gdc-common-utils-ts 2.5.19 → 2.5.21

package/dist/examples/inter-tenant-access-contract.d.ts

@@ -27,6 +27,8 @@ export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SUBJECT_DID: "did:web:
 export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SECTION: "LOINC|48765-2";
 export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_AGREEMENT_PDF_URL: "https://portal.example.org/files/contracts/inter-tenant-contract-acme-lab-001.pdf";
 export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_PROFESSIONAL_DID: "did:web:api.lab.org:employee:researcher1@lab.org:ISCO-08|2211";
+export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_PROVIDER_AUTHORIZED_SIGNATORY_DID: "did:web:provider-signatory.example.org";
+export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_AUTHORIZED_SIGNATORY_DID: "did:web:consumer-signatory.example.org";
 export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SMART_SCOPE: "organization/Composition.rs?subject=did:web:api.acme.org:individual:123&section=LOINC|48765-2";
 export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CLAIMS: Readonly<{
     readonly "Contract.identifier": "urn:uuid:inter-tenant-access-contract-001";
@@ -37,8 +39,8 @@ export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CLAIMS: Readonly<{
     readonly "Contract.applies-end": "2027-06-29T00:00:00.000Z";
     readonly "Contract.provider-organization": "did:web:api.acme.org";
     readonly "Contract.consumer-organization": "did:web:api.lab.org";
-    readonly "Contract.provider-authorized-signatory": "did:web:people.acme.org:controllers:primary";
-    readonly "Contract.consumer-authorized-signatory": "did:web:people.lab.org:controllers:primary";
+    readonly "Contract.provider-authorized-signatory": "did:web:provider-signatory.example.org";
+    readonly "Contract.consumer-authorized-signatory": "did:web:consumer-signatory.example.org";
     readonly "Contract.security-label": "organization/Composition.rs";
     readonly "Contract.term-type": "HRESCH";
     readonly "Contract.instantiates-uri": "https://portal.example.org/files/contracts/inter-tenant-contract-acme-lab-001.pdf";

package/dist/examples/inter-tenant-access-contract.js

@@ -7,7 +7,7 @@ import { ClaimInterTenantAccessContract } from '../models/inter-tenant-access-co
 import { BundleEntryClaimsContext } from '../models/communication-attached-bundle-session.js';
 import { buildInterTenantAccessContractCredential, buildInterTenantAccessContractResource, getInterTenantAccessContractBlockchainReference, } from '../utils/inter-tenant-access-contract.js';
 import { buildMemberAuthorizationUrn, buildOrganizationAuthorizationUrn, } from '../utils/organization-authorization-urn.js';
-import { EXAMPLE_API_ORGANIZATION_DID, EXAMPLE_CONTROLLER_DID, EXAMPLE_HEALTHCARE_ACTOR_ROLE_PHYSICIAN, EXAMPLE_JURISDICTION, EXAMPLE_RESEARCH_API_ORGANIZATION_DID, EXAMPLE_RESEARCH_CONTROLLER_DID, EXAMPLE_RESEARCH_TENANT_IDENTIFIER, EXAMPLE_SECTOR, EXAMPLE_TENANT_IDENTIFIER, } from './shared.js';
+import { EXAMPLE_API_ORGANIZATION_DID, EXAMPLE_CONTROLLER_DID, EXAMPLE_HEALTHCARE_ACTOR_ROLE_PHYSICIAN, EXAMPLE_JURISDICTION, EXAMPLE_RESEARCH_API_ORGANIZATION_DID, EXAMPLE_RESEARCH_TENANT_IDENTIFIER, EXAMPLE_SECTOR, EXAMPLE_TENANT_IDENTIFIER, } from './shared.js';
 /**
  * Shared synthetic inter-tenant contract fixtures reused by GW and SDK tests.
  *
@@ -37,6 +37,8 @@ export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SUBJECT_DID = 'did:web:api.acm
 export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SECTION = 'LOINC|48765-2';
 export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_AGREEMENT_PDF_URL = 'https://portal.example.org/files/contracts/inter-tenant-contract-acme-lab-001.pdf';
 export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_PROFESSIONAL_DID = `${EXAMPLE_RESEARCH_API_ORGANIZATION_DID}:employee:researcher1@lab.org:${EXAMPLE_HEALTHCARE_ACTOR_ROLE_PHYSICIAN}`;
+export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_PROVIDER_AUTHORIZED_SIGNATORY_DID = 'did:web:provider-signatory.example.org';
+export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_AUTHORIZED_SIGNATORY_DID = 'did:web:consumer-signatory.example.org';
 export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SMART_SCOPE = `${EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SCOPE}?subject=${EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SUBJECT_DID}&section=${EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SECTION}`;
 export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CLAIMS = Object.freeze({
     [ClaimInterTenantAccessContract.identifier]: EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_ID,
@@ -47,8 +49,8 @@ export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CLAIMS = Object.freeze({
     [ClaimInterTenantAccessContract.appliesEnd]: EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_VALID_UNTIL,
     [ClaimInterTenantAccessContract.providerOrganization]: EXAMPLE_API_ORGANIZATION_DID,
     [ClaimInterTenantAccessContract.consumerOrganization]: EXAMPLE_RESEARCH_API_ORGANIZATION_DID,
-    [ClaimInterTenantAccessContract.providerAuthorizedSignatory]: EXAMPLE_CONTROLLER_DID,
-    [ClaimInterTenantAccessContract.consumerAuthorizedSignatory]: EXAMPLE_RESEARCH_CONTROLLER_DID,
+    [ClaimInterTenantAccessContract.providerAuthorizedSignatory]: EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_PROVIDER_AUTHORIZED_SIGNATORY_DID,
+    [ClaimInterTenantAccessContract.consumerAuthorizedSignatory]: EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_AUTHORIZED_SIGNATORY_DID,
     [ClaimInterTenantAccessContract.capability]: EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SCOPE,
     [ClaimInterTenantAccessContract.purpose]: EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_PURPOSE,
     [ClaimInterTenantAccessContract.instantiatesUri]: EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_AGREEMENT_PDF_URL,
@@ -65,13 +67,13 @@ export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CREDENTIAL = Object.freeze(bui
             {
                 type: 'JsonWebSignature2020',
                 proofPurpose: 'contractAgreement',
-                verificationMethod: `${EXAMPLE_CONTROLLER_DID}#contract-agreement`,
+                verificationMethod: `${EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_PROVIDER_AUTHORIZED_SIGNATORY_DID}#contract-agreement`,
                 jws: 'provider-authorized-signatory-proof',
             },
             {
                 type: 'JsonWebSignature2020',
                 proofPurpose: 'contractAgreement',
-                verificationMethod: `${EXAMPLE_RESEARCH_CONTROLLER_DID}#contract-agreement`,
+                verificationMethod: `${EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_AUTHORIZED_SIGNATORY_DID}#contract-agreement`,
                 jws: 'consumer-authorized-signatory-proof',
             },
         ],

package/dist/utils/organization-test-network-credential.d.ts

@@ -51,7 +51,6 @@ export type OrganizationTestNetworkCredentialInput = Readonly<{
     controllerKeyMaterial: string;
     applicationId: string;
     accessPath: 'partner' | 'test-network';
-    targetNetwork: 'test-network' | 'network';
     /**
      * @deprecated Postal-address verification is a separate production-readiness
      * flow. This compatibility input is ignored and is never embedded in a Test
@@ -64,6 +63,8 @@ export type OrganizationTestNetworkCredentialInput = Readonly<{
  * Builds the immutable VC that a controller receives out-of-band and attaches
  * to `Organization/_transaction`. Postal-address verification is deliberately
  * outside this credential and may be completed independently before production.
+ * Test Network scope is expressed by `OrganizationTestNetworkCredential` in
+ * the signed `type[]`, not by a non-schema.org credential-subject property.
  */
 export declare function buildOrganizationTestNetworkCredential(input: OrganizationTestNetworkCredentialInput): VerifiableCredentialV2;
 /**

package/dist/utils/organization-test-network-credential.js

@@ -19,6 +19,8 @@ function required(value, name) {
  * Builds the immutable VC that a controller receives out-of-band and attaches
  * to `Organization/_transaction`. Postal-address verification is deliberately
  * outside this credential and may be completed independently before production.
+ * Test Network scope is expressed by `OrganizationTestNetworkCredential` in
+ * the signed `type[]`, not by a non-schema.org credential-subject property.
  */
 export function buildOrganizationTestNetworkCredential(input) {
     const applicationId = required(input.applicationId, 'applicationId');
@@ -36,7 +38,6 @@ export function buildOrganizationTestNetworkCredential(input) {
             id: required(input.subjectDid, 'subjectDid'),
             applicationId,
             accessPath: input.accessPath,
-            targetNetwork: input.targetNetwork,
             organization: {
                 legalName: required(input.legalName, 'legalName'),
                 identifier: organizationIdentifier,

package/dist/utils/test-network-organization-credentials.d.ts

@@ -31,5 +31,8 @@ export type BuildTestNetworkOrganizationCredentialSetInput = Readonly<{
  * must still be added to every returned credential.
  */
 export declare function buildTestNetworkOrganizationCredentialSet(input: BuildTestNetworkOrganizationCredentialSetInput): TestNetworkOrganizationCredentialSet;
-/** Deterministic detached-proof payload for one of the three Test Network VCs. */
+/**
+ * Deterministic detached-proof payload for one of the three Test Network VCs.
+ * The signed `TestNetworkCredential` type is the sole environment marker.
+ */
 export declare function canonicalizeTestNetworkOrganizationCredential(credential: VerifiableCredentialV2): string;

package/dist/utils/test-network-organization-credentials.js

@@ -37,7 +37,6 @@ export function buildTestNetworkOrganizationCredentialSet(input) {
             id: `urn:sha256:${required(input.pdfSha256, 'pdfSha256')}`,
             documentVersion: required(input.documentVersion, 'documentVersion'),
             applicationId,
-            targetNetwork: 'test-network',
         }];
     const base = {
         '@context': [W3cCredentialContexts.V2, 'https://schema.org'],
@@ -62,7 +61,6 @@ export function buildTestNetworkOrganizationCredentialSet(input) {
             ...(identifierType === 'taxID' ? { taxID: organizationIdentifier } : {}),
             address: { '@type': 'PostalAddress', addressCountry },
             makesOffer: { '@type': 'Offer', category: serviceCategory },
-            targetNetwork: 'test-network',
         },
     };
     const representative = {
@@ -87,7 +85,6 @@ export function buildTestNetworkOrganizationCredentialSet(input) {
                     ? { taxID: organizationIdentifier }
                     : { identifier: { additionalType: identifierType, value: organizationIdentifier } }),
             },
-            targetNetwork: 'test-network',
         },
     };
     const controller = {
@@ -117,7 +114,6 @@ export function buildTestNetworkOrganizationCredentialSet(input) {
                 hasOccupation: { '@type': 'Occupation', occupationalCategory: 'ISCO-08|1330' },
                 hasCredential: { material: required(input.controllerKeyMaterial, 'controllerKeyMaterial') },
             },
-            targetNetwork: 'test-network',
         },
     };
     return [organization, representative, controller];
@@ -132,13 +128,16 @@ function canonicalizeValue(value) {
         .sort(([left], [right]) => left.localeCompare(right))
         .map(([key, nested]) => [key, canonicalizeValue(nested)]));
 }
-/** Deterministic detached-proof payload for one of the three Test Network VCs. */
+/**
+ * Deterministic detached-proof payload for one of the three Test Network VCs.
+ * The signed `TestNetworkCredential` type is the sole environment marker.
+ */
 export function canonicalizeTestNetworkOrganizationCredential(credential) {
     if (!TestNetworkOrganizationCredentialTypes.some(type => credential.type.includes(type))) {
         throw new Error('Credential is not a Test Network organization credential.');
     }
-    if (credential.credentialSubject?.targetNetwork !== 'test-network') {
-        throw new Error('Test Network organization credential requires targetNetwork=test-network.');
+    if (!credential.type.includes(EnvironmentCredentialTypes.TestNetworkCredential)) {
+        throw new Error('Test Network organization credential requires TestNetworkCredential in type[].');
     }
     return JSON.stringify(canonicalizeValue(credential));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-common-utils-ts",
-  "version": "2.5.19",
+  "version": "2.5.21",
   "publishConfig": {
     "access": "public"
   },