tefca

type AuditLog struct {
	// contains filtered or unexported fields
}

type DeliveryRequest struct {
	Recipient string
	Purpose   string
	Bundle    []byte // FHIR Bundle JSON
}

type DeliveryResponse struct {
	Accepted   bool
	TrackingID string
	Reason     string
}

type Exchange struct {
	// contains filtered or unexported fields
}

type ExchangeConfig struct {
	// PartnerFHIRBase is the FHIR base URL of the responding participant. UDAP metadata is discovered relative to it.
	PartnerFHIRBase string `yaml:"partner_fhir_base"`

	// ClientURI identifies this client to the trust community and must appear as a URI in the certificate's subject alternative names.
	ClientURI string `yaml:"client_uri"`

	// TrustAnchorPath holds the community's certificate authorities in PEM form.
	//
	// Required. Verifying a server's signed metadata against the certificate that arrived inside it proves only that one party made both,
	// which was a real SAML defect in this repository: the verifier preferred the embedded certificate and authenticated an attacker as
	// an administrator while every test passed.
	TrustAnchorPath string `yaml:"trust_anchor_path"`

	// ClientName and Contacts go into the software statement at registration. The specification requires a mailto address so that the
	// other side has somebody to tell when an exchange starts failing.
	ClientName string   `yaml:"client_name"`
	Contacts   []string `yaml:"contacts"`

	// Scope is the space-delimited list requested at registration. System scopes, since this is machine to machine.
	Scope string `yaml:"scope"`

	// ClientID, once a server has assigned one. Empty means register on first use.
	ClientID string `yaml:"client_id,omitempty"`

	// AllowUnanchoredMetadata relaxes chain verification of the partner's signed metadata.
	//
	// For sandboxes whose community authority nobody would install. Never for production: with it on, any party can sign a metadata
	// document and be believed about where to send client assertions.
	AllowUnanchoredMetadata bool `yaml:"allow_unanchored_metadata,omitempty"`

	// PurposeCodes chooses the code system the purpose of use is sent in: empty or "tefca" for the TEFCA Exchange
	// Purpose codes the Facilitated FHIR SOP requires, "hl7" for the HL7 v3 PurposeOfUse codes a UDAP community outside
	// TEFCA (HL7 FAST SSRAA) expects. A partner refuses a token request in the system it does not use.
	PurposeCodes string `yaml:"purpose_codes,omitempty"`
}

type FHIRBundle struct {
	Raw []byte // JSON-encoded FHIR Bundle
}

type NotificationRequest struct {
	EventType string
	PatientID string
	Bundle    []byte

	// Purpose is why the disclosure is being made.
	//
	// Absent from the first version of this type, which made notification the one pattern that could disclose
	// without stating why. A notification is easy to think of as exempt: it carries no record and asks for nothing
	// back. But it tells everybody subscribed that a named patient had an event at a named organisation, and that
	// is a disclosure. TEFCA does not exempt it, and an audit entry with an empty purpose column is an audit entry
	// that answers no question anybody asks.
	Purpose string
}

type Participant struct {
	// contains filtered or unexported fields
}

type PersistentAuditLog struct {
	AuditLog
	// contains filtered or unexported fields
}

type QueryRequest struct {
	PatientID   string
	PatientName string
	DOB         string
	Gender      string
	Purpose     string
}

type QueryResponse struct {
	Records   []FHIRBundle
	SourceOrg string
	Timestamp time.Time
}

type RetrievalRequest struct {
	DocumentRef string
	PatientID   string
	Purpose     string
}

type RetrievalResponse struct {
	Document    []byte
	ContentType string
	SourceOrg   string
}

type TEFCAAudit struct {
	Timestamp     time.Time
	Direction     string // "inbound" or "outbound"
	Purpose       string
	PatientID     string
	RequestingOrg string
	RespondingOrg string
	ExchangeType  string // "query", "delivery", "retrieval", "notification"
	Success       bool
	ErrorDetail   string
}

type TEFCAConfig struct {
	// OrganizationName is the human-readable name of the participating organization.
	OrganizationName string

	// OrganizationOID is the OID assigned to the organization.
	OrganizationOID string

	// QHINEndpoint is the base URL of the Qualified Health Information Network.
	QHINEndpoint string

	// ParticipantType is one of: provider, payer, public_health.
	ParticipantType string

	// CertificatePath is the filesystem path to the mTLS certificate.
	CertificatePath string

	// KeyPath is the filesystem path to the mTLS private key.
	KeyPath string

	// SupportedPurposes lists the purposes of use this participant supports.
	SupportedPurposes []string
}