gdc-sdk-node-ts 2.4.22 → 2.4.24

package/README.md

@@ -288,9 +288,11 @@ npm run test:e2e:live-gw:all
 
 Profile note:
 
-- `didcomm-plain` is the current live baseline implemented by the Node runtime client
+- `didcomm-plain` is the explicit demo-only live profile
 - `legacy-fhir` exercises raw `application/fhir+json` async batch submission for `org.hl7.fhir.*`
 - `all` runs every implemented profile from the same suite file
+- each `NodeHttpClient` selects one profile at construction; every facade
+  operation and poll uses it and cannot override or downgrade it
 
 Run the IPS ingestion/search branch as well:
 

package/dist/constants/lifecycle.d.ts

@@ -7,6 +7,8 @@
  * is actually deployed.
  */
 export declare const GwCoreLifecycleAction: Readonly<{
+    readonly Create: "_create";
+    readonly CreateResponse: "_create-response";
     readonly Batch: "_batch";
     readonly BatchResponse: "_batch-response";
     readonly Issue: "_issue";

package/dist/constants/lifecycle.js

@@ -9,6 +9,8 @@ import { LifecycleRequestType } from 'gdc-common-utils-ts';
  * is actually deployed.
  */
 export const GwCoreLifecycleAction = Object.freeze({
+    Create: '_create',
+    CreateResponse: '_create-response',
     Batch: '_batch',
     BatchResponse: '_batch-response',
     Issue: '_issue',

package/dist/node-runtime-client.d.ts

@@ -127,7 +127,9 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
      */
     v1Path(ctx: RouteContext | undefined, section: string, format: string, resourceType: string, action: string): string;
     /**
-     * Submits a batch payload to a gateway batch endpoint.
+     * Submits a batch payload using the transport profile selected once when the
+     * runtime client was constructed. Operations cannot downgrade or replace
+     * that profile locally.
      */
     submitBatch(path: string, payload: SubmitPayload): Promise<SubmitResponse>;
     /**
@@ -145,6 +147,13 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
     /** Registers one tenant or exact-subject FHIR R5 rest-hook Subscription. */
     submitFhirR5SubscriptionBatch(ctx: RouteContext, input: FhirR5SubscriptionBatchInput, pollOptions?: PollOptions): Promise<SubmitAndPollResult>;
     private submitAndPollWithBearerToken;
+    /**
+     * Enforces the client-owned transport policy. Operation inputs retained for
+     * source compatibility may repeat the configured profile, but can never
+     * replace it or silently downgrade the wire protection selected at runtime
+     * construction.
+     */
+    private requireConfiguredTransportProfile;
     /**
      * Starts the host-side legal-organization verification transaction that GW
      * CORE forwards to ICA `_verify`.
@@ -547,8 +556,6 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
         pollOptions?: PollOptions;
     }): Promise<SubmitAndPollResult>;
     private buildConsentClaimsWithCid;
-    private pollBatchResponse;
-    private postJson;
     private buildHeaders;
     private fetchWithTimeout;
     private parseResponseBody;

package/dist/node-runtime-client.js

@@ -1,6 +1,3 @@
-// Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
-// Always create JSDoc, do not use strings inline in keys nor values, use types instead, and reuse the data test examples.
-import { DIDCOMM_PLAINTEXT_JSON_MEDIA_TYPE, } from 'gdc-common-utils-ts/utils/didcomm-submit';
 import { buildAppHeaders, createBootstrapFacade, decodeTransportResponse, renderCommunicationOutboxRequest, renderGatewayMessageRequest, renderTransportPollRequest, resolveAppInfo, TransportProfiles, } from 'gdc-sdk-core-ts';
 import { pollUntilCompleteWithMethod } from './async-polling.js';
 import { confirmLegalOrganizationOrderWithDeps, HostLifecycleRequestType, HostedTenantLifecycleRequestType, submitHostedTenantLifecycleWithDeps, } from './host-onboarding.js';
@@ -14,8 +11,7 @@ import { confirmOrganizationLicenseOrderWithDeps } from './organization-license-
 import { startIndividualOrganizationWithDeps } from './individual-start.js';
 import { createOrganizationEmployeeWithDeps, issueOrganizationEmployeeLicenseWithDeps, disableIndividualMemberWithDeps, disableIndividualOrganizationWithDeps, disableOrganizationEmployeeWithDeps, listIndividualLicenseOffersWithDeps, listIndividualLicenseOrdersWithDeps, listIndividualLicensesWithDeps, addFreeIndividualMemberLicensesWithDeps, issueIndividualMemberLicenseWithDeps, transitionIndividualMemberLicenseWithDeps, listOrganizationLicenseOffersWithDeps, listOrganizationLicenseOrdersWithDeps, listOrganizationLicensesWithDeps, grantProfessionalAccessWithDeps, buildClinicalSectionUpdateIngestion, buildClinicalSummaryUpdateIngestion, ingestCommunicationAndUpdateIndexWithDeps, requestProfessionalAccessWithDeps, buildVitalSignBatchCommunicationFromSearchResponse, registerBlockchainArtifactAndUpdateIndexWithDeps, requestClinicalSummaryWithDeps, revokeProfessionalAccessWithDeps, searchCommunicationParticipantsWithDeps, purgeIndividualMemberWithDeps, purgeIndividualOrganizationWithDeps, purgeOrganizationEmployeeWithDeps, prepareEmployeeLifecycleMessageForTransport, searchIndividualLicensesWithDeps, searchIndividualLicenseOffersWithDeps, searchIndividualLicenseOrdersWithDeps, searchOrganizationLicensesWithDeps, searchOrganizationLicenseOffersWithDeps, searchOrganizationLicenseOrdersWithDeps, searchOrganizationEmployeesWithDeps, searchClinicalBundleWithDeps, searchLatestIpsWithDeps, upsertRelatedPersonAndPollWithDeps, normalizeCommunicationPathFormatSegment, addFreeOrganizationEmployeeLicensesWithDeps, requestOrganizationEmployeeLicenseOfferWithDeps, } from './resource-operations.js';
 import { listOrganizationEmployeeLifecycleWithDeps, provisionOrganizationEmployeeWithDeps, } from './organization-employee-lifecycle.js';
-import { submitAndPollWithMethods } from './orchestration/client-port.js';
-import { buildRuntimeHeaders, fetchWithTimeout, parseResponseBody, pollBatchResponseWithRuntimeConfig, postJsonWithRuntimeConfig, postRenderedWithRuntimeConfig, } from './runtime-transport.js';
+import { buildRuntimeHeaders, fetchWithTimeout, parseResponseBody, postRenderedWithRuntimeConfig, } from './runtime-transport.js';
 import { activateOrganizationInGatewayFromIcaProofWithDeps, submitLegalOrganizationCredentialReissuanceWithDeps, submitLegalOrganizationVerificationTransactionWithDeps, submitOrganizationDidBindingWithDeps, } from './runtime-host-submission.js';
 import { buildGrantProfessionalAccessClaimsWithCid } from './runtime-consent.js';
 import { RuntimeClientPaths } from './runtime-client-paths.js';
@@ -102,22 +98,38 @@ export class HttpRuntimeClient {
         return this.paths.v1Path(ctx, section, format, resourceType, action);
     }
     /**
-     * Submits a batch payload to a gateway batch endpoint.
+     * Submits a batch payload using the transport profile selected once when the
+     * runtime client was constructed. Operations cannot downgrade or replace
+     * that profile locally.
      */
     async submitBatch(path, payload) {
-        return this.postJson(path, payload, DIDCOMM_PLAINTEXT_JSON_MEDIA_TYPE);
+        const rendered = await renderGatewayMessageRequest(payload, this.transportProfile, this.secureTransportAdapter);
+        const response = await postRenderedWithRuntimeConfig(this.transportConfig, path, rendered);
+        return { status: response.status, location: response.location, body: response.body };
     }
     /**
      * Polls a batch-response endpoint until the GW reports a terminal state.
      */
     async pollUntilComplete(pollPath, request, pollOptions) {
-        return pollUntilCompleteWithMethod(this.pollBatchResponse.bind(this), pollPath, request, pollOptions);
+        return pollUntilCompleteWithMethod(async (path, currentRequest) => {
+            const rendered = await renderTransportPollRequest(currentRequest.thid, this.transportProfile, this.secureTransportAdapter);
+            const response = await postRenderedWithRuntimeConfig(this.transportConfig, path, rendered);
+            return {
+                status: response.status,
+                body: response.status === 202
+                    ? response.body
+                    : response.status >= 200 && response.status < 300
+                        ? await decodeTransportResponse(response.body, this.transportProfile, this.secureTransportAdapter)
+                        : response.body,
+                retryAfterMs: response.retryAfterMs,
+            };
+        }, pollPath, request, pollOptions);
     }
     /**
      * Convenience wrapper that performs submit and poll in sequence.
      */
     async submitAndPoll(submitPath, pollPath, payload, pollOptions) {
-        return submitAndPollWithMethods(this, submitPath, pollPath, payload, pollOptions);
+        return this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions);
     }
     /** Registers one neutral FHIR R5 topic in the tenant-owned CORE catalog. */
     submitFhirR5SubscriptionTopicBatch(ctx, topic, pollOptions) {
@@ -138,13 +150,19 @@ export class HttpRuntimeClient {
         });
     }
     async submitAndPollWithBearerToken(bearerToken, submitPath, pollPath, payload, pollOptions) {
-        const config = { ...this.transportConfig, bearerToken };
-        const submitted = await postJsonWithRuntimeConfig(config, submitPath, payload, DIDCOMM_PLAINTEXT_JSON_MEDIA_TYPE);
-        const poll = await pollUntilCompleteWithMethod((path, request) => pollBatchResponseWithRuntimeConfig(config, path, request), pollPath, { thid: String(payload.thid) }, pollOptions);
-        return {
-            submit: { status: submitted.status, location: submitted.location, body: submitted.body },
-            poll,
-        };
+        return this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions, bearerToken);
+    }
+    /**
+     * Enforces the client-owned transport policy. Operation inputs retained for
+     * source compatibility may repeat the configured profile, but can never
+     * replace it or silently downgrade the wire protection selected at runtime
+     * construction.
+     */
+    requireConfiguredTransportProfile(requested) {
+        if (requested && requested !== this.transportProfile) {
+            throw new Error(`Operation transport profile '${requested}' conflicts with configured runtime profile '${this.transportProfile}'.`);
+        }
+        return this.transportProfile;
     }
     /**
      * Starts the host-side legal-organization verification transaction that GW
@@ -175,9 +193,7 @@ export class HttpRuntimeClient {
             wrapBundleAsGatewayTransactionMessage: this.wrapBundleAsGatewayTransactionMessage.bind(this),
             submitPath: this.hostRegistryOrganizationTransactionPath.bind(this),
             pollPath: this.hostRegistryOrganizationTransactionPollPath.bind(this),
-            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
-                ? (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions)
-                : this.submitAndPoll.bind(this),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     /**
@@ -199,9 +215,7 @@ export class HttpRuntimeClient {
             wrapBundleAsGatewayTransactionMessage: this.wrapBundleAsGatewayTransactionMessage.bind(this),
             submitPath: this.hostRegistryOrganizationIssuePath.bind(this),
             pollPath: this.hostRegistryOrganizationIssuePollPath.bind(this),
-            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
-                ? (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions)
-                : this.submitAndPoll.bind(this),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     /**
@@ -364,7 +378,7 @@ export class HttpRuntimeClient {
         return createOrganizationEmployeeWithDeps(ctx, input, pollOptions, {
             employeeBatchPath: this.paths.employeeBatchPath.bind(this.paths),
             employeePollPath: this.paths.employeePollPath.bind(this.paths),
-            submitAndPoll: (submitPath, pollPath, payload, options) => this.submitClinicalMessageAndPoll(submitPath, pollPath, prepareEmployeeLifecycleMessageForTransport(payload, this.transportProfile), this.transportProfile, options),
+            submitAndPoll: (submitPath, pollPath, payload, options) => this.submitAndPoll(submitPath, pollPath, prepareEmployeeLifecycleMessageForTransport(payload, this.transportProfile), options),
         });
     }
     /** Creates an employee and reserves its activation credential as one SDK workflow. */
@@ -382,9 +396,7 @@ export class HttpRuntimeClient {
             input,
             identityDeviceRevokePath: this.paths.identityDeviceRevokePath.bind(this.paths),
             identityDeviceRevokePollPath: this.paths.identityDeviceRevokePollPath.bind(this.paths),
-            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
-                ? (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions)
-                : this.submitAndPoll.bind(this),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     /** Reserves an employee seat and issues its bounded multi-device activation credential. */
@@ -392,9 +404,7 @@ export class HttpRuntimeClient {
         return issueOrganizationEmployeeLicenseWithDeps(ctx, input, {
             identityLicenseIssuePath: this.paths.identityLicenseIssuePath.bind(this.paths),
             identityLicenseIssuePollPath: this.paths.identityLicenseIssuePollPath.bind(this.paths),
-            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
-                ? (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions)
-                : this.submitAndPoll.bind(this),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     /**
@@ -477,21 +487,17 @@ export class HttpRuntimeClient {
     /** @deprecated Professional seats use Employee Offer and confirmed Order. */
     async addFreeOrganizationEmployeeLicenses(ctx, input) {
         return addFreeOrganizationEmployeeLicensesWithDeps(ctx, input, {
-            organizationLicenseActionPath: this.paths.organizationLicenseActionPath.bind(this.paths),
-            organizationLicenseActionPollPath: this.paths.organizationLicenseActionPollPath.bind(this.paths),
-            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
-                ? (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions)
-                : this.submitAndPoll.bind(this),
+            organizationLicenseOfferCreatePath: this.paths.organizationLicenseOfferCreatePath.bind(this.paths),
+            organizationLicenseOfferCreatePollPath: this.paths.organizationLicenseOfferCreatePollPath.bind(this.paths),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     /** Starts the commercial Offer flow for additional professional seats. */
     async requestOrganizationEmployeeLicenseOffer(ctx, input) {
         return requestOrganizationEmployeeLicenseOfferWithDeps(ctx, input, {
-            organizationLicenseActionPath: this.paths.organizationLicenseActionPath.bind(this.paths),
-            organizationLicenseActionPollPath: this.paths.organizationLicenseActionPollPath.bind(this.paths),
-            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
-                ? (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions)
-                : this.submitAndPoll.bind(this),
+            organizationLicenseOfferCreatePath: this.paths.organizationLicenseOfferCreatePath.bind(this.paths),
+            organizationLicenseOfferCreatePollPath: this.paths.organizationLicenseOfferCreatePollPath.bind(this.paths),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     async searchOrganizationLicenseOffers(ctx, input) {
@@ -848,10 +854,11 @@ export class HttpRuntimeClient {
      * configured secure transport adapter signs/encrypts DIDComm when enabled.
      */
     async requestProfessionalAccess(ctx, input) {
+        this.requireConfiguredTransportProfile(input.transportProfile);
         return requestProfessionalAccessWithDeps(ctx, input, {
             individualCommunicationBatchPath: this.paths.individualCommunicationBatchPath.bind(this.paths),
             individualCommunicationPollPath: this.paths.individualCommunicationPollPath.bind(this.paths),
-            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, input.transportProfile || this.transportProfile, pollOptions),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     /**
@@ -895,7 +902,7 @@ export class HttpRuntimeClient {
      */
     async submitCommunicationOutboxJobAndPoll(ctx, input) {
         const job = input.communicationJob;
-        const profile = input.transportProfile || this.transportProfile;
+        const profile = this.requireConfiguredTransportProfile(input.transportProfile);
         const format = normalizeCommunicationPathFormatSegment(input.clinicalFormat || input.pathFormatSegment);
         const submitPath = this.paths.individualCommunicationBatchPath(ctx, format);
         const pollPath = this.paths.individualCommunicationPollPath(ctx, format);
@@ -937,7 +944,13 @@ export class HttpRuntimeClient {
         const renderedSubmit = await renderGatewayMessageRequest(payload, profile, this.secureTransportAdapter);
         const submit = await postRenderedWithRuntimeConfig(transportConfig, submitPath, renderedSubmit);
         const poll = await pollUntilCompleteWithMethod(async (path, request) => {
-            const renderedPoll = await renderTransportPollRequest(request.thid, profile, this.secureTransportAdapter);
+            const renderedPoll = profile === TransportProfiles.DidcommEncryptedForm
+                ? await renderGatewayMessageRequest({
+                    thid: request.thid,
+                    ...(typeof payload.iss === 'string' ? { iss: payload.iss } : {}),
+                    ...(typeof payload.aud === 'string' ? { aud: payload.aud } : {}),
+                }, profile, this.secureTransportAdapter)
+                : await renderTransportPollRequest(request.thid, profile, this.secureTransportAdapter);
             const response = await postRenderedWithRuntimeConfig(transportConfig, path, renderedPoll);
             return {
                 status: response.status,
@@ -1005,10 +1018,11 @@ export class HttpRuntimeClient {
      * @param input Search parameters such as subject, section, date and included resource types.
      */
     async searchClinicalBundle(ctx, input) {
+        this.requireConfiguredTransportProfile(input.transportProfile);
         return searchClinicalBundleWithDeps(ctx, input, {
             bundleSearchPath: this.paths.individualBundleSearchPath.bind(this.paths),
             bundleSearchPollPath: this.paths.individualBundleSearchPollPath.bind(this.paths),
-            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, input.transportProfile || this.transportProfile, pollOptions),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     /** Searches tenant digital twins using coded, pseudonymous research claims. */
@@ -1020,7 +1034,7 @@ export class HttpRuntimeClient {
             digitalTwinCompositionPollPath: this.paths.digitalTwinCompositionPollPath.bind(this.paths),
             digitalTwinCommunicationBatchPath: this.paths.digitalTwinCommunicationBatchPath.bind(this.paths),
             digitalTwinCommunicationPollPath: this.paths.digitalTwinCommunicationPollPath.bind(this.paths),
-            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions, input.accessToken),
+            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitAndPollWithBearerToken(input.accessToken, submitPath, pollPath, payload, pollOptions),
         });
     }
     /** Saves one tagged researcher working copy without mutating the canonical twin. */
@@ -1032,7 +1046,7 @@ export class HttpRuntimeClient {
             digitalTwinCompositionPollPath: this.paths.digitalTwinCompositionPollPath.bind(this.paths),
             digitalTwinCommunicationBatchPath: this.paths.digitalTwinCommunicationBatchPath.bind(this.paths),
             digitalTwinCommunicationPollPath: this.paths.digitalTwinCommunicationPollPath.bind(this.paths),
-            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions, input.accessToken),
+            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitAndPollWithBearerToken(input.accessToken, submitPath, pollPath, payload, pollOptions),
         });
     }
     /** Materializes one selected pseudonymous research subject as a summary Bundle. */
@@ -1044,7 +1058,7 @@ export class HttpRuntimeClient {
             digitalTwinCompositionPollPath: this.paths.digitalTwinCompositionPollPath.bind(this.paths),
             digitalTwinCommunicationBatchPath: this.paths.digitalTwinCommunicationBatchPath.bind(this.paths),
             digitalTwinCommunicationPollPath: this.paths.digitalTwinCommunicationPollPath.bind(this.paths),
-            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions, input.accessToken),
+            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitAndPollWithBearerToken(input.accessToken, submitPath, pollPath, payload, pollOptions),
         });
     }
     /**
@@ -1082,12 +1096,6 @@ export class HttpRuntimeClient {
     buildConsentClaimsWithCid(input) {
         return buildGrantProfessionalAccessClaimsWithCid(input, runtimeUuid);
     }
-    async pollBatchResponse(path, request) {
-        return pollBatchResponseWithRuntimeConfig(this.transportConfig, path, request);
-    }
-    async postJson(path, payload, contentType) {
-        return postJsonWithRuntimeConfig(this.transportConfig, path, payload, contentType);
-    }
     buildHeaders(contentType) {
         return buildRuntimeHeaders(this.transportConfig, contentType);
     }

package/dist/organization-license-order.d.ts

@@ -18,6 +18,8 @@ import type { RouteContext } from './individual-onboarding.js';
  *   runtime adapts that higher-level intent onto the current host route
  */
 export type OrganizationLicenseOrderConfirmInput = Readonly<{
+    /** Exact DCR-registered controller DID that signs the protected request. */
+    issuerDid: string;
     offerId: string;
     hostNetwork?: string;
     dataType?: string;

package/dist/organization-license-order.js

@@ -5,6 +5,10 @@ export async function confirmOrganizationLicenseOrderWithDeps(deps) {
     if (!offerId) {
         throw new Error('confirmOrganizationLicenseOrder requires offerId.');
     }
+    const issuerDid = String(deps.input.issuerDid || '').trim();
+    if (!issuerDid) {
+        throw new Error('confirmOrganizationLicenseOrder requires issuerDid.');
+    }
     const claims = {
         '@context': 'org.schema',
         'Order.acceptedOffer.identifier': offerId,
@@ -16,7 +20,7 @@ export async function confirmOrganizationLicenseOrderWithDeps(deps) {
     };
     const payload = {
         jti: `jti-${createRuntimeUuid()}`,
-        iss: deps.routeCtx.tenantId,
+        iss: issuerDid,
         aud: deps.routeCtx.tenantId,
         type: 'application/didcomm-plain+json',
         thid: `organization-license-order-${createRuntimeUuid()}`,

package/dist/resource-operations.d.ts

@@ -135,6 +135,8 @@ export type IndividualMemberLicenseAddInput = {
 };
 /** Requests a host-authored Offer for additional professional employee seats. */
 export type OrganizationEmployeeLicenseOfferInput = {
+    /** Exact DCR-registered controller DID that signs the protected request. */
+    issuerDid: string;
     quantity: number;
     requestThid?: string;
     pollOptions?: {
@@ -667,8 +669,8 @@ type IndividualLicenseMutationDeps = {
     }) => Promise<SubmitAndPollResult>;
 };
 type OrganizationLicenseMutationDeps = {
-    organizationLicenseActionPath: (ctx: RouteContext, action: string) => string;
-    organizationLicenseActionPollPath: (ctx: RouteContext, action: string) => string;
+    organizationLicenseOfferCreatePath: (ctx: RouteContext) => string;
+    organizationLicenseOfferCreatePollPath: (ctx: RouteContext) => string;
     submitAndPoll: IndividualLicenseMutationDeps['submitAndPoll'];
 };
 /**

package/dist/resource-operations.js

@@ -253,7 +253,14 @@ export async function requestOrganizationEmployeeLicenseOfferWithDeps(routeCtx,
         userClass: 'employee',
         type: 'web',
     });
-    return deps.submitAndPoll(deps.organizationLicenseActionPath(routeCtx, '_add'), deps.organizationLicenseActionPollPath(routeCtx, '_add'), {
+    const issuerDid = String(input.issuerDid || '').trim();
+    if (!issuerDid)
+        throw new Error('requestOrganizationEmployeeLicenseOffer requires issuerDid.');
+    return deps.submitAndPoll(deps.organizationLicenseOfferCreatePath(routeCtx), deps.organizationLicenseOfferCreatePollPath(routeCtx), {
+        jti: `jti-${createRuntimeUuid()}`,
+        iss: issuerDid,
+        aud: routeCtx.tenantId,
+        type: 'application/didcomm-plain+json',
         thid: input.requestThid || `organization-license-offer-${createRuntimeUuid()}`,
         body: { resourceType: 'Bundle', type: 'batch', data: [entry] },
     }, input.pollOptions);

package/dist/runtime-client-paths.d.ts

@@ -40,6 +40,9 @@ export declare class RuntimeClientPaths {
     organizationDidBindingPollPath(ctx?: RouteContext): string;
     organizationLicenseOfferSearchPath(ctx?: RouteContext): string;
     organizationLicenseOfferSearchPollPath(ctx?: RouteContext): string;
+    /** Host-authored professional seat Offer creation; this never mutates License inventory. */
+    organizationLicenseOfferCreatePath(ctx?: RouteContext): string;
+    organizationLicenseOfferCreatePollPath(ctx?: RouteContext): string;
     organizationLicenseOrderSearchPath(ctx?: RouteContext): string;
     organizationLicenseOrderSearchPollPath(ctx?: RouteContext): string;
     employeePurgePath(ctx?: RouteContext): string;

package/dist/runtime-client-paths.js

@@ -54,6 +54,9 @@ export class RuntimeClientPaths {
     organizationDidBindingPollPath(ctx) { return buildOrganizationDidBindingPollPath(this.requireRouteContext(ctx)); }
     organizationLicenseOfferSearchPath(ctx) { return this.v1Path(ctx, 'entity', 'org.schema', 'Offer', '_search'); }
     organizationLicenseOfferSearchPollPath(ctx) { return this.v1Path(ctx, 'entity', 'org.schema', 'Offer', '_search-response'); }
+    /** Host-authored professional seat Offer creation; this never mutates License inventory. */
+    organizationLicenseOfferCreatePath(ctx) { return this.v1Path(ctx, 'entity', 'org.schema', 'Offer', GwCoreLifecycleAction.Create); }
+    organizationLicenseOfferCreatePollPath(ctx) { return this.v1Path(ctx, 'entity', 'org.schema', 'Offer', GwCoreLifecycleAction.CreateResponse); }
     organizationLicenseOrderSearchPath(ctx) { return this.v1Path(ctx, 'entity', 'org.schema', 'Order', '_search'); }
     organizationLicenseOrderSearchPollPath(ctx) { return this.v1Path(ctx, 'entity', 'org.schema', 'Order', '_search-response'); }
     employeePurgePath(ctx) { return this.v1Path(ctx, 'entity', 'org.schema', 'Employee', GwCoreLifecycleAction.Purge); }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.4.22",
+  "version": "2.4.24",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",