LevelUp.Health.IdentityGraph 0.1.0-preview.2

LevelUp.Health.IdentityGraph

The .NET twin of the cross-tier identity-graph contract for the LevelUp.Health backend (the asclepius P2 plane, A3 / DR-3). Schema-first lift of Ares' shared/identity contract, paired with the TS adapter @levelup/health-identity off the same single-source identity-graph.yaml.

The package ships three pieces off the single-source asclepius/identity/identity-graph.yaml:

• IdentityGraph.gen.cs (committed C# adapter, Task 002). Emitted by identity/scripts/generate.ts and committed under asclepius/identity/generated/; compile-linked into this project (not copied) so the YAML stays the single source and the CI golden check (Task 012) compares the committed file against a fresh emit. A disjoint scalar surface from the TS adapter: IdentityGraphColumns, IdentityGraphInvariants, IdentityMatchPolicy (namespace LevelUp.Health.IdentityGraph.Generated). It deliberately does not emit requiredRolesFor.
• RoleIdentityRequirements (hand-written, Task 004). The C# counterpart of TS requiredRolesFor, lifted domain-free: the clinical PersonLinkTarget coupling is dropped to plain FHIR resource-type strings. Mirrors the YAML roles: table — practitioner requires [Patient, Practitioner]; every other role falls back to the wildcard [Patient].
• IdentityPersonLinkResolver (lifted, Task 004). The real IIdentityPersonLinkResolver implementation (lifted from Ares' Aegis.Infrastructure.IdentityPersonLinkResolver), backed by IFhirContext<Person> doing Person?link=Type/id reverse-resolution, fail-safe — it never throws out of ResolveLinkingPersonIdAsync (any FHIR failure yields null so the caller falls back to the resource's own-id tag).

Fills A2's no-op seam (additively)

A2 shipped IIdentityPersonLinkResolver as a deliberate no-op (NoOpIdentityPersonLinkResolver). This package supplies the real implementation so a consuming app can register it to replace the no-op — without modifying any A2 package (LevelUp.Health.Fhir and the other three stay untouched). When registered, A2's FhirServiceCachingDecorator evicts the full identity:{personId} subgraph on identity-resource writes.

Register it with the supplied extension, which uses Replace so the swap is order-independent (works whether called before or after A2's AddFhirInfrastructure, whose no-op TryAdd would otherwise win):

services.AddFhirInfrastructure(configuration);
services.AddFhirResource<Hl7.Fhir.Model.Person>(); // the IFhirContext<Person> the resolver needs
services.AddIdentityPersonLinkResolver();          // swaps the no-op for the real resolver

Cross-language golden-equal (DR-9)

A characterization test (in the .NET lane) compares the C# consts against the committed TS adapter (identity-graph.gen.ts, read as a text fixture — no Node needed) on the genuinely shared scalar surface only: the matchPolicy values and the link columns. It does not assert agreement on requiredRolesFor (TS-only) or IdentityGraphColumns/Invariants (C#-only).

Build & pack

Inherits the repo-root props: net10.0, MinVer-versioned, SourceLink, Lvlup.Build warnings-as-errors. Packs cleanly (.nupkg + this README + .snupkg) via the existing keyless NuGet path (matches A2).