@openhi/constructs 0.0.111 → 0.0.112

package/lib/chunk-TRY7JGWO.mjs

@@ -0,0 +1,16 @@
+// src/data/dynamo/dynamo-client.ts
+import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
+var defaultTableName = process.env.DYNAMO_TABLE_NAME ?? "jesttesttable";
+var dynamoClient = new DynamoDBClient({
+  ...process.env.MOCK_DYNAMODB_ENDPOINT && {
+    endpoint: process.env.MOCK_DYNAMODB_ENDPOINT,
+    sslEnabled: false,
+    region: "local"
+  }
+});
+
+export {
+  defaultTableName,
+  dynamoClient
+};
+//# sourceMappingURL=chunk-TRY7JGWO.mjs.map

package/lib/chunk-TRY7JGWO.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/data/dynamo/dynamo-client.ts"],"sourcesContent":["import { DynamoDBClient } from \"@aws-sdk/client-dynamodb\";\n\n/**\n * DynamoDB table name for the data store. Set via DYNAMO_TABLE_NAME at runtime\n * (e.g. from Lambda env); defaults for local/test.\n */\nexport const defaultTableName =\n  process.env.DYNAMO_TABLE_NAME ?? \"jesttesttable\";\n\n/**\n * DynamoDB client. When MOCK_DYNAMODB_ENDPOINT is set (e.g. local DynamoDB or\n * jest-dynalite), uses that endpoint with no SSL and region \"local\".\n */\nexport const dynamoClient = new DynamoDBClient({\n  ...(process.env.MOCK_DYNAMODB_ENDPOINT && {\n    endpoint: process.env.MOCK_DYNAMODB_ENDPOINT,\n    sslEnabled: false,\n    region: \"local\",\n  }),\n});\n"],"mappings":";AAAA,SAAS,sBAAsB;AAMxB,IAAM,mBACX,QAAQ,IAAI,qBAAqB;AAM5B,IAAM,eAAe,IAAI,eAAe;AAAA,EAC7C,GAAI,QAAQ,IAAI,0BAA0B;AAAA,IACxC,UAAU,QAAQ,IAAI;AAAA,IACtB,YAAY;AAAA,IACZ,QAAQ;AAAA,EACV;AACF,CAAC;","names":[]}

package/lib/chunk-W4KR4CSL.mjs

@@ -0,0 +1,236 @@
+import {
+  require_lib
+} from "./chunk-ZM4GDHHC.mjs";
+import {
+  TRANSACT_WRITE_ITEM_LIMIT,
+  executeMultiWrite
+} from "./chunk-QJDHVMKT.mjs";
+import {
+  getDynamoControlService
+} from "./chunk-6NBGYGFL.mjs";
+import {
+  __toESM
+} from "./chunk-LZOMFHX3.mjs";
+
+// src/data/operations/control/owning-delete/owning-delete-batch-delete-operation.ts
+var OWNING_DELETE_CASCADE_CHUNK_SIZE = TRANSACT_WRITE_ITEM_LIMIT;
+async function deleteOwningChildChunkOperation(params) {
+  const { rows, tableName, token } = params;
+  if (rows.length === 0) {
+    return { rowsDeleted: 0, breakdown: {} };
+  }
+  if (rows.length > OWNING_DELETE_CASCADE_CHUNK_SIZE) {
+    throw new Error(
+      `deleteOwningChildChunkOperation: chunk has ${rows.length} rows; limit is ${OWNING_DELETE_CASCADE_CHUNK_SIZE}`
+    );
+  }
+  const service = getDynamoControlService(tableName);
+  const triples = rows.map((row) => ({
+    entity: row.entity,
+    action: "delete",
+    item: { ...row.key }
+  }));
+  await executeMultiWrite({ service, triples, token });
+  const breakdown = {};
+  for (const row of rows) {
+    breakdown[row.entity] = (breakdown[row.entity] ?? 0) + 1;
+  }
+  return { rowsDeleted: rows.length, breakdown };
+}
+function chunkOwningChildRows(rows) {
+  const chunks = [];
+  for (let i = 0; i < rows.length; i += OWNING_DELETE_CASCADE_CHUNK_SIZE) {
+    chunks.push(rows.slice(i, i + OWNING_DELETE_CASCADE_CHUNK_SIZE));
+  }
+  return chunks;
+}
+
+// src/data/operations/control/owning-delete/owning-delete-list-child-projections-operation.ts
+var import_workflows = __toESM(require_lib());
+var OWNING_DELETE_PROJECTION_ENTITY = {
+  MembershipUserProjection: "membershipUserProjection",
+  MembershipWorkspaceProjection: "membershipWorkspaceProjection",
+  RoleAssignmentUserProjection: "roleAssignmentUserProjection",
+  RoleAssignmentWorkspaceProjection: "roleAssignmentWorkspaceProjection",
+  ConfigurationUserProjection: "configurationUserProjection",
+  ConfigurationWorkspaceProjection: "configurationWorkspaceProjection"
+};
+var DEFAULT_PAGE_SIZE = 100;
+var ENTITY_SK_PREFIXES = {
+  membershipUserProjection: "MEMBERSHIP#",
+  membershipWorkspaceProjection: "MEMBERSHIP#",
+  roleAssignmentUserProjection: "ROLEASSIGNMENT#",
+  roleAssignmentWorkspaceProjection: "ROLEASSIGNMENT#",
+  configurationUserProjection: "CONFIGURATION#",
+  configurationWorkspaceProjection: "CONFIGURATION#"
+};
+var ENTITIES_FOR_OWNER = {
+  Workspace: [
+    "membershipWorkspaceProjection",
+    "roleAssignmentWorkspaceProjection",
+    "configurationWorkspaceProjection"
+  ],
+  User: [
+    "membershipUserProjection",
+    "roleAssignmentUserProjection",
+    "configurationUserProjection"
+  ]
+};
+async function listOwningChildProjectionsOperation(params) {
+  const {
+    ownerType,
+    ownerId,
+    tenantId,
+    cursors = {},
+    limit = DEFAULT_PAGE_SIZE,
+    tableName
+  } = params;
+  if (!ownerId || ownerId.length === 0) {
+    throw new Error("listOwningChildProjectionsOperation: ownerId is required");
+  }
+  if (ownerType === import_workflows.OWNING_ENTITY_TYPE.Workspace && (!tenantId || tenantId.length === 0)) {
+    throw new Error(
+      "listOwningChildProjectionsOperation: tenantId is required for Workspace owners"
+    );
+  }
+  const service = getDynamoControlService(tableName);
+  const entities = ENTITIES_FOR_OWNER[ownerType];
+  const nextCursors = {};
+  const items = [];
+  for (const entityName of entities) {
+    const priorCursor = cursors[entityName];
+    if (priorCursor === null) {
+      nextCursors[entityName] = null;
+      continue;
+    }
+    const prefix = ENTITY_SK_PREFIXES[entityName];
+    const page = await queryProjectionEntity({
+      service,
+      entityName,
+      ownerType,
+      ownerId,
+      tenantId,
+      prefix,
+      cursor: priorCursor ?? null,
+      limit
+    });
+    for (const row of page.items) {
+      items.push(row);
+    }
+    nextCursors[entityName] = page.cursor;
+  }
+  const exhausted = Object.values(nextCursors).every((value) => value === null);
+  return { items, cursors: nextCursors, exhausted };
+}
+async function queryProjectionEntity(params) {
+  const {
+    service,
+    entityName,
+    ownerType,
+    ownerId,
+    tenantId,
+    prefix,
+    cursor,
+    limit
+  } = params;
+  const goOptions = { cursor, limit };
+  switch (entityName) {
+    case "membershipUserProjection": {
+      const result = await service.entities.membershipUserProjection.query.record({ userId: ownerId }).begins({ sk: prefix }).go(goOptions);
+      const items = (result.data ?? []).map(
+        (row) => ({
+          entity: entityName,
+          key: { userId: row.userId, sk: row.sk }
+        })
+      );
+      return { items, cursor: result.cursor ?? null };
+    }
+    case "membershipWorkspaceProjection": {
+      if (ownerType !== import_workflows.OWNING_ENTITY_TYPE.Workspace || !tenantId) {
+        return { items: [], cursor: null };
+      }
+      const result = await service.entities.membershipWorkspaceProjection.query.record({ tenantId, workspaceId: ownerId }).begins({ sk: prefix }).go(goOptions);
+      const items = (result.data ?? []).map(
+        (row) => ({
+          entity: entityName,
+          key: {
+            tenantId: row.tenantId,
+            workspaceId: row.workspaceId,
+            sk: row.sk
+          }
+        })
+      );
+      return { items, cursor: result.cursor ?? null };
+    }
+    case "roleAssignmentUserProjection": {
+      const result = await service.entities.roleAssignmentUserProjection.query.record({ userId: ownerId }).begins({ sk: prefix }).go(goOptions);
+      const items = (result.data ?? []).map(
+        (row) => ({
+          entity: entityName,
+          key: { userId: row.userId, sk: row.sk }
+        })
+      );
+      return { items, cursor: result.cursor ?? null };
+    }
+    case "roleAssignmentWorkspaceProjection": {
+      if (ownerType !== import_workflows.OWNING_ENTITY_TYPE.Workspace || !tenantId) {
+        return { items: [], cursor: null };
+      }
+      const result = await service.entities.roleAssignmentWorkspaceProjection.query.record({ tenantId, workspaceId: ownerId }).begins({ sk: prefix }).go(goOptions);
+      const items = (result.data ?? []).map(
+        (row) => ({
+          entity: entityName,
+          key: {
+            tenantId: row.tenantId,
+            workspaceId: row.workspaceId,
+            sk: row.sk
+          }
+        })
+      );
+      return { items, cursor: result.cursor ?? null };
+    }
+    case "configurationUserProjection": {
+      const result = await service.entities.configurationUserProjection.query.record({ userId: ownerId }).begins({ sk: prefix }).go(goOptions);
+      const items = (result.data ?? []).map(
+        (row) => ({
+          entity: entityName,
+          key: { userId: row.userId, sk: row.sk }
+        })
+      );
+      return { items, cursor: result.cursor ?? null };
+    }
+    case "configurationWorkspaceProjection": {
+      if (ownerType !== import_workflows.OWNING_ENTITY_TYPE.Workspace || !tenantId) {
+        return { items: [], cursor: null };
+      }
+      const result = await service.entities.configurationWorkspaceProjection.query.record({ tenantId, workspaceId: ownerId }).begins({ sk: prefix }).go(goOptions);
+      const items = (result.data ?? []).map(
+        (row) => ({
+          entity: entityName,
+          key: {
+            tenantId: row.tenantId,
+            workspaceId: row.workspaceId,
+            sk: row.sk
+          }
+        })
+      );
+      return { items, cursor: result.cursor ?? null };
+    }
+    default: {
+      const exhaustive = entityName;
+      throw new Error(
+        `listOwningChildProjectionsOperation: unsupported entity '${String(
+          exhaustive
+        )}'`
+      );
+    }
+  }
+}
+
+export {
+  deleteOwningChildChunkOperation,
+  chunkOwningChildRows,
+  OWNING_DELETE_PROJECTION_ENTITY,
+  listOwningChildProjectionsOperation
+};
+//# sourceMappingURL=chunk-W4KR4CSL.mjs.map

package/lib/chunk-W4KR4CSL.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/data/operations/control/owning-delete/owning-delete-batch-delete-operation.ts","../src/data/operations/control/owning-delete/owning-delete-list-child-projections-operation.ts"],"sourcesContent":["/**\n * Atomic chunk delete for the TR-022 hard-delete cascade.\n *\n * Each cascade Map iteration receives up to\n * {@link OWNING_DELETE_CASCADE_CHUNK_SIZE} projection rows tagged with\n * their projection entity and submits them all in a single\n * `TransactWriteItems` via the operations-layer multi-write helper\n * (#1010). All-or-nothing semantics: every row in the chunk lands or\n * none does.\n *\n * Idempotency: per TR-022 Choice 5A, replayed chunks fail the\n * `attribute_exists(PK)` condition (or are absorbed by the helper's\n * cancellation handling) and the state-machine `Catch` treats\n * `TransactionCanceledException` as a no-op success. The outer loop\n * keeps walking the partition until `Query` returns zero items.\n *\n * @see .state/adr-018-implementation-guide.md section 4 (Step Functions Map shape)\n * @see ../multi-write-operation.ts (executeMultiWrite)\n * @see .claude/rules/data-layer-layout.md\n */\n\nimport {\n  type OwningChildProjectionRow,\n  type OwningDeleteProjectionEntity,\n} from \"./owning-delete-list-child-projections-operation\";\nimport { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\nimport {\n  TRANSACT_WRITE_ITEM_LIMIT,\n  executeMultiWrite,\n  type MultiWriteTriple,\n} from \"../multi-write-operation\";\n\n/**\n * Maximum rows the cascade may submit in a single chunk. Mirrors the\n * AWS `TransactWriteItems` 100-item ceiling enforced by\n * {@link executeMultiWrite}.\n */\nexport const OWNING_DELETE_CASCADE_CHUNK_SIZE = TRANSACT_WRITE_ITEM_LIMIT;\n\n/** Inputs accepted by {@link deleteOwningChildChunkOperation}. */\nexport interface DeleteOwningChildChunkParams {\n  /** Rows to delete in this transaction. Length must be 1..100. */\n  readonly rows: ReadonlyArray<OwningChildProjectionRow>;\n  /** Optional table-name override; resolved via env when omitted. */\n  readonly tableName?: string;\n  /** Optional idempotency token forwarded to ElectroDB. */\n  readonly token?: string;\n}\n\n/** Result of {@link deleteOwningChildChunkOperation}. */\nexport interface DeleteOwningChildChunkResult {\n  /** Number of rows committed to the transaction. */\n  readonly rowsDeleted: number;\n  /**\n   * Per-entity breakdown of the rows deleted, for observability and\n   * tests. Keyed by the projection-entity name.\n   */\n  readonly breakdown: Partial<Record<OwningDeleteProjectionEntity, number>>;\n}\n\n/**\n * Submit `rows` as a single `TransactWriteItems` via `executeMultiWrite`.\n *\n * Empty input is a no-op (returns `rowsDeleted: 0`) so the cascade\n * state machine never needs to pre-flight the chunk size — the Map\n * iteration body can call this operation unconditionally.\n */\nexport async function deleteOwningChildChunkOperation(\n  params: DeleteOwningChildChunkParams,\n): Promise<DeleteOwningChildChunkResult> {\n  const { rows, tableName, token } = params;\n\n  if (rows.length === 0) {\n    return { rowsDeleted: 0, breakdown: {} };\n  }\n  if (rows.length > OWNING_DELETE_CASCADE_CHUNK_SIZE) {\n    throw new Error(\n      `deleteOwningChildChunkOperation: chunk has ${rows.length} rows; limit is ${OWNING_DELETE_CASCADE_CHUNK_SIZE}`,\n    );\n  }\n\n  const service = getDynamoControlService(tableName);\n\n  const triples: Array<MultiWriteTriple> = rows.map((row) => ({\n    entity: row.entity,\n    action: \"delete\",\n    item: { ...row.key },\n  }));\n\n  await executeMultiWrite({ service, triples, token });\n\n  const breakdown: Partial<Record<OwningDeleteProjectionEntity, number>> = {};\n  for (const row of rows) {\n    breakdown[row.entity] = (breakdown[row.entity] ?? 0) + 1;\n  }\n\n  return { rowsDeleted: rows.length, breakdown };\n}\n\n/**\n * Split a flat row array into chunks of at most\n * {@link OWNING_DELETE_CASCADE_CHUNK_SIZE} items. Used by the cascade\n * state machine Pass state that prepares the Map's `ItemsPath` array.\n */\nexport function chunkOwningChildRows(\n  rows: ReadonlyArray<OwningChildProjectionRow>,\n): Array<Array<OwningChildProjectionRow>> {\n  const chunks: Array<Array<OwningChildProjectionRow>> = [];\n  for (let i = 0; i < rows.length; i += OWNING_DELETE_CASCADE_CHUNK_SIZE) {\n    chunks.push(rows.slice(i, i + OWNING_DELETE_CASCADE_CHUNK_SIZE));\n  }\n  return chunks;\n}\n","/**\n * Enumerate child projection rows under an owning entity's partition\n * for the TR-022 hard-delete cascade.\n *\n * The cascade state machine pages through this operation until it\n * returns zero items, batching each page into <=100-item chunks for the\n * delete step. The operation queries each of the projection entities\n * that key off the owner's partition and returns each row tagged with\n * the entity it came from plus the composite-key payload the\n * operations-layer multi-write helper needs to issue a delete.\n *\n * Owner-type to projection-entity matrix:\n *\n * | Owner | Partition | Entities queried |\n * |---|---|---|\n * | Workspace | `TID#<tenantId>#WORKSPACE#ID#<workspaceId>` | membershipWorkspaceProjection (#2), roleAssignmentWorkspaceProjection (#9), configurationWorkspaceProjection (#10) |\n * | User | `USER#ID#<userId>` | membershipUserProjection (#3, #4), roleAssignmentUserProjection (#5), configurationUserProjection (#10) |\n *\n * The owning canonical record itself (`SK = \"CURRENT\"`) is never\n * returned — the canonical row lives on a different entity (Workspace\n * / User) which is not queried here.\n *\n * Each page reads up to `limit` rows per entity; the operation merges\n * the per-entity responses and surfaces a single `cursor` map keyed by\n * entity name. The state machine outer loop passes this map back on\n * subsequent calls and stops when every per-entity cursor is exhausted.\n *\n * @see .state/adr-018-implementation-guide.md section 4 (Per-batch delete query)\n * @see .claude/rules/data-layer-layout.md (operations live under operations/, not dynamo/)\n */\n\nimport { OWNING_ENTITY_TYPE, type OwningEntityType } from \"@openhi/workflows\";\nimport { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\n\n/**\n * Entity-name keys this operation may emit. Matches the keys exposed\n * by the control-plane service factory; downstream delete callers feed\n * them to `executeMultiWrite` as the `entity` field on each triple.\n */\nexport const OWNING_DELETE_PROJECTION_ENTITY = {\n  MembershipUserProjection: \"membershipUserProjection\",\n  MembershipWorkspaceProjection: \"membershipWorkspaceProjection\",\n  RoleAssignmentUserProjection: \"roleAssignmentUserProjection\",\n  RoleAssignmentWorkspaceProjection: \"roleAssignmentWorkspaceProjection\",\n  ConfigurationUserProjection: \"configurationUserProjection\",\n  ConfigurationWorkspaceProjection: \"configurationWorkspaceProjection\",\n} as const;\nexport type OwningDeleteProjectionEntity =\n  (typeof OWNING_DELETE_PROJECTION_ENTITY)[keyof typeof OWNING_DELETE_PROJECTION_ENTITY];\n\n/** Inputs accepted by {@link listOwningChildProjectionsOperation}. */\nexport interface ListOwningChildProjectionsParams {\n  /** The type of owning entity whose children the cascade is reaping. */\n  readonly ownerType: OwningEntityType;\n  /** Canonical id of the owning entity (Workspace id or User id). */\n  readonly ownerId: string;\n  /** Required for Workspace owners; ignored for User owners. */\n  readonly tenantId?: string;\n  /**\n   * Per-entity cursor map carried forward from a prior page. Each\n   * key is one of the {@link OWNING_DELETE_PROJECTION_ENTITY} values;\n   * missing keys are treated as \"start from the beginning\". Pass the\n   * value `null` to mark a per-entity stream as exhausted.\n   */\n  readonly cursors?: ListOwningChildProjectionsCursorMap;\n  /**\n   * Per-entity per-page limit (defaults to 100, matching the cascade\n   * chunk size cap). The merged page can exceed this when more than\n   * one entity has matching rows; the state machine chunker re-splits\n   * the merged page into 100-item batches.\n   */\n  readonly limit?: number;\n  /** Optional table-name override; resolved via env when omitted. */\n  readonly tableName?: string;\n}\n\n/**\n * One projection row tagged for delete. Carries the entity name plus\n * the composite-key payload the operations-layer multi-write helper\n * expects on a `delete` triple — never the raw `PK`/`SK` strings, so\n * callers cannot accidentally delete an owning canonical record.\n */\nexport interface OwningChildProjectionRow {\n  /** The projection entity this row belongs to. */\n  readonly entity: OwningDeleteProjectionEntity;\n  /**\n   * Composite-key payload for `TransactWriteItems` delete. Shape\n   * depends on `entity` — user-partition projections key on\n   * `{ userId, sk }`; workspace-partition projections key on\n   * `{ tenantId, workspaceId, sk }`.\n   */\n  readonly key: Record<string, string>;\n}\n\n/**\n * Per-entity cursor map. `null` for a key means the entity stream is\n * exhausted; an `undefined` / missing key means start from the\n * beginning.\n */\nexport type ListOwningChildProjectionsCursorMap = Partial<\n  Record<OwningDeleteProjectionEntity, string | null>\n>;\n\n/** Page returned by {@link listOwningChildProjectionsOperation}. */\nexport interface ListOwningChildProjectionsResult {\n  /** Projection rows in this page, merged across the per-entity queries. */\n  readonly items: ReadonlyArray<OwningChildProjectionRow>;\n  /** Per-entity cursors for the next page. */\n  readonly cursors: ListOwningChildProjectionsCursorMap;\n  /**\n   * `true` when every per-entity stream returned no items and every\n   * cursor is null — the cascade's outer loop terminates on this flag.\n   */\n  readonly exhausted: boolean;\n}\n\n/**\n * Build the owning partition key for the cascade query — exported so\n * tests and other operations can recompose the same partition string\n * the projection-entity queries here target via ElectroDB.\n */\nexport function buildOwningPartitionKey(params: {\n  readonly ownerType: OwningEntityType;\n  readonly ownerId: string;\n  readonly tenantId?: string;\n}): string {\n  switch (params.ownerType) {\n    case OWNING_ENTITY_TYPE.Workspace:\n      if (!params.tenantId || params.tenantId.length === 0) {\n        throw new Error(\n          \"buildOwningPartitionKey: tenantId is required for Workspace owners\",\n        );\n      }\n      return `TID#${params.tenantId}#WORKSPACE#ID#${params.ownerId}`;\n    case OWNING_ENTITY_TYPE.User:\n      return `USER#ID#${params.ownerId}`;\n    default: {\n      const exhaustive: never = params.ownerType;\n      throw new Error(\n        `buildOwningPartitionKey: unsupported ownerType '${String(\n          exhaustive,\n        )}'`,\n      );\n    }\n  }\n}\n\n/** Default per-entity per-page item limit. */\nconst DEFAULT_PAGE_SIZE = 100 as const;\n\n/** SK-prefix filter for each projection-entity query. */\nconst ENTITY_SK_PREFIXES: Record<OwningDeleteProjectionEntity, string> = {\n  membershipUserProjection: \"MEMBERSHIP#\",\n  membershipWorkspaceProjection: \"MEMBERSHIP#\",\n  roleAssignmentUserProjection: \"ROLEASSIGNMENT#\",\n  roleAssignmentWorkspaceProjection: \"ROLEASSIGNMENT#\",\n  configurationUserProjection: \"CONFIGURATION#\",\n  configurationWorkspaceProjection: \"CONFIGURATION#\",\n};\n\n/**\n * Entity-list per owner-type. Lookups for a Workspace skip user-\n * partition entities and vice versa, so the cascade never reaches\n * across the partition boundary by mistake.\n */\nconst ENTITIES_FOR_OWNER: Record<\n  OwningEntityType,\n  ReadonlyArray<OwningDeleteProjectionEntity>\n> = {\n  Workspace: [\n    \"membershipWorkspaceProjection\",\n    \"roleAssignmentWorkspaceProjection\",\n    \"configurationWorkspaceProjection\",\n  ],\n  User: [\n    \"membershipUserProjection\",\n    \"roleAssignmentUserProjection\",\n    \"configurationUserProjection\",\n  ],\n};\n\n/**\n * Issue one ElectroDB `Query` per applicable projection entity for the\n * owner's partition, return the merged page, and carry per-entity\n * cursors forward. Each entity is queried independently — when one\n * entity is exhausted but others still have rows, the next page reads\n * only the still-open streams. The merged result preserves entity\n * identity on every row so the delete step can issue a typed\n * `TransactWriteItems` via `executeMultiWrite`.\n */\nexport async function listOwningChildProjectionsOperation(\n  params: ListOwningChildProjectionsParams,\n): Promise<ListOwningChildProjectionsResult> {\n  const {\n    ownerType,\n    ownerId,\n    tenantId,\n    cursors = {},\n    limit = DEFAULT_PAGE_SIZE,\n    tableName,\n  } = params;\n\n  if (!ownerId || ownerId.length === 0) {\n    throw new Error(\"listOwningChildProjectionsOperation: ownerId is required\");\n  }\n  if (\n    ownerType === OWNING_ENTITY_TYPE.Workspace &&\n    (!tenantId || tenantId.length === 0)\n  ) {\n    throw new Error(\n      \"listOwningChildProjectionsOperation: tenantId is required for Workspace owners\",\n    );\n  }\n\n  const service = getDynamoControlService(tableName);\n  const entities = ENTITIES_FOR_OWNER[ownerType];\n\n  const nextCursors: ListOwningChildProjectionsCursorMap = {};\n  const items: Array<OwningChildProjectionRow> = [];\n\n  for (const entityName of entities) {\n    const priorCursor = cursors[entityName];\n    if (priorCursor === null) {\n      // Exhausted on a previous page — skip without re-querying.\n      nextCursors[entityName] = null;\n      continue;\n    }\n    const prefix = ENTITY_SK_PREFIXES[entityName];\n    const page = await queryProjectionEntity({\n      service,\n      entityName,\n      ownerType,\n      ownerId,\n      tenantId,\n      prefix,\n      cursor: priorCursor ?? null,\n      limit,\n    });\n    for (const row of page.items) {\n      items.push(row);\n    }\n    nextCursors[entityName] = page.cursor;\n  }\n\n  const exhausted = Object.values(nextCursors).every((value) => value === null);\n\n  return { items, cursors: nextCursors, exhausted };\n}\n\ninterface QueryProjectionEntityParams {\n  readonly service: ReturnType<typeof getDynamoControlService>;\n  readonly entityName: OwningDeleteProjectionEntity;\n  readonly ownerType: OwningEntityType;\n  readonly ownerId: string;\n  readonly tenantId?: string;\n  readonly prefix: string;\n  readonly cursor: string | null;\n  readonly limit: number;\n}\n\ninterface QueryProjectionEntityResult {\n  readonly items: ReadonlyArray<OwningChildProjectionRow>;\n  readonly cursor: string | null;\n}\n\nasync function queryProjectionEntity(\n  params: QueryProjectionEntityParams,\n): Promise<QueryProjectionEntityResult> {\n  const {\n    service,\n    entityName,\n    ownerType,\n    ownerId,\n    tenantId,\n    prefix,\n    cursor,\n    limit,\n  } = params;\n\n  const goOptions = { cursor, limit };\n\n  switch (entityName) {\n    case \"membershipUserProjection\": {\n      const result = await service.entities.membershipUserProjection.query\n        .record({ userId: ownerId })\n        .begins({ sk: prefix })\n        .go(goOptions);\n      const items = (result.data ?? []).map<OwningChildProjectionRow>(\n        (row) => ({\n          entity: entityName,\n          key: { userId: row.userId, sk: row.sk },\n        }),\n      );\n      return { items, cursor: result.cursor ?? null };\n    }\n    case \"membershipWorkspaceProjection\": {\n      if (ownerType !== OWNING_ENTITY_TYPE.Workspace || !tenantId) {\n        return { items: [], cursor: null };\n      }\n      const result = await service.entities.membershipWorkspaceProjection.query\n        .record({ tenantId, workspaceId: ownerId })\n        .begins({ sk: prefix })\n        .go(goOptions);\n      const items = (result.data ?? []).map<OwningChildProjectionRow>(\n        (row) => ({\n          entity: entityName,\n          key: {\n            tenantId: row.tenantId,\n            workspaceId: row.workspaceId,\n            sk: row.sk,\n          },\n        }),\n      );\n      return { items, cursor: result.cursor ?? null };\n    }\n    case \"roleAssignmentUserProjection\": {\n      const result = await service.entities.roleAssignmentUserProjection.query\n        .record({ userId: ownerId })\n        .begins({ sk: prefix })\n        .go(goOptions);\n      const items = (result.data ?? []).map<OwningChildProjectionRow>(\n        (row) => ({\n          entity: entityName,\n          key: { userId: row.userId, sk: row.sk },\n        }),\n      );\n      return { items, cursor: result.cursor ?? null };\n    }\n    case \"roleAssignmentWorkspaceProjection\": {\n      if (ownerType !== OWNING_ENTITY_TYPE.Workspace || !tenantId) {\n        return { items: [], cursor: null };\n      }\n      const result =\n        await service.entities.roleAssignmentWorkspaceProjection.query\n          .record({ tenantId, workspaceId: ownerId })\n          .begins({ sk: prefix })\n          .go(goOptions);\n      const items = (result.data ?? []).map<OwningChildProjectionRow>(\n        (row) => ({\n          entity: entityName,\n          key: {\n            tenantId: row.tenantId,\n            workspaceId: row.workspaceId,\n            sk: row.sk,\n          },\n        }),\n      );\n      return { items, cursor: result.cursor ?? null };\n    }\n    case \"configurationUserProjection\": {\n      const result = await service.entities.configurationUserProjection.query\n        .record({ userId: ownerId })\n        .begins({ sk: prefix })\n        .go(goOptions);\n      const items = (result.data ?? []).map<OwningChildProjectionRow>(\n        (row) => ({\n          entity: entityName,\n          key: { userId: row.userId, sk: row.sk },\n        }),\n      );\n      return { items, cursor: result.cursor ?? null };\n    }\n    case \"configurationWorkspaceProjection\": {\n      if (ownerType !== OWNING_ENTITY_TYPE.Workspace || !tenantId) {\n        return { items: [], cursor: null };\n      }\n      const result =\n        await service.entities.configurationWorkspaceProjection.query\n          .record({ tenantId, workspaceId: ownerId })\n          .begins({ sk: prefix })\n          .go(goOptions);\n      const items = (result.data ?? []).map<OwningChildProjectionRow>(\n        (row) => ({\n          entity: entityName,\n          key: {\n            tenantId: row.tenantId,\n            workspaceId: row.workspaceId,\n            sk: row.sk,\n          },\n        }),\n      );\n      return { items, cursor: result.cursor ?? null };\n    }\n    default: {\n      const exhaustive: never = entityName;\n      throw new Error(\n        `listOwningChildProjectionsOperation: unsupported entity '${String(\n          exhaustive,\n        )}'`,\n      );\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAqCO,IAAM,mCAAmC;AA8BhD,eAAsB,gCACpB,QACuC;AACvC,QAAM,EAAE,MAAM,WAAW,MAAM,IAAI;AAEnC,MAAI,KAAK,WAAW,GAAG;AACrB,WAAO,EAAE,aAAa,GAAG,WAAW,CAAC,EAAE;AAAA,EACzC;AACA,MAAI,KAAK,SAAS,kCAAkC;AAClD,UAAM,IAAI;AAAA,MACR,8CAA8C,KAAK,MAAM,mBAAmB,gCAAgC;AAAA,IAC9G;AAAA,EACF;AAEA,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,UAAmC,KAAK,IAAI,CAAC,SAAS;AAAA,IAC1D,QAAQ,IAAI;AAAA,IACZ,QAAQ;AAAA,IACR,MAAM,EAAE,GAAG,IAAI,IAAI;AAAA,EACrB,EAAE;AAEF,QAAM,kBAAkB,EAAE,SAAS,SAAS,MAAM,CAAC;AAEnD,QAAM,YAAmE,CAAC;AAC1E,aAAW,OAAO,MAAM;AACtB,cAAU,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,KAAK;AAAA,EACzD;AAEA,SAAO,EAAE,aAAa,KAAK,QAAQ,UAAU;AAC/C;AAOO,SAAS,qBACd,MACwC;AACxC,QAAM,SAAiD,CAAC;AACxD,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,kCAAkC;AACtE,WAAO,KAAK,KAAK,MAAM,GAAG,IAAI,gCAAgC,CAAC;AAAA,EACjE;AACA,SAAO;AACT;;;ACjFA,uBAA0D;AAQnD,IAAM,kCAAkC;AAAA,EAC7C,0BAA0B;AAAA,EAC1B,+BAA+B;AAAA,EAC/B,8BAA8B;AAAA,EAC9B,mCAAmC;AAAA,EACnC,6BAA6B;AAAA,EAC7B,kCAAkC;AACpC;AAsGA,IAAM,oBAAoB;AAG1B,IAAM,qBAAmE;AAAA,EACvE,0BAA0B;AAAA,EAC1B,+BAA+B;AAAA,EAC/B,8BAA8B;AAAA,EAC9B,mCAAmC;AAAA,EACnC,6BAA6B;AAAA,EAC7B,kCAAkC;AACpC;AAOA,IAAM,qBAGF;AAAA,EACF,WAAW;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAWA,eAAsB,oCACpB,QAC2C;AAC3C,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU,CAAC;AAAA,IACX,QAAQ;AAAA,IACR;AAAA,EACF,IAAI;AAEJ,MAAI,CAAC,WAAW,QAAQ,WAAW,GAAG;AACpC,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACA,MACE,cAAc,oCAAmB,cAChC,CAAC,YAAY,SAAS,WAAW,IAClC;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,wBAAwB,SAAS;AACjD,QAAM,WAAW,mBAAmB,SAAS;AAE7C,QAAM,cAAmD,CAAC;AAC1D,QAAM,QAAyC,CAAC;AAEhD,aAAW,cAAc,UAAU;AACjC,UAAM,cAAc,QAAQ,UAAU;AACtC,QAAI,gBAAgB,MAAM;AAExB,kBAAY,UAAU,IAAI;AAC1B;AAAA,IACF;AACA,UAAM,SAAS,mBAAmB,UAAU;AAC5C,UAAM,OAAO,MAAM,sBAAsB;AAAA,MACvC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ,eAAe;AAAA,MACvB;AAAA,IACF,CAAC;AACD,eAAW,OAAO,KAAK,OAAO;AAC5B,YAAM,KAAK,GAAG;AAAA,IAChB;AACA,gBAAY,UAAU,IAAI,KAAK;AAAA,EACjC;AAEA,QAAM,YAAY,OAAO,OAAO,WAAW,EAAE,MAAM,CAAC,UAAU,UAAU,IAAI;AAE5E,SAAO,EAAE,OAAO,SAAS,aAAa,UAAU;AAClD;AAkBA,eAAe,sBACb,QACsC;AACtC,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,YAAY,EAAE,QAAQ,MAAM;AAElC,UAAQ,YAAY;AAAA,IAClB,KAAK,4BAA4B;AAC/B,YAAM,SAAS,MAAM,QAAQ,SAAS,yBAAyB,MAC5D,OAAO,EAAE,QAAQ,QAAQ,CAAC,EAC1B,OAAO,EAAE,IAAI,OAAO,CAAC,EACrB,GAAG,SAAS;AACf,YAAM,SAAS,OAAO,QAAQ,CAAC,GAAG;AAAA,QAChC,CAAC,SAAS;AAAA,UACR,QAAQ;AAAA,UACR,KAAK,EAAE,QAAQ,IAAI,QAAQ,IAAI,IAAI,GAAG;AAAA,QACxC;AAAA,MACF;AACA,aAAO,EAAE,OAAO,QAAQ,OAAO,UAAU,KAAK;AAAA,IAChD;AAAA,IACA,KAAK,iCAAiC;AACpC,UAAI,cAAc,oCAAmB,aAAa,CAAC,UAAU;AAC3D,eAAO,EAAE,OAAO,CAAC,GAAG,QAAQ,KAAK;AAAA,MACnC;AACA,YAAM,SAAS,MAAM,QAAQ,SAAS,8BAA8B,MACjE,OAAO,EAAE,UAAU,aAAa,QAAQ,CAAC,EACzC,OAAO,EAAE,IAAI,OAAO,CAAC,EACrB,GAAG,SAAS;AACf,YAAM,SAAS,OAAO,QAAQ,CAAC,GAAG;AAAA,QAChC,CAAC,SAAS;AAAA,UACR,QAAQ;AAAA,UACR,KAAK;AAAA,YACH,UAAU,IAAI;AAAA,YACd,aAAa,IAAI;AAAA,YACjB,IAAI,IAAI;AAAA,UACV;AAAA,QACF;AAAA,MACF;AACA,aAAO,EAAE,OAAO,QAAQ,OAAO,UAAU,KAAK;AAAA,IAChD;AAAA,IACA,KAAK,gCAAgC;AACnC,YAAM,SAAS,MAAM,QAAQ,SAAS,6BAA6B,MAChE,OAAO,EAAE,QAAQ,QAAQ,CAAC,EAC1B,OAAO,EAAE,IAAI,OAAO,CAAC,EACrB,GAAG,SAAS;AACf,YAAM,SAAS,OAAO,QAAQ,CAAC,GAAG;AAAA,QAChC,CAAC,SAAS;AAAA,UACR,QAAQ;AAAA,UACR,KAAK,EAAE,QAAQ,IAAI,QAAQ,IAAI,IAAI,GAAG;AAAA,QACxC;AAAA,MACF;AACA,aAAO,EAAE,OAAO,QAAQ,OAAO,UAAU,KAAK;AAAA,IAChD;AAAA,IACA,KAAK,qCAAqC;AACxC,UAAI,cAAc,oCAAmB,aAAa,CAAC,UAAU;AAC3D,eAAO,EAAE,OAAO,CAAC,GAAG,QAAQ,KAAK;AAAA,MACnC;AACA,YAAM,SACJ,MAAM,QAAQ,SAAS,kCAAkC,MACtD,OAAO,EAAE,UAAU,aAAa,QAAQ,CAAC,EACzC,OAAO,EAAE,IAAI,OAAO,CAAC,EACrB,GAAG,SAAS;AACjB,YAAM,SAAS,OAAO,QAAQ,CAAC,GAAG;AAAA,QAChC,CAAC,SAAS;AAAA,UACR,QAAQ;AAAA,UACR,KAAK;AAAA,YACH,UAAU,IAAI;AAAA,YACd,aAAa,IAAI;AAAA,YACjB,IAAI,IAAI;AAAA,UACV;AAAA,QACF;AAAA,MACF;AACA,aAAO,EAAE,OAAO,QAAQ,OAAO,UAAU,KAAK;AAAA,IAChD;AAAA,IACA,KAAK,+BAA+B;AAClC,YAAM,SAAS,MAAM,QAAQ,SAAS,4BAA4B,MAC/D,OAAO,EAAE,QAAQ,QAAQ,CAAC,EAC1B,OAAO,EAAE,IAAI,OAAO,CAAC,EACrB,GAAG,SAAS;AACf,YAAM,SAAS,OAAO,QAAQ,CAAC,GAAG;AAAA,QAChC,CAAC,SAAS;AAAA,UACR,QAAQ;AAAA,UACR,KAAK,EAAE,QAAQ,IAAI,QAAQ,IAAI,IAAI,GAAG;AAAA,QACxC;AAAA,MACF;AACA,aAAO,EAAE,OAAO,QAAQ,OAAO,UAAU,KAAK;AAAA,IAChD;AAAA,IACA,KAAK,oCAAoC;AACvC,UAAI,cAAc,oCAAmB,aAAa,CAAC,UAAU;AAC3D,eAAO,EAAE,OAAO,CAAC,GAAG,QAAQ,KAAK;AAAA,MACnC;AACA,YAAM,SACJ,MAAM,QAAQ,SAAS,iCAAiC,MACrD,OAAO,EAAE,UAAU,aAAa,QAAQ,CAAC,EACzC,OAAO,EAAE,IAAI,OAAO,CAAC,EACrB,GAAG,SAAS;AACjB,YAAM,SAAS,OAAO,QAAQ,CAAC,GAAG;AAAA,QAChC,CAAC,SAAS;AAAA,UACR,QAAQ;AAAA,UACR,KAAK;AAAA,YACH,UAAU,IAAI;AAAA,YACd,aAAa,IAAI;AAAA,YACjB,IAAI,IAAI;AAAA,UACV;AAAA,QACF;AAAA,MACF;AACA,aAAO,EAAE,OAAO,QAAQ,OAAO,UAAU,KAAK;AAAA,IAChD;AAAA,IACA,SAAS;AACP,YAAM,aAAoB;AAC1B,YAAM,IAAI;AAAA,QACR,4DAA4D;AAAA,UAC1D;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/lib/{chunk-AGF3RAAZ.mjs → chunk-WPCBVDFZ.mjs}

@@ -1,6 +1,6 @@
 import {
   require_lib
-} from "./chunk-SYBADQXI.mjs";
+} from "./chunk-ZM4GDHHC.mjs";
 import {
   __toESM
 } from "./chunk-LZOMFHX3.mjs";
@@ -17,4 +17,4 @@ export {
   SEED_SYSTEM_DATA_ACTOR_SYSTEM,
   SEED_SYSTEM_DATA_CONTROL_BUS_ENV_VAR
 };
-//# sourceMappingURL=chunk-AGF3RAAZ.mjs.map
+//# sourceMappingURL=chunk-WPCBVDFZ.mjs.map

package/lib/chunk-WQWFVEVX.mjs

@@ -0,0 +1,66 @@
+import {
+  TRANSACT_WRITE_ITEM_LIMIT,
+  executeMultiWrite
+} from "./chunk-QJDHVMKT.mjs";
+import {
+  getDynamoControlService
+} from "./chunk-6NBGYGFL.mjs";
+
+// src/data/operations/control/rename-cascade/rename-cascade-rewrite-chunk-operation.ts
+var RENAME_CASCADE_MAX_TARGETS_PER_CHUNK = 50;
+async function rewriteRenameCascadeChunkOperation(params) {
+  const { targets, tableName, token } = params;
+  if (targets.length === 0) {
+    return { targetsRewritten: 0, transactItemCount: 0 };
+  }
+  if (targets.length > RENAME_CASCADE_MAX_TARGETS_PER_CHUNK) {
+    throw new Error(
+      `rewriteRenameCascadeChunkOperation: chunk has ${targets.length} targets; limit is ${RENAME_CASCADE_MAX_TARGETS_PER_CHUNK}`
+    );
+  }
+  const triples = [];
+  for (const target of targets) {
+    if (target.skRewriteRequired) {
+      triples.push({
+        entity: target.entity,
+        action: "delete",
+        item: { ...target.oldKey }
+      });
+      triples.push({
+        entity: target.entity,
+        action: "put",
+        item: { ...target.newItem }
+      });
+    } else {
+      triples.push({
+        entity: target.entity,
+        action: "put",
+        item: { ...target.newItem }
+      });
+    }
+  }
+  if (triples.length > TRANSACT_WRITE_ITEM_LIMIT) {
+    throw new Error(
+      `rewriteRenameCascadeChunkOperation: chunk expanded to ${triples.length} transact items; DynamoDB TransactWriteItems is limited to ${TRANSACT_WRITE_ITEM_LIMIT}`
+    );
+  }
+  const service = getDynamoControlService(tableName);
+  await executeMultiWrite({ service, triples, token });
+  return {
+    targetsRewritten: targets.length,
+    transactItemCount: triples.length
+  };
+}
+function chunkRenameCascadeTargets(targets) {
+  const chunks = [];
+  for (let i = 0; i < targets.length; i += RENAME_CASCADE_MAX_TARGETS_PER_CHUNK) {
+    chunks.push(targets.slice(i, i + RENAME_CASCADE_MAX_TARGETS_PER_CHUNK));
+  }
+  return chunks;
+}
+
+export {
+  rewriteRenameCascadeChunkOperation,
+  chunkRenameCascadeTargets
+};
+//# sourceMappingURL=chunk-WQWFVEVX.mjs.map

package/lib/chunk-WQWFVEVX.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/data/operations/control/rename-cascade/rename-cascade-rewrite-chunk-operation.ts"],"sourcesContent":["/**\n * Atomic chunk rewrite for the TR-023 rename cascade.\n *\n * Each Distributed Map iteration receives up to {@link\n * RENAME_CASCADE_MAX_TARGETS_PER_CHUNK} rewrite targets and submits them\n * all in a single `TransactWriteItems` via the operations-layer multi-\n * write helper (#1010). All-or-nothing semantics: every row in the\n * chunk lands or none does.\n *\n * Each target maps to either:\n *\n * - **SK rewrite** — `delete oldKey` + `put newItem` pair (2 transact\n *   items). The new SK is composed by the\n *   {@link listRenameCascadeTargetsOperation} from the renamed name's\n *   normalized form, so the cascade ends with every projection row\n *   keyed by the new normalized name.\n * - **Attr-only update** — single `put` overwrite at the same key (1\n *   transact item). Used when the renamed attribute is not encoded in\n *   the SK (e.g. Tenant rename's pattern-#4 user-projection row, Role\n *   rename's pattern-#9 workspace-projection row).\n *\n * The 100-item DynamoDB `TransactWriteItems` ceiling enforced by\n * `executeMultiWrite` bounds the chunk; the cascade chunker caps targets\n * at 50 by default so the worst-case (every target is an SK rewrite)\n * still fits.\n *\n * Idempotency: a replayed chunk where every row is already at the new\n * SK fails its `delete oldKey` triple (`attribute_exists` implicit on\n * delete) and the helper throws `ConflictError` — the cascade state\n * machine's `Catch` block absorbs this as a no-op success. Partial\n * replays (some rows at new SK, some still at old) re-run the same\n * delete+put pairs; DynamoDB's all-or-nothing transactions make the\n * partial-write race window impossible.\n *\n * @see .state/adr-018-implementation-guide.md § 5 (Per-item handler)\n * @see ../multi-write-operation.ts (executeMultiWrite)\n * @see .claude/rules/data-layer-layout.md\n */\n\nimport type { RenameCascadeRewriteTarget } from \"./rename-cascade-list-targets-operation\";\nimport { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\nimport {\n  TRANSACT_WRITE_ITEM_LIMIT,\n  executeMultiWrite,\n  type MultiWriteTriple,\n} from \"../multi-write-operation\";\n\n/**\n * Maximum rewrite targets the cascade may submit in a single chunk. An\n * SK-rewrite target produces 2 transact items (delete + put); the\n * default cap of 50 ensures the chunk stays at or below the\n * {@link TRANSACT_WRITE_ITEM_LIMIT} ceiling enforced by\n * `executeMultiWrite` even in the worst case where every target is an\n * SK rewrite.\n */\nexport const RENAME_CASCADE_MAX_TARGETS_PER_CHUNK = 50 as const;\n\n/** Inputs accepted by {@link rewriteRenameCascadeChunkOperation}. */\nexport interface RewriteRenameCascadeChunkParams {\n  /** Rewrite targets to commit in this transaction. Length must be 1..50. */\n  readonly targets: ReadonlyArray<RenameCascadeRewriteTarget>;\n  /** Optional table-name override; resolved via env when omitted. */\n  readonly tableName?: string;\n  /** Optional idempotency token forwarded to ElectroDB. */\n  readonly token?: string;\n}\n\n/** Result of {@link rewriteRenameCascadeChunkOperation}. */\nexport interface RewriteRenameCascadeChunkResult {\n  /** Number of rewrite targets committed (NOT the underlying transact item count). */\n  readonly targetsRewritten: number;\n  /** Number of underlying `TransactWriteItems` entries actually issued. */\n  readonly transactItemCount: number;\n}\n\n/**\n * Submit `targets` as a single `TransactWriteItems` via `executeMultiWrite`.\n *\n * Empty input is a no-op (returns zero counts) so the cascade Map\n * iteration can call this unconditionally on every chunk — including\n * the trailing empty chunk that may arise from a partial-replay where\n * the previous run already cleared the page.\n */\nexport async function rewriteRenameCascadeChunkOperation(\n  params: RewriteRenameCascadeChunkParams,\n): Promise<RewriteRenameCascadeChunkResult> {\n  const { targets, tableName, token } = params;\n\n  if (targets.length === 0) {\n    return { targetsRewritten: 0, transactItemCount: 0 };\n  }\n  if (targets.length > RENAME_CASCADE_MAX_TARGETS_PER_CHUNK) {\n    throw new Error(\n      `rewriteRenameCascadeChunkOperation: chunk has ${targets.length} targets; limit is ${RENAME_CASCADE_MAX_TARGETS_PER_CHUNK}`,\n    );\n  }\n\n  const triples: Array<MultiWriteTriple> = [];\n  for (const target of targets) {\n    if (target.skRewriteRequired) {\n      triples.push({\n        entity: target.entity,\n        action: \"delete\",\n        item: { ...target.oldKey },\n      });\n      triples.push({\n        entity: target.entity,\n        action: \"put\",\n        item: { ...target.newItem },\n      });\n    } else {\n      // Attr-only update — same key, rewrite the row in place.\n      triples.push({\n        entity: target.entity,\n        action: \"put\",\n        item: { ...target.newItem },\n      });\n    }\n  }\n\n  if (triples.length > TRANSACT_WRITE_ITEM_LIMIT) {\n    throw new Error(\n      `rewriteRenameCascadeChunkOperation: chunk expanded to ${triples.length} transact items; DynamoDB TransactWriteItems is limited to ${TRANSACT_WRITE_ITEM_LIMIT}`,\n    );\n  }\n\n  const service = getDynamoControlService(tableName);\n  await executeMultiWrite({ service, triples, token });\n\n  return {\n    targetsRewritten: targets.length,\n    transactItemCount: triples.length,\n  };\n}\n\n/**\n * Split a flat target array into chunks of at most\n * {@link RENAME_CASCADE_MAX_TARGETS_PER_CHUNK} items. Used by the\n * cascade list-and-chunk handler to prepare the Distributed Map's\n * `ItemsPath` array.\n */\nexport function chunkRenameCascadeTargets(\n  targets: ReadonlyArray<RenameCascadeRewriteTarget>,\n): Array<Array<RenameCascadeRewriteTarget>> {\n  const chunks: Array<Array<RenameCascadeRewriteTarget>> = [];\n  for (\n    let i = 0;\n    i < targets.length;\n    i += RENAME_CASCADE_MAX_TARGETS_PER_CHUNK\n  ) {\n    chunks.push(targets.slice(i, i + RENAME_CASCADE_MAX_TARGETS_PER_CHUNK));\n  }\n  return chunks;\n}\n"],"mappings":";;;;;;;;;AAuDO,IAAM,uCAAuC;AA4BpD,eAAsB,mCACpB,QAC0C;AAC1C,QAAM,EAAE,SAAS,WAAW,MAAM,IAAI;AAEtC,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO,EAAE,kBAAkB,GAAG,mBAAmB,EAAE;AAAA,EACrD;AACA,MAAI,QAAQ,SAAS,sCAAsC;AACzD,UAAM,IAAI;AAAA,MACR,iDAAiD,QAAQ,MAAM,sBAAsB,oCAAoC;AAAA,IAC3H;AAAA,EACF;AAEA,QAAM,UAAmC,CAAC;AAC1C,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,mBAAmB;AAC5B,cAAQ,KAAK;AAAA,QACX,QAAQ,OAAO;AAAA,QACf,QAAQ;AAAA,QACR,MAAM,EAAE,GAAG,OAAO,OAAO;AAAA,MAC3B,CAAC;AACD,cAAQ,KAAK;AAAA,QACX,QAAQ,OAAO;AAAA,QACf,QAAQ;AAAA,QACR,MAAM,EAAE,GAAG,OAAO,QAAQ;AAAA,MAC5B,CAAC;AAAA,IACH,OAAO;AAEL,cAAQ,KAAK;AAAA,QACX,QAAQ,OAAO;AAAA,QACf,QAAQ;AAAA,QACR,MAAM,EAAE,GAAG,OAAO,QAAQ;AAAA,MAC5B,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,2BAA2B;AAC9C,UAAM,IAAI;AAAA,MACR,yDAAyD,QAAQ,MAAM,8DAA8D,yBAAyB;AAAA,IAChK;AAAA,EACF;AAEA,QAAM,UAAU,wBAAwB,SAAS;AACjD,QAAM,kBAAkB,EAAE,SAAS,SAAS,MAAM,CAAC;AAEnD,SAAO;AAAA,IACL,kBAAkB,QAAQ;AAAA,IAC1B,mBAAmB,QAAQ;AAAA,EAC7B;AACF;AAQO,SAAS,0BACd,SAC0C;AAC1C,QAAM,SAAmD,CAAC;AAC1D,WACM,IAAI,GACR,IAAI,QAAQ,QACZ,KAAK,sCACL;AACA,WAAO,KAAK,QAAQ,MAAM,GAAG,IAAI,oCAAoC,CAAC;AAAA,EACxE;AACA,SAAO;AACT;","names":[]}

package/lib/{chunk-SYBADQXI.mjs → chunk-ZM4GDHHC.mjs}

@@ -107,6 +107,56 @@ var require_registry = __commonJS({
   }
 });
 
+// ../workflows/lib/detail-types/control-plane.js
+var require_control_plane = __commonJS({
+  "../workflows/lib/detail-types/control-plane.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.ControlPlaneRenameFailedV1 = exports.ControlPlaneRenameCompleteV1 = exports.ControlPlaneRenameV1 = exports.RENAMABLE_ENTITY_TYPE = exports.ControlPlaneOwningDeleteFailedV1 = exports.ControlPlaneOwningDeleteCompleteV1 = exports.ControlPlaneOwningDeleteV1 = exports.OWNING_ENTITY_TYPE = void 0;
+    var sources_1 = require_sources();
+    var registry_1 = require_registry();
+    exports.OWNING_ENTITY_TYPE = {
+      Workspace: "Workspace",
+      User: "User"
+    };
+    exports.ControlPlaneOwningDeleteV1 = (0, registry_1.defineDetailType)({
+      detailType: "control-plane.owning-delete.v1",
+      source: sources_1.OPENHI_DATA_SOURCE,
+      dedupRequired: true
+    });
+    exports.ControlPlaneOwningDeleteCompleteV1 = (0, registry_1.defineDetailType)({
+      detailType: "control-plane.owning-delete-complete.v1",
+      source: sources_1.OPENHI_OPS_SOURCE,
+      dedupRequired: true
+    });
+    exports.ControlPlaneOwningDeleteFailedV1 = (0, registry_1.defineDetailType)({
+      detailType: "control-plane.owning-delete-failed.v1",
+      source: sources_1.OPENHI_OPS_SOURCE,
+      dedupRequired: true
+    });
+    exports.RENAMABLE_ENTITY_TYPE = {
+      Tenant: "Tenant",
+      User: "User",
+      Role: "Role"
+    };
+    exports.ControlPlaneRenameV1 = (0, registry_1.defineDetailType)({
+      detailType: "control-plane.rename.v1",
+      source: sources_1.OPENHI_DATA_SOURCE,
+      dedupRequired: true
+    });
+    exports.ControlPlaneRenameCompleteV1 = (0, registry_1.defineDetailType)({
+      detailType: "control-plane.rename-complete.v1",
+      source: sources_1.OPENHI_OPS_SOURCE,
+      dedupRequired: true
+    });
+    exports.ControlPlaneRenameFailedV1 = (0, registry_1.defineDetailType)({
+      detailType: "control-plane.rename-failed.v1",
+      source: sources_1.OPENHI_OPS_SOURCE,
+      dedupRequired: true
+    });
+  }
+});
+
 // ../workflows/lib/detail-types/platform.js
 var require_platform = __commonJS({
   "../workflows/lib/detail-types/platform.js"(exports) {
@@ -149,6 +199,7 @@ var require_detail_types = __commonJS({
       for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports2, p)) __createBinding(exports2, m, p);
     };
     Object.defineProperty(exports, "__esModule", { value: true });
+    __exportStar(require_control_plane(), exports);
     __exportStar(require_platform(), exports);
     __exportStar(require_registry(), exports);
   }
@@ -500,7 +551,7 @@ var require_lib = __commonJS({
   "../workflows/lib/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
-    exports.workflowDedupClient = exports.recordIfAbsent = exports.markFailed = exports.encodeSortKey = exports.WorkflowDedupTableNameMissingError = exports.WorkflowDedupInvalidInputError = exports.WORKFLOW_DEDUP_TABLE_NAME_ENV_VAR = exports.WORKFLOW_DEDUP_MAX_CONSUMER_NAME_LENGTH = exports.WORKFLOW_DEDUP_DEFAULT_TTL_SECONDS = exports.parseWorkflowEvent = exports.UnsupportedEnvelopeVersionError = exports.InvalidWorkflowEventError = exports.workflowsClient = exports.publishWorkflowEvent = exports.WorkflowPublishError = exports.isWellFormedDetailType = exports.defineDetailType = exports.PlatformSystemDataSeededV1 = exports.PlatformDeploymentCompletedV1 = exports.InvalidDetailTypeRegistrationError = exports.OPENHI_OPS_SOURCE = exports.OPENHI_DATA_SOURCE = exports.OPENHI_CONTROL_SOURCE = exports.DEFAULT_BUS_NAME_BY_SOURCE = exports.workflowUserActorFromClaims = exports.isWorkflowUserActor = exports.isWorkflowSystemActor = exports.MissingActorContextError = exports.isSupportedEnvelopeVersion = exports.ENVELOPE_VERSION = void 0;
+    exports.workflowDedupClient = exports.recordIfAbsent = exports.markFailed = exports.encodeSortKey = exports.WorkflowDedupTableNameMissingError = exports.WorkflowDedupInvalidInputError = exports.WORKFLOW_DEDUP_TABLE_NAME_ENV_VAR = exports.WORKFLOW_DEDUP_MAX_CONSUMER_NAME_LENGTH = exports.WORKFLOW_DEDUP_DEFAULT_TTL_SECONDS = exports.parseWorkflowEvent = exports.UnsupportedEnvelopeVersionError = exports.InvalidWorkflowEventError = exports.workflowsClient = exports.publishWorkflowEvent = exports.WorkflowPublishError = exports.isWellFormedDetailType = exports.defineDetailType = exports.RENAMABLE_ENTITY_TYPE = exports.PlatformSystemDataSeededV1 = exports.PlatformDeploymentCompletedV1 = exports.OWNING_ENTITY_TYPE = exports.InvalidDetailTypeRegistrationError = exports.ControlPlaneRenameV1 = exports.ControlPlaneRenameFailedV1 = exports.ControlPlaneRenameCompleteV1 = exports.ControlPlaneOwningDeleteV1 = exports.ControlPlaneOwningDeleteFailedV1 = exports.ControlPlaneOwningDeleteCompleteV1 = exports.OPENHI_OPS_SOURCE = exports.OPENHI_DATA_SOURCE = exports.OPENHI_CONTROL_SOURCE = exports.DEFAULT_BUS_NAME_BY_SOURCE = exports.workflowUserActorFromClaims = exports.isWorkflowUserActor = exports.isWorkflowSystemActor = exports.MissingActorContextError = exports.isSupportedEnvelopeVersion = exports.ENVELOPE_VERSION = void 0;
     var envelope_version_1 = require_envelope_version();
     Object.defineProperty(exports, "ENVELOPE_VERSION", { enumerable: true, get: function() {
       return envelope_version_1.ENVELOPE_VERSION;
@@ -535,15 +586,39 @@ var require_lib = __commonJS({
       return sources_1.OPENHI_OPS_SOURCE;
     } });
     var detail_types_1 = require_detail_types();
+    Object.defineProperty(exports, "ControlPlaneOwningDeleteCompleteV1", { enumerable: true, get: function() {
+      return detail_types_1.ControlPlaneOwningDeleteCompleteV1;
+    } });
+    Object.defineProperty(exports, "ControlPlaneOwningDeleteFailedV1", { enumerable: true, get: function() {
+      return detail_types_1.ControlPlaneOwningDeleteFailedV1;
+    } });
+    Object.defineProperty(exports, "ControlPlaneOwningDeleteV1", { enumerable: true, get: function() {
+      return detail_types_1.ControlPlaneOwningDeleteV1;
+    } });
+    Object.defineProperty(exports, "ControlPlaneRenameCompleteV1", { enumerable: true, get: function() {
+      return detail_types_1.ControlPlaneRenameCompleteV1;
+    } });
+    Object.defineProperty(exports, "ControlPlaneRenameFailedV1", { enumerable: true, get: function() {
+      return detail_types_1.ControlPlaneRenameFailedV1;
+    } });
+    Object.defineProperty(exports, "ControlPlaneRenameV1", { enumerable: true, get: function() {
+      return detail_types_1.ControlPlaneRenameV1;
+    } });
     Object.defineProperty(exports, "InvalidDetailTypeRegistrationError", { enumerable: true, get: function() {
       return detail_types_1.InvalidDetailTypeRegistrationError;
     } });
+    Object.defineProperty(exports, "OWNING_ENTITY_TYPE", { enumerable: true, get: function() {
+      return detail_types_1.OWNING_ENTITY_TYPE;
+    } });
     Object.defineProperty(exports, "PlatformDeploymentCompletedV1", { enumerable: true, get: function() {
       return detail_types_1.PlatformDeploymentCompletedV1;
     } });
     Object.defineProperty(exports, "PlatformSystemDataSeededV1", { enumerable: true, get: function() {
       return detail_types_1.PlatformSystemDataSeededV1;
     } });
+    Object.defineProperty(exports, "RENAMABLE_ENTITY_TYPE", { enumerable: true, get: function() {
+      return detail_types_1.RENAMABLE_ENTITY_TYPE;
+    } });
     Object.defineProperty(exports, "defineDetailType", { enumerable: true, get: function() {
       return detail_types_1.defineDetailType;
     } });
@@ -604,4 +679,4 @@ var require_lib = __commonJS({
 export {
   require_lib
 };
-//# sourceMappingURL=chunk-SYBADQXI.mjs.map
+//# sourceMappingURL=chunk-ZM4GDHHC.mjs.map