apiVersion: naftiko.dev/v1
kind: WorkflowCapability
metadata:
  name: pediatric-patient-access
  provider: childrens-hospital-of-philadelphia
  description: SMART-on-FHIR workflow that lets a pediatric patient (or their parent/guardian) authorize a third-party app to download their full clinical history from CHOP, in line with CMS-9115-F Patient Access requirements.
spec:
  trigger:
    type: oauth2
    authorizationUrl: https://epicnsproxy.chop.edu/fhir/oauth2/authorize
    tokenUrl: https://epicnsproxy.chop.edu/fhir/oauth2/token
    scopes:
      - launch/patient
      - patient/Patient.read
      - patient/AllergyIntolerance.read
      - patient/Condition.read
      - patient/Observation.read
      - patient/MedicationRequest.read
      - patient/Immunization.read
      - patient/Procedure.read
      - patient/Encounter.read
      - patient/DiagnosticReport.read
      - patient/DocumentReference.read
      - patient/Coverage.read
      - patient/ExplanationOfBenefit.read
      - patient/Claim.read
      - offline_access
  steps:
    - id: read-patient-demographics
      capability: chop.patient.read
    - id: pull-allergies
      capability: chop.allergy.search
    - id: pull-conditions
      capability: chop.condition.search
    - id: pull-observations
      capability: chop.observation.search
    - id: pull-medications
      capability: chop.medication.search
    - id: pull-immunizations
      capability: chop.immunization.search
    - id: pull-procedures
      capability: chop.procedure.search
    - id: pull-encounters
      capability: chop.encounter.search
    - id: pull-diagnostic-reports
      capability: chop.report.search
    - id: pull-documents
      capability: chop.document.search
    - id: pull-coverage
      capability: chop.coverage.search
    - id: pull-eob
      capability: chop.eob.search