@awell-health/awell-extensions 2.1.142 → 2.1.143

package/dist/extensions/markdown.json

@@ -160,8 +160,8 @@
     "changelog": "# MessageBird changelog"
   },
   "metriport": {
-    "readme": "---\ntitle: Metriport\ndescription: Metriport is Plaid for healthcare data.\n---\n# Metriport\n\nMetriport is Plaid for healthcare data. We help digital health companies access and manage patient health and medical data, through an open-source and universal API.\n\nThrough a single integration, our API enables modern health companies to get the comprehensive patient data they need from both HIEs and EHRs, as well as popular wearable devices.\n\nAs a developer-first interoperability solution, Metriport is powering the next wave of innovative companies, accelerating a revolution in digital health.\n\nTo learn more visit [https://www.metriport.com/](https://www.metriport.com/)\n# Extension settings\n\nIn order to set up this extension, **you will need to provide a Metriport API key**. You can obtain an API key via the Metriport dashboard by selecting the `Developers tab`. To learn more on how to get started with Metriport visit our [quick start docs](https://docs.metriport.com/medical-api/getting-started/quickstart) for our Medical API. Also, to better understand how our API keys work check out the [API Keys section](https://docs.metriport.com/home/api-info/api-keys) of our docs as well.\n\n# Custom Actions\n\n**GENERAL NOTE: Make sure to create Organizations and Facilities in Metriport before using this extension. A Patient must be associated with a Facility by providing the facilityId when stated in the actions.**\n\n## Create Patient\n\nCreates a Patient in Metriport for the specified Facility where the Patient is receiving care.\n\nOptionally, providing a **Cohort** ID enrolls the Patient in real-time monitoring by adding them to that cohort. Note that enrolling a Patient in real-time monitoring has downstream consequences: once you start receiving updates about the Patient, you are expected to contribute data back to Metriport.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/patient/create-patient) for more info.\n\n## Update Patient\n\nUpdates the specified Patient.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/patient/update-patient) for more info.\n\n## Get Patient\n\nRetrieves the specified Patient.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/patient/get-patient) for more info.\n\n## Remove Patient\n\nRemoves a Patient at Metriport and at HIEs the Patient is linked to.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/patient/delete-patient) for more info.\n\n## List Documents\n\nLists all Documents that can be retrieved for a Patient.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/document/list-documents) for more info.\n\n**NOTE: It also returns the status of querying Document references across HIEs, indicating whether there is an asynchronous query in progress (status processing) or not (status completed). If the query is in progress, you will also receive the total number of Documents to be queried as well as the ones that have already been completed.**\n\n## Query Documents\n\nTriggers a Document query for the specified Patient across HIEs.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/document/start-document-query) for more info.\n\n**NOTE: When executed, this endpoint triggers an asynchronous Document query with HIEs and immediately returns the status of Document query, processing .**\n\n## Get Document Url\n\nGets a presigned URL for downloading the specified Document.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/document/get-document) for more info.\n\n**NOTE: This endpoint returns a URL which you can use to download the specified Document using the file name provided from the List Documents endpoint.**\n\n## Remove Patient from Cohort\n\nRemoves the specified Patient from a cohort.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/cohort/remove-patients-from-cohort) for more info.\n\n## More Info\n\nFor more information on how to integrate with Metriport please visit our [Medical API docs](https://docs.metriport.com/medical-api/getting-started/quickstart)\n",
-    "changelog": "# Metriport changelog"
+    "readme": "---\ntitle: Metriport\ndescription: Metriport is Plaid for healthcare data.\n---\n# Metriport\n\nMetriport is Plaid for healthcare data. We help digital health companies access and manage patient health and medical data, through an open-source and universal API.\n\nThrough a single integration, our API enables modern health companies to get the comprehensive patient data they need from both HIEs and EHRs, as well as popular wearable devices.\n\nAs a developer-first interoperability solution, Metriport is powering the next wave of innovative companies, accelerating a revolution in digital health.\n\nTo learn more visit [https://www.metriport.com/](https://www.metriport.com/)\n# Extension settings\n\nIn order to set up this extension, **you will need to provide a Metriport API key**. You can obtain an API key via the Metriport dashboard by selecting the `Developers tab`. To learn more on how to get started with Metriport visit our [quick start docs](https://docs.metriport.com/medical-api/getting-started/quickstart) for our Medical API. Also, to better understand how our API keys work check out the [API Keys section](https://docs.metriport.com/home/api-info/api-keys) of our docs as well.\n\n# Custom Actions\n\n**GENERAL NOTE: Make sure to create Organizations and Facilities in Metriport before using this extension. A Patient must be associated with a Facility by providing the facilityId when stated in the actions.**\n\n## Create Patient\n\nCreates a Patient in Metriport for the specified Facility where the Patient is receiving care.\n\nOptionally, providing a **Cohort** ID enrolls the Patient in real-time monitoring by adding them to that cohort. Note that enrolling a Patient in real-time monitoring has downstream consequences: once you start receiving updates about the Patient, you are expected to contribute data back to Metriport.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/patient/create-patient) for more info.\n\n## Update Patient\n\nUpdates the specified Patient.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/patient/update-patient) for more info.\n\n## Get Patient\n\nRetrieves the specified Patient.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/patient/get-patient) for more info.\n\n## Remove Patient\n\nRemoves a Patient at Metriport and at HIEs the Patient is linked to.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/patient/delete-patient) for more info.\n\n## List Documents\n\nLists all Documents that can be retrieved for a Patient.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/document/list-documents) for more info.\n\n**NOTE: It also returns the status of querying Document references across HIEs, indicating whether there is an asynchronous query in progress (status processing) or not (status completed). If the query is in progress, you will also receive the total number of Documents to be queried as well as the ones that have already been completed.**\n\n## Query Documents\n\nTriggers a Document query for the specified Patient across HIEs.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/document/start-document-query) for more info.\n\n**NOTE: When executed, this endpoint triggers an asynchronous Document query with HIEs and immediately returns the status of Document query, processing .**\n\n## Get Document Url\n\nGets a presigned URL for downloading the specified Document.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/document/get-document) for more info.\n\n**NOTE: This endpoint returns a URL which you can use to download the specified Document using the file name provided from the List Documents endpoint.**\n\n## Remove Patient from Cohort\n\nRemoves the specified Patient from a cohort.\n\nVisit [endpoint docs](https://docs.metriport.com/medical-api/api-reference/cohort/remove-patients-from-cohort) for more info.\n\n## Get Webhook Bundle\n\nFetches the FHIR bundle from a Metriport webhook payload URL — e.g. the [Encounter Bundle](https://docs.metriport.com/medical-api/handling-data/patient-encounter-bundle) from an ADT notification, or a discharge summary. Pass the `bundleUrl` data point emitted by the **Enrollment** webhook; the action downloads the bundle and returns it on the `bundle` data point.\n\n**NOTE: Metriport pre-signed URLs are only valid for 10 minutes, so this action should run early in the care flow, shortly after the enrollment webhook fires.**\n\n| Field | Type | Description |\n| --- | --- | --- |\n| `url` | string | The pre-signed payload URL to fetch (the webhook's `bundleUrl` data point). |\n\n| Data point | Type | Description |\n| --- | --- | --- |\n| `bundle` | json | The FHIR bundle fetched from the URL. |\n\n# Webhooks\n\n## Enrollment\n\nAn enrollment trigger that starts a care flow when Metriport sends a [real-time patient notification](https://docs.metriport.com/medical-api/handling-data/realtime-patient-notifications).\n\nMetriport POSTs every notification type to the same endpoint, so this webhook discriminates on the notification `type` and only enrolls on two events. The `eventType` data point carries the raw Metriport webhook type:\n\n- `patient.admit` (HL7 ADT^A01) → `eventType` = `patient.admit`. The payload carries a pre-signed URL to the [FHIR Encounter Bundle](https://docs.metriport.com/medical-api/handling-data/patient-encounter-bundle).\n- `medical.discharge-summary` → `eventType` = `medical.discharge-summary`. This event is currently undocumented by Metriport and is modelled on the published `medical.*` webhook family (a `patients` array).\n\nThe webhook validates the request, emits the data points (including the pre-signed bundle URL on `bundleUrl`), and replies immediately — it does **not** download the bundle. Fetch the bundle later in the care flow with the **Get Webhook Bundle** action, using the `bundleUrl` data point. Because the URL expires after 10 minutes, run that action early.\n\nUse the `eventType` data point in your care flow to branch on admit vs discharge. Every other notification type (`patient.discharge`, `patient.transfer`, ...) is acknowledged with a `200` but does not enroll a patient. Metriport [verification `ping` messages](https://docs.metriport.com/medical-api/getting-started/webhooks#the-ping-message) are answered with a `200` that echoes the ping value back as `pong: <value>`.\n\n### Data points\n\n| Data point | Type | Description |\n| --- | --- | --- |\n| `eventType` | string | The Metriport webhook type: `patient.admit` or `medical.discharge-summary` |\n| `metriportPatientId` | string | The Metriport patient ID (also used as the patient identifier for enrollment) |\n| `externalId` | string | Your external patient ID, if provided to Metriport |\n| `admitTimestamp` | date | When the patient was admitted (admit events only) |\n| `whenSourceSent` | date | When the source sent the notification, if available (admit events) |\n| `messageId` | string | The Metriport message ID for the notification |\n| `bundleUrl` | string | Pre-signed URL to the FHIR bundle; fetch it with the **Get Webhook Bundle** action (valid for 10 minutes) |\n\n### Verifying incoming requests\n\nOptionally set the **Webhook Key** setting to the webhook key from the Metriport dashboard (Settings/Developers tab). Metriport [authenticates each webhook](https://docs.metriport.com/medical-api/getting-started/webhooks#authentication) with an HMAC-SHA256 signature of the raw request body, keyed with your webhook key and sent in the `x-metriport-signature` header. When the setting is populated, the webhook recomputes the HMAC over the raw body and rejects any request whose signature is missing or does not match (`401`). When left empty, requests are not verified.\n\n## More Info\n\nFor more information on how to integrate with Metriport please visit our [Medical API docs](https://docs.metriport.com/medical-api/getting-started/quickstart)\n",
+    "changelog": "# Metriport changelog\n\n## July 2026\n\n- Add `enrollment` webhook: an enrollment trigger for Metriport real-time patient notifications. The `eventType` data point carries the Metriport webhook type (`patient.admit` or `medical.discharge-summary`) so care flows can distinguish on it. The webhook validates and replies immediately, emitting the pre-signed FHIR bundle URL on the `bundleUrl` data point rather than downloading the bundle inline.\n- Add `Get Webhook Bundle` action: fetches the FHIR bundle from a Metriport webhook payload URL (the webhook's `bundleUrl`), for use later in the care flow.\n- Add optional `Webhook Key` setting used to verify incoming webhook requests via Metriport's HMAC-SHA256 signature (`x-metriport-signature` header), computed over the raw request body."
   },
   "nexuzhealth": {
     "readme": "---\ntitle: nexuzhealth\ndescription: Demo extension for nexuzhealth\n---\n\nThis is an extension that can only be used for demo purposes.",

package/dist/extensions/metriport/actions/index.d.ts

@@ -22,6 +22,13 @@ export declare const actions: {
             description: string;
             required: false;
         };
+        webhookKey: {
+            key: string;
+            label: string;
+            obfuscated: true;
+            description: string;
+            required: false;
+        };
     }, "firstName" | "lastName" | "email" | "dob" | "phone" | "city" | "country" | "state" | "zip" | "addressLine1" | "addressLine2" | "genderAtBirth" | "driversLicenseValue" | "driversLicenseState">;
     createPatient: import("@awell-health/extensions-core").Action<{
         phone: {
@@ -145,6 +152,13 @@ export declare const actions: {
             description: string;
             required: false;
         };
+        webhookKey: {
+            key: string;
+            label: string;
+            obfuscated: true;
+            description: string;
+            required: false;
+        };
     }, "patientId">;
     updatePatient: import("@awell-health/extensions-core").Action<{
         phone: {
@@ -275,6 +289,13 @@ export declare const actions: {
             description: string;
             required: false;
         };
+        webhookKey: {
+            key: string;
+            label: string;
+            obfuscated: true;
+            description: string;
+            required: false;
+        };
     }, string>;
     deletePatient: import("@awell-health/extensions-core").Action<{
         facilityId: {
@@ -306,6 +327,13 @@ export declare const actions: {
             description: string;
             required: false;
         };
+        webhookKey: {
+            key: string;
+            label: string;
+            obfuscated: true;
+            description: string;
+            required: false;
+        };
     }, string>;
     listDocuments: import("@awell-health/extensions-core").Action<{
         patientId: {
@@ -330,6 +358,13 @@ export declare const actions: {
             description: string;
             required: false;
         };
+        webhookKey: {
+            key: string;
+            label: string;
+            obfuscated: true;
+            description: string;
+            required: false;
+        };
     }, "documents">;
     queryDocs: import("@awell-health/extensions-core").Action<{
         patientId: {
@@ -360,6 +395,13 @@ export declare const actions: {
             description: string;
             required: false;
         };
+        webhookKey: {
+            key: string;
+            label: string;
+            obfuscated: true;
+            description: string;
+            required: false;
+        };
     }, "downloadStatus" | "downloadTotal" | "downloadSuccessful" | "requestId">;
     getUrl: import("@awell-health/extensions-core").Action<{
         fileName: {
@@ -384,6 +426,13 @@ export declare const actions: {
             description: string;
             required: false;
         };
+        webhookKey: {
+            key: string;
+            label: string;
+            obfuscated: true;
+            description: string;
+            required: false;
+        };
     }, "url">;
     startNetworkQuery: import("@awell-health/extensions-core").Action<{
         patientId: {
@@ -408,6 +457,13 @@ export declare const actions: {
             description: string;
             required: false;
         };
+        webhookKey: {
+            key: string;
+            label: string;
+            obfuscated: true;
+            description: string;
+            required: false;
+        };
     }, "status" | "requestId">;
     startConsolidatedQuery: import("@awell-health/extensions-core").Action<{
         patientId: {
@@ -456,6 +512,13 @@ export declare const actions: {
             description: string;
             required: false;
         };
+        webhookKey: {
+            key: string;
+            label: string;
+            obfuscated: true;
+            description: string;
+            required: false;
+        };
     }, "status" | "requestId">;
     getConsolidatedQueryStatus: import("@awell-health/extensions-core").Action<{
         patientId: {
@@ -480,7 +543,45 @@ export declare const actions: {
             description: string;
             required: false;
         };
+        webhookKey: {
+            key: string;
+            label: string;
+            obfuscated: true;
+            description: string;
+            required: false;
+        };
     }, "status" | "queries">;
+    getWebhookBundle: import("@awell-health/extensions-core").Action<{
+        url: {
+            id: string;
+            label: string;
+            description: string;
+            type: import("@awell-health/extensions-core").FieldType.STRING;
+            required: true;
+        };
+    }, {
+        apiKey: {
+            key: string;
+            label: string;
+            obfuscated: true;
+            description: string;
+            required: true;
+        };
+        baseUrl: {
+            key: string;
+            label: string;
+            obfuscated: false;
+            description: string;
+            required: false;
+        };
+        webhookKey: {
+            key: string;
+            label: string;
+            obfuscated: true;
+            description: string;
+            required: false;
+        };
+    }, "bundle">;
     removePatientFromCohort: import("@awell-health/extensions-core").Action<{
         cohortId: {
             id: string;
@@ -511,5 +612,12 @@ export declare const actions: {
             description: string;
             required: false;
         };
+        webhookKey: {
+            key: string;
+            label: string;
+            obfuscated: true;
+            description: string;
+            required: false;
+        };
     }, "message" | "cohort">;
 };

package/dist/extensions/metriport/actions/index.js

@@ -11,6 +11,7 @@ const getUrl_1 = require("./document/getUrl");
 const startNetworkQuery_1 = require("./network/startNetworkQuery");
 const startConsolidatedQuery_1 = require("./consolidated/startConsolidatedQuery");
 const getConsolidatedQueryStatus_1 = require("./consolidated/getConsolidatedQueryStatus");
+const getWebhookBundle_1 = require("./webhookBundle/getWebhookBundle");
 const removePatientFromCohort_1 = require("./cohort/removePatientFromCohort");
 exports.actions = {
     getPatient: get_1.getPatient,
@@ -23,6 +24,7 @@ exports.actions = {
     startNetworkQuery: startNetworkQuery_1.startNetworkQuery,
     startConsolidatedQuery: startConsolidatedQuery_1.startConsolidatedQuery,
     getConsolidatedQueryStatus: getConsolidatedQueryStatus_1.getConsolidatedQueryStatus,
+    getWebhookBundle: getWebhookBundle_1.getWebhookBundle,
     removePatientFromCohort: removePatientFromCohort_1.removePatientFromCohort,
 };
 //# sourceMappingURL=index.js.map

package/dist/extensions/metriport/actions/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../extensions/metriport/actions/index.ts"],"names":[],"mappings":";;;AAAA,uCAA0C;AAC1C,6CAAgD;AAChD,6CAAgD;AAChD,6CAAgD;AAChD,0CAA+C;AAC/C,4CAA4C;AAC5C,8CAA0C;AAC1C,mEAA+D;AAC/D,kFAA8E;AAC9E,0FAAsF;AACtF,8EAA0E;AAE7D,QAAA,OAAO,GAAG;IACrB,UAAU,EAAV,gBAAU;IACV,aAAa,EAAb,sBAAa;IACb,aAAa,EAAb,sBAAa;IACb,aAAa,EAAb,sBAAa;IACb,aAAa,EAAb,oBAAa;IACb,SAAS,EAAT,iBAAS;IACT,MAAM,EAAN,eAAM;IACN,iBAAiB,EAAjB,qCAAiB;IACjB,sBAAsB,EAAtB,+CAAsB;IACtB,0BAA0B,EAA1B,uDAA0B;IAC1B,uBAAuB,EAAvB,iDAAuB;CACxB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../extensions/metriport/actions/index.ts"],"names":[],"mappings":";;;AAAA,uCAA0C;AAC1C,6CAAgD;AAChD,6CAAgD;AAChD,6CAAgD;AAChD,0CAA+C;AAC/C,4CAA4C;AAC5C,8CAA0C;AAC1C,mEAA+D;AAC/D,kFAA8E;AAC9E,0FAAsF;AACtF,uEAAmE;AACnE,8EAA0E;AAE7D,QAAA,OAAO,GAAG;IACrB,UAAU,EAAV,gBAAU;IACV,aAAa,EAAb,sBAAa;IACb,aAAa,EAAb,sBAAa;IACb,aAAa,EAAb,sBAAa;IACb,aAAa,EAAb,oBAAa;IACb,SAAS,EAAT,iBAAS;IACT,MAAM,EAAN,eAAM;IACN,iBAAiB,EAAjB,qCAAiB;IACjB,sBAAsB,EAAtB,+CAAsB;IACtB,0BAA0B,EAA1B,uDAA0B;IAC1B,gBAAgB,EAAhB,mCAAgB;IAChB,uBAAuB,EAAvB,iDAAuB;CACxB,CAAA"}

package/dist/extensions/metriport/actions/webhookBundle/dataPoints.d.ts

@@ -0,0 +1,6 @@
+export declare const dataPoints: {
+    bundle: {
+        key: string;
+        valueType: "json";
+    };
+};

package/dist/extensions/metriport/actions/webhookBundle/dataPoints.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dataPoints = void 0;
+exports.dataPoints = {
+    bundle: {
+        key: 'bundle',
+        valueType: 'json',
+    },
+};
+//# sourceMappingURL=dataPoints.js.map

package/dist/extensions/metriport/actions/webhookBundle/dataPoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataPoints.js","sourceRoot":"","sources":["../../../../../extensions/metriport/actions/webhookBundle/dataPoints.ts"],"names":[],"mappings":";;;AAEa,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE;QACN,GAAG,EAAE,QAAQ;QACb,SAAS,EAAE,MAAM;KAClB;CAC4C,CAAA"}

package/dist/extensions/metriport/actions/webhookBundle/fetchBundle.d.ts

@@ -0,0 +1,7 @@
+import { type Bundle } from '@medplum/fhirtypes';
+/**
+ * Downloads the FHIR bundle from a Metriport webhook payload URL. The URL is
+ * pre-signed and only valid for 10 minutes.
+ * https://docs.metriport.com/medical-api/handling-data/patient-encounter-bundle
+ */
+export declare const fetchBundle: (url: string) => Promise<Bundle>;

package/dist/extensions/metriport/actions/webhookBundle/fetchBundle.js

@@ -0,0 +1,23 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchBundle = void 0;
+const axios_1 = __importDefault(require("axios"));
+/**
+ * Downloads the FHIR bundle from a Metriport webhook payload URL. The URL is
+ * pre-signed and only valid for 10 minutes.
+ * https://docs.metriport.com/medical-api/handling-data/patient-encounter-bundle
+ */
+const fetchBundle = async (url) => {
+    const { data } = await axios_1.default.get(url, {
+        // The bundle can be large; give it room and expect JSON back.
+        responseType: 'json',
+        maxContentLength: Infinity,
+        maxBodyLength: Infinity,
+    });
+    return data;
+};
+exports.fetchBundle = fetchBundle;
+//# sourceMappingURL=fetchBundle.js.map

package/dist/extensions/metriport/actions/webhookBundle/fetchBundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchBundle.js","sourceRoot":"","sources":["../../../../../extensions/metriport/actions/webhookBundle/fetchBundle.ts"],"names":[],"mappings":";;;;;;AAAA,kDAAyB;AAGzB;;;;GAIG;AACI,MAAM,WAAW,GAAG,KAAK,EAAE,GAAW,EAAmB,EAAE;IAChE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAK,CAAC,GAAG,CAAS,GAAG,EAAE;QAC5C,8DAA8D;QAC9D,YAAY,EAAE,MAAM;QACpB,gBAAgB,EAAE,QAAQ;QAC1B,aAAa,EAAE,QAAQ;KACxB,CAAC,CAAA;IACF,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AARY,QAAA,WAAW,eAQvB"}

package/dist/extensions/metriport/actions/webhookBundle/fields.d.ts

@@ -0,0 +1,10 @@
+import { FieldType } from '@awell-health/extensions-core';
+export declare const fields: {
+    url: {
+        id: string;
+        label: string;
+        description: string;
+        type: FieldType.STRING;
+        required: true;
+    };
+};

package/dist/extensions/metriport/actions/webhookBundle/fields.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fields = void 0;
+const extensions_core_1 = require("@awell-health/extensions-core");
+exports.fields = {
+    url: {
+        id: 'url',
+        label: 'Bundle URL',
+        description: 'The pre-signed Metriport payload URL to fetch the FHIR bundle from. This is the `bundleUrl` data point emitted by the enrollment webhook. Note: Metriport pre-signed URLs are only valid for 10 minutes, so this action should run shortly after the webhook fires.',
+        type: extensions_core_1.FieldType.STRING,
+        required: true,
+    },
+};
+//# sourceMappingURL=fields.js.map

package/dist/extensions/metriport/actions/webhookBundle/fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fields.js","sourceRoot":"","sources":["../../../../../extensions/metriport/actions/webhookBundle/fields.ts"],"names":[],"mappings":";;;AAAA,mEAAqE;AAExD,QAAA,MAAM,GAAG;IACpB,GAAG,EAAE;QACH,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,YAAY;QACnB,WAAW,EACT,qQAAqQ;QACvQ,IAAI,EAAE,2BAAS,CAAC,MAAM;QACtB,QAAQ,EAAE,IAAI;KACf;CAC8B,CAAA"}

package/dist/extensions/metriport/actions/webhookBundle/getWebhookBundle.d.ts

@@ -0,0 +1,5 @@
+import { type Action } from '@awell-health/extensions-core';
+import { type settings } from '../../settings';
+import { fields } from './fields';
+import { dataPoints } from './dataPoints';
+export declare const getWebhookBundle: Action<typeof fields, typeof settings, keyof typeof dataPoints>;

package/dist/extensions/metriport/actions/webhookBundle/getWebhookBundle.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getWebhookBundle = void 0;
+const extensions_core_1 = require("@awell-health/extensions-core");
+const errorHandler_1 = require("../../shared/errorHandler");
+const fields_1 = require("./fields");
+const validation_1 = require("./validation");
+const dataPoints_1 = require("./dataPoints");
+const fetchBundle_1 = require("./fetchBundle");
+exports.getWebhookBundle = {
+    key: 'getWebhookBundle',
+    category: extensions_core_1.Category.EHR_INTEGRATIONS,
+    title: 'Get Webhook Bundle',
+    description: 'Fetches the FHIR bundle from a Metriport webhook payload URL (e.g. the Encounter Bundle from an ADT notification, or a discharge summary). The URL is provided by the enrollment webhook on the `bundleUrl` data point and is only valid for 10 minutes.',
+    fields: fields_1.fields,
+    previewable: true,
+    supports_automated_retries: true,
+    dataPoints: dataPoints_1.dataPoints,
+    onActivityCreated: async (payload, onComplete, onError) => {
+        try {
+            const { url } = validation_1.getWebhookBundleSchema.parse(payload.fields);
+            const bundle = await (0, fetchBundle_1.fetchBundle)(url);
+            await onComplete({
+                data_points: {
+                    bundle: JSON.stringify(bundle),
+                },
+            });
+        }
+        catch (err) {
+            await (0, errorHandler_1.handleErrorMessage)(err, onError);
+        }
+    },
+};
+//# sourceMappingURL=getWebhookBundle.js.map

package/dist/extensions/metriport/actions/webhookBundle/getWebhookBundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getWebhookBundle.js","sourceRoot":"","sources":["../../../../../extensions/metriport/actions/webhookBundle/getWebhookBundle.ts"],"names":[],"mappings":";;;AAAA,mEAAqE;AAErE,4DAA8D;AAC9D,qCAAiC;AACjC,6CAAqD;AACrD,6CAAyC;AACzC,+CAA2C;AAE9B,QAAA,gBAAgB,GAIzB;IACF,GAAG,EAAE,kBAAkB;IACvB,QAAQ,EAAE,0BAAQ,CAAC,gBAAgB;IACnC,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EACT,0PAA0P;IAC5P,MAAM,EAAN,eAAM;IACN,WAAW,EAAE,IAAI;IACjB,0BAA0B,EAAE,IAAI;IAChC,UAAU,EAAV,uBAAU;IACV,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAiB,EAAE;QACvE,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,EAAE,GAAG,mCAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAE5D,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAW,EAAC,GAAG,CAAC,CAAA;YAErC,MAAM,UAAU,CAAC;gBACf,WAAW,EAAE;oBACX,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;iBAC/B;aACF,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAA,iCAAkB,EAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QACxC,CAAC;IACH,CAAC;CACF,CAAA"}

package/dist/extensions/metriport/actions/webhookBundle/validation.d.ts

@@ -0,0 +1,8 @@
+import { z } from 'zod';
+export declare const getWebhookBundleSchema: z.ZodObject<{
+    url: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+}, {
+    url: string;
+}>;

package/dist/extensions/metriport/actions/webhookBundle/validation.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getWebhookBundleSchema = void 0;
+const zod_1 = require("zod");
+exports.getWebhookBundleSchema = zod_1.z.object({
+    url: zod_1.z
+        .string({ errorMap: () => ({ message: 'Missing url' }) })
+        .trim()
+        .url({ message: 'A valid bundle URL is required' }),
+});
+//# sourceMappingURL=validation.js.map

package/dist/extensions/metriport/actions/webhookBundle/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../extensions/metriport/actions/webhookBundle/validation.ts"],"names":[],"mappings":";;;AAAA,6BAAuB;AAEV,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,OAAC;SACH,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;SACxD,IAAI,EAAE;SACN,GAAG,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;CACtD,CAAC,CAAA"}

package/dist/extensions/metriport/index.js

@@ -4,7 +4,7 @@ exports.Metriport = void 0;
 const actions_1 = require("./actions");
 const settings_1 = require("./settings");
 const extensions_core_1 = require("@awell-health/extensions-core");
-// import { webhooks } from './webhooks'
+const webhooks_1 = require("./webhooks");
 exports.Metriport = {
     key: 'metriport',
     title: 'Metriport',
@@ -17,6 +17,6 @@ exports.Metriport = {
     },
     settings: settings_1.settings,
     actions: actions_1.actions,
-    // webhooks,
+    webhooks: webhooks_1.webhooks,
 };
 //# sourceMappingURL=index.js.map

package/dist/extensions/metriport/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../extensions/metriport/index.ts"],"names":[],"mappings":";;;AAAA,uCAAmC;AAEnC,yCAAqC;AACrC,mEAAoE;AACpE,wCAAwC;AAE3B,QAAA,SAAS,GAAc;IAClC,GAAG,EAAE,WAAW;IAChB,KAAK,EAAE,WAAW;IAClB,WAAW,EACT,qHAAqH;IACvH,QAAQ,EACN,gGAAgG;IAClG,QAAQ,EAAE,0BAAQ,CAAC,gBAAgB;IACnC,MAAM,EAAE;QACN,UAAU,EAAE,4BAAU,CAAC,QAAQ;QAC/B,UAAU,EAAE,WAAW;KACxB;IACD,QAAQ,EAAR,mBAAQ;IACR,OAAO,EAAP,iBAAO;IACP,YAAY;CACb,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../extensions/metriport/index.ts"],"names":[],"mappings":";;;AAAA,uCAAmC;AAEnC,yCAAqC;AACrC,mEAAoE;AACpE,yCAAqC;AAExB,QAAA,SAAS,GAAc;IAClC,GAAG,EAAE,WAAW;IAChB,KAAK,EAAE,WAAW;IAClB,WAAW,EACT,qHAAqH;IACvH,QAAQ,EACN,gGAAgG;IAClG,QAAQ,EAAE,0BAAQ,CAAC,gBAAgB;IACnC,MAAM,EAAE;QACN,UAAU,EAAE,4BAAU,CAAC,QAAQ;QAC/B,UAAU,EAAE,WAAW;KACxB;IACD,QAAQ,EAAR,mBAAQ;IACR,OAAO,EAAP,iBAAO;IACP,QAAQ,EAAR,mBAAQ;CACT,CAAA"}

package/dist/extensions/metriport/settings.d.ts

@@ -13,4 +13,11 @@ export declare const settings: {
         description: string;
         required: false;
     };
+    webhookKey: {
+        key: string;
+        label: string;
+        obfuscated: true;
+        description: string;
+        required: false;
+    };
 };

package/dist/extensions/metriport/settings.js

@@ -16,5 +16,12 @@ exports.settings = {
         description: 'The base URL of the Metriport Medical API.',
         required: false,
     },
+    webhookKey: {
+        key: 'webhookKey',
+        label: 'Webhook Key',
+        obfuscated: true,
+        description: 'The Metriport webhook key used to verify incoming webhook requests. Metriport signs each request with an HMAC-SHA256 of the raw body using this key, sent in the `x-metriport-signature` header. Found in the Settings/Developers tab of the Metriport dashboard. When left empty, incoming webhook requests are not verified.',
+        required: false,
+    },
 };
 //# sourceMappingURL=settings.js.map

package/dist/extensions/metriport/settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../extensions/metriport/settings.ts"],"names":[],"mappings":";;;AAEa,QAAA,QAAQ,GAAG;IACtB,MAAM,EAAE;QACN,GAAG,EAAE,QAAQ;QACb,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,4CAA4C;QACzD,QAAQ,EAAE,IAAI;KACf;IACD,OAAO,EAAE;QACP,GAAG,EAAE,SAAS;QACd,KAAK,EAAE,UAAU;QACjB,UAAU,EAAE,KAAK;QACjB,WAAW,EAAE,4CAA4C;QACzD,QAAQ,EAAE,KAAK;KAChB;CACgC,CAAA"}
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../extensions/metriport/settings.ts"],"names":[],"mappings":";;;AAEa,QAAA,QAAQ,GAAG;IACtB,MAAM,EAAE;QACN,GAAG,EAAE,QAAQ;QACb,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,4CAA4C;QACzD,QAAQ,EAAE,IAAI;KACf;IACD,OAAO,EAAE;QACP,GAAG,EAAE,SAAS;QACd,KAAK,EAAE,UAAU;QACjB,UAAU,EAAE,KAAK;QACjB,WAAW,EAAE,4CAA4C;QACzD,QAAQ,EAAE,KAAK;KAChB;IACD,UAAU,EAAE;QACV,GAAG,EAAE,YAAY;QACjB,KAAK,EAAE,aAAa;QACpB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,gUAAgU;QAClU,QAAQ,EAAE,KAAK;KAChB;CACgC,CAAA"}

package/dist/extensions/metriport/shared/verifyWebhookSignature.d.ts

@@ -0,0 +1,29 @@
+import { type IncomingHttpHeaders } from 'http';
+/**
+ * The header Metriport uses to deliver the webhook signature.
+ * https://docs.metriport.com/medical-api/getting-started/webhooks#authentication
+ */
+export declare const METRIPORT_SIGNATURE_HEADER = "x-metriport-signature";
+/**
+ * Extracts the signature from the request headers, normalising the
+ * `string | string[] | undefined` type that `IncomingHttpHeaders` allows.
+ */
+export declare const getSignatureFromHeaders: (headers: IncomingHttpHeaders) => string | undefined;
+/**
+ * Verifies a Metriport webhook request.
+ *
+ * Metriport signs each request with an HMAC-SHA256 of the raw request body
+ * using the webhook key, delivered in the `x-metriport-signature` header. The
+ * hash must be computed over the raw body (never the re-serialized payload),
+ * which is why this takes the `rawBody` buffer.
+ * https://docs.metriport.com/medical-api/getting-started/webhooks#authentication
+ *
+ * @returns `true` if the request is authorized: either no webhook key is
+ * configured (verification disabled) or the signature is present and valid.
+ * `false` when a key is configured but the signature is missing or invalid.
+ */
+export declare const isWebhookRequestAuthorized: ({ webhookKey, rawBody, headers, }: {
+    webhookKey: string | undefined;
+    rawBody: Buffer;
+    headers: IncomingHttpHeaders;
+}) => boolean;

package/dist/extensions/metriport/shared/verifyWebhookSignature.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isWebhookRequestAuthorized = exports.getSignatureFromHeaders = exports.METRIPORT_SIGNATURE_HEADER = void 0;
+const lodash_1 = require("lodash");
+const api_sdk_1 = require("@metriport/api-sdk");
+/**
+ * The header Metriport uses to deliver the webhook signature.
+ * https://docs.metriport.com/medical-api/getting-started/webhooks#authentication
+ */
+exports.METRIPORT_SIGNATURE_HEADER = 'x-metriport-signature';
+/**
+ * Extracts the signature from the request headers, normalising the
+ * `string | string[] | undefined` type that `IncomingHttpHeaders` allows.
+ */
+const getSignatureFromHeaders = (headers) => {
+    const header = headers[exports.METRIPORT_SIGNATURE_HEADER];
+    return Array.isArray(header) ? header[0] : header;
+};
+exports.getSignatureFromHeaders = getSignatureFromHeaders;
+/**
+ * Verifies a Metriport webhook request.
+ *
+ * Metriport signs each request with an HMAC-SHA256 of the raw request body
+ * using the webhook key, delivered in the `x-metriport-signature` header. The
+ * hash must be computed over the raw body (never the re-serialized payload),
+ * which is why this takes the `rawBody` buffer.
+ * https://docs.metriport.com/medical-api/getting-started/webhooks#authentication
+ *
+ * @returns `true` if the request is authorized: either no webhook key is
+ * configured (verification disabled) or the signature is present and valid.
+ * `false` when a key is configured but the signature is missing or invalid.
+ */
+const isWebhookRequestAuthorized = ({ webhookKey, rawBody, headers, }) => {
+    // When no webhook key is configured, signature verification is disabled.
+    if ((0, lodash_1.isNil)(webhookKey) || webhookKey.length === 0) {
+        return true;
+    }
+    const signature = (0, exports.getSignatureFromHeaders)(headers);
+    if ((0, lodash_1.isNil)(signature) || signature.length === 0) {
+        return false;
+    }
+    return api_sdk_1.MetriportMedicalApi.verifyWebhookSignature(webhookKey, rawBody, signature);
+};
+exports.isWebhookRequestAuthorized = isWebhookRequestAuthorized;
+//# sourceMappingURL=verifyWebhookSignature.js.map

package/dist/extensions/metriport/shared/verifyWebhookSignature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyWebhookSignature.js","sourceRoot":"","sources":["../../../../extensions/metriport/shared/verifyWebhookSignature.ts"],"names":[],"mappings":";;;AAAA,mCAA8B;AAE9B,gDAAwD;AAExD;;;GAGG;AACU,QAAA,0BAA0B,GAAG,uBAAuB,CAAA;AAEjE;;;GAGG;AACI,MAAM,uBAAuB,GAAG,CACrC,OAA4B,EACR,EAAE;IACtB,MAAM,MAAM,GAAG,OAAO,CAAC,kCAA0B,CAAC,CAAA;IAClD,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;AACnD,CAAC,CAAA;AALY,QAAA,uBAAuB,2BAKnC;AAED;;;;;;;;;;;;GAYG;AACI,MAAM,0BAA0B,GAAG,CAAC,EACzC,UAAU,EACV,OAAO,EACP,OAAO,GAKR,EAAW,EAAE;IACZ,yEAAyE;IACzE,IAAI,IAAA,cAAK,EAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,SAAS,GAAG,IAAA,+BAAuB,EAAC,OAAO,CAAC,CAAA;IAClD,IAAI,IAAA,cAAK,EAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,6BAAmB,CAAC,sBAAsB,CAC/C,UAAU,EACV,OAAO,EACP,SAAS,CACV,CAAA;AACH,CAAC,CAAA;AAxBY,QAAA,0BAA0B,8BAwBtC"}

package/dist/extensions/metriport/webhooks/enrollment.d.ts

@@ -0,0 +1,41 @@
+import { type Webhook } from '@awell-health/extensions-core';
+import { type settings } from '../settings';
+import { type MetriportEnrollmentWebhookPayload } from './types';
+/**
+ * The identifier system used to enroll a patient based on their Metriport
+ * patient ID.
+ */
+export declare const METRIPORT_PATIENT_IDENTIFIER_SYSTEM = "https://metriport.com/fhir/patient";
+declare const dataPoints: {
+    eventType: {
+        key: string;
+        valueType: "string";
+    };
+    metriportPatientId: {
+        key: string;
+        valueType: "string";
+    };
+    externalId: {
+        key: string;
+        valueType: "string";
+    };
+    admitTimestamp: {
+        key: string;
+        valueType: "date";
+    };
+    whenSourceSent: {
+        key: string;
+        valueType: "date";
+    };
+    messageId: {
+        key: string;
+        valueType: "string";
+    };
+    bundleUrl: {
+        key: string;
+        valueType: "string";
+    };
+};
+export declare const enrollment: Webhook<keyof typeof dataPoints, MetriportEnrollmentWebhookPayload, typeof settings>;
+export type Enrollment = typeof enrollment;
+export {};