vet-data-utils-ts 0.5.18 → 0.5.20

package/README.md

@@ -44,6 +44,16 @@ already role-authorized GW search result. It removes every clinical field and
 `summarizeVeterinaryTaggedIndex(...)` then sorts and counts that minimized copy
 without inspecting resource content.
 
+`readVeterinaryBundleTags(...)` is the fail-closed UI reader for that minimized
+shape. It is intentionally separate from the clinical Bundle Reader and rejects
+`meta.claims`, clinical fields, resource types or tags outside the caller's
+already server-authorized policy. Its `cards` output groups repeated Coding
+values by resource-qualified search parameter, so an index-only screen can use
+the same card shell without constructing a clinical-resource view. An
+authorized full Bundle may first be reduced with
+`projectVeterinaryClaimsIndexForUi(...)` when it only needs that summary; the
+full clinical reader itself remains claims-first and unchanged.
+
 `buildSmartHealthCardJwsProofReference(...)` serves a different purpose: it
 hashes the exact compact SHC JWS, including its ES256 signature, with a domain
 separator. A product ledger/resolver may use that key to retrieve the existing

package/dist/index-projection-tags.d.ts

@@ -5,6 +5,13 @@ export type VeterinaryIndexTagPolicy = Readonly<{
 export type VeterinaryUiIndexPolicy = VeterinaryIndexTagPolicy & Readonly<{
     allowedResourceTypes: ReadonlySet<string>;
 }>;
+export type VeterinaryIndexCardView = Readonly<{
+    fullUrl: string;
+    resourceType: string;
+    id: string;
+    /** Only server-authorized index values; never clinical resource content. */
+    tags: Readonly<Record<string, readonly string[]>>;
+}>;
 /**
  * Creates the interoperable message/index copy of a native FHIR Bundle.
  * Only allowlisted, resource-qualified Coding tags are retained or derived;
@@ -24,4 +31,22 @@ export declare function summarizeVeterinaryTaggedIndex(source: JsonObject, optio
     countsByResourceType: Record<string, number>;
     entries: JsonObject[];
 }>;
+/**
+ * Strict UI reader for an index-only Bundle. Unlike the clinical Bundle
+ * Reader, this refuses claims and every clinical resource field.
+ */
+export declare function readVeterinaryBundleTags(source: JsonObject, options: VeterinaryUiIndexPolicy & Readonly<{
+    sortSystem?: string;
+}>): {
+    cards: Readonly<{
+        fullUrl: string;
+        resourceType: string;
+        id: string;
+        /** Only server-authorized index values; never clinical resource content. */
+        tags: Readonly<Record<string, readonly string[]>>;
+    }>[];
+    total: number;
+    countsByResourceType: Record<string, number>;
+    entries: JsonObject[];
+};
 export {};

package/dist/index-projection-tags.js

@@ -79,6 +79,59 @@ export function summarizeVeterinaryTaggedIndex(source, options = {}) {
     }
     return { total: entries.length, countsByResourceType, entries };
 }
+/**
+ * Strict UI reader for an index-only Bundle. Unlike the clinical Bundle
+ * Reader, this refuses claims and every clinical resource field.
+ */
+export function readVeterinaryBundleTags(source, options) {
+    if (source.resourceType !== 'Bundle' || source.type !== 'searchset' || !Array.isArray(source.entry)) {
+        throw new TypeError('bundle_tags_reader_searchset_required');
+    }
+    for (const rawEntry of source.entry) {
+        if (!isObject(rawEntry) || !onlyKeys(rawEntry, ['fullUrl', 'resource'])
+            || typeof rawEntry.fullUrl !== 'string' || !isObject(rawEntry.resource)) {
+            throw new TypeError('bundle_tags_reader_unsafe_shape');
+        }
+        const resource = rawEntry.resource;
+        if (!onlyKeys(resource, ['resourceType', 'id', 'meta'])
+            || typeof resource.resourceType !== 'string' || typeof resource.id !== 'string'
+            || !isObject(resource.meta) || !onlyKeys(resource.meta, ['tag'])
+            || !Array.isArray(resource.meta.tag)) {
+            throw new TypeError('bundle_tags_reader_unsafe_shape');
+        }
+        if (!options.allowedResourceTypes.has(resource.resourceType)) {
+            throw new TypeError('bundle_tags_reader_resource_forbidden');
+        }
+        for (const rawTag of resource.meta.tag) {
+            if (!isObject(rawTag) || !onlyKeys(rawTag, ['system', 'code'])
+                || typeof rawTag.system !== 'string' || typeof rawTag.code !== 'string') {
+                throw new TypeError('bundle_tags_reader_unsafe_shape');
+            }
+            if (!options.allowedTagSystems.has(rawTag.system)
+                || !rawTag.system.startsWith(`${resource.resourceType}.`)) {
+                throw new TypeError('bundle_tags_reader_tag_forbidden');
+            }
+        }
+    }
+    const summary = summarizeVeterinaryTaggedIndex(source, { sortSystem: options.sortSystem });
+    const cards = summary.entries.map(entry => {
+        const resource = entry.resource;
+        const meta = resource.meta;
+        const tags = {};
+        for (const rawTag of meta.tag) {
+            const values = tags[rawTag.system] || [];
+            values.push(rawTag.code);
+            tags[rawTag.system] = values;
+        }
+        return {
+            fullUrl: entry.fullUrl,
+            resourceType: resource.resourceType,
+            id: resource.id,
+            tags,
+        };
+    });
+    return { ...summary, cards };
+}
 function deriveValues(resource, parameter) {
     switch (`${String(resource.resourceType)}.${parameter}`) {
         case 'Composition.date': return scalar(resource.date);
@@ -101,6 +154,9 @@ function deriveValues(resource, parameter) {
         case 'Condition.severity': return conceptCodes(resource.severity);
         case 'Condition.code': return conceptCodes(resource.code);
         case 'Condition.language': return scalar(resource.language);
+        case 'Observation.date': return [...dateChoice(resource, 'effective'), ...scalar(resource.issued)];
+        case 'Observation.status': return scalar(resource.status);
+        case 'Observation.language': return scalar(resource.language);
         case 'MedicationStatement.effective': return dateChoice(resource, 'effective');
         case 'MedicationStatement.status': return scalar(resource.status);
         case 'MedicationStatement.medication': return conceptCodes(resource.medicationCodeableConcept);
@@ -181,3 +237,7 @@ function uniqueTags(tags) {
 function isObject(value) {
     return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
 }
+function onlyKeys(value, allowed) {
+    const names = new Set(allowed);
+    return Object.keys(value).every(key => names.has(key));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vet-data-utils-ts",
-  "version": "0.5.18",
+  "version": "0.5.20",
   "description": "Browser-safe governed VetChain data contracts",
   "license": "Apache-2.0",
   "author": "Connecting Solution & Applications Ltd",