gdc-common-utils-ts 2.7.1 → 2.7.2

package/dist/models/consent-rule.d.ts

@@ -47,6 +47,22 @@ export declare const ConsentDecisions: Readonly<{
     readonly Deny: "deny";
 }>;
 export type ConsentDecision = typeof ConsentDecisions[keyof typeof ConsentDecisions];
+/**
+ * Canonical FHIR R5 Consent lifecycle states.
+ *
+ * `draft` is the only state used for a professional permission request. A
+ * draft is carried to the controller for review and must never participate in
+ * authorization evaluation. Only `active` consent rules can grant access.
+ */
+export declare const ConsentStatuses: Readonly<{
+    readonly Draft: "draft";
+    readonly Active: "active";
+    readonly Inactive: "inactive";
+    readonly NotDone: "not-done";
+    readonly EnteredInError: "entered-in-error";
+    readonly Unknown: "unknown";
+}>;
+export type ConsentStatus = typeof ConsentStatuses[keyof typeof ConsentStatuses];
 /**
  * Defines the structured, query-optimized format for storing a single, atomic consent rule
  * in the vault (e.g., Firestore, CouchDB).
@@ -67,6 +83,8 @@ export interface ConsentRule {
      * Value MUST be "org.hl7.fhir.api".
      */
     '@context': 'org.hl7.fhir.api';
+    /** FHIR Consent lifecycle state; authorization evaluators accept only `active`. */
+    'Consent.status'?: ConsentStatus;
     /**
      * The decision of the rule: permit or deny.
      * Derived from the `org.hl7.fhir.api.Consent.decision` claim.

package/dist/models/consent-rule.js

@@ -48,3 +48,18 @@ export const ConsentDecisions = Object.freeze({
     Permit: 'permit',
     Deny: 'deny',
 });
+/**
+ * Canonical FHIR R5 Consent lifecycle states.
+ *
+ * `draft` is the only state used for a professional permission request. A
+ * draft is carried to the controller for review and must never participate in
+ * authorization evaluation. Only `active` consent rules can grant access.
+ */
+export const ConsentStatuses = Object.freeze({
+    Draft: 'draft',
+    Active: 'active',
+    Inactive: 'inactive',
+    NotDone: 'not-done',
+    EnteredInError: 'entered-in-error',
+    Unknown: 'unknown',
+});

package/dist/utils/consent-entry-editor.d.ts

@@ -3,7 +3,7 @@
  * - Read `ARCHITECTURE.md` and `CONTRIBUTING.md` before changing this module.
  * - This file owns only the typed editor for one staged Consent entry.
  */
-import { type ConsentDecision } from '../models/consent-rule';
+import { type ConsentDecision, type ConsentStatus } from '../models/consent-rule';
 import { BundleEntryEditor } from './bundle-entry-editor';
 /**
  * Typed editor for one Consent permission staged inside a Bundle.
@@ -17,6 +17,8 @@ export declare class ConsentEntryEditor extends BundleEntryEditor {
     ensureIdentifier(): string;
     setSubject(value?: string | null): this;
     getSubject(): string | undefined;
+    setStatus(value?: ConsentStatus | null): this;
+    getStatus(): string | undefined;
     setDecision(value?: ConsentDecision | null): this;
     getDecision(): string | undefined;
     setActorIdentifierList(values: readonly string[]): this;

package/dist/utils/consent-entry-editor.js

@@ -43,6 +43,8 @@ export class ConsentEntryEditor extends BundleEntryEditor {
     }
     setSubject(value) { return this.setOptionalText(ClaimConsent.subject, value); }
     getSubject() { return this.getOptionalText(ClaimConsent.subject); }
+    setStatus(value) { return this.setOptionalText(ClaimConsent.status, value); }
+    getStatus() { return this.getOptionalText(ClaimConsent.status); }
     setDecision(value) { return this.setOptionalText(ClaimConsent.decision, value); }
     getDecision() { return this.getOptionalText(ClaimConsent.decision); }
     setActorIdentifierList(values) { return this.setList(ClaimConsent.actorIdentifier, values); }

package/dist/utils/consent.d.ts

@@ -197,6 +197,7 @@ export declare function resolveConsentActor(actor: ConsentActorDescriptor): Reso
  *
  * A rule is active when:
  * - it matches the requested subject when one is provided
+ * - `Consent.status` is absent for legacy compatibility or is exactly `active`
  * - `Consent.period-start` is absent or already effective
  * - `Consent.period-end` is absent or still in the future
  *

package/dist/utils/consent.js

@@ -1,5 +1,5 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
-import { ClaimConsent } from '../models/consent-rule.js';
+import { ClaimConsent, ConsentStatuses } from '../models/consent-rule.js';
 import { assignCidToClaimsId } from './fhir-cid.js';
 /**
  * Normalizes a phone string into a compact token form.
@@ -512,6 +512,7 @@ export function resolveConsentActor(actor) {
  *
  * A rule is active when:
  * - it matches the requested subject when one is provided
+ * - `Consent.status` is absent for legacy compatibility or is exactly `active`
  * - `Consent.period-start` is absent or already effective
  * - `Consent.period-end` is absent or still in the future
  *
@@ -523,6 +524,9 @@ export function isConsentRuleActive(rule, options = {}) {
     if (options.subject && String(readConsentRuleClaim(rule, ClaimConsent.subject) || '').trim() !== String(options.subject || '').trim()) {
         return false;
     }
+    const status = String(readConsentRuleClaim(rule, ClaimConsent.status) || '').trim();
+    if (status && status !== ConsentStatuses.Active)
+        return false;
     const now = options.now instanceof Date
         ? options.now.getTime()
         : options.now

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-common-utils-ts",
-  "version": "2.7.1",
+  "version": "2.7.2",
   "publishConfig": {
     "access": "public"
   },