@openhi/constructs 0.0.0

package/lib/components/dynamodb/dynamo-db-data-store.d.ts

@@ -0,0 +1,33 @@
+import { RemovalPolicy } from "aws-cdk-lib";
+import { ITable, Table, TableProps } from "aws-cdk-lib/aws-dynamodb";
+import { Construct } from "constructs";
+/**
+ * DynamoDB table name for the data store. Used for cross-stack reference and
+ * deterministic naming per branch. The table backs multiple use cases (e.g.
+ * CRM, CMS, ERP, EHR).
+ */
+export declare function getDynamoDbDataStoreTableName(scope: Construct): string;
+export interface DynamoDbDataStoreProps extends Omit<TableProps, "tableName" | "removalPolicy"> {
+    /**
+     * Optional removal policy override. If not set, uses the service's default
+     * removal policy (RETAIN for prod, DESTROY otherwise).
+     */
+    readonly removalPolicy?: RemovalPolicy;
+}
+/**
+ * DynamoDB table implementing the single-table design for app data (e.g. FHIR
+ * resources, CRM, CMS, ERP, EHR).
+ *
+ * @see {@link https://github.com/codedrifters/openhi/blob/main/sites/www-docs/content/architecture/dynamodb-single-table-design.md | DynamoDB Single-Table Design}
+ *
+ * Primary key: PK (String), SK (String).
+ * GSIs: GSI1 (reverse reference), GSI2 (identifier lookup), GSI3 (facility ops), GSI4 (resource type list).
+ */
+export declare class DynamoDbDataStore extends Table {
+    /**
+     * Import the data store table by name for use in another stack (e.g. data
+     * service or Lambda). Uses the same naming as {@link getDynamoDbDataStoreTableName}.
+     */
+    static fromConstruct(scope: Construct, id?: string): ITable;
+    constructor(scope: Construct, id: string, props?: DynamoDbDataStoreProps);
+}

package/lib/components/dynamodb/dynamo-db-data-store.js

@@ -0,0 +1,107 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DynamoDbDataStore = void 0;
+exports.getDynamoDbDataStoreTableName = getDynamoDbDataStoreTableName;
+const aws_dynamodb_1 = require("aws-cdk-lib/aws-dynamodb");
+const app_1 = require("../../app");
+/**
+ * DynamoDB table name for the data store. Used for cross-stack reference and
+ * deterministic naming per branch. The table backs multiple use cases (e.g.
+ * CRM, CMS, ERP, EHR).
+ */
+function getDynamoDbDataStoreTableName(scope) {
+    const stack = app_1.OpenHiService.of(scope);
+    return `data-store-${stack.branchHash}`;
+}
+/**
+ * DynamoDB table implementing the single-table design for app data (e.g. FHIR
+ * resources, CRM, CMS, ERP, EHR).
+ *
+ * @see {@link https://github.com/codedrifters/openhi/blob/main/sites/www-docs/content/architecture/dynamodb-single-table-design.md | DynamoDB Single-Table Design}
+ *
+ * Primary key: PK (String), SK (String).
+ * GSIs: GSI1 (reverse reference), GSI2 (identifier lookup), GSI3 (facility ops), GSI4 (resource type list).
+ */
+class DynamoDbDataStore extends aws_dynamodb_1.Table {
+    /**
+     * Import the data store table by name for use in another stack (e.g. data
+     * service or Lambda). Uses the same naming as {@link getDynamoDbDataStoreTableName}.
+     */
+    static fromConstruct(scope, id = "dynamo-db-data-store") {
+        return aws_dynamodb_1.Table.fromTableName(scope, id, getDynamoDbDataStoreTableName(scope));
+    }
+    constructor(scope, id, props = {}) {
+        const service = app_1.OpenHiService.of(scope);
+        super(scope, id, {
+            ...props,
+            tableName: getDynamoDbDataStoreTableName(scope),
+            partitionKey: {
+                name: "PK",
+                type: aws_dynamodb_1.AttributeType.STRING,
+            },
+            sortKey: {
+                name: "SK",
+                type: aws_dynamodb_1.AttributeType.STRING,
+            },
+            billingMode: aws_dynamodb_1.BillingMode.PAY_PER_REQUEST,
+            removalPolicy: props.removalPolicy ?? service.removalPolicy,
+        });
+        // GSI1 — Reverse Reference Index: "what references X?"
+        this.addGlobalSecondaryIndex({
+            indexName: "GSI1",
+            partitionKey: {
+                name: "GSI1PK",
+                type: aws_dynamodb_1.AttributeType.STRING,
+            },
+            sortKey: {
+                name: "GSI1SK",
+                type: aws_dynamodb_1.AttributeType.STRING,
+            },
+            projectionType: aws_dynamodb_1.ProjectionType.INCLUDE,
+            nonKeyAttributes: ["srcType", "srcId", "path", "srcPk", "srcSk", "ts"],
+        });
+        // GSI2 — Identifier Lookup Index: MRN, NPI, member ID, etc.
+        this.addGlobalSecondaryIndex({
+            indexName: "GSI2",
+            partitionKey: {
+                name: "GSI2PK",
+                type: aws_dynamodb_1.AttributeType.STRING,
+            },
+            sortKey: {
+                name: "GSI2SK",
+                type: aws_dynamodb_1.AttributeType.STRING,
+            },
+            projectionType: aws_dynamodb_1.ProjectionType.INCLUDE,
+            nonKeyAttributes: ["resourcePk", "resourceSk", "display", "status"],
+        });
+        // GSI3 — Facility Ops Index: worklists, rosters, schedules
+        this.addGlobalSecondaryIndex({
+            indexName: "GSI3",
+            partitionKey: {
+                name: "GSI3PK",
+                type: aws_dynamodb_1.AttributeType.STRING,
+            },
+            sortKey: {
+                name: "GSI3SK",
+                type: aws_dynamodb_1.AttributeType.STRING,
+            },
+            projectionType: aws_dynamodb_1.ProjectionType.INCLUDE,
+            nonKeyAttributes: ["resourcePk", "resourceSk"],
+        });
+        // GSI4 — Resource Type Index: list all resources of a type in workspace (no scan)
+        this.addGlobalSecondaryIndex({
+            indexName: "GSI4",
+            partitionKey: {
+                name: "GSI4PK",
+                type: aws_dynamodb_1.AttributeType.STRING,
+            },
+            sortKey: {
+                name: "GSI4SK",
+                type: aws_dynamodb_1.AttributeType.STRING,
+            },
+            projectionType: aws_dynamodb_1.ProjectionType.ALL,
+        });
+    }
+}
+exports.DynamoDbDataStore = DynamoDbDataStore;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZHluYW1vLWRiLWRhdGEtc3RvcmUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvY29tcG9uZW50cy9keW5hbW9kYi9keW5hbW8tZGItZGF0YS1zdG9yZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFpQkEsc0VBR0M7QUFuQkQsMkRBT2tDO0FBRWxDLG1DQUEwQztBQUUxQzs7OztHQUlHO0FBQ0gsU0FBZ0IsNkJBQTZCLENBQUMsS0FBZ0I7SUFDNUQsTUFBTSxLQUFLLEdBQUcsbUJBQWEsQ0FBQyxFQUFFLENBQUMsS0FBSyxDQUFrQixDQUFDO0lBQ3ZELE9BQU8sY0FBYyxLQUFLLENBQUMsVUFBVSxFQUFFLENBQUM7QUFDMUMsQ0FBQztBQWFEOzs7Ozs7OztHQVFHO0FBQ0gsTUFBYSxpQkFBa0IsU0FBUSxvQkFBSztJQUMxQzs7O09BR0c7SUFDSSxNQUFNLENBQUMsYUFBYSxDQUN6QixLQUFnQixFQUNoQixFQUFFLEdBQUcsc0JBQXNCO1FBRTNCLE9BQU8sb0JBQUssQ0FBQyxhQUFhLENBQUMsS0FBSyxFQUFFLEVBQUUsRUFBRSw2QkFBNkIsQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUFDO0lBQzlFLENBQUM7SUFFRCxZQUNFLEtBQWdCLEVBQ2hCLEVBQVUsRUFDVixRQUFnQyxFQUFFO1FBRWxDLE1BQU0sT0FBTyxHQUFHLG1CQUFhLENBQUMsRUFBRSxDQUFDLEtBQUssQ0FBa0IsQ0FBQztRQUV6RCxLQUFLLENBQUMsS0FBSyxFQUFFLEVBQUUsRUFBRTtZQUNmLEdBQUcsS0FBSztZQUNSLFNBQVMsRUFBRSw2QkFBNkIsQ0FBQyxLQUFLLENBQUM7WUFDL0MsWUFBWSxFQUFFO2dCQUNaLElBQUksRUFBRSxJQUFJO2dCQUNWLElBQUksRUFBRSw0QkFBYSxDQUFDLE1BQU07YUFDM0I7WUFDRCxPQUFPLEVBQUU7Z0JBQ1AsSUFBSSxFQUFFLElBQUk7Z0JBQ1YsSUFBSSxFQUFFLDRCQUFhLENBQUMsTUFBTTthQUMzQjtZQUNELFdBQVcsRUFBRSwwQkFBVyxDQUFDLGVBQWU7WUFDeEMsYUFBYSxFQUFFLEtBQUssQ0FBQyxhQUFhLElBQUksT0FBTyxDQUFDLGFBQWE7U0FDNUQsQ0FBQyxDQUFDO1FBRUgsdURBQXVEO1FBQ3ZELElBQUksQ0FBQyx1QkFBdUIsQ0FBQztZQUMzQixTQUFTLEVBQUUsTUFBTTtZQUNqQixZQUFZLEVBQUU7Z0JBQ1osSUFBSSxFQUFFLFFBQVE7Z0JBQ2QsSUFBSSxFQUFFLDRCQUFhLENBQUMsTUFBTTthQUMzQjtZQUNELE9BQU8sRUFBRTtnQkFDUCxJQUFJLEVBQUUsUUFBUTtnQkFDZCxJQUFJLEVBQUUsNEJBQWEsQ0FBQyxNQUFNO2FBQzNCO1lBQ0QsY0FBYyxFQUFFLDZCQUFjLENBQUMsT0FBTztZQUN0QyxnQkFBZ0IsRUFBRSxDQUFDLFNBQVMsRUFBRSxPQUFPLEVBQUUsTUFBTSxFQUFFLE9BQU8sRUFBRSxPQUFPLEVBQUUsSUFBSSxDQUFDO1NBQ3ZFLENBQUMsQ0FBQztRQUVILDREQUE0RDtRQUM1RCxJQUFJLENBQUMsdUJBQXVCLENBQUM7WUFDM0IsU0FBUyxFQUFFLE1BQU07WUFDakIsWUFBWSxFQUFFO2dCQUNaLElBQUksRUFBRSxRQUFRO2dCQUNkLElBQUksRUFBRSw0QkFBYSxDQUFDLE1BQU07YUFDM0I7WUFDRCxPQUFPLEVBQUU7Z0JBQ1AsSUFBSSxFQUFFLFFBQVE7Z0JBQ2QsSUFBSSxFQUFFLDRCQUFhLENBQUMsTUFBTTthQUMzQjtZQUNELGNBQWMsRUFBRSw2QkFBYyxDQUFDLE9BQU87WUFDdEMsZ0JBQWdCLEVBQUUsQ0FBQyxZQUFZLEVBQUUsWUFBWSxFQUFFLFNBQVMsRUFBRSxRQUFRLENBQUM7U0FDcEUsQ0FBQyxDQUFDO1FBRUgsMkRBQTJEO1FBQzNELElBQUksQ0FBQyx1QkFBdUIsQ0FBQztZQUMzQixTQUFTLEVBQUUsTUFBTTtZQUNqQixZQUFZLEVBQUU7Z0JBQ1osSUFBSSxFQUFFLFFBQVE7Z0JBQ2QsSUFBSSxFQUFFLDRCQUFhLENBQUMsTUFBTTthQUMzQjtZQUNELE9BQU8sRUFBRTtnQkFDUCxJQUFJLEVBQUUsUUFBUTtnQkFDZCxJQUFJLEVBQUUsNEJBQWEsQ0FBQyxNQUFNO2FBQzNCO1lBQ0QsY0FBYyxFQUFFLDZCQUFjLENBQUMsT0FBTztZQUN0QyxnQkFBZ0IsRUFBRSxDQUFDLFlBQVksRUFBRSxZQUFZLENBQUM7U0FDL0MsQ0FBQyxDQUFDO1FBRUgsa0ZBQWtGO1FBQ2xGLElBQUksQ0FBQyx1QkFBdUIsQ0FBQztZQUMzQixTQUFTLEVBQUUsTUFBTTtZQUNqQixZQUFZLEVBQUU7Z0JBQ1osSUFBSSxFQUFFLFFBQVE7Z0JBQ2QsSUFBSSxFQUFFLDRCQUFhLENBQUMsTUFBTTthQUMzQjtZQUNELE9BQU8sRUFBRTtnQkFDUCxJQUFJLEVBQUUsUUFBUTtnQkFDZCxJQUFJLEVBQUUsNEJBQWEsQ0FBQyxNQUFNO2FBQzNCO1lBQ0QsY0FBYyxFQUFFLDZCQUFjLENBQUMsR0FBRztTQUNuQyxDQUFDLENBQUM7SUFDTCxDQUFDO0NBQ0Y7QUE3RkQsOENBNkZDIiwic291cmNlc0NvbnRlbnQiOlsiaW1wb3J0IHsgUmVtb3ZhbFBvbGljeSB9IGZyb20gXCJhd3MtY2RrLWxpYlwiO1xuaW1wb3J0IHtcbiAgQXR0cmlidXRlVHlwZSxcbiAgQmlsbGluZ01vZGUsXG4gIElUYWJsZSxcbiAgUHJvamVjdGlvblR5cGUsXG4gIFRhYmxlLFxuICBUYWJsZVByb3BzLFxufSBmcm9tIFwiYXdzLWNkay1saWIvYXdzLWR5bmFtb2RiXCI7XG5pbXBvcnQgeyBDb25zdHJ1Y3QgfSBmcm9tIFwiY29uc3RydWN0c1wiO1xuaW1wb3J0IHsgT3BlbkhpU2VydmljZSB9IGZyb20gXCIuLi8uLi9hcHBcIjtcblxuLyoqXG4gKiBEeW5hbW9EQiB0YWJsZSBuYW1lIGZvciB0aGUgZGF0YSBzdG9yZS4gVXNlZCBmb3IgY3Jvc3Mtc3RhY2sgcmVmZXJlbmNlIGFuZFxuICogZGV0ZXJtaW5pc3RpYyBuYW1pbmcgcGVyIGJyYW5jaC4gVGhlIHRhYmxlIGJhY2tzIG11bHRpcGxlIHVzZSBjYXNlcyAoZS5nLlxuICogQ1JNLCBDTVMsIEVSUCwgRUhSKS5cbiAqL1xuZXhwb3J0IGZ1bmN0aW9uIGdldER5bmFtb0RiRGF0YVN0b3JlVGFibGVOYW1lKHNjb3BlOiBDb25zdHJ1Y3QpOiBzdHJpbmcge1xuICBjb25zdCBzdGFjayA9IE9wZW5IaVNlcnZpY2Uub2Yoc2NvcGUpIGFzIE9wZW5IaVNlcnZpY2U7XG4gIHJldHVybiBgZGF0YS1zdG9yZS0ke3N0YWNrLmJyYW5jaEhhc2h9YDtcbn1cblxuZXhwb3J0IGludGVyZmFjZSBEeW5hbW9EYkRhdGFTdG9yZVByb3BzIGV4dGVuZHMgT21pdDxcbiAgVGFibGVQcm9wcyxcbiAgXCJ0YWJsZU5hbWVcIiB8IFwicmVtb3ZhbFBvbGljeVwiXG4+IHtcbiAgLyoqXG4gICAqIE9wdGlvbmFsIHJlbW92YWwgcG9saWN5IG92ZXJyaWRlLiBJZiBub3Qgc2V0LCB1c2VzIHRoZSBzZXJ2aWNlJ3MgZGVmYXVsdFxuICAgKiByZW1vdmFsIHBvbGljeSAoUkVUQUlOIGZvciBwcm9kLCBERVNUUk9ZIG90aGVyd2lzZSkuXG4gICAqL1xuICByZWFkb25seSByZW1vdmFsUG9saWN5PzogUmVtb3ZhbFBvbGljeTtcbn1cblxuLyoqXG4gKiBEeW5hbW9EQiB0YWJsZSBpbXBsZW1lbnRpbmcgdGhlIHNpbmdsZS10YWJsZSBkZXNpZ24gZm9yIGFwcCBkYXRhIChlLmcuIEZISVJcbiAqIHJlc291cmNlcywgQ1JNLCBDTVMsIEVSUCwgRUhSKS5cbiAqXG4gKiBAc2VlIHtAbGluayBodHRwczovL2dpdGh1Yi5jb20vY29kZWRyaWZ0ZXJzL29wZW5oaS9ibG9iL21haW4vc2l0ZXMvd3d3LWRvY3MvY29udGVudC9hcmNoaXRlY3R1cmUvZHluYW1vZGItc2luZ2xlLXRhYmxlLWRlc2lnbi5tZCB8IER5bmFtb0RCIFNpbmdsZS1UYWJsZSBEZXNpZ259XG4gKlxuICogUHJpbWFyeSBrZXk6IFBLIChTdHJpbmcpLCBTSyAoU3RyaW5nKS5cbiAqIEdTSXM6IEdTSTEgKHJldmVyc2UgcmVmZXJlbmNlKSwgR1NJMiAoaWRlbnRpZmllciBsb29rdXApLCBHU0kzIChmYWNpbGl0eSBvcHMpLCBHU0k0IChyZXNvdXJjZSB0eXBlIGxpc3QpLlxuICovXG5leHBvcnQgY2xhc3MgRHluYW1vRGJEYXRhU3RvcmUgZXh0ZW5kcyBUYWJsZSB7XG4gIC8qKlxuICAgKiBJbXBvcnQgdGhlIGRhdGEgc3RvcmUgdGFibGUgYnkgbmFtZSBmb3IgdXNlIGluIGFub3RoZXIgc3RhY2sgKGUuZy4gZGF0YVxuICAgKiBzZXJ2aWNlIG9yIExhbWJkYSkuIFVzZXMgdGhlIHNhbWUgbmFtaW5nIGFzIHtAbGluayBnZXREeW5hbW9EYkRhdGFTdG9yZVRhYmxlTmFtZX0uXG4gICAqL1xuICBwdWJsaWMgc3RhdGljIGZyb21Db25zdHJ1Y3QoXG4gICAgc2NvcGU6IENvbnN0cnVjdCxcbiAgICBpZCA9IFwiZHluYW1vLWRiLWRhdGEtc3RvcmVcIixcbiAgKTogSVRhYmxlIHtcbiAgICByZXR1cm4gVGFibGUuZnJvbVRhYmxlTmFtZShzY29wZSwgaWQsIGdldER5bmFtb0RiRGF0YVN0b3JlVGFibGVOYW1lKHNjb3BlKSk7XG4gIH1cblxuICBjb25zdHJ1Y3RvcihcbiAgICBzY29wZTogQ29uc3RydWN0LFxuICAgIGlkOiBzdHJpbmcsXG4gICAgcHJvcHM6IER5bmFtb0RiRGF0YVN0b3JlUHJvcHMgPSB7fSxcbiAgKSB7XG4gICAgY29uc3Qgc2VydmljZSA9IE9wZW5IaVNlcnZpY2Uub2Yoc2NvcGUpIGFzIE9wZW5IaVNlcnZpY2U7XG5cbiAgICBzdXBlcihzY29wZSwgaWQsIHtcbiAgICAgIC4uLnByb3BzLFxuICAgICAgdGFibGVOYW1lOiBnZXREeW5hbW9EYkRhdGFTdG9yZVRhYmxlTmFtZShzY29wZSksXG4gICAgICBwYXJ0aXRpb25LZXk6IHtcbiAgICAgICAgbmFtZTogXCJQS1wiLFxuICAgICAgICB0eXBlOiBBdHRyaWJ1dGVUeXBlLlNUUklORyxcbiAgICAgIH0sXG4gICAgICBzb3J0S2V5OiB7XG4gICAgICAgIG5hbWU6IFwiU0tcIixcbiAgICAgICAgdHlwZTogQXR0cmlidXRlVHlwZS5TVFJJTkcsXG4gICAgICB9LFxuICAgICAgYmlsbGluZ01vZGU6IEJpbGxpbmdNb2RlLlBBWV9QRVJfUkVRVUVTVCxcbiAgICAgIHJlbW92YWxQb2xpY3k6IHByb3BzLnJlbW92YWxQb2xpY3kgPz8gc2VydmljZS5yZW1vdmFsUG9saWN5LFxuICAgIH0pO1xuXG4gICAgLy8gR1NJMSDigJQgUmV2ZXJzZSBSZWZlcmVuY2UgSW5kZXg6IFwid2hhdCByZWZlcmVuY2VzIFg/XCJcbiAgICB0aGlzLmFkZEdsb2JhbFNlY29uZGFyeUluZGV4KHtcbiAgICAgIGluZGV4TmFtZTogXCJHU0kxXCIsXG4gICAgICBwYXJ0aXRpb25LZXk6IHtcbiAgICAgICAgbmFtZTogXCJHU0kxUEtcIixcbiAgICAgICAgdHlwZTogQXR0cmlidXRlVHlwZS5TVFJJTkcsXG4gICAgICB9LFxuICAgICAgc29ydEtleToge1xuICAgICAgICBuYW1lOiBcIkdTSTFTS1wiLFxuICAgICAgICB0eXBlOiBBdHRyaWJ1dGVUeXBlLlNUUklORyxcbiAgICAgIH0sXG4gICAgICBwcm9qZWN0aW9uVHlwZTogUHJvamVjdGlvblR5cGUuSU5DTFVERSxcbiAgICAgIG5vbktleUF0dHJpYnV0ZXM6IFtcInNyY1R5cGVcIiwgXCJzcmNJZFwiLCBcInBhdGhcIiwgXCJzcmNQa1wiLCBcInNyY1NrXCIsIFwidHNcIl0sXG4gICAgfSk7XG5cbiAgICAvLyBHU0kyIOKAlCBJZGVudGlmaWVyIExvb2t1cCBJbmRleDogTVJOLCBOUEksIG1lbWJlciBJRCwgZXRjLlxuICAgIHRoaXMuYWRkR2xvYmFsU2Vjb25kYXJ5SW5kZXgoe1xuICAgICAgaW5kZXhOYW1lOiBcIkdTSTJcIixcbiAgICAgIHBhcnRpdGlvbktleToge1xuICAgICAgICBuYW1lOiBcIkdTSTJQS1wiLFxuICAgICAgICB0eXBlOiBBdHRyaWJ1dGVUeXBlLlNUUklORyxcbiAgICAgIH0sXG4gICAgICBzb3J0S2V5OiB7XG4gICAgICAgIG5hbWU6IFwiR1NJMlNLXCIsXG4gICAgICAgIHR5cGU6IEF0dHJpYnV0ZVR5cGUuU1RSSU5HLFxuICAgICAgfSxcbiAgICAgIHByb2plY3Rpb25UeXBlOiBQcm9qZWN0aW9uVHlwZS5JTkNMVURFLFxuICAgICAgbm9uS2V5QXR0cmlidXRlczogW1wicmVzb3VyY2VQa1wiLCBcInJlc291cmNlU2tcIiwgXCJkaXNwbGF5XCIsIFwic3RhdHVzXCJdLFxuICAgIH0pO1xuXG4gICAgLy8gR1NJMyDigJQgRmFjaWxpdHkgT3BzIEluZGV4OiB3b3JrbGlzdHMsIHJvc3RlcnMsIHNjaGVkdWxlc1xuICAgIHRoaXMuYWRkR2xvYmFsU2Vjb25kYXJ5SW5kZXgoe1xuICAgICAgaW5kZXhOYW1lOiBcIkdTSTNcIixcbiAgICAgIHBhcnRpdGlvbktleToge1xuICAgICAgICBuYW1lOiBcIkdTSTNQS1wiLFxuICAgICAgICB0eXBlOiBBdHRyaWJ1dGVUeXBlLlNUUklORyxcbiAgICAgIH0sXG4gICAgICBzb3J0S2V5OiB7XG4gICAgICAgIG5hbWU6IFwiR1NJM1NLXCIsXG4gICAgICAgIHR5cGU6IEF0dHJpYnV0ZVR5cGUuU1RSSU5HLFxuICAgICAgfSxcbiAgICAgIHByb2plY3Rpb25UeXBlOiBQcm9qZWN0aW9uVHlwZS5JTkNMVURFLFxuICAgICAgbm9uS2V5QXR0cmlidXRlczogW1wicmVzb3VyY2VQa1wiLCBcInJlc291cmNlU2tcIl0sXG4gICAgfSk7XG5cbiAgICAvLyBHU0k0IOKAlCBSZXNvdXJjZSBUeXBlIEluZGV4OiBsaXN0IGFsbCByZXNvdXJjZXMgb2YgYSB0eXBlIGluIHdvcmtzcGFjZSAobm8gc2NhbilcbiAgICB0aGlzLmFkZEdsb2JhbFNlY29uZGFyeUluZGV4KHtcbiAgICAgIGluZGV4TmFtZTogXCJHU0k0XCIsXG4gICAgICBwYXJ0aXRpb25LZXk6IHtcbiAgICAgICAgbmFtZTogXCJHU0k0UEtcIixcbiAgICAgICAgdHlwZTogQXR0cmlidXRlVHlwZS5TVFJJTkcsXG4gICAgICB9LFxuICAgICAgc29ydEtleToge1xuICAgICAgICBuYW1lOiBcIkdTSTRTS1wiLFxuICAgICAgICB0eXBlOiBBdHRyaWJ1dGVUeXBlLlNUUklORyxcbiAgICAgIH0sXG4gICAgICBwcm9qZWN0aW9uVHlwZTogUHJvamVjdGlvblR5cGUuQUxMLFxuICAgIH0pO1xuICB9XG59XG4iXX0=

package/lib/components/event-bridge/data-event-bus.d.ts

@@ -0,0 +1,19 @@
+import { EventBus, EventBusProps, IEventBus } from "aws-cdk-lib/aws-events";
+import { Construct } from "constructs";
+export declare class DataEventBus extends EventBus {
+    /*****************************************************************************
+     *
+     * Return a name for this EventBus based on the stack environment hash. This
+     * name is common across all stacks since it's using the environment hash in
+     * it's name.
+     *
+     ****************************************************************************/
+    static getEventBusName(scope: Construct): string;
+    /*****************************************************************************
+     *
+     * Return imported data event bus for use in any stack.
+     *
+     ****************************************************************************/
+    static fromConstruct(scope: Construct): IEventBus;
+    constructor(scope: Construct, props?: EventBusProps);
+}

package/lib/components/event-bridge/data-event-bus.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DataEventBus = void 0;
+const aws_events_1 = require("aws-cdk-lib/aws-events");
+const app_1 = require("../../app");
+class DataEventBus extends aws_events_1.EventBus {
+    /*****************************************************************************
+     *
+     * Return a name for this EventBus based on the stack environment hash. This
+     * name is common across all stacks since it's using the environment hash in
+     * it's name.
+     *
+     ****************************************************************************/
+    static getEventBusName(scope) {
+        const stack = app_1.OpenHiService.of(scope);
+        return `data${stack.branchHash}`;
+    }
+    /*****************************************************************************
+     *
+     * Return imported data event bus for use in any stack.
+     *
+     ****************************************************************************/
+    static fromConstruct(scope) {
+        return aws_events_1.EventBus.fromEventBusName(scope, "data-event-bus", DataEventBus.getEventBusName(scope));
+    }
+    constructor(scope, props) {
+        super(scope, "data-event-bus", {
+            ...props,
+            eventBusName: DataEventBus.getEventBusName(scope),
+        });
+    }
+}
+exports.DataEventBus = DataEventBus;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/components/event-bridge/ops-event-bus.d.ts

@@ -0,0 +1,19 @@
+import { EventBus, EventBusProps, IEventBus } from "aws-cdk-lib/aws-events";
+import { Construct } from "constructs";
+export declare class OpsEventBus extends EventBus {
+    /*****************************************************************************
+     *
+     * Return a name for this EventBus based on the stack environment hash. This
+     * name is common across all stacks since it's using the environment hash in
+     * it's name.
+     *
+     ****************************************************************************/
+    static getEventBusName(scope: Construct): string;
+    /*****************************************************************************
+     *
+     * Return imported ops event bus for use in any stack.
+     *
+     ****************************************************************************/
+    static fromConstruct(scope: Construct): IEventBus;
+    constructor(scope: Construct, props?: EventBusProps);
+}

package/lib/components/event-bridge/ops-event-bus.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpsEventBus = void 0;
+const aws_events_1 = require("aws-cdk-lib/aws-events");
+const app_1 = require("../../app");
+class OpsEventBus extends aws_events_1.EventBus {
+    /*****************************************************************************
+     *
+     * Return a name for this EventBus based on the stack environment hash. This
+     * name is common across all stacks since it's using the environment hash in
+     * it's name.
+     *
+     ****************************************************************************/
+    static getEventBusName(scope) {
+        const stack = app_1.OpenHiService.of(scope);
+        return `ops${stack.branchHash}`;
+    }
+    /*****************************************************************************
+     *
+     * Return imported ops event bus for use in any stack.
+     *
+     ****************************************************************************/
+    static fromConstruct(scope) {
+        return aws_events_1.EventBus.fromEventBusName(scope, "ops-event-bus", OpsEventBus.getEventBusName(scope));
+    }
+    constructor(scope, props) {
+        super(scope, "ops-event-bus", {
+            ...props,
+            eventBusName: OpsEventBus.getEventBusName(scope),
+        });
+    }
+}
+exports.OpsEventBus = OpsEventBus;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/components/global.d.ts

@@ -0,0 +1,36 @@
+import { ICertificate } from "aws-cdk-lib/aws-certificatemanager";
+import { HostedZoneAttributes, IHostedZone } from "aws-cdk-lib/aws-route53";
+import { Construct } from "constructs";
+import { SetOptional } from "type-fest";
+export interface GlobalProps {
+    /**
+     * Root zone configuration attributes. Zone name is required, hosted zone ID
+     * is optional.
+     */
+    readonly rootHostedZoneAttributes: HostedZoneAttributes;
+    /**
+     * Child zone configuration attributes. Zone name is required, hosted zone ID
+     * is optional.
+     */
+    readonly childHostedZoneAttributes?: SetOptional<HostedZoneAttributes, "hostedZoneId">;
+}
+/**
+ * Global construct: owns global infrastructure (e.g. DNS and certificate resources).
+
+ */
+export declare class Global extends Construct {
+    props: GlobalProps;
+    /**
+     * Root hosted zone when config provides zoneName.
+     */
+    readonly rootHostedZone: IHostedZone;
+    /**
+     * Child hosted zone when root zone exists.
+     */
+    readonly childHostedZone?: IHostedZone;
+    /**
+     * Root wildcard certificate.
+     */
+    readonly rootWildcardCertificate: ICertificate;
+    constructor(scope: Construct, id: string, props: GlobalProps);
+}

package/lib/components/global.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Global = void 0;
+const aws_certificatemanager_1 = require("aws-cdk-lib/aws-certificatemanager");
+const constructs_1 = require("constructs");
+const app_1 = require("../app");
+const root_wildcard_certificate_1 = require("./acm/root-wildcard-certificate");
+const child_hosted_zone_1 = require("./route-53/child-hosted-zone");
+const root_hosted_zone_1 = require("./route-53/root-hosted-zone");
+/**
+ * Global construct: owns global infrastructure (e.g. DNS and certificate resources).
+
+ */
+class Global extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        this.props = props;
+        /**
+         * Deconstruct props into individual variables.
+         */
+        const { rootHostedZoneAttributes, childHostedZoneAttributes } = props;
+        const service = app_1.OpenHiService.of(this);
+        /***************************************************************************
+         *
+         * Root Zone
+         *
+         * This always is configured manually. Never created by CDK.
+         *
+         **************************************************************************/
+        this.rootHostedZone = root_hosted_zone_1.RootHostedZone.fromConstruct(this, rootHostedZoneAttributes);
+        /***************************************************************************
+         *
+         * Child Zone
+         *
+         **************************************************************************/
+        if (childHostedZoneAttributes) {
+            this.childHostedZone = new child_hosted_zone_1.ChildHostedZone(this, "child-zone", {
+                parentHostedZone: this.rootHostedZone,
+                zoneName: childHostedZoneAttributes.zoneName,
+            });
+        }
+        /***************************************************************************
+         *
+         * Root WildCard Certificate
+         *
+         * Crated in main, used in all other environments via SSM import.
+         *
+         **************************************************************************/
+        if (service.branchName === "main") {
+            this.rootWildcardCertificate = new root_wildcard_certificate_1.RootWildcardCertificate(this, {
+                domainName: `*.${this.rootHostedZone.zoneName}`,
+                subjectAlternativeNames: [this.rootHostedZone.zoneName],
+                validation: aws_certificatemanager_1.CertificateValidation.fromDns(this.rootHostedZone),
+            });
+        }
+        else {
+            this.rootWildcardCertificate =
+                root_wildcard_certificate_1.RootWildcardCertificate.fromConstruct(this);
+        }
+    }
+}
+exports.Global = Global;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/components/index.d.ts

@@ -0,0 +1 @@
+export * from "./ssm";

package/lib/components/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./ssm"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY29tcG9uZW50cy9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7O0FBQUEsd0NBQXNCIiwic291cmNlc0NvbnRlbnQiOlsiZXhwb3J0ICogZnJvbSBcIi4vc3NtXCI7XG4iXX0=

package/lib/components/route-53/child-hosted-zone.d.ts

@@ -0,0 +1,20 @@
+import { HostedZone, HostedZoneProps, IHostedZone } from "aws-cdk-lib/aws-route53";
+import { Construct } from "constructs";
+import { OpenHiServiceType } from "../../app/open-hi-service";
+export interface ChildHostedZoneProps extends HostedZoneProps {
+    /**
+     * The root zone we will attach this sub-zone to.
+     */
+    readonly parentHostedZone: IHostedZone;
+}
+export declare class ChildHostedZone extends HostedZone {
+    /**
+     * Used when storing the API ID in SSM.
+     */
+    static readonly SSM_PARAM_NAME = "CHILDHOSTEDZONE";
+    static fromConstruct(scope: Construct, props: {
+        zoneName: string;
+        serviceType?: OpenHiServiceType;
+    }): IHostedZone;
+    constructor(scope: Construct, id: string, props: ChildHostedZoneProps);
+}

package/lib/components/route-53/child-hosted-zone.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChildHostedZone = void 0;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_route53_1 = require("aws-cdk-lib/aws-route53");
+const open_hi_service_1 = require("../../app/open-hi-service");
+const ssm_1 = require("../ssm");
+class ChildHostedZone extends aws_route53_1.HostedZone {
+    static fromConstruct(scope, props) {
+        /**
+         * Assume it was created in the global stack if no service type was submitted
+         */
+        const hostedZoneId = ssm_1.DiscoverableStringParameter.valueForLookupName(scope, {
+            ssmParamName: ChildHostedZone.SSM_PARAM_NAME,
+            serviceType: props.serviceType ?? open_hi_service_1.OPEN_HI_SERVICE_TYPE.GLOBAL,
+        });
+        return aws_route53_1.HostedZone.fromHostedZoneAttributes(scope, "child-zone", {
+            hostedZoneId,
+            zoneName: props.zoneName,
+        });
+    }
+    constructor(scope, id, props) {
+        super(scope, id, { ...props });
+        /**
+         * Chain the child zone to the parent zone using NS record.
+         */
+        new aws_route53_1.NsRecord(this, "child-ns-record", {
+            zone: props.parentHostedZone,
+            recordName: this.zoneName,
+            values: this.hostedZoneNameServers || [],
+            ttl: aws_cdk_lib_1.Duration.minutes(5),
+        });
+        /**
+         * Generate the SSM Parameter used to store this zone's ID.
+         */
+        new ssm_1.DiscoverableStringParameter(this, "child-zone-param", {
+            ssmParamName: ChildHostedZone.SSM_PARAM_NAME,
+            stringValue: this.hostedZoneId,
+            description: "Route53 child hosted zone ID.",
+        });
+    }
+}
+exports.ChildHostedZone = ChildHostedZone;
+/**
+ * Used when storing the API ID in SSM.
+ */
+ChildHostedZone.SSM_PARAM_NAME = "CHILDHOSTEDZONE";
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2hpbGQtaG9zdGVkLXpvbmUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvY29tcG9uZW50cy9yb3V0ZS01My9jaGlsZC1ob3N0ZWQtem9uZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSw2Q0FBdUM7QUFDdkMseURBS2lDO0FBRWpDLCtEQUdtQztBQUNuQyxnQ0FBcUQ7QUFTckQsTUFBYSxlQUFnQixTQUFRLHdCQUFVO0lBTXRDLE1BQU0sQ0FBQyxhQUFhLENBQ3pCLEtBQWdCLEVBQ2hCLEtBQTREO1FBRTVEOztXQUVHO1FBQ0gsTUFBTSxZQUFZLEdBQUcsaUNBQTJCLENBQUMsa0JBQWtCLENBQUMsS0FBSyxFQUFFO1lBQ3pFLFlBQVksRUFBRSxlQUFlLENBQUMsY0FBYztZQUM1QyxXQUFXLEVBQUUsS0FBSyxDQUFDLFdBQVcsSUFBSSxzQ0FBb0IsQ0FBQyxNQUFNO1NBQzlELENBQUMsQ0FBQztRQUVILE9BQU8sd0JBQVUsQ0FBQyx3QkFBd0IsQ0FBQyxLQUFLLEVBQUUsWUFBWSxFQUFFO1lBQzlELFlBQVk7WUFDWixRQUFRLEVBQUUsS0FBSyxDQUFDLFFBQVE7U0FDekIsQ0FBQyxDQUFDO0lBQ0wsQ0FBQztJQUVELFlBQVksS0FBZ0IsRUFBRSxFQUFVLEVBQUUsS0FBMkI7UUFDbkUsS0FBSyxDQUFDLEtBQUssRUFBRSxFQUFFLEVBQUUsRUFBRSxHQUFHLEtBQUssRUFBRSxDQUFDLENBQUM7UUFFL0I7O1dBRUc7UUFDSCxJQUFJLHNCQUFRLENBQUMsSUFBSSxFQUFFLGlCQUFpQixFQUFFO1lBQ3BDLElBQUksRUFBRSxLQUFLLENBQUMsZ0JBQWdCO1lBQzVCLFVBQVUsRUFBRSxJQUFJLENBQUMsUUFBUTtZQUN6QixNQUFNLEVBQUUsSUFBSSxDQUFDLHFCQUFxQixJQUFJLEVBQUU7WUFDeEMsR0FBRyxFQUFFLHNCQUFRLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQztTQUN6QixDQUFDLENBQUM7UUFFSDs7V0FFRztRQUNILElBQUksaUNBQTJCLENBQUMsSUFBSSxFQUFFLGtCQUFrQixFQUFFO1lBQ3hELFlBQVksRUFBRSxlQUFlLENBQUMsY0FBYztZQUM1QyxXQUFXLEVBQUUsSUFBSSxDQUFDLFlBQVk7WUFDOUIsV0FBVyxFQUFFLCtCQUErQjtTQUM3QyxDQUFDLENBQUM7SUFDTCxDQUFDOztBQTdDSCwwQ0E4Q0M7QUE3Q0M7O0dBRUc7QUFDb0IsOEJBQWMsR0FBRyxpQkFBaUIsQ0FBQyIsInNvdXJjZXNDb250ZW50IjpbImltcG9ydCB7IER1cmF0aW9uIH0gZnJvbSBcImF3cy1jZGstbGliXCI7XG5pbXBvcnQge1xuICBIb3N0ZWRab25lLFxuICBIb3N0ZWRab25lUHJvcHMsXG4gIElIb3N0ZWRab25lLFxuICBOc1JlY29yZCxcbn0gZnJvbSBcImF3cy1jZGstbGliL2F3cy1yb3V0ZTUzXCI7XG5pbXBvcnQgeyBDb25zdHJ1Y3QgfSBmcm9tIFwiY29uc3RydWN0c1wiO1xuaW1wb3J0IHtcbiAgT1BFTl9ISV9TRVJWSUNFX1RZUEUsXG4gIE9wZW5IaVNlcnZpY2VUeXBlLFxufSBmcm9tIFwiLi4vLi4vYXBwL29wZW4taGktc2VydmljZVwiO1xuaW1wb3J0IHsgRGlzY292ZXJhYmxlU3RyaW5nUGFyYW1ldGVyIH0gZnJvbSBcIi4uL3NzbVwiO1xuXG5leHBvcnQgaW50ZXJmYWNlIENoaWxkSG9zdGVkWm9uZVByb3BzIGV4dGVuZHMgSG9zdGVkWm9uZVByb3BzIHtcbiAgLyoqXG4gICAqIFRoZSByb290IHpvbmUgd2Ugd2lsbCBhdHRhY2ggdGhpcyBzdWItem9uZSB0by5cbiAgICovXG4gIHJlYWRvbmx5IHBhcmVudEhvc3RlZFpvbmU6IElIb3N0ZWRab25lO1xufVxuXG5leHBvcnQgY2xhc3MgQ2hpbGRIb3N0ZWRab25lIGV4dGVuZHMgSG9zdGVkWm9uZSB7XG4gIC8qKlxuICAgKiBVc2VkIHdoZW4gc3RvcmluZyB0aGUgQVBJIElEIGluIFNTTS5cbiAgICovXG4gIHB1YmxpYyBzdGF0aWMgcmVhZG9ubHkgU1NNX1BBUkFNX05BTUUgPSBcIkNISUxESE9TVEVEWk9ORVwiO1xuXG4gIHB1YmxpYyBzdGF0aWMgZnJvbUNvbnN0cnVjdChcbiAgICBzY29wZTogQ29uc3RydWN0LFxuICAgIHByb3BzOiB7IHpvbmVOYW1lOiBzdHJpbmc7IHNlcnZpY2VUeXBlPzogT3BlbkhpU2VydmljZVR5cGUgfSxcbiAgKTogSUhvc3RlZFpvbmUge1xuICAgIC8qKlxuICAgICAqIEFzc3VtZSBpdCB3YXMgY3JlYXRlZCBpbiB0aGUgZ2xvYmFsIHN0YWNrIGlmIG5vIHNlcnZpY2UgdHlwZSB3YXMgc3VibWl0dGVkXG4gICAgICovXG4gICAgY29uc3QgaG9zdGVkWm9uZUlkID0gRGlzY292ZXJhYmxlU3RyaW5nUGFyYW1ldGVyLnZhbHVlRm9yTG9va3VwTmFtZShzY29wZSwge1xuICAgICAgc3NtUGFyYW1OYW1lOiBDaGlsZEhvc3RlZFpvbmUuU1NNX1BBUkFNX05BTUUsXG4gICAgICBzZXJ2aWNlVHlwZTogcHJvcHMuc2VydmljZVR5cGUgPz8gT1BFTl9ISV9TRVJWSUNFX1RZUEUuR0xPQkFMLFxuICAgIH0pO1xuXG4gICAgcmV0dXJuIEhvc3RlZFpvbmUuZnJvbUhvc3RlZFpvbmVBdHRyaWJ1dGVzKHNjb3BlLCBcImNoaWxkLXpvbmVcIiwge1xuICAgICAgaG9zdGVkWm9uZUlkLFxuICAgICAgem9uZU5hbWU6IHByb3BzLnpvbmVOYW1lLFxuICAgIH0pO1xuICB9XG5cbiAgY29uc3RydWN0b3Ioc2NvcGU6IENvbnN0cnVjdCwgaWQ6IHN0cmluZywgcHJvcHM6IENoaWxkSG9zdGVkWm9uZVByb3BzKSB7XG4gICAgc3VwZXIoc2NvcGUsIGlkLCB7IC4uLnByb3BzIH0pO1xuXG4gICAgLyoqXG4gICAgICogQ2hhaW4gdGhlIGNoaWxkIHpvbmUgdG8gdGhlIHBhcmVudCB6b25lIHVzaW5nIE5TIHJlY29yZC5cbiAgICAgKi9cbiAgICBuZXcgTnNSZWNvcmQodGhpcywgXCJjaGlsZC1ucy1yZWNvcmRcIiwge1xuICAgICAgem9uZTogcHJvcHMucGFyZW50SG9zdGVkWm9uZSxcbiAgICAgIHJlY29yZE5hbWU6IHRoaXMuem9uZU5hbWUsXG4gICAgICB2YWx1ZXM6IHRoaXMuaG9zdGVkWm9uZU5hbWVTZXJ2ZXJzIHx8IFtdLFxuICAgICAgdHRsOiBEdXJhdGlvbi5taW51dGVzKDUpLFxuICAgIH0pO1xuXG4gICAgLyoqXG4gICAgICogR2VuZXJhdGUgdGhlIFNTTSBQYXJhbWV0ZXIgdXNlZCB0byBzdG9yZSB0aGlzIHpvbmUncyBJRC5cbiAgICAgKi9cbiAgICBuZXcgRGlzY292ZXJhYmxlU3RyaW5nUGFyYW1ldGVyKHRoaXMsIFwiY2hpbGQtem9uZS1wYXJhbVwiLCB7XG4gICAgICBzc21QYXJhbU5hbWU6IENoaWxkSG9zdGVkWm9uZS5TU01fUEFSQU1fTkFNRSxcbiAgICAgIHN0cmluZ1ZhbHVlOiB0aGlzLmhvc3RlZFpvbmVJZCxcbiAgICAgIGRlc2NyaXB0aW9uOiBcIlJvdXRlNTMgY2hpbGQgaG9zdGVkIHpvbmUgSUQuXCIsXG4gICAgfSk7XG4gIH1cbn1cbiJdfQ==

package/lib/components/route-53/root-hosted-zone.d.ts

@@ -0,0 +1,10 @@
+import { HostedZoneAttributes, IHostedZone } from "aws-cdk-lib/aws-route53";
+import { Construct } from "constructs";
+/**
+ * This will always return a root hosted zone based on attributes. It will
+ * never create the root zone since the root zone should always be created
+ * manually.
+ */
+export declare class RootHostedZone extends Construct {
+    static fromConstruct(scope: Construct, props: HostedZoneAttributes): IHostedZone;
+}

package/lib/components/route-53/root-hosted-zone.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RootHostedZone = void 0;
+const aws_route53_1 = require("aws-cdk-lib/aws-route53");
+const constructs_1 = require("constructs");
+/**
+ * This will always return a root hosted zone based on attributes. It will
+ * never create the root zone since the root zone should always be created
+ * manually.
+ */
+class RootHostedZone extends constructs_1.Construct {
+    static fromConstruct(scope, props) {
+        return aws_route53_1.HostedZone.fromHostedZoneAttributes(scope, "root-zone", {
+            hostedZoneId: props.hostedZoneId,
+            zoneName: props.zoneName,
+        });
+    }
+}
+exports.RootHostedZone = RootHostedZone;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm9vdC1ob3N0ZWQtem9uZS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9jb21wb25lbnRzL3JvdXRlLTUzL3Jvb3QtaG9zdGVkLXpvbmUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEseURBSWlDO0FBQ2pDLDJDQUF1QztBQUV2Qzs7OztHQUlHO0FBQ0gsTUFBYSxjQUFlLFNBQVEsc0JBQVM7SUFDcEMsTUFBTSxDQUFDLGFBQWEsQ0FDekIsS0FBZ0IsRUFDaEIsS0FBMkI7UUFFM0IsT0FBTyx3QkFBVSxDQUFDLHdCQUF3QixDQUFDLEtBQUssRUFBRSxXQUFXLEVBQUU7WUFDN0QsWUFBWSxFQUFFLEtBQUssQ0FBQyxZQUFZO1lBQ2hDLFFBQVEsRUFBRSxLQUFLLENBQUMsUUFBUTtTQUN6QixDQUFDLENBQUM7SUFDTCxDQUFDO0NBQ0Y7QUFWRCx3Q0FVQyIsInNvdXJjZXNDb250ZW50IjpbImltcG9ydCB7XG4gIEhvc3RlZFpvbmUsXG4gIEhvc3RlZFpvbmVBdHRyaWJ1dGVzLFxuICBJSG9zdGVkWm9uZSxcbn0gZnJvbSBcImF3cy1jZGstbGliL2F3cy1yb3V0ZTUzXCI7XG5pbXBvcnQgeyBDb25zdHJ1Y3QgfSBmcm9tIFwiY29uc3RydWN0c1wiO1xuXG4vKipcbiAqIFRoaXMgd2lsbCBhbHdheXMgcmV0dXJuIGEgcm9vdCBob3N0ZWQgem9uZSBiYXNlZCBvbiBhdHRyaWJ1dGVzLiBJdCB3aWxsXG4gKiBuZXZlciBjcmVhdGUgdGhlIHJvb3Qgem9uZSBzaW5jZSB0aGUgcm9vdCB6b25lIHNob3VsZCBhbHdheXMgYmUgY3JlYXRlZFxuICogbWFudWFsbHkuXG4gKi9cbmV4cG9ydCBjbGFzcyBSb290SG9zdGVkWm9uZSBleHRlbmRzIENvbnN0cnVjdCB7XG4gIHB1YmxpYyBzdGF0aWMgZnJvbUNvbnN0cnVjdChcbiAgICBzY29wZTogQ29uc3RydWN0LFxuICAgIHByb3BzOiBIb3N0ZWRab25lQXR0cmlidXRlcyxcbiAgKTogSUhvc3RlZFpvbmUge1xuICAgIHJldHVybiBIb3N0ZWRab25lLmZyb21Ib3N0ZWRab25lQXR0cmlidXRlcyhzY29wZSwgXCJyb290LXpvbmVcIiwge1xuICAgICAgaG9zdGVkWm9uZUlkOiBwcm9wcy5ob3N0ZWRab25lSWQsXG4gICAgICB6b25lTmFtZTogcHJvcHMuem9uZU5hbWUsXG4gICAgfSk7XG4gIH1cbn1cbiJdfQ==

package/lib/components/ssm/discoverable-string-parameter.d.ts

@@ -0,0 +1,59 @@
+import { StringParameter, type StringParameterProps } from "aws-cdk-lib/aws-ssm";
+import { Construct } from "constructs";
+/*******************************************************************************
+ *
+ * DiscoverableStringParameterProps: props for creating or looking up SSM
+ * parameters. Includes StringParameterProps (minus parameterName) plus
+ * name-building fields used by buildParameterName.
+ *
+ ******************************************************************************/
+export interface DiscoverableStringParameterProps extends Omit<StringParameterProps, "parameterName"> {
+    /**
+     * SSM param name used to build the SSM parameter name via buildParameterName
+     * and stored as a tag on the parameter for discoverability.
+     */
+    readonly ssmParamName: string;
+    /**
+     * The environment hash the parameter belongs to.
+     * @default - the current stack's environment hash
+     */
+    readonly branchHash?: string;
+    /**
+     * The service type the parameter belongs to.
+     * @default - the current stack's service type
+     */
+    readonly serviceType?: string;
+    /**
+     * The AWS account the parameter belongs to.
+     * @default - the current stack's account
+     */
+    readonly account?: string;
+    /**
+     * The AWS region the parameter belongs to.
+     * @default - the current stack's region
+     */
+    readonly region?: string;
+}
+/**
+ * Props for buildParameterName and valueForLookupName.
+ * Includes ssmParamName (required) and optional overrides (branchHash, serviceType, account, region).
+ */
+export type BuildParameterNameProps = Pick<DiscoverableStringParameterProps, "ssmParamName" | "branchHash" | "serviceType" | "account" | "region">;
+/**
+ * Discoverable SSM string parameter construct. Extends CDK StringParameter:
+ * builds parameterName from the given name via buildParameterName and tags
+ * the parameter with the name constant.
+ */
+export declare class DiscoverableStringParameter extends StringParameter {
+    /**
+     * Build a param name based on predictable attributes found in services and
+     * constructs. Used for storage and retrieval of SSM values across services.
+     */
+    static buildParameterName(scope: Construct, props: BuildParameterNameProps): string;
+    /**
+     * Read the string value of an SSM parameter created with DiscoverableStringParameter,
+     * using props that include ssmParamName and optional overrides (e.g. serviceType).
+     */
+    static valueForLookupName(scope: Construct, props: BuildParameterNameProps): string;
+    constructor(scope: Construct, id: string, props: DiscoverableStringParameterProps);
+}