chore(release): 1.0.0 — legacy collector code deleted (plan 61 C1.d/e)

BREAKING:
- Deleted classes: Collector, CollectorClient, CollectorInvite (~1420 LOC).
- AppManagingAccount: removed createCollector/getCollectors/getCollectorById/
  getContacts; now a thin Application subclass.
- AppClientAccount: removed handleIncomingRequest/getCollectorClients/
  getContacts; now a thin Application subclass.
- Contact: removed sources/collectorClients/invites fields + their add*
  methods. Removed legacy getters (primaryCollectorClient, isPending,
  hasPendingUpdate, pendingUpdateClients, acceptPendingInvite,
  refusePendingInvite, formSections, chatStreams, chatPost, collectorSources,
  bridgeSources). Removed static groupByContact/sourceFromAccess.
- Contact.status / isActive / appStreamIds / allPermissions / accessIds /
  hasChat rewritten to derive from cmcRelationships (+ accessObjects for
  accessIds). hds-webapp's wrapper getters and ItemInputDialog's
  formSections consumer continue to work.
- interfaces.ts: removed ContactSource/ContactSourceType/ChatStreams +
  AccessUpdateRequest types. Permission/CollectorSectionInterface/
  RequestSectionType retained.
- itemLabels.collectItemLabels(itemKey, contacts) now walks
  cmcRelationships[].hdsFormSpec.sections (was CollectorClient.getSections).

KEPT:
- CollectorRequest (used by hds-forms-js FormBuilder UI per Path B).
- Contact.accessObjects (still populated by aggregateCmc; backs
  initStreamCache / eventIsAccessible / eventIsFromContact).

Tests: 499 passing. Deleted 5 legacy test suites (accessUpdate,
apptemplates, and the legacy parts of contact / applicationClass /
apptemplatesRequest). New CTDE getter tests for the rewritten Contact
derivations.

Live verified: doctor signin → sidebar lists FormSpecs → PatientsPage
reads form by id → existing invite still visible.

Consumers still on legacy: bridge-redcap (frozen on hds-lib#0fedc1d in
bridge-redcap@d5acb30).

Author: perki

CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## [1.0.0] - 2026-05-27
+
+### Plan 61 Phase C — legacy collector code deleted
+
+API surface frozen: no more `Collector` / `CollectorClient` / `CollectorInvite` classes, no `AppManagingAccount.createCollector` / `getCollectors` / `getCollectorById`, no `AppClientAccount.handleIncomingRequest` / `getCollectorClients` / `getContacts`, and `Contact` is CMC-only. The CMC path (`@pryv/cmc` + the `cmc*` helpers in this lib — `cmcFormSpec`, `cmcAppScope`, `cmcConstants`) is the only supported flow for doctor-side forms and patient-side relationships.
+
+`CollectorRequest` survives as a pure editor-state class consumed by `hds-forms-js`'s FormBuilder UI (locked via plan 61 Path B).
+
+### BREAKING
+
+- **Deleted classes:** `Collector`, `CollectorClient`, `CollectorInvite`.
+- **Deleted from `Contact`:** `sources`, `collectorClients`, `invites` fields + their `addSource`/`addCollectorClient`/`addInvite` methods. Deleted getters: `primaryCollectorClient`, `incomingCollectorClients`, `isPending`, `hasPendingUpdate`, `pendingUpdateClients`, `pendingCollectorClient`, `acceptPendingInvite`, `refusePendingInvite`, `formSections`, `chatStreams`, `chatPost`, `collectorSources`, `bridgeSources`. Deleted static methods: `Contact.groupByContact`, `Contact.sourceFromAccess`. The `accessObjects` field is kept (used by `initStreamCache` + `eventIsAccessible` + `eventIsFromContact`, populated by `Contact.aggregateCmc`).
+- **Rewritten `Contact` getters (CMC-only):** `status` (derived from `cmcRelationships[].acceptedAt`), `hasChat` (from `cmcRelationships[].features.chat`), `appStreamIds` (distinct `appCode` set), `allPermissions` (alias for `cmcAllPermissions`), `isActive`, `accessIds`.
+- **Deleted from `AppManagingAccount`:** `createCollector`, `createCollectorUnitialized`, `getCollectors`, `getCollectorById`, `getContacts`. Class is now a thin `Application` subclass.
+- **Deleted from `AppClientAccount`:** `handleIncomingRequest`, `getCollectorClientByKey`, `getCollectorClients`, `getContacts`. Class is now a thin `Application` subclass.
+- **Deleted from `interfaces.ts`:** `ContactSource`, `ContactSourceType`, `ChatStreams`, `AccessUpdateAction`, `AccessUpdateRequestContent`, `AccessUpdateRequest`. `Permission`, `RequestSectionType`, `CollectorSectionInterface` are kept.
+- **Deleted from `appTemplates` re-exports:** `Collector`, `CollectorClient`, `CollectorInvite`, `ContactInvite`, `AccessUpdateRequest*`.
+- **`collectItemLabels(itemKey, contacts)`** now walks `contact.cmcRelationships[].hdsFormSpec.sections` instead of legacy `CollectorClient.getSections()`.
+
+### Migration
+
+Callers can pin to `github:healthdatasafe/hds-lib-js#0fedc1d` (the last pre-1.0 commit) until ported to the CMC API. `bridge-redcap` is frozen on this pin pending its own port — see [`_macro/bridge-redcap/CLAUDE.md`](../../bridge-redcap/CLAUDE.md) for the port checklist.
+
+For the doctor-side form-storage migration, see `doctor-dashboard/app/formSpecAdapter.ts` (CollectorRequest ↔ FormSpec translators) and `doctor-dashboard/app/cmcDoctor.ts` (`saveFormSpec` / `listInviteRecordsFor` / etc.) for the reference port.
+
 ## [Unreleased]
 
 ## [0.11.0] - 2026-05-14

package.json

@@ -1,6 +1,6 @@
 {
   "name": "hds-lib",
-  "version": "0.12.2",
+  "version": "1.0.0",
   "description": "Health Data Safe - Library",
   "type": "module",
   "engines": {

tests/accessUpdate.test.js

@@ -1,7 +1,6 @@
 import { assert } from './test-utils/deps-node.js';
 import { createUserAndPermissions } from './test-utils/pryvService.js';
 import HDSLib from '../ts/index.ts';
-import { helperNewAppManaging } from './test-utils/helpersAppTemplate.js';
 const Application = HDSLib.appTemplates.Application;
 
 describe('[APAX] Application class', function () {
@@ -137,38 +136,6 @@ describe('[APAX] Application class', function () {
     });
   });
 
-  describe('[AMGX] AppManagingAccount tests', function () {
-    it('[AMGA] getCollectorById returns collector when exists', async () => {
-      const testBaseStreamId = 'amga-test';
-      const { appManaging } = await helperNewAppManaging(testBaseStreamId, 'test-AMGA');
-      const collector = await appManaging.createCollector('Test Collector AMGA');
-
-      const foundCollector = await appManaging.getCollectorById(collector.id);
-      assert.ok(foundCollector);
-      assert.equal(foundCollector.id, collector.id);
-    });
-
-    it('[AMGB] getCollectorById returns undefined when not exists', async () => {
-      const testBaseStreamId = 'amgb-test';
-      const { appManaging } = await helperNewAppManaging(testBaseStreamId, 'test-AMGB');
-
-      const foundCollector = await appManaging.getCollectorById('non-existent-id');
-      assert.equal(foundCollector, undefined);
-    });
-
-    it('[AMGC] getCollectors with forceRefresh reloads data', async () => {
-      const testBaseStreamId = 'amgc-test';
-      const { appManaging } = await helperNewAppManaging(testBaseStreamId, 'test-AMGC');
-
-      const collectors1 = await appManaging.getCollectors();
-      assert.equal(collectors1.length, 0);
-
-      await appManaging.createCollector('Test Collector AMGC');
-      const collectors2 = await appManaging.getCollectors(true);
-      assert.equal(collectors2.length, 1);
-    });
-  });
-
   describe('[ACSX] Application setCustomSetting tests', function () {
     it('[ACSA] setCustomSetting adds a key', async () => {
       class Dummy extends Application {