gdc-sdk-node-ts 2.9.9 → 2.9.10

package/README.md

@@ -686,8 +686,8 @@ modules below.
   - types: `IndividualOrganizationBootstrapInput`, `OfferPreview`, `IndividualOrganizationStartResult`
   - function: `registerIndividualOrganizationWithDeps(...)`
 - [`src/individual-onboarding.ts`](src/individual-onboarding.ts)
-  - types: `RouteContext`, `IndividualOrganizationConfirmOrderInput`
-  - function: `confirmIndividualOrganizationOrderWithDeps(...)`
+  - types: `RouteContext`, `IndividualOrganizationConfirmOrderInput`, `IndividualOrganizationOrderResult`
+  - functions: `confirmIndividualOrganizationOrderWithDeps(...)`, `readIndividualOrganizationControllerAssignmentIdentifier(...)`
 - [`src/device-activation.ts`](src/device-activation.ts)
   - types: `EmployeeDeviceActivationInput`, `EmployeeDeviceActivationRequestInput`, `EmployeeDeviceActivationResult`
   - functions: `activateEmployeeDeviceWithActivationCodeWithDeps(...)`, `activateEmployeeDeviceWithActivationRequestWithDeps(...)`

package/dist/individual-onboarding.d.ts

@@ -27,6 +27,11 @@ export type IndividualOrganizationConfirmOrderInput = {
  */
 export type IndividualOrganizationOrderResult = SubmitAndPollResult & Readonly<{
     activationCode: string;
+    /**
+     * Governed RelatedPerson identifier automatically materialized by GW for
+     * the principal Organization owner/controller.
+     */
+    controllerAssignmentIdentifier: string;
 }>;
 type ConfirmIndividualOrganizationOrderDeps = {
     input: IndividualOrganizationConfirmOrderInput;
@@ -46,4 +51,11 @@ export declare function confirmIndividualOrganizationOrderWithDeps(deps: Confirm
  * this reader directly; it remains public for response-adapter compatibility.
  */
 export declare function readIndividualOrganizationActivationCode(responseBody: unknown): string | undefined;
+/**
+ * Reads the principal owner/controller assignment that GW creates during the
+ * same Order transition as the individual controller licence. This is a
+ * projection from the returned RelatedPerson `resource.meta.claims`; it is not
+ * an Order claim and callers must not pre-create or search for it.
+ */
+export declare function readIndividualOrganizationControllerAssignmentIdentifier(responseBody: unknown): string | undefined;
 export {};

package/dist/individual-onboarding.js

@@ -1,5 +1,5 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
-import { extractPrimaryClaims } from 'gdc-common-utils-ts';
+import { HealthcareActorRoleCodes, HL7_CODING_SYSTEM_V3_ROLE_CODE, extractPrimaryClaims, readRelatedPersonListRecords, } from 'gdc-common-utils-ts';
 import { resolvePollOptionsFromSeconds } from './poll-options.js';
 export async function confirmIndividualOrganizationOrderWithDeps(deps) {
     /**
@@ -40,7 +40,11 @@ export async function confirmIndividualOrganizationOrderWithDeps(deps) {
     if (!activationCode) {
         throw new Error('confirmIndividualOrganizationOrder failed: missing controller activation code in GW Order response.');
     }
-    return { ...order, activationCode };
+    const controllerAssignmentIdentifier = readIndividualOrganizationControllerAssignmentIdentifier(order.poll.body);
+    if (!controllerAssignmentIdentifier) {
+        throw new Error('confirmIndividualOrganizationOrder failed: missing automatic controller RESPRSN assignment in GW Order response.');
+    }
+    return { ...order, activationCode, controllerAssignmentIdentifier };
 }
 /**
  * Reads the opaque controller activation code from a completed individual
@@ -51,6 +55,20 @@ export function readIndividualOrganizationActivationCode(responseBody) {
     const claims = extractPrimaryClaims(responseBody);
     return String(claims['org.schema.IndividualProduct.serialNumber'] || '').trim() || undefined;
 }
+/**
+ * Reads the principal owner/controller assignment that GW creates during the
+ * same Order transition as the individual controller licence. This is a
+ * projection from the returned RelatedPerson `resource.meta.claims`; it is not
+ * an Order claim and callers must not pre-create or search for it.
+ */
+export function readIndividualOrganizationControllerAssignmentIdentifier(responseBody) {
+    const expectedRelationship = `${HL7_CODING_SYSTEM_V3_ROLE_CODE}|${HealthcareActorRoleCodes.Controller}`;
+    return readRelatedPersonListRecords(responseBody)
+        .find((record) => record.identifier
+        && record.relationship === expectedRelationship
+        && record.active !== 'false')
+        ?.identifier;
+}
 function createRuntimeUuid() {
     const fromCrypto = globalThis.crypto?.randomUUID?.();
     if (fromCrypto) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.9.9",
+  "version": "2.9.10",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",

package/dist/organization-registration-authorization.d.ts

@@ -1,16 +0,0 @@
-import type { VerifiableCredentialV2 } from 'gdc-common-utils-ts/models/verifiable-credential';
-import type { IWallet, WalletExecutionContext, WalletKeySelection } from 'gdc-sdk-core-ts';
-/** Input required to add one human-authorizer proof to the out-of-band VC. */
-export type SignOrganizationRegistrationAuthorizationInput = Readonly<{
-    credential: VerifiableCredentialV2;
-    wallet: IWallet;
-    context: WalletExecutionContext;
-    key: WalletKeySelection;
-    verificationMethod: string;
-    createdAt?: string;
-}>;
-/**
- * Adds one detached JWS proof made by the already-unlocked professional
- * profile. The browser never receives the private key or clear wallet seed.
- */
-export declare function signOrganizationRegistrationAuthorizationCredential(input: SignOrganizationRegistrationAuthorizationInput): Promise<VerifiableCredentialV2>;

package/dist/organization-registration-authorization.js

@@ -1,34 +0,0 @@
-import { canonicalizeOrganizationRegistrationAuthorizationCredential, } from 'gdc-common-utils-ts/utils/organization-registration-authorization';
-/**
- * Adds one detached JWS proof made by the already-unlocked professional
- * profile. The browser never receives the private key or clear wallet seed.
- */
-export async function signOrganizationRegistrationAuthorizationCredential(input) {
-    if (!input.wallet.signDetachedJws) {
-        throw new Error('Wallet does not support detached organization authorization proofs.');
-    }
-    const verificationMethod = String(input.verificationMethod || '').trim();
-    if (!verificationMethod)
-        throw new Error('Organization authorization proof requires verificationMethod.');
-    const payload = canonicalizeOrganizationRegistrationAuthorizationCredential(input.credential);
-    const jws = await input.wallet.signDetachedJws(input.context, {
-        payload,
-        header: { typ: 'application/vc+ld+json' },
-        key: input.key,
-    });
-    const existingProofs = Array.isArray(input.credential.proof)
-        ? input.credential.proof
-        : input.credential.proof
-            ? [input.credential.proof]
-            : [];
-    return {
-        ...input.credential,
-        proof: [...existingProofs, {
-                type: 'JsonWebSignature2020',
-                created: input.createdAt || new Date().toISOString(),
-                proofPurpose: 'contractAgreement',
-                verificationMethod,
-                jws,
-            }],
-    };
-}