@openhi/constructs 0.0.104 → 0.0.105

package/README.md

@@ -1,3 +1,17 @@
 # @openhi/constructs
 
 AWS CDK constructs for deploying OpenHI infrastructure. The library provides reusable constructs for applications, shared infrastructure (auth and core resources), data services, and common components used across OpenHI stacks.
+
+## Source Boundaries
+
+- `src/components`: reusable infrastructure building blocks and thin service integrations around AWS primitives.
+- `src/data`: persistence models, data access operations, API routes, and storage-specific handlers.
+- `src/workflows`: deployed async business processes, their EventBridge event contracts, workflow Lambda constructs, handlers, and tests.
+
+Workflow Lambdas should live under a plane namespace such as `src/workflows/control-plane` or `src/workflows/data-plane`. Trigger-specific handlers in `components` or API routes should stay thin and publish workflow events when the business process can run asynchronously.
+
+Use `events.ts` for EventBridge contracts, `<workflow>.handler.ts` for runtime handlers, `<workflow>-lambda.ts` for Lambda constructs, `<workflow>.handler.test.ts` for handler tests, and a `<domain>-workflow.ts` construct when EventBridge rules or multiple workflow Lambdas are deployed together.
+
+## Strategy
+
+Workflow placement (bus selection, Lambda vs. Step Functions, standard event envelope, idempotency contract, cross-boundary rules) is governed by [ADR-016 — Workflow Boundary Strategy](https://github.com/codedrifters/openhi-planning/blob/main/docs/src/content/docs/requirements/architectural-decisions/ADR-016-workflow-boundary-strategy.md) in the planning repo.

package/lib/chunk-2PM2NGXI.mjs

@@ -0,0 +1,31 @@
+// src/workflows/control-plane/user-onboarding/events.ts
+var USER_ONBOARDING_EVENT_SOURCE = "openhi.control.user-onboarding";
+var PROVISION_DEFAULT_WORKSPACE_DETAIL_TYPE = "ProvisionDefaultWorkspaceRequested";
+var buildProvisionDefaultWorkspaceRequestedDetail = (event) => {
+  const attrs = event.request?.userAttributes ?? {};
+  const cognitoSub = attrs.sub?.trim();
+  if (!cognitoSub) {
+    return void 0;
+  }
+  const email = attrs.email?.trim();
+  const displayName = email || event.userName || cognitoSub;
+  return {
+    cognitoSub,
+    ...email ? { email } : {},
+    displayName,
+    trigger: {
+      source: "cognito.post-confirmation",
+      triggerSource: event.triggerSource,
+      userPoolId: event.userPoolId,
+      userName: event.userName,
+      clientId: event.callerContext?.clientId
+    }
+  };
+};
+
+export {
+  USER_ONBOARDING_EVENT_SOURCE,
+  PROVISION_DEFAULT_WORKSPACE_DETAIL_TYPE,
+  buildProvisionDefaultWorkspaceRequestedDetail
+};
+//# sourceMappingURL=chunk-2PM2NGXI.mjs.map

package/lib/chunk-2PM2NGXI.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/workflows/control-plane/user-onboarding/events.ts"],"sourcesContent":["import type { PostConfirmationTriggerEvent } from \"aws-lambda\";\n\n/**\n * @see sites/www-docs/content/packages/@openhi/constructs/workflows/control-plane/user-onboarding/events.md\n */\n\n// EventBridge routing values shared by the publisher and workflow rule.\nexport const USER_ONBOARDING_EVENT_SOURCE = \"openhi.control.user-onboarding\";\nexport const PROVISION_DEFAULT_WORKSPACE_DETAIL_TYPE =\n  \"ProvisionDefaultWorkspaceRequested\";\n\n// Minimal workflow payload needed to provision and diagnose onboarding.\nexport interface ProvisionDefaultWorkspaceRequestedDetail {\n  readonly cognitoSub: string;\n  readonly userId?: string;\n  readonly email?: string;\n  readonly displayName?: string;\n  readonly trigger: {\n    readonly source: \"cognito.post-confirmation\";\n    readonly triggerSource?: string;\n    readonly userPoolId?: string;\n    readonly userName?: string;\n    readonly clientId?: string;\n  };\n}\n\n// Convert Cognito's Post Confirmation trigger event into the workflow event.\nexport const buildProvisionDefaultWorkspaceRequestedDetail = (\n  event: PostConfirmationTriggerEvent,\n): ProvisionDefaultWorkspaceRequestedDetail | undefined => {\n  // Cognito sub is the required stable identity key for onboarding records.\n  const attrs = event.request?.userAttributes ?? {};\n  const cognitoSub = attrs.sub?.trim();\n  if (!cognitoSub) {\n    return undefined;\n  }\n\n  // Prefer email for display where available; fall back to Cognito metadata.\n  const email = attrs.email?.trim();\n  const displayName = email || event.userName || cognitoSub;\n\n  // Include trigger metadata so failed or duplicate events can be traced.\n  return {\n    cognitoSub,\n    ...(email ? { email } : {}),\n    displayName,\n    trigger: {\n      source: \"cognito.post-confirmation\",\n      triggerSource: event.triggerSource,\n      userPoolId: event.userPoolId,\n      userName: event.userName,\n      clientId: event.callerContext?.clientId,\n    },\n  };\n};\n"],"mappings":";AAOO,IAAM,+BAA+B;AACrC,IAAM,0CACX;AAkBK,IAAM,gDAAgD,CAC3D,UACyD;AAEzD,QAAM,QAAQ,MAAM,SAAS,kBAAkB,CAAC;AAChD,QAAM,aAAa,MAAM,KAAK,KAAK;AACnC,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,EACT;AAGA,QAAM,QAAQ,MAAM,OAAO,KAAK;AAChC,QAAM,cAAc,SAAS,MAAM,YAAY;AAG/C,SAAO;AAAA,IACL;AAAA,IACA,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IACzB;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,eAAe,MAAM;AAAA,MACrB,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,MAChB,UAAU,MAAM,eAAe;AAAA,IACjC;AAAA,EACF;AACF;","names":[]}