@openhi/constructs 0.0.159 → 0.0.161

package/lib/chunk-Q64MOYJ7.mjs

@@ -0,0 +1,218 @@
+import {
+  buildSkPrefix
+} from "./chunk-DWSWCUZR.mjs";
+import {
+  batchGetWithRetry,
+  dispatchListMode
+} from "./chunk-O5VQWB6U.mjs";
+import {
+  SHARD_COUNT,
+  getDynamoControlService
+} from "./chunk-EUIP2U5F.mjs";
+
+// src/data/operations/control/tenant/tenant-list-operation.ts
+var SK = "CURRENT";
+function counterValue(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : 0;
+}
+async function listTenantsOperation(params) {
+  const { tableName, mode = "full" } = params;
+  const service = getDynamoControlService(tableName);
+  const shardResults = await Promise.all(
+    Array.from(
+      { length: SHARD_COUNT },
+      (_, shard) => service.entities.tenant.query.gsi1({ gsi1Shard: String(shard) }).go()
+    )
+  );
+  return dispatchListMode(mode, shardResults, {
+    hydrate: (orderedIds) => batchGetWithRetry(
+      service.entities.tenant,
+      orderedIds.map((id) => ({ tenantId: id, sk: SK }))
+    ),
+    getId: (item) => item.id,
+    // FULL mode (admin list default): read the ADR-028 counters off the
+    // canonical record hydrated by BatchGet and expose them as
+    // `resource.counts`. Missing counters render as 0.
+    buildEntry: (id, item) => ({
+      id,
+      resource: {
+        resourceType: "Tenant",
+        id,
+        ...JSON.parse(item.resource),
+        counts: {
+          usersInTenant: counterValue(item.usersInTenant),
+          workspacesInTenant: counterValue(item.workspacesInTenant)
+        }
+      }
+    }),
+    // SUMMARY mode reads only the GSI1 `summary` projection, which does
+    // not carry the counters; surface zeros so the shape stays uniform.
+    buildSummaryEntry: (id, parsed) => ({
+      id,
+      resource: {
+        resourceType: "Tenant",
+        id,
+        ...parsed,
+        counts: { usersInTenant: 0, workspacesInTenant: 0 }
+      }
+    })
+  });
+}
+
+// src/data/operations/control/workspace/workspace-list-operation.ts
+var SK2 = "CURRENT";
+function counterValue2(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : 0;
+}
+async function listWorkspacesOperation(params) {
+  const { context, tableName, mode = "full" } = params;
+  const { tenantId } = context;
+  const service = getDynamoControlService(tableName);
+  const shardResults = await Promise.all(
+    Array.from(
+      { length: SHARD_COUNT },
+      (_, shard) => service.entities.workspace.query.gsi1({ tenantId, gsi1Shard: String(shard) }).go()
+    )
+  );
+  return dispatchListMode(mode, shardResults, {
+    hydrate: (orderedIds) => batchGetWithRetry(
+      service.entities.workspace,
+      orderedIds.map((id) => ({ tenantId, id, sk: SK2 }))
+    ),
+    getId: (item) => item.id,
+    // FULL mode (admin list default): read the ADR-028 counters off the
+    // canonical record hydrated by BatchGet and expose them as
+    // `resource.counts`. Missing counters render as 0.
+    buildEntry: (id, item) => ({
+      id,
+      resource: {
+        resourceType: "Workspace",
+        id,
+        ...JSON.parse(item.resource),
+        counts: {
+          usersInWorkspace: counterValue2(item.usersInWorkspace),
+          adminUsersInWorkspace: counterValue2(item.adminUsersInWorkspace),
+          normalUsersInWorkspace: counterValue2(item.normalUsersInWorkspace)
+        }
+      }
+    }),
+    // SUMMARY mode reads only the GSI1 `summary` projection (no
+    // counters); surface zeros so the shape stays uniform.
+    buildSummaryEntry: (id, parsed) => ({
+      id,
+      resource: {
+        resourceType: "Workspace",
+        id,
+        ...parsed,
+        counts: {
+          usersInWorkspace: 0,
+          adminUsersInWorkspace: 0,
+          normalUsersInWorkspace: 0
+        }
+      }
+    })
+  });
+}
+
+// src/data/operations/control/membership/membership-count-by-user-operation.ts
+async function countMembershipsByUserOperation(params) {
+  const { userId, mode = "all", tenantId, tableName } = params;
+  if (mode === "workspaceInTenant" && !tenantId) {
+    throw new Error(
+      'countMembershipsByUserOperation: tenantId is required when mode === "workspaceInTenant"'
+    );
+  }
+  const service = getDynamoControlService(tableName);
+  const skPrefix = buildSkPrefix(mode, tenantId);
+  const result = await service.entities.membershipUserProjection.query.record({ userId }).begins({ sk: skPrefix }).go({ pages: "all", attributes: ["membershipId"] });
+  return (result.data ?? []).length;
+}
+
+// src/data/operations/control/membership/membership-list-by-workspace-operation.ts
+async function membershipListByWorkspaceOperation(params) {
+  const {
+    tenantId,
+    workspaceId,
+    cursor = null,
+    limit,
+    order,
+    tableName
+  } = params;
+  const service = getDynamoControlService(tableName);
+  const goOptions = {
+    cursor
+  };
+  if (limit !== void 0) {
+    goOptions.limit = limit;
+  }
+  if (order !== void 0) {
+    goOptions.order = order;
+  }
+  const result = await service.entities.membershipWorkspaceProjection.query.record({ tenantId, workspaceId }).begins({ sk: "MEMBERSHIP#" }).go(goOptions);
+  const items = (result.data ?? []).map((row) => ({
+    tenantId: row.tenantId,
+    workspaceId: row.workspaceId,
+    sk: row.sk,
+    userId: row.userId,
+    membershipId: row.membershipId,
+    summary: row.summary,
+    vid: row.vid,
+    lastUpdated: row.lastUpdated,
+    denormalizedUserName: row.denormalizedUserName
+  }));
+  return { items, cursor: result.cursor ?? null };
+}
+
+// src/data/operations/control/roleassignment/roleassignment-list-by-workspace-operation.ts
+function buildSkPrefix2(roleId) {
+  if (roleId === void 0 || roleId.length === 0) {
+    return "ROLEASSIGNMENT#";
+  }
+  return `ROLEASSIGNMENT#${roleId}#`;
+}
+async function roleAssignmentListByWorkspaceOperation(params) {
+  const {
+    tenantId,
+    workspaceId,
+    roleId,
+    cursor = null,
+    limit,
+    order,
+    tableName
+  } = params;
+  const service = getDynamoControlService(tableName);
+  const skPrefix = buildSkPrefix2(roleId);
+  const goOptions = {
+    cursor
+  };
+  if (limit !== void 0) {
+    goOptions.limit = limit;
+  }
+  if (order !== void 0) {
+    goOptions.order = order;
+  }
+  const result = await service.entities.roleAssignmentWorkspaceProjection.query.record({ tenantId, workspaceId }).begins({ sk: skPrefix }).go(goOptions);
+  const items = (result.data ?? []).map((row) => ({
+    tenantId: row.tenantId,
+    workspaceId: row.workspaceId,
+    sk: row.sk,
+    userId: row.userId,
+    roleId: row.roleId,
+    roleAssignmentId: row.roleAssignmentId,
+    summary: row.summary,
+    vid: row.vid,
+    lastUpdated: row.lastUpdated,
+    denormalizedUserName: row.denormalizedUserName,
+    denormalizedRoleName: row.denormalizedRoleName
+  }));
+  return { items, cursor: result.cursor ?? null };
+}
+
+export {
+  listTenantsOperation,
+  listWorkspacesOperation,
+  countMembershipsByUserOperation,
+  membershipListByWorkspaceOperation,
+  roleAssignmentListByWorkspaceOperation
+};
+//# sourceMappingURL=chunk-Q64MOYJ7.mjs.map

package/lib/chunk-Q64MOYJ7.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/data/operations/control/tenant/tenant-list-operation.ts","../src/data/operations/control/workspace/workspace-list-operation.ts","../src/data/operations/control/membership/membership-count-by-user-operation.ts","../src/data/operations/control/membership/membership-list-by-workspace-operation.ts","../src/data/operations/control/roleassignment/roleassignment-list-by-workspace-operation.ts"],"sourcesContent":["import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\nimport { SHARD_COUNT } from \"../../../dynamo/shard\";\nimport type { OpenHiContext } from \"../../../openhi-context\";\nimport {\n  batchGetWithRetry,\n  dispatchListMode,\n  type ListOperationMode,\n} from \"../../data-operations-common\";\n\nconst SK = \"CURRENT\";\n\nexport interface ListTenantsParams {\n  context: OpenHiContext;\n  tableName?: string;\n  /** #853: defaults to `\"full\"`. `\"summary\"` skips BatchGet, `\"count\"` returns total only. */\n  mode?: ListOperationMode;\n}\n\n/**\n * ADR-028 denormalized counter shape surfaced on a Tenant list entry's\n * `resource.counts`. Missing counters render as `0` so the admin console\n * never sees `undefined`.\n */\nexport interface TenantCounts {\n  usersInTenant: number;\n  workspacesInTenant: number;\n}\n\nexport interface TenantListEntry {\n  id: string;\n  resource: Record<string, unknown> & { counts: TenantCounts };\n}\n\nexport interface ListTenantsResult {\n  entries: TenantListEntry[];\n  total: number;\n}\n\n/** Coerce a possibly-absent counter attribute to a non-negative number (default 0). */\nfunction counterValue(value: unknown): number {\n  return typeof value === \"number\" && Number.isFinite(value) ? value : 0;\n}\n\n/**\n * Lists all Tenants (platform-wide, no scope filter) via GSI1 (sharded). Tenant uses tenantId\n * as its identity (tenantId === id), so BatchGet keys reuse `id` as `tenantId`. See\n * `dispatchListMode` for the mode contract (#853).\n */\nexport async function listTenantsOperation(\n  params: ListTenantsParams,\n): Promise<ListTenantsResult> {\n  const { tableName, mode = \"full\" } = params;\n  const service = getDynamoControlService(tableName);\n\n  const shardResults = await Promise.all(\n    Array.from({ length: SHARD_COUNT }, (_, shard) =>\n      service.entities.tenant.query.gsi1({ gsi1Shard: String(shard) }).go(),\n    ),\n  );\n\n  return dispatchListMode<\n    {\n      id: string;\n      resource: string;\n      usersInTenant?: number;\n      workspacesInTenant?: number;\n    },\n    TenantListEntry\n  >(mode, shardResults, {\n    hydrate: (orderedIds) =>\n      batchGetWithRetry(\n        service.entities.tenant,\n        orderedIds.map((id) => ({ tenantId: id, sk: SK })),\n      ) as Promise<\n        Array<{\n          id: string;\n          resource: string;\n          usersInTenant?: number;\n          workspacesInTenant?: number;\n        }>\n      >,\n    getId: (item) => item.id,\n    // FULL mode (admin list default): read the ADR-028 counters off the\n    // canonical record hydrated by BatchGet and expose them as\n    // `resource.counts`. Missing counters render as 0.\n    buildEntry: (id, item) => ({\n      id,\n      resource: {\n        resourceType: \"Tenant\",\n        id,\n        ...(JSON.parse(item.resource) as Record<string, unknown>),\n        counts: {\n          usersInTenant: counterValue(item.usersInTenant),\n          workspacesInTenant: counterValue(item.workspacesInTenant),\n        },\n      },\n    }),\n    // SUMMARY mode reads only the GSI1 `summary` projection, which does\n    // not carry the counters; surface zeros so the shape stays uniform.\n    buildSummaryEntry: (id, parsed) => ({\n      id,\n      resource: {\n        resourceType: \"Tenant\",\n        id,\n        ...parsed,\n        counts: { usersInTenant: 0, workspacesInTenant: 0 },\n      },\n    }),\n  });\n}\n","import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\nimport { SHARD_COUNT } from \"../../../dynamo/shard\";\nimport type { OpenHiContext } from \"../../../openhi-context\";\nimport {\n  batchGetWithRetry,\n  dispatchListMode,\n  type ListOperationMode,\n} from \"../../data-operations-common\";\n\nconst SK = \"CURRENT\";\n\nexport interface ListWorkspacesParams {\n  context: OpenHiContext;\n  tableName?: string;\n  /** #853: defaults to `\"full\"`. `\"summary\"` skips BatchGet, `\"count\"` returns total only. */\n  mode?: ListOperationMode;\n}\n\n/**\n * ADR-028 denormalized counter shape surfaced on a Workspace list\n * entry's `resource.counts`. Missing counters render as `0`.\n */\nexport interface WorkspaceCounts {\n  usersInWorkspace: number;\n  adminUsersInWorkspace: number;\n  normalUsersInWorkspace: number;\n}\n\nexport interface WorkspaceListEntry {\n  id: string;\n  resource: Record<string, unknown> & { counts: WorkspaceCounts };\n}\n\nexport interface ListWorkspacesResult {\n  entries: WorkspaceListEntry[];\n  total: number;\n}\n\n/** Coerce a possibly-absent counter attribute to a non-negative number (default 0). */\nfunction counterValue(value: unknown): number {\n  return typeof value === \"number\" && Number.isFinite(value) ? value : 0;\n}\n\n/**\n * Lists all Workspaces for the context tenant via GSI1 (sharded). See `dispatchListMode` for\n * the mode contract (#853).\n */\nexport async function listWorkspacesOperation(\n  params: ListWorkspacesParams,\n): Promise<ListWorkspacesResult> {\n  const { context, tableName, mode = \"full\" } = params;\n  const { tenantId } = context;\n  const service = getDynamoControlService(tableName);\n\n  const shardResults = await Promise.all(\n    Array.from({ length: SHARD_COUNT }, (_, shard) =>\n      service.entities.workspace.query\n        .gsi1({ tenantId, gsi1Shard: String(shard) })\n        .go(),\n    ),\n  );\n\n  return dispatchListMode<\n    {\n      id: string;\n      resource: string;\n      usersInWorkspace?: number;\n      adminUsersInWorkspace?: number;\n      normalUsersInWorkspace?: number;\n    },\n    WorkspaceListEntry\n  >(mode, shardResults, {\n    hydrate: (orderedIds) =>\n      batchGetWithRetry(\n        service.entities.workspace,\n        orderedIds.map((id) => ({ tenantId, id, sk: SK })),\n      ) as Promise<\n        Array<{\n          id: string;\n          resource: string;\n          usersInWorkspace?: number;\n          adminUsersInWorkspace?: number;\n          normalUsersInWorkspace?: number;\n        }>\n      >,\n    getId: (item) => item.id,\n    // FULL mode (admin list default): read the ADR-028 counters off the\n    // canonical record hydrated by BatchGet and expose them as\n    // `resource.counts`. Missing counters render as 0.\n    buildEntry: (id, item) => ({\n      id,\n      resource: {\n        resourceType: \"Workspace\",\n        id,\n        ...(JSON.parse(item.resource) as Record<string, unknown>),\n        counts: {\n          usersInWorkspace: counterValue(item.usersInWorkspace),\n          adminUsersInWorkspace: counterValue(item.adminUsersInWorkspace),\n          normalUsersInWorkspace: counterValue(item.normalUsersInWorkspace),\n        },\n      },\n    }),\n    // SUMMARY mode reads only the GSI1 `summary` projection (no\n    // counters); surface zeros so the shape stays uniform.\n    buildSummaryEntry: (id, parsed) => ({\n      id,\n      resource: {\n        resourceType: \"Workspace\",\n        id,\n        ...parsed,\n        counts: {\n          usersInWorkspace: 0,\n          adminUsersInWorkspace: 0,\n          normalUsersInWorkspace: 0,\n        },\n      },\n    }),\n  });\n}\n","import {\n  buildSkPrefix,\n  type MembershipListByUserMode,\n} from \"./membership-list-by-user-operation\";\nimport { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\n\n/** Inputs accepted by {@link countMembershipsByUserOperation}. */\nexport interface CountMembershipsByUserParams {\n  readonly userId: string;\n  /** Filter mode — see {@link MembershipListByUserMode}. Defaults to `\"all\"`. */\n  readonly mode?: MembershipListByUserMode;\n  /** Required only when `mode === \"workspaceInTenant\"`. */\n  readonly tenantId?: string;\n  /** Optional table-name override; resolved via env when omitted. */\n  readonly tableName?: string;\n}\n\n/**\n * Count a user's Memberships via the ADR-018 user-partition projection, with the\n * same `SK begins_with` lane discriminator as {@link membershipListByUserOperation}.\n *\n * Pages through every matching projection row (`{ pages: \"all\" }`) projecting only\n * the `membershipId` key, and returns the row count. Backs\n * `GET /User/:id/Membership?_summary=count`.\n *\n * Note: the per-user counts (`tenantsForUser`, `workspacesForUser`) are also\n * maintained as denormalized counters on the User record per ADR-028; this\n * recompute-from-projection count is the FHIR `_summary=count` shape and the\n * authoritative source the counters are reconciled against.\n */\nexport async function countMembershipsByUserOperation(\n  params: CountMembershipsByUserParams,\n): Promise<number> {\n  const { userId, mode = \"all\", tenantId, tableName } = params;\n\n  if (mode === \"workspaceInTenant\" && !tenantId) {\n    throw new Error(\n      'countMembershipsByUserOperation: tenantId is required when mode === \"workspaceInTenant\"',\n    );\n  }\n\n  const service = getDynamoControlService(tableName);\n  const skPrefix = buildSkPrefix(mode, tenantId);\n\n  const result = await service.entities.membershipUserProjection.query\n    .record({ userId })\n    .begins({ sk: skPrefix })\n    .go({ pages: \"all\", attributes: [\"membershipId\"] });\n\n  return (result.data ?? []).length;\n}\n","import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\n\n/** Inputs accepted by {@link membershipListByWorkspaceOperation}. */\nexport interface MembershipListByWorkspaceParams {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  /** ElectroDB cursor from a prior page. Forwarded to `.go({ cursor })`. */\n  readonly cursor?: string | null;\n  /** Per-page item limit forwarded to `.go({ limit })`. */\n  readonly limit?: number;\n  /** Sort order forwarded to `.go({ order })`. Defaults to ElectroDB's `\"asc\"`. */\n  readonly order?: \"asc\" | \"desc\";\n  /** Optional table-name override; resolved via env when omitted. */\n  readonly tableName?: string;\n}\n\n/** One projection-row payload as returned to a consumer. */\nexport interface MembershipWorkspaceProjectionEntry {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  readonly sk: string;\n  readonly userId: string;\n  readonly membershipId: string;\n  readonly summary: string;\n  readonly vid: string;\n  readonly lastUpdated: string;\n  readonly denormalizedUserName?: string;\n}\n\n/** Page returned by {@link membershipListByWorkspaceOperation}. */\nexport interface MembershipListByWorkspaceResult {\n  readonly items: Array<MembershipWorkspaceProjectionEntry>;\n  /** ElectroDB cursor for the next page, or `null` when exhausted. */\n  readonly cursor: string | null;\n}\n\n/**\n * List Memberships for a workspace via the ADR-018 workspace-partition\n * projection (no GSI hop).\n *\n * Reads `MembershipWorkspaceProjectionEntity` rows under\n * `PK = TID#<tenantId>#WORKSPACE#ID#<workspaceId>` with\n * `SK begins_with 'MEMBERSHIP#'`. The projection's SK shape\n * (`MEMBERSHIP#<normalizedUserName>#USER#<userId>#<membershipId>`) sorts\n * members alphabetically by user name within the workspace partition, so\n * the natural Query order is exactly what the access pattern expects —\n * no client-side sort.\n *\n * Returns the projection rows verbatim (`summary`, `vid`, `lastUpdated`\n * plus the projection-discriminating fields) — full canonical-resource\n * hydration is opt-in for callers via\n * `MembershipEntity.get({ tenantId, id: membershipId })`. Pagination\n * mirrors ElectroDB's native `.go({ cursor })` shape; the returned\n * `cursor` is opaque to callers.\n *\n * @see ADR-018 § Access Pattern Coverage (pattern #2)\n * @see .state/adr-018-implementation-guide.md § 1 (SK grammar)\n */\nexport async function membershipListByWorkspaceOperation(\n  params: MembershipListByWorkspaceParams,\n): Promise<MembershipListByWorkspaceResult> {\n  const {\n    tenantId,\n    workspaceId,\n    cursor = null,\n    limit,\n    order,\n    tableName,\n  } = params;\n\n  const service = getDynamoControlService(tableName);\n\n  const goOptions: {\n    cursor?: string | null;\n    limit?: number;\n    order?: \"asc\" | \"desc\";\n  } = {\n    cursor,\n  };\n  if (limit !== undefined) {\n    goOptions.limit = limit;\n  }\n  if (order !== undefined) {\n    goOptions.order = order;\n  }\n\n  const result = await service.entities.membershipWorkspaceProjection.query\n    .record({ tenantId, workspaceId })\n    .begins({ sk: \"MEMBERSHIP#\" })\n    .go(goOptions);\n\n  const items: Array<MembershipWorkspaceProjectionEntry> = (\n    result.data ?? []\n  ).map((row) => ({\n    tenantId: row.tenantId,\n    workspaceId: row.workspaceId,\n    sk: row.sk,\n    userId: row.userId,\n    membershipId: row.membershipId,\n    summary: row.summary,\n    vid: row.vid,\n    lastUpdated: row.lastUpdated,\n    denormalizedUserName: row.denormalizedUserName,\n  }));\n\n  return { items, cursor: result.cursor ?? null };\n}\n","import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\n\n/** Inputs accepted by {@link roleAssignmentListByWorkspaceOperation}. */\nexport interface RoleAssignmentListByWorkspaceParams {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  /**\n   * Optional role discriminator. When supplied, narrows the listing to\n   * users assigned to a single role via the discriminator-first\n   * `begins_with('ROLEASSIGNMENT#<roleId>#')` prefix — the central read\n   * pattern (#9 is \"users with role X in workspace Y\"). Omit to return\n   * every role assignment in the workspace interleaved by `<roleId>`.\n   */\n  readonly roleId?: string;\n  /** ElectroDB cursor from a prior page. Forwarded to `.go({ cursor })`. */\n  readonly cursor?: string | null;\n  /** Per-page item limit forwarded to `.go({ limit })`. */\n  readonly limit?: number;\n  /** Sort order forwarded to `.go({ order })`. Defaults to ElectroDB's `\"asc\"`. */\n  readonly order?: \"asc\" | \"desc\";\n  /** Optional table-name override; resolved via env when omitted. */\n  readonly tableName?: string;\n}\n\n/** One projection-row payload as returned to a consumer. */\nexport interface RoleAssignmentWorkspaceProjectionEntry {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  readonly sk: string;\n  readonly userId: string;\n  readonly roleId: string;\n  readonly roleAssignmentId: string;\n  readonly summary: string;\n  readonly vid: string;\n  readonly lastUpdated: string;\n  readonly denormalizedUserName?: string;\n  readonly denormalizedRoleName?: string;\n}\n\n/** Page returned by {@link roleAssignmentListByWorkspaceOperation}. */\nexport interface RoleAssignmentListByWorkspaceResult {\n  readonly items: Array<RoleAssignmentWorkspaceProjectionEntry>;\n  /** ElectroDB cursor for the next page, or `null` when exhausted. */\n  readonly cursor: string | null;\n}\n\n/**\n * Compose the SK prefix for the workspace-projection list. The\n * pattern-#9 SK is **discriminator-first on the raw `<roleId>`**\n * (`ROLEASSIGNMENT#<roleId>#<normalizedUserName>#USER#<userId>#<id>`)\n * so a `begins_with('ROLEASSIGNMENT#<roleId>#')` filter returns every\n * user assigned to that role in the workspace. The trailing `#` after\n * the role id is critical — without it `ROLEASSIGNMENT#role-1` would\n * also match `ROLEASSIGNMENT#role-10`, `role-100`, etc. Omitting the\n * `roleId` arg falls back to the wider `ROLEASSIGNMENT#` prefix.\n */\nfunction buildSkPrefix(roleId: string | undefined): string {\n  if (roleId === undefined || roleId.length === 0) {\n    return \"ROLEASSIGNMENT#\";\n  }\n  return `ROLEASSIGNMENT#${roleId}#`;\n}\n\n/**\n * List RoleAssignments for a workspace via the ADR-018 workspace-\n * partition projection (no GSI hop).\n *\n * Reads `RoleAssignmentWorkspaceProjectionEntity` rows under\n * `PK = TID#<tenantId>#WORKSPACE#ID#<workspaceId>` with an\n * `SK begins_with` filter:\n *\n * | `roleId` arg | SK begins_with | Covers |\n * |---|---|---|\n * | omitted | `ROLEASSIGNMENT#` | Every role assignment in the workspace, interleaved by `<roleId>` |\n * | supplied | `ROLEASSIGNMENT#<roleId>#` | Pattern #9 — every user assigned to that role, sorted alphabetically by `<normalizedUserName>` |\n *\n * The projection's SK shape\n * (`ROLEASSIGNMENT#<roleId>#<normalizedUserName>#USER#<userId>#<id>`)\n * is discriminator-first on the raw `<roleId>` (mirroring the canonical\n * GSI1SK from pattern #8) so the natural Query order is exactly what\n * the access pattern expects — no client-side sort. Tenant-scoped\n * RoleAssignments (no `workspaceId`) skip this projection entirely;\n * they live only in the user-projection's tenant sub-lane.\n *\n * Returns the projection rows verbatim (`summary`, `vid`, `lastUpdated`\n * plus the projection-discriminating fields) — full canonical-resource\n * hydration is opt-in for callers via\n * `RoleAssignmentEntity.get({ tenantId, id: roleAssignmentId })`.\n * Pagination mirrors ElectroDB's native `.go({ cursor })` shape; the\n * returned `cursor` is opaque to callers.\n *\n * @see ADR-018 § Access Pattern Coverage (pattern #9)\n * @see .state/adr-018-implementation-guide.md § 1 (SK grammar) and § 2 (attribute set)\n */\nexport async function roleAssignmentListByWorkspaceOperation(\n  params: RoleAssignmentListByWorkspaceParams,\n): Promise<RoleAssignmentListByWorkspaceResult> {\n  const {\n    tenantId,\n    workspaceId,\n    roleId,\n    cursor = null,\n    limit,\n    order,\n    tableName,\n  } = params;\n\n  const service = getDynamoControlService(tableName);\n  const skPrefix = buildSkPrefix(roleId);\n\n  const goOptions: {\n    cursor?: string | null;\n    limit?: number;\n    order?: \"asc\" | \"desc\";\n  } = {\n    cursor,\n  };\n  if (limit !== undefined) {\n    goOptions.limit = limit;\n  }\n  if (order !== undefined) {\n    goOptions.order = order;\n  }\n\n  const result = await service.entities.roleAssignmentWorkspaceProjection.query\n    .record({ tenantId, workspaceId })\n    .begins({ sk: skPrefix })\n    .go(goOptions);\n\n  const items: Array<RoleAssignmentWorkspaceProjectionEntry> = (\n    result.data ?? []\n  ).map((row) => ({\n    tenantId: row.tenantId,\n    workspaceId: row.workspaceId,\n    sk: row.sk,\n    userId: row.userId,\n    roleId: row.roleId,\n    roleAssignmentId: row.roleAssignmentId,\n    summary: row.summary,\n    vid: row.vid,\n    lastUpdated: row.lastUpdated,\n    denormalizedUserName: row.denormalizedUserName,\n    denormalizedRoleName: row.denormalizedRoleName,\n  }));\n\n  return { items, cursor: result.cursor ?? null };\n}\n"],"mappings":";;;;;;;;;;;;;AASA,IAAM,KAAK;AA8BX,SAAS,aAAa,OAAwB;AAC5C,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE;AAOA,eAAsB,qBACpB,QAC4B;AAC5B,QAAM,EAAE,WAAW,OAAO,OAAO,IAAI;AACrC,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,eAAe,MAAM,QAAQ;AAAA,IACjC,MAAM;AAAA,MAAK,EAAE,QAAQ,YAAY;AAAA,MAAG,CAAC,GAAG,UACtC,QAAQ,SAAS,OAAO,MAAM,KAAK,EAAE,WAAW,OAAO,KAAK,EAAE,CAAC,EAAE,GAAG;AAAA,IACtE;AAAA,EACF;AAEA,SAAO,iBAQL,MAAM,cAAc;AAAA,IACpB,SAAS,CAAC,eACR;AAAA,MACE,QAAQ,SAAS;AAAA,MACjB,WAAW,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,IAAI,GAAG,EAAE;AAAA,IACnD;AAAA,IAQF,OAAO,CAAC,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA,IAItB,YAAY,CAAC,IAAI,UAAU;AAAA,MACzB;AAAA,MACA,UAAU;AAAA,QACR,cAAc;AAAA,QACd;AAAA,QACA,GAAI,KAAK,MAAM,KAAK,QAAQ;AAAA,QAC5B,QAAQ;AAAA,UACN,eAAe,aAAa,KAAK,aAAa;AAAA,UAC9C,oBAAoB,aAAa,KAAK,kBAAkB;AAAA,QAC1D;AAAA,MACF;AAAA,IACF;AAAA;AAAA;AAAA,IAGA,mBAAmB,CAAC,IAAI,YAAY;AAAA,MAClC;AAAA,MACA,UAAU;AAAA,QACR,cAAc;AAAA,QACd;AAAA,QACA,GAAG;AAAA,QACH,QAAQ,EAAE,eAAe,GAAG,oBAAoB,EAAE;AAAA,MACpD;AAAA,IACF;AAAA,EACF,CAAC;AACH;;;ACpGA,IAAMA,MAAK;AA8BX,SAASC,cAAa,OAAwB;AAC5C,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE;AAMA,eAAsB,wBACpB,QAC+B;AAC/B,QAAM,EAAE,SAAS,WAAW,OAAO,OAAO,IAAI;AAC9C,QAAM,EAAE,SAAS,IAAI;AACrB,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,eAAe,MAAM,QAAQ;AAAA,IACjC,MAAM;AAAA,MAAK,EAAE,QAAQ,YAAY;AAAA,MAAG,CAAC,GAAG,UACtC,QAAQ,SAAS,UAAU,MACxB,KAAK,EAAE,UAAU,WAAW,OAAO,KAAK,EAAE,CAAC,EAC3C,GAAG;AAAA,IACR;AAAA,EACF;AAEA,SAAO,iBASL,MAAM,cAAc;AAAA,IACpB,SAAS,CAAC,eACR;AAAA,MACE,QAAQ,SAAS;AAAA,MACjB,WAAW,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,IAAID,IAAG,EAAE;AAAA,IACnD;AAAA,IASF,OAAO,CAAC,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA,IAItB,YAAY,CAAC,IAAI,UAAU;AAAA,MACzB;AAAA,MACA,UAAU;AAAA,QACR,cAAc;AAAA,QACd;AAAA,QACA,GAAI,KAAK,MAAM,KAAK,QAAQ;AAAA,QAC5B,QAAQ;AAAA,UACN,kBAAkBC,cAAa,KAAK,gBAAgB;AAAA,UACpD,uBAAuBA,cAAa,KAAK,qBAAqB;AAAA,UAC9D,wBAAwBA,cAAa,KAAK,sBAAsB;AAAA,QAClE;AAAA,MACF;AAAA,IACF;AAAA;AAAA;AAAA,IAGA,mBAAmB,CAAC,IAAI,YAAY;AAAA,MAClC;AAAA,MACA,UAAU;AAAA,QACR,cAAc;AAAA,QACd;AAAA,QACA,GAAG;AAAA,QACH,QAAQ;AAAA,UACN,kBAAkB;AAAA,UAClB,uBAAuB;AAAA,UACvB,wBAAwB;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACH;;;ACxFA,eAAsB,gCACpB,QACiB;AACjB,QAAM,EAAE,QAAQ,OAAO,OAAO,UAAU,UAAU,IAAI;AAEtD,MAAI,SAAS,uBAAuB,CAAC,UAAU;AAC7C,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,wBAAwB,SAAS;AACjD,QAAM,WAAW,cAAc,MAAM,QAAQ;AAE7C,QAAM,SAAS,MAAM,QAAQ,SAAS,yBAAyB,MAC5D,OAAO,EAAE,OAAO,CAAC,EACjB,OAAO,EAAE,IAAI,SAAS,CAAC,EACvB,GAAG,EAAE,OAAO,OAAO,YAAY,CAAC,cAAc,EAAE,CAAC;AAEpD,UAAQ,OAAO,QAAQ,CAAC,GAAG;AAC7B;;;ACQA,eAAsB,mCACpB,QAC0C;AAC1C,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,YAIF;AAAA,IACF;AAAA,EACF;AACA,MAAI,UAAU,QAAW;AACvB,cAAU,QAAQ;AAAA,EACpB;AACA,MAAI,UAAU,QAAW;AACvB,cAAU,QAAQ;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM,QAAQ,SAAS,8BAA8B,MACjE,OAAO,EAAE,UAAU,YAAY,CAAC,EAChC,OAAO,EAAE,IAAI,cAAc,CAAC,EAC5B,GAAG,SAAS;AAEf,QAAM,SACJ,OAAO,QAAQ,CAAC,GAChB,IAAI,CAAC,SAAS;AAAA,IACd,UAAU,IAAI;AAAA,IACd,aAAa,IAAI;AAAA,IACjB,IAAI,IAAI;AAAA,IACR,QAAQ,IAAI;AAAA,IACZ,cAAc,IAAI;AAAA,IAClB,SAAS,IAAI;AAAA,IACb,KAAK,IAAI;AAAA,IACT,aAAa,IAAI;AAAA,IACjB,sBAAsB,IAAI;AAAA,EAC5B,EAAE;AAEF,SAAO,EAAE,OAAO,QAAQ,OAAO,UAAU,KAAK;AAChD;;;AClDA,SAASC,eAAc,QAAoC;AACzD,MAAI,WAAW,UAAa,OAAO,WAAW,GAAG;AAC/C,WAAO;AAAA,EACT;AACA,SAAO,kBAAkB,MAAM;AACjC;AAiCA,eAAsB,uCACpB,QAC8C;AAC9C,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,UAAU,wBAAwB,SAAS;AACjD,QAAM,WAAWA,eAAc,MAAM;AAErC,QAAM,YAIF;AAAA,IACF;AAAA,EACF;AACA,MAAI,UAAU,QAAW;AACvB,cAAU,QAAQ;AAAA,EACpB;AACA,MAAI,UAAU,QAAW;AACvB,cAAU,QAAQ;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM,QAAQ,SAAS,kCAAkC,MACrE,OAAO,EAAE,UAAU,YAAY,CAAC,EAChC,OAAO,EAAE,IAAI,SAAS,CAAC,EACvB,GAAG,SAAS;AAEf,QAAM,SACJ,OAAO,QAAQ,CAAC,GAChB,IAAI,CAAC,SAAS;AAAA,IACd,UAAU,IAAI;AAAA,IACd,aAAa,IAAI;AAAA,IACjB,IAAI,IAAI;AAAA,IACR,QAAQ,IAAI;AAAA,IACZ,QAAQ,IAAI;AAAA,IACZ,kBAAkB,IAAI;AAAA,IACtB,SAAS,IAAI;AAAA,IACb,KAAK,IAAI;AAAA,IACT,aAAa,IAAI;AAAA,IACjB,sBAAsB,IAAI;AAAA,IAC1B,sBAAsB,IAAI;AAAA,EAC5B,EAAE;AAEF,SAAO,EAAE,OAAO,QAAQ,OAAO,UAAU,KAAK;AAChD;","names":["SK","counterValue","buildSkPrefix"]}

package/lib/chunk-RQKJNMX5.mjs

@@ -0,0 +1,89 @@
+import {
+  getDynamoControlService
+} from "./chunk-EUIP2U5F.mjs";
+
+// src/data/operations/control/counters/counter-apply-operation.ts
+var COUNTER_TARGET = {
+  Tenant: "Tenant",
+  Workspace: "Workspace",
+  User: "User"
+};
+async function applyCounterDeltaOperation(params) {
+  const { mutation, tableName } = params;
+  const service = getDynamoControlService(tableName);
+  const patch = buildPatch(service, mutation);
+  try {
+    if (mutation.delta > 0) {
+      await patch.add({ [mutation.attribute]: mutation.delta }).go();
+      return true;
+    }
+    await patch.add({ [mutation.attribute]: mutation.delta }).where((attr, { gt }) => gt(attr[mutation.attribute], 0)).go();
+    return true;
+  } catch (err) {
+    if (isConditionalCheckFailure(err)) {
+      return false;
+    }
+    throw err;
+  }
+}
+function buildPatch(service, mutation) {
+  switch (mutation.target) {
+    case COUNTER_TARGET.Tenant:
+      return service.entities.tenant.patch({
+        tenantId: mutation.tenantId,
+        sk: "CURRENT"
+      });
+    case COUNTER_TARGET.Workspace:
+      return service.entities.workspace.patch({
+        tenantId: mutation.tenantId,
+        id: mutation.workspaceId,
+        sk: "CURRENT"
+      });
+    case COUNTER_TARGET.User:
+      return service.entities.user.patch({
+        id: mutation.userId,
+        sk: "CURRENT"
+      });
+  }
+}
+function isConditionalCheckFailure(err) {
+  if (typeof err !== "object" || err === null) {
+    return false;
+  }
+  const e = err;
+  if (e.name === "ConditionalCheckFailedException" || e.code === "ConditionalCheckFailedException" || e.cause?.name === "ConditionalCheckFailedException") {
+    return true;
+  }
+  return typeof e.message === "string" ? e.message.includes("ConditionalCheckFailed") : false;
+}
+
+// src/data/operations/control/counters/role-admin-classification.ts
+function isAdminRoleAssignment(input) {
+  if (codeIsAdminTier(input.roleLevel)) {
+    return true;
+  }
+  if (idMatchesAdmin(input.roleId)) {
+    return true;
+  }
+  return false;
+}
+function codeIsAdminTier(roleLevel) {
+  if (typeof roleLevel !== "string" || roleLevel.length === 0) {
+    return false;
+  }
+  const lower = roleLevel.toLowerCase();
+  return lower === "admin" || lower.endsWith("admin");
+}
+function idMatchesAdmin(roleId) {
+  if (typeof roleId !== "string" || roleId.length === 0) {
+    return false;
+  }
+  return roleId.toLowerCase().includes("admin");
+}
+
+export {
+  COUNTER_TARGET,
+  applyCounterDeltaOperation,
+  isAdminRoleAssignment
+};
+//# sourceMappingURL=chunk-RQKJNMX5.mjs.map

package/lib/chunk-RQKJNMX5.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/data/operations/control/counters/counter-apply-operation.ts","../src/data/operations/control/counters/role-admin-classification.ts"],"sourcesContent":["import {\n  getDynamoControlService,\n  type DynamoControlServiceType,\n} from \"../../../dynamo/dynamo-control-service\";\n\n/**\n * ADR-028 atomic counter mutation against a canonical control-plane\n * record. Each call applies one concurrency-safe DynamoDB `ADD` delta\n * (`+1` on a relationship/lifecycle create, `-1` on delete) to a single\n * named counter attribute on the canonical Tenant / Workspace / User row.\n *\n * The mutation goes through ElectroDB's `patch(key).add({ counter })`,\n * which compiles to a DynamoDB `ADD` update expression — atomic, no\n * read-modify-write. `patch` also stamps an `attribute_exists` guard on\n * the partition key, so a counter is never written onto a phantom /\n * deleted canonical record. Using ElectroDB (rather than a raw\n * `UpdateItemCommand`) keeps the composite-key casing in lockstep with\n * the entity definitions.\n *\n * Floor guard contract (ADR-028 § Floor guard): a `-1` against an\n * absent / `0` counter is clamped to a no-op via a `.where(counter > 0)`\n * condition — when the condition fails ElectroDB throws and the\n * operation swallows it, returning `false`. The guard is a safety net,\n * not the source of truth: ADR-028's reconciliation job recomputes the\n * real value from canonical data and owns correctness.\n *\n * @see sites/www-docs/content/packages/@openhi/constructs/data/operations/control/counters/counter-apply-operation.md\n */\n\n/** Counter attribute names per ADR-028, grouped by the canonical record they live on. */\nexport const TENANT_COUNTERS = [\"usersInTenant\", \"workspacesInTenant\"] as const;\nexport const WORKSPACE_COUNTERS = [\n  \"usersInWorkspace\",\n  \"adminUsersInWorkspace\",\n  \"normalUsersInWorkspace\",\n] as const;\nexport const USER_COUNTERS = [\"tenantsForUser\", \"workspacesForUser\"] as const;\n\nexport type TenantCounter = (typeof TENANT_COUNTERS)[number];\nexport type WorkspaceCounter = (typeof WORKSPACE_COUNTERS)[number];\nexport type UserCounter = (typeof USER_COUNTERS)[number];\n\n/** The `+1` (create) / `-1` (delete) delta direction. */\nexport type CounterDelta = 1 | -1;\n\n/** Which canonical entity the counter lives on. */\nexport const COUNTER_TARGET = {\n  Tenant: \"Tenant\",\n  Workspace: \"Workspace\",\n  User: \"User\",\n} as const;\nexport type CounterTarget =\n  (typeof COUNTER_TARGET)[keyof typeof COUNTER_TARGET];\n\n/**\n * A resolved counter mutation: which canonical record (target + the\n * ElectroDB composite-key fields that identify it), the attribute, and\n * the delta. The router emits these; the operation applies them.\n */\nexport type CounterMutation =\n  | {\n      readonly target: typeof COUNTER_TARGET.Tenant;\n      readonly tenantId: string;\n      readonly attribute: TenantCounter;\n      readonly delta: CounterDelta;\n    }\n  | {\n      readonly target: typeof COUNTER_TARGET.Workspace;\n      readonly tenantId: string;\n      readonly workspaceId: string;\n      readonly attribute: WorkspaceCounter;\n      readonly delta: CounterDelta;\n    }\n  | {\n      readonly target: typeof COUNTER_TARGET.User;\n      readonly userId: string;\n      readonly attribute: UserCounter;\n      readonly delta: CounterDelta;\n    };\n\nexport interface ApplyCounterDeltaParams {\n  readonly mutation: CounterMutation;\n  /** Table override (tests); defaults to `DYNAMO_TABLE_NAME`. */\n  readonly tableName?: string;\n}\n\n/** Minimal shape of the ElectroDB patch builder this operation drives. */\ninterface PatchBuilder {\n  add(attrs: Record<string, number>): {\n    where(\n      cb: (\n        attr: Record<string, unknown>,\n        op: { gt: (a: unknown, b: number) => string },\n      ) => string,\n    ): { go(): Promise<unknown> };\n    go(): Promise<unknown>;\n  };\n}\n\n/**\n * Apply one atomic counter delta. Increments are unconditional `ADD`s\n * (guarded only by `patch`'s implicit `attribute_exists` on the key);\n * decrements carry the floor guard so a `-1` against an absent / `0`\n * counter is a no-op. Returns `true` when the delta landed, `false`\n * when the floor guard clamped a decrement or the canonical record was\n * missing.\n */\nexport async function applyCounterDeltaOperation(\n  params: ApplyCounterDeltaParams,\n): Promise<boolean> {\n  const { mutation, tableName } = params;\n  const service = getDynamoControlService(tableName);\n\n  const patch = buildPatch(service, mutation);\n\n  try {\n    if (mutation.delta > 0) {\n      // Unconditional atomic ADD. `patch` adds `attribute_exists(PK)`,\n      // so a delete-before-create race is clamped rather than\n      // resurrecting the record.\n      await patch.add({ [mutation.attribute]: mutation.delta }).go();\n      return true;\n    }\n\n    // Floor-guarded decrement: apply `-1` only when the counter exists\n    // and is strictly positive.\n    await patch\n      .add({ [mutation.attribute]: mutation.delta })\n      .where((attr, { gt }) => gt(attr[mutation.attribute], 0))\n      .go();\n    return true;\n  } catch (err) {\n    if (isConditionalCheckFailure(err)) {\n      return false;\n    }\n    throw err;\n  }\n}\n\n/** Select the entity + composite key for the mutation's target. */\nfunction buildPatch(\n  service: DynamoControlServiceType,\n  mutation: CounterMutation,\n): PatchBuilder {\n  switch (mutation.target) {\n    case COUNTER_TARGET.Tenant:\n      return service.entities.tenant.patch({\n        tenantId: mutation.tenantId,\n        sk: \"CURRENT\",\n      }) as unknown as PatchBuilder;\n    case COUNTER_TARGET.Workspace:\n      return service.entities.workspace.patch({\n        tenantId: mutation.tenantId,\n        id: mutation.workspaceId,\n        sk: \"CURRENT\",\n      }) as unknown as PatchBuilder;\n    case COUNTER_TARGET.User:\n      return service.entities.user.patch({\n        id: mutation.userId,\n        sk: \"CURRENT\",\n      }) as unknown as PatchBuilder;\n  }\n}\n\n/**\n * ElectroDB wraps a failed conditional check in its own error. Detect it\n * structurally so the floor guard / existence guard resolves to a\n * clamped no-op rather than propagating.\n */\nfunction isConditionalCheckFailure(err: unknown): boolean {\n  if (typeof err !== \"object\" || err === null) {\n    return false;\n  }\n  const e = err as {\n    name?: string;\n    code?: string;\n    message?: string;\n    cause?: { name?: string };\n  };\n  if (\n    e.name === \"ConditionalCheckFailedException\" ||\n    e.code === \"ConditionalCheckFailedException\" ||\n    e.cause?.name === \"ConditionalCheckFailedException\"\n  ) {\n    return true;\n  }\n  return typeof e.message === \"string\"\n    ? e.message.includes(\"ConditionalCheckFailed\")\n    : false;\n}\n","/**\n * ADR-028 admin-vs-normal classification for the workspace user breakdown.\n *\n * The counter-maintenance consumer counts every workspace-scoped\n * RoleAssignment into one of two buckets — `adminUsersInWorkspace` or\n * `normalUsersInWorkspace` — based on whether the assignment's role is\n * an admin-tier role. This module is the single documented predicate\n * that decision flows through so the rule lives in exactly one place.\n *\n * The signals come straight off the `control-plane.role-assignment-*`\n * event payload (no extra Role read): the ADR-019 organization-role\n * code carried as `roleLevel` (extracted from `PractitionerRole.code`\n * at publish time) and the `roleId` reference slug.\n *\n * Classification rule (per the #1318 brief against the ADR-019\n * vocabulary): an assignment is **admin** when either\n *\n * - its `roleLevel` code names an admin tier — it equals or ends with\n *   `admin` (catches the data-plane organization role `billing-admin`\n *   and the platform roles `tenant-admin` / `system-admin` when those\n *   surface on the code), or\n * - its `roleId` matches `*admin*` (a defensive fallback for assignments\n *   whose role code did not ride the event but whose stable role id\n *   encodes the tier, e.g. `role-tenant-admin`).\n *\n * Everything else (including a missing roleLevel and roleId) classifies\n * as **normal**. Misclassification is self-correcting: ADR-028's\n * reconciliation job recomputes both buckets from canonical data and is\n * the authority on the true value.\n */\n\n/**\n * Returns `true` when a workspace-scoped RoleAssignment should count\n * toward `adminUsersInWorkspace`, `false` when it counts toward\n * `normalUsersInWorkspace`. See the module doc for the rule.\n */\nexport function isAdminRoleAssignment(input: {\n  readonly roleLevel?: string;\n  readonly roleId?: string;\n}): boolean {\n  if (codeIsAdminTier(input.roleLevel)) {\n    return true;\n  }\n  if (idMatchesAdmin(input.roleId)) {\n    return true;\n  }\n  return false;\n}\n\n/**\n * An ADR-019 role code is admin-tier when it is exactly `admin` or ends\n * with the `-admin` / `admin` suffix (case-insensitive). Matches\n * `billing-admin`, `tenant-admin`, `system-admin`; rejects `biller`,\n * `scribe`, `practitioner`, etc.\n */\nfunction codeIsAdminTier(roleLevel: string | undefined): boolean {\n  if (typeof roleLevel !== \"string\" || roleLevel.length === 0) {\n    return false;\n  }\n  const lower = roleLevel.toLowerCase();\n  return lower === \"admin\" || lower.endsWith(\"admin\");\n}\n\n/**\n * Fallback signal — the stable role id slug encodes the tier even when\n * the role code did not ride the event. Matches any id containing the\n * substring `admin` (case-insensitive), e.g. `role-tenant-admin`.\n */\nfunction idMatchesAdmin(roleId: string | undefined): boolean {\n  if (typeof roleId !== \"string\" || roleId.length === 0) {\n    return false;\n  }\n  return roleId.toLowerCase().includes(\"admin\");\n}\n"],"mappings":";;;;;AA8CO,IAAM,iBAAiB;AAAA,EAC5B,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,MAAM;AACR;AAyDA,eAAsB,2BACpB,QACkB;AAClB,QAAM,EAAE,UAAU,UAAU,IAAI;AAChC,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,QAAQ,WAAW,SAAS,QAAQ;AAE1C,MAAI;AACF,QAAI,SAAS,QAAQ,GAAG;AAItB,YAAM,MAAM,IAAI,EAAE,CAAC,SAAS,SAAS,GAAG,SAAS,MAAM,CAAC,EAAE,GAAG;AAC7D,aAAO;AAAA,IACT;AAIA,UAAM,MACH,IAAI,EAAE,CAAC,SAAS,SAAS,GAAG,SAAS,MAAM,CAAC,EAC5C,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,GAAG,KAAK,SAAS,SAAS,GAAG,CAAC,CAAC,EACvD,GAAG;AACN,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,0BAA0B,GAAG,GAAG;AAClC,aAAO;AAAA,IACT;AACA,UAAM;AAAA,EACR;AACF;AAGA,SAAS,WACP,SACA,UACc;AACd,UAAQ,SAAS,QAAQ;AAAA,IACvB,KAAK,eAAe;AAClB,aAAO,QAAQ,SAAS,OAAO,MAAM;AAAA,QACnC,UAAU,SAAS;AAAA,QACnB,IAAI;AAAA,MACN,CAAC;AAAA,IACH,KAAK,eAAe;AAClB,aAAO,QAAQ,SAAS,UAAU,MAAM;AAAA,QACtC,UAAU,SAAS;AAAA,QACnB,IAAI,SAAS;AAAA,QACb,IAAI;AAAA,MACN,CAAC;AAAA,IACH,KAAK,eAAe;AAClB,aAAO,QAAQ,SAAS,KAAK,MAAM;AAAA,QACjC,IAAI,SAAS;AAAA,QACb,IAAI;AAAA,MACN,CAAC;AAAA,EACL;AACF;AAOA,SAAS,0BAA0B,KAAuB;AACxD,MAAI,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAC3C,WAAO;AAAA,EACT;AACA,QAAM,IAAI;AAMV,MACE,EAAE,SAAS,qCACX,EAAE,SAAS,qCACX,EAAE,OAAO,SAAS,mCAClB;AACA,WAAO;AAAA,EACT;AACA,SAAO,OAAO,EAAE,YAAY,WACxB,EAAE,QAAQ,SAAS,wBAAwB,IAC3C;AACN;;;ACzJO,SAAS,sBAAsB,OAG1B;AACV,MAAI,gBAAgB,MAAM,SAAS,GAAG;AACpC,WAAO;AAAA,EACT;AACA,MAAI,eAAe,MAAM,MAAM,GAAG;AAChC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAQA,SAAS,gBAAgB,WAAwC;AAC/D,MAAI,OAAO,cAAc,YAAY,UAAU,WAAW,GAAG;AAC3D,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,UAAU,YAAY;AACpC,SAAO,UAAU,WAAW,MAAM,SAAS,OAAO;AACpD;AAOA,SAAS,eAAe,QAAqC;AAC3D,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,GAAG;AACrD,WAAO;AAAA,EACT;AACA,SAAO,OAAO,YAAY,EAAE,SAAS,OAAO;AAC9C;","names":[]}

package/lib/{chunk-ZWSGM6PZ.mjs → chunk-SD7J3N3C.mjs}

@@ -1,6 +1,6 @@
 import {
   getDynamoControlService
-} from "./chunk-VZCPGQXA.mjs";
+} from "./chunk-EUIP2U5F.mjs";
 
 // src/data/operations/control/role/role-create-operation.ts
 import { extractSummary } from "@openhi/types";
@@ -30,4 +30,4 @@ async function createRoleOperation(params) {
 export {
   createRoleOperation
 };
-//# sourceMappingURL=chunk-ZWSGM6PZ.mjs.map
+//# sourceMappingURL=chunk-SD7J3N3C.mjs.map

package/lib/{chunk-7RZHFI77.mjs → chunk-VESULYQQ.mjs}

@@ -1,6 +1,6 @@
 import {
   require_lib
-} from "./chunk-ZM4GDHHC.mjs";
+} from "./chunk-KMEWULMX.mjs";
 import {
   __toESM
 } from "./chunk-LZOMFHX3.mjs";
@@ -19,4 +19,4 @@ export {
   OWNING_DELETE_OPS_EVENT_BUS_ENV_VAR,
   import_workflows
 };
-//# sourceMappingURL=chunk-7RZHFI77.mjs.map
+//# sourceMappingURL=chunk-VESULYQQ.mjs.map

package/lib/{chunk-AOSEKL7U.mjs → chunk-WOTU36P3.mjs}

@@ -1,16 +1,14 @@
 import {
-  batchGetWithRetry,
-  dispatchListMode
-} from "./chunk-MVQWAIMC.mjs";
+  membershipListByUserOperation
+} from "./chunk-DWSWCUZR.mjs";
 import {
   ForbiddenError,
   NotFoundError,
   ValidationError
 } from "./chunk-FYHBHHWK.mjs";
 import {
-  SHARD_COUNT,
   getDynamoControlService
-} from "./chunk-VZCPGQXA.mjs";
+} from "./chunk-EUIP2U5F.mjs";
 
 // src/data/operations/control/user/user-find-by-sub-operation.ts
 async function findUserBySubOperation(params) {
@@ -95,102 +93,9 @@ async function getUserByIdOperation(params) {
   };
 }
 
-// src/data/operations/control/user/user-list-operation.ts
-var SK = "CURRENT";
-async function listUsersOperation(params) {
-  const { tableName, mode = "full" } = params;
-  const service = getDynamoControlService(tableName);
-  const shardResults = await Promise.all(
-    Array.from(
-      { length: SHARD_COUNT },
-      (_, shard) => service.entities.user.query.gsi1({ gsi1Shard: String(shard) }).go()
-    )
-  );
-  return dispatchListMode(mode, shardResults, {
-    hydrate: (orderedIds) => batchGetWithRetry(
-      service.entities.user,
-      orderedIds.map((id) => ({ id, sk: SK }))
-    ),
-    getId: (item) => item.id,
-    buildEntry: (id, item) => ({
-      id,
-      resource: {
-        resourceType: "User",
-        id,
-        ...JSON.parse(item.resource)
-      }
-    }),
-    buildSummaryEntry: (id, parsed) => ({
-      id,
-      resource: { resourceType: "User", id, ...parsed }
-    })
-  });
-}
-
 // src/data/operations/control/user/user-switch-tenant-workspace-operation.ts
 import { extractSummary as extractSummary2 } from "@openhi/types";
-
-// src/data/operations/control/membership/membership-list-by-user-operation.ts
-function buildSkPrefix(mode, tenantId) {
-  switch (mode) {
-    case "tenant":
-      return "MEMBERSHIP#TENANT#";
-    case "workspace":
-      return "MEMBERSHIP#WORKSPACE#";
-    case "workspaceInTenant":
-      return `MEMBERSHIP#WORKSPACE#TID#${tenantId}#`;
-    case "all":
-    default:
-      return "MEMBERSHIP#";
-  }
-}
-async function membershipListByUserOperation(params) {
-  const {
-    userId,
-    mode = "all",
-    tenantId,
-    cursor = null,
-    limit,
-    order,
-    tableName
-  } = params;
-  if (mode === "workspaceInTenant" && !tenantId) {
-    throw new Error(
-      'membershipListByUserOperation: tenantId is required when mode === "workspaceInTenant"'
-    );
-  }
-  const service = getDynamoControlService(tableName);
-  const skPrefix = buildSkPrefix(mode, tenantId);
-  const goOptions = {
-    cursor
-  };
-  if (limit !== void 0) {
-    goOptions.limit = limit;
-  }
-  if (order !== void 0) {
-    goOptions.order = order;
-  }
-  const result = await service.entities.membershipUserProjection.query.record({ userId }).begins({ sk: skPrefix }).go(goOptions);
-  const items = (result.data ?? []).map(
-    (row) => ({
-      userId: row.userId,
-      sk: row.sk,
-      tenantId: row.tenantId,
-      workspaceId: row.workspaceId,
-      membershipId: row.membershipId,
-      summary: row.summary,
-      vid: row.vid,
-      lastUpdated: row.lastUpdated,
-      denormalizedTenantName: row.denormalizedTenantName,
-      denormalizedUserName: row.denormalizedUserName,
-      denormalizedWorkspaceName: row.denormalizedWorkspaceName
-    })
-  );
-  return { items, cursor: result.cursor ?? null };
-}
-
-// src/data/operations/control/user/user-switch-tenant-workspace-operation.ts
-var SK2 = "CURRENT";
+var SK = "CURRENT";
 async function switchUserTenantWorkspaceOperation(params) {
   const { cognitoSub, tenantReference, workspaceReference, tableName } = params;
   const tenantId = idFromReference(tenantReference, "Tenant/");
@@ -251,7 +156,7 @@ async function switchUserTenantWorkspaceOperation(params) {
     extractSummary2(updatedResource)
   );
   const service = getDynamoControlService(tableName);
-  await service.entities.user.patch({ id: user.id, sk: SK2 }).set({
+  await service.entities.user.patch({ id: user.id, sk: SK }).set({
     resource: JSON.stringify(updatedResource),
     summary,
     vid,
@@ -303,12 +208,10 @@ export {
   createUserOperation,
   deleteUserOperation,
   getUserByIdOperation,
-  membershipListByUserOperation,
-  listUsersOperation,
   updateUserOperation,
   findUserBySubOperation,
   parseUserResource,
   idFromReference,
   switchUserTenantWorkspaceOperation
 };
-//# sourceMappingURL=chunk-AOSEKL7U.mjs.map
+//# sourceMappingURL=chunk-WOTU36P3.mjs.map

package/lib/chunk-WOTU36P3.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/data/operations/control/user/user-find-by-sub-operation.ts","../src/data/operations/control/user/user-resource-helpers.ts","../src/data/operations/fhir-reference.ts","../src/data/operations/control/user/user-create-operation.ts","../src/data/operations/control/user/user-get-by-id-operation.ts","../src/data/operations/control/user/user-switch-tenant-workspace-operation.ts","../src/data/operations/control/user/user-update-operation.ts","../src/data/operations/control/user/user-delete-operation.ts"],"sourcesContent":["import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\nimport { OpenHiContext } from \"../../../openhi-context\";\n\nexport interface FindUserBySubParams {\n  context: OpenHiContext;\n  cognitoSub: string;\n  tableName?: string;\n}\n\nexport interface FindUserBySubResult {\n  id: string;\n  cognitoSub?: string;\n  resource: string;\n  summary?: string;\n  vid: string;\n  lastUpdated?: string;\n}\n\n/**\n * Look up a User by Cognito sub via GSI2, then fetch the canonical row\n * from the base table so projection-skipped attributes (`resource`,\n * `summary`, `vid`, `lastUpdated`) are populated. Returns `undefined`\n * when no row matches the sub, or when the GSI2 hit points at a\n * canonical row that has since been hard-deleted.\n *\n * GSI2 projects only `id` (+ ElectroDB markers), so a single index\n * query is insufficient — see #1175.\n */\nexport async function findUserBySubOperation(\n  params: FindUserBySubParams,\n): Promise<FindUserBySubResult | undefined> {\n  const { cognitoSub, tableName } = params;\n  const service = getDynamoControlService(tableName);\n\n  const indexResult = await service.entities.user.query\n    .gsi2({ cognitoSub })\n    .go({ limit: 1, attributes: [\"id\"] });\n  const indexItem = indexResult.data?.[0];\n  if (!indexItem) {\n    return undefined;\n  }\n\n  const canonical = await service.entities.user\n    .get({ id: indexItem.id, sk: \"CURRENT\" })\n    .go();\n  const row = canonical.data;\n  if (!row) {\n    return undefined;\n  }\n\n  return {\n    id: row.id,\n    cognitoSub: row.cognitoSub,\n    resource: row.resource,\n    summary: row.summary,\n    vid: row.vid,\n    lastUpdated: row.lastUpdated,\n  };\n}\n","import type { User } from \"@openhi/types\";\n\n/**\n * Helpers for working with persisted OpenHI User resources. Co-located with\n * the User operations because both the Cognito triggers and the onboarding\n * workflow consume these alongside `findUserBySubOperation`.\n */\n\n// Defensive parse — JSON.parse may yield any shape, so every field is optional.\nexport type UserResource = Partial<User>;\n\n/**\n * Existing User resources are stored as JSON strings in the data store; parse\n * defensively so a malformed payload returns `undefined` rather than throwing.\n */\nexport function parseUserResource(resource: string): UserResource | undefined {\n  try {\n    return JSON.parse(resource) as UserResource;\n  } catch {\n    return undefined;\n  }\n}\n","/**\n * Pure helpers for working with FHIR Reference fields. Shared across data-plane\n * and control-plane operations and the handlers that wrap them.\n */\n\n/**\n * Extract the id portion from a FHIR-style reference such as `Patient/<id>` or\n * `Tenant/<id>`. Returns `undefined` if the reference is missing, does not\n * match the prefix, or has an empty id after the prefix.\n */\nexport function idFromReference(\n  reference: string | undefined,\n  prefix: string,\n): string | undefined {\n  if (!reference || !reference.startsWith(prefix)) {\n    return undefined;\n  }\n  const id = reference.slice(prefix.length);\n  return id.length > 0 ? id : undefined;\n}\n","import { extractSummary, type FhirResourceLike } from \"@openhi/types\";\nimport { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\nimport { OpenHiContext } from \"../../../openhi-context\";\n\nexport interface UserCreateParams {\n  context: OpenHiContext;\n  body: { id?: string; resource?: Record<string, unknown> | string };\n  tableName?: string;\n}\n\nexport interface UserCreateResult {\n  id: string;\n  resource: { resourceType: string; id: string; [key: string]: unknown };\n  meta: { lastUpdated: string; versionId: string };\n}\n\nexport async function createUserOperation(\n  params: UserCreateParams,\n): Promise<UserCreateResult> {\n  const { context, body, tableName } = params;\n  const service = getDynamoControlService(tableName);\n\n  const id = body.id ?? `user-${Date.now()}`;\n  const parsedResource =\n    typeof body.resource === \"string\"\n      ? (JSON.parse(body.resource) as Record<string, unknown>)\n      : (body.resource ?? {});\n\n  const lastUpdated = context.date ?? new Date().toISOString();\n  const vid = `1`;\n\n  const resource = { resourceType: \"User\", id, ...parsedResource };\n  const summary = JSON.stringify(extractSummary(resource as FhirResourceLike));\n\n  await service.entities.user\n    .put({\n      id,\n      resource: JSON.stringify(resource),\n      summary,\n      vid,\n      lastUpdated,\n    })\n    .go();\n\n  return {\n    id,\n    resource,\n    meta: { lastUpdated, versionId: vid },\n  };\n}\n","import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\nimport { NotFoundError } from \"../../../errors\";\nimport { OpenHiContext } from \"../../../openhi-context\";\n\nexport interface UserGetByIdParams {\n  context: OpenHiContext;\n  id: string;\n  tableName?: string;\n}\n\nexport interface UserGetByIdResult {\n  id: string;\n  resource: { resourceType: string; id: string; [key: string]: unknown };\n}\n\nexport async function getUserByIdOperation(\n  params: UserGetByIdParams,\n): Promise<UserGetByIdResult> {\n  const { id, tableName } = params;\n  const service = getDynamoControlService(tableName);\n\n  const response = await service.entities.user.get({ id, sk: \"CURRENT\" }).go();\n\n  const item = response.data;\n  if (!item) {\n    throw new NotFoundError(`User not found: ${id}`);\n  }\n\n  const parsedResource = JSON.parse(item.resource) as Record<string, unknown>;\n\n  return {\n    id,\n    resource: { resourceType: \"User\", id, ...parsedResource },\n  };\n}\n","import { extractSummary, type FhirResourceLike } from \"@openhi/types\";\nimport { findUserBySubOperation } from \"./user-find-by-sub-operation\";\nimport { parseUserResource } from \"./user-resource-helpers\";\nimport { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\nimport {\n  ForbiddenError,\n  NotFoundError,\n  ValidationError,\n} from \"../../../errors\";\nimport { idFromReference } from \"../../fhir-reference\";\nimport { membershipListByUserOperation } from \"../membership/membership-list-by-user-operation\";\n\nconst SK = \"CURRENT\";\n\nexport interface UserSwitchTenantWorkspaceParams {\n  cognitoSub: string;\n  tenantReference: string;\n  workspaceReference: string;\n  tableName?: string;\n  /** Override the clock — used by tests for deterministic `lastUpdated`. */\n  now?: () => Date;\n}\n\nexport interface UserSwitchTenantWorkspaceResult {\n  id: string;\n  resource: Record<string, unknown>;\n  meta: { lastUpdated: string; versionId: string };\n}\n\n/**\n * Update `currentTenant` and `currentWorkspace` on the User resource for the\n * caller authenticated by the given Cognito `sub`. All other fields on the\n * User are preserved.\n *\n * Membership pre-condition uses the ADR-018 adjacency-list user projection\n * (pattern #4, workspace sub-lane). A single base-table Query on\n * `PK = USER#ID#<userId>` with\n * `SK begins_with 'MEMBERSHIP#WORKSPACE#TID#<tenantId>#'`\n * (via {@link membershipListByUserOperation} with `mode: \"workspaceInTenant\"`)\n * confirms the caller has a workspace-level Membership in the requested\n * tenant + workspace pair. No GSI1 fan-out, no scan.\n *\n * Throws:\n * - `ValidationError` when either reference is missing or malformed\n * - `NotFoundError` when no User matches the Cognito subject\n * - `ForbiddenError` when the caller has no Membership in the requested\n *   `(tenantId, workspaceId)` pair on their user-partition projection\n *\n * @see https://github.com/codedrifters/openhi/issues/769\n * @see https://github.com/codedrifters/openhi/issues/1020\n * @see ADR-018 § Access Pattern Coverage (pattern #4)\n */\nexport async function switchUserTenantWorkspaceOperation(\n  params: UserSwitchTenantWorkspaceParams,\n): Promise<UserSwitchTenantWorkspaceResult> {\n  const { cognitoSub, tenantReference, workspaceReference, tableName } = params;\n\n  const tenantId = idFromReference(tenantReference, \"Tenant/\");\n  if (!tenantId) {\n    throw new ValidationError(\n      \"tenant.reference must be a 'Tenant/<id>' reference.\",\n    );\n  }\n  const workspaceId = idFromReference(workspaceReference, \"Workspace/\");\n  if (!workspaceId) {\n    throw new ValidationError(\n      \"workspace.reference must be a 'Workspace/<id>' reference.\",\n    );\n  }\n\n  const user = await findUserBySubOperation({\n    // findUserBySubOperation does not read context fields; pass a stub.\n    context: {\n      tenantId: \"\",\n      workspaceId: \"\",\n      date: \"\",\n      actorId: \"\",\n      actorName: \"\",\n      actorType: \"internal-system\",\n    },\n    cognitoSub,\n    tableName,\n  });\n  if (!user) {\n    throw new NotFoundError(\n      \"User not yet provisioned for the authenticated Cognito subject.\",\n    );\n  }\n\n  // ADR-018: single Query on the user partition, narrowed to the workspace\n  // sub-lane of the requested tenant. The lane includes `workspaceId` on\n  // every row; a row with `workspaceId === <requested>` is sufficient and\n  // necessary proof that the caller may switch to that pair.\n  const projection = await membershipListByUserOperation({\n    userId: user.id,\n    mode: \"workspaceInTenant\",\n    tenantId,\n    tableName,\n  });\n  const hasMembership = projection.items.some(\n    (row) => row.workspaceId === workspaceId,\n  );\n  if (!hasMembership) {\n    throw new ForbiddenError(\n      `User is not a member of Workspace/${workspaceId} in Tenant/${tenantId}.`,\n    );\n  }\n\n  const existingResource = parseUserResource(user.resource) ?? {};\n  const updatedResource: Record<string, unknown> = {\n    ...existingResource,\n    resourceType: \"User\",\n    id: user.id,\n    currentTenant: { reference: `Tenant/${tenantId}` },\n    currentWorkspace: { reference: `Workspace/${workspaceId}` },\n  };\n\n  const lastUpdated = (params.now ? params.now() : new Date()).toISOString();\n  const vid = `${Date.now()}`;\n  const summary = JSON.stringify(\n    extractSummary(updatedResource as FhirResourceLike),\n  );\n\n  const service = getDynamoControlService(tableName);\n  await service.entities.user\n    .patch({ id: user.id, sk: SK })\n    .set({\n      resource: JSON.stringify(updatedResource),\n      summary,\n      vid,\n      lastUpdated,\n    })\n    .go();\n\n  return {\n    id: user.id,\n    resource: updatedResource,\n    meta: { lastUpdated, versionId: vid },\n  };\n}\n","import { extractSummary, type FhirResourceLike } from \"@openhi/types\";\nimport { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\nimport { NotFoundError } from \"../../../errors\";\nimport { OpenHiContext } from \"../../../openhi-context\";\n\nexport interface UserUpdateParams {\n  context: OpenHiContext;\n  id: string;\n  body: { resource?: Record<string, unknown> | string };\n  tableName?: string;\n}\n\nexport interface UserUpdateResult {\n  id: string;\n  resource: { resourceType: string; id: string; [key: string]: unknown };\n  meta: { lastUpdated: string; versionId: string };\n}\n\nexport async function updateUserOperation(\n  params: UserUpdateParams,\n): Promise<UserUpdateResult> {\n  const { context, id, body, tableName } = params;\n  const service = getDynamoControlService(tableName);\n\n  const existing = await service.entities.user.get({ id, sk: \"CURRENT\" }).go();\n  if (!existing.data) {\n    throw new NotFoundError(`User not found: ${id}`);\n  }\n\n  const parsedResource =\n    typeof body.resource === \"string\"\n      ? (JSON.parse(body.resource) as Record<string, unknown>)\n      : (body.resource ?? {});\n\n  const lastUpdated = context.date ?? new Date().toISOString();\n  const vid = `${Date.now()}`;\n\n  const resource = { resourceType: \"User\", id, ...parsedResource };\n  const summary = JSON.stringify(extractSummary(resource as FhirResourceLike));\n\n  await service.entities.user\n    .put({\n      id,\n      resource: JSON.stringify(resource),\n      summary,\n      vid,\n      lastUpdated,\n    })\n    .go();\n\n  return {\n    id,\n    resource,\n    meta: { lastUpdated, versionId: vid },\n  };\n}\n","import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\nimport { OpenHiContext } from \"../../../openhi-context\";\n\nexport interface UserDeleteParams {\n  context: OpenHiContext;\n  id: string;\n  tableName?: string;\n}\n\nexport async function deleteUserOperation(\n  params: UserDeleteParams,\n): Promise<void> {\n  const { id, tableName } = params;\n  const service = getDynamoControlService(tableName);\n\n  await service.entities.user.delete({ id, sk: \"CURRENT\" }).go();\n}\n"],"mappings":";;;;;;;;;;;;;AA4BA,eAAsB,uBACpB,QAC0C;AAC1C,QAAM,EAAE,YAAY,UAAU,IAAI;AAClC,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,cAAc,MAAM,QAAQ,SAAS,KAAK,MAC7C,KAAK,EAAE,WAAW,CAAC,EACnB,GAAG,EAAE,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;AACtC,QAAM,YAAY,YAAY,OAAO,CAAC;AACtC,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AAEA,QAAM,YAAY,MAAM,QAAQ,SAAS,KACtC,IAAI,EAAE,IAAI,UAAU,IAAI,IAAI,UAAU,CAAC,EACvC,GAAG;AACN,QAAM,MAAM,UAAU;AACtB,MAAI,CAAC,KAAK;AACR,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR,YAAY,IAAI;AAAA,IAChB,UAAU,IAAI;AAAA,IACd,SAAS,IAAI;AAAA,IACb,KAAK,IAAI;AAAA,IACT,aAAa,IAAI;AAAA,EACnB;AACF;;;AC3CO,SAAS,kBAAkB,UAA4C;AAC5E,MAAI;AACF,WAAO,KAAK,MAAM,QAAQ;AAAA,EAC5B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACXO,SAAS,gBACd,WACA,QACoB;AACpB,MAAI,CAAC,aAAa,CAAC,UAAU,WAAW,MAAM,GAAG;AAC/C,WAAO;AAAA,EACT;AACA,QAAM,KAAK,UAAU,MAAM,OAAO,MAAM;AACxC,SAAO,GAAG,SAAS,IAAI,KAAK;AAC9B;;;ACnBA,SAAS,sBAA6C;AAgBtD,eAAsB,oBACpB,QAC2B;AAC3B,QAAM,EAAE,SAAS,MAAM,UAAU,IAAI;AACrC,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,KAAK,KAAK,MAAM,QAAQ,KAAK,IAAI,CAAC;AACxC,QAAM,iBACJ,OAAO,KAAK,aAAa,WACpB,KAAK,MAAM,KAAK,QAAQ,IACxB,KAAK,YAAY,CAAC;AAEzB,QAAM,cAAc,QAAQ,SAAQ,oBAAI,KAAK,GAAE,YAAY;AAC3D,QAAM,MAAM;AAEZ,QAAM,WAAW,EAAE,cAAc,QAAQ,IAAI,GAAG,eAAe;AAC/D,QAAM,UAAU,KAAK,UAAU,eAAe,QAA4B,CAAC;AAE3E,QAAM,QAAQ,SAAS,KACpB,IAAI;AAAA,IACH;AAAA,IACA,UAAU,KAAK,UAAU,QAAQ;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,GAAG;AAEN,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,MAAM,EAAE,aAAa,WAAW,IAAI;AAAA,EACtC;AACF;;;AClCA,eAAsB,qBACpB,QAC4B;AAC5B,QAAM,EAAE,IAAI,UAAU,IAAI;AAC1B,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,WAAW,MAAM,QAAQ,SAAS,KAAK,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC,EAAE,GAAG;AAE3E,QAAM,OAAO,SAAS;AACtB,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,cAAc,mBAAmB,EAAE,EAAE;AAAA,EACjD;AAEA,QAAM,iBAAiB,KAAK,MAAM,KAAK,QAAQ;AAE/C,SAAO;AAAA,IACL;AAAA,IACA,UAAU,EAAE,cAAc,QAAQ,IAAI,GAAG,eAAe;AAAA,EAC1D;AACF;;;AClCA,SAAS,kBAAAA,uBAA6C;AAYtD,IAAM,KAAK;AAwCX,eAAsB,mCACpB,QAC0C;AAC1C,QAAM,EAAE,YAAY,iBAAiB,oBAAoB,UAAU,IAAI;AAEvE,QAAM,WAAW,gBAAgB,iBAAiB,SAAS;AAC3D,MAAI,CAAC,UAAU;AACb,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,cAAc,gBAAgB,oBAAoB,YAAY;AACpE,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAO,MAAM,uBAAuB;AAAA;AAAA,IAExC,SAAS;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI,CAAC,MAAM;AACT,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAMA,QAAM,aAAa,MAAM,8BAA8B;AAAA,IACrD,QAAQ,KAAK;AAAA,IACb,MAAM;AAAA,IACN;AAAA,IACA;AAAA,EACF,CAAC;AACD,QAAM,gBAAgB,WAAW,MAAM;AAAA,IACrC,CAAC,QAAQ,IAAI,gBAAgB;AAAA,EAC/B;AACA,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI;AAAA,MACR,qCAAqC,WAAW,cAAc,QAAQ;AAAA,IACxE;AAAA,EACF;AAEA,QAAM,mBAAmB,kBAAkB,KAAK,QAAQ,KAAK,CAAC;AAC9D,QAAM,kBAA2C;AAAA,IAC/C,GAAG;AAAA,IACH,cAAc;AAAA,IACd,IAAI,KAAK;AAAA,IACT,eAAe,EAAE,WAAW,UAAU,QAAQ,GAAG;AAAA,IACjD,kBAAkB,EAAE,WAAW,aAAa,WAAW,GAAG;AAAA,EAC5D;AAEA,QAAM,eAAe,OAAO,MAAM,OAAO,IAAI,IAAI,oBAAI,KAAK,GAAG,YAAY;AACzE,QAAM,MAAM,GAAG,KAAK,IAAI,CAAC;AACzB,QAAM,UAAU,KAAK;AAAA,IACnBC,gBAAe,eAAmC;AAAA,EACpD;AAEA,QAAM,UAAU,wBAAwB,SAAS;AACjD,QAAM,QAAQ,SAAS,KACpB,MAAM,EAAE,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,EAC7B,IAAI;AAAA,IACH,UAAU,KAAK,UAAU,eAAe;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,GAAG;AAEN,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,UAAU;AAAA,IACV,MAAM,EAAE,aAAa,WAAW,IAAI;AAAA,EACtC;AACF;;;AC3IA,SAAS,kBAAAC,uBAA6C;AAkBtD,eAAsB,oBACpB,QAC2B;AAC3B,QAAM,EAAE,SAAS,IAAI,MAAM,UAAU,IAAI;AACzC,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,WAAW,MAAM,QAAQ,SAAS,KAAK,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC,EAAE,GAAG;AAC3E,MAAI,CAAC,SAAS,MAAM;AAClB,UAAM,IAAI,cAAc,mBAAmB,EAAE,EAAE;AAAA,EACjD;AAEA,QAAM,iBACJ,OAAO,KAAK,aAAa,WACpB,KAAK,MAAM,KAAK,QAAQ,IACxB,KAAK,YAAY,CAAC;AAEzB,QAAM,cAAc,QAAQ,SAAQ,oBAAI,KAAK,GAAE,YAAY;AAC3D,QAAM,MAAM,GAAG,KAAK,IAAI,CAAC;AAEzB,QAAM,WAAW,EAAE,cAAc,QAAQ,IAAI,GAAG,eAAe;AAC/D,QAAM,UAAU,KAAK,UAAUC,gBAAe,QAA4B,CAAC;AAE3E,QAAM,QAAQ,SAAS,KACpB,IAAI;AAAA,IACH;AAAA,IACA,UAAU,KAAK,UAAU,QAAQ;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,GAAG;AAEN,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,MAAM,EAAE,aAAa,WAAW,IAAI;AAAA,EACtC;AACF;;;AC9CA,eAAsB,oBACpB,QACe;AACf,QAAM,EAAE,IAAI,UAAU,IAAI;AAC1B,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,QAAQ,SAAS,KAAK,OAAO,EAAE,IAAI,IAAI,UAAU,CAAC,EAAE,GAAG;AAC/D;","names":["extractSummary","extractSummary","extractSummary","extractSummary"]}

package/lib/{chunk-X5E4YJGZ.mjs → chunk-YPTJJ35S.mjs}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-QJDHVMKT.mjs";
 import {
   getDynamoControlService
-} from "./chunk-VZCPGQXA.mjs";
+} from "./chunk-EUIP2U5F.mjs";
 
 // src/data/operations/control/rename-cascade/rename-cascade-rewrite-chunk-operation.ts
 var RENAME_CASCADE_MAX_TARGETS_PER_CHUNK = 50;
@@ -63,4 +63,4 @@ export {
   rewriteRenameCascadeChunkOperation,
   chunkRenameCascadeTargets
 };
-//# sourceMappingURL=chunk-X5E4YJGZ.mjs.map
+//# sourceMappingURL=chunk-YPTJJ35S.mjs.map