gdc-sdk-node-ts 2.4.18 → 2.4.23

package/dist/constants/lifecycle.d.ts

@@ -7,6 +7,8 @@
  * is actually deployed.
  */
 export declare const GwCoreLifecycleAction: Readonly<{
+    readonly Create: "_create";
+    readonly CreateResponse: "_create-response";
     readonly Batch: "_batch";
     readonly BatchResponse: "_batch-response";
     readonly Issue: "_issue";

package/dist/constants/lifecycle.js

@@ -9,6 +9,8 @@ import { LifecycleRequestType } from 'gdc-common-utils-ts';
  * is actually deployed.
  */
 export const GwCoreLifecycleAction = Object.freeze({
+    Create: '_create',
+    CreateResponse: '_create-response',
     Batch: '_batch',
     BatchResponse: '_batch-response',
     Issue: '_issue',

package/dist/node-runtime-client.d.ts

@@ -11,7 +11,7 @@ import { type SmartTokenRequestInput } from './smart-token.js';
 import { type EmployeeDeviceActivationRequestInput, type EmployeeDeviceActivationResult, type EmployeeDeviceRevocationInput } from './device-activation.js';
 import { type OrganizationLicenseOrderConfirmInput } from './organization-license-order.js';
 import { type IndividualOrganizationBootstrapInput, type IndividualOrganizationStartResult } from './individual-start.js';
-import { type CommunicationIngestionInput, type BlockchainArtifactRegistrationInput, type VitalSignBatchCommunicationFromSearchResponseInput, type CommunicationParticipantRuntimeSearchInput, type ClinicalBundleSearchInput, type ClinicalSectionUpdateInput, type ClinicalSummaryReadResult, type ClinicalSummaryRequestInput, type ClinicalSummaryUpdateInput, type GrantProfessionalAccessInput, type GrantProfessionalAccessResult, type IndividualMemberLifecycleInput, type IndividualMemberLicenseAddInput, type IndividualMemberLicenseInvitationInput, type IndividualMemberLicenseTransitionInput, type LicenseListRuntimeSearchInput, type LicenseOfferRuntimeSearchInput, type LicenseOrderRuntimeSearchInput, type OrganizationEmployeeCreationInput, type OrganizationEmployeeLicenseAddInput, type OrganizationEmployeeLicenseInvitationInput, type OrganizationEmployeeLifecycleInput, type OrganizationEmployeeSearchInput, type ProfessionalAccessRequestInput, type ProfessionalAccessRequestResult, type RevokeProfessionalAccessInput, type RevokeProfessionalAccessResult, type RelatedPersonUpsertInput } from './resource-operations.js';
+import { type CommunicationIngestionInput, type BlockchainArtifactRegistrationInput, type VitalSignBatchCommunicationFromSearchResponseInput, type CommunicationParticipantRuntimeSearchInput, type ClinicalBundleSearchInput, type ClinicalSectionUpdateInput, type ClinicalSummaryReadResult, type ClinicalSummaryRequestInput, type ClinicalSummaryUpdateInput, type GrantProfessionalAccessInput, type GrantProfessionalAccessResult, type IndividualMemberLifecycleInput, type IndividualMemberLicenseAddInput, type IndividualMemberLicenseInvitationInput, type IndividualMemberLicenseTransitionInput, type LicenseListRuntimeSearchInput, type LicenseOfferRuntimeSearchInput, type LicenseOrderRuntimeSearchInput, type OrganizationEmployeeCreationInput, type OrganizationEmployeeLicenseAddInput, type OrganizationEmployeeLicenseOfferInput, type OrganizationEmployeeLicenseInvitationInput, type OrganizationEmployeeLifecycleInput, type OrganizationEmployeeSearchInput, type ProfessionalAccessRequestInput, type ProfessionalAccessRequestResult, type RevokeProfessionalAccessInput, type RevokeProfessionalAccessResult, type RelatedPersonUpsertInput } from './resource-operations.js';
 import type { LegalOrganizationOrderInput } from './host-onboarding.js';
 import type { SmartTokenExchangeResult } from './smart-token.js';
 import { type OrganizationEmployeeProvisioningInput, type OrganizationEmployeeProvisioningResult } from './organization-employee-lifecycle.js';
@@ -299,6 +299,8 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
     listOrganizationLicenses(ctx: RouteContext, input?: LicenseListRuntimeSearchInput): Promise<SubmitAndPollResult>;
     /** @deprecated Professional seats use Employee Offer and confirmed Order. */
     addFreeOrganizationEmployeeLicenses(ctx: RouteContext, input: OrganizationEmployeeLicenseAddInput): Promise<SubmitAndPollResult>;
+    /** Starts the commercial Offer flow for additional professional seats. */
+    requestOrganizationEmployeeLicenseOffer(ctx: RouteContext, input: OrganizationEmployeeLicenseOfferInput): Promise<SubmitAndPollResult>;
     searchOrganizationLicenseOffers(ctx: RouteContext, input: LicenseOfferRuntimeSearchInput): Promise<SubmitAndPollResult>;
     listOrganizationLicenseOffers(ctx: RouteContext, input?: LicenseOfferRuntimeSearchInput): Promise<SubmitAndPollResult>;
     searchOrganizationLicenseOrders(ctx: RouteContext, input: LicenseOrderRuntimeSearchInput): Promise<SubmitAndPollResult>;

package/dist/node-runtime-client.js

@@ -12,7 +12,7 @@ import { activateEmployeeDeviceWithActivationCodeWithDeps, activateEmployeeDevic
 import { extractOfferIdFromResponseBody, extractOfferPreviewFromResponseBody, } from './order-offer-summary.js';
 import { confirmOrganizationLicenseOrderWithDeps } from './organization-license-order.js';
 import { startIndividualOrganizationWithDeps } from './individual-start.js';
-import { createOrganizationEmployeeWithDeps, issueOrganizationEmployeeLicenseWithDeps, disableIndividualMemberWithDeps, disableIndividualOrganizationWithDeps, disableOrganizationEmployeeWithDeps, listIndividualLicenseOffersWithDeps, listIndividualLicenseOrdersWithDeps, listIndividualLicensesWithDeps, addFreeIndividualMemberLicensesWithDeps, issueIndividualMemberLicenseWithDeps, transitionIndividualMemberLicenseWithDeps, listOrganizationLicenseOffersWithDeps, listOrganizationLicenseOrdersWithDeps, listOrganizationLicensesWithDeps, grantProfessionalAccessWithDeps, buildClinicalSectionUpdateIngestion, buildClinicalSummaryUpdateIngestion, ingestCommunicationAndUpdateIndexWithDeps, requestProfessionalAccessWithDeps, buildVitalSignBatchCommunicationFromSearchResponse, registerBlockchainArtifactAndUpdateIndexWithDeps, requestClinicalSummaryWithDeps, revokeProfessionalAccessWithDeps, searchCommunicationParticipantsWithDeps, purgeIndividualMemberWithDeps, purgeIndividualOrganizationWithDeps, purgeOrganizationEmployeeWithDeps, prepareEmployeeLifecycleMessageForTransport, searchIndividualLicensesWithDeps, searchIndividualLicenseOffersWithDeps, searchIndividualLicenseOrdersWithDeps, searchOrganizationLicensesWithDeps, searchOrganizationLicenseOffersWithDeps, searchOrganizationLicenseOrdersWithDeps, searchOrganizationEmployeesWithDeps, searchClinicalBundleWithDeps, searchLatestIpsWithDeps, upsertRelatedPersonAndPollWithDeps, normalizeCommunicationPathFormatSegment, addFreeOrganizationEmployeeLicensesWithDeps, } from './resource-operations.js';
+import { createOrganizationEmployeeWithDeps, issueOrganizationEmployeeLicenseWithDeps, disableIndividualMemberWithDeps, disableIndividualOrganizationWithDeps, disableOrganizationEmployeeWithDeps, listIndividualLicenseOffersWithDeps, listIndividualLicenseOrdersWithDeps, listIndividualLicensesWithDeps, addFreeIndividualMemberLicensesWithDeps, issueIndividualMemberLicenseWithDeps, transitionIndividualMemberLicenseWithDeps, listOrganizationLicenseOffersWithDeps, listOrganizationLicenseOrdersWithDeps, listOrganizationLicensesWithDeps, grantProfessionalAccessWithDeps, buildClinicalSectionUpdateIngestion, buildClinicalSummaryUpdateIngestion, ingestCommunicationAndUpdateIndexWithDeps, requestProfessionalAccessWithDeps, buildVitalSignBatchCommunicationFromSearchResponse, registerBlockchainArtifactAndUpdateIndexWithDeps, requestClinicalSummaryWithDeps, revokeProfessionalAccessWithDeps, searchCommunicationParticipantsWithDeps, purgeIndividualMemberWithDeps, purgeIndividualOrganizationWithDeps, purgeOrganizationEmployeeWithDeps, prepareEmployeeLifecycleMessageForTransport, searchIndividualLicensesWithDeps, searchIndividualLicenseOffersWithDeps, searchIndividualLicenseOrdersWithDeps, searchOrganizationLicensesWithDeps, searchOrganizationLicenseOffersWithDeps, searchOrganizationLicenseOrdersWithDeps, searchOrganizationEmployeesWithDeps, searchClinicalBundleWithDeps, searchLatestIpsWithDeps, upsertRelatedPersonAndPollWithDeps, normalizeCommunicationPathFormatSegment, addFreeOrganizationEmployeeLicensesWithDeps, requestOrganizationEmployeeLicenseOfferWithDeps, } from './resource-operations.js';
 import { listOrganizationEmployeeLifecycleWithDeps, provisionOrganizationEmployeeWithDeps, } from './organization-employee-lifecycle.js';
 import { submitAndPollWithMethods } from './orchestration/client-port.js';
 import { buildRuntimeHeaders, fetchWithTimeout, parseResponseBody, pollBatchResponseWithRuntimeConfig, postJsonWithRuntimeConfig, postRenderedWithRuntimeConfig, } from './runtime-transport.js';
@@ -477,8 +477,18 @@ export class HttpRuntimeClient {
     /** @deprecated Professional seats use Employee Offer and confirmed Order. */
     async addFreeOrganizationEmployeeLicenses(ctx, input) {
         return addFreeOrganizationEmployeeLicensesWithDeps(ctx, input, {
-            organizationLicenseActionPath: this.paths.organizationLicenseActionPath.bind(this.paths),
-            organizationLicenseActionPollPath: this.paths.organizationLicenseActionPollPath.bind(this.paths),
+            organizationLicenseOfferCreatePath: this.paths.organizationLicenseOfferCreatePath.bind(this.paths),
+            organizationLicenseOfferCreatePollPath: this.paths.organizationLicenseOfferCreatePollPath.bind(this.paths),
+            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
+                ? (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions)
+                : this.submitAndPoll.bind(this),
+        });
+    }
+    /** Starts the commercial Offer flow for additional professional seats. */
+    async requestOrganizationEmployeeLicenseOffer(ctx, input) {
+        return requestOrganizationEmployeeLicenseOfferWithDeps(ctx, input, {
+            organizationLicenseOfferCreatePath: this.paths.organizationLicenseOfferCreatePath.bind(this.paths),
+            organizationLicenseOfferCreatePollPath: this.paths.organizationLicenseOfferCreatePollPath.bind(this.paths),
             submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
                 ? (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions)
                 : this.submitAndPoll.bind(this),
@@ -530,7 +540,9 @@ export class HttpRuntimeClient {
             defaultIntervalMs: pollOptions?.intervalMs,
             hostRegistryOrderBatchPath: this.paths.hostRegistryOrderBatchPath.bind(this.paths),
             hostRegistryOrderPollPath: this.paths.hostRegistryOrderPollPath.bind(this.paths),
-            submitAndPoll: this.submitAndPoll.bind(this),
+            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
+                ? (submitPath, pollPath, payload, options) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, options)
+                : this.submitAndPoll.bind(this),
         });
     }
     /**
@@ -927,7 +939,13 @@ export class HttpRuntimeClient {
         const renderedSubmit = await renderGatewayMessageRequest(payload, profile, this.secureTransportAdapter);
         const submit = await postRenderedWithRuntimeConfig(transportConfig, submitPath, renderedSubmit);
         const poll = await pollUntilCompleteWithMethod(async (path, request) => {
-            const renderedPoll = await renderTransportPollRequest(request.thid, profile, this.secureTransportAdapter);
+            const renderedPoll = profile === TransportProfiles.DidcommEncryptedForm
+                ? await renderGatewayMessageRequest({
+                    thid: request.thid,
+                    ...(typeof payload.iss === 'string' ? { iss: payload.iss } : {}),
+                    ...(typeof payload.aud === 'string' ? { aud: payload.aud } : {}),
+                }, profile, this.secureTransportAdapter)
+                : await renderTransportPollRequest(request.thid, profile, this.secureTransportAdapter);
             const response = await postRenderedWithRuntimeConfig(transportConfig, path, renderedPoll);
             return {
                 status: response.status,

package/dist/orchestration/client-port.d.ts

@@ -18,7 +18,7 @@ import type { EnsureFamilyOrganizationRegistrationInput, EnsureFamilyOrganizatio
 import type { OrganizationLicenseOrderConfirmInput } from '../organization-license-order.js';
 import type { SmartTokenExchangeResult, SmartTokenRequestInput } from '../smart-token.js';
 import type { DigitalTwinMaterializationInput, DigitalTwinSearchInput, DigitalTwinSelectionInput } from '../digital-twin.js';
-import type { CommunicationIngestionInput, BlockchainArtifactRegistrationInput, CommunicationParticipantRuntimeSearchInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, VitalSignBatchCommunicationFromSearchResponseInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IndividualMemberLicenseAddInput, IndividualMemberLicenseInvitationInput, IndividualMemberLicenseTransitionInput, IpsOrFhirImportInput, OrganizationEmployeeCreationInput, OrganizationEmployeeLicenseAddInput, OrganizationEmployeeLicenseInvitationInput, OrganizationEmployeeLifecycleInput, OrganizationEmployeeSearchInput, ProfessionalAccessRequestInput, ProfessionalAccessRequestResult, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, RelatedPersonUpsertInput } from '../resource-operations.js';
+import type { CommunicationIngestionInput, BlockchainArtifactRegistrationInput, CommunicationParticipantRuntimeSearchInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, VitalSignBatchCommunicationFromSearchResponseInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IndividualMemberLicenseAddInput, IndividualMemberLicenseInvitationInput, IndividualMemberLicenseTransitionInput, IpsOrFhirImportInput, OrganizationEmployeeCreationInput, OrganizationEmployeeLicenseAddInput, OrganizationEmployeeLicenseOfferInput, OrganizationEmployeeLicenseInvitationInput, OrganizationEmployeeLifecycleInput, OrganizationEmployeeSearchInput, ProfessionalAccessRequestInput, ProfessionalAccessRequestResult, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, RelatedPersonUpsertInput } from '../resource-operations.js';
 /**
  * Shared node-runtime activation input.
  *
@@ -82,6 +82,7 @@ export type RuntimeClient = {
     searchOrganizationLicenses?: (ctx: RouteContext, input: LicenseListRuntimeSearchInput) => Promise<SubmitAndPollResult>;
     listOrganizationLicenses?: (ctx: RouteContext, input?: LicenseListRuntimeSearchInput) => Promise<SubmitAndPollResult>;
     addFreeOrganizationEmployeeLicenses?: (ctx: RouteContext, input: OrganizationEmployeeLicenseAddInput) => Promise<SubmitAndPollResult>;
+    requestOrganizationEmployeeLicenseOffer?: (ctx: RouteContext, input: OrganizationEmployeeLicenseOfferInput) => Promise<SubmitAndPollResult>;
     searchOrganizationLicenseOffers?: (ctx: RouteContext, input: LicenseOfferRuntimeSearchInput) => Promise<SubmitAndPollResult>;
     listOrganizationLicenseOffers?: (ctx: RouteContext, input?: LicenseOfferRuntimeSearchInput) => Promise<SubmitAndPollResult>;
     searchOrganizationLicenseOrders?: (ctx: RouteContext, input: LicenseOrderRuntimeSearchInput) => Promise<SubmitAndPollResult>;

package/dist/orchestration/organization-controller-sdk.d.ts

@@ -5,7 +5,7 @@ import type { EmployeeDeviceActivationResult, EmployeeDeviceActivationRequestInp
 import type { SmartTokenExchangeResult, SmartTokenRequestInput } from '../smart-token.js';
 import type { OrganizationLicenseOrderConfirmInput } from '../organization-license-order.js';
 import type { NodeCapability } from '../session.js';
-import type { LicenseListRuntimeSearchInput, LicenseOfferRuntimeSearchInput, LicenseOrderRuntimeSearchInput, OrganizationEmployeeCreationInput, OrganizationEmployeeLicenseAddInput, OrganizationEmployeeLicenseInvitationInput, OrganizationEmployeeLifecycleInput, OrganizationEmployeeSearchInput } from '../resource-operations.js';
+import type { LicenseListRuntimeSearchInput, LicenseOfferRuntimeSearchInput, LicenseOrderRuntimeSearchInput, OrganizationEmployeeCreationInput, OrganizationEmployeeLicenseAddInput, OrganizationEmployeeLicenseOfferInput, OrganizationEmployeeLicenseInvitationInput, OrganizationEmployeeLifecycleInput, OrganizationEmployeeSearchInput } from '../resource-operations.js';
 import type { OrganizationEmployeeProvisioningInput, OrganizationEmployeeProvisioningResult } from '../organization-employee-lifecycle.js';
 import type { OrganizationEmployeeLifecycleRecord } from 'gdc-common-utils-ts/models/organization-employee-lifecycle';
 /**
@@ -85,6 +85,8 @@ export declare class OrganizationControllerSdk {
     listLicenses(ctx: RouteContext, input?: LicenseListRuntimeSearchInput): Promise<SubmitAndPollResult>;
     /** @deprecated Professional seats use Employee Offer and confirmed Order. */
     addFreeEmployeeLicenses(ctx: RouteContext, input: OrganizationEmployeeLicenseAddInput): Promise<SubmitAndPollResult>;
+    /** Requests an Offer for additional employee seats before invitations. */
+    requestEmployeeLicenseOffer(ctx: RouteContext, input: OrganizationEmployeeLicenseOfferInput): Promise<SubmitAndPollResult>;
     /**
      * Searches commercial license offers known for the current organization.
      */

package/dist/orchestration/organization-controller-sdk.js

@@ -115,6 +115,10 @@ export class OrganizationControllerSdk {
     addFreeEmployeeLicenses(ctx, input) {
         return requireClientMethod(this.client, 'addFreeOrganizationEmployeeLicenses')(ctx, input);
     }
+    /** Requests an Offer for additional employee seats before invitations. */
+    requestEmployeeLicenseOffer(ctx, input) {
+        return requireClientMethod(this.client, 'requestOrganizationEmployeeLicenseOffer')(ctx, input);
+    }
     /**
      * Searches commercial license offers known for the current organization.
      */

package/dist/organization-license-order.d.ts

@@ -18,6 +18,8 @@ import type { RouteContext } from './individual-onboarding.js';
  *   runtime adapts that higher-level intent onto the current host route
  */
 export type OrganizationLicenseOrderConfirmInput = Readonly<{
+    /** Exact DCR-registered controller DID that signs the protected request. */
+    issuerDid: string;
     offerId: string;
     hostNetwork?: string;
     dataType?: string;

package/dist/organization-license-order.js

@@ -5,6 +5,10 @@ export async function confirmOrganizationLicenseOrderWithDeps(deps) {
     if (!offerId) {
         throw new Error('confirmOrganizationLicenseOrder requires offerId.');
     }
+    const issuerDid = String(deps.input.issuerDid || '').trim();
+    if (!issuerDid) {
+        throw new Error('confirmOrganizationLicenseOrder requires issuerDid.');
+    }
     const claims = {
         '@context': 'org.schema',
         'Order.acceptedOffer.identifier': offerId,
@@ -16,7 +20,7 @@ export async function confirmOrganizationLicenseOrderWithDeps(deps) {
     };
     const payload = {
         jti: `jti-${createRuntimeUuid()}`,
-        iss: deps.routeCtx.tenantId,
+        iss: issuerDid,
         aud: deps.routeCtx.tenantId,
         type: 'application/didcomm-plain+json',
         thid: `organization-license-order-${createRuntimeUuid()}`,

package/dist/resource-operations.d.ts

@@ -133,8 +133,10 @@ export type IndividualMemberLicenseAddInput = {
         intervalMs?: number;
     };
 };
-/** Adds zero-cost employee seats on an explicitly configured test network. */
-export type OrganizationEmployeeLicenseAddInput = {
+/** Requests a host-authored Offer for additional professional employee seats. */
+export type OrganizationEmployeeLicenseOfferInput = {
+    /** Exact DCR-registered controller DID that signs the protected request. */
+    issuerDid: string;
     quantity: number;
     requestThid?: string;
     pollOptions?: {
@@ -142,6 +144,8 @@ export type OrganizationEmployeeLicenseAddInput = {
         intervalMs?: number;
     };
 };
+/** @deprecated Use `OrganizationEmployeeLicenseOfferInput`. */
+export type OrganizationEmployeeLicenseAddInput = OrganizationEmployeeLicenseOfferInput;
 /** Input shared by invitation acceptance, deactivation and release. */
 export type IndividualMemberLicenseTransitionInput = {
     /** Required for controller deactivation/release; acceptance resolves by code. */
@@ -665,12 +669,17 @@ type IndividualLicenseMutationDeps = {
     }) => Promise<SubmitAndPollResult>;
 };
 type OrganizationLicenseMutationDeps = {
-    organizationLicenseActionPath: (ctx: RouteContext, action: string) => string;
-    organizationLicenseActionPollPath: (ctx: RouteContext, action: string) => string;
+    organizationLicenseOfferCreatePath: (ctx: RouteContext) => string;
+    organizationLicenseOfferCreatePollPath: (ctx: RouteContext) => string;
     submitAndPoll: IndividualLicenseMutationDeps['submitAndPoll'];
 };
-/** @deprecated Professional seats always use Employee Offer and confirmed Order. */
-export declare function addFreeOrganizationEmployeeLicensesWithDeps(_routeCtx: RouteContext, _input: OrganizationEmployeeLicenseAddInput, _deps: OrganizationLicenseMutationDeps): Promise<SubmitAndPollResult>;
+/**
+ * Requests a professional-seat Offer without creating or assigning seats.
+ * The returned Offer must be accepted through the existing paid Order flow.
+ */
+export declare function requestOrganizationEmployeeLicenseOfferWithDeps(routeCtx: RouteContext, input: OrganizationEmployeeLicenseOfferInput, deps: OrganizationLicenseMutationDeps): Promise<SubmitAndPollResult>;
+/** @deprecated Use `requestOrganizationEmployeeLicenseOfferWithDeps`. */
+export declare function addFreeOrganizationEmployeeLicensesWithDeps(routeCtx: RouteContext, input: OrganizationEmployeeLicenseAddInput, deps: OrganizationLicenseMutationDeps): Promise<SubmitAndPollResult>;
 /**
  * Reserves one available household/member seat for a selected contact.
  *

package/dist/resource-operations.js

@@ -243,9 +243,31 @@ export async function searchIndividualLicensesWithDeps(routeCtx, input, deps) {
 export async function listIndividualLicensesWithDeps(routeCtx, input, deps) {
     return searchIndividualLicensesWithDeps(routeCtx, input || {}, deps);
 }
-/** @deprecated Professional seats always use Employee Offer and confirmed Order. */
-export async function addFreeOrganizationEmployeeLicensesWithDeps(_routeCtx, _input, _deps) {
-    throw new Error('Professional seats require Employee Offer and Order payment verification; License/_add is not supported.');
+/**
+ * Requests a professional-seat Offer without creating or assigning seats.
+ * The returned Offer must be accepted through the existing paid Order flow.
+ */
+export async function requestOrganizationEmployeeLicenseOfferWithDeps(routeCtx, input, deps) {
+    const entry = buildLicensePurchaseEntry({
+        quantity: input.quantity,
+        userClass: 'employee',
+        type: 'web',
+    });
+    const issuerDid = String(input.issuerDid || '').trim();
+    if (!issuerDid)
+        throw new Error('requestOrganizationEmployeeLicenseOffer requires issuerDid.');
+    return deps.submitAndPoll(deps.organizationLicenseOfferCreatePath(routeCtx), deps.organizationLicenseOfferCreatePollPath(routeCtx), {
+        jti: `jti-${createRuntimeUuid()}`,
+        iss: issuerDid,
+        aud: routeCtx.tenantId,
+        type: 'application/didcomm-plain+json',
+        thid: input.requestThid || `organization-license-offer-${createRuntimeUuid()}`,
+        body: { resourceType: 'Bundle', type: 'batch', data: [entry] },
+    }, input.pollOptions);
+}
+/** @deprecated Use `requestOrganizationEmployeeLicenseOfferWithDeps`. */
+export async function addFreeOrganizationEmployeeLicensesWithDeps(routeCtx, input, deps) {
+    return requestOrganizationEmployeeLicenseOfferWithDeps(routeCtx, input, deps);
 }
 /**
  * Reserves one available household/member seat for a selected contact.

package/dist/runtime-client-paths.d.ts

@@ -40,6 +40,9 @@ export declare class RuntimeClientPaths {
     organizationDidBindingPollPath(ctx?: RouteContext): string;
     organizationLicenseOfferSearchPath(ctx?: RouteContext): string;
     organizationLicenseOfferSearchPollPath(ctx?: RouteContext): string;
+    /** Host-authored professional seat Offer creation; this never mutates License inventory. */
+    organizationLicenseOfferCreatePath(ctx?: RouteContext): string;
+    organizationLicenseOfferCreatePollPath(ctx?: RouteContext): string;
     organizationLicenseOrderSearchPath(ctx?: RouteContext): string;
     organizationLicenseOrderSearchPollPath(ctx?: RouteContext): string;
     employeePurgePath(ctx?: RouteContext): string;

package/dist/runtime-client-paths.js

@@ -54,6 +54,9 @@ export class RuntimeClientPaths {
     organizationDidBindingPollPath(ctx) { return buildOrganizationDidBindingPollPath(this.requireRouteContext(ctx)); }
     organizationLicenseOfferSearchPath(ctx) { return this.v1Path(ctx, 'entity', 'org.schema', 'Offer', '_search'); }
     organizationLicenseOfferSearchPollPath(ctx) { return this.v1Path(ctx, 'entity', 'org.schema', 'Offer', '_search-response'); }
+    /** Host-authored professional seat Offer creation; this never mutates License inventory. */
+    organizationLicenseOfferCreatePath(ctx) { return this.v1Path(ctx, 'entity', 'org.schema', 'Offer', GwCoreLifecycleAction.Create); }
+    organizationLicenseOfferCreatePollPath(ctx) { return this.v1Path(ctx, 'entity', 'org.schema', 'Offer', GwCoreLifecycleAction.CreateResponse); }
     organizationLicenseOrderSearchPath(ctx) { return this.v1Path(ctx, 'entity', 'org.schema', 'Order', '_search'); }
     organizationLicenseOrderSearchPollPath(ctx) { return this.v1Path(ctx, 'entity', 'org.schema', 'Order', '_search-response'); }
     employeePurgePath(ctx) { return this.v1Path(ctx, 'entity', 'org.schema', 'Employee', GwCoreLifecycleAction.Purge); }

package/dist/server-profile-session.js

@@ -1,6 +1,7 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
 import { randomBytes } from 'node:crypto';
 import { IdentityDcrMetadataFields, IdentityDeviceInfoFields } from 'gdc-common-utils-ts/constants/identity-auth';
+import { ActorKinds } from 'gdc-common-utils-ts/constants/actor-session';
 import { TransportProfiles, } from 'gdc-sdk-core-ts';
 import { NodeManagedWallet } from './node-managed-wallet.js';
 import { NodeHttpClient } from './node-runtime-client.js';
@@ -182,6 +183,7 @@ export class ServerProfileSessionManager {
             clientAssertion: assertion,
             clientAssertionType: 'private_key_jwt',
             smartTokenKind: 'openid-smart',
+            acrValues: profileSmartAcrValues(profile.actorKind),
             scopes: unique(input.scopes),
             tokenCacheKey: `profile:${profile.profileId}:${input.subjectDid}:${unique(input.scopes).join(',')}`,
         });
@@ -222,7 +224,7 @@ export class ServerProfileSessionManager {
             scopes: session.scopes,
             accessToken: await this.options.sealer.unseal(session.sealedAccessToken, `${sessionId}:access-token`),
             secureTransportAdapter: {
-                pack: (message) => wallet.packForRecipientWithContext(message, profile.providerDid, { context }),
+                pack: (message) => wallet.packForRecipientWithContext(bindTransportActor(message, profile.actorDid, profile.clientId), profile.providerDid, { context }),
                 unpack: async (jwe) => (await wallet.unpackWithContext(jwe, { context })).content,
             },
             confidentialStorageAdapter: {
@@ -303,6 +305,21 @@ export class ServerProfileSessionManager {
     }
     now() { return this.options.now?.() || new Date(); }
 }
+/**
+ * Binds every direct resource action and async poll to the actor and DCR client
+ * stored in the server profile. The caller may author the business body and
+ * thread id, but cannot replace either verification identity.
+ */
+function bindTransportActor(message, actorDid, clientId) {
+    return { ...message, iss: actorDid, client_id: clientId };
+}
+/** Keeps the OpenID proof class aligned with the durable actor profile. */
+function profileSmartAcrValues(actorKind) {
+    return actorKind === ActorKinds.IndividualController
+        || actorKind === ActorKinds.IndividualMember
+        ? 'urn:antifraud:acr:openid4vp:individual'
+        : 'urn:antifraud:acr:openid4vp:employee';
+}
 async function buildWalletClientAssertion(wallet, profile, audience, now) {
     const seconds = Math.floor(now.getTime() / 1000);
     return wallet.signCompactJws(walletContext(profile.walletKeyDerivationId || profile.profileId), {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.4.18",
+  "version": "2.4.23",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",