gdc-sdk-node-ts 2.4.16 → 2.4.22

package/dist/node-managed-wallet.js

@@ -221,7 +221,10 @@ export class NodeManagedWallet {
         }
         const privateJwk = entry.privateMaterial;
         const keyObject = createPrivateKey({ key: privateJwk, format: 'jwk' });
-        const signature = cryptoSign(this.resolveNodeDigestForAlgorithm(alg), Buffer.from(payloadBytes), keyObject);
+        // JWS uses the fixed-width IEEE P1363 ECDSA representation (R || S).
+        // Node defaults to ASN.1 DER, which produces a syntactically valid compact
+        // token that every JOSE verifier correctly rejects.
+        const signature = cryptoSign(this.resolveNodeDigestForAlgorithm(alg), Buffer.from(payloadBytes), { key: keyObject, dsaEncoding: 'ieee-p1363' });
         return Buffer.from(signature).toString('base64url');
     }
     /**
@@ -237,7 +240,7 @@ export class NodeManagedWallet {
             return this.cryptography.verifyBytes(Content.base64ToBytes(signature), payloadBytes, jwk);
         }
         const publicKey = createPublicKey({ key: jwk, format: 'jwk' });
-        return cryptoVerify(this.resolveNodeDigestForAlgorithm(algorithm), Buffer.from(payloadBytes), publicKey, Buffer.from(signature, 'base64url'));
+        return cryptoVerify(this.resolveNodeDigestForAlgorithm(algorithm), Buffer.from(payloadBytes), { key: publicKey, dsaEncoding: 'ieee-p1363' }, Buffer.from(signature, 'base64url'));
     }
     /**
      * Encrypts one payload for the provided recipient public JWK.

package/dist/node-runtime-client.d.ts

@@ -11,7 +11,7 @@ import { type SmartTokenRequestInput } from './smart-token.js';
 import { type EmployeeDeviceActivationRequestInput, type EmployeeDeviceActivationResult, type EmployeeDeviceRevocationInput } from './device-activation.js';
 import { type OrganizationLicenseOrderConfirmInput } from './organization-license-order.js';
 import { type IndividualOrganizationBootstrapInput, type IndividualOrganizationStartResult } from './individual-start.js';
-import { type CommunicationIngestionInput, type BlockchainArtifactRegistrationInput, type VitalSignBatchCommunicationFromSearchResponseInput, type CommunicationParticipantRuntimeSearchInput, type ClinicalBundleSearchInput, type ClinicalSectionUpdateInput, type ClinicalSummaryReadResult, type ClinicalSummaryRequestInput, type ClinicalSummaryUpdateInput, type GrantProfessionalAccessInput, type GrantProfessionalAccessResult, type IndividualMemberLifecycleInput, type IndividualMemberLicenseAddInput, type IndividualMemberLicenseInvitationInput, type IndividualMemberLicenseTransitionInput, type LicenseListRuntimeSearchInput, type LicenseOfferRuntimeSearchInput, type LicenseOrderRuntimeSearchInput, type OrganizationEmployeeCreationInput, type OrganizationEmployeeLicenseAddInput, type OrganizationEmployeeLicenseInvitationInput, type OrganizationEmployeeLifecycleInput, type OrganizationEmployeeSearchInput, type ProfessionalAccessRequestInput, type ProfessionalAccessRequestResult, type RevokeProfessionalAccessInput, type RevokeProfessionalAccessResult, type RelatedPersonUpsertInput } from './resource-operations.js';
+import { type CommunicationIngestionInput, type BlockchainArtifactRegistrationInput, type VitalSignBatchCommunicationFromSearchResponseInput, type CommunicationParticipantRuntimeSearchInput, type ClinicalBundleSearchInput, type ClinicalSectionUpdateInput, type ClinicalSummaryReadResult, type ClinicalSummaryRequestInput, type ClinicalSummaryUpdateInput, type GrantProfessionalAccessInput, type GrantProfessionalAccessResult, type IndividualMemberLifecycleInput, type IndividualMemberLicenseAddInput, type IndividualMemberLicenseInvitationInput, type IndividualMemberLicenseTransitionInput, type LicenseListRuntimeSearchInput, type LicenseOfferRuntimeSearchInput, type LicenseOrderRuntimeSearchInput, type OrganizationEmployeeCreationInput, type OrganizationEmployeeLicenseAddInput, type OrganizationEmployeeLicenseOfferInput, type OrganizationEmployeeLicenseInvitationInput, type OrganizationEmployeeLifecycleInput, type OrganizationEmployeeSearchInput, type ProfessionalAccessRequestInput, type ProfessionalAccessRequestResult, type RevokeProfessionalAccessInput, type RevokeProfessionalAccessResult, type RelatedPersonUpsertInput } from './resource-operations.js';
 import type { LegalOrganizationOrderInput } from './host-onboarding.js';
 import type { SmartTokenExchangeResult } from './smart-token.js';
 import { type OrganizationEmployeeProvisioningInput, type OrganizationEmployeeProvisioningResult } from './organization-employee-lifecycle.js';
@@ -299,6 +299,8 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
     listOrganizationLicenses(ctx: RouteContext, input?: LicenseListRuntimeSearchInput): Promise<SubmitAndPollResult>;
     /** @deprecated Professional seats use Employee Offer and confirmed Order. */
     addFreeOrganizationEmployeeLicenses(ctx: RouteContext, input: OrganizationEmployeeLicenseAddInput): Promise<SubmitAndPollResult>;
+    /** Starts the commercial Offer flow for additional professional seats. */
+    requestOrganizationEmployeeLicenseOffer(ctx: RouteContext, input: OrganizationEmployeeLicenseOfferInput): Promise<SubmitAndPollResult>;
     searchOrganizationLicenseOffers(ctx: RouteContext, input: LicenseOfferRuntimeSearchInput): Promise<SubmitAndPollResult>;
     listOrganizationLicenseOffers(ctx: RouteContext, input?: LicenseOfferRuntimeSearchInput): Promise<SubmitAndPollResult>;
     searchOrganizationLicenseOrders(ctx: RouteContext, input: LicenseOrderRuntimeSearchInput): Promise<SubmitAndPollResult>;

package/dist/node-runtime-client.js

@@ -12,7 +12,7 @@ import { activateEmployeeDeviceWithActivationCodeWithDeps, activateEmployeeDevic
 import { extractOfferIdFromResponseBody, extractOfferPreviewFromResponseBody, } from './order-offer-summary.js';
 import { confirmOrganizationLicenseOrderWithDeps } from './organization-license-order.js';
 import { startIndividualOrganizationWithDeps } from './individual-start.js';
-import { createOrganizationEmployeeWithDeps, issueOrganizationEmployeeLicenseWithDeps, disableIndividualMemberWithDeps, disableIndividualOrganizationWithDeps, disableOrganizationEmployeeWithDeps, listIndividualLicenseOffersWithDeps, listIndividualLicenseOrdersWithDeps, listIndividualLicensesWithDeps, addFreeIndividualMemberLicensesWithDeps, issueIndividualMemberLicenseWithDeps, transitionIndividualMemberLicenseWithDeps, listOrganizationLicenseOffersWithDeps, listOrganizationLicenseOrdersWithDeps, listOrganizationLicensesWithDeps, grantProfessionalAccessWithDeps, buildClinicalSectionUpdateIngestion, buildClinicalSummaryUpdateIngestion, ingestCommunicationAndUpdateIndexWithDeps, requestProfessionalAccessWithDeps, buildVitalSignBatchCommunicationFromSearchResponse, registerBlockchainArtifactAndUpdateIndexWithDeps, requestClinicalSummaryWithDeps, revokeProfessionalAccessWithDeps, searchCommunicationParticipantsWithDeps, purgeIndividualMemberWithDeps, purgeIndividualOrganizationWithDeps, purgeOrganizationEmployeeWithDeps, prepareEmployeeLifecycleMessageForTransport, searchIndividualLicensesWithDeps, searchIndividualLicenseOffersWithDeps, searchIndividualLicenseOrdersWithDeps, searchOrganizationLicensesWithDeps, searchOrganizationLicenseOffersWithDeps, searchOrganizationLicenseOrdersWithDeps, searchOrganizationEmployeesWithDeps, searchClinicalBundleWithDeps, searchLatestIpsWithDeps, upsertRelatedPersonAndPollWithDeps, normalizeCommunicationPathFormatSegment, addFreeOrganizationEmployeeLicensesWithDeps, } from './resource-operations.js';
+import { createOrganizationEmployeeWithDeps, issueOrganizationEmployeeLicenseWithDeps, disableIndividualMemberWithDeps, disableIndividualOrganizationWithDeps, disableOrganizationEmployeeWithDeps, listIndividualLicenseOffersWithDeps, listIndividualLicenseOrdersWithDeps, listIndividualLicensesWithDeps, addFreeIndividualMemberLicensesWithDeps, issueIndividualMemberLicenseWithDeps, transitionIndividualMemberLicenseWithDeps, listOrganizationLicenseOffersWithDeps, listOrganizationLicenseOrdersWithDeps, listOrganizationLicensesWithDeps, grantProfessionalAccessWithDeps, buildClinicalSectionUpdateIngestion, buildClinicalSummaryUpdateIngestion, ingestCommunicationAndUpdateIndexWithDeps, requestProfessionalAccessWithDeps, buildVitalSignBatchCommunicationFromSearchResponse, registerBlockchainArtifactAndUpdateIndexWithDeps, requestClinicalSummaryWithDeps, revokeProfessionalAccessWithDeps, searchCommunicationParticipantsWithDeps, purgeIndividualMemberWithDeps, purgeIndividualOrganizationWithDeps, purgeOrganizationEmployeeWithDeps, prepareEmployeeLifecycleMessageForTransport, searchIndividualLicensesWithDeps, searchIndividualLicenseOffersWithDeps, searchIndividualLicenseOrdersWithDeps, searchOrganizationLicensesWithDeps, searchOrganizationLicenseOffersWithDeps, searchOrganizationLicenseOrdersWithDeps, searchOrganizationEmployeesWithDeps, searchClinicalBundleWithDeps, searchLatestIpsWithDeps, upsertRelatedPersonAndPollWithDeps, normalizeCommunicationPathFormatSegment, addFreeOrganizationEmployeeLicensesWithDeps, requestOrganizationEmployeeLicenseOfferWithDeps, } from './resource-operations.js';
 import { listOrganizationEmployeeLifecycleWithDeps, provisionOrganizationEmployeeWithDeps, } from './organization-employee-lifecycle.js';
 import { submitAndPollWithMethods } from './orchestration/client-port.js';
 import { buildRuntimeHeaders, fetchWithTimeout, parseResponseBody, pollBatchResponseWithRuntimeConfig, postJsonWithRuntimeConfig, postRenderedWithRuntimeConfig, } from './runtime-transport.js';
@@ -484,6 +484,16 @@ export class HttpRuntimeClient {
                 : this.submitAndPoll.bind(this),
         });
     }
+    /** Starts the commercial Offer flow for additional professional seats. */
+    async requestOrganizationEmployeeLicenseOffer(ctx, input) {
+        return requestOrganizationEmployeeLicenseOfferWithDeps(ctx, input, {
+            organizationLicenseActionPath: this.paths.organizationLicenseActionPath.bind(this.paths),
+            organizationLicenseActionPollPath: this.paths.organizationLicenseActionPollPath.bind(this.paths),
+            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
+                ? (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions)
+                : this.submitAndPoll.bind(this),
+        });
+    }
     async searchOrganizationLicenseOffers(ctx, input) {
         return searchOrganizationLicenseOffersWithDeps(ctx, input, {
             organizationLicenseOfferSearchPath: this.paths.organizationLicenseOfferSearchPath.bind(this.paths),

package/dist/orchestration/client-port.d.ts

@@ -18,7 +18,7 @@ import type { EnsureFamilyOrganizationRegistrationInput, EnsureFamilyOrganizatio
 import type { OrganizationLicenseOrderConfirmInput } from '../organization-license-order.js';
 import type { SmartTokenExchangeResult, SmartTokenRequestInput } from '../smart-token.js';
 import type { DigitalTwinMaterializationInput, DigitalTwinSearchInput, DigitalTwinSelectionInput } from '../digital-twin.js';
-import type { CommunicationIngestionInput, BlockchainArtifactRegistrationInput, CommunicationParticipantRuntimeSearchInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, VitalSignBatchCommunicationFromSearchResponseInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IndividualMemberLicenseAddInput, IndividualMemberLicenseInvitationInput, IndividualMemberLicenseTransitionInput, IpsOrFhirImportInput, OrganizationEmployeeCreationInput, OrganizationEmployeeLicenseAddInput, OrganizationEmployeeLicenseInvitationInput, OrganizationEmployeeLifecycleInput, OrganizationEmployeeSearchInput, ProfessionalAccessRequestInput, ProfessionalAccessRequestResult, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, RelatedPersonUpsertInput } from '../resource-operations.js';
+import type { CommunicationIngestionInput, BlockchainArtifactRegistrationInput, CommunicationParticipantRuntimeSearchInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, VitalSignBatchCommunicationFromSearchResponseInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IndividualMemberLicenseAddInput, IndividualMemberLicenseInvitationInput, IndividualMemberLicenseTransitionInput, IpsOrFhirImportInput, OrganizationEmployeeCreationInput, OrganizationEmployeeLicenseAddInput, OrganizationEmployeeLicenseOfferInput, OrganizationEmployeeLicenseInvitationInput, OrganizationEmployeeLifecycleInput, OrganizationEmployeeSearchInput, ProfessionalAccessRequestInput, ProfessionalAccessRequestResult, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, RelatedPersonUpsertInput } from '../resource-operations.js';
 /**
  * Shared node-runtime activation input.
  *
@@ -82,6 +82,7 @@ export type RuntimeClient = {
     searchOrganizationLicenses?: (ctx: RouteContext, input: LicenseListRuntimeSearchInput) => Promise<SubmitAndPollResult>;
     listOrganizationLicenses?: (ctx: RouteContext, input?: LicenseListRuntimeSearchInput) => Promise<SubmitAndPollResult>;
     addFreeOrganizationEmployeeLicenses?: (ctx: RouteContext, input: OrganizationEmployeeLicenseAddInput) => Promise<SubmitAndPollResult>;
+    requestOrganizationEmployeeLicenseOffer?: (ctx: RouteContext, input: OrganizationEmployeeLicenseOfferInput) => Promise<SubmitAndPollResult>;
     searchOrganizationLicenseOffers?: (ctx: RouteContext, input: LicenseOfferRuntimeSearchInput) => Promise<SubmitAndPollResult>;
     listOrganizationLicenseOffers?: (ctx: RouteContext, input?: LicenseOfferRuntimeSearchInput) => Promise<SubmitAndPollResult>;
     searchOrganizationLicenseOrders?: (ctx: RouteContext, input: LicenseOrderRuntimeSearchInput) => Promise<SubmitAndPollResult>;

package/dist/orchestration/organization-controller-sdk.d.ts

@@ -5,7 +5,7 @@ import type { EmployeeDeviceActivationResult, EmployeeDeviceActivationRequestInp
 import type { SmartTokenExchangeResult, SmartTokenRequestInput } from '../smart-token.js';
 import type { OrganizationLicenseOrderConfirmInput } from '../organization-license-order.js';
 import type { NodeCapability } from '../session.js';
-import type { LicenseListRuntimeSearchInput, LicenseOfferRuntimeSearchInput, LicenseOrderRuntimeSearchInput, OrganizationEmployeeCreationInput, OrganizationEmployeeLicenseAddInput, OrganizationEmployeeLicenseInvitationInput, OrganizationEmployeeLifecycleInput, OrganizationEmployeeSearchInput } from '../resource-operations.js';
+import type { LicenseListRuntimeSearchInput, LicenseOfferRuntimeSearchInput, LicenseOrderRuntimeSearchInput, OrganizationEmployeeCreationInput, OrganizationEmployeeLicenseAddInput, OrganizationEmployeeLicenseOfferInput, OrganizationEmployeeLicenseInvitationInput, OrganizationEmployeeLifecycleInput, OrganizationEmployeeSearchInput } from '../resource-operations.js';
 import type { OrganizationEmployeeProvisioningInput, OrganizationEmployeeProvisioningResult } from '../organization-employee-lifecycle.js';
 import type { OrganizationEmployeeLifecycleRecord } from 'gdc-common-utils-ts/models/organization-employee-lifecycle';
 /**
@@ -85,6 +85,8 @@ export declare class OrganizationControllerSdk {
     listLicenses(ctx: RouteContext, input?: LicenseListRuntimeSearchInput): Promise<SubmitAndPollResult>;
     /** @deprecated Professional seats use Employee Offer and confirmed Order. */
     addFreeEmployeeLicenses(ctx: RouteContext, input: OrganizationEmployeeLicenseAddInput): Promise<SubmitAndPollResult>;
+    /** Requests an Offer for additional employee seats before invitations. */
+    requestEmployeeLicenseOffer(ctx: RouteContext, input: OrganizationEmployeeLicenseOfferInput): Promise<SubmitAndPollResult>;
     /**
      * Searches commercial license offers known for the current organization.
      */

package/dist/orchestration/organization-controller-sdk.js

@@ -115,6 +115,10 @@ export class OrganizationControllerSdk {
     addFreeEmployeeLicenses(ctx, input) {
         return requireClientMethod(this.client, 'addFreeOrganizationEmployeeLicenses')(ctx, input);
     }
+    /** Requests an Offer for additional employee seats before invitations. */
+    requestEmployeeLicenseOffer(ctx, input) {
+        return requireClientMethod(this.client, 'requestOrganizationEmployeeLicenseOffer')(ctx, input);
+    }
     /**
      * Searches commercial license offers known for the current organization.
      */

package/dist/resource-operations.d.ts

@@ -133,8 +133,8 @@ export type IndividualMemberLicenseAddInput = {
         intervalMs?: number;
     };
 };
-/** Adds zero-cost employee seats on an explicitly configured test network. */
-export type OrganizationEmployeeLicenseAddInput = {
+/** Requests a host-authored Offer for additional professional employee seats. */
+export type OrganizationEmployeeLicenseOfferInput = {
     quantity: number;
     requestThid?: string;
     pollOptions?: {
@@ -142,6 +142,8 @@ export type OrganizationEmployeeLicenseAddInput = {
         intervalMs?: number;
     };
 };
+/** @deprecated Use `OrganizationEmployeeLicenseOfferInput`. */
+export type OrganizationEmployeeLicenseAddInput = OrganizationEmployeeLicenseOfferInput;
 /** Input shared by invitation acceptance, deactivation and release. */
 export type IndividualMemberLicenseTransitionInput = {
     /** Required for controller deactivation/release; acceptance resolves by code. */
@@ -669,8 +671,13 @@ type OrganizationLicenseMutationDeps = {
     organizationLicenseActionPollPath: (ctx: RouteContext, action: string) => string;
     submitAndPoll: IndividualLicenseMutationDeps['submitAndPoll'];
 };
-/** @deprecated Professional seats always use Employee Offer and confirmed Order. */
-export declare function addFreeOrganizationEmployeeLicensesWithDeps(_routeCtx: RouteContext, _input: OrganizationEmployeeLicenseAddInput, _deps: OrganizationLicenseMutationDeps): Promise<SubmitAndPollResult>;
+/**
+ * Requests a professional-seat Offer without creating or assigning seats.
+ * The returned Offer must be accepted through the existing paid Order flow.
+ */
+export declare function requestOrganizationEmployeeLicenseOfferWithDeps(routeCtx: RouteContext, input: OrganizationEmployeeLicenseOfferInput, deps: OrganizationLicenseMutationDeps): Promise<SubmitAndPollResult>;
+/** @deprecated Use `requestOrganizationEmployeeLicenseOfferWithDeps`. */
+export declare function addFreeOrganizationEmployeeLicensesWithDeps(routeCtx: RouteContext, input: OrganizationEmployeeLicenseAddInput, deps: OrganizationLicenseMutationDeps): Promise<SubmitAndPollResult>;
 /**
  * Reserves one available household/member seat for a selected contact.
  *

package/dist/resource-operations.js

@@ -243,9 +243,24 @@ export async function searchIndividualLicensesWithDeps(routeCtx, input, deps) {
 export async function listIndividualLicensesWithDeps(routeCtx, input, deps) {
     return searchIndividualLicensesWithDeps(routeCtx, input || {}, deps);
 }
-/** @deprecated Professional seats always use Employee Offer and confirmed Order. */
-export async function addFreeOrganizationEmployeeLicensesWithDeps(_routeCtx, _input, _deps) {
-    throw new Error('Professional seats require Employee Offer and Order payment verification; License/_add is not supported.');
+/**
+ * Requests a professional-seat Offer without creating or assigning seats.
+ * The returned Offer must be accepted through the existing paid Order flow.
+ */
+export async function requestOrganizationEmployeeLicenseOfferWithDeps(routeCtx, input, deps) {
+    const entry = buildLicensePurchaseEntry({
+        quantity: input.quantity,
+        userClass: 'employee',
+        type: 'web',
+    });
+    return deps.submitAndPoll(deps.organizationLicenseActionPath(routeCtx, '_add'), deps.organizationLicenseActionPollPath(routeCtx, '_add'), {
+        thid: input.requestThid || `organization-license-offer-${createRuntimeUuid()}`,
+        body: { resourceType: 'Bundle', type: 'batch', data: [entry] },
+    }, input.pollOptions);
+}
+/** @deprecated Use `requestOrganizationEmployeeLicenseOfferWithDeps`. */
+export async function addFreeOrganizationEmployeeLicensesWithDeps(routeCtx, input, deps) {
+    return requestOrganizationEmployeeLicenseOfferWithDeps(routeCtx, input, deps);
 }
 /**
  * Reserves one available household/member seat for a selected contact.

package/dist/server-profile-session.js

@@ -1,6 +1,7 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
 import { randomBytes } from 'node:crypto';
 import { IdentityDcrMetadataFields, IdentityDeviceInfoFields } from 'gdc-common-utils-ts/constants/identity-auth';
+import { ActorKinds } from 'gdc-common-utils-ts/constants/actor-session';
 import { TransportProfiles, } from 'gdc-sdk-core-ts';
 import { NodeManagedWallet } from './node-managed-wallet.js';
 import { NodeHttpClient } from './node-runtime-client.js';
@@ -182,6 +183,7 @@ export class ServerProfileSessionManager {
             clientAssertion: assertion,
             clientAssertionType: 'private_key_jwt',
             smartTokenKind: 'openid-smart',
+            acrValues: profileSmartAcrValues(profile.actorKind),
             scopes: unique(input.scopes),
             tokenCacheKey: `profile:${profile.profileId}:${input.subjectDid}:${unique(input.scopes).join(',')}`,
         });
@@ -222,7 +224,7 @@ export class ServerProfileSessionManager {
             scopes: session.scopes,
             accessToken: await this.options.sealer.unseal(session.sealedAccessToken, `${sessionId}:access-token`),
             secureTransportAdapter: {
-                pack: (message) => wallet.packForRecipientWithContext(message, profile.providerDid, { context }),
+                pack: (message) => wallet.packForRecipientWithContext(bindTransportActor(message, profile.actorDid, profile.clientId), profile.providerDid, { context }),
                 unpack: async (jwe) => (await wallet.unpackWithContext(jwe, { context })).content,
             },
             confidentialStorageAdapter: {
@@ -303,6 +305,21 @@ export class ServerProfileSessionManager {
     }
     now() { return this.options.now?.() || new Date(); }
 }
+/**
+ * Binds every direct resource action and async poll to the actor and DCR client
+ * stored in the server profile. The caller may author the business body and
+ * thread id, but cannot replace either verification identity.
+ */
+function bindTransportActor(message, actorDid, clientId) {
+    return { ...message, iss: actorDid, client_id: clientId };
+}
+/** Keeps the OpenID proof class aligned with the durable actor profile. */
+function profileSmartAcrValues(actorKind) {
+    return actorKind === ActorKinds.IndividualController
+        || actorKind === ActorKinds.IndividualMember
+        ? 'urn:antifraud:acr:openid4vp:individual'
+        : 'urn:antifraud:acr:openid4vp:employee';
+}
 async function buildWalletClientAssertion(wallet, profile, audience, now) {
     const seconds = Math.floor(now.getTime() / 1000);
     return wallet.signCompactJws(walletContext(profile.walletKeyDerivationId || profile.profileId), {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.4.16",
+  "version": "2.4.22",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",
@@ -38,7 +38,7 @@
     "test:e2e:live-gw:clean": "bash ./scripts/run-live-gw-clean.sh"
   },
   "dependencies": {
-    "gdc-common-utils-ts": "2.5.12",
+    "gdc-common-utils-ts": "2.5.15",
     "gdc-sdk-core-ts": "~2.3.18"
   },
   "devDependencies": {