gdc-sdk-node-ts 2.4.35 → 2.4.36

package/dist/digital-twin.d.ts

@@ -10,6 +10,9 @@ export declare function assertDigitalTwinSubjectId(value: unknown): asserts valu
 /** Search parameters added by the digital-twin Composition profile. */
 export declare const DigitalTwinSearchParameter: Readonly<{
     Section: "section";
+    DateFrom: "date-from";
+    DateTo: "date-to";
+    Text: "text";
     MetaTag: "Composition.meta-tag";
 }>;
 export type DigitalTwinSearchInput = {
@@ -18,6 +21,15 @@ export type DigitalTwinSearchInput = {
     thid?: string;
     format?: DigitalTwinFhirFormat;
     resourceType?: string;
+    /** One or more IPS section tokens. Basic search uses OR across sections. */
+    sections?: readonly string[];
+    /** Inclusive clinical-event lower bound as ISO date or dateTime. */
+    dateFrom?: string;
+    /** Inclusive upper bound. When omitted, GW resolves its current time. */
+    dateTo?: string;
+    /** Case- and accent-insensitive text matched against GW's private derived index. */
+    text?: string;
+    /** Advanced/compatibility filters. Do not combine with basic-search fields. */
     filters?: Readonly<Record<string, string | readonly string[] | undefined>>;
     pollOptions?: PollOptions;
 };

package/dist/digital-twin.js

@@ -16,6 +16,9 @@ export function assertDigitalTwinSubjectId(value) {
 /** Search parameters added by the digital-twin Composition profile. */
 export const DigitalTwinSearchParameter = Object.freeze({
     Section: 'section',
+    DateFrom: 'date-from',
+    DateTo: 'date-to',
+    Text: 'text',
     MetaTag: 'Composition.meta-tag',
 });
 /**
@@ -132,10 +135,42 @@ export async function searchDigitalTwinsWithDeps(ctx, input, deps) {
     const resourceType = String(input.resourceType || 'Composition').trim();
     if (!resourceType)
         throw new Error('Digital twin resourceType is required.');
-    const parameters = Object.entries(input.filters || {}).flatMap(([name, value]) => {
+    const usesBasicSearch = Boolean(input.sections || input.dateFrom || input.dateTo || input.text);
+    if (usesBasicSearch && Object.keys(input.filters || {}).length > 0) {
+        throw new Error('Digital twin basic search cannot be combined with advanced filters.');
+    }
+    const sections = (input.sections || []).map((value) => String(value || '').trim()).filter(Boolean);
+    const dateFrom = String(input.dateFrom || '').trim();
+    const dateTo = String(input.dateTo || '').trim();
+    const searchText = String(input.text || '').trim();
+    if (usesBasicSearch) {
+        if (sections.length === 0)
+            throw new Error('Digital twin basic search requires at least one section.');
+        if (!dateFrom)
+            throw new Error('Digital twin basic search requires dateFrom.');
+        if (!searchText)
+            throw new Error('Digital twin basic search requires text.');
+        const fromMs = Date.parse(dateFrom);
+        const toMs = dateTo ? Date.parse(dateTo) : undefined;
+        if (Number.isNaN(fromMs))
+            throw new Error('Digital twin basic search dateFrom must be an ISO date or dateTime.');
+        if (dateTo && Number.isNaN(toMs))
+            throw new Error('Digital twin basic search dateTo must be an ISO date or dateTime.');
+        if (toMs !== undefined && toMs < fromMs)
+            throw new Error('Digital twin basic search dateTo must be on or after dateFrom.');
+    }
+    const advancedParameters = Object.entries(input.filters || {}).flatMap(([name, value]) => {
         const values = Array.isArray(value) ? value : value === undefined ? [] : [value];
         return values.map((item) => ({ name, valueString: String(item) }));
     });
+    const parameters = usesBasicSearch
+        ? [
+            ...sections.map((section) => ({ name: DigitalTwinSearchParameter.Section, valueString: section })),
+            { name: DigitalTwinSearchParameter.DateFrom, valueDate: dateFrom },
+            ...(dateTo ? [{ name: DigitalTwinSearchParameter.DateTo, valueDate: dateTo }] : []),
+            { name: DigitalTwinSearchParameter.Text, valueString: searchText },
+        ]
+        : advancedParameters;
     const thid = String(input.thid || randomUUID());
     const body = format === 'org.hl7.fhir.api'
         ? {
@@ -145,7 +180,7 @@ export async function searchDigitalTwinsWithDeps(ctx, input, deps) {
                     meta: {
                         claims: Object.fromEntries([
                             ['@context', format],
-                            ...parameters.map((parameter) => [parameter.name, parameter.valueString]),
+                            ...parameters.map((parameter) => [parameter.name, parameter.valueString || parameter.valueDate || '']),
                         ]),
                     },
                 }],

package/dist/individual-controller-backend-runtime.d.ts

@@ -1,6 +1,6 @@
 import type { SubmitAndPollResult } from 'gdc-sdk-core-ts';
 import type { FamilyOrganizationSummary } from 'gdc-common-utils-ts/utils/family-organization-summary';
-import type { IndividualOrganizationConfirmOrderInput, RouteContext } from './individual-onboarding.js';
+import type { IndividualOrganizationConfirmOrderInput, IndividualOrganizationOrderResult, RouteContext } from './individual-onboarding.js';
 import type { IndividualOrganizationBootstrapInput, IndividualOrganizationStartResult } from './individual-start.js';
 import type { EnsureFamilyOrganizationRegistrationInput, EnsureFamilyOrganizationRegistrationResult } from './family-organization-registration.js';
 import type { FamilyOrganizationSearchInput } from './family-organization-search.js';
@@ -45,7 +45,7 @@ export declare class IndividualControllerBackendRuntime {
     /**
      * Confirms the order returned by the individual bootstrap flow.
      */
-    confirmIndividualOrganizationOrder(profile: BackendIndividualControllerProfile, input: IndividualOrganizationConfirmOrderInput): Promise<SubmitAndPollResult>;
+    confirmIndividualOrganizationOrder(profile: BackendIndividualControllerProfile, input: IndividualOrganizationConfirmOrderInput): Promise<IndividualOrganizationOrderResult>;
     /**
      * Reads the authoritative subject document through the canonical
      * `Communication -> Subject/$summary -> FHIR Parameters` lifecycle.

package/dist/individual-onboarding.d.ts

@@ -21,6 +21,13 @@ export type IndividualOrganizationConfirmOrderInput = {
     timeoutSeconds?: number;
     intervalSeconds?: number;
 };
+/**
+ * Terminal individual Order result with the opaque code required by the
+ * subsequent managed-wallet activation and DCR flow.
+ */
+export type IndividualOrganizationOrderResult = SubmitAndPollResult & Readonly<{
+    activationCode: string;
+}>;
 type ConfirmIndividualOrganizationOrderDeps = {
     input: IndividualOrganizationConfirmOrderInput;
     routeCtx: RouteContext;
@@ -32,5 +39,11 @@ type ConfirmIndividualOrganizationOrderDeps = {
         thid?: string;
     } & Record<string, unknown>, options?: PollOptions) => Promise<SubmitAndPollResult>;
 };
-export declare function confirmIndividualOrganizationOrderWithDeps(deps: ConfirmIndividualOrganizationOrderDeps): Promise<SubmitAndPollResult>;
+export declare function confirmIndividualOrganizationOrderWithDeps(deps: ConfirmIndividualOrganizationOrderDeps): Promise<IndividualOrganizationOrderResult>;
+/**
+ * Reads the opaque controller activation code from a completed individual
+ * Order. Integrators should consume `result.activationCode` instead of calling
+ * this reader directly; it remains public for response-adapter compatibility.
+ */
+export declare function readIndividualOrganizationActivationCode(responseBody: unknown): string | undefined;
 export {};

package/dist/individual-onboarding.js

@@ -1,4 +1,5 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
+import { extractPrimaryClaims } from 'gdc-common-utils-ts';
 import { resolvePollOptionsFromSeconds } from './poll-options.js';
 export async function confirmIndividualOrganizationOrderWithDeps(deps) {
     /**
@@ -35,7 +36,21 @@ export async function confirmIndividualOrganizationOrderWithDeps(deps) {
         timeoutMs: deps.defaultTimeoutMs,
         intervalMs: deps.defaultIntervalMs,
     });
-    return deps.submitAndPoll(deps.individualFamilyOrderBatchPath(deps.routeCtx), deps.individualFamilyOrderPollPath(deps.routeCtx), payload, pollOptions);
+    const order = await deps.submitAndPoll(deps.individualFamilyOrderBatchPath(deps.routeCtx), deps.individualFamilyOrderPollPath(deps.routeCtx), payload, pollOptions);
+    const activationCode = readIndividualOrganizationActivationCode(order.poll.body);
+    if (!activationCode) {
+        throw new Error('confirmIndividualOrganizationOrder failed: missing controller activation code in GW Order response.');
+    }
+    return { ...order, activationCode };
+}
+/**
+ * Reads the opaque controller activation code from a completed individual
+ * Order. Integrators should consume `result.activationCode` instead of calling
+ * this reader directly; it remains public for response-adapter compatibility.
+ */
+export function readIndividualOrganizationActivationCode(responseBody) {
+    const claims = extractPrimaryClaims(responseBody);
+    return String(claims['org.schema.IndividualProduct.serialNumber'] || '').trim() || undefined;
 }
 function createRuntimeUuid() {
     const fromCrypto = globalThis.crypto?.randomUUID?.();

package/dist/node-runtime-client.d.ts

@@ -5,7 +5,7 @@ import { type ResolvedAppInfo, type CommunicationClinicalFormatRenderers, type S
 import { type HostRouteContext, type HostedTenantLifecycleInput } from './host-onboarding.js';
 import type { HostedTenantDescendantKind } from './host-onboarding.js';
 import type { NodeLegalOrganizationVerificationTransactionInput, NodeOrganizationDidBindingInput, NodeOrganizationActivationInput } from './orchestration/client-port.js';
-import { type IndividualOrganizationConfirmOrderInput, type RouteContext } from './individual-onboarding.js';
+import { type IndividualOrganizationConfirmOrderInput, type IndividualOrganizationOrderResult, type RouteContext } from './individual-onboarding.js';
 import { type EnsureFamilyOrganizationRegistrationInput } from './family-organization-registration.js';
 import { type FamilyOrganizationSearchInput } from './family-organization-search.js';
 import { type SmartTokenRequestInput } from './smart-token.js';
@@ -376,7 +376,7 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
     /**
      * Confirms the order returned by `startIndividualOrganization(...)`.
      */
-    confirmIndividualOrganizationOrder(input: IndividualOrganizationConfirmOrderInput): Promise<SubmitAndPollResult>;
+    confirmIndividualOrganizationOrder(input: IndividualOrganizationConfirmOrderInput): Promise<IndividualOrganizationOrderResult>;
     /**
      * Disables a hosted individual/family organization without releasing licenses.
      *

package/dist/orchestration/client-port.d.ts

@@ -9,7 +9,7 @@ import type { EmployeeDeviceActivationResult, EmployeeDeviceActivationRequestInp
 import type { OrganizationEmployeeProvisioningInput, OrganizationEmployeeProvisioningResult } from '../organization-employee-lifecycle.js';
 import type { OrganizationEmployeeLifecycleRecord } from 'gdc-common-utils-ts/models/organization-employee-lifecycle';
 import type { HostRouteContext, HostedTenantLifecycleInput, LegalOrganizationOrderInput } from '../host-onboarding.js';
-import type { IndividualOrganizationConfirmOrderInput, RouteContext } from '../individual-onboarding.js';
+import type { IndividualOrganizationConfirmOrderInput, IndividualOrganizationOrderResult, RouteContext } from '../individual-onboarding.js';
 import type { IndividualOrganizationBootstrapInput, IndividualOrganizationStartResult } from '../individual-start.js';
 import type { FamilyOrganizationSearchInput } from '../family-organization-search.js';
 import type { FhirR5SubscriptionTopic } from 'gdc-common-utils-ts/models/fhir-r5-subscription';
@@ -106,7 +106,7 @@ export type RuntimeClient = {
     startIndividualOrganization?: (input: IndividualOrganizationBootstrapInput) => Promise<IndividualOrganizationStartResult>;
     searchFamilyOrganization?: (ctx: RouteContext, input: FamilyOrganizationSearchInput) => Promise<FamilyOrganizationSummary | null>;
     ensureFamilyOrganizationRegistration?: (ctx: RouteContext, input: EnsureFamilyOrganizationRegistrationInput) => Promise<EnsureFamilyOrganizationRegistrationResult>;
-    confirmIndividualOrganizationOrder?: (input: IndividualOrganizationConfirmOrderInput) => Promise<SubmitAndPollResult>;
+    confirmIndividualOrganizationOrder?: (input: IndividualOrganizationConfirmOrderInput) => Promise<IndividualOrganizationOrderResult>;
     disableIndividual?: (ctx: RouteContext, input: IndividualOrganizationLifecycleInput, pollOptions?: PollOptions) => Promise<SubmitAndPollResult>;
     purgeIndividual?: (ctx: RouteContext, input: IndividualOrganizationLifecycleInput, pollOptions?: PollOptions) => Promise<SubmitAndPollResult>;
     disableIndividualMember?: (ctx: RouteContext, input: IndividualMemberLifecycleInput, pollOptions?: PollOptions) => Promise<SubmitAndPollResult>;

package/dist/orchestration/digital-twin-sdk.d.ts

@@ -10,7 +10,14 @@ export declare class DigitalTwinSdk {
     constructor(client: NodeRuntimeClient, actorDid?: string);
     /** Requests the SMART token used by subsequent digital-twin operations. */
     requestSmartToken(input: SmartTokenRequestInput): Promise<SmartTokenExchangeResult>;
-    /** Searches pseudonymous records and exposes matched Compositions directly. */
+    /**
+     * Searches pseudonymous records and exposes matched Compositions directly.
+     *
+     * MVP basic search supplies `sections`, `dateFrom`, optional `dateTo`, and
+     * `text`. GW resolves an omitted `dateTo` to its current time, applies OR
+     * across sections and requires text/date to match the same clinical record.
+     * Organization/tenant scope comes from the authenticated SMART token.
+     */
     search(ctx: RouteContext, input: DigitalTwinSearchInput): Promise<DigitalTwinSearchResult>;
     /**
      * Saves a tagged researcher-owned working selection for one matching twin.

package/dist/orchestration/digital-twin-sdk.js

@@ -28,7 +28,14 @@ export class DigitalTwinSdk {
             this.researcherDid = actorDid;
         return result;
     }
-    /** Searches pseudonymous records and exposes matched Compositions directly. */
+    /**
+     * Searches pseudonymous records and exposes matched Compositions directly.
+     *
+     * MVP basic search supplies `sections`, `dateFrom`, optional `dateTo`, and
+     * `text`. GW resolves an omitted `dateTo` to its current time, applies OR
+     * across sections and requires text/date to match the same clinical record.
+     * Organization/tenant scope comes from the authenticated SMART token.
+     */
     async search(ctx, input) {
         const filters = { ...(input.filters || {}) };
         const isPrivateSelectionSearch = Object.keys(filters).some((name) => {

package/dist/orchestration/individual-controller-sdk.d.ts

@@ -3,7 +3,7 @@ import { type NodeRuntimeClient, type PollOptions, type SubmitAndPollResult, typ
 import type { FamilyOrganizationSummary } from 'gdc-common-utils-ts/utils/family-organization-summary';
 import type { EnsureFamilyOrganizationRegistrationInput, EnsureFamilyOrganizationRegistrationResult } from '../family-organization-registration.js';
 import type { FamilyOrganizationSearchInput } from '../family-organization-search.js';
-import type { IndividualOrganizationConfirmOrderInput, RouteContext } from '../individual-onboarding.js';
+import type { IndividualOrganizationConfirmOrderInput, IndividualOrganizationOrderResult, RouteContext } from '../individual-onboarding.js';
 import type { IndividualOrganizationBootstrapInput, IndividualOrganizationStartResult } from '../individual-start.js';
 import type { NodeCapability } from '../session.js';
 import type { IndividualOrganizationLifecycleInput } from 'gdc-sdk-core-ts';
@@ -39,7 +39,7 @@ export declare class IndividualControllerSdk {
     /**
      * Confirms the order returned by `startIndividualOrganization(...)`.
      */
-    confirmIndividualOrganizationOrder(input: IndividualOrganizationConfirmOrderInput): Promise<SubmitAndPollResult>;
+    confirmIndividualOrganizationOrder(input: IndividualOrganizationConfirmOrderInput): Promise<IndividualOrganizationOrderResult>;
     /**
      * Disables the hosted individual/family organization without freeing licenses.
      */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.4.35",
+  "version": "2.4.36",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",
@@ -38,7 +38,7 @@
     "test:e2e:live-gw:clean": "bash ./scripts/run-live-gw-clean.sh"
   },
   "dependencies": {
-    "gdc-common-utils-ts": "2.5.15",
+    "gdc-common-utils-ts": "2.5.20",
     "gdc-sdk-core-ts": "~2.3.18"
   },
   "devDependencies": {

package/dist/organization-registration-authorization.d.ts

@@ -1,16 +0,0 @@
-import type { VerifiableCredentialV2 } from 'gdc-common-utils-ts/models/verifiable-credential';
-import type { IWallet, WalletExecutionContext, WalletKeySelection } from 'gdc-sdk-core-ts';
-/** Input required to add one human-authorizer proof to the out-of-band VC. */
-export type SignOrganizationRegistrationAuthorizationInput = Readonly<{
-    credential: VerifiableCredentialV2;
-    wallet: IWallet;
-    context: WalletExecutionContext;
-    key: WalletKeySelection;
-    verificationMethod: string;
-    createdAt?: string;
-}>;
-/**
- * Adds one detached JWS proof made by the already-unlocked professional
- * profile. The browser never receives the private key or clear wallet seed.
- */
-export declare function signOrganizationRegistrationAuthorizationCredential(input: SignOrganizationRegistrationAuthorizationInput): Promise<VerifiableCredentialV2>;

package/dist/organization-registration-authorization.js

@@ -1,34 +0,0 @@
-import { canonicalizeOrganizationRegistrationAuthorizationCredential, } from 'gdc-common-utils-ts/utils/organization-registration-authorization';
-/**
- * Adds one detached JWS proof made by the already-unlocked professional
- * profile. The browser never receives the private key or clear wallet seed.
- */
-export async function signOrganizationRegistrationAuthorizationCredential(input) {
-    if (!input.wallet.signDetachedJws) {
-        throw new Error('Wallet does not support detached organization authorization proofs.');
-    }
-    const verificationMethod = String(input.verificationMethod || '').trim();
-    if (!verificationMethod)
-        throw new Error('Organization authorization proof requires verificationMethod.');
-    const payload = canonicalizeOrganizationRegistrationAuthorizationCredential(input.credential);
-    const jws = await input.wallet.signDetachedJws(input.context, {
-        payload,
-        header: { typ: 'application/vc+ld+json' },
-        key: input.key,
-    });
-    const existingProofs = Array.isArray(input.credential.proof)
-        ? input.credential.proof
-        : input.credential.proof
-            ? [input.credential.proof]
-            : [];
-    return {
-        ...input.credential,
-        proof: [...existingProofs, {
-                type: 'JsonWebSignature2020',
-                created: input.createdAt || new Date().toISOString(),
-                proofPurpose: 'contractAgreement',
-                verificationMethod,
-                jws,
-            }],
-    };
-}