@openhi/constructs 0.0.110 → 0.0.112

package/lib/chunk-23PUSHBV.mjs

@@ -0,0 +1,24 @@
+import {
+  require_lib
+} from "./chunk-ZM4GDHHC.mjs";
+import {
+  __toESM
+} from "./chunk-LZOMFHX3.mjs";
+
+// src/workflows/control-plane/rename-cascade/events.ts
+var import_workflows = __toESM(require_lib());
+var RENAME_CASCADE_CONSUMER_NAME = "rename-cascade";
+var RENAME_CASCADE_DEFAULT_CONCURRENCY = 10;
+var RENAME_CASCADE_FAILED_THRESHOLD = 0;
+var RENAME_CASCADE_SLOW_THRESHOLD_SECONDS = 300;
+var RENAME_CASCADE_OPS_EVENT_BUS_ENV_VAR = "RENAME_CASCADE_OPS_EVENT_BUS_NAME";
+
+export {
+  RENAME_CASCADE_CONSUMER_NAME,
+  RENAME_CASCADE_DEFAULT_CONCURRENCY,
+  RENAME_CASCADE_FAILED_THRESHOLD,
+  RENAME_CASCADE_SLOW_THRESHOLD_SECONDS,
+  RENAME_CASCADE_OPS_EVENT_BUS_ENV_VAR,
+  import_workflows
+};
+//# sourceMappingURL=chunk-23PUSHBV.mjs.map

package/lib/chunk-23PUSHBV.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/workflows/control-plane/rename-cascade/events.ts"],"sourcesContent":["/**\n * Shared event-shape constants for the TR-023 rename-cascade consumer.\n * The cascade's input detail-type (on the data event bus) and its two\n * terminal detail-types (on the ops event bus) are owned by\n * `@openhi/workflows`; this module re-imports them so the workflow\n * construct can wire the EventBridge rule and the terminal publisher\n * from a single place.\n *\n * @see .state/adr-018-implementation-guide.md section 5\n */\n\nexport {\n  ControlPlaneRenameCompleteV1,\n  ControlPlaneRenameFailedV1,\n  ControlPlaneRenameV1,\n  OPENHI_DATA_SOURCE,\n  OPENHI_OPS_SOURCE,\n  RENAMABLE_ENTITY_TYPE,\n} from \"@openhi/workflows\";\nexport type {\n  ControlPlaneRenameCompleteV1Detail,\n  ControlPlaneRenameFailedV1Detail,\n  ControlPlaneRenameV1Detail,\n  RenamableEntityType,\n} from \"@openhi/workflows\";\n\nimport type { RenamableEntityType } from \"@openhi/workflows\";\nimport type { RenameCascadeRewriteTarget } from \"../../../data/operations/control/rename-cascade/rename-cascade-list-targets-operation\";\n\n/**\n * Stable logical name registered with the shared `WorkflowDedupTable`\n * (TR-015). The state machine's `DedupCheck` state writes a row keyed\n * by `(consumerName, eventId, attempt)` to absorb EventBridge retries.\n */\nexport const RENAME_CASCADE_CONSUMER_NAME = \"rename-cascade\" as const;\n\n/**\n * Distributed-Map max concurrency. Per the ADR-018 implementation guide\n * section 5: Distributed Map (NOT inline — TR-022 owning-delete uses\n * inline), tunable via the construct's `cascadeMapConcurrency` prop.\n * Operators may scale this down on first rollout.\n */\nexport const RENAME_CASCADE_DEFAULT_CONCURRENCY = 10 as const;\n\n/**\n * `CascadeFailed` alarm threshold — fires when ExecutionsFailed exceeds\n * the value over the configured period. Per the implementation guide\n * section 5 \"Alarm thresholds\" table.\n */\nexport const RENAME_CASCADE_FAILED_THRESHOLD = 0 as const;\n\n/**\n * `CascadeSlow` alarm threshold (in seconds) — fires when ExecutionTime\n * p99 exceeds the value. Per the implementation guide section 5.\n */\nexport const RENAME_CASCADE_SLOW_THRESHOLD_SECONDS = 300 as const;\n\n/**\n * Inputs the cascade list-targets step receives. Most fields come\n * straight off the `ControlPlaneRenameV1` envelope payload; `cursors`\n * threads through the outer loop.\n */\nexport interface RenameCascadeListInput {\n  readonly entityType: RenamableEntityType;\n  readonly entityId: string;\n  readonly tenantId?: string;\n  readonly oldName: string;\n  readonly newName: string;\n  readonly oldNormalizedName: string;\n  readonly newNormalizedName: string;\n  readonly cursors?: Record<string, string | null>;\n  /** Cumulative `itemsRewritten` carried forward across pages. */\n  readonly itemsRewritten?: number;\n  /** Cumulative `chunkCount` carried forward across pages. */\n  readonly chunkCount?: number;\n}\n\n/** Inputs the cascade rewrite-chunk step receives — one chunk per Map iteration. */\nexport interface RenameCascadeChunkInput {\n  readonly entityType: RenamableEntityType;\n  readonly entityId: string;\n  readonly tenantId?: string;\n  /** Targets to rewrite in this transaction. Length must be 1..50. */\n  readonly targets: ReadonlyArray<RenameCascadeRewriteTarget>;\n  /**\n   * Idempotency token uniquely identifying this chunk within the\n   * cascade execution. Forwarded to `executeMultiWrite` so replayed\n   * chunks land idempotently.\n   */\n  readonly chunkToken: string;\n}\n\n/** Outputs the cascade list-targets step emits to feed the Distributed Map state. */\nexport interface RenameCascadeListOutput {\n  readonly entityType: RenamableEntityType;\n  readonly entityId: string;\n  readonly tenantId?: string;\n  readonly oldName: string;\n  readonly newName: string;\n  readonly oldNormalizedName: string;\n  readonly newNormalizedName: string;\n  readonly cursors: Record<string, string | null>;\n  readonly chunks: ReadonlyArray<RenameCascadeChunkInput>;\n  readonly exhausted: boolean;\n  readonly itemsRewritten: number;\n  readonly chunkCount: number;\n}\n\n/** Inputs the cascade finalize step receives. */\nexport interface RenameCascadeFinalizeInput {\n  readonly entityType: RenamableEntityType;\n  readonly entityId: string;\n  readonly tenantId?: string;\n  readonly newName: string;\n  readonly itemsRewritten: number;\n  readonly chunkCount: number;\n  readonly startedAt: string;\n  /** Optional eventId / correlation for ADR-016 envelope chaining. */\n  readonly eventId?: string;\n  readonly correlationId?: string;\n  readonly causationId?: string;\n}\n\n/** Outputs the cascade finalize step emits (used by tests + telemetry). */\nexport interface RenameCascadeFinalizeOutput {\n  readonly entityType: RenamableEntityType;\n  readonly entityId: string;\n  readonly tenantId?: string;\n  readonly newName: string;\n  readonly itemsRewritten: number;\n  readonly chunkCount: number;\n  readonly durationMs: number;\n  readonly completedAt: string;\n}\n\n/** Env var the construct uses to inject the ops event bus name into the finalize Lambda. */\nexport const RENAME_CASCADE_OPS_EVENT_BUS_ENV_VAR =\n  \"RENAME_CASCADE_OPS_EVENT_BUS_NAME\" as const;\n"],"mappings":";;;;;;;;AAWA,uBAOO;AAgBA,IAAM,+BAA+B;AAQrC,IAAM,qCAAqC;AAO3C,IAAM,kCAAkC;AAMxC,IAAM,wCAAwC;AAiF9C,IAAM,uCACX;","names":[]}

package/lib/chunk-2O3CXY2C.mjs

@@ -0,0 +1,79 @@
+// src/components/postgres/data-store-postgres-schema.ts
+var SCHEMA_NAME_PATTERN = /^[a-z_][a-z0-9_]{0,62}$/;
+function quoteSchemaIdentifier(schemaName) {
+  if (!SCHEMA_NAME_PATTERN.test(schemaName)) {
+    throw new Error(
+      `Invalid Postgres schema name: ${JSON.stringify(schemaName)}; expected /[a-z_][a-z0-9_]{0,62}/`
+    );
+  }
+  return `"${schemaName}"`;
+}
+function buildSchemaBootstrapStatements(schemaName) {
+  const s = quoteSchemaIdentifier(schemaName);
+  return [
+    `CREATE SCHEMA IF NOT EXISTS ${s};`,
+    [
+      `CREATE TABLE IF NOT EXISTS ${s}.resources (`,
+      `  tenant_id     text        NOT NULL,`,
+      `  workspace_id  text        NOT NULL,`,
+      `  resource_type text        NOT NULL,`,
+      `  resource_id   text        NOT NULL,`,
+      `  version       text        NOT NULL,`,
+      `  last_updated  timestamptz NOT NULL,`,
+      `  deleted_at    timestamptz,`,
+      `  resource      jsonb       NOT NULL,`,
+      `  PRIMARY KEY (tenant_id, workspace_id, resource_type, resource_id)`,
+      `);`
+    ].join("\n"),
+    [
+      `CREATE INDEX IF NOT EXISTS resources_jsonb_gin`,
+      `  ON ${s}.resources USING gin (resource);`
+    ].join("\n"),
+    [
+      `CREATE INDEX IF NOT EXISTS resources_listing`,
+      `  ON ${s}.resources (tenant_id, workspace_id, resource_type, last_updated);`
+    ].join("\n")
+  ];
+}
+function buildSchemaBootstrapSql(schemaName) {
+  return buildSchemaBootstrapStatements(schemaName).join("\n");
+}
+function buildResourceUpsertSql(schemaName) {
+  const s = quoteSchemaIdentifier(schemaName);
+  return [
+    `INSERT INTO ${s}.resources`,
+    `  (tenant_id, workspace_id, resource_type, resource_id, version, last_updated, deleted_at, resource)`,
+    `VALUES ($1, $2, $3, $4, $5, $6, NULL, $7::jsonb)`,
+    `ON CONFLICT (tenant_id, workspace_id, resource_type, resource_id)`,
+    `DO UPDATE SET`,
+    `  version       = EXCLUDED.version,`,
+    `  last_updated  = EXCLUDED.last_updated,`,
+    `  deleted_at    = NULL,`,
+    `  resource      = EXCLUDED.resource`,
+    `WHERE EXCLUDED.version > ${s}.resources.version;`
+  ].join("\n");
+}
+function buildResourceSoftDeleteSql(schemaName) {
+  const s = quoteSchemaIdentifier(schemaName);
+  return [
+    `UPDATE ${s}.resources`,
+    `SET deleted_at = $6,`,
+    `    version    = $5`,
+    `WHERE tenant_id = $1`,
+    `  AND workspace_id = $2`,
+    `  AND resource_type = $3`,
+    `  AND resource_id = $4`,
+    `  AND $5 > version;`
+  ].join("\n");
+}
+async function ensureSchemaBootstrap(client, schemaName) {
+  await client.query(buildSchemaBootstrapSql(schemaName));
+}
+
+export {
+  buildSchemaBootstrapStatements,
+  buildResourceUpsertSql,
+  buildResourceSoftDeleteSql,
+  ensureSchemaBootstrap
+};
+//# sourceMappingURL=chunk-2O3CXY2C.mjs.map

package/lib/chunk-2O3CXY2C.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/components/postgres/data-store-postgres-schema.ts"],"sourcesContent":["import type { Pool, PoolClient } from \"pg\";\n\n/**\n * @see sites/www-docs/content/architecture/adr/2026-04-17-01-ad-hoc-query-support-fhir-api.md\n *\n * SQL strings for the Postgres replication tier (ADR 2026-04-17-01, phase 1):\n * the JSONB `resources` table that mirrors current FHIR resources from the\n * DynamoDB single-table store. Phase 1 covers replication only; query routing\n * and indexes for individual SearchParameters are deferred to a follow-on phase.\n *\n * The `version` column stores the resource's `vid` (a ULID — see\n * `data-entity-common.ts`). ULIDs are monotonically lexically sortable, so the\n * UPSERT/UPDATE guards use plain `>` text comparison to reject out-of-order\n * Kinesis deliveries.\n */\n\nexport const POSTGRES_REPLICATION_SCHEMA_VERSION = 1;\n\nconst SCHEMA_NAME_PATTERN = /^[a-z_][a-z0-9_]{0,62}$/;\n\n/**\n * Validate that a schema name is a safe Postgres identifier and quote it for\n * inclusion in DDL/DML. Throws on anything that doesn't match the lower-snake\n * pattern OpenHI uses for branch-derived schema names (e.g. `b_a1b2c3`).\n */\nexport function quoteSchemaIdentifier(schemaName: string): string {\n  if (!SCHEMA_NAME_PATTERN.test(schemaName)) {\n    throw new Error(\n      `Invalid Postgres schema name: ${JSON.stringify(schemaName)}; expected /[a-z_][a-z0-9_]{0,62}/`,\n    );\n  }\n  return `\"${schemaName}\"`;\n}\n\n/**\n * Build the bootstrap DDL as a list of independent statements. Use this form\n * when sending the DDL through a transport that does not accept multi-statement\n * SQL in a single call — most importantly the AWS RDS Data API's\n * `ExecuteStatement`, which the REST API runner uses.\n *\n * Each statement is fully self-contained and idempotent (`IF NOT EXISTS`),\n * so the array can be executed in order with no transaction wrapper.\n */\nexport function buildSchemaBootstrapStatements(\n  schemaName: string,\n): ReadonlyArray<string> {\n  const s = quoteSchemaIdentifier(schemaName);\n  return [\n    `CREATE SCHEMA IF NOT EXISTS ${s};`,\n    [\n      `CREATE TABLE IF NOT EXISTS ${s}.resources (`,\n      `  tenant_id     text        NOT NULL,`,\n      `  workspace_id  text        NOT NULL,`,\n      `  resource_type text        NOT NULL,`,\n      `  resource_id   text        NOT NULL,`,\n      `  version       text        NOT NULL,`,\n      `  last_updated  timestamptz NOT NULL,`,\n      `  deleted_at    timestamptz,`,\n      `  resource      jsonb       NOT NULL,`,\n      `  PRIMARY KEY (tenant_id, workspace_id, resource_type, resource_id)`,\n      `);`,\n    ].join(\"\\n\"),\n    [\n      `CREATE INDEX IF NOT EXISTS resources_jsonb_gin`,\n      `  ON ${s}.resources USING gin (resource);`,\n    ].join(\"\\n\"),\n    [\n      `CREATE INDEX IF NOT EXISTS resources_listing`,\n      `  ON ${s}.resources (tenant_id, workspace_id, resource_type, last_updated);`,\n    ].join(\"\\n\"),\n  ];\n}\n\nexport function buildSchemaBootstrapSql(schemaName: string): string {\n  return buildSchemaBootstrapStatements(schemaName).join(\"\\n\");\n}\n\n/**\n * INSERT/MODIFY UPSERT with a monotonic `version` (ULID) guard. If a record\n * arrives out of order — e.g. a retried Kinesis delivery for an older `vid`\n * after a newer one — the WHERE clause in DO UPDATE leaves the row unchanged.\n *\n * Param order: $1 tenant_id, $2 workspace_id, $3 resource_type, $4 resource_id,\n * $5 version, $6 last_updated, $7 resource (jsonb-serialized).\n */\nexport function buildResourceUpsertSql(schemaName: string): string {\n  const s = quoteSchemaIdentifier(schemaName);\n  return [\n    `INSERT INTO ${s}.resources`,\n    `  (tenant_id, workspace_id, resource_type, resource_id, version, last_updated, deleted_at, resource)`,\n    `VALUES ($1, $2, $3, $4, $5, $6, NULL, $7::jsonb)`,\n    `ON CONFLICT (tenant_id, workspace_id, resource_type, resource_id)`,\n    `DO UPDATE SET`,\n    `  version       = EXCLUDED.version,`,\n    `  last_updated  = EXCLUDED.last_updated,`,\n    `  deleted_at    = NULL,`,\n    `  resource      = EXCLUDED.resource`,\n    `WHERE EXCLUDED.version > ${s}.resources.version;`,\n  ].join(\"\\n\");\n}\n\n/**\n * REMOVE soft-delete with the same monotonic `version` guard. Using `>` (not\n * `>=`) means a duplicate REMOVE for the same version is a no-op. Param order\n * matches {@link buildResourceUpsertSql} for the first five params.\n *\n * Param order: $1 tenant_id, $2 workspace_id, $3 resource_type, $4 resource_id,\n * $5 version (incoming), $6 deleted_at.\n */\nexport function buildResourceSoftDeleteSql(schemaName: string): string {\n  const s = quoteSchemaIdentifier(schemaName);\n  return [\n    `UPDATE ${s}.resources`,\n    `SET deleted_at = $6,`,\n    `    version    = $5`,\n    `WHERE tenant_id = $1`,\n    `  AND workspace_id = $2`,\n    `  AND resource_type = $3`,\n    `  AND resource_id = $4`,\n    `  AND $5 > version;`,\n  ].join(\"\\n\");\n}\n\n/**\n * Run schema DDL idempotently. Safe to call from every Lambda cold start; the\n * `IF NOT EXISTS` clauses make repeats no-ops. Caller is responsible for\n * memoizing across invocations on the same warm container.\n */\nexport async function ensureSchemaBootstrap(\n  client: Pool | PoolClient,\n  schemaName: string,\n): Promise<void> {\n  await client.query(buildSchemaBootstrapSql(schemaName));\n}\n"],"mappings":";AAkBA,IAAM,sBAAsB;AAOrB,SAAS,sBAAsB,YAA4B;AAChE,MAAI,CAAC,oBAAoB,KAAK,UAAU,GAAG;AACzC,UAAM,IAAI;AAAA,MACR,iCAAiC,KAAK,UAAU,UAAU,CAAC;AAAA,IAC7D;AAAA,EACF;AACA,SAAO,IAAI,UAAU;AACvB;AAWO,SAAS,+BACd,YACuB;AACvB,QAAM,IAAI,sBAAsB,UAAU;AAC1C,SAAO;AAAA,IACL,+BAA+B,CAAC;AAAA,IAChC;AAAA,MACE,8BAA8B,CAAC;AAAA,MAC/B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,IACX;AAAA,MACE;AAAA,MACA,QAAQ,CAAC;AAAA,IACX,EAAE,KAAK,IAAI;AAAA,IACX;AAAA,MACE;AAAA,MACA,QAAQ,CAAC;AAAA,IACX,EAAE,KAAK,IAAI;AAAA,EACb;AACF;AAEO,SAAS,wBAAwB,YAA4B;AAClE,SAAO,+BAA+B,UAAU,EAAE,KAAK,IAAI;AAC7D;AAUO,SAAS,uBAAuB,YAA4B;AACjE,QAAM,IAAI,sBAAsB,UAAU;AAC1C,SAAO;AAAA,IACL,eAAe,CAAC;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,4BAA4B,CAAC;AAAA,EAC/B,EAAE,KAAK,IAAI;AACb;AAUO,SAAS,2BAA2B,YAA4B;AACrE,QAAM,IAAI,sBAAsB,UAAU;AAC1C,SAAO;AAAA,IACL,UAAU,CAAC;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAOA,eAAsB,sBACpB,QACA,YACe;AACf,QAAM,OAAO,MAAM,wBAAwB,UAAU,CAAC;AACxD;","names":[]}

package/lib/{chunk-7FUAMZOF.mjs → chunk-53OHXLIL.mjs}

@@ -1,9 +1,9 @@
 import {
   NotFoundError
-} from "./chunk-IS4VQRI4.mjs";
+} from "./chunk-FYHBHHWK.mjs";
 import {
   getDynamoControlService
-} from "./chunk-QR5JVSCF.mjs";
+} from "./chunk-6NBGYGFL.mjs";
 
 // src/data/operations/control/role/role-get-by-id-operation.ts
 async function getRoleByIdOperation(params) {
@@ -24,4 +24,4 @@ async function getRoleByIdOperation(params) {
 export {
   getRoleByIdOperation
 };
-//# sourceMappingURL=chunk-7FUAMZOF.mjs.map
+//# sourceMappingURL=chunk-53OHXLIL.mjs.map