gdc-sdk-node-ts 2.9.5 → 2.9.7

package/README.md

@@ -750,9 +750,13 @@ A document Bundle keeps `Composition.author` (the organization, EHR/patient
 portal or individual that supplies the document) separate from
 `Composition.attester` (the registered personal or professional assignment
 that attested its content). A `RelatedPerson` or `PractitionerRole` is an
-attester, never a shortcut for replacing the source author. The protected BFF
-profile resolves both from its registered binding. DIDComm sender and signing
-keys remain audit/transport identities.
+attester, never a shortcut for replacing the source author. For personal
+content, the BFF selects `Owner` when the individual originated/dictated it or
+`Creator` when the registered member originated it. Use
+`assignmentIdentifier` for that RelatedPerson/PractitionerRole UUID; the old
+wire name `authorIdentifier` is deprecated and does not choose the author. The
+protected BFF profile resolves both from its registered binding. DIDComm sender
+and signing keys remain audit/transport identities.
 The BFF never configures ledger routing or supplies channel/smart-contract
 names. GW owns that decision and returns one transaction receipt with
 per-resource CID/version evidence for a successful clinical Bundle.

package/dist/server-profile-session.d.ts

@@ -1,6 +1,7 @@
 import type { JWK } from 'gdc-common-utils-ts/models/jwk';
 import type { ActorKind } from 'gdc-common-utils-ts/models/actor-session';
 import type { LegalOrganizationVerificationTransactionInput } from 'gdc-common-utils-ts/utils/legal-organization-verification-transaction';
+import { type ClinicalCreatorBindingInput } from 'gdc-common-utils-ts/utils/fhir-ips-creator-identity';
 import { type AppInfo, type ConfidentialStorageProfile, type PollOptions, type SubmitAndPollResult, type ClinicalCreatorBinding, type ClinicalCreatorIpsExport, type ClinicalSourceAuthorSelection } from 'gdc-sdk-core-ts';
 import { OrganizationControllerSdk } from './orchestration/organization-controller-sdk.js';
 import { IndividualControllerSdk } from './orchestration/individual-controller-sdk.js';
@@ -130,7 +131,7 @@ export type ServerProfileEnrollmentInput = Readonly<{
      * locally. Enrollment adds the operational actor DID and registered DCR
      * client/key aliases; it never derives UUIDs from those aliases.
      */
-    clinicalCreatorBinding?: ClinicalCreatorBinding;
+    clinicalCreatorBinding?: ClinicalCreatorBindingInput;
     /**
      * Signed actor/controller VP protected for later SMART operations. Required
      * for organization/professional/member actors. Individual-controller
@@ -344,9 +345,10 @@ export declare class ServerProfileSessionManager {
         ownerId: string;
         profileId: string;
         /**
-         * Deprecated compatibility choice. The high-level clone/section helpers
-         * derive the final professional or individual-member author boundary
-         * from the returned protected binding.
+         * Closed personal-content origin. `Owner` means the individual originated
+         * or dictated it; `Creator` means the registered member/controller did.
+         * This never changes the authenticated sender or permits a free-form
+         * author reference. Professional content remains organization-authored.
          */
         sourceAuthor?: ClinicalSourceAuthorSelection;
     }>): Promise<ClinicalCreatorIpsExport>;
@@ -443,11 +445,11 @@ export declare class ServerProfileSessionManager {
 /**
  * Exports the stable FHIR IPS source author and attester attached to a server
  * profile. The returned protected binding lets high-level helpers use the
- * stable legal organization URN plus PractitionerRole for professionals, or
- * one RelatedPerson urn:uuid as both author and attester for individual
- * members/controllers. The optional selection remains only for backwards
- * compatibility. DIDComm sender and signing keys remain transport/audit
- * evidence and never become FHIR provenance.
+ * stable legal organization URN plus PractitionerRole for professionals. For
+ * individual members/controllers, `Owner` selects the individual as author and
+ * `Creator` selects the registered RelatedPerson; that RelatedPerson remains
+ * the attester. DIDComm sender and signing keys remain transport/audit evidence
+ * and never become FHIR provenance.
  */
 export declare function exportServerProfileClinicalCreatorIps(profile: ServerProfileRecord, options?: Readonly<{
     sourceAuthor?: ClinicalSourceAuthorSelection;

package/dist/server-profile-session.js

@@ -1,6 +1,8 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
 import { randomBytes } from 'node:crypto';
 import { ActorKinds } from 'gdc-common-utils-ts/constants/actor-session';
+import { normalizeClinicalCreatorBinding, } from 'gdc-common-utils-ts/utils/fhir-ips-creator-identity';
+import { getHealthcareRoleByClaim } from 'gdc-common-utils-ts/constants/healthcare';
 import { readLegalOrganizationVerificationCredentialPairFromResponseBody, readServiceControllerCredentialFromResponseBody, } from 'gdc-common-utils-ts/utils/legal-organization-verification-result';
 import { addLegalRepresentativeCredential, addOrganizationCredential, addServiceControllerCredential, createVP, } from 'gdc-common-utils-ts/utils/vp-token';
 import { TransportProfiles, resolveClinicalCreatorIpsExport, } from 'gdc-sdk-core-ts';
@@ -33,7 +35,15 @@ export class ServerProfileSessionManager {
         return exportServerProfileClinicalCreatorIps(await this.requireOwnedProfile(input.ownerId, input.profileId), { sourceAuthor: input.sourceAuthor });
     }
     async enroll(input) {
-        requireEnrollment(input);
+        const normalizedClinicalCreatorBinding = input.clinicalCreatorBinding
+            ? normalizeClinicalCreatorBinding(input.clinicalCreatorBinding)
+            : undefined;
+        requireEnrollment({
+            ...input,
+            ...(normalizedClinicalCreatorBinding
+                ? { clinicalCreatorBinding: normalizedClinicalCreatorBinding }
+                : {}),
+        });
         const seed = input.walletSeed || randomBytes(32).toString('base64url');
         if (input.walletSeed)
             requireBase64UrlSeed32(input.walletSeed);
@@ -78,8 +88,8 @@ export class ServerProfileSessionManager {
             .setPublicJwks(publicKeys.filter((entry) => entry.purpose !== 'document-at-rest').map((entry) => entry.publicJwk))
             .setActorDid(input.actorDid)
             .setProfileDid(input.profileDid);
-        if (input.clinicalCreatorBinding) {
-            activationDraft.setClinicalCreatorBinding(input.clinicalCreatorBinding);
+        if (normalizedClinicalCreatorBinding) {
+            activationDraft.setClinicalCreatorBinding(normalizedClinicalCreatorBinding);
         }
         const activationRequest = activationDraft.build();
         const activation = await client.activateProfileDeviceWithActivationRequest(activationRequest);
@@ -97,8 +107,8 @@ export class ServerProfileSessionManager {
                 ...input.professionalProof,
             })
             : undefined);
-        const clinicalCreatorBinding = input.clinicalCreatorBinding
-            ? bindClinicalCreatorChannels(input.clinicalCreatorBinding, {
+        const clinicalCreatorBinding = normalizedClinicalCreatorBinding
+            ? bindClinicalCreatorChannels(normalizedClinicalCreatorBinding, {
                 actorDid: input.actorDid,
                 clientId,
                 clientInstanceId,
@@ -831,11 +841,11 @@ function requireBase64UrlSeed32(seed) {
 /**
  * Exports the stable FHIR IPS source author and attester attached to a server
  * profile. The returned protected binding lets high-level helpers use the
- * stable legal organization URN plus PractitionerRole for professionals, or
- * one RelatedPerson urn:uuid as both author and attester for individual
- * members/controllers. The optional selection remains only for backwards
- * compatibility. DIDComm sender and signing keys remain transport/audit
- * evidence and never become FHIR provenance.
+ * stable legal organization URN plus PractitionerRole for professionals. For
+ * individual members/controllers, `Owner` selects the individual as author and
+ * `Creator` selects the registered RelatedPerson; that RelatedPerson remains
+ * the attester. DIDComm sender and signing keys remain transport/audit evidence
+ * and never become FHIR provenance.
  */
 export function exportServerProfileClinicalCreatorIps(profile, options = {}) {
     if (!profile.clinicalCreatorBinding) {
@@ -882,12 +892,25 @@ function requireEnrollment(input) {
         throw new Error('Profile enrollment professionalProof requires role.');
     }
     if (input.professionalProof && input.clinicalCreatorBinding
-        && String(input.professionalProof.role).trim() !== String(input.clinicalCreatorBinding.role).trim()) {
+        && !sameGovernedRole(input.professionalProof.role, input.clinicalCreatorBinding.role)) {
         throw new Error('Clinical creator binding role must equal professionalProof.role.');
     }
     if (!input.allowedSubjectDids.length)
         throw new Error('Profile enrollment requires an allowed subject.');
 }
+function sameGovernedRole(left, right) {
+    const resolveRole = (value) => {
+        const normalized = String(value || '').trim();
+        return getHealthcareRoleByClaim(normalized)
+            || getHealthcareRoleByClaim(normalized.split('|').pop() || '');
+    };
+    const leftRole = resolveRole(left);
+    const rightRole = resolveRole(right);
+    return Boolean(leftRole
+        && rightRole
+        && leftRole.codingSystem === rightRole.codingSystem
+        && leftRole.code === rightRole.code);
+}
 function unique(values) {
     return [...new Set(values.map((value) => String(value).trim()).filter(Boolean))].sort();
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.9.5",
+  "version": "2.9.7",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",
@@ -38,8 +38,8 @@
     "test:e2e:live-gw:clean": "bash ./scripts/run-live-gw-clean.sh"
   },
   "dependencies": {
-    "gdc-common-utils-ts": "2.9.7",
-    "gdc-sdk-core-ts": "2.9.5"
+    "gdc-common-utils-ts": "2.9.10",
+    "gdc-sdk-core-ts": "2.9.7"
   },
   "devDependencies": {
     "@types/node": "^20.14.10",