gdc-sdk-node-ts 2.9.8 → 2.9.10

package/README.md

@@ -686,8 +686,8 @@ modules below.
   - types: `IndividualOrganizationBootstrapInput`, `OfferPreview`, `IndividualOrganizationStartResult`
   - function: `registerIndividualOrganizationWithDeps(...)`
 - [`src/individual-onboarding.ts`](src/individual-onboarding.ts)
-  - types: `RouteContext`, `IndividualOrganizationConfirmOrderInput`
-  - function: `confirmIndividualOrganizationOrderWithDeps(...)`
+  - types: `RouteContext`, `IndividualOrganizationConfirmOrderInput`, `IndividualOrganizationOrderResult`
+  - functions: `confirmIndividualOrganizationOrderWithDeps(...)`, `readIndividualOrganizationControllerAssignmentIdentifier(...)`
 - [`src/device-activation.ts`](src/device-activation.ts)
   - types: `EmployeeDeviceActivationInput`, `EmployeeDeviceActivationRequestInput`, `EmployeeDeviceActivationResult`
   - functions: `activateEmployeeDeviceWithActivationCodeWithDeps(...)`, `activateEmployeeDeviceWithActivationRequestWithDeps(...)`
@@ -744,7 +744,12 @@ modules below.
   portal alias
 - vital-sign helpers
 
-### Composition provenance in clinical Bundles
+### Author and attester provenance in subject sections and documents
+
+The canonical integration boundary is
+[Subject-section author and profile-attester contract](./docs/101-CLINICAL_AUTHOR_ATTESTER_BOUNDARIES.md).
+It keeps technical enrollment free of per-write authorship, preserves the
+write-specific data author and resolves the attester from the unlocked profile.
 
 A document Bundle keeps `Composition.author` (the organization, EHR/patient
 portal or individual that supplies the document) separate from
@@ -771,7 +776,7 @@ See [Clinical writes from a Node BFF](./docs/101-BFF_CLINICAL_WRITES.md),
 - [`NodeHttpClient.ingestCommunicationAndUpdateIndex(...)`](src/node-runtime-client.ts)
 - [`NodeHttpClient.submitCommunicationAndPoll(...)`](src/node-runtime-client.ts)
 - [`NodeHttpClient.searchClinicalBundle(...)`](src/node-runtime-client.ts)
-- [`NodeHttpClient.updateClinicalSection(...)`](src/node-runtime-client.ts) for
+- [`NodeHttpClient.updateSubjectSection(...)`](src/node-runtime-client.ts) for
   one explicit section carried by a batch Communication; its typed entries may
   mix `.create()`, `.update()` and exact authored `.delete()` operations
 - [`NodeHttpClient.updateClinicalSummary(...)`](src/node-runtime-client.ts) for

package/dist/individual-onboarding.d.ts

@@ -27,6 +27,11 @@ export type IndividualOrganizationConfirmOrderInput = {
  */
 export type IndividualOrganizationOrderResult = SubmitAndPollResult & Readonly<{
     activationCode: string;
+    /**
+     * Governed RelatedPerson identifier automatically materialized by GW for
+     * the principal Organization owner/controller.
+     */
+    controllerAssignmentIdentifier: string;
 }>;
 type ConfirmIndividualOrganizationOrderDeps = {
     input: IndividualOrganizationConfirmOrderInput;
@@ -46,4 +51,11 @@ export declare function confirmIndividualOrganizationOrderWithDeps(deps: Confirm
  * this reader directly; it remains public for response-adapter compatibility.
  */
 export declare function readIndividualOrganizationActivationCode(responseBody: unknown): string | undefined;
+/**
+ * Reads the principal owner/controller assignment that GW creates during the
+ * same Order transition as the individual controller licence. This is a
+ * projection from the returned RelatedPerson `resource.meta.claims`; it is not
+ * an Order claim and callers must not pre-create or search for it.
+ */
+export declare function readIndividualOrganizationControllerAssignmentIdentifier(responseBody: unknown): string | undefined;
 export {};

package/dist/individual-onboarding.js

@@ -1,5 +1,5 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
-import { extractPrimaryClaims } from 'gdc-common-utils-ts';
+import { HealthcareActorRoleCodes, HL7_CODING_SYSTEM_V3_ROLE_CODE, extractPrimaryClaims, readRelatedPersonListRecords, } from 'gdc-common-utils-ts';
 import { resolvePollOptionsFromSeconds } from './poll-options.js';
 export async function confirmIndividualOrganizationOrderWithDeps(deps) {
     /**
@@ -40,7 +40,11 @@ export async function confirmIndividualOrganizationOrderWithDeps(deps) {
     if (!activationCode) {
         throw new Error('confirmIndividualOrganizationOrder failed: missing controller activation code in GW Order response.');
     }
-    return { ...order, activationCode };
+    const controllerAssignmentIdentifier = readIndividualOrganizationControllerAssignmentIdentifier(order.poll.body);
+    if (!controllerAssignmentIdentifier) {
+        throw new Error('confirmIndividualOrganizationOrder failed: missing automatic controller RESPRSN assignment in GW Order response.');
+    }
+    return { ...order, activationCode, controllerAssignmentIdentifier };
 }
 /**
  * Reads the opaque controller activation code from a completed individual
@@ -51,6 +55,20 @@ export function readIndividualOrganizationActivationCode(responseBody) {
     const claims = extractPrimaryClaims(responseBody);
     return String(claims['org.schema.IndividualProduct.serialNumber'] || '').trim() || undefined;
 }
+/**
+ * Reads the principal owner/controller assignment that GW creates during the
+ * same Order transition as the individual controller licence. This is a
+ * projection from the returned RelatedPerson `resource.meta.claims`; it is not
+ * an Order claim and callers must not pre-create or search for it.
+ */
+export function readIndividualOrganizationControllerAssignmentIdentifier(responseBody) {
+    const expectedRelationship = `${HL7_CODING_SYSTEM_V3_ROLE_CODE}|${HealthcareActorRoleCodes.Controller}`;
+    return readRelatedPersonListRecords(responseBody)
+        .find((record) => record.identifier
+        && record.relationship === expectedRelationship
+        && record.active !== 'false')
+        ?.identifier;
+}
 function createRuntimeUuid() {
     const fromCrypto = globalThis.crypto?.randomUUID?.();
     if (fromCrypto) {

package/dist/node-runtime-client.d.ts

@@ -12,7 +12,7 @@ import { type SmartTokenRequestInput } from './smart-token.js';
 import { type EmployeeDeviceActivationRequestInput, type EmployeeDeviceActivationResult, type EmployeeDeviceOtpRecoveryInput, type EmployeeDeviceOtpRecoveryResult, type EmployeeDeviceRevocationInput } from './device-activation.js';
 import { type OrganizationLicenseOrderConfirmInput } from './organization-license-order.js';
 import { type IndividualOrganizationRegistrationInput, type IndividualOrganizationRegistrationResult } from './individual-start.js';
-import { type CommunicationIngestionInput, type BlockchainArtifactRegistrationInput, type VitalSignBatchCommunicationFromSearchResponseInput, type CommunicationParticipantRuntimeSearchInput, type ClinicalBundleSearchInput, type ClinicalSectionUpdateInput, type ClinicalSummaryReadResult, type ClinicalSummaryRequestInput, type ClinicalSummaryUpdateInput, type GrantProfessionalAccessInput, type GrantProfessionalAccessResult, type DigitalTwinSecondaryUseConsentInput, type DigitalTwinSecondaryUseConsentResult, type DigitalTwinSubjectLinkPurgeInput, type DigitalTwinSubjectLinkPurgeResult, type SubjectConsentSearchInput, type IndividualMemberLifecycleInput, type IndividualMemberLicenseAddInput, type IndividualMemberLicenseInvitationInput, type IndividualMemberLicenseTransitionInput, type LicenseListRuntimeSearchInput, type LicenseOfferRuntimeSearchInput, type LicenseOrderRuntimeSearchInput, type OrganizationEmployeeCreationInput, type OrganizationEmployeeLicenseAddInput, type OrganizationEmployeeLicenseOfferInput, type OrganizationEmployeeLicenseInvitationInput, type OrganizationEmployeeLifecycleInput, type OrganizationEmployeeSearchInput, type ProfessionalAccessRequestInput, type ProfessionalAccessRequestResult, type RevokeProfessionalAccessInput, type RevokeProfessionalAccessResult, type RelatedPersonUpsertInput } from './resource-operations.js';
+import { type CommunicationIngestionInput, type BlockchainArtifactRegistrationInput, type VitalSignBatchCommunicationFromSearchResponseInput, type CommunicationParticipantRuntimeSearchInput, type ClinicalBundleSearchInput, type ClinicalSectionUpdateInput, type SubjectSectionUpdateInput, type ClinicalSummaryReadResult, type ClinicalSummaryRequestInput, type ClinicalSummaryUpdateInput, type GrantProfessionalAccessInput, type GrantProfessionalAccessResult, type DigitalTwinSecondaryUseConsentInput, type DigitalTwinSecondaryUseConsentResult, type DigitalTwinSubjectLinkPurgeInput, type DigitalTwinSubjectLinkPurgeResult, type SubjectConsentSearchInput, type IndividualMemberLifecycleInput, type IndividualMemberLicenseAddInput, type IndividualMemberLicenseInvitationInput, type IndividualMemberLicenseTransitionInput, type LicenseListRuntimeSearchInput, type LicenseOfferRuntimeSearchInput, type LicenseOrderRuntimeSearchInput, type OrganizationEmployeeCreationInput, type OrganizationEmployeeLicenseAddInput, type OrganizationEmployeeLicenseOfferInput, type OrganizationEmployeeLicenseInvitationInput, type OrganizationEmployeeLifecycleInput, type OrganizationEmployeeSearchInput, type ProfessionalAccessRequestInput, type ProfessionalAccessRequestResult, type RevokeProfessionalAccessInput, type RevokeProfessionalAccessResult, type RelatedPersonUpsertInput } from './resource-operations.js';
 import type { LegalOrganizationOrderInput } from './host-onboarding.js';
 import type { SmartTokenExchangeResult } from './smart-token.js';
 import { type OrganizationEmployeeProvisioningInput, type OrganizationEmployeeProvisioningResult } from './organization-employee-lifecycle.js';
@@ -537,6 +537,12 @@ export declare class HttpRuntimeClient implements NodeRuntimeClient {
      * supply or configure ledger channel or smart-contract names.
      */
     updateClinicalSection(ctx: RouteContext, input: ClinicalSectionUpdateInput): Promise<SubmitAndPollResult>;
+    /**
+     * Updates one generic subject section. The attached batch/collection may
+     * contain clinical or non-clinical resources. It receives the exact
+     * attester exposed by the unlocked profile.
+     */
+    updateSubjectSection(ctx: RouteContext, input: SubjectSectionUpdateInput): Promise<SubmitAndPollResult>;
     /**
      * Updates several clinical sections as one Composition-first document.
      *

package/dist/node-runtime-client.js

@@ -10,7 +10,7 @@ import { activateEmployeeDeviceWithActivationCodeWithDeps, activateEmployeeDevic
 import { extractOfferIdFromResponseBody, extractOfferPreviewFromResponseBody, } from './order-offer-summary.js';
 import { confirmOrganizationLicenseOrderWithDeps } from './organization-license-order.js';
 import { registerIndividualOrganizationWithDeps } from './individual-start.js';
-import { createOrganizationEmployeeWithDeps, issueOrganizationEmployeeLicenseWithDeps, disableIndividualMemberWithDeps, disableIndividualOrganizationWithDeps, disableOrganizationEmployeeWithDeps, listIndividualLicenseOffersWithDeps, listIndividualLicenseOrdersWithDeps, listIndividualLicensesWithDeps, addFreeIndividualMemberLicensesWithDeps, issueIndividualMemberLicenseWithDeps, transitionIndividualMemberLicenseWithDeps, listOrganizationLicenseOffersWithDeps, listOrganizationLicenseOrdersWithDeps, listOrganizationLicensesWithDeps, grantProfessionalAccessWithDeps, setDigitalTwinSecondaryUseConsentWithDeps, purgeDigitalTwinSubjectLinkWithDeps, searchSubjectConsentsWithDeps, buildClinicalSectionUpdateIngestion, buildClinicalSummaryUpdateIngestion, ingestCommunicationAndUpdateIndexWithDeps, requestProfessionalAccessWithDeps, buildVitalSignBatchCommunicationFromSearchResponse, registerBlockchainArtifactAndUpdateIndexWithDeps, requestClinicalSummaryWithDeps, revokeProfessionalAccessWithDeps, searchCommunicationParticipantsWithDeps, purgeIndividualMemberWithDeps, purgeIndividualOrganizationWithDeps, purgeOrganizationEmployeeWithDeps, prepareEmployeeLifecycleMessageForTransport, searchIndividualLicensesWithDeps, searchIndividualLicenseOffersWithDeps, searchIndividualLicenseOrdersWithDeps, searchOrganizationLicensesWithDeps, searchOrganizationLicenseOffersWithDeps, searchOrganizationLicenseOrdersWithDeps, searchOrganizationEmployeesWithDeps, searchClinicalBundleWithDeps, searchLatestIpsWithDeps, upsertRelatedPersonAndPollWithDeps, normalizeCommunicationPathFormatSegment, addFreeOrganizationEmployeeLicensesWithDeps, requestOrganizationEmployeeLicenseOfferWithDeps, } from './resource-operations.js';
+import { createOrganizationEmployeeWithDeps, issueOrganizationEmployeeLicenseWithDeps, disableIndividualMemberWithDeps, disableIndividualOrganizationWithDeps, disableOrganizationEmployeeWithDeps, listIndividualLicenseOffersWithDeps, listIndividualLicenseOrdersWithDeps, listIndividualLicensesWithDeps, addFreeIndividualMemberLicensesWithDeps, issueIndividualMemberLicenseWithDeps, transitionIndividualMemberLicenseWithDeps, listOrganizationLicenseOffersWithDeps, listOrganizationLicenseOrdersWithDeps, listOrganizationLicensesWithDeps, grantProfessionalAccessWithDeps, setDigitalTwinSecondaryUseConsentWithDeps, purgeDigitalTwinSubjectLinkWithDeps, searchSubjectConsentsWithDeps, buildClinicalSectionUpdateIngestion, buildSubjectSectionUpdateIngestion, buildClinicalSummaryUpdateIngestion, ingestCommunicationAndUpdateIndexWithDeps, requestProfessionalAccessWithDeps, buildVitalSignBatchCommunicationFromSearchResponse, registerBlockchainArtifactAndUpdateIndexWithDeps, requestClinicalSummaryWithDeps, revokeProfessionalAccessWithDeps, searchCommunicationParticipantsWithDeps, purgeIndividualMemberWithDeps, purgeIndividualOrganizationWithDeps, purgeOrganizationEmployeeWithDeps, prepareEmployeeLifecycleMessageForTransport, searchIndividualLicensesWithDeps, searchIndividualLicenseOffersWithDeps, searchIndividualLicenseOrdersWithDeps, searchOrganizationLicensesWithDeps, searchOrganizationLicenseOffersWithDeps, searchOrganizationLicenseOrdersWithDeps, searchOrganizationEmployeesWithDeps, searchClinicalBundleWithDeps, searchLatestIpsWithDeps, upsertRelatedPersonAndPollWithDeps, normalizeCommunicationPathFormatSegment, addFreeOrganizationEmployeeLicensesWithDeps, requestOrganizationEmployeeLicenseOfferWithDeps, } from './resource-operations.js';
 import { listOrganizationEmployeeLifecycleWithDeps, provisionOrganizationEmployeeWithDeps, } from './organization-employee-lifecycle.js';
 import { buildRuntimeHeaders, fetchWithTimeout, parseResponseBody, postRenderedWithRuntimeConfig, } from './runtime-transport.js';
 import { activateOrganizationInGatewayFromIcaProofWithDeps, submitLegalOrganizationCredentialReissuanceWithDeps, submitLegalOrganizationVerificationTransactionWithDeps, submitOrganizationDidBindingWithDeps, } from './runtime-host-submission.js';
@@ -1043,6 +1043,14 @@ export class HttpRuntimeClient {
     async updateClinicalSection(ctx, input) {
         return this.ingestCommunicationAndUpdateIndex(ctx, buildClinicalSectionUpdateIngestion(input));
     }
+    /**
+     * Updates one generic subject section. The attached batch/collection may
+     * contain clinical or non-clinical resources. It receives the exact
+     * attester exposed by the unlocked profile.
+     */
+    async updateSubjectSection(ctx, input) {
+        return this.ingestCommunicationAndUpdateIndex(ctx, buildSubjectSectionUpdateIngestion(input));
+    }
     /**
      * Updates several clinical sections as one Composition-first document.
      *

package/dist/orchestration/client-port.d.ts

@@ -19,7 +19,7 @@ import type { OrganizationLicenseOrderConfirmInput } from '../organization-licen
 import type { SmartTokenExchangeResult, SmartTokenRequestInput } from '../smart-token.js';
 import type { DigitalTwinMaterializationInput, DigitalTwinSearchInput, DigitalTwinSelectionInput } from '../digital-twin.js';
 import type { AuthorizedIndividualSubject, AuthorizedIndividualSubjectDirectoryInput } from '../authorized-subject-directory.js';
-import type { CommunicationIngestionInput, BlockchainArtifactRegistrationInput, CommunicationParticipantRuntimeSearchInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, VitalSignBatchCommunicationFromSearchResponseInput, DigitalTwinGenerationInput, DigitalTwinSecondaryUseConsentInput, DigitalTwinSecondaryUseConsentResult, DigitalTwinSubjectLinkPurgeInput, DigitalTwinSubjectLinkPurgeResult, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IndividualMemberLicenseAddInput, IndividualMemberLicenseInvitationInput, IndividualMemberLicenseTransitionInput, IpsOrFhirImportInput, OrganizationEmployeeCreationInput, OrganizationEmployeeLicenseAddInput, OrganizationEmployeeLicenseOfferInput, OrganizationEmployeeLicenseInvitationInput, OrganizationEmployeeLifecycleInput, OrganizationEmployeeSearchInput, ProfessionalAccessRequestInput, ProfessionalAccessRequestResult, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, RelatedPersonUpsertInput, SubjectConsentSearchInput } from '../resource-operations.js';
+import type { CommunicationIngestionInput, BlockchainArtifactRegistrationInput, CommunicationParticipantRuntimeSearchInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, SubjectSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, VitalSignBatchCommunicationFromSearchResponseInput, DigitalTwinGenerationInput, DigitalTwinSecondaryUseConsentInput, DigitalTwinSecondaryUseConsentResult, DigitalTwinSubjectLinkPurgeInput, DigitalTwinSubjectLinkPurgeResult, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IndividualMemberLicenseAddInput, IndividualMemberLicenseInvitationInput, IndividualMemberLicenseTransitionInput, IpsOrFhirImportInput, OrganizationEmployeeCreationInput, OrganizationEmployeeLicenseAddInput, OrganizationEmployeeLicenseOfferInput, OrganizationEmployeeLicenseInvitationInput, OrganizationEmployeeLifecycleInput, OrganizationEmployeeSearchInput, ProfessionalAccessRequestInput, ProfessionalAccessRequestResult, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, RelatedPersonUpsertInput, SubjectConsentSearchInput } from '../resource-operations.js';
 /**
  * Shared node-runtime activation input.
  *
@@ -119,6 +119,7 @@ export type RuntimeClient = {
     ingestCommunicationAndUpdateIndex?: (ctx: RouteContext, input: CommunicationIngestionInput) => Promise<SubmitAndPollResult>;
     requestProfessionalAccess?: (ctx: RouteContext, input: ProfessionalAccessRequestInput) => Promise<ProfessionalAccessRequestResult>;
     updateClinicalSection?: (ctx: RouteContext, input: ClinicalSectionUpdateInput) => Promise<SubmitAndPollResult>;
+    updateSubjectSection?: (ctx: RouteContext, input: SubjectSectionUpdateInput) => Promise<SubmitAndPollResult>;
     updateClinicalSummary?: (ctx: RouteContext, input: ClinicalSummaryUpdateInput) => Promise<SubmitAndPollResult>;
     requestClinicalSummary?: (ctx: RouteContext, input: ClinicalSummaryRequestInput) => Promise<ClinicalSummaryReadResult>;
     registerBlockchainArtifactAndUpdateIndex?: (ctx: RouteContext, input: BlockchainArtifactRegistrationInput) => Promise<SubmitAndPollResult>;

package/dist/orchestration/individual-controller-sdk.d.ts

@@ -7,7 +7,7 @@ import type { IndividualOrganizationConfirmOrderInput, IndividualOrganizationOrd
 import type { IndividualOrganizationRegistrationInput, IndividualOrganizationRegistrationResult } from '../individual-start.js';
 import type { NodeCapability } from '../session.js';
 import type { IndividualOrganizationLifecycleInput } from 'gdc-sdk-core-ts';
-import type { BlockchainArtifactRegistrationInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, CommunicationIngestionInput, CommunicationParticipantRuntimeSearchInput, DigitalTwinGenerationInput, DigitalTwinSecondaryUseConsentInput, DigitalTwinSecondaryUseConsentResult, DigitalTwinSubjectLinkPurgeInput, DigitalTwinSubjectLinkPurgeResult, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IndividualMemberLicenseAddInput, IndividualMemberLicenseInvitationInput, IndividualMemberLicenseTransitionInput, IpsOrFhirImportInput, LicenseListRuntimeSearchInput, LicenseOfferRuntimeSearchInput, LicenseOrderRuntimeSearchInput, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, ProfessionalAccessRequestDecisionInput, ProfessionalAccessRequestSearchInput, RelatedPersonUpsertInput } from '../resource-operations.js';
+import type { BlockchainArtifactRegistrationInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, SubjectSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, CommunicationIngestionInput, CommunicationParticipantRuntimeSearchInput, DigitalTwinGenerationInput, DigitalTwinSecondaryUseConsentInput, DigitalTwinSecondaryUseConsentResult, DigitalTwinSubjectLinkPurgeInput, DigitalTwinSubjectLinkPurgeResult, GrantProfessionalAccessInput, GrantProfessionalAccessResult, IndividualMemberLifecycleInput, IndividualMemberLicenseAddInput, IndividualMemberLicenseInvitationInput, IndividualMemberLicenseTransitionInput, IpsOrFhirImportInput, LicenseListRuntimeSearchInput, LicenseOfferRuntimeSearchInput, LicenseOrderRuntimeSearchInput, RevokeProfessionalAccessInput, RevokeProfessionalAccessResult, ProfessionalAccessRequestDecisionInput, ProfessionalAccessRequestSearchInput, RelatedPersonUpsertInput } from '../resource-operations.js';
 import type { SmartTokenExchangeResult, SmartTokenRequestInput } from '../smart-token.js';
 /**
  * Individual-controller oriented facade over a `NodeRuntimeClient`.
@@ -113,6 +113,12 @@ export declare class IndividualControllerSdk {
      * DELETE entries contain no resource body.
      */
     updateClinicalSection(ctx: RouteContext, input: ClinicalSectionUpdateInput): Promise<SubmitAndPollResult>;
+    /**
+     * Updates one subject-owned section, including non-clinical sections such as
+     * appointments or contracts, while preserving the indexed Composition
+     * author/attester compatibility contract.
+     */
+    updateSubjectSection(ctx: RouteContext, input: SubjectSectionUpdateInput): Promise<SubmitAndPollResult>;
     /**
      * Updates the multi-section summary through a Composition-first document.
      * On a direct call, use the authenticated profile `actorDid` as `sender` and

package/dist/orchestration/individual-controller-sdk.js

@@ -166,6 +166,15 @@ export class IndividualControllerSdk {
         assertFacadeCapability(this.capabilities, ActorCapabilities.IndividualIngestCommunication, ActorKinds.IndividualController, 'updateClinicalSection');
         return requireClientMethod(this.client, 'updateClinicalSection')(ctx, input);
     }
+    /**
+     * Updates one subject-owned section, including non-clinical sections such as
+     * appointments or contracts, while preserving the indexed Composition
+     * author/attester compatibility contract.
+     */
+    updateSubjectSection(ctx, input) {
+        assertFacadeCapability(this.capabilities, ActorCapabilities.IndividualIngestCommunication, ActorKinds.IndividualController, 'updateSubjectSection');
+        return requireClientMethod(this.client, 'updateSubjectSection')(ctx, input);
+    }
     /**
      * Updates the multi-section summary through a Composition-first document.
      * On a direct call, use the authenticated profile `actorDid` as `sender` and

package/dist/orchestration/individual-member-sdk.d.ts

@@ -2,7 +2,7 @@ import { type IndividualMemberCredentialInput, type IndividualMemberVpPayloadInp
 import { type NodeRuntimeClient } from './client-port.js';
 import type { SmartTokenExchangeResult, SmartTokenRequestInput } from '../smart-token.js';
 import type { RouteContext } from '../individual-onboarding.js';
-import type { ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, CommunicationIngestionInput, IndividualMemberLicenseTransitionInput, RelatedPersonUpsertInput } from '../resource-operations.js';
+import type { ClinicalBundleSearchInput, ClinicalSectionUpdateInput, SubjectSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, CommunicationIngestionInput, IndividualMemberLicenseTransitionInput, RelatedPersonUpsertInput } from '../resource-operations.js';
 export declare class IndividualMemberSdk {
     private readonly client;
     constructor(client: NodeRuntimeClient);
@@ -31,6 +31,8 @@ export declare class IndividualMemberSdk {
     ingestCommunicationAndUpdateIndex(ctx: RouteContext, input: CommunicationIngestionInput): Promise<import("gdc-sdk-core-ts/polling-model.js").SubmitAndPollResult>;
     /** Updates one authorized clinical section through a scoped batch/collection. */
     updateClinicalSection(ctx: RouteContext, input: ClinicalSectionUpdateInput): Promise<import("gdc-sdk-core-ts/polling-model.js").SubmitAndPollResult>;
+    /** Updates one authorized subject-owned section with its profile attester. */
+    updateSubjectSection(ctx: RouteContext, input: SubjectSectionUpdateInput): Promise<import("gdc-sdk-core-ts/polling-model.js").SubmitAndPollResult>;
     /** Updates an authorized multi-section summary document. */
     updateClinicalSummary(ctx: RouteContext, input: ClinicalSummaryUpdateInput): Promise<import("gdc-sdk-core-ts/polling-model.js").SubmitAndPollResult>;
     /** Reads the member-authorized `$summary` document without mutating the subject index. */

package/dist/orchestration/individual-member-sdk.js

@@ -40,6 +40,10 @@ export class IndividualMemberSdk {
     updateClinicalSection(ctx, input) {
         return requireClientMethod(this.client, 'updateClinicalSection')(ctx, input);
     }
+    /** Updates one authorized subject-owned section with its profile attester. */
+    updateSubjectSection(ctx, input) {
+        return requireClientMethod(this.client, 'updateSubjectSection')(ctx, input);
+    }
     /** Updates an authorized multi-section summary document. */
     updateClinicalSummary(ctx, input) {
         return requireClientMethod(this.client, 'updateClinicalSummary')(ctx, input);

package/dist/orchestration/personal-sdk.d.ts

@@ -1,7 +1,7 @@
 import { type NodeRuntimeClient, type PollOptions, type SubmitAndPollResult, type SubmitPayload } from './client-port.js';
 import type { IndividualOrganizationRegistrationInput, IndividualOrganizationRegistrationResult } from '../individual-start.js';
 import type { RouteContext } from '../individual-onboarding.js';
-import type { BlockchainArtifactRegistrationInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, CommunicationIngestionInput, CommunicationParticipantRuntimeSearchInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, ProfessionalAccessRequestDecisionInput, ProfessionalAccessRequestSearchInput, IpsOrFhirImportInput, LicenseListRuntimeSearchInput, LicenseOfferRuntimeSearchInput, LicenseOrderRuntimeSearchInput } from '../resource-operations.js';
+import type { BlockchainArtifactRegistrationInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, SubjectSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, CommunicationIngestionInput, CommunicationParticipantRuntimeSearchInput, DigitalTwinGenerationInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, ProfessionalAccessRequestDecisionInput, ProfessionalAccessRequestSearchInput, IpsOrFhirImportInput, LicenseListRuntimeSearchInput, LicenseOfferRuntimeSearchInput, LicenseOrderRuntimeSearchInput } from '../resource-operations.js';
 import type { SmartTokenExchangeResult, SmartTokenRequestInput } from '../smart-token.js';
 export declare class PersonalSdk {
     private readonly client;
@@ -22,6 +22,8 @@ export declare class PersonalSdk {
     ingestCommunicationAndUpdateIndex(ctx: RouteContext, input: CommunicationIngestionInput): Promise<SubmitAndPollResult>;
     /** Updates one exact clinical section through a section-scoped batch/collection. */
     updateClinicalSection(ctx: RouteContext, input: ClinicalSectionUpdateInput): Promise<SubmitAndPollResult>;
+    /** Updates one generic subject-owned section with its profile attester. */
+    updateSubjectSection(ctx: RouteContext, input: SubjectSectionUpdateInput): Promise<SubmitAndPollResult>;
     /** Updates the multi-section clinical summary through a Composition-first document. */
     updateClinicalSummary(ctx: RouteContext, input: ClinicalSummaryUpdateInput): Promise<SubmitAndPollResult>;
     /** Reads the current subject through Communication `$summary`; it performs no ingestion. */

package/dist/orchestration/personal-sdk.js

@@ -38,6 +38,10 @@ export class PersonalSdk {
     updateClinicalSection(ctx, input) {
         return requireClientMethod(this.client, 'updateClinicalSection')(ctx, input);
     }
+    /** Updates one generic subject-owned section with its profile attester. */
+    updateSubjectSection(ctx, input) {
+        return requireClientMethod(this.client, 'updateSubjectSection')(ctx, input);
+    }
     /** Updates the multi-section clinical summary through a Composition-first document. */
     updateClinicalSummary(ctx, input) {
         return requireClientMethod(this.client, 'updateClinicalSummary')(ctx, input);

package/dist/orchestration/professional-sdk.d.ts

@@ -2,7 +2,7 @@ import { type ProfessionalEmployeeCredentialInput, type ProfessionalSmartVpPaylo
 import { type NodeRuntimeClient, type PollOptions, type SubmitAndPollResult, type SubmitPayload } from './client-port.js';
 import type { RouteContext } from '../individual-onboarding.js';
 import type { SmartTokenExchangeResult, SmartTokenRequestInput } from '../smart-token.js';
-import type { BlockchainArtifactRegistrationInput, CommunicationIngestionInput, CommunicationParticipantRuntimeSearchInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, ProfessionalAccessRequestInput, ProfessionalAccessRequestResult, ProfessionalAccessRequestSearchInput, VitalSignBatchCommunicationFromSearchResponseInput } from '../resource-operations.js';
+import type { BlockchainArtifactRegistrationInput, CommunicationIngestionInput, CommunicationParticipantRuntimeSearchInput, ClinicalBundleSearchInput, ClinicalSectionUpdateInput, SubjectSectionUpdateInput, ClinicalSummaryReadResult, ClinicalSummaryRequestInput, ClinicalSummaryUpdateInput, GrantProfessionalAccessInput, GrantProfessionalAccessResult, ProfessionalAccessRequestInput, ProfessionalAccessRequestResult, ProfessionalAccessRequestSearchInput, VitalSignBatchCommunicationFromSearchResponseInput } from '../resource-operations.js';
 /**
  * Professional-oriented facade for runtime actions that belong to the
  * professional actor itself after tenant and employee provisioning have already
@@ -85,6 +85,8 @@ export declare class ProfessionalSdk {
     listProfessionalAccessRequests(ctx: RouteContext, input: ProfessionalAccessRequestSearchInput): Promise<SubmitAndPollResult>;
     /** Updates one consent-authorized clinical section through a scoped batch/collection. */
     updateClinicalSection(ctx: RouteContext, input: ClinicalSectionUpdateInput): Promise<SubmitAndPollResult>;
+    /** Updates one consent-authorized subject section with its profile attester. */
+    updateSubjectSection(ctx: RouteContext, input: SubjectSectionUpdateInput): Promise<SubmitAndPollResult>;
     /** Updates a consent-authorized multi-section summary document. */
     updateClinicalSummary(ctx: RouteContext, input: ClinicalSummaryUpdateInput): Promise<SubmitAndPollResult>;
     /**

package/dist/orchestration/professional-sdk.js

@@ -106,6 +106,10 @@ export class ProfessionalSdk {
     updateClinicalSection(ctx, input) {
         return requireClientMethod(this.client, 'updateClinicalSection')(ctx, input);
     }
+    /** Updates one consent-authorized subject section with its profile attester. */
+    updateSubjectSection(ctx, input) {
+        return requireClientMethod(this.client, 'updateSubjectSection')(ctx, input);
+    }
     /** Updates a consent-authorized multi-section summary document. */
     updateClinicalSummary(ctx, input) {
         return requireClientMethod(this.client, 'updateClinicalSummary')(ctx, input);

package/dist/organization-employee-lifecycle.d.ts

@@ -38,6 +38,12 @@ export type OrganizationEmployeeProvisioningDeps = Readonly<{
 export declare function provisionOrganizationEmployeeWithDeps(routeContext: RouteContext, input: OrganizationEmployeeProvisioningInput, deps: OrganizationEmployeeProvisioningDeps): Promise<OrganizationEmployeeProvisioningResult>;
 /** Reads the technical employee id that must own the subsequently issued seat. */
 export declare function readEmployeeResourceId(value: unknown): string | undefined;
+/**
+ * Reads the concrete PractitionerRole assignment created inside an Employee
+ * receipt. This UUID, not the employee DID or contact, becomes the
+ * professional profile attester reference.
+ */
+export declare function readEmployeeProfessionalAssignmentIdentifier(value: unknown): string | undefined;
 /** Reads the effective positive installation allowance returned by `License/_issue`. */
 export declare function readEmployeeLicenseMaxDevices(value: unknown): number | undefined;
 /**

package/dist/organization-employee-lifecycle.js

@@ -1,6 +1,6 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
 import { createHash } from 'node:crypto';
-import { ActorKinds, EmployeeActivationGrantVersions, projectOrganizationEmployeeLifecycle, readEmployeeActivationCode, } from 'gdc-common-utils-ts';
+import { ActorKinds, ResourceTypesFhirR4, EmployeeActivationGrantVersions, projectOrganizationEmployeeLifecycle, readEmployeeActivationCode, } from 'gdc-common-utils-ts';
 import { buildStableActorIdentifier } from 'gdc-common-utils-ts/utils/actor-identifier';
 import { ClaimsOfferSchemaorg } from 'gdc-common-utils-ts/constants/schemaorg';
 /**
@@ -64,6 +64,30 @@ export function readEmployeeResourceId(value) {
     }
     return undefined;
 }
+/**
+ * Reads the concrete PractitionerRole assignment created inside an Employee
+ * receipt. This UUID, not the employee DID or contact, becomes the
+ * professional profile attester reference.
+ */
+export function readEmployeeProfessionalAssignmentIdentifier(value) {
+    for (const candidate of nestedRecords(value)) {
+        const response = record(candidate.response);
+        const status = parseHttpStatus(response?.status);
+        if (status !== undefined && (status < 200 || status >= 300))
+            continue;
+        const resource = record(candidate.resource) || candidate;
+        const contained = Array.isArray(resource?.contained) ? resource.contained : [];
+        for (const item of contained) {
+            const assignment = record(item);
+            if (assignment?.resourceType !== ResourceTypesFhirR4.PractitionerRole)
+                continue;
+            const identifier = String(assignment.id || '').trim();
+            if (identifier)
+                return identifier;
+        }
+    }
+    return undefined;
+}
 /** Reads the effective positive installation allowance returned by `License/_issue`. */
 export function readEmployeeLicenseMaxDevices(value) {
     for (const candidate of nestedRecords(value)) {

package/dist/resource-operations.d.ts

@@ -1,5 +1,5 @@
 import { type DeviceAppType } from 'gdc-common-utils-ts/constants/device';
-import { type ClinicalSectionUpdateCommunicationInput, type ClinicalUpdateCommunicationInput, type ClinicalSummaryReadResult, type ClinicalSummaryRequestInput, type PermissionRequestCommunicationInput } from 'gdc-sdk-core-ts';
+import { type ClinicalSectionUpdateCommunicationInput, type SubjectSectionUpdateCommunicationInput, type ClinicalUpdateCommunicationInput, type ClinicalSummaryReadResult, type ClinicalSummaryRequestInput, type PermissionRequestCommunicationInput } from 'gdc-sdk-core-ts';
 import type { LicenseOfferSearchState, LicenseOrderSearchState } from 'gdc-common-utils-ts/utils/license-commercial-search';
 import type { LicenseListSearchState } from 'gdc-common-utils-ts/utils/license-list-search';
 import type { BundleSearchQuery, CommMsgExtendedCommunicationOutboxJob, CommunicationOutboxJob, CommunicationInput, DateRange, EmployeeSearchValue, IndividualOrganizationLifecycleInput, TransportProfile, SubmitPayload } from 'gdc-sdk-core-ts';
@@ -315,6 +315,12 @@ type ClinicalUpdateRuntimeOptions = Readonly<{
  * unless an explicit successor policy applies.
  */
 export type ClinicalSectionUpdateInput = ClinicalSectionUpdateCommunicationInput & ClinicalUpdateRuntimeOptions;
+/**
+ * Preferred generic section mutation for data owned by a human, animal, or
+ * other governed subject. It keeps the current Composition-compatible flat
+ * author and attester claims used by confidential indexing.
+ */
+export type SubjectSectionUpdateInput = SubjectSectionUpdateCommunicationInput & ClinicalUpdateRuntimeOptions;
 /**
  * Updates one complete multi-section clinical summary document.
  *
@@ -326,6 +332,8 @@ export type ClinicalSectionUpdateInput = ClinicalSectionUpdateCommunicationInput
  */
 export type ClinicalSummaryUpdateInput = ClinicalUpdateCommunicationInput & ClinicalUpdateRuntimeOptions;
 export declare function buildClinicalSectionUpdateIngestion(input: ClinicalSectionUpdateInput): CommunicationIngestionInput;
+/** Builds the generic subject-section ingestion job. */
+export declare function buildSubjectSectionUpdateIngestion(input: SubjectSectionUpdateInput): CommunicationIngestionInput;
 export declare function buildClinicalSummaryUpdateIngestion(input: ClinicalSummaryUpdateInput): CommunicationIngestionInput;
 export type BlockchainArtifactRegistrationInput = {
     subject: string;

package/dist/resource-operations.js

@@ -7,7 +7,7 @@ import { BundleEditor, buildCommunicationParticipantSearchBundle, buildBlockchai
 import { EmployeeBundleOperations, EmployeeResourceTypes, } from 'gdc-common-utils-ts/utils/employee';
 import { DeviceAppTypes, DeviceUserClasses } from 'gdc-common-utils-ts/constants/device';
 import { CommunicationCategoryCodes } from 'gdc-common-utils-ts/constants/communication';
-import { addFhirResourceToCommunication, createCommunicationResource, buildClinicalSummaryCommunicationJob, buildPermissionRequestCommunication, createClinicalSectionUpdateOutboxJob, createClinicalSummaryUpdateOutboxJob, readClinicalSummaryOperationResult, TransportProfiles, } from 'gdc-sdk-core-ts';
+import { addFhirResourceToCommunication, createCommunicationResource, buildClinicalSummaryCommunicationJob, buildPermissionRequestCommunication, createClinicalSectionUpdateOutboxJob, createSubjectSectionUpdateOutboxJob, createClinicalSummaryUpdateOutboxJob, readClinicalSummaryOperationResult, TransportProfiles, } from 'gdc-sdk-core-ts';
 import { GwCoreLifecycleRequestMethod, GwCoreLifecycleRequestType, GwCoreLifecycleTodo, } from './constants/lifecycle.js';
 import { buildEmployeeSearchBundle, ConsentClaims, } from 'gdc-sdk-core-ts';
 import { ClaimConsent } from 'gdc-common-utils-ts/models/consent-rule';
@@ -20,6 +20,15 @@ export function buildClinicalSectionUpdateIngestion(input) {
         pollOptions: input.pollOptions,
     };
 }
+/** Builds the generic subject-section ingestion job. */
+export function buildSubjectSectionUpdateIngestion(input) {
+    return {
+        communicationJob: createSubjectSectionUpdateOutboxJob(input),
+        clinicalFormat: input.clinicalFormat,
+        transportProfile: input.transportProfile,
+        pollOptions: input.pollOptions,
+    };
+}
 export function buildClinicalSummaryUpdateIngestion(input) {
     return {
         communicationJob: createClinicalSummaryUpdateOutboxJob(input),

package/dist/server-profile-session.d.ts

@@ -1,5 +1,7 @@
 import type { JWK } from 'gdc-common-utils-ts/models/jwk';
 import type { ActorKind } from 'gdc-common-utils-ts/models/actor-session';
+import { type RelatedPersonListSelection } from 'gdc-common-utils-ts/utils/related-person-list';
+import { type CompositionAttesterMode } from 'gdc-common-utils-ts/models/interoperable-claims/composition-claims';
 import type { LegalOrganizationVerificationTransactionInput } from 'gdc-common-utils-ts/utils/legal-organization-verification-transaction';
 import { type ClinicalCreatorBindingInput } from 'gdc-common-utils-ts/utils/fhir-ips-creator-identity';
 import { type AppInfo, type ConfidentialStorageProfile, type PollOptions, type SubmitAndPollResult, type ClinicalCreatorBinding, type ClinicalCreatorIpsExport, type ClinicalSourceAuthorSelection } from 'gdc-sdk-core-ts';
@@ -15,6 +17,26 @@ import type { SecureDidcommTransportAdapter } from 'gdc-sdk-core-ts';
 import { type PinProtectedProfileSecret, type ProfileProtectionOptions, type ServerProfileSealer } from './server-profile-protection.js';
 export type { ServerProfileSealer } from './server-profile-protection.js';
 export type ServerActorMode = 'self' | 'controller' | 'member';
+/** FHIR attester assignment bound to one authenticated server profile. */
+export type ServerProfileAttester = Readonly<{
+    mode: CompositionAttesterMode;
+    party: Readonly<{
+        reference: string;
+    }>;
+}>;
+/**
+ * Builds the canonical `urn:uuid` attester reference from a real
+ * RelatedPerson/PractitionerRole assignment returned by GW.
+ */
+export declare function buildProfileAttester(input: Readonly<{
+    assignmentIdentifier: string;
+    mode: CompositionAttesterMode;
+}>): ServerProfileAttester;
+/**
+ * Selects a real active contact/member from a RelatedPerson search response
+ * and turns its governed identifier into the personal profile attester.
+ */
+export declare function buildRelatedPersonProfileAttester(relatedPersonSearchResponseBody: unknown, selection: RelatedPersonListSelection): ServerProfileAttester;
 /** Durable public metadata plus PIN-and-host protected private material. */
 export type ServerProfileRecord = Readonly<{
     profileId: string;
@@ -31,6 +53,8 @@ export type ServerProfileRecord = Readonly<{
     clientId: string;
     /** Stable non-secret id of the browser/app installation registered by DCR. */
     clientInstanceId?: string;
+    /** Profile identity used as Composition attester; never a per-write author. */
+    attester?: ServerProfileAttester;
     /** Stable FHIR creator/permission identity; channel and device values are aliases only. */
     clinicalCreatorBinding?: ClinicalCreatorBinding;
     deviceDid: string;
@@ -126,6 +150,11 @@ export type ServerProfileEnrollmentInput = Readonly<{
      * derives the identity from the wallet key it creates for this profile.
      */
     clientInstanceId?: string;
+    /**
+     * Server-selected RelatedPerson/PractitionerRole assignment for this
+     * profile. It is persisted locally and is not sent as document authorship.
+     */
+    attester?: ServerProfileAttester;
     /**
      * Server-authorized stable creator identity imported from FHIR or generated
      * locally. Enrollment adds the operational actor DID and registered DCR
@@ -216,6 +245,8 @@ export type ResolvedServerProfileSession = Readonly<{
     subjectDid: string;
     scopes: string[];
     accessToken: string;
+    /** Attester bound to this authenticated and unlocked profile. */
+    attester?: ServerProfileAttester;
     secureTransportAdapter: SecureDidcommTransportAdapter;
     /** Storage adapter available only while the PIN-unlocked session is alive. */
     confidentialStorageAdapter: Readonly<{

package/dist/server-profile-session.js

@@ -1,7 +1,11 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
 import { randomBytes } from 'node:crypto';
 import { ActorKinds } from 'gdc-common-utils-ts/constants/actor-session';
-import { normalizeClinicalCreatorBinding, } from 'gdc-common-utils-ts/utils/fhir-ips-creator-identity';
+import { UrnPrefixes } from 'gdc-common-utils-ts/constants/urn';
+import { normalizeUuid } from 'gdc-common-utils-ts/utils/normalize-uuid';
+import { selectRelatedPersonListRecord, } from 'gdc-common-utils-ts/utils/related-person-list';
+import { CompositionAttesterModes, } from 'gdc-common-utils-ts/models/interoperable-claims/composition-claims';
+import { FhirIpsCreatorKinds, normalizeClinicalCreatorBinding, } from 'gdc-common-utils-ts/utils/fhir-ips-creator-identity';
 import { getHealthcareRoleByClaim } from 'gdc-common-utils-ts/constants/healthcare';
 import { readLegalOrganizationVerificationCredentialPairFromResponseBody, readServiceControllerCredentialFromResponseBody, } from 'gdc-common-utils-ts/utils/legal-organization-verification-result';
 import { addLegalRepresentativeCredential, addOrganizationCredential, addServiceControllerCredential, createVP, } from 'gdc-common-utils-ts/utils/vp-token';
@@ -15,6 +19,44 @@ import { DigitalTwinSdk } from './orchestration/digital-twin-sdk.js';
 import { buildIdentityOpenIdSmartTokenPath } from './runtime-paths.js';
 import { createProfileDeviceActivationRequest } from './device-activation.js';
 import { ProfilePinRejectedError, openServerProfileSecret, protectServerProfileSecret, } from './server-profile-protection.js';
+/**
+ * Builds the canonical `urn:uuid` attester reference from a real
+ * RelatedPerson/PractitionerRole assignment returned by GW.
+ */
+export function buildProfileAttester(input) {
+    const hexadecimal = normalizeUuid(String(input.assignmentIdentifier || '').trim());
+    if (!hexadecimal) {
+        throw new TypeError('Profile attester assignmentIdentifier must be a UUID returned by RelatedPerson or PractitionerRole data.');
+    }
+    const uuid = [
+        hexadecimal.slice(0, 8),
+        hexadecimal.slice(8, 12),
+        hexadecimal.slice(12, 16),
+        hexadecimal.slice(16, 20),
+        hexadecimal.slice(20),
+    ].join('-');
+    return Object.freeze({
+        mode: input.mode,
+        party: Object.freeze({ reference: `${UrnPrefixes.Uuid}${uuid}` }),
+    });
+}
+/**
+ * Selects a real active contact/member from a RelatedPerson search response
+ * and turns its governed identifier into the personal profile attester.
+ */
+export function buildRelatedPersonProfileAttester(relatedPersonSearchResponseBody, selection) {
+    const relationship = selectRelatedPersonListRecord(relatedPersonSearchResponseBody, { ...selection, activeOnly: selection.activeOnly ?? true });
+    if (!relationship) {
+        throw new Error('No matching active RelatedPerson was returned by the member/contact search.');
+    }
+    if (!relationship.identifier) {
+        throw new Error('The selected RelatedPerson response has no governed assignment identifier.');
+    }
+    return buildProfileAttester({
+        assignmentIdentifier: relationship.identifier,
+        mode: CompositionAttesterModes.Personal,
+    });
+}
 /**
  * Coordinates device registration, two-factor profile protection and SMART sessions.
  *
@@ -38,6 +80,14 @@ export class ServerProfileSessionManager {
         const normalizedClinicalCreatorBinding = input.clinicalCreatorBinding
             ? normalizeClinicalCreatorBinding(input.clinicalCreatorBinding)
             : undefined;
+        const attester = input.attester || (normalizedClinicalCreatorBinding
+            ? buildProfileAttester({
+                assignmentIdentifier: normalizedClinicalCreatorBinding.authorIdentifier,
+                mode: normalizedClinicalCreatorBinding.kind === FhirIpsCreatorKinds.Professional
+                    ? CompositionAttesterModes.Professional
+                    : CompositionAttesterModes.Personal,
+            })
+            : undefined);
         requireEnrollment({
             ...input,
             ...(normalizedClinicalCreatorBinding
@@ -130,6 +180,7 @@ export class ServerProfileSessionManager {
             allowedSubjectDids: unique(input.allowedSubjectDids),
             clientId,
             clientInstanceId,
+            ...(attester ? { attester } : {}),
             ...(clinicalCreatorBinding ? { clinicalCreatorBinding } : {}),
             deviceDid,
             publicJwks: publicKeys.filter((entry) => entry.purpose !== 'document-at-rest').map((entry) => entry.publicJwk),
@@ -197,6 +248,7 @@ export class ServerProfileSessionManager {
                     keyIds: [],
                 },
             } : {}),
+            ...(previous.attester ? { attester: previous.attester } : {}),
         });
         await this.options.store.deleteSessionsForProfile(profile.profileId);
         return profile;
@@ -486,6 +538,7 @@ export class ServerProfileSessionManager {
             subjectDid: session.subjectDid,
             scopes: session.scopes,
             accessToken: await this.options.sealer.unseal(session.sealedAccessToken, `${sessionId}:access-token`),
+            ...(profile.attester ? { attester: profile.attester } : {}),
             secureTransportAdapter: {
                 pack: (message) => wallet.packForRecipientWithContext(bindTransportActor(message, profile.actorDid, profile.clientId), profile.providerDid, { context }),
                 unpack: async (jwe) => (await wallet.unpackWithContext(jwe, { context })).content,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.9.8",
+  "version": "2.9.10",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",
@@ -39,7 +39,7 @@
   },
   "dependencies": {
     "gdc-common-utils-ts": "2.9.10",
-    "gdc-sdk-core-ts": "2.9.7"
+    "gdc-sdk-core-ts": "2.9.8"
   },
   "devDependencies": {
     "@types/node": "^20.14.10",

package/dist/organization-registration-authorization.d.ts

@@ -1,16 +0,0 @@
-import type { VerifiableCredentialV2 } from 'gdc-common-utils-ts/models/verifiable-credential';
-import type { IWallet, WalletExecutionContext, WalletKeySelection } from 'gdc-sdk-core-ts';
-/** Input required to add one human-authorizer proof to the out-of-band VC. */
-export type SignOrganizationRegistrationAuthorizationInput = Readonly<{
-    credential: VerifiableCredentialV2;
-    wallet: IWallet;
-    context: WalletExecutionContext;
-    key: WalletKeySelection;
-    verificationMethod: string;
-    createdAt?: string;
-}>;
-/**
- * Adds one detached JWS proof made by the already-unlocked professional
- * profile. The browser never receives the private key or clear wallet seed.
- */
-export declare function signOrganizationRegistrationAuthorizationCredential(input: SignOrganizationRegistrationAuthorizationInput): Promise<VerifiableCredentialV2>;

package/dist/organization-registration-authorization.js

@@ -1,34 +0,0 @@
-import { canonicalizeOrganizationRegistrationAuthorizationCredential, } from 'gdc-common-utils-ts/utils/organization-registration-authorization';
-/**
- * Adds one detached JWS proof made by the already-unlocked professional
- * profile. The browser never receives the private key or clear wallet seed.
- */
-export async function signOrganizationRegistrationAuthorizationCredential(input) {
-    if (!input.wallet.signDetachedJws) {
-        throw new Error('Wallet does not support detached organization authorization proofs.');
-    }
-    const verificationMethod = String(input.verificationMethod || '').trim();
-    if (!verificationMethod)
-        throw new Error('Organization authorization proof requires verificationMethod.');
-    const payload = canonicalizeOrganizationRegistrationAuthorizationCredential(input.credential);
-    const jws = await input.wallet.signDetachedJws(input.context, {
-        payload,
-        header: { typ: 'application/vc+ld+json' },
-        key: input.key,
-    });
-    const existingProofs = Array.isArray(input.credential.proof)
-        ? input.credential.proof
-        : input.credential.proof
-            ? [input.credential.proof]
-            : [];
-    return {
-        ...input.credential,
-        proof: [...existingProofs, {
-                type: 'JsonWebSignature2020',
-                created: input.createdAt || new Date().toISOString(),
-                proofPurpose: 'contractAgreement',
-                verificationMethod,
-                jws,
-            }],
-    };
-}