gdc-sdk-node-ts 2.4.44 → 2.5.0

package/README.md

@@ -702,7 +702,8 @@ modules below.
 - [`NodeHttpClient.submitCommunicationAndPoll(...)`](src/node-runtime-client.ts)
 - [`NodeHttpClient.searchClinicalBundle(...)`](src/node-runtime-client.ts)
 - [`NodeHttpClient.updateClinicalSection(...)`](src/node-runtime-client.ts) for
-  one explicit section carried by a batch/collection Communication
+  one explicit section carried by a batch Communication; its typed entries may
+  mix `.create()`, `.update()` and exact authored `.delete()` operations
 - [`NodeHttpClient.updateClinicalSummary(...)`](src/node-runtime-client.ts) for
   a Composition-first multi-section document
 - [`NodeHttpClient.searchLatestIps(...)`](src/node-runtime-client.ts)

package/dist/gateway-active-consent-provider.d.ts

@@ -2,6 +2,7 @@ import { type ConsentRule } from 'gdc-common-utils-ts/models/consent-rule';
 import type { ActiveConsentProvider } from 'gdc-sdk-core-ts';
 import type { RouteContext } from './individual-onboarding.js';
 import { type NodeRuntimeClient } from './orchestration/client-port.js';
+import type { SubjectConsentSearchInput } from './resource-operations.js';
 /**
  * GW-backed implementation of the runtime-neutral ActiveConsentProvider.
  *
@@ -13,7 +14,7 @@ export declare class GatewayActiveConsentProvider implements ActiveConsentProvid
     private readonly routeContext;
     constructor(client: NodeRuntimeClient, routeContext: RouteContext);
     /** Loads and normalizes the active Consent rules owned by one subject. */
-    getActiveConsentsForSubject(subject: string): Promise<ConsentRule[]>;
+    getActiveConsentsForSubject(subject: string, filters?: Omit<SubjectConsentSearchInput, 'subject' | 'pollOptions'>): Promise<ConsentRule[]>;
 }
 /** Extracts canonical Consent claim maps from current GW Bundle wrappers. */
 export declare function extractConsentRules(value: unknown): ConsentRule[];

package/dist/gateway-active-consent-provider.js

@@ -14,12 +14,12 @@ export class GatewayActiveConsentProvider {
         this.routeContext = routeContext;
     }
     /** Loads and normalizes the active Consent rules owned by one subject. */
-    async getActiveConsentsForSubject(subject) {
+    async getActiveConsentsForSubject(subject, filters = {}) {
         const normalizedSubject = String(subject || '').trim();
         if (!normalizedSubject.startsWith('did:')) {
             throw new Error('Active Consent lookup requires a subject DID.');
         }
-        const result = await requireClientMethod(this.client, 'searchSubjectConsents')(this.routeContext, { subject: normalizedSubject });
+        const result = await requireClientMethod(this.client, 'searchSubjectConsents')(this.routeContext, { subject: normalizedSubject, ...filters });
         return extractConsentRules(result.poll.body)
             .filter((rule) => isConsentRuleActive(rule, { subject: normalizedSubject }));
     }

package/dist/orchestration/individual-controller-sdk.d.ts

@@ -94,7 +94,12 @@ export declare class IndividualControllerSdk {
      * Ingests a FHIR `Communication` and waits for indexing.
      */
     ingestCommunicationAndUpdateIndex(ctx: RouteContext, input: CommunicationIngestionInput): Promise<SubmitAndPollResult>;
-    /** Updates one exact clinical section through a section-scoped batch/collection. */
+    /**
+     * Updates one exact clinical section through a section-scoped batch.
+     * Entries choose their own operation, so one call may create one resource
+     * and delete another with `.delete()` and optional `.ifMatch(versionId)`.
+     * DELETE entries contain no resource body.
+     */
     updateClinicalSection(ctx: RouteContext, input: ClinicalSectionUpdateInput): Promise<SubmitAndPollResult>;
     /** Updates the multi-section summary through a Composition-first document. */
     updateClinicalSummary(ctx: RouteContext, input: ClinicalSummaryUpdateInput): Promise<SubmitAndPollResult>;

package/dist/orchestration/individual-controller-sdk.js

@@ -142,7 +142,12 @@ export class IndividualControllerSdk {
         assertFacadeCapability(this.capabilities, ActorCapabilities.IndividualIngestCommunication, ActorKinds.IndividualController, 'ingestCommunicationAndUpdateIndex');
         return requireClientMethod(this.client, 'ingestCommunicationAndUpdateIndex')(ctx, input);
     }
-    /** Updates one exact clinical section through a section-scoped batch/collection. */
+    /**
+     * Updates one exact clinical section through a section-scoped batch.
+     * Entries choose their own operation, so one call may create one resource
+     * and delete another with `.delete()` and optional `.ifMatch(versionId)`.
+     * DELETE entries contain no resource body.
+     */
     updateClinicalSection(ctx, input) {
         assertFacadeCapability(this.capabilities, ActorCapabilities.IndividualIngestCommunication, ActorKinds.IndividualController, 'updateClinicalSection');
         return requireClientMethod(this.client, 'updateClinicalSection')(ctx, input);
@@ -216,7 +221,12 @@ export class IndividualControllerSdk {
     async getDigitalTwinSecondaryUseConsentStatus(ctx, input) {
         assertFacadeCapability(this.capabilities, ActorCapabilities.IndividualGenerateDigitalTwin, ActorKinds.IndividualController, 'getDigitalTwinSecondaryUseConsentStatus');
         const consents = await new GatewayActiveConsentProvider(this.client, ctx)
-            .getActiveConsentsForSubject(input.subjectDid);
+            .getActiveConsentsForSubject(input.subjectDid, {
+            actorIdentifier: input.indexProviderOrganizationDid,
+            purpose: HealthcareConsentPurposes.Research,
+            action: ServiceCapability.DigitalTwinReader,
+            sourceReference: input.researchUseReference,
+        });
         const researchUseReference = String(input.researchUseReference || '').trim();
         if (!researchUseReference)
             throw new Error('researchUseReference is required to identify the portal, software or study consent.');

package/dist/resource-operations.d.ts

@@ -291,7 +291,14 @@ type ClinicalUpdateRuntimeOptions = Readonly<{
         intervalMs?: number;
     };
 }>;
-/** Updates exactly one clinical section through a scoped batch/collection. */
+/**
+ * Updates exactly one clinical section through a scoped batch/collection.
+ * A `Bundle.type = batch` may mix typed create, update, and delete entries.
+ * A delete targets `ResourceType/id`, carries no resource body, and may use
+ * `ifMatch` for optimistic concurrency. GW authorizes it against the creator
+ * DID plus the caller's linked verified login identity; contact identifiers
+ * are never written into the clinical resource.
+ */
 export type ClinicalSectionUpdateInput = ClinicalSectionUpdateCommunicationInput & ClinicalUpdateRuntimeOptions;
 /** Updates one complete multi-section clinical summary document. */
 export type ClinicalSummaryUpdateInput = ClinicalUpdateCommunicationInput & ClinicalUpdateRuntimeOptions;
@@ -535,6 +542,10 @@ export type DigitalTwinSubjectLinkPurgeResult = SubmitAndPollResult;
 /** Input for reading the subject-owned Consent records through its individual aggregate. */
 export type SubjectConsentSearchInput = Readonly<{
     subject: string;
+    actorIdentifier?: string;
+    purpose?: string;
+    action?: string;
+    sourceReference?: string;
     pollOptions?: {
         timeoutMs?: number;
         intervalMs?: number;

package/dist/resource-operations.js

@@ -877,9 +877,20 @@ export async function searchSubjectConsentsWithDeps(routeCtx, input, deps) {
         throw new Error('Consent search requires a subject DID.');
     }
     const format = 'org.hl7.fhir.r4';
+    const optionalParameters = [
+        ['actor-identifier', input.actorIdentifier],
+        ['purpose', input.purpose],
+        ['action', input.action],
+        ['source-reference', input.sourceReference],
+    ];
     const parameters = {
         resourceType: 'Parameters',
-        parameter: [{ name: 'subject', valueString: subject }],
+        parameter: [
+            { name: 'subject', valueString: subject },
+            ...optionalParameters
+                .map(([name, rawValue]) => ({ name, valueString: String(rawValue || '').trim() }))
+                .filter((parameter) => parameter.valueString),
+        ],
     };
     const thid = `subject-consent-search-${createRuntimeUuid()}`;
     const communication = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.4.44",
+  "version": "2.5.0",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",
@@ -38,8 +38,8 @@
     "test:e2e:live-gw:clean": "bash ./scripts/run-live-gw-clean.sh"
   },
   "dependencies": {
-    "gdc-common-utils-ts": "2.5.20",
-    "gdc-sdk-core-ts": "~2.3.18"
+    "gdc-common-utils-ts": "2.6.0",
+    "gdc-sdk-core-ts": "2.4.0"
   },
   "devDependencies": {
     "@types/node": "^20.14.10",

package/dist/organization-registration-authorization.d.ts

@@ -1,16 +0,0 @@
-import type { VerifiableCredentialV2 } from 'gdc-common-utils-ts/models/verifiable-credential';
-import type { IWallet, WalletExecutionContext, WalletKeySelection } from 'gdc-sdk-core-ts';
-/** Input required to add one human-authorizer proof to the out-of-band VC. */
-export type SignOrganizationRegistrationAuthorizationInput = Readonly<{
-    credential: VerifiableCredentialV2;
-    wallet: IWallet;
-    context: WalletExecutionContext;
-    key: WalletKeySelection;
-    verificationMethod: string;
-    createdAt?: string;
-}>;
-/**
- * Adds one detached JWS proof made by the already-unlocked professional
- * profile. The browser never receives the private key or clear wallet seed.
- */
-export declare function signOrganizationRegistrationAuthorizationCredential(input: SignOrganizationRegistrationAuthorizationInput): Promise<VerifiableCredentialV2>;

package/dist/organization-registration-authorization.js

@@ -1,34 +0,0 @@
-import { canonicalizeOrganizationRegistrationAuthorizationCredential, } from 'gdc-common-utils-ts/utils/organization-registration-authorization';
-/**
- * Adds one detached JWS proof made by the already-unlocked professional
- * profile. The browser never receives the private key or clear wallet seed.
- */
-export async function signOrganizationRegistrationAuthorizationCredential(input) {
-    if (!input.wallet.signDetachedJws) {
-        throw new Error('Wallet does not support detached organization authorization proofs.');
-    }
-    const verificationMethod = String(input.verificationMethod || '').trim();
-    if (!verificationMethod)
-        throw new Error('Organization authorization proof requires verificationMethod.');
-    const payload = canonicalizeOrganizationRegistrationAuthorizationCredential(input.credential);
-    const jws = await input.wallet.signDetachedJws(input.context, {
-        payload,
-        header: { typ: 'application/vc+ld+json' },
-        key: input.key,
-    });
-    const existingProofs = Array.isArray(input.credential.proof)
-        ? input.credential.proof
-        : input.credential.proof
-            ? [input.credential.proof]
-            : [];
-    return {
-        ...input.credential,
-        proof: [...existingProofs, {
-                type: 'JsonWebSignature2020',
-                created: input.createdAt || new Date().toISOString(),
-                proofPurpose: 'contractAgreement',
-                verificationMethod,
-                jws,
-            }],
-    };
-}