gdc-sdk-node-ts 2.2.2 → 2.3.1

package/dist/backend-profile-runtime.d.ts

@@ -2,6 +2,8 @@ import type { ActorProfileDescriptor, IJobManager, ActorKind, LoadedActorProfile
 import type { ActorSession } from './session.js';
 import type { RuntimeClient } from './orchestration/client-port.js';
 import { IndividualControllerSdk } from './orchestration/individual-controller-sdk.js';
+import { IndividualMemberSdk } from './orchestration/individual-member-sdk.js';
+import { PersonalSdk } from './orchestration/personal-sdk.js';
 import { OrganizationControllerSdk } from './orchestration/organization-controller-sdk.js';
 import { ProfessionalSdk } from './orchestration/professional-sdk.js';
 import type { RouteContext } from './individual-onboarding.js';
@@ -51,6 +53,16 @@ export type BackendIndividualControllerProfile = {
     session: ActorSession;
     sdk: IndividualControllerSdk;
 };
+export type BackendPersonalProfile = {
+    profile: BackendLoadedActorProfile;
+    session: ActorSession;
+    sdk: PersonalSdk;
+};
+export type BackendIndividualMemberProfile = {
+    profile: BackendLoadedActorProfile;
+    session: ActorSession;
+    sdk: IndividualMemberSdk;
+};
 export type BackendOrganizationControllerProfile = {
     profile: BackendLoadedActorProfile;
     session: ActorSession;
@@ -224,6 +236,10 @@ export declare function requireBackendIndividualControllerSession(profile: Backe
  * backend profile.
  */
 export declare function requireBackendIndividualControllerSdk(profile: BackendLoadedActorProfile): IndividualControllerSdk;
+/** Returns the individual-member session from one loaded backend profile. */
+export declare function requireBackendIndividualMemberSession(profile: BackendLoadedActorProfile): ActorSession;
+/** Materializes the individual-member facade from one loaded backend profile. */
+export declare function requireBackendIndividualMemberSdk(profile: BackendLoadedActorProfile): IndividualMemberSdk;
 /**
  * Returns the organization-controller session from one loaded backend profile.
  */
@@ -251,6 +267,13 @@ export declare function requireBackendProfessionalSdk(profile: BackendLoadedActo
  * from the individual-controller flow.
  */
 export declare function loadBackendIndividualControllerProfile(client: BackendProfileRuntimeClient, input: ProfileLoadRequest): Promise<BackendIndividualControllerProfile>;
+/**
+ * Loads a self-managed individual profile. The canonical actor kind remains
+ * individual-controller, while PersonalSdk presents the reduced self surface.
+ */
+export declare function loadBackendPersonalProfile(client: BackendProfileRuntimeClient, input: ProfileLoadRequest): Promise<BackendPersonalProfile>;
+/** Loads an accepted individual-member/RelatedPerson backend profile. */
+export declare function loadBackendIndividualMemberProfile(client: BackendProfileRuntimeClient, input: ProfileLoadRequest): Promise<BackendIndividualMemberProfile>;
 /**
  * Loads one backend profile and resolves the organization-controller session in
  * one step.

package/dist/backend-profile-runtime.js

@@ -421,6 +421,14 @@ export function requireBackendIndividualControllerSession(profile) {
 export function requireBackendIndividualControllerSdk(profile) {
     return requireBackendIndividualControllerSession(profile).asIndividualController();
 }
+/** Returns the individual-member session from one loaded backend profile. */
+export function requireBackendIndividualMemberSession(profile) {
+    return requireBackendActorSession(profile, ActorKinds.IndividualMember);
+}
+/** Materializes the individual-member facade from one loaded backend profile. */
+export function requireBackendIndividualMemberSdk(profile) {
+    return requireBackendIndividualMemberSession(profile).asIndividualMember();
+}
 /**
  * Returns the organization-controller session from one loaded backend profile.
  */
@@ -464,6 +472,21 @@ export async function loadBackendIndividualControllerProfile(client, input) {
         sdk: session.asIndividualController(),
     };
 }
+/**
+ * Loads a self-managed individual profile. The canonical actor kind remains
+ * individual-controller, while PersonalSdk presents the reduced self surface.
+ */
+export async function loadBackendPersonalProfile(client, input) {
+    const profile = await loadBackendProfile(client, input);
+    const session = requireBackendIndividualControllerSession(profile);
+    return { profile, session, sdk: session.asPersonal() };
+}
+/** Loads an accepted individual-member/RelatedPerson backend profile. */
+export async function loadBackendIndividualMemberProfile(client, input) {
+    const profile = await loadBackendProfile(client, input);
+    const session = requireBackendIndividualMemberSession(profile);
+    return { profile, session, sdk: session.asIndividualMember() };
+}
 /**
  * Loads one backend profile and resolves the organization-controller session in
  * one step.

package/dist/index.d.ts

@@ -3,6 +3,8 @@ export * from './runtime-contracts.js';
 export * from './identity-bootstrap.js';
 export * from './async-polling.js';
 export * from './backend-profile-runtime.js';
+export * from './server-profile-session.js';
+export * from './server-profile-protection.js';
 export * from './backend-profile-workspace.js';
 export * from './individual-controller-backend-runtime.js';
 export * from './organization-controller-backend-runtime.js';

package/dist/index.js

@@ -4,6 +4,8 @@ export * from './runtime-contracts.js';
 export * from './identity-bootstrap.js';
 export * from './async-polling.js';
 export * from './backend-profile-runtime.js';
+export * from './server-profile-session.js';
+export * from './server-profile-protection.js';
 export * from './backend-profile-workspace.js';
 export * from './individual-controller-backend-runtime.js';
 export * from './organization-controller-backend-runtime.js';

package/dist/individual-start.d.ts

@@ -1,3 +1,4 @@
+import type { FamilyRegistrationStatus } from 'gdc-common-utils-ts/utils/family-organization-summary';
 import type { PollOptions, SubmitAndPollResult } from './orchestration/client-port.js';
 import type { RouteContext } from './individual-onboarding.js';
 import type { OfferPreview } from './order-offer-summary.js';
@@ -59,6 +60,29 @@ export type IndividualOrganizationStartResult = {
     registration: SubmitAndPollResult;
     offerId: string;
     offerPreview: OfferPreview;
+    /** Lifecycle state returned by GW for this registration receipt. */
+    registrationStatus?: FamilyRegistrationStatus;
+    /** False when the same family registration is already active. */
+    orderConfirmationRequired: boolean;
+    /**
+     * Canonical subject identity projected from the GW registration receipt.
+     *
+     * It is optional only for compatibility with older/non-conforming GW
+     * responses. Current GW responses expose both `resource.id` and
+     * `Offer.offeredBy`, allowing every BFF/channel to consume the same derived
+     * identity without rebuilding a provider DID from route fragments or VAT.
+     */
+    identity?: IndividualOrganizationBootstrapIdentity;
+};
+export type IndividualOrganizationBootstrapIdentity = {
+    /** Technical UUID returned as `Bundle.data[0].resource.id`. */
+    resourceId: string;
+    /** Stable UUID-byte identifier serialized as multibase base58btc. */
+    individualId: string;
+    /** Authoritative provider DID returned by GW in `Offer.offeredBy`. */
+    providerDidWeb: string;
+    /** Canonical child DID built beneath the exact provider DID returned by GW. */
+    subjectDid: string;
 };
 type StartIndividualOrganizationDeps = {
     input: IndividualOrganizationBootstrapInput;
@@ -75,4 +99,13 @@ type StartIndividualOrganizationDeps = {
     getOfferPreviewFromResponse: (result: SubmitAndPollResult) => OfferPreview;
 };
 export declare function startIndividualOrganizationWithDeps(deps: StartIndividualOrganizationDeps): Promise<IndividualOrganizationStartResult>;
+/**
+ * Projects the reusable subject identity from an individual bootstrap receipt.
+ *
+ * `providerDidWeb` is deliberately read from `Offer.offeredBy` and preserved
+ * byte-for-byte. The provider root uses the colon-delimited
+ * `:organization:taxid:` DID path. `buildIndividualDidWeb(...)` only adds the
+ * individual suffix and never rewrites that provider lineage.
+ */
+export declare function readIndividualOrganizationBootstrapIdentity(responseBody: unknown): IndividualOrganizationBootstrapIdentity | undefined;
 export {};

package/dist/individual-start.js

@@ -1,5 +1,6 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
-import { ClaimsOrganizationSchemaorg, ClaimsPersonSchemaorg, ClaimsServiceSchemaorg, } from 'gdc-common-utils-ts/constants';
+import { ClaimsOfferSchemaorg, ClaimsOrganizationSchemaorg, ClaimsPersonSchemaorg, ClaimsServiceSchemaorg, } from 'gdc-common-utils-ts/constants';
+import { buildIndividualDidWeb, encodeHexToMultibase58btc, extractPrimaryClaims, readFamilyOrganizationSummaryFromResponseBody, } from 'gdc-common-utils-ts';
 import { GwCoreLifecycleRequestType } from './constants/lifecycle.js';
 import { resolvePollOptionsFromSeconds } from './poll-options.js';
 export async function startIndividualOrganizationWithDeps(deps) {
@@ -27,6 +28,7 @@ export async function startIndividualOrganizationWithDeps(deps) {
     const controllerRole = String(deps.input.controllerRole || 'RESPRSN').trim();
     const claims = {
         '@context': 'org.schema',
+        ...(deps.input.additionalClaims || {}),
         [ClaimsOrganizationSchemaorg.alternateName]: alternateName,
         [ClaimsServiceSchemaorg.category]: deps.routeCtx.sector,
         [ClaimsPersonSchemaorg.hasOccupationalRoleValue]: controllerRole,
@@ -42,7 +44,6 @@ export async function startIndividualOrganizationWithDeps(deps) {
                 [ClaimsPersonSchemaorg.telephone]: controllerTelephone,
             }
             : {}),
-        ...(deps.input.additionalClaims || {}),
     };
     const registrationPayload = {
         jti: `jti-${createRuntimeUuid()}`,
@@ -77,12 +78,54 @@ export async function startIndividualOrganizationWithDeps(deps) {
     if (!offerId) {
         throw new Error('startIndividualOrganization failed: missing offerId in registration response.');
     }
+    const registrationSummary = readFamilyOrganizationSummaryFromResponseBody(registration.poll.body);
     return {
         registration,
         offerId,
         offerPreview: deps.getOfferPreviewFromResponse(registration),
+        registrationStatus: registrationSummary?.status,
+        orderConfirmationRequired: registrationSummary?.status !== 'already_exists',
+        identity: readIndividualOrganizationBootstrapIdentity(registration.poll.body),
+    };
+}
+/**
+ * Projects the reusable subject identity from an individual bootstrap receipt.
+ *
+ * `providerDidWeb` is deliberately read from `Offer.offeredBy` and preserved
+ * byte-for-byte. The provider root uses the colon-delimited
+ * `:organization:taxid:` DID path. `buildIndividualDidWeb(...)` only adds the
+ * individual suffix and never rewrites that provider lineage.
+ */
+export function readIndividualOrganizationBootstrapIdentity(responseBody) {
+    const root = asRecord(responseBody);
+    const body = asRecord(root?.body) || root;
+    const entries = Array.isArray(body?.data) ? body.data : [];
+    const first = asRecord(entries[0]);
+    const resource = asRecord(first?.resource);
+    const resourceId = String(resource?.id || '').trim();
+    const claims = extractPrimaryClaims(responseBody);
+    const providerDidWeb = String(claims[ClaimsOfferSchemaorg.offeredBy] || '').trim();
+    if (!resourceId || !providerDidWeb)
+        return undefined;
+    let individualId;
+    try {
+        individualId = encodeHexToMultibase58btc(resourceId);
+    }
+    catch {
+        return undefined;
+    }
+    return {
+        resourceId,
+        individualId,
+        providerDidWeb,
+        subjectDid: buildIndividualDidWeb({ providerDidWeb, individualId }),
     };
 }
+function asRecord(value) {
+    return value && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : undefined;
+}
 function createRuntimeUuid() {
     const fromCrypto = globalThis.crypto?.randomUUID?.();
     if (fromCrypto) {

package/dist/node-runtime-client.d.ts

@@ -1,16 +1,17 @@
 import type { OrganizationDidBindingInput } from 'gdc-sdk-core-ts';
 import type { AppInfo } from 'gdc-sdk-core-ts';
 import type { IndividualOrganizationLifecycleInput } from 'gdc-sdk-core-ts';
-import { type ResolvedAppInfo } from 'gdc-sdk-core-ts';
+import { type ResolvedAppInfo, type CommunicationClinicalFormatRenderers, type SecureDidcommTransportAdapter, type TransportProfile } from 'gdc-sdk-core-ts';
 import { type HostRouteContext, type HostedTenantLifecycleInput } from './host-onboarding.js';
 import type { NodeLegalOrganizationVerificationTransactionInput, NodeOrganizationDidBindingInput, NodeOrganizationActivationInput } from './orchestration/client-port.js';
 import { type IndividualOrganizationConfirmOrderInput, type RouteContext } from './individual-onboarding.js';
 import { type EnsureFamilyOrganizationRegistrationInput } from './family-organization-registration.js';
 import { type FamilyOrganizationSearchInput } from './family-organization-search.js';
 import { type SmartTokenRequestInput } from './smart-token.js';
+import { type EmployeeDeviceActivationRequestInput, type EmployeeDeviceActivationResult } from './device-activation.js';
 import { type OrganizationLicenseOrderConfirmInput } from './organization-license-order.js';
 import { type IndividualOrganizationBootstrapInput, type IndividualOrganizationStartResult } from './individual-start.js';
-import { type CommunicationIngestionInput, type BlockchainArtifactRegistrationInput, type VitalSignBatchCommunicationFromSearchResponseInput, type CommunicationParticipantRuntimeSearchInput, type ClinicalBundleSearchInput, type GrantProfessionalAccessInput, type GrantProfessionalAccessResult, type IndividualMemberLifecycleInput, type LicenseListRuntimeSearchInput, type LicenseOfferRuntimeSearchInput, type LicenseOrderRuntimeSearchInput, type OrganizationEmployeeCreationInput, type OrganizationEmployeeLifecycleInput, type OrganizationEmployeeSearchInput, type RevokeProfessionalAccessInput, type RevokeProfessionalAccessResult, type RelatedPersonUpsertInput } from './resource-operations.js';
+import { type CommunicationIngestionInput, type BlockchainArtifactRegistrationInput, type VitalSignBatchCommunicationFromSearchResponseInput, type CommunicationParticipantRuntimeSearchInput, type ClinicalBundleSearchInput, type GrantProfessionalAccessInput, type GrantProfessionalAccessResult, type IndividualMemberLifecycleInput, type IndividualMemberLicenseAddInput, type IndividualMemberLicenseInvitationInput, type IndividualMemberLicenseTransitionInput, type LicenseListRuntimeSearchInput, type LicenseOfferRuntimeSearchInput, type LicenseOrderRuntimeSearchInput, type OrganizationEmployeeCreationInput, type OrganizationEmployeeLifecycleInput, type OrganizationEmployeeSearchInput, type RevokeProfessionalAccessInput, type RevokeProfessionalAccessResult, type RelatedPersonUpsertInput } from './resource-operations.js';
 import type { LegalOrganizationOrderInput } from './host-onboarding.js';
 import type { SmartTokenExchangeResult } from './smart-token.js';
 import type { NodeRuntimeClient, PollOptions, PollResult, SubmitAndPollResult, SubmitPayload, SubmitResponse } from './orchestration/client-port.js';
@@ -48,6 +49,14 @@ export type HttpRuntimeClientOptions = {
     ctx?: RouteContext;
     defaultHeaders?: Record<string, string>;
     requestTimeoutMs?: number;
+    /** Default wire profile for high-level clinical outbox submissions. */
+    transportProfile?: TransportProfile;
+    /** Wallet-backed pack/unpack adapter required by the secure-form profile. */
+    secureTransportAdapter?: SecureDidcommTransportAdapter;
+    /** Product-supplied clinical projections not owned by the generic runtime. */
+    communicationFormatRenderers?: CommunicationClinicalFormatRenderers;
+    /** Injectable fetch implementation for BFF adapters and deterministic tests. */
+    fetchImpl?: typeof fetch;
 };
 /**
  * @deprecated Prefer `HttpRuntimeClientOptions`.
@@ -69,6 +78,10 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
     private readonly ctx?;
     private readonly defaultHeaders;
     private readonly requestTimeoutMs;
+    private readonly transportProfile;
+    private readonly secureTransportAdapter?;
+    private readonly communicationFormatRenderers;
+    private readonly fetchImpl?;
     private readonly httpTraceFile?;
     private readonly tokenCache;
     private readonly paths;
@@ -115,6 +128,7 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
      * Convenience wrapper that performs submit and poll in sequence.
      */
     submitAndPoll(submitPath: string, pollPath: string, payload: SubmitPayload, pollOptions?: PollOptions): Promise<SubmitAndPollResult>;
+    private submitAndPollWithBearerToken;
     /**
      * Starts the host-side legal-organization verification transaction that GW
      * CORE forwards to ICA `_verify`.
@@ -336,6 +350,12 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
      * with optional filters.
      */
     listIndividualLicenses(ctx: RouteContext, input?: LicenseListRuntimeSearchInput): Promise<SubmitAndPollResult>;
+    /** Adds zero-cost seats to one individual organization's member pool. */
+    addFreeIndividualMemberLicenses(ctx: RouteContext, input: IndividualMemberLicenseAddInput): Promise<SubmitAndPollResult>;
+    /** Reserves one individual seat for an existing FHIR v3-role contact. */
+    issueIndividualMemberLicense(ctx: RouteContext, input: IndividualMemberLicenseInvitationInput): Promise<SubmitAndPollResult>;
+    /** Accepts, deactivates or releases one individual-member seat. */
+    transitionIndividualMemberLicense(ctx: RouteContext, action: '_accept' | '_deactivate' | '_release', input: IndividualMemberLicenseTransitionInput): Promise<SubmitAndPollResult>;
     searchIndividualLicenseOffers(ctx: RouteContext, input: LicenseOfferRuntimeSearchInput): Promise<SubmitAndPollResult>;
     listIndividualLicenseOffers(ctx: RouteContext, input?: LicenseOfferRuntimeSearchInput): Promise<SubmitAndPollResult>;
     searchIndividualLicenseOrders(ctx: RouteContext, input: LicenseOrderRuntimeSearchInput): Promise<SubmitAndPollResult>;
@@ -363,6 +383,12 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
      * the default client route context configured in the constructor.
      */
     requestSmartToken(input: SmartTokenRequestInput): Promise<SmartTokenExchangeResult>;
+    /**
+     * Registers any actor profile device through activation-code exchange plus
+     * GW DCR. The historical helper name says employee, but the transport is
+     * actor-neutral and is used by portal and telephone profile runtimes.
+     */
+    activateProfileDeviceWithActivationRequest(input: EmployeeDeviceActivationRequestInput): Promise<EmployeeDeviceActivationResult>;
     /**
      * Creates or updates a `RelatedPerson` for non-employee family/caregiver
      * roles such as a grandfather, guardian, or external caregiver.
@@ -376,6 +402,13 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
      * @param input Communication payload plus route/format options.
      */
     ingestCommunicationAndUpdateIndex(ctx: RouteContext, input: CommunicationIngestionInput): Promise<SubmitAndPollResult>;
+    /**
+     * Renders and submits one canonical clinical outbox job without requiring
+     * BFF, portal or assistant consumers to know GW wire envelopes.
+     */
+    private submitCommunicationOutboxJobAndPoll;
+    /** Applies the configured wire profile to subject-scoped clinical searches. */
+    private submitClinicalMessageAndPoll;
     /**
      * Registers one FHIR resource or raw artifact on blockchain and waits until
      * GW has indexed the resulting DocumentReference projection.
@@ -477,6 +510,8 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
     individualFamilyOrganizationPurgePollPath(ctx?: RouteContext): string;
     individualLicenseSearchPath(ctx?: RouteContext): string;
     individualLicenseSearchPollPath(ctx?: RouteContext): string;
+    individualLicenseActionPath(ctx: RouteContext | undefined, action: string): string;
+    individualLicenseActionPollPath(ctx: RouteContext | undefined, action: string): string;
     individualLicenseOfferSearchPath(ctx?: RouteContext): string;
     individualLicenseOfferSearchPollPath(ctx?: RouteContext): string;
     individualLicenseOrderSearchPath(ctx?: RouteContext): string;
@@ -489,8 +524,8 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
     individualRelatedPersonPurgePollPath(ctx?: RouteContext): string;
     individualConsentR4BatchPath(ctx: RouteContext): string;
     individualConsentR4PollPath(ctx: RouteContext): string;
-    individualCommunicationBatchPath(ctx: RouteContext, format: 'org.hl7.fhir.api' | 'org.hl7.fhir.r4'): string;
-    individualCommunicationPollPath(ctx: RouteContext, format: 'org.hl7.fhir.api' | 'org.hl7.fhir.r4'): string;
+    individualCommunicationBatchPath(ctx: RouteContext, format: string): string;
+    individualCommunicationPollPath(ctx: RouteContext, format: string): string;
     individualCommunicationSearchPath(ctx: RouteContext): string;
     individualCommunicationSearchPollPath(ctx: RouteContext): string;
     individualDocumentReferenceBatchPath(ctx: RouteContext): string;

package/dist/node-runtime-client.js

@@ -1,19 +1,20 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
 // Always create JSDoc, do not use strings inline in keys nor values, use types instead, and reuse the data test examples.
 import { DIDCOMM_PLAINTEXT_JSON_MEDIA_TYPE, } from 'gdc-common-utils-ts/utils/didcomm-submit';
-import { buildAppHeaders, createBootstrapFacade, resolveAppInfo, } from 'gdc-sdk-core-ts';
+import { buildAppHeaders, createBootstrapFacade, decodeTransportResponse, renderCommunicationOutboxRequest, renderGatewayMessageRequest, renderTransportPollRequest, resolveAppInfo, TransportProfiles, } from 'gdc-sdk-core-ts';
 import { pollUntilCompleteWithMethod } from './async-polling.js';
 import { confirmLegalOrganizationOrderWithDeps, HostLifecycleRequestType, HostedTenantLifecycleRequestType, submitHostedTenantLifecycleWithDeps, } from './host-onboarding.js';
 import { confirmIndividualOrganizationOrderWithDeps, } from './individual-onboarding.js';
 import { ensureFamilyOrganizationRegistrationWithDeps, } from './family-organization-registration.js';
 import { searchFamilyOrganizationWithDeps } from './family-organization-search.js';
 import { requestSmartTokenWithDeps } from './smart-token.js';
+import { activateEmployeeDeviceWithActivationCodeWithDeps, activateEmployeeDeviceWithActivationRequestWithDeps, } from './device-activation.js';
 import { extractOfferIdFromResponseBody, extractOfferPreviewFromResponseBody, } from './order-offer-summary.js';
 import { confirmOrganizationLicenseOrderWithDeps } from './organization-license-order.js';
 import { startIndividualOrganizationWithDeps } from './individual-start.js';
-import { createOrganizationEmployeeWithDeps, disableIndividualMemberWithDeps, disableIndividualOrganizationWithDeps, disableOrganizationEmployeeWithDeps, listIndividualLicenseOffersWithDeps, listIndividualLicenseOrdersWithDeps, listIndividualLicensesWithDeps, listOrganizationLicenseOffersWithDeps, listOrganizationLicenseOrdersWithDeps, listOrganizationLicensesWithDeps, grantProfessionalAccessWithDeps, ingestCommunicationAndUpdateIndexWithDeps, buildVitalSignBatchCommunicationFromSearchResponse, registerBlockchainArtifactAndUpdateIndexWithDeps, revokeProfessionalAccessWithDeps, searchCommunicationParticipantsWithDeps, purgeIndividualMemberWithDeps, purgeIndividualOrganizationWithDeps, purgeOrganizationEmployeeWithDeps, searchIndividualLicensesWithDeps, searchIndividualLicenseOffersWithDeps, searchIndividualLicenseOrdersWithDeps, searchOrganizationLicensesWithDeps, searchOrganizationLicenseOffersWithDeps, searchOrganizationLicenseOrdersWithDeps, searchOrganizationEmployeesWithDeps, searchClinicalBundleWithDeps, searchLatestIpsWithDeps, upsertRelatedPersonAndPollWithDeps, } from './resource-operations.js';
+import { createOrganizationEmployeeWithDeps, disableIndividualMemberWithDeps, disableIndividualOrganizationWithDeps, disableOrganizationEmployeeWithDeps, listIndividualLicenseOffersWithDeps, listIndividualLicenseOrdersWithDeps, listIndividualLicensesWithDeps, addFreeIndividualMemberLicensesWithDeps, issueIndividualMemberLicenseWithDeps, transitionIndividualMemberLicenseWithDeps, listOrganizationLicenseOffersWithDeps, listOrganizationLicenseOrdersWithDeps, listOrganizationLicensesWithDeps, grantProfessionalAccessWithDeps, ingestCommunicationAndUpdateIndexWithDeps, buildVitalSignBatchCommunicationFromSearchResponse, registerBlockchainArtifactAndUpdateIndexWithDeps, revokeProfessionalAccessWithDeps, searchCommunicationParticipantsWithDeps, purgeIndividualMemberWithDeps, purgeIndividualOrganizationWithDeps, purgeOrganizationEmployeeWithDeps, searchIndividualLicensesWithDeps, searchIndividualLicenseOffersWithDeps, searchIndividualLicenseOrdersWithDeps, searchOrganizationLicensesWithDeps, searchOrganizationLicenseOffersWithDeps, searchOrganizationLicenseOrdersWithDeps, searchOrganizationEmployeesWithDeps, searchClinicalBundleWithDeps, searchLatestIpsWithDeps, upsertRelatedPersonAndPollWithDeps, normalizeCommunicationPathFormatSegment, } from './resource-operations.js';
 import { submitAndPollWithMethods } from './orchestration/client-port.js';
-import { buildRuntimeHeaders, fetchWithTimeout, parseResponseBody, pollBatchResponseWithRuntimeConfig, postJsonWithRuntimeConfig, } from './runtime-transport.js';
+import { buildRuntimeHeaders, fetchWithTimeout, parseResponseBody, pollBatchResponseWithRuntimeConfig, postJsonWithRuntimeConfig, postRenderedWithRuntimeConfig, } from './runtime-transport.js';
 import { activateOrganizationInGatewayFromIcaProofWithDeps, submitLegalOrganizationIssueWithDeps, submitLegalOrganizationVerificationTransactionWithDeps, submitOrganizationDidBindingWithDeps, } from './runtime-host-submission.js';
 import { buildGrantProfessionalAccessClaimsWithCid } from './runtime-consent.js';
 import { RuntimeClientPaths } from './runtime-client-paths.js';
@@ -35,6 +36,7 @@ export class HttpRuntimeClient {
             defaultHeaders: this.defaultHeaders,
             requestTimeoutMs: this.requestTimeoutMs,
             httpTraceFile: this.httpTraceFile,
+            fetchImpl: this.fetchImpl,
         };
     }
     /**
@@ -62,6 +64,10 @@ export class HttpRuntimeClient {
             ...(options.defaultHeaders || {}),
         };
         this.requestTimeoutMs = Math.max(1, Math.floor(options.requestTimeoutMs ?? 15000));
+        this.transportProfile = options.transportProfile || TransportProfiles.DidcommPlainJson;
+        this.secureTransportAdapter = options.secureTransportAdapter;
+        this.communicationFormatRenderers = options.communicationFormatRenderers || {};
+        this.fetchImpl = options.fetchImpl;
         this.httpTraceFile = String(process.env.SDK_HTTP_TRACE_FILE || '').trim() || undefined;
         this.paths = new RuntimeClientPaths(this.ctx);
     }
@@ -109,6 +115,15 @@ export class HttpRuntimeClient {
     async submitAndPoll(submitPath, pollPath, payload, pollOptions) {
         return submitAndPollWithMethods(this, submitPath, pollPath, payload, pollOptions);
     }
+    async submitAndPollWithBearerToken(bearerToken, submitPath, pollPath, payload, pollOptions) {
+        const config = { ...this.transportConfig, bearerToken };
+        const submitted = await postJsonWithRuntimeConfig(config, submitPath, payload, DIDCOMM_PLAINTEXT_JSON_MEDIA_TYPE);
+        const poll = await pollUntilCompleteWithMethod((path, request) => pollBatchResponseWithRuntimeConfig(config, path, request), pollPath, { thid: String(payload.thid) }, pollOptions);
+        return {
+            submit: { status: submitted.status, location: submitted.location, body: submitted.body },
+            poll,
+        };
+    }
     /**
      * Starts the host-side legal-organization verification transaction that GW
      * CORE forwards to ICA `_verify`.
@@ -570,6 +585,30 @@ export class HttpRuntimeClient {
             submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
+    /** Adds zero-cost seats to one individual organization's member pool. */
+    async addFreeIndividualMemberLicenses(ctx, input) {
+        return addFreeIndividualMemberLicensesWithDeps(ctx, input, {
+            individualLicenseActionPath: this.paths.individualLicenseActionPath.bind(this.paths),
+            individualLicenseActionPollPath: this.paths.individualLicenseActionPollPath.bind(this.paths),
+            submitAndPoll: this.submitAndPoll.bind(this),
+        });
+    }
+    /** Reserves one individual seat for an existing FHIR v3-role contact. */
+    async issueIndividualMemberLicense(ctx, input) {
+        return issueIndividualMemberLicenseWithDeps(ctx, input, {
+            individualLicenseActionPath: this.paths.individualLicenseActionPath.bind(this.paths),
+            individualLicenseActionPollPath: this.paths.individualLicenseActionPollPath.bind(this.paths),
+            submitAndPoll: this.submitAndPoll.bind(this),
+        });
+    }
+    /** Accepts, deactivates or releases one individual-member seat. */
+    async transitionIndividualMemberLicense(ctx, action, input) {
+        return transitionIndividualMemberLicenseWithDeps(ctx, action, input, {
+            individualLicenseActionPath: this.paths.individualLicenseActionPath.bind(this.paths),
+            individualLicenseActionPollPath: this.paths.individualLicenseActionPollPath.bind(this.paths),
+            submitAndPoll: this.submitAndPoll.bind(this),
+        });
+    }
     async searchIndividualLicenseOffers(ctx, input) {
         return searchIndividualLicenseOffersWithDeps(ctx, input, {
             individualLicenseOfferSearchPath: this.paths.individualLicenseOfferSearchPath.bind(this.paths),
@@ -655,6 +694,27 @@ export class HttpRuntimeClient {
             setTokenCache: (tokenCacheKey, token) => this.tokenCache.set(tokenCacheKey, token),
         });
     }
+    /**
+     * Registers any actor profile device through activation-code exchange plus
+     * GW DCR. The historical helper name says employee, but the transport is
+     * actor-neutral and is used by portal and telephone profile runtimes.
+     */
+    async activateProfileDeviceWithActivationRequest(input) {
+        const routeCtx = this.paths.routeCtxFromInput(input);
+        return activateEmployeeDeviceWithActivationRequestWithDeps({
+            routeCtx,
+            input,
+            activateEmployeeDeviceWithActivationCode: (ctx, activationInput) => activateEmployeeDeviceWithActivationCodeWithDeps({
+                routeCtx: ctx,
+                input: activationInput,
+                identityTokenExchangePath: this.paths.identityTokenExchangePath.bind(this.paths),
+                identityTokenExchangePollPath: this.paths.identityTokenExchangePollPath.bind(this.paths),
+                identityDeviceDcrPath: this.paths.identityDeviceDcrPath.bind(this.paths),
+                identityDeviceDcrPollPath: this.paths.identityDeviceDcrPollPath.bind(this.paths),
+                submitAndPollWithBearerToken: this.submitAndPollWithBearerToken.bind(this),
+            }),
+        });
+    }
     /**
      * Creates or updates a `RelatedPerson` for non-employee family/caregiver
      * roles such as a grandfather, guardian, or external caregiver.
@@ -674,12 +734,70 @@ export class HttpRuntimeClient {
      * @param input Communication payload plus route/format options.
      */
     async ingestCommunicationAndUpdateIndex(ctx, input) {
+        if (input.communicationJob) {
+            return this.submitCommunicationOutboxJobAndPoll(ctx, input);
+        }
         return ingestCommunicationAndUpdateIndexWithDeps(ctx, input, {
             individualCommunicationBatchPath: this.paths.individualCommunicationBatchPath.bind(this.paths),
             individualCommunicationPollPath: this.paths.individualCommunicationPollPath.bind(this.paths),
             submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
+    /**
+     * Renders and submits one canonical clinical outbox job without requiring
+     * BFF, portal or assistant consumers to know GW wire envelopes.
+     */
+    async submitCommunicationOutboxJobAndPoll(ctx, input) {
+        const job = input.communicationJob;
+        const profile = input.transportProfile || this.transportProfile;
+        const format = normalizeCommunicationPathFormatSegment(input.clinicalFormat || input.pathFormatSegment);
+        const submitPath = this.paths.individualCommunicationBatchPath(ctx, format);
+        const pollPath = this.paths.individualCommunicationPollPath(ctx, format);
+        const renderedSubmit = await renderCommunicationOutboxRequest(job, profile, this.secureTransportAdapter, {
+            clinicalFormat: input.clinicalFormat || input.pathFormatSegment || 'api',
+            formatRenderers: this.communicationFormatRenderers,
+        });
+        const submit = await postRenderedWithRuntimeConfig(this.transportConfig, submitPath, renderedSubmit);
+        const poll = await pollUntilCompleteWithMethod(async (path, request) => {
+            const renderedPoll = await renderTransportPollRequest(request.thid, profile, this.secureTransportAdapter);
+            const response = await postRenderedWithRuntimeConfig(this.transportConfig, path, renderedPoll);
+            return {
+                status: response.status,
+                body: response.status === 202
+                    ? response.body
+                    : await decodeTransportResponse(response.body, profile, this.secureTransportAdapter),
+                retryAfterMs: response.retryAfterMs,
+            };
+        }, pollPath, { thid: job.thid }, input.pollOptions);
+        return {
+            submit: {
+                status: submit.status,
+                location: submit.location,
+                body: submit.body,
+            },
+            poll,
+        };
+    }
+    /** Applies the configured wire profile to subject-scoped clinical searches. */
+    async submitClinicalMessageAndPoll(submitPath, pollPath, payload, profile, pollOptions) {
+        const renderedSubmit = await renderGatewayMessageRequest(payload, profile, this.secureTransportAdapter);
+        const submit = await postRenderedWithRuntimeConfig(this.transportConfig, submitPath, renderedSubmit);
+        const poll = await pollUntilCompleteWithMethod(async (path, request) => {
+            const renderedPoll = await renderTransportPollRequest(request.thid, profile, this.secureTransportAdapter);
+            const response = await postRenderedWithRuntimeConfig(this.transportConfig, path, renderedPoll);
+            return {
+                status: response.status,
+                body: response.status === 202
+                    ? response.body
+                    : await decodeTransportResponse(response.body, profile, this.secureTransportAdapter),
+                retryAfterMs: response.retryAfterMs,
+            };
+        }, pollPath, { thid: renderedSubmit.thid }, pollOptions);
+        return {
+            submit: { status: submit.status, location: submit.location, body: submit.body },
+            poll,
+        };
+    }
     /**
      * Registers one FHIR resource or raw artifact on blockchain and waits until
      * GW has indexed the resulting DocumentReference projection.
@@ -732,7 +850,7 @@ export class HttpRuntimeClient {
         return searchClinicalBundleWithDeps(ctx, input, {
             bundleSearchPath: this.paths.individualBundleSearchPath.bind(this.paths),
             bundleSearchPollPath: this.paths.individualBundleSearchPollPath.bind(this.paths),
-            submitAndPoll: this.submitAndPoll.bind(this),
+            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, input.transportProfile || this.transportProfile, pollOptions),
         });
     }
     /**
@@ -830,6 +948,8 @@ export class HttpRuntimeClient {
     individualFamilyOrganizationPurgePollPath(ctx) { return this.paths.individualFamilyOrganizationPurgePollPath(ctx); }
     individualLicenseSearchPath(ctx) { return this.paths.individualLicenseSearchPath(ctx); }
     individualLicenseSearchPollPath(ctx) { return this.paths.individualLicenseSearchPollPath(ctx); }
+    individualLicenseActionPath(ctx, action) { return this.paths.individualLicenseActionPath(ctx, action); }
+    individualLicenseActionPollPath(ctx, action) { return this.paths.individualLicenseActionPollPath(ctx, action); }
     individualLicenseOfferSearchPath(ctx) { return this.paths.individualLicenseOfferSearchPath(ctx); }
     individualLicenseOfferSearchPollPath(ctx) { return this.paths.individualLicenseOfferSearchPollPath(ctx); }
     individualLicenseOrderSearchPath(ctx) { return this.paths.individualLicenseOrderSearchPath(ctx); }

package/dist/orchestration/client-port.d.ts

@@ -13,7 +13,7 @@ import type { FamilyOrganizationSearchInput } from '../family-organization-searc
 import type { EnsureFamilyOrganizationRegistrationInput, EnsureFamilyOrganizationRegistrationResult } from '../family-organization-registration.js';
 import type { OrganizationLicenseOrderConfirmInput } from '../organization-license-order.js';
 import type { SmartTokenExchangeResult, SmartTokenRequestInput } from '../smart-token.js';
-import type { CommunicationIngestionInput, BlockchainArtifactRegistrationInput, CommunicationParticipantRuntimeSearchInput, ClinicalBundleSearchInput, VitalSignBatchCommunicationFromSearchResponseInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IpsOrFhirImportInput, OrganizationEmployeeCreationInput, OrganizationEmployeeLifecycleInput, OrganizationEmployeeSearchInput, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, RelatedPersonUpsertInput } from '../resource-operations.js';
+import type { CommunicationIngestionInput, BlockchainArtifactRegistrationInput, CommunicationParticipantRuntimeSearchInput, ClinicalBundleSearchInput, VitalSignBatchCommunicationFromSearchResponseInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IndividualMemberLicenseAddInput, IndividualMemberLicenseInvitationInput, IndividualMemberLicenseTransitionInput, IpsOrFhirImportInput, OrganizationEmployeeCreationInput, OrganizationEmployeeLifecycleInput, OrganizationEmployeeSearchInput, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, RelatedPersonUpsertInput } from '../resource-operations.js';
 /**
  * Shared node-runtime activation input.
  *
@@ -95,6 +95,9 @@ export type RuntimeClient = {
     revokeProfessionalAccess?: (ctx: RouteContext, input: RevokeProfessionalAccessInput) => Promise<RevokeProfessionalAccessResult>;
     searchIndividualLicenses?: (ctx: RouteContext, input: LicenseListRuntimeSearchInput) => Promise<SubmitAndPollResult>;
     listIndividualLicenses?: (ctx: RouteContext, input?: LicenseListRuntimeSearchInput) => Promise<SubmitAndPollResult>;
+    addFreeIndividualMemberLicenses?: (ctx: RouteContext, input: IndividualMemberLicenseAddInput) => Promise<SubmitAndPollResult>;
+    issueIndividualMemberLicense?: (ctx: RouteContext, input: IndividualMemberLicenseInvitationInput) => Promise<SubmitAndPollResult>;
+    transitionIndividualMemberLicense?: (ctx: RouteContext, action: '_accept' | '_deactivate' | '_release', input: IndividualMemberLicenseTransitionInput) => Promise<SubmitAndPollResult>;
     searchIndividualLicenseOffers?: (ctx: RouteContext, input: LicenseOfferRuntimeSearchInput) => Promise<SubmitAndPollResult>;
     listIndividualLicenseOffers?: (ctx: RouteContext, input?: LicenseOfferRuntimeSearchInput) => Promise<SubmitAndPollResult>;
     searchIndividualLicenseOrders?: (ctx: RouteContext, input: LicenseOrderRuntimeSearchInput) => Promise<SubmitAndPollResult>;

package/dist/orchestration/individual-controller-sdk.d.ts

@@ -7,7 +7,7 @@ import type { IndividualOrganizationConfirmOrderInput, RouteContext } from '../i
 import type { IndividualOrganizationBootstrapInput, IndividualOrganizationStartResult } from '../individual-start.js';
 import type { NodeCapability } from '../session.js';
 import type { IndividualOrganizationLifecycleInput } from 'gdc-sdk-core-ts';
-import type { BlockchainArtifactRegistrationInput, ClinicalBundleSearchInput, CommunicationIngestionInput, CommunicationParticipantRuntimeSearchInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IpsOrFhirImportInput, LicenseListRuntimeSearchInput, LicenseOfferRuntimeSearchInput, LicenseOrderRuntimeSearchInput, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, RelatedPersonUpsertInput } from '../resource-operations.js';
+import type { BlockchainArtifactRegistrationInput, ClinicalBundleSearchInput, CommunicationIngestionInput, CommunicationParticipantRuntimeSearchInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IndividualMemberLicenseAddInput, IndividualMemberLicenseInvitationInput, IndividualMemberLicenseTransitionInput, IpsOrFhirImportInput, LicenseListRuntimeSearchInput, LicenseOfferRuntimeSearchInput, LicenseOrderRuntimeSearchInput, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, RelatedPersonUpsertInput } from '../resource-operations.js';
 import type { SmartTokenExchangeResult, SmartTokenRequestInput } from '../smart-token.js';
 /**
  * Individual-controller oriented facade over a `NodeRuntimeClient`.
@@ -116,6 +116,15 @@ export declare class IndividualControllerSdk {
      * Lists subject/individual-side license seats with optional filters.
      */
     listLicenses(ctx: RouteContext, input?: LicenseListRuntimeSearchInput): Promise<SubmitAndPollResult>;
+    /** Adds zero-cost member seats to the selected individual organization. */
+    addFreeMemberLicenses(ctx: RouteContext, input: IndividualMemberLicenseAddInput): Promise<SubmitAndPollResult>;
+    /**
+     * Reserves one member seat for an existing FHIR v3 RoleCode contact.
+     * ISCO professionals must use Consent without this operation.
+     */
+    issueMemberInvitationLicense(ctx: RouteContext, input: IndividualMemberLicenseInvitationInput): Promise<SubmitAndPollResult>;
+    /** Accepts, deactivates or releases one member invitation seat. */
+    transitionMemberLicense(ctx: RouteContext, action: '_accept' | '_deactivate' | '_release', input: IndividualMemberLicenseTransitionInput): Promise<SubmitAndPollResult>;
     /**
      * Searches commercial license offers known for the individual/family
      * context.

package/dist/orchestration/individual-controller-sdk.js

@@ -169,6 +169,21 @@ export class IndividualControllerSdk {
     listLicenses(ctx, input = {}) {
         return requireClientMethod(this.client, 'listIndividualLicenses')(ctx, input);
     }
+    /** Adds zero-cost member seats to the selected individual organization. */
+    addFreeMemberLicenses(ctx, input) {
+        return requireClientMethod(this.client, 'addFreeIndividualMemberLicenses')(ctx, input);
+    }
+    /**
+     * Reserves one member seat for an existing FHIR v3 RoleCode contact.
+     * ISCO professionals must use Consent without this operation.
+     */
+    issueMemberInvitationLicense(ctx, input) {
+        return requireClientMethod(this.client, 'issueIndividualMemberLicense')(ctx, input);
+    }
+    /** Accepts, deactivates or releases one member invitation seat. */
+    transitionMemberLicense(ctx, action, input) {
+        return requireClientMethod(this.client, 'transitionIndividualMemberLicense')(ctx, action, input);
+    }
     /**
      * Searches commercial license offers known for the individual/family
      * context.