@persei/perseed-api 5.0.15 → 5.0.16

package/dist/src/v2/modules/project/questionnaire-actions/questionnaire-actions.schema.d.ts

@@ -0,0 +1,29 @@
+import { Static, Type } from 'typebox';
+export declare const questionnaireActionsListResponseSchema: Type.TObject<{
+    results: Type.TArray<Type.TString>;
+}>;
+export type QuestionnaireActionsListResponseData = Static<typeof questionnaireActionsListResponseSchema>;
+export declare const questionnaireActionsQuerySchema: Type.TObject<{
+    patientId: Type.TOptional<Type.TNumber>;
+}>;
+export type QuestionnaireActionsQueryData = Static<typeof questionnaireActionsQuerySchema>;
+/**
+ * Schema the stored `action_props` meta value must satisfy once parsed from its JSON
+ * string. Fields are optional (a missing field falls back to the client default) but,
+ * when present, must be a string or null. Unknown keys are rejected so a malformed
+ * configuration is discarded rather than served half-configured.
+ */
+export declare const actionPropsSchema: Type.TObject<{
+    icon: Type.TOptional<Type.TUnion<[Type.TString, Type.TNull]>>;
+    icon_color: Type.TOptional<Type.TUnion<[Type.TString, Type.TNull]>>;
+}>;
+/**
+ * Canonical presentation properties of an action questionnaire, as consumed by the mobile
+ * client. Both fields are nullable: `null` means "use the client default" (default icon /
+ * primary color).
+ */
+export interface ActionProps {
+    icon: string | null;
+    icon_color: string | null;
+}
+//# sourceMappingURL=questionnaire-actions.schema.d.ts.map

package/dist/src/v2/modules/project/questionnaire-actions/questionnaire-actions.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"questionnaire-actions.schema.d.ts","sourceRoot":"","sources":["../../../../../../../src/v2/modules/project/questionnaire-actions/questionnaire-actions.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAEtC,eAAO,MAAM,sCAAsC;;EAOlD,CAAA;AAED,MAAM,MAAM,oCAAoC,GAAG,MAAM,CAAC,OAAO,sCAAsC,CAAC,CAAA;AAExG,eAAO,MAAM,+BAA+B;;EAU3C,CAAA;AAED,MAAM,MAAM,6BAA6B,GAAG,MAAM,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;EAU7B,CAAA;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B"}

package/dist/src/v2/modules/project/questionnaire-actions/questionnaire-actions.service.d.ts

@@ -0,0 +1,32 @@
+import { default as RequestContext } from '../../../../models/request/RequestContext';
+import { ActionProps, QuestionnaireActionsQueryData } from './questionnaire-actions.schema';
+/**
+ * Result of parsing the raw `action_props` meta value.
+ * - `{ valid: true, props }`  usable configuration (`props` is `null` when absent).
+ * - `{ valid: false }`        present but malformed → the action must be discarded
+ *                             (we prefer not to surface an action than to surface it
+ *                             without proper configuration).
+ */
+export type ActionConfig = {
+    valid: true;
+    props: ActionProps | null;
+} | {
+    valid: false;
+};
+/**
+ * Parses and validates the raw `action_props` meta value (a JSON string stored on the
+ * questionnaire CRF) against {@link actionPropsSchema}.
+ *
+ * - absent / empty                      → `{ valid: true, props: null }` (client defaults).
+ * - valid JSON matching the schema      → `{ valid: true, props }`.
+ * - present but bad JSON or wrong shape → `{ valid: false }` (discard the action).
+ */
+export declare function parseActionConfig(raw: string | null | undefined): ActionConfig;
+declare function list(ctx: RequestContext, query: QuestionnaireActionsQueryData): Promise<{
+    results: string[];
+}>;
+export declare const QuestionnaireActionsService: {
+    list: typeof list;
+};
+export {};
+//# sourceMappingURL=questionnaire-actions.service.d.ts.map

package/dist/src/v2/modules/project/questionnaire-actions/questionnaire-actions.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"questionnaire-actions.service.d.ts","sourceRoot":"","sources":["../../../../../../../src/v2/modules/project/questionnaire-actions/questionnaire-actions.service.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,MAAM,mCAAmC,CAAA;AAM9D,OAAO,EAAqB,WAAW,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAA;AAE9G;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,KAAK,CAAA;CAAE,CAAA;AAExF;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,CA+B9E;AA6BD,iBAAe,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAQ7G;AAED,eAAO,MAAM,2BAA2B;;CAEvC,CAAA"}

package/dist/src/v2/modules/project/questionnaire-actions/questionnaire-actions.service.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=questionnaire-actions.service.test.d.ts.map

package/dist/src/v2/modules/project/questionnaire-actions/questionnaire-actions.service.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"questionnaire-actions.service.test.d.ts","sourceRoot":"","sources":["../../../../../../../src/v2/modules/project/questionnaire-actions/questionnaire-actions.service.test.ts"],"names":[],"mappings":""}

package/dist/src/v2/modules/project/thryve/thryve.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"thryve.controller.d.ts","sourceRoot":"","sources":["../../../../../../../src/v2/modules/project/thryve/thryve.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAsD1E,eAAO,MAAM,gBAAgB;;CAE5B,CAAA"}
+{"version":3,"file":"thryve.controller.d.ts","sourceRoot":"","sources":["../../../../../../../src/v2/modules/project/thryve/thryve.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAqD1E,eAAO,MAAM,gBAAgB;;CAE5B,CAAA"}

package/dist/src/v2/modules/project/thryve/thryve.schema.d.ts

@@ -3,8 +3,6 @@ export declare const thryveIframeUrlResponseSchema: Type.TObject<{
     url: Type.TString;
 }>;
 export type ThryveIframeUrlResponse = Static<typeof thryveIframeUrlResponseSchema>;
-export declare const thryveAuthorizationStatusResponseSchema: Type.TObject<{
-    authorized: Type.TBoolean;
-}>;
-export type ThryveAuthorizationStatusResponse = Static<typeof thryveAuthorizationStatusResponseSchema>;
+export declare const thryveIsAuthorizedResponseSchema: Type.TBoolean;
+export type ThryveIsAuthorizedResponse = Static<typeof thryveIsAuthorizedResponseSchema>;
 //# sourceMappingURL=thryve.schema.d.ts.map

package/dist/src/v2/modules/project/thryve/thryve.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"thryve.schema.d.ts","sourceRoot":"","sources":["../../../../../../../src/v2/modules/project/thryve/thryve.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAEtC,eAAO,MAAM,6BAA6B;;EAOzC,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAA;AAElF,eAAO,MAAM,uCAAuC;;EAQnD,CAAA;AAED,MAAM,MAAM,iCAAiC,GAAG,MAAM,CAAC,OAAO,uCAAuC,CAAC,CAAA"}
+{"version":3,"file":"thryve.schema.d.ts","sourceRoot":"","sources":["../../../../../../../src/v2/modules/project/thryve/thryve.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAEtC,eAAO,MAAM,6BAA6B;;EAOzC,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAA;AAElF,eAAO,MAAM,gCAAgC,eAI3C,CAAA;AAEF,MAAM,MAAM,0BAA0B,GAAG,MAAM,CAAC,OAAO,gCAAgC,CAAC,CAAA"}

package/dist/src/v2/modules/project/thryve/thryve.service.d.ts

@@ -16,15 +16,15 @@ declare function isEnabled(ctx: RequestContext): Promise<boolean>;
  */
 declare function getIframeUrl(ctx: RequestContext): Promise<string>;
 /**
- * Returns whether the current user has at least one connected data source in the `thryve_integration`
- * service. Any failure (missing config, network error, non-2xx, malformed body) degrades to `false`
- * so the app surfaces "unauthorized" instead of a 5xx.
+ * Returns whether the current user has at least one connected data source in the HC API.
+ * Delegates to `HealthDataService.isUserAuthorized` so all upstream HC traffic flows through a
+ * single client (canonical URL + secret, single logger, single failure-handling policy).
  */
-declare function isAuthorized(ctx: RequestContext): Promise<boolean>;
+declare function isUserAuthorized(ctx: RequestContext): Promise<boolean>;
 export declare const ThryveService: {
     isEnabled: typeof isEnabled;
     getIframeUrl: typeof getIframeUrl;
-    isAuthorized: typeof isAuthorized;
+    isUserAuthorized: typeof isUserAuthorized;
 };
 export {};
 //# sourceMappingURL=thryve.service.d.ts.map

package/dist/src/v2/modules/project/thryve/thryve.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"thryve.service.d.ts","sourceRoot":"","sources":["../../../../../../../src/v2/modules/project/thryve/thryve.service.ts"],"names":[],"mappings":"AAQA,OAAO,cAAc,MAAM,mCAAmC,CAAA;AA2E9D;;;;;;;;;GASG;AACH,iBAAe,SAAS,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAO9D;AA6ID;;;GAGG;AACH,iBAAe,YAAY,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAehE;AAyBD;;;;GAIG;AACH,iBAAe,YAAY,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CA4BjE;AAED,eAAO,MAAM,aAAa;;;;CAIzB,CAAA"}
+{"version":3,"file":"thryve.service.d.ts","sourceRoot":"","sources":["../../../../../../../src/v2/modules/project/thryve/thryve.service.ts"],"names":[],"mappings":"AAOA,OAAO,cAAc,MAAM,mCAAmC,CAAA;AAyE9D;;;;;;;;;GASG;AACH,iBAAe,SAAS,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAO9D;AA6ID;;;GAGG;AACH,iBAAe,YAAY,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAehE;AAED;;;;GAIG;AACH,iBAAe,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAIrE;AAED,eAAO,MAAM,aAAa;;;;CAIzB,CAAA"}

package/dist/src/v2/routes/v2/ecosystem/_ecosystemName/project/_projectName/actions/index.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import('@fastify/type-provider-typebox').FastifyPluginAsyncTypebox;
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/v2/routes/v2/ecosystem/_ecosystemName/project/_projectName/actions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../../../../../src/v2/routes/v2/ecosystem/_ecosystemName/project/_projectName/actions/index.ts"],"names":[],"mappings":";AAEA,wBAAoD"}

package/dist/src/v2/test/e2e-permissions.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Generic permission test helper for E2E tests
+ *
+ * Provides a structured way to test endpoint permissions
+ * (authentication, ecosystem access, project access) without
+ * repeating the same scenarios across every controller test.
+ *
+ * Resource-level permission checks (e.g. READ_DOCUMENTS, UPLOAD_DOCUMENTS)
+ * are tested in controller unit tests by mocking the preHandler functions
+ * (requireReadDocuments, requireUploadDocuments, requireDeleteDocuments)
+ * and asserting a 403 response — no database required.
+ *
+ * @example
+ * ```ts
+ * // Auth / ecosystem / project permission failures:
+ * testEndpointPermissionFailures([
+ *   { method: 'GET', url: baseUrl, description: 'list document categories' },
+ * ])
+ * ```
+ *
+ * The 401/403 scenarios for auth/ecosystem/project work for ANY URL
+ * (even pointing to non-existent resources) because the middleware
+ * fires before the route handler.
+ */
+/**
+ * HTTP methods supported by the permission helper
+ */
+export type HttpMethod = 'GET' | 'POST' | 'PATCH' | 'DELETE' | 'PUT';
+/**
+ * Configuration for a single endpoint permission failure test
+ */
+export interface EndpointPermissionTest {
+    /** HTTP method */
+    method: HttpMethod;
+    /**
+     * Full URL including query strings and path params.
+     * For 401/403 scenarios the URL does not need to point at a real
+     * resource — the middleware layer catches the request before the
+     * handler runs.
+     */
+    url: string;
+    /** Human-readable description of the endpoint (used in test names) */
+    description: string;
+    /** Optional request body for POST/PATCH/PUT */
+    payload?: any;
+}
+/**
+ * Tests that each listed endpoint correctly returns 401 (unauthenticated)
+ * and 403 (unauthorized) for various access scenarios.
+ *
+ * For each endpoint three scenarios are verified:
+ * 1. **401** — No authentication token → access denied
+ * 2. **403** — User without ecosystem access → access denied
+ * 3. **403** — User without project access → access denied
+ *
+ * @param endpoints — Array of endpoint definitions to test
+ */
+export declare function testEndpointPermissionFailures(endpoints: EndpointPermissionTest[]): void;
+//# sourceMappingURL=e2e-permissions.d.ts.map

package/dist/src/v2/test/e2e-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"e2e-permissions.d.ts","sourceRoot":"","sources":["../../../../../src/v2/test/e2e-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAMH;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAA;AAEpE;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,kBAAkB;IAClB,MAAM,EAAE,UAAU,CAAA;IAClB;;;;;OAKG;IACH,GAAG,EAAE,MAAM,CAAA;IACX,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAA;IACnB,+CAA+C;IAE/C,OAAO,CAAC,EAAE,GAAG,CAAA;CACd;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,sBAAsB,EAAE,GAAG,IAAI,CAiBxF"}

package/dist/src/validators/user-validator.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-validator.test.d.ts","sourceRoot":"","sources":["../../../../src/validators/user-validator.test.ts"],"names":[],"mappings":""}

package/dist/v1/perseed-api.cjs

@@ -218,7 +218,9 @@ const META_NAMES = {
   PROCESSING_FILE_ORIGINAL: "processing_file_original",
   PROCESSING_FILE_DELETE_ORIGINAL_ON_FINISH: "processing_file_delete_original_on_finish",
   PROC_ANONYMIZE: "proc_anonymize",
-  PROC_EXTRACTION: "proc_extraction"
+  PROC_EXTRACTION: "proc_extraction",
+  IS_ACTION: "is_action",
+  ACTION_PROPS: "action_props"
 };
 const AI_PROCESSING_META_NAMES = [META_NAMES.PROC_ANONYMIZE, META_NAMES.PROC_EXTRACTION];
 const META_RESTRICTION = {
@@ -727,7 +729,10 @@ const SEED_PRIVILEGE = {
   DASHBOARD_FOLLOWUP_ALL: "dashboard_followup_access_all",
   DASHBOARD_FOLLOWUP_OWN: "dashboard_followup_access_own",
   DASHBOARD_FOLLOWUP_ASSIGNED: "dashboard_followup_access_assigned",
-  CORE_MANAGE_ORGANIZATION: "core_manage_organization"
+  CORE_MANAGE_ORGANIZATION: "core_manage_organization",
+  ADD_ORGANIZATIONS: "core_add_organizations",
+  EDIT_ORGANIZATIONS: "core_edit_organizations",
+  DELETE_ORGANIZATIONS: "core_delete_organizations"
 };
 const MINIMIAL_TIMEZONE_LIST = [
   "Etc/GMT+12",