gdc-sdk-node-ts 2.5.1 → 2.5.2

package/dist/node-runtime-client.d.ts

@@ -86,6 +86,7 @@ export type NodeHttpClientOptions = HttpRuntimeClientOptions;
 export declare class HttpRuntimeClient implements NodeRuntimeClient {
     private readonly baseUrl;
     private readonly bearerToken?;
+    private activeSmartBearerToken?;
     private readonly runtimeVpToken?;
     private readonly resolvedAppInfo?;
     private readonly ctx?;
@@ -461,6 +462,10 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
      * Route details are resolved either from `input` compatibility fields
      * (`tenantId` / `jurisdiction` / `sector`) or from
      * the default client route context configured in the constructor.
+     * A fetched actor-scoped access token is retained by this runtime for later
+     * clinical operations. Token acquisition and renewal continue to use the
+     * original account bearer, so applications must not reconstruct the SDK or
+     * manually replace its transport after this method returns.
      */
     requestSmartToken(input: SmartTokenRequestInput): Promise<SmartTokenExchangeResult>;
     /**

package/dist/node-runtime-client.js

@@ -33,7 +33,7 @@ export class HttpRuntimeClient {
     get transportConfig() {
         return {
             baseUrl: this.baseUrl,
-            bearerToken: this.bearerToken,
+            bearerToken: this.activeSmartBearerToken || this.bearerToken,
             defaultHeaders: this.defaultHeaders,
             requestTimeoutMs: this.requestTimeoutMs,
             httpTraceFile: this.httpTraceFile,
@@ -886,10 +886,14 @@ export class HttpRuntimeClient {
      * Route details are resolved either from `input` compatibility fields
      * (`tenantId` / `jurisdiction` / `sector`) or from
      * the default client route context configured in the constructor.
+     * A fetched actor-scoped access token is retained by this runtime for later
+     * clinical operations. Token acquisition and renewal continue to use the
+     * original account bearer, so applications must not reconstruct the SDK or
+     * manually replace its transport after this method returns.
      */
     async requestSmartToken(input) {
         const routeCtx = this.paths.routeCtxFromInput(input);
-        return requestSmartTokenWithDeps({
+        const result = await requestSmartTokenWithDeps({
             input,
             routeCtx,
             baseUrl: this.baseUrl,
@@ -900,9 +904,16 @@ export class HttpRuntimeClient {
             identityOpenIdSmartTokenPath: this.paths.identityOpenIdSmartTokenPath.bind(this.paths),
             identityOpenIdSmartTokenPollPath: this.paths.identityOpenIdSmartTokenPollPath.bind(this.paths),
             resolveSmartTokenEndpoint: this.smartTokenEndpointResolver,
-            submitAndPoll: this.submitAndPoll.bind(this),
+            // Token acquisition and refresh remain authenticated by the original
+            // account bearer. A previously granted SMART token must not replace the
+            // OIDC proof used to request the next actor-scoped token.
+            submitAndPoll: this.submitAndPollWithBearerToken.bind(this, this.bearerToken),
             setTokenCache: (tokenCacheKey, token) => this.tokenCache.set(tokenCacheKey, token),
         });
+        if (result.status === 'fetched' && result.accessToken) {
+            this.activeSmartBearerToken = result.accessToken;
+        }
+        return result;
     }
     /**
      * Registers any actor profile device through activation-code exchange plus

package/dist/orchestration/individual-controller-sdk.d.ts

@@ -80,6 +80,12 @@ export declare class IndividualControllerSdk {
     revokeProfessionalAccess(ctx: RouteContext, input: RevokeProfessionalAccessInput): Promise<RevokeProfessionalAccessResult>;
     /**
      * Imports a FHIR/IPS payload and waits until it is indexed.
+     *
+     * The source `Composition.author` is provenance, not delegated authority.
+     * A controller that imports an IPS authored by an external URN does not gain
+     * permission to rewrite or delete it. A correction requires independently
+     * verified source provenance; merely resubmitting the same URN is
+     * insufficient and unsigned/demo imports remain locally immutable.
      */
     importIpsOrFhirAndUpdateIndex(ctx: RouteContext, input: IpsOrFhirImportInput): Promise<SubmitAndPollResult>;
     /**

package/dist/orchestration/individual-controller-sdk.js

@@ -119,6 +119,12 @@ export class IndividualControllerSdk {
     }
     /**
      * Imports a FHIR/IPS payload and waits until it is indexed.
+     *
+     * The source `Composition.author` is provenance, not delegated authority.
+     * A controller that imports an IPS authored by an external URN does not gain
+     * permission to rewrite or delete it. A correction requires independently
+     * verified source provenance; merely resubmitting the same URN is
+     * insufficient and unsigned/demo imports remain locally immutable.
      */
     importIpsOrFhirAndUpdateIndex(ctx, input) {
         assertFacadeCapability(this.capabilities, ActorCapabilities.IndividualImportIps, ActorKinds.IndividualController, 'importIpsOrFhirAndUpdateIndex');

package/dist/resource-operations.d.ts

@@ -208,6 +208,14 @@ export type IndividualMemberLifecycleInput = {
     dataType?: string;
 };
 export type IpsOrFhirImportInput = {
+    /**
+     * Server-built IPS/FHIR payload whose original Composition author is
+     * preserved as provenance. Importing an external `urn:*` author never makes
+     * the authenticated controller that author and does not grant local update
+     * or delete authority. Repeating the same author URN is not proof that a
+     * correction came from the same source; unsigned/demo imports therefore
+     * remain locally immutable under the strict audit contract.
+     */
     compositionPayload: {
         thid?: string;
     } & Record<string, unknown>;
@@ -298,6 +306,8 @@ type ClinicalUpdateRuntimeOptions = Readonly<{
  * `ifMatch` for optimistic concurrency. GW authorizes it against the creator
  * DID plus the caller's linked verified login identity; contact identifiers
  * are never written into the clinical resource.
+ * An externally authored `urn:*` may be preserved on first import, but a local
+ * controller cannot subsequently update or delete that source-authored fact.
  */
 export type ClinicalSectionUpdateInput = ClinicalSectionUpdateCommunicationInput & ClinicalUpdateRuntimeOptions;
 /** Updates one complete multi-section clinical summary document. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.5.1",
+  "version": "2.5.2",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",
@@ -38,7 +38,7 @@
     "test:e2e:live-gw:clean": "bash ./scripts/run-live-gw-clean.sh"
   },
   "dependencies": {
-    "gdc-common-utils-ts": "2.6.0",
+    "gdc-common-utils-ts": "2.6.2",
     "gdc-sdk-core-ts": "2.4.0"
   },
   "devDependencies": {