@izara_project/izara-core-generate-service-code 1.0.99 → 1.0.101

package/src/emit/application/custom/templates/s3/ProcessS3File_Main.ejs

@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2021 Sven Mason <http://izara.io>
+Copyright (C) 2026 Sven Mason <http://izara.io>
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as
@@ -8,42 +8,42 @@ License, or (at your option) any later version.
 
 This program is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
-MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 GNU Affero General Public License for more details.
 
 You should have received a copy of the GNU Affero General Public License
-along with this program.  If not, see <http://www.gnu.org/licenses/>.
+along with this program. If not, see <http://www.gnu.org/licenses/>.
 */
 
 import {
   S3Client,
   GetObjectCommand,
-  DeleteObjectCommand,
-  PutObjectCommand,
-  CopyObjectCommand
+  HeadObjectCommand
 } from '@aws-sdk/client-s3';
 const s3 = new S3Client({ region: process.env.AWS_REGION });
 
+import snsSharedLib from '@izara_project/izara-core-library-sns';
+import callingFlowSharedLib from '@izara_project/izara-core-library-calling-flow';
+import lambdaSharedLib from '@izara_project/izara-core-library-lambda';
+import { sns } from '@izara_project/izara-core-library-external-request';
+import { consts } from '@izara_project/izara-middleware';
+
 //(<optionalRequired>)
 //(</optionalRequired>)
 
 /**
- * description of function.
- * @param {Object} _izContext
- * @param {CorrelationIds} _izContext.correlationIds - property of _izContext
- * @param {Logger} _izContext.logger - property of _izContext
- * @param {Logger} _izContext.logger.debug - property of _izContext
- * @param {Object} bucket - bucket's data
- * @param {Array} field - image's data
- * @param {Array} importBy - 'webSocket' || 'importData'
- * @param {Array} imageImportId - from importData
- * @param {Array} realImageSize - from importData
- * @param {Array} passBackProperties - from importData
+ * Step 2: ProcessAfterUpload (Deferred-Node S3 Pipeline - ADR-016)
+ * Triggered by S3 ObjectCreated event. Inspects file, prepares entity payload,
+ * and publishes to Create_In SNS topic with callingFlow
+ * targeting ConfirmAfterUpload.
  *
- * @returns {object} returnResponse
+ * @param {Object} _izContext
+ * @param {Object} bucket - S3 bucket record
+ * @param {Object} field - S3 object record ({ key, size, eTag })
+ * @param {Object} passBackProperties
+ * @returns {Promise<Object>}
  */
-
-export default async function processAfterUpload(
+export default async function <%- functionName %>(
   _izContext,
   bucket,
   field,
@@ -52,18 +52,231 @@ export default async function processAfterUpload(
   passBackProperties = {}
 ) {
   try {
-    _izContext.logger.debug('----- process AfterUpload event params ----- ', {
-      bucket: bucket,
-      field: field,
-      //(<loggerAdditionalParams>)
-      //(</loggerAdditionalParams>)
-      passBackProperties: passBackProperties
+    _izContext.logger.info(
+      '----- <%- functionName %> started -----',
+      {
+        bucketName: bucket.name,
+        key: field.key,
+        size: field.size
+      }
+    );
+    _izContext.logger.debug('<%- functionName %> incoming parameters:', {
+      bucket,
+      field,
+      passBackProperties
+    });
+
+    const s3Key = field.key;
+    const actualByteSize = field.size;
+    const actualSizeMb = actualByteSize / (1024 * 1024);
+
+    _izContext.logger.debug('S3 file details:', {
+      s3Key,
+      actualByteSize,
+      actualSizeMb
     });
 
+    let s3Metadata = {};
+    try {
+      const headResult = await s3.send(
+        new HeadObjectCommand({
+          Bucket: bucket.name,
+          Key: s3Key
+        })
+      );
+
+      _izContext.logger.debug('HeadObjectCommand raw result:', headResult);
+      s3Metadata = headResult.Metadata || {};
+      _izContext.logger.info('Parsed S3 Metadata:', { s3Metadata });
+    } catch (headErr) {
+      _izContext.logger.warn(
+        'Could not retrieve S3 object metadata via HeadObjectCommand:',
+        {
+          bucket: bucket.name,
+          key: s3Key,
+          error: headErr.message
+        }
+      );
+    }
+
+    //(<extractIdentifiersFromKeyOrMetadata>)
+    const keyParts = s3Key.split('/');
+    let fileNameWithExt = '';
+    if (keyParts.length > 0) {
+      fileNameWithExt = keyParts[keyParts.length - 1];
+    }
+    const rawId = fileNameWithExt.split('.')[0];
+    let parentId = '';
+    if (keyParts.length > 2) {
+      parentId = keyParts[keyParts.length - 2];
+    }
+<% if (typeof parentIdKeys !== 'undefined' && parentIdKeys && parentIdKeys.length > 1) { -%>
+<%   for (let i = 1; i < parentIdKeys.length; i++) { -%>
+    let <%- parentIdKeys[i] %> = '';
+    if (keyParts.length > <%- 2 + i %>) {
+      <%- parentIdKeys[i] %> = keyParts[keyParts.length - <%- 2 + i %>];
+    }
+<%   } -%>
+<% } -%>
+    //(</extractIdentifiersFromKeyOrMetadata>)
+
     //(<endpointHook>)
     //(</endpointHook>)
+
+<% if (typeof nextStepFunctionName === 'string' && nextStepFunctionName) { -%>
+    const metaUserId = s3Metadata.submittedbyuserid || '';
+<% if (typeof flowRelationships !== 'undefined' && Array.isArray(flowRelationships) && flowRelationships.length > 0) { -%>
+<%   for (const rel of flowRelationships) { -%>
+<%     const targetIdKey = rel.targetIdentifierKey || `${rel.targetObjType.objectType}Id`; -%>
+<%     const metaKey = targetIdKey.toLowerCase(); -%>
+    const meta<%- targetIdKey.charAt(0).toUpperCase() + targetIdKey.slice(1) %> = s3Metadata.<%- metaKey %> || '';
+<%   } -%>
+<% } -%>
+
+    _izContext.logger.info('Extracted identifiers and metadata:', {
+      <%- objectType %>Id: rawId,
+      parentId,
+      submittedByUserId: metaUserId,
+<% if (typeof flowRelationships !== 'undefined' && Array.isArray(flowRelationships) && flowRelationships.length > 0) { -%>
+<%   for (const rel of flowRelationships) { -%>
+<%     const targetIdKey = rel.targetIdentifierKey || `${rel.targetObjType.objectType}Id`; -%>
+      <%- targetIdKey %>: meta<%- targetIdKey.charAt(0).toUpperCase() + targetIdKey.slice(1) %>,
+<%   } -%>
+<% } -%>
+      fileName: fileNameWithExt
+    });
+
+    if (metaUserId) {
+      _izContext.correlationIds?.set(consts.SUBMITTED_BY_USER_ID, metaUserId);
+    }
+
+    //(<relationshipsHook>)
+    let relationships = [];
+<% if (typeof flowRelationships !== 'undefined' && Array.isArray(flowRelationships) && flowRelationships.length > 0) { -%>
+<%   for (const rel of flowRelationships) { -%>
+<%     const targetIdKey = rel.targetIdentifierKey || `${rel.targetObjType.objectType}Id`; -%>
+<%     const targetObj = rel.targetObjType || {}; -%>
+<%     const relTypeObj = rel.relType || {}; -%>
+<%     const relDir = rel.relationshipDirection || 'to'; -%>
+<%     const varName = `meta${targetIdKey.charAt(0).toUpperCase() + targetIdKey.slice(1)}`; -%>
+    if (<%- varName %>) {
+      relationships.push({
+        targetObjType: {
+          objectType: '<%- targetObj.objectType %>',
+          serviceTag: '<%- targetObj.serviceTag %>'
+        },
+        targetIdentifiers: {
+          <%- targetIdKey %>: <%- varName %>
+        },
+        relType: {
+          relationshipTag: '<%- relTypeObj.relationshipTag %>',
+          serviceTag: '<%- relTypeObj.serviceTag %>'
+        },
+        relationshipProperties: <%- JSON.stringify(rel.relationshipProperties || {}) %>,
+        relationshipDirection: '<%- relDir %>'
+      });
+      _izContext.logger.info('Built relationship for <%- targetObj.objectType %>:', {
+        relationships
+      });
+    } else {
+      _izContext.logger.warn(
+        '<%- varName %> is empty! ' +
+          'No <%- relTypeObj.relationshipTag %> relationship attached.'
+      );
+    }
+<%   } -%>
+<% } -%>
+    //(</relationshipsHook>)
+
+    let messageObject = {
+      objectType: '<%- objectType %>',
+      submittedByUserId: metaUserId,
+      identifiers: {
+        <%- objectType %>Id: rawId
+      },
+<% if (typeof parentIdKeys !== 'undefined' && parentIdKeys && parentIdKeys.length > 1) { -%>
+      targetIdentifiers: {
+        <%- parentIdKeys[0] %>: parentId,
+<%   for (let i = 1; i < parentIdKeys.length; i++) { -%>
+        <%- parentIdKeys[i] %>: <%- parentIdKeys[i] %><%- i < parentIdKeys.length - 1 ? ',' : '' %>
+<%   } -%>
+      },
+<% } else if (typeof parentIdKey !== 'undefined' && parentIdKey) { -%>
+      targetIdentifiers: {
+        <%- parentIdKey %>: parentId
+      },
+<% } -%>
+      relationships,
+      fieldNames: {
+        //(<fieldNamesHook>)
+        //(</fieldNamesHook>)
+        fileName: fileNameWithExt
+      }
+    };
+
+    const confirmCallbackFunction =
+      await lambdaSharedLib.lambdaFunctionName(
+        _izContext,
+        '<%- nextStepFunctionName %>'
+      );
+    _izContext.logger.debug('Resolved confirm callback function:', {
+      confirmCallbackFunction
+    });
+
+    messageObject =
+      callingFlowSharedLib.addCallingFlowToSnsRequestMessageObject(
+        messageObject,
+        callingFlowSharedLib.addParentCallingFlowConfig(
+          passBackProperties,
+          callingFlowSharedLib.createCallingFlowConfig(
+            confirmCallbackFunction,
+            { rawId: rawId, <%- objectType %>Id: rawId }
+          )
+        )
+      );
+
+    const topicArn =
+      snsSharedLib.snsTopicArnByFlowSchema(_izContext, 'Create_In');
+
+    let sendMessageToCreateEndpoint = {
+      Message: JSON.stringify(messageObject),
+      TopicArn: topicArn
+    };
+
+    _izContext.logger.info('Publishing to Create_In SNS topic:', {
+      topicArn,
+      <%- objectType %>Id: rawId,
+      parentId<%- (typeof flowRelationships !== 'undefined' && Array.isArray(flowRelationships) && flowRelationships.length > 0) ? flowRelationships.map(r => { const k = r.targetIdentifierKey || `${r.targetObjType.objectType}Id`; return `,\n      ${k}: meta${k.charAt(0).toUpperCase() + k.slice(1)}`; }).join('') : '' %>
+    });
+    _izContext.logger.debug(
+      'Full Create_In message payload:',
+      sendMessageToCreateEndpoint
+    );
+
+    const publishResult = await sns.publishAsync(
+      _izContext,
+      sendMessageToCreateEndpoint
+    );
+    _izContext.logger.info('Successfully published to Create_In SNS:', {
+      publishResult,
+      s3Key,
+      <%- objectType %>Id: rawId
+    });
+
+    return {
+      status: 'dispatched',
+      s3Key,
+      messageObject
+    };
+<% } else { -%>
+    return {
+      status: 'processed',
+      s3Key
+    };
+<% } -%>
   } catch (err) {
-    _izContext.logger.error('error ProcessImageAfterUploadMain: ', err);
+    _izContext.logger.error('Error in <%- functionName %>: ', err);
     throw err;
   }
 }
+

package/src/emit/application/custom/templates/s3/Start_Main.ejs

@@ -0,0 +1,216 @@
+/*
+Copyright (C) 2026 Sven Mason <http://izara.io>
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as
+published by the Free Software Foundation, either version 3 of the
+License, or (at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+
+import { v7 as uuidv7 } from 'uuid';
+import { createPresignedPost } from '@aws-sdk/s3-presigned-post';
+import { S3Client } from '@aws-sdk/client-s3';
+import { consts } from '@izara_project/izara-middleware';
+import dynamodbSharedLib from '@izara_project/izara-core-library-dynamodb';
+import { webSocket } from '@izara_project/izara-core-library-external-request';
+const { postToConnection } = webSocket;
+import { utils } from '@izara_project/izara-core-library-service-schemas';
+const { createFlowTypeConcat } = utils;
+
+const client = new S3Client({ region: process.env.AWS_REGION });
+
+//(<optionalRequired>)
+//(</optionalRequired>)
+
+/**
+ * Step 1: Start (Deferred-Node S3 Pipeline - ADR-016)
+ * Generates UUIDv7, computes S3 Presigned POST in-memory, writes ephemeral WebSocketTask,
+ * and returns upload parameters to client without writing entity records to the database.
+ *
+ * @param {Object} _izContext
+ * @param {Object} requestParams
+ * @param {Object} callingFlowConfig
+ * @returns {Promise<Object>}
+ */
+export default async function <%- functionName %>(
+  _izContext,
+  requestParams,
+  callingFlowConfig = {}
+  //(<additionalParams>)
+  //(</additionalParams>)
+) {
+  try {
+    _izContext.logger.debug('<%- functionName %> started', {
+      requestParams,
+      callingFlowConfig
+    });
+
+    const connectionId = _izContext.correlationIds.get(consts.CONNECTION_ID);
+    const submittedByUserId = _izContext.correlationIds?.get(
+      consts.SUBMITTED_BY_USER_ID
+    );
+    if (!submittedByUserId) {
+      throw new Error('Submitted by user id is required');
+    }
+
+    //(<beforeCreateObjectHook>)
+    //(</beforeCreateObjectHook>)
+
+<% if (isRbac) { -%>
+    const { checkRbacPermission } =
+      await import('@izara_project/izara-authorization');
+
+    //(<rbacParameterGroups_<%- flowTag %>>)
+    const parameterGroups = {};
+    //(</rbacParameterGroups_<%- flowTag %>>)
+
+    const resultPermissionCheck = await checkRbacPermission(
+      _izContext,
+      {
+        flowTag: requestParams.flowTag || '<%- flowTag %>',
+        serviceTag: process.env.iz_serviceTag
+      },
+      parameterGroups,
+      {
+        targetIdentifiers: requestParams.targetIdentifiers,
+        rbacObjType: {
+          serviceTag: '<%- parentServiceTag || rbacServiceTag %>',
+          objectType: '<%- parentObjectType || objectType %>'
+        },
+        sync: true
+      }
+    );
+
+    _izContext.logger.debug(
+      `[${process.env.iz_serviceTag}:<%- flowTag %>] checkRbacPermission result:`,
+      resultPermissionCheck
+    );
+
+    if (resultPermissionCheck && resultPermissionCheck.permission !== true) {
+      throw new Error('Permission denied');
+    }
+<% } -%>
+
+    const <%- objectType %>Id = uuidv7();
+
+<% if (typeof parentIdKeys !== 'undefined' && parentIdKeys && parentIdKeys.length > 0) { -%>
+    const targetParentId = requestParams.targetIdentifiers?.<%- parentIdKeys[0] %>;
+<%   for (const key of parentIdKeys) { -%>
+    const target<%- key.charAt(0).toUpperCase() + key.slice(1) %> = requestParams.targetIdentifiers?.<%- key %>;
+    if (!target<%- key.charAt(0).toUpperCase() + key.slice(1) %>) {
+      throw new Error('targetIdentifiers.<%- key %> is required');
+    }
+<%   } -%>
+<% } -%>
+
+    let maxFileSizeMb = <%- maxFileSizeMb %>;
+    if (requestParams.file?.size) {
+      maxFileSizeMb = Math.ceil(requestParams.file.size / 1048576);
+    } else if (requestParams.file?.fileSize) {
+      maxFileSizeMb = requestParams.file.fileSize;
+    } else if (requestParams.fieldNames?.fileSize) {
+      maxFileSizeMb = requestParams.fieldNames.fileSize;
+    }
+
+    //(<createKeyForUploadFile>)
+    let importType = '<%- defaultImportType %>';
+    let uploadPath = '';
+<% if (typeof flowRelationships !== 'undefined' && Array.isArray(flowRelationships) && flowRelationships.length > 0) { -%>
+<%   for (const rel of flowRelationships) { -%>
+<%     const relIdKey = rel.targetIdentifierKey || `${rel.targetObjType.objectType}Id`; -%>
+    const <%- relIdKey %> =
+      requestParams.fieldNames?.<%- relIdKey %> || requestParams.file?.<%- relIdKey %>;
+<%   } -%>
+<% } -%>
+    //(</createKeyForUploadFile>)
+    const Key = `<%- s3KeyPrefix %>${uploadPath}`;
+    const maximumSize = maxFileSizeMb * 1048576;
+
+    let createPreSignUrlParam = {
+      Bucket: '<%- bucketName %>',
+      Key: Key,
+      Conditions: [
+        ['content-length-range', 0, maximumSize],
+        ['eq', '$x-amz-meta-<%- objectType %>Id', <%- objectType %>Id],
+<% if (typeof parentIdKeys !== 'undefined' && parentIdKeys && parentIdKeys.length > 0) { -%>
+<%   for (const key of parentIdKeys) { -%>
+        ['eq', '$x-amz-meta-<%- key %>', target<%- key.charAt(0).toUpperCase() + key.slice(1) %>],
+<%   } -%>
+<% } -%>
+        ['starts-with', '$x-amz-meta-submittedByUserId', ''],
+        ['starts-with', '$Content-Type', '<%- contentTypePrefix %>'],
+<% if (typeof flowRelationships !== 'undefined' && Array.isArray(flowRelationships) && flowRelationships.length > 0) { -%>
+<%   for (const rel of flowRelationships) { -%>
+<%     const relIdKey = rel.targetIdentifierKey || `${rel.targetObjType.objectType}Id`; -%>
+        ['starts-with', '$x-amz-meta-<%- relIdKey %>', ''],
+<%   } -%>
+<% } -%>
+        //(<conditionCreateUrlLink>)
+        //(</conditionCreateUrlLink>)
+      ],
+      Fields: {
+        'x-amz-meta-<%- objectType %>Id': <%- objectType %>Id,
+<% if (typeof parentIdKeys !== 'undefined' && parentIdKeys && parentIdKeys.length > 0) { -%>
+<%   for (const key of parentIdKeys) { -%>
+        'x-amz-meta-<%- key %>': target<%- key.charAt(0).toUpperCase() + key.slice(1) %>,
+<%   } -%>
+<% } -%>
+        'x-amz-meta-submittedByUserId': submittedByUserId,
+<% if (typeof flowRelationships !== 'undefined' && Array.isArray(flowRelationships) && flowRelationships.length > 0) { -%>
+<%   for (const rel of flowRelationships) { -%>
+<%     const relIdKey = rel.targetIdentifierKey || `${rel.targetObjType.objectType}Id`; -%>
+        'x-amz-meta-<%- relIdKey %>': <%- relIdKey %> || '',
+<%   } -%>
+<% } -%>
+        //(<fieldCreateUrlLink>)
+        //(</fieldCreateUrlLink>)
+      },
+      Expires: <%- expires %>
+    };
+
+    //(<modifyPreSignUrlParam>)
+    //(</modifyPreSignUrlParam>)
+
+    const uploadUrl = await createPresignedPost(client, createPreSignUrlParam);
+
+    if (connectionId) {
+      await dynamodbSharedLib.putItem(
+        _izContext,
+        await dynamodbSharedLib.tableName(_izContext, 'WebSocketTask'),
+        {
+          taskKey: `${createFlowTypeConcat(_izContext, { flowTag: '<%- flowTag %>', serviceTag: process.env.iz_serviceTag })}${<%- objectType %>Id}`,
+          connectionId: connectionId,
+          expirationTime: Math.floor(Date.now() / 1000) + 7200
+        }
+      );
+
+      await postToConnection(
+        _izContext,
+        {
+          status: 'success',
+          data: {
+            uploadUrl: uploadUrl,
+            <%- objectType %>Id: <%- objectType %>Id
+          }
+        },
+        connectionId
+      );
+    }
+
+    return {
+      uploadUrl: uploadUrl,
+      <%- objectType %>Id: <%- objectType %>Id
+    };
+  } catch (err) {
+    _izContext.logger.error('Error in <%- functionName %>:', err);
+    throw err;
+  }
+}

package/src/emit/application/rbac/emitDynamicRbacFlowSchemas.js

@@ -20,7 +20,7 @@ const RBAC_CORE_FLOW_DEFINITIONS = [
 const LIMIT_FLOW_DEFINITIONS = [
   {
     flowTag: 'ReservedDynamicUsage',
-    event: ['ownTopic', 'lambdaSyncInv', 'lambdaSyncApi']
+    event: ['lambdaSyncInv', 'lambdaSyncApi']
   },
   {
     flowTag: 'ConfirmUsage',
@@ -29,6 +29,10 @@ const LIMIT_FLOW_DEFINITIONS = [
   {
     flowTag: 'CancelUsage',
     event: ['ownTopic', 'lambdaSyncInv', 'lambdaSyncApi']
+  },
+  {
+    flowTag: 'ReservedUsageTtlExpired',
+    event: ['dss']
   }
 ];
 

package/src/emit/application/rbac/emitRbacApplicationArtifacts.js

@@ -174,14 +174,21 @@ const STATIC_RBAC_APPLICATION_PATHS = [
 ];
 
 const STATIC_LIMIT_APPLICATION_PATHS = [
-  ...ACCOUNT_LIMIT_HANDLERS.flatMap((flowTag) => [
-    `app/src/generatedCode/FlowLimit/${flowTag}/source/${flowTag}_Main.js`,
-    `app/src/generatedCode/FlowLimit/${flowTag}/source/${flowTag}_HdrSqs.js`,
-    `app/src/generatedCode/FlowLimit/${flowTag}/source/${flowTag}_HdrInv.js`,
-    `app/src/generatedCode/FlowLimit/${flowTag}/source/${flowTag}_HdrApi.js`,
-    `app/src/generatedCode/FlowLimit/${flowTag}/source/${flowTag}_WbsMain.js`,
-    `app/src/generatedCode/FlowLimit/${flowTag}/source/${flowTag}_HdrWbs.js`
-  ]),
+  ...ACCOUNT_LIMIT_HANDLERS.flatMap((flowTag) => {
+    const paths = [
+      `app/src/generatedCode/FlowLimit/${flowTag}/source/${flowTag}_Main.js`,
+      `app/src/generatedCode/FlowLimit/${flowTag}/source/${flowTag}_HdrInv.js`,
+      `app/src/generatedCode/FlowLimit/${flowTag}/source/${flowTag}_HdrApi.js`
+    ];
+    if (flowTag !== 'ReservedDynamicUsage') {
+      paths.splice(
+        1,
+        0,
+        `app/src/generatedCode/FlowLimit/${flowTag}/source/${flowTag}_HdrSqs.js`
+      );
+    }
+    return paths;
+  }),
   'app/src/generatedCode/FlowLimit/ReservedUsageTtlExpired/source/ReservedUsageTtlExpired_HdrDss.js',
   FLOW_LIMITS_YAML_PATH
 ];
@@ -212,65 +219,65 @@ export function rbacApplicationManagedPaths(objects = []) {
 async function createAccountLimitHandler(flowTag) {
   const sourcePath = `app/src/generatedCode/FlowLimit/${flowTag}/source`;
   const handlerPath = `src/generatedCode/FlowLimit/${flowTag}/source`;
-  const webSocket = await createWebSocketEntry(
-    flowTag,
-    sourcePath,
-    handlerPath
-  );
   const shared = {
     flowTag,
     flowStepName: '',
     mainFileName: `${flowTag}_Main`,
     functionName: flowTag
   };
+  const artifacts = [
+    {
+      path: `${sourcePath}/${flowTag}_Main.js`,
+      content: await renderRbacTemplate(`${flowTag}_Main.ejs`, { flowTag })
+    }
+  ];
+  const functions = [];
+  if (flowTag !== 'ReservedDynamicUsage') {
+    artifacts.push({
+      path: `${sourcePath}/${flowTag}_HdrSqs.js`,
+      content: await renderRbacTemplate('ListRbac_HdrSqs.ejs', { flowTag })
+    });
+    functions.push({
+      type: 'sqs',
+      functionName: `${flowTag}HdrSqs`,
+      handlerPath: `${handlerPath}/${flowTag}_HdrSqs.main`,
+      roleName: 'FlowRbacRole',
+      queueName: `${flowTag}HdrSqs`,
+      flowTag: flowTag,
+      flowStepName: ''
+    });
+  }
+  artifacts.push(
+    {
+      path: `${sourcePath}/${flowTag}_HdrInv.js`,
+      content: await renderSharedTemplate('FlowHandler_HdrInv.ejs', shared)
+    },
+    {
+      path: `${sourcePath}/${flowTag}_HdrApi.js`,
+      content: await renderSharedTemplate('FlowHandler_HdrApi.ejs', shared)
+    }
+  );
+  functions.push(
+    {
+      type: 'inv',
+      functionName: `${flowTag}HdrInv`,
+      handlerPath: `${handlerPath}/${flowTag}_HdrInv.main`,
+      roleName: 'FlowRbacRole',
+      flowTag: flowTag,
+      flowStepName: ''
+    },
+    {
+      type: 'api',
+      functionName: `${flowTag}HdrApi`,
+      handlerPath: `${handlerPath}/${flowTag}_HdrApi.main`,
+      roleName: 'FlowRbacRole',
+      flowTag: flowTag,
+      flowStepName: ''
+    }
+  );
   return {
-    artifacts: [
-      {
-        path: `${sourcePath}/${flowTag}_Main.js`,
-        content: await renderRbacTemplate(`${flowTag}_Main.ejs`, { flowTag })
-      },
-      {
-        path: `${sourcePath}/${flowTag}_HdrSqs.js`,
-        content: await renderRbacTemplate('ListRbac_HdrSqs.ejs', { flowTag })
-      },
-      {
-        path: `${sourcePath}/${flowTag}_HdrInv.js`,
-        content: await renderSharedTemplate('FlowHandler_HdrInv.ejs', shared)
-      },
-      {
-        path: `${sourcePath}/${flowTag}_HdrApi.js`,
-        content: await renderSharedTemplate('FlowHandler_HdrApi.ejs', shared)
-      },
-      ...webSocket.artifacts
-    ],
-    functions: [
-      {
-        type: 'sqs',
-        functionName: `${flowTag}HdrSqs`,
-        handlerPath: `${handlerPath}/${flowTag}_HdrSqs.main`,
-        roleName: 'FlowRbacRole',
-        queueName: `${flowTag}HdrSqs`,
-        flowTag: flowTag,
-        flowStepName: ''
-      },
-      {
-        type: 'inv',
-        functionName: `${flowTag}HdrInv`,
-        handlerPath: `${handlerPath}/${flowTag}_HdrInv.main`,
-        roleName: 'FlowRbacRole',
-        flowTag: flowTag,
-        flowStepName: ''
-      },
-      {
-        type: 'api',
-        functionName: `${flowTag}HdrApi`,
-        handlerPath: `${handlerPath}/${flowTag}_HdrApi.main`,
-        roleName: 'FlowRbacRole',
-        flowTag: flowTag,
-        flowStepName: ''
-      },
-      ...webSocket.functions
-    ]
+    artifacts,
+    functions
   };
 }