@fhirfly-io/shl 0.3.1 → 0.4.0

package/dist/express.js

@@ -1,4 +1,4 @@
-import { createHandler } from './chunk-ZEE5RXIS.js';
+import { createHandler } from './chunk-KGEFZQ6W.js';
 import './chunk-PZ5AY32C.js';
 
 // src/adapters/express.ts
@@ -9,7 +9,8 @@ function expressMiddleware(config) {
       method: req.method,
       path: req.path,
       body: req.body,
-      headers: normalizeHeaders(req.headers)
+      headers: normalizeHeaders(req.headers),
+      query: normalizeQuery(req.query)
     };
     handle(handlerReq).then((result) => {
       res.status(result.status).set(result.headers).send(
@@ -29,6 +30,14 @@ function normalizeHeaders(headers) {
   }
   return result;
 }
+function normalizeQuery(query) {
+  if (!query) return void 0;
+  const result = {};
+  for (const [key, value] of Object.entries(query)) {
+    result[key] = Array.isArray(value) ? value[0] : value;
+  }
+  return result;
+}
 
 export { expressMiddleware };
 //# sourceMappingURL=express.js.map

package/dist/express.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/adapters/express.ts"],"names":[],"mappings":";;;;AAyCO,SAAS,kBACd,MAAA,EACqD;AACrD,EAAA,MAAM,MAAA,GAAS,cAAc,MAAM,CAAA;AAEnC,EAAA,OAAO,CAAC,KAAqB,GAAA,KAA+B;AAC1D,IAAA,MAAM,UAAA,GAA6B;AAAA,MACjC,QAAQ,GAAA,CAAI,MAAA;AAAA,MACZ,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO;AAAA,KACvC;AAEA,IAAA,MAAA,CAAO,UAAU,CAAA,CACd,IAAA,CAAK,CAAC,MAAA,KAAW;AAChB,MAAA,GAAA,CAAI,OAAO,MAAA,CAAO,MAAM,EAAE,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAC5C,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA,CACA,KAAA,CAAM,MAAM;AACX,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,GAAA,CAAI,EAAE,cAAA,EAAgB,kBAAA,EAAoB,CAAA,CAAE,IAAA;AAAA,QAC1D,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,yBAAyB;AAAA,OACnD;AAAA,IACF,CAAC,CAAA;AAAA,EACL,CAAA;AACF;AAEA,SAAS,iBACP,OAAA,EACoC;AACpC,EAAA,MAAM,SAA6C,EAAC;AACpD,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,MAAA,CAAO,GAAA,CAAI,WAAA,EAAa,CAAA,GAAI,KAAA,CAAM,QAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,CAAC,CAAA,GAAI,KAAA;AAAA,EAChE;AACA,EAAA,OAAO,MAAA;AACT","file":"express.js","sourcesContent":["// Copyright 2026 FHIRfly.io LLC. All rights reserved.\n// Licensed under the MIT License. See LICENSE file in the project root.\nimport { createHandler } from \"../server/handler.js\";\nimport type { SHLHandlerConfig, HandlerRequest } from \"../server/types.js\";\n\n// Minimal Express types — avoids requiring @types/express at runtime\ninterface ExpressRequest {\n  method: string;\n  path: string;\n  body?: unknown;\n  headers: Record<string, string | string[] | undefined>;\n}\n\ninterface ExpressResponse {\n  status(code: number): ExpressResponse;\n  set(headers: Record<string, string>): ExpressResponse;\n  send(body: string | Buffer): void;\n}\n\n/**\n * Create an Express-compatible middleware for serving SMART Health Links.\n *\n * Mount this on the path prefix where your SHL server lives. The middleware\n * handles `POST /:shlId` (manifest) and `GET /:shlId/content` (encrypted content).\n *\n * @example\n * ```ts\n * import express from \"express\";\n * import { expressMiddleware } from \"@fhirfly-io/shl/express\";\n * import { ServerLocalStorage } from \"@fhirfly-io/shl/server\";\n *\n * const app = express();\n * app.use(express.json());\n * app.use(\"/shl\", expressMiddleware({\n *   storage: new ServerLocalStorage({\n *     directory: \"./shl-data\",\n *     baseUrl: \"https://shl.example.com\",\n *   }),\n * }));\n * ```\n */\nexport function expressMiddleware(\n  config: SHLHandlerConfig,\n): (req: ExpressRequest, res: ExpressResponse) => void {\n  const handle = createHandler(config);\n\n  return (req: ExpressRequest, res: ExpressResponse): void => {\n    const handlerReq: HandlerRequest = {\n      method: req.method,\n      path: req.path,\n      body: req.body,\n      headers: normalizeHeaders(req.headers),\n    };\n\n    handle(handlerReq)\n      .then((result) => {\n        res.status(result.status).set(result.headers).send(\n          typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n        );\n      })\n      .catch(() => {\n        res.status(500).set({ \"content-type\": \"application/json\" }).send(\n          JSON.stringify({ error: \"Internal server error\" }),\n        );\n      });\n  };\n}\n\nfunction normalizeHeaders(\n  headers: Record<string, string | string[] | undefined>,\n): Record<string, string | undefined> {\n  const result: Record<string, string | undefined> = {};\n  for (const [key, value] of Object.entries(headers)) {\n    result[key.toLowerCase()] = Array.isArray(value) ? value[0] : value;\n  }\n  return result;\n}\n"]}
+{"version":3,"sources":["../src/adapters/express.ts"],"names":[],"mappings":";;;;AA0CO,SAAS,kBACd,MAAA,EACqD;AACrD,EAAA,MAAM,MAAA,GAAS,cAAc,MAAM,CAAA;AAEnC,EAAA,OAAO,CAAC,KAAqB,GAAA,KAA+B;AAC1D,IAAA,MAAM,UAAA,GAA6B;AAAA,MACjC,QAAQ,GAAA,CAAI,MAAA;AAAA,MACZ,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO,CAAA;AAAA,MACrC,KAAA,EAAO,cAAA,CAAe,GAAA,CAAI,KAAK;AAAA,KACjC;AAEA,IAAA,MAAA,CAAO,UAAU,CAAA,CACd,IAAA,CAAK,CAAC,MAAA,KAAW;AAChB,MAAA,GAAA,CAAI,OAAO,MAAA,CAAO,MAAM,EAAE,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAC5C,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA,CACA,KAAA,CAAM,MAAM;AACX,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,GAAA,CAAI,EAAE,cAAA,EAAgB,kBAAA,EAAoB,CAAA,CAAE,IAAA;AAAA,QAC1D,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,yBAAyB;AAAA,OACnD;AAAA,IACF,CAAC,CAAA;AAAA,EACL,CAAA;AACF;AAEA,SAAS,iBACP,OAAA,EACoC;AACpC,EAAA,MAAM,SAA6C,EAAC;AACpD,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,MAAA,CAAO,GAAA,CAAI,WAAA,EAAa,CAAA,GAAI,KAAA,CAAM,QAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,CAAC,CAAA,GAAI,KAAA;AAAA,EAChE;AACA,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,eACP,KAAA,EACgD;AAChD,EAAA,IAAI,CAAC,OAAO,OAAO,MAAA;AACnB,EAAA,MAAM,SAA6C,EAAC;AACpD,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAChD,IAAA,MAAA,CAAO,GAAG,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,CAAC,CAAA,GAAI,KAAA;AAAA,EAClD;AACA,EAAA,OAAO,MAAA;AACT","file":"express.js","sourcesContent":["// Copyright 2026 FHIRfly.io LLC. All rights reserved.\n// Licensed under the MIT License. See LICENSE file in the project root.\nimport { createHandler } from \"../server/handler.js\";\nimport type { SHLHandlerConfig, HandlerRequest } from \"../server/types.js\";\n\n// Minimal Express types — avoids requiring @types/express at runtime\ninterface ExpressRequest {\n  method: string;\n  path: string;\n  body?: unknown;\n  headers: Record<string, string | string[] | undefined>;\n  query?: Record<string, string | string[] | undefined>;\n}\n\ninterface ExpressResponse {\n  status(code: number): ExpressResponse;\n  set(headers: Record<string, string>): ExpressResponse;\n  send(body: string | Buffer): void;\n}\n\n/**\n * Create an Express-compatible middleware for serving SMART Health Links.\n *\n * Mount this on the path prefix where your SHL server lives. The middleware\n * handles `POST /:shlId` (manifest) and `GET /:shlId/content` (encrypted content).\n *\n * @example\n * ```ts\n * import express from \"express\";\n * import { expressMiddleware } from \"@fhirfly-io/shl/express\";\n * import { ServerLocalStorage } from \"@fhirfly-io/shl/server\";\n *\n * const app = express();\n * app.use(express.json());\n * app.use(\"/shl\", expressMiddleware({\n *   storage: new ServerLocalStorage({\n *     directory: \"./shl-data\",\n *     baseUrl: \"https://shl.example.com\",\n *   }),\n * }));\n * ```\n */\nexport function expressMiddleware(\n  config: SHLHandlerConfig,\n): (req: ExpressRequest, res: ExpressResponse) => void {\n  const handle = createHandler(config);\n\n  return (req: ExpressRequest, res: ExpressResponse): void => {\n    const handlerReq: HandlerRequest = {\n      method: req.method,\n      path: req.path,\n      body: req.body,\n      headers: normalizeHeaders(req.headers),\n      query: normalizeQuery(req.query),\n    };\n\n    handle(handlerReq)\n      .then((result) => {\n        res.status(result.status).set(result.headers).send(\n          typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n        );\n      })\n      .catch(() => {\n        res.status(500).set({ \"content-type\": \"application/json\" }).send(\n          JSON.stringify({ error: \"Internal server error\" }),\n        );\n      });\n  };\n}\n\nfunction normalizeHeaders(\n  headers: Record<string, string | string[] | undefined>,\n): Record<string, string | undefined> {\n  const result: Record<string, string | undefined> = {};\n  for (const [key, value] of Object.entries(headers)) {\n    result[key.toLowerCase()] = Array.isArray(value) ? value[0] : value;\n  }\n  return result;\n}\n\nfunction normalizeQuery(\n  query?: Record<string, string | string[] | undefined>,\n): Record<string, string | undefined> | undefined {\n  if (!query) return undefined;\n  const result: Record<string, string | undefined> = {};\n  for (const [key, value] of Object.entries(query)) {\n    result[key] = Array.isArray(value) ? value[0] : value;\n  }\n  return result;\n}\n"]}

package/dist/fastify.cjs

@@ -1,11 +1,11 @@
 'use strict';
 
-var chunkQXSWM5QV_cjs = require('./chunk-QXSWM5QV.cjs');
+var chunkJOZ6XZPO_cjs = require('./chunk-JOZ6XZPO.cjs');
 require('./chunk-Q7SFCCGT.cjs');
 
 // src/adapters/fastify.ts
 function fastifyPlugin(config) {
-  const handle = chunkQXSWM5QV_cjs.createHandler(config);
+  const handle = chunkJOZ6XZPO_cjs.createHandler(config);
   return (fastify, _opts, done) => {
     fastify.post("/:shlId", async (req, reply) => {
       const shlId = req.params["shlId"] ?? "";
@@ -13,7 +13,22 @@ function fastifyPlugin(config) {
         method: "POST",
         path: `/${shlId}`,
         body: req.body,
-        headers: normalizeHeaders(req.headers)
+        headers: normalizeHeaders(req.headers),
+        query: req.query
+      };
+      const result = await handle(handlerReq);
+      reply.status(result.status).headers(result.headers).send(
+        typeof result.body === "string" ? result.body : Buffer.from(result.body)
+      );
+    });
+    fastify.get("/:shlId", async (req, reply) => {
+      const shlId = req.params["shlId"] ?? "";
+      const handlerReq = {
+        method: "GET",
+        path: `/${shlId}`,
+        body: void 0,
+        headers: normalizeHeaders(req.headers),
+        query: req.query
       };
       const result = await handle(handlerReq);
       reply.status(result.status).headers(result.headers).send(
@@ -26,7 +41,8 @@ function fastifyPlugin(config) {
         method: "GET",
         path: `/${shlId}/content`,
         body: void 0,
-        headers: normalizeHeaders(req.headers)
+        headers: normalizeHeaders(req.headers),
+        query: req.query
       };
       const result = await handle(handlerReq);
       reply.status(result.status).headers(result.headers).send(
@@ -40,7 +56,8 @@ function fastifyPlugin(config) {
         method: "GET",
         path: `/${shlId}/attachment/${index}`,
         body: void 0,
-        headers: normalizeHeaders(req.headers)
+        headers: normalizeHeaders(req.headers),
+        query: req.query
       };
       const result = await handle(handlerReq);
       reply.status(result.status).headers(result.headers).send(

package/dist/fastify.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/adapters/fastify.ts"],"names":["createHandler"],"mappings":";;;;;;AAqDO,SAAS,cACd,MAAA,EACsE;AACtE,EAAA,MAAM,MAAA,GAASA,gCAAc,MAAM,CAAA;AAEnC,EAAA,OAAO,CAAC,OAAA,EAA0B,KAAA,EAAgB,IAAA,KAA4B;AAE5E,IAAA,OAAA,CAAQ,IAAA,CAAK,SAAA,EAAW,OAAO,GAAA,EAAqB,KAAA,KAAwB;AAC1E,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,UAAA,GAA6B;AAAA,QACjC,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,IAAI,KAAK,CAAA,CAAA;AAAA,QACf,MAAM,GAAA,CAAI,IAAA;AAAA,QACV,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO;AAAA,OACvC;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AACtC,MAAA,KAAA,CAAM,OAAO,MAAA,CAAO,MAAM,EAAE,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAClD,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA;AAGD,IAAA,OAAA,CAAQ,GAAA,CAAI,iBAAA,EAAmB,OAAO,GAAA,EAAqB,KAAA,KAAwB;AACjF,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,UAAA,GAA6B;AAAA,QACjC,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,IAAI,KAAK,CAAA,QAAA,CAAA;AAAA,QACf,IAAA,EAAM,MAAA;AAAA,QACN,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO;AAAA,OACvC;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AACtC,MAAA,KAAA,CAAM,OAAO,MAAA,CAAO,MAAM,EAAE,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAClD,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA;AAGD,IAAA,OAAA,CAAQ,GAAA,CAAI,2BAAA,EAA6B,OAAO,GAAA,EAAqB,KAAA,KAAwB;AAC3F,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,UAAA,GAA6B;AAAA,QACjC,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,CAAA,CAAA,EAAI,KAAK,CAAA,YAAA,EAAe,KAAK,CAAA,CAAA;AAAA,QACnC,IAAA,EAAM,MAAA;AAAA,QACN,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO;AAAA,OACvC;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AACtC,MAAA,KAAA,CAAM,OAAO,MAAA,CAAO,MAAM,EAAE,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAClD,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA;AAED,IAAA,IAAA,EAAK;AAAA,EACP,CAAA;AACF;AAEA,SAAS,iBACP,OAAA,EACoC;AACpC,EAAA,MAAM,SAA6C,EAAC;AACpD,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,MAAA,CAAO,GAAA,CAAI,WAAA,EAAa,CAAA,GAAI,KAAA,CAAM,QAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,CAAC,CAAA,GAAI,KAAA;AAAA,EAChE;AACA,EAAA,OAAO,MAAA;AACT","file":"fastify.cjs","sourcesContent":["// Copyright 2026 FHIRfly.io LLC. All rights reserved.\n// Licensed under the MIT License. See LICENSE file in the project root.\nimport { createHandler } from \"../server/handler.js\";\nimport type { SHLHandlerConfig, HandlerRequest } from \"../server/types.js\";\n\n// Minimal Fastify types — avoids requiring fastify at runtime\ninterface FastifyRequest {\n  method: string;\n  body?: unknown;\n  params: Record<string, string>;\n  headers: Record<string, string | string[] | undefined>;\n}\n\ninterface FastifyReply {\n  status(code: number): FastifyReply;\n  headers(headers: Record<string, string>): FastifyReply;\n  send(body: string | Buffer): void;\n}\n\ninterface FastifyInstance {\n  post(\n    path: string,\n    handler: (req: FastifyRequest, reply: FastifyReply) => Promise<void>,\n  ): void;\n  get(\n    path: string,\n    handler: (req: FastifyRequest, reply: FastifyReply) => Promise<void>,\n  ): void;\n}\n\ntype FastifyDone = (err?: Error) => void;\n\n/**\n * Create a Fastify plugin for serving SMART Health Links.\n *\n * Register this plugin with a prefix to mount the SHL routes.\n * The plugin registers `POST /:shlId`, `GET /:shlId/content`, and `GET /:shlId/attachment/:index`.\n *\n * @example\n * ```ts\n * import Fastify from \"fastify\";\n * import { fastifyPlugin } from \"@fhirfly-io/shl/fastify\";\n * import { ServerLocalStorage } from \"@fhirfly-io/shl/server\";\n *\n * const app = Fastify();\n * app.register(fastifyPlugin({\n *   storage: new ServerLocalStorage({\n *     directory: \"./shl-data\",\n *     baseUrl: \"https://shl.example.com\",\n *   }),\n * }), { prefix: \"/shl\" });\n * ```\n */\nexport function fastifyPlugin(\n  config: SHLHandlerConfig,\n): (fastify: FastifyInstance, opts: unknown, done: FastifyDone) => void {\n  const handle = createHandler(config);\n\n  return (fastify: FastifyInstance, _opts: unknown, done: FastifyDone): void => {\n    // POST /:shlId — manifest endpoint\n    fastify.post(\"/:shlId\", async (req: FastifyRequest, reply: FastifyReply) => {\n      const shlId = req.params[\"shlId\"] ?? \"\";\n      const handlerReq: HandlerRequest = {\n        method: \"POST\",\n        path: `/${shlId}`,\n        body: req.body,\n        headers: normalizeHeaders(req.headers),\n      };\n\n      const result = await handle(handlerReq);\n      reply.status(result.status).headers(result.headers).send(\n        typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n      );\n    });\n\n    // GET /:shlId/content — content endpoint\n    fastify.get(\"/:shlId/content\", async (req: FastifyRequest, reply: FastifyReply) => {\n      const shlId = req.params[\"shlId\"] ?? \"\";\n      const handlerReq: HandlerRequest = {\n        method: \"GET\",\n        path: `/${shlId}/content`,\n        body: undefined,\n        headers: normalizeHeaders(req.headers),\n      };\n\n      const result = await handle(handlerReq);\n      reply.status(result.status).headers(result.headers).send(\n        typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n      );\n    });\n\n    // GET /:shlId/attachment/:index — attachment endpoint\n    fastify.get(\"/:shlId/attachment/:index\", async (req: FastifyRequest, reply: FastifyReply) => {\n      const shlId = req.params[\"shlId\"] ?? \"\";\n      const index = req.params[\"index\"] ?? \"\";\n      const handlerReq: HandlerRequest = {\n        method: \"GET\",\n        path: `/${shlId}/attachment/${index}`,\n        body: undefined,\n        headers: normalizeHeaders(req.headers),\n      };\n\n      const result = await handle(handlerReq);\n      reply.status(result.status).headers(result.headers).send(\n        typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n      );\n    });\n\n    done();\n  };\n}\n\nfunction normalizeHeaders(\n  headers: Record<string, string | string[] | undefined>,\n): Record<string, string | undefined> {\n  const result: Record<string, string | undefined> = {};\n  for (const [key, value] of Object.entries(headers)) {\n    result[key.toLowerCase()] = Array.isArray(value) ? value[0] : value;\n  }\n  return result;\n}\n"]}
+{"version":3,"sources":["../src/adapters/fastify.ts"],"names":["createHandler"],"mappings":";;;;;;AAsDO,SAAS,cACd,MAAA,EACsE;AACtE,EAAA,MAAM,MAAA,GAASA,gCAAc,MAAM,CAAA;AAEnC,EAAA,OAAO,CAAC,OAAA,EAA0B,KAAA,EAAgB,IAAA,KAA4B;AAE5E,IAAA,OAAA,CAAQ,IAAA,CAAK,SAAA,EAAW,OAAO,GAAA,EAAqB,KAAA,KAAwB;AAC1E,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,UAAA,GAA6B;AAAA,QACjC,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,IAAI,KAAK,CAAA,CAAA;AAAA,QACf,MAAM,GAAA,CAAI,IAAA;AAAA,QACV,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO,CAAA;AAAA,QACrC,OAAO,GAAA,CAAI;AAAA,OACb;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AACtC,MAAA,KAAA,CAAM,OAAO,MAAA,CAAO,MAAM,EAAE,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAClD,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA;AAGD,IAAA,OAAA,CAAQ,GAAA,CAAI,SAAA,EAAW,OAAO,GAAA,EAAqB,KAAA,KAAwB;AACzE,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,UAAA,GAA6B;AAAA,QACjC,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,IAAI,KAAK,CAAA,CAAA;AAAA,QACf,IAAA,EAAM,MAAA;AAAA,QACN,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO,CAAA;AAAA,QACrC,OAAO,GAAA,CAAI;AAAA,OACb;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AACtC,MAAA,KAAA,CAAM,OAAO,MAAA,CAAO,MAAM,EAAE,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAClD,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA;AAGD,IAAA,OAAA,CAAQ,GAAA,CAAI,iBAAA,EAAmB,OAAO,GAAA,EAAqB,KAAA,KAAwB;AACjF,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,UAAA,GAA6B;AAAA,QACjC,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,IAAI,KAAK,CAAA,QAAA,CAAA;AAAA,QACf,IAAA,EAAM,MAAA;AAAA,QACN,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO,CAAA;AAAA,QACrC,OAAO,GAAA,CAAI;AAAA,OACb;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AACtC,MAAA,KAAA,CAAM,OAAO,MAAA,CAAO,MAAM,EAAE,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAClD,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA;AAGD,IAAA,OAAA,CAAQ,GAAA,CAAI,2BAAA,EAA6B,OAAO,GAAA,EAAqB,KAAA,KAAwB;AAC3F,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,UAAA,GAA6B;AAAA,QACjC,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,CAAA,CAAA,EAAI,KAAK,CAAA,YAAA,EAAe,KAAK,CAAA,CAAA;AAAA,QACnC,IAAA,EAAM,MAAA;AAAA,QACN,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO,CAAA;AAAA,QACrC,OAAO,GAAA,CAAI;AAAA,OACb;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AACtC,MAAA,KAAA,CAAM,OAAO,MAAA,CAAO,MAAM,EAAE,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAClD,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA;AAED,IAAA,IAAA,EAAK;AAAA,EACP,CAAA;AACF;AAEA,SAAS,iBACP,OAAA,EACoC;AACpC,EAAA,MAAM,SAA6C,EAAC;AACpD,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,MAAA,CAAO,GAAA,CAAI,WAAA,EAAa,CAAA,GAAI,KAAA,CAAM,QAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,CAAC,CAAA,GAAI,KAAA;AAAA,EAChE;AACA,EAAA,OAAO,MAAA;AACT","file":"fastify.cjs","sourcesContent":["// Copyright 2026 FHIRfly.io LLC. All rights reserved.\n// Licensed under the MIT License. See LICENSE file in the project root.\nimport { createHandler } from \"../server/handler.js\";\nimport type { SHLHandlerConfig, HandlerRequest } from \"../server/types.js\";\n\n// Minimal Fastify types — avoids requiring fastify at runtime\ninterface FastifyRequest {\n  method: string;\n  body?: unknown;\n  params: Record<string, string>;\n  headers: Record<string, string | string[] | undefined>;\n  query?: Record<string, string | undefined>;\n}\n\ninterface FastifyReply {\n  status(code: number): FastifyReply;\n  headers(headers: Record<string, string>): FastifyReply;\n  send(body: string | Buffer): void;\n}\n\ninterface FastifyInstance {\n  post(\n    path: string,\n    handler: (req: FastifyRequest, reply: FastifyReply) => Promise<void>,\n  ): void;\n  get(\n    path: string,\n    handler: (req: FastifyRequest, reply: FastifyReply) => Promise<void>,\n  ): void;\n}\n\ntype FastifyDone = (err?: Error) => void;\n\n/**\n * Create a Fastify plugin for serving SMART Health Links.\n *\n * Register this plugin with a prefix to mount the SHL routes.\n * The plugin registers `POST /:shlId`, `GET /:shlId/content`, and `GET /:shlId/attachment/:index`.\n *\n * @example\n * ```ts\n * import Fastify from \"fastify\";\n * import { fastifyPlugin } from \"@fhirfly-io/shl/fastify\";\n * import { ServerLocalStorage } from \"@fhirfly-io/shl/server\";\n *\n * const app = Fastify();\n * app.register(fastifyPlugin({\n *   storage: new ServerLocalStorage({\n *     directory: \"./shl-data\",\n *     baseUrl: \"https://shl.example.com\",\n *   }),\n * }), { prefix: \"/shl\" });\n * ```\n */\nexport function fastifyPlugin(\n  config: SHLHandlerConfig,\n): (fastify: FastifyInstance, opts: unknown, done: FastifyDone) => void {\n  const handle = createHandler(config);\n\n  return (fastify: FastifyInstance, _opts: unknown, done: FastifyDone): void => {\n    // POST /:shlId — manifest endpoint\n    fastify.post(\"/:shlId\", async (req: FastifyRequest, reply: FastifyReply) => {\n      const shlId = req.params[\"shlId\"] ?? \"\";\n      const handlerReq: HandlerRequest = {\n        method: \"POST\",\n        path: `/${shlId}`,\n        body: req.body,\n        headers: normalizeHeaders(req.headers),\n        query: req.query,\n      };\n\n      const result = await handle(handlerReq);\n      reply.status(result.status).headers(result.headers).send(\n        typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n      );\n    });\n\n    // GET /:shlId — direct access endpoint (flag U)\n    fastify.get(\"/:shlId\", async (req: FastifyRequest, reply: FastifyReply) => {\n      const shlId = req.params[\"shlId\"] ?? \"\";\n      const handlerReq: HandlerRequest = {\n        method: \"GET\",\n        path: `/${shlId}`,\n        body: undefined,\n        headers: normalizeHeaders(req.headers),\n        query: req.query,\n      };\n\n      const result = await handle(handlerReq);\n      reply.status(result.status).headers(result.headers).send(\n        typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n      );\n    });\n\n    // GET /:shlId/content — content endpoint\n    fastify.get(\"/:shlId/content\", async (req: FastifyRequest, reply: FastifyReply) => {\n      const shlId = req.params[\"shlId\"] ?? \"\";\n      const handlerReq: HandlerRequest = {\n        method: \"GET\",\n        path: `/${shlId}/content`,\n        body: undefined,\n        headers: normalizeHeaders(req.headers),\n        query: req.query,\n      };\n\n      const result = await handle(handlerReq);\n      reply.status(result.status).headers(result.headers).send(\n        typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n      );\n    });\n\n    // GET /:shlId/attachment/:index — attachment endpoint\n    fastify.get(\"/:shlId/attachment/:index\", async (req: FastifyRequest, reply: FastifyReply) => {\n      const shlId = req.params[\"shlId\"] ?? \"\";\n      const index = req.params[\"index\"] ?? \"\";\n      const handlerReq: HandlerRequest = {\n        method: \"GET\",\n        path: `/${shlId}/attachment/${index}`,\n        body: undefined,\n        headers: normalizeHeaders(req.headers),\n        query: req.query,\n      };\n\n      const result = await handle(handlerReq);\n      reply.status(result.status).headers(result.headers).send(\n        typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n      );\n    });\n\n    done();\n  };\n}\n\nfunction normalizeHeaders(\n  headers: Record<string, string | string[] | undefined>,\n): Record<string, string | undefined> {\n  const result: Record<string, string | undefined> = {};\n  for (const [key, value] of Object.entries(headers)) {\n    result[key.toLowerCase()] = Array.isArray(value) ? value[0] : value;\n  }\n  return result;\n}\n"]}

package/dist/fastify.d.cts

@@ -1,11 +1,12 @@
-import { S as SHLHandlerConfig } from './types-hHf-a3hH.cjs';
-import './types-Doq5cGNm.cjs';
+import { S as SHLHandlerConfig } from './types-Cdi4IkC9.cjs';
+import './types-BLLJeWe_.cjs';
 
 interface FastifyRequest {
     method: string;
     body?: unknown;
     params: Record<string, string>;
     headers: Record<string, string | string[] | undefined>;
+    query?: Record<string, string | undefined>;
 }
 interface FastifyReply {
     status(code: number): FastifyReply;

package/dist/fastify.d.ts

@@ -1,11 +1,12 @@
-import { S as SHLHandlerConfig } from './types-BegxU0wQ.js';
-import './types-Doq5cGNm.js';
+import { S as SHLHandlerConfig } from './types-6Vw5fiat.js';
+import './types-BLLJeWe_.js';
 
 interface FastifyRequest {
     method: string;
     body?: unknown;
     params: Record<string, string>;
     headers: Record<string, string | string[] | undefined>;
+    query?: Record<string, string | undefined>;
 }
 interface FastifyReply {
     status(code: number): FastifyReply;

package/dist/fastify.js

@@ -1,4 +1,4 @@
-import { createHandler } from './chunk-ZEE5RXIS.js';
+import { createHandler } from './chunk-KGEFZQ6W.js';
 import './chunk-PZ5AY32C.js';
 
 // src/adapters/fastify.ts
@@ -11,7 +11,22 @@ function fastifyPlugin(config) {
         method: "POST",
         path: `/${shlId}`,
         body: req.body,
-        headers: normalizeHeaders(req.headers)
+        headers: normalizeHeaders(req.headers),
+        query: req.query
+      };
+      const result = await handle(handlerReq);
+      reply.status(result.status).headers(result.headers).send(
+        typeof result.body === "string" ? result.body : Buffer.from(result.body)
+      );
+    });
+    fastify.get("/:shlId", async (req, reply) => {
+      const shlId = req.params["shlId"] ?? "";
+      const handlerReq = {
+        method: "GET",
+        path: `/${shlId}`,
+        body: void 0,
+        headers: normalizeHeaders(req.headers),
+        query: req.query
       };
       const result = await handle(handlerReq);
       reply.status(result.status).headers(result.headers).send(
@@ -24,7 +39,8 @@ function fastifyPlugin(config) {
         method: "GET",
         path: `/${shlId}/content`,
         body: void 0,
-        headers: normalizeHeaders(req.headers)
+        headers: normalizeHeaders(req.headers),
+        query: req.query
       };
       const result = await handle(handlerReq);
       reply.status(result.status).headers(result.headers).send(
@@ -38,7 +54,8 @@ function fastifyPlugin(config) {
         method: "GET",
         path: `/${shlId}/attachment/${index}`,
         body: void 0,
-        headers: normalizeHeaders(req.headers)
+        headers: normalizeHeaders(req.headers),
+        query: req.query
       };
       const result = await handle(handlerReq);
       reply.status(result.status).headers(result.headers).send(

package/dist/fastify.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/adapters/fastify.ts"],"names":[],"mappings":";;;;AAqDO,SAAS,cACd,MAAA,EACsE;AACtE,EAAA,MAAM,MAAA,GAAS,cAAc,MAAM,CAAA;AAEnC,EAAA,OAAO,CAAC,OAAA,EAA0B,KAAA,EAAgB,IAAA,KAA4B;AAE5E,IAAA,OAAA,CAAQ,IAAA,CAAK,SAAA,EAAW,OAAO,GAAA,EAAqB,KAAA,KAAwB;AAC1E,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,UAAA,GAA6B;AAAA,QACjC,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,IAAI,KAAK,CAAA,CAAA;AAAA,QACf,MAAM,GAAA,CAAI,IAAA;AAAA,QACV,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO;AAAA,OACvC;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AACtC,MAAA,KAAA,CAAM,OAAO,MAAA,CAAO,MAAM,EAAE,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAClD,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA;AAGD,IAAA,OAAA,CAAQ,GAAA,CAAI,iBAAA,EAAmB,OAAO,GAAA,EAAqB,KAAA,KAAwB;AACjF,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,UAAA,GAA6B;AAAA,QACjC,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,IAAI,KAAK,CAAA,QAAA,CAAA;AAAA,QACf,IAAA,EAAM,MAAA;AAAA,QACN,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO;AAAA,OACvC;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AACtC,MAAA,KAAA,CAAM,OAAO,MAAA,CAAO,MAAM,EAAE,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAClD,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA;AAGD,IAAA,OAAA,CAAQ,GAAA,CAAI,2BAAA,EAA6B,OAAO,GAAA,EAAqB,KAAA,KAAwB;AAC3F,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,UAAA,GAA6B;AAAA,QACjC,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,CAAA,CAAA,EAAI,KAAK,CAAA,YAAA,EAAe,KAAK,CAAA,CAAA;AAAA,QACnC,IAAA,EAAM,MAAA;AAAA,QACN,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO;AAAA,OACvC;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AACtC,MAAA,KAAA,CAAM,OAAO,MAAA,CAAO,MAAM,EAAE,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAClD,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA;AAED,IAAA,IAAA,EAAK;AAAA,EACP,CAAA;AACF;AAEA,SAAS,iBACP,OAAA,EACoC;AACpC,EAAA,MAAM,SAA6C,EAAC;AACpD,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,MAAA,CAAO,GAAA,CAAI,WAAA,EAAa,CAAA,GAAI,KAAA,CAAM,QAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,CAAC,CAAA,GAAI,KAAA;AAAA,EAChE;AACA,EAAA,OAAO,MAAA;AACT","file":"fastify.js","sourcesContent":["// Copyright 2026 FHIRfly.io LLC. All rights reserved.\n// Licensed under the MIT License. See LICENSE file in the project root.\nimport { createHandler } from \"../server/handler.js\";\nimport type { SHLHandlerConfig, HandlerRequest } from \"../server/types.js\";\n\n// Minimal Fastify types — avoids requiring fastify at runtime\ninterface FastifyRequest {\n  method: string;\n  body?: unknown;\n  params: Record<string, string>;\n  headers: Record<string, string | string[] | undefined>;\n}\n\ninterface FastifyReply {\n  status(code: number): FastifyReply;\n  headers(headers: Record<string, string>): FastifyReply;\n  send(body: string | Buffer): void;\n}\n\ninterface FastifyInstance {\n  post(\n    path: string,\n    handler: (req: FastifyRequest, reply: FastifyReply) => Promise<void>,\n  ): void;\n  get(\n    path: string,\n    handler: (req: FastifyRequest, reply: FastifyReply) => Promise<void>,\n  ): void;\n}\n\ntype FastifyDone = (err?: Error) => void;\n\n/**\n * Create a Fastify plugin for serving SMART Health Links.\n *\n * Register this plugin with a prefix to mount the SHL routes.\n * The plugin registers `POST /:shlId`, `GET /:shlId/content`, and `GET /:shlId/attachment/:index`.\n *\n * @example\n * ```ts\n * import Fastify from \"fastify\";\n * import { fastifyPlugin } from \"@fhirfly-io/shl/fastify\";\n * import { ServerLocalStorage } from \"@fhirfly-io/shl/server\";\n *\n * const app = Fastify();\n * app.register(fastifyPlugin({\n *   storage: new ServerLocalStorage({\n *     directory: \"./shl-data\",\n *     baseUrl: \"https://shl.example.com\",\n *   }),\n * }), { prefix: \"/shl\" });\n * ```\n */\nexport function fastifyPlugin(\n  config: SHLHandlerConfig,\n): (fastify: FastifyInstance, opts: unknown, done: FastifyDone) => void {\n  const handle = createHandler(config);\n\n  return (fastify: FastifyInstance, _opts: unknown, done: FastifyDone): void => {\n    // POST /:shlId — manifest endpoint\n    fastify.post(\"/:shlId\", async (req: FastifyRequest, reply: FastifyReply) => {\n      const shlId = req.params[\"shlId\"] ?? \"\";\n      const handlerReq: HandlerRequest = {\n        method: \"POST\",\n        path: `/${shlId}`,\n        body: req.body,\n        headers: normalizeHeaders(req.headers),\n      };\n\n      const result = await handle(handlerReq);\n      reply.status(result.status).headers(result.headers).send(\n        typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n      );\n    });\n\n    // GET /:shlId/content — content endpoint\n    fastify.get(\"/:shlId/content\", async (req: FastifyRequest, reply: FastifyReply) => {\n      const shlId = req.params[\"shlId\"] ?? \"\";\n      const handlerReq: HandlerRequest = {\n        method: \"GET\",\n        path: `/${shlId}/content`,\n        body: undefined,\n        headers: normalizeHeaders(req.headers),\n      };\n\n      const result = await handle(handlerReq);\n      reply.status(result.status).headers(result.headers).send(\n        typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n      );\n    });\n\n    // GET /:shlId/attachment/:index — attachment endpoint\n    fastify.get(\"/:shlId/attachment/:index\", async (req: FastifyRequest, reply: FastifyReply) => {\n      const shlId = req.params[\"shlId\"] ?? \"\";\n      const index = req.params[\"index\"] ?? \"\";\n      const handlerReq: HandlerRequest = {\n        method: \"GET\",\n        path: `/${shlId}/attachment/${index}`,\n        body: undefined,\n        headers: normalizeHeaders(req.headers),\n      };\n\n      const result = await handle(handlerReq);\n      reply.status(result.status).headers(result.headers).send(\n        typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n      );\n    });\n\n    done();\n  };\n}\n\nfunction normalizeHeaders(\n  headers: Record<string, string | string[] | undefined>,\n): Record<string, string | undefined> {\n  const result: Record<string, string | undefined> = {};\n  for (const [key, value] of Object.entries(headers)) {\n    result[key.toLowerCase()] = Array.isArray(value) ? value[0] : value;\n  }\n  return result;\n}\n"]}
+{"version":3,"sources":["../src/adapters/fastify.ts"],"names":[],"mappings":";;;;AAsDO,SAAS,cACd,MAAA,EACsE;AACtE,EAAA,MAAM,MAAA,GAAS,cAAc,MAAM,CAAA;AAEnC,EAAA,OAAO,CAAC,OAAA,EAA0B,KAAA,EAAgB,IAAA,KAA4B;AAE5E,IAAA,OAAA,CAAQ,IAAA,CAAK,SAAA,EAAW,OAAO,GAAA,EAAqB,KAAA,KAAwB;AAC1E,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,UAAA,GAA6B;AAAA,QACjC,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,IAAI,KAAK,CAAA,CAAA;AAAA,QACf,MAAM,GAAA,CAAI,IAAA;AAAA,QACV,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO,CAAA;AAAA,QACrC,OAAO,GAAA,CAAI;AAAA,OACb;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AACtC,MAAA,KAAA,CAAM,OAAO,MAAA,CAAO,MAAM,EAAE,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAClD,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA;AAGD,IAAA,OAAA,CAAQ,GAAA,CAAI,SAAA,EAAW,OAAO,GAAA,EAAqB,KAAA,KAAwB;AACzE,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,UAAA,GAA6B;AAAA,QACjC,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,IAAI,KAAK,CAAA,CAAA;AAAA,QACf,IAAA,EAAM,MAAA;AAAA,QACN,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO,CAAA;AAAA,QACrC,OAAO,GAAA,CAAI;AAAA,OACb;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AACtC,MAAA,KAAA,CAAM,OAAO,MAAA,CAAO,MAAM,EAAE,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAClD,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA;AAGD,IAAA,OAAA,CAAQ,GAAA,CAAI,iBAAA,EAAmB,OAAO,GAAA,EAAqB,KAAA,KAAwB;AACjF,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,UAAA,GAA6B;AAAA,QACjC,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,IAAI,KAAK,CAAA,QAAA,CAAA;AAAA,QACf,IAAA,EAAM,MAAA;AAAA,QACN,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO,CAAA;AAAA,QACrC,OAAO,GAAA,CAAI;AAAA,OACb;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AACtC,MAAA,KAAA,CAAM,OAAO,MAAA,CAAO,MAAM,EAAE,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAClD,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA;AAGD,IAAA,OAAA,CAAQ,GAAA,CAAI,2BAAA,EAA6B,OAAO,GAAA,EAAqB,KAAA,KAAwB;AAC3F,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,IAAK,EAAA;AACrC,MAAA,MAAM,UAAA,GAA6B;AAAA,QACjC,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,CAAA,CAAA,EAAI,KAAK,CAAA,YAAA,EAAe,KAAK,CAAA,CAAA;AAAA,QACnC,IAAA,EAAM,MAAA;AAAA,QACN,OAAA,EAAS,gBAAA,CAAiB,GAAA,CAAI,OAAO,CAAA;AAAA,QACrC,OAAO,GAAA,CAAI;AAAA,OACb;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AACtC,MAAA,KAAA,CAAM,OAAO,MAAA,CAAO,MAAM,EAAE,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA;AAAA,QAClD,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI;AAAA,OACzE;AAAA,IACF,CAAC,CAAA;AAED,IAAA,IAAA,EAAK;AAAA,EACP,CAAA;AACF;AAEA,SAAS,iBACP,OAAA,EACoC;AACpC,EAAA,MAAM,SAA6C,EAAC;AACpD,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,MAAA,CAAO,GAAA,CAAI,WAAA,EAAa,CAAA,GAAI,KAAA,CAAM,QAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,CAAC,CAAA,GAAI,KAAA;AAAA,EAChE;AACA,EAAA,OAAO,MAAA;AACT","file":"fastify.js","sourcesContent":["// Copyright 2026 FHIRfly.io LLC. All rights reserved.\n// Licensed under the MIT License. See LICENSE file in the project root.\nimport { createHandler } from \"../server/handler.js\";\nimport type { SHLHandlerConfig, HandlerRequest } from \"../server/types.js\";\n\n// Minimal Fastify types — avoids requiring fastify at runtime\ninterface FastifyRequest {\n  method: string;\n  body?: unknown;\n  params: Record<string, string>;\n  headers: Record<string, string | string[] | undefined>;\n  query?: Record<string, string | undefined>;\n}\n\ninterface FastifyReply {\n  status(code: number): FastifyReply;\n  headers(headers: Record<string, string>): FastifyReply;\n  send(body: string | Buffer): void;\n}\n\ninterface FastifyInstance {\n  post(\n    path: string,\n    handler: (req: FastifyRequest, reply: FastifyReply) => Promise<void>,\n  ): void;\n  get(\n    path: string,\n    handler: (req: FastifyRequest, reply: FastifyReply) => Promise<void>,\n  ): void;\n}\n\ntype FastifyDone = (err?: Error) => void;\n\n/**\n * Create a Fastify plugin for serving SMART Health Links.\n *\n * Register this plugin with a prefix to mount the SHL routes.\n * The plugin registers `POST /:shlId`, `GET /:shlId/content`, and `GET /:shlId/attachment/:index`.\n *\n * @example\n * ```ts\n * import Fastify from \"fastify\";\n * import { fastifyPlugin } from \"@fhirfly-io/shl/fastify\";\n * import { ServerLocalStorage } from \"@fhirfly-io/shl/server\";\n *\n * const app = Fastify();\n * app.register(fastifyPlugin({\n *   storage: new ServerLocalStorage({\n *     directory: \"./shl-data\",\n *     baseUrl: \"https://shl.example.com\",\n *   }),\n * }), { prefix: \"/shl\" });\n * ```\n */\nexport function fastifyPlugin(\n  config: SHLHandlerConfig,\n): (fastify: FastifyInstance, opts: unknown, done: FastifyDone) => void {\n  const handle = createHandler(config);\n\n  return (fastify: FastifyInstance, _opts: unknown, done: FastifyDone): void => {\n    // POST /:shlId — manifest endpoint\n    fastify.post(\"/:shlId\", async (req: FastifyRequest, reply: FastifyReply) => {\n      const shlId = req.params[\"shlId\"] ?? \"\";\n      const handlerReq: HandlerRequest = {\n        method: \"POST\",\n        path: `/${shlId}`,\n        body: req.body,\n        headers: normalizeHeaders(req.headers),\n        query: req.query,\n      };\n\n      const result = await handle(handlerReq);\n      reply.status(result.status).headers(result.headers).send(\n        typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n      );\n    });\n\n    // GET /:shlId — direct access endpoint (flag U)\n    fastify.get(\"/:shlId\", async (req: FastifyRequest, reply: FastifyReply) => {\n      const shlId = req.params[\"shlId\"] ?? \"\";\n      const handlerReq: HandlerRequest = {\n        method: \"GET\",\n        path: `/${shlId}`,\n        body: undefined,\n        headers: normalizeHeaders(req.headers),\n        query: req.query,\n      };\n\n      const result = await handle(handlerReq);\n      reply.status(result.status).headers(result.headers).send(\n        typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n      );\n    });\n\n    // GET /:shlId/content — content endpoint\n    fastify.get(\"/:shlId/content\", async (req: FastifyRequest, reply: FastifyReply) => {\n      const shlId = req.params[\"shlId\"] ?? \"\";\n      const handlerReq: HandlerRequest = {\n        method: \"GET\",\n        path: `/${shlId}/content`,\n        body: undefined,\n        headers: normalizeHeaders(req.headers),\n        query: req.query,\n      };\n\n      const result = await handle(handlerReq);\n      reply.status(result.status).headers(result.headers).send(\n        typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n      );\n    });\n\n    // GET /:shlId/attachment/:index — attachment endpoint\n    fastify.get(\"/:shlId/attachment/:index\", async (req: FastifyRequest, reply: FastifyReply) => {\n      const shlId = req.params[\"shlId\"] ?? \"\";\n      const index = req.params[\"index\"] ?? \"\";\n      const handlerReq: HandlerRequest = {\n        method: \"GET\",\n        path: `/${shlId}/attachment/${index}`,\n        body: undefined,\n        headers: normalizeHeaders(req.headers),\n        query: req.query,\n      };\n\n      const result = await handle(handlerReq);\n      reply.status(result.status).headers(result.headers).send(\n        typeof result.body === \"string\" ? result.body : Buffer.from(result.body),\n      );\n    });\n\n    done();\n  };\n}\n\nfunction normalizeHeaders(\n  headers: Record<string, string | string[] | undefined>,\n): Record<string, string | undefined> {\n  const result: Record<string, string | undefined> = {};\n  for (const [key, value] of Object.entries(headers)) {\n    result[key.toLowerCase()] = Array.isArray(value) ? value[0] : value;\n  }\n  return result;\n}\n"]}

package/dist/index.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunk63Q54EKN_cjs = require('./chunk-63Q54EKN.cjs');
+var chunkSK77O3SG_cjs = require('./chunk-SK77O3SG.cjs');
 var chunkUDS6UJAL_cjs = require('./chunk-UDS6UJAL.cjs');
 require('./chunk-Q7SFCCGT.cjs');
 
@@ -8,11 +8,11 @@ require('./chunk-Q7SFCCGT.cjs');
 
 Object.defineProperty(exports, "IPS", {
   enumerable: true,
-  get: function () { return chunk63Q54EKN_cjs.ips_exports; }
+  get: function () { return chunkSK77O3SG_cjs.ips_exports; }
 });
 Object.defineProperty(exports, "SHL", {
   enumerable: true,
-  get: function () { return chunk63Q54EKN_cjs.shl_exports; }
+  get: function () { return chunkSK77O3SG_cjs.shl_exports; }
 });
 Object.defineProperty(exports, "EncryptionError", {
   enumerable: true,

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { b as SHLOptions, c as SHLResult, M as ManifestEntry, S as SHLStorage, d as Manifest, e as SHLAttachment, a as SHLMetadata } from './types-Doq5cGNm.cjs';
-import { A as AzureStorage, a as AzureStorageConfig, F as FhirflyStorage, d as FhirflyStorageConfig, G as GCSStorage, b as GCSStorageConfig, L as LocalStorage, c as LocalStorageConfig, e as S3Storage, S as S3StorageConfig } from './storage-BwszYwFo.cjs';
+import { b as SHLOptions, c as SHLResult, M as ManifestEntry, S as SHLStorage, d as Manifest, e as SHLAttachment, a as SHLMetadata } from './types-BLLJeWe_.cjs';
+import { A as AzureStorage, a as AzureStorageConfig, F as FhirflyStorage, d as FhirflyStorageConfig, G as GCSStorage, b as GCSStorageConfig, L as LocalStorage, c as LocalStorageConfig, e as S3Storage, S as S3StorageConfig } from './storage-BbzK-kFf.cjs';
 
 /**
  * Shared FHIR R4 datatypes used across IPS bundle construction.
@@ -170,12 +170,14 @@ interface PatientContact {
  * full has `name: HumanName[]`.
  */
 type PatientDemographics = PatientShorthand | PatientFull;
+/** FHIR bundle profile: IPS (full conformance), R4 (plain), or PSHD (CMS patient-shared). */
+type BundleProfile = "ips" | "r4" | "pshd";
 /**
  * Options for building an IPS bundle.
  */
 interface BuildOptions {
     /** FHIR profile to validate against */
-    profile: "ips" | "r4";
+    profile: BundleProfile;
     /** Bundle identifier (auto-generated if not provided) */
     bundleId?: string;
     /** Composition date (defaults to now) */
@@ -623,6 +625,7 @@ declare class Bundle {
      */
     validate(options?: BuildOptions): ValidationResult;
     private hasValidName;
+    private buildPshdBundle;
     private buildComposition;
     private buildMedicationSection;
     private buildAllergySection;
@@ -642,6 +645,10 @@ declare const CODE_SYSTEMS: {
     readonly ICD10CM: "http://hl7.org/fhir/sid/icd-10-cm";
     readonly CONDITION_CLINICAL: "http://terminology.hl7.org/CodeSystem/condition-clinical";
     readonly ALLERGY_CLINICAL: "http://terminology.hl7.org/CodeSystem/allergyintolerance-clinical";
+    /** CMS Patient-Shared Health Document category code system */
+    readonly CMS_PATIENT_SHARED_CATEGORY: "https://cms.gov/fhir/CodeSystem/patient-shared-category";
+    /** V3 ActCode security label for patient-asserted data */
+    readonly SECURITY_PATAST: "PATAST";
 };
 
 type index$1_Address = Address;
@@ -654,6 +661,7 @@ type index$1_AllergyOptions = AllergyOptions;
 type index$1_BuildOptions = BuildOptions;
 type index$1_Bundle = Bundle;
 declare const index$1_Bundle: typeof Bundle;
+type index$1_BundleProfile = BundleProfile;
 declare const index$1_CODE_SYSTEMS: typeof CODE_SYSTEMS;
 type index$1_CodeableConcept = CodeableConcept;
 type index$1_Coding = Coding;
@@ -694,7 +702,7 @@ type index$1_ResultOptions = ResultOptions;
 type index$1_ValidationIssue = ValidationIssue;
 type index$1_ValidationResult = ValidationResult;
 declare namespace index$1 {
-  export { type index$1_Address as Address, type index$1_AdministrativeGender as AdministrativeGender, type index$1_AllergyBySNOMED as AllergyBySNOMED, type index$1_AllergyClinicalStatus as AllergyClinicalStatus, type index$1_AllergyFromResource as AllergyFromResource, type index$1_AllergyManual as AllergyManual, type index$1_AllergyOptions as AllergyOptions, type index$1_BuildOptions as BuildOptions, index$1_Bundle as Bundle, index$1_CODE_SYSTEMS as CODE_SYSTEMS, type index$1_CodeableConcept as CodeableConcept, type index$1_Coding as Coding, type index$1_ConditionByICD10 as ConditionByICD10, type index$1_ConditionBySNOMED as ConditionBySNOMED, type index$1_ConditionClinicalStatus as ConditionClinicalStatus, type index$1_ConditionFromResource as ConditionFromResource, type index$1_ConditionManual as ConditionManual, type index$1_ConditionOptions as ConditionOptions, type index$1_ContactPoint as ContactPoint, type index$1_DocumentOptions as DocumentOptions, type index$1_FhirflyClient as FhirflyClient, type index$1_HumanName as HumanName, type index$1_Identifier as Identifier, type index$1_ImmunizationByCVX as ImmunizationByCVX, type index$1_ImmunizationFromResource as ImmunizationFromResource, type index$1_ImmunizationManual as ImmunizationManual, type index$1_ImmunizationOptions as ImmunizationOptions, type index$1_MedicationByNDC as MedicationByNDC, type index$1_MedicationByRxNorm as MedicationByRxNorm, type index$1_MedicationBySNOMED as MedicationBySNOMED, type index$1_MedicationFromResource as MedicationFromResource, type index$1_MedicationManual as MedicationManual, type index$1_MedicationOptions as MedicationOptions, type index$1_MedicationStatus as MedicationStatus, type index$1_ObservationStatus as ObservationStatus, type index$1_PatientCommunication as PatientCommunication, type index$1_PatientContact as PatientContact, type index$1_PatientDemographics as PatientDemographics, type index$1_PatientFull as PatientFull, type index$1_PatientShorthand as PatientShorthand, type index$1_Period as Period, type index$1_Reference as Reference, type index$1_ResultByLOINC as ResultByLOINC, type index$1_ResultFromResource as ResultFromResource, type index$1_ResultManual as ResultManual, type index$1_ResultOptions as ResultOptions, type index$1_ValidationIssue as ValidationIssue, type index$1_ValidationResult as ValidationResult };
+  export { type index$1_Address as Address, type index$1_AdministrativeGender as AdministrativeGender, type index$1_AllergyBySNOMED as AllergyBySNOMED, type index$1_AllergyClinicalStatus as AllergyClinicalStatus, type index$1_AllergyFromResource as AllergyFromResource, type index$1_AllergyManual as AllergyManual, type index$1_AllergyOptions as AllergyOptions, type index$1_BuildOptions as BuildOptions, index$1_Bundle as Bundle, type index$1_BundleProfile as BundleProfile, index$1_CODE_SYSTEMS as CODE_SYSTEMS, type index$1_CodeableConcept as CodeableConcept, type index$1_Coding as Coding, type index$1_ConditionByICD10 as ConditionByICD10, type index$1_ConditionBySNOMED as ConditionBySNOMED, type index$1_ConditionClinicalStatus as ConditionClinicalStatus, type index$1_ConditionFromResource as ConditionFromResource, type index$1_ConditionManual as ConditionManual, type index$1_ConditionOptions as ConditionOptions, type index$1_ContactPoint as ContactPoint, type index$1_DocumentOptions as DocumentOptions, type index$1_FhirflyClient as FhirflyClient, type index$1_HumanName as HumanName, type index$1_Identifier as Identifier, type index$1_ImmunizationByCVX as ImmunizationByCVX, type index$1_ImmunizationFromResource as ImmunizationFromResource, type index$1_ImmunizationManual as ImmunizationManual, type index$1_ImmunizationOptions as ImmunizationOptions, type index$1_MedicationByNDC as MedicationByNDC, type index$1_MedicationByRxNorm as MedicationByRxNorm, type index$1_MedicationBySNOMED as MedicationBySNOMED, type index$1_MedicationFromResource as MedicationFromResource, type index$1_MedicationManual as MedicationManual, type index$1_MedicationOptions as MedicationOptions, type index$1_MedicationStatus as MedicationStatus, type index$1_ObservationStatus as ObservationStatus, type index$1_PatientCommunication as PatientCommunication, type index$1_PatientContact as PatientContact, type index$1_PatientDemographics as PatientDemographics, type index$1_PatientFull as PatientFull, type index$1_PatientShorthand as PatientShorthand, type index$1_Period as Period, type index$1_Reference as Reference, type index$1_ResultByLOINC as ResultByLOINC, type index$1_ResultFromResource as ResultFromResource, type index$1_ResultManual as ResultManual, type index$1_ResultOptions as ResultOptions, type index$1_ValidationIssue as ValidationIssue, type index$1_ValidationResult as ValidationResult };
 }
 
 /**

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { b as SHLOptions, c as SHLResult, M as ManifestEntry, S as SHLStorage, d as Manifest, e as SHLAttachment, a as SHLMetadata } from './types-Doq5cGNm.js';
-import { A as AzureStorage, a as AzureStorageConfig, F as FhirflyStorage, d as FhirflyStorageConfig, G as GCSStorage, b as GCSStorageConfig, L as LocalStorage, c as LocalStorageConfig, e as S3Storage, S as S3StorageConfig } from './storage-B3GyJD2y.js';
+import { b as SHLOptions, c as SHLResult, M as ManifestEntry, S as SHLStorage, d as Manifest, e as SHLAttachment, a as SHLMetadata } from './types-BLLJeWe_.js';
+import { A as AzureStorage, a as AzureStorageConfig, F as FhirflyStorage, d as FhirflyStorageConfig, G as GCSStorage, b as GCSStorageConfig, L as LocalStorage, c as LocalStorageConfig, e as S3Storage, S as S3StorageConfig } from './storage-Cx7uXUl8.js';
 
 /**
  * Shared FHIR R4 datatypes used across IPS bundle construction.
@@ -170,12 +170,14 @@ interface PatientContact {
  * full has `name: HumanName[]`.
  */
 type PatientDemographics = PatientShorthand | PatientFull;
+/** FHIR bundle profile: IPS (full conformance), R4 (plain), or PSHD (CMS patient-shared). */
+type BundleProfile = "ips" | "r4" | "pshd";
 /**
  * Options for building an IPS bundle.
  */
 interface BuildOptions {
     /** FHIR profile to validate against */
-    profile: "ips" | "r4";
+    profile: BundleProfile;
     /** Bundle identifier (auto-generated if not provided) */
     bundleId?: string;
     /** Composition date (defaults to now) */
@@ -623,6 +625,7 @@ declare class Bundle {
      */
     validate(options?: BuildOptions): ValidationResult;
     private hasValidName;
+    private buildPshdBundle;
     private buildComposition;
     private buildMedicationSection;
     private buildAllergySection;
@@ -642,6 +645,10 @@ declare const CODE_SYSTEMS: {
     readonly ICD10CM: "http://hl7.org/fhir/sid/icd-10-cm";
     readonly CONDITION_CLINICAL: "http://terminology.hl7.org/CodeSystem/condition-clinical";
     readonly ALLERGY_CLINICAL: "http://terminology.hl7.org/CodeSystem/allergyintolerance-clinical";
+    /** CMS Patient-Shared Health Document category code system */
+    readonly CMS_PATIENT_SHARED_CATEGORY: "https://cms.gov/fhir/CodeSystem/patient-shared-category";
+    /** V3 ActCode security label for patient-asserted data */
+    readonly SECURITY_PATAST: "PATAST";
 };
 
 type index$1_Address = Address;
@@ -654,6 +661,7 @@ type index$1_AllergyOptions = AllergyOptions;
 type index$1_BuildOptions = BuildOptions;
 type index$1_Bundle = Bundle;
 declare const index$1_Bundle: typeof Bundle;
+type index$1_BundleProfile = BundleProfile;
 declare const index$1_CODE_SYSTEMS: typeof CODE_SYSTEMS;
 type index$1_CodeableConcept = CodeableConcept;
 type index$1_Coding = Coding;
@@ -694,7 +702,7 @@ type index$1_ResultOptions = ResultOptions;
 type index$1_ValidationIssue = ValidationIssue;
 type index$1_ValidationResult = ValidationResult;
 declare namespace index$1 {
-  export { type index$1_Address as Address, type index$1_AdministrativeGender as AdministrativeGender, type index$1_AllergyBySNOMED as AllergyBySNOMED, type index$1_AllergyClinicalStatus as AllergyClinicalStatus, type index$1_AllergyFromResource as AllergyFromResource, type index$1_AllergyManual as AllergyManual, type index$1_AllergyOptions as AllergyOptions, type index$1_BuildOptions as BuildOptions, index$1_Bundle as Bundle, index$1_CODE_SYSTEMS as CODE_SYSTEMS, type index$1_CodeableConcept as CodeableConcept, type index$1_Coding as Coding, type index$1_ConditionByICD10 as ConditionByICD10, type index$1_ConditionBySNOMED as ConditionBySNOMED, type index$1_ConditionClinicalStatus as ConditionClinicalStatus, type index$1_ConditionFromResource as ConditionFromResource, type index$1_ConditionManual as ConditionManual, type index$1_ConditionOptions as ConditionOptions, type index$1_ContactPoint as ContactPoint, type index$1_DocumentOptions as DocumentOptions, type index$1_FhirflyClient as FhirflyClient, type index$1_HumanName as HumanName, type index$1_Identifier as Identifier, type index$1_ImmunizationByCVX as ImmunizationByCVX, type index$1_ImmunizationFromResource as ImmunizationFromResource, type index$1_ImmunizationManual as ImmunizationManual, type index$1_ImmunizationOptions as ImmunizationOptions, type index$1_MedicationByNDC as MedicationByNDC, type index$1_MedicationByRxNorm as MedicationByRxNorm, type index$1_MedicationBySNOMED as MedicationBySNOMED, type index$1_MedicationFromResource as MedicationFromResource, type index$1_MedicationManual as MedicationManual, type index$1_MedicationOptions as MedicationOptions, type index$1_MedicationStatus as MedicationStatus, type index$1_ObservationStatus as ObservationStatus, type index$1_PatientCommunication as PatientCommunication, type index$1_PatientContact as PatientContact, type index$1_PatientDemographics as PatientDemographics, type index$1_PatientFull as PatientFull, type index$1_PatientShorthand as PatientShorthand, type index$1_Period as Period, type index$1_Reference as Reference, type index$1_ResultByLOINC as ResultByLOINC, type index$1_ResultFromResource as ResultFromResource, type index$1_ResultManual as ResultManual, type index$1_ResultOptions as ResultOptions, type index$1_ValidationIssue as ValidationIssue, type index$1_ValidationResult as ValidationResult };
+  export { type index$1_Address as Address, type index$1_AdministrativeGender as AdministrativeGender, type index$1_AllergyBySNOMED as AllergyBySNOMED, type index$1_AllergyClinicalStatus as AllergyClinicalStatus, type index$1_AllergyFromResource as AllergyFromResource, type index$1_AllergyManual as AllergyManual, type index$1_AllergyOptions as AllergyOptions, type index$1_BuildOptions as BuildOptions, index$1_Bundle as Bundle, type index$1_BundleProfile as BundleProfile, index$1_CODE_SYSTEMS as CODE_SYSTEMS, type index$1_CodeableConcept as CodeableConcept, type index$1_Coding as Coding, type index$1_ConditionByICD10 as ConditionByICD10, type index$1_ConditionBySNOMED as ConditionBySNOMED, type index$1_ConditionClinicalStatus as ConditionClinicalStatus, type index$1_ConditionFromResource as ConditionFromResource, type index$1_ConditionManual as ConditionManual, type index$1_ConditionOptions as ConditionOptions, type index$1_ContactPoint as ContactPoint, type index$1_DocumentOptions as DocumentOptions, type index$1_FhirflyClient as FhirflyClient, type index$1_HumanName as HumanName, type index$1_Identifier as Identifier, type index$1_ImmunizationByCVX as ImmunizationByCVX, type index$1_ImmunizationFromResource as ImmunizationFromResource, type index$1_ImmunizationManual as ImmunizationManual, type index$1_ImmunizationOptions as ImmunizationOptions, type index$1_MedicationByNDC as MedicationByNDC, type index$1_MedicationByRxNorm as MedicationByRxNorm, type index$1_MedicationBySNOMED as MedicationBySNOMED, type index$1_MedicationFromResource as MedicationFromResource, type index$1_MedicationManual as MedicationManual, type index$1_MedicationOptions as MedicationOptions, type index$1_MedicationStatus as MedicationStatus, type index$1_ObservationStatus as ObservationStatus, type index$1_PatientCommunication as PatientCommunication, type index$1_PatientContact as PatientContact, type index$1_PatientDemographics as PatientDemographics, type index$1_PatientFull as PatientFull, type index$1_PatientShorthand as PatientShorthand, type index$1_Period as Period, type index$1_Reference as Reference, type index$1_ResultByLOINC as ResultByLOINC, type index$1_ResultFromResource as ResultFromResource, type index$1_ResultManual as ResultManual, type index$1_ResultOptions as ResultOptions, type index$1_ValidationIssue as ValidationIssue, type index$1_ValidationResult as ValidationResult };
 }
 
 /**

package/dist/index.js

@@ -1,4 +1,4 @@
-export { ips_exports as IPS, shl_exports as SHL } from './chunk-YBDRWUQU.js';
+export { ips_exports as IPS, shl_exports as SHL } from './chunk-UU434UFQ.js';
 export { EncryptionError, ShlError, StorageError, ValidationError } from './chunk-VKB3ESIV.js';
 import './chunk-PZ5AY32C.js';
 //# sourceMappingURL=index.js.map

package/dist/lambda.cjs

@@ -1,11 +1,11 @@
 'use strict';
 
-var chunkQXSWM5QV_cjs = require('./chunk-QXSWM5QV.cjs');
+var chunkJOZ6XZPO_cjs = require('./chunk-JOZ6XZPO.cjs');
 require('./chunk-Q7SFCCGT.cjs');
 
 // src/adapters/lambda.ts
 function lambdaHandler(config) {
-  const handle = chunkQXSWM5QV_cjs.createHandler(config);
+  const handle = chunkJOZ6XZPO_cjs.createHandler(config);
   const prefix = config.pathPrefix?.replace(/\/+$/, "") ?? "";
   return async (event) => {
     let path = event.requestContext.http.path;
@@ -25,7 +25,8 @@ function lambdaHandler(config) {
       method: event.requestContext.http.method,
       path,
       body,
-      headers: normalizeHeaders(event.headers)
+      headers: normalizeHeaders(event.headers),
+      query: event.queryStringParameters
     };
     try {
       const result = await handle(handlerReq);

package/dist/lambda.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/adapters/lambda.ts"],"names":["createHandler"],"mappings":";;;;;;AAwDO,SAAS,cACd,MAAA,EACqE;AACrE,EAAA,MAAM,MAAA,GAASA,gCAAc,MAAM,CAAA;AACnC,EAAA,MAAM,SAAS,MAAA,CAAO,UAAA,EAAY,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,IAAK,EAAA;AAEzD,EAAA,OAAO,OAAO,KAAA,KAAoE;AAEhF,IAAA,IAAI,IAAA,GAAO,KAAA,CAAM,cAAA,CAAe,IAAA,CAAK,IAAA;AACrC,IAAA,IAAI,MAAA,IAAU,IAAA,CAAK,UAAA,CAAW,MAAM,CAAA,EAAG;AACrC,MAAA,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,IAAK,GAAA;AAAA,IACtC;AAGA,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI,MAAM,IAAA,EAAM;AACd,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,GAAM,KAAA,CAAM,eAAA,GACd,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,IAAA,EAAM,QAAQ,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA,GACjD,KAAA,CAAM,IAAA;AACV,QAAA,IAAA,GAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,MACvB,CAAA,CAAA,MAAQ;AACN,QAAA,IAAA,GAAO,MAAA;AAAA,MACT;AAAA,IACF;AAEA,IAAA,MAAM,UAAA,GAA6B;AAAA,MACjC,MAAA,EAAQ,KAAA,CAAM,cAAA,CAAe,IAAA,CAAK,MAAA;AAAA,MAClC,IAAA;AAAA,MACA,IAAA;AAAA,MACA,OAAA,EAAS,gBAAA,CAAiB,KAAA,CAAM,OAAO;AAAA,KACzC;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AAGtC,MAAA,IAAI,MAAA,CAAO,gBAAgB,UAAA,EAAY;AACrC,QAAA,OAAO;AAAA,UACL,YAAY,MAAA,CAAO,MAAA;AAAA,UACnB,SAAS,MAAA,CAAO,OAAA;AAAA,UAChB,MAAM,MAAA,CAAO,IAAA,CAAK,OAAO,IAAI,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,UAChD,eAAA,EAAiB;AAAA,SACnB;AAAA,MACF;AAEA,MAAA,OAAO;AAAA,QACL,YAAY,MAAA,CAAO,MAAA;AAAA,QACnB,SAAS,MAAA,CAAO,OAAA;AAAA,QAChB,MAAM,MAAA,CAAO;AAAA,OACf;AAAA,IACF,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO;AAAA,QACL,UAAA,EAAY,GAAA;AAAA,QACZ,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,QAC9C,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,yBAAyB;AAAA,OACzD;AAAA,IACF;AAAA,EACF,CAAA;AACF;AAEA,SAAS,iBACP,OAAA,EACoC;AACpC,EAAA,MAAM,SAA6C,EAAC;AACpD,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,MAAA,CAAO,GAAA,CAAI,WAAA,EAAa,CAAA,GAAI,KAAA;AAAA,EAC9B;AACA,EAAA,OAAO,MAAA;AACT","file":"lambda.cjs","sourcesContent":["// Copyright 2026 FHIRfly.io LLC. All rights reserved.\n// Licensed under the MIT License. See LICENSE file in the project root.\nimport { createHandler } from \"../server/handler.js\";\nimport type { SHLHandlerConfig, HandlerRequest } from \"../server/types.js\";\n\n// Inline API Gateway v2 types — no @types/aws-lambda dependency needed\ninterface APIGatewayProxyEventV2 {\n  requestContext: {\n    http: {\n      method: string;\n      path: string;\n    };\n  };\n  headers: Record<string, string | undefined>;\n  body?: string;\n  isBase64Encoded?: boolean;\n}\n\ninterface APIGatewayProxyResultV2 {\n  statusCode: number;\n  headers: Record<string, string>;\n  body: string;\n  isBase64Encoded?: boolean;\n}\n\nexport interface LambdaHandlerConfig extends SHLHandlerConfig {\n  /**\n   * Path prefix to strip from the incoming event path.\n   *\n   * For example, if your API Gateway route is `/shl/{proxy+}`,\n   * set `pathPrefix: \"/shl\"` so that `/shl/abc123` becomes `/abc123`.\n   */\n  pathPrefix?: string;\n}\n\n/**\n * Create an AWS Lambda handler for serving SMART Health Links.\n *\n * Designed for API Gateway v2 (HTTP API) event format. Strips the\n * optional `pathPrefix` from the incoming path before routing.\n *\n * @example\n * ```ts\n * import { lambdaHandler } from \"@fhirfly-io/shl/lambda\";\n * import { ServerS3Storage } from \"@fhirfly-io/shl/server\";\n *\n * export const handler = lambdaHandler({\n *   storage: new ServerS3Storage({\n *     bucket: \"my-shl-bucket\",\n *     region: \"us-east-1\",\n *     baseUrl: \"https://shl.example.com\",\n *   }),\n *   pathPrefix: \"/shl\",\n * });\n * ```\n */\nexport function lambdaHandler(\n  config: LambdaHandlerConfig,\n): (event: APIGatewayProxyEventV2) => Promise<APIGatewayProxyResultV2> {\n  const handle = createHandler(config);\n  const prefix = config.pathPrefix?.replace(/\\/+$/, \"\") ?? \"\";\n\n  return async (event: APIGatewayProxyEventV2): Promise<APIGatewayProxyResultV2> => {\n    // Strip path prefix\n    let path = event.requestContext.http.path;\n    if (prefix && path.startsWith(prefix)) {\n      path = path.slice(prefix.length) || \"/\";\n    }\n\n    // Parse body\n    let body: unknown;\n    if (event.body) {\n      try {\n        const raw = event.isBase64Encoded\n          ? Buffer.from(event.body, \"base64\").toString(\"utf8\")\n          : event.body;\n        body = JSON.parse(raw);\n      } catch {\n        body = undefined;\n      }\n    }\n\n    const handlerReq: HandlerRequest = {\n      method: event.requestContext.http.method,\n      path,\n      body,\n      headers: normalizeHeaders(event.headers),\n    };\n\n    try {\n      const result = await handle(handlerReq);\n\n      // Binary bodies (Uint8Array) need base64 encoding\n      if (result.body instanceof Uint8Array) {\n        return {\n          statusCode: result.status,\n          headers: result.headers,\n          body: Buffer.from(result.body).toString(\"base64\"),\n          isBase64Encoded: true,\n        };\n      }\n\n      return {\n        statusCode: result.status,\n        headers: result.headers,\n        body: result.body,\n      };\n    } catch {\n      return {\n        statusCode: 500,\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify({ error: \"Internal server error\" }),\n      };\n    }\n  };\n}\n\nfunction normalizeHeaders(\n  headers: Record<string, string | undefined>,\n): Record<string, string | undefined> {\n  const result: Record<string, string | undefined> = {};\n  for (const [key, value] of Object.entries(headers)) {\n    result[key.toLowerCase()] = value;\n  }\n  return result;\n}\n"]}
+{"version":3,"sources":["../src/adapters/lambda.ts"],"names":["createHandler"],"mappings":";;;;;;AAyDO,SAAS,cACd,MAAA,EACqE;AACrE,EAAA,MAAM,MAAA,GAASA,gCAAc,MAAM,CAAA;AACnC,EAAA,MAAM,SAAS,MAAA,CAAO,UAAA,EAAY,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,IAAK,EAAA;AAEzD,EAAA,OAAO,OAAO,KAAA,KAAoE;AAEhF,IAAA,IAAI,IAAA,GAAO,KAAA,CAAM,cAAA,CAAe,IAAA,CAAK,IAAA;AACrC,IAAA,IAAI,MAAA,IAAU,IAAA,CAAK,UAAA,CAAW,MAAM,CAAA,EAAG;AACrC,MAAA,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,IAAK,GAAA;AAAA,IACtC;AAGA,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI,MAAM,IAAA,EAAM;AACd,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,GAAM,KAAA,CAAM,eAAA,GACd,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,IAAA,EAAM,QAAQ,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA,GACjD,KAAA,CAAM,IAAA;AACV,QAAA,IAAA,GAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,MACvB,CAAA,CAAA,MAAQ;AACN,QAAA,IAAA,GAAO,MAAA;AAAA,MACT;AAAA,IACF;AAEA,IAAA,MAAM,UAAA,GAA6B;AAAA,MACjC,MAAA,EAAQ,KAAA,CAAM,cAAA,CAAe,IAAA,CAAK,MAAA;AAAA,MAClC,IAAA;AAAA,MACA,IAAA;AAAA,MACA,OAAA,EAAS,gBAAA,CAAiB,KAAA,CAAM,OAAO,CAAA;AAAA,MACvC,OAAO,KAAA,CAAM;AAAA,KACf;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AAGtC,MAAA,IAAI,MAAA,CAAO,gBAAgB,UAAA,EAAY;AACrC,QAAA,OAAO;AAAA,UACL,YAAY,MAAA,CAAO,MAAA;AAAA,UACnB,SAAS,MAAA,CAAO,OAAA;AAAA,UAChB,MAAM,MAAA,CAAO,IAAA,CAAK,OAAO,IAAI,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,UAChD,eAAA,EAAiB;AAAA,SACnB;AAAA,MACF;AAEA,MAAA,OAAO;AAAA,QACL,YAAY,MAAA,CAAO,MAAA;AAAA,QACnB,SAAS,MAAA,CAAO,OAAA;AAAA,QAChB,MAAM,MAAA,CAAO;AAAA,OACf;AAAA,IACF,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO;AAAA,QACL,UAAA,EAAY,GAAA;AAAA,QACZ,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,QAC9C,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,yBAAyB;AAAA,OACzD;AAAA,IACF;AAAA,EACF,CAAA;AACF;AAEA,SAAS,iBACP,OAAA,EACoC;AACpC,EAAA,MAAM,SAA6C,EAAC;AACpD,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,MAAA,CAAO,GAAA,CAAI,WAAA,EAAa,CAAA,GAAI,KAAA;AAAA,EAC9B;AACA,EAAA,OAAO,MAAA;AACT","file":"lambda.cjs","sourcesContent":["// Copyright 2026 FHIRfly.io LLC. All rights reserved.\n// Licensed under the MIT License. See LICENSE file in the project root.\nimport { createHandler } from \"../server/handler.js\";\nimport type { SHLHandlerConfig, HandlerRequest } from \"../server/types.js\";\n\n// Inline API Gateway v2 types — no @types/aws-lambda dependency needed\ninterface APIGatewayProxyEventV2 {\n  requestContext: {\n    http: {\n      method: string;\n      path: string;\n    };\n  };\n  headers: Record<string, string | undefined>;\n  queryStringParameters?: Record<string, string | undefined>;\n  body?: string;\n  isBase64Encoded?: boolean;\n}\n\ninterface APIGatewayProxyResultV2 {\n  statusCode: number;\n  headers: Record<string, string>;\n  body: string;\n  isBase64Encoded?: boolean;\n}\n\nexport interface LambdaHandlerConfig extends SHLHandlerConfig {\n  /**\n   * Path prefix to strip from the incoming event path.\n   *\n   * For example, if your API Gateway route is `/shl/{proxy+}`,\n   * set `pathPrefix: \"/shl\"` so that `/shl/abc123` becomes `/abc123`.\n   */\n  pathPrefix?: string;\n}\n\n/**\n * Create an AWS Lambda handler for serving SMART Health Links.\n *\n * Designed for API Gateway v2 (HTTP API) event format. Strips the\n * optional `pathPrefix` from the incoming path before routing.\n *\n * @example\n * ```ts\n * import { lambdaHandler } from \"@fhirfly-io/shl/lambda\";\n * import { ServerS3Storage } from \"@fhirfly-io/shl/server\";\n *\n * export const handler = lambdaHandler({\n *   storage: new ServerS3Storage({\n *     bucket: \"my-shl-bucket\",\n *     region: \"us-east-1\",\n *     baseUrl: \"https://shl.example.com\",\n *   }),\n *   pathPrefix: \"/shl\",\n * });\n * ```\n */\nexport function lambdaHandler(\n  config: LambdaHandlerConfig,\n): (event: APIGatewayProxyEventV2) => Promise<APIGatewayProxyResultV2> {\n  const handle = createHandler(config);\n  const prefix = config.pathPrefix?.replace(/\\/+$/, \"\") ?? \"\";\n\n  return async (event: APIGatewayProxyEventV2): Promise<APIGatewayProxyResultV2> => {\n    // Strip path prefix\n    let path = event.requestContext.http.path;\n    if (prefix && path.startsWith(prefix)) {\n      path = path.slice(prefix.length) || \"/\";\n    }\n\n    // Parse body\n    let body: unknown;\n    if (event.body) {\n      try {\n        const raw = event.isBase64Encoded\n          ? Buffer.from(event.body, \"base64\").toString(\"utf8\")\n          : event.body;\n        body = JSON.parse(raw);\n      } catch {\n        body = undefined;\n      }\n    }\n\n    const handlerReq: HandlerRequest = {\n      method: event.requestContext.http.method,\n      path,\n      body,\n      headers: normalizeHeaders(event.headers),\n      query: event.queryStringParameters,\n    };\n\n    try {\n      const result = await handle(handlerReq);\n\n      // Binary bodies (Uint8Array) need base64 encoding\n      if (result.body instanceof Uint8Array) {\n        return {\n          statusCode: result.status,\n          headers: result.headers,\n          body: Buffer.from(result.body).toString(\"base64\"),\n          isBase64Encoded: true,\n        };\n      }\n\n      return {\n        statusCode: result.status,\n        headers: result.headers,\n        body: result.body,\n      };\n    } catch {\n      return {\n        statusCode: 500,\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify({ error: \"Internal server error\" }),\n      };\n    }\n  };\n}\n\nfunction normalizeHeaders(\n  headers: Record<string, string | undefined>,\n): Record<string, string | undefined> {\n  const result: Record<string, string | undefined> = {};\n  for (const [key, value] of Object.entries(headers)) {\n    result[key.toLowerCase()] = value;\n  }\n  return result;\n}\n"]}

package/dist/lambda.d.cts

@@ -1,5 +1,5 @@
-import { S as SHLHandlerConfig } from './types-hHf-a3hH.cjs';
-import './types-Doq5cGNm.cjs';
+import { S as SHLHandlerConfig } from './types-Cdi4IkC9.cjs';
+import './types-BLLJeWe_.cjs';
 
 interface APIGatewayProxyEventV2 {
     requestContext: {
@@ -9,6 +9,7 @@ interface APIGatewayProxyEventV2 {
         };
     };
     headers: Record<string, string | undefined>;
+    queryStringParameters?: Record<string, string | undefined>;
     body?: string;
     isBase64Encoded?: boolean;
 }

package/dist/lambda.d.ts

@@ -1,5 +1,5 @@
-import { S as SHLHandlerConfig } from './types-BegxU0wQ.js';
-import './types-Doq5cGNm.js';
+import { S as SHLHandlerConfig } from './types-6Vw5fiat.js';
+import './types-BLLJeWe_.js';
 
 interface APIGatewayProxyEventV2 {
     requestContext: {
@@ -9,6 +9,7 @@ interface APIGatewayProxyEventV2 {
         };
     };
     headers: Record<string, string | undefined>;
+    queryStringParameters?: Record<string, string | undefined>;
     body?: string;
     isBase64Encoded?: boolean;
 }

package/dist/lambda.js

@@ -1,4 +1,4 @@
-import { createHandler } from './chunk-ZEE5RXIS.js';
+import { createHandler } from './chunk-KGEFZQ6W.js';
 import './chunk-PZ5AY32C.js';
 
 // src/adapters/lambda.ts
@@ -23,7 +23,8 @@ function lambdaHandler(config) {
       method: event.requestContext.http.method,
       path,
       body,
-      headers: normalizeHeaders(event.headers)
+      headers: normalizeHeaders(event.headers),
+      query: event.queryStringParameters
     };
     try {
       const result = await handle(handlerReq);

package/dist/lambda.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/adapters/lambda.ts"],"names":[],"mappings":";;;;AAwDO,SAAS,cACd,MAAA,EACqE;AACrE,EAAA,MAAM,MAAA,GAAS,cAAc,MAAM,CAAA;AACnC,EAAA,MAAM,SAAS,MAAA,CAAO,UAAA,EAAY,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,IAAK,EAAA;AAEzD,EAAA,OAAO,OAAO,KAAA,KAAoE;AAEhF,IAAA,IAAI,IAAA,GAAO,KAAA,CAAM,cAAA,CAAe,IAAA,CAAK,IAAA;AACrC,IAAA,IAAI,MAAA,IAAU,IAAA,CAAK,UAAA,CAAW,MAAM,CAAA,EAAG;AACrC,MAAA,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,IAAK,GAAA;AAAA,IACtC;AAGA,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI,MAAM,IAAA,EAAM;AACd,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,GAAM,KAAA,CAAM,eAAA,GACd,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,IAAA,EAAM,QAAQ,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA,GACjD,KAAA,CAAM,IAAA;AACV,QAAA,IAAA,GAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,MACvB,CAAA,CAAA,MAAQ;AACN,QAAA,IAAA,GAAO,MAAA;AAAA,MACT;AAAA,IACF;AAEA,IAAA,MAAM,UAAA,GAA6B;AAAA,MACjC,MAAA,EAAQ,KAAA,CAAM,cAAA,CAAe,IAAA,CAAK,MAAA;AAAA,MAClC,IAAA;AAAA,MACA,IAAA;AAAA,MACA,OAAA,EAAS,gBAAA,CAAiB,KAAA,CAAM,OAAO;AAAA,KACzC;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AAGtC,MAAA,IAAI,MAAA,CAAO,gBAAgB,UAAA,EAAY;AACrC,QAAA,OAAO;AAAA,UACL,YAAY,MAAA,CAAO,MAAA;AAAA,UACnB,SAAS,MAAA,CAAO,OAAA;AAAA,UAChB,MAAM,MAAA,CAAO,IAAA,CAAK,OAAO,IAAI,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,UAChD,eAAA,EAAiB;AAAA,SACnB;AAAA,MACF;AAEA,MAAA,OAAO;AAAA,QACL,YAAY,MAAA,CAAO,MAAA;AAAA,QACnB,SAAS,MAAA,CAAO,OAAA;AAAA,QAChB,MAAM,MAAA,CAAO;AAAA,OACf;AAAA,IACF,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO;AAAA,QACL,UAAA,EAAY,GAAA;AAAA,QACZ,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,QAC9C,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,yBAAyB;AAAA,OACzD;AAAA,IACF;AAAA,EACF,CAAA;AACF;AAEA,SAAS,iBACP,OAAA,EACoC;AACpC,EAAA,MAAM,SAA6C,EAAC;AACpD,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,MAAA,CAAO,GAAA,CAAI,WAAA,EAAa,CAAA,GAAI,KAAA;AAAA,EAC9B;AACA,EAAA,OAAO,MAAA;AACT","file":"lambda.js","sourcesContent":["// Copyright 2026 FHIRfly.io LLC. All rights reserved.\n// Licensed under the MIT License. See LICENSE file in the project root.\nimport { createHandler } from \"../server/handler.js\";\nimport type { SHLHandlerConfig, HandlerRequest } from \"../server/types.js\";\n\n// Inline API Gateway v2 types — no @types/aws-lambda dependency needed\ninterface APIGatewayProxyEventV2 {\n  requestContext: {\n    http: {\n      method: string;\n      path: string;\n    };\n  };\n  headers: Record<string, string | undefined>;\n  body?: string;\n  isBase64Encoded?: boolean;\n}\n\ninterface APIGatewayProxyResultV2 {\n  statusCode: number;\n  headers: Record<string, string>;\n  body: string;\n  isBase64Encoded?: boolean;\n}\n\nexport interface LambdaHandlerConfig extends SHLHandlerConfig {\n  /**\n   * Path prefix to strip from the incoming event path.\n   *\n   * For example, if your API Gateway route is `/shl/{proxy+}`,\n   * set `pathPrefix: \"/shl\"` so that `/shl/abc123` becomes `/abc123`.\n   */\n  pathPrefix?: string;\n}\n\n/**\n * Create an AWS Lambda handler for serving SMART Health Links.\n *\n * Designed for API Gateway v2 (HTTP API) event format. Strips the\n * optional `pathPrefix` from the incoming path before routing.\n *\n * @example\n * ```ts\n * import { lambdaHandler } from \"@fhirfly-io/shl/lambda\";\n * import { ServerS3Storage } from \"@fhirfly-io/shl/server\";\n *\n * export const handler = lambdaHandler({\n *   storage: new ServerS3Storage({\n *     bucket: \"my-shl-bucket\",\n *     region: \"us-east-1\",\n *     baseUrl: \"https://shl.example.com\",\n *   }),\n *   pathPrefix: \"/shl\",\n * });\n * ```\n */\nexport function lambdaHandler(\n  config: LambdaHandlerConfig,\n): (event: APIGatewayProxyEventV2) => Promise<APIGatewayProxyResultV2> {\n  const handle = createHandler(config);\n  const prefix = config.pathPrefix?.replace(/\\/+$/, \"\") ?? \"\";\n\n  return async (event: APIGatewayProxyEventV2): Promise<APIGatewayProxyResultV2> => {\n    // Strip path prefix\n    let path = event.requestContext.http.path;\n    if (prefix && path.startsWith(prefix)) {\n      path = path.slice(prefix.length) || \"/\";\n    }\n\n    // Parse body\n    let body: unknown;\n    if (event.body) {\n      try {\n        const raw = event.isBase64Encoded\n          ? Buffer.from(event.body, \"base64\").toString(\"utf8\")\n          : event.body;\n        body = JSON.parse(raw);\n      } catch {\n        body = undefined;\n      }\n    }\n\n    const handlerReq: HandlerRequest = {\n      method: event.requestContext.http.method,\n      path,\n      body,\n      headers: normalizeHeaders(event.headers),\n    };\n\n    try {\n      const result = await handle(handlerReq);\n\n      // Binary bodies (Uint8Array) need base64 encoding\n      if (result.body instanceof Uint8Array) {\n        return {\n          statusCode: result.status,\n          headers: result.headers,\n          body: Buffer.from(result.body).toString(\"base64\"),\n          isBase64Encoded: true,\n        };\n      }\n\n      return {\n        statusCode: result.status,\n        headers: result.headers,\n        body: result.body,\n      };\n    } catch {\n      return {\n        statusCode: 500,\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify({ error: \"Internal server error\" }),\n      };\n    }\n  };\n}\n\nfunction normalizeHeaders(\n  headers: Record<string, string | undefined>,\n): Record<string, string | undefined> {\n  const result: Record<string, string | undefined> = {};\n  for (const [key, value] of Object.entries(headers)) {\n    result[key.toLowerCase()] = value;\n  }\n  return result;\n}\n"]}
+{"version":3,"sources":["../src/adapters/lambda.ts"],"names":[],"mappings":";;;;AAyDO,SAAS,cACd,MAAA,EACqE;AACrE,EAAA,MAAM,MAAA,GAAS,cAAc,MAAM,CAAA;AACnC,EAAA,MAAM,SAAS,MAAA,CAAO,UAAA,EAAY,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,IAAK,EAAA;AAEzD,EAAA,OAAO,OAAO,KAAA,KAAoE;AAEhF,IAAA,IAAI,IAAA,GAAO,KAAA,CAAM,cAAA,CAAe,IAAA,CAAK,IAAA;AACrC,IAAA,IAAI,MAAA,IAAU,IAAA,CAAK,UAAA,CAAW,MAAM,CAAA,EAAG;AACrC,MAAA,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,IAAK,GAAA;AAAA,IACtC;AAGA,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI,MAAM,IAAA,EAAM;AACd,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,GAAM,KAAA,CAAM,eAAA,GACd,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,IAAA,EAAM,QAAQ,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA,GACjD,KAAA,CAAM,IAAA;AACV,QAAA,IAAA,GAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,MACvB,CAAA,CAAA,MAAQ;AACN,QAAA,IAAA,GAAO,MAAA;AAAA,MACT;AAAA,IACF;AAEA,IAAA,MAAM,UAAA,GAA6B;AAAA,MACjC,MAAA,EAAQ,KAAA,CAAM,cAAA,CAAe,IAAA,CAAK,MAAA;AAAA,MAClC,IAAA;AAAA,MACA,IAAA;AAAA,MACA,OAAA,EAAS,gBAAA,CAAiB,KAAA,CAAM,OAAO,CAAA;AAAA,MACvC,OAAO,KAAA,CAAM;AAAA,KACf;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AAGtC,MAAA,IAAI,MAAA,CAAO,gBAAgB,UAAA,EAAY;AACrC,QAAA,OAAO;AAAA,UACL,YAAY,MAAA,CAAO,MAAA;AAAA,UACnB,SAAS,MAAA,CAAO,OAAA;AAAA,UAChB,MAAM,MAAA,CAAO,IAAA,CAAK,OAAO,IAAI,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,UAChD,eAAA,EAAiB;AAAA,SACnB;AAAA,MACF;AAEA,MAAA,OAAO;AAAA,QACL,YAAY,MAAA,CAAO,MAAA;AAAA,QACnB,SAAS,MAAA,CAAO,OAAA;AAAA,QAChB,MAAM,MAAA,CAAO;AAAA,OACf;AAAA,IACF,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO;AAAA,QACL,UAAA,EAAY,GAAA;AAAA,QACZ,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,QAC9C,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,yBAAyB;AAAA,OACzD;AAAA,IACF;AAAA,EACF,CAAA;AACF;AAEA,SAAS,iBACP,OAAA,EACoC;AACpC,EAAA,MAAM,SAA6C,EAAC;AACpD,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,MAAA,CAAO,GAAA,CAAI,WAAA,EAAa,CAAA,GAAI,KAAA;AAAA,EAC9B;AACA,EAAA,OAAO,MAAA;AACT","file":"lambda.js","sourcesContent":["// Copyright 2026 FHIRfly.io LLC. All rights reserved.\n// Licensed under the MIT License. See LICENSE file in the project root.\nimport { createHandler } from \"../server/handler.js\";\nimport type { SHLHandlerConfig, HandlerRequest } from \"../server/types.js\";\n\n// Inline API Gateway v2 types — no @types/aws-lambda dependency needed\ninterface APIGatewayProxyEventV2 {\n  requestContext: {\n    http: {\n      method: string;\n      path: string;\n    };\n  };\n  headers: Record<string, string | undefined>;\n  queryStringParameters?: Record<string, string | undefined>;\n  body?: string;\n  isBase64Encoded?: boolean;\n}\n\ninterface APIGatewayProxyResultV2 {\n  statusCode: number;\n  headers: Record<string, string>;\n  body: string;\n  isBase64Encoded?: boolean;\n}\n\nexport interface LambdaHandlerConfig extends SHLHandlerConfig {\n  /**\n   * Path prefix to strip from the incoming event path.\n   *\n   * For example, if your API Gateway route is `/shl/{proxy+}`,\n   * set `pathPrefix: \"/shl\"` so that `/shl/abc123` becomes `/abc123`.\n   */\n  pathPrefix?: string;\n}\n\n/**\n * Create an AWS Lambda handler for serving SMART Health Links.\n *\n * Designed for API Gateway v2 (HTTP API) event format. Strips the\n * optional `pathPrefix` from the incoming path before routing.\n *\n * @example\n * ```ts\n * import { lambdaHandler } from \"@fhirfly-io/shl/lambda\";\n * import { ServerS3Storage } from \"@fhirfly-io/shl/server\";\n *\n * export const handler = lambdaHandler({\n *   storage: new ServerS3Storage({\n *     bucket: \"my-shl-bucket\",\n *     region: \"us-east-1\",\n *     baseUrl: \"https://shl.example.com\",\n *   }),\n *   pathPrefix: \"/shl\",\n * });\n * ```\n */\nexport function lambdaHandler(\n  config: LambdaHandlerConfig,\n): (event: APIGatewayProxyEventV2) => Promise<APIGatewayProxyResultV2> {\n  const handle = createHandler(config);\n  const prefix = config.pathPrefix?.replace(/\\/+$/, \"\") ?? \"\";\n\n  return async (event: APIGatewayProxyEventV2): Promise<APIGatewayProxyResultV2> => {\n    // Strip path prefix\n    let path = event.requestContext.http.path;\n    if (prefix && path.startsWith(prefix)) {\n      path = path.slice(prefix.length) || \"/\";\n    }\n\n    // Parse body\n    let body: unknown;\n    if (event.body) {\n      try {\n        const raw = event.isBase64Encoded\n          ? Buffer.from(event.body, \"base64\").toString(\"utf8\")\n          : event.body;\n        body = JSON.parse(raw);\n      } catch {\n        body = undefined;\n      }\n    }\n\n    const handlerReq: HandlerRequest = {\n      method: event.requestContext.http.method,\n      path,\n      body,\n      headers: normalizeHeaders(event.headers),\n      query: event.queryStringParameters,\n    };\n\n    try {\n      const result = await handle(handlerReq);\n\n      // Binary bodies (Uint8Array) need base64 encoding\n      if (result.body instanceof Uint8Array) {\n        return {\n          statusCode: result.status,\n          headers: result.headers,\n          body: Buffer.from(result.body).toString(\"base64\"),\n          isBase64Encoded: true,\n        };\n      }\n\n      return {\n        statusCode: result.status,\n        headers: result.headers,\n        body: result.body,\n      };\n    } catch {\n      return {\n        statusCode: 500,\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify({ error: \"Internal server error\" }),\n      };\n    }\n  };\n}\n\nfunction normalizeHeaders(\n  headers: Record<string, string | undefined>,\n): Record<string, string | undefined> {\n  const result: Record<string, string | undefined> = {};\n  for (const [key, value] of Object.entries(headers)) {\n    result[key.toLowerCase()] = value;\n  }\n  return result;\n}\n"]}

package/dist/server.cjs

@@ -2,7 +2,7 @@
 
 var chunkLXJB46WB_cjs = require('./chunk-LXJB46WB.cjs');
 require('./chunk-UDS6UJAL.cjs');
-var chunkQXSWM5QV_cjs = require('./chunk-QXSWM5QV.cjs');
+var chunkJOZ6XZPO_cjs = require('./chunk-JOZ6XZPO.cjs');
 require('./chunk-Q7SFCCGT.cjs');
 
 
@@ -25,7 +25,7 @@ Object.defineProperty(exports, "ServerS3Storage", {
 });
 Object.defineProperty(exports, "createHandler", {
   enumerable: true,
-  get: function () { return chunkQXSWM5QV_cjs.createHandler; }
+  get: function () { return chunkJOZ6XZPO_cjs.createHandler; }
 });
 //# sourceMappingURL=server.cjs.map
 //# sourceMappingURL=server.cjs.map

package/dist/server.d.cts

@@ -1,7 +1,7 @@
-import { S as SHLHandlerConfig, H as HandlerRequest, a as HandlerResponse, b as SHLServerStorage } from './types-hHf-a3hH.cjs';
-export { A as AccessEvent, C as CorsConfig } from './types-hHf-a3hH.cjs';
-import { A as AzureStorage, a as AzureStorageConfig, G as GCSStorage, b as GCSStorageConfig, L as LocalStorage, c as LocalStorageConfig, S as S3StorageConfig } from './storage-BwszYwFo.cjs';
-import { a as SHLMetadata } from './types-Doq5cGNm.cjs';
+import { S as SHLHandlerConfig, H as HandlerRequest, a as HandlerResponse, b as SHLServerStorage } from './types-Cdi4IkC9.cjs';
+export { A as AccessEvent, C as CorsConfig } from './types-Cdi4IkC9.cjs';
+import { A as AzureStorage, a as AzureStorageConfig, G as GCSStorage, b as GCSStorageConfig, L as LocalStorage, c as LocalStorageConfig, S as S3StorageConfig } from './storage-BbzK-kFf.cjs';
+import { a as SHLMetadata } from './types-BLLJeWe_.cjs';
 
 /**
  * Create a framework-agnostic SHL request handler.

package/dist/server.d.ts

@@ -1,7 +1,7 @@
-import { S as SHLHandlerConfig, H as HandlerRequest, a as HandlerResponse, b as SHLServerStorage } from './types-BegxU0wQ.js';
-export { A as AccessEvent, C as CorsConfig } from './types-BegxU0wQ.js';
-import { A as AzureStorage, a as AzureStorageConfig, G as GCSStorage, b as GCSStorageConfig, L as LocalStorage, c as LocalStorageConfig, S as S3StorageConfig } from './storage-B3GyJD2y.js';
-import { a as SHLMetadata } from './types-Doq5cGNm.js';
+import { S as SHLHandlerConfig, H as HandlerRequest, a as HandlerResponse, b as SHLServerStorage } from './types-6Vw5fiat.js';
+export { A as AccessEvent, C as CorsConfig } from './types-6Vw5fiat.js';
+import { A as AzureStorage, a as AzureStorageConfig, G as GCSStorage, b as GCSStorageConfig, L as LocalStorage, c as LocalStorageConfig, S as S3StorageConfig } from './storage-Cx7uXUl8.js';
+import { a as SHLMetadata } from './types-BLLJeWe_.js';
 
 /**
  * Create a framework-agnostic SHL request handler.