gdc-common-utils-ts 2.7.1 → 2.7.3

package/dist/examples/license.d.ts

@@ -44,6 +44,7 @@ export declare const EXAMPLE_LICENSE_ISSUE_INPUT: Readonly<{
     readonly role: "ISCO-08|2211";
     readonly userClass: "employee";
     readonly type: "mobile";
+    readonly subjectId: "urn:uuid:employee-controller-active-001";
 }>;
 export declare const EXAMPLE_LICENSE_PURCHASE_INPUT: Readonly<{
     readonly quantity: 2;

package/dist/examples/license.js

@@ -41,6 +41,7 @@ export const EXAMPLE_LICENSE_ISSUE_INPUT = Object.freeze({
     role: EXAMPLE_HEALTHCARE_ACTOR_ROLE_GENERALIST_MEDICAL_PRACTITIONER,
     userClass: DeviceUserClasses.Employee,
     type: DeviceAppTypes.Mobile,
+    subjectId: EXAMPLE_LICENSE_SUBJECT_ID_ACTIVE,
 });
 export const EXAMPLE_LICENSE_PURCHASE_INPUT = Object.freeze({
     quantity: EXAMPLE_LICENSE_SEAT_UUIDS.length,

package/dist/models/consent-rule.d.ts

@@ -47,6 +47,22 @@ export declare const ConsentDecisions: Readonly<{
     readonly Deny: "deny";
 }>;
 export type ConsentDecision = typeof ConsentDecisions[keyof typeof ConsentDecisions];
+/**
+ * Canonical FHIR R5 Consent lifecycle states.
+ *
+ * `draft` is the only state used for a professional permission request. A
+ * draft is carried to the controller for review and must never participate in
+ * authorization evaluation. Only `active` consent rules can grant access.
+ */
+export declare const ConsentStatuses: Readonly<{
+    readonly Draft: "draft";
+    readonly Active: "active";
+    readonly Inactive: "inactive";
+    readonly NotDone: "not-done";
+    readonly EnteredInError: "entered-in-error";
+    readonly Unknown: "unknown";
+}>;
+export type ConsentStatus = typeof ConsentStatuses[keyof typeof ConsentStatuses];
 /**
  * Defines the structured, query-optimized format for storing a single, atomic consent rule
  * in the vault (e.g., Firestore, CouchDB).
@@ -67,6 +83,8 @@ export interface ConsentRule {
      * Value MUST be "org.hl7.fhir.api".
      */
     '@context': 'org.hl7.fhir.api';
+    /** FHIR Consent lifecycle state; authorization evaluators accept only `active`. */
+    'Consent.status'?: ConsentStatus;
     /**
      * The decision of the rule: permit or deny.
      * Derived from the `org.hl7.fhir.api.Consent.decision` claim.

package/dist/models/consent-rule.js

@@ -48,3 +48,18 @@ export const ConsentDecisions = Object.freeze({
     Permit: 'permit',
     Deny: 'deny',
 });
+/**
+ * Canonical FHIR R5 Consent lifecycle states.
+ *
+ * `draft` is the only state used for a professional permission request. A
+ * draft is carried to the controller for review and must never participate in
+ * authorization evaluation. Only `active` consent rules can grant access.
+ */
+export const ConsentStatuses = Object.freeze({
+    Draft: 'draft',
+    Active: 'active',
+    Inactive: 'inactive',
+    NotDone: 'not-done',
+    EnteredInError: 'entered-in-error',
+    Unknown: 'unknown',
+});

package/dist/utils/consent-entry-editor.d.ts

@@ -3,7 +3,7 @@
  * - Read `ARCHITECTURE.md` and `CONTRIBUTING.md` before changing this module.
  * - This file owns only the typed editor for one staged Consent entry.
  */
-import { type ConsentDecision } from '../models/consent-rule';
+import { type ConsentDecision, type ConsentStatus } from '../models/consent-rule';
 import { BundleEntryEditor } from './bundle-entry-editor';
 /**
  * Typed editor for one Consent permission staged inside a Bundle.
@@ -17,6 +17,8 @@ export declare class ConsentEntryEditor extends BundleEntryEditor {
     ensureIdentifier(): string;
     setSubject(value?: string | null): this;
     getSubject(): string | undefined;
+    setStatus(value?: ConsentStatus | null): this;
+    getStatus(): string | undefined;
     setDecision(value?: ConsentDecision | null): this;
     getDecision(): string | undefined;
     setActorIdentifierList(values: readonly string[]): this;

package/dist/utils/consent-entry-editor.js

@@ -43,6 +43,8 @@ export class ConsentEntryEditor extends BundleEntryEditor {
     }
     setSubject(value) { return this.setOptionalText(ClaimConsent.subject, value); }
     getSubject() { return this.getOptionalText(ClaimConsent.subject); }
+    setStatus(value) { return this.setOptionalText(ClaimConsent.status, value); }
+    getStatus() { return this.getOptionalText(ClaimConsent.status); }
     setDecision(value) { return this.setOptionalText(ClaimConsent.decision, value); }
     getDecision() { return this.getOptionalText(ClaimConsent.decision); }
     setActorIdentifierList(values) { return this.setList(ClaimConsent.actorIdentifier, values); }

package/dist/utils/consent.d.ts

@@ -197,6 +197,7 @@ export declare function resolveConsentActor(actor: ConsentActorDescriptor): Reso
  *
  * A rule is active when:
  * - it matches the requested subject when one is provided
+ * - `Consent.status` is absent for legacy compatibility or is exactly `active`
  * - `Consent.period-start` is absent or already effective
  * - `Consent.period-end` is absent or still in the future
  *

package/dist/utils/consent.js

@@ -1,5 +1,5 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
-import { ClaimConsent } from '../models/consent-rule.js';
+import { ClaimConsent, ConsentStatuses } from '../models/consent-rule.js';
 import { assignCidToClaimsId } from './fhir-cid.js';
 /**
  * Normalizes a phone string into a compact token form.
@@ -512,6 +512,7 @@ export function resolveConsentActor(actor) {
  *
  * A rule is active when:
  * - it matches the requested subject when one is provided
+ * - `Consent.status` is absent for legacy compatibility or is exactly `active`
  * - `Consent.period-start` is absent or already effective
  * - `Consent.period-end` is absent or still in the future
  *
@@ -523,6 +524,9 @@ export function isConsentRuleActive(rule, options = {}) {
     if (options.subject && String(readConsentRuleClaim(rule, ClaimConsent.subject) || '').trim() !== String(options.subject || '').trim()) {
         return false;
     }
+    const status = String(readConsentRuleClaim(rule, ClaimConsent.status) || '').trim();
+    if (status && status !== ConsentStatuses.Active)
+        return false;
     const now = options.now instanceof Date
         ? options.now.getTime()
         : options.now

package/dist/utils/license.d.ts

@@ -100,6 +100,8 @@ export type LicenseIssueInput = Readonly<{
     ownerOrganizationId?: string;
     /** Card/individual DID granted by the invitation after acceptance. */
     subjectDid?: string;
+    /** Technical resource id of the employee/member that consumes the seat. */
+    subjectId?: string;
     /** Existing RelatedPerson/contact selected before the invitation. */
     relatedPersonId?: string;
     /** Stable invitation workflow identifier; not the license id or code. */
@@ -158,6 +160,7 @@ export declare function buildLicenseIssueEntry(input: LicenseIssueInput): {
         claims: LicenseClaims;
         ownerOrganizationId?: string;
         subjectDid?: string;
+        subjectId?: string;
         relatedPersonId?: string;
         invitationId?: string;
     };

package/dist/utils/license.js

@@ -205,6 +205,9 @@ export function buildLicenseIssueEntry(input) {
             ...(String(input.subjectDid || '').trim()
                 ? { subjectDid: String(input.subjectDid).trim() }
                 : {}),
+            ...(String(input.subjectId || '').trim()
+                ? { subjectId: String(input.subjectId).trim() }
+                : {}),
             ...(String(input.relatedPersonId || '').trim()
                 ? { relatedPersonId: String(input.relatedPersonId).trim() }
                 : {}),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-common-utils-ts",
-  "version": "2.7.1",
+  "version": "2.7.3",
   "publishConfig": {
     "access": "public"
   },