gdc-sdk-node-ts 2.3.17 → 2.3.19

package/README.md

@@ -406,9 +406,20 @@ data ingestion/search.
 - professional access grant
 - invitation / OTP / relationship PIN runtime wiring
 - permission-request `Communication`
+- composed professional request submission and subject decision correlation
 - communication ingestion and search
 - SMART token retrieval
 
+`ProfessionalSdk.requestProfessionalAccess(...)` is the bootstrap operation
+for the inverse flow: it persists a subject-scoped permission-request
+`Communication` using the configured HTTP bearer and transport profile, without
+requiring SMART. The subject later answers through
+`respondToProfessionalAccessRequest(...)`; that facade uses the normal Consent
+grant/deny operation and retains the original Communication identifier/thread.
+`listProfessionalAccessRequests(...)` provides the subject/requester inbox view,
+and `GatewayActiveConsentProvider` supplies `evaluateRequestedAccess(...)` from
+the GW Consent source of truth rather than a parallel application table.
+
 ## Main Flows
 
 ### 1. Controller invites a related person or professional

package/dist/gateway-active-consent-provider.d.ts

@@ -0,0 +1,19 @@
+import { type ConsentRule } from 'gdc-common-utils-ts/models/consent-rule';
+import type { ActiveConsentProvider } from 'gdc-sdk-core-ts';
+import type { RouteContext } from './individual-onboarding.js';
+import { type NodeRuntimeClient } from './orchestration/client-port.js';
+/**
+ * GW-backed implementation of the runtime-neutral ActiveConsentProvider.
+ *
+ * The configured client decides HTTP authentication and transport protection.
+ * This adapter does not introduce an application-owned Consent table.
+ */
+export declare class GatewayActiveConsentProvider implements ActiveConsentProvider {
+    private readonly client;
+    private readonly routeContext;
+    constructor(client: NodeRuntimeClient, routeContext: RouteContext);
+    /** Loads and normalizes the active Consent rules owned by one subject. */
+    getActiveConsentsForSubject(subject: string): Promise<ConsentRule[]>;
+}
+/** Extracts canonical Consent claim maps from current GW Bundle wrappers. */
+export declare function extractConsentRules(value: unknown): ConsentRule[];

package/dist/gateway-active-consent-provider.js

@@ -0,0 +1,70 @@
+// Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
+import { ResourceTypesFhirR4 } from 'gdc-common-utils-ts/constants/fhir-resource-types';
+import { ClaimConsent } from 'gdc-common-utils-ts/models/consent-rule';
+import { isConsentRuleActive } from 'gdc-common-utils-ts/utils/consent';
+import { requireClientMethod } from './orchestration/client-port.js';
+/**
+ * GW-backed implementation of the runtime-neutral ActiveConsentProvider.
+ *
+ * The configured client decides HTTP authentication and transport protection.
+ * This adapter does not introduce an application-owned Consent table.
+ */
+export class GatewayActiveConsentProvider {
+    constructor(client, routeContext) {
+        this.client = client;
+        this.routeContext = routeContext;
+    }
+    /** Loads and normalizes the active Consent rules owned by one subject. */
+    async getActiveConsentsForSubject(subject) {
+        const normalizedSubject = String(subject || '').trim();
+        if (!normalizedSubject.startsWith('did:')) {
+            throw new Error('Active Consent lookup requires a subject DID.');
+        }
+        const result = await requireClientMethod(this.client, 'searchClinicalBundle')(this.routeContext, {
+            subject: normalizedSubject,
+            includedTypes: [ResourceTypesFhirR4.Consent],
+        });
+        return extractConsentRules(result.poll.body)
+            .filter((rule) => isConsentRuleActive(rule, { subject: normalizedSubject }));
+    }
+}
+/** Extracts canonical Consent claim maps from current GW Bundle wrappers. */
+export function extractConsentRules(value) {
+    const candidates = [];
+    const seenObjects = new Set();
+    const seenRules = new Set();
+    function visit(node) {
+        if (!node || typeof node !== 'object')
+            return;
+        if (seenObjects.has(node))
+            return;
+        seenObjects.add(node);
+        if (Array.isArray(node)) {
+            node.forEach(visit);
+            return;
+        }
+        const record = node;
+        const claims = record.claims && typeof record.claims === 'object'
+            ? record.claims
+            : undefined;
+        for (const candidate of [record, claims]) {
+            if (!candidate || !looksLikeConsentRule(candidate))
+                continue;
+            const rule = candidate;
+            const key = String(rule[ClaimConsent.identifier] || JSON.stringify(rule));
+            if (!seenRules.has(key)) {
+                seenRules.add(key);
+                candidates.push(rule);
+            }
+        }
+        Object.values(record).forEach(visit);
+    }
+    visit(value);
+    return candidates;
+}
+function looksLikeConsentRule(value) {
+    return Boolean(String(value[ClaimConsent.subject] || '').trim()
+        && String(value[ClaimConsent.actorIdentifier] || '').trim()
+        && String(value[ClaimConsent.decision] || '').trim()
+        && String(value[ClaimConsent.action] || '').trim());
+}

package/dist/index.d.ts

@@ -29,6 +29,7 @@ export * from './node-managed-wallet.js';
 export * from './did-web-recipient.js';
 export * from './constants/lifecycle.js';
 export * from './consent-claim-helpers.js';
+export * from './gateway-active-consent-provider.js';
 export * from './session.js';
 export * from './node-runtime-client.js';
 export * from './gdc-session-bridge.js';

package/dist/index.js

@@ -30,6 +30,7 @@ export * from './node-managed-wallet.js';
 export * from './did-web-recipient.js';
 export * from './constants/lifecycle.js';
 export * from './consent-claim-helpers.js';
+export * from './gateway-active-consent-provider.js';
 export * from './session.js';
 export * from './node-runtime-client.js';
 export * from './gdc-session-bridge.js';

package/dist/node-runtime-client.d.ts

@@ -11,7 +11,7 @@ import { type SmartTokenRequestInput } from './smart-token.js';
 import { type EmployeeDeviceActivationRequestInput, type EmployeeDeviceActivationResult } from './device-activation.js';
 import { type OrganizationLicenseOrderConfirmInput } from './organization-license-order.js';
 import { type IndividualOrganizationBootstrapInput, type IndividualOrganizationStartResult } from './individual-start.js';
-import { type CommunicationIngestionInput, type BlockchainArtifactRegistrationInput, type VitalSignBatchCommunicationFromSearchResponseInput, type CommunicationParticipantRuntimeSearchInput, type ClinicalBundleSearchInput, type ClinicalSectionUpdateInput, type ClinicalSummaryReadResult, type ClinicalSummaryRequestInput, type ClinicalSummaryUpdateInput, type GrantProfessionalAccessInput, type GrantProfessionalAccessResult, type IndividualMemberLifecycleInput, type IndividualMemberLicenseAddInput, type IndividualMemberLicenseInvitationInput, type IndividualMemberLicenseTransitionInput, type LicenseListRuntimeSearchInput, type LicenseOfferRuntimeSearchInput, type LicenseOrderRuntimeSearchInput, type OrganizationEmployeeCreationInput, type OrganizationEmployeeLifecycleInput, type OrganizationEmployeeSearchInput, type RevokeProfessionalAccessInput, type RevokeProfessionalAccessResult, type RelatedPersonUpsertInput } from './resource-operations.js';
+import { type CommunicationIngestionInput, type BlockchainArtifactRegistrationInput, type VitalSignBatchCommunicationFromSearchResponseInput, type CommunicationParticipantRuntimeSearchInput, type ClinicalBundleSearchInput, type ClinicalSectionUpdateInput, type ClinicalSummaryReadResult, type ClinicalSummaryRequestInput, type ClinicalSummaryUpdateInput, type GrantProfessionalAccessInput, type GrantProfessionalAccessResult, type IndividualMemberLifecycleInput, type IndividualMemberLicenseAddInput, type IndividualMemberLicenseInvitationInput, type IndividualMemberLicenseTransitionInput, type LicenseListRuntimeSearchInput, type LicenseOfferRuntimeSearchInput, type LicenseOrderRuntimeSearchInput, type OrganizationEmployeeCreationInput, type OrganizationEmployeeLifecycleInput, type OrganizationEmployeeSearchInput, type ProfessionalAccessRequestInput, type ProfessionalAccessRequestResult, type RevokeProfessionalAccessInput, type RevokeProfessionalAccessResult, type RelatedPersonUpsertInput } from './resource-operations.js';
 import type { LegalOrganizationOrderInput } from './host-onboarding.js';
 import type { SmartTokenExchangeResult } from './smart-token.js';
 import type { NodeRuntimeClient, PollOptions, PollResult, SubmitAndPollResult, SubmitPayload, SubmitResponse } from './orchestration/client-port.js';
@@ -409,6 +409,12 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
      * @param input Communication payload plus route/format options.
      */
     ingestCommunicationAndUpdateIndex(ctx: RouteContext, input: CommunicationIngestionInput): Promise<SubmitAndPollResult>;
+    /**
+     * Records a subject-scoped permission-request Communication before SMART
+     * authorization exists. The configured bearer authenticates HTTP and the
+     * configured secure transport adapter signs/encrypts DIDComm when enabled.
+     */
+    requestProfessionalAccess(ctx: RouteContext, input: ProfessionalAccessRequestInput): Promise<ProfessionalAccessRequestResult>;
     /**
      * Updates exactly one clinical section.
      *

package/dist/node-runtime-client.js

@@ -12,7 +12,7 @@ import { activateEmployeeDeviceWithActivationCodeWithDeps, activateEmployeeDevic
 import { extractOfferIdFromResponseBody, extractOfferPreviewFromResponseBody, } from './order-offer-summary.js';
 import { confirmOrganizationLicenseOrderWithDeps } from './organization-license-order.js';
 import { startIndividualOrganizationWithDeps } from './individual-start.js';
-import { createOrganizationEmployeeWithDeps, disableIndividualMemberWithDeps, disableIndividualOrganizationWithDeps, disableOrganizationEmployeeWithDeps, listIndividualLicenseOffersWithDeps, listIndividualLicenseOrdersWithDeps, listIndividualLicensesWithDeps, addFreeIndividualMemberLicensesWithDeps, issueIndividualMemberLicenseWithDeps, transitionIndividualMemberLicenseWithDeps, listOrganizationLicenseOffersWithDeps, listOrganizationLicenseOrdersWithDeps, listOrganizationLicensesWithDeps, grantProfessionalAccessWithDeps, buildClinicalSectionUpdateIngestion, buildClinicalSummaryUpdateIngestion, ingestCommunicationAndUpdateIndexWithDeps, buildVitalSignBatchCommunicationFromSearchResponse, registerBlockchainArtifactAndUpdateIndexWithDeps, requestClinicalSummaryWithDeps, revokeProfessionalAccessWithDeps, searchCommunicationParticipantsWithDeps, purgeIndividualMemberWithDeps, purgeIndividualOrganizationWithDeps, purgeOrganizationEmployeeWithDeps, searchIndividualLicensesWithDeps, searchIndividualLicenseOffersWithDeps, searchIndividualLicenseOrdersWithDeps, searchOrganizationLicensesWithDeps, searchOrganizationLicenseOffersWithDeps, searchOrganizationLicenseOrdersWithDeps, searchOrganizationEmployeesWithDeps, searchClinicalBundleWithDeps, searchLatestIpsWithDeps, upsertRelatedPersonAndPollWithDeps, normalizeCommunicationPathFormatSegment, } from './resource-operations.js';
+import { createOrganizationEmployeeWithDeps, disableIndividualMemberWithDeps, disableIndividualOrganizationWithDeps, disableOrganizationEmployeeWithDeps, listIndividualLicenseOffersWithDeps, listIndividualLicenseOrdersWithDeps, listIndividualLicensesWithDeps, addFreeIndividualMemberLicensesWithDeps, issueIndividualMemberLicenseWithDeps, transitionIndividualMemberLicenseWithDeps, listOrganizationLicenseOffersWithDeps, listOrganizationLicenseOrdersWithDeps, listOrganizationLicensesWithDeps, grantProfessionalAccessWithDeps, buildClinicalSectionUpdateIngestion, buildClinicalSummaryUpdateIngestion, ingestCommunicationAndUpdateIndexWithDeps, requestProfessionalAccessWithDeps, buildVitalSignBatchCommunicationFromSearchResponse, registerBlockchainArtifactAndUpdateIndexWithDeps, requestClinicalSummaryWithDeps, revokeProfessionalAccessWithDeps, searchCommunicationParticipantsWithDeps, purgeIndividualMemberWithDeps, purgeIndividualOrganizationWithDeps, purgeOrganizationEmployeeWithDeps, prepareEmployeeLifecycleMessageForTransport, searchIndividualLicensesWithDeps, searchIndividualLicenseOffersWithDeps, searchIndividualLicenseOrdersWithDeps, searchOrganizationLicensesWithDeps, searchOrganizationLicenseOffersWithDeps, searchOrganizationLicenseOrdersWithDeps, searchOrganizationEmployeesWithDeps, searchClinicalBundleWithDeps, searchLatestIpsWithDeps, upsertRelatedPersonAndPollWithDeps, normalizeCommunicationPathFormatSegment, } from './resource-operations.js';
 import { submitAndPollWithMethods } from './orchestration/client-port.js';
 import { buildRuntimeHeaders, fetchWithTimeout, parseResponseBody, pollBatchResponseWithRuntimeConfig, postJsonWithRuntimeConfig, postRenderedWithRuntimeConfig, } from './runtime-transport.js';
 import { activateOrganizationInGatewayFromIcaProofWithDeps, submitLegalOrganizationIssueWithDeps, submitLegalOrganizationVerificationTransactionWithDeps, submitOrganizationDidBindingWithDeps, } from './runtime-host-submission.js';
@@ -328,7 +328,7 @@ export class HttpRuntimeClient {
         return createOrganizationEmployeeWithDeps(ctx, input, pollOptions, {
             employeeBatchPath: this.paths.employeeBatchPath.bind(this.paths),
             employeePollPath: this.paths.employeePollPath.bind(this.paths),
-            submitAndPoll: this.submitAndPoll.bind(this),
+            submitAndPoll: (submitPath, pollPath, payload, options) => this.submitClinicalMessageAndPoll(submitPath, pollPath, prepareEmployeeLifecycleMessageForTransport(payload, this.transportProfile), this.transportProfile, options),
         });
     }
     /**
@@ -749,6 +749,18 @@ export class HttpRuntimeClient {
             submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
+    /**
+     * Records a subject-scoped permission-request Communication before SMART
+     * authorization exists. The configured bearer authenticates HTTP and the
+     * configured secure transport adapter signs/encrypts DIDComm when enabled.
+     */
+    async requestProfessionalAccess(ctx, input) {
+        return requestProfessionalAccessWithDeps(ctx, input, {
+            individualCommunicationBatchPath: this.paths.individualCommunicationBatchPath.bind(this.paths),
+            individualCommunicationPollPath: this.paths.individualCommunicationPollPath.bind(this.paths),
+            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, input.transportProfile || this.transportProfile, pollOptions),
+        });
+    }
     /**
      * Updates exactly one clinical section.
      *

package/dist/orchestration/client-port.d.ts

@@ -13,7 +13,7 @@ import type { FamilyOrganizationSearchInput } from '../family-organization-searc
 import type { EnsureFamilyOrganizationRegistrationInput, EnsureFamilyOrganizationRegistrationResult } from '../family-organization-registration.js';
 import type { OrganizationLicenseOrderConfirmInput } from '../organization-license-order.js';
 import type { SmartTokenExchangeResult, SmartTokenRequestInput } from '../smart-token.js';
-import type { CommunicationIngestionInput, BlockchainArtifactRegistrationInput, CommunicationParticipantRuntimeSearchInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, VitalSignBatchCommunicationFromSearchResponseInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IndividualMemberLicenseAddInput, IndividualMemberLicenseInvitationInput, IndividualMemberLicenseTransitionInput, IpsOrFhirImportInput, OrganizationEmployeeCreationInput, OrganizationEmployeeLifecycleInput, OrganizationEmployeeSearchInput, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, RelatedPersonUpsertInput } from '../resource-operations.js';
+import type { CommunicationIngestionInput, BlockchainArtifactRegistrationInput, CommunicationParticipantRuntimeSearchInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, VitalSignBatchCommunicationFromSearchResponseInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IndividualMemberLicenseAddInput, IndividualMemberLicenseInvitationInput, IndividualMemberLicenseTransitionInput, IpsOrFhirImportInput, OrganizationEmployeeCreationInput, OrganizationEmployeeLifecycleInput, OrganizationEmployeeSearchInput, ProfessionalAccessRequestInput, ProfessionalAccessRequestResult, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, RelatedPersonUpsertInput } from '../resource-operations.js';
 /**
  * Shared node-runtime activation input.
  *
@@ -89,6 +89,7 @@ export type RuntimeClient = {
     disableIndividualOrganization?: (ctx: RouteContext, input: IndividualOrganizationLifecycleInput, pollOptions?: PollOptions) => Promise<SubmitAndPollResult>;
     purgeIndividualOrganization?: (ctx: RouteContext, input: IndividualOrganizationLifecycleInput, pollOptions?: PollOptions) => Promise<SubmitAndPollResult>;
     ingestCommunicationAndUpdateIndex?: (ctx: RouteContext, input: CommunicationIngestionInput) => Promise<SubmitAndPollResult>;
+    requestProfessionalAccess?: (ctx: RouteContext, input: ProfessionalAccessRequestInput) => Promise<ProfessionalAccessRequestResult>;
     updateClinicalSection?: (ctx: RouteContext, input: ClinicalSectionUpdateInput) => Promise<SubmitAndPollResult>;
     updateClinicalSummary?: (ctx: RouteContext, input: ClinicalSummaryUpdateInput) => Promise<SubmitAndPollResult>;
     requestClinicalSummary?: (ctx: RouteContext, input: ClinicalSummaryRequestInput) => Promise<ClinicalSummaryReadResult>;

package/dist/orchestration/individual-controller-sdk.d.ts

@@ -7,7 +7,7 @@ import type { IndividualOrganizationConfirmOrderInput, RouteContext } from '../i
 import type { IndividualOrganizationBootstrapInput, IndividualOrganizationStartResult } from '../individual-start.js';
 import type { NodeCapability } from '../session.js';
 import type { IndividualOrganizationLifecycleInput } from 'gdc-sdk-core-ts';
-import type { BlockchainArtifactRegistrationInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, CommunicationIngestionInput, CommunicationParticipantRuntimeSearchInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IndividualMemberLicenseAddInput, IndividualMemberLicenseInvitationInput, IndividualMemberLicenseTransitionInput, IpsOrFhirImportInput, LicenseListRuntimeSearchInput, LicenseOfferRuntimeSearchInput, LicenseOrderRuntimeSearchInput, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, RelatedPersonUpsertInput } from '../resource-operations.js';
+import type { BlockchainArtifactRegistrationInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, CommunicationIngestionInput, CommunicationParticipantRuntimeSearchInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IndividualMemberLicenseAddInput, IndividualMemberLicenseInvitationInput, IndividualMemberLicenseTransitionInput, IpsOrFhirImportInput, LicenseListRuntimeSearchInput, LicenseOfferRuntimeSearchInput, LicenseOrderRuntimeSearchInput, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, ProfessionalAccessRequestDecisionInput, ProfessionalAccessRequestSearchInput, RelatedPersonUpsertInput } from '../resource-operations.js';
 import type { SmartTokenExchangeResult, SmartTokenRequestInput } from '../smart-token.js';
 /**
  * Individual-controller oriented facade over a `NodeRuntimeClient`.
@@ -70,6 +70,10 @@ export declare class IndividualControllerSdk {
      * Grants access to a professional through a consent flow.
      */
     grantProfessionalAccess(ctx: RouteContext, input: GrantProfessionalAccessInput): Promise<GrantProfessionalAccessResult>;
+    /** Approves or denies a permission request while retaining its correlation. */
+    respondToProfessionalAccessRequest(ctx: RouteContext, input: ProfessionalAccessRequestDecisionInput): Promise<GrantProfessionalAccessResult>;
+    /** Lists canonical permission requests addressed to this subject. */
+    listProfessionalAccessRequests(ctx: RouteContext, input: ProfessionalAccessRequestSearchInput): Promise<SubmitAndPollResult>;
     /**
      * Closes an existing professional consent by setting its period end.
      */

package/dist/orchestration/individual-controller-sdk.js

@@ -3,6 +3,8 @@ import { ActorCapabilities, ActorKinds } from 'gdc-common-utils-ts/constants/act
 import { buildIndividualControllerIdentityVpPayload, buildUnsignedIndividualControllerIdentityVpJwt, getIndividualControllerIdentitySameAs, getIndividualControllerIdentityVC, getIndividualSubjectVC, } from 'gdc-common-utils-ts';
 import { requireClientMethod, submitAndPollWithClient, } from './client-port.js';
 import { assertFacadeCapability } from './capability-guard.js';
+import { buildProfessionalAccessRequestDecisionGrant } from '../resource-operations.js';
+import { buildProfessionalAccessRequestSearchInput } from '../resource-operations.js';
 /**
  * Individual-controller oriented facade over a `NodeRuntimeClient`.
  *
@@ -96,6 +98,15 @@ export class IndividualControllerSdk {
         assertFacadeCapability(this.capabilities, ActorCapabilities.ConsentGrantProfessionalAccess, ActorKinds.IndividualController, 'grantProfessionalAccess');
         return requireClientMethod(this.client, 'grantProfessionalAccess')(ctx, input);
     }
+    /** Approves or denies a permission request while retaining its correlation. */
+    respondToProfessionalAccessRequest(ctx, input) {
+        assertFacadeCapability(this.capabilities, ActorCapabilities.ConsentGrantProfessionalAccess, ActorKinds.IndividualController, 'respondToProfessionalAccessRequest');
+        return requireClientMethod(this.client, 'grantProfessionalAccess')(ctx, buildProfessionalAccessRequestDecisionGrant(input));
+    }
+    /** Lists canonical permission requests addressed to this subject. */
+    listProfessionalAccessRequests(ctx, input) {
+        return requireClientMethod(this.client, 'searchCommunicationParticipants')(ctx, buildProfessionalAccessRequestSearchInput(input));
+    }
     /**
      * Closes an existing professional consent by setting its period end.
      */

package/dist/orchestration/personal-sdk.d.ts

@@ -1,7 +1,7 @@
 import { type NodeRuntimeClient, type PollOptions, type SubmitAndPollResult, type SubmitPayload } from './client-port.js';
 import type { IndividualOrganizationBootstrapInput, IndividualOrganizationStartResult } from '../individual-start.js';
 import type { RouteContext } from '../individual-onboarding.js';
-import type { BlockchainArtifactRegistrationInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, CommunicationIngestionInput, CommunicationParticipantRuntimeSearchInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IpsOrFhirImportInput, LicenseListRuntimeSearchInput, LicenseOfferRuntimeSearchInput, LicenseOrderRuntimeSearchInput } from '../resource-operations.js';
+import type { BlockchainArtifactRegistrationInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, CommunicationIngestionInput, CommunicationParticipantRuntimeSearchInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, ProfessionalAccessRequestDecisionInput, ProfessionalAccessRequestSearchInput, IpsOrFhirImportInput, LicenseListRuntimeSearchInput, LicenseOfferRuntimeSearchInput, LicenseOrderRuntimeSearchInput } from '../resource-operations.js';
 import type { SmartTokenExchangeResult, SmartTokenRequestInput } from '../smart-token.js';
 export declare class PersonalSdk {
     private readonly client;
@@ -10,6 +10,10 @@ export declare class PersonalSdk {
     startIndividualOrganization(input: IndividualOrganizationBootstrapInput): Promise<IndividualOrganizationStartResult>;
     /** Grants professional access via Consent for a subject. */
     grantProfessionalAccess(ctx: RouteContext, input: GrantProfessionalAccessInput): Promise<GrantProfessionalAccessResult>;
+    /** Approves or denies a permission request while retaining its correlation. */
+    respondToProfessionalAccessRequest(ctx: RouteContext, input: ProfessionalAccessRequestDecisionInput): Promise<GrantProfessionalAccessResult>;
+    /** Lists canonical permission requests addressed to this subject. */
+    listProfessionalAccessRequests(ctx: RouteContext, input: ProfessionalAccessRequestSearchInput): Promise<SubmitAndPollResult>;
     /** Imports IPS/FHIR payload and updates document index projections. */
     importIpsOrFhirAndUpdateIndex(ctx: RouteContext, input: IpsOrFhirImportInput): Promise<SubmitAndPollResult>;
     /** Ingests canonical Communication and waits for projection completion. */

package/dist/orchestration/personal-sdk.js

@@ -1,5 +1,7 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
 import { requireClientMethod, submitAndPollWithClient, } from './client-port.js';
+import { buildProfessionalAccessRequestDecisionGrant } from '../resource-operations.js';
+import { buildProfessionalAccessRequestSearchInput } from '../resource-operations.js';
 export class PersonalSdk {
     constructor(client) {
         this.client = client;
@@ -12,6 +14,14 @@ export class PersonalSdk {
     grantProfessionalAccess(ctx, input) {
         return requireClientMethod(this.client, 'grantProfessionalAccess')(ctx, input);
     }
+    /** Approves or denies a permission request while retaining its correlation. */
+    respondToProfessionalAccessRequest(ctx, input) {
+        return requireClientMethod(this.client, 'grantProfessionalAccess')(ctx, buildProfessionalAccessRequestDecisionGrant(input));
+    }
+    /** Lists canonical permission requests addressed to this subject. */
+    listProfessionalAccessRequests(ctx, input) {
+        return requireClientMethod(this.client, 'searchCommunicationParticipants')(ctx, buildProfessionalAccessRequestSearchInput(input));
+    }
     /** Imports IPS/FHIR payload and updates document index projections. */
     importIpsOrFhirAndUpdateIndex(ctx, input) {
         return requireClientMethod(this.client, 'importIpsOrFhirAndUpdateIndex')(ctx, input);

package/dist/orchestration/professional-sdk.d.ts

@@ -2,7 +2,7 @@ import { type ProfessionalEmployeeCredentialInput, type ProfessionalSmartVpPaylo
 import { type NodeRuntimeClient, type PollOptions, type SubmitAndPollResult, type SubmitPayload } from './client-port.js';
 import type { RouteContext } from '../individual-onboarding.js';
 import type { SmartTokenExchangeResult, SmartTokenRequestInput } from '../smart-token.js';
-import type { BlockchainArtifactRegistrationInput, CommunicationIngestionInput, CommunicationParticipantRuntimeSearchInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, VitalSignBatchCommunicationFromSearchResponseInput } from '../resource-operations.js';
+import type { BlockchainArtifactRegistrationInput, CommunicationIngestionInput, CommunicationParticipantRuntimeSearchInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, ProfessionalAccessRequestInput, ProfessionalAccessRequestResult, ProfessionalAccessRequestSearchInput, VitalSignBatchCommunicationFromSearchResponseInput } from '../resource-operations.js';
 /**
  * Professional-oriented facade for runtime actions that belong to the
  * professional actor itself after tenant and employee provisioning have already
@@ -75,6 +75,13 @@ export declare class ProfessionalSdk {
      * Ingests a FHIR `Communication` and waits for indexing.
      */
     ingestCommunicationAndUpdateIndex(ctx: RouteContext, input: CommunicationIngestionInput): Promise<SubmitAndPollResult>;
+    /**
+     * Requests subject-controlled access without requiring a SMART token. The
+     * runtime persists one canonical permission-request Communication.
+     */
+    requestProfessionalAccess(ctx: RouteContext, input: ProfessionalAccessRequestInput): Promise<ProfessionalAccessRequestResult>;
+    /** Lists permission requests sent by or involving this professional. */
+    listProfessionalAccessRequests(ctx: RouteContext, input: ProfessionalAccessRequestSearchInput): Promise<SubmitAndPollResult>;
     /** Updates one consent-authorized clinical section through a scoped batch/collection. */
     updateClinicalSection(ctx: RouteContext, input: ClinicalSectionUpdateInput): Promise<SubmitAndPollResult>;
     /** Updates a consent-authorized multi-section summary document. */

package/dist/orchestration/professional-sdk.js

@@ -2,6 +2,7 @@
 // Always create JSDoc, do not use strings inline in keys nor values, use types instead, and reuse the data test examples.
 import { buildProfessionalIdentityVpPayload, buildUnsignedProfessionalIdentityVpJwt, getProfessionalIdentitySameAs, getProfessionalIdentityVC, } from 'gdc-common-utils-ts';
 import { requireClientMethod, submitAndPollWithClient, } from './client-port.js';
+import { buildProfessionalAccessRequestSearchInput } from '../resource-operations.js';
 /**
  * Professional-oriented facade for runtime actions that belong to the
  * professional actor itself after tenant and employee provisioning have already
@@ -89,6 +90,17 @@ export class ProfessionalSdk {
     ingestCommunicationAndUpdateIndex(ctx, input) {
         return requireClientMethod(this.client, 'ingestCommunicationAndUpdateIndex')(ctx, input);
     }
+    /**
+     * Requests subject-controlled access without requiring a SMART token. The
+     * runtime persists one canonical permission-request Communication.
+     */
+    requestProfessionalAccess(ctx, input) {
+        return requireClientMethod(this.client, 'requestProfessionalAccess')(ctx, input);
+    }
+    /** Lists permission requests sent by or involving this professional. */
+    listProfessionalAccessRequests(ctx, input) {
+        return requireClientMethod(this.client, 'searchCommunicationParticipants')(ctx, buildProfessionalAccessRequestSearchInput(input));
+    }
     /** Updates one consent-authorized clinical section through a scoped batch/collection. */
     updateClinicalSection(ctx, input) {
         return requireClientMethod(this.client, 'updateClinicalSection')(ctx, input);

package/dist/resource-operations.d.ts

@@ -1,8 +1,8 @@
 import type { DeviceAppType } from 'gdc-common-utils-ts/constants/device';
-import { type ClinicalSectionUpdateCommunicationInput, type ClinicalUpdateCommunicationInput, type ClinicalSummaryReadResult, type ClinicalSummaryRequestInput } from 'gdc-sdk-core-ts';
+import { type ClinicalSectionUpdateCommunicationInput, type ClinicalUpdateCommunicationInput, type ClinicalSummaryReadResult, type ClinicalSummaryRequestInput, type PermissionRequestCommunicationInput } from 'gdc-sdk-core-ts';
 import type { LicenseOfferSearchState, LicenseOrderSearchState } from 'gdc-common-utils-ts/utils/license-commercial-search';
 import type { LicenseListSearchState } from 'gdc-common-utils-ts/utils/license-list-search';
-import type { BundleSearchQuery, CommMsgExtendedCommunicationOutboxJob, CommunicationOutboxJob, CommunicationInput, DateRange, EmployeeSearchValue, IndividualOrganizationLifecycleInput, TransportProfile } from 'gdc-sdk-core-ts';
+import type { BundleSearchQuery, CommMsgExtendedCommunicationOutboxJob, CommunicationOutboxJob, CommunicationInput, DateRange, EmployeeSearchValue, IndividualOrganizationLifecycleInput, TransportProfile, SubmitPayload } from 'gdc-sdk-core-ts';
 import type { BundleEntry, BundleJsonApi } from 'gdc-common-utils-ts/models/bundle';
 import type { SubmitAndPollResult } from './orchestration/client-port.js';
 import type { RouteContext } from './individual-onboarding.js';
@@ -232,6 +232,32 @@ export type CommunicationIngestionInput = {
         intervalMs?: number;
     };
 };
+/**
+ * Canonical professional-to-subject permission request.
+ *
+ * This operation records a `Communication`; it never creates Consent or
+ * requires a SMART token. HTTP authentication and optional secure DIDComm
+ * transport remain concerns of the configured runtime client.
+ */
+export type ProfessionalAccessRequestInput = Omit<PermissionRequestCommunicationInput, 'missing'> & Readonly<{
+    missing: Readonly<{
+        sections: string[];
+        resourceTypes: string[];
+        pairs?: PermissionRequestCommunicationInput['missing']['pairs'];
+    }>;
+    transportProfile?: TransportProfile;
+    pollOptions?: {
+        timeoutMs?: number;
+        intervalMs?: number;
+    };
+}>;
+/** Result of persisting one canonical permission-request Communication. */
+export type ProfessionalAccessRequestResult = Readonly<{
+    thid: string;
+    communicationIdentifier: string;
+    communication: CommunicationInput;
+    delivery: SubmitAndPollResult;
+}>;
 type ClinicalUpdateRuntimeOptions = Readonly<{
     transportProfile?: TransportProfile;
     clinicalFormat?: string;
@@ -326,6 +352,10 @@ export type CommunicationParticipantRuntimeSearchInput = {
     page?: number;
     count?: number;
 };
+/** Subject/requester filters for canonical permission-request Communications. */
+export type ProfessionalAccessRequestSearchInput = CommunicationParticipantRuntimeSearchInput;
+/** Restricts a Communication participant search to permission requests. */
+export declare function buildProfessionalAccessRequestSearchInput(input: ProfessionalAccessRequestSearchInput): CommunicationParticipantRuntimeSearchInput;
 export type ClinicalDateRange = DateRange;
 export type ClinicalBundleSearchInput = Omit<BundleSearchQuery, 'section' | 'searchParams'> & {
     section?: string | string[];
@@ -390,6 +420,10 @@ export type GrantProfessionalAccessInput = {
     consentIdentifier?: string;
     consentDate?: string;
     decision?: 'permit' | 'deny';
+    /** Permission-request Communication identifier or thread being answered. */
+    eventBasedOn?: string;
+    /** Canonical permission-request Communication reference. */
+    sourceReference?: string;
     attachmentContentType?: string;
     attachmentBase64?: string;
     dataType?: string;
@@ -406,6 +440,13 @@ export type GrantProfessionalAccessResult = {
     consentClaims: Record<string, unknown>;
     claimsCid?: string;
 };
+/** Subject decision that remains correlated to the originating request. */
+export type ProfessionalAccessRequestDecisionInput = Omit<GrantProfessionalAccessInput, 'eventBasedOn' | 'sourceReference'> & Readonly<{
+    requestThid: string;
+    requestCommunicationIdentifier?: string;
+}>;
+/** Converts one request decision into the canonical correlated Consent grant. */
+export declare function buildProfessionalAccessRequestDecisionGrant(input: ProfessionalAccessRequestDecisionInput): GrantProfessionalAccessInput;
 export type RevokeProfessionalAccessInput = {
     consentClaims: Record<string, unknown>;
     periodEnd?: string;
@@ -685,6 +726,21 @@ export declare function ingestCommunicationAndUpdateIndexWithDeps(routeCtx: Rout
         intervalMs?: number;
     }) => Promise<SubmitAndPollResult>;
 }): Promise<SubmitAndPollResult>;
+/**
+ * Builds and persists one professional access request against the subject's
+ * provider route. The request is deliberately independent from SMART because
+ * no subject consent exists yet.
+ */
+export declare function requestProfessionalAccessWithDeps(routeCtx: RouteContext, input: ProfessionalAccessRequestInput, deps: {
+    individualCommunicationBatchPath: (ctx: RouteContext, pathFormatSegment: string) => string;
+    individualCommunicationPollPath: (ctx: RouteContext, pathFormatSegment: string) => string;
+    submitAndPoll: (submitPath: string, pollPath: string, payload: {
+        thid?: string;
+    } & Record<string, unknown>, pollOptions?: {
+        timeoutMs?: number;
+        intervalMs?: number;
+    }) => Promise<SubmitAndPollResult>;
+}): Promise<ProfessionalAccessRequestResult>;
 export declare function searchCommunicationParticipantsWithDeps(routeCtx: RouteContext, input: CommunicationParticipantRuntimeSearchInput, deps: {
     communicationSearchPath: (ctx: RouteContext) => string;
     communicationSearchPollPath: (ctx: RouteContext) => string;
@@ -790,3 +846,12 @@ export declare function generateDigitalTwinFromSubjectDataWithDeps(routeCtx: Rou
     }) => Promise<SubmitAndPollResult>;
 }): Promise<SubmitAndPollResult>;
 export declare function normalizeCommunicationPathFormatSegment(raw?: string): string;
+/**
+ * Selects only the outer employee wire representation.
+ *
+ * The BundleEditor-authored entries remain identical across transports:
+ * JSON-API `data[]` stays inside DIDComm, while the legacy FHIR profile maps
+ * those entries to standard `Bundle.entry[]`. Authorization and encryption
+ * remain runtime concerns rather than browser-authored payload fields.
+ */
+export declare function prepareEmployeeLifecycleMessageForTransport(message: SubmitPayload, profile: TransportProfile): SubmitPayload;

package/dist/resource-operations.js

@@ -2,10 +2,12 @@
 import { HealthcareBasicSections, ResourceTypesFhirR4 } from 'gdc-common-utils-ts/constants';
 import { Format } from 'gdc-common-utils-ts/constants/Schemas';
 import { RelatedPersonClaim } from 'gdc-common-utils-ts/models/interoperable-claims/related-person-claims';
-import { buildCommunicationParticipantSearchBundle, buildBlockchainArtifactDocumentReference, BundleQuery, createInteroperableResourceOperationEditor, IndividualOrganizationLifecycleEditor, LicenseOfferSearchEditor, LicenseOrderSearchEditor, InteroperableLifecycleStatuses, LicenseListSearchEditor, buildLicenseIssueEntry, buildLicensePurchaseEntry, } from 'gdc-common-utils-ts';
-import { addFhirResourceToCommunication, createCommunicationResource, buildClinicalSummaryCommunicationJob, createClinicalSectionUpdateOutboxJob, createClinicalSummaryUpdateOutboxJob, readClinicalSummaryOperationResult, } from 'gdc-sdk-core-ts';
+import { CommunicationClaim } from 'gdc-common-utils-ts/models/interoperable-claims/communication-claims';
+import { BundleEditor, buildCommunicationParticipantSearchBundle, buildBlockchainArtifactDocumentReference, BundleQuery, createInteroperableResourceOperationEditor, IndividualOrganizationLifecycleEditor, LicenseOfferSearchEditor, LicenseOrderSearchEditor, InteroperableLifecycleStatuses, LicenseListSearchEditor, buildLicenseIssueEntry, buildLicensePurchaseEntry, } from 'gdc-common-utils-ts';
+import { EmployeeBundleOperations, EmployeeResourceTypes, } from 'gdc-common-utils-ts/utils/employee';
+import { addFhirResourceToCommunication, createCommunicationResource, buildClinicalSummaryCommunicationJob, buildPermissionRequestCommunication, createClinicalSectionUpdateOutboxJob, createClinicalSummaryUpdateOutboxJob, readClinicalSummaryOperationResult, TransportProfiles, } from 'gdc-sdk-core-ts';
 import { GwCoreLifecycleRequestMethod, GwCoreLifecycleRequestType, GwCoreLifecycleTodo, } from './constants/lifecycle.js';
-import { buildEmployeeBatchEntry, buildEmployeeSearchBundle, ConsentClaims, } from 'gdc-sdk-core-ts';
+import { buildEmployeeSearchBundle, ConsentClaims, } from 'gdc-sdk-core-ts';
 export function buildClinicalSectionUpdateIngestion(input) {
     return {
         communicationJob: createClinicalSectionUpdateOutboxJob(input),
@@ -22,6 +24,30 @@ export function buildClinicalSummaryUpdateIngestion(input) {
         pollOptions: input.pollOptions,
     };
 }
+/** Restricts a Communication participant search to permission requests. */
+export function buildProfessionalAccessRequestSearchInput(input) {
+    return {
+        ...input,
+        searchParams: {
+            ...input.searchParams,
+            [CommunicationClaim.Category]: 'permission-request',
+        },
+    };
+}
+/** Converts one request decision into the canonical correlated Consent grant. */
+export function buildProfessionalAccessRequestDecisionGrant(input) {
+    const requestThid = String(input.requestThid || '').trim();
+    if (!requestThid)
+        throw new Error('Permission request decision requires requestThid.');
+    const communicationIdentifier = String(input.requestCommunicationIdentifier || '').trim();
+    return {
+        ...input,
+        eventBasedOn: communicationIdentifier || requestThid,
+        sourceReference: communicationIdentifier
+            ? `Communication?identifier=${encodeURIComponent(communicationIdentifier)}`
+            : `Communication?thid=${encodeURIComponent(requestThid)}`,
+    };
+}
 export async function createOrganizationEmployeeWithDeps(routeCtx, input, options, deps) {
     const payload = buildEmployeeLifecyclePayload({
         routeCtx,
@@ -387,6 +413,52 @@ export async function ingestCommunicationAndUpdateIndexWithDeps(routeCtx, input,
         : payload;
     return deps.submitAndPoll(deps.individualCommunicationBatchPath(routeCtx, pathFormatSegment), deps.individualCommunicationPollPath(routeCtx, pathFormatSegment), convertedPayload, input.pollOptions);
 }
+/**
+ * Builds and persists one professional access request against the subject's
+ * provider route. The request is deliberately independent from SMART because
+ * no subject consent exists yet.
+ */
+export async function requestProfessionalAccessWithDeps(routeCtx, input, deps) {
+    const subject = String(input.subject || '').trim();
+    const missingSections = input.missing.sections.map((value) => String(value || '').trim()).filter(Boolean);
+    const missingResourceTypes = input.missing.resourceTypes.map((value) => String(value || '').trim()).filter(Boolean);
+    const requesterTargets = [
+        input.requester.did,
+        input.requester.email,
+        input.requester.phone,
+        input.requester.organizationDid,
+    ].map((value) => String(value || '').trim()).filter(Boolean);
+    if (!subject.startsWith('did:'))
+        throw new Error('Professional access request requires a subject DID.');
+    if (requesterTargets.length === 0)
+        throw new Error('Professional access request requires an authenticated requester target.');
+    if (missingSections.length === 0 && missingResourceTypes.length === 0) {
+        throw new Error('Professional access request requires at least one missing permission.');
+    }
+    const thid = String(input.thid || '').trim() || `permission-request-${createRuntimeUuid()}`;
+    const communicationIdentifier = String(input.communicationIdentifier || '').trim()
+        || `urn:uuid:${createRuntimeUuid()}`;
+    const communication = buildPermissionRequestCommunication({
+        ...input,
+        subject,
+        thid,
+        communicationIdentifier,
+        missing: {
+            sections: missingSections,
+            resourceTypes: missingResourceTypes,
+            pairs: input.missing.pairs || [
+                ...missingSections.map((section) => ({ section, reason: 'missing-consent' })),
+                ...missingResourceTypes.map((resourceType) => ({ resourceType, reason: 'missing-consent' })),
+            ],
+        },
+    });
+    const delivery = await ingestCommunicationAndUpdateIndexWithDeps(routeCtx, {
+        communicationPayload: communication,
+        pathFormatSegment: 'r4',
+        pollOptions: input.pollOptions,
+    }, deps);
+    return { thid, communicationIdentifier, communication, delivery };
+}
 export async function searchCommunicationParticipantsWithDeps(routeCtx, input, deps) {
     const payload = {
         thid: input.requestThid || `communication-search-${createRuntimeUuid()}`,
@@ -640,6 +712,8 @@ export async function grantProfessionalAccessWithDeps(routeCtx, input, deps) {
         consentIdentifier: input.consentIdentifier,
         consentDate: input.consentDate,
         decision: input.decision,
+        eventBasedOn: input.eventBasedOn,
+        sourceReference: input.sourceReference,
         attachmentContentType: input.attachmentContentType,
         attachmentBase64: input.attachmentBase64,
     }, {
@@ -721,6 +795,19 @@ function createRuntimeUuid() {
 }
 function buildEmployeeLifecyclePayload(input) {
     const claims = input.employeeClaims || {};
+    const editor = new BundleEditor()
+        .setBundleOperation(EmployeeBundleOperations.create)
+        .setAllowedResourceType(EmployeeResourceTypes.employee);
+    const employee = editor.newEntry(input.resourceId).asEmployee();
+    for (const [claim, value] of Object.entries(claims)) {
+        employee.setClaim(claim, value);
+    }
+    const authored = employee.doneEntry().buildJsonApi();
+    const data = authored.data.map((entry) => ({
+        ...entry,
+        type: input.requestType,
+        request: { method: input.requestMethod },
+    }));
     return {
         jti: `jti-${createRuntimeUuid()}`,
         iss: input.routeCtx.tenantId,
@@ -728,14 +815,31 @@ function buildEmployeeLifecyclePayload(input) {
         type: 'application/didcomm-plain+json',
         thid: `${input.thidPrefix}-${createRuntimeUuid()}`,
         body: {
-            data: [buildEmployeeBatchEntry({
-                    type: input.requestType,
-                    method: input.requestMethod,
-                    claims,
-                    // Keep the transport-local GW profile anchor separate from the
-                    // exportable employee identifier carried in claims.
-                    resourceId: input.resourceId,
-                })],
+            data,
+        },
+    };
+}
+/**
+ * Selects only the outer employee wire representation.
+ *
+ * The BundleEditor-authored entries remain identical across transports:
+ * JSON-API `data[]` stays inside DIDComm, while the legacy FHIR profile maps
+ * those entries to standard `Bundle.entry[]`. Authorization and encryption
+ * remain runtime concerns rather than browser-authored payload fields.
+ */
+export function prepareEmployeeLifecycleMessageForTransport(message, profile) {
+    if (profile !== TransportProfiles.FhirJson)
+        return message;
+    const envelopeBody = message.body;
+    if (!Array.isArray(envelopeBody?.data)) {
+        throw new Error('Employee FHIR transport requires Bundle data entries.');
+    }
+    return {
+        ...message,
+        body: {
+            resourceType: ResourceTypesFhirR4.Bundle,
+            type: 'batch',
+            entry: envelopeBody.data,
         },
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.3.17",
+  "version": "2.3.19",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",
@@ -37,7 +37,7 @@
     "test:e2e:live-gw:clean": "bash ./scripts/run-live-gw-clean.sh"
   },
   "dependencies": {
-    "gdc-common-utils-ts": "^2.3.18",
+    "gdc-common-utils-ts": "^2.3.21",
     "gdc-sdk-core-ts": "~2.3.14"
   },
   "devDependencies": {