saferx-pharma-sdk 2.0.2 → 2.0.5

package/dist/client.d.ts

@@ -5,7 +5,7 @@ export type EnterpriseOperation = {
     path: string;
     idempotencyRequired: boolean;
 };
-export declare const SDK_VERSION = "2.0.2";
+export declare const SDK_VERSION = "2.0.5";
 export declare const CLIENT_KIND = "typescript_sdk";
 export declare const SDK_LANGUAGE = "typescript";
 export declare const MAX_ATTEMPTS = 3;

package/dist/client.js

@@ -1,10 +1,11 @@
-export const SDK_VERSION = "2.0.2";
+export const SDK_VERSION = "2.0.5";
 export const CLIENT_KIND = "typescript_sdk";
 export const SDK_LANGUAGE = "typescript";
 export const MAX_ATTEMPTS = 3;
 export const RETRY_BACKOFF_BASE_SECONDS = 0.1;
 export const RETRY_BACKOFF_MAX_SECONDS = 2.0;
 export const OPERATIONS = {
+    enterprise_capabilities: { operationId: 'enterprise_capabilities', method: 'GET', path: '/capabilities', idempotencyRequired: false },
     enterprise_erx_safety_check: { operationId: 'enterprise_erx_safety_check', method: 'POST', path: '/erx/safety-checks', idempotencyRequired: true },
     enterprise_ocr_prescription_create: { operationId: 'enterprise_ocr_prescription_create', method: 'POST', path: '/ocr/prescriptions', idempotencyRequired: true },
     enterprise_ocr_prescription_events: { operationId: 'enterprise_ocr_prescription_events', method: 'GET', path: '/ocr/prescriptions/{prescription_id}/events', idempotencyRequired: false },
@@ -19,6 +20,7 @@ export const OPERATIONS = {
     enterprise_registry_search: { operationId: 'enterprise_registry_search', method: 'GET', path: '/registry/search', idempotencyRequired: false },
     enterprise_safety_capabilities: { operationId: 'enterprise_safety_capabilities', method: 'GET', path: '/safety/capabilities', idempotencyRequired: false },
     enterprise_safety_check: { operationId: 'enterprise_safety_check', method: 'POST', path: '/safety/checks', idempotencyRequired: true },
+    enterprise_status: { operationId: 'enterprise_status', method: 'GET', path: '/status', idempotencyRequired: false },
 };
 export class SafeRxProblemDetailsError extends Error {
     status;
@@ -129,18 +131,21 @@ export class SafeRxClient {
             sendBody = undefined;
         }
         const query = canonicalQuery(options.query);
-        const timestamp = new Date().toISOString();
-        const nonce = crypto.randomUUID();
         const requestId = crypto.randomUUID();
         const signingPath = new URL(this.baseUrl).pathname.replace(/\/+$/, "") + path;
-        const signature = await hmac(this.apiKey, canonicalRequest(operation.method, signingPath, query, await sha256(bodyBytes), timestamp, nonce));
-        const headers = { Accept: "application/json", "X-SafeRx-API-Key": this.apiKey, "X-SafeRx-Timestamp": timestamp, "X-SafeRx-Nonce": nonce, "X-SafeRx-Signature": signature, "X-Request-ID": requestId, "X-SafeRx-Client-Kind": CLIENT_KIND, "X-SafeRx-Client-Name": this.clientName, "X-SafeRx-Client-Version": SDK_VERSION, "X-SafeRx-SDK-Language": SDK_LANGUAGE, "X-SafeRx-SDK-Version": SDK_VERSION };
-        if (contentType !== undefined)
-            headers["Content-Type"] = contentType;
-        if (options.idempotencyKey)
-            headers["Idempotency-Key"] = options.idempotencyKey;
+        const bodyHash = await sha256(bodyBytes);
         const target = `${this.baseUrl.replace(/\/+$/, "")}${path}${query ? `?${query}` : ""}`;
         for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt++) {
+            // Every attempt is signed afresh: a reused nonce is rejected as a replay (401
+            // API_KEY_NONCE_REJECTED), so a retry must carry a new timestamp, nonce and signature.
+            const timestamp = new Date().toISOString();
+            const nonce = crypto.randomUUID();
+            const signature = await hmac(this.apiKey, canonicalRequest(operation.method, signingPath, query, bodyHash, timestamp, nonce));
+            const headers = { Accept: "application/json", "X-SafeRx-API-Key": this.apiKey, "X-SafeRx-Timestamp": timestamp, "X-SafeRx-Nonce": nonce, "X-SafeRx-Signature": signature, "X-Request-ID": requestId, "X-SafeRx-Client-Kind": CLIENT_KIND, "X-SafeRx-Client-Name": this.clientName, "X-SafeRx-Client-Version": SDK_VERSION, "X-SafeRx-SDK-Language": SDK_LANGUAGE, "X-SafeRx-SDK-Version": SDK_VERSION };
+            if (contentType !== undefined)
+                headers["Content-Type"] = contentType;
+            if (options.idempotencyKey)
+                headers["Idempotency-Key"] = options.idempotencyKey;
             try {
                 const response = await this.fetchImpl(target, { method: operation.method, headers, body: sendBody, signal: options.signal });
                 const raw = await response.text();

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "saferx-pharma-sdk",
-  "version": "2.0.2",
+  "version": "2.0.5",
   "description": "Signed TypeScript client for the SafeRx Enterprise API",
   "license": "MIT",
   "homepage": "https://docs.saferx.online",
-  "repository": {"type": "git", "url": "https://github.com/KaRamHelal/SafeRx_Pharma"},
+  "repository": {"type": "git", "url": "git+https://github.com/KaRamHelal/SafeRx_Pharma.git"},
   "type": "module",
   "exports": {".": "./dist/client.js"},
   "files": ["dist", "src", "README.md"],

package/src/client.ts

@@ -4,13 +4,14 @@ export type EnterpriseOperation = {
   operationId: string; method: string; path: string; idempotencyRequired: boolean;
 };
 
-export const SDK_VERSION = "2.0.2";
+export const SDK_VERSION = "2.0.5";
 export const CLIENT_KIND = "typescript_sdk";
 export const SDK_LANGUAGE = "typescript";
 export const MAX_ATTEMPTS = 3;
 export const RETRY_BACKOFF_BASE_SECONDS = 0.1;
 export const RETRY_BACKOFF_MAX_SECONDS = 2.0;
 export const OPERATIONS: Record<string, EnterpriseOperation> = {
+  enterprise_capabilities: { operationId: 'enterprise_capabilities', method: 'GET', path: '/capabilities', idempotencyRequired: false },
   enterprise_erx_safety_check: { operationId: 'enterprise_erx_safety_check', method: 'POST', path: '/erx/safety-checks', idempotencyRequired: true },
   enterprise_ocr_prescription_create: { operationId: 'enterprise_ocr_prescription_create', method: 'POST', path: '/ocr/prescriptions', idempotencyRequired: true },
   enterprise_ocr_prescription_events: { operationId: 'enterprise_ocr_prescription_events', method: 'GET', path: '/ocr/prescriptions/{prescription_id}/events', idempotencyRequired: false },
@@ -25,6 +26,7 @@ export const OPERATIONS: Record<string, EnterpriseOperation> = {
   enterprise_registry_search: { operationId: 'enterprise_registry_search', method: 'GET', path: '/registry/search', idempotencyRequired: false },
   enterprise_safety_capabilities: { operationId: 'enterprise_safety_capabilities', method: 'GET', path: '/safety/capabilities', idempotencyRequired: false },
   enterprise_safety_check: { operationId: 'enterprise_safety_check', method: 'POST', path: '/safety/checks', idempotencyRequired: true },
+  enterprise_status: { operationId: 'enterprise_status', method: 'GET', path: '/status', idempotencyRequired: false },
 };
 
 export type MultipartFile = { filename: string; content: Uint8Array; contentType?: string };
@@ -100,13 +102,17 @@ export class SafeRxClient {
       bodyBytes = bytes(""); sendBody = undefined;
     }
     const query = canonicalQuery(options.query);
-    const timestamp = new Date().toISOString(); const nonce = crypto.randomUUID(); const requestId = crypto.randomUUID();
+    const requestId = crypto.randomUUID();
     const signingPath = new URL(this.baseUrl).pathname.replace(/\/+$/, "") + path;
-    const signature = await hmac(this.apiKey, canonicalRequest(operation.method, signingPath, query, await sha256(bodyBytes), timestamp, nonce));
-    const headers: Record<string, string> = { Accept: "application/json", "X-SafeRx-API-Key": this.apiKey, "X-SafeRx-Timestamp": timestamp, "X-SafeRx-Nonce": nonce, "X-SafeRx-Signature": signature, "X-Request-ID": requestId, "X-SafeRx-Client-Kind": CLIENT_KIND, "X-SafeRx-Client-Name": this.clientName, "X-SafeRx-Client-Version": SDK_VERSION, "X-SafeRx-SDK-Language": SDK_LANGUAGE, "X-SafeRx-SDK-Version": SDK_VERSION };
-    if (contentType !== undefined) headers["Content-Type"] = contentType; if (options.idempotencyKey) headers["Idempotency-Key"] = options.idempotencyKey;
+    const bodyHash = await sha256(bodyBytes);
     const target = `${this.baseUrl.replace(/\/+$/, "")}${path}${query ? `?${query}` : ""}`;
     for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt++) {
+      // Every attempt is signed afresh: a reused nonce is rejected as a replay (401
+      // API_KEY_NONCE_REJECTED), so a retry must carry a new timestamp, nonce and signature.
+      const timestamp = new Date().toISOString(); const nonce = crypto.randomUUID();
+      const signature = await hmac(this.apiKey, canonicalRequest(operation.method, signingPath, query, bodyHash, timestamp, nonce));
+      const headers: Record<string, string> = { Accept: "application/json", "X-SafeRx-API-Key": this.apiKey, "X-SafeRx-Timestamp": timestamp, "X-SafeRx-Nonce": nonce, "X-SafeRx-Signature": signature, "X-Request-ID": requestId, "X-SafeRx-Client-Kind": CLIENT_KIND, "X-SafeRx-Client-Name": this.clientName, "X-SafeRx-Client-Version": SDK_VERSION, "X-SafeRx-SDK-Language": SDK_LANGUAGE, "X-SafeRx-SDK-Version": SDK_VERSION };
+      if (contentType !== undefined) headers["Content-Type"] = contentType; if (options.idempotencyKey) headers["Idempotency-Key"] = options.idempotencyKey;
       try { const response = await this.fetchImpl(target, { method: operation.method, headers, body: sendBody as BodyInit | undefined, signal: options.signal }); const raw = await response.text(); const parsed = raw ? JSON.parse(raw) : undefined;
         if (response.ok) return parsed; if ([429, 502, 503, 504].includes(response.status) && attempt + 1 < MAX_ATTEMPTS) { await new Promise((resolve) => setTimeout(resolve, retryDelaySeconds(response.headers.get("Retry-After"), attempt) * 1000)); continue; }
         throw new SafeRxProblemDetailsError(response.status, (parsed ?? { status: response.status, title: "REQUEST_FAILED" }) as JsonObject, requestId);