gdc-sdk-node-ts 0.9.1 → 0.12.0

package/README.md

@@ -14,6 +14,24 @@ Use this package when your backend needs to:
 This package is for runtime execution. It is not the place where the canonical
 business contract is defined.
 
+Important test-harness boundary:
+
+- `gdc-sdk-node-ts` is not the product BFF
+- the live E2E suite simulates a controlled `virtual API` with a BFF-like role
+  only to validate GW CORE lifecycles end to end
+- the current live suites run with the future `user job manager` queue disabled,
+  so every high-level call goes directly through that controlled `virtual API`
+- app-side job queues, offline retry, local vault/read models, and the future
+  user job manager are separate follow-up concerns
+
+Important live-run rule:
+
+- the canonical live E2E result must come from the user's real terminal/TTY
+- do not assume an AI agent sandbox has equivalent localhost, Docker, DNS, or
+  GCP connectivity
+- if sandboxed runs disagree with the user's terminal, trust the user's
+  terminal for live GW validation
+
 Architectural rule:
 
 - shared contracts and actor boundaries come from `gdc-sdk-core-ts`
@@ -44,10 +62,16 @@ If you are integrating this package for the first time, open these in order:
 5. [gdc-sdk-core-ts/docs/101-SDK_FLOWS.md](https://github.com/Global-DataCare/gdc-sdk-core-ts/blob/main/docs/101-SDK_FLOWS.md)
    Actor split and business-flow map across organization, individual,
    permissions, invitation, import, and SMART flows.
-6. [gdc-common-utils-ts/src/examples/](https://github.com/Global-DataCare/gdc-common-utils-ts/tree/main/src/examples)
+6. [gwtemplate-node-ts/docs/PORTAL_API_TO_GW_CORE.md](https://github.com/Global-DataCare/gwtemplate-node-ts/blob/main/docs/PORTAL_API_TO_GW_CORE.md)
+   Canonical portal/BFF functional map over GW CORE, including the domain
+   split between `employees`, `related persons`, `members`, and `consents`.
+7. [gdc-common-utils-ts/src/examples/](https://github.com/Global-DataCare/gdc-common-utils-ts/tree/main/src/examples)
    Shared payload values used by the docs and tests.
-7. [gdc-common-utils-ts/docs/101-LIFECYCLE.md](https://github.com/Global-DataCare/gdc-common-utils-ts/blob/main/docs/101-LIFECYCLE.md)
+8. [gdc-common-utils-ts/docs/101-LIFECYCLE.md](https://github.com/Global-DataCare/gdc-common-utils-ts/blob/main/docs/101-LIFECYCLE.md)
    Canonical `enable/disable/delete` semantics and copy/paste placeholders.
+9. [docs/NEXT_STEPS.md](./docs/NEXT_STEPS.md)
+   Follow-up scope after GW CORE live validation, including the future user job
+   manager boundary.
 
 If you need the shortest path:
 
@@ -98,12 +122,20 @@ Before running that suite, read:
 
 - [docs/101-LIVE_GW_LOCAL.md](./docs/101-LIVE_GW_LOCAL.md)
 
+Execution requirement:
+
+- run the live suite from a real user terminal/TTY
+- if an AI agent is assisting, it should prefer a long-lived TTY process and
+  avoid treating sandbox-local connectivity failures as product failures
+
 Teaching rule:
 
 - defaults come from `gdc-common-utils-ts/examples`
 - override with env vars only when your tenant, bearer, or route is different
 - local GW default is `http://127.0.0.1:3000`
 - Docker-exposed GW can be overridden with `BASE_URL=http://127.0.0.1:8000`
+- `LIVE_GW_E2E_EXECUTION_MODE=direct` is the current and only supported mode
+  for live validation; queued app-side job management is a later phase
 
 Current live flow covered by the test suite:
 
@@ -118,6 +150,47 @@ Current live flow covered by the test suite:
 7. verify the returned bundle document contains both medication statements
 8. persist audit/debug traces in `test-results/*.jsonl`
 
+What is still not fully covered as one single root lifecycle:
+
+- initial organization license listing
+- extra-seat activation after the portal-side fictitious payment confirmation
+- relisting licenses after seat activation
+- one employee bundle with employee `A` and employee `B`
+- selective disable/purge validation across both employees
+- consent escalation from partial IPS access to broader IPS access
+- final cleanup of consent, individual, remaining employees, and tenant
+
+Current invoice/readback behavior:
+
+- both host and individual `Order/_batch-response` flows now return the flat
+  compatibility claims and an embedded invoice `Bundle`
+- the invoice bundle contains one FHIR `Invoice`, one PDF
+  `DocumentReference`, and one structured JSON/XML `DocumentReference`
+- live suites can read that bundle back through the same high-level response
+  body that the virtual API exposes to the simulated front
+
+Current runtime boundary:
+
+- `OrganizationControllerSdk.confirmOrganizationLicenseOrder(...)` now uses the
+  public host `Order/_batch` route used by GW CORE for portal-managed
+  post-payment seat activation
+- the long root lifecycle is still not fully closed because the suite does not
+  yet orchestrate the whole `license list -> pay -> confirm -> relist -> two
+  employees -> selective purge -> cleanup` dialogue as one single test
+
+The exact pending release-readiness checklist lives in:
+
+- [docs/NEXT_STEPS.md](./docs/NEXT_STEPS.md)
+
+Optional live lifecycle extension:
+
+- set `RUN_LIVE_GW_E2E_INDIVIDUAL_LIFECYCLE=1` to extend the same suite with
+  `disableIndividual(...)` + `purgeIndividual(...)` against the real
+  `gwtemplate-node-ts` runtime contract
+- this extra block is intentionally separate from the default happy path
+  because it changes lifecycle state and should only run when that tenant/test
+  subject is disposable
+
 Shared example source of truth:
 
 - tenant/route/controller/professional defaults:
@@ -141,6 +214,20 @@ Run the full live runtime baseline:
 npm run test:e2e:live-gw
 ```
 
+Select one live transport profile from the same Node entrypoint:
+
+```bash
+npm run test:e2e:live-gw:didcomm-plain
+npm run test:e2e:live-gw:legacy-fhir
+npm run test:e2e:live-gw:all
+```
+
+Profile note:
+
+- `didcomm-plain` is the current live baseline implemented by the Node runtime client
+- `legacy-fhir` exercises raw `application/fhir+json` async batch submission for `org.hl7.fhir.*`
+- `all` runs every implemented profile from the same suite file
+
 Run the IPS ingestion/search branch as well:
 
 ```bash

package/dist/constants/lifecycle.d.ts

@@ -31,6 +31,7 @@ export declare const GwCoreLifecycleRequestType: Readonly<{
     readonly IndividualOrganizationRegistration: "SubjectOrg-registration-form-v1.0";
     readonly IndividualOrganizationDisable: "Family-disable-request-v1.0";
     readonly IndividualOrganizationPurge: "Family-purge-request-v1.0";
+    readonly IndividualMemberPurge: "RelatedPerson-purge-request-v1.0";
 }>;
 /**
  * Named TODO ids kept close to the current lifecycle implementation so the

package/dist/constants/lifecycle.js

@@ -1,4 +1,5 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
+import { LifecycleRequestType } from 'gdc-common-utils-ts';
 /**
  * GW CORE lifecycle route/action tokens used by the Node runtime SDK.
  *
@@ -32,6 +33,7 @@ export const GwCoreLifecycleRequestType = Object.freeze({
     IndividualOrganizationRegistration: 'SubjectOrg-registration-form-v1.0',
     IndividualOrganizationDisable: 'Family-disable-request-v1.0',
     IndividualOrganizationPurge: 'Family-purge-request-v1.0',
+    IndividualMemberPurge: LifecycleRequestType.RelatedPersonPurge,
 });
 /**
  * Named TODO ids kept close to the current lifecycle implementation so the

package/dist/gdc-session-bridge.js

@@ -3,14 +3,18 @@ import { ActorCapabilities } from 'gdc-common-utils-ts/constants/actor-session';
 import { expandActorSessionDescriptorToFacades, filterCapabilitiesForActor, } from 'gdc-sdk-core-ts';
 import { ActorSession, NodeActorSession } from './session.js';
 const capabilityMap = {
-    [ActorCapabilities.HostActivateOrganization]: ActorCapabilities.HostActivateOrganization,
-    [ActorCapabilities.HostConfirmOrder]: ActorCapabilities.HostConfirmOrder,
+    [ActorCapabilities.HostingActivateOrganization]: ActorCapabilities.HostingActivateOrganization,
+    [ActorCapabilities.HostingConfirmOrder]: ActorCapabilities.HostingConfirmOrder,
+    [ActorCapabilities.HostingDisableHost]: ActorCapabilities.HostingDisableHost,
+    [ActorCapabilities.HostingPurgeHost]: ActorCapabilities.HostingPurgeHost,
     [ActorCapabilities.OrganizationCreateEmployee]: ActorCapabilities.OrganizationCreateEmployee,
     [ActorCapabilities.OrganizationActivateDevice]: ActorCapabilities.OrganizationActivateDevice,
     [ActorCapabilities.OrganizationIssueActivationCode]: ActorCapabilities.OrganizationIssueActivationCode,
     [ActorCapabilities.OrganizationRequestSmartToken]: ActorCapabilities.OrganizationRequestSmartToken,
     [ActorCapabilities.OrganizationDisableEmployee]: ActorCapabilities.OrganizationDisableEmployee,
     [ActorCapabilities.OrganizationPurgeEmployee]: ActorCapabilities.OrganizationPurgeEmployee,
+    [ActorCapabilities.OrganizationDisableTenant]: ActorCapabilities.OrganizationDisableTenant,
+    [ActorCapabilities.OrganizationPurgeTenant]: ActorCapabilities.OrganizationPurgeTenant,
     [ActorCapabilities.IndividualBootstrap]: ActorCapabilities.IndividualBootstrap,
     [ActorCapabilities.IndividualDisable]: ActorCapabilities.IndividualDisable,
     [ActorCapabilities.IndividualPurge]: ActorCapabilities.IndividualPurge,

package/dist/host-onboarding.d.ts

@@ -1,42 +1,9 @@
-import type { PollOptions, SubmitAndPollResult } from './orchestration/client-port.js';
 /**
- * Current host-registry route context for existing host endpoints.
+ * Compatibility re-export.
  *
- * This is a routing object for host registry calls. It is not the same thing as
- * a host discovery descriptor.
+ * The canonical host/hosting facade contract now lives in `gdc-sdk-core-ts` so
+ * browser and Node runtimes can share the same orchestration surface. This
+ * file stays as a stable import path for existing Node consumers.
  */
-export type HostRouteContext = {
-    jurisdiction: string;
-    hostNetwork?: string;
-    /** @deprecated Use `hostNetwork`. */
-    sector?: string;
-    controllerDid?: string;
-    hostDid?: string;
-};
-/**
- * Input for legal-organization order confirmation in the host registry.
- */
-export type LegalOrganizationOrderInput = {
-    offerId: string;
-    jurisdiction?: string;
-    hostNetwork?: string;
-    /** @deprecated Use `hostNetwork`. */
-    sector?: string;
-    dataType?: string;
-    additionalClaims?: Record<string, unknown>;
-    timeoutSeconds?: number;
-    intervalSeconds?: number;
-};
-type ConfirmLegalOrganizationOrderDeps = {
-    input: LegalOrganizationOrderInput;
-    hostCtx: HostRouteContext;
-    defaultTimeoutMs?: number;
-    defaultIntervalMs?: number;
-    hostRegistryOrderBatchPath: (ctx: HostRouteContext) => string;
-    hostRegistryOrderPollPath: (ctx: HostRouteContext) => string;
-    submitAndPoll: (submitPath: string, pollPath: string, payload: {
-        thid?: string;
-    } & Record<string, unknown>, options?: PollOptions) => Promise<SubmitAndPollResult>;
-};
-export declare function confirmLegalOrganizationOrderWithDeps(deps: ConfirmLegalOrganizationOrderDeps): Promise<SubmitAndPollResult>;
-export {};
+export { confirmLegalOrganizationOrderWithDeps, HostLifecycleRequestType, HostedTenantLifecycleRequestType, submitHostedTenantLifecycleWithDeps, } from 'gdc-sdk-core-ts';
+export type { HostingControllerFacade, HostLifecycleInput, HostRouteContext, HostedTenantLifecycleInput, LegalOrganizationOrderInput, } from 'gdc-sdk-core-ts';

package/dist/host-onboarding.js

@@ -1,39 +1,9 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
-import { resolvePollOptionsFromSeconds } from './poll-options.js';
-export async function confirmLegalOrganizationOrderWithDeps(deps) {
-    const offerId = String(deps.input.offerId || '').trim();
-    if (!offerId) {
-        throw new Error('confirmLegalOrganizationOrder requires offerId.');
-    }
-    const claims = {
-        '@context': 'org.schema',
-        'Order.acceptedOffer.identifier': offerId,
-        ...(deps.input.additionalClaims || {}),
-    };
-    const payload = {
-        jti: `jti-${createRuntimeUuid()}`,
-        iss: String(deps.hostCtx.controllerDid || '').trim() || undefined,
-        aud: String(deps.hostCtx.hostDid || '').trim() || undefined,
-        type: 'application/didcomm-plain+json',
-        thid: `order-${createRuntimeUuid()}`,
-        body: {
-            data: [{
-                    type: deps.input.dataType || 'Organization-order-request-v1.0',
-                    meta: { claims },
-                    resource: { meta: { claims } },
-                }],
-        },
-    };
-    const pollOptions = resolvePollOptionsFromSeconds(deps.input.timeoutSeconds, deps.input.intervalSeconds, {
-        timeoutMs: deps.defaultTimeoutMs,
-        intervalMs: deps.defaultIntervalMs,
-    });
-    return deps.submitAndPoll(deps.hostRegistryOrderBatchPath(deps.hostCtx), deps.hostRegistryOrderPollPath(deps.hostCtx), payload, pollOptions);
-}
-function createRuntimeUuid() {
-    const fromCrypto = globalThis.crypto?.randomUUID?.();
-    if (fromCrypto) {
-        return fromCrypto;
-    }
-    return `fallback-${Date.now()}-${Math.random().toString(16).slice(2)}`;
-}
+/**
+ * Compatibility re-export.
+ *
+ * The canonical host/hosting facade contract now lives in `gdc-sdk-core-ts` so
+ * browser and Node runtimes can share the same orchestration surface. This
+ * file stays as a stable import path for existing Node consumers.
+ */
+export { confirmLegalOrganizationOrderWithDeps, HostLifecycleRequestType, HostedTenantLifecycleRequestType, submitHostedTenantLifecycleWithDeps, } from 'gdc-sdk-core-ts';

package/dist/index.d.ts

@@ -8,7 +8,10 @@ export * from './individual-start.js';
 export * from './individual-onboarding.js';
 export * from './device-activation.js';
 export * from './smart-token.js';
+export * from './order-offer-summary.js';
+export * from './organization-license-order.js';
 export * from './resource-operations.js';
+export * from './constants/lifecycle.js';
 export * from './consent-claim-helpers.js';
 export * from './session.js';
 export * from './node-runtime-client.js';

package/dist/index.js

@@ -9,7 +9,10 @@ export * from './individual-start.js';
 export * from './individual-onboarding.js';
 export * from './device-activation.js';
 export * from './smart-token.js';
+export * from './order-offer-summary.js';
+export * from './organization-license-order.js';
 export * from './resource-operations.js';
+export * from './constants/lifecycle.js';
 export * from './consent-claim-helpers.js';
 export * from './session.js';
 export * from './node-runtime-client.js';

package/dist/individual-onboarding.d.ts

@@ -17,6 +17,7 @@ export type IndividualOrganizationConfirmOrderInput = {
     jurisdiction?: string;
     sector?: string;
     offerId: string;
+    additionalClaims?: Record<string, unknown>;
     timeoutSeconds?: number;
     intervalSeconds?: number;
 };

package/dist/individual-onboarding.js

@@ -8,6 +8,7 @@ export async function confirmIndividualOrganizationOrderWithDeps(deps) {
     const orderClaims = {
         '@context': 'org.schema',
         'Order.acceptedOffer.identifier': offerId,
+        ...(deps.input.additionalClaims || {}),
     };
     const payload = {
         jti: `jti-${createRuntimeUuid()}`,

package/dist/individual-start.d.ts

@@ -1,5 +1,6 @@
 import type { PollOptions, SubmitAndPollResult } from './orchestration/client-port.js';
 import type { RouteContext } from './individual-onboarding.js';
+import type { OfferPreview } from './order-offer-summary.js';
 export type IndividualOrganizationBootstrapInput = {
     /**
      * Preferred route identifier for the selected personal indexing service provider.
@@ -54,16 +55,6 @@ export type IndividualOrganizationBootstrapInput = {
     timeoutSeconds?: number;
     intervalSeconds?: number;
 };
-export type OfferPreview = {
-    offerId?: string;
-    amount?: string;
-    currency?: string;
-    seats?: number | undefined;
-    planName?: string;
-    sku?: string;
-    paymentMethod?: string;
-    checkoutUrl?: string;
-};
 export type IndividualOrganizationStartResult = {
     registration: SubmitAndPollResult;
     offerId: string;

package/dist/legacy-compat.d.ts

@@ -1,6 +1,7 @@
 export { activateEmployeeDeviceWithActivationRequestWithDeps as activateEmployeeDeviceWithActivationCodeSimpleWithDeps, } from './device-activation.js';
 export { confirmLegalOrganizationOrderWithDeps as confirmLegalOrganizationOrderSimpleWithDeps, } from './host-onboarding.js';
 export { confirmIndividualOrganizationOrderWithDeps as confirmIndividualOrganizationOrderSimpleWithDeps, } from './individual-onboarding.js';
+export { confirmOrganizationLicenseOrderWithDeps as confirmOrganizationLicenseOrderSimpleWithDeps, } from './organization-license-order.js';
 export { requestSmartTokenWithDeps as requestSmartTokenSimpleWithDeps, } from './smart-token.js';
 export { startIndividualOrganizationWithDeps as startIndividualOrganizationSimpleWithDeps, } from './individual-start.js';
 export { grantProfessionalAccessWithDeps as grantProfessionalAccessSimpleWithDeps } from './resource-operations.js';
@@ -8,6 +9,7 @@ export { resolvePollOptionsFromSeconds as resolveSimplePollOptions } from './pol
 export type { EmployeeDeviceActivationRequestInput as EmployeeDeviceActivationSimpleInput, } from './device-activation.js';
 export type { LegalOrganizationOrderInput as LegalOrganizationOrderSimpleInput, } from './host-onboarding.js';
 export type { IndividualOrganizationConfirmOrderInput as IndividualOrganizationConfirmOrderSimpleInput, } from './individual-onboarding.js';
+export type { OrganizationLicenseOrderConfirmInput as OrganizationLicenseOrderConfirmSimpleInput, } from './organization-license-order.js';
 export type { IndividualOrganizationBootstrapInput as IndividualOrganizationBootstrapSimpleInput, IndividualOrganizationStartResult as IndividualOrganizationStartSimpleResult, } from './individual-start.js';
 export type { SmartTokenRequestInput as SmartTokenRequestSimpleInput, } from './smart-token.js';
 export type { GrantProfessionalAccessInput as GrantProfessionalAccessSimpleInput, GrantProfessionalAccessResult as GrantProfessionalAccessSimpleResult, } from './resource-operations.js';

package/dist/legacy-compat.js

@@ -3,6 +3,7 @@
 export { activateEmployeeDeviceWithActivationRequestWithDeps as activateEmployeeDeviceWithActivationCodeSimpleWithDeps, } from './device-activation.js';
 export { confirmLegalOrganizationOrderWithDeps as confirmLegalOrganizationOrderSimpleWithDeps, } from './host-onboarding.js';
 export { confirmIndividualOrganizationOrderWithDeps as confirmIndividualOrganizationOrderSimpleWithDeps, } from './individual-onboarding.js';
+export { confirmOrganizationLicenseOrderWithDeps as confirmOrganizationLicenseOrderSimpleWithDeps, } from './organization-license-order.js';
 export { requestSmartTokenWithDeps as requestSmartTokenSimpleWithDeps, } from './smart-token.js';
 export { startIndividualOrganizationWithDeps as startIndividualOrganizationSimpleWithDeps, } from './individual-start.js';
 export { grantProfessionalAccessWithDeps as grantProfessionalAccessSimpleWithDeps } from './resource-operations.js';

package/dist/node-runtime-client.d.ts

@@ -1,11 +1,12 @@
 import type { AppInfo } from 'gdc-sdk-core-ts';
 import { type ResolvedAppInfo } from 'gdc-sdk-core-ts';
-import { type HostRouteContext } from './host-onboarding.js';
+import { type HostRouteContext, type HostedTenantLifecycleInput } from './host-onboarding.js';
 import type { NodeOrganizationActivationInput } from './orchestration/client-port.js';
 import { type IndividualOrganizationConfirmOrderInput, type RouteContext } from './individual-onboarding.js';
 import { type SmartTokenRequestInput } from './smart-token.js';
+import { type OrganizationLicenseOrderConfirmInput } from './organization-license-order.js';
 import { type IndividualOrganizationBootstrapInput, type IndividualOrganizationStartResult } from './individual-start.js';
-import { type CommunicationIngestionInput, type ClinicalBundleSearchInput, type GrantProfessionalAccessInput, type GrantProfessionalAccessResult, type IndividualMemberLifecycleInput, type IndividualOrganizationLifecycleInput, type OrganizationEmployeeCreationInput, type OrganizationEmployeeLifecycleInput, type OrganizationEmployeeSearchInput, type RelatedPersonUpsertInput } from './resource-operations.js';
+import { type CommunicationIngestionInput, type ClinicalBundleSearchInput, type GrantProfessionalAccessInput, type GrantProfessionalAccessResult, type IndividualMemberLifecycleInput, type IndividualOrganizationLifecycleInput, type LicenseListRuntimeSearchInput, type LicenseOfferRuntimeSearchInput, type LicenseOrderRuntimeSearchInput, type OrganizationEmployeeCreationInput, type OrganizationEmployeeLifecycleInput, type OrganizationEmployeeSearchInput, type RelatedPersonUpsertInput } from './resource-operations.js';
 import type { LegalOrganizationOrderInput } from './host-onboarding.js';
 import type { SmartTokenExchangeResult } from './smart-token.js';
 import type { NodeRuntimeClient, PollOptions, PollResult, SubmitAndPollResult, SubmitPayload, SubmitResponse } from './orchestration/client-port.js';
@@ -117,6 +118,25 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
      * Confirms a host-side legal organization order after the initial activation.
      */
     confirmLegalOrganizationOrder(hostCtx: HostRouteContext, input: LegalOrganizationOrderInput, pollOptions?: PollOptions): Promise<SubmitAndPollResult>;
+    /**
+     * Disables the host registration itself after every hosted tenant has
+     * already been purged from the host registry.
+     */
+    disableHost(hostCtx: HostRouteContext, input: HostedTenantLifecycleInput, pollOptions?: PollOptions): Promise<SubmitAndPollResult>;
+    /**
+     * Purges the disabled host registration after the hosted tenant registry has
+     * become empty.
+     */
+    purgeHost(hostCtx: HostRouteContext, input: HostedTenantLifecycleInput, pollOptions?: PollOptions): Promise<SubmitAndPollResult>;
+    /**
+     * Disables one hosted tenant through the host registry after its descendants
+     * have already been disabled/purged.
+     */
+    disableTenant(hostCtx: HostRouteContext, input: HostedTenantLifecycleInput, pollOptions?: PollOptions): Promise<SubmitAndPollResult>;
+    /**
+     * Purges one already-disabled hosted tenant through the host registry.
+     */
+    purgeTenant(hostCtx: HostRouteContext, input: HostedTenantLifecycleInput, pollOptions?: PollOptions): Promise<SubmitAndPollResult>;
     /**
      * Creates an employee or professional entry under an existing organization tenant.
      */
@@ -147,6 +167,31 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
      * Searches employees/professionals under the selected organization tenant.
      */
     searchOrganizationEmployees(ctx: RouteContext, input: OrganizationEmployeeSearchInput): Promise<SubmitAndPollResult>;
+    /**
+     * Searches organization-owned license seats through the canonical
+     * `License/_search` route.
+     */
+    searchOrganizationLicenses(ctx: RouteContext, input: LicenseListRuntimeSearchInput): Promise<SubmitAndPollResult>;
+    /**
+     * Lists organization-owned license seats using the same `License/_search`
+     * route with optional filters.
+     */
+    listOrganizationLicenses(ctx: RouteContext, input?: LicenseListRuntimeSearchInput): Promise<SubmitAndPollResult>;
+    searchOrganizationLicenseOffers(ctx: RouteContext, input: LicenseOfferRuntimeSearchInput): Promise<SubmitAndPollResult>;
+    listOrganizationLicenseOffers(ctx: RouteContext, input?: LicenseOfferRuntimeSearchInput): Promise<SubmitAndPollResult>;
+    searchOrganizationLicenseOrders(ctx: RouteContext, input: LicenseOrderRuntimeSearchInput): Promise<SubmitAndPollResult>;
+    listOrganizationLicenseOrders(ctx: RouteContext, input?: LicenseOrderRuntimeSearchInput): Promise<SubmitAndPollResult>;
+    /**
+     * Confirms an already paid organization-side license order so additional
+     * seats become usable once GW CORE exposes the public converged route.
+     *
+     * Current runtime note:
+     * - search/list for organization license offers and orders already works
+     * - the public/write post-payment seat activation route is not wired yet
+     * - this method therefore fails explicitly instead of guessing a transport
+     *   contract that is not stable in GW CORE
+     */
+    confirmOrganizationLicenseOrder(ctx: RouteContext, input: OrganizationLicenseOrderConfirmInput, pollOptions?: PollOptions): Promise<SubmitAndPollResult>;
     /**
      * Starts the onboarding flow for an individual-oriented tenant or index.
      */
@@ -178,19 +223,31 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
      */
     purgeIndividual(ctx: RouteContext, input: IndividualOrganizationLifecycleInput, pollOptions?: PollOptions): Promise<SubmitAndPollResult>;
     /**
-     * Placeholder for a future GW CORE member/caregiver lifecycle contract.
-     *
-     * Current GW CORE does not yet expose a stable lifecycle route for
-     * `RelatedPerson` / individual-member disable.
+     * Soft-disables a `RelatedPerson` membership/contact using the current
+     * public batch-update path and `RelatedPerson.active = false`.
      */
-    disableIndividualMember(_ctx: RouteContext, _input: IndividualMemberLifecycleInput, _pollOptions?: PollOptions): Promise<SubmitAndPollResult>;
+    disableIndividualMember(ctx: RouteContext, input: IndividualMemberLifecycleInput, pollOptions?: PollOptions): Promise<SubmitAndPollResult>;
+    /**
+     * Searches individual/family-side license seats through the canonical
+     * `License/_search` route.
+     */
+    searchIndividualLicenses(ctx: RouteContext, input: LicenseListRuntimeSearchInput): Promise<SubmitAndPollResult>;
+    /**
+     * Lists individual/family-side license seats using the same search route
+     * with optional filters.
+     */
+    listIndividualLicenses(ctx: RouteContext, input?: LicenseListRuntimeSearchInput): Promise<SubmitAndPollResult>;
+    searchIndividualLicenseOffers(ctx: RouteContext, input: LicenseOfferRuntimeSearchInput): Promise<SubmitAndPollResult>;
+    listIndividualLicenseOffers(ctx: RouteContext, input?: LicenseOfferRuntimeSearchInput): Promise<SubmitAndPollResult>;
+    searchIndividualLicenseOrders(ctx: RouteContext, input: LicenseOrderRuntimeSearchInput): Promise<SubmitAndPollResult>;
+    listIndividualLicenseOrders(ctx: RouteContext, input?: LicenseOrderRuntimeSearchInput): Promise<SubmitAndPollResult>;
     /**
      * Placeholder for a future GW CORE member/caregiver lifecycle contract.
      *
      * Current GW CORE does not yet expose a stable lifecycle route for
      * `RelatedPerson` / individual-member purge.
      */
-    purgeIndividualMember(_ctx: RouteContext, _input: IndividualMemberLifecycleInput, _pollOptions?: PollOptions): Promise<SubmitAndPollResult>;
+    purgeIndividualMember(ctx: RouteContext, input: IndividualMemberLifecycleInput, pollOptions?: PollOptions): Promise<SubmitAndPollResult>;
     /**
      * Creates and submits a consent-oriented access grant for a professional actor.
      */
@@ -241,6 +298,10 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
      * @param input Subject-scoped search parameters.
      */
     searchLatestIps(ctx: RouteContext, input: Omit<ClinicalBundleSearchInput, 'includedTypes'>): Promise<SubmitAndPollResult>;
+    /**
+     * Preferred runtime alias for latest-IPS retrieval used by shared facades.
+     */
+    getLatestIps(ctx: RouteContext, input: Omit<ClinicalBundleSearchInput, 'includedTypes'>): Promise<SubmitAndPollResult>;
     /**
      * Searches a communication/document thread using `thid` and returns the
      * indexed communication/document projections.
@@ -262,12 +323,22 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
     private requireHostRouteContext;
     hostRegistryOrganizationActivatePath(ctx?: HostRouteContext): string;
     hostRegistryOrganizationActivatePollPath(ctx?: HostRouteContext): string;
+    hostRegistryOrganizationDisablePath(ctx?: HostRouteContext): string;
+    hostRegistryOrganizationDisablePollPath(ctx?: HostRouteContext): string;
+    hostRegistryOrganizationPurgePath(ctx?: HostRouteContext): string;
+    hostRegistryOrganizationPurgePollPath(ctx?: HostRouteContext): string;
     hostRegistryOrderBatchPath(ctx?: HostRouteContext): string;
     hostRegistryOrderPollPath(ctx?: HostRouteContext): string;
     employeeBatchPath(ctx?: RouteContext): string;
     employeePollPath(ctx?: RouteContext): string;
     employeeSearchPath(ctx?: RouteContext): string;
     employeeSearchPollPath(ctx?: RouteContext): string;
+    organizationLicenseSearchPath(ctx?: RouteContext): string;
+    organizationLicenseSearchPollPath(ctx?: RouteContext): string;
+    organizationLicenseOfferSearchPath(ctx?: RouteContext): string;
+    organizationLicenseOfferSearchPollPath(ctx?: RouteContext): string;
+    organizationLicenseOrderSearchPath(ctx?: RouteContext): string;
+    organizationLicenseOrderSearchPollPath(ctx?: RouteContext): string;
     employeePurgePath(ctx?: RouteContext): string;
     employeePurgePollPath(ctx?: RouteContext): string;
     individualFamilyOrganizationBatchPath(ctx?: RouteContext): string;
@@ -278,10 +349,18 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
     individualFamilyOrganizationDisablePollPath(ctx?: RouteContext): string;
     individualFamilyOrganizationPurgePath(ctx?: RouteContext): string;
     individualFamilyOrganizationPurgePollPath(ctx?: RouteContext): string;
+    individualLicenseSearchPath(ctx?: RouteContext): string;
+    individualLicenseSearchPollPath(ctx?: RouteContext): string;
+    individualLicenseOfferSearchPath(ctx?: RouteContext): string;
+    individualLicenseOfferSearchPollPath(ctx?: RouteContext): string;
+    individualLicenseOrderSearchPath(ctx?: RouteContext): string;
+    individualLicenseOrderSearchPollPath(ctx?: RouteContext): string;
     individualFamilyOrderBatchPath(ctx?: RouteContext): string;
     individualFamilyOrderPollPath(ctx?: RouteContext): string;
     individualRelatedPersonBatchPath(ctx?: RouteContext): string;
     individualRelatedPersonPollPath(ctx?: RouteContext): string;
+    individualRelatedPersonPurgePath(ctx?: RouteContext): string;
+    individualRelatedPersonPurgePollPath(ctx?: RouteContext): string;
     individualConsentR4BatchPath(ctx: RouteContext): string;
     individualConsentR4PollPath(ctx: RouteContext): string;
     individualCommunicationBatchPath(ctx: RouteContext, format: 'org.hl7.fhir.api' | 'org.hl7.fhir.r4'): string;
@@ -292,7 +371,6 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
     identityTokenExchangePollPath(ctx: RouteContext): string;
     identityOpenIdSmartTokenPath(ctx: RouteContext): string;
     identityOpenIdSmartTokenPollPath(ctx: RouteContext): string;
-    private extractOfferId;
     private appendHttpTrace;
     private parseTraceBody;
     private parseTraceRawText;