fix(sql): update care team member count and enhance demo data seeding

- Adjusted the expected count of active care team members in the `verify-demo-data.sh` script from 4 to 5 to reflect recent changes in demo data.
- Added a new entry for an ACL smoke user in the `seed-demo-data.sql` file, ensuring proper seeding of healthcare professional roles for testing purposes.
- Improved comments in the SQL file for better clarity on the purpose of the new entry.

Author: MichaelHabermas

agent-forge/scripts/verify-demo-data.sh

@@ -364,7 +364,7 @@ main() {
     expect_count \
         "alex care team active members" \
         "SELECT COUNT(*) FROM care_team_member ctm INNER JOIN care_teams ct ON ct.id = ctm.care_team_id WHERE ct.pid = ${DEMO_PID} AND ctm.status = 'active';" \
-        "4"
+        "5"
 
     expect_count \
         "alex primary insurance row" \

agent-forge/sql/seed-demo-data.sql

@@ -1494,6 +1494,18 @@ INSERT INTO care_team_member (
     'Care coordinator for referrals and prior auth.',
     1,
     1
+),
+(
+    @alex_care_team_id,
+    @af_clin_smoke_user_id,
+    NULL,
+    'healthcare_professional',
+    3,
+    '2025-12-01',
+    'active',
+    'AgentForge clinician smoke user (non-admin chart access for Co-Pilot QA).',
+    1,
+    1
 );
 
 INSERT INTO openemr_postcalendar_events (

src/AgentForge/Auth/SqlPatientAccessRepository.php

@@ -3,6 +3,11 @@
 /**
  * SQL-backed patient relationship lookups for AgentForge authorization.
  *
+ * A user is treated as having a direct chart relationship when any of:
+ * - the patient lists them as primary provider (`patient_data.providerID`);
+ * - an encounter lists them as rendering or supervising provider;
+ * - they are an active member of an active care team for the patient.
+ *
  * @package   OpenEMR
  * @link      https://www.open-emr.org
  * @license   https://github.com/openemr/openemr/blob/master/LICENSE GNU General Public License 3
@@ -44,6 +49,17 @@ public function userHasDirectRelationship(PatientId $patientId, int $userId): bo
             [$patientId->value, $userId, $userId],
         );
 
-        return $encounterPid !== null;
+        if ($encounterPid !== null) {
+            return true;
+        }
+
+        $careTeamMemberId = QueryUtils::fetchSingleValue(
+            'SELECT ctm.id FROM care_team_member AS ctm INNER JOIN care_teams AS ct ON ct.id = ctm.care_team_id' .
+            ' WHERE ct.pid = ? AND ctm.user_id = ? AND ct.status = ? AND ctm.status = ? LIMIT 1',
+            'id',
+            [$patientId->value, $userId, 'active', 'active'],
+        );
+
+        return $careTeamMemberId !== null;
     }
 }