gdc-common-utils-ts 2.9.10 → 2.9.12

package/README.md

@@ -283,13 +283,23 @@ blockchain asset.
 
 ### Convert
 
-The `convert` export exposes resource-specific FHIR R4 conversion helpers such as:
+The `convert` export exposes resource-specific FHIR conversion helpers such as:
 
 - `medicationStatementFlatToFhirR4`
 - `medicationStatementFhirR4ToFlat`
 - `observationFromFlatToFhirR4`
 - `documentReferenceFlatToFhirR4`
 - `compositionFlatToFhirR4`
+- `consentFlatToFhirR4` / `consentFhirR4ToFlat`
+- `consentFlatToFhirR5` / `consentFhirR5ToFlat`
+
+Consent claims are version-neutral. Consent validity, data validity, grantor,
+grantee, manager, enforcer, actor role, action, purpose, resource/content codes
+and an optional source attachment stay in `resource.meta.claims`. Explicit R4
+or R5 export maps only concepts supported by that version. For example, R5
+exports `Consent.controller`, while R4 does not invent an equivalent field.
+Computable policy content such as ODRL remains in `sourceAttachment`; its
+profile must validate semantic parity before projection.
 
 Example:
 
@@ -677,6 +687,9 @@ when the active runtime variable is really the subject identifier.
 - [`__tests__/utils-consent-claim-helpers.test.ts`](__tests__/utils-consent-claim-helpers.test.ts)
 
 These helpers are the shared base for consent claim construction across GW and SDKs.
+The canonical claim catalogue also distinguishes `Consent.period-*` (the
+Consent's effective period) from `Consent.data-period-*` (the period of the
+governed data).
 
 ### Public module surfaces
 

package/dist/constants/fhir-resource-types.d.ts

@@ -41,6 +41,7 @@ export declare const ResourceTypesFhirR4: Readonly<{
     readonly PractitionerRole: "PractitionerRole";
     readonly Procedure: "Procedure";
     readonly RelatedPerson: "RelatedPerson";
+    readonly ResearchStudy: "ResearchStudy";
     readonly ResearchSubject: "ResearchSubject";
     readonly Specimen: "Specimen";
 }>;
@@ -89,6 +90,7 @@ export declare const FhirResourceTypes: Readonly<{
     readonly PractitionerRole: "PractitionerRole";
     readonly Procedure: "Procedure";
     readonly RelatedPerson: "RelatedPerson";
+    readonly ResearchStudy: "ResearchStudy";
     readonly ResearchSubject: "ResearchSubject";
     readonly Specimen: "Specimen";
 }>;
@@ -131,6 +133,7 @@ export declare const ResourceTypesFhirR5: Readonly<{
     readonly PractitionerRole: "PractitionerRole";
     readonly Procedure: "Procedure";
     readonly RelatedPerson: "RelatedPerson";
+    readonly ResearchStudy: "ResearchStudy";
     readonly ResearchSubject: "ResearchSubject";
     readonly Specimen: "Specimen";
 }>;

package/dist/constants/fhir-resource-types.js

@@ -41,6 +41,7 @@ export const ResourceTypesFhirR4 = Object.freeze({
     PractitionerRole: 'PractitionerRole',
     Procedure: 'Procedure',
     RelatedPerson: 'RelatedPerson',
+    ResearchStudy: 'ResearchStudy',
     ResearchSubject: 'ResearchSubject',
     Specimen: 'Specimen',
 });

package/dist/convert/convert-consent.d.ts

@@ -1,3 +1,9 @@
 import type { FhirResource, FlatClaims } from './convert-shared';
+/** Converts native FHIR R4 Consent into the canonical flat claims contract. */
 export declare function consentFhirR4ToFlat(resource: FhirResource, context?: string): FlatClaims;
+/** Projects canonical Consent claims to native FHIR R4. ODRL stays in sourceAttachment. */
 export declare function consentFlatToFhirR4(claims: FlatClaims): FhirResource;
+/** Converts native FHIR R5 Consent into the same version-neutral flat claims contract. */
+export declare function consentFhirR5ToFlat(resource: FhirResource, context?: string): FlatClaims;
+/** Projects canonical Consent claims to native FHIR R5. ODRL stays in sourceAttachment. */
+export declare function consentFlatToFhirR5(claims: FlatClaims): FhirResource;

package/dist/convert/convert-consent.js

@@ -1,78 +1,174 @@
 // Copyright 2026 Conéctate Soluciones y Aplicaciones SL under the Apache License, Version 2.0.
 import { ClaimConsent } from '../models/consent-rule.js';
-import { codingFromValue, codingToValue, referenceToValue, } from './convert-shared.js';
+import { ResourceTypesFhirR4 } from '../constants/fhir-resource-types.js';
+import { codingFromValue, codingToValue, referenceToValue } from './convert-shared.js';
+const firstReference = (value) => referenceToValue(value?.[0]);
+const conceptFromClaim = (value, display) => {
+    const coding = codingFromValue(value)?.map((item) => ({ ...item, ...(display ? { display } : {}) }));
+    return coding ? [{ coding }] : undefined;
+};
+const referencesFromClaim = (value) => value ? value.split(',').filter(Boolean).map((reference) => ({ reference })) : undefined;
+const codingsFromClaim = (value) => {
+    const codings = value?.split(',').filter(Boolean).flatMap((token) => codingFromValue(token) || []);
+    return codings?.length ? codings : undefined;
+};
+const codingsToClaim = (value) => {
+    const tokens = (value || []).map((coding) => codingToValue(coding)).filter(Boolean);
+    return tokens.length ? tokens.join(',') : undefined;
+};
+const conceptsToClaim = (value) => {
+    const tokens = (value || []).flatMap((concept) => concept.coding || []).map((coding) => codingToValue(coding)).filter(Boolean);
+    return tokens.length ? tokens.join(',') : undefined;
+};
+const conceptsFromClaim = (value, display) => codingsFromClaim(value)?.map((coding) => ({ coding: [{ ...coding, ...(display ? { display } : {}) }] }));
+const conceptWithCodingsFromClaim = (value) => {
+    const coding = codingsFromClaim(value);
+    return coding ? { coding } : undefined;
+};
+const attachmentFromClaims = (claims) => claims[ClaimConsent.attachmentContentType] || claims[ClaimConsent.attachmentData]
+    ? { contentType: claims[ClaimConsent.attachmentContentType], data: claims[ClaimConsent.attachmentData] }
+    : undefined;
+const periodFromClaims = (claims, start, end) => claims[start] || claims[end] ? { start: claims[start], end: claims[end] } : undefined;
+/** Converts native FHIR R4 Consent into the canonical flat claims contract. */
 export function consentFhirR4ToFlat(resource, context = 'org.hl7.fhir.api') {
-    const concept = resource.category?.[0];
+    const category = resource.category?.[0];
     const provision = resource.provision;
+    const attachment = resource.sourceAttachment;
     const scope = resource.scope;
     const policyRule = resource.policyRule;
     return {
         '@context': context,
-        [ClaimConsent.identifier]: resource.identifier?.[0]?.value
-            || resource.id,
+        [ClaimConsent.identifier]: resource.identifier?.[0]?.value || resource.id,
         [ClaimConsent.status]: resource.status,
         [ClaimConsent.subject]: referenceToValue(resource.patient),
         [ClaimConsent.patient]: referenceToValue(resource.patient),
         [ClaimConsent.date]: resource.dateTime,
         [ClaimConsent.decision]: provision?.type,
-        [ClaimConsent.action]: codingToValue(provision?.action?.[0]?.coding?.[0]),
         [ClaimConsent.periodStart]: provision?.period?.start,
         [ClaimConsent.periodEnd]: provision?.period?.end,
-        [ClaimConsent.purpose]: codingToValue(provision?.purpose?.[0]),
+        [ClaimConsent.dataPeriodStart]: provision?.dataPeriod?.start,
+        [ClaimConsent.dataPeriodEnd]: provision?.dataPeriod?.end,
+        [ClaimConsent.grantor]: firstReference(resource.performer),
+        [ClaimConsent.grantee]: referenceToValue(provision?.actor?.[0]?.reference),
+        [ClaimConsent.manager]: firstReference(resource.organization),
+        [ClaimConsent.actorIdentifier]: referenceToValue(provision?.actor?.[0]?.reference),
+        [ClaimConsent.actorRole]: codingsToClaim(provision?.actor?.[0]?.role?.coding),
+        [ClaimConsent.action]: conceptsToClaim(provision?.action),
+        [ClaimConsent.purpose]: codingsToClaim(provision?.purpose),
+        [ClaimConsent.securityLabel]: codingsToClaim(provision?.securityLabel),
+        [ClaimConsent.resourceType]: codingsToClaim(provision?.class),
+        [ClaimConsent.provisionCode]: conceptsToClaim(provision?.code),
+        [ClaimConsent.provisionCodeDisplay]: provision?.code?.[0]?.coding?.[0]?.display,
         [ClaimConsent.sourceReference]: referenceToValue(resource.sourceReference),
-        [ClaimConsent.category]: codingToValue(concept?.coding?.[0]),
-        [ClaimConsent.categoryText]: concept?.text,
-        [ClaimConsent.categoryDisplay]: concept?.coding?.[0]?.display,
+        [ClaimConsent.attachmentContentType]: attachment?.contentType,
+        [ClaimConsent.attachmentData]: attachment?.data,
+        [ClaimConsent.category]: codingToValue(category?.coding?.[0]),
+        [ClaimConsent.categoryText]: category?.text,
+        [ClaimConsent.categoryDisplay]: category?.coding?.[0]?.display,
         [ClaimConsent.scope]: codingToValue(scope?.coding?.[0]),
         [ClaimConsent.scopeDisplay]: scope?.coding?.[0]?.display,
         [ClaimConsent.policyRule]: codingToValue(policyRule?.coding?.[0]),
-        [ClaimConsent.provisionCode]: codingToValue(provision?.code?.[0]?.coding?.[0]),
-        [ClaimConsent.provisionCodeDisplay]: provision?.code?.[0]?.coding?.[0]?.display,
     };
 }
+/** Projects canonical Consent claims to native FHIR R4. ODRL stays in sourceAttachment. */
 export function consentFlatToFhirR4(claims) {
-    const coding = codingFromValue(claims[ClaimConsent.category])?.map((item) => ({
-        ...item,
-        ...(claims[ClaimConsent.categoryDisplay]
-            ? { display: claims[ClaimConsent.categoryDisplay] }
-            : {}),
-    }));
-    const actionCoding = codingFromValue(claims[ClaimConsent.action]);
-    const purposeCoding = codingFromValue(claims[ClaimConsent.purpose]);
-    const scopeCoding = codingFromValue(claims[ClaimConsent.scope])?.map((item) => ({ ...item, ...(claims[ClaimConsent.scopeDisplay] ? { display: claims[ClaimConsent.scopeDisplay] } : {}) }));
-    const provisionCodeCoding = codingFromValue(claims[ClaimConsent.provisionCode])?.map((item) => ({ ...item, ...(claims[ClaimConsent.provisionCodeDisplay] ? { display: claims[ClaimConsent.provisionCodeDisplay] } : {}) }));
+    const actorRole = conceptWithCodingsFromClaim(claims[ClaimConsent.actorRole]);
+    const actorReference = claims[ClaimConsent.grantee] || claims[ClaimConsent.actorIdentifier];
+    const provisionCode = conceptsFromClaim(claims[ClaimConsent.provisionCode], claims[ClaimConsent.provisionCodeDisplay]);
+    const attachment = attachmentFromClaims(claims);
     return {
-        resourceType: 'Consent',
+        resourceType: ResourceTypesFhirR4.Consent,
         identifier: claims[ClaimConsent.identifier] ? [{ value: claims[ClaimConsent.identifier] }] : undefined,
         status: claims[ClaimConsent.status],
-        scope: scopeCoding ? { coding: scopeCoding } : undefined,
-        policyRule: claims[ClaimConsent.policyRule] ? { coding: codingFromValue(claims[ClaimConsent.policyRule]) } : undefined,
-        patient: claims[ClaimConsent.subject] || claims[ClaimConsent.patient]
-            ? { reference: claims[ClaimConsent.subject] || claims[ClaimConsent.patient] }
-            : undefined,
+        scope: conceptFromClaim(claims[ClaimConsent.scope], claims[ClaimConsent.scopeDisplay])?.[0],
+        category: conceptFromClaim(claims[ClaimConsent.category], claims[ClaimConsent.categoryDisplay]),
+        patient: claims[ClaimConsent.subject] || claims[ClaimConsent.patient] ? { reference: claims[ClaimConsent.subject] || claims[ClaimConsent.patient] } : undefined,
         dateTime: claims[ClaimConsent.date],
-        sourceReference: claims[ClaimConsent.sourceReference]
-            ? { reference: claims[ClaimConsent.sourceReference] }
-            : undefined,
-        category: coding || claims[ClaimConsent.categoryText] ? [{
-                ...(coding ? { coding } : {}),
-                ...(claims[ClaimConsent.categoryText] ? { text: claims[ClaimConsent.categoryText] } : {}),
-            }] : undefined,
-        provision: claims[ClaimConsent.decision]
-            || claims[ClaimConsent.periodStart]
-            || claims[ClaimConsent.periodEnd]
-            || actionCoding
-            || purposeCoding
-            || provisionCodeCoding
-            ? {
-                type: claims[ClaimConsent.decision],
-                period: claims[ClaimConsent.periodStart] || claims[ClaimConsent.periodEnd]
-                    ? { start: claims[ClaimConsent.periodStart], end: claims[ClaimConsent.periodEnd] }
-                    : undefined,
-                action: actionCoding ? [{ coding: actionCoding }] : undefined,
-                purpose: purposeCoding,
-                code: provisionCodeCoding ? [{ coding: provisionCodeCoding }] : undefined,
-            }
-            : undefined,
+        performer: referencesFromClaim(claims[ClaimConsent.grantor]),
+        organization: referencesFromClaim(claims[ClaimConsent.manager]),
+        sourceAttachment: attachment,
+        sourceReference: claims[ClaimConsent.sourceReference] ? { reference: claims[ClaimConsent.sourceReference] } : undefined,
+        policyRule: conceptFromClaim(claims[ClaimConsent.policyRule])?.[0],
+        provision: {
+            type: claims[ClaimConsent.decision],
+            period: periodFromClaims(claims, ClaimConsent.periodStart, ClaimConsent.periodEnd),
+            actor: actorReference ? [{ role: actorRole, reference: { reference: actorReference } }] : undefined,
+            action: conceptsFromClaim(claims[ClaimConsent.action]),
+            purpose: codingsFromClaim(claims[ClaimConsent.purpose]),
+            securityLabel: codingsFromClaim(claims[ClaimConsent.securityLabel]),
+            class: codingsFromClaim(claims[ClaimConsent.resourceType]),
+            code: provisionCode,
+            dataPeriod: periodFromClaims(claims, ClaimConsent.dataPeriodStart, ClaimConsent.dataPeriodEnd),
+        },
+    };
+}
+/** Converts native FHIR R5 Consent into the same version-neutral flat claims contract. */
+export function consentFhirR5ToFlat(resource, context = 'org.hl7.fhir.api') {
+    const categories = resource.category;
+    const scopeConcept = categories?.find((item) => item.coding?.[0]?.system?.includes('consentscope'));
+    const categoryConcept = categories?.find((item) => item !== scopeConcept);
+    const provision = resource.provision?.[0];
+    const attachment = resource.sourceAttachment?.[0];
+    return {
+        '@context': context,
+        [ClaimConsent.identifier]: resource.identifier?.[0]?.value || resource.id,
+        [ClaimConsent.status]: resource.status,
+        [ClaimConsent.subject]: referenceToValue(resource.subject),
+        [ClaimConsent.date]: resource.date,
+        [ClaimConsent.decision]: resource.decision,
+        [ClaimConsent.periodStart]: resource.period?.start,
+        [ClaimConsent.periodEnd]: resource.period?.end,
+        [ClaimConsent.grantor]: firstReference(resource.grantor),
+        [ClaimConsent.grantee]: firstReference(resource.grantee),
+        [ClaimConsent.manager]: firstReference(resource.manager),
+        [ClaimConsent.controller]: firstReference(resource.controller),
+        [ClaimConsent.actorIdentifier]: referenceToValue(provision?.actor?.[0]?.reference) || firstReference(resource.grantee),
+        [ClaimConsent.actorRole]: codingsToClaim(provision?.actor?.[0]?.role?.coding),
+        [ClaimConsent.action]: conceptsToClaim(provision?.action),
+        [ClaimConsent.purpose]: codingsToClaim(provision?.purpose),
+        [ClaimConsent.securityLabel]: codingsToClaim(provision?.securityLabel),
+        [ClaimConsent.documentType]: codingsToClaim(provision?.documentType),
+        [ClaimConsent.resourceType]: codingsToClaim(provision?.resourceType),
+        [ClaimConsent.provisionCode]: conceptsToClaim(provision?.code),
+        [ClaimConsent.dataPeriodStart]: provision?.dataPeriod?.start,
+        [ClaimConsent.dataPeriodEnd]: provision?.dataPeriod?.end,
+        [ClaimConsent.attachmentContentType]: attachment?.contentType,
+        [ClaimConsent.attachmentData]: attachment?.data,
+        [ClaimConsent.sourceReference]: firstReference(resource.sourceReference),
+        [ClaimConsent.scope]: codingToValue(scopeConcept?.coding?.[0]),
+        [ClaimConsent.category]: codingToValue(categoryConcept?.coding?.[0] || categories?.[0]?.coding?.[0]),
+    };
+}
+/** Projects canonical Consent claims to native FHIR R5. ODRL stays in sourceAttachment. */
+export function consentFlatToFhirR5(claims) {
+    const category = conceptFromClaim(claims[ClaimConsent.category], claims[ClaimConsent.categoryDisplay]);
+    const scope = conceptFromClaim(claims[ClaimConsent.scope], claims[ClaimConsent.scopeDisplay]);
+    const actorReference = claims[ClaimConsent.grantee] || claims[ClaimConsent.actorIdentifier];
+    const attachment = attachmentFromClaims(claims);
+    return {
+        resourceType: ResourceTypesFhirR4.Consent,
+        identifier: claims[ClaimConsent.identifier] ? [{ value: claims[ClaimConsent.identifier] }] : undefined,
+        status: claims[ClaimConsent.status],
+        category: [...(scope || []), ...(category || [])],
+        subject: claims[ClaimConsent.subject] ? { reference: claims[ClaimConsent.subject] } : undefined,
+        date: claims[ClaimConsent.date],
+        period: periodFromClaims(claims, ClaimConsent.periodStart, ClaimConsent.periodEnd),
+        grantor: referencesFromClaim(claims[ClaimConsent.grantor]),
+        grantee: referencesFromClaim(claims[ClaimConsent.grantee] || claims[ClaimConsent.actorIdentifier]),
+        manager: referencesFromClaim(claims[ClaimConsent.manager]),
+        controller: referencesFromClaim(claims[ClaimConsent.controller]),
+        sourceAttachment: attachment ? [attachment] : undefined,
+        sourceReference: referencesFromClaim(claims[ClaimConsent.sourceReference]),
+        decision: claims[ClaimConsent.decision],
+        provision: [{
+                actor: actorReference ? [{ role: conceptWithCodingsFromClaim(claims[ClaimConsent.actorRole]), reference: { reference: actorReference } }] : undefined,
+                action: conceptsFromClaim(claims[ClaimConsent.action]),
+                securityLabel: codingsFromClaim(claims[ClaimConsent.securityLabel]),
+                purpose: codingsFromClaim(claims[ClaimConsent.purpose]),
+                documentType: codingsFromClaim(claims[ClaimConsent.documentType]),
+                resourceType: codingsFromClaim(claims[ClaimConsent.resourceType]),
+                code: conceptsFromClaim(claims[ClaimConsent.provisionCode], claims[ClaimConsent.provisionCodeDisplay]),
+                dataPeriod: periodFromClaims(claims, ClaimConsent.dataPeriodStart, ClaimConsent.dataPeriodEnd),
+            }],
     };
 }

package/dist/examples/consent-projection.d.ts

@@ -0,0 +1,28 @@
+/** Reusable, non-production identifiers for Consent R4/R5 projection tests. */
+export declare const CONSENT_PROJECTION_TEST_DATA: Readonly<{
+    identifier: "urn:uuid:9f4105a1-fca1-4b92-a38f-cd40f37da36e";
+    subject: "Patient/consent-subject-test";
+    grantor: "RelatedPerson/consent-grantor-test";
+    grantee: "Organization/consent-grantee-test";
+    manager: "Organization/consent-manager-test";
+    controller: "Organization/consent-enforcer-test";
+    createdAt: "2026-09-08";
+    consentPeriodStart: "2026-09-08T10:00:00Z";
+    consentPeriodEnd: "2026-10-08T10:00:00Z";
+    dataPeriodStart: "2025-09-08T00:00:00Z";
+    dataPeriodEnd: "2026-09-08T00:00:00Z";
+    actorRole: "http://terminology.hl7.org/CodeSystem/v3-RoleCode|PAYOR";
+    action: "http://terminology.hl7.org/CodeSystem/consentaction|access";
+    purpose: "http://terminology.hl7.org/CodeSystem/v3-ActReason|HPAYMT";
+    scope: "http://terminology.hl7.org/CodeSystem/consentscope|patient-privacy";
+    category: "http://loinc.org|59284-0";
+    resourceType: "http://hl7.org/fhir/fhir-types|Observation";
+    provisionCode: "http://loinc.org|85353-1";
+    secondProvisionCode: "http://loinc.org|8310-5";
+    provisionCodeList: "http://loinc.org|85353-1,http://loinc.org|8310-5";
+    securityLabel: "http://terminology.hl7.org/CodeSystem/v3-Confidentiality|R";
+    attachmentContentType: "application/odrl+json";
+    attachmentData: "eyJAdHlwZSI6IkFncmVlbWVudCJ9";
+    odrlOnlyConstraintName: "odrl.profile.max-query-count";
+    odrlOnlyConstraintValue: "1";
+}>;

package/dist/examples/consent-projection.js

@@ -0,0 +1,29 @@
+// Copyright 2026 Conéctate Soluciones y Aplicaciones SL under the Apache License, Version 2.0.
+/** Reusable, non-production identifiers for Consent R4/R5 projection tests. */
+export const CONSENT_PROJECTION_TEST_DATA = Object.freeze({
+    identifier: 'urn:uuid:9f4105a1-fca1-4b92-a38f-cd40f37da36e',
+    subject: 'Patient/consent-subject-test',
+    grantor: 'RelatedPerson/consent-grantor-test',
+    grantee: 'Organization/consent-grantee-test',
+    manager: 'Organization/consent-manager-test',
+    controller: 'Organization/consent-enforcer-test',
+    createdAt: '2026-09-08',
+    consentPeriodStart: '2026-09-08T10:00:00Z',
+    consentPeriodEnd: '2026-10-08T10:00:00Z',
+    dataPeriodStart: '2025-09-08T00:00:00Z',
+    dataPeriodEnd: '2026-09-08T00:00:00Z',
+    actorRole: 'http://terminology.hl7.org/CodeSystem/v3-RoleCode|PAYOR',
+    action: 'http://terminology.hl7.org/CodeSystem/consentaction|access',
+    purpose: 'http://terminology.hl7.org/CodeSystem/v3-ActReason|HPAYMT',
+    scope: 'http://terminology.hl7.org/CodeSystem/consentscope|patient-privacy',
+    category: 'http://loinc.org|59284-0',
+    resourceType: 'http://hl7.org/fhir/fhir-types|Observation',
+    provisionCode: 'http://loinc.org|85353-1',
+    secondProvisionCode: 'http://loinc.org|8310-5',
+    provisionCodeList: 'http://loinc.org|85353-1,http://loinc.org|8310-5',
+    securityLabel: 'http://terminology.hl7.org/CodeSystem/v3-Confidentiality|R',
+    attachmentContentType: 'application/odrl+json',
+    attachmentData: 'eyJAdHlwZSI6IkFncmVlbWVudCJ9',
+    odrlOnlyConstraintName: 'odrl.profile.max-query-count',
+    odrlOnlyConstraintValue: '1',
+});

package/dist/examples/employee.js

@@ -1,6 +1,7 @@
 import { OrganizationEmployeeSearchResponseEntryTypes } from '../constants/employee-lifecycle.js';
 import { ClaimsPersonSchemaorg } from '../constants/schemaorg.js';
-import { EXAMPLE_BUNDLE_RESOURCE_TYPE, EXAMPLE_BUNDLE_TYPE_BATCH_RESPONSE, ExampleHttpStatusText, } from './shared.js';
+import { buildProfessionalDidWeb } from '../utils/did.js';
+import { EXAMPLE_API_ORGANIZATION_DID, EXAMPLE_BUNDLE_RESOURCE_TYPE, EXAMPLE_BUNDLE_TYPE_BATCH_RESPONSE, ExampleHttpStatusText, } from './shared.js';
 export const ExampleEmployeeEmails = Object.freeze({
     SharedProfessional: 'shared.professional@example.org',
 });
@@ -14,23 +15,33 @@ export const ExampleEmployeeRoles = Object.freeze({
     Controller: 'RESPRSN',
     Doctor: 'ISCO-08|2211',
 });
+const EXAMPLE_EMPLOYEE_CONTROLLER_DID = buildProfessionalDidWeb({
+    organizationDidWeb: EXAMPLE_API_ORGANIZATION_DID,
+    email: ExampleEmployeeEmails.SharedProfessional,
+    role: ExampleEmployeeRoles.Controller,
+});
+const EXAMPLE_EMPLOYEE_DOCTOR_DID = buildProfessionalDidWeb({
+    organizationDidWeb: EXAMPLE_API_ORGANIZATION_DID,
+    email: ExampleEmployeeEmails.SharedProfessional,
+    role: ExampleEmployeeRoles.Doctor,
+});
 export const EXAMPLE_EMPLOYEE_CONTROLLER_ACTIVE = Object.freeze({
     resourceId: 'urn:uuid:11111111-1111-4111-8111-111111111111',
-    identifier: 'did:web:api.example.org:employee:shared.professional@example.org:RESPRSN',
+    identifier: EXAMPLE_EMPLOYEE_CONTROLLER_DID,
     email: ExampleEmployeeEmails.SharedProfessional,
     role: ExampleEmployeeRoles.Controller,
     status: 'active',
 });
 export const EXAMPLE_EMPLOYEE_DOCTOR_ACTIVE = Object.freeze({
     resourceId: 'urn:uuid:22222222-2222-4222-8222-222222222222',
-    identifier: 'did:web:api.example.org:employee:shared.professional@example.org:ISCO-08|2211',
+    identifier: EXAMPLE_EMPLOYEE_DOCTOR_DID,
     email: ExampleEmployeeEmails.SharedProfessional,
     role: ExampleEmployeeRoles.Doctor,
     status: 'active',
 });
 export const EXAMPLE_EMPLOYEE_DOCTOR_PURGED_HISTORICAL = Object.freeze({
     resourceId: 'urn:uuid:33333333-3333-4333-8333-333333333333',
-    identifier: 'did:web:api.example.org:employee:shared.professional@example.org:ISCO-08|2211:historical:000',
+    identifier: `${EXAMPLE_EMPLOYEE_DOCTOR_DID}:historical:000`,
     email: ExampleEmployeeEmails.SharedProfessional,
     role: ExampleEmployeeRoles.Doctor,
     status: 'purged',

package/dist/examples/index.d.ts

@@ -1,4 +1,5 @@
 export * from './shared';
+export * from './consent-projection';
 export * from './ica-activation-proof';
 export * from './ica-verify-response';
 export * from './dataspace-discovery';

package/dist/examples/index.js

@@ -1,4 +1,5 @@
 export * from './shared.js';
+export * from './consent-projection.js';
 export * from './ica-activation-proof.js';
 export * from './ica-verify-response.js';
 export * from './dataspace-discovery.js';

package/dist/examples/inter-tenant-access-contract.d.ts

@@ -26,7 +26,8 @@ export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SCOPE: "organization/C
 export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SUBJECT_DID: "did:web:api.acme.org:individual:123";
 export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SECTION: "LOINC|48765-2";
 export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_AGREEMENT_PDF_URL: "https://portal.example.org/files/contracts/inter-tenant-contract-acme-lab-001.pdf";
-export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_PROFESSIONAL_DID: "did:web:api.lab.org:employee:researcher1@lab.org:ISCO-08|2211";
+export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_PROFESSIONAL_EMAIL: "researcher1@lab.org";
+export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_PROFESSIONAL_DID: string;
 export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_PROVIDER_AUTHORIZED_SIGNATORY_DID: "did:web:provider-signatory.example.org";
 export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_AUTHORIZED_SIGNATORY_DID: "did:web:consumer-signatory.example.org";
 export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SMART_SCOPE: "organization/Composition.rs?subject=did:web:api.acme.org:individual:123&section=LOINC|48765-2";
@@ -59,7 +60,7 @@ export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONTEXT: Readonly<{
     readonly jurisdiction: "ES";
     readonly actorRole: "ISCO-08|2211";
     readonly subjectDid: "did:web:api.acme.org:individual:123";
-    readonly consumerProfessionalDid: "did:web:api.lab.org:employee:researcher1@lab.org:ISCO-08|2211";
+    readonly consumerProfessionalDid: string;
     readonly requestedScope: "organization/Composition.rs";
     readonly requestedSection: "LOINC|48765-2";
     readonly smartScope: "organization/Composition.rs?subject=did:web:api.acme.org:individual:123&section=LOINC|48765-2";
@@ -81,7 +82,7 @@ export declare const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONTEXT_WITH_URNS: Rea
     readonly jurisdiction: "ES";
     readonly actorRole: "ISCO-08|2211";
     readonly subjectDid: "did:web:api.acme.org:individual:123";
-    readonly consumerProfessionalDid: "did:web:api.lab.org:employee:researcher1@lab.org:ISCO-08|2211";
+    readonly consumerProfessionalDid: string;
     readonly requestedScope: "organization/Composition.rs";
     readonly requestedSection: "LOINC|48765-2";
     readonly smartScope: "organization/Composition.rs?subject=did:web:api.acme.org:individual:123&section=LOINC|48765-2";

package/dist/examples/inter-tenant-access-contract.js

@@ -1,12 +1,14 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
 import { ServiceCapability } from '../constants/service-capabilities.js';
-import { HealthcareConsentPurposes } from '../constants/healthcare.js';
+import { HealthcareConsentPurposes, ISCO08_CODING_SYSTEM } from '../constants/healthcare.js';
+import { SecureIdTypesIndividual } from '../constants/identity-identifiers.js';
 import { DataspaceSectors } from '../constants/sectors.js';
 import { ClaimConsent } from '../models/consent-rule.js';
 import { ClaimInterTenantAccessContract } from '../models/inter-tenant-access-contract.js';
 import { BundleEntryClaimsContext } from '../models/communication-attached-bundle-session.js';
 import { buildInterTenantAccessContractCredential, buildInterTenantAccessContractResource, getInterTenantAccessContractBlockchainReference, } from '../utils/inter-tenant-access-contract.js';
-import { buildMemberAuthorizationUrn, buildOrganizationAuthorizationUrn, } from '../utils/organization-authorization-urn.js';
+import { buildOrganizationAuthorizationUrnCds, buildOrganizationMemberAuthorizationUrnCds, } from '../utils/organization-authorization-urn.js';
+import { buildProfessionalDidWeb, buildSecureIdValueMember } from '../utils/did.js';
 import { EXAMPLE_API_ORGANIZATION_DID, EXAMPLE_CONTROLLER_DID, EXAMPLE_HEALTHCARE_ACTOR_ROLE_PHYSICIAN, EXAMPLE_JURISDICTION, EXAMPLE_RESEARCH_API_ORGANIZATION_DID, EXAMPLE_RESEARCH_TENANT_IDENTIFIER, EXAMPLE_SECTOR, EXAMPLE_TENANT_IDENTIFIER, } from './shared.js';
 /**
  * Shared synthetic inter-tenant contract fixtures reused by GW and SDK tests.
@@ -36,7 +38,12 @@ export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SCOPE = ServiceCapability.Inde
 export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SUBJECT_DID = 'did:web:api.acme.org:individual:123';
 export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SECTION = 'LOINC|48765-2';
 export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_AGREEMENT_PDF_URL = 'https://portal.example.org/files/contracts/inter-tenant-contract-acme-lab-001.pdf';
-export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_PROFESSIONAL_DID = `${EXAMPLE_RESEARCH_API_ORGANIZATION_DID}:employee:researcher1@lab.org:${EXAMPLE_HEALTHCARE_ACTOR_ROLE_PHYSICIAN}`;
+export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_PROFESSIONAL_EMAIL = 'researcher1@lab.org';
+export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_PROFESSIONAL_DID = buildProfessionalDidWeb({
+    organizationDidWeb: EXAMPLE_RESEARCH_API_ORGANIZATION_DID,
+    email: EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_PROFESSIONAL_EMAIL,
+    role: EXAMPLE_HEALTHCARE_ACTOR_ROLE_PHYSICIAN,
+});
 export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_PROVIDER_AUTHORIZED_SIGNATORY_DID = 'did:web:provider-signatory.example.org';
 export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_AUTHORIZED_SIGNATORY_DID = 'did:web:consumer-signatory.example.org';
 export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SMART_SCOPE = `${EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SCOPE}?subject=${EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SUBJECT_DID}&section=${EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SECTION}`;
@@ -95,17 +102,24 @@ export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONTEXT = Object.freeze({
     smartScope: EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_SMART_SCOPE,
     purpose: EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_PURPOSE,
 });
-export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_PROVIDER_ORGANIZATION_URN = buildOrganizationAuthorizationUrn({
+export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_PROVIDER_ORGANIZATION_URN = buildOrganizationAuthorizationUrnCds({
+    jurisdiction: EXAMPLE_JURISDICTION,
     identifierType: 'TAX',
     identifierValue: EXAMPLE_TENANT_IDENTIFIER,
 });
-export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_ORGANIZATION_URN = buildOrganizationAuthorizationUrn({
+export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_ORGANIZATION_URN = buildOrganizationAuthorizationUrnCds({
+    jurisdiction: EXAMPLE_JURISDICTION,
     identifierType: 'TAX',
     identifierValue: EXAMPLE_RESEARCH_TENANT_IDENTIFIER,
 });
-export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_MEMBER_URN = buildMemberAuthorizationUrn({
+export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_MEMBER_URN = buildOrganizationMemberAuthorizationUrnCds({
     organizationUrn: EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_ORGANIZATION_URN,
-    memberId: 'researcher-001',
+    memberId: buildSecureIdValueMember({
+        secureIdTypeMember: SecureIdTypesIndividual.Email,
+        privateIdValueMember: EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONSUMER_PROFESSIONAL_EMAIL,
+    }),
+    roleType: ISCO08_CODING_SYSTEM,
+    roleValue: EXAMPLE_HEALTHCARE_ACTOR_ROLE_PHYSICIAN,
 });
 export const EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONTEXT_WITH_URNS = Object.freeze({
     ...EXAMPLE_INTER_TENANT_ACCESS_CONTRACT_CONTEXT,

package/dist/models/consent-rule.d.ts

@@ -13,7 +13,12 @@ export declare enum ClaimConsent {
     'date' = "Consent.date",
     'periodStart' = "Consent.period-start",
     'periodEnd' = "Consent.period-end",
+    'dataPeriodStart' = "Consent.data-period-start",
+    'dataPeriodEnd' = "Consent.data-period-end",
+    'grantor' = "Consent.grantor",
     'grantee' = "Consent.grantee",
+    'manager' = "Consent.manager",
+    'controller' = "Consent.controller",
     'verifiedBy' = "Consent.verified-by",
     'verifiedDate' = "Consent.verified-date",
     'purpose' = "Consent.purpose",
@@ -25,6 +30,8 @@ export declare enum ClaimConsent {
     'policyRule' = "Consent.policy-rule",
     'provisionCode' = "Consent.provision-code",
     'provisionCodeDisplay' = "Consent.provision-code-display",
+    'securityLabel' = "Consent.security-label",
+    'documentType' = "Consent.document-type",
     'containedReferenceList' = "Consent.contained-reference-list",
     /**
      * @deprecated Use `containedReferenceList`.
@@ -137,6 +144,14 @@ export interface ConsentRule {
      * Derived from the end of the `org.hl7.fhir.api.Consent.period` claim.
      */
     'Consent.period-end'?: string;
+    /** Timeframe of the governed data; distinct from Consent validity. */
+    'Consent.data-period-start'?: string;
+    'Consent.data-period-end'?: string;
+    /** R5 grantor, grantee, workflow manager and enforcement controller references. */
+    'Consent.grantor'?: string;
+    'Consent.grantee'?: string;
+    'Consent.manager'?: string;
+    'Consent.controller'?: string;
     /**
      * The party to whom the consent is granted.
      * Use both 'Consent.actor-identifier' and 'Consent.actor-role' instead.
@@ -163,6 +178,11 @@ export interface ConsentRule {
      * Derived from the `org.hl7.fhir.api.Consent.identifier` claim.
      */
     'Consent.identifier': string;
+    /** Governed FHIR resource types and security/content classifications. */
+    'Consent.resource-type'?: string;
+    'Consent.security-label'?: string;
+    'Consent.document-type'?: string;
+    'Consent.provision-code'?: string;
     'Consent.contained-reference-list'?: string;
     'Consent.contained-resource-list'?: string;
     'Consent.contained-documents'?: string;

package/dist/models/consent-rule.js

@@ -15,7 +15,12 @@ export var ClaimConsent;
     ClaimConsent["date"] = "Consent.date";
     ClaimConsent["periodStart"] = "Consent.period-start";
     ClaimConsent["periodEnd"] = "Consent.period-end";
+    ClaimConsent["dataPeriodStart"] = "Consent.data-period-start";
+    ClaimConsent["dataPeriodEnd"] = "Consent.data-period-end";
+    ClaimConsent["grantor"] = "Consent.grantor";
     ClaimConsent["grantee"] = "Consent.grantee";
+    ClaimConsent["manager"] = "Consent.manager";
+    ClaimConsent["controller"] = "Consent.controller";
     ClaimConsent["verifiedBy"] = "Consent.verified-by";
     ClaimConsent["verifiedDate"] = "Consent.verified-date";
     ClaimConsent["purpose"] = "Consent.purpose";
@@ -27,6 +32,8 @@ export var ClaimConsent;
     ClaimConsent["policyRule"] = "Consent.policy-rule";
     ClaimConsent["provisionCode"] = "Consent.provision-code";
     ClaimConsent["provisionCodeDisplay"] = "Consent.provision-code-display";
+    ClaimConsent["securityLabel"] = "Consent.security-label";
+    ClaimConsent["documentType"] = "Consent.document-type";
     ClaimConsent["containedReferenceList"] = "Consent.contained-reference-list";
     /**
      * @deprecated Use `containedReferenceList`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-common-utils-ts",
-  "version": "2.9.10",
+  "version": "2.9.12",
   "publishConfig": {
     "access": "public"
   },