@openhi/constructs 0.0.104 → 0.0.106

package/lib/rest-api-lambda.handler.js

@@ -173,6 +173,9 @@ var dynamoClient = new import_client_dynamodb.DynamoDBClient({
 // src/data/dynamo/entities/control/configuration-entity.ts
 var import_electrodb = require("electrodb");
 
+// src/data/dynamo/entities/control/control-entity-common.ts
+var import_types = require("@openhi/types");
+
 // src/data/dynamo/shard.ts
 var SHARD_COUNT = 4;
 function computeShard(id) {
@@ -195,6 +198,29 @@ var gsi1ShardAttribute = {
     return String(computeShard(item.id));
   }
 };
+var gsi1skAttribute = {
+  type: "string",
+  watch: ["resource", "lastUpdated", "id"],
+  set: (_val, item) => {
+    const id = typeof item?.id === "string" ? item.id : "";
+    const lastUpdated = typeof item?.lastUpdated === "string" ? item.lastUpdated : "";
+    const fallback = `${lastUpdated}#${id}`;
+    if (typeof item?.resource !== "string" || item.resource.length === 0) {
+      return fallback;
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(item.resource);
+    } catch {
+      return fallback;
+    }
+    if (!parsed || typeof parsed !== "object") return fallback;
+    const resourceType = parsed.resourceType;
+    if (typeof resourceType !== "string") return fallback;
+    const label = (0, import_types.extractLabel)(parsed);
+    return label !== void 0 ? `${label}#${id}` : fallback;
+  }
+};
 
 // src/data/dynamo/entities/control/configuration-entity.ts
 var ConfigurationEntity = new import_electrodb.Entity({
@@ -300,8 +326,9 @@ var ConfigurationEntity = new import_electrodb.Entity({
      * (workspaceId = "-") or "list configs scoped to this workspace". Does not support
      * hierarchical resolution in one query; use base table GetItem in fallback order
      * (user → workspace → tenant → baseline) for that.
-     * SK is `<ISO-8601 lastUpdated>#<id>` (control-plane unlabeled per DR-004).
-     * `casing: "none"` on the SK preserves ISO-8601 `T`/`Z`.
+     * SK is `<key>#<id>` — Configuration's `key` is a required entity attribute (the
+     * config category: endpoints, branding, display, …) and the natural sort/lookup
+     * dimension. `casing: "none"` preserves the literal key value.
      */
     gsi1: {
       index: "GSI1",
@@ -313,8 +340,8 @@ var ConfigurationEntity = new import_electrodb.Entity({
       sk: {
         field: "GSI1SK",
         casing: "none",
-        composite: ["lastUpdated", "id"],
-        template: "${lastUpdated}#${id}"
+        composite: ["key", "id"],
+        template: "${key}#${id}"
       }
     }
   }
@@ -368,6 +395,8 @@ var MembershipEntity = new import_electrodb2.Entity({
       required: true
     },
     gsi1Shard: gsi1ShardAttribute,
+    /** Derived GSI1 sort key — name-based when extractable; else `<lastUpdated>#<id>`. */
+    gsi1sk: gsi1skAttribute,
     deleted: {
       type: "boolean",
       required: false
@@ -398,8 +427,9 @@ var MembershipEntity = new import_electrodb2.Entity({
     /**
      * GSI1 — Unified Sharded List per ADR-011: list all Memberships for a tenant across the
      * four shards. Membership is tenant-scoped only, so `WID#-` is a sentinel.
-     * SK is `<ISO-8601 lastUpdated>#<id>` (control-plane unlabeled per DR-004).
-     * `casing: "none"` on the SK preserves ISO-8601 `T`/`Z`.
+     * SK is derived via `gsi1skAttribute` — uses the resource's natural label when
+     * extractable, else `<lastUpdated>#<id>` (DR-004). `casing: "none"` preserves the
+     * normalized label and ISO-8601 `T`/`Z`.
      */
     gsi1: {
       index: "GSI1",
@@ -411,8 +441,8 @@ var MembershipEntity = new import_electrodb2.Entity({
       sk: {
         field: "GSI1SK",
         casing: "none",
-        composite: ["lastUpdated", "id"],
-        template: "${lastUpdated}#${id}"
+        composite: ["gsi1sk"],
+        template: "${gsi1sk}"
       }
     }
   }
@@ -461,6 +491,8 @@ var RoleEntity = new import_electrodb3.Entity({
       required: true
     },
     gsi1Shard: gsi1ShardAttribute,
+    /** Derived GSI1 sort key — name-based when extractable; else `<lastUpdated>#<id>`. */
+    gsi1sk: gsi1skAttribute,
     deleted: {
       type: "boolean",
       required: false
@@ -491,8 +523,9 @@ var RoleEntity = new import_electrodb3.Entity({
     /**
      * GSI1 — Unified Sharded List per ADR-011: list all Roles across the four shards.
      * Non-tenant-isolated, so `TID#-#WID#-` sentinels precede `RT#Role#SHARD#<n>`.
-     * SK is `<ISO-8601 lastUpdated>#<id>` (control-plane unlabeled per DR-004).
-     * `casing: "none"` on the SK preserves ISO-8601 `T`/`Z`.
+     * SK is derived via `gsi1skAttribute` — uses the resource's natural label when
+     * extractable, else `<lastUpdated>#<id>` (DR-004). `casing: "none"` preserves the
+     * normalized label and ISO-8601 `T`/`Z`.
      */
     gsi1: {
       index: "GSI1",
@@ -504,8 +537,8 @@ var RoleEntity = new import_electrodb3.Entity({
       sk: {
         field: "GSI1SK",
         casing: "none",
-        composite: ["lastUpdated", "id"],
-        template: "${lastUpdated}#${id}"
+        composite: ["gsi1sk"],
+        template: "${gsi1sk}"
       }
     }
   }
@@ -559,6 +592,8 @@ var RoleAssignmentEntity = new import_electrodb4.Entity({
       required: true
     },
     gsi1Shard: gsi1ShardAttribute,
+    /** Derived GSI1 sort key — name-based when extractable; else `<lastUpdated>#<id>`. */
+    gsi1sk: gsi1skAttribute,
     deleted: {
       type: "boolean",
       required: false
@@ -589,8 +624,9 @@ var RoleAssignmentEntity = new import_electrodb4.Entity({
     /**
      * GSI1 — Unified Sharded List per ADR-011: list all RoleAssignments for a tenant across the
      * four shards. Tenant-scoped only, so `WID#-` is a sentinel.
-     * SK is `<ISO-8601 lastUpdated>#<id>` (control-plane unlabeled per DR-004).
-     * `casing: "none"` on the SK preserves ISO-8601 `T`/`Z`.
+     * SK is derived via `gsi1skAttribute` — uses the resource's natural label when
+     * extractable, else `<lastUpdated>#<id>` (DR-004). `casing: "none"` preserves the
+     * normalized label and ISO-8601 `T`/`Z`.
      */
     gsi1: {
       index: "GSI1",
@@ -602,8 +638,8 @@ var RoleAssignmentEntity = new import_electrodb4.Entity({
       sk: {
         field: "GSI1SK",
         casing: "none",
-        composite: ["lastUpdated", "id"],
-        template: "${lastUpdated}#${id}"
+        composite: ["gsi1sk"],
+        template: "${gsi1sk}"
       }
     }
   }
@@ -657,6 +693,8 @@ var TenantEntity = new import_electrodb5.Entity({
       required: true
     },
     gsi1Shard: gsi1ShardAttribute,
+    /** Derived GSI1 sort key — name-based when extractable; else `<lastUpdated>#<id>`. */
+    gsi1sk: gsi1skAttribute,
     deleted: {
       type: "boolean",
       required: false
@@ -687,8 +725,9 @@ var TenantEntity = new import_electrodb5.Entity({
     /**
      * GSI1 — Unified Sharded List per ADR-011: list all Tenants across the four shards.
      * Tenant lives at the platform tier (no parent tenant or workspace), so `TID#-#WID#-`
-     * sentinels precede `RT#Tenant#SHARD#<n>`. SK is `<ISO-8601 lastUpdated>#<id>` (control-plane
-     * unlabeled per DR-004). `casing: "none"` on the SK preserves ISO-8601 `T`/`Z`.
+     * sentinels precede `RT#Tenant#SHARD#<n>`. SK is derived via `gsi1skAttribute` —
+     * `<normalizedName>#<id>` when the resource carries a `name`, else `<lastUpdated>#<id>`
+     * (DR-004). `casing: "none"` preserves the normalized label and ISO-8601 `T`/`Z`.
      */
     gsi1: {
       index: "GSI1",
@@ -700,8 +739,8 @@ var TenantEntity = new import_electrodb5.Entity({
       sk: {
         field: "GSI1SK",
         casing: "none",
-        composite: ["lastUpdated", "id"],
-        template: "${lastUpdated}#${id}"
+        composite: ["gsi1sk"],
+        template: "${gsi1sk}"
       }
     }
   }
@@ -758,6 +797,8 @@ var UserEntity = new import_electrodb6.Entity({
       required: true
     },
     gsi1Shard: gsi1ShardAttribute,
+    /** Derived GSI1 sort key — name-based when extractable; else `<lastUpdated>#<id>`. */
+    gsi1sk: gsi1skAttribute,
     deleted: {
       type: "boolean",
       required: false
@@ -788,8 +829,9 @@ var UserEntity = new import_electrodb6.Entity({
     /**
      * GSI1 — Unified Sharded List per ADR-011: list all Users across the four shards.
      * Non-tenant-isolated, so `TID#-#WID#-` sentinels precede `RT#User#SHARD#<n>`.
-     * SK is `<ISO-8601 lastUpdated>#<id>` (control-plane unlabeled per DR-004).
-     * `casing: "none"` on the SK preserves ISO-8601 `T`/`Z` characters.
+     * SK is derived via `gsi1skAttribute` — uses the resource's natural label when
+     * extractable (string `name`/`title` via introspection), else `<lastUpdated>#<id>`
+     * (DR-004). `casing: "none"` preserves the normalized label and ISO-8601 `T`/`Z`.
      */
     gsi1: {
       index: "GSI1",
@@ -801,8 +843,8 @@ var UserEntity = new import_electrodb6.Entity({
       sk: {
         field: "GSI1SK",
         casing: "none",
-        composite: ["lastUpdated", "id"],
-        template: "${lastUpdated}#${id}"
+        composite: ["gsi1sk"],
+        template: "${gsi1sk}"
       }
     },
     /**
@@ -877,6 +919,8 @@ var WorkspaceEntity = new import_electrodb7.Entity({
       required: true
     },
     gsi1Shard: gsi1ShardAttribute,
+    /** Derived GSI1 sort key — name-based when extractable; else `<lastUpdated>#<id>`. */
+    gsi1sk: gsi1skAttribute,
     deleted: {
       type: "boolean",
       required: false
@@ -907,8 +951,9 @@ var WorkspaceEntity = new import_electrodb7.Entity({
     /**
      * GSI1 — Unified Sharded List per ADR-011: list all Workspaces for a tenant across the
      * four shards. Workspace is itself the workspace identity, so `WID#-` is a sentinel.
-     * SK is `<ISO-8601 lastUpdated>#<id>` (control-plane unlabeled per DR-004).
-     * `casing: "none"` on the SK preserves ISO-8601 `T`/`Z`.
+     * SK is derived via `gsi1skAttribute` — `<normalizedName>#<id>` when the resource
+     * carries a `name`, else `<lastUpdated>#<id>` (DR-004). `casing: "none"` preserves
+     * the normalized label and ISO-8601 `T`/`Z`.
      */
     gsi1: {
       index: "GSI1",
@@ -920,8 +965,8 @@ var WorkspaceEntity = new import_electrodb7.Entity({
       sk: {
         field: "GSI1SK",
         casing: "none",
-        composite: ["lastUpdated", "id"],
-        template: "${lastUpdated}#${id}"
+        composite: ["gsi1sk"],
+        template: "${gsi1sk}"
       }
     }
   }
@@ -1424,7 +1469,7 @@ async function getConfigurationByIdRoute(req, res) {
 }
 
 // src/data/operations/data-operations-common.ts
-var import_types = require("@openhi/types");
+var import_types2 = require("@openhi/types");
 
 // src/data/audit-meta.ts
 var OPENHI_EXT = "http://openhi.org/fhir/StructureDefinition";
@@ -1582,8 +1627,8 @@ async function createDataEntityRecord(entity, tenantId, workspaceId, id, resourc
   const lastUpdated = resourceWithAudit.meta?.lastUpdated ?? fallbackDate ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = lastUpdated.replace(/[-:T.Z]/g, "").slice(0, 12) || Date.now().toString(36);
   const resourceLike = resourceWithAudit;
-  const summary = JSON.stringify((0, import_types.extractSummary)(resourceLike));
-  const gsi1sk = (0, import_types.extractSortKey)(resourceLike);
+  const summary = JSON.stringify((0, import_types2.extractSummary)(resourceLike));
+  const gsi1sk = (0, import_types2.extractSortKey)(resourceLike);
   await entity.put({
     sk: DATA_ENTITY_SK,
     tenantId,
@@ -1641,8 +1686,8 @@ async function updateDataEntityById(entity, tenantId, workspaceId, id, resourceL
   const existingStr = decompressResource(existing.data.resource);
   const { resource, lastUpdated } = buildPatched(existingStr);
   const resourceLike = resource;
-  const summary = JSON.stringify((0, import_types.extractSummary)(resourceLike));
-  const gsi1sk = (0, import_types.extractSortKey)(resourceLike);
+  const summary = JSON.stringify((0, import_types2.extractSummary)(resourceLike));
+  const gsi1sk = (0, import_types2.extractSortKey)(resourceLike);
   await entity.patch({
     tenantId,
     workspaceId,
@@ -2125,7 +2170,7 @@ router.delete("/:id", deleteConfigurationRoute);
 var import_express2 = __toESM(require("express"));
 
 // src/data/operations/control/membership/membership-create-operation.ts
-var import_types2 = require("@openhi/types");
+var import_types3 = require("@openhi/types");
 async function createMembershipOperation(params) {
   const { context, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -2134,7 +2179,7 @@ async function createMembershipOperation(params) {
   const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = `1`;
   const resource = { resourceType: "Membership", id, ...parsedResource };
-  const summary = JSON.stringify((0, import_types2.extractSummary)(resource));
+  const summary = JSON.stringify((0, import_types3.extractSummary)(resource));
   await service.entities.membership.put({
     tenantId: context.tenantId,
     id,
@@ -2294,7 +2339,7 @@ async function listMembershipsRoute(req, res) {
 }
 
 // src/data/operations/control/membership/membership-update-operation.ts
-var import_types3 = require("@openhi/types");
+var import_types4 = require("@openhi/types");
 async function updateMembershipOperation(params) {
   const { context, id, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -2306,7 +2351,7 @@ async function updateMembershipOperation(params) {
   const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = `${Date.now()}`;
   const resource = { resourceType: "Membership", id, ...parsedResource };
-  const summary = JSON.stringify((0, import_types3.extractSummary)(resource));
+  const summary = JSON.stringify((0, import_types4.extractSummary)(resource));
   await service.entities.membership.put({
     tenantId: context.tenantId,
     id,
@@ -2374,7 +2419,7 @@ router2.delete("/:id", deleteMembershipRoute);
 var import_express3 = __toESM(require("express"));
 
 // src/data/operations/control/role/role-create-operation.ts
-var import_types4 = require("@openhi/types");
+var import_types5 = require("@openhi/types");
 async function createRoleOperation(params) {
   const { context, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -2383,7 +2428,7 @@ async function createRoleOperation(params) {
   const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = `1`;
   const resource = { resourceType: "Role", id, ...parsedResource };
-  const summary = JSON.stringify((0, import_types4.extractSummary)(resource));
+  const summary = JSON.stringify((0, import_types5.extractSummary)(resource));
   await service.entities.role.put({
     id,
     resource: JSON.stringify(resource),
@@ -2541,7 +2586,7 @@ async function listRolesRoute(req, res) {
 }
 
 // src/data/operations/control/role/role-update-operation.ts
-var import_types5 = require("@openhi/types");
+var import_types6 = require("@openhi/types");
 async function updateRoleOperation(params) {
   const { context, id, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -2553,7 +2598,7 @@ async function updateRoleOperation(params) {
   const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = `${Date.now()}`;
   const resource = { resourceType: "Role", id, ...parsedResource };
-  const summary = JSON.stringify((0, import_types5.extractSummary)(resource));
+  const summary = JSON.stringify((0, import_types6.extractSummary)(resource));
   await service.entities.role.put({
     id,
     resource: JSON.stringify(resource),
@@ -2620,7 +2665,7 @@ router3.delete("/:id", deleteRoleRoute);
 var import_express4 = __toESM(require("express"));
 
 // src/data/operations/control/roleassignment/roleassignment-create-operation.ts
-var import_types6 = require("@openhi/types");
+var import_types7 = require("@openhi/types");
 async function createRoleAssignmentOperation(params) {
   const { context, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -2629,7 +2674,7 @@ async function createRoleAssignmentOperation(params) {
   const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = `1`;
   const resource = { resourceType: "RoleAssignment", id, ...parsedResource };
-  const summary = JSON.stringify((0, import_types6.extractSummary)(resource));
+  const summary = JSON.stringify((0, import_types7.extractSummary)(resource));
   await service.entities.roleAssignment.put({
     tenantId: context.tenantId,
     id,
@@ -2789,7 +2834,7 @@ async function listRoleAssignmentsRoute(req, res) {
 }
 
 // src/data/operations/control/roleassignment/roleassignment-update-operation.ts
-var import_types7 = require("@openhi/types");
+var import_types8 = require("@openhi/types");
 async function updateRoleAssignmentOperation(params) {
   const { context, id, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -2801,7 +2846,7 @@ async function updateRoleAssignmentOperation(params) {
   const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = `${Date.now()}`;
   const resource = { resourceType: "RoleAssignment", id, ...parsedResource };
-  const summary = JSON.stringify((0, import_types7.extractSummary)(resource));
+  const summary = JSON.stringify((0, import_types8.extractSummary)(resource));
   await service.entities.roleAssignment.put({
     tenantId: context.tenantId,
     id,
@@ -2869,7 +2914,7 @@ router4.delete("/:id", deleteRoleAssignmentRoute);
 var import_express5 = __toESM(require("express"));
 
 // src/data/operations/control/tenant/tenant-create-operation.ts
-var import_types8 = require("@openhi/types");
+var import_types9 = require("@openhi/types");
 async function createTenantOperation(params) {
   const { context, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -2878,7 +2923,7 @@ async function createTenantOperation(params) {
   const vid = lastUpdated.replace(/[-:T.Z]/g, "").slice(0, 12) || Date.now().toString(36);
   const parsedResource = typeof body.resource === "string" ? JSON.parse(body.resource) : body.resource ?? {};
   const resource = { resourceType: "Tenant", id, ...parsedResource };
-  const summary = JSON.stringify((0, import_types8.extractSummary)(resource));
+  const summary = JSON.stringify((0, import_types9.extractSummary)(resource));
   await service.entities.tenant.put({
     tenantId: id,
     id,
@@ -3036,7 +3081,7 @@ async function listTenantsRoute(req, res) {
 }
 
 // src/data/operations/control/tenant/tenant-update-operation.ts
-var import_types9 = require("@openhi/types");
+var import_types10 = require("@openhi/types");
 async function updateTenantOperation(params) {
   const { context, id, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -3054,7 +3099,7 @@ async function updateTenantOperation(params) {
     resourceType: "Tenant",
     id
   };
-  const summary = JSON.stringify((0, import_types9.extractSummary)(updated));
+  const summary = JSON.stringify((0, import_types10.extractSummary)(updated));
   await service.entities.tenant.patch({ tenantId: id, sk: "CURRENT" }).set({ resource: JSON.stringify(updated), summary, vid, lastUpdated }).go();
   return { id, resource: updated, meta: { lastUpdated, versionId: vid } };
 }
@@ -3111,7 +3156,7 @@ router5.delete("/:id", deleteTenantRoute);
 var import_express6 = __toESM(require("express"));
 
 // src/data/operations/control/user/user-create-operation.ts
-var import_types10 = require("@openhi/types");
+var import_types11 = require("@openhi/types");
 async function createUserOperation(params) {
   const { context, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -3120,7 +3165,7 @@ async function createUserOperation(params) {
   const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = `1`;
   const resource = { resourceType: "User", id, ...parsedResource };
-  const summary = JSON.stringify((0, import_types10.extractSummary)(resource));
+  const summary = JSON.stringify((0, import_types11.extractSummary)(resource));
   await service.entities.user.put({
     id,
     resource: JSON.stringify(resource),
@@ -3278,7 +3323,7 @@ async function listUsersRoute(req, res) {
 }
 
 // src/data/operations/control/user/user-update-operation.ts
-var import_types11 = require("@openhi/types");
+var import_types12 = require("@openhi/types");
 async function updateUserOperation(params) {
   const { context, id, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -3290,7 +3335,7 @@ async function updateUserOperation(params) {
   const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = `${Date.now()}`;
   const resource = { resourceType: "User", id, ...parsedResource };
-  const summary = JSON.stringify((0, import_types11.extractSummary)(resource));
+  const summary = JSON.stringify((0, import_types12.extractSummary)(resource));
   await service.entities.user.put({
     id,
     resource: JSON.stringify(resource),
@@ -3357,7 +3402,7 @@ router6.delete("/:id", deleteUserRoute);
 var import_express7 = __toESM(require("express"));
 
 // src/data/operations/control/workspace/workspace-create-operation.ts
-var import_types12 = require("@openhi/types");
+var import_types13 = require("@openhi/types");
 async function createWorkspaceOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId } = context;
@@ -3367,7 +3412,7 @@ async function createWorkspaceOperation(params) {
   const vid = lastUpdated.replace(/[-:T.Z]/g, "").slice(0, 12) || Date.now().toString(36);
   const parsedResource = typeof body.resource === "string" ? JSON.parse(body.resource) : body.resource ?? {};
   const resource = { resourceType: "Workspace", id, ...parsedResource };
-  const summary = JSON.stringify((0, import_types12.extractSummary)(resource));
+  const summary = JSON.stringify((0, import_types13.extractSummary)(resource));
   await service.entities.workspace.put({
     tenantId,
     id,
@@ -3528,7 +3573,7 @@ async function listWorkspacesRoute(req, res) {
 }
 
 // src/data/operations/control/workspace/workspace-update-operation.ts
-var import_types13 = require("@openhi/types");
+var import_types14 = require("@openhi/types");
 async function updateWorkspaceOperation(params) {
   const { context, id, body, tableName } = params;
   const { tenantId } = context;
@@ -3547,7 +3592,7 @@ async function updateWorkspaceOperation(params) {
     resourceType: "Workspace",
     id
   };
-  const summary = JSON.stringify((0, import_types13.extractSummary)(updated));
+  const summary = JSON.stringify((0, import_types14.extractSummary)(updated));
   await service.entities.workspace.patch({ tenantId, id, sk: "CURRENT" }).set({ resource: JSON.stringify(updated), summary, vid, lastUpdated }).go();
   return { id, resource: updated, meta: { lastUpdated, versionId: vid } };
 }
@@ -5645,8 +5690,12 @@ var DataApiPostgresQueryRunner = class {
         resourceArn: this.clusterArn,
         secretArn: this.secretArn,
         database: this.database,
-        schema: this.schema,
-        sql,
+        // NOTE: the Data API `schema` field is intentionally NOT set —
+        // Aurora Serverless v2's Data API rejects it with
+        // `ValidationException: The schema parameter isn't supported.`
+        // Instead, the SQL is rewritten to schema-qualify the `resources`
+        // table inline before being sent. See {@link qualifyResourcesTable}.
+        sql: qualifyResourcesTable(sql, this.schema),
         parameters: params.map(toSqlParameter),
         // Results as named columns so we can map them back to JS objects.
         includeResultMetadata: true,
@@ -5662,6 +5711,12 @@ var DataApiPostgresQueryRunner = class {
     return JSON.parse(out.formattedRecords);
   }
 };
+function qualifyResourcesTable(sql, schema) {
+  return sql.replace(
+    /(\b(?:FROM|JOIN)\s+)resources\b/gi,
+    `$1"${schema}".resources`
+  );
+}
 function toSqlParameter(param) {
   if (param.value === null) {
     return { name: param.name, value: { isNull: true } };