gdc-common-utils-ts 2.5.12 → 2.5.13

package/dist/examples/organization-role-license.js

@@ -1,15 +1,16 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
-import { buildStableActorIdentifier } from '../utils/actor-identifier.js';
+import { buildStableActorIdentifier, StableActorContactKinds } from '../utils/actor-identifier.js';
 import { buildOrganizationRoleLicenseId, } from '../utils/organization-role-license.js';
+import { EXAMPLE_EMAIL_PROFESSIONAL, EXAMPLE_EMPLOYEE_DEVICE_CLIENT_ID_PRIMARY, EXAMPLE_EMPLOYEE_DEVICE_INSTANCE_ID_PRIMARY, EXAMPLE_HOST_PUBLIC_HOSTNAME, EXAMPLE_JURISDICTION, EXAMPLE_LEGAL_ORGANIZATION_TAX_ID, EXAMPLE_ORGANIZATION_CONTROLLER_ROLE, EXAMPLE_SECTOR, } from './shared.js';
 /** Reusable synthetic identity for role-licence contract and consumer tests. */
 export const EXAMPLE_ORGANIZATION_ROLE_LICENSE_IDENTITY = Object.freeze({
-    jurisdiction: 'es',
-    organizationId: 'urn:org:TAX:ES-B12345678',
+    jurisdiction: EXAMPLE_JURISDICTION,
+    organizationOfficialId: EXAMPLE_LEGAL_ORGANIZATION_TAX_ID,
     stableContactIdentifier: buildStableActorIdentifier({
-        contactKind: 'email',
-        contact: 'professional@example.org',
+        contactKind: StableActorContactKinds.Email,
+        contact: EXAMPLE_EMAIL_PROFESSIONAL,
     }),
-    licensedRole: 'RESPRSN',
+    licensedRole: EXAMPLE_ORGANIZATION_CONTROLLER_ROLE,
 });
 /** Reusable catch-all plus exact-override policy example. */
 export const EXAMPLE_ORGANIZATION_ROLE_LICENSE_POLICIES = Object.freeze([
@@ -24,10 +25,10 @@ export const EXAMPLE_ORGANIZATION_ROLE_LICENSE = Object.freeze({
     data: [...EXAMPLE_ORGANIZATION_ROLE_LICENSE_POLICIES],
     devices: [
         Object.freeze({
-            clientId: 'example-client-health-1',
-            clientInstanceId: 'example-installation-health-1',
-            sector: 'health-care',
-            host: 'https://gw.example.org',
+            clientId: EXAMPLE_EMPLOYEE_DEVICE_CLIENT_ID_PRIMARY,
+            clientInstanceId: EXAMPLE_EMPLOYEE_DEVICE_INSTANCE_ID_PRIMARY,
+            sector: EXAMPLE_SECTOR,
+            host: `https://${EXAMPLE_HOST_PUBLIC_HOSTNAME}`,
             status: 'active',
             activatedAt: 1_700_000_000,
         }),

package/dist/models/organization-role-license.d.ts

@@ -32,7 +32,8 @@ export interface OrganizationRoleLicenseDevice {
  */
 export interface OrganizationRoleLicense {
     id: string;
-    organizationId: string;
+    /** Official legal identifier value; never an embedded `urn:org:*` identifier. */
+    organizationOfficialId: string;
     jurisdiction: string;
     stableContactIdentifier: string;
     licensedRole: string;

package/dist/utils/actor-identifier.d.ts

@@ -1,4 +1,8 @@
-export type StableActorContactKind = 'email' | 'phone';
+export declare const StableActorContactKinds: Readonly<{
+    readonly Email: "email";
+    readonly Phone: "phone";
+}>;
+export type StableActorContactKind = typeof StableActorContactKinds[keyof typeof StableActorContactKinds];
 /**
  * Builds the private, stable actor identifier shared by independent portals.
  *

package/dist/utils/actor-identifier.js

@@ -1,5 +1,9 @@
 import { normalizePhone } from './consent.js';
 import { normalizeSameAsHash, normalizeTelephoneHash } from './same-as.js';
+export const StableActorContactKinds = Object.freeze({
+    Email: 'email',
+    Phone: 'phone',
+});
 /**
  * Builds the private, stable actor identifier shared by independent portals.
  *

package/dist/utils/organization-role-license.d.ts

@@ -1,10 +1,11 @@
 import type { OrganizationRoleLicense, OrganizationRoleLicenseDevice, OrganizationRoleLicenseSectorPolicy } from '../models/organization-role-license';
 export type OrganizationRoleLicenseIdentity = Readonly<{
     jurisdiction: string;
-    organizationId: string;
+    organizationOfficialId: string;
     stableContactIdentifier: string;
     licensedRole: string;
 }>;
+export declare function validateOrganizationOfficialId(value: string): string;
 /**
  * Builds the exact, compact licence preimage agreed across portals and hosts.
  * The preimage is hashed before persistence and is never itself a ledger key.

package/dist/utils/organization-role-license.js

@@ -16,16 +16,23 @@ function validateStableContactIdentifier(value) {
     }
     return normalized;
 }
+export function validateOrganizationOfficialId(value) {
+    const normalized = required(value, 'organizationOfficialId');
+    if (normalized.includes(':') || /^urn:/i.test(normalized)) {
+        throw new TypeError('organizationOfficialId must be the official identifier value, not an organization URN.');
+    }
+    return normalized;
+}
 /**
  * Builds the exact, compact licence preimage agreed across portals and hosts.
  * The preimage is hashed before persistence and is never itself a ledger key.
  */
 export function buildOrganizationRoleLicensePreimage(identity) {
     const jurisdiction = required(identity.jurisdiction, 'jurisdiction').toLowerCase();
-    const organizationId = required(identity.organizationId, 'organizationId');
+    const organizationOfficialId = validateOrganizationOfficialId(identity.organizationOfficialId);
     const stableContactIdentifier = validateStableContactIdentifier(identity.stableContactIdentifier);
     const licensedRole = required(identity.licensedRole, 'licensedRole');
-    return `urn:cds-${jurisdiction}:${organizationId}:${stableContactIdentifier}:${licensedRole}`;
+    return `urn:cds-${jurisdiction}:${organizationOfficialId}:${stableContactIdentifier}:${licensedRole}`;
 }
 /** SHA3-384 multihash identifier for organization + contact + licensed role. */
 export function buildOrganizationRoleLicenseId(identity) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-common-utils-ts",
-  "version": "2.5.12",
+  "version": "2.5.13",
   "publishConfig": {
     "access": "public"
   },