@medplum/fhir-router 2.0.21 → 2.0.22

package/dist/cjs/index.cjs

@@ -8,7 +8,6 @@
      * Processes a FHIR batch request.
      *
      * See: https://www.hl7.org/fhir/http.html#transaction
-     *
      * @param router The FHIR router.
      * @param repo The FHIR repository.
      * @param bundle The input bundle.
@@ -36,8 +35,6 @@
         }
         /**
          * Processes a FHIR batch request.
-         * @param repo The FHIR repository.
-         * @param bundle The input bundle.
          * @returns The bundle response.
          */
         async processBatch() {
@@ -13378,6 +13375,12 @@ spurious results.`);
         'http://hl7.org/fhirpath/System.String': GraphQLString,
         'http://hl7.org/fhirpath/System.Time': GraphQLString,
     };
+    const outputTypeCache = {
+        ...typeCache,
+    };
+    const inputTypeCache = {
+        ...typeCache,
+    };
     /**
      * Cache of "introspection" query results.
      * Common case is the standard schema query from GraphiQL and Insomnia.
@@ -13393,8 +13396,12 @@ spurious results.`);
      * Handles FHIR GraphQL requests.
      *
      * See: https://www.hl7.org/fhir/graphql.html
+     * @param req The request details.
+     * @param repo The current user FHIR repository.
+     * @param router The router for router options.
+     * @returns The response.
      */
-    async function graphqlHandler(req, repo) {
+    async function graphqlHandler(req, repo, router) {
         const { query, operationName, variables } = req.body;
         if (!query) {
             return [core.badRequest('Must provide query.')];
@@ -13413,7 +13420,7 @@ spurious results.`);
             return [invalidRequest(validationErrors)];
         }
         const introspection = isIntrospectionQuery(query);
-        if (introspection) {
+        if (introspection && !router.options?.introspectionEnabled) {
             return [core.forbidden];
         }
         const dataLoader = new DataLoader((keys) => repo.readReferences(keys));
@@ -13435,7 +13442,6 @@ spurious results.`);
      * Introspection queries ask for the schema, which is expensive.
      *
      * See: https://graphql.org/learn/introspection/
-     *
      * @param query The GraphQL query.
      * @returns True if the query is an introspection query.
      */
@@ -13452,15 +13458,16 @@ spurious results.`);
         // First, create placeholder types
         // We need this first for circular dependencies
         for (const resourceType of core.getResourceTypes()) {
-            typeCache[resourceType] = buildGraphQLType(resourceType);
+            outputTypeCache[resourceType] = buildGraphQLOutputType(resourceType);
         }
         // Next, fill in all of the type properties
         const fields = {};
+        const mutationFields = {};
         for (const resourceType of core.getResourceTypes()) {
-            const graphQLType = getGraphQLType(resourceType);
+            const graphQLOutputType = getGraphQLOutputType(resourceType);
             // Get resource by ID
             fields[resourceType] = {
-                type: graphQLType,
+                type: graphQLOutputType,
                 args: {
                     id: {
                         type: new GraphQLNonNull(GraphQLID),
@@ -13471,38 +13478,71 @@ spurious results.`);
             };
             // Search resource by search parameters
             fields[resourceType + 'List'] = {
-                type: new GraphQLList(graphQLType),
+                type: new GraphQLList(graphQLOutputType),
                 args: buildSearchArgs(resourceType),
                 resolve: resolveBySearch,
             };
             // FHIR GraphQL Connection API
             fields[resourceType + 'Connection'] = {
-                type: buildConnectionType(resourceType, graphQLType),
+                type: buildConnectionType(resourceType, graphQLOutputType),
                 args: buildSearchArgs(resourceType),
                 resolve: resolveByConnectionApi,
             };
+            // Mutation API
+            mutationFields[resourceType + 'Create'] = {
+                type: graphQLOutputType,
+                args: buildCreateArgs(resourceType),
+                resolve: resolveByCreate,
+            };
+            mutationFields[resourceType + 'Update'] = {
+                type: graphQLOutputType,
+                args: buildUpdateArgs(resourceType),
+                resolve: resolveByUpdate,
+            };
+            mutationFields[resourceType + 'Delete'] = {
+                type: graphQLOutputType,
+                args: {
+                    id: {
+                        type: new GraphQLNonNull(GraphQLID),
+                        description: resourceType + ' ID',
+                    },
+                },
+                resolve: resolveByDelete,
+            };
         }
         return new GraphQLSchema({
             query: new GraphQLObjectType({
                 name: 'QueryType',
                 fields,
             }),
+            mutation: new GraphQLObjectType({
+                name: 'MutationType',
+                fields: mutationFields,
+            }),
         });
     }
-    function getGraphQLType(resourceType) {
-        let result = typeCache[resourceType];
+    function getGraphQLOutputType(inputType) {
+        let result = outputTypeCache[inputType];
+        if (!result) {
+            result = buildGraphQLOutputType(inputType);
+            outputTypeCache[inputType] = result;
+        }
+        return result;
+    }
+    function getGraphQLInputType(inputType, nameSuffix) {
+        let result = inputTypeCache[inputType];
         if (!result) {
-            result = buildGraphQLType(resourceType);
-            typeCache[resourceType] = result;
+            result = buildGraphQLInputType(inputType, nameSuffix);
+            inputTypeCache[inputType] = result;
         }
         return result;
     }
-    function buildGraphQLType(resourceType) {
+    function buildGraphQLOutputType(resourceType) {
         if (resourceType === 'ResourceList') {
             return new GraphQLUnionType({
                 name: 'ResourceList',
                 types: () => core.getResourceTypes()
-                    .map(getGraphQLType)
+                    .map(getGraphQLOutputType)
                     .filter((t) => !!t),
                 resolveType: resolveTypeByReference,
             });
@@ -13511,16 +13551,37 @@ spurious results.`);
         return new GraphQLObjectType({
             name: resourceType,
             description: schema.description,
-            fields: () => buildGraphQLFields(resourceType),
+            fields: () => buildGraphQLOutputFields(resourceType),
         });
     }
-    function buildGraphQLFields(resourceType) {
+    function buildGraphQLInputType(resourceType, nameSuffix) {
+        const schema = core.getResourceTypeSchema(resourceType);
+        return new GraphQLInputObjectType({
+            name: resourceType + nameSuffix,
+            description: schema.description,
+            fields: () => buildGraphQLInputFields(resourceType, nameSuffix),
+        });
+    }
+    function buildGraphQLOutputFields(resourceType) {
         const fields = {};
-        buildPropertyFields(resourceType, fields);
+        buildOutputPropertyFields(resourceType, fields);
         buildReverseLookupFields(resourceType, fields);
         return fields;
     }
-    function buildPropertyFields(resourceType, fields) {
+    function buildGraphQLInputFields(resourceType, nameSuffix) {
+        const fields = {};
+        // Add resourceType field for root resource
+        if (core.isResourceType(resourceType)) {
+            const propertyFieldConfig = {
+                description: 'The type of resource',
+                type: GraphQLString,
+            };
+            fields['resourceType'] = propertyFieldConfig;
+        }
+        buildInputPropertyFields(resourceType, fields, nameSuffix);
+        return fields;
+    }
+    function buildOutputPropertyFields(resourceType, fields) {
         const schema = core.getResourceTypeSchema(resourceType);
         const properties = schema.properties;
         if (core.isResourceTypeSchema(schema)) {
@@ -13532,25 +13593,35 @@ spurious results.`);
         if (resourceType === 'Reference') {
             fields.resource = {
                 description: 'Reference',
-                type: getGraphQLType('ResourceList'),
+                type: getGraphQLOutputType('ResourceList'),
                 resolve: resolveByReference,
             };
         }
         for (const key of Object.keys(properties)) {
             const elementDefinition = core.getElementDefinition(resourceType, key);
             for (const type of elementDefinition.type) {
-                buildPropertyField(fields, key, elementDefinition, type);
+                buildOutputPropertyField(fields, key, elementDefinition, type);
             }
         }
     }
-    function buildPropertyField(fields, key, elementDefinition, elementDefinitionType) {
+    function buildInputPropertyFields(resourceType, fields, nameSuffix) {
+        const schema = core.getResourceTypeSchema(resourceType);
+        const properties = schema.properties;
+        for (const key of Object.keys(properties)) {
+            const elementDefinition = core.getElementDefinition(resourceType, key);
+            for (const type of elementDefinition.type) {
+                buildInputPropertyField(fields, key, elementDefinition, type, nameSuffix);
+            }
+        }
+    }
+    function buildOutputPropertyField(fields, key, elementDefinition, elementDefinitionType) {
         let typeName = elementDefinitionType.code;
         if (typeName === 'Element' || typeName === 'BackboneElement') {
             typeName = core.buildTypeName(elementDefinition.path?.split('.'));
         }
         const fieldConfig = {
             description: elementDefinition.short,
-            type: getPropertyType(elementDefinition, typeName),
+            type: getOutputPropertyType(elementDefinition, typeName),
             resolve: resolveField,
         };
         if (elementDefinition.max === '*') {
@@ -13559,6 +13630,21 @@ spurious results.`);
         const propertyName = key.replace('[x]', core.capitalize(elementDefinitionType.code));
         fields[propertyName] = fieldConfig;
     }
+    function buildInputPropertyField(fields, key, elementDefinition, elementDefinitionType, nameSuffix) {
+        let typeName = elementDefinitionType.code;
+        if (typeName === 'Element' || typeName === 'BackboneElement') {
+            typeName = core.buildTypeName(elementDefinition.path?.split('.'));
+        }
+        const fieldConfig = {
+            description: elementDefinition.short,
+            type: getGraphQLInputType(typeName, nameSuffix),
+        };
+        if (elementDefinition.max === '*') {
+            fieldConfig.type = new GraphQLList(getGraphQLInputType(typeName, nameSuffix));
+        }
+        const propertyName = key.replace('[x]', core.capitalize(elementDefinitionType.code));
+        fields[propertyName] = fieldConfig;
+    }
     /**
      * Builds field arguments for a list property.
      *
@@ -13569,7 +13655,6 @@ spurious results.`);
      *   4. All properties of the list element type.
      *
      * See: https://hl7.org/fhir/R4/graphql.html#list
-     *
      * @param fieldTypeName The type name of the field.
      * @returns The arguments for the field.
      */
@@ -13654,13 +13739,12 @@ spurious results.`);
      * (except that the "id" argument is prohibited here as nonsensical).
      *
      * See: https://www.hl7.org/fhir/graphql.html#reverse
-     *
      * @param resourceType The resource type to build fields for.
      * @param fields The fields object to add fields to.
      */
     function buildReverseLookupFields(resourceType, fields) {
         for (const childResourceType of core.getResourceTypes()) {
-            const childGraphQLType = getGraphQLType(childResourceType);
+            const childGraphQLType = getGraphQLOutputType(childResourceType);
             const childSearchParams = core.getSearchParameters(childResourceType);
             const enumValues = {};
             let count = 0;
@@ -13726,8 +13810,30 @@ spurious results.`);
         }
         return args;
     }
-    function getPropertyType(elementDefinition, typeName) {
-        const graphqlType = getGraphQLType(typeName);
+    function buildCreateArgs(resourceType) {
+        const args = {
+            res: {
+                type: getGraphQLInputType(resourceType, 'Create'),
+                description: resourceType + ' Create',
+            },
+        };
+        return args;
+    }
+    function buildUpdateArgs(resourceType) {
+        const args = {
+            id: {
+                type: new GraphQLNonNull(GraphQLID),
+                description: resourceType + ' ID',
+            },
+            res: {
+                type: getGraphQLInputType(resourceType, 'Update'),
+                description: resourceType + ' Update',
+            },
+        };
+        return args;
+    }
+    function getOutputPropertyType(elementDefinition, typeName) {
+        const graphqlType = getGraphQLOutputType(typeName);
         if (elementDefinition.max === '*') {
             return new GraphQLList(graphqlType);
         }
@@ -13766,7 +13872,6 @@ spurious results.`);
      * @param ctx The GraphQL context.
      * @param info The GraphQL resolve info.  This includes the schema, and additional field details.
      * @returns Promise to read the resoures for the query.
-     * @implements {GraphQLFieldResolver}
      */
     async function resolveBySearch(source, args, ctx, info) {
         const fieldName = info.fieldName;
@@ -13784,7 +13889,6 @@ spurious results.`);
      * @param ctx The GraphQL context.
      * @param info The GraphQL resolve info.  This includes the schema, and additional field details.
      * @returns Promise to read the resoures for the query.
-     * @implements {GraphQLFieldResolver}
      */
     async function resolveByConnectionApi(source, args, ctx, info) {
         const fieldName = info.fieldName;
@@ -13814,7 +13918,6 @@ spurious results.`);
      * @param ctx The GraphQL context.
      * @param info The GraphQL resolve info.  This includes the schema, and additional field details.
      * @returns Promise to read the resoure for the query.
-     * @implements {GraphQLFieldResolver}
      */
     async function resolveById(_source, args, ctx, info) {
         try {
@@ -13831,7 +13934,6 @@ spurious results.`);
      * @param _args The GraphQL search arguments.
      * @param ctx The GraphQL context.
      * @returns Promise to read the resoure(s) for the query.
-     * @implements {GraphQLFieldResolver}
      */
     async function resolveByReference(source, _args, ctx) {
         try {
@@ -13846,14 +13948,13 @@ spurious results.`);
      * When loading a resource via reference, GraphQL needs to know the type of the resource.
      * @param resource The loaded resource.
      * @returns The GraphQL type of the resource.
-     * @implements {GraphQLTypeResolver}
      */
     function resolveTypeByReference(resource) {
         const resourceType = resource?.resourceType;
         if (!resourceType) {
             return undefined;
         }
-        return getGraphQLType(resourceType).name;
+        return getGraphQLOutputType(resourceType).name;
     }
     /**
      * GraphQL resolver for fields.
@@ -13864,7 +13965,6 @@ spurious results.`);
      * @param _ctx The GraphQL context.
      * @param info The GraphQL resolve info.  This includes the field name.
      * @returns Promise to read the resoure for the query.
-     * @implements {GraphQLFieldResolver}
      */
     async function resolveField(source, args, _ctx, info) {
         const fieldValue = source?.[info.fieldName];
@@ -13887,6 +13987,68 @@ spurious results.`);
         }
         return array;
     }
+    /**
+     * GraphQL resolver function for create requests.
+     * The field name should end with "Create" (i.e., "PatientCreate" for updating a Patient).
+     * The args should include the data to be created for the specified resource type.
+     * @param _source The source/root object. In the case of creates, this is typically not used and is thus ignored.
+     * @param args The GraphQL arguments, containing the new data for the resource.
+     * @param ctx The GraphQL context. This includes the repository where resources are stored.
+     * @param info The GraphQL resolve info. This includes the schema, field details, and other query-specific information.
+     * @returns A Promise that resolves to the created resource, or undefined if the resource could not be found or updated.
+     */
+    async function resolveByCreate(_source, args, ctx, info) {
+        const fieldName = info.fieldName;
+        // 'Create.length'=== 6 && 'Update.length' === 6
+        const resourceType = fieldName.substring(0, fieldName.length - 6);
+        const resourceArgs = args.res;
+        if (resourceArgs.resourceType !== resourceType) {
+            return [core.badRequest('Invalid resourceType')];
+        }
+        const resource = await ctx.repo.createResource(resourceArgs);
+        return resource;
+    }
+    // Mutation Resolvers
+    /**
+     * GraphQL resolver function for update requests.
+     * The field name should end with "Update" (i.e., "PatientUpdate" for updating a Patient).
+     * The args should include the data to be updated for the specified resource type.
+     * @param _source The source/root object. In the case of updates, this is typically not used and is thus ignored.
+     * @param args The GraphQL arguments, containing the new data for the resource.
+     * @param ctx The GraphQL context. This includes the repository where resources are stored.
+     * @param info The GraphQL resolve info. This includes the schema, field details, and other query-specific information.
+     * @returns A Promise that resolves to the updated resource, or undefined if the resource could not be found or updated.
+     */
+    async function resolveByUpdate(_source, args, ctx, info) {
+        const fieldName = info.fieldName;
+        // 'Create.length'=== 6 && 'Update.length' === 6
+        const resourceType = fieldName.substring(0, fieldName.length - 6);
+        const resourceArgs = args.res;
+        const resourceId = args.id;
+        if (resourceArgs.resourceType !== resourceType) {
+            return [core.badRequest('Invalid resourceType')];
+        }
+        if (resourceId !== resourceArgs.id) {
+            return [core.badRequest('Incorrect ID')];
+        }
+        const resource = await ctx.repo.updateResource(resourceArgs);
+        return resource;
+    }
+    /**
+     * GraphQL resolver function for delete requests.
+     * The field name should end with "Delete" (e.g., "PatientDelete" for deleting a Patient).
+     * The args should include the ID of the resource to be deleted.
+     * @param _source The source/root object. In the case of deletions, this is typically not used and is thus ignored.
+     * @param args The GraphQL arguments, containing the ID of the resource to be deleted.
+     * @param ctx The GraphQL context. This includes the repository where resources are stored.
+     * @param info The GraphQL resolve info. This includes the schema, field details, and other query-specific information.
+     * @returns A Promise that resolves when the resource has been deleted. No value is returned.
+     */
+    async function resolveByDelete(_source, args, ctx, info) {
+        const fieldName = info.fieldName;
+        const resourceType = fieldName.substring(0, fieldName.length - 'Delete'.length);
+        await ctx.repo.deleteResource(resourceType, args.id);
+    }
     function parseSearchArgs(resourceType, source, args) {
         let referenceFilter = undefined;
         if (source) {
@@ -14111,8 +14273,9 @@ spurious results.`);
         return [core.allOk, resource];
     }
     class FhirRouter {
-        constructor() {
+        constructor(options = {}) {
             this.router = new Router();
+            this.options = options;
             this.router.add('POST', '', batch);
             this.router.add('GET', ':resourceType', search);
             this.router.add('POST', ':resourceType/_search', searchByPost);
@@ -14150,7 +14313,6 @@ spurious results.`);
          * The return value is the resource, if available; otherwise, undefined.
          *
          * See FHIR search for full details: https://www.hl7.org/fhir/search.html
-         *
          * @param searchRequest The FHIR search request.
          * @returns Promise to the first search result or undefined.
          */
@@ -14166,7 +14328,6 @@ spurious results.`);
          * The return value is an array of resources.
          *
          * See FHIR search for full details: https://www.hl7.org/fhir/search.html
-         *
          * @param searchRequest The FHIR search request.
          * @returns Promise to the array of search results.
          */