@openhi/constructs 0.0.104 → 0.0.106

package/lib/rest-api-lambda.handler.mjs

@@ -1,11 +1,45 @@
+import {
+  createRoleOperation
+} from "./chunk-YU2HRNUP.mjs";
+import {
+  getRoleByIdOperation
+} from "./chunk-L6UAP4KP.mjs";
+import {
+  createMembershipOperation,
+  createRoleAssignmentOperation,
+  createTenantOperation,
+  createWorkspaceOperation
+} from "./chunk-AO3E22CS.mjs";
+import {
+  batchGetWithRetry,
+  buildUpdatedResourceWithAudit,
+  compressResource,
+  createDataEntityRecord,
+  createUserOperation,
+  decompressResource,
+  deleteDataEntityById,
+  deleteUserOperation,
+  dispatchListMode,
+  getDataEntityById,
+  getUserByIdOperation,
+  listDataEntitiesByWorkspace,
+  listUsersOperation,
+  mergeAuditIntoMeta,
+  updateDataEntityById,
+  updateUserOperation
+} from "./chunk-JUNL76HF.mjs";
+import {
+  NotFoundError,
+  domainErrorToHttpStatus
+} from "./chunk-YZZDUJHI.mjs";
 import {
   SHARD_COUNT,
   computeShard,
   defaultTableName,
   dynamoClient,
   getDynamoControlService
-} from "./chunk-MLTYFMSE.mjs";
-import "./chunk-3QS3WKRC.mjs";
+} from "./chunk-VYDIGFIX.mjs";
+import "./chunk-LZOMFHX3.mjs";
 
 // src/data/lambda/rest-api-lambda.handler.ts
 import serverlessExpress from "@codegenie/serverless-express";
@@ -75,62 +109,6 @@ function openHiContextMiddleware(req, res, next) {
 // src/data/rest-api/routes/control/configuration/configuration.ts
 import express from "express";
 
-// src/lib/compression.ts
-import { gzipSync, gunzipSync } from "zlib";
-var ENVELOPE_VERSION = 1;
-var COMPRESSION_ALGOS = {
-  NONE: "none",
-  GZIP: "gzip",
-  BROTLI: "brotli",
-  DEFLATE: "deflate"
-};
-function isEnvelope(obj) {
-  return typeof obj === "object" && obj !== null && "v" in obj && "algo" in obj && "payload" in obj && typeof obj.payload === "string";
-}
-function compressResource(jsonString, options) {
-  const algo = options?.algo ?? COMPRESSION_ALGOS.GZIP;
-  if (algo === COMPRESSION_ALGOS.NONE) {
-    const envelope2 = {
-      v: ENVELOPE_VERSION,
-      algo: COMPRESSION_ALGOS.NONE,
-      payload: jsonString
-    };
-    return JSON.stringify(envelope2);
-  }
-  const buf = Buffer.from(jsonString, "utf-8");
-  const payload = gzipSync(buf).toString("base64");
-  const envelope = {
-    v: ENVELOPE_VERSION,
-    algo: COMPRESSION_ALGOS.GZIP,
-    payload
-  };
-  return JSON.stringify(envelope);
-}
-function decompressResource(compressedOrRaw) {
-  try {
-    const parsed = JSON.parse(compressedOrRaw);
-    if (isEnvelope(parsed)) {
-      if (parsed.algo === COMPRESSION_ALGOS.GZIP) {
-        const buf = Buffer.from(parsed.payload, "base64");
-        return gunzipSync(buf).toString("utf-8");
-      }
-      if (parsed.algo === COMPRESSION_ALGOS.NONE) {
-        return parsed.payload;
-      }
-      return parsed.payload;
-    }
-  } catch {
-  }
-  try {
-    const buf = Buffer.from(compressedOrRaw, "base64");
-    if (buf.length >= 2 && buf[0] === 31 && buf[1] === 139) {
-      return gunzipSync(buf).toString("utf-8");
-    }
-  } catch {
-  }
-  return compressedOrRaw;
-}
-
 // src/data/operations/control/configuration/configuration-create-operation.ts
 var SK = "CURRENT";
 async function createConfigurationOperation(params) {
@@ -504,38 +482,6 @@ async function deleteConfigurationRoute(req, res) {
   }
 }
 
-// src/data/errors/domain-errors.ts
-var DomainError = class extends Error {
-  constructor(message, code, options) {
-    super(message, options);
-    this.name = this.constructor.name;
-    this.code = code;
-    this.details = options?.details;
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
-};
-var NotFoundError = class extends DomainError {
-  constructor(message, options) {
-    super(message, "NOT_FOUND", options);
-  }
-};
-var ValidationError = class extends DomainError {
-  constructor(message, options) {
-    super(message, "VALIDATION", options);
-  }
-};
-var ConflictError = class extends DomainError {
-  constructor(message, options) {
-    super(message, "CONFLICT", options);
-  }
-};
-function domainErrorToHttpStatus(err) {
-  if (err instanceof NotFoundError) return 404;
-  if (err instanceof ValidationError) return 400;
-  if (err instanceof ConflictError) return 409;
-  return null;
-}
-
 // src/data/operations/control/configuration/configuration-get-by-id-operation.ts
 var SK3 = "CURRENT";
 async function getConfigurationByIdOperation(params) {
@@ -599,243 +545,6 @@ async function getConfigurationByIdRoute(req, res) {
   }
 }
 
-// src/data/operations/data-operations-common.ts
-import { extractSortKey, extractSummary } from "@openhi/types";
-
-// src/data/audit-meta.ts
-var OPENHI_EXT = "http://openhi.org/fhir/StructureDefinition";
-function mergeAuditIntoMeta(meta, audit) {
-  const existing = meta ?? {};
-  const ext = [
-    ...Array.isArray(existing.extension) ? existing.extension : []
-  ];
-  const byUrl = new Map(ext.map((e) => [e.url, e]));
-  function set(url, value, type) {
-    if (value == null) return;
-    byUrl.set(url, { url, [type]: value });
-  }
-  set(`${OPENHI_EXT}/created-date`, audit.createdDate, "valueDateTime");
-  set(`${OPENHI_EXT}/created-by-id`, audit.createdById, "valueString");
-  set(`${OPENHI_EXT}/created-by-name`, audit.createdByName, "valueString");
-  set(`${OPENHI_EXT}/modified-date`, audit.modifiedDate, "valueDateTime");
-  set(`${OPENHI_EXT}/modified-by-id`, audit.modifiedById, "valueString");
-  set(`${OPENHI_EXT}/modified-by-name`, audit.modifiedByName, "valueString");
-  set(`${OPENHI_EXT}/deleted-date`, audit.deletedDate, "valueDateTime");
-  set(`${OPENHI_EXT}/deleted-by-id`, audit.deletedById, "valueString");
-  set(`${OPENHI_EXT}/deleted-by-name`, audit.deletedByName, "valueString");
-  return { ...existing, extension: Array.from(byUrl.values()) };
-}
-
-// src/data/operations/data-operations-common.ts
-var DATA_ENTITY_SK = "CURRENT";
-async function getDataEntityById(entity, tenantId, workspaceId, id, resourceLabel) {
-  const result = await entity.get({
-    tenantId,
-    workspaceId,
-    id,
-    sk: DATA_ENTITY_SK
-  }).go();
-  if (!result.data) {
-    throw new NotFoundError(`${resourceLabel} ${id} not found`, {
-      details: { id }
-    });
-  }
-  const parsed = JSON.parse(decompressResource(result.data.resource));
-  return {
-    id: result.data.id,
-    resource: { ...parsed, id: result.data.id }
-  };
-}
-async function deleteDataEntityById(entity, tenantId, workspaceId, id) {
-  await entity.delete({
-    tenantId,
-    workspaceId,
-    id,
-    sk: DATA_ENTITY_SK
-  }).go();
-}
-var BATCH_GET_MAX_ATTEMPTS = 3;
-var BATCH_GET_BASE_BACKOFF_MS = 50;
-async function batchGetWithRetry(entity, keys) {
-  if (keys.length === 0) return [];
-  const collected = [];
-  let pending = keys;
-  let attempt = 0;
-  while (pending.length > 0) {
-    if (attempt > 0) {
-      await new Promise(
-        (resolve) => setTimeout(resolve, BATCH_GET_BASE_BACKOFF_MS * 2 ** (attempt - 1))
-      );
-    }
-    attempt++;
-    const result = await entity.get(pending).go();
-    collected.push(...result.data);
-    const unprocessed = result.unprocessed ?? [];
-    if (unprocessed.length === 0) break;
-    if (attempt >= BATCH_GET_MAX_ATTEMPTS) {
-      throw new Error(
-        `BatchGet exhausted retries: ${unprocessed.length} key(s) still unprocessed after ${BATCH_GET_MAX_ATTEMPTS} attempt(s)`
-      );
-    }
-    pending = unprocessed;
-  }
-  return collected;
-}
-async function dispatchListMode(mode, shardResults, hooks) {
-  if (mode === "count") {
-    let total = 0;
-    for (const shardResult of shardResults) {
-      total += (shardResult.data ?? []).length;
-    }
-    return { entries: [], total };
-  }
-  if (mode === "summary") {
-    const entries2 = [];
-    for (const shardResult of shardResults) {
-      for (const item of shardResult.data ?? []) {
-        if (typeof item.summary !== "string") continue;
-        let parsed;
-        try {
-          parsed = JSON.parse(item.summary);
-        } catch {
-          continue;
-        }
-        entries2.push(hooks.buildSummaryEntry(item.id, parsed));
-      }
-    }
-    return { entries: entries2, total: entries2.length };
-  }
-  const orderedIds = [];
-  for (const shardResult of shardResults) {
-    for (const item of shardResult.data ?? []) {
-      orderedIds.push(item.id);
-    }
-  }
-  if (orderedIds.length === 0) return { entries: [], total: 0 };
-  const items = await hooks.hydrate(orderedIds);
-  const byId = new Map(items.map((item) => [hooks.getId(item), item]));
-  const entries = [];
-  for (const id of orderedIds) {
-    const item = byId.get(id);
-    if (!item) continue;
-    entries.push(hooks.buildEntry(id, item));
-  }
-  return { entries, total: entries.length };
-}
-async function listDataEntitiesByWorkspace(entity, tenantId, workspaceId, mode = "full") {
-  const shardResults = await Promise.all(
-    Array.from(
-      { length: SHARD_COUNT },
-      (_, shard) => entity.query.gsi1({ tenantId, workspaceId, gsi1Shard: String(shard) }).go()
-    )
-  );
-  return dispatchListMode(
-    mode,
-    shardResults,
-    {
-      hydrate: (orderedIds) => batchGetWithRetry(
-        entity,
-        orderedIds.map((id) => ({
-          tenantId,
-          workspaceId,
-          id,
-          sk: DATA_ENTITY_SK
-        }))
-      ),
-      getId: (item) => item.id,
-      buildEntry: (id, item) => {
-        const parsed = JSON.parse(decompressResource(item.resource));
-        return { id, resource: { ...parsed, id } };
-      },
-      buildSummaryEntry: (id, parsed) => ({
-        id,
-        resource: { ...parsed, id }
-      })
-    }
-  );
-}
-async function createDataEntityRecord(entity, tenantId, workspaceId, id, resourceWithAudit, fallbackDate) {
-  const lastUpdated = resourceWithAudit.meta?.lastUpdated ?? fallbackDate ?? (/* @__PURE__ */ new Date()).toISOString();
-  const vid = lastUpdated.replace(/[-:T.Z]/g, "").slice(0, 12) || Date.now().toString(36);
-  const resourceLike = resourceWithAudit;
-  const summary = JSON.stringify(extractSummary(resourceLike));
-  const gsi1sk = extractSortKey(resourceLike);
-  await entity.put({
-    sk: DATA_ENTITY_SK,
-    tenantId,
-    workspaceId,
-    id,
-    resource: compressResource(JSON.stringify(resourceWithAudit)),
-    summary,
-    vid,
-    lastUpdated,
-    gsi1sk
-  }).go();
-  return {
-    id,
-    resource: resourceWithAudit
-  };
-}
-function buildUpdatedResourceWithAudit(body, id, date, actorId, actorName, existingResourceStr, resourceType) {
-  const existingMeta = JSON.parse(existingResourceStr).meta;
-  const bodyWithMeta = body;
-  const resourceWithVersion = {
-    ...body,
-    resourceType,
-    id,
-    meta: {
-      ...bodyWithMeta.meta ?? {},
-      lastUpdated: date,
-      versionId: "2"
-    }
-  };
-  const resourceWithAudit = {
-    ...resourceWithVersion,
-    meta: mergeAuditIntoMeta(resourceWithVersion.meta ?? existingMeta, {
-      modifiedDate: date,
-      modifiedById: actorId,
-      modifiedByName: actorName
-    })
-  };
-  return {
-    resource: resourceWithAudit,
-    lastUpdated: date
-  };
-}
-async function updateDataEntityById(entity, tenantId, workspaceId, id, resourceLabel, context, buildPatched) {
-  const existing = await entity.get({
-    tenantId,
-    workspaceId,
-    id,
-    sk: DATA_ENTITY_SK
-  }).go();
-  if (!existing.data) {
-    throw new NotFoundError(`${resourceLabel} ${id} not found`, {
-      details: { id }
-    });
-  }
-  const existingStr = decompressResource(existing.data.resource);
-  const { resource, lastUpdated } = buildPatched(existingStr);
-  const resourceLike = resource;
-  const summary = JSON.stringify(extractSummary(resourceLike));
-  const gsi1sk = extractSortKey(resourceLike);
-  await entity.patch({
-    tenantId,
-    workspaceId,
-    id,
-    sk: DATA_ENTITY_SK
-  }).set({
-    resource: compressResource(JSON.stringify(resource)),
-    summary,
-    lastUpdated,
-    gsi1sk
-  }).go();
-  return {
-    id,
-    resource
-  };
-}
-
 // src/data/operations/control/configuration/configuration-list-operation.ts
 var SK4 = "CURRENT";
 async function listConfigurationsOperation(params) {
@@ -1304,32 +1013,6 @@ router.delete("/:id", deleteConfigurationRoute);
 // src/data/rest-api/routes/control/membership/membership.ts
 import express2 from "express";
 
-// src/data/operations/control/membership/membership-create-operation.ts
-import { extractSummary as extractSummary2 } from "@openhi/types";
-async function createMembershipOperation(params) {
-  const { context, body, tableName } = params;
-  const service = getDynamoControlService(tableName);
-  const id = body.id ?? `membership-${Date.now()}`;
-  const parsedResource = typeof body.resource === "string" ? JSON.parse(body.resource) : body.resource ?? {};
-  const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
-  const vid = `1`;
-  const resource = { resourceType: "Membership", id, ...parsedResource };
-  const summary = JSON.stringify(extractSummary2(resource));
-  await service.entities.membership.put({
-    tenantId: context.tenantId,
-    id,
-    resource: JSON.stringify(resource),
-    summary,
-    vid,
-    lastUpdated
-  }).go();
-  return {
-    id,
-    resource,
-    meta: { lastUpdated, versionId: vid }
-  };
-}
-
 // src/data/rest-api/routes/control/membership/membership-create-route.ts
 async function createMembershipRoute(req, res) {
   const bodyResult = requireJsonBody(req, res);
@@ -1474,7 +1157,7 @@ async function listMembershipsRoute(req, res) {
 }
 
 // src/data/operations/control/membership/membership-update-operation.ts
-import { extractSummary as extractSummary3 } from "@openhi/types";
+import { extractSummary } from "@openhi/types";
 async function updateMembershipOperation(params) {
   const { context, id, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -1486,7 +1169,7 @@ async function updateMembershipOperation(params) {
   const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = `${Date.now()}`;
   const resource = { resourceType: "Membership", id, ...parsedResource };
-  const summary = JSON.stringify(extractSummary3(resource));
+  const summary = JSON.stringify(extractSummary(resource));
   await service.entities.membership.put({
     tenantId: context.tenantId,
     id,
@@ -1553,31 +1236,6 @@ router2.delete("/:id", deleteMembershipRoute);
 // src/data/rest-api/routes/control/role/role.ts
 import express3 from "express";
 
-// src/data/operations/control/role/role-create-operation.ts
-import { extractSummary as extractSummary4 } from "@openhi/types";
-async function createRoleOperation(params) {
-  const { context, body, tableName } = params;
-  const service = getDynamoControlService(tableName);
-  const id = body.id ?? `role-${Date.now()}`;
-  const parsedResource = typeof body.resource === "string" ? JSON.parse(body.resource) : body.resource ?? {};
-  const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
-  const vid = `1`;
-  const resource = { resourceType: "Role", id, ...parsedResource };
-  const summary = JSON.stringify(extractSummary4(resource));
-  await service.entities.role.put({
-    id,
-    resource: JSON.stringify(resource),
-    summary,
-    vid,
-    lastUpdated
-  }).go();
-  return {
-    id,
-    resource,
-    meta: { lastUpdated, versionId: vid }
-  };
-}
-
 // src/data/rest-api/routes/control/role/role-create-route.ts
 async function createRoleRoute(req, res) {
   const bodyResult = requireJsonBody(req, res);
@@ -1630,22 +1288,6 @@ async function deleteRoleRoute(req, res) {
   }
 }
 
-// src/data/operations/control/role/role-get-by-id-operation.ts
-async function getRoleByIdOperation(params) {
-  const { id, tableName } = params;
-  const service = getDynamoControlService(tableName);
-  const response = await service.entities.role.get({ id, sk: "CURRENT" }).go();
-  const item = response.data;
-  if (!item) {
-    throw new NotFoundError(`Role not found: ${id}`);
-  }
-  const parsedResource = JSON.parse(item.resource);
-  return {
-    id,
-    resource: { resourceType: "Role", id, ...parsedResource }
-  };
-}
-
 // src/data/rest-api/routes/control/role/role-get-by-id-route.ts
 async function getRoleByIdRoute(req, res) {
   const id = String(req.params.id);
@@ -1721,7 +1363,7 @@ async function listRolesRoute(req, res) {
 }
 
 // src/data/operations/control/role/role-update-operation.ts
-import { extractSummary as extractSummary5 } from "@openhi/types";
+import { extractSummary as extractSummary2 } from "@openhi/types";
 async function updateRoleOperation(params) {
   const { context, id, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -1733,7 +1375,7 @@ async function updateRoleOperation(params) {
   const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = `${Date.now()}`;
   const resource = { resourceType: "Role", id, ...parsedResource };
-  const summary = JSON.stringify(extractSummary5(resource));
+  const summary = JSON.stringify(extractSummary2(resource));
   await service.entities.role.put({
     id,
     resource: JSON.stringify(resource),
@@ -1799,32 +1441,6 @@ router3.delete("/:id", deleteRoleRoute);
 // src/data/rest-api/routes/control/roleassignment/roleassignment.ts
 import express4 from "express";
 
-// src/data/operations/control/roleassignment/roleassignment-create-operation.ts
-import { extractSummary as extractSummary6 } from "@openhi/types";
-async function createRoleAssignmentOperation(params) {
-  const { context, body, tableName } = params;
-  const service = getDynamoControlService(tableName);
-  const id = body.id ?? `roleassignment-${Date.now()}`;
-  const parsedResource = typeof body.resource === "string" ? JSON.parse(body.resource) : body.resource ?? {};
-  const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
-  const vid = `1`;
-  const resource = { resourceType: "RoleAssignment", id, ...parsedResource };
-  const summary = JSON.stringify(extractSummary6(resource));
-  await service.entities.roleAssignment.put({
-    tenantId: context.tenantId,
-    id,
-    resource: JSON.stringify(resource),
-    summary,
-    vid,
-    lastUpdated
-  }).go();
-  return {
-    id,
-    resource,
-    meta: { lastUpdated, versionId: vid }
-  };
-}
-
 // src/data/rest-api/routes/control/roleassignment/roleassignment-create-route.ts
 async function createRoleAssignmentRoute(req, res) {
   const bodyResult = requireJsonBody(req, res);
@@ -1969,7 +1585,7 @@ async function listRoleAssignmentsRoute(req, res) {
 }
 
 // src/data/operations/control/roleassignment/roleassignment-update-operation.ts
-import { extractSummary as extractSummary7 } from "@openhi/types";
+import { extractSummary as extractSummary3 } from "@openhi/types";
 async function updateRoleAssignmentOperation(params) {
   const { context, id, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -1981,7 +1597,7 @@ async function updateRoleAssignmentOperation(params) {
   const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = `${Date.now()}`;
   const resource = { resourceType: "RoleAssignment", id, ...parsedResource };
-  const summary = JSON.stringify(extractSummary7(resource));
+  const summary = JSON.stringify(extractSummary3(resource));
   await service.entities.roleAssignment.put({
     tenantId: context.tenantId,
     id,
@@ -2048,28 +1664,6 @@ router4.delete("/:id", deleteRoleAssignmentRoute);
 // src/data/rest-api/routes/control/tenant/tenant.ts
 import express5 from "express";
 
-// src/data/operations/control/tenant/tenant-create-operation.ts
-import { extractSummary as extractSummary8 } from "@openhi/types";
-async function createTenantOperation(params) {
-  const { context, body, tableName } = params;
-  const service = getDynamoControlService(tableName);
-  const id = body.id ?? `tenant-${Date.now()}`;
-  const lastUpdated = context.date;
-  const vid = lastUpdated.replace(/[-:T.Z]/g, "").slice(0, 12) || Date.now().toString(36);
-  const parsedResource = typeof body.resource === "string" ? JSON.parse(body.resource) : body.resource ?? {};
-  const resource = { resourceType: "Tenant", id, ...parsedResource };
-  const summary = JSON.stringify(extractSummary8(resource));
-  await service.entities.tenant.put({
-    tenantId: id,
-    id,
-    resource: JSON.stringify(resource),
-    summary,
-    vid,
-    lastUpdated
-  }).go();
-  return { id, resource, meta: { lastUpdated, versionId: vid } };
-}
-
 // src/data/rest-api/routes/control/tenant/tenant-create-route.ts
 async function createTenantRoute(req, res) {
   const bodyResult = requireJsonBody(req, res);
@@ -2216,7 +1810,7 @@ async function listTenantsRoute(req, res) {
 }
 
 // src/data/operations/control/tenant/tenant-update-operation.ts
-import { extractSummary as extractSummary9 } from "@openhi/types";
+import { extractSummary as extractSummary4 } from "@openhi/types";
 async function updateTenantOperation(params) {
   const { context, id, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -2234,7 +1828,7 @@ async function updateTenantOperation(params) {
     resourceType: "Tenant",
     id
   };
-  const summary = JSON.stringify(extractSummary9(updated));
+  const summary = JSON.stringify(extractSummary4(updated));
   await service.entities.tenant.patch({ tenantId: id, sk: "CURRENT" }).set({ resource: JSON.stringify(updated), summary, vid, lastUpdated }).go();
   return { id, resource: updated, meta: { lastUpdated, versionId: vid } };
 }
@@ -2290,31 +1884,6 @@ router5.delete("/:id", deleteTenantRoute);
 // src/data/rest-api/routes/control/user/user.ts
 import express6 from "express";
 
-// src/data/operations/control/user/user-create-operation.ts
-import { extractSummary as extractSummary10 } from "@openhi/types";
-async function createUserOperation(params) {
-  const { context, body, tableName } = params;
-  const service = getDynamoControlService(tableName);
-  const id = body.id ?? `user-${Date.now()}`;
-  const parsedResource = typeof body.resource === "string" ? JSON.parse(body.resource) : body.resource ?? {};
-  const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
-  const vid = `1`;
-  const resource = { resourceType: "User", id, ...parsedResource };
-  const summary = JSON.stringify(extractSummary10(resource));
-  await service.entities.user.put({
-    id,
-    resource: JSON.stringify(resource),
-    summary,
-    vid,
-    lastUpdated
-  }).go();
-  return {
-    id,
-    resource,
-    meta: { lastUpdated, versionId: vid }
-  };
-}
-
 // src/data/rest-api/routes/control/user/user-create-route.ts
 async function createUserRoute(req, res) {
   const bodyResult = requireJsonBody(req, res);
@@ -2342,13 +1911,6 @@ async function createUserRoute(req, res) {
   }
 }
 
-// src/data/operations/control/user/user-delete-operation.ts
-async function deleteUserOperation(params) {
-  const { id, tableName } = params;
-  const service = getDynamoControlService(tableName);
-  await service.entities.user.delete({ id, sk: "CURRENT" }).go();
-}
-
 // src/data/rest-api/routes/control/user/user-delete-route.ts
 async function deleteUserRoute(req, res) {
   const id = String(req.params.id);
@@ -2367,22 +1929,6 @@ async function deleteUserRoute(req, res) {
   }
 }
 
-// src/data/operations/control/user/user-get-by-id-operation.ts
-async function getUserByIdOperation(params) {
-  const { id, tableName } = params;
-  const service = getDynamoControlService(tableName);
-  const response = await service.entities.user.get({ id, sk: "CURRENT" }).go();
-  const item = response.data;
-  if (!item) {
-    throw new NotFoundError(`User not found: ${id}`);
-  }
-  const parsedResource = JSON.parse(item.resource);
-  return {
-    id,
-    resource: { resourceType: "User", id, ...parsedResource }
-  };
-}
-
 // src/data/rest-api/routes/control/user/user-get-by-id-route.ts
 async function getUserByIdRoute(req, res) {
   const id = String(req.params.id);
@@ -2414,38 +1960,6 @@ async function getUserByIdRoute(req, res) {
   }
 }
 
-// src/data/operations/control/user/user-list-operation.ts
-var SK10 = "CURRENT";
-async function listUsersOperation(params) {
-  const { tableName, mode = "full" } = params;
-  const service = getDynamoControlService(tableName);
-  const shardResults = await Promise.all(
-    Array.from(
-      { length: SHARD_COUNT },
-      (_, shard) => service.entities.user.query.gsi1({ gsi1Shard: String(shard) }).go()
-    )
-  );
-  return dispatchListMode(mode, shardResults, {
-    hydrate: (orderedIds) => batchGetWithRetry(
-      service.entities.user,
-      orderedIds.map((id) => ({ id, sk: SK10 }))
-    ),
-    getId: (item) => item.id,
-    buildEntry: (id, item) => ({
-      id,
-      resource: {
-        resourceType: "User",
-        id,
-        ...JSON.parse(item.resource)
-      }
-    }),
-    buildSummaryEntry: (id, parsed) => ({
-      id,
-      resource: { resourceType: "User", id, ...parsed }
-    })
-  });
-}
-
 // src/data/rest-api/routes/control/user/user-list-route.ts
 async function listUsersRoute(req, res) {
   return handleListRoute({
@@ -2457,34 +1971,6 @@ async function listUsersRoute(req, res) {
   });
 }
 
-// src/data/operations/control/user/user-update-operation.ts
-import { extractSummary as extractSummary11 } from "@openhi/types";
-async function updateUserOperation(params) {
-  const { context, id, body, tableName } = params;
-  const service = getDynamoControlService(tableName);
-  const existing = await service.entities.user.get({ id, sk: "CURRENT" }).go();
-  if (!existing.data) {
-    throw new NotFoundError(`User not found: ${id}`);
-  }
-  const parsedResource = typeof body.resource === "string" ? JSON.parse(body.resource) : body.resource ?? {};
-  const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
-  const vid = `${Date.now()}`;
-  const resource = { resourceType: "User", id, ...parsedResource };
-  const summary = JSON.stringify(extractSummary11(resource));
-  await service.entities.user.put({
-    id,
-    resource: JSON.stringify(resource),
-    summary,
-    vid,
-    lastUpdated
-  }).go();
-  return {
-    id,
-    resource,
-    meta: { lastUpdated, versionId: vid }
-  };
-}
-
 // src/data/rest-api/routes/control/user/user-update-route.ts
 async function updateUserRoute(req, res) {
   const bodyResult = requireJsonBody(req, res);
@@ -2536,29 +2022,6 @@ router6.delete("/:id", deleteUserRoute);
 // src/data/rest-api/routes/control/workspace/workspace.ts
 import express7 from "express";
 
-// src/data/operations/control/workspace/workspace-create-operation.ts
-import { extractSummary as extractSummary12 } from "@openhi/types";
-async function createWorkspaceOperation(params) {
-  const { context, body, tableName } = params;
-  const { tenantId } = context;
-  const service = getDynamoControlService(tableName);
-  const id = body.id ?? `workspace-${Date.now()}`;
-  const lastUpdated = context.date;
-  const vid = lastUpdated.replace(/[-:T.Z]/g, "").slice(0, 12) || Date.now().toString(36);
-  const parsedResource = typeof body.resource === "string" ? JSON.parse(body.resource) : body.resource ?? {};
-  const resource = { resourceType: "Workspace", id, ...parsedResource };
-  const summary = JSON.stringify(extractSummary12(resource));
-  await service.entities.workspace.put({
-    tenantId,
-    id,
-    resource: JSON.stringify(resource),
-    summary,
-    vid,
-    lastUpdated
-  }).go();
-  return { id, resource, meta: { lastUpdated, versionId: vid } };
-}
-
 // src/data/rest-api/routes/control/workspace/workspace-create-route.ts
 async function createWorkspaceRoute(req, res) {
   const bodyResult = requireJsonBody(req, res);
@@ -2660,7 +2123,7 @@ async function getWorkspaceByIdRoute(req, res) {
 }
 
 // src/data/operations/control/workspace/workspace-list-operation.ts
-var SK11 = "CURRENT";
+var SK10 = "CURRENT";
 async function listWorkspacesOperation(params) {
   const { context, tableName, mode = "full" } = params;
   const { tenantId } = context;
@@ -2677,7 +2140,7 @@ async function listWorkspacesOperation(params) {
     {
       hydrate: (orderedIds) => batchGetWithRetry(
         service.entities.workspace,
-        orderedIds.map((id) => ({ tenantId, id, sk: SK11 }))
+        orderedIds.map((id) => ({ tenantId, id, sk: SK10 }))
       ),
       getId: (item) => item.id,
       buildEntry: (id, item) => ({
@@ -2708,7 +2171,7 @@ async function listWorkspacesRoute(req, res) {
 }
 
 // src/data/operations/control/workspace/workspace-update-operation.ts
-import { extractSummary as extractSummary13 } from "@openhi/types";
+import { extractSummary as extractSummary5 } from "@openhi/types";
 async function updateWorkspaceOperation(params) {
   const { context, id, body, tableName } = params;
   const { tenantId } = context;
@@ -2727,7 +2190,7 @@ async function updateWorkspaceOperation(params) {
     resourceType: "Workspace",
     id
   };
-  const summary = JSON.stringify(extractSummary13(updated));
+  const summary = JSON.stringify(extractSummary5(updated));
   await service.entities.workspace.patch({ tenantId, id, sk: "CURRENT" }).set({ resource: JSON.stringify(updated), summary, vid, lastUpdated }).go();
   return { id, resource: updated, meta: { lastUpdated, versionId: vid } };
 }
@@ -4828,8 +4291,12 @@ var DataApiPostgresQueryRunner = class {
         resourceArn: this.clusterArn,
         secretArn: this.secretArn,
         database: this.database,
-        schema: this.schema,
-        sql,
+        // NOTE: the Data API `schema` field is intentionally NOT set —
+        // Aurora Serverless v2's Data API rejects it with
+        // `ValidationException: The schema parameter isn't supported.`
+        // Instead, the SQL is rewritten to schema-qualify the `resources`
+        // table inline before being sent. See {@link qualifyResourcesTable}.
+        sql: qualifyResourcesTable(sql, this.schema),
         parameters: params.map(toSqlParameter),
         // Results as named columns so we can map them back to JS objects.
         includeResultMetadata: true,
@@ -4845,6 +4312,12 @@ var DataApiPostgresQueryRunner = class {
     return JSON.parse(out.formattedRecords);
   }
 };
+function qualifyResourcesTable(sql, schema) {
+  return sql.replace(
+    /(\b(?:FROM|JOIN)\s+)resources\b/gi,
+    `$1"${schema}".resources`
+  );
+}
 function toSqlParameter(param) {
   if (param.value === null) {
     return { name: param.name, value: { isNull: true } };