gdc-common-utils-ts 1.17.0 → 1.20.0

package/dist/constants/service-capabilities.js

@@ -1,105 +1,163 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
 // Always create JSDoc, do not use strings inline in keys nor values, use types instead, and reuse the data test examples.
 /**
- * Canonical capability families persisted through
+ * Canonical persisted capability values stored in
  * `org.schema.Service.serviceType`.
  */
-export const ServiceCapabilityFamily = {
-    Indexing: 'indexing',
-    DigitalTwin: 'digitaltwin',
+export const ServiceCapability = {
+    IndexReader: 'organization/Composition.rs',
+    IndexProvider: 'organization/Composition.cruds',
+    DigitalTwinReader: 'organization/ResearchSubject.rs',
+    DigitalTwinProvider: 'organization/ResearchSubject.cruds',
 };
 /**
- * Canonical capability tokens currently documented for tenant activation.
- *
- * The family prefix is the stable part of the contract. Suffixes such as
- * `.rs` and `.cruds` can evolve independently across runtimes.
+ * Canonical capability families derived from the persisted service capability
+ * values.
  */
-export const ServiceCapabilityToken = {
+export const ServiceCapabilityKind = {
+    Indexing: 'organization/composition',
+    DigitalTwin: 'organization/researchsubject',
+};
+/**
+ * @deprecated Legacy serviceType values accepted for backward compatibility.
+ */
+export const DeprecatedServiceCapabilityToken = {
     IndexReader: 'indexing.rs',
     IndexProvider: 'indexing.cruds',
     DigitalTwinReader: 'digitaltwin.rs',
     DigitalTwinProvider: 'digitaltwin.cruds',
+};
+/**
+ * @deprecated Prefer `ServiceCapability`.
+ *
+ * Kept as a compatibility alias for older callers that imported
+ * `ServiceCapabilityToken`.
+ */
+export const ServiceCapabilityToken = {
+    IndexReader: ServiceCapability.IndexReader,
+    IndexProvider: ServiceCapability.IndexProvider,
+    DigitalTwinReader: ServiceCapability.DigitalTwinReader,
+    DigitalTwinProvider: ServiceCapability.DigitalTwinProvider,
     /**
      * @deprecated Prefer `IndexReader`.
      */
-    IndexingReadSearch: 'indexing.rs',
+    IndexingReadSearch: ServiceCapability.IndexReader,
     /**
      * @deprecated Prefer `IndexProvider`.
      */
-    IndexingCruds: 'indexing.cruds',
+    IndexingCruds: ServiceCapability.IndexProvider,
     /**
      * @deprecated Prefer `DigitalTwinReader`.
      */
-    DigitalTwinReadSearch: 'digitaltwin.rs',
+    DigitalTwinReadSearch: ServiceCapability.DigitalTwinReader,
     /**
      * @deprecated Prefer `DigitalTwinProvider`.
      */
-    DigitalTwinCruds: 'digitaltwin.cruds',
-};
-/**
- * SDK-facing capability names.
- *
- * These names are intentionally more explicit than the persisted claim tokens:
- * - `Provider` maps to write/manage capability (`*.cruds`)
- * - `Reader` maps to read/search capability (`*.rs`)
- */
-export const ServiceCapability = {
-    IndexProvider: ServiceCapabilityToken.IndexProvider,
-    IndexReader: ServiceCapabilityToken.IndexReader,
-    DigitalTwinProvider: ServiceCapabilityToken.DigitalTwinProvider,
-    DigitalTwinReader: ServiceCapabilityToken.DigitalTwinReader,
+    DigitalTwinCruds: ServiceCapability.DigitalTwinProvider,
     /**
-     * @deprecated Prefer `IndexProvider`.
+     * @deprecated Prefer `ServiceCapability.IndexReader`.
+     * Legacy persisted value kept for compatibility while external payloads
+     * still emit `indexing.rs`.
      */
-    IndexingProvider: ServiceCapabilityToken.IndexProvider,
+    LegacyIndexReader: DeprecatedServiceCapabilityToken.IndexReader,
     /**
-     * @deprecated Prefer `IndexReader`.
+     * @deprecated Prefer `ServiceCapability.IndexProvider`.
+     * Legacy persisted value kept for compatibility while external payloads
+     * still emit `indexing.cruds`.
+     */
+    LegacyIndexProvider: DeprecatedServiceCapabilityToken.IndexProvider,
+    /**
+     * @deprecated Prefer `ServiceCapability.DigitalTwinReader`.
+     * Legacy persisted value kept for compatibility while external payloads
+     * still emit `digitaltwin.rs`.
      */
-    IndexingReader: ServiceCapabilityToken.IndexReader,
+    LegacyDigitalTwinReader: DeprecatedServiceCapabilityToken.DigitalTwinReader,
+    /**
+     * @deprecated Prefer `ServiceCapability.DigitalTwinProvider`.
+     * Legacy persisted value kept for compatibility while external payloads
+     * still emit `digitaltwin.cruds`.
+     */
+    LegacyDigitalTwinProvider: DeprecatedServiceCapabilityToken.DigitalTwinProvider,
 };
+const CANONICAL_SERVICE_CAPABILITY_BY_VALUE = new Map([
+    [String(ServiceCapability.IndexReader).toLowerCase(), ServiceCapability.IndexReader],
+    [String(ServiceCapability.IndexProvider).toLowerCase(), ServiceCapability.IndexProvider],
+    [String(ServiceCapability.DigitalTwinReader).toLowerCase(), ServiceCapability.DigitalTwinReader],
+    [String(ServiceCapability.DigitalTwinProvider).toLowerCase(), ServiceCapability.DigitalTwinProvider],
+    [String(DeprecatedServiceCapabilityToken.IndexReader).toLowerCase(), ServiceCapability.IndexReader],
+    [String(DeprecatedServiceCapabilityToken.IndexProvider).toLowerCase(), ServiceCapability.IndexProvider],
+    [String(DeprecatedServiceCapabilityToken.DigitalTwinReader).toLowerCase(), ServiceCapability.DigitalTwinReader],
+    [String(DeprecatedServiceCapabilityToken.DigitalTwinProvider).toLowerCase(), ServiceCapability.DigitalTwinProvider],
+]);
+function splitServiceCapabilityToken(value) {
+    const lastDot = value.lastIndexOf('.');
+    if (lastDot < 0) {
+        return { family: value || undefined, suffix: undefined };
+    }
+    return {
+        family: value.slice(0, lastDot) || undefined,
+        suffix: value.slice(lastDot + 1) || undefined,
+    };
+}
+/**
+ * Normalizes a service capability token into its canonical persisted form.
+ */
+export function normalizeServiceCapability(value) {
+    const normalized = String(value || '').trim();
+    if (!normalized)
+        return undefined;
+    return CANONICAL_SERVICE_CAPABILITY_BY_VALUE.get(normalized.toLowerCase()) || normalized;
+}
 /**
  * Parses the CSV stored in `org.schema.Service.serviceType`.
  */
 export function parseServiceCapabilityTokens(value) {
     return Array.from(new Set(String(value || '')
         .split(',')
-        .map((item) => item.trim())
-        .filter(Boolean)));
+        .map((item) => normalizeServiceCapability(item))
+        .filter((item) => Boolean(item))));
+}
+/**
+ * Merges capability claims published across compatibility locations.
+ */
+export function mergeServiceCapabilityClaims(...values) {
+    const merged = Array.from(new Set(values.flatMap((value) => parseServiceCapabilityTokens(value))));
+    return merged.length ? merged.join(',') : undefined;
 }
 /**
  * Serializes capability tokens into the canonical CSV claim format.
  */
 export function serializeServiceCapabilityTokens(values) {
     const normalized = Array.from(new Set(values
-        .map((item) => String(item || '').trim())
-        .filter(Boolean)));
+        .map((item) => normalizeServiceCapability(item))
+        .filter((item) => Boolean(item))));
     return normalized.length ? normalized.join(',') : undefined;
 }
 /**
- * Returns the capability family prefix from a token.
+ * Returns the capability family prefix from a persisted capability token.
  */
-export function getServiceCapabilityFamily(value) {
-    const normalized = String(value || '').trim().toLowerCase();
+export function getServiceCapabilityKind(value) {
+    const normalized = normalizeServiceCapability(value)?.toLowerCase();
     if (!normalized)
         return undefined;
-    return normalized.split('.')[0] || undefined;
+    return splitServiceCapabilityToken(normalized).family;
 }
 /**
  * Checks whether the claim contains at least one capability from the requested
  * family.
  */
-export function hasServiceCapabilityFamily(value, family) {
+export function hasServiceCapabilityKind(value, family) {
     const normalizedFamily = String(family || '').trim().toLowerCase();
     if (!normalizedFamily)
         return false;
-    return parseServiceCapabilityTokens(value).some((item) => getServiceCapabilityFamily(item) === normalizedFamily);
+    return parseServiceCapabilityTokens(value).some((item) => getServiceCapabilityKind(item) === normalizedFamily);
 }
 /**
  * Returns whether a capability token denotes a discoverable provider/service
  * role rather than a reader-only role.
  */
 export function isProviderServiceCapability(value) {
-    const normalized = String(value || '').trim().toLowerCase();
-    return normalized === ServiceCapabilityToken.IndexProvider
-        || normalized === ServiceCapabilityToken.DigitalTwinProvider;
+    const normalized = normalizeServiceCapability(value);
+    return normalized === ServiceCapability.IndexProvider
+        || normalized === ServiceCapability.DigitalTwinProvider;
 }

package/dist/examples/communication-attached-bundle-session.js

@@ -1,17 +1,18 @@
 // Copyright 2026 Conectate Soluciones y Aplicaciones SL under the Apache License, Version 2.0.
 // Always create JSDoc, do not use strings inline in keys nor values, use types instead, and reuse the data test examples.
-import { HealthcareBasicSections, HealthcareCanonicalSectionFamilies, HealthcareConsentPurposes, HealthcareCoreSections, } from '../constants/healthcare.js';
+import { HealthcareBasicSections, HealthcareCanonicalSectionFamilies, HealthcareConsentPurposes, HealthcareCoreSections, HealthcareKindOfDocumentSections, } from '../constants/healthcare.js';
 import { ResourceTypesFhirR4 } from '../constants/fhir-resource-types.js';
 import { CommunicationCategoryCodes } from '../constants/communication.js';
 import { DataspaceSectors } from '../constants/sectors.js';
 import { MedicationStatementClaim } from '../models/interoperable-claims/medication-statement-claims.js';
 import { EXAMPLE_COMMUNICATION_IDENTIFIER, EXAMPLE_CONSENT_DATE, EXAMPLE_CONSENT_IDENTIFIER, EXAMPLE_CONSENT_PERIOD_END, EXAMPLE_CONSENT_PERIOD_START, EXAMPLE_CONSENT_PURPOSE_TREATMENT, EXAMPLE_CONSENT_PURPOSE_EMERGENCY_TREATMENT, EXAMPLE_EMAIL_PROFESSIONAL, EXAMPLE_HEALTHCARE_ACTOR_ROLE_GENERALIST_MEDICAL_PRACTITIONER, EXAMPLE_HEALTHCARE_ACTOR_ROLE_PHYSICIAN, EXAMPLE_HEALTHCARE_JURISDICTION, EXAMPLE_IPS_BUNDLE_NOTE_TEXT, EXAMPLE_MEDICATION_STATEMENT_IDENTIFIER, EXAMPLE_MEDICATION_STATEMENT_STATUS, EXAMPLE_MEDICATION_STATEMENT_TEXT, EXAMPLE_PROVIDER_ORGANIZATION_DID, EXAMPLE_SECONDARY_HEALTHCARE_JURISDICTION, EXAMPLE_SUBJECT_DID, } from './shared.js';
 import { CommunicationAttachedBundleSession, createConsentAccessEditor, } from '../utils/communication-attached-bundle-session.js';
-import { setCommunicationCategory, setCommunicationIdentifier, setCommunicationSubject, setCommunicationText, } from '../claims/claims-helpers-communication.js';
+import { setCommunicationCategory, setCommunicationIdentifier, setCommunicationSubject, setCommunicationText, setCommunicationTopic, } from '../claims/claims-helpers-communication.js';
 import { setActorIdentifierList, setActorRoleList, setConsentDate, setConsentDecision, setConsentIdentifier, setConsentPeriodEnd, setConsentPeriodStart, setConsentSubject, setPurposeList, setSectionList, } from '../claims/claims-helpers-consent.js';
 import { setClaimValues } from '../claims/claim-list-helpers.js';
 import { ClaimConsent, ConsentDecisions } from '../models/consent-rule.js';
 import { exportConsentEntry, importPermissionTemplate, PermissionTemplateOperationCodes, PermissionTemplateTargetKinds, resolvePermissionTemplate, } from '../utils/permission-templates.js';
+const CONSENT_BUNDLE_COMMUNICATION_TOPIC = HealthcareKindOfDocumentSections['LP173394-0'].attributeValue;
 /**
  * First developer use case:
  * - edit a Consent entry inside a Communication-attached Bundle
@@ -24,6 +25,7 @@ export function buildConsentEditingCommunicationSessionExample() {
     communicationClaims = setCommunicationIdentifier(communicationClaims, EXAMPLE_COMMUNICATION_IDENTIFIER);
     communicationClaims = setCommunicationSubject(communicationClaims, EXAMPLE_SUBJECT_DID);
     communicationClaims = setCommunicationCategory(communicationClaims, CommunicationCategoryCodes.Notification.attributeValue);
+    communicationClaims = setCommunicationTopic(communicationClaims, CONSENT_BUNDLE_COMMUNICATION_TOPIC);
     communicationClaims = setCommunicationText(communicationClaims, EXAMPLE_IPS_BUNDLE_NOTE_TEXT);
     const bundleEditor = new CommunicationAttachedBundleSession({
         communicationClaims,
@@ -95,6 +97,7 @@ export function buildConsentPermissionTemplateImportExportSessionExample() {
     communicationClaims = setCommunicationIdentifier(communicationClaims, EXAMPLE_COMMUNICATION_IDENTIFIER);
     communicationClaims = setCommunicationSubject(communicationClaims, EXAMPLE_SUBJECT_DID);
     communicationClaims = setCommunicationCategory(communicationClaims, CommunicationCategoryCodes.Notification.attributeValue);
+    communicationClaims = setCommunicationTopic(communicationClaims, CONSENT_BUNDLE_COMMUNICATION_TOPIC);
     communicationClaims = setCommunicationText(communicationClaims, EXAMPLE_IPS_BUNDLE_NOTE_TEXT);
     const templateDraft = {
         decision: ConsentDecisions.Permit,
@@ -172,6 +175,7 @@ export function buildSeparateConsentPermissionBundleExample() {
     communicationClaims = setCommunicationIdentifier(communicationClaims, EXAMPLE_COMMUNICATION_IDENTIFIER);
     communicationClaims = setCommunicationSubject(communicationClaims, EXAMPLE_SUBJECT_DID);
     communicationClaims = setCommunicationCategory(communicationClaims, CommunicationCategoryCodes.Notification.attributeValue);
+    communicationClaims = setCommunicationTopic(communicationClaims, CONSENT_BUNDLE_COMMUNICATION_TOPIC);
     communicationClaims = setCommunicationText(communicationClaims, EXAMPLE_IPS_BUNDLE_NOTE_TEXT);
     const physicianTemplate = resolvePermissionTemplate({
         sector: DataspaceSectors.HealthCare,

package/dist/examples/dataspace-discovery.js

@@ -1,6 +1,6 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
 import { ClaimsOrganizationSchemaorg, ClaimsServiceSchemaorg } from '../constants/schemaorg.js';
-import { serializeServiceCapabilityTokens, ServiceCapabilityToken } from '../constants/service-capabilities.js';
+import { serializeServiceCapabilityTokens, ServiceCapability, } from '../constants/service-capabilities.js';
 import { EXAMPLE_HOSTING_OPERATOR_CATALOG_ARTIFACT_URL, EXAMPLE_HOSTING_OPERATOR_DSPACE_VERSION_URL, EXAMPLE_HOSTING_OPERATOR_DID, EXAMPLE_PROVIDER_PUBLISHED_ENDPOINT_URL, EXAMPLE_JURISDICTION, EXAMPLE_SECTOR, EXAMPLE_TENANT_SERVICE_DID, } from './shared.js';
 function firstOrCsv(values) {
     return values.length <= 1 ? (values[0] || '') : values.join(',');
@@ -16,8 +16,8 @@ function firstOrCsv(values) {
  */
 export function buildExampleHostingOperatorCredentialSubject(input = {}) {
     const serviceTypes = input.serviceTypes || [
-        ServiceCapabilityToken.IndexProvider,
-        ServiceCapabilityToken.DigitalTwinProvider,
+        ServiceCapability.IndexProvider,
+        ServiceCapability.DigitalTwinProvider,
     ];
     const categories = input.categories || [EXAMPLE_SECTOR];
     const areaServed = input.areaServed || ['EU', EXAMPLE_JURISDICTION];
@@ -39,7 +39,7 @@ export function buildExampleHostingOperatorCredentialSubject(input = {}) {
  * @returns Schema.org-shaped semantic subject with public service metadata.
  */
 export function buildExampleTenantServiceCredentialSubject(input = {}) {
-    const serviceTypes = input.serviceTypes || [ServiceCapabilityToken.IndexProvider];
+    const serviceTypes = input.serviceTypes || [ServiceCapability.IndexProvider];
     const categories = input.categories || [EXAMPLE_SECTOR];
     const areaServed = input.areaServed || ['EU'];
     const addressCountry = input.addressCountry || EXAMPLE_JURISDICTION;
@@ -62,8 +62,8 @@ export function buildExampleTenantServiceCredentialSubject(input = {}) {
  */
 export function buildExampleHostingOperatorMetaClaims(input = {}) {
     const serviceTypes = input.serviceTypes || [
-        ServiceCapabilityToken.IndexProvider,
-        ServiceCapabilityToken.DigitalTwinProvider,
+        ServiceCapability.IndexProvider,
+        ServiceCapability.DigitalTwinProvider,
     ];
     const categories = input.categories || [EXAMPLE_SECTOR];
     const areaServed = input.areaServed || ['EU', EXAMPLE_JURISDICTION];
@@ -83,7 +83,7 @@ export function buildExampleHostingOperatorMetaClaims(input = {}) {
  * @returns Flat operational claims derived from the semantic subject.
  */
 export function buildExampleTenantServiceMetaClaims(input = {}) {
-    const serviceTypes = input.serviceTypes || [ServiceCapabilityToken.IndexProvider];
+    const serviceTypes = input.serviceTypes || [ServiceCapability.IndexProvider];
     const categories = input.categories || [EXAMPLE_SECTOR];
     const areaServed = input.areaServed || ['EU'];
     const addressCountry = input.addressCountry || EXAMPLE_JURISDICTION;
@@ -107,12 +107,12 @@ export function buildExampleTenantServiceMetaClaims(input = {}) {
  * @returns Shared host-catalog provider entry.
  */
 export function buildExamplePublishedProviderCatalogRecord(input = {}) {
-    const serviceTypes = input.serviceTypes || [ServiceCapabilityToken.IndexProvider];
+    const serviceTypes = input.serviceTypes || [ServiceCapability.IndexProvider];
     const categories = input.categories || [EXAMPLE_SECTOR];
     const areaServed = input.areaServed || ['EU'];
     return {
         providerDid: input.did || EXAMPLE_TENANT_SERVICE_DID,
-        serviceType: serviceTypes[0] || ServiceCapabilityToken.IndexProvider,
+        serviceType: serviceTypes[0] || ServiceCapability.IndexProvider,
         category: categories[0] || EXAMPLE_SECTOR,
         areaServed: firstOrCsv(areaServed) || 'EU',
         endpointUrl: EXAMPLE_PROVIDER_PUBLISHED_ENDPOINT_URL,

package/dist/examples/organization-controller.js

@@ -1,7 +1,7 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
 // Always create JSDoc, do not use strings inline in keys nor values, use types instead, and reuse the data test examples.
 import { ClaimsOrganizationSchemaorg, ClaimsPersonSchemaorg, ClaimsServiceSchemaorg, } from '../constants/schemaorg.js';
-import { ServiceCapabilityToken, serializeServiceCapabilityTokens, } from '../constants/service-capabilities.js';
+import { serializeServiceCapabilityTokens, ServiceCapability, } from '../constants/service-capabilities.js';
 import { EXAMPLE_CONTROLLER_BINDING, EXAMPLE_DEVICE_CLIENT_ID, EXAMPLE_EMAIL_CONTROLLER_ORG, EXAMPLE_EMPLOYEE_ACTIVATION_CODE, EXAMPLE_HEALTHCARE_ACTOR_ROLE_RECEPTIONIST, EXAMPLE_JURISDICTION, EXAMPLE_ORGANIZATION_CONTROLLER_ROLE, EXAMPLE_SECTOR, EXAMPLE_SERVICE_PUBLIC_DID, } from './shared.js';
 /**
  * Examples for organization-controller and host-onboarding flows.
@@ -26,8 +26,8 @@ export const EXAMPLE_ACTIVATE_ORGANIZATION_FROM_ICA_PROOF_INPUT = {
         [ClaimsServiceSchemaorg.identifier]: EXAMPLE_SERVICE_PUBLIC_DID,
         [ClaimsServiceSchemaorg.url]: `https://operator.example.net/acme/cds-${String(EXAMPLE_JURISDICTION).toLowerCase()}/v1/${EXAMPLE_SECTOR}`,
         [ClaimsServiceSchemaorg.serviceType]: serializeServiceCapabilityTokens([
-            ServiceCapabilityToken.IndexProvider,
-            ServiceCapabilityToken.DigitalTwinReader,
+            ServiceCapability.IndexProvider,
+            ServiceCapability.DigitalTwinReader,
         ]),
     },
 };

package/dist/examples/shared.d.ts

@@ -1,3 +1,5 @@
+import { BirthSex, GenderIdentity } from '../constants/identity-gender';
+import { IdKind } from '../constants/identity-identifiers';
 /**
  * Shared low-level example fragments reused by multiple flow-specific example modules.
  *
@@ -10,17 +12,80 @@
  */
 export declare const EXAMPLE_TENANT_IDENTIFIER: "acme-id";
 export declare const EXAMPLE_JURISDICTION: "ES";
+export declare const EXAMPLE_HOST_COVERAGE_SCOPE: "EU";
 export declare const EXAMPLE_NETWORK_TYPE: "test";
 export declare const EXAMPLE_ROUTE_VERSION: "v1";
 export declare const EXAMPLE_SECTOR: "health-care";
 export declare const EXAMPLE_EMAIL_CONTROLLER_ORG: "controller@acme.org";
 export declare const EXAMPLE_EMAIL_CONTROLLER_INDIVIDUAL: "ana.parent@example.org";
+export declare const EXAMPLE_SELF_REGISTERED_INDIVIDUAL_ALTERNATE_NAME: "Jane";
+export declare const EXAMPLE_SELF_REGISTERED_INDIVIDUAL_EMAIL: "Jane.Doe@example.com";
+export declare const EXAMPLE_SELF_REGISTERED_INDIVIDUAL_EMAIL_NORMALIZED: "jane.doe@example.com";
+export declare const EXAMPLE_SELF_REGISTERED_INDIVIDUAL_GENDER = BirthSex.Female;
+export declare const EXAMPLE_SELF_REGISTERED_INDIVIDUAL_BIRTH_YEAR: "1980";
+export declare const EXAMPLE_REGISTERED_SUBJECT_ALTERNATE_NAME: "Doraemon";
+export declare const EXAMPLE_REGISTERED_SUBJECT_BIRTH_YEAR: "2020";
+export declare const EXAMPLE_PDF_CONSENT_DATE: "2026-06-08";
+/**
+ * Public provider domain selected during autodiscovery.
+ *
+ * This value may be:
+ * - a public domain masking the hosted tenant path, e.g. `service.provider.example`
+ * - or a hosted `did:web` base path without scheme, e.g.
+ *   `hosting.example.com/acme-id/cds-es/v1/health-care`
+ *
+ * The outbox later resolves the DID document from this base and derives the
+ * concrete endpoint URL for the selected operation.
+ */
+export declare const EXAMPLE_SERVICE_PROVIDER_DOMAIN: "service.provider.example";
+/** Example hosted `did:web` base without scheme, useful for tests/docs. */
+export declare const EXAMPLE_SERVICE_PROVIDER_HOSTED_DID_WEB_BASE: "hosting.example.com/acme-id/cds-es/v1/health-care";
+/** @deprecated Use `EXAMPLE_SERVICE_PROVIDER_DOMAIN`. */
+export declare const EXAMPLE_PDF_SERVICE_PROVIDER_DOMAIN: "service.provider.example";
+export declare const EXAMPLE_KYC_CONTROLLER_UUID: "033ceb35-2528-402e-8385-f22e12f57805";
+export declare const EXAMPLE_KYC_CONTROLLER_USER_UUID: "8c18ec13-e908-4b7a-91bb-134bb3a229e1";
+export declare const EXAMPLE_KYC_CONTROLLER_GIVEN_NAME: "System";
+export declare const EXAMPLE_KYC_CONTROLLER_FAMILY_NAME: "User";
+export declare const EXAMPLE_KYC_CONTROLLER_COUNTRY: "VE";
+export declare const EXAMPLE_KYC_CONTROLLER_CITY: "Caracas";
+export declare const EXAMPLE_KYC_CONTROLLER_STREET_ADDRESS: "Av. Principal 123";
+export declare const EXAMPLE_KYC_CONTROLLER_IDENTIFIER: "V-12345678";
+export declare const EXAMPLE_KYC_CONTROLLER_POSTAL_CODE: "1010";
+export declare const EXAMPLE_KYC_CONTROLLER_TELEPHONE: "+58-424-555-1234";
+export declare const EXAMPLE_KYC_CONTROLLER_BIRTHDATE: "1990-01-01";
+export declare const EXAMPLE_KYC_CONTROLLER_VERIFIED_AT: "2026-05-14T23:43:05.869+00:00";
+export declare const EXAMPLE_KYC_CONTROLLER_LANGUAGE: "es";
+export declare const EXAMPLE_KYC_CONTROLLER_CREATED_AT: "2026-05-14T23:43:05.913+00:00";
+export declare const EXAMPLE_KYC_CONTROLLER_UPDATED_AT: "2026-05-14T23:43:05.913+00:00";
+export declare const EXAMPLE_KYC_CONTROLLER_GENDER_MALE = BirthSex.Male;
+export declare const EXAMPLE_KYC_CONTROLLER_GENDER_FEMALE = BirthSex.Female;
+export declare const EXAMPLE_KYC_CONTROLLER_GENDER_IDENTITY_MAN = GenderIdentity.Man;
+export declare const EXAMPLE_KYC_CONTROLLER_GENDER_IDENTITY_WOMAN = GenderIdentity.Woman;
+export declare const EXAMPLE_CONTROLLER_IDENTIFIER_TYPE = IdKind.PersonalNationalNumber;
+export declare const EXAMPLE_SUBJECT_IDENTIFIER_TYPE = IdKind.LocalPatientIdentifier;
+export declare const EXAMPLE_SYNTHETIC_SIGNER_SUBJECT_DN: "CN=DOE JANE - TEST1234,SN=DOE,GN=JANE,serialNumber=IDCES-TEST1234,C=ES";
+export declare const EXAMPLE_SYNTHETIC_CERT_COMMON_NAME: "DOE JANE - TEST1234";
+export declare const EXAMPLE_SYNTHETIC_CERT_FAMILY_NAME: "DOE";
+export declare const EXAMPLE_SYNTHETIC_CERT_GIVEN_NAME: "JANE";
+export declare const EXAMPLE_SYNTHETIC_CERT_SERIAL_NUMBER: "IDCES-TEST1234";
+export declare const EXAMPLE_SYNTHETIC_CERT_COUNTRY: "ES";
+export declare const EXAMPLE_SYNTHETIC_CERT_DISPLAY_NAME: "JANE DOE";
+export declare const EXAMPLE_KYC_CONTROLLER_DISPLAY_NAME: "SYSTEM USER";
+export declare const EXAMPLE_FORM_CONTROLLER_PHONE: "+34000000001";
+export declare const EXAMPLE_FORM_SUBJECT_PHONE: "+34000000002";
+export declare const EXAMPLE_FORM_CONTROLLER_IDENTIFIER_VALUE: "identifier-controller-001";
+export declare const EXAMPLE_FORM_SUBJECT_IDENTIFIER_VALUE: "identifier-subject-001";
+export declare const EXAMPLE_OTP_INVITATION_ID: "invitation-demo-001";
+export declare const EXAMPLE_OTP_CHALLENGE_ID: "otp-challenge-demo-001";
+export declare const EXAMPLE_OTP_CODE: "123456";
+export declare const EXAMPLE_DEMO_PORTAL_ID_TOKEN: "eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiJkZW1vLXVzZXIiLCJlbWFpbCI6ImRlbW9AZXhhbXBsZS5vcmcifQ.demo";
 export declare const EXAMPLE_TENANT_ROUTE_CONTEXT: {
     readonly tenantId: "acme-id";
     readonly jurisdiction: "ES";
     readonly sector: "health-care";
 };
 export declare const EXAMPLE_HOST_ROUTE_CONTEXT: {
+    readonly hostCoverageScope: "EU";
     readonly jurisdiction: "ES";
     readonly sector: "test";
 };
@@ -41,10 +106,10 @@ export declare const EXAMPLE_HOSTING_OPERATOR_DID: "did:web:host.example.org";
 export declare const EXAMPLE_TENANT_SERVICE_DID: "did:web:provider.example.org";
 export declare const EXAMPLE_SECONDARY_TENANT_SERVICE_DID: "did:web:provider-b.example.org";
 export declare const EXAMPLE_INDEX_PROVIDER_SECTOR_DID_WEB: "did:web:provider.example.org:acme-id:cds-es:v1:health-care";
-export declare const EXAMPLE_HOSTING_OPERATOR_DSPACE_VERSION_URL: "https://host.example.org/host/cds-ES/v1/test/.well-known/dspace-version";
-export declare const EXAMPLE_HOSTING_OPERATOR_CATALOG_ARTIFACT_URL: "https://host.example.org/host/cds-ES/v1/test/dsp/catalog/dcat.json";
+export declare const EXAMPLE_HOSTING_OPERATOR_DSPACE_VERSION_URL: "https://host.example.org/host/cds-EU/v1/test/.well-known/dspace-version";
+export declare const EXAMPLE_HOSTING_OPERATOR_CATALOG_ARTIFACT_URL: "https://host.example.org/host/cds-EU/v1/test/dsp/catalog/dcat.json";
 /** @deprecated Use `EXAMPLE_HOSTING_OPERATOR_DSPACE_VERSION_URL`. */
-export declare const EXAMPLE_HOSTING_OPERATOR_CATALOG_URL: "https://host.example.org/host/cds-ES/v1/test/.well-known/dspace-version";
+export declare const EXAMPLE_HOSTING_OPERATOR_CATALOG_URL: "https://host.example.org/host/cds-EU/v1/test/.well-known/dspace-version";
 export declare const EXAMPLE_PROVIDER_PUBLISHED_ENDPOINT_URL: "https://host.example.org/catalog/provider-a";
 export declare const EXAMPLE_PROVIDER_LEGAL_NAME: "ACME Health Provider";
 export declare const EXAMPLE_SECONDARY_PROVIDER_LEGAL_NAME: "Reader Only Provider";
@@ -99,6 +164,13 @@ export declare const EXAMPLE_DOCUMENT_REFERENCE_CONTENT_TYPE_PDF: "application/p
 export declare const EXAMPLE_DOCUMENT_REFERENCE_URL: "https://example.org/prescription.pdf";
 export declare const EXAMPLE_DOCUMENT_REFERENCE_DESCRIPTION: "Prescription PDF";
 export declare const EXAMPLE_DOCUMENT_REFERENCE_DATE: "2026-06-12T10:00:00Z";
+export declare const EXAMPLE_DOCUMENT_REFERENCE_CONTENT_HASH: "z-document-reference-example-hash";
+export declare const EXAMPLE_DOCUMENT_REFERENCE_LANGUAGE: "en";
+export declare const EXAMPLE_CONSENT_ATTACHMENT_CONTENT_TYPE: "application/pdf";
+export declare const EXAMPLE_CONSENT_ATTACHMENT_DATA_BASE64: "JVBERi0xLjQKJUZha2UgY29uc2VudCBQREYgZm9yIGxvY2FsIHNtb2tlIHRlc3QK";
+export declare const EXAMPLE_CONTENT_ADDRESSED_CONSENT_IDENTIFIER: "zQmYwAPJzv5CZsnAzt8auVZRnGi2C31WnH8D9N6A7h7vY2";
+export declare const EXAMPLE_CONTENT_ADDRESSED_SOURCE_REFERENCE: "zQmWvM9dQmWvM9dQmWvM9dQmWvM9dQmWvM9dQmWvM9dQmWv";
+export declare const EXAMPLE_CONTENT_ADDRESSED_EVIDENCE_RECORD_IDENTIFIER: "zQmXh8Y3mJQ4d7MmX7o9nP5sQ2uT1vW6xY8zA3bC4dE5fG";
 export declare const EXAMPLE_EMPLOYEE_ACTIVATION_CODE: "ACT-001";
 export declare const EXAMPLE_DEVICE_CLIENT_ID: "did:web:device-001";
 export declare const EXAMPLE_LIVE_GW_BASE_URL_LOCAL: "http://127.0.0.1:3000";

package/dist/examples/shared.js

@@ -2,6 +2,8 @@
 // Always create JSDoc, do not use strings inline in keys nor values, use types instead, and reuse the data test examples.
 import { DataspaceSectors } from '../constants/sectors.js';
 import { HostNetworkTypes } from '../constants/network.js';
+import { BirthSex, GenderIdentity } from '../constants/identity-gender.js';
+import { IdKind } from '../constants/identity-identifiers.js';
 import { HealthcareActorRoles, HealthcareBasicSections, HealthcareConsentPurposes, } from '../constants/healthcare.js';
 import { CommunicationClaim } from '../models/interoperable-claims/communication-claims.js';
 import { MedicationStatementClaim, MedicationStatementClaimsFhirApiExtended, } from '../models/interoperable-claims/medication-statement-claims.js';
@@ -18,17 +20,80 @@ import { medicationStatementFlatToFhirR4 } from '../utils/clinical-resource-conv
  */
 export const EXAMPLE_TENANT_IDENTIFIER = 'acme-id';
 export const EXAMPLE_JURISDICTION = 'ES';
+export const EXAMPLE_HOST_COVERAGE_SCOPE = 'EU';
 export const EXAMPLE_NETWORK_TYPE = HostNetworkTypes.Test;
 export const EXAMPLE_ROUTE_VERSION = 'v1';
 export const EXAMPLE_SECTOR = DataspaceSectors.HealthCare;
 export const EXAMPLE_EMAIL_CONTROLLER_ORG = 'controller@acme.org';
 export const EXAMPLE_EMAIL_CONTROLLER_INDIVIDUAL = 'ana.parent@example.org';
+export const EXAMPLE_SELF_REGISTERED_INDIVIDUAL_ALTERNATE_NAME = 'Jane';
+export const EXAMPLE_SELF_REGISTERED_INDIVIDUAL_EMAIL = 'Jane.Doe@example.com';
+export const EXAMPLE_SELF_REGISTERED_INDIVIDUAL_EMAIL_NORMALIZED = 'jane.doe@example.com';
+export const EXAMPLE_SELF_REGISTERED_INDIVIDUAL_GENDER = BirthSex.Female;
+export const EXAMPLE_SELF_REGISTERED_INDIVIDUAL_BIRTH_YEAR = '1980';
+export const EXAMPLE_REGISTERED_SUBJECT_ALTERNATE_NAME = 'Doraemon';
+export const EXAMPLE_REGISTERED_SUBJECT_BIRTH_YEAR = '2020';
+export const EXAMPLE_PDF_CONSENT_DATE = '2026-06-08';
+/**
+ * Public provider domain selected during autodiscovery.
+ *
+ * This value may be:
+ * - a public domain masking the hosted tenant path, e.g. `service.provider.example`
+ * - or a hosted `did:web` base path without scheme, e.g.
+ *   `hosting.example.com/acme-id/cds-es/v1/health-care`
+ *
+ * The outbox later resolves the DID document from this base and derives the
+ * concrete endpoint URL for the selected operation.
+ */
+export const EXAMPLE_SERVICE_PROVIDER_DOMAIN = 'service.provider.example';
+/** Example hosted `did:web` base without scheme, useful for tests/docs. */
+export const EXAMPLE_SERVICE_PROVIDER_HOSTED_DID_WEB_BASE = 'hosting.example.com/acme-id/cds-es/v1/health-care';
+/** @deprecated Use `EXAMPLE_SERVICE_PROVIDER_DOMAIN`. */
+export const EXAMPLE_PDF_SERVICE_PROVIDER_DOMAIN = EXAMPLE_SERVICE_PROVIDER_DOMAIN;
+export const EXAMPLE_KYC_CONTROLLER_UUID = '033ceb35-2528-402e-8385-f22e12f57805';
+export const EXAMPLE_KYC_CONTROLLER_USER_UUID = '8c18ec13-e908-4b7a-91bb-134bb3a229e1';
+export const EXAMPLE_KYC_CONTROLLER_GIVEN_NAME = 'System';
+export const EXAMPLE_KYC_CONTROLLER_FAMILY_NAME = 'User';
+export const EXAMPLE_KYC_CONTROLLER_COUNTRY = 'VE';
+export const EXAMPLE_KYC_CONTROLLER_CITY = 'Caracas';
+export const EXAMPLE_KYC_CONTROLLER_STREET_ADDRESS = 'Av. Principal 123';
+export const EXAMPLE_KYC_CONTROLLER_IDENTIFIER = 'V-12345678';
+export const EXAMPLE_KYC_CONTROLLER_POSTAL_CODE = '1010';
+export const EXAMPLE_KYC_CONTROLLER_TELEPHONE = '+58-424-555-1234';
+export const EXAMPLE_KYC_CONTROLLER_BIRTHDATE = '1990-01-01';
+export const EXAMPLE_KYC_CONTROLLER_VERIFIED_AT = '2026-05-14T23:43:05.869+00:00';
+export const EXAMPLE_KYC_CONTROLLER_LANGUAGE = 'es';
+export const EXAMPLE_KYC_CONTROLLER_CREATED_AT = '2026-05-14T23:43:05.913+00:00';
+export const EXAMPLE_KYC_CONTROLLER_UPDATED_AT = '2026-05-14T23:43:05.913+00:00';
+export const EXAMPLE_KYC_CONTROLLER_GENDER_MALE = BirthSex.Male;
+export const EXAMPLE_KYC_CONTROLLER_GENDER_FEMALE = BirthSex.Female;
+export const EXAMPLE_KYC_CONTROLLER_GENDER_IDENTITY_MAN = GenderIdentity.Man;
+export const EXAMPLE_KYC_CONTROLLER_GENDER_IDENTITY_WOMAN = GenderIdentity.Woman;
+export const EXAMPLE_CONTROLLER_IDENTIFIER_TYPE = IdKind.PersonalNationalNumber;
+export const EXAMPLE_SUBJECT_IDENTIFIER_TYPE = IdKind.LocalPatientIdentifier;
+export const EXAMPLE_SYNTHETIC_SIGNER_SUBJECT_DN = 'CN=DOE JANE - TEST1234,SN=DOE,GN=JANE,serialNumber=IDCES-TEST1234,C=ES';
+export const EXAMPLE_SYNTHETIC_CERT_COMMON_NAME = 'DOE JANE - TEST1234';
+export const EXAMPLE_SYNTHETIC_CERT_FAMILY_NAME = 'DOE';
+export const EXAMPLE_SYNTHETIC_CERT_GIVEN_NAME = 'JANE';
+export const EXAMPLE_SYNTHETIC_CERT_SERIAL_NUMBER = 'IDCES-TEST1234';
+export const EXAMPLE_SYNTHETIC_CERT_COUNTRY = 'ES';
+export const EXAMPLE_SYNTHETIC_CERT_DISPLAY_NAME = 'JANE DOE';
+export const EXAMPLE_KYC_CONTROLLER_DISPLAY_NAME = 'SYSTEM USER';
+export const EXAMPLE_FORM_CONTROLLER_PHONE = '+34000000001';
+export const EXAMPLE_FORM_SUBJECT_PHONE = '+34000000002';
+export const EXAMPLE_FORM_CONTROLLER_IDENTIFIER_VALUE = 'identifier-controller-001';
+export const EXAMPLE_FORM_SUBJECT_IDENTIFIER_VALUE = 'identifier-subject-001';
+export const EXAMPLE_OTP_INVITATION_ID = 'invitation-demo-001';
+export const EXAMPLE_OTP_CHALLENGE_ID = 'otp-challenge-demo-001';
+export const EXAMPLE_OTP_CODE = '123456';
+export const EXAMPLE_DEMO_PORTAL_ID_TOKEN = 'eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiJkZW1vLXVzZXIiLCJlbWFpbCI6ImRlbW9AZXhhbXBsZS5vcmcifQ.demo';
 export const EXAMPLE_TENANT_ROUTE_CONTEXT = {
     tenantId: EXAMPLE_TENANT_IDENTIFIER,
     jurisdiction: EXAMPLE_JURISDICTION,
     sector: EXAMPLE_SECTOR,
 };
 export const EXAMPLE_HOST_ROUTE_CONTEXT = {
+    hostCoverageScope: EXAMPLE_HOST_COVERAGE_SCOPE,
     jurisdiction: EXAMPLE_JURISDICTION,
     sector: HostNetworkTypes.Test,
 };
@@ -49,8 +114,8 @@ export const EXAMPLE_HOSTING_OPERATOR_DID = 'did:web:host.example.org';
 export const EXAMPLE_TENANT_SERVICE_DID = 'did:web:provider.example.org';
 export const EXAMPLE_SECONDARY_TENANT_SERVICE_DID = 'did:web:provider-b.example.org';
 export const EXAMPLE_INDEX_PROVIDER_SECTOR_DID_WEB = 'did:web:provider.example.org:acme-id:cds-es:v1:health-care';
-export const EXAMPLE_HOSTING_OPERATOR_DSPACE_VERSION_URL = `https://host.example.org/host/cds-ES/${EXAMPLE_ROUTE_VERSION}/${EXAMPLE_NETWORK_TYPE}/.well-known/dspace-version`;
-export const EXAMPLE_HOSTING_OPERATOR_CATALOG_ARTIFACT_URL = `https://host.example.org/host/cds-ES/${EXAMPLE_ROUTE_VERSION}/${EXAMPLE_NETWORK_TYPE}/dsp/catalog/dcat.json`;
+export const EXAMPLE_HOSTING_OPERATOR_DSPACE_VERSION_URL = `https://host.example.org/host/cds-${EXAMPLE_HOST_COVERAGE_SCOPE}/${EXAMPLE_ROUTE_VERSION}/${EXAMPLE_NETWORK_TYPE}/.well-known/dspace-version`;
+export const EXAMPLE_HOSTING_OPERATOR_CATALOG_ARTIFACT_URL = `https://host.example.org/host/cds-${EXAMPLE_HOST_COVERAGE_SCOPE}/${EXAMPLE_ROUTE_VERSION}/${EXAMPLE_NETWORK_TYPE}/dsp/catalog/dcat.json`;
 /** @deprecated Use `EXAMPLE_HOSTING_OPERATOR_DSPACE_VERSION_URL`. */
 export const EXAMPLE_HOSTING_OPERATOR_CATALOG_URL = EXAMPLE_HOSTING_OPERATOR_DSPACE_VERSION_URL;
 export const EXAMPLE_PROVIDER_PUBLISHED_ENDPOINT_URL = 'https://host.example.org/catalog/provider-a';
@@ -107,6 +172,13 @@ export const EXAMPLE_DOCUMENT_REFERENCE_CONTENT_TYPE_PDF = 'application/pdf';
 export const EXAMPLE_DOCUMENT_REFERENCE_URL = 'https://example.org/prescription.pdf';
 export const EXAMPLE_DOCUMENT_REFERENCE_DESCRIPTION = 'Prescription PDF';
 export const EXAMPLE_DOCUMENT_REFERENCE_DATE = '2026-06-12T10:00:00Z';
+export const EXAMPLE_DOCUMENT_REFERENCE_CONTENT_HASH = 'z-document-reference-example-hash';
+export const EXAMPLE_DOCUMENT_REFERENCE_LANGUAGE = 'en';
+export const EXAMPLE_CONSENT_ATTACHMENT_CONTENT_TYPE = EXAMPLE_DOCUMENT_REFERENCE_CONTENT_TYPE_PDF;
+export const EXAMPLE_CONSENT_ATTACHMENT_DATA_BASE64 = 'JVBERi0xLjQKJUZha2UgY29uc2VudCBQREYgZm9yIGxvY2FsIHNtb2tlIHRlc3QK';
+export const EXAMPLE_CONTENT_ADDRESSED_CONSENT_IDENTIFIER = 'zQmYwAPJzv5CZsnAzt8auVZRnGi2C31WnH8D9N6A7h7vY2';
+export const EXAMPLE_CONTENT_ADDRESSED_SOURCE_REFERENCE = 'zQmWvM9dQmWvM9dQmWvM9dQmWvM9dQmWvM9dQmWvM9dQmWv';
+export const EXAMPLE_CONTENT_ADDRESSED_EVIDENCE_RECORD_IDENTIFIER = 'zQmXh8Y3mJQ4d7MmX7o9nP5sQ2uT1vW6xY8zA3bC4dE5fG';
 export const EXAMPLE_EMPLOYEE_ACTIVATION_CODE = 'ACT-001';
 export const EXAMPLE_DEVICE_CLIENT_ID = 'did:web:device-001';
 export const EXAMPLE_LIVE_GW_BASE_URL_LOCAL = 'http://127.0.0.1:3000';

package/dist/models/consent-rule.d.ts

@@ -14,6 +14,8 @@ export declare enum ClaimConsent {
     'verifiedDate' = "Consent.verified-date",
     'purpose' = "Consent.purpose",
     'identifier' = "Consent.identifier",
+    'eventBasedOn' = "Consent.event-basedon",
+    'sourceReference' = "Consent.source-reference",
     'containedDocuments' = "Consent.contained-documents",
     /**
      * @deprecated Use `containedDocuments`.

package/dist/models/consent-rule.js

@@ -16,6 +16,8 @@ export var ClaimConsent;
     ClaimConsent["verifiedDate"] = "Consent.verified-date";
     ClaimConsent["purpose"] = "Consent.purpose";
     ClaimConsent["identifier"] = "Consent.identifier";
+    ClaimConsent["eventBasedOn"] = "Consent.event-basedon";
+    ClaimConsent["sourceReference"] = "Consent.source-reference";
     ClaimConsent["containedDocuments"] = "Consent.contained-documents";
     /**
      * @deprecated Use `containedDocuments`.

package/dist/models/identity-bootstrap.d.ts

@@ -1,4 +1,5 @@
 import { PublicJwk } from '../interfaces/Cryptography.types';
+import { type IssueSeverityAttentionCode } from './issue';
 import { JwkSet } from './jwk';
 /**
  * Public key binding for a human actor/controller identity.
@@ -83,7 +84,7 @@ export interface OrganizationActivationRequest extends ActivationProofInput {
  */
 export type IdentityBootstrapValidationIssue = {
     /** Validation severity. Errors fail the contract, warnings flag compatibility debt. */
-    severity: 'error' | 'warning';
+    severity: IssueSeverityAttentionCode;
     /** Stable machine-readable issue identifier. */
     code: string;
     /** Human-readable description of the problem or compatibility note. */

package/dist/models/index.d.ts

@@ -21,6 +21,7 @@ export * from './fhir-documents';
 export * from './interoperable-claims';
 export * from './indexing';
 export * from './identity-bootstrap';
+export * from './individual-onboarding';
 export * from './issue';
 export * from './jsonapi';
 export * from './jwe';

package/dist/models/index.js

@@ -21,6 +21,7 @@ export * from './fhir-documents.js';
 export * from './interoperable-claims.js';
 export * from './indexing.js';
 export * from './identity-bootstrap.js';
+export * from './individual-onboarding.js';
 export * from './issue.js';
 export * from './jsonapi.js';
 export * from './jwe.js';