@openhi/constructs 0.0.159 → 0.0.161

package/lib/{chunk-HQ67J7BP.mjs → chunk-5S6VFBLT.mjs}

@@ -1,62 +1,8 @@
-// src/data/operations/control/membership/membership-user-projection.ts
+// src/data/operations/control/membership/membership-workspace-projection.ts
 import { normalizeLabel } from "@openhi/types";
 var MISSING_NAME_SENTINEL = "-";
-function buildMembershipUserProjectionSkTenantLane(params) {
-  const normalizedTenantName = typeof params.denormalizedTenantName === "string" && params.denormalizedTenantName.length > 0 ? normalizeLabel(params.denormalizedTenantName) : MISSING_NAME_SENTINEL;
-  return `MEMBERSHIP#TENANT#${normalizedTenantName}#TID#${params.tenantId}#${params.membershipId}`;
-}
-function buildMembershipUserProjectionSkWorkspaceLane(params) {
-  const normalizedWorkspaceName = typeof params.denormalizedWorkspaceName === "string" && params.denormalizedWorkspaceName.length > 0 ? normalizeLabel(params.denormalizedWorkspaceName) : MISSING_NAME_SENTINEL;
-  return `MEMBERSHIP#WORKSPACE#TID#${params.tenantId}#${normalizedWorkspaceName}#WID#${params.workspaceId}#${params.membershipId}`;
-}
-function buildMembershipUserProjectionItem(input) {
-  if (!input.userId || input.userId.length === 0) {
-    return void 0;
-  }
-  const hasWorkspace = typeof input.workspaceId === "string" && input.workspaceId.length > 0;
-  const sk = hasWorkspace ? buildMembershipUserProjectionSkWorkspaceLane({
-    tenantId: input.tenantId,
-    workspaceId: input.workspaceId,
-    membershipId: input.membershipId,
-    denormalizedWorkspaceName: input.denormalizedWorkspaceName
-  }) : buildMembershipUserProjectionSkTenantLane({
-    tenantId: input.tenantId,
-    membershipId: input.membershipId,
-    denormalizedTenantName: input.denormalizedTenantName
-  });
-  return {
-    userId: input.userId,
-    sk,
-    tenantId: input.tenantId,
-    workspaceId: hasWorkspace ? input.workspaceId : void 0,
-    membershipId: input.membershipId,
-    summary: input.summary,
-    vid: input.vid,
-    lastUpdated: input.lastUpdated,
-    denormalizedTenantName: input.denormalizedTenantName,
-    denormalizedUserName: input.denormalizedUserName,
-    denormalizedWorkspaceName: hasWorkspace ? input.denormalizedWorkspaceName : void 0
-  };
-}
-function extractReferenceSlug(resource, fieldName) {
-  const field = resource[fieldName];
-  if (!field || typeof field !== "object") {
-    return void 0;
-  }
-  const reference = field.reference;
-  if (typeof reference !== "string" || reference.length === 0) {
-    return void 0;
-  }
-  const slash = reference.lastIndexOf("/");
-  const tail = slash >= 0 ? reference.slice(slash + 1) : reference;
-  return tail.length > 0 ? tail : void 0;
-}
-
-// src/data/operations/control/membership/membership-workspace-projection.ts
-import { normalizeLabel as normalizeLabel2 } from "@openhi/types";
-var MISSING_NAME_SENTINEL2 = "-";
 function buildMembershipWorkspaceProjectionSk(params) {
-  const normalizedUserName = typeof params.denormalizedUserName === "string" && params.denormalizedUserName.length > 0 ? normalizeLabel2(params.denormalizedUserName) : MISSING_NAME_SENTINEL2;
+  const normalizedUserName = typeof params.denormalizedUserName === "string" && params.denormalizedUserName.length > 0 ? normalizeLabel(params.denormalizedUserName) : MISSING_NAME_SENTINEL;
   return `MEMBERSHIP#${normalizedUserName}#USER#${params.userId}#${params.membershipId}`;
 }
 function buildMembershipWorkspaceProjectionItem(input) {
@@ -85,14 +31,14 @@ function buildMembershipWorkspaceProjectionItem(input) {
 }
 
 // src/data/operations/control/roleassignment/roleassignment-user-projection.ts
-import { normalizeLabel as normalizeLabel3 } from "@openhi/types";
-var MISSING_NAME_SENTINEL3 = "-";
+import { normalizeLabel as normalizeLabel2 } from "@openhi/types";
+var MISSING_NAME_SENTINEL2 = "-";
 function buildRoleAssignmentUserProjectionSkTenantLane(params) {
-  const normalizedRoleName = typeof params.denormalizedRoleName === "string" && params.denormalizedRoleName.length > 0 ? normalizeLabel3(params.denormalizedRoleName) : MISSING_NAME_SENTINEL3;
+  const normalizedRoleName = typeof params.denormalizedRoleName === "string" && params.denormalizedRoleName.length > 0 ? normalizeLabel2(params.denormalizedRoleName) : MISSING_NAME_SENTINEL2;
   return `ROLEASSIGNMENT#TENANT#${normalizedRoleName}#${params.roleId}#TID#${params.tenantId}#${params.roleAssignmentId}`;
 }
 function buildRoleAssignmentUserProjectionSkWorkspaceLane(params) {
-  const normalizedRoleName = typeof params.denormalizedRoleName === "string" && params.denormalizedRoleName.length > 0 ? normalizeLabel3(params.denormalizedRoleName) : MISSING_NAME_SENTINEL3;
+  const normalizedRoleName = typeof params.denormalizedRoleName === "string" && params.denormalizedRoleName.length > 0 ? normalizeLabel2(params.denormalizedRoleName) : MISSING_NAME_SENTINEL2;
   return `ROLEASSIGNMENT#WORKSPACE#${normalizedRoleName}#${params.roleId}#TID#${params.tenantId}#WID#${params.workspaceId}#${params.roleAssignmentId}`;
 }
 function buildRoleAssignmentUserProjectionItem(input) {
@@ -130,7 +76,7 @@ function buildRoleAssignmentUserProjectionItem(input) {
     denormalizedRoleName: input.denormalizedRoleName
   };
 }
-function extractReferenceSlug2(resource, fieldName) {
+function extractReferenceSlug(resource, fieldName) {
   const field = resource[fieldName];
   if (!field || typeof field !== "object") {
     return void 0;
@@ -145,10 +91,10 @@ function extractReferenceSlug2(resource, fieldName) {
 }
 
 // src/data/operations/control/roleassignment/roleassignment-workspace-projection.ts
-import { normalizeLabel as normalizeLabel4 } from "@openhi/types";
-var MISSING_NAME_SENTINEL4 = "-";
+import { normalizeLabel as normalizeLabel3 } from "@openhi/types";
+var MISSING_NAME_SENTINEL3 = "-";
 function buildRoleAssignmentWorkspaceProjectionSk(params) {
-  const normalizedUserName = typeof params.denormalizedUserName === "string" && params.denormalizedUserName.length > 0 ? normalizeLabel4(params.denormalizedUserName) : MISSING_NAME_SENTINEL4;
+  const normalizedUserName = typeof params.denormalizedUserName === "string" && params.denormalizedUserName.length > 0 ? normalizeLabel3(params.denormalizedUserName) : MISSING_NAME_SENTINEL3;
   return `ROLEASSIGNMENT#${params.roleId}#${normalizedUserName}#USER#${params.userId}#${params.roleAssignmentId}`;
 }
 function buildRoleAssignmentWorkspaceProjectionItem(input) {
@@ -183,17 +129,13 @@ function buildRoleAssignmentWorkspaceProjectionItem(input) {
 }
 
 export {
-  buildMembershipUserProjectionSkTenantLane,
-  buildMembershipUserProjectionSkWorkspaceLane,
-  buildMembershipUserProjectionItem,
-  extractReferenceSlug,
   buildMembershipWorkspaceProjectionSk,
   buildMembershipWorkspaceProjectionItem,
   buildRoleAssignmentUserProjectionSkTenantLane,
   buildRoleAssignmentUserProjectionSkWorkspaceLane,
   buildRoleAssignmentUserProjectionItem,
-  extractReferenceSlug2,
+  extractReferenceSlug,
   buildRoleAssignmentWorkspaceProjectionSk,
   buildRoleAssignmentWorkspaceProjectionItem
 };
-//# sourceMappingURL=chunk-HQ67J7BP.mjs.map
+//# sourceMappingURL=chunk-5S6VFBLT.mjs.map

package/lib/chunk-5S6VFBLT.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/data/operations/control/membership/membership-workspace-projection.ts","../src/data/operations/control/roleassignment/roleassignment-user-projection.ts","../src/data/operations/control/roleassignment/roleassignment-workspace-projection.ts"],"sourcesContent":["/**\n * Membership workspace-projection composer.\n *\n * Owns the SK grammar for ADR-018 pattern #2 and assembles the\n * projection-row payload consumed by the membership create / update /\n * delete operations. The {@link MembershipWorkspaceProjectionEntity}\n * stores the SK verbatim — the grammar lives here so the operations\n * layer is the single source of truth for projection-row shape (per\n * `.claude/rules/data-layer-layout.md`).\n *\n * SK grammar:\n *\n * - **Pattern #2** (users in a workspace, sorted by user name —\n *   workspace-scoped Memberships only):\n *   `MEMBERSHIP#<normalizedUserName>#USER#<userId>#<membershipId>`\n *\n * The projection co-locates with the canonical Workspace record under\n * `PK = TID#<tenantId>#WORKSPACE#ID#<workspaceId>` so\n * `Query(PK = TID#<tenantId>#WORKSPACE#ID#<workspaceId>, SK begins_with 'MEMBERSHIP#')`\n * returns workspace metadata + every member projection in one round\n * trip. Tenant-scoped Memberships (no `workspaceId`) skip this\n * projection entirely.\n *\n * @see ADR-018 § Access Pattern Coverage (pattern #2)\n * @see .state/adr-018-implementation-guide.md § 1 (SK grammar) and § 2 (attribute set)\n */\n\nimport { normalizeLabel } from \"@openhi/types\";\n\n/**\n * Sentinel rendered into the SK when the source display name is missing\n * or empty. Keeps the SK shape stable so a `begins_with` prefix query\n * still matches the row; the rename-cascade pipeline (TR-023) will\n * rewrite the SK once the carrier display name lands. Mirrors the\n * sibling user-projection composer's defensive posture — a missing\n * source field never produces a malformed key.\n */\nconst MISSING_NAME_SENTINEL = \"-\";\n\n/** Inputs to compose a Membership workspace-projection row. */\nexport interface MembershipWorkspaceProjectionInput {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  readonly userId: string;\n  readonly membershipId: string;\n  readonly summary: string;\n  readonly vid: string;\n  readonly lastUpdated: string;\n  readonly denormalizedUserName?: string;\n}\n\n/** A projection-row payload ready for `multi-write` consumption. */\nexport interface MembershipWorkspaceProjectionItem {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  readonly sk: string;\n  readonly userId: string;\n  readonly membershipId: string;\n  readonly summary: string;\n  readonly vid: string;\n  readonly lastUpdated: string;\n  readonly denormalizedUserName?: string;\n}\n\n/**\n * Compose the SK for ADR-018 pattern #2. The `<normalizedUserName>`\n * segment sorts memberships alphabetically by user name within the\n * workspace partition. The trailing `USER#<userId>#<membershipId>`\n * disambiguates rows when two memberships share a normalized user name\n * (homonyms) and supports a per-user lookup via\n * `begins_with('MEMBERSHIP#<normalizedUserName>#USER#<userId>#')`.\n * Missing `denormalizedUserName` falls back to\n * {@link MISSING_NAME_SENTINEL} so the SK shape stays valid\n * pre-rename-cascade.\n */\nexport function buildMembershipWorkspaceProjectionSk(params: {\n  readonly userId: string;\n  readonly membershipId: string;\n  readonly denormalizedUserName?: string;\n}): string {\n  const normalizedUserName =\n    typeof params.denormalizedUserName === \"string\" &&\n    params.denormalizedUserName.length > 0\n      ? normalizeLabel(params.denormalizedUserName)\n      : MISSING_NAME_SENTINEL;\n  return `MEMBERSHIP#${normalizedUserName}#USER#${params.userId}#${params.membershipId}`;\n}\n\n/**\n * Builds the projection item for a workspace-scoped Membership.\n * Returns `undefined` when `workspaceId` or `userId` is missing —\n * tenant-scoped Memberships (no workspaceId) skip the workspace\n * projection entirely, and a Membership without a linked user cannot\n * project onto the workspace partition.\n */\nexport function buildMembershipWorkspaceProjectionItem(\n  input: MembershipWorkspaceProjectionInput,\n): MembershipWorkspaceProjectionItem | undefined {\n  if (!input.workspaceId || input.workspaceId.length === 0) {\n    return undefined;\n  }\n  if (!input.userId || input.userId.length === 0) {\n    return undefined;\n  }\n  const sk = buildMembershipWorkspaceProjectionSk({\n    userId: input.userId,\n    membershipId: input.membershipId,\n    denormalizedUserName: input.denormalizedUserName,\n  });\n  return {\n    tenantId: input.tenantId,\n    workspaceId: input.workspaceId,\n    sk,\n    userId: input.userId,\n    membershipId: input.membershipId,\n    summary: input.summary,\n    vid: input.vid,\n    lastUpdated: input.lastUpdated,\n    denormalizedUserName: input.denormalizedUserName,\n  };\n}\n","/**\n * RoleAssignment user-projection composer.\n *\n * Owns the SK grammar for ADR-018 pattern #5 and assembles the\n * projection-row payload consumed by the role-assignment create /\n * update / delete operations. The\n * {@link RoleAssignmentUserProjectionEntity} stores the SK verbatim —\n * the grammar lives here so the operations layer is the single source\n * of truth for projection-row shape (per\n * `.claude/rules/data-layer-layout.md`).\n *\n * SK grammar:\n *\n * - **tenant-level sub-lane** (`workspaceId` absent):\n *   `ROLEASSIGNMENT#TENANT#<normalizedRoleName>#<roleId>#TID#<tenantId>#<roleAssignmentId>`\n * - **workspace-level sub-lane** (`workspaceId` set):\n *   `ROLEASSIGNMENT#WORKSPACE#<normalizedRoleName>#<roleId>#TID#<tenantId>#WID#<workspaceId>#<roleAssignmentId>`\n *\n * Both sub-lanes share the user partition `PK = USER#ID#<userId>` so\n * `Query(PK = USER#ID#<userId>, SK begins_with 'ROLEASSIGNMENT#')`\n * returns both sub-lanes interleaved with TENANT preceding WORKSPACE\n * lexicographically.\n *\n * @see ADR-018 § Access Pattern Coverage (pattern #5)\n * @see .state/adr-018-implementation-guide.md § 1 (SK grammar) and § 2 (attribute set)\n */\n\nimport { normalizeLabel } from \"@openhi/types\";\n\n/**\n * Sentinel rendered into the SK when the source display name is missing\n * or empty. Keeps the SK shape stable so a `begins_with` prefix query\n * still matches the row; the rename-cascade pipeline (TR-023) will\n * rewrite the SK once the carrier display name lands. Matches the\n * defensive posture in `membership-user-projection` — a missing source\n * field never produces a malformed key.\n */\nconst MISSING_NAME_SENTINEL = \"-\";\n\n/** Inputs to compose a RoleAssignment user-projection row. */\nexport interface RoleAssignmentUserProjectionInput {\n  readonly tenantId: string;\n  readonly userId: string;\n  readonly workspaceId?: string;\n  readonly roleId: string;\n  readonly roleAssignmentId: string;\n  readonly summary: string;\n  readonly vid: string;\n  readonly lastUpdated: string;\n  readonly denormalizedTenantName?: string;\n  readonly denormalizedUserName?: string;\n  readonly denormalizedRoleName?: string;\n}\n\n/** A projection-row payload ready for `multi-write` consumption. */\nexport interface RoleAssignmentUserProjectionItem {\n  readonly userId: string;\n  readonly sk: string;\n  readonly tenantId: string;\n  readonly workspaceId?: string;\n  readonly roleId: string;\n  readonly roleAssignmentId: string;\n  readonly summary: string;\n  readonly vid: string;\n  readonly lastUpdated: string;\n  readonly denormalizedTenantName?: string;\n  readonly denormalizedUserName?: string;\n  readonly denormalizedRoleName?: string;\n}\n\n/**\n * Compose the SK for ADR-018 pattern #5 — tenant-level sub-lane. The\n * `<normalizedRoleName>` segment sorts assignments alphabetically by\n * role name within the user's partition; `<roleId>` discriminates\n * rename-stable. Missing `denormalizedRoleName` falls back to\n * {@link MISSING_NAME_SENTINEL} so the SK shape stays valid\n * pre-rename-cascade.\n */\nexport function buildRoleAssignmentUserProjectionSkTenantLane(params: {\n  readonly tenantId: string;\n  readonly roleId: string;\n  readonly roleAssignmentId: string;\n  readonly denormalizedRoleName?: string;\n}): string {\n  const normalizedRoleName =\n    typeof params.denormalizedRoleName === \"string\" &&\n    params.denormalizedRoleName.length > 0\n      ? normalizeLabel(params.denormalizedRoleName)\n      : MISSING_NAME_SENTINEL;\n  return `ROLEASSIGNMENT#TENANT#${normalizedRoleName}#${params.roleId}#TID#${params.tenantId}#${params.roleAssignmentId}`;\n}\n\n/**\n * Compose the SK for ADR-018 pattern #5 — workspace-level sub-lane.\n * Same `<normalizedRoleName>#<roleId>` sort discriminator as the tenant\n * sub-lane; the trailing segments narrow the partition to a single\n * tenant + workspace. Missing `denormalizedRoleName` falls back to\n * {@link MISSING_NAME_SENTINEL}.\n */\nexport function buildRoleAssignmentUserProjectionSkWorkspaceLane(params: {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  readonly roleId: string;\n  readonly roleAssignmentId: string;\n  readonly denormalizedRoleName?: string;\n}): string {\n  const normalizedRoleName =\n    typeof params.denormalizedRoleName === \"string\" &&\n    params.denormalizedRoleName.length > 0\n      ? normalizeLabel(params.denormalizedRoleName)\n      : MISSING_NAME_SENTINEL;\n  return `ROLEASSIGNMENT#WORKSPACE#${normalizedRoleName}#${params.roleId}#TID#${params.tenantId}#WID#${params.workspaceId}#${params.roleAssignmentId}`;\n}\n\n/**\n * Builds the projection item for the access lane implied by the input.\n * Tenant-level sub-lane when `workspaceId` is absent or empty;\n * workspace-level sub-lane otherwise. Returns `undefined` when `userId`\n * or `roleId` is missing — without either the projection cannot land\n * under a user partition or be sorted by role name.\n */\nexport function buildRoleAssignmentUserProjectionItem(\n  input: RoleAssignmentUserProjectionInput,\n): RoleAssignmentUserProjectionItem | undefined {\n  if (!input.userId || input.userId.length === 0) {\n    return undefined;\n  }\n  if (!input.roleId || input.roleId.length === 0) {\n    return undefined;\n  }\n  const hasWorkspace =\n    typeof input.workspaceId === \"string\" && input.workspaceId.length > 0;\n  const sk = hasWorkspace\n    ? buildRoleAssignmentUserProjectionSkWorkspaceLane({\n        tenantId: input.tenantId,\n        workspaceId: input.workspaceId as string,\n        roleId: input.roleId,\n        roleAssignmentId: input.roleAssignmentId,\n        denormalizedRoleName: input.denormalizedRoleName,\n      })\n    : buildRoleAssignmentUserProjectionSkTenantLane({\n        tenantId: input.tenantId,\n        roleId: input.roleId,\n        roleAssignmentId: input.roleAssignmentId,\n        denormalizedRoleName: input.denormalizedRoleName,\n      });\n  return {\n    userId: input.userId,\n    sk,\n    tenantId: input.tenantId,\n    workspaceId: hasWorkspace ? input.workspaceId : undefined,\n    roleId: input.roleId,\n    roleAssignmentId: input.roleAssignmentId,\n    summary: input.summary,\n    vid: input.vid,\n    lastUpdated: input.lastUpdated,\n    denormalizedTenantName: input.denormalizedTenantName,\n    denormalizedUserName: input.denormalizedUserName,\n    denormalizedRoleName: input.denormalizedRoleName,\n  };\n}\n\n/**\n * Extracts a FHIR `Reference` slug — the segment after the final `/`.\n * Returns `undefined` when the reference is missing or malformed so\n * callers fall back gracefully (matches the defensive posture in\n * `extractRoleId` / `extractDenormalizedReferenceDisplay`).\n */\nexport function extractReferenceSlug(\n  resource: Record<string, unknown>,\n  fieldName: string,\n): string | undefined {\n  const field = resource[fieldName];\n  if (!field || typeof field !== \"object\") {\n    return undefined;\n  }\n  const reference = (field as { reference?: unknown }).reference;\n  if (typeof reference !== \"string\" || reference.length === 0) {\n    return undefined;\n  }\n  const slash = reference.lastIndexOf(\"/\");\n  const tail = slash >= 0 ? reference.slice(slash + 1) : reference;\n  return tail.length > 0 ? tail : undefined;\n}\n","/**\n * RoleAssignment workspace-projection composer.\n *\n * Owns the SK grammar for ADR-018 pattern #9 and assembles the\n * projection-row payload consumed by the role-assignment create /\n * update / delete operations. The\n * {@link RoleAssignmentWorkspaceProjectionEntity} stores the SK\n * verbatim — the grammar lives here so the operations layer is the\n * single source of truth for projection-row shape (per\n * `.claude/rules/data-layer-layout.md`).\n *\n * SK grammar:\n *\n * - **Pattern #9** (users with a specific role in a workspace, sorted\n *   by user name — workspace-scoped RoleAssignments only):\n *   `ROLEASSIGNMENT#<roleId>#<normalizedUserName>#USER#<userId>#<roleAssignmentId>`\n *\n * The SK is **discriminator-first** on the raw `<roleId>` (mirroring\n * the canonical GSI1SK from pattern #8). Role id discriminates first so\n * a `begins_with('ROLEASSIGNMENT#<roleId>#')` filter returns every user\n * assigned to that role in the workspace, sorted alphabetically by\n * normalized user name. The trailing `USER#<userId>#<roleAssignmentId>`\n * disambiguates rows when two assignments share a normalized user name\n * (homonyms) and supports a per-user lookup via\n * `begins_with('ROLEASSIGNMENT#<roleId>#<normalizedUserName>#USER#<userId>#')`.\n *\n * The projection co-locates with the canonical Workspace record (and\n * the Membership workspace-projection rows from pattern #2) under\n * `PK = TID#<tenantId>#WORKSPACE#ID#<workspaceId>` so\n * `Query(PK = TID#<tenantId>#WORKSPACE#ID#<workspaceId>)` returns\n * workspace metadata + every member projection + every role-assignment\n * projection in one round trip. Tenant-scoped RoleAssignments (no\n * `workspaceId`) skip this projection entirely.\n *\n * **Rename-cascade interaction (TR-023, Phase 6).** The SK uses the\n * raw `<roleId>` (rename-stable) for the discriminator and\n * `<normalizedUserName>` for the secondary sort. A Role rename does\n * NOT rewrite this SK; a User rename DOES (cascaded by the rename\n * pipeline).\n *\n * @see ADR-018 § Access Pattern Coverage (pattern #9)\n * @see .state/adr-018-implementation-guide.md § 1 (SK grammar) and § 2 (attribute set)\n */\n\nimport { normalizeLabel } from \"@openhi/types\";\n\n/**\n * Sentinel rendered into the SK when the source user display name is\n * missing or empty. Keeps the SK shape stable so a `begins_with` prefix\n * query still matches the row; the rename-cascade pipeline (TR-023)\n * will rewrite the SK once the carrier display name lands. Mirrors the\n * sibling projection composers' defensive posture — a missing source\n * field never produces a malformed key.\n */\nconst MISSING_NAME_SENTINEL = \"-\";\n\n/** Inputs to compose a RoleAssignment workspace-projection row. */\nexport interface RoleAssignmentWorkspaceProjectionInput {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  readonly userId: string;\n  readonly roleId: string;\n  readonly roleAssignmentId: string;\n  readonly summary: string;\n  readonly vid: string;\n  readonly lastUpdated: string;\n  readonly denormalizedUserName?: string;\n  readonly denormalizedRoleName?: string;\n}\n\n/** A projection-row payload ready for `multi-write` consumption. */\nexport interface RoleAssignmentWorkspaceProjectionItem {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  readonly sk: string;\n  readonly userId: string;\n  readonly roleId: string;\n  readonly roleAssignmentId: string;\n  readonly summary: string;\n  readonly vid: string;\n  readonly lastUpdated: string;\n  readonly denormalizedUserName?: string;\n  readonly denormalizedRoleName?: string;\n}\n\n/**\n * Compose the SK for ADR-018 pattern #9. The discriminator-first\n * `<roleId>` segment (raw, NOT normalized — matches the canonical\n * GSI1SK from pattern #8) lets `begins_with('ROLEASSIGNMENT#<roleId>#')`\n * filter one role. The `<normalizedUserName>` segment sorts assignments\n * alphabetically by user name within that role. The trailing\n * `USER#<userId>#<roleAssignmentId>` disambiguates homonyms and\n * supports a per-user lookup via\n * `begins_with('ROLEASSIGNMENT#<roleId>#<normalizedUserName>#USER#<userId>#')`.\n * Missing `denormalizedUserName` falls back to\n * {@link MISSING_NAME_SENTINEL} so the SK shape stays valid\n * pre-rename-cascade.\n */\nexport function buildRoleAssignmentWorkspaceProjectionSk(params: {\n  readonly roleId: string;\n  readonly userId: string;\n  readonly roleAssignmentId: string;\n  readonly denormalizedUserName?: string;\n}): string {\n  const normalizedUserName =\n    typeof params.denormalizedUserName === \"string\" &&\n    params.denormalizedUserName.length > 0\n      ? normalizeLabel(params.denormalizedUserName)\n      : MISSING_NAME_SENTINEL;\n  return `ROLEASSIGNMENT#${params.roleId}#${normalizedUserName}#USER#${params.userId}#${params.roleAssignmentId}`;\n}\n\n/**\n * Builds the projection item for a workspace-scoped RoleAssignment.\n * Returns `undefined` when `workspaceId`, `userId`, or `roleId` is\n * missing — tenant-scoped RoleAssignments (no workspaceId) skip the\n * workspace projection entirely; a RoleAssignment without a linked\n * user or role cannot project onto the workspace partition under the\n * pattern-#9 SK shape.\n */\nexport function buildRoleAssignmentWorkspaceProjectionItem(\n  input: RoleAssignmentWorkspaceProjectionInput,\n): RoleAssignmentWorkspaceProjectionItem | undefined {\n  if (!input.workspaceId || input.workspaceId.length === 0) {\n    return undefined;\n  }\n  if (!input.userId || input.userId.length === 0) {\n    return undefined;\n  }\n  if (!input.roleId || input.roleId.length === 0) {\n    return undefined;\n  }\n  const sk = buildRoleAssignmentWorkspaceProjectionSk({\n    roleId: input.roleId,\n    userId: input.userId,\n    roleAssignmentId: input.roleAssignmentId,\n    denormalizedUserName: input.denormalizedUserName,\n  });\n  return {\n    tenantId: input.tenantId,\n    workspaceId: input.workspaceId,\n    sk,\n    userId: input.userId,\n    roleId: input.roleId,\n    roleAssignmentId: input.roleAssignmentId,\n    summary: input.summary,\n    vid: input.vid,\n    lastUpdated: input.lastUpdated,\n    denormalizedUserName: input.denormalizedUserName,\n    denormalizedRoleName: input.denormalizedRoleName,\n  };\n}\n"],"mappings":";AA2BA,SAAS,sBAAsB;AAU/B,IAAM,wBAAwB;AAsCvB,SAAS,qCAAqC,QAI1C;AACT,QAAM,qBACJ,OAAO,OAAO,yBAAyB,YACvC,OAAO,qBAAqB,SAAS,IACjC,eAAe,OAAO,oBAAoB,IAC1C;AACN,SAAO,cAAc,kBAAkB,SAAS,OAAO,MAAM,IAAI,OAAO,YAAY;AACtF;AASO,SAAS,uCACd,OAC+C;AAC/C,MAAI,CAAC,MAAM,eAAe,MAAM,YAAY,WAAW,GAAG;AACxD,WAAO;AAAA,EACT;AACA,MAAI,CAAC,MAAM,UAAU,MAAM,OAAO,WAAW,GAAG;AAC9C,WAAO;AAAA,EACT;AACA,QAAM,KAAK,qCAAqC;AAAA,IAC9C,QAAQ,MAAM;AAAA,IACd,cAAc,MAAM;AAAA,IACpB,sBAAsB,MAAM;AAAA,EAC9B,CAAC;AACD,SAAO;AAAA,IACL,UAAU,MAAM;AAAA,IAChB,aAAa,MAAM;AAAA,IACnB;AAAA,IACA,QAAQ,MAAM;AAAA,IACd,cAAc,MAAM;AAAA,IACpB,SAAS,MAAM;AAAA,IACf,KAAK,MAAM;AAAA,IACX,aAAa,MAAM;AAAA,IACnB,sBAAsB,MAAM;AAAA,EAC9B;AACF;;;AC7FA,SAAS,kBAAAA,uBAAsB;AAU/B,IAAMC,yBAAwB;AAyCvB,SAAS,8CAA8C,QAKnD;AACT,QAAM,qBACJ,OAAO,OAAO,yBAAyB,YACvC,OAAO,qBAAqB,SAAS,IACjCD,gBAAe,OAAO,oBAAoB,IAC1CC;AACN,SAAO,yBAAyB,kBAAkB,IAAI,OAAO,MAAM,QAAQ,OAAO,QAAQ,IAAI,OAAO,gBAAgB;AACvH;AASO,SAAS,iDAAiD,QAMtD;AACT,QAAM,qBACJ,OAAO,OAAO,yBAAyB,YACvC,OAAO,qBAAqB,SAAS,IACjCD,gBAAe,OAAO,oBAAoB,IAC1CC;AACN,SAAO,4BAA4B,kBAAkB,IAAI,OAAO,MAAM,QAAQ,OAAO,QAAQ,QAAQ,OAAO,WAAW,IAAI,OAAO,gBAAgB;AACpJ;AASO,SAAS,sCACd,OAC8C;AAC9C,MAAI,CAAC,MAAM,UAAU,MAAM,OAAO,WAAW,GAAG;AAC9C,WAAO;AAAA,EACT;AACA,MAAI,CAAC,MAAM,UAAU,MAAM,OAAO,WAAW,GAAG;AAC9C,WAAO;AAAA,EACT;AACA,QAAM,eACJ,OAAO,MAAM,gBAAgB,YAAY,MAAM,YAAY,SAAS;AACtE,QAAM,KAAK,eACP,iDAAiD;AAAA,IAC/C,UAAU,MAAM;AAAA,IAChB,aAAa,MAAM;AAAA,IACnB,QAAQ,MAAM;AAAA,IACd,kBAAkB,MAAM;AAAA,IACxB,sBAAsB,MAAM;AAAA,EAC9B,CAAC,IACD,8CAA8C;AAAA,IAC5C,UAAU,MAAM;AAAA,IAChB,QAAQ,MAAM;AAAA,IACd,kBAAkB,MAAM;AAAA,IACxB,sBAAsB,MAAM;AAAA,EAC9B,CAAC;AACL,SAAO;AAAA,IACL,QAAQ,MAAM;AAAA,IACd;AAAA,IACA,UAAU,MAAM;AAAA,IAChB,aAAa,eAAe,MAAM,cAAc;AAAA,IAChD,QAAQ,MAAM;AAAA,IACd,kBAAkB,MAAM;AAAA,IACxB,SAAS,MAAM;AAAA,IACf,KAAK,MAAM;AAAA,IACX,aAAa,MAAM;AAAA,IACnB,wBAAwB,MAAM;AAAA,IAC9B,sBAAsB,MAAM;AAAA,IAC5B,sBAAsB,MAAM;AAAA,EAC9B;AACF;AAQO,SAAS,qBACd,UACA,WACoB;AACpB,QAAM,QAAQ,SAAS,SAAS;AAChC,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO;AAAA,EACT;AACA,QAAM,YAAa,MAAkC;AACrD,MAAI,OAAO,cAAc,YAAY,UAAU,WAAW,GAAG;AAC3D,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,UAAU,YAAY,GAAG;AACvC,QAAM,OAAO,SAAS,IAAI,UAAU,MAAM,QAAQ,CAAC,IAAI;AACvD,SAAO,KAAK,SAAS,IAAI,OAAO;AAClC;;;AC3IA,SAAS,kBAAAC,uBAAsB;AAU/B,IAAMC,yBAAwB;AA4CvB,SAAS,yCAAyC,QAK9C;AACT,QAAM,qBACJ,OAAO,OAAO,yBAAyB,YACvC,OAAO,qBAAqB,SAAS,IACjCD,gBAAe,OAAO,oBAAoB,IAC1CC;AACN,SAAO,kBAAkB,OAAO,MAAM,IAAI,kBAAkB,SAAS,OAAO,MAAM,IAAI,OAAO,gBAAgB;AAC/G;AAUO,SAAS,2CACd,OACmD;AACnD,MAAI,CAAC,MAAM,eAAe,MAAM,YAAY,WAAW,GAAG;AACxD,WAAO;AAAA,EACT;AACA,MAAI,CAAC,MAAM,UAAU,MAAM,OAAO,WAAW,GAAG;AAC9C,WAAO;AAAA,EACT;AACA,MAAI,CAAC,MAAM,UAAU,MAAM,OAAO,WAAW,GAAG;AAC9C,WAAO;AAAA,EACT;AACA,QAAM,KAAK,yCAAyC;AAAA,IAClD,QAAQ,MAAM;AAAA,IACd,QAAQ,MAAM;AAAA,IACd,kBAAkB,MAAM;AAAA,IACxB,sBAAsB,MAAM;AAAA,EAC9B,CAAC;AACD,SAAO;AAAA,IACL,UAAU,MAAM;AAAA,IAChB,aAAa,MAAM;AAAA,IACnB;AAAA,IACA,QAAQ,MAAM;AAAA,IACd,QAAQ,MAAM;AAAA,IACd,kBAAkB,MAAM;AAAA,IACxB,SAAS,MAAM;AAAA,IACf,KAAK,MAAM;AAAA,IACX,aAAa,MAAM;AAAA,IACnB,sBAAsB,MAAM;AAAA,IAC5B,sBAAsB,MAAM;AAAA,EAC9B;AACF;","names":["normalizeLabel","MISSING_NAME_SENTINEL","normalizeLabel","MISSING_NAME_SENTINEL"]}

package/lib/{chunk-MVQWAIMC.mjs → chunk-6BB4CRSS.mjs}

@@ -1,10 +1,6 @@
 import {
-  NotFoundError
-} from "./chunk-FYHBHHWK.mjs";
-import {
-  SHARD_COUNT,
   computeShard
-} from "./chunk-VZCPGQXA.mjs";
+} from "./chunk-EUIP2U5F.mjs";
 import {
   defaultTableName,
   dynamoClient
@@ -1044,312 +1040,7 @@ function getDynamoDataService(tableName) {
   };
 }
 
-// src/data/audit-meta.ts
-var OPENHI_EXT = "http://openhi.org/fhir/StructureDefinition";
-function mergeAuditIntoMeta(meta, audit) {
-  const existing = meta ?? {};
-  const ext = [
-    ...Array.isArray(existing.extension) ? existing.extension : []
-  ];
-  const byUrl = new Map(ext.map((e) => [e.url, e]));
-  function set(url, value, type) {
-    if (value == null) return;
-    byUrl.set(url, { url, [type]: value });
-  }
-  set(`${OPENHI_EXT}/created-date`, audit.createdDate, "valueDateTime");
-  set(`${OPENHI_EXT}/created-by-id`, audit.createdById, "valueString");
-  set(`${OPENHI_EXT}/created-by-name`, audit.createdByName, "valueString");
-  set(`${OPENHI_EXT}/modified-date`, audit.modifiedDate, "valueDateTime");
-  set(`${OPENHI_EXT}/modified-by-id`, audit.modifiedById, "valueString");
-  set(`${OPENHI_EXT}/modified-by-name`, audit.modifiedByName, "valueString");
-  set(`${OPENHI_EXT}/deleted-date`, audit.deletedDate, "valueDateTime");
-  set(`${OPENHI_EXT}/deleted-by-id`, audit.deletedById, "valueString");
-  set(`${OPENHI_EXT}/deleted-by-name`, audit.deletedByName, "valueString");
-  return { ...existing, extension: Array.from(byUrl.values()) };
-}
-
-// src/data/operations/data-operations-common.ts
-import { extractSortKey, extractSummary } from "@openhi/types";
-
-// src/lib/compression.ts
-import { gzipSync, gunzipSync } from "zlib";
-var ENVELOPE_VERSION = 1;
-var COMPRESSION_ALGOS = {
-  NONE: "none",
-  GZIP: "gzip",
-  BROTLI: "brotli",
-  DEFLATE: "deflate"
-};
-function isEnvelope(obj) {
-  return typeof obj === "object" && obj !== null && "v" in obj && "algo" in obj && "payload" in obj && typeof obj.payload === "string";
-}
-function compressResource(jsonString, options) {
-  const algo = options?.algo ?? COMPRESSION_ALGOS.GZIP;
-  if (algo === COMPRESSION_ALGOS.NONE) {
-    const envelope2 = {
-      v: ENVELOPE_VERSION,
-      algo: COMPRESSION_ALGOS.NONE,
-      payload: jsonString
-    };
-    return JSON.stringify(envelope2);
-  }
-  const buf = Buffer.from(jsonString, "utf-8");
-  const payload = gzipSync(buf).toString("base64");
-  const envelope = {
-    v: ENVELOPE_VERSION,
-    algo: COMPRESSION_ALGOS.GZIP,
-    payload
-  };
-  return JSON.stringify(envelope);
-}
-function decompressResource(compressedOrRaw) {
-  try {
-    const parsed = JSON.parse(compressedOrRaw);
-    if (isEnvelope(parsed)) {
-      if (parsed.algo === COMPRESSION_ALGOS.GZIP) {
-        const buf = Buffer.from(parsed.payload, "base64");
-        return gunzipSync(buf).toString("utf-8");
-      }
-      if (parsed.algo === COMPRESSION_ALGOS.NONE) {
-        return parsed.payload;
-      }
-      return parsed.payload;
-    }
-  } catch {
-  }
-  try {
-    const buf = Buffer.from(compressedOrRaw, "base64");
-    if (buf.length >= 2 && buf[0] === 31 && buf[1] === 139) {
-      return gunzipSync(buf).toString("utf-8");
-    }
-  } catch {
-  }
-  return compressedOrRaw;
-}
-
-// src/data/operations/data-operations-common.ts
-var DATA_ENTITY_SK = "CURRENT";
-async function getDataEntityById(entity, tenantId, workspaceId, id, resourceLabel) {
-  const result = await entity.get({
-    tenantId,
-    workspaceId,
-    id,
-    sk: DATA_ENTITY_SK
-  }).go();
-  if (!result.data) {
-    throw new NotFoundError(`${resourceLabel} ${id} not found`, {
-      details: { id }
-    });
-  }
-  const parsed = JSON.parse(decompressResource(result.data.resource));
-  return {
-    id: result.data.id,
-    resource: { ...parsed, id: result.data.id }
-  };
-}
-async function deleteDataEntityById(entity, tenantId, workspaceId, id) {
-  await entity.delete({
-    tenantId,
-    workspaceId,
-    id,
-    sk: DATA_ENTITY_SK
-  }).go();
-}
-var BATCH_GET_MAX_ATTEMPTS = 3;
-var BATCH_GET_BASE_BACKOFF_MS = 50;
-async function batchGetWithRetry(entity, keys) {
-  if (keys.length === 0) return [];
-  const collected = [];
-  let pending = keys;
-  let attempt = 0;
-  while (pending.length > 0) {
-    if (attempt > 0) {
-      await new Promise(
-        (resolve) => setTimeout(resolve, BATCH_GET_BASE_BACKOFF_MS * 2 ** (attempt - 1))
-      );
-    }
-    attempt++;
-    const result = await entity.get(pending).go();
-    collected.push(...result.data);
-    const unprocessed = result.unprocessed ?? [];
-    if (unprocessed.length === 0) break;
-    if (attempt >= BATCH_GET_MAX_ATTEMPTS) {
-      throw new Error(
-        `BatchGet exhausted retries: ${unprocessed.length} key(s) still unprocessed after ${BATCH_GET_MAX_ATTEMPTS} attempt(s)`
-      );
-    }
-    pending = unprocessed;
-  }
-  return collected;
-}
-async function dispatchListMode(mode, shardResults, hooks) {
-  if (mode === "count") {
-    let total = 0;
-    for (const shardResult of shardResults) {
-      total += (shardResult.data ?? []).length;
-    }
-    return { entries: [], total };
-  }
-  if (mode === "summary") {
-    const entries2 = [];
-    for (const shardResult of shardResults) {
-      for (const item of shardResult.data ?? []) {
-        if (typeof item.summary !== "string") continue;
-        let parsed;
-        try {
-          parsed = JSON.parse(item.summary);
-        } catch {
-          continue;
-        }
-        entries2.push(hooks.buildSummaryEntry(item.id, parsed));
-      }
-    }
-    return { entries: entries2, total: entries2.length };
-  }
-  const orderedIds = [];
-  for (const shardResult of shardResults) {
-    for (const item of shardResult.data ?? []) {
-      orderedIds.push(item.id);
-    }
-  }
-  if (orderedIds.length === 0) return { entries: [], total: 0 };
-  const items = await hooks.hydrate(orderedIds);
-  const byId = new Map(items.map((item) => [hooks.getId(item), item]));
-  const entries = [];
-  for (const id of orderedIds) {
-    const item = byId.get(id);
-    if (!item) continue;
-    entries.push(hooks.buildEntry(id, item));
-  }
-  return { entries, total: entries.length };
-}
-async function listDataEntitiesByWorkspace(entity, tenantId, workspaceId, mode = "full") {
-  const shardResults = await Promise.all(
-    Array.from(
-      { length: SHARD_COUNT },
-      (_, shard) => entity.query.gsi1({ tenantId, workspaceId, gsi1Shard: String(shard) }).go()
-    )
-  );
-  return dispatchListMode(
-    mode,
-    shardResults,
-    {
-      hydrate: (orderedIds) => batchGetWithRetry(
-        entity,
-        orderedIds.map((id) => ({
-          tenantId,
-          workspaceId,
-          id,
-          sk: DATA_ENTITY_SK
-        }))
-      ),
-      getId: (item) => item.id,
-      buildEntry: (id, item) => {
-        const parsed = JSON.parse(decompressResource(item.resource));
-        return { id, resource: { ...parsed, id } };
-      },
-      buildSummaryEntry: (id, parsed) => ({
-        id,
-        resource: { ...parsed, id }
-      })
-    }
-  );
-}
-async function createDataEntityRecord(entity, tenantId, workspaceId, id, resourceWithAudit, fallbackDate) {
-  const lastUpdated = resourceWithAudit.meta?.lastUpdated ?? fallbackDate ?? (/* @__PURE__ */ new Date()).toISOString();
-  const vid = lastUpdated.replace(/[-:T.Z]/g, "").slice(0, 12) || Date.now().toString(36);
-  const resourceLike = resourceWithAudit;
-  const summary = JSON.stringify(extractSummary(resourceLike));
-  const gsi1sk = extractSortKey(resourceLike);
-  await entity.put({
-    sk: DATA_ENTITY_SK,
-    tenantId,
-    workspaceId,
-    id,
-    resource: compressResource(JSON.stringify(resourceWithAudit)),
-    summary,
-    vid,
-    lastUpdated,
-    gsi1sk
-  }).go();
-  return {
-    id,
-    resource: resourceWithAudit
-  };
-}
-function buildUpdatedResourceWithAudit(body, id, date, actorId, actorName, existingResourceStr, resourceType) {
-  const existingMeta = JSON.parse(existingResourceStr).meta;
-  const bodyWithMeta = body;
-  const resourceWithVersion = {
-    ...body,
-    resourceType,
-    id,
-    meta: {
-      ...bodyWithMeta.meta ?? {},
-      lastUpdated: date,
-      versionId: "2"
-    }
-  };
-  const resourceWithAudit = {
-    ...resourceWithVersion,
-    meta: mergeAuditIntoMeta(resourceWithVersion.meta ?? existingMeta, {
-      modifiedDate: date,
-      modifiedById: actorId,
-      modifiedByName: actorName
-    })
-  };
-  return {
-    resource: resourceWithAudit,
-    lastUpdated: date
-  };
-}
-async function updateDataEntityById(entity, tenantId, workspaceId, id, resourceLabel, context, buildPatched) {
-  const existing = await entity.get({
-    tenantId,
-    workspaceId,
-    id,
-    sk: DATA_ENTITY_SK
-  }).go();
-  if (!existing.data) {
-    throw new NotFoundError(`${resourceLabel} ${id} not found`, {
-      details: { id }
-    });
-  }
-  const existingStr = decompressResource(existing.data.resource);
-  const { resource, lastUpdated } = buildPatched(existingStr);
-  const resourceLike = resource;
-  const summary = JSON.stringify(extractSummary(resourceLike));
-  const gsi1sk = extractSortKey(resourceLike);
-  await entity.patch({
-    tenantId,
-    workspaceId,
-    id,
-    sk: DATA_ENTITY_SK
-  }).set({
-    resource: compressResource(JSON.stringify(resource)),
-    summary,
-    lastUpdated,
-    gsi1sk
-  }).go();
-  return {
-    id,
-    resource
-  };
-}
-
 export {
-  getDynamoDataService,
-  compressResource,
-  decompressResource,
-  mergeAuditIntoMeta,
-  DATA_ENTITY_SK,
-  getDataEntityById,
-  deleteDataEntityById,
-  batchGetWithRetry,
-  dispatchListMode,
-  listDataEntitiesByWorkspace,
-  createDataEntityRecord,
-  buildUpdatedResourceWithAudit,
-  updateDataEntityById
+  getDynamoDataService
 };
-//# sourceMappingURL=chunk-MVQWAIMC.mjs.map
+//# sourceMappingURL=chunk-6BB4CRSS.mjs.map