@openhi/constructs 0.0.159 → 0.0.161

package/lib/index.d.mts

@@ -26,10 +26,11 @@ export { C as CascadeChunkInput, a as CascadeFinalizeInput, b as CascadeFinalize
 import { StateMachine } from 'aws-cdk-lib/aws-stepfunctions';
 export { B as BRIDGED_STATUSES, a as BridgedStatus, C as CLOUDFORMATION_EVENT_SOURCE, b as CLOUDFORMATION_STACK_STATUS_CHANGE_DETAIL_TYPE, c as CONTROL_EVENT_BUS_NAME_ENV_VAR, d as CloudFormationStackStatusChangeDetail, O as OPENHI_REPO_TAG_KEY_ENV_VAR, e as OPENHI_TAG_KEY_PREFIX_ENV_VAR, P as PLATFORM_DEPLOY_BRIDGE_ACTOR_SYSTEM } from './events-COI0BuMM.mjs';
 export { R as RENAME_CASCADE_CONSUMER_NAME, a as RENAME_CASCADE_DEFAULT_CONCURRENCY, b as RENAME_CASCADE_FAILED_THRESHOLD, c as RENAME_CASCADE_OPS_EVENT_BUS_ENV_VAR, d as RENAME_CASCADE_SLOW_THRESHOLD_SECONDS, e as RenameCascadeChunkInput, f as RenameCascadeFinalizeInput, g as RenameCascadeFinalizeOutput, h as RenameCascadeListInput, i as RenameCascadeListOutput } from './events-Da_cFgtc.mjs';
-import { Patient, Practitioner, Observation, Encounter, Account } from '@openhi/types';
-export { D as DEMO_PERIOD, a as DEMO_TENANT_SPECS, b as DEMO_URN_SYSTEM, c as DEV_USERS, d as DemoDevUser, e as DemoTenantSpec, f as DemoWorkspaceSpec, O as OPENHI_RESOURCE_URN_SYSTEM, P as PLACEHOLDER_TENANT_ID, g as PLACEHOLDER_WORKSPACE_ID, S as SEED_DEMO_DATA_CONSUMER_NAME, h as demoMembershipId, i as demoRoleAssignmentId, j as demoRolesForUserInTenant, k as demoScenarioIdentifier, o as openhiResourceIdentifier } from './events-DTgo2dcW.mjs';
+import { Patient, Practitioner, Observation, Encounter, Account, Location, Organization, Coverage, Appointment, Condition, Procedure, Claim, PaymentNotice, Practitioner_Qualification } from '@openhi/types';
+import { O as OpenHiContext } from './openhi-context-CaBH8SFo.mjs';
+export { D as DEMO_PERIOD, a as DEMO_TENANT_SPECS, b as DEMO_URN_SYSTEM, c as DEV_USERS, d as DemoDevUser, e as DemoTenantSpec, f as DemoWorkspaceSpec, O as ON_SITE_DEMO_TENANT_ID, g as ON_SITE_DEMO_WORKSPACE_ID, h as OPENHI_RESOURCE_URN_SYSTEM, P as PLACEHOLDER_TENANT_ID, i as PLACEHOLDER_WORKSPACE_ID, S as SEED_DEMO_DATA_CONSUMER_NAME, j as demoMembershipId, k as demoRoleAssignmentId, l as demoRolesForUserInTenant, m as demoScenarioIdentifier, o as openhiResourceIdentifier } from './events-TG654e7L.mjs';
 export { P as PROVISION_DEFAULT_WORKSPACE_DETAIL_TYPE, a as ProvisionDefaultWorkspaceRequestedDetail, U as USER_ONBOARDING_EVENT_SOURCE, b as buildProvisionDefaultWorkspaceRequestedDetail } from './events-CVA3_eEB.mjs';
-export { ControlPlaneOwningDeleteCompleteV1, ControlPlaneOwningDeleteCompleteV1Detail, ControlPlaneOwningDeleteFailedV1, ControlPlaneOwningDeleteFailedV1Detail, ControlPlaneOwningDeleteV1, ControlPlaneOwningDeleteV1Detail, ControlPlaneRenameCompleteV1, ControlPlaneRenameCompleteV1Detail, ControlPlaneRenameFailedV1, ControlPlaneRenameFailedV1Detail, ControlPlaneRenameV1, ControlPlaneRenameV1Detail, OPENHI_DATA_SOURCE, OPENHI_OPS_SOURCE, OWNING_ENTITY_TYPE, OwningEntityType, PlatformDeploymentCompletedV1, PlatformSystemDataSeededV1, RENAMABLE_ENTITY_TYPE, RenamableEntityType } from '@openhi/workflows';
+export { ControlPlaneMembershipCreatedV1, ControlPlaneMembershipDeletedV1, ControlPlaneOwningDeleteCompleteV1, ControlPlaneOwningDeleteCompleteV1Detail, ControlPlaneOwningDeleteFailedV1, ControlPlaneOwningDeleteFailedV1Detail, ControlPlaneOwningDeleteV1, ControlPlaneOwningDeleteV1Detail, ControlPlaneRenameCompleteV1, ControlPlaneRenameCompleteV1Detail, ControlPlaneRenameFailedV1, ControlPlaneRenameFailedV1Detail, ControlPlaneRenameV1, ControlPlaneRenameV1Detail, ControlPlaneRoleAssignmentCreatedV1, ControlPlaneRoleAssignmentDeletedV1, ControlPlaneWorkspaceCreatedV1, ControlPlaneWorkspaceDeletedV1, OPENHI_DATA_SOURCE, OPENHI_OPS_SOURCE, OWNING_ENTITY_TYPE, OwningEntityType, PlatformDeploymentCompletedV1, PlatformSystemDataSeededV1, RENAMABLE_ENTITY_TYPE, RenamableEntityType } from '@openhi/workflows';
 import '@aws-sdk/client-dynamodb';
 import 'aws-lambda';
 
@@ -2076,6 +2077,113 @@ declare class OpenHiRestApiService extends OpenHiService {
     protected resolveRuntimeConfigEnvVars(): Record<string, string>;
 }
 
+/**
+ * @see sites/www-docs/content/packages/@openhi/constructs/workflows/control-plane/counter-maintenance/events.md
+ *
+ * Wiring constants for the ADR-028 counter-maintenance consumer: the
+ * dedup consumer name and the set of `openhi.control` detail-types the
+ * EventBridge rule routes to the Lambda.
+ */
+/**
+ * Stable logical name this workflow registers with the shared
+ * `WorkflowDedupTable` (TR-015). Used in both the construct grant
+ * (`WorkflowDedupTable.grantConsumerFromLookup(... , COUNTER_MAINTENANCE_CONSUMER_NAME)`)
+ * and the handler's runtime `recordIfAbsent` call — keep them aligned by
+ * importing this constant in both places.
+ */
+declare const COUNTER_MAINTENANCE_CONSUMER_NAME = "counter-maintenance";
+/**
+ * The six `openhi.control` detail-types the counter-maintenance consumer
+ * subscribes to. The EventBridge rule matches `source: ["openhi.control"]`
+ * and this exact detail-type list; the handler dispatches on the
+ * `detail-type` to choose the counter routing.
+ */
+declare const COUNTER_MAINTENANCE_DETAIL_TYPES: readonly [string, string, string, string, string, string];
+
+interface CounterMaintenanceLambdaProps {
+    /**
+     * Control event bus carrying the `openhi.control` membership /
+     * role-assignment / workspace lifecycle events. The Rule mounts here.
+     */
+    readonly controlEventBus: IEventBus;
+    /**
+     * Data-store table the consumer applies atomic counter ADDs against.
+     * Wired via `DYNAMO_TABLE_NAME`; granted `dynamodb:UpdateItem` (the
+     * counter mutation is a conditional `ADD` — no reads, no other writes).
+     */
+    readonly dataStoreTable: ITable;
+}
+/** Lambda + EventBridge Rule for the counter-maintenance consumer. */
+declare class CounterMaintenanceLambda extends Construct {
+    readonly lambda: NodejsFunction;
+    readonly rule: Rule;
+    constructor(scope: Construct, props: CounterMaintenanceLambdaProps);
+}
+
+/**
+ * @see sites/www-docs/content/packages/@openhi/constructs/workflows/control-plane/counter-maintenance/counter-maintenance-workflow.md
+ *
+ * ADR-028 counter-maintenance workflow. Subscribes to the control-plane
+ * membership / role-assignment / workspace lifecycle events on the
+ * control event bus and maintains the denormalized counters on the
+ * canonical Tenant / Workspace / User records via idempotent atomic ADD.
+ *
+ * Mounted on the data-service stack so the IAM grant against the
+ * data-store table stays local. The control event bus and the workflow
+ * dedup table reach in cross-stack via the SSM lookups
+ * `OpenHiGlobalService.controlEventBusFromConstruct` and
+ * `WorkflowDedupTable.grantConsumerFromLookup` respectively — the same
+ * pattern the seed-demo-data workflow uses.
+ */
+interface CounterMaintenanceWorkflowProps {
+    /** Control event bus carrying the `openhi.control` counter-relevant events. */
+    readonly controlEventBus: IEventBus;
+    /** Data-store table the counters live on / are mutated against. */
+    readonly dataStoreTable: ITable;
+}
+/** Composes the counter-maintenance Lambda and wires it to the dedup table. */
+declare class CounterMaintenanceWorkflow extends Construct {
+    readonly counterMaintenance: CounterMaintenanceLambda;
+    constructor(scope: Construct, props: CounterMaintenanceWorkflowProps);
+}
+
+interface CounterReconciliationLambdaProps {
+    /**
+     * Data-store table the job recomputes counters from and SETs the
+     * repaired values onto. Wired via `DYNAMO_TABLE_NAME`; granted read +
+     * write because the sweep reads every canonical record (and its GSI1 /
+     * projection rows) and writes the recomputed counter back.
+     */
+    readonly dataStoreTable: ITable;
+}
+/** On-demand Lambda for the counter-reconciliation job (no EventBridge trigger). */
+declare class CounterReconciliationLambda extends Construct {
+    readonly lambda: NodejsFunction;
+    constructor(scope: Construct, props: CounterReconciliationLambdaProps);
+}
+
+/**
+ * @see sites/www-docs/content/packages/@openhi/constructs/workflows/control-plane/counter-reconciliation/counter-reconciliation-workflow.md
+ *
+ * ADR-028 counter-reconciliation workflow. Composes the on-demand
+ * reconciliation Lambda and mounts it on the data-service stack so the
+ * DynamoDB grant against the data-store table stays local.
+ *
+ * Unlike the event-driven counter-maintenance workflow, this job needs no
+ * control-event-bus subscription and no `WorkflowDedupTable` wiring — it
+ * is invoked on demand and is idempotent (it SETs absolute recomputed
+ * values, so re-running corrects nothing on unchanged data).
+ */
+interface CounterReconciliationWorkflowProps {
+    /** Data-store table the job recomputes counters from / repairs. */
+    readonly dataStoreTable: ITable;
+}
+/** Composes the counter-reconciliation Lambda. */
+declare class CounterReconciliationWorkflow extends Construct {
+    readonly counterReconciliation: CounterReconciliationLambda;
+    constructor(scope: Construct, props: CounterReconciliationWorkflowProps);
+}
+
 /**
  * @see sites/www-docs/content/packages/@openhi/constructs/workflows/control-plane/seed-demo-data/data-plane-fixtures.md
  *
@@ -2115,6 +2223,111 @@ interface DemoWorkspaceDataPlaneFixtures {
     readonly observations: ReadonlyArray<Observation>;
     readonly encounters: ReadonlyArray<Encounter>;
     readonly accounts: ReadonlyArray<Account>;
+    /**
+     * Facility (FHIR Location) fixtures. Optional — only the
+     * on-site UAT demo workspace seeds facilities (#1303). Defaults
+     * to the empty array when omitted.
+     */
+    readonly locations?: ReadonlyArray<Location>;
+    /**
+     * Directory Organization fixtures (#1308). Optional — only the
+     * on-site UAT demo workspace seeds Organizations today. Covers
+     * DME suppliers and insurance payor contacts; defaults to the
+     * empty array when omitted.
+     */
+    readonly organizations?: ReadonlyArray<Organization>;
+    /**
+     * Insurance Coverage fixtures (#1304). Optional — only the
+     * on-site UAT demo workspace seeds Coverages today. Defaults to
+     * the empty array when omitted. Coverages reference their
+     * `beneficiary` Patient via `Patient/<id>`, so the seeder writes
+     * Coverages after Patients in the same workspace pass.
+     */
+    readonly coverages?: ReadonlyArray<Coverage>;
+    /**
+     * Optional dynamic Patient builder. Resolved by the seeder at
+     * write time so per-tenant fixtures that depend on other
+     * fixture modules (cross-module references between blocks +
+     * facilities + facility patients) can be evaluated lazily,
+     * avoiding the TDZ that hits when one fixture module reads a
+     * top-level const from another mid-cycle. When set, the seeder
+     * iterates `buildPatients()` instead of `patients`.
+     */
+    readonly buildPatients?: () => ReadonlyArray<Patient>;
+    /**
+     * Optional dynamic Coverage builder. Same lazy-evaluation
+     * contract as {@link buildPatients}.
+     */
+    readonly buildCoverages?: () => ReadonlyArray<Coverage>;
+    /**
+     * Optional dynamic Appointment builder. Resolved by the seeder
+     * with `baseContext` so block-style Appointments can anchor
+     * their recurrence to the current ISO week (#1303 — block
+     * Appointments must show up at a useful position on the demo
+     * calendar relative to "today"). When omitted, no Appointments
+     * are written for this workspace.
+     */
+    readonly buildAppointments?: (baseContext: OpenHiContext) => ReadonlyArray<Appointment>;
+    /**
+     * Optional static wound / problem Condition fixtures (#1306).
+     * Wound Conditions reference their Patient via `subject` and
+     * sit upstream of wound-exam Observations (which reference the
+     * Condition via `focus`) and wound Procedures (which reference
+     * the Condition via `reasonReference`). The seeder writes
+     * Conditions immediately after Patients so the reference chain
+     * resolves cleanly on read paths.
+     */
+    readonly conditions?: ReadonlyArray<Condition>;
+    /**
+     * Optional static Procedure fixtures (#1306). Procedures
+     * reference their Encounter via `encounter`, their wound
+     * Condition via `reasonReference[0]`, and their Patient via
+     * `subject`. Written after Encounters and Conditions so the
+     * reference chain resolves cleanly on read paths.
+     */
+    readonly procedures?: ReadonlyArray<Procedure>;
+    /**
+     * Optional dynamic Condition builder. Same lazy-evaluation
+     * contract as {@link buildPatients} — used so the on-site
+     * encounter fixtures can anchor wound Conditions to the same
+     * `baseContext.date` window the encounter dates are derived
+     * from.
+     */
+    readonly buildConditions?: (baseContext: OpenHiContext) => ReadonlyArray<Condition>;
+    /**
+     * Optional dynamic Encounter builder. Same lazy-evaluation
+     * contract as {@link buildPatients} — encounter dates depend on
+     * `baseContext.date` (past block occurrences for facility
+     * patients, past visit cadence for home-health patients).
+     */
+    readonly buildEncounters?: (baseContext: OpenHiContext) => ReadonlyArray<Encounter>;
+    /**
+     * Optional dynamic Observation builder. Same lazy-evaluation
+     * contract as {@link buildPatients} — wound-exam Observations
+     * reference encounters that depend on `baseContext.date`.
+     */
+    readonly buildObservations?: (baseContext: OpenHiContext) => ReadonlyArray<Observation>;
+    /**
+     * Optional dynamic Procedure builder. Same lazy-evaluation
+     * contract as {@link buildPatients} — wound Procedures
+     * reference encounters that depend on `baseContext.date`.
+     */
+    readonly buildProcedures?: (baseContext: OpenHiContext) => ReadonlyArray<Procedure>;
+    /**
+     * Optional dynamic Claim builder (#1307). Claims reference
+     * the encounter they bill via `item[].encounter`, the
+     * patient's primary Coverage via `insurance[0].coverage`, and
+     * therefore depend on the encounter + coverage builders above.
+     * Written after Procedures so every reference chain resolves
+     * cleanly on read paths.
+     */
+    readonly buildClaims?: (baseContext: OpenHiContext) => ReadonlyArray<Claim>;
+    /**
+     * Optional dynamic PaymentNotice builder (#1307). One
+     * PaymentNotice per accepted Claim; references the Claim via
+     * `request` + `payment`. Written after Claims.
+     */
+    readonly buildPaymentNotices?: (baseContext: OpenHiContext) => ReadonlyArray<PaymentNotice>;
 }
 /**
  * Per-workspace fixtures the data-plane phase writes on every fire.
@@ -2154,6 +2367,1041 @@ declare const DEMO_DATA_PLANE_FIXTURES: ReadonlyArray<DemoWorkspaceDataPlaneFixt
  */
 declare const PLATFORM_SCOPE_TENANT_ID = "platform";
 
+/**
+ * @see sites/www-docs/content/packages/@openhi/constructs/workflows/control-plane/seed-demo-data/on-site-demo-blocks.md
+ *
+ * Hand-authored weekly scheduling block fixtures the
+ * `seed-demo-data` workflow upserts into the on-site-medical UAT
+ * demo tenant ({@link ON_SITE_DEMO_TENANT_ID} +
+ * {@link ON_SITE_DEMO_WORKSPACE_ID}) on every non-prod deploy
+ * (issue #1303).
+ *
+ * Modelling choice: blocks are represented as FHIR
+ * `Appointment` resources with `appointmentType.code = "block"`
+ * (matching the on-site app's `isBlockAppointment` helper at
+ * `sites/app-ehr/src/types/appointment.ts`). The on-site
+ * calendar reads `Appointment` records, not `Schedule`/`Slot`
+ * resources, so seeding `Appointment`s is the path that
+ * actually renders something for UAT testers. Each block is
+ * "recurring weekly" — we materialize that as a window of
+ * concrete weekly occurrences anchored to the week containing
+ * the seeder's `baseContext.date`, so blocks always show up at
+ * a useful position relative to "today" on the demo schedule.
+ *
+ * Topology — issue #1303 design:
+ *   - Facility 1 (Druid Hills Skilled Nursing) — TWO weekly
+ *     blocks: Tuesday + Thursday (the high-volume facility).
+ *   - Facility 2 (Buckhead Rehabilitation Center) — one
+ *     weekly block on Wednesday.
+ *   - Facility 3 (Decatur Senior Living) — one weekly block
+ *     on Monday.
+ *
+ * Each block is assigned one doctor and one scribe from the
+ * demo provider pool (#1302). Doctors are distributed so no
+ * single doctor covers all four blocks. Capacities accommodate
+ * 12-20 patients each (the upstream patient-distribution
+ * ticket #1304 reads {@link ON_SITE_DEMO_BLOCK_CAPACITY_EXTENSION_URL}
+ * to spread patients across blocks).
+ */
+/**
+ * Extension URL stamped on every block Appointment carrying the
+ * block's intended capacity (number of patients the block can
+ * accommodate). FHIR Appointment has no first-class capacity
+ * field, so we publish a local URL under the on-site
+ * convention.
+ */
+declare const ON_SITE_DEMO_BLOCK_CAPACITY_EXTENSION_URL = "https://on-site-medical.app/fhir/StructureDefinition/block-capacity";
+/** Coding system the on-site app expects on Appointment.appointmentType. */
+declare const ON_SITE_APPOINTMENT_TYPE_SYSTEM = "https://onsite-medical.org/appointment-type";
+/**
+ * Weeks of past occurrences materialized per block. Past
+ * occurrences let UAT testers exercise "history" views without
+ * waiting through time.
+ */
+declare const BLOCK_OCCURRENCE_WEEKS_PAST = 4;
+/**
+ * Weeks of future occurrences materialized per block. Future
+ * occurrences cover the calendar's default "month ahead"
+ * window plus room for testers to navigate forward.
+ */
+declare const BLOCK_OCCURRENCE_WEEKS_FUTURE = 8;
+/**
+ * Total weekly occurrences materialized per block template
+ * (past + current week + future). Re-fires with the same
+ * `baseContext.date` produce byte-identical occurrence ids.
+ */
+declare const BLOCK_OCCURRENCES_PER_TEMPLATE: number;
+/**
+ * ISO day-of-week index used by {@link BlockTemplate.dayOfWeek}.
+ * 1 = Monday, ..., 7 = Sunday (matches ISO 8601 / FHIR usage).
+ */
+type IsoDayOfWeek = 1 | 2 | 3 | 4 | 5 | 6 | 7;
+/** Stable block-template ids in dispatch order. Re-exported for downstream tickets. */
+declare const ON_SITE_DEMO_BLOCK_TEMPLATE_IDS: ReadonlyArray<string>;
+/**
+ * Materialize every block template's weekly occurrences,
+ * anchored to the Monday of the ISO week containing
+ * `referenceIso` (typically `baseContext.date`). Each template
+ * produces {@link BLOCK_OCCURRENCES_PER_TEMPLATE} appointments:
+ * `BLOCK_OCCURRENCE_WEEKS_PAST` past weeks, the current week,
+ * and `BLOCK_OCCURRENCE_WEEKS_FUTURE` future weeks. With the
+ * default window of 4 + 1 + 8 = 13 occurrences per template ×
+ * 4 templates, the seeder writes 52 block Appointments per
+ * fire.
+ *
+ * Idempotency: ids are derived from `(templateId, weekOffset)`,
+ * not from a wall-clock timestamp, so re-fires of the seeder
+ * with the same `referenceIso` upsert the same Appointment
+ * records (no duplicates). A re-fire with a different
+ * `referenceIso` (e.g., the deploy event days later) writes a
+ * new set of occurrences and leaves prior weeks' records as
+ * orphaned past history — that is acceptable for UAT.
+ */
+declare const buildOnSiteDemoBlockAppointments: (referenceIso: string) => ReadonlyArray<Appointment>;
+/**
+ * Stable per-template (doctor, scribe) pair for the on-site
+ * block schedule. Downstream tickets (e.g., the patient-
+ * distribution helper in #1304) call this to look up which
+ * provider pair staffs a given block without re-reading the
+ * block-template list.
+ */
+declare const findOnSiteDemoBlockTemplate: (templateId: string) => {
+    readonly id: string;
+    readonly facilityId: string;
+    readonly displayName: string;
+    readonly doctorId: string;
+    readonly scribeId: string;
+    readonly capacity: number;
+    readonly dayOfWeek: IsoDayOfWeek;
+} | undefined;
+
+/**
+ * @see sites/www-docs/content/packages/@openhi/constructs/workflows/control-plane/seed-demo-data/on-site-demo-claims.md
+ *
+ * Hand-authored Claim + PaymentNotice fixtures the `seed-demo-data`
+ * workflow upserts into the on-site-medical UAT demo tenant
+ * ({@link ON_SITE_DEMO_TENANT_ID} + {@link ON_SITE_DEMO_WORKSPACE_ID})
+ * on every non-prod deploy (issue #1307).
+ *
+ * Topology — issue #1307 design:
+ *   - For each historical encounter (#1306), decide deterministically
+ *     whether the visit is billed or explicitly unbilled. The unbilled
+ *     decision is recorded by the *absence* of a Claim resource on
+ *     that encounter id; the on-site UI can derive "unbilled" by
+ *     listing claims and finding no match for an encounter.
+ *   - Billed encounters get exactly one {@link Claim} resource keyed
+ *     `<encounter-id>-claim`. The Claim carries:
+ *       - `status: "active"` (FHIR R4 enum only has
+ *         `active|cancelled|draft|entered-in-error`, none of which
+ *         encode our domain workflow status — see
+ *         {@link CLAIM_WORKFLOW_STATUS_EXTENSION_URL}).
+ *       - `claim-workflow-status` extension carrying the domain
+ *         status: `submitted` / `accepted` / `rejected` /
+ *         `reworked` / `resubmitted`.
+ *       - `insurance[0].coverage` referencing the patient's primary
+ *         {@link Coverage} (which is what carries the actual payor).
+ *       - `item[]` carrying one line: a wound-debridement CPT for
+ *         encounters that have a procedure (#1306), otherwise an
+ *         E/M visit code (99213/99214/99215) chosen deterministically.
+ *       - `total` denormalised from the single line item's `net`.
+ *   - Accepted claims get a {@link PaymentNotice} resource keyed
+ *     `<encounter-id>-payment` whose `paymentStatus` CodeableConcept
+ *     carries the domain payment status: `partial` / `full` /
+ *     `write-off`. Submitted / rejected / reworked / resubmitted
+ *     claims do not emit a PaymentNotice — the "in flux" subset is
+ *     specifically every `submitted` claim with no PaymentNotice.
+ *
+ * Modelling choices:
+ *   - **Single Claim per encounter** (not a chain). The "reworked"
+ *     status implies history (original rejected → resubmitted),
+ *     denormalised onto the same Claim via the
+ *     `claim-workflow-status` extension. On-site's current UI
+ *     (`sites/app-ehr/src/pages/patient/tabs/insurance/ClaimsTable.tsx`)
+ *     shows a single status badge per claim and does not need a
+ *     chain to render correctly.
+ *   - **PaymentNotice over a denormalised payment summary** —
+ *     PaymentNotice operations already exist in the data layer
+ *     (`packages/@openhi/constructs/src/data/operations/data/paymentnotice/`),
+ *     so we lean on real FHIR resources rather than adding a new
+ *     extension schema.
+ *   - **Domain status as an extension** — FHIR R4 `Claim.status`
+ *     does not include the workflow-status concepts the demo
+ *     needs, and stamping a non-standard string onto the enum
+ *     would fail the zod schema. The extension approach mirrors
+ *     how on-site already encodes domain state on other
+ *     resources (hospice status, QMB status, care-context, etc.).
+ *
+ * Distribution targets — chosen so all 5 workflow statuses plus
+ * unbilled appear in the demo data, with payment-status variety
+ * on the accepted bucket and a meaningful "in flux" submitted
+ * bucket:
+ *   - ~15% of encounters are unbilled (no Claim)
+ *   - ~20% of claims are submitted   (no PaymentNotice — "in flux")
+ *   - ~45% of claims are accepted    (with PaymentNotice)
+ *      - ~40% of accepted: partial payment
+ *      - ~40% of accepted: full payment
+ *      - ~20% of accepted: write-off
+ *   - ~10% of claims are rejected
+ *   - ~15% of claims are reworked
+ *   - ~10% of claims are resubmitted
+ *
+ * Ids are deterministic — re-fires upsert the same records,
+ * matching the workflow's idempotency contract.
+ */
+/**
+ * Extension URL stamped on every seeded Claim recording the
+ * domain workflow status — submitted / accepted / rejected /
+ * reworked / resubmitted. FHIR R4 `Claim.status` only carries
+ * the lifecycle states `active|cancelled|draft|entered-in-error`,
+ * so the demo's workflow status sits on this extension instead
+ * of squeezing into the base enum.
+ */
+declare const CLAIM_WORKFLOW_STATUS_EXTENSION_URL = "https://on-site-medical.app/fhir/StructureDefinition/claim-workflow-status";
+/** Sub-extension under {@link CLAIM_WORKFLOW_STATUS_EXTENSION_URL}. */
+declare const CLAIM_WORKFLOW_STATUS_VALUE_SUB_EXTENSION_URL = "status";
+/** Sub-extension under {@link CLAIM_WORKFLOW_STATUS_EXTENSION_URL}. */
+declare const CLAIM_WORKFLOW_STATUS_LAST_TRANSITION_SUB_EXTENSION_URL = "lastTransition";
+/**
+ * Domain workflow status values written to
+ * {@link CLAIM_WORKFLOW_STATUS_EXTENSION_URL}.
+ */
+declare const CLAIM_WORKFLOW_STATUS: {
+    readonly SUBMITTED: "submitted";
+    readonly ACCEPTED: "accepted";
+    readonly REJECTED: "rejected";
+    readonly REWORKED: "reworked";
+    readonly RESUBMITTED: "resubmitted";
+};
+type ClaimWorkflowStatus = (typeof CLAIM_WORKFLOW_STATUS)[keyof typeof CLAIM_WORKFLOW_STATUS];
+/**
+ * Domain payment status values written to
+ * {@link PaymentNotice.paymentStatus} on accepted claims.
+ */
+declare const PAYMENT_STATUS: {
+    readonly PARTIAL: "partial";
+    readonly FULL: "full";
+    readonly WRITE_OFF: "write-off";
+};
+type PaymentStatus = (typeof PAYMENT_STATUS)[keyof typeof PAYMENT_STATUS];
+/** CodeSystem URL stamped on the {@link PaymentNotice.paymentStatus} coding. */
+declare const PAYMENT_STATUS_SYSTEM = "https://on-site-medical.app/fhir/CodeSystem/payment-status";
+/**
+ * Test seam — clear caches between test invocations so stale
+ * state from a prior seed run does not leak into the next.
+ */
+declare const __resetOnSiteDemoClaimCachesForTests: () => void;
+/**
+ * Materialise every Claim resource for the on-site UAT demo
+ * workspace. Walks every historical encounter (#1306); skips the
+ * ~15% flagged as unbilled. Returns an empty array if no
+ * encounter metadata is available (intake-only deployments).
+ */
+declare const buildOnSiteDemoClaims: (referenceIso: string) => ReadonlyArray<Claim>;
+/**
+ * Materialise every PaymentNotice resource for the on-site UAT
+ * demo workspace. One per `accepted` Claim (no PaymentNotice on
+ * submitted / rejected / reworked / resubmitted — submitted-with-
+ * no-payment is the "in flux" subset the AC asks for).
+ */
+declare const buildOnSiteDemoPaymentNotices: (referenceIso: string) => ReadonlyArray<PaymentNotice>;
+/**
+ * Stable list of every Claim id seeded for the on-site UAT demo
+ * workspace, anchored to `referenceIso`. Order matches the
+ * underlying encounter list. Downstream tickets (#1308 — billing
+ * directory, etc.) read this to fan out per-claim work.
+ */
+declare const onSiteDemoClaimIds: (referenceIso: string) => ReadonlyArray<string>;
+/**
+ * Stable list of every PaymentNotice id seeded for the on-site
+ * UAT demo workspace, anchored to `referenceIso`.
+ */
+declare const onSiteDemoPaymentNoticeIds: (referenceIso: string) => ReadonlyArray<string>;
+/**
+ * Encounter ids the seeder flags as unbilled (no Claim emitted).
+ * Exposed so tests and downstream tickets can assert the
+ * unbilled cut without re-deriving the hash.
+ */
+declare const onSiteDemoUnbilledEncounterIds: (referenceIso: string) => ReadonlyArray<string>;
+/**
+ * Encounter ids the seeder flags as billed (one Claim emitted per
+ * id). Exposed so tests and downstream tickets can fan out per
+ * billed encounter without re-deriving the hash.
+ */
+declare const onSiteDemoBilledEncounterIds: (referenceIso: string) => ReadonlyArray<string>;
+
+/**
+ * FHIR `Organization.type[0].coding.system` for the standard
+ * organization-type valueset. Carrying the standard coding alongside
+ * the domain category keeps the bodies interoperable.
+ */
+declare const FHIR_ORGANIZATION_TYPE_SYSTEM = "http://terminology.hl7.org/CodeSystem/organization-type";
+/**
+ * On-site domain category system for directory categorisation —
+ * separates `dme-supplier` from `insurance-payor` so the directory
+ * UI's category filter can match a single coding without parsing
+ * the FHIR-standard `prov` / `pay` codes.
+ */
+declare const ON_SITE_DIRECTORY_CATEGORY_SYSTEM = "https://on-site-medical.app/fhir/CodeSystem/directory-category";
+/** Domain category code stamped on every DME-supplier Organization. */
+declare const DME_SUPPLIER_CATEGORY_CODE = "dme-supplier";
+/** Domain category code stamped on every insurance-payor Organization. */
+declare const INSURANCE_PAYOR_CATEGORY_CODE = "insurance-payor";
+/**
+ * Sub-category coding system stamped on the payor Organization's
+ * `type[1]` so the directory UI can group payors by plan family
+ * (commercial / Medicare / Medicare Advantage) without re-parsing
+ * the display name. Mirrors the
+ * {@link COVERAGE_PAYOR_TYPE_SYSTEM} convention used on Coverage
+ * resources in #1304.
+ */
+declare const INSURANCE_PAYOR_PLAN_TYPE_SYSTEM = "https://on-site-medical.app/fhir/CodeSystem/payor-plan-type";
+/** Commercial plan payor (Aetna, Cigna, UnitedHealthcare, etc.). */
+declare const PAYOR_PLAN_TYPE_COMMERCIAL = "commercial";
+/** Traditional Medicare (FFS) — single payor. */
+declare const PAYOR_PLAN_TYPE_MEDICARE = "medicare";
+/** Medicare Advantage plan payor (Humana MA, Anthem MA, etc.). */
+declare const PAYOR_PLAN_TYPE_MEDICARE_ADVANTAGE = "medicare-advantage";
+/** Union of the three plan-type codes a payor Organization may carry. */
+type PayorPlanType = typeof PAYOR_PLAN_TYPE_COMMERCIAL | typeof PAYOR_PLAN_TYPE_MEDICARE | typeof PAYOR_PLAN_TYPE_MEDICARE_ADVANTAGE;
+/**
+ * Root extension URL stamped on each `qualification[]` entry recording
+ * the per-state credentialing context (state code + status). FHIR R4
+ * `Practitioner_Qualification` carries `identifier`, `code`, `period`,
+ * and `issuer` natively but has no `status` field; the extension fills
+ * that gap without forking the schema.
+ */
+declare const PRACTITIONER_CREDENTIALING_EXTENSION_URL = "https://on-site-medical.app/fhir/StructureDefinition/practitioner-credentialing";
+/** Sub-extension under {@link PRACTITIONER_CREDENTIALING_EXTENSION_URL}. */
+declare const PRACTITIONER_CREDENTIALING_STATE_SUB_EXTENSION_URL = "state";
+/** Sub-extension under {@link PRACTITIONER_CREDENTIALING_EXTENSION_URL}. */
+declare const PRACTITIONER_CREDENTIALING_STATUS_SUB_EXTENSION_URL = "status";
+/**
+ * Credentialing status values. Mirrors the wound-care industry
+ * convention — credentialing is either active (license current and in
+ * good standing), suspended (under board action), or expired (lapsed
+ * past expiration date).
+ */
+declare const CREDENTIALING_STATUS: {
+    readonly ACTIVE: "active";
+    readonly SUSPENDED: "suspended";
+    readonly EXPIRED: "expired";
+};
+type CredentialingStatus = (typeof CREDENTIALING_STATUS)[keyof typeof CREDENTIALING_STATUS];
+/**
+ * FHIR `Identifier.system` for a US state medical license. Uses the
+ * on-site-medical URL prefix so the identifier round-trips through
+ * the on-site directory UI without colliding with the NPI system.
+ */
+declare const STATE_MEDICAL_LICENSE_SYSTEM = "https://on-site-medical.app/fhir/sid/state-medical-license";
+/** Demo DME-supplier Organizations seeded into the on-site UAT workspace. */
+declare const ON_SITE_DEMO_DME_SUPPLIERS: ReadonlyArray<Organization>;
+/** Demo insurance-payor Organizations seeded into the on-site UAT workspace. */
+declare const ON_SITE_DEMO_INSURANCE_PAYORS: ReadonlyArray<Organization>;
+/** Stable DME-supplier ids in dispatch order. */
+declare const onSiteDemoDmeSupplierIds: () => ReadonlyArray<string>;
+/** Stable insurance-payor ids in dispatch order. */
+declare const onSiteDemoInsurancePayorIds: () => ReadonlyArray<string>;
+/**
+ * The full directory Organization pool seeded into the on-site UAT
+ * workspace — DME suppliers followed by insurance payors. The seeder
+ * walks this in order via `buildOrganizations`.
+ */
+declare const ON_SITE_DEMO_DIRECTORY_ORGANIZATIONS: ReadonlyArray<Organization>;
+/**
+ * Per-state credentialing spec for one license. The doctor specs in
+ * `on-site-demo-fixtures.ts` carry a small array of these and the
+ * build helper below converts each into a FHIR
+ * `Practitioner_Qualification` entry appended after the "Physician"
+ * qualification.
+ */
+interface PractitionerCredentialingSpec {
+    /** Two-letter USPS state code (GA, AL, TN, …). */
+    readonly state: string;
+    /** State medical board display label used for `issuer.display`. */
+    readonly stateBoardDisplay: string;
+    /** Opaque license number (real format varies by state). */
+    readonly licenseNumber: string;
+    /** ISO date the license was issued. */
+    readonly issued: string;
+    /** ISO date the license expires (after-end-of-period if expired). */
+    readonly expires: string;
+    readonly status: CredentialingStatus;
+}
+/**
+ * Lookup helper: per-state credentialing entries for one doctor. Returns
+ * an empty array if the practitioner id is not a seeded on-site doctor.
+ */
+declare const practitionerCredentialingForDoctor: (practitionerId: string) => ReadonlyArray<PractitionerCredentialingSpec>;
+/**
+ * Lookup helper: per-state credentialing entry for a specific
+ * (practitionerId, stateCode) pair. Returns `undefined` when the pair
+ * has no credentialing entry — the on-site UI can render this as
+ * "not credentialed in <state>" without inspecting the full list.
+ */
+declare const practitionerCredentialingForState: (practitionerId: string, stateCode: string) => PractitionerCredentialingSpec | undefined;
+/**
+ * Build the FHIR `qualification[]` entries representing per-state
+ * credentialing for one doctor. The on-site demo doctor builder
+ * appends these after the base "Physician" qualification so the
+ * resulting Practitioner.qualification array carries:
+ *   - [0] role label (`{text: "Physician"}`)
+ *   - [1..N] per-state licenses (one entry per state in the
+ *           credentialing map for this doctor)
+ *
+ * Each license entry's identifier is keyed under
+ * {@link STATE_MEDICAL_LICENSE_SYSTEM} so the on-site UI can pluck the
+ * license number without parsing the issuer display.
+ */
+declare const buildCredentialingQualifications: (practitionerId: string) => ReadonlyArray<Practitioner_Qualification>;
+
+/**
+ * @see sites/www-docs/content/packages/@openhi/constructs/workflows/control-plane/seed-demo-data/on-site-demo-encounters.md
+ *
+ * Historical Encounter + wound-Condition + wound-exam Observation +
+ * wound-debridement Procedure fixtures the `seed-demo-data` workflow
+ * upserts into the on-site-medical UAT demo tenant
+ * ({@link ON_SITE_DEMO_TENANT_ID} + {@link ON_SITE_DEMO_WORKSPACE_ID})
+ * on every non-prod deploy (issue #1306).
+ *
+ * Topology — issue #1306 design:
+ *   - Brand-new intake patients (6 facility intake-only + 3 home
+ *     intake-only) get **no** encounters. They carry intake +
+ *     insurance only.
+ *   - Scheduled facility patients (60 patients across 4 blocks) get
+ *     one Encounter per past block occurrence their block ran on
+ *     (the `BLOCK_OCCURRENCE_WEEKS_PAST` window = 4 past weeks).
+ *     Authored by the block's doctor + scribe, dated to that
+ *     occurrence's date.
+ *   - Scheduled home-health patients (17 patients) get one Encounter
+ *     per past visit at their cadence, stepping back from the
+ *     reference date. With cadence 14 days and 4 past visits, the
+ *     dates land at -14, -28, -42, -56 days. Authored by the
+ *     assigned home-health provider.
+ *   - ~70% of scheduled patients carry a "current wound" — one
+ *     {@link Condition} per patient with `category.text = "wound"`
+ *     plus a deterministic lower-extremity body site and wound type.
+ *     Every encounter for that patient records a wound-exam
+ *     {@link Observation} (LOINC panel 39135-9) whose components
+ *     show progression — length / width / depth shrink (healing) or
+ *     grow (worsening) across encounters depending on a
+ *     deterministic per-patient trajectory.
+ *   - ~25% of wound-bearing patients get one wound-debridement
+ *     {@link Procedure} on the most-recent wound encounter, using a
+ *     CPT code from the on-site EHR's
+ *     `PRESET_PROCEDURES` catalogue (e.g. 97597 Sharp Debridement).
+ *
+ * Modelling choices:
+ *   - Encounter `class` follows the on-site EHR's
+ *     `ENCOUNTER_CLASS_BY_LOCATION` map at
+ *     `sites/app-ehr/src/types/encounter.ts` — facility encounters
+ *     carry `code: "IMP", display: "Facility"`; home-health
+ *     encounters carry `code: "HH", display: "Home Health"`. The
+ *     `system` matches the v3 ActCode URL the on-site EHR reads.
+ *   - Wound is encoded as a FHIR {@link Condition} with
+ *     `category: [{ text: "wound" }]` (mirroring the on-site
+ *     `mapWoundFormToCondition` helper at
+ *     `sites/app-ehr/src/pages/visit/encounter/components/AddWoundDialog/woundFormMapping.ts`).
+ *     Wound exams are encoded as a single panel Observation per
+ *     encounter (LOINC 39135-9), with components for length /
+ *     width / depth — matching the on-site `buildWoundExamObservation`
+ *     mapper at `sites/app-ehr/src/features/wounds/mappers/woundExamMappers.ts`.
+ *   - Procedure carries a CPT code on `code.coding[0]` with system
+ *     `http://www.ama-assn.org/go/cpt` (the on-site EHR's
+ *     `CPT_SYSTEM` constant). `reasonReference` points at the wound
+ *     Condition; `encounter` points at the encounter the procedure
+ *     was performed during.
+ *
+ * Ids are deterministic — re-fires upsert the same records,
+ * matching the workflow's idempotency contract.
+ */
+/** FHIR v3 ActEncounter coding system, used on `Encounter.class`. */
+declare const ENCOUNTER_CLASS_SYSTEM = "http://terminology.hl7.org/CodeSystem/v3-ActCode";
+/** Encounter class coding for facility encounters (on-site `ENCOUNTER_CLASS_BY_LOCATION.facility`). */
+declare const ENCOUNTER_CLASS_FACILITY: {
+    readonly system: "http://terminology.hl7.org/CodeSystem/v3-ActCode";
+    readonly code: "IMP";
+    readonly display: "Facility";
+};
+/** Encounter class coding for home-health encounters (on-site `ENCOUNTER_CLASS_BY_LOCATION.home`). */
+declare const ENCOUNTER_CLASS_HOME_HEALTH: {
+    readonly system: "http://terminology.hl7.org/CodeSystem/v3-ActCode";
+    readonly code: "HH";
+    readonly display: "Home Health";
+};
+/** LOINC system URL used on Observation.code.coding entries. */
+declare const LOINC_SYSTEM = "http://loinc.org";
+/** SNOMED CT system URL used on Condition.code / bodySite coding entries. */
+declare const SNOMED_SYSTEM = "http://snomed.info/sct";
+/** CPT coding system used on Procedure.code (matches on-site `CPT_SYSTEM`). */
+declare const CPT_SYSTEM = "http://www.ama-assn.org/go/cpt";
+/**
+ * LOINC panel code for the wound assessment panel (matches on-site
+ * `WOUND_EXAM_PANEL_CODE` at
+ * `sites/app-ehr/src/features/wounds/types/woundExamCodes.ts`).
+ */
+declare const WOUND_EXAM_PANEL_CODE = "39135-9";
+/** Display for {@link WOUND_EXAM_PANEL_CODE}. */
+declare const WOUND_EXAM_PANEL_DISPLAY = "Wound assessment panel";
+/** LOINC component code for wound length (cm). */
+declare const WOUND_LENGTH_CODE = "39126-8";
+/** LOINC component code for wound width (cm). */
+declare const WOUND_WIDTH_CODE = "39125-0";
+/** LOINC component code for wound depth (cm). */
+declare const WOUND_DEPTH_CODE = "39127-6";
+/** LOINC component code for wound status (declining / stagnant / improving). */
+declare const WOUND_STATUS_CODE = "72311-4";
+/**
+ * Hl7 condition-clinical system URL used on Condition.clinicalStatus.
+ */
+declare const CONDITION_CLINICAL_STATUS_SYSTEM = "http://terminology.hl7.org/CodeSystem/condition-clinical";
+/**
+ * Number of past home-health visits materialized per scheduled
+ * home-health patient. Matches {@link BLOCK_OCCURRENCE_WEEKS_PAST}
+ * so the facility and home-health populations carry comparable
+ * history depths (~4 historical encounters per scheduled patient).
+ */
+declare const HOME_HEALTH_VISITS_PAST = 4;
+/**
+ * Stable wound-Condition id for a patient. The id is the patient
+ * id suffixed with `-wound-001` — one wound per patient suffices
+ * for UAT.
+ */
+declare const woundConditionIdForPatient: (patientId: string) => string;
+/**
+ * Test seam — clear the spec cache between test invocations so
+ * stale state from a prior seed run does not leak into the next.
+ * Not part of the public API contract.
+ */
+declare const __resetOnSiteDemoEncounterCachesForTests: () => void;
+/**
+ * Materialize every Encounter resource for the on-site UAT demo
+ * workspace. Scheduled facility patients fan out over the past 4
+ * block occurrences; scheduled home-health patients fan out over
+ * the past {@link HOME_HEALTH_VISITS_PAST} cadence visits. Intake-
+ * only patients contribute zero encounters.
+ */
+declare const buildOnSiteDemoEncounters: (referenceIso: string) => ReadonlyArray<Encounter>;
+/**
+ * Materialize every wound {@link Condition} resource for the
+ * on-site UAT demo workspace. One Condition per wound-bearing
+ * patient, dated to that patient's earliest encounter.
+ */
+declare const buildOnSiteDemoWoundConditions: (referenceIso: string) => ReadonlyArray<Condition>;
+/**
+ * Materialize every wound-exam {@link Observation} for the on-site
+ * UAT demo workspace. One per encounter on a wound-bearing
+ * patient, with progressing length / width / depth components.
+ */
+declare const buildOnSiteDemoWoundObservations: (referenceIso: string) => ReadonlyArray<Observation>;
+/**
+ * Materialize every wound-debridement {@link Procedure} for the
+ * on-site UAT demo workspace. One per qualifying wound-bearing
+ * patient, on their most-recent encounter, with a real CPT code.
+ */
+declare const buildOnSiteDemoWoundProcedures: (referenceIso: string) => ReadonlyArray<Procedure>;
+/**
+ * Stable list of every Encounter id seeded for the on-site UAT
+ * demo workspace, anchored to `referenceIso`. Downstream tickets
+ * (e.g. #1307 — claims walking each historical encounter) read
+ * this to fan out per-encounter work without re-deriving the
+ * mapping.
+ */
+declare const onSiteDemoEncounterIds: (referenceIso: string) => ReadonlyArray<string>;
+/**
+ * Encounters scoped to a single patient, ordered earliest first.
+ * Returns the empty array for intake-only patients (no
+ * encounters) and for unknown patient ids.
+ */
+declare const onSiteDemoEncountersForPatient: (patientId: string, referenceIso: string) => ReadonlyArray<string>;
+/**
+ * Public projection of an encounter's seed metadata. Downstream
+ * tickets (e.g. #1307 — claims walking each historical encounter)
+ * read this instead of re-parsing the encounter id string.
+ */
+interface OnSiteDemoEncounterMetadata {
+    /** Stable Encounter id. */
+    readonly id: string;
+    /** Patient the encounter is authored against. */
+    readonly patientId: string;
+    /** 1-based sequence ordinal within the patient's encounter list (1 = earliest). */
+    readonly sequence: number;
+    /** Total encounters seeded for this patient. */
+    readonly totalEncounters: number;
+    /** ISO 8601 start instant the encounter is dated to. */
+    readonly periodStart: string;
+    /** Whether this encounter carries a wound-debridement Procedure. */
+    readonly hasWoundProcedure: boolean;
+}
+/**
+ * Materialize every encounter's seed metadata for the on-site UAT
+ * demo workspace. Order matches {@link onSiteDemoEncounterIds}.
+ * The `hasWoundProcedure` flag is `true` only on the patient's
+ * most-recent encounter when {@link onSiteDemoWoundProcedurePatientIds}
+ * lists that patient — mirroring the procedure-attachment rule in
+ * {@link buildOnSiteDemoWoundProcedures}.
+ */
+declare const onSiteDemoEncounterMetadata: (referenceIso: string) => ReadonlyArray<OnSiteDemoEncounterMetadata>;
+/**
+ * Subset of patients (facility + home-health) the seeder flags as
+ * carrying a current wound. Exported so tests and downstream
+ * tickets can assert wound-coverage targets without re-deriving
+ * the hash. Order matches the input list of scheduled patients.
+ */
+declare const onSiteDemoWoundBearingPatientIds: () => ReadonlyArray<string>;
+/**
+ * Subset of {@link onSiteDemoWoundBearingPatientIds} whose patients
+ * also get a CPT-coded debridement Procedure on their most-recent
+ * encounter.
+ */
+declare const onSiteDemoWoundProcedurePatientIds: () => ReadonlyArray<string>;
+
+/**
+ * @see sites/www-docs/content/packages/@openhi/constructs/workflows/control-plane/seed-demo-data/on-site-demo-facilities.md
+ *
+ * Hand-authored Facility (FHIR Location) fixtures the
+ * `seed-demo-data` workflow upserts into the on-site-medical UAT
+ * demo tenant ({@link ON_SITE_DEMO_TENANT_ID} +
+ * {@link ON_SITE_DEMO_WORKSPACE_ID}) on every non-prod deploy
+ * (issue #1303).
+ *
+ * Three facilities — UAT testers exercise the calendar's "View by
+ * facility" filter and the home-health vs facility-visit
+ * routing. The on-site `AdminLocationFormPage` reads:
+ *   - `name`
+ *   - `type[0].text` — `"facility"` (drives the
+ *     classification dropdown)
+ *   - `address.line/city/state/postalCode/country`
+ *   - `telecom` (phone + email + optional fax)
+ *   - `status` (`"active"`)
+ *
+ * Director-of-nursing is not a first-class FHIR R4 `Location`
+ * field. We denormalize it as an `extension` (single root
+ * extension with three sub-extensions: `name`, `phone`,
+ * `email`) under the established on-site URL convention
+ * (`https://on-site-medical.app/fhir/StructureDefinition/*`) so a
+ * later on-site UI iteration can pick it up without a schema
+ * change.
+ *
+ * Ids are deterministic — re-fires upsert the same records,
+ * matching the workflow's idempotency contract.
+ */
+/**
+ * Root extension URL stamped on every facility Location for the
+ * director-of-nursing contact. The root extension carries three
+ * sub-extensions (`name`, `phone`, `email`) — none of FHIR R4's
+ * shipped extensions cover this exact triple, so we publish a
+ * local URL under the on-site convention.
+ */
+declare const DIRECTOR_OF_NURSING_EXTENSION_URL = "https://on-site-medical.app/fhir/StructureDefinition/director-of-nursing";
+/** Sub-extension URL: director-of-nursing display name. */
+declare const DIRECTOR_OF_NURSING_NAME_EXTENSION_URL = "name";
+/** Sub-extension URL: director-of-nursing phone (E.164). */
+declare const DIRECTOR_OF_NURSING_PHONE_EXTENSION_URL = "phone";
+/** Sub-extension URL: director-of-nursing email. */
+declare const DIRECTOR_OF_NURSING_EMAIL_EXTENSION_URL = "email";
+/** Demo facilities seeded into the on-site UAT demo workspace. */
+declare const ON_SITE_DEMO_FACILITIES: ReadonlyArray<Location>;
+/** Stable facility ids in dispatch order. Re-exported for downstream tickets. */
+declare const ON_SITE_DEMO_FACILITY_IDS: ReadonlyArray<string>;
+
+/**
+ * @see sites/www-docs/content/packages/@openhi/constructs/workflows/control-plane/seed-demo-data/on-site-demo-facility-patients.md
+ *
+ * Hand-authored facility Patient + Coverage fixtures the
+ * `seed-demo-data` workflow upserts into the on-site-medical UAT
+ * demo tenant ({@link ON_SITE_DEMO_TENANT_ID} +
+ * {@link ON_SITE_DEMO_WORKSPACE_ID}) on every non-prod deploy
+ * (issue #1304).
+ *
+ * Topology — issue #1304 design:
+ *   - 4 blocks (#1303) × per-block patient count (16 + 14 + 18 +
+ *     12 = 60 scheduled patients). No patient appears in more
+ *     than one block.
+ *   - Plus 6 intake-complete-not-yet-scheduled patients (2 per
+ *     facility — small subset that exercises the "new intake,
+ *     not yet on a calendar" UI state). Total: 66 Patients.
+ *   - Every patient is assigned `care-context = facility` via
+ *     the on-site `patient-default-care-setting` /
+ *     `patient-default-care-location` extension pair
+ *     (`sites/app-ehr/src/types/fhir-extensions/patient.ts`). The
+ *     UI distinguishes facility vs home-health patients by
+ *     reading those extensions, so seeding them is the path that
+ *     actually surfaces the patient under the right "Patient
+ *     Type" column in the on-site EHR.
+ *
+ * Insurance:
+ *   - Every patient gets a primary Coverage with
+ *     `status: "active"` and a verification date stamped on the
+ *     coverage body via the on-site `coverage-verification-date`
+ *     extension.
+ *   - A subset (~40%) gets a secondary Coverage.
+ *   - Payor mix: commercial / Medicare / Medicare Advantage.
+ *   - QMB is a Medicare-only program (real-world constraint); the
+ *     QMB extension only attaches to Medicare-primary patients.
+ *   - ~20% of patients carry the `patient-hospice-status`
+ *     extension on the Patient resource (CMS hospice billing
+ *     status — separate from QMB).
+ *
+ * Modelling choice — block assignment. The seeder also records
+ * which block template a patient is assigned to so downstream
+ * tickets (#1306 — encounters per scheduled patient per block
+ * occurrence) can fan out without re-deriving the mapping.
+ * Encounters are NOT created here; this ticket only attaches the
+ * block reference via an extension on the Patient body. Intake-
+ * only patients omit the extension entirely.
+ *
+ * Ids are deterministic — re-fires upsert the same records,
+ * matching the workflow's idempotency contract. Adding,
+ * renaming, or moving a patient is a one-line edit here plus a
+ * redeploy.
+ */
+/**
+ * Extension URL stamped on the Patient body when the patient's
+ * default care setting is facility-based (mirrors the on-site
+ * EHR's `EXT_PATIENT_DEFAULT_CARE_SETTING` constant at
+ * `sites/app-ehr/src/types/fhir-extensions/patient.ts`).
+ */
+declare const PATIENT_DEFAULT_CARE_SETTING_EXTENSION_URL = "https://on-site-medical.app/fhir/StructureDefinition/patient-default-care-setting";
+/**
+ * Extension URL stamped on the Patient body when the patient's
+ * default care setting is `facility`, carrying the Location id
+ * (mirrors the on-site EHR's `EXT_PATIENT_DEFAULT_CARE_LOCATION`
+ * constant).
+ */
+declare const PATIENT_DEFAULT_CARE_LOCATION_EXTENSION_URL = "https://on-site-medical.app/fhir/StructureDefinition/patient-default-care-location";
+/** Extension URL: patient residency admission date (facility-only). */
+declare const PATIENT_RESIDENCY_ADMISSION_DATE_EXTENSION_URL = "https://on-site-medical.app/fhir/StructureDefinition/patient-residency-admission-date";
+/** Extension URL: patient residency room number (facility-only). */
+declare const PATIENT_RESIDENCY_ROOM_EXTENSION_URL = "https://on-site-medical.app/fhir/StructureDefinition/patient-residency-room";
+/**
+ * Extension URL stamped on the Patient body recording which
+ * weekly scheduling block template the patient is assigned to
+ * (#1303 + #1304). Downstream tickets (#1306 — encounters per
+ * block occurrence) read this to fan out per-occurrence
+ * Encounter records. Intake-only patients (no block yet) omit
+ * the extension entirely.
+ */
+declare const PATIENT_ASSIGNED_BLOCK_TEMPLATE_EXTENSION_URL = "https://on-site-medical.app/fhir/StructureDefinition/patient-assigned-block-template";
+/**
+ * Root extension URL stamped on the Patient body recording the
+ * patient's hospice status (CMS hospice billing flag). Carries
+ * three sub-extensions (`status`, `effectiveDate`,
+ * `terminationDate`) mirroring the on-site Medicare form's
+ * hospice fields at
+ * `sites/app-ehr/src/fixtures/medicareForm.ts`. Only ~20% of
+ * patients carry this extension; the absence of the extension
+ * means the patient is not in hospice.
+ */
+declare const PATIENT_HOSPICE_STATUS_EXTENSION_URL = "https://on-site-medical.app/fhir/StructureDefinition/patient-hospice-status";
+/** Sub-extension URL under {@link PATIENT_HOSPICE_STATUS_EXTENSION_URL}. */
+declare const HOSPICE_STATUS_VALUE_SUB_EXTENSION_URL = "status";
+/** Sub-extension URL under {@link PATIENT_HOSPICE_STATUS_EXTENSION_URL}. */
+declare const HOSPICE_EFFECTIVE_DATE_SUB_EXTENSION_URL = "effectiveDate";
+/**
+ * Extension URL stamped on every primary Coverage body recording
+ * the most-recent verification timestamp. The on-site
+ * `VerificationHistoryTable` displays verification rows from this
+ * value (and from the Coverage's audit history downstream). The
+ * value is an ISO 8601 instant in UTC.
+ */
+declare const COVERAGE_VERIFICATION_DATE_EXTENSION_URL = "https://on-site-medical.app/fhir/StructureDefinition/coverage-verification-date";
+/**
+ * Root extension URL stamped on a Medicare-primary Coverage
+ * recording the QMB (Qualified Medicare Beneficiary) status.
+ * Carries `status` + `effectiveDate` sub-extensions mirroring
+ * the on-site Medicare form (`sites/app-ehr/src/fixtures/medicareForm.ts`).
+ * QMB only attaches to Medicare-primary patients — it is a
+ * Medicare program and is invalid on commercial-primary or
+ * Medicare-Advantage-primary coverages.
+ */
+declare const COVERAGE_QMB_STATUS_EXTENSION_URL = "https://on-site-medical.app/fhir/StructureDefinition/coverage-qmb-status";
+/** Sub-extension URL under {@link COVERAGE_QMB_STATUS_EXTENSION_URL}. */
+declare const QMB_STATUS_VALUE_SUB_EXTENSION_URL = "status";
+/** Sub-extension URL under {@link COVERAGE_QMB_STATUS_EXTENSION_URL}. */
+declare const QMB_EFFECTIVE_DATE_SUB_EXTENSION_URL = "effectiveDate";
+/**
+ * Payor codes the on-site app reads from Coverage.type.coding[0].
+ * The values mirror the labels used in the on-site Medicare and
+ * insurance forms. `medicare-advantage` is intentionally distinct
+ * from `medicare` — Medicare Advantage is a private-plan layer on
+ * top of Medicare and bills through different payor pathways.
+ */
+declare const COVERAGE_PAYOR_TYPE_SYSTEM = "https://on-site-medical.app/fhir/CodeSystem/coverage-payor-type";
+/** Payor type values written to {@link COVERAGE_PAYOR_TYPE_SYSTEM}. */
+declare const PAYOR_TYPE_COMMERCIAL = "commercial";
+/** Payor type values written to {@link COVERAGE_PAYOR_TYPE_SYSTEM}. */
+declare const PAYOR_TYPE_MEDICARE = "medicare";
+/** Payor type values written to {@link COVERAGE_PAYOR_TYPE_SYSTEM}. */
+declare const PAYOR_TYPE_MEDICARE_ADVANTAGE = "medicare-advantage";
+/**
+ * Lazily materialize the facility-patient Patient resources
+ * seeded into the on-site UAT demo workspace. Called by the
+ * fixture group when the seeder iterates `group.patients`.
+ */
+declare const buildOnSiteDemoFacilityPatients: () => ReadonlyArray<Patient>;
+/**
+ * Lazily materialize the facility-patient Coverage resources
+ * (primary + optional secondary) for the on-site UAT demo
+ * workspace. Called by the fixture group when the seeder
+ * iterates `group.coverages`.
+ */
+declare const buildOnSiteDemoFacilityCoverages: () => ReadonlyArray<Coverage>;
+/**
+ * Stable facility-patient ids in dispatch order. Lazy — call
+ * this from downstream tickets (e.g. #1306 — encounters per
+ * scheduled patient per block occurrence) instead of capturing
+ * the array at module load.
+ */
+declare const onSiteDemoFacilityPatientIds: () => ReadonlyArray<string>;
+/**
+ * Subset of {@link onSiteDemoFacilityPatientIds} whose patients
+ * are scheduled into a weekly block. Excludes the intake-only
+ * subset. Order matches `PATIENTS_PER_BLOCK` (all block-001
+ * patients first, then block-002, etc.).
+ */
+declare const onSiteDemoScheduledFacilityPatientIds: () => ReadonlyArray<string>;
+/**
+ * Subset of {@link onSiteDemoFacilityPatientIds} whose patients
+ * are intake-complete but not yet on a schedule. These patients
+ * have a facility assignment but no block reference and no
+ * Encounter records (downstream tickets must respect that
+ * absence).
+ */
+declare const onSiteDemoIntakeOnlyFacilityPatientIds: () => ReadonlyArray<string>;
+/**
+ * Look up the block template a facility patient is scheduled
+ * into, or `undefined` for intake-only patients.
+ */
+declare const findOnSiteDemoFacilityPatientBlock: (patientId: string) => string | undefined;
+/**
+ * List facility patients scheduled into a given block template
+ * id. Downstream tickets (encounters, scribe assignments) call
+ * this to fan out per-block work without re-deriving the
+ * mapping.
+ */
+declare const facilityPatientsForBlock: (blockTemplateId: string) => ReadonlyArray<string>;
+
+/**
+ * @see sites/www-docs/content/packages/@openhi/constructs/workflows/control-plane/seed-demo-data/on-site-demo-fixtures.md
+ *
+ * Hand-authored Practitioner fixtures the `seed-demo-data` workflow
+ * upserts into the on-site-medical UAT demo tenant
+ * ({@link ON_SITE_DEMO_TENANT_ID} + {@link ON_SITE_DEMO_WORKSPACE_ID})
+ * on every non-prod deploy. Issue #1302 — the on-site repo's facility
+ * blocks, home-health visits, and encounter records need a realistic
+ * pool of doctors and scribes to reference.
+ *
+ * Two sets are seeded:
+ *   - {@link ON_SITE_DEMO_DOCTORS} — ten Practitioners with
+ *     `qualification[0].code.text = "Physician"`. The first five carry
+ *     a `home-health-eligible` boolean extension set to `true` so the
+ *     on-site UI can filter the home-health-eligible subset for
+ *     home-visit scheduling.
+ *   - {@link ON_SITE_DEMO_SCRIBES} — five Practitioners with
+ *     `qualification[0].code.text = "Scribe"`. Scribes share the
+ *     Practitioner resource shape with doctors so the on-site
+ *     practitioner CRUD form can edit both without a new resource
+ *     type; the `qualification` value distinguishes the role.
+ *
+ * Field set matches what the on-site provider form expects today
+ * (`sites/app-ehr/src/pages/admin/AdminPractitionerFormPage.tsx`):
+ *   - `name[0]` — given + family + text
+ *   - `qualification[0].code.text` — role label
+ *   - `active`
+ *   - `gender`, `birthDate`
+ *   - `telecom[]` — phone (E.164) + email
+ *   - `identifier[0]` — NPI (US national provider identifier)
+ *   - `address[0]` — line / city / state / postalCode / country
+ *   - `extension[]` — home-health-eligible boolean (doctors only)
+ *
+ * Ids are deterministic — re-fires upsert the same records, matching
+ * the workflow's idempotency contract. Adding or renaming a Practitioner
+ * is a one-line edit here plus a redeploy.
+ */
+/** FHIR `Identifier.system` for the US NPI (National Provider Identifier). */
+declare const US_NPI_SYSTEM = "http://hl7.org/fhir/sid/us-npi";
+/**
+ * Extension URL stamped on a Practitioner body when the practitioner
+ * is approved to take home-health visits. Mirrors the on-site repo's
+ * convention (`https://on-site-medical.app/fhir/StructureDefinition/*`)
+ * — the on-site UI can pick this extension up directly without a
+ * schema change. Boolean `valueBoolean: true` means eligible.
+ */
+declare const HOME_HEALTH_ELIGIBLE_EXTENSION_URL = "https://on-site-medical.app/fhir/StructureDefinition/home-health-eligible";
+/** Practitioner.qualification code-text for a physician (matches on-site form). */
+declare const PRACTITIONER_ROLE_PHYSICIAN = "Physician";
+/** Practitioner.qualification code-text for a scribe. */
+declare const PRACTITIONER_ROLE_SCRIBE = "Scribe";
+/** FHIR `Identifier.system` for internal on-site staff ids (non-NPI). */
+declare const ON_SITE_STAFF_ID_SYSTEM = "https://on-site-medical.app/fhir/sid/staff-id";
+/** Demo doctors seeded into the on-site UAT demo workspace. */
+declare const ON_SITE_DEMO_DOCTORS: ReadonlyArray<Practitioner>;
+/** Demo scribes seeded into the on-site UAT demo workspace. */
+declare const ON_SITE_DEMO_SCRIBES: ReadonlyArray<Practitioner>;
+/** Stable doctor ids in dispatch order. Re-exported for downstream tickets. */
+declare const ON_SITE_DEMO_DOCTOR_IDS: ReadonlyArray<string>;
+/** Stable scribe ids in dispatch order. Re-exported for downstream tickets. */
+declare const ON_SITE_DEMO_SCRIBE_IDS: ReadonlyArray<string>;
+/**
+ * Subset of {@link ON_SITE_DEMO_DOCTORS} flagged as home-health-eligible
+ * (via the {@link HOME_HEALTH_ELIGIBLE_EXTENSION_URL} extension on the
+ * Practitioner body). Downstream tickets (home-health visit scheduling,
+ * facility-block fixtures) use this helper to attach realistic providers
+ * to home-visit-only encounters without re-reading the extension list.
+ */
+declare const homeHealthEligibleDoctors: () => ReadonlyArray<Practitioner>;
+/**
+ * Fixture group the seeder writes into the on-site UAT demo workspace.
+ * Carries practitioners (doctors + scribes — #1302), facilities
+ * (#1303), recurring weekly block Appointments (#1303), facility
+ * patients + their insurance Coverages (#1304), home-health
+ * patients + their insurance Coverages (#1305), historical
+ * encounters / wounds / wound observations / wound debridement
+ * procedures (#1306), and claims + payment notices tied to those
+ * encounters (#1307). Accounts for this tenant are owned by later
+ * tickets.
+ *
+ * `buildAppointments` is dynamic so the recurring block occurrences
+ * anchor to the ISO week containing the seeder's `baseContext.date`
+ * — re-fires on the same date produce byte-identical Appointment ids,
+ * and re-fires on a later date roll the window forward without
+ * duplicating prior weeks' records.
+ */
+declare const ON_SITE_DEMO_FIXTURES: DemoWorkspaceDataPlaneFixtures;
+
+/**
+ * @see sites/www-docs/content/packages/@openhi/constructs/workflows/control-plane/seed-demo-data/on-site-demo-home-health-patients.md
+ *
+ * Hand-authored home-health Patient + Coverage fixtures the
+ * `seed-demo-data` workflow upserts into the on-site-medical UAT
+ * demo tenant ({@link ON_SITE_DEMO_TENANT_ID} +
+ * {@link ON_SITE_DEMO_WORKSPACE_ID}) on every non-prod deploy
+ * (issue #1305).
+ *
+ * Topology — issue #1305 design:
+ *   - 20 home-health patients total. None are assigned to a
+ *     facility — `patient-default-care-setting` is `home`
+ *     (mirrors the on-site EHR's `LocationClassification = "home"`
+ *     at `sites/app-ehr/src/utils/patient/patientDefaultCareSetting.ts`),
+ *     and the `patient-default-care-location` extension is
+ *     intentionally omitted (home patients have no Location
+ *     reference).
+ *   - 17 patients are scheduled to a home-health-eligible doctor
+ *     (see {@link homeHealthEligibleDoctors}) with a recurring
+ *     visit cadence. Doctor assignment is a deterministic
+ *     round-robin over the 5 home-health-eligible doctors.
+ *   - 3 patients are intake-complete-but-not-yet-scheduled —
+ *     they carry a home address + care-context = home but have
+ *     no provider assignment and no visit cadence (the on-site
+ *     UI state for a brand-new home-health intake that hasn't
+ *     been put on the calendar yet).
+ *
+ * Insurance is identical to the facility-patient rules (#1304):
+ *   - Every patient gets a primary Coverage with
+ *     `status: "active"` and a verification date.
+ *   - A subset (~40%) gets a secondary Coverage.
+ *   - Payor mix: commercial / Medicare / Medicare Advantage.
+ *   - QMB only attaches to Medicare-primary patients.
+ *   - ~20% of patients carry the `patient-hospice-status`
+ *     extension on the Patient resource.
+ *
+ * Modelling choice — visit cadence. On-site has no formal
+ * home-health visit cadence schema today (the `REPEAT_OPTIONS`
+ * at `sites/app-ehr/src/features/calendar/components/eventPopoverUtils.ts`
+ * are calendar-level recurrences, not patient-level cadences).
+ * Each scheduled home-health patient therefore carries a simple
+ * `home-health-visit-cadence-days` valueInteger extension with
+ * a value drawn from the set 7 / 14 / 28 — weekly / bi-weekly /
+ * monthly — distributed deterministically across the roster so
+ * the UAT tenant exercises all three cadences. Intake-only
+ * patients omit the extension entirely.
+ *
+ * Modelling choice — provider assignment. The home-health
+ * analogue of the facility-patient's block reference is a
+ * `patient-assigned-home-health-provider` `valueReference`
+ * pointing at `Practitioner/<doctor-id>`. Downstream tickets
+ * (#1306 — encounters) read this reference to fan out per-
+ * patient visit Encounters. Intake-only patients omit the
+ * extension (no provider yet → no encounters).
+ *
+ * Ids are deterministic — re-fires upsert the same records,
+ * matching the workflow's idempotency contract. Adding,
+ * renaming, or moving a patient is a one-line edit here plus a
+ * redeploy.
+ */
+/**
+ * Extension URL stamped on a home-health Patient body recording
+ * the {@link Practitioner} id of the home-health-eligible doctor
+ * the patient is currently scheduled with. Carries a
+ * `valueReference` shaped `{ reference: "Practitioner/<id>" }`.
+ * Intake-only patients omit this extension.
+ */
+declare const PATIENT_ASSIGNED_HOME_HEALTH_PROVIDER_EXTENSION_URL = "https://on-site-medical.app/fhir/StructureDefinition/patient-assigned-home-health-provider";
+/**
+ * Extension URL stamped on a home-health Patient body recording
+ * the patient's recurring visit cadence in days. The value is a
+ * `valueInteger` drawn from {@link HOME_HEALTH_VISIT_CADENCE_OPTIONS}
+ * — weekly (7), bi-weekly (14), or monthly (28). On-site has no
+ * formal cadence schema today, so this denormalised extension
+ * captures the visit interval directly on the Patient body until
+ * the on-site team picks a permanent shape. Intake-only patients
+ * omit this extension.
+ */
+declare const HOME_HEALTH_VISIT_CADENCE_DAYS_EXTENSION_URL = "https://on-site-medical.app/fhir/StructureDefinition/home-health-visit-cadence-days";
+/**
+ * Allowed visit-cadence day values. Roughly weekly / bi-weekly /
+ * monthly — enough variation for UAT to exercise distinct
+ * cadences in the calendar without modelling every possible
+ * interval.
+ */
+declare const HOME_HEALTH_VISIT_CADENCE_OPTIONS: ReadonlyArray<number>;
+/** Total home-health patients seeded. */
+declare const TOTAL_HOME_HEALTH_PATIENTS: number;
+/**
+ * Lazily materialize the home-health Patient resources seeded
+ * into the on-site UAT demo workspace. Called by the fixture
+ * group when the seeder iterates `group.buildPatients()`.
+ */
+declare const buildOnSiteDemoHomeHealthPatients: () => ReadonlyArray<Patient>;
+/**
+ * Lazily materialize the home-health Coverage resources
+ * (primary + optional secondary) for the on-site UAT demo
+ * workspace.
+ */
+declare const buildOnSiteDemoHomeHealthCoverages: () => ReadonlyArray<Coverage>;
+/**
+ * Stable home-health-patient ids in dispatch order. Lazy — call
+ * this from downstream tickets (e.g. #1306 — encounters per
+ * scheduled home-health visit) instead of capturing the array
+ * at module load.
+ */
+declare const onSiteDemoHomeHealthPatientIds: () => ReadonlyArray<string>;
+/**
+ * Subset of {@link onSiteDemoHomeHealthPatientIds} whose
+ * patients are scheduled with a home-health-eligible provider +
+ * visit cadence. Excludes the intake-only subset.
+ */
+declare const onSiteDemoScheduledHomeHealthPatientIds: () => ReadonlyArray<string>;
+/**
+ * Subset of {@link onSiteDemoHomeHealthPatientIds} whose
+ * patients are intake-complete but not yet on a schedule. These
+ * patients carry a home address + care-context = home but no
+ * provider, no cadence, and (per #1306) no Encounter records.
+ */
+declare const onSiteDemoIntakeOnlyHomeHealthPatientIds: () => ReadonlyArray<string>;
+/**
+ * Look up the home-health-eligible provider assigned to a given
+ * home-health patient, or `undefined` for intake-only patients.
+ * Downstream tickets (encounters per scheduled visit) call this
+ * to fan out per-patient encounter records.
+ */
+declare const findOnSiteDemoHomeHealthPatientProvider: (patientId: string) => string | undefined;
+/**
+ * Look up the visit cadence (in days) for a given home-health
+ * patient, or `undefined` for intake-only patients.
+ */
+declare const findOnSiteDemoHomeHealthPatientVisitCadenceDays: (patientId: string) => number | undefined;
+
 interface SeedDemoDataLambdaProps {
     /**
      * Data-store table the workflow upserts demo-data records into.
@@ -2377,6 +3625,24 @@ declare class OpenHiDataService extends OpenHiService {
      * target; the construct itself never checks the stage.
      */
     readonly seedDemoDataWorkflow?: SeedDemoDataWorkflow;
+    /**
+     * ADR-028 counter-maintenance workflow. Subscribes to the
+     * control-plane membership / role-assignment / workspace lifecycle
+     * events on the control event bus and maintains the denormalized
+     * counters on the canonical Tenant / Workspace / User records via
+     * idempotent atomic ADD. Mounted on every stage (the admin console
+     * reads these counters in prod as well as non-prod).
+     */
+    readonly counterMaintenanceWorkflow: CounterMaintenanceWorkflow;
+    /**
+     * ADR-028 counter-reconciliation job (#1319). An on-demand Lambda that
+     * recomputes the denormalized counters from canonical data and repairs
+     * any drift the event-driven counter-maintenance path missed
+     * (dropped / replayed events, rows that predate the counter work).
+     * Mounted on every stage; invoked manually or by a separately-wired
+     * schedule — it has no EventBridge trigger of its own.
+     */
+    readonly counterReconciliationWorkflow: CounterReconciliationWorkflow;
     /**
      * Cached control-event-bus lookup. `OpenHiGlobalService.controlEventBusFromConstruct`
      * registers a child `EventBus.fromEventBusName` construct with a
@@ -2405,6 +3671,19 @@ declare class OpenHiDataService extends OpenHiService {
      * does not exist in prod stacks. Override to customize.
      */
     protected createSeedDemoDataWorkflow(): SeedDemoDataWorkflow | undefined;
+    /**
+     * Creates the ADR-028 counter-maintenance workflow. Override to
+     * customize. Mounted on every stage — the denormalized counters back
+     * the admin console list columns in prod and non-prod alike.
+     */
+    protected createCounterMaintenanceWorkflow(): CounterMaintenanceWorkflow;
+    /**
+     * Creates the ADR-028 counter-reconciliation job (#1319). Override to
+     * customize. Mounted on every stage — the recompute-and-repair backstop
+     * is the correctness authority for the denormalized counters in prod
+     * and non-prod alike. On-demand only (no EventBridge trigger).
+     */
+    protected createCounterReconciliationWorkflow(): CounterReconciliationWorkflow;
     /**
      * Creates the single-table DynamoDB data store.
      * Override to customize.
@@ -2922,4 +4201,4 @@ declare class RenameCascadeWorkflow extends Construct {
     constructor(scope: Construct, props: RenameCascadeWorkflowProps);
 }
 
-export { ADMIN_DOMAIN_PREFIX, type BuildParameterNameProps, ChildHostedZone, type ChildHostedZoneProps, CognitoUserPool, CognitoUserPoolClient, CognitoUserPoolDomain, CognitoUserPoolKmsKey, type ComposeServiceDomainOptions, type ComputeBranchHashOptions, ControlEventBus, DATA_STORE_CHANGE_DETAIL_MAX_UTF8_BYTES, DATA_STORE_CHANGE_DETAIL_TYPE, DEFAULT_PREVIEW_EXPIRATION_DAYS, DEMO_DATA_PLANE_FIXTURES, DEV_CORS_ALLOW_ORIGINS, DataEventBus, type DataEventBusOptions, DataStoreHistoricalArchive, type DataStoreHistoricalArchiveProps, DataStorePostgresReplica, type DataStorePostgresReplicaProps, type DemoWorkspaceDataPlaneFixtures, DiscoverableStringParameter, type DiscoverableStringParameterProps, DynamoDbDataStore, type DynamoDbDataStoreProps, type FhirCurrentResourceChangeDetail, type GrantConsumerOptions, HostingMode, LOCALHOST_OAUTH_CALLBACK_URLS, LOCALHOST_OAUTH_LOGOUT_URLS, OPENHI_TAG_SUFFIX_BRANCH_NAME, OPENHI_TAG_SUFFIX_REPO_NAME, OPENHI_TAG_SUFFIX_SERVICE_TYPE, OPENHI_TAG_SUFFIX_STAGE_TYPE, OpenHiApp, type OpenHiAppProps, OpenHiAuthService, type OpenHiAuthServiceProps, OpenHiDataService, type OpenHiDataServiceProps, OpenHiEnvironment, type OpenHiEnvironmentProps, OpenHiGlobalService, type OpenHiGlobalServiceProps, OpenHiGraphqlService, type OpenHiGraphqlServiceProps, OpenHiRestApiService, type OpenHiRestApiServiceProps, OpenHiService, type OpenHiServiceProps, type OpenHiServiceType, OpenHiStage, type OpenHiStageProps, OpenHiWebsiteService, type OpenHiWebsiteServiceProps, OpsEventBus, OwningDeleteCascadeLambdas, type OwningDeleteCascadeLambdasProps, OwningDeleteCascadeWorkflow, type OwningDeleteCascadeWorkflowProps, PER_BRANCH_PREVIEW_PREFIX, PLATFORM_SCOPE_TENANT_ID, POSTGRES_REPLICA_CLUSTER_ARN_SSM_NAME, POSTGRES_REPLICA_DATABASE_NAME_SSM_NAME, POSTGRES_REPLICA_SECRET_ARN_SSM_NAME, PerBranchHostname, type PerBranchHostnameProps, PlatformDeployBridge, PlatformDeployBridgeLambda, type PlatformDeployBridgeLambdaProps, type PlatformDeployBridgeProps, PostAuthenticationLambda, PostConfirmationLambda, type PostConfirmationLambdaProps, PreTokenGenerationLambda, type PreTokenGenerationLambdaProps, ProvisionDefaultWorkspaceLambda, type ProvisionDefaultWorkspaceLambdaProps, REST_API_BASE_URL_SSM_NAME, REST_API_DOMAIN_NAME_SSM_NAME, RenameCascadeLambdas, type RenameCascadeLambdasProps, RenameCascadeWorkflow, type RenameCascadeWorkflowProps, RootGraphqlApi, type RootGraphqlApiProps, RootHostedZone, RootHttpApi, type RootHttpApiProps, RootWildcardCertificate, SEED_SYSTEM_DATA_ACTOR_SYSTEM, SEED_SYSTEM_DATA_CONSUMER_NAME, SEED_SYSTEM_DATA_CONTROL_BUS_ENV_VAR, SSM_PARAM_NAME_FULL_DOMAIN, STATIC_HOSTING_SERVICE_TYPE, SeedDemoDataLambda, type SeedDemoDataLambdaProps, SeedDemoDataWorkflow, type SeedDemoDataWorkflowProps, SeedSystemDataLambda, type SeedSystemDataLambdaProps, SeedSystemDataWorkflow, type SeedSystemDataWorkflowProps, StaticContent, type StaticContentProps, StaticHosting, type StaticHostingProps, UserOnboardingWorkflow, type UserOnboardingWorkflowProps, WorkflowDedupConsumerNameInvalidError, WorkflowDedupTable, WorkflowDedupTableDuplicateError, type WorkflowDedupTableProps, buildFhirCurrentResourceChangeDetail, computeBranchHash, getDynamoDbDataStoreTableName, getPostgresReplicaSchemaName, getWorkflowDedupTableName, openHiTagKey };
+export { ADMIN_DOMAIN_PREFIX, BLOCK_OCCURRENCES_PER_TEMPLATE, BLOCK_OCCURRENCE_WEEKS_FUTURE, BLOCK_OCCURRENCE_WEEKS_PAST, type BuildParameterNameProps, CLAIM_WORKFLOW_STATUS, CLAIM_WORKFLOW_STATUS_EXTENSION_URL, CLAIM_WORKFLOW_STATUS_LAST_TRANSITION_SUB_EXTENSION_URL, CLAIM_WORKFLOW_STATUS_VALUE_SUB_EXTENSION_URL, CONDITION_CLINICAL_STATUS_SYSTEM, COUNTER_MAINTENANCE_CONSUMER_NAME, COUNTER_MAINTENANCE_DETAIL_TYPES, COVERAGE_PAYOR_TYPE_SYSTEM, COVERAGE_QMB_STATUS_EXTENSION_URL, COVERAGE_VERIFICATION_DATE_EXTENSION_URL, CPT_SYSTEM, CREDENTIALING_STATUS, ChildHostedZone, type ChildHostedZoneProps, type ClaimWorkflowStatus, CognitoUserPool, CognitoUserPoolClient, CognitoUserPoolDomain, CognitoUserPoolKmsKey, type ComposeServiceDomainOptions, type ComputeBranchHashOptions, ControlEventBus, CounterMaintenanceLambda, type CounterMaintenanceLambdaProps, CounterMaintenanceWorkflow, type CounterMaintenanceWorkflowProps, CounterReconciliationLambda, type CounterReconciliationLambdaProps, CounterReconciliationWorkflow, type CounterReconciliationWorkflowProps, type CredentialingStatus, DATA_STORE_CHANGE_DETAIL_MAX_UTF8_BYTES, DATA_STORE_CHANGE_DETAIL_TYPE, DEFAULT_PREVIEW_EXPIRATION_DAYS, DEMO_DATA_PLANE_FIXTURES, DEV_CORS_ALLOW_ORIGINS, DIRECTOR_OF_NURSING_EMAIL_EXTENSION_URL, DIRECTOR_OF_NURSING_EXTENSION_URL, DIRECTOR_OF_NURSING_NAME_EXTENSION_URL, DIRECTOR_OF_NURSING_PHONE_EXTENSION_URL, DME_SUPPLIER_CATEGORY_CODE, DataEventBus, type DataEventBusOptions, DataStoreHistoricalArchive, type DataStoreHistoricalArchiveProps, DataStorePostgresReplica, type DataStorePostgresReplicaProps, type DemoWorkspaceDataPlaneFixtures, DiscoverableStringParameter, type DiscoverableStringParameterProps, DynamoDbDataStore, type DynamoDbDataStoreProps, ENCOUNTER_CLASS_FACILITY, ENCOUNTER_CLASS_HOME_HEALTH, ENCOUNTER_CLASS_SYSTEM, FHIR_ORGANIZATION_TYPE_SYSTEM, type FhirCurrentResourceChangeDetail, type GrantConsumerOptions, HOME_HEALTH_ELIGIBLE_EXTENSION_URL, HOME_HEALTH_VISITS_PAST, HOME_HEALTH_VISIT_CADENCE_DAYS_EXTENSION_URL, HOME_HEALTH_VISIT_CADENCE_OPTIONS, HOSPICE_EFFECTIVE_DATE_SUB_EXTENSION_URL, HOSPICE_STATUS_VALUE_SUB_EXTENSION_URL, HostingMode, INSURANCE_PAYOR_CATEGORY_CODE, INSURANCE_PAYOR_PLAN_TYPE_SYSTEM, type IsoDayOfWeek, LOCALHOST_OAUTH_CALLBACK_URLS, LOCALHOST_OAUTH_LOGOUT_URLS, LOINC_SYSTEM, ON_SITE_APPOINTMENT_TYPE_SYSTEM, ON_SITE_DEMO_BLOCK_CAPACITY_EXTENSION_URL, ON_SITE_DEMO_BLOCK_TEMPLATE_IDS, ON_SITE_DEMO_DIRECTORY_ORGANIZATIONS, ON_SITE_DEMO_DME_SUPPLIERS, ON_SITE_DEMO_DOCTORS, ON_SITE_DEMO_DOCTOR_IDS, ON_SITE_DEMO_FACILITIES, ON_SITE_DEMO_FACILITY_IDS, ON_SITE_DEMO_FIXTURES, ON_SITE_DEMO_INSURANCE_PAYORS, ON_SITE_DEMO_SCRIBES, ON_SITE_DEMO_SCRIBE_IDS, ON_SITE_DIRECTORY_CATEGORY_SYSTEM, ON_SITE_STAFF_ID_SYSTEM, OPENHI_TAG_SUFFIX_BRANCH_NAME, OPENHI_TAG_SUFFIX_REPO_NAME, OPENHI_TAG_SUFFIX_SERVICE_TYPE, OPENHI_TAG_SUFFIX_STAGE_TYPE, type OnSiteDemoEncounterMetadata, OpenHiApp, type OpenHiAppProps, OpenHiAuthService, type OpenHiAuthServiceProps, OpenHiDataService, type OpenHiDataServiceProps, OpenHiEnvironment, type OpenHiEnvironmentProps, OpenHiGlobalService, type OpenHiGlobalServiceProps, OpenHiGraphqlService, type OpenHiGraphqlServiceProps, OpenHiRestApiService, type OpenHiRestApiServiceProps, OpenHiService, type OpenHiServiceProps, type OpenHiServiceType, OpenHiStage, type OpenHiStageProps, OpenHiWebsiteService, type OpenHiWebsiteServiceProps, OpsEventBus, OwningDeleteCascadeLambdas, type OwningDeleteCascadeLambdasProps, OwningDeleteCascadeWorkflow, type OwningDeleteCascadeWorkflowProps, PATIENT_ASSIGNED_BLOCK_TEMPLATE_EXTENSION_URL, PATIENT_ASSIGNED_HOME_HEALTH_PROVIDER_EXTENSION_URL, PATIENT_DEFAULT_CARE_LOCATION_EXTENSION_URL, PATIENT_DEFAULT_CARE_SETTING_EXTENSION_URL, PATIENT_HOSPICE_STATUS_EXTENSION_URL, PATIENT_RESIDENCY_ADMISSION_DATE_EXTENSION_URL, PATIENT_RESIDENCY_ROOM_EXTENSION_URL, PAYMENT_STATUS, PAYMENT_STATUS_SYSTEM, PAYOR_PLAN_TYPE_COMMERCIAL, PAYOR_PLAN_TYPE_MEDICARE, PAYOR_PLAN_TYPE_MEDICARE_ADVANTAGE, PAYOR_TYPE_COMMERCIAL, PAYOR_TYPE_MEDICARE, PAYOR_TYPE_MEDICARE_ADVANTAGE, PER_BRANCH_PREVIEW_PREFIX, PLATFORM_SCOPE_TENANT_ID, POSTGRES_REPLICA_CLUSTER_ARN_SSM_NAME, POSTGRES_REPLICA_DATABASE_NAME_SSM_NAME, POSTGRES_REPLICA_SECRET_ARN_SSM_NAME, PRACTITIONER_CREDENTIALING_EXTENSION_URL, PRACTITIONER_CREDENTIALING_STATE_SUB_EXTENSION_URL, PRACTITIONER_CREDENTIALING_STATUS_SUB_EXTENSION_URL, PRACTITIONER_ROLE_PHYSICIAN, PRACTITIONER_ROLE_SCRIBE, type PaymentStatus, type PayorPlanType, PerBranchHostname, type PerBranchHostnameProps, PlatformDeployBridge, PlatformDeployBridgeLambda, type PlatformDeployBridgeLambdaProps, type PlatformDeployBridgeProps, PostAuthenticationLambda, PostConfirmationLambda, type PostConfirmationLambdaProps, type PractitionerCredentialingSpec, PreTokenGenerationLambda, type PreTokenGenerationLambdaProps, ProvisionDefaultWorkspaceLambda, type ProvisionDefaultWorkspaceLambdaProps, QMB_EFFECTIVE_DATE_SUB_EXTENSION_URL, QMB_STATUS_VALUE_SUB_EXTENSION_URL, REST_API_BASE_URL_SSM_NAME, REST_API_DOMAIN_NAME_SSM_NAME, RenameCascadeLambdas, type RenameCascadeLambdasProps, RenameCascadeWorkflow, type RenameCascadeWorkflowProps, RootGraphqlApi, type RootGraphqlApiProps, RootHostedZone, RootHttpApi, type RootHttpApiProps, RootWildcardCertificate, SEED_SYSTEM_DATA_ACTOR_SYSTEM, SEED_SYSTEM_DATA_CONSUMER_NAME, SEED_SYSTEM_DATA_CONTROL_BUS_ENV_VAR, SNOMED_SYSTEM, SSM_PARAM_NAME_FULL_DOMAIN, STATE_MEDICAL_LICENSE_SYSTEM, STATIC_HOSTING_SERVICE_TYPE, SeedDemoDataLambda, type SeedDemoDataLambdaProps, SeedDemoDataWorkflow, type SeedDemoDataWorkflowProps, SeedSystemDataLambda, type SeedSystemDataLambdaProps, SeedSystemDataWorkflow, type SeedSystemDataWorkflowProps, StaticContent, type StaticContentProps, StaticHosting, type StaticHostingProps, TOTAL_HOME_HEALTH_PATIENTS, US_NPI_SYSTEM, UserOnboardingWorkflow, type UserOnboardingWorkflowProps, WOUND_DEPTH_CODE, WOUND_EXAM_PANEL_CODE, WOUND_EXAM_PANEL_DISPLAY, WOUND_LENGTH_CODE, WOUND_STATUS_CODE, WOUND_WIDTH_CODE, WorkflowDedupConsumerNameInvalidError, WorkflowDedupTable, WorkflowDedupTableDuplicateError, type WorkflowDedupTableProps, __resetOnSiteDemoClaimCachesForTests, __resetOnSiteDemoEncounterCachesForTests, buildCredentialingQualifications, buildFhirCurrentResourceChangeDetail, buildOnSiteDemoBlockAppointments, buildOnSiteDemoClaims, buildOnSiteDemoEncounters, buildOnSiteDemoFacilityCoverages, buildOnSiteDemoFacilityPatients, buildOnSiteDemoHomeHealthCoverages, buildOnSiteDemoHomeHealthPatients, buildOnSiteDemoPaymentNotices, buildOnSiteDemoWoundConditions, buildOnSiteDemoWoundObservations, buildOnSiteDemoWoundProcedures, computeBranchHash, facilityPatientsForBlock, findOnSiteDemoBlockTemplate, findOnSiteDemoFacilityPatientBlock, findOnSiteDemoHomeHealthPatientProvider, findOnSiteDemoHomeHealthPatientVisitCadenceDays, getDynamoDbDataStoreTableName, getPostgresReplicaSchemaName, getWorkflowDedupTableName, homeHealthEligibleDoctors, onSiteDemoBilledEncounterIds, onSiteDemoClaimIds, onSiteDemoDmeSupplierIds, onSiteDemoEncounterIds, onSiteDemoEncounterMetadata, onSiteDemoEncountersForPatient, onSiteDemoFacilityPatientIds, onSiteDemoHomeHealthPatientIds, onSiteDemoInsurancePayorIds, onSiteDemoIntakeOnlyFacilityPatientIds, onSiteDemoIntakeOnlyHomeHealthPatientIds, onSiteDemoPaymentNoticeIds, onSiteDemoScheduledFacilityPatientIds, onSiteDemoScheduledHomeHealthPatientIds, onSiteDemoUnbilledEncounterIds, onSiteDemoWoundBearingPatientIds, onSiteDemoWoundProcedurePatientIds, openHiTagKey, practitionerCredentialingForDoctor, practitionerCredentialingForState, woundConditionIdForPatient };