gdc-common-utils-ts 2.3.23 → 2.3.25

package/dist/constants/identity-identifiers.d.ts

@@ -26,6 +26,8 @@ export declare const HL7_V2_0203_IDENTIFIER_CODES: Readonly<{
     readonly WorkPermit: "WP";
     readonly StudyPermit: "SP";
     readonly HealthCard: "HC";
+    readonly MemberNumber: "MB";
+    readonly SubscriberNumber: "SN";
     readonly DonorRecord: "DR";
     readonly PatientIdentifier: "PI";
 }>;
@@ -35,6 +37,9 @@ export declare const INDIVIDUAL_IDENTIFIER_KINDS: Readonly<{
     readonly NationalPerson: "national-person";
     readonly Passport: "passport";
     readonly HealthNumber: "health-number";
+    readonly HealthCard: "health-card";
+    readonly InsuranceMember: "insurance-member";
+    readonly InsuranceSubscriber: "insurance-subscriber";
     readonly DriverLicense: "driver-license";
     readonly WorkPermit: "work-permit";
     readonly StudyPermit: "study-permit";
@@ -44,6 +49,9 @@ export declare const INDIVIDUAL_IDENTIFIER_KIND_CODES: Readonly<{
     readonly "national-person": "NN";
     readonly passport: "PPN";
     readonly "health-number": "JHN";
+    readonly "health-card": "HC";
+    readonly "insurance-member": "MB";
+    readonly "insurance-subscriber": "SN";
     readonly "driver-license": "DL";
     readonly "work-permit": "WP";
     readonly "study-permit": "SP";
@@ -69,6 +77,10 @@ export declare enum IdKind {
     PersonalStudyPermit = "org.hl7.terminology.CodeSystem.v2-0203.SP",
     /** HL7 local/private health card identifier. */
     LocalHealthCard = "org.hl7.terminology.CodeSystem.v2-0203.HC",
+    /** HL7 insured/member number, including private and travel health insurance. */
+    InsuranceMemberNumber = "org.hl7.terminology.CodeSystem.v2-0203.MB",
+    /** HL7 policy subscriber number when it differs from the beneficiary/member. */
+    InsuranceSubscriberNumber = "org.hl7.terminology.CodeSystem.v2-0203.SN",
     /** HL7 donor record identifier. */
     LocalDonorRecord = "org.hl7.terminology.CodeSystem.v2-0203.DR",
     /** HL7 local patient identifier. */
@@ -83,6 +95,8 @@ export declare const HL7_V2_0203_REVERSE_DNS_TYPES: Readonly<{
     readonly WP: IdKind.PersonalWorkPermit;
     readonly SP: IdKind.PersonalStudyPermit;
     readonly HC: IdKind.LocalHealthCard;
+    readonly MB: IdKind.InsuranceMemberNumber;
+    readonly SN: IdKind.InsuranceSubscriberNumber;
     readonly DR: IdKind.LocalDonorRecord;
     readonly PI: IdKind.LocalPatientIdentifier;
 }>;

package/dist/constants/identity-identifiers.js

@@ -26,6 +26,8 @@ export const HL7_V2_0203_IDENTIFIER_CODES = Object.freeze({
     WorkPermit: 'WP',
     StudyPermit: 'SP',
     HealthCard: 'HC',
+    MemberNumber: 'MB',
+    SubscriberNumber: 'SN',
     DonorRecord: 'DR',
     PatientIdentifier: 'PI',
 });
@@ -34,6 +36,9 @@ export const INDIVIDUAL_IDENTIFIER_KINDS = Object.freeze({
     NationalPerson: 'national-person',
     Passport: 'passport',
     HealthNumber: 'health-number',
+    HealthCard: 'health-card',
+    InsuranceMember: 'insurance-member',
+    InsuranceSubscriber: 'insurance-subscriber',
     DriverLicense: 'driver-license',
     WorkPermit: 'work-permit',
     StudyPermit: 'study-permit',
@@ -42,6 +47,9 @@ export const INDIVIDUAL_IDENTIFIER_KIND_CODES = Object.freeze({
     [INDIVIDUAL_IDENTIFIER_KINDS.NationalPerson]: HL7_V2_0203_IDENTIFIER_CODES.NationalNumber,
     [INDIVIDUAL_IDENTIFIER_KINDS.Passport]: HL7_V2_0203_IDENTIFIER_CODES.PassportNumber,
     [INDIVIDUAL_IDENTIFIER_KINDS.HealthNumber]: HL7_V2_0203_IDENTIFIER_CODES.JurisdictionalHealthNumber,
+    [INDIVIDUAL_IDENTIFIER_KINDS.HealthCard]: HL7_V2_0203_IDENTIFIER_CODES.HealthCard,
+    [INDIVIDUAL_IDENTIFIER_KINDS.InsuranceMember]: HL7_V2_0203_IDENTIFIER_CODES.MemberNumber,
+    [INDIVIDUAL_IDENTIFIER_KINDS.InsuranceSubscriber]: HL7_V2_0203_IDENTIFIER_CODES.SubscriberNumber,
     [INDIVIDUAL_IDENTIFIER_KINDS.DriverLicense]: HL7_V2_0203_IDENTIFIER_CODES.DriverLicense,
     [INDIVIDUAL_IDENTIFIER_KINDS.WorkPermit]: HL7_V2_0203_IDENTIFIER_CODES.WorkPermit,
     [INDIVIDUAL_IDENTIFIER_KINDS.StudyPermit]: HL7_V2_0203_IDENTIFIER_CODES.StudyPermit,
@@ -68,6 +76,10 @@ export var IdKind;
     IdKind["PersonalStudyPermit"] = "org.hl7.terminology.CodeSystem.v2-0203.SP";
     /** HL7 local/private health card identifier. */
     IdKind["LocalHealthCard"] = "org.hl7.terminology.CodeSystem.v2-0203.HC";
+    /** HL7 insured/member number, including private and travel health insurance. */
+    IdKind["InsuranceMemberNumber"] = "org.hl7.terminology.CodeSystem.v2-0203.MB";
+    /** HL7 policy subscriber number when it differs from the beneficiary/member. */
+    IdKind["InsuranceSubscriberNumber"] = "org.hl7.terminology.CodeSystem.v2-0203.SN";
     /** HL7 donor record identifier. */
     IdKind["LocalDonorRecord"] = "org.hl7.terminology.CodeSystem.v2-0203.DR";
     /** HL7 local patient identifier. */
@@ -82,6 +94,8 @@ export const HL7_V2_0203_REVERSE_DNS_TYPES = Object.freeze({
     [HL7_V2_0203_IDENTIFIER_CODES.WorkPermit]: IdKind.PersonalWorkPermit,
     [HL7_V2_0203_IDENTIFIER_CODES.StudyPermit]: IdKind.PersonalStudyPermit,
     [HL7_V2_0203_IDENTIFIER_CODES.HealthCard]: IdKind.LocalHealthCard,
+    [HL7_V2_0203_IDENTIFIER_CODES.MemberNumber]: IdKind.InsuranceMemberNumber,
+    [HL7_V2_0203_IDENTIFIER_CODES.SubscriberNumber]: IdKind.InsuranceSubscriberNumber,
     [HL7_V2_0203_IDENTIFIER_CODES.DonorRecord]: IdKind.LocalDonorRecord,
     [HL7_V2_0203_IDENTIFIER_CODES.PatientIdentifier]: IdKind.LocalPatientIdentifier,
 });

package/dist/models/index.d.ts

@@ -30,6 +30,7 @@ export * from './animal-onboarding';
 export * from './inter-tenant-access-contract';
 export * from './issue';
 export * from './jsonapi';
+export * from './linked-subject-identifier';
 export * from './jwe';
 export * from './jwk';
 export * from './jws';

package/dist/models/index.js

@@ -30,6 +30,7 @@ export * from './animal-onboarding.js';
 export * from './inter-tenant-access-contract.js';
 export * from './issue.js';
 export * from './jsonapi.js';
+export * from './linked-subject-identifier.js';
 export * from './jwe.js';
 export * from './jwk.js';
 export * from './jws.js';

package/dist/models/linked-subject-identifier.d.ts

@@ -0,0 +1,31 @@
+import type { Hl7V20203IdentifierCode } from '../constants/identity-identifiers.js';
+/**
+ * A confidential external identifier linked to one immutable subject DID.
+ *
+ * The raw value, assigner and validity period belong in encrypted tenant
+ * storage. Only a canonical digest/CID may be used for equality lookup or a
+ * future ledger evidence anchor. `MB` identifies an insured member;
+ * policy/payor details belong in a FHIR Coverage resource.
+ */
+export type LinkedSubjectIdentifier = Readonly<{
+    id: string;
+    subjectDid: string;
+    type: Hl7V20203IdentifierCode;
+    jurisdiction: string;
+    value: string;
+    assigner?: string;
+    periodStart?: string;
+    periodEnd?: string;
+    createdAt: string;
+    updatedAt: string;
+}>;
+/** Input accepted by a subject-scoped identifier write boundary. */
+export type LinkedSubjectIdentifierDraft = Readonly<{
+    subjectDid: string;
+    type: Hl7V20203IdentifierCode;
+    jurisdiction: string;
+    value: string;
+    assigner?: string;
+    periodStart?: string;
+    periodEnd?: string;
+}>;

package/dist/models/linked-subject-identifier.js

@@ -0,0 +1 @@
+export {};

package/dist/utils/consent.d.ts

@@ -53,6 +53,14 @@ export type BuildConsentClaimsSimpleInput = SubjectIdentifierInput & {
     actions: string[];
     consentIdentifier?: string;
     consentDate?: string;
+    /**
+     * Upper bound for the grant, serialized as `Consent.period-end`. Access is
+     * inactive at and after this instant.
+     *
+     * Use an ISO 8601 date or date-time. A date-time with an explicit timezone
+     * is recommended when the caller offers access until a specific hour.
+     */
+    periodEnd?: string;
     decision?: 'permit' | 'deny';
     /** Stable identifier/thread of the permission request that caused this decision. */
     eventBasedOn?: string;
@@ -90,6 +98,14 @@ export declare function normalizePhone(value: string): string;
  * @param value Raw identifier text.
  */
 export declare function normalizeIdentifierToken(value: string): string;
+/**
+ * Returns whether a Consent period boundary is an ISO 8601 calendar date or
+ * an absolute date-time carrying `Z` or an explicit numeric timezone.
+ *
+ * Date-only values remain supported for compatibility. Applications offering
+ * access until a specific hour should always send an absolute date-time.
+ */
+export declare function isValidConsentPeriodBoundary(value: string): boolean;
 /**
  * Parses a single canonical consent actor token into its resolved kind/value.
  *

package/dist/utils/consent.js

@@ -24,6 +24,27 @@ export function normalizeIdentifierToken(value) {
 function withPrefix(prefix, message) {
     return prefix ? `${prefix} ${message}` : message;
 }
+/**
+ * Returns whether a Consent period boundary is an ISO 8601 calendar date or
+ * an absolute date-time carrying `Z` or an explicit numeric timezone.
+ *
+ * Date-only values remain supported for compatibility. Applications offering
+ * access until a specific hour should always send an absolute date-time.
+ */
+export function isValidConsentPeriodBoundary(value) {
+    const normalized = String(value || '').trim();
+    if (!/^\d{4}-\d{2}-\d{2}(?:T\d{2}:\d{2}(?::\d{2}(?:\.\d{1,9})?)?(?:Z|[+-]\d{2}:\d{2}))?$/.test(normalized)) {
+        return false;
+    }
+    const [year, month, day] = normalized.slice(0, 10).split('-').map(Number);
+    const calendarDate = new Date(Date.UTC(year, month - 1, day));
+    if (calendarDate.getUTCFullYear() !== year
+        || calendarDate.getUTCMonth() !== month - 1
+        || calendarDate.getUTCDate() !== day) {
+        return false;
+    }
+    return !Number.isNaN(Date.parse(normalized));
+}
 /**
  * Parses a single canonical consent actor token into its resolved kind/value.
  *
@@ -152,6 +173,10 @@ export function buildConsentClaimsSimple(input, options = {}) {
     const actorIdentifier = resolveActorIdentifier(input.actor, { errorPrefix: options.errorPrefix });
     const subjectIdentifier = resolveSubjectIdentifier(input, { errorPrefix: options.errorPrefix });
     const consentDate = String(input.consentDate || '').trim() || new Date().toISOString().slice(0, 10);
+    const periodEnd = String(input.periodEnd || '').trim();
+    if (periodEnd && !isValidConsentPeriodBoundary(periodEnd)) {
+        throw new Error(withPrefix(options.errorPrefix, 'periodEnd must be a valid ISO 8601 date or date-time.'));
+    }
     const consentIdentifier = String(input.consentIdentifier || '').trim() || String(options.consentIdentifierFactory?.() || '').trim();
     if (!consentIdentifier) {
         throw new Error(withPrefix(options.errorPrefix, 'consentIdentifier is required when no consentIdentifierFactory is provided.'));
@@ -165,6 +190,7 @@ export function buildConsentClaimsSimple(input, options = {}) {
             [ClaimConsent.subject]: subjectIdentifier,
             [ClaimConsent.identifier]: consentIdentifier,
             [ClaimConsent.date]: consentDate,
+            ...(periodEnd ? { [ClaimConsent.periodEnd]: periodEnd } : {}),
             [ClaimConsent.purpose]: input.purpose,
             [ClaimConsent.action]: (input.actions || []).join(','),
             [ClaimConsent.actorIdentifier]: actorIdentifier,
@@ -504,9 +530,9 @@ export function isConsentRuleActive(rule, options = {}) {
             : Date.now();
     const periodStart = String(readConsentRuleClaim(rule, ClaimConsent.periodStart) || '').trim();
     const periodEnd = String(readConsentRuleClaim(rule, ClaimConsent.periodEnd) || '').trim();
-    if (periodStart && !Number.isNaN(Date.parse(periodStart)) && Date.parse(periodStart) > now)
+    if (periodStart && (Number.isNaN(Date.parse(periodStart)) || Date.parse(periodStart) > now))
         return false;
-    if (periodEnd && !Number.isNaN(Date.parse(periodEnd)) && Date.parse(periodEnd) < now)
+    if (periodEnd && (Number.isNaN(Date.parse(periodEnd)) || Date.parse(periodEnd) <= now))
         return false;
     return true;
 }

package/dist/utils/individual-identifier.d.ts

@@ -4,6 +4,8 @@ export type IndividualIdentifierInput = Readonly<{
     jurisdiction: string;
     value: string;
 }>;
+/** Validates an optional FHIR Identifier.period expressed as ISO date strings. */
+export declare function assertIndividualIdentifierPeriod(periodStart?: string, periodEnd?: string): void;
 /** Resolves a supported short or reverse-DNS HL7 identifier type to one canonical type. */
 export declare function normalizeIndividualIdentifierType(type: IndividualIdentifierInput['type']): IdKindValue;
 /** Builds the sole canonical input hashed for an external individual identifier alias. */

package/dist/utils/individual-identifier.js

@@ -4,6 +4,23 @@ import { encodeMultibaseSha3 } from './multibasehash.js';
 import { UrnPrefixes } from '../constants/urn.js';
 const LEGACY_HL7_V2_0203_REVERSE_DNS_PREFIX = 'org.hl7.terminology.codesystem.v2-0203';
 const ISO_3166_JURISDICTION_PATTERN = /^[A-Z]{2}(?:-[A-Z0-9]{1,3})?$/;
+/** Validates an optional FHIR Identifier.period expressed as ISO date strings. */
+export function assertIndividualIdentifierPeriod(periodStart, periodEnd) {
+    const start = normalizeOptionalIsoDate(periodStart, 'periodStart');
+    const end = normalizeOptionalIsoDate(periodEnd, 'periodEnd');
+    if (start && end && start > end) {
+        throw new Error('Individual identifier periodStart must not be after periodEnd');
+    }
+}
+function normalizeOptionalIsoDate(value, field) {
+    const normalized = value?.trim();
+    if (!normalized)
+        return undefined;
+    if (!/^\d{4}-\d{2}-\d{2}$/.test(normalized) || Number.isNaN(Date.parse(`${normalized}T00:00:00.000Z`))) {
+        throw new Error(`Invalid ISO date for ${field}: ${value}`);
+    }
+    return normalized;
+}
 /** Resolves a supported short or reverse-DNS HL7 identifier type to one canonical type. */
 export function normalizeIndividualIdentifierType(type) {
     const candidate = String(type).trim();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-common-utils-ts",
-  "version": "2.3.23",
+  "version": "2.3.25",
   "publishConfig": {
     "access": "public"
   },