Max-Health-Inc · proxy-smart-releaser · Aug 13, 2026 · Aug 13, 2026 · Aug 13, 2026 · Aug 13, 2026
diff --git a/backend/package.json b/backend/package.json
@@ -1,7 +1,7 @@
 {
   "name": "proxy-smart-backend",
   "displayName": "Proxy Smart Backend",
-  "version": "0.3.14-beta.202608131946.961ab42c4",
+  "version": "0.3.15-alpha.202608132031.ec7491a2e",
   "type": "module",
   "scripts": {
     "test": "bun test --isolate",

diff --git a/backend/src/lib/shl-scope.ts b/backend/src/lib/shl-scope.ts
@@ -196,6 +196,24 @@ interface FhirBundleLike {
   [key: string]: unknown
 }
 
+/**
+ * True only when NOTHING narrows the share.
+ *
+ * The recipient is told "complete summary — the patient shared their full health
+ * record" on the strength of this, so every dimension that narrows a share has to
+ * be counted here. It lives beside the scope rules rather than inline at the mint
+ * site because that is how it drifted: it knew about selective de-selection and
+ * not about study scoping, so a single-study link claimed to carry everything
+ * while the proxy answered almost every query with 403 — which the viewer drew as
+ * "no allergies, no medications, no conditions".
+ */
+export function isCompleteShare(narrowing: {
+  selectiveScope?: unknown
+  studyInstanceUID?: string
+}): boolean {
+  return !narrowing.selectiveScope && !narrowing.studyInstanceUID
+}
+
 /** True when the scope actually narrows anything (else all helpers are no-ops). */
 export function isSelectiveScopeActive(scope: SelectiveScope): boolean {
   return (

diff --git a/backend/src/routes/api/shl.ts b/backend/src/routes/api/shl.ts
@@ -34,6 +34,7 @@ import { shlSessionStore, type ShareScope, type ShlSession } from '@/lib/shl-ses
 import {
   isDicomPathAllowed,
   scopeFhirRequest,
+  isCompleteShare,
   isSelectiveScopeActive,
   preScreenSelectiveRequest,
   applySelectiveFilter,
@@ -449,7 +450,7 @@ export const shlRoutes = new Elysia({ prefix: '/shl', tags: ['shl'] })
         scope: 'patient/*.read',
         patient: patientId,
         aud: `${config.baseUrl}/api/shl/fhir`,
-        complete: !shareScope,
+        complete: isCompleteShare({ selectiveScope: shareScope, studyInstanceUID: body.studyInstanceUID }),
       })
 
       // Generate SHL using kill-the-clipboard

diff --git a/backend/test/shl-scope.test.ts b/backend/test/shl-scope.test.ts
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Max Health Inc.
+// SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Commercial
+
 /**
  * SHL Scope Enforcement — unit tests for the pure access-control decisions.
  *
@@ -10,6 +13,7 @@ import { describe, expect, it } from 'bun:test'
 import {
   isDicomPathAllowed,
   scopeFhirRequest,
+  isCompleteShare,
   isSelectiveScopeActive,
   preScreenSelectiveRequest,
   applySelectiveFilter,
@@ -286,3 +290,27 @@ describe('emptySearchBundle', () => {
     expect(emptySearchBundle()).toEqual({ resourceType: 'Bundle', type: 'searchset', total: 0, entry: [] })
   })
 })
+
+describe('isCompleteShare — what the recipient is told the link carries', () => {
+  it('is complete when nothing narrows the share', () => {
+    expect(isCompleteShare({})).toBe(true)
+    expect(isCompleteShare({ selectiveScope: undefined, studyInstanceUID: undefined })).toBe(true)
+  })
+
+  it('is NOT complete when the patient de-selected records', () => {
+    expect(isCompleteShare({ selectiveScope: { excludedTypes: ['Condition'] } })).toBe(false)
+  })
+
+  /**
+   * The regression: a study-scoped link reported `complete: true`, so the viewer
+   * showed "the patient shared their full health record" over a record whose every
+   * other query the proxy answers with 403.
+   */
+  it('is NOT complete when the share is scoped to a single imaging study', () => {
+    expect(isCompleteShare({ studyInstanceUID: STUDY })).toBe(false)
+  })
+
+  it('is NOT complete when both narrowings apply', () => {
+    expect(isCompleteShare({ selectiveScope: { excludedTypes: ['Condition'] }, studyInstanceUID: STUDY })).toBe(false)
+  })
+})
diff --git a/config/eslint/package.json b/config/eslint/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@proxy-smart/eslint-config",
-  "version": "0.3.14-beta.202608131924.cfdc0c7f7",
+  "version": "0.3.14-beta.202608131946.961ab42c4",
   "private": true,
   "type": "module",
   "exports": {

diff --git a/deploy/infra/package.json b/deploy/infra/package.json
@@ -2,7 +2,7 @@
   "name": "proxy-smart-infra",
   "displayName": "Proxy Smart Infrastructure",
   "description": "AWS CDK infrastructure for Proxy Smart production deployment",
-  "version": "0.3.14-beta.202608131946.961ab42c4",
+  "version": "0.3.15-alpha.202608132031.ec7491a2e",
   "private": true,
   "type": "module",
   "scripts": {

diff --git a/frontend/smart-dicom-template/package.json b/frontend/smart-dicom-template/package.json
@@ -3,7 +3,7 @@
   "displayName": "SMART DICOM Algorithm Template",
   "description": "Starter kit for building SMART on FHIR imaging algorithm apps. Clone, implement your algorithm in src/algorithm.ts, and deploy as a SMART app.",
   "private": true,
-  "version": "0.3.14-beta.202608131924.cfdc0c7f7",
+  "version": "0.3.14-beta.202608131946.961ab42c4",
   "type": "module",
   "scripts": {
     "dev": "vite --port 5180",

diff --git a/frontend/ui/package.json b/frontend/ui/package.json
@@ -3,7 +3,7 @@
   "displayName": "Proxy Smart Admin UI",
   "description": "A web-based administration interface for managing healthcare applications and resources via Proxy Smart.",
   "private": true,
-  "version": "0.3.14-beta.202608131924.cfdc0c7f7",
+  "version": "0.3.14-beta.202608131946.961ab42c4",
   "type": "module",
   "scripts": {
     "dev": "vite",

diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "proxy-smart",
-  "version": "0.3.14-beta.202608131946.961ab42c4",
+  "version": "0.3.15-alpha.202608132031.ec7491a2e",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Max-Health-Inc/proxy-smart.git"

diff --git a/packages/app-store/package.json b/packages/app-store/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@proxy-smart/app-store",
-  "version": "0.3.14-beta.202608131924.cfdc0c7f7",
+  "version": "0.3.14-beta.202608131946.961ab42c4",
   "private": false,
   "type": "module",
   "description": "SMART on FHIR app store — manifest discovery, visibility configuration, and registry CRUD. Framework-agnostic.",

diff --git a/packages/auth/package.json b/packages/auth/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@proxy-smart/auth",
-  "version": "0.3.14-beta.202608131924.cfdc0c7f7",
+  "version": "0.3.14-beta.202608131946.961ab42c4",
   "private": false,
   "type": "module",
   "description": "SMART on FHIR STU 2.2.0 server-side authorization proxy — launch context, session management, token enrichment. Framework-agnostic, IdP-pluggable.",

diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@proxy-smart/cli",
-  "version": "0.3.14-beta.202608131924.cfdc0c7f7",
+  "version": "0.3.14-beta.202608131946.961ab42c4",
   "private": false,
   "type": "module",
   "description": "Admin CLI for the proxy-smart SMART on FHIR authorization proxy. Authenticates via Keycloak OAuth (device flow or client_credentials) and drives the admin REST API.",

diff --git a/packages/elysia-mcp/package.json b/packages/elysia-mcp/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@max-health-inc/elysia-mcp",
-  "version": "0.3.14-beta.202608131924.cfdc0c7f7",
+  "version": "0.3.14-beta.202608131946.961ab42c4",
   "private": false,
   "type": "module",
   "description": "Auto-generate MCP tools and resources from Elysia routes via introspection. TypeBox-to-Standard-Schema bridge, Streamable HTTP transport, session management.",

diff --git a/packages/patient-picker/package.json b/packages/patient-picker/package.json
@@ -3,7 +3,7 @@
   "displayName": "Proxy Smart Patient Picker",
   "description": "Patient selection UI shown during SMART standalone launch when patient context is needed.",
   "private": true,
-  "version": "0.3.14-beta.202608131924.cfdc0c7f7",
+  "version": "0.3.14-beta.202608131946.961ab42c4",
   "type": "module",
   "scripts": {
     "dev": "vite --port 5176",

diff --git a/scripts/package.json b/scripts/package.json
@@ -1,6 +1,6 @@
 {
   "name": "proxy-smart-scripts",
-  "version": "0.3.14-beta.202608131946.961ab42c4",
+  "version": "0.3.15-alpha.202608132031.ec7491a2e",
   "description": "CI/CD and development scripts for Proxy Smart",
   "private": true,
   "type": "module",

diff --git a/testing/e2e/package.json b/testing/e2e/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@proxy-smart/e2e",
-  "version": "0.3.14-beta.202608131924.cfdc0c7f7",
+  "version": "0.3.14-beta.202608131946.961ab42c4",
   "private": true,
   "description": "End-to-end Playwright tests for Proxy Smart apps",
   "scripts": {