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param invoice an invoice
+     *  @return information on users with access to the provided invoice
+     */
+    getDataOwnersWithAccessTo(invoice: Invoice): Promise<EntityAccessInformation>;
     /**
      *
      *  Share an invoice with another data owner. The invoice must already exist in the database for this method to

package/api/InvoiceBasicApi.d.mts

@@ -1,3 +1,4 @@
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { EncryptedInvoice, Invoice } from '../model/Invoice.mjs';
 import { PaginatedList } from '../model/PaginatedList.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
@@ -84,6 +85,16 @@ export interface InvoiceBasicApi {
      *  @return the occurrences for each invoicing code that is used at least [minOccurrence] times.
      */
     getTarificationsCodesOccurrences(minOccurrence: number): Promise<Array<LabelledOccurence>>;
+    /**
+     *
+     *  Get all data owners with access to the provided invoice, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param invoice an invoice
+     *  @return information on users with access to the provided invoice
+     */
+    getDataOwnersWithAccessTo(invoice: Invoice): Promise<EntityAccessInformation>;
     /**
      *
      *  Create a new invoice. The provided invoice must have the encryption metadata initialized.

package/api/InvoiceBasicInGroupApi.d.mts

@@ -1,3 +1,4 @@
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { GroupScoped } from '../model/GroupScoped.mjs';
 import { EncryptedInvoice, Invoice } from '../model/Invoice.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
@@ -42,6 +43,11 @@ export interface InvoiceBasicInGroupApi {
      *  In-group version of [InvoiceBasicFlavourlessApi.purgeInvoices]
      */
     purgeInvoices(invoices: Array<GroupScoped<Invoice>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [InvoiceBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(invoice: GroupScoped<Invoice>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [InvoiceApi.createInvoice]

package/api/InvoiceInGroupApi.d.mts

@@ -1,3 +1,4 @@
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { InvoiceDelegateOptions } from '../crypto/entities/InvoiceDelegateOptions.mjs';
 import { InvoiceShareOptions } from '../crypto/entities/InvoiceShareOptions.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
@@ -109,6 +110,11 @@ export interface InvoiceInGroupApi {
      *  In-group version of [InvoiceBasicFlavourlessApi.purgeInvoices]
      */
     purgeInvoices(invoices: Array<GroupScoped<Invoice>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [InvoiceBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(invoice: GroupScoped<Invoice>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [InvoiceFlavouredApi.shareWith]

package/api/MessageApi.d.mts

@@ -1,4 +1,5 @@
 import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { MessageDelegateOptions } from '../crypto/entities/MessageDelegateOptions.mjs';
 import { MessageShareOptions } from '../crypto/entities/MessageShareOptions.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
@@ -249,6 +250,16 @@ export interface MessageApi {
      *  because you had no write access to them) they will not be included in this list.
      */
     purgeMessages(messages: Array<Message>): Promise<Array<StoredDocumentIdentifier>>;
+    /**
+     *
+     *  Get all data owners with access to the provided message, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param message a message
+     *  @return information on users with access to the provided message
+     */
+    getDataOwnersWithAccessTo(message: Message): Promise<EntityAccessInformation>;
     /**
      *
      *  Share a message with another data owner. The Message must already exist in the database for this method to

package/api/MessageBasicApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { EncryptedMessage, Message } from '../model/Message.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
 import { EntitySubscription } from '../subscription/EntitySubscription.mjs';
@@ -122,6 +123,16 @@ export interface MessageBasicApi {
      *  because you had no write access to them) they will not be included in this list.
      */
     purgeMessages(messages: Array<Message>): Promise<Array<StoredDocumentIdentifier>>;
+    /**
+     *
+     *  Get all data owners with access to the provided message, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param message a message
+     *  @return information on users with access to the provided message
+     */
+    getDataOwnersWithAccessTo(message: Message): Promise<EntityAccessInformation>;
     /**
      *
      *  Create a new Message. The provided Message must have the encryption metadata initialized. This method requires

package/api/MessageBasicInGroupApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { GroupScoped } from '../model/GroupScoped.mjs';
 import { EncryptedMessage, Message } from '../model/Message.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
@@ -63,6 +64,11 @@ export interface MessageBasicInGroupApi {
      *  In-group version of [MessageBasicFlavourlessApi.purgeMessages]
      */
     purgeMessages(messages: Array<GroupScoped<Message>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [MessageBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(message: GroupScoped<Message>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [MessageApi.createMessage]

package/api/MessageInGroupApi.d.mts

@@ -1,4 +1,5 @@
 import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { MessageDelegateOptions } from '../crypto/entities/MessageDelegateOptions.mjs';
 import { MessageShareOptions } from '../crypto/entities/MessageShareOptions.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
@@ -120,6 +121,11 @@ export interface MessageInGroupApi {
      *  In-group version of [MessageBasicFlavourlessApi.purgeMessages]
      */
     purgeMessages(messages: Array<GroupScoped<Message>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [MessageBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(message: GroupScoped<Message>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [MessageFlavouredApi.shareWith]

package/api/ReceiptApi.d.mts

@@ -1,3 +1,4 @@
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { ReceiptDelegateOptions } from '../crypto/entities/ReceiptDelegateOptions.mjs';
 import { ReceiptShareOptions } from '../crypto/entities/ReceiptShareOptions.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
@@ -105,6 +106,16 @@ export interface ReceiptApi {
     purgeReceipts(receipts: Array<Receipt>): Promise<Array<StoredDocumentIdentifier>>;
     getRawReceiptAttachment(receiptId: string, attachmentId: string): Promise<Int8Array>;
     setRawReceiptAttachment(receiptId: string, rev: string, blobType: string, attachment: Int8Array): Promise<EncryptedReceipt>;
+    /**
+     *
+     *  Get all data owners with access to the provided receipt, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param receipt a receipt
+     *  @return information on users with access to the provided receipt
+     */
+    getDataOwnersWithAccessTo(receipt: Receipt): Promise<EntityAccessInformation>;
     shareWith(delegateId: string, receipt: DecryptedReceipt, options?: {
         options?: ReceiptShareOptions | undefined;
     }): Promise<DecryptedReceipt>;

package/api/ReceiptBasicApi.d.mts

@@ -1,3 +1,4 @@
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { EncryptedReceipt, Receipt } from '../model/Receipt.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
 import { ReceiptBasicInGroupApi } from './ReceiptBasicInGroupApi.mjs';
@@ -70,6 +71,16 @@ export interface ReceiptBasicApi {
     purgeReceipts(receipts: Array<Receipt>): Promise<Array<StoredDocumentIdentifier>>;
     getRawReceiptAttachment(receiptId: string, attachmentId: string): Promise<Int8Array>;
     setRawReceiptAttachment(receiptId: string, rev: string, blobType: string, attachment: Int8Array): Promise<EncryptedReceipt>;
+    /**
+     *
+     *  Get all data owners with access to the provided receipt, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param receipt a receipt
+     *  @return information on users with access to the provided receipt
+     */
+    getDataOwnersWithAccessTo(receipt: Receipt): Promise<EntityAccessInformation>;
     /**
      *
      *  Create a new receipt. The provided receipt must have the encryption metadata initialized.

package/api/ReceiptBasicInGroupApi.d.mts

@@ -1,3 +1,4 @@
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { GroupScoped } from '../model/GroupScoped.mjs';
 import { EncryptedReceipt, Receipt } from '../model/Receipt.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
@@ -47,6 +48,11 @@ export interface ReceiptBasicInGroupApi {
      *  In-group version of [ReceiptBasicFlavourlessApi.getRawReceiptAttachment]
      */
     getRawReceiptAttachment(groupId: string, receiptId: string, attachmentId: string): Promise<Int8Array>;
+    /**
+     *
+     *  In-group version of [ReceiptBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(receipt: GroupScoped<Receipt>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [ReceiptApi.createReceipt]

package/api/ReceiptInGroupApi.d.mts

@@ -1,3 +1,4 @@
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { ReceiptDelegateOptions } from '../crypto/entities/ReceiptDelegateOptions.mjs';
 import { ReceiptShareOptions } from '../crypto/entities/ReceiptShareOptions.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
@@ -112,6 +113,11 @@ export interface ReceiptInGroupApi {
      *  In-group version of [ReceiptBasicFlavourlessApi.getRawReceiptAttachment]
      */
     getRawReceiptAttachment(groupId: string, receiptId: string, attachmentId: string): Promise<Int8Array>;
+    /**
+     *
+     *  In-group version of [ReceiptBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(receipt: GroupScoped<Receipt>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [ReceiptFlavouredApi.shareWith]

package/api/RelatedPersonApi.d.mts

@@ -1,4 +1,5 @@
 import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { RelatedPersonDelegateOptions } from '../crypto/entities/RelatedPersonDelegateOptions.mjs';
 import { RelatedPersonShareOptions } from '../crypto/entities/RelatedPersonShareOptions.mjs';
 import { DecryptedRelatedPerson, EncryptedRelatedPerson, RelatedPerson } from '../model/RelatedPerson.mjs';
@@ -220,6 +221,16 @@ export interface RelatedPersonApi {
      *  because you had no write access to them) they will not be included in this list.
      */
     purgeRelatedPersons(relatedPersons: Array<RelatedPerson>): Promise<Array<StoredDocumentIdentifier>>;
+    /**
+     *
+     *  Get all data owners with access to the provided related person, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param relatedPerson a related person
+     *  @return information on users with access to the provided related person
+     */
+    getDataOwnersWithAccessTo(relatedPerson: RelatedPerson): Promise<EntityAccessInformation>;
     /**
      *
      *  Share a related person with another data owner. The related person must already exist in the database for this method to

package/api/RelatedPersonBasicApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { EncryptedRelatedPerson, RelatedPerson } from '../model/RelatedPerson.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
 import { RelatedPersonBasicInGroupApi } from './RelatedPersonBasicInGroupApi.mjs';
@@ -119,6 +120,16 @@ export interface RelatedPersonBasicApi {
      *  because you had no write access to them) they will not be included in this list.
      */
     purgeRelatedPersons(relatedPersons: Array<RelatedPerson>): Promise<Array<StoredDocumentIdentifier>>;
+    /**
+     *
+     *  Get all data owners with access to the provided related person, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param relatedPerson a related person
+     *  @return information on users with access to the provided related person
+     */
+    getDataOwnersWithAccessTo(relatedPerson: RelatedPerson): Promise<EntityAccessInformation>;
     /**
      *
      *  Create a new related person. The provided related person must have the encryption metadata initialized.

package/api/RelatedPersonBasicInGroupApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { GroupScoped } from '../model/GroupScoped.mjs';
 import { EncryptedRelatedPerson, RelatedPerson } from '../model/RelatedPerson.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
@@ -63,6 +64,11 @@ export interface RelatedPersonBasicInGroupApi {
      *  In-group version of [RelatedPersonBasicFlavourlessApi.purgeRelatedPersons]
      */
     purgeRelatedPersons(relatedPersons: Array<GroupScoped<RelatedPerson>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [RelatedPersonBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(relatedPerson: GroupScoped<RelatedPerson>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [RelatedPersonBasicFlavouredApi.createRelatedPerson]

package/api/RelatedPersonInGroupApi.d.mts

@@ -1,4 +1,5 @@
 import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { RelatedPersonDelegateOptions } from '../crypto/entities/RelatedPersonDelegateOptions.mjs';
 import { RelatedPersonShareOptions } from '../crypto/entities/RelatedPersonShareOptions.mjs';
 import { EntityReferenceInGroup } from '../model/EntityReferenceInGroup.mjs';
@@ -121,6 +122,11 @@ export interface RelatedPersonInGroupApi {
      *  In-group version of [RelatedPersonBasicFlavourlessApi.purgeRelatedPersons]
      */
     purgeRelatedPersons(relatedPersons: Array<GroupScoped<RelatedPerson>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [RelatedPersonBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(relatedPerson: GroupScoped<RelatedPerson>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [RelatedPersonFlavouredApi.shareWith]

package/api/TopicApi.d.mts

@@ -1,4 +1,5 @@
 import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
 import { TopicDelegateOptions } from '../crypto/entities/TopicDelegateOptions.mjs';
 import { TopicShareOptions } from '../crypto/entities/TopicShareOptions.mjs';
@@ -230,6 +231,16 @@ export interface TopicApi {
      *  because you had no write access to them) they will not be included in this list.
      */
     purgeTopics(topics: Array<Topic>): Promise<Array<StoredDocumentIdentifier>>;
+    /**
+     *
+     *  Get all data owners with access to the provided topic, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param topic a topic
+     *  @return information on users with access to the provided topic
+     */
+    getDataOwnersWithAccessTo(topic: Topic): Promise<EntityAccessInformation>;
     /**
      *
      *  Share a topic with another data owner. The topic must already exist in the database for this method to

package/api/TopicBasicApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
 import { EncryptedTopic, Topic } from '../model/Topic.mjs';
 import { TopicRole } from '../model/TopicRole.mjs';
@@ -123,6 +124,16 @@ export interface TopicBasicApi {
      *  because you had no write access to them) they will not be included in this list.
      */
     purgeTopics(topics: Array<Topic>): Promise<Array<StoredDocumentIdentifier>>;
+    /**
+     *
+     *  Get all data owners with access to the provided topic, attempting to identify any unknown anonymous data owners
+     *  using delegations de-anonymization metadata.
+     *  See [com.icure.cardinal.sdk.crypto.EntityAccessInformationProvider.getDataOwnersWithAccessTo] for the semantics of
+     *  anonymous data owners and the behaviour of basic apis.
+     *  @param topic a topic
+     *  @return information on users with access to the provided topic
+     */
+    getDataOwnersWithAccessTo(topic: Topic): Promise<EntityAccessInformation>;
     /**
      *
      *  Create a new topic. The provided topic must have the encryption metadata initialized.

package/api/TopicBasicInGroupApi.d.mts

@@ -1,4 +1,5 @@
 import { BaseFilterOptions, BaseSortableFilterOptions, PaginatedListIterator } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { GroupScoped } from '../model/GroupScoped.mjs';
 import { StoredDocumentIdentifier } from '../model/StoredDocumentIdentifier.mjs';
 import { EncryptedTopic, Topic } from '../model/Topic.mjs';
@@ -63,6 +64,11 @@ export interface TopicBasicInGroupApi {
      *  In-group version of [TopicBasicFlavourlessApi.purgeTopics]
      */
     purgeTopics(topics: Array<GroupScoped<Topic>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [TopicBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(topic: GroupScoped<Topic>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [TopicBasicFlavouredApi.createTopic]

package/api/TopicInGroupApi.d.mts

@@ -1,4 +1,5 @@
 import { FilterOptions, PaginatedListIterator, SortableFilterOptions } from '../cardinal-sdk-ts.mjs';
+import { EntityAccessInformation } from '../crypto/entities/EntityAccessInformation.mjs';
 import { SecretIdUseOption } from '../crypto/entities/SecretIdUseOption.mjs';
 import { TopicDelegateOptions } from '../crypto/entities/TopicDelegateOptions.mjs';
 import { TopicShareOptions } from '../crypto/entities/TopicShareOptions.mjs';
@@ -119,6 +120,11 @@ export interface TopicInGroupApi {
      *  In-group version of [TopicBasicFlavourlessApi.purgeTopics]
      */
     purgeTopics(topics: Array<GroupScoped<Topic>>): Promise<Array<GroupScoped<StoredDocumentIdentifier>>>;
+    /**
+     *
+     *  In-group version of [TopicBasicFlavourlessApi.getDataOwnersWithAccessTo].
+     */
+    getDataOwnersWithAccessTo(topic: GroupScoped<Topic>): Promise<EntityAccessInformation>;
     /**
      *
      *  In-group version of [TopicFlavouredApi.shareWith]

package/api/UserApi.d.mts

@@ -27,6 +27,38 @@ export interface UserApi {
         tokenValidity?: number | undefined;
         token?: string | undefined;
     }): Promise<string>;
+    /**
+     *
+     *  Revokes an authentication token of a user, by removing the token with the provided [key] from the user.
+     *  If the user has no token with the provided key, the user is returned unchanged.
+     *
+     *  This method requires the same permissions as other modifications of the user secrets, but since revoking tokens
+     *  can only reduce access it does not require an elevated security context. This means that a user can revoke
+     *  their own tokens regardless of how they authenticated, including through a long-lived token (e.g. to log out
+     *  from a session restored through a "remember me" token).
+     *
+     *  @param userId id of the user owning the token.
+     *  @param key the key of the token to revoke.
+     *  @return the updated user.
+     */
+    deleteToken(userId: string, key: string): Promise<User>;
+    /**
+     *
+     *  Revokes all the authentication tokens of a user, by removing them from the user, except for the tokens with a key
+     *  in [skip].
+     *
+     *  This method requires the same permissions as other modifications of the user secrets, but since revoking tokens
+     *  can only reduce access it does not require an elevated security context. This means that a user can revoke
+     *  their own tokens regardless of how they authenticated, including through a long-lived token.
+     *  This can be used for example to implement a "sign out everywhere" functionality.
+     *
+     *  @param userId id of the user owning the tokens.
+     *  @param skip keys of the tokens that should not be revoked. If null all tokens will be revoked.
+     *  @return the updated user.
+     */
+    deleteAllTokens(userId: string, options?: {
+        skip?: Array<string> | undefined;
+    }): Promise<User>;
     filterUsersBy(filter: BaseFilterOptions<User>): Promise<PaginatedListIterator<User>>;
     matchUsersBy(filter: BaseFilterOptions<User>): Promise<Array<string>>;
     filterUsersBySorted(filter: BaseSortableFilterOptions<User>): Promise<PaginatedListIterator<User>>;