@openhi/constructs 0.0.105 → 0.0.107

package/lib/provision-default-workspace.handler.js

@@ -24,7 +24,7 @@ __export(provision_default_workspace_handler_exports, {
 });
 module.exports = __toCommonJS(provision_default_workspace_handler_exports);
 var import_node_crypto = require("crypto");
-var import_types8 = require("@openhi/types");
+var import_types9 = require("@openhi/types");
 
 // src/data/dynamo/dynamo-control-service.ts
 var import_electrodb8 = require("electrodb");
@@ -43,6 +43,9 @@ var dynamoClient = new import_client_dynamodb.DynamoDBClient({
 // src/data/dynamo/entities/control/configuration-entity.ts
 var import_electrodb = require("electrodb");
 
+// src/data/dynamo/entities/control/control-entity-common.ts
+var import_types = require("@openhi/types");
+
 // src/data/dynamo/shard.ts
 var SHARD_COUNT = 4;
 function computeShard(id) {
@@ -65,6 +68,29 @@ var gsi1ShardAttribute = {
     return String(computeShard(item.id));
   }
 };
+var gsi1skAttribute = {
+  type: "string",
+  watch: ["resource", "lastUpdated", "id"],
+  set: (_val, item) => {
+    const id = typeof item?.id === "string" ? item.id : "";
+    const lastUpdated = typeof item?.lastUpdated === "string" ? item.lastUpdated : "";
+    const fallback = `${lastUpdated}#${id}`;
+    if (typeof item?.resource !== "string" || item.resource.length === 0) {
+      return fallback;
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(item.resource);
+    } catch {
+      return fallback;
+    }
+    if (!parsed || typeof parsed !== "object") return fallback;
+    const resourceType = parsed.resourceType;
+    if (typeof resourceType !== "string") return fallback;
+    const label = (0, import_types.extractLabel)(parsed);
+    return label !== void 0 ? `${label}#${id}` : fallback;
+  }
+};
 
 // src/data/dynamo/entities/control/configuration-entity.ts
 var ConfigurationEntity = new import_electrodb.Entity({
@@ -170,8 +196,9 @@ var ConfigurationEntity = new import_electrodb.Entity({
      * (workspaceId = "-") or "list configs scoped to this workspace". Does not support
      * hierarchical resolution in one query; use base table GetItem in fallback order
      * (user → workspace → tenant → baseline) for that.
-     * SK is `<ISO-8601 lastUpdated>#<id>` (control-plane unlabeled per DR-004).
-     * `casing: "none"` on the SK preserves ISO-8601 `T`/`Z`.
+     * SK is `<key>#<id>` — Configuration's `key` is a required entity attribute (the
+     * config category: endpoints, branding, display, …) and the natural sort/lookup
+     * dimension. `casing: "none"` preserves the literal key value.
      */
     gsi1: {
       index: "GSI1",
@@ -183,8 +210,8 @@ var ConfigurationEntity = new import_electrodb.Entity({
       sk: {
         field: "GSI1SK",
         casing: "none",
-        composite: ["lastUpdated", "id"],
-        template: "${lastUpdated}#${id}"
+        composite: ["key", "id"],
+        template: "${key}#${id}"
       }
     }
   }
@@ -238,6 +265,8 @@ var MembershipEntity = new import_electrodb2.Entity({
       required: true
     },
     gsi1Shard: gsi1ShardAttribute,
+    /** Derived GSI1 sort key — name-based when extractable; else `<lastUpdated>#<id>`. */
+    gsi1sk: gsi1skAttribute,
     deleted: {
       type: "boolean",
       required: false
@@ -268,8 +297,9 @@ var MembershipEntity = new import_electrodb2.Entity({
     /**
      * GSI1 — Unified Sharded List per ADR-011: list all Memberships for a tenant across the
      * four shards. Membership is tenant-scoped only, so `WID#-` is a sentinel.
-     * SK is `<ISO-8601 lastUpdated>#<id>` (control-plane unlabeled per DR-004).
-     * `casing: "none"` on the SK preserves ISO-8601 `T`/`Z`.
+     * SK is derived via `gsi1skAttribute` — uses the resource's natural label when
+     * extractable, else `<lastUpdated>#<id>` (DR-004). `casing: "none"` preserves the
+     * normalized label and ISO-8601 `T`/`Z`.
      */
     gsi1: {
       index: "GSI1",
@@ -281,8 +311,8 @@ var MembershipEntity = new import_electrodb2.Entity({
       sk: {
         field: "GSI1SK",
         casing: "none",
-        composite: ["lastUpdated", "id"],
-        template: "${lastUpdated}#${id}"
+        composite: ["gsi1sk"],
+        template: "${gsi1sk}"
       }
     }
   }
@@ -331,6 +361,8 @@ var RoleEntity = new import_electrodb3.Entity({
       required: true
     },
     gsi1Shard: gsi1ShardAttribute,
+    /** Derived GSI1 sort key — name-based when extractable; else `<lastUpdated>#<id>`. */
+    gsi1sk: gsi1skAttribute,
     deleted: {
       type: "boolean",
       required: false
@@ -361,8 +393,9 @@ var RoleEntity = new import_electrodb3.Entity({
     /**
      * GSI1 — Unified Sharded List per ADR-011: list all Roles across the four shards.
      * Non-tenant-isolated, so `TID#-#WID#-` sentinels precede `RT#Role#SHARD#<n>`.
-     * SK is `<ISO-8601 lastUpdated>#<id>` (control-plane unlabeled per DR-004).
-     * `casing: "none"` on the SK preserves ISO-8601 `T`/`Z`.
+     * SK is derived via `gsi1skAttribute` — uses the resource's natural label when
+     * extractable, else `<lastUpdated>#<id>` (DR-004). `casing: "none"` preserves the
+     * normalized label and ISO-8601 `T`/`Z`.
      */
     gsi1: {
       index: "GSI1",
@@ -374,8 +407,8 @@ var RoleEntity = new import_electrodb3.Entity({
       sk: {
         field: "GSI1SK",
         casing: "none",
-        composite: ["lastUpdated", "id"],
-        template: "${lastUpdated}#${id}"
+        composite: ["gsi1sk"],
+        template: "${gsi1sk}"
       }
     }
   }
@@ -429,6 +462,8 @@ var RoleAssignmentEntity = new import_electrodb4.Entity({
       required: true
     },
     gsi1Shard: gsi1ShardAttribute,
+    /** Derived GSI1 sort key — name-based when extractable; else `<lastUpdated>#<id>`. */
+    gsi1sk: gsi1skAttribute,
     deleted: {
       type: "boolean",
       required: false
@@ -459,8 +494,9 @@ var RoleAssignmentEntity = new import_electrodb4.Entity({
     /**
      * GSI1 — Unified Sharded List per ADR-011: list all RoleAssignments for a tenant across the
      * four shards. Tenant-scoped only, so `WID#-` is a sentinel.
-     * SK is `<ISO-8601 lastUpdated>#<id>` (control-plane unlabeled per DR-004).
-     * `casing: "none"` on the SK preserves ISO-8601 `T`/`Z`.
+     * SK is derived via `gsi1skAttribute` — uses the resource's natural label when
+     * extractable, else `<lastUpdated>#<id>` (DR-004). `casing: "none"` preserves the
+     * normalized label and ISO-8601 `T`/`Z`.
      */
     gsi1: {
       index: "GSI1",
@@ -472,8 +508,8 @@ var RoleAssignmentEntity = new import_electrodb4.Entity({
       sk: {
         field: "GSI1SK",
         casing: "none",
-        composite: ["lastUpdated", "id"],
-        template: "${lastUpdated}#${id}"
+        composite: ["gsi1sk"],
+        template: "${gsi1sk}"
       }
     }
   }
@@ -527,6 +563,8 @@ var TenantEntity = new import_electrodb5.Entity({
       required: true
     },
     gsi1Shard: gsi1ShardAttribute,
+    /** Derived GSI1 sort key — name-based when extractable; else `<lastUpdated>#<id>`. */
+    gsi1sk: gsi1skAttribute,
     deleted: {
       type: "boolean",
       required: false
@@ -557,8 +595,9 @@ var TenantEntity = new import_electrodb5.Entity({
     /**
      * GSI1 — Unified Sharded List per ADR-011: list all Tenants across the four shards.
      * Tenant lives at the platform tier (no parent tenant or workspace), so `TID#-#WID#-`
-     * sentinels precede `RT#Tenant#SHARD#<n>`. SK is `<ISO-8601 lastUpdated>#<id>` (control-plane
-     * unlabeled per DR-004). `casing: "none"` on the SK preserves ISO-8601 `T`/`Z`.
+     * sentinels precede `RT#Tenant#SHARD#<n>`. SK is derived via `gsi1skAttribute` —
+     * `<normalizedName>#<id>` when the resource carries a `name`, else `<lastUpdated>#<id>`
+     * (DR-004). `casing: "none"` preserves the normalized label and ISO-8601 `T`/`Z`.
      */
     gsi1: {
       index: "GSI1",
@@ -570,8 +609,8 @@ var TenantEntity = new import_electrodb5.Entity({
       sk: {
         field: "GSI1SK",
         casing: "none",
-        composite: ["lastUpdated", "id"],
-        template: "${lastUpdated}#${id}"
+        composite: ["gsi1sk"],
+        template: "${gsi1sk}"
       }
     }
   }
@@ -628,6 +667,8 @@ var UserEntity = new import_electrodb6.Entity({
       required: true
     },
     gsi1Shard: gsi1ShardAttribute,
+    /** Derived GSI1 sort key — name-based when extractable; else `<lastUpdated>#<id>`. */
+    gsi1sk: gsi1skAttribute,
     deleted: {
       type: "boolean",
       required: false
@@ -658,8 +699,9 @@ var UserEntity = new import_electrodb6.Entity({
     /**
      * GSI1 — Unified Sharded List per ADR-011: list all Users across the four shards.
      * Non-tenant-isolated, so `TID#-#WID#-` sentinels precede `RT#User#SHARD#<n>`.
-     * SK is `<ISO-8601 lastUpdated>#<id>` (control-plane unlabeled per DR-004).
-     * `casing: "none"` on the SK preserves ISO-8601 `T`/`Z` characters.
+     * SK is derived via `gsi1skAttribute` — uses the resource's natural label when
+     * extractable (string `name`/`title` via introspection), else `<lastUpdated>#<id>`
+     * (DR-004). `casing: "none"` preserves the normalized label and ISO-8601 `T`/`Z`.
      */
     gsi1: {
       index: "GSI1",
@@ -671,8 +713,8 @@ var UserEntity = new import_electrodb6.Entity({
       sk: {
         field: "GSI1SK",
         casing: "none",
-        composite: ["lastUpdated", "id"],
-        template: "${lastUpdated}#${id}"
+        composite: ["gsi1sk"],
+        template: "${gsi1sk}"
       }
     },
     /**
@@ -747,6 +789,8 @@ var WorkspaceEntity = new import_electrodb7.Entity({
       required: true
     },
     gsi1Shard: gsi1ShardAttribute,
+    /** Derived GSI1 sort key — name-based when extractable; else `<lastUpdated>#<id>`. */
+    gsi1sk: gsi1skAttribute,
     deleted: {
       type: "boolean",
       required: false
@@ -777,8 +821,9 @@ var WorkspaceEntity = new import_electrodb7.Entity({
     /**
      * GSI1 — Unified Sharded List per ADR-011: list all Workspaces for a tenant across the
      * four shards. Workspace is itself the workspace identity, so `WID#-` is a sentinel.
-     * SK is `<ISO-8601 lastUpdated>#<id>` (control-plane unlabeled per DR-004).
-     * `casing: "none"` on the SK preserves ISO-8601 `T`/`Z`.
+     * SK is derived via `gsi1skAttribute` — `<normalizedName>#<id>` when the resource
+     * carries a `name`, else `<lastUpdated>#<id>` (DR-004). `casing: "none"` preserves
+     * the normalized label and ISO-8601 `T`/`Z`.
      */
     gsi1: {
       index: "GSI1",
@@ -790,8 +835,8 @@ var WorkspaceEntity = new import_electrodb7.Entity({
       sk: {
         field: "GSI1SK",
         casing: "none",
-        composite: ["lastUpdated", "id"],
-        template: "${lastUpdated}#${id}"
+        composite: ["gsi1sk"],
+        template: "${gsi1sk}"
       }
     }
   }
@@ -826,7 +871,7 @@ function getDynamoControlService(tableName) {
 }
 
 // src/data/operations/control/membership/membership-create-operation.ts
-var import_types = require("@openhi/types");
+var import_types2 = require("@openhi/types");
 async function createMembershipOperation(params) {
   const { context, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -835,7 +880,7 @@ async function createMembershipOperation(params) {
   const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = `1`;
   const resource = { resourceType: "Membership", id, ...parsedResource };
-  const summary = JSON.stringify((0, import_types.extractSummary)(resource));
+  const summary = JSON.stringify((0, import_types2.extractSummary)(resource));
   await service.entities.membership.put({
     tenantId: context.tenantId,
     id,
@@ -852,7 +897,7 @@ async function createMembershipOperation(params) {
 }
 
 // src/data/operations/control/roleassignment/roleassignment-create-operation.ts
-var import_types2 = require("@openhi/types");
+var import_types3 = require("@openhi/types");
 async function createRoleAssignmentOperation(params) {
   const { context, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -861,7 +906,7 @@ async function createRoleAssignmentOperation(params) {
   const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = `1`;
   const resource = { resourceType: "RoleAssignment", id, ...parsedResource };
-  const summary = JSON.stringify((0, import_types2.extractSummary)(resource));
+  const summary = JSON.stringify((0, import_types3.extractSummary)(resource));
   await service.entities.roleAssignment.put({
     tenantId: context.tenantId,
     id,
@@ -878,7 +923,7 @@ async function createRoleAssignmentOperation(params) {
 }
 
 // src/data/operations/control/tenant/tenant-create-operation.ts
-var import_types3 = require("@openhi/types");
+var import_types4 = require("@openhi/types");
 async function createTenantOperation(params) {
   const { context, body, tableName } = params;
   const service = getDynamoControlService(tableName);
@@ -887,7 +932,7 @@ async function createTenantOperation(params) {
   const vid = lastUpdated.replace(/[-:T.Z]/g, "").slice(0, 12) || Date.now().toString(36);
   const parsedResource = typeof body.resource === "string" ? JSON.parse(body.resource) : body.resource ?? {};
   const resource = { resourceType: "Tenant", id, ...parsedResource };
-  const summary = JSON.stringify((0, import_types3.extractSummary)(resource));
+  const summary = JSON.stringify((0, import_types4.extractSummary)(resource));
   await service.entities.tenant.put({
     tenantId: id,
     id,
@@ -900,7 +945,7 @@ async function createTenantOperation(params) {
 }
 
 // src/data/operations/control/user/user-create-operation.ts
-var import_types4 = require("@openhi/types");
+var import_types5 = require("@openhi/types");
 
 // src/data/operations/control/user/user-find-by-sub-operation.ts
 async function findUserBySubOperation(params) {
@@ -920,13 +965,13 @@ async function findUserBySubOperation(params) {
 }
 
 // src/data/operations/data-operations-common.ts
-var import_types5 = require("@openhi/types");
+var import_types6 = require("@openhi/types");
 
 // src/lib/compression.ts
 var import_node_zlib = require("zlib");
 
 // src/data/operations/control/user/user-update-operation.ts
-var import_types6 = require("@openhi/types");
+var import_types7 = require("@openhi/types");
 
 // src/data/operations/control/user/user-resource-helpers.ts
 function parseUserResource(resource) {
@@ -938,7 +983,7 @@ function parseUserResource(resource) {
 }
 
 // src/data/operations/control/workspace/workspace-create-operation.ts
-var import_types7 = require("@openhi/types");
+var import_types8 = require("@openhi/types");
 async function createWorkspaceOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId } = context;
@@ -948,7 +993,7 @@ async function createWorkspaceOperation(params) {
   const vid = lastUpdated.replace(/[-:T.Z]/g, "").slice(0, 12) || Date.now().toString(36);
   const parsedResource = typeof body.resource === "string" ? JSON.parse(body.resource) : body.resource ?? {};
   const resource = { resourceType: "Workspace", id, ...parsedResource };
-  const summary = JSON.stringify((0, import_types7.extractSummary)(resource));
+  const summary = JSON.stringify((0, import_types8.extractSummary)(resource));
   await service.entities.workspace.put({
     tenantId,
     id,
@@ -973,7 +1018,7 @@ function idFromReference(reference, prefix) {
 var CURRENT_SK = "CURRENT";
 var VID = "1";
 var summaryFor = (resource) => {
-  return JSON.stringify((0, import_types8.extractSummary)(resource));
+  return JSON.stringify((0, import_types9.extractSummary)(resource));
 };
 var stableOnboardingId = (kind, cognitoSub) => {
   return (0, import_node_crypto.createHash)("sha256").update(kind).update("\0").update(cognitoSub).digest("hex").slice(0, 26).toUpperCase();