gdc-sdk-node-ts 2.4.1 → 2.4.2

package/dist/node-runtime-client.d.ts

@@ -158,7 +158,7 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
      *
      * Commercial contract:
      * - the final poll response is expected to mint
-     *   `meta.claims['org.schema.Offer.identifier']`
+     *   `resource.meta.claims['org.schema.Offer.identifier']`
      * - callers should then pass that exact value to
      *   `confirmLegalOrganizationOrder(...)`
      */
@@ -206,9 +206,16 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
      * - this mirrored metadata is transport fallback only; the canonical
      *   activation contract remains `body.vp_token` plus `body.controller.*`
      *
+     * Credential compatibility:
+     * - canonical VP: organization + legal-representative + organization-controller VCs
+     * - legacy two-VC VP: accepted only when the old representative VC itself
+     *   carries both `RESPRSN` and matching `hasCredential` key material
+     * - a representative VC containing only `ISCO-08|1120` is not controller
+     *   evidence and will be rejected
+     *
      * Commercial contract:
      * - legacy `_activate` is still expected to mint
-     *   `meta.claims['org.schema.Offer.identifier']`
+     *   `resource.meta.claims['org.schema.Offer.identifier']`
      * - callers should then pass that exact value to
      *   `confirmLegalOrganizationOrder(...)`
      */

package/dist/node-runtime-client.js

@@ -160,7 +160,7 @@ export class HttpRuntimeClient {
      *
      * Commercial contract:
      * - the final poll response is expected to mint
-     *   `meta.claims['org.schema.Offer.identifier']`
+     *   `resource.meta.claims['org.schema.Offer.identifier']`
      * - callers should then pass that exact value to
      *   `confirmLegalOrganizationOrder(...)`
      */
@@ -246,9 +246,16 @@ export class HttpRuntimeClient {
      * - this mirrored metadata is transport fallback only; the canonical
      *   activation contract remains `body.vp_token` plus `body.controller.*`
      *
+     * Credential compatibility:
+     * - canonical VP: organization + legal-representative + organization-controller VCs
+     * - legacy two-VC VP: accepted only when the old representative VC itself
+     *   carries both `RESPRSN` and matching `hasCredential` key material
+     * - a representative VC containing only `ISCO-08|1120` is not controller
+     *   evidence and will be rejected
+     *
      * Commercial contract:
      * - legacy `_activate` is still expected to mint
-     *   `meta.claims['org.schema.Offer.identifier']`
+     *   `resource.meta.claims['org.schema.Offer.identifier']`
      * - callers should then pass that exact value to
      *   `confirmLegalOrganizationOrder(...)`
      */

package/dist/orchestration/host-onboarding-sdk.d.ts

@@ -11,9 +11,15 @@ export declare class HostOnboardingSdk implements HostingControllerFacade {
      *
      * Commercial contract:
      * - this legacy `_activate` facade must return one canonical Offer in
-     *   `meta.claims['org.schema.Offer.identifier']`
+     *   `resource.meta.claims['org.schema.Offer.identifier']`
      * - callers are expected to pass that Offer to
      *   `confirmLegalOrganizationOrder(...)`
+     *
+     * The canonical `vpToken` contains OrganizationCredential,
+     * LegalRepresentativeCredential and ServiceControllerCredential. A
+     * legacy two-credential token is accepted only when its old representative
+     * credential combines `RESPRSN` authority with matching `hasCredential`
+     * binding material. `ISCO-08|1120` alone never grants tenant control.
      */
     activateOrganizationInGatewayFromIcaProof(hostCtx: HostRouteContext, input: NodeOrganizationActivationInput, pollOptions?: PollOptions): Promise<SubmitAndPollResult>;
     confirmLegalOrganizationOrder(hostCtx: HostRouteContext, input: LegalOrganizationOrderInput, pollOptions?: PollOptions): Promise<SubmitAndPollResult>;

package/dist/orchestration/host-onboarding-sdk.js

@@ -14,9 +14,15 @@ export class HostOnboardingSdk {
      *
      * Commercial contract:
      * - this legacy `_activate` facade must return one canonical Offer in
-     *   `meta.claims['org.schema.Offer.identifier']`
+     *   `resource.meta.claims['org.schema.Offer.identifier']`
      * - callers are expected to pass that Offer to
      *   `confirmLegalOrganizationOrder(...)`
+     *
+     * The canonical `vpToken` contains OrganizationCredential,
+     * LegalRepresentativeCredential and ServiceControllerCredential. A
+     * legacy two-credential token is accepted only when its old representative
+     * credential combines `RESPRSN` authority with matching `hasCredential`
+     * binding material. `ISCO-08|1120` alone never grants tenant control.
      */
     activateOrganizationInGatewayFromIcaProof(hostCtx, input, pollOptions) {
         assertFacadeCapability(this.capabilities, ActorCapabilities.HostingActivateOrganization, ActorKinds.HostOnboarding, 'activateOrganizationInGatewayFromIcaProof');

package/dist/orchestration/organization-controller-sdk.js

@@ -33,12 +33,10 @@ export class OrganizationControllerSdk {
      * refreshes verification and reissues one controller activation code.
      */
     submitLegalOrganizationCredentialReissuance(hostCtx, input, pollOptions) {
-        const method = this.client.submitLegalOrganizationCredentialReissuance
-            || this.client.submitLegalOrganizationIssue;
-        if (!method) {
+        if (this.client.submitLegalOrganizationCredentialReissuance) {
             return requireClientMethod(this.client, 'submitLegalOrganizationCredentialReissuance')(hostCtx, input, pollOptions);
         }
-        return method(hostCtx, input, pollOptions);
+        return requireClientMethod(this.client, 'submitLegalOrganizationIssue')(hostCtx, input, pollOptions);
     }
     /**
      * @deprecated Use `submitLegalOrganizationCredentialReissuance`.

package/dist/organization-controller-recovery.d.ts

@@ -43,8 +43,9 @@ export declare const recoverOrganizationControllerWithIssueWithDeps: typeof reco
  *
  * Gateway deployments may retain one or more transport/job envelopes around
  * the terminal batch response. The canonical `Organization/_issue` shape
- * carries the serial-number claim in `meta.claims`, alongside (but outside)
- * the ICA `vc[]` array. An explicitly typed `License:Issued` entry is accepted
+ * carries the serial-number claim in `data[].resource.meta.claims`, while the
+ * ICA credential projection remains in sibling `data[].vc[]`. An explicitly
+ * typed `License:Issued` entry is accepted
  * only as a legacy `License/_issue` compatibility fallback. Unrelated
  * identifiers and ICA credentials are never interpreted as activation
  * material.

package/dist/organization-controller-recovery.js

@@ -52,8 +52,9 @@ export const recoverOrganizationControllerWithIssueWithDeps = recoverOrganizatio
  *
  * Gateway deployments may retain one or more transport/job envelopes around
  * the terminal batch response. The canonical `Organization/_issue` shape
- * carries the serial-number claim in `meta.claims`, alongside (but outside)
- * the ICA `vc[]` array. An explicitly typed `License:Issued` entry is accepted
+ * carries the serial-number claim in `data[].resource.meta.claims`, while the
+ * ICA credential projection remains in sibling `data[].vc[]`. An explicitly
+ * typed `License:Issued` entry is accepted
  * only as a legacy `License/_issue` compatibility fallback. Unrelated
  * identifiers and ICA credentials are never interpreted as activation
  * material.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.4.1",
+  "version": "2.4.2",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",
@@ -37,7 +37,7 @@
     "test:e2e:live-gw:clean": "bash ./scripts/run-live-gw-clean.sh"
   },
   "dependencies": {
-    "gdc-common-utils-ts": "^2.5.1",
+    "gdc-common-utils-ts": "2.5.3",
     "gdc-sdk-core-ts": "~2.3.18"
   },
   "devDependencies": {