gdc-sdk-node-ts 2.4.23 → 2.4.24

package/README.md

@@ -288,9 +288,11 @@ npm run test:e2e:live-gw:all
 
 Profile note:
 
-- `didcomm-plain` is the current live baseline implemented by the Node runtime client
+- `didcomm-plain` is the explicit demo-only live profile
 - `legacy-fhir` exercises raw `application/fhir+json` async batch submission for `org.hl7.fhir.*`
 - `all` runs every implemented profile from the same suite file
+- each `NodeHttpClient` selects one profile at construction; every facade
+  operation and poll uses it and cannot override or downgrade it
 
 Run the IPS ingestion/search branch as well:
 

package/dist/node-runtime-client.d.ts

@@ -127,7 +127,9 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
      */
     v1Path(ctx: RouteContext | undefined, section: string, format: string, resourceType: string, action: string): string;
     /**
-     * Submits a batch payload to a gateway batch endpoint.
+     * Submits a batch payload using the transport profile selected once when the
+     * runtime client was constructed. Operations cannot downgrade or replace
+     * that profile locally.
      */
     submitBatch(path: string, payload: SubmitPayload): Promise<SubmitResponse>;
     /**
@@ -145,6 +147,13 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
     /** Registers one tenant or exact-subject FHIR R5 rest-hook Subscription. */
     submitFhirR5SubscriptionBatch(ctx: RouteContext, input: FhirR5SubscriptionBatchInput, pollOptions?: PollOptions): Promise<SubmitAndPollResult>;
     private submitAndPollWithBearerToken;
+    /**
+     * Enforces the client-owned transport policy. Operation inputs retained for
+     * source compatibility may repeat the configured profile, but can never
+     * replace it or silently downgrade the wire protection selected at runtime
+     * construction.
+     */
+    private requireConfiguredTransportProfile;
     /**
      * Starts the host-side legal-organization verification transaction that GW
      * CORE forwards to ICA `_verify`.
@@ -547,8 +556,6 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
         pollOptions?: PollOptions;
     }): Promise<SubmitAndPollResult>;
     private buildConsentClaimsWithCid;
-    private pollBatchResponse;
-    private postJson;
     private buildHeaders;
     private fetchWithTimeout;
     private parseResponseBody;

package/dist/node-runtime-client.js

@@ -1,6 +1,3 @@
-// Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
-// Always create JSDoc, do not use strings inline in keys nor values, use types instead, and reuse the data test examples.
-import { DIDCOMM_PLAINTEXT_JSON_MEDIA_TYPE, } from 'gdc-common-utils-ts/utils/didcomm-submit';
 import { buildAppHeaders, createBootstrapFacade, decodeTransportResponse, renderCommunicationOutboxRequest, renderGatewayMessageRequest, renderTransportPollRequest, resolveAppInfo, TransportProfiles, } from 'gdc-sdk-core-ts';
 import { pollUntilCompleteWithMethod } from './async-polling.js';
 import { confirmLegalOrganizationOrderWithDeps, HostLifecycleRequestType, HostedTenantLifecycleRequestType, submitHostedTenantLifecycleWithDeps, } from './host-onboarding.js';
@@ -14,8 +11,7 @@ import { confirmOrganizationLicenseOrderWithDeps } from './organization-license-
 import { startIndividualOrganizationWithDeps } from './individual-start.js';
 import { createOrganizationEmployeeWithDeps, issueOrganizationEmployeeLicenseWithDeps, disableIndividualMemberWithDeps, disableIndividualOrganizationWithDeps, disableOrganizationEmployeeWithDeps, listIndividualLicenseOffersWithDeps, listIndividualLicenseOrdersWithDeps, listIndividualLicensesWithDeps, addFreeIndividualMemberLicensesWithDeps, issueIndividualMemberLicenseWithDeps, transitionIndividualMemberLicenseWithDeps, listOrganizationLicenseOffersWithDeps, listOrganizationLicenseOrdersWithDeps, listOrganizationLicensesWithDeps, grantProfessionalAccessWithDeps, buildClinicalSectionUpdateIngestion, buildClinicalSummaryUpdateIngestion, ingestCommunicationAndUpdateIndexWithDeps, requestProfessionalAccessWithDeps, buildVitalSignBatchCommunicationFromSearchResponse, registerBlockchainArtifactAndUpdateIndexWithDeps, requestClinicalSummaryWithDeps, revokeProfessionalAccessWithDeps, searchCommunicationParticipantsWithDeps, purgeIndividualMemberWithDeps, purgeIndividualOrganizationWithDeps, purgeOrganizationEmployeeWithDeps, prepareEmployeeLifecycleMessageForTransport, searchIndividualLicensesWithDeps, searchIndividualLicenseOffersWithDeps, searchIndividualLicenseOrdersWithDeps, searchOrganizationLicensesWithDeps, searchOrganizationLicenseOffersWithDeps, searchOrganizationLicenseOrdersWithDeps, searchOrganizationEmployeesWithDeps, searchClinicalBundleWithDeps, searchLatestIpsWithDeps, upsertRelatedPersonAndPollWithDeps, normalizeCommunicationPathFormatSegment, addFreeOrganizationEmployeeLicensesWithDeps, requestOrganizationEmployeeLicenseOfferWithDeps, } from './resource-operations.js';
 import { listOrganizationEmployeeLifecycleWithDeps, provisionOrganizationEmployeeWithDeps, } from './organization-employee-lifecycle.js';
-import { submitAndPollWithMethods } from './orchestration/client-port.js';
-import { buildRuntimeHeaders, fetchWithTimeout, parseResponseBody, pollBatchResponseWithRuntimeConfig, postJsonWithRuntimeConfig, postRenderedWithRuntimeConfig, } from './runtime-transport.js';
+import { buildRuntimeHeaders, fetchWithTimeout, parseResponseBody, postRenderedWithRuntimeConfig, } from './runtime-transport.js';
 import { activateOrganizationInGatewayFromIcaProofWithDeps, submitLegalOrganizationCredentialReissuanceWithDeps, submitLegalOrganizationVerificationTransactionWithDeps, submitOrganizationDidBindingWithDeps, } from './runtime-host-submission.js';
 import { buildGrantProfessionalAccessClaimsWithCid } from './runtime-consent.js';
 import { RuntimeClientPaths } from './runtime-client-paths.js';
@@ -102,22 +98,38 @@ export class HttpRuntimeClient {
         return this.paths.v1Path(ctx, section, format, resourceType, action);
     }
     /**
-     * Submits a batch payload to a gateway batch endpoint.
+     * Submits a batch payload using the transport profile selected once when the
+     * runtime client was constructed. Operations cannot downgrade or replace
+     * that profile locally.
      */
     async submitBatch(path, payload) {
-        return this.postJson(path, payload, DIDCOMM_PLAINTEXT_JSON_MEDIA_TYPE);
+        const rendered = await renderGatewayMessageRequest(payload, this.transportProfile, this.secureTransportAdapter);
+        const response = await postRenderedWithRuntimeConfig(this.transportConfig, path, rendered);
+        return { status: response.status, location: response.location, body: response.body };
     }
     /**
      * Polls a batch-response endpoint until the GW reports a terminal state.
      */
     async pollUntilComplete(pollPath, request, pollOptions) {
-        return pollUntilCompleteWithMethod(this.pollBatchResponse.bind(this), pollPath, request, pollOptions);
+        return pollUntilCompleteWithMethod(async (path, currentRequest) => {
+            const rendered = await renderTransportPollRequest(currentRequest.thid, this.transportProfile, this.secureTransportAdapter);
+            const response = await postRenderedWithRuntimeConfig(this.transportConfig, path, rendered);
+            return {
+                status: response.status,
+                body: response.status === 202
+                    ? response.body
+                    : response.status >= 200 && response.status < 300
+                        ? await decodeTransportResponse(response.body, this.transportProfile, this.secureTransportAdapter)
+                        : response.body,
+                retryAfterMs: response.retryAfterMs,
+            };
+        }, pollPath, request, pollOptions);
     }
     /**
      * Convenience wrapper that performs submit and poll in sequence.
      */
     async submitAndPoll(submitPath, pollPath, payload, pollOptions) {
-        return submitAndPollWithMethods(this, submitPath, pollPath, payload, pollOptions);
+        return this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions);
     }
     /** Registers one neutral FHIR R5 topic in the tenant-owned CORE catalog. */
     submitFhirR5SubscriptionTopicBatch(ctx, topic, pollOptions) {
@@ -138,13 +150,19 @@ export class HttpRuntimeClient {
         });
     }
     async submitAndPollWithBearerToken(bearerToken, submitPath, pollPath, payload, pollOptions) {
-        const config = { ...this.transportConfig, bearerToken };
-        const submitted = await postJsonWithRuntimeConfig(config, submitPath, payload, DIDCOMM_PLAINTEXT_JSON_MEDIA_TYPE);
-        const poll = await pollUntilCompleteWithMethod((path, request) => pollBatchResponseWithRuntimeConfig(config, path, request), pollPath, { thid: String(payload.thid) }, pollOptions);
-        return {
-            submit: { status: submitted.status, location: submitted.location, body: submitted.body },
-            poll,
-        };
+        return this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions, bearerToken);
+    }
+    /**
+     * Enforces the client-owned transport policy. Operation inputs retained for
+     * source compatibility may repeat the configured profile, but can never
+     * replace it or silently downgrade the wire protection selected at runtime
+     * construction.
+     */
+    requireConfiguredTransportProfile(requested) {
+        if (requested && requested !== this.transportProfile) {
+            throw new Error(`Operation transport profile '${requested}' conflicts with configured runtime profile '${this.transportProfile}'.`);
+        }
+        return this.transportProfile;
     }
     /**
      * Starts the host-side legal-organization verification transaction that GW
@@ -175,9 +193,7 @@ export class HttpRuntimeClient {
             wrapBundleAsGatewayTransactionMessage: this.wrapBundleAsGatewayTransactionMessage.bind(this),
             submitPath: this.hostRegistryOrganizationTransactionPath.bind(this),
             pollPath: this.hostRegistryOrganizationTransactionPollPath.bind(this),
-            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
-                ? (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions)
-                : this.submitAndPoll.bind(this),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     /**
@@ -199,9 +215,7 @@ export class HttpRuntimeClient {
             wrapBundleAsGatewayTransactionMessage: this.wrapBundleAsGatewayTransactionMessage.bind(this),
             submitPath: this.hostRegistryOrganizationIssuePath.bind(this),
             pollPath: this.hostRegistryOrganizationIssuePollPath.bind(this),
-            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
-                ? (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions)
-                : this.submitAndPoll.bind(this),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     /**
@@ -364,7 +378,7 @@ export class HttpRuntimeClient {
         return createOrganizationEmployeeWithDeps(ctx, input, pollOptions, {
             employeeBatchPath: this.paths.employeeBatchPath.bind(this.paths),
             employeePollPath: this.paths.employeePollPath.bind(this.paths),
-            submitAndPoll: (submitPath, pollPath, payload, options) => this.submitClinicalMessageAndPoll(submitPath, pollPath, prepareEmployeeLifecycleMessageForTransport(payload, this.transportProfile), this.transportProfile, options),
+            submitAndPoll: (submitPath, pollPath, payload, options) => this.submitAndPoll(submitPath, pollPath, prepareEmployeeLifecycleMessageForTransport(payload, this.transportProfile), options),
         });
     }
     /** Creates an employee and reserves its activation credential as one SDK workflow. */
@@ -382,9 +396,7 @@ export class HttpRuntimeClient {
             input,
             identityDeviceRevokePath: this.paths.identityDeviceRevokePath.bind(this.paths),
             identityDeviceRevokePollPath: this.paths.identityDeviceRevokePollPath.bind(this.paths),
-            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
-                ? (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions)
-                : this.submitAndPoll.bind(this),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     /** Reserves an employee seat and issues its bounded multi-device activation credential. */
@@ -392,9 +404,7 @@ export class HttpRuntimeClient {
         return issueOrganizationEmployeeLicenseWithDeps(ctx, input, {
             identityLicenseIssuePath: this.paths.identityLicenseIssuePath.bind(this.paths),
             identityLicenseIssuePollPath: this.paths.identityLicenseIssuePollPath.bind(this.paths),
-            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
-                ? (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions)
-                : this.submitAndPoll.bind(this),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     /**
@@ -479,9 +489,7 @@ export class HttpRuntimeClient {
         return addFreeOrganizationEmployeeLicensesWithDeps(ctx, input, {
             organizationLicenseOfferCreatePath: this.paths.organizationLicenseOfferCreatePath.bind(this.paths),
             organizationLicenseOfferCreatePollPath: this.paths.organizationLicenseOfferCreatePollPath.bind(this.paths),
-            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
-                ? (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions)
-                : this.submitAndPoll.bind(this),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     /** Starts the commercial Offer flow for additional professional seats. */
@@ -489,9 +497,7 @@ export class HttpRuntimeClient {
         return requestOrganizationEmployeeLicenseOfferWithDeps(ctx, input, {
             organizationLicenseOfferCreatePath: this.paths.organizationLicenseOfferCreatePath.bind(this.paths),
             organizationLicenseOfferCreatePollPath: this.paths.organizationLicenseOfferCreatePollPath.bind(this.paths),
-            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
-                ? (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions)
-                : this.submitAndPoll.bind(this),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     async searchOrganizationLicenseOffers(ctx, input) {
@@ -540,9 +546,7 @@ export class HttpRuntimeClient {
             defaultIntervalMs: pollOptions?.intervalMs,
             hostRegistryOrderBatchPath: this.paths.hostRegistryOrderBatchPath.bind(this.paths),
             hostRegistryOrderPollPath: this.paths.hostRegistryOrderPollPath.bind(this.paths),
-            submitAndPoll: this.transportProfile === TransportProfiles.DidcommEncryptedForm
-                ? (submitPath, pollPath, payload, options) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, options)
-                : this.submitAndPoll.bind(this),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     /**
@@ -850,10 +854,11 @@ export class HttpRuntimeClient {
      * configured secure transport adapter signs/encrypts DIDComm when enabled.
      */
     async requestProfessionalAccess(ctx, input) {
+        this.requireConfiguredTransportProfile(input.transportProfile);
         return requestProfessionalAccessWithDeps(ctx, input, {
             individualCommunicationBatchPath: this.paths.individualCommunicationBatchPath.bind(this.paths),
             individualCommunicationPollPath: this.paths.individualCommunicationPollPath.bind(this.paths),
-            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, input.transportProfile || this.transportProfile, pollOptions),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     /**
@@ -897,7 +902,7 @@ export class HttpRuntimeClient {
      */
     async submitCommunicationOutboxJobAndPoll(ctx, input) {
         const job = input.communicationJob;
-        const profile = input.transportProfile || this.transportProfile;
+        const profile = this.requireConfiguredTransportProfile(input.transportProfile);
         const format = normalizeCommunicationPathFormatSegment(input.clinicalFormat || input.pathFormatSegment);
         const submitPath = this.paths.individualCommunicationBatchPath(ctx, format);
         const pollPath = this.paths.individualCommunicationPollPath(ctx, format);
@@ -1013,10 +1018,11 @@ export class HttpRuntimeClient {
      * @param input Search parameters such as subject, section, date and included resource types.
      */
     async searchClinicalBundle(ctx, input) {
+        this.requireConfiguredTransportProfile(input.transportProfile);
         return searchClinicalBundleWithDeps(ctx, input, {
             bundleSearchPath: this.paths.individualBundleSearchPath.bind(this.paths),
             bundleSearchPollPath: this.paths.individualBundleSearchPollPath.bind(this.paths),
-            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, input.transportProfile || this.transportProfile, pollOptions),
+            submitAndPoll: this.submitAndPoll.bind(this),
         });
     }
     /** Searches tenant digital twins using coded, pseudonymous research claims. */
@@ -1028,7 +1034,7 @@ export class HttpRuntimeClient {
             digitalTwinCompositionPollPath: this.paths.digitalTwinCompositionPollPath.bind(this.paths),
             digitalTwinCommunicationBatchPath: this.paths.digitalTwinCommunicationBatchPath.bind(this.paths),
             digitalTwinCommunicationPollPath: this.paths.digitalTwinCommunicationPollPath.bind(this.paths),
-            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions, input.accessToken),
+            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitAndPollWithBearerToken(input.accessToken, submitPath, pollPath, payload, pollOptions),
         });
     }
     /** Saves one tagged researcher working copy without mutating the canonical twin. */
@@ -1040,7 +1046,7 @@ export class HttpRuntimeClient {
             digitalTwinCompositionPollPath: this.paths.digitalTwinCompositionPollPath.bind(this.paths),
             digitalTwinCommunicationBatchPath: this.paths.digitalTwinCommunicationBatchPath.bind(this.paths),
             digitalTwinCommunicationPollPath: this.paths.digitalTwinCommunicationPollPath.bind(this.paths),
-            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions, input.accessToken),
+            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitAndPollWithBearerToken(input.accessToken, submitPath, pollPath, payload, pollOptions),
         });
     }
     /** Materializes one selected pseudonymous research subject as a summary Bundle. */
@@ -1052,7 +1058,7 @@ export class HttpRuntimeClient {
             digitalTwinCompositionPollPath: this.paths.digitalTwinCompositionPollPath.bind(this.paths),
             digitalTwinCommunicationBatchPath: this.paths.digitalTwinCommunicationBatchPath.bind(this.paths),
             digitalTwinCommunicationPollPath: this.paths.digitalTwinCommunicationPollPath.bind(this.paths),
-            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitClinicalMessageAndPoll(submitPath, pollPath, payload, this.transportProfile, pollOptions, input.accessToken),
+            submitAndPoll: (submitPath, pollPath, payload, pollOptions) => this.submitAndPollWithBearerToken(input.accessToken, submitPath, pollPath, payload, pollOptions),
         });
     }
     /**
@@ -1090,12 +1096,6 @@ export class HttpRuntimeClient {
     buildConsentClaimsWithCid(input) {
         return buildGrantProfessionalAccessClaimsWithCid(input, runtimeUuid);
     }
-    async pollBatchResponse(path, request) {
-        return pollBatchResponseWithRuntimeConfig(this.transportConfig, path, request);
-    }
-    async postJson(path, payload, contentType) {
-        return postJsonWithRuntimeConfig(this.transportConfig, path, payload, contentType);
-    }
     buildHeaders(contentType) {
         return buildRuntimeHeaders(this.transportConfig, contentType);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.4.23",
+  "version": "2.4.24",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",