@medplum/core 4.1.8 → 4.1.10

package/dist/cjs/index.d.ts

@@ -72,25 +72,25 @@ export declare const AccessPolicyInteraction: {
     readonly READ: "read";
     readonly VREAD: "vread";
     readonly UPDATE: "update";
-    readonly PATCH: "patch";
     readonly DELETE: "delete";
     readonly HISTORY: "history";
-    readonly HISTORY_INSTANCE: "history-instance";
-    readonly HISTORY_TYPE: "history-type";
-    readonly HISTORY_SYSTEM: "history-system";
     readonly CREATE: "create";
     readonly SEARCH: "search";
-    readonly SEARCH_TYPE: "search-type";
-    readonly SEARCH_SYSTEM: "search-system";
-    readonly SEARCH_COMPARTMENT: "search-compartment";
-    readonly CAPABILITIES: "capabilities";
-    readonly TRANSACTION: "transaction";
-    readonly BATCH: "batch";
-    readonly OPERATION: "operation";
 };
 
 export declare type AccessPolicyInteraction = (typeof AccessPolicyInteraction)[keyof typeof AccessPolicyInteraction];
 
+/**
+ * Shallow check that an interaction is permitted by the AccessPolicy on a given resource type,
+ * at least for some resources.  A more in-depth check for the specific resource(s) being accessed
+ * is required in addition to this one.
+ * @param accessPolicy - The AccessPolicy to check against.
+ * @param interaction - The FHIR interaction being performed.
+ * @param resourceType - The type of resource being interacted with.
+ * @returns True when the interaction is provisionally permitted by the AccessPolicy.
+ */
+export declare function accessPolicySupportsInteraction(accessPolicy: AccessPolicy, interaction: AccessPolicyInteraction, resourceType: ResourceType): boolean;
+
 export declare const AckCode: {
     /** AA - Application Accept */
     readonly AA: "AA";
@@ -406,6 +406,7 @@ export declare type CanBePopulated = {
  * @param accessPolicy - The access policy.
  * @param resourceType - The resource type.
  * @returns True if the current user can read the specified resource type.
+ * @deprecated Use accessPolicySupportsInteraction() instead.
  */
 export declare function canReadResourceType(accessPolicy: AccessPolicy, resourceType: ResourceType): boolean;
 
@@ -415,6 +416,7 @@ export declare function canReadResourceType(accessPolicy: AccessPolicy, resource
  * @param accessPolicy - The access policy.
  * @param resource - The resource.
  * @returns True if the current user can write the specified resource type.
+ * @deprecated Use satisfiedAccessPolicy() instead.
  */
 export declare function canWriteResource(accessPolicy: AccessPolicy, resource: Resource): boolean;
 
@@ -425,6 +427,7 @@ export declare function canWriteResource(accessPolicy: AccessPolicy, resource: R
  * @param accessPolicy - The access policy.
  * @param resourceType - The resource type.
  * @returns True if the current user can write the specified resource type.
+ * @deprecated Use accessPolicySupportsInteraction() instead.
  */
 export declare function canWriteResourceType(accessPolicy: AccessPolicy, resourceType: ResourceType): boolean;
 
@@ -728,6 +731,15 @@ export declare type CurrentContext<T extends FhircastAnchorResourceType | '' = F
     context: FhircastEventContext<AnchorResourceOpenEvent<T>>[];
 } : never;
 
+export declare interface DataSampleOptions {
+    /** Code for the data points. */
+    code?: CodeableConcept;
+    /** Unit for the data points. */
+    unit?: QuantityUnit;
+    /** Sampling information for high-frequency Observations. */
+    sampling?: Omit<SampledData, 'data'>;
+}
+
 export declare class DataSampler {
     private code?;
     private unit?;
@@ -735,15 +747,8 @@ export declare class DataSampler {
     private readonly dataPoints;
     /**
      * @param opts - Optional parameters.
-     * @param opts.code - Code for data points.
-     * @param opts.unit - Unit for data points.
-     * @param opts.sampling - Sampling information for high-frequency Observations.
-     */
-    constructor(opts?: {
-        code?: CodeableConcept;
-        unit?: QuantityUnit;
-        sampling?: SamplingInfo;
-    });
+     */
+    constructor(opts?: DataSampleOptions);
     addObservation(obs: Observation): void;
     addData(...data: number[]): void;
     private checkUnit;
@@ -763,6 +768,13 @@ export declare type DataTypesMap = {
  */
 export declare function decodeBase64(data: string): string;
 
+/**
+ * Decodes a string from Base64URL format.
+ * @param data - The Base64URL encoded input string.
+ * @returns The decoded string.
+ */
+export declare function decodeBase64Url(data: string): string;
+
 /**
  * Creates a deep clone of the input value.
  *
@@ -879,6 +891,14 @@ export declare class EmptySetAtom implements Atom {
  */
 export declare function encodeBase64(data: string): string;
 
+/**
+ * Encodes a string into Base64URL format.
+ * This is the encoding required for JWT parts.
+ * @param data - The unencoded input string.
+ * @returns The Base64URL encoded string.
+ */
+export declare function encodeBase64Url(data: string): string;
+
 /**
  * Encrypts a string with SHA256 encryption.
  * @param str - The unencrypted input string.
@@ -4862,6 +4882,8 @@ export declare interface MedplumInfraConfig {
     clamscanLoggingPrefix: string;
     skipDns?: boolean;
     hostedZoneName?: string;
+    wafLogGroupName?: string;
+    wafLogGroupCreate?: boolean;
     additionalContainers?: {
         name: string;
         image: string;
@@ -4996,6 +5018,8 @@ export declare interface MedplumSourceInfraConfig {
     clamscanLoggingPrefix: ValueOrExternalSecret<string>;
     skipDns?: ValueOrExternalSecret<boolean>;
     hostedZoneName?: ValueOrExternalSecret<string>;
+    wafLogGroupName?: ValueOrExternalSecret<string>;
+    wafLogGroupCreate?: ValueOrExternalSecret<boolean>;
     additionalContainers?: {
         name: ValueOrExternalSecret<string>;
         image: ValueOrExternalSecret<string>;
@@ -5683,6 +5707,8 @@ export declare class ReadablePromise<T> implements Promise<T> {
     finally(onfinally?: (() => void) | null): Promise<T>;
 }
 
+export declare const readInteractions: AccessPolicyInteraction[];
+
 export declare class ReconnectingWebSocket<WS extends IWebSocket = WebSocket> extends TypedEventTarget<WebSocketEventMap_2> implements IReconnectingWebSocket {
     private _ws;
     private _retryCount;

package/dist/esm/index.d.ts

@@ -72,25 +72,25 @@ export declare const AccessPolicyInteraction: {
     readonly READ: "read";
     readonly VREAD: "vread";
     readonly UPDATE: "update";
-    readonly PATCH: "patch";
     readonly DELETE: "delete";
     readonly HISTORY: "history";
-    readonly HISTORY_INSTANCE: "history-instance";
-    readonly HISTORY_TYPE: "history-type";
-    readonly HISTORY_SYSTEM: "history-system";
     readonly CREATE: "create";
     readonly SEARCH: "search";
-    readonly SEARCH_TYPE: "search-type";
-    readonly SEARCH_SYSTEM: "search-system";
-    readonly SEARCH_COMPARTMENT: "search-compartment";
-    readonly CAPABILITIES: "capabilities";
-    readonly TRANSACTION: "transaction";
-    readonly BATCH: "batch";
-    readonly OPERATION: "operation";
 };
 
 export declare type AccessPolicyInteraction = (typeof AccessPolicyInteraction)[keyof typeof AccessPolicyInteraction];
 
+/**
+ * Shallow check that an interaction is permitted by the AccessPolicy on a given resource type,
+ * at least for some resources.  A more in-depth check for the specific resource(s) being accessed
+ * is required in addition to this one.
+ * @param accessPolicy - The AccessPolicy to check against.
+ * @param interaction - The FHIR interaction being performed.
+ * @param resourceType - The type of resource being interacted with.
+ * @returns True when the interaction is provisionally permitted by the AccessPolicy.
+ */
+export declare function accessPolicySupportsInteraction(accessPolicy: AccessPolicy, interaction: AccessPolicyInteraction, resourceType: ResourceType): boolean;
+
 export declare const AckCode: {
     /** AA - Application Accept */
     readonly AA: "AA";
@@ -406,6 +406,7 @@ export declare type CanBePopulated = {
  * @param accessPolicy - The access policy.
  * @param resourceType - The resource type.
  * @returns True if the current user can read the specified resource type.
+ * @deprecated Use accessPolicySupportsInteraction() instead.
  */
 export declare function canReadResourceType(accessPolicy: AccessPolicy, resourceType: ResourceType): boolean;
 
@@ -415,6 +416,7 @@ export declare function canReadResourceType(accessPolicy: AccessPolicy, resource
  * @param accessPolicy - The access policy.
  * @param resource - The resource.
  * @returns True if the current user can write the specified resource type.
+ * @deprecated Use satisfiedAccessPolicy() instead.
  */
 export declare function canWriteResource(accessPolicy: AccessPolicy, resource: Resource): boolean;
 
@@ -425,6 +427,7 @@ export declare function canWriteResource(accessPolicy: AccessPolicy, resource: R
  * @param accessPolicy - The access policy.
  * @param resourceType - The resource type.
  * @returns True if the current user can write the specified resource type.
+ * @deprecated Use accessPolicySupportsInteraction() instead.
  */
 export declare function canWriteResourceType(accessPolicy: AccessPolicy, resourceType: ResourceType): boolean;
 
@@ -728,6 +731,15 @@ export declare type CurrentContext<T extends FhircastAnchorResourceType | '' = F
     context: FhircastEventContext<AnchorResourceOpenEvent<T>>[];
 } : never;
 
+export declare interface DataSampleOptions {
+    /** Code for the data points. */
+    code?: CodeableConcept;
+    /** Unit for the data points. */
+    unit?: QuantityUnit;
+    /** Sampling information for high-frequency Observations. */
+    sampling?: Omit<SampledData, 'data'>;
+}
+
 export declare class DataSampler {
     private code?;
     private unit?;
@@ -735,15 +747,8 @@ export declare class DataSampler {
     private readonly dataPoints;
     /**
      * @param opts - Optional parameters.
-     * @param opts.code - Code for data points.
-     * @param opts.unit - Unit for data points.
-     * @param opts.sampling - Sampling information for high-frequency Observations.
-     */
-    constructor(opts?: {
-        code?: CodeableConcept;
-        unit?: QuantityUnit;
-        sampling?: SamplingInfo;
-    });
+     */
+    constructor(opts?: DataSampleOptions);
     addObservation(obs: Observation): void;
     addData(...data: number[]): void;
     private checkUnit;
@@ -763,6 +768,13 @@ export declare type DataTypesMap = {
  */
 export declare function decodeBase64(data: string): string;
 
+/**
+ * Decodes a string from Base64URL format.
+ * @param data - The Base64URL encoded input string.
+ * @returns The decoded string.
+ */
+export declare function decodeBase64Url(data: string): string;
+
 /**
  * Creates a deep clone of the input value.
  *
@@ -879,6 +891,14 @@ export declare class EmptySetAtom implements Atom {
  */
 export declare function encodeBase64(data: string): string;
 
+/**
+ * Encodes a string into Base64URL format.
+ * This is the encoding required for JWT parts.
+ * @param data - The unencoded input string.
+ * @returns The Base64URL encoded string.
+ */
+export declare function encodeBase64Url(data: string): string;
+
 /**
  * Encrypts a string with SHA256 encryption.
  * @param str - The unencrypted input string.
@@ -4862,6 +4882,8 @@ export declare interface MedplumInfraConfig {
     clamscanLoggingPrefix: string;
     skipDns?: boolean;
     hostedZoneName?: string;
+    wafLogGroupName?: string;
+    wafLogGroupCreate?: boolean;
     additionalContainers?: {
         name: string;
         image: string;
@@ -4996,6 +5018,8 @@ export declare interface MedplumSourceInfraConfig {
     clamscanLoggingPrefix: ValueOrExternalSecret<string>;
     skipDns?: ValueOrExternalSecret<boolean>;
     hostedZoneName?: ValueOrExternalSecret<string>;
+    wafLogGroupName?: ValueOrExternalSecret<string>;
+    wafLogGroupCreate?: ValueOrExternalSecret<boolean>;
     additionalContainers?: {
         name: ValueOrExternalSecret<string>;
         image: ValueOrExternalSecret<string>;
@@ -5683,6 +5707,8 @@ export declare class ReadablePromise<T> implements Promise<T> {
     finally(onfinally?: (() => void) | null): Promise<T>;
 }
 
+export declare const readInteractions: AccessPolicyInteraction[];
+
 export declare class ReconnectingWebSocket<WS extends IWebSocket = WebSocket> extends TypedEventTarget<WebSocketEventMap_2> implements IReconnectingWebSocket {
     private _ws;
     private _retryCount;