gdc-common-utils-ts 2.3.5 → 2.3.6

package/dist/examples/professional.js

@@ -210,4 +210,115 @@ function buildConsentDecisionScenario(params) {
  * consent state + actor target + role + purpose + requested scope.
  */
 export const EXAMPLE_PROFESSIONAL_CONSENT_SCENARIOS = Object.freeze({
-    physicianB
+    physicianByEmailContinuousCareAllergiesAllowed: buildConsentDecisionScenario({
+        actorId: EXAMPLE_PHYSICIAN_EMAIL,
+        actorRole: HealthcareActorRoles.Physician,
+        purpose: HealthcareConsentPurposes.Treatment,
+        consentActions: [HealthcareBasicSections.AllergiesAndIntolerances.claim],
+        requestedSections: HealthcareBasicSections.AllergiesAndIntolerances.claim,
+        includedTypes: [
+            ResourceTypesFhirR4.Composition,
+            ResourceTypesFhirR4.AllergyIntolerance,
+            ResourceTypesFhirR4.DocumentReference,
+        ],
+        expectedSmartTokenDecision: 'allowed',
+        reason: 'physician is targeted directly by email and role for continuous care over allergies section',
+    }),
+    physicianByEmailEmergencySummaryAllowed: buildConsentDecisionScenario({
+        actorId: EXAMPLE_PHYSICIAN_EMAIL,
+        actorRole: HealthcareActorRoles.Physician,
+        purpose: HealthcareConsentPurposes.EmergencyTreatment,
+        consentActions: [HealthcareBasicSections.PatientSummaryDocument.claim],
+        requestedSections: HealthcareBasicSections.PatientSummaryDocument.claim,
+        includedTypes: [
+            ResourceTypesFhirR4.Composition,
+            ResourceTypesFhirR4.DocumentReference,
+            ResourceTypesFhirR4.Observation,
+        ],
+        expectedSmartTokenDecision: 'allowed',
+        reason: 'physician is targeted directly by email and role for emergency summary access',
+    }),
+    physicianByOrganizationResultsAllowed: buildConsentDecisionScenario({
+        actorId: { organizationUrl: EXAMPLE_PROVIDER_ORG_URL },
+        actorRole: HealthcareActorRoles.Physician,
+        purpose: HealthcareConsentPurposes.Treatment,
+        consentActions: [HealthcareBasicSections.Results.claim],
+        requestedSections: HealthcareBasicSections.Results.claim,
+        includedTypes: [
+            ResourceTypesFhirR4.Composition,
+            ResourceTypesFhirR4.DiagnosticReport,
+            ResourceTypesFhirR4.DocumentReference,
+        ],
+        expectedSmartTokenDecision: 'allowed',
+        reason: 'consent is granted to a physician role within a given organization for continuous care results access',
+    }),
+    physicianByJurisdictionEmergencySummaryAllowed: buildConsentDecisionScenario({
+        actorId: EXAMPLE_JURISDICTION,
+        actorRole: HealthcareActorRoles.Physician,
+        purpose: HealthcareConsentPurposes.EmergencyTreatment,
+        consentActions: [HealthcareBasicSections.PatientSummaryDocument.claim],
+        requestedSections: HealthcareBasicSections.PatientSummaryDocument.claim,
+        includedTypes: [
+            ResourceTypesFhirR4.Composition,
+            ResourceTypesFhirR4.DocumentReference,
+            ResourceTypesFhirR4.Observation,
+        ],
+        expectedSmartTokenDecision: 'allowed',
+        reason: 'consent is granted at jurisdiction level for physician emergency access',
+    }),
+    nursingByOrganizationMedicationHistoryAllowed: buildConsentDecisionScenario({
+        actorId: { organizationUrl: EXAMPLE_PROVIDER_ORG_URL },
+        actorRole: HealthcareActorRoles.NursingProfessional,
+        purpose: HealthcareConsentPurposes.Treatment,
+        consentActions: [HealthcareBasicSections.HistoryOfMedicationUse.claim],
+        requestedSections: HealthcareBasicSections.HistoryOfMedicationUse.claim,
+        includedTypes: [
+            ResourceTypesFhirR4.Composition,
+            ResourceTypesFhirR4.MedicationStatement,
+            ResourceTypesFhirR4.DocumentReference,
+        ],
+        expectedSmartTokenDecision: 'allowed',
+        reason: 'nursing professional is allowed to read medication history for treatment through organization-scoped consent',
+    }),
+    paramedicByJurisdictionEmergencySummaryAllowed: buildConsentDecisionScenario({
+        actorId: EXAMPLE_JURISDICTION,
+        actorRole: HealthcareActorRoles.Paramedic,
+        purpose: HealthcareConsentPurposes.EmergencyTreatment,
+        consentActions: [HealthcareBasicSections.PatientSummaryDocument.claim],
+        requestedSections: HealthcareBasicSections.PatientSummaryDocument.claim,
+        includedTypes: [
+            ResourceTypesFhirR4.Composition,
+            ResourceTypesFhirR4.DocumentReference,
+            ResourceTypesFhirR4.Observation,
+        ],
+        expectedSmartTokenDecision: 'allowed',
+        reason: 'paramedic receives emergency-only jurisdiction-scoped access to patient summary',
+    }),
+    physicianObstetricianDeniedWhenOnlyAllergiesConsent: buildConsentDecisionScenario({
+        actorId: EXAMPLE_PHYSICIAN_EMAIL,
+        actorRole: `${HealthcareActorRoles.Physician}:obstetrician`,
+        purpose: HealthcareConsentPurposes.Treatment,
+        consentActions: [HealthcareBasicSections.AllergiesAndIntolerances.claim],
+        requestedSections: HealthcareBasicSections.Results.claim,
+        includedTypes: [
+            ResourceTypesFhirR4.Composition,
+            ResourceTypesFhirR4.DiagnosticReport,
+            ResourceTypesFhirR4.DocumentReference,
+        ],
+        expectedSmartTokenDecision: 'denied',
+        reason: 'requested SMART scope targets results but active consent only covers allergies section',
+    }),
+    physicianByEmailDeniedWhenConsentRevokedAndNoOrgNorJurisdictionConsentIsActive: buildConsentDecisionScenario({
+        actorId: EXAMPLE_PHYSICIAN_EMAIL,
+        actorRole: HealthcareActorRoles.Physician,
+        purpose: HealthcareConsentPurposes.EmergencyTreatment,
+        consentActions: [HealthcareBasicSections.PatientSummaryDocument.claim],
+        requestedSections: HealthcareBasicSections.PatientSummaryDocument.claim,
+        includedTypes: [
+            ResourceTypesFhirR4.Composition,
+            ResourceTypesFhirR4.DocumentReference,
+        ],
+        expectedSmartTokenDecision: 'denied',
+        reason: 'matching consent rule existed before but is no longer active after controller deactivation/revocation',
+    }),
+});

package/dist/models/indexing.js

@@ -193,7 +193,7 @@ export function buildIndexParametersFromClaims(claims, allowedClaims) {
         const parameter = {
             name: claimKey,
             value: value,
-            type: inferPa     type: inferParameterTypeFromClaimKey(claimKey, rawValue),
+            type: inferParameterTypeFromClaimKey(claimKey, rawValue),
             ...(claimKey === ObservationClaim.ValueQuantityUnit && typeof rawValue === 'string'
                 ? { unit: rawValue }
                 : {}),

package/dist/utils/bundle-reader.js

@@ -136,7 +136,13 @@ export class BundleReader {
         }
         const entries = this.getEntries();
         for (let index = 0; index < entries.length; index += 1) {
-            if (this.resolveEntryIdentifier(entries[index]) === normalizedIdentifier) {
+            const resource = asRecord(entries[index].resource);
+            const resourceType = asNonEmptyString(resource.resourceType) || 'resource';
+            const candidates = new Set([
+                ...this.resolveEntryReferenceCandidates(entries[index]),
+                `${resourceType}#${index}`,
+            ]);
+            if (candidates.has(normalizedIdentifier)) {
                 return index;
             }
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-common-utils-ts",
-  "version": "2.3.5",
+  "version": "2.3.6",
   "publishConfig": {
     "access": "public"
   },
@@ -19,7 +19,10 @@
     "test": "jest",
     "test:coverage": "jest --coverage",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "build": "tsc -p tsconfig.build.json && node patch-esm-imports.mjs",
+    "clean": "node -e \"require('node:fs').rmSync('dist', { recursive: true, force: true })\"",
+    "build": "npm run clean && tsc -p tsconfig.build.json && node patch-esm-imports.mjs",
+    "verify:dist": "node scripts/verify-dist-syntax.mjs",
+    "prepack": "npm run verify:dist",
     "prepublishOnly": "npm run typecheck && npm test -- --watchman=false && npm run build"
   },
   "main": "./dist/index.js",

package/dist/utils/clinical-resource-filter-editor.d.ts

@@ -1,39 +0,0 @@
-import type { BundleResourceDateFilter, BundleResourceIdFilters } from './bundle-query';
-/**
- * Canonical high-level filter accepted by both Bundle section readers and
- * `FhirDocumentFacade`.
- */
-export type ClinicalResourceFilter = Readonly<{
-    sections?: string[];
-    types?: string[];
-    date?: BundleResourceDateFilter;
-}>;
-/**
- * Chainable editor for one clinical document resource filter.
- *
- * The built value can be passed unchanged to:
- *
- * - `BundleReader.getDocumentSectionResourceIds(...)`
- * - `BundleReader.getDocumentSectionResourceEntries(...)`
- * - `FhirDocumentFacade.getResourcesByFilter(...)`
- * - `FhirDocumentFacade.getResourceCount(...)`
- */
-export declare class ClinicalResourceFilterEditor {
-    private sections?;
-    private types?;
-    private date?;
-    /** Replaces the selected Composition sections. An empty list means all. */
-    setSections(values: readonly string[]): this;
-    /** Replaces the selected FHIR resource types. An empty list means all. */
-    setTypes(values: readonly string[]): this;
-    /** Sets the complete clinical date interval. Either boundary may be omitted. */
-    setPeriod(start?: string, end?: string): this;
-    /** Sets or clears only the start boundary of the clinical date interval. */
-    setPeriodStart(start?: string): this;
-    /** Sets or clears only the end boundary of the clinical date interval. */
-    setPeriodEnd(end?: string): this;
-    /** Removes both clinical date boundaries. */
-    clearPeriod(): this;
-    /** Returns a detached canonical filter safe for either public reader. */
-    build(): ClinicalResourceFilter & BundleResourceIdFilters;
-}

package/dist/utils/clinical-resource-filter-editor.js

@@ -1,84 +0,0 @@
-// Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
-/**
- * Chainable editor for one clinical document resource filter.
- *
- * The built value can be passed unchanged to:
- *
- * - `BundleReader.getDocumentSectionResourceIds(...)`
- * - `BundleReader.getDocumentSectionResourceEntries(...)`
- * - `FhirDocumentFacade.getResourcesByFilter(...)`
- * - `FhirDocumentFacade.getResourceCount(...)`
- */
-export class ClinicalResourceFilterEditor {
-    sections;
-    types;
-    date;
-    /** Replaces the selected Composition sections. An empty list means all. */
-    setSections(values) {
-        this.sections = normalizeTokens(values);
-        return this;
-    }
-    /** Replaces the selected FHIR resource types. An empty list means all. */
-    setTypes(values) {
-        this.types = normalizeTokens(values);
-        return this;
-    }
-    /** Sets the complete clinical date interval. Either boundary may be omitted. */
-    setPeriod(start, end) {
-        this.date = buildDateFilter(start, end);
-        return this;
-    }
-    /** Sets or clears only the start boundary of the clinical date interval. */
-    setPeriodStart(start) {
-        this.date = buildDateFilter(start, this.date?.end);
-        return this;
-    }
-    /** Sets or clears only the end boundary of the clinical date interval. */
-    setPeriodEnd(end) {
-        this.date = buildDateFilter(this.date?.start, end);
-        return this;
-    }
-    /** Removes both clinical date boundaries. */
-    clearPeriod() {
-        this.date = undefined;
-        return this;
-    }
-    /** Returns a detached canonical filter safe for either public reader. */
-    build() {
-        return {
-            ...(this.sections?.length ? { sections: [...this.sections] } : {}),
-            ...(this.types?.length ? { types: [...this.types] } : {}),
-            ...(this.date ? { date: { ...this.date } } : {}),
-        };
-    }
-}
-function normalizeTokens(values) {
-    const normalized = [...new Set(values.map((value) => String(value || '').trim()).filter(Boolean))];
-    return normalized.length ? normalized : undefined;
-}
-function buildDateFilter(start, end) {
-    const normalizedStart = normalizeDate(start, 'start');
-    const normalizedEnd = normalizeDate(end, 'end');
-    if (normalizedStart && normalizedEnd) {
-        if (Date.parse(normalizedStart) > Date.parse(normalizedEnd)) {
-            throw new RangeError('Clinical resource filter period start must not be after end.');
-        }
-    }
-    if (!normalizedStart && !normalizedEnd) {
-        return undefined;
-    }
-    return {
-        ...(normalizedStart ? { start: normalizedStart } : {}),
-        ...(normalizedEnd ? { end: normalizedEnd } : {}),
-    };
-}
-function normalizeDate(value, boundary) {
-    const normalized = String(value || '').trim();
-    if (!normalized) {
-        return undefined;
-    }
-    if (!Number.isFinite(Date.parse(normalized))) {
-        throw new TypeError(`Clinical resource filter period ${boundary} must be a valid date.`);
-    }
-    return normalized;
-}