@medplum/fhir-router 2.0.21 → 2.0.22

package/dist/esm/index.mjs

@@ -1,4 +1,4 @@
-import { OperationOutcomeError, badRequest, normalizeOperationOutcome, parseSearchUrl, getReferenceString, resolveId, getStatus, isOk, allOk, LRUCache, forbidden, getResourceTypes, getResourceTypeSchema, isResourceTypeSchema, getElementDefinition, buildTypeName, capitalize, isLowerCase, globalSchema, getSearchParameters, DEFAULT_SEARCH_COUNT, toJsBoolean, evalFhirPathTyped, toTypedValue, Operator, parseSearchRequest, notFound, created, deepClone, matchesSearchRequest, evalFhirPath } from '@medplum/core';
+import { OperationOutcomeError, badRequest, normalizeOperationOutcome, parseSearchUrl, getReferenceString, resolveId, getStatus, isOk, allOk, LRUCache, forbidden, getResourceTypes, getResourceTypeSchema, isResourceTypeSchema, getElementDefinition, buildTypeName, capitalize, isLowerCase, globalSchema, getSearchParameters, DEFAULT_SEARCH_COUNT, toJsBoolean, evalFhirPathTyped, toTypedValue, Operator, parseSearchRequest, isResourceType, notFound, created, deepClone, matchesSearchRequest, evalFhirPath } from '@medplum/core';
 import DataLoader from 'dataloader';
 import { applyPatch } from 'rfc6902';
 
@@ -6,7 +6,6 @@ import { applyPatch } from 'rfc6902';
  * Processes a FHIR batch request.
  *
  * See: https://www.hl7.org/fhir/http.html#transaction
- *
  * @param router The FHIR router.
  * @param repo The FHIR repository.
  * @param bundle The input bundle.
@@ -34,8 +33,6 @@ class BatchProcessor {
     }
     /**
      * Processes a FHIR batch request.
-     * @param repo The FHIR repository.
-     * @param bundle The input bundle.
      * @returns The bundle response.
      */
     async processBatch() {
@@ -13376,6 +13373,12 @@ const typeCache = {
     'http://hl7.org/fhirpath/System.String': GraphQLString,
     'http://hl7.org/fhirpath/System.Time': GraphQLString,
 };
+const outputTypeCache = {
+    ...typeCache,
+};
+const inputTypeCache = {
+    ...typeCache,
+};
 /**
  * Cache of "introspection" query results.
  * Common case is the standard schema query from GraphiQL and Insomnia.
@@ -13391,8 +13394,12 @@ let rootSchema;
  * Handles FHIR GraphQL requests.
  *
  * See: https://www.hl7.org/fhir/graphql.html
+ * @param req The request details.
+ * @param repo The current user FHIR repository.
+ * @param router The router for router options.
+ * @returns The response.
  */
-async function graphqlHandler(req, repo) {
+async function graphqlHandler(req, repo, router) {
     const { query, operationName, variables } = req.body;
     if (!query) {
         return [badRequest('Must provide query.')];
@@ -13411,7 +13418,7 @@ async function graphqlHandler(req, repo) {
         return [invalidRequest(validationErrors)];
     }
     const introspection = isIntrospectionQuery(query);
-    if (introspection) {
+    if (introspection && !router.options?.introspectionEnabled) {
         return [forbidden];
     }
     const dataLoader = new DataLoader((keys) => repo.readReferences(keys));
@@ -13433,7 +13440,6 @@ async function graphqlHandler(req, repo) {
  * Introspection queries ask for the schema, which is expensive.
  *
  * See: https://graphql.org/learn/introspection/
- *
  * @param query The GraphQL query.
  * @returns True if the query is an introspection query.
  */
@@ -13450,15 +13456,16 @@ function buildRootSchema() {
     // First, create placeholder types
     // We need this first for circular dependencies
     for (const resourceType of getResourceTypes()) {
-        typeCache[resourceType] = buildGraphQLType(resourceType);
+        outputTypeCache[resourceType] = buildGraphQLOutputType(resourceType);
     }
     // Next, fill in all of the type properties
     const fields = {};
+    const mutationFields = {};
     for (const resourceType of getResourceTypes()) {
-        const graphQLType = getGraphQLType(resourceType);
+        const graphQLOutputType = getGraphQLOutputType(resourceType);
         // Get resource by ID
         fields[resourceType] = {
-            type: graphQLType,
+            type: graphQLOutputType,
             args: {
                 id: {
                     type: new GraphQLNonNull(GraphQLID),
@@ -13469,38 +13476,71 @@ function buildRootSchema() {
         };
         // Search resource by search parameters
         fields[resourceType + 'List'] = {
-            type: new GraphQLList(graphQLType),
+            type: new GraphQLList(graphQLOutputType),
             args: buildSearchArgs(resourceType),
             resolve: resolveBySearch,
         };
         // FHIR GraphQL Connection API
         fields[resourceType + 'Connection'] = {
-            type: buildConnectionType(resourceType, graphQLType),
+            type: buildConnectionType(resourceType, graphQLOutputType),
             args: buildSearchArgs(resourceType),
             resolve: resolveByConnectionApi,
         };
+        // Mutation API
+        mutationFields[resourceType + 'Create'] = {
+            type: graphQLOutputType,
+            args: buildCreateArgs(resourceType),
+            resolve: resolveByCreate,
+        };
+        mutationFields[resourceType + 'Update'] = {
+            type: graphQLOutputType,
+            args: buildUpdateArgs(resourceType),
+            resolve: resolveByUpdate,
+        };
+        mutationFields[resourceType + 'Delete'] = {
+            type: graphQLOutputType,
+            args: {
+                id: {
+                    type: new GraphQLNonNull(GraphQLID),
+                    description: resourceType + ' ID',
+                },
+            },
+            resolve: resolveByDelete,
+        };
     }
     return new GraphQLSchema({
         query: new GraphQLObjectType({
             name: 'QueryType',
             fields,
         }),
+        mutation: new GraphQLObjectType({
+            name: 'MutationType',
+            fields: mutationFields,
+        }),
     });
 }
-function getGraphQLType(resourceType) {
-    let result = typeCache[resourceType];
+function getGraphQLOutputType(inputType) {
+    let result = outputTypeCache[inputType];
+    if (!result) {
+        result = buildGraphQLOutputType(inputType);
+        outputTypeCache[inputType] = result;
+    }
+    return result;
+}
+function getGraphQLInputType(inputType, nameSuffix) {
+    let result = inputTypeCache[inputType];
     if (!result) {
-        result = buildGraphQLType(resourceType);
-        typeCache[resourceType] = result;
+        result = buildGraphQLInputType(inputType, nameSuffix);
+        inputTypeCache[inputType] = result;
     }
     return result;
 }
-function buildGraphQLType(resourceType) {
+function buildGraphQLOutputType(resourceType) {
     if (resourceType === 'ResourceList') {
         return new GraphQLUnionType({
             name: 'ResourceList',
             types: () => getResourceTypes()
-                .map(getGraphQLType)
+                .map(getGraphQLOutputType)
                 .filter((t) => !!t),
             resolveType: resolveTypeByReference,
         });
@@ -13509,16 +13549,37 @@ function buildGraphQLType(resourceType) {
     return new GraphQLObjectType({
         name: resourceType,
         description: schema.description,
-        fields: () => buildGraphQLFields(resourceType),
+        fields: () => buildGraphQLOutputFields(resourceType),
     });
 }
-function buildGraphQLFields(resourceType) {
+function buildGraphQLInputType(resourceType, nameSuffix) {
+    const schema = getResourceTypeSchema(resourceType);
+    return new GraphQLInputObjectType({
+        name: resourceType + nameSuffix,
+        description: schema.description,
+        fields: () => buildGraphQLInputFields(resourceType, nameSuffix),
+    });
+}
+function buildGraphQLOutputFields(resourceType) {
     const fields = {};
-    buildPropertyFields(resourceType, fields);
+    buildOutputPropertyFields(resourceType, fields);
     buildReverseLookupFields(resourceType, fields);
     return fields;
 }
-function buildPropertyFields(resourceType, fields) {
+function buildGraphQLInputFields(resourceType, nameSuffix) {
+    const fields = {};
+    // Add resourceType field for root resource
+    if (isResourceType(resourceType)) {
+        const propertyFieldConfig = {
+            description: 'The type of resource',
+            type: GraphQLString,
+        };
+        fields['resourceType'] = propertyFieldConfig;
+    }
+    buildInputPropertyFields(resourceType, fields, nameSuffix);
+    return fields;
+}
+function buildOutputPropertyFields(resourceType, fields) {
     const schema = getResourceTypeSchema(resourceType);
     const properties = schema.properties;
     if (isResourceTypeSchema(schema)) {
@@ -13530,25 +13591,35 @@ function buildPropertyFields(resourceType, fields) {
     if (resourceType === 'Reference') {
         fields.resource = {
             description: 'Reference',
-            type: getGraphQLType('ResourceList'),
+            type: getGraphQLOutputType('ResourceList'),
             resolve: resolveByReference,
         };
     }
     for (const key of Object.keys(properties)) {
         const elementDefinition = getElementDefinition(resourceType, key);
         for (const type of elementDefinition.type) {
-            buildPropertyField(fields, key, elementDefinition, type);
+            buildOutputPropertyField(fields, key, elementDefinition, type);
         }
     }
 }
-function buildPropertyField(fields, key, elementDefinition, elementDefinitionType) {
+function buildInputPropertyFields(resourceType, fields, nameSuffix) {
+    const schema = getResourceTypeSchema(resourceType);
+    const properties = schema.properties;
+    for (const key of Object.keys(properties)) {
+        const elementDefinition = getElementDefinition(resourceType, key);
+        for (const type of elementDefinition.type) {
+            buildInputPropertyField(fields, key, elementDefinition, type, nameSuffix);
+        }
+    }
+}
+function buildOutputPropertyField(fields, key, elementDefinition, elementDefinitionType) {
     let typeName = elementDefinitionType.code;
     if (typeName === 'Element' || typeName === 'BackboneElement') {
         typeName = buildTypeName(elementDefinition.path?.split('.'));
     }
     const fieldConfig = {
         description: elementDefinition.short,
-        type: getPropertyType(elementDefinition, typeName),
+        type: getOutputPropertyType(elementDefinition, typeName),
         resolve: resolveField,
     };
     if (elementDefinition.max === '*') {
@@ -13557,6 +13628,21 @@ function buildPropertyField(fields, key, elementDefinition, elementDefinitionTyp
     const propertyName = key.replace('[x]', capitalize(elementDefinitionType.code));
     fields[propertyName] = fieldConfig;
 }
+function buildInputPropertyField(fields, key, elementDefinition, elementDefinitionType, nameSuffix) {
+    let typeName = elementDefinitionType.code;
+    if (typeName === 'Element' || typeName === 'BackboneElement') {
+        typeName = buildTypeName(elementDefinition.path?.split('.'));
+    }
+    const fieldConfig = {
+        description: elementDefinition.short,
+        type: getGraphQLInputType(typeName, nameSuffix),
+    };
+    if (elementDefinition.max === '*') {
+        fieldConfig.type = new GraphQLList(getGraphQLInputType(typeName, nameSuffix));
+    }
+    const propertyName = key.replace('[x]', capitalize(elementDefinitionType.code));
+    fields[propertyName] = fieldConfig;
+}
 /**
  * Builds field arguments for a list property.
  *
@@ -13567,7 +13653,6 @@ function buildPropertyField(fields, key, elementDefinition, elementDefinitionTyp
  *   4. All properties of the list element type.
  *
  * See: https://hl7.org/fhir/R4/graphql.html#list
- *
  * @param fieldTypeName The type name of the field.
  * @returns The arguments for the field.
  */
@@ -13652,13 +13737,12 @@ function buildListPropertyFieldArg(fieldArgs, fieldKey, elementDefinition, eleme
  * (except that the "id" argument is prohibited here as nonsensical).
  *
  * See: https://www.hl7.org/fhir/graphql.html#reverse
- *
  * @param resourceType The resource type to build fields for.
  * @param fields The fields object to add fields to.
  */
 function buildReverseLookupFields(resourceType, fields) {
     for (const childResourceType of getResourceTypes()) {
-        const childGraphQLType = getGraphQLType(childResourceType);
+        const childGraphQLType = getGraphQLOutputType(childResourceType);
         const childSearchParams = getSearchParameters(childResourceType);
         const enumValues = {};
         let count = 0;
@@ -13724,8 +13808,30 @@ function buildSearchArgs(resourceType) {
     }
     return args;
 }
-function getPropertyType(elementDefinition, typeName) {
-    const graphqlType = getGraphQLType(typeName);
+function buildCreateArgs(resourceType) {
+    const args = {
+        res: {
+            type: getGraphQLInputType(resourceType, 'Create'),
+            description: resourceType + ' Create',
+        },
+    };
+    return args;
+}
+function buildUpdateArgs(resourceType) {
+    const args = {
+        id: {
+            type: new GraphQLNonNull(GraphQLID),
+            description: resourceType + ' ID',
+        },
+        res: {
+            type: getGraphQLInputType(resourceType, 'Update'),
+            description: resourceType + ' Update',
+        },
+    };
+    return args;
+}
+function getOutputPropertyType(elementDefinition, typeName) {
+    const graphqlType = getGraphQLOutputType(typeName);
     if (elementDefinition.max === '*') {
         return new GraphQLList(graphqlType);
     }
@@ -13764,7 +13870,6 @@ function buildConnectionType(resourceType, resourceGraphQLType) {
  * @param ctx The GraphQL context.
  * @param info The GraphQL resolve info.  This includes the schema, and additional field details.
  * @returns Promise to read the resoures for the query.
- * @implements {GraphQLFieldResolver}
  */
 async function resolveBySearch(source, args, ctx, info) {
     const fieldName = info.fieldName;
@@ -13782,7 +13887,6 @@ async function resolveBySearch(source, args, ctx, info) {
  * @param ctx The GraphQL context.
  * @param info The GraphQL resolve info.  This includes the schema, and additional field details.
  * @returns Promise to read the resoures for the query.
- * @implements {GraphQLFieldResolver}
  */
 async function resolveByConnectionApi(source, args, ctx, info) {
     const fieldName = info.fieldName;
@@ -13812,7 +13916,6 @@ async function resolveByConnectionApi(source, args, ctx, info) {
  * @param ctx The GraphQL context.
  * @param info The GraphQL resolve info.  This includes the schema, and additional field details.
  * @returns Promise to read the resoure for the query.
- * @implements {GraphQLFieldResolver}
  */
 async function resolveById(_source, args, ctx, info) {
     try {
@@ -13829,7 +13932,6 @@ async function resolveById(_source, args, ctx, info) {
  * @param _args The GraphQL search arguments.
  * @param ctx The GraphQL context.
  * @returns Promise to read the resoure(s) for the query.
- * @implements {GraphQLFieldResolver}
  */
 async function resolveByReference(source, _args, ctx) {
     try {
@@ -13844,14 +13946,13 @@ async function resolveByReference(source, _args, ctx) {
  * When loading a resource via reference, GraphQL needs to know the type of the resource.
  * @param resource The loaded resource.
  * @returns The GraphQL type of the resource.
- * @implements {GraphQLTypeResolver}
  */
 function resolveTypeByReference(resource) {
     const resourceType = resource?.resourceType;
     if (!resourceType) {
         return undefined;
     }
-    return getGraphQLType(resourceType).name;
+    return getGraphQLOutputType(resourceType).name;
 }
 /**
  * GraphQL resolver for fields.
@@ -13862,7 +13963,6 @@ function resolveTypeByReference(resource) {
  * @param _ctx The GraphQL context.
  * @param info The GraphQL resolve info.  This includes the field name.
  * @returns Promise to read the resoure for the query.
- * @implements {GraphQLFieldResolver}
  */
 async function resolveField(source, args, _ctx, info) {
     const fieldValue = source?.[info.fieldName];
@@ -13885,6 +13985,68 @@ async function resolveField(source, args, _ctx, info) {
     }
     return array;
 }
+/**
+ * GraphQL resolver function for create requests.
+ * The field name should end with "Create" (i.e., "PatientCreate" for updating a Patient).
+ * The args should include the data to be created for the specified resource type.
+ * @param _source The source/root object. In the case of creates, this is typically not used and is thus ignored.
+ * @param args The GraphQL arguments, containing the new data for the resource.
+ * @param ctx The GraphQL context. This includes the repository where resources are stored.
+ * @param info The GraphQL resolve info. This includes the schema, field details, and other query-specific information.
+ * @returns A Promise that resolves to the created resource, or undefined if the resource could not be found or updated.
+ */
+async function resolveByCreate(_source, args, ctx, info) {
+    const fieldName = info.fieldName;
+    // 'Create.length'=== 6 && 'Update.length' === 6
+    const resourceType = fieldName.substring(0, fieldName.length - 6);
+    const resourceArgs = args.res;
+    if (resourceArgs.resourceType !== resourceType) {
+        return [badRequest('Invalid resourceType')];
+    }
+    const resource = await ctx.repo.createResource(resourceArgs);
+    return resource;
+}
+// Mutation Resolvers
+/**
+ * GraphQL resolver function for update requests.
+ * The field name should end with "Update" (i.e., "PatientUpdate" for updating a Patient).
+ * The args should include the data to be updated for the specified resource type.
+ * @param _source The source/root object. In the case of updates, this is typically not used and is thus ignored.
+ * @param args The GraphQL arguments, containing the new data for the resource.
+ * @param ctx The GraphQL context. This includes the repository where resources are stored.
+ * @param info The GraphQL resolve info. This includes the schema, field details, and other query-specific information.
+ * @returns A Promise that resolves to the updated resource, or undefined if the resource could not be found or updated.
+ */
+async function resolveByUpdate(_source, args, ctx, info) {
+    const fieldName = info.fieldName;
+    // 'Create.length'=== 6 && 'Update.length' === 6
+    const resourceType = fieldName.substring(0, fieldName.length - 6);
+    const resourceArgs = args.res;
+    const resourceId = args.id;
+    if (resourceArgs.resourceType !== resourceType) {
+        return [badRequest('Invalid resourceType')];
+    }
+    if (resourceId !== resourceArgs.id) {
+        return [badRequest('Incorrect ID')];
+    }
+    const resource = await ctx.repo.updateResource(resourceArgs);
+    return resource;
+}
+/**
+ * GraphQL resolver function for delete requests.
+ * The field name should end with "Delete" (e.g., "PatientDelete" for deleting a Patient).
+ * The args should include the ID of the resource to be deleted.
+ * @param _source The source/root object. In the case of deletions, this is typically not used and is thus ignored.
+ * @param args The GraphQL arguments, containing the ID of the resource to be deleted.
+ * @param ctx The GraphQL context. This includes the repository where resources are stored.
+ * @param info The GraphQL resolve info. This includes the schema, field details, and other query-specific information.
+ * @returns A Promise that resolves when the resource has been deleted. No value is returned.
+ */
+async function resolveByDelete(_source, args, ctx, info) {
+    const fieldName = info.fieldName;
+    const resourceType = fieldName.substring(0, fieldName.length - 'Delete'.length);
+    await ctx.repo.deleteResource(resourceType, args.id);
+}
 function parseSearchArgs(resourceType, source, args) {
     let referenceFilter = undefined;
     if (source) {
@@ -14109,8 +14271,9 @@ async function patchResource(req, repo) {
     return [allOk, resource];
 }
 class FhirRouter {
-    constructor() {
+    constructor(options = {}) {
         this.router = new Router();
+        this.options = options;
         this.router.add('POST', '', batch);
         this.router.add('GET', ':resourceType', search);
         this.router.add('POST', ':resourceType/_search', searchByPost);
@@ -14148,7 +14311,6 @@ class BaseRepository {
      * The return value is the resource, if available; otherwise, undefined.
      *
      * See FHIR search for full details: https://www.hl7.org/fhir/search.html
-     *
      * @param searchRequest The FHIR search request.
      * @returns Promise to the first search result or undefined.
      */
@@ -14164,7 +14326,6 @@ class BaseRepository {
      * The return value is an array of resources.
      *
      * See FHIR search for full details: https://www.hl7.org/fhir/search.html
-     *
      * @param searchRequest The FHIR search request.
      * @returns Promise to the array of search results.
      */