Changelog

Added

• Bulk FHIR export endpoint (FHIR R4 §3.2.1.1) — export large patient cohorts as NDJSON.
• SMART on FHIR 2.0 launch sequence with PKCE for all app integrations.

Changed

• Minimum TLS version raised to 1.2 on all endpoints.
• Default SMART app token expiry reduced from 1 hour to 30 minutes.

Fixed

• Correct LastUpdated timestamps on Bundle search responses.
• OperationOutcome severity levels now match the FHIR R4 specification.

Fixed

• CapabilityStatement fhirVersion field now returns 4.0.1 (was incorrectly 4.0.0).
• $validate operation correctly rejects unsupported resource types with HTTP 422.

Added

• IAM: User, Role, RoleBinding, ServiceAccount, ApiKey resources with full CRUD.
• Audit log browser with 90-day retention and tamper-evident hash chaining.
• Security posture page with breach-detection rules and alert management.
• RBAC enforcement on all FHIR endpoints (replaces permissive Phase 1 mode).

Changed

• Session tokens now bind to IP address and user-agent fingerprint.

Fixed

• Pagination cursor encoding for large result sets (> 1,000 resources).

Added

• Bot resource: write TypeScript bots executed on FHIR resource events.
• Workflow canvas: visual drag-and-drop automation builder.
• Run history page with per-step execution logs and retry controls.

Changed

• Bot sandboxes now run in isolated V8 contexts with no network egress by default.

Fixed

• Cron-scheduled workflows no longer double-fire across DST transitions.

Added

• Connection templates for Epic FHIR R4, Cerner FHIR R4, and HL7v2 MLLP.
• Continuous MLLP listener with auto-ACK (HL7v2 ADT A01–A40).
• CSV upload connector with column validation and error reporting.

Changed

• ConnectionRun records now include per-message error detail arrays.

Fixed

• SFTP poller correctly handles servers with strict host key checking enabled.

Added

• Full Phase 2 clinical resource set: Encounter, Condition, AllergyIntolerance, MedicationRequest, Procedure, Immunization, DiagnosticReport.
• AI primitives: Workflow, MLModel, AIAgent, WorkflowExecution.
• Integration platform: Connection, ConnectionRun, ConnectionTemplate.
• Patient portal with SMART on FHIR app launch.

Breaking Changes

• Base URL changed from /fhir/v1 to /fhir/r4.
• Resource IDs are now UUIDs (were sequential integers in v1).
• /fhir/v1 endpoints deprecated; removal scheduled for February 1, 2026.

Added

• Questionnaire + QuestionnaireResponse resources (FHIR R4 native).
• Task resource with HIL validation workflow.
• Worklist and Dashboard resources for clinical UI composition.

Fixed

• Patient search by identifier now returns all matching resources.
• Bundle transaction rollback on validation failure.

Initial release

Phase 1 FHIR R4 resource set: Patient, Practitioner, Observation, Consent, Provenance.

Core platform features:

• FHIR R4 CRUD operations with JSON and XML support.
• SMART on FHIR app launch.
• Immutable audit trail.
• Role-based access control (basic).