@openhi/constructs 0.0.159 → 0.0.161

package/lib/index.mjs

@@ -1,3 +1,11 @@
+import {
+  RENAME_CASCADE_CONSUMER_NAME,
+  RENAME_CASCADE_DEFAULT_CONCURRENCY,
+  RENAME_CASCADE_FAILED_THRESHOLD,
+  RENAME_CASCADE_OPS_EVENT_BUS_ENV_VAR,
+  RENAME_CASCADE_SLOW_THRESHOLD_SECONDS,
+  import_workflows as import_workflows5
+} from "./chunk-D2Y6DDOC.mjs";
 import {
   DATA_STORE_CHANGE_DETAIL_MAX_UTF8_BYTES,
   DATA_STORE_CHANGE_DETAIL_TYPE,
@@ -7,42 +15,159 @@ import {
   SEED_SYSTEM_DATA_ACTOR_SYSTEM,
   SEED_SYSTEM_DATA_CONSUMER_NAME,
   SEED_SYSTEM_DATA_CONTROL_BUS_ENV_VAR,
-  import_workflows as import_workflows2
-} from "./chunk-WPCBVDFZ.mjs";
+  import_workflows as import_workflows3
+} from "./chunk-76UM2LQ5.mjs";
 import {
+  BLOCK_OCCURRENCES_PER_TEMPLATE,
+  BLOCK_OCCURRENCE_WEEKS_FUTURE,
+  BLOCK_OCCURRENCE_WEEKS_PAST,
+  CLAIM_WORKFLOW_STATUS,
+  CLAIM_WORKFLOW_STATUS_EXTENSION_URL,
+  CLAIM_WORKFLOW_STATUS_LAST_TRANSITION_SUB_EXTENSION_URL,
+  CLAIM_WORKFLOW_STATUS_VALUE_SUB_EXTENSION_URL,
+  CONDITION_CLINICAL_STATUS_SYSTEM,
+  COVERAGE_PAYOR_TYPE_SYSTEM,
+  COVERAGE_QMB_STATUS_EXTENSION_URL,
+  COVERAGE_VERIFICATION_DATE_EXTENSION_URL,
+  CPT_SYSTEM,
+  CREDENTIALING_STATUS,
   DEMO_DATA_PLANE_FIXTURES,
   DEMO_PERIOD,
   DEMO_TENANT_SPECS,
   DEMO_URN_SYSTEM,
   DEV_USERS,
+  DIRECTOR_OF_NURSING_EMAIL_EXTENSION_URL,
+  DIRECTOR_OF_NURSING_EXTENSION_URL,
+  DIRECTOR_OF_NURSING_NAME_EXTENSION_URL,
+  DIRECTOR_OF_NURSING_PHONE_EXTENSION_URL,
+  DME_SUPPLIER_CATEGORY_CODE,
+  ENCOUNTER_CLASS_FACILITY,
+  ENCOUNTER_CLASS_HOME_HEALTH,
+  ENCOUNTER_CLASS_SYSTEM,
+  FHIR_ORGANIZATION_TYPE_SYSTEM,
+  HOME_HEALTH_ELIGIBLE_EXTENSION_URL,
+  HOME_HEALTH_VISITS_PAST,
+  HOME_HEALTH_VISIT_CADENCE_DAYS_EXTENSION_URL,
+  HOME_HEALTH_VISIT_CADENCE_OPTIONS,
+  HOSPICE_EFFECTIVE_DATE_SUB_EXTENSION_URL,
+  HOSPICE_STATUS_VALUE_SUB_EXTENSION_URL,
+  INSURANCE_PAYOR_CATEGORY_CODE,
+  INSURANCE_PAYOR_PLAN_TYPE_SYSTEM,
+  LOINC_SYSTEM,
+  ON_SITE_APPOINTMENT_TYPE_SYSTEM,
+  ON_SITE_DEMO_BLOCK_CAPACITY_EXTENSION_URL,
+  ON_SITE_DEMO_BLOCK_TEMPLATE_IDS,
+  ON_SITE_DEMO_DIRECTORY_ORGANIZATIONS,
+  ON_SITE_DEMO_DME_SUPPLIERS,
+  ON_SITE_DEMO_DOCTORS,
+  ON_SITE_DEMO_DOCTOR_IDS,
+  ON_SITE_DEMO_FACILITIES,
+  ON_SITE_DEMO_FACILITY_IDS,
+  ON_SITE_DEMO_FIXTURES,
+  ON_SITE_DEMO_INSURANCE_PAYORS,
+  ON_SITE_DEMO_SCRIBES,
+  ON_SITE_DEMO_SCRIBE_IDS,
+  ON_SITE_DEMO_TENANT_ID,
+  ON_SITE_DEMO_WORKSPACE_ID,
+  ON_SITE_DIRECTORY_CATEGORY_SYSTEM,
+  ON_SITE_STAFF_ID_SYSTEM,
   OPENHI_RESOURCE_URN_SYSTEM,
+  PATIENT_ASSIGNED_BLOCK_TEMPLATE_EXTENSION_URL,
+  PATIENT_ASSIGNED_HOME_HEALTH_PROVIDER_EXTENSION_URL,
+  PATIENT_DEFAULT_CARE_LOCATION_EXTENSION_URL,
+  PATIENT_DEFAULT_CARE_SETTING_EXTENSION_URL,
+  PATIENT_HOSPICE_STATUS_EXTENSION_URL,
+  PATIENT_RESIDENCY_ADMISSION_DATE_EXTENSION_URL,
+  PATIENT_RESIDENCY_ROOM_EXTENSION_URL,
+  PAYMENT_STATUS,
+  PAYMENT_STATUS_SYSTEM,
+  PAYOR_PLAN_TYPE_COMMERCIAL,
+  PAYOR_PLAN_TYPE_MEDICARE,
+  PAYOR_PLAN_TYPE_MEDICARE_ADVANTAGE,
+  PAYOR_TYPE_COMMERCIAL,
+  PAYOR_TYPE_MEDICARE,
+  PAYOR_TYPE_MEDICARE_ADVANTAGE,
   PLACEHOLDER_TENANT_ID,
   PLACEHOLDER_WORKSPACE_ID,
+  PRACTITIONER_CREDENTIALING_EXTENSION_URL,
+  PRACTITIONER_CREDENTIALING_STATE_SUB_EXTENSION_URL,
+  PRACTITIONER_CREDENTIALING_STATUS_SUB_EXTENSION_URL,
+  PRACTITIONER_ROLE_PHYSICIAN,
+  PRACTITIONER_ROLE_SCRIBE,
+  QMB_EFFECTIVE_DATE_SUB_EXTENSION_URL,
+  QMB_STATUS_VALUE_SUB_EXTENSION_URL,
   SEED_DEMO_DATA_CONSUMER_NAME,
   SEED_DEMO_DATA_USER_POOL_ID_ENV_VAR,
+  SNOMED_SYSTEM,
+  STATE_MEDICAL_LICENSE_SYSTEM,
+  TOTAL_HOME_HEALTH_PATIENTS,
+  US_NPI_SYSTEM,
+  WOUND_DEPTH_CODE,
+  WOUND_EXAM_PANEL_CODE,
+  WOUND_EXAM_PANEL_DISPLAY,
+  WOUND_LENGTH_CODE,
+  WOUND_STATUS_CODE,
+  WOUND_WIDTH_CODE,
+  __resetOnSiteDemoClaimCachesForTests,
+  __resetOnSiteDemoEncounterCachesForTests,
+  buildCredentialingQualifications,
+  buildOnSiteDemoBlockAppointments,
+  buildOnSiteDemoClaims,
+  buildOnSiteDemoEncounters,
+  buildOnSiteDemoFacilityCoverages,
+  buildOnSiteDemoFacilityPatients,
+  buildOnSiteDemoHomeHealthCoverages,
+  buildOnSiteDemoHomeHealthPatients,
+  buildOnSiteDemoPaymentNotices,
+  buildOnSiteDemoWoundConditions,
+  buildOnSiteDemoWoundObservations,
+  buildOnSiteDemoWoundProcedures,
   demoMembershipId,
   demoRoleAssignmentId,
   demoRolesForUserInTenant,
   demoScenarioIdentifier,
-  import_workflows,
-  openhiResourceIdentifier
-} from "./chunk-BQMJSDOD.mjs";
+  facilityPatientsForBlock,
+  findOnSiteDemoBlockTemplate,
+  findOnSiteDemoFacilityPatientBlock,
+  findOnSiteDemoHomeHealthPatientProvider,
+  findOnSiteDemoHomeHealthPatientVisitCadenceDays,
+  homeHealthEligibleDoctors,
+  import_workflows as import_workflows2,
+  onSiteDemoBilledEncounterIds,
+  onSiteDemoClaimIds,
+  onSiteDemoDmeSupplierIds,
+  onSiteDemoEncounterIds,
+  onSiteDemoEncounterMetadata,
+  onSiteDemoEncountersForPatient,
+  onSiteDemoFacilityPatientIds,
+  onSiteDemoHomeHealthPatientIds,
+  onSiteDemoInsurancePayorIds,
+  onSiteDemoIntakeOnlyFacilityPatientIds,
+  onSiteDemoIntakeOnlyHomeHealthPatientIds,
+  onSiteDemoPaymentNoticeIds,
+  onSiteDemoScheduledFacilityPatientIds,
+  onSiteDemoScheduledHomeHealthPatientIds,
+  onSiteDemoUnbilledEncounterIds,
+  onSiteDemoWoundBearingPatientIds,
+  onSiteDemoWoundProcedurePatientIds,
+  openhiResourceIdentifier,
+  practitionerCredentialingForDoctor,
+  practitionerCredentialingForState,
+  woundConditionIdForPatient
+} from "./chunk-7TRO2STL.mjs";
+import {
+  COUNTER_MAINTENANCE_CONSUMER_NAME,
+  COUNTER_MAINTENANCE_DETAIL_TYPES,
+  import_workflows
+} from "./chunk-LKKLO66E.mjs";
 import {
   OWNING_DELETE_CASCADE_CONSUMER_NAME,
   OWNING_DELETE_CASCADE_DEFAULT_CONCURRENCY,
   OWNING_DELETE_CASCADE_STUCK_THRESHOLD_MINUTES,
   OWNING_DELETE_OPS_EVENT_BUS_ENV_VAR,
-  import_workflows as import_workflows3
-} from "./chunk-7RZHFI77.mjs";
-import {
-  RENAME_CASCADE_CONSUMER_NAME,
-  RENAME_CASCADE_DEFAULT_CONCURRENCY,
-  RENAME_CASCADE_FAILED_THRESHOLD,
-  RENAME_CASCADE_OPS_EVENT_BUS_ENV_VAR,
-  RENAME_CASCADE_SLOW_THRESHOLD_SECONDS,
   import_workflows as import_workflows4
-} from "./chunk-23PUSHBV.mjs";
-import "./chunk-E6MCKJVS.mjs";
+} from "./chunk-VESULYQQ.mjs";
+import "./chunk-P3NFCKTZ.mjs";
 import {
   PROVISION_DEFAULT_WORKSPACE_DETAIL_TYPE,
   USER_ONBOARDING_EVENT_SOURCE,
@@ -57,18 +182,21 @@ import {
   OPENHI_TAG_KEY_PREFIX_ENV_VAR,
   PLATFORM_DEPLOY_BRIDGE_ACTOR_SYSTEM
 } from "./chunk-SVXLZCF7.mjs";
-import {
-  require_lib
-} from "./chunk-ZM4GDHHC.mjs";
 import {
   PLATFORM_SCOPE_TENANT_ID
-} from "./chunk-CFJDATDK.mjs";
-import "./chunk-HQ67J7BP.mjs";
+} from "./chunk-MLFMW5IF.mjs";
+import "./chunk-BUAYVN3C.mjs";
+import "./chunk-5S6VFBLT.mjs";
+import "./chunk-I6LUPJUY.mjs";
 import "./chunk-QJDHVMKT.mjs";
-import "./chunk-MVQWAIMC.mjs";
+import "./chunk-6BB4CRSS.mjs";
+import "./chunk-O5VQWB6U.mjs";
 import "./chunk-FYHBHHWK.mjs";
-import "./chunk-VZCPGQXA.mjs";
+import "./chunk-EUIP2U5F.mjs";
 import "./chunk-TRY7JGWO.mjs";
+import {
+  require_lib
+} from "./chunk-KMEWULMX.mjs";
 import {
   __commonJS,
   __toESM
@@ -1054,7 +1182,7 @@ var DynamoDbDataStore = class extends Table {
 };
 
 // src/components/dynamodb/workflow-dedup-table.ts
-var import_workflows5 = __toESM(require_lib());
+var import_workflows6 = __toESM(require_lib());
 import { Annotations } from "aws-cdk-lib";
 import { AttributeType as AttributeType2, BillingMode as BillingMode2, Table as Table2 } from "aws-cdk-lib/aws-dynamodb";
 import { Effect, PolicyStatement } from "aws-cdk-lib/aws-iam";
@@ -1130,7 +1258,7 @@ var _WorkflowDedupTable = class _WorkflowDedupTable extends Construct5 {
     _WorkflowDedupTable.assertConsumerNameStatic(consumerName);
     const tableName = _WorkflowDedupTable.tableNameFromLookup(scope);
     const tableArn = _WorkflowDedupTable.tableArnFromLookup(scope);
-    fn.addEnvironment(import_workflows5.WORKFLOW_DEDUP_TABLE_NAME_ENV_VAR, tableName);
+    fn.addEnvironment(import_workflows6.WORKFLOW_DEDUP_TABLE_NAME_ENV_VAR, tableName);
     if (options.defaultTtlSeconds !== void 0) {
       fn.addEnvironment(
         "OPENHI_WORKFLOW_DEDUP_DEFAULT_TTL_SECONDS",
@@ -1166,9 +1294,9 @@ var _WorkflowDedupTable = class _WorkflowDedupTable extends Construct5 {
         "consumerName must be non-empty."
       );
     }
-    if (consumerName.length > import_workflows5.WORKFLOW_DEDUP_MAX_CONSUMER_NAME_LENGTH) {
+    if (consumerName.length > import_workflows6.WORKFLOW_DEDUP_MAX_CONSUMER_NAME_LENGTH) {
       throw new WorkflowDedupConsumerNameInvalidError(
-        `consumerName must be at most ${import_workflows5.WORKFLOW_DEDUP_MAX_CONSUMER_NAME_LENGTH} chars; got ${consumerName.length}.`
+        `consumerName must be at most ${import_workflows6.WORKFLOW_DEDUP_MAX_CONSUMER_NAME_LENGTH} chars; got ${consumerName.length}.`
       );
     }
     if (/\s/.test(consumerName)) {
@@ -1191,7 +1319,7 @@ var _WorkflowDedupTable = class _WorkflowDedupTable extends Construct5 {
       );
     }
     this.registeredConsumers.add(consumerName);
-    fn.addEnvironment(import_workflows5.WORKFLOW_DEDUP_TABLE_NAME_ENV_VAR, this.table.tableName);
+    fn.addEnvironment(import_workflows6.WORKFLOW_DEDUP_TABLE_NAME_ENV_VAR, this.table.tableName);
     if (options.defaultTtlSeconds !== void 0) {
       fn.addEnvironment(
         "OPENHI_WORKFLOW_DEDUP_DEFAULT_TTL_SECONDS",
@@ -2273,17 +2401,16 @@ var _OpenHiGlobalService = class _OpenHiGlobalService extends OpenHiService {
 _OpenHiGlobalService.SERVICE_TYPE = "global";
 var OpenHiGlobalService = _OpenHiGlobalService;
 
-// src/workflows/control-plane/seed-demo-data/seed-demo-data-lambda.ts
+// src/workflows/control-plane/counter-maintenance/counter-maintenance-lambda.ts
 import fs8 from "fs";
 import path8 from "path";
-import { Duration as Duration7, Stack as Stack5 } from "aws-cdk-lib";
+import { Duration as Duration7 } from "aws-cdk-lib";
 import { Rule as Rule2 } from "aws-cdk-lib/aws-events";
 import { LambdaFunction as LambdaFunction2 } from "aws-cdk-lib/aws-events-targets";
-import { Effect as Effect3, PolicyStatement as PolicyStatement3 } from "aws-cdk-lib/aws-iam";
 import { Runtime as Runtime8 } from "aws-cdk-lib/aws-lambda";
 import { NodejsFunction as NodejsFunction8 } from "aws-cdk-lib/aws-lambda-nodejs";
 import { Construct as Construct13 } from "constructs";
-var HANDLER_NAME7 = "seed-demo-data.handler.js";
+var HANDLER_NAME7 = "counter-maintenance.handler.js";
 function resolveHandlerEntry7(dirname) {
   const sameDir = path8.join(dirname, HANDLER_NAME7);
   if (fs8.existsSync(sameDir)) {
@@ -2291,14 +2418,123 @@ function resolveHandlerEntry7(dirname) {
   }
   return path8.join(dirname, "..", "..", "..", "..", "lib", HANDLER_NAME7);
 }
-var SeedDemoDataLambda = class extends Construct13 {
+var CounterMaintenanceLambda = class extends Construct13 {
   constructor(scope, props) {
-    super(scope, "seed-demo-data-lambda");
+    super(scope, "counter-maintenance-lambda");
     this.lambda = new NodejsFunction8(this, "handler", {
       entry: resolveHandlerEntry7(__dirname),
       runtime: Runtime8.NODEJS_LATEST,
+      memorySize: 256,
+      timeout: Duration7.minutes(1),
+      environment: {
+        DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
+      }
+    });
+    props.dataStoreTable.grant(this.lambda, "dynamodb:UpdateItem");
+    this.rule = new Rule2(this, "rule", {
+      eventBus: props.controlEventBus,
+      eventPattern: {
+        source: [import_workflows.ControlPlaneMembershipCreatedV1.source],
+        detailType: [...COUNTER_MAINTENANCE_DETAIL_TYPES]
+      },
+      targets: [
+        new LambdaFunction2(this.lambda, {
+          retryAttempts: 2,
+          maxEventAge: Duration7.hours(2)
+        })
+      ]
+    });
+  }
+};
+
+// src/workflows/control-plane/counter-maintenance/counter-maintenance-workflow.ts
+import { Construct as Construct14 } from "constructs";
+var CounterMaintenanceWorkflow = class extends Construct14 {
+  constructor(scope, props) {
+    super(scope, "counter-maintenance-workflow");
+    this.counterMaintenance = new CounterMaintenanceLambda(this, {
+      controlEventBus: props.controlEventBus,
+      dataStoreTable: props.dataStoreTable
+    });
+    WorkflowDedupTable.grantConsumerFromLookup(
+      this,
+      this.counterMaintenance.lambda,
+      COUNTER_MAINTENANCE_CONSUMER_NAME
+    );
+  }
+};
+
+// src/workflows/control-plane/counter-reconciliation/counter-reconciliation-lambda.ts
+import fs9 from "fs";
+import path9 from "path";
+import { Duration as Duration8 } from "aws-cdk-lib";
+import { Runtime as Runtime9 } from "aws-cdk-lib/aws-lambda";
+import { NodejsFunction as NodejsFunction9 } from "aws-cdk-lib/aws-lambda-nodejs";
+import { Construct as Construct15 } from "constructs";
+var HANDLER_NAME8 = "counter-reconciliation.handler.js";
+function resolveHandlerEntry8(dirname) {
+  const sameDir = path9.join(dirname, HANDLER_NAME8);
+  if (fs9.existsSync(sameDir)) {
+    return sameDir;
+  }
+  return path9.join(dirname, "..", "..", "..", "..", "lib", HANDLER_NAME8);
+}
+var CounterReconciliationLambda = class extends Construct15 {
+  constructor(scope, props) {
+    super(scope, "counter-reconciliation-lambda");
+    this.lambda = new NodejsFunction9(this, "handler", {
+      entry: resolveHandlerEntry8(__dirname),
+      runtime: Runtime9.NODEJS_LATEST,
       memorySize: 512,
-      timeout: Duration7.minutes(2),
+      // A full-table sweep over every Tenant / Workspace / User is
+      // heavier than the single-event counter-maintenance consumer, so
+      // the on-demand job gets a longer ceiling.
+      timeout: Duration8.minutes(15),
+      environment: {
+        DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
+      }
+    });
+    props.dataStoreTable.grantReadWriteData(this.lambda);
+  }
+};
+
+// src/workflows/control-plane/counter-reconciliation/counter-reconciliation-workflow.ts
+import { Construct as Construct16 } from "constructs";
+var CounterReconciliationWorkflow = class extends Construct16 {
+  constructor(scope, props) {
+    super(scope, "counter-reconciliation-workflow");
+    this.counterReconciliation = new CounterReconciliationLambda(this, {
+      dataStoreTable: props.dataStoreTable
+    });
+  }
+};
+
+// src/workflows/control-plane/seed-demo-data/seed-demo-data-lambda.ts
+import fs10 from "fs";
+import path10 from "path";
+import { Duration as Duration9, Stack as Stack5 } from "aws-cdk-lib";
+import { Rule as Rule3 } from "aws-cdk-lib/aws-events";
+import { LambdaFunction as LambdaFunction3 } from "aws-cdk-lib/aws-events-targets";
+import { Effect as Effect3, PolicyStatement as PolicyStatement3 } from "aws-cdk-lib/aws-iam";
+import { Runtime as Runtime10 } from "aws-cdk-lib/aws-lambda";
+import { NodejsFunction as NodejsFunction10 } from "aws-cdk-lib/aws-lambda-nodejs";
+import { Construct as Construct17 } from "constructs";
+var HANDLER_NAME9 = "seed-demo-data.handler.js";
+function resolveHandlerEntry9(dirname) {
+  const sameDir = path10.join(dirname, HANDLER_NAME9);
+  if (fs10.existsSync(sameDir)) {
+    return sameDir;
+  }
+  return path10.join(dirname, "..", "..", "..", "..", "lib", HANDLER_NAME9);
+}
+var SeedDemoDataLambda = class extends Construct17 {
+  constructor(scope, props) {
+    super(scope, "seed-demo-data-lambda");
+    this.lambda = new NodejsFunction10(this, "handler", {
+      entry: resolveHandlerEntry9(__dirname),
+      runtime: Runtime10.NODEJS_LATEST,
+      memorySize: 512,
+      timeout: Duration9.minutes(2),
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName,
         [SEED_DEMO_DATA_USER_POOL_ID_ENV_VAR]: props.userPool.userPoolId
@@ -2361,16 +2597,16 @@ var SeedDemoDataLambda = class extends Construct13 {
         ]
       })
     );
-    this.rule = new Rule2(this, "rule", {
+    this.rule = new Rule3(this, "rule", {
       eventBus: props.controlEventBus,
       eventPattern: {
-        source: [import_workflows.PlatformSystemDataSeededV1.source],
-        detailType: [import_workflows.PlatformSystemDataSeededV1.detailType]
+        source: [import_workflows2.PlatformSystemDataSeededV1.source],
+        detailType: [import_workflows2.PlatformSystemDataSeededV1.detailType]
       },
       targets: [
-        new LambdaFunction2(this.lambda, {
+        new LambdaFunction3(this.lambda, {
           retryAttempts: 2,
-          maxEventAge: Duration7.hours(2)
+          maxEventAge: Duration9.hours(2)
         })
       ]
     });
@@ -2378,8 +2614,8 @@ var SeedDemoDataLambda = class extends Construct13 {
 };
 
 // src/workflows/control-plane/seed-demo-data/seed-demo-data-workflow.ts
-import { Construct as Construct14 } from "constructs";
-var SeedDemoDataWorkflow = class extends Construct14 {
+import { Construct as Construct18 } from "constructs";
+var SeedDemoDataWorkflow = class extends Construct18 {
   constructor(scope, props) {
     super(scope, "seed-demo-data-workflow");
     this.seedDemoData = new SeedDemoDataLambda(this, {
@@ -2396,32 +2632,32 @@ var SeedDemoDataWorkflow = class extends Construct14 {
 };
 
 // src/workflows/control-plane/seed-system-data/seed-system-data-lambda.ts
-import fs9 from "fs";
-import path9 from "path";
+import fs11 from "fs";
+import path11 from "path";
 import { PLATFORM_ROLE_IDS } from "@openhi/types";
-import { Duration as Duration8, Stack as Stack6 } from "aws-cdk-lib";
-import { Rule as Rule3 } from "aws-cdk-lib/aws-events";
-import { LambdaFunction as LambdaFunction3 } from "aws-cdk-lib/aws-events-targets";
+import { Duration as Duration10, Stack as Stack6 } from "aws-cdk-lib";
+import { Rule as Rule4 } from "aws-cdk-lib/aws-events";
+import { LambdaFunction as LambdaFunction4 } from "aws-cdk-lib/aws-events-targets";
 import { Effect as Effect4, PolicyStatement as PolicyStatement4 } from "aws-cdk-lib/aws-iam";
-import { Runtime as Runtime9 } from "aws-cdk-lib/aws-lambda";
-import { NodejsFunction as NodejsFunction9 } from "aws-cdk-lib/aws-lambda-nodejs";
-import { Construct as Construct15 } from "constructs";
-var HANDLER_NAME8 = "seed-system-data.handler.js";
-function resolveHandlerEntry8(dirname) {
-  const sameDir = path9.join(dirname, HANDLER_NAME8);
-  if (fs9.existsSync(sameDir)) {
+import { Runtime as Runtime11 } from "aws-cdk-lib/aws-lambda";
+import { NodejsFunction as NodejsFunction11 } from "aws-cdk-lib/aws-lambda-nodejs";
+import { Construct as Construct19 } from "constructs";
+var HANDLER_NAME10 = "seed-system-data.handler.js";
+function resolveHandlerEntry10(dirname) {
+  const sameDir = path11.join(dirname, HANDLER_NAME10);
+  if (fs11.existsSync(sameDir)) {
     return sameDir;
   }
-  return path9.join(dirname, "..", "..", "..", "..", "lib", HANDLER_NAME8);
+  return path11.join(dirname, "..", "..", "..", "..", "lib", HANDLER_NAME10);
 }
-var SeedSystemDataLambda = class extends Construct15 {
+var SeedSystemDataLambda = class extends Construct19 {
   constructor(scope, props) {
     super(scope, "seed-system-data-lambda");
-    this.lambda = new NodejsFunction9(this, "handler", {
-      entry: resolveHandlerEntry8(__dirname),
-      runtime: Runtime9.NODEJS_LATEST,
+    this.lambda = new NodejsFunction11(this, "handler", {
+      entry: resolveHandlerEntry10(__dirname),
+      runtime: Runtime11.NODEJS_LATEST,
       memorySize: 512,
-      timeout: Duration8.minutes(1),
+      timeout: Duration10.minutes(1),
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName,
         [SEED_SYSTEM_DATA_CONTROL_BUS_ENV_VAR]: props.controlEventBus.eventBusName
@@ -2444,11 +2680,11 @@ var SeedSystemDataLambda = class extends Construct15 {
     );
     props.controlEventBus.grantPutEventsTo(this.lambda);
     const hostStackName = Stack6.of(this).stackName;
-    this.rule = new Rule3(this, "rule", {
+    this.rule = new Rule4(this, "rule", {
       eventBus: props.controlEventBus,
       eventPattern: {
-        source: [import_workflows2.PlatformDeploymentCompletedV1.source],
-        detailType: [import_workflows2.PlatformDeploymentCompletedV1.detailType],
+        source: [import_workflows3.PlatformDeploymentCompletedV1.source],
+        detailType: [import_workflows3.PlatformDeploymentCompletedV1.detailType],
         detail: {
           payload: {
             stackName: [hostStackName]
@@ -2456,9 +2692,9 @@ var SeedSystemDataLambda = class extends Construct15 {
         }
       },
       targets: [
-        new LambdaFunction3(this.lambda, {
+        new LambdaFunction4(this.lambda, {
           retryAttempts: 2,
-          maxEventAge: Duration8.hours(2)
+          maxEventAge: Duration10.hours(2)
         })
       ]
     });
@@ -2466,8 +2702,8 @@ var SeedSystemDataLambda = class extends Construct15 {
 };
 
 // src/workflows/control-plane/seed-system-data/seed-system-data-workflow.ts
-import { Construct as Construct16 } from "constructs";
-var SeedSystemDataWorkflow = class extends Construct16 {
+import { Construct as Construct20 } from "constructs";
+var SeedSystemDataWorkflow = class extends Construct20 {
   constructor(scope, props) {
     super(scope, "seed-system-data-workflow");
     this.seedSystemData = new SeedSystemDataLambda(this, {
@@ -2534,6 +2770,8 @@ var _OpenHiDataService = class _OpenHiDataService extends OpenHiService {
     );
     this.seedSystemDataWorkflow = this.createSeedSystemDataWorkflow();
     this.seedDemoDataWorkflow = this.createSeedDemoDataWorkflow();
+    this.counterMaintenanceWorkflow = this.createCounterMaintenanceWorkflow();
+    this.counterReconciliationWorkflow = this.createCounterReconciliationWorkflow();
   }
   /**
    * Returns the data store table by name. Use from other stacks (e.g. REST API Lambda) to obtain an ITable reference.
@@ -2580,6 +2818,28 @@ var _OpenHiDataService = class _OpenHiDataService extends OpenHiService {
       userPool: OpenHiAuthService.userPoolFromConstruct(this)
     });
   }
+  /**
+   * Creates the ADR-028 counter-maintenance workflow. Override to
+   * customize. Mounted on every stage — the denormalized counters back
+   * the admin console list columns in prod and non-prod alike.
+   */
+  createCounterMaintenanceWorkflow() {
+    return new CounterMaintenanceWorkflow(this, {
+      controlEventBus: this.controlEventBus(),
+      dataStoreTable: this.dataStore
+    });
+  }
+  /**
+   * Creates the ADR-028 counter-reconciliation job (#1319). Override to
+   * customize. Mounted on every stage — the recompute-and-repair backstop
+   * is the correctness authority for the denormalized counters in prod
+   * and non-prod alike. On-demand only (no EventBridge trigger).
+   */
+  createCounterReconciliationWorkflow() {
+    return new CounterReconciliationWorkflow(this, {
+      dataStoreTable: this.dataStore
+    });
+  }
   /**
    * Creates the single-table DynamoDB data store.
    * Override to customize.
@@ -2612,6 +2872,7 @@ import {
 } from "aws-cdk-lib/aws-apigatewayv2";
 import { HttpUserPoolAuthorizer } from "aws-cdk-lib/aws-apigatewayv2-authorizers";
 import { HttpLambdaIntegration } from "aws-cdk-lib/aws-apigatewayv2-integrations";
+import { EventBus as EventBus5 } from "aws-cdk-lib/aws-events";
 import { Effect as Effect5, PolicyStatement as PolicyStatement5 } from "aws-cdk-lib/aws-iam";
 import {
   ARecord as ARecord3,
@@ -2619,56 +2880,56 @@ import {
   RecordTarget as RecordTarget3
 } from "aws-cdk-lib/aws-route53";
 import { ApiGatewayv2DomainProperties } from "aws-cdk-lib/aws-route53-targets";
-import { Duration as Duration9 } from "aws-cdk-lib/core";
-import { Construct as Construct19 } from "constructs";
+import { Duration as Duration11 } from "aws-cdk-lib/core";
+import { Construct as Construct23 } from "constructs";
 
 // src/data/lambda/cors-options-lambda.ts
-import fs10 from "fs";
-import path10 from "path";
-import { Runtime as Runtime10 } from "aws-cdk-lib/aws-lambda";
-import { NodejsFunction as NodejsFunction10 } from "aws-cdk-lib/aws-lambda-nodejs";
-import { Construct as Construct17 } from "constructs";
-var HANDLER_NAME9 = "cors-options-lambda.handler.js";
-function resolveHandlerEntry9(dirname) {
-  const sameDir = path10.join(dirname, HANDLER_NAME9);
-  if (fs10.existsSync(sameDir)) {
+import fs12 from "fs";
+import path12 from "path";
+import { Runtime as Runtime12 } from "aws-cdk-lib/aws-lambda";
+import { NodejsFunction as NodejsFunction12 } from "aws-cdk-lib/aws-lambda-nodejs";
+import { Construct as Construct21 } from "constructs";
+var HANDLER_NAME11 = "cors-options-lambda.handler.js";
+function resolveHandlerEntry11(dirname) {
+  const sameDir = path12.join(dirname, HANDLER_NAME11);
+  if (fs12.existsSync(sameDir)) {
     return sameDir;
   }
-  const fromLib = path10.join(dirname, "..", "..", "..", "lib", HANDLER_NAME9);
+  const fromLib = path12.join(dirname, "..", "..", "..", "lib", HANDLER_NAME11);
   return fromLib;
 }
-var CorsOptionsLambda = class extends Construct17 {
+var CorsOptionsLambda = class extends Construct21 {
   constructor(scope, id = "cors-options-lambda") {
     super(scope, id);
-    this.lambda = new NodejsFunction10(this, "handler", {
-      entry: resolveHandlerEntry9(__dirname),
-      runtime: Runtime10.NODEJS_LATEST,
+    this.lambda = new NodejsFunction12(this, "handler", {
+      entry: resolveHandlerEntry11(__dirname),
+      runtime: Runtime12.NODEJS_LATEST,
       memorySize: 128
     });
   }
 };
 
 // src/data/lambda/rest-api-lambda.ts
-import fs11 from "fs";
-import path11 from "path";
-import { Runtime as Runtime11 } from "aws-cdk-lib/aws-lambda";
-import { NodejsFunction as NodejsFunction11 } from "aws-cdk-lib/aws-lambda-nodejs";
-import { Construct as Construct18 } from "constructs";
-var HANDLER_NAME10 = "rest-api-lambda.handler.js";
-function resolveHandlerEntry10(dirname) {
-  const sameDir = path11.join(dirname, HANDLER_NAME10);
-  if (fs11.existsSync(sameDir)) {
+import fs13 from "fs";
+import path13 from "path";
+import { Runtime as Runtime13 } from "aws-cdk-lib/aws-lambda";
+import { NodejsFunction as NodejsFunction13 } from "aws-cdk-lib/aws-lambda-nodejs";
+import { Construct as Construct22 } from "constructs";
+var HANDLER_NAME12 = "rest-api-lambda.handler.js";
+function resolveHandlerEntry12(dirname) {
+  const sameDir = path13.join(dirname, HANDLER_NAME12);
+  if (fs13.existsSync(sameDir)) {
     return sameDir;
   }
-  const fromLib = path11.join(dirname, "..", "..", "..", "lib", HANDLER_NAME10);
+  const fromLib = path13.join(dirname, "..", "..", "..", "lib", HANDLER_NAME12);
   return fromLib;
 }
-var RestApiLambda = class extends Construct18 {
+var RestApiLambda = class extends Construct22 {
   constructor(scope, props) {
     super(scope, "rest-api-lambda");
-    this.lambda = new NodejsFunction11(this, "handler", {
-      entry: resolveHandlerEntry10(__dirname),
-      runtime: Runtime11.NODEJS_LATEST,
+    this.lambda = new NodejsFunction13(this, "handler", {
+      entry: resolveHandlerEntry12(__dirname),
+      runtime: Runtime13.NODEJS_LATEST,
       memorySize: 1024,
       environment: {
         DYNAMO_TABLE_NAME: props.dynamoTableName,
@@ -2678,6 +2939,7 @@ var RestApiLambda = class extends Construct18 {
         OPENHI_PG_SECRET_ARN: props.postgresSecretArn,
         OPENHI_PG_DATABASE: props.postgresDatabase,
         OPENHI_PG_SCHEMA: props.postgresSchema,
+        CONTROL_EVENT_BUS_NAME: props.controlEventBusName,
         ...props.extraEnvironment
       },
       bundling: {
@@ -2861,6 +3123,7 @@ var _OpenHiRestApiService = class _OpenHiRestApiService extends OpenHiService {
     const postgresDatabase = DataStorePostgresReplica.databaseNameFromConstruct(this);
     const postgresSchema = getPostgresReplicaSchemaName(this.branchHash);
     const extraEnvironment = this.resolveRuntimeConfigEnvVars();
+    const controlEventBusName = ControlEventBus.getEventBusName(this);
     const { lambda } = new RestApiLambda(this, {
       dynamoTableName: dataStoreTable.tableName,
       branchTagValue: this.branchName,
@@ -2869,8 +3132,14 @@ var _OpenHiRestApiService = class _OpenHiRestApiService extends OpenHiService {
       postgresSecretArn,
       postgresDatabase,
       postgresSchema,
+      controlEventBusName,
       extraEnvironment
     });
+    EventBus5.fromEventBusName(
+      this,
+      "control-event-bus-ref",
+      controlEventBusName
+    ).grantPutEventsTo(lambda);
     lambda.addToRolePolicy(
       new PolicyStatement5({
         effect: Effect5.ALLOW,
@@ -3068,7 +3337,7 @@ var _OpenHiRestApiService = class _OpenHiRestApiService extends OpenHiService {
       ],
       allowHeaders: cors?.allowHeaders ?? ["Content-Type", "Authorization"],
       allowCredentials: cors?.allowCredentials ?? true,
-      maxAge: cors?.maxAge ?? Duration9.days(1),
+      maxAge: cors?.maxAge ?? Duration11.days(1),
       ...cors?.exposeHeaders !== void 0 && {
         exposeHeaders: cors.exposeHeaders
       }
@@ -3086,7 +3355,7 @@ var _OpenHiRestApiService = class _OpenHiRestApiService extends OpenHiService {
    * client-side from `window.location.origin`.
    */
   resolveRuntimeConfigEnvVars() {
-    const cognitoScope = new Construct19(this, "runtime-config");
+    const cognitoScope = new Construct23(this, "runtime-config");
     const userPool = OpenHiAuthService.userPoolFromConstruct(cognitoScope);
     const userPoolClient = OpenHiAuthService.userPoolClientFromConstruct(cognitoScope);
     const cognitoDomainUrl = OpenHiAuthService.userPoolDomainBaseUrlFromConstruct(cognitoScope);
@@ -3422,29 +3691,29 @@ _OpenHiWebsiteService.ADMIN_CONSOLE_ENDPOINT_OUTPUT_NAME = "AdminConsoleEndpoint
 var OpenHiWebsiteService = _OpenHiWebsiteService;
 
 // src/workflows/control-plane/user-onboarding/provision-default-workspace-lambda.ts
-import fs12 from "fs";
-import path12 from "path";
-import { Duration as Duration10 } from "aws-cdk-lib";
-import { Rule as Rule4 } from "aws-cdk-lib/aws-events";
-import { LambdaFunction as LambdaFunction4 } from "aws-cdk-lib/aws-events-targets";
+import fs14 from "fs";
+import path14 from "path";
+import { Duration as Duration12 } from "aws-cdk-lib";
+import { Rule as Rule5 } from "aws-cdk-lib/aws-events";
+import { LambdaFunction as LambdaFunction5 } from "aws-cdk-lib/aws-events-targets";
 import { Effect as Effect6, PolicyStatement as PolicyStatement6 } from "aws-cdk-lib/aws-iam";
-import { Runtime as Runtime12 } from "aws-cdk-lib/aws-lambda";
-import { NodejsFunction as NodejsFunction12 } from "aws-cdk-lib/aws-lambda-nodejs";
-import { Construct as Construct20 } from "constructs";
-var HANDLER_NAME11 = "provision-default-workspace.handler.js";
-function resolveHandlerEntry11(dirname) {
-  const sameDir = path12.join(dirname, HANDLER_NAME11);
-  if (fs12.existsSync(sameDir)) {
+import { Runtime as Runtime14 } from "aws-cdk-lib/aws-lambda";
+import { NodejsFunction as NodejsFunction14 } from "aws-cdk-lib/aws-lambda-nodejs";
+import { Construct as Construct24 } from "constructs";
+var HANDLER_NAME13 = "provision-default-workspace.handler.js";
+function resolveHandlerEntry13(dirname) {
+  const sameDir = path14.join(dirname, HANDLER_NAME13);
+  if (fs14.existsSync(sameDir)) {
     return sameDir;
   }
-  return path12.join(dirname, "..", "..", "..", "..", "lib", HANDLER_NAME11);
+  return path14.join(dirname, "..", "..", "..", "..", "lib", HANDLER_NAME13);
 }
-var ProvisionDefaultWorkspaceLambda = class extends Construct20 {
+var ProvisionDefaultWorkspaceLambda = class extends Construct24 {
   constructor(scope, props) {
     super(scope, "provision-default-workspace-lambda");
-    this.lambda = new NodejsFunction12(this, "handler", {
-      entry: resolveHandlerEntry11(__dirname),
-      runtime: Runtime12.NODEJS_LATEST,
+    this.lambda = new NodejsFunction14(this, "handler", {
+      entry: resolveHandlerEntry13(__dirname),
+      runtime: Runtime14.NODEJS_LATEST,
       memorySize: 1024,
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
@@ -3462,16 +3731,16 @@ var ProvisionDefaultWorkspaceLambda = class extends Construct20 {
         resources: [`${props.dataStoreTable.tableArn}/index/*`]
       })
     );
-    this.rule = new Rule4(this, "rule", {
+    this.rule = new Rule5(this, "rule", {
       eventBus: props.controlEventBus,
       eventPattern: {
         source: [USER_ONBOARDING_EVENT_SOURCE],
         detailType: [PROVISION_DEFAULT_WORKSPACE_DETAIL_TYPE]
       },
       targets: [
-        new LambdaFunction4(this.lambda, {
+        new LambdaFunction5(this.lambda, {
           retryAttempts: 2,
-          maxEventAge: Duration10.hours(2)
+          maxEventAge: Duration12.hours(2)
         })
       ]
     });
@@ -3479,8 +3748,8 @@ var ProvisionDefaultWorkspaceLambda = class extends Construct20 {
 };
 
 // src/workflows/control-plane/user-onboarding/user-onboarding-workflow.ts
-import { Construct as Construct21 } from "constructs";
-var UserOnboardingWorkflow = class extends Construct21 {
+import { Construct as Construct25 } from "constructs";
+var UserOnboardingWorkflow = class extends Construct25 {
   constructor(scope, props) {
     super(scope, "user-onboarding-workflow");
     this.provisionDefaultWorkspace = new ProvisionDefaultWorkspaceLambda(this, {
@@ -3904,47 +4173,47 @@ _OpenHiGraphqlService.SERVICE_TYPE = "graphql-api";
 var OpenHiGraphqlService = _OpenHiGraphqlService;
 
 // src/workflows/control-plane/owning-delete-cascade/owning-delete-cascade-lambdas.ts
-import fs13 from "fs";
-import path13 from "path";
-import { Duration as Duration11 } from "aws-cdk-lib";
+import fs15 from "fs";
+import path15 from "path";
+import { Duration as Duration13 } from "aws-cdk-lib";
 import { Effect as Effect8, PolicyStatement as PolicyStatement8 } from "aws-cdk-lib/aws-iam";
-import { Runtime as Runtime13 } from "aws-cdk-lib/aws-lambda";
-import { NodejsFunction as NodejsFunction13 } from "aws-cdk-lib/aws-lambda-nodejs";
-import { Construct as Construct22 } from "constructs";
-function resolveHandlerEntry12(dirname, handlerName) {
-  const sameDir = path13.join(dirname, handlerName);
-  if (fs13.existsSync(sameDir)) {
+import { Runtime as Runtime15 } from "aws-cdk-lib/aws-lambda";
+import { NodejsFunction as NodejsFunction15 } from "aws-cdk-lib/aws-lambda-nodejs";
+import { Construct as Construct26 } from "constructs";
+function resolveHandlerEntry14(dirname, handlerName) {
+  const sameDir = path15.join(dirname, handlerName);
+  if (fs15.existsSync(sameDir)) {
     return { entry: sameDir, handler: "handler" };
   }
-  const libDir = path13.join(dirname, "..", "..", "..", "..", "lib", handlerName);
+  const libDir = path15.join(dirname, "..", "..", "..", "..", "lib", handlerName);
   return { entry: libDir, handler: "handler" };
 }
-var OwningDeleteCascadeLambdas = class extends Construct22 {
+var OwningDeleteCascadeLambdas = class extends Construct26 {
   constructor(scope, props) {
     super(scope, "owning-delete-cascade-lambdas");
-    const listResolved = resolveHandlerEntry12(
+    const listResolved = resolveHandlerEntry14(
       __dirname,
       "list-chunks.handler.js"
     );
-    this.listChunks = new NodejsFunction13(this, "list-chunks-handler", {
+    this.listChunks = new NodejsFunction15(this, "list-chunks-handler", {
       entry: listResolved.entry,
-      runtime: Runtime13.NODEJS_LATEST,
+      runtime: Runtime15.NODEJS_LATEST,
       memorySize: 512,
-      timeout: Duration11.minutes(1),
+      timeout: Duration13.minutes(1),
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
     });
     props.dataStoreTable.grant(this.listChunks, "dynamodb:Query");
-    const deleteResolved = resolveHandlerEntry12(
+    const deleteResolved = resolveHandlerEntry14(
       __dirname,
       "delete-chunk.handler.js"
     );
-    this.deleteChunk = new NodejsFunction13(this, "delete-chunk-handler", {
+    this.deleteChunk = new NodejsFunction15(this, "delete-chunk-handler", {
       entry: deleteResolved.entry,
-      runtime: Runtime13.NODEJS_LATEST,
+      runtime: Runtime15.NODEJS_LATEST,
       memorySize: 512,
-      timeout: Duration11.minutes(1),
+      timeout: Duration13.minutes(1),
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -3955,15 +4224,15 @@ var OwningDeleteCascadeLambdas = class extends Construct22 {
       "dynamodb:UpdateItem",
       "dynamodb:PutItem"
     );
-    const finalizeResolved = resolveHandlerEntry12(
+    const finalizeResolved = resolveHandlerEntry14(
       __dirname,
       "finalize.handler.js"
     );
-    this.finalize = new NodejsFunction13(this, "finalize-handler", {
+    this.finalize = new NodejsFunction15(this, "finalize-handler", {
       entry: finalizeResolved.entry,
-      runtime: Runtime13.NODEJS_LATEST,
+      runtime: Runtime15.NODEJS_LATEST,
       memorySize: 512,
-      timeout: Duration11.minutes(1),
+      timeout: Duration13.minutes(1),
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName,
         [OWNING_DELETE_OPS_EVENT_BUS_ENV_VAR]: props.opsEventBus.eventBusName
@@ -3981,8 +4250,8 @@ var OwningDeleteCascadeLambdas = class extends Construct22 {
 };
 
 // src/workflows/control-plane/owning-delete-cascade/owning-delete-cascade-workflow.ts
-import { Duration as Duration12 } from "aws-cdk-lib";
-import { Rule as Rule5 } from "aws-cdk-lib/aws-events";
+import { Duration as Duration14 } from "aws-cdk-lib";
+import { Rule as Rule6 } from "aws-cdk-lib/aws-events";
 import { SfnStateMachine } from "aws-cdk-lib/aws-events-targets";
 import {
   Choice,
@@ -3997,8 +4266,8 @@ import {
   WaitTime
 } from "aws-cdk-lib/aws-stepfunctions";
 import { LambdaInvoke } from "aws-cdk-lib/aws-stepfunctions-tasks";
-import { Construct as Construct23 } from "constructs";
-var OwningDeleteCascadeWorkflow = class extends Construct23 {
+import { Construct as Construct27 } from "constructs";
+var OwningDeleteCascadeWorkflow = class extends Construct27 {
   constructor(scope, props) {
     super(scope, "owning-delete-cascade-workflow");
     this.lambdas = new OwningDeleteCascadeLambdas(this, {
@@ -4107,7 +4376,7 @@ var OwningDeleteCascadeWorkflow = class extends Construct23 {
       }
     });
     const interPageWait = new Wait(this, "inter-page-wait", {
-      time: WaitTime.duration(Duration12.seconds(0))
+      time: WaitTime.duration(Duration14.seconds(0))
     });
     const isExhausted = new Choice(this, "is-exhausted");
     const finalize = new LambdaInvoke(this, "finalize", {
@@ -4138,18 +4407,18 @@ var OwningDeleteCascadeWorkflow = class extends Construct23 {
       // Long timeout because real-world cascades can run minutes when
       // a workspace has thousands of members. The stuck-cascade alarm
       // fires at 15 minutes; the state machine itself does not abort.
-      timeout: Duration12.hours(2)
+      timeout: Duration14.hours(2)
     });
-    this.rule = new Rule5(this, "rule", {
+    this.rule = new Rule6(this, "rule", {
       eventBus: props.dataEventBus,
       eventPattern: {
-        source: [import_workflows3.OPENHI_DATA_SOURCE],
-        detailType: [import_workflows3.ControlPlaneOwningDeleteV1.detailType]
+        source: [import_workflows4.OPENHI_DATA_SOURCE],
+        detailType: [import_workflows4.ControlPlaneOwningDeleteV1.detailType]
       },
       targets: [
         new SfnStateMachine(this.stateMachine, {
           retryAttempts: 2,
-          maxEventAge: Duration12.hours(2)
+          maxEventAge: Duration14.hours(2)
         })
       ]
     });
@@ -4157,47 +4426,47 @@ var OwningDeleteCascadeWorkflow = class extends Construct23 {
 };
 
 // src/workflows/control-plane/rename-cascade/rename-cascade-lambdas.ts
-import fs14 from "fs";
-import path14 from "path";
-import { Duration as Duration13 } from "aws-cdk-lib";
+import fs16 from "fs";
+import path16 from "path";
+import { Duration as Duration15 } from "aws-cdk-lib";
 import { Effect as Effect9, PolicyStatement as PolicyStatement9 } from "aws-cdk-lib/aws-iam";
-import { Runtime as Runtime14 } from "aws-cdk-lib/aws-lambda";
-import { NodejsFunction as NodejsFunction14 } from "aws-cdk-lib/aws-lambda-nodejs";
-import { Construct as Construct24 } from "constructs";
-function resolveHandlerEntry13(dirname, handlerName) {
-  const sameDir = path14.join(dirname, handlerName);
-  if (fs14.existsSync(sameDir)) {
+import { Runtime as Runtime16 } from "aws-cdk-lib/aws-lambda";
+import { NodejsFunction as NodejsFunction16 } from "aws-cdk-lib/aws-lambda-nodejs";
+import { Construct as Construct28 } from "constructs";
+function resolveHandlerEntry15(dirname, handlerName) {
+  const sameDir = path16.join(dirname, handlerName);
+  if (fs16.existsSync(sameDir)) {
     return { entry: sameDir, handler: "handler" };
   }
-  const libDir = path14.join(dirname, "..", "..", "..", "..", "lib", handlerName);
+  const libDir = path16.join(dirname, "..", "..", "..", "..", "lib", handlerName);
   return { entry: libDir, handler: "handler" };
 }
-var RenameCascadeLambdas = class extends Construct24 {
+var RenameCascadeLambdas = class extends Construct28 {
   constructor(scope, props) {
     super(scope, "rename-cascade-lambdas");
-    const listResolved = resolveHandlerEntry13(
+    const listResolved = resolveHandlerEntry15(
       __dirname,
       "rename-list-targets.handler.js"
     );
-    this.listTargets = new NodejsFunction14(this, "list-targets-handler", {
+    this.listTargets = new NodejsFunction16(this, "list-targets-handler", {
       entry: listResolved.entry,
-      runtime: Runtime14.NODEJS_LATEST,
+      runtime: Runtime16.NODEJS_LATEST,
       memorySize: 512,
-      timeout: Duration13.minutes(1),
+      timeout: Duration15.minutes(1),
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
     });
     props.dataStoreTable.grant(this.listTargets, "dynamodb:Query");
-    const rewriteResolved = resolveHandlerEntry13(
+    const rewriteResolved = resolveHandlerEntry15(
       __dirname,
       "rename-rewrite-chunk.handler.js"
     );
-    this.rewriteChunk = new NodejsFunction14(this, "rewrite-chunk-handler", {
+    this.rewriteChunk = new NodejsFunction16(this, "rewrite-chunk-handler", {
       entry: rewriteResolved.entry,
-      runtime: Runtime14.NODEJS_LATEST,
+      runtime: Runtime16.NODEJS_LATEST,
       memorySize: 512,
-      timeout: Duration13.minutes(1),
+      timeout: Duration15.minutes(1),
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -4208,15 +4477,15 @@ var RenameCascadeLambdas = class extends Construct24 {
       "dynamodb:PutItem",
       "dynamodb:UpdateItem"
     );
-    const finalizeResolved = resolveHandlerEntry13(
+    const finalizeResolved = resolveHandlerEntry15(
       __dirname,
       "rename-finalize.handler.js"
     );
-    this.finalize = new NodejsFunction14(this, "finalize-handler", {
+    this.finalize = new NodejsFunction16(this, "finalize-handler", {
       entry: finalizeResolved.entry,
-      runtime: Runtime14.NODEJS_LATEST,
+      runtime: Runtime16.NODEJS_LATEST,
       memorySize: 512,
-      timeout: Duration13.minutes(1),
+      timeout: Duration15.minutes(1),
       environment: {
         [RENAME_CASCADE_OPS_EVENT_BUS_ENV_VAR]: props.opsEventBus.eventBusName
       }
@@ -4232,8 +4501,8 @@ var RenameCascadeLambdas = class extends Construct24 {
 };
 
 // src/workflows/control-plane/rename-cascade/rename-cascade-workflow.ts
-import { Duration as Duration14 } from "aws-cdk-lib";
-import { Rule as Rule6 } from "aws-cdk-lib/aws-events";
+import { Duration as Duration16 } from "aws-cdk-lib";
+import { Rule as Rule7 } from "aws-cdk-lib/aws-events";
 import { SfnStateMachine as SfnStateMachine2 } from "aws-cdk-lib/aws-events-targets";
 import {
   Choice as Choice2,
@@ -4246,8 +4515,8 @@ import {
   TaskInput as TaskInput2
 } from "aws-cdk-lib/aws-stepfunctions";
 import { LambdaInvoke as LambdaInvoke2 } from "aws-cdk-lib/aws-stepfunctions-tasks";
-import { Construct as Construct25 } from "constructs";
-var RenameCascadeWorkflow = class extends Construct25 {
+import { Construct as Construct29 } from "constructs";
+var RenameCascadeWorkflow = class extends Construct29 {
   constructor(scope, props) {
     super(scope, "rename-cascade-workflow");
     this.lambdas = new RenameCascadeLambdas(this, {
@@ -4391,50 +4660,81 @@ var RenameCascadeWorkflow = class extends Construct25 {
       // Long timeout — large renames may rewrite thousands of rows;
       // the `CascadeSlow` alarm fires at 300s p99 but the state
       // machine itself does not abort.
-      timeout: Duration14.hours(2)
+      timeout: Duration16.hours(2)
     });
-    this.rule = new Rule6(this, "rule", {
+    this.rule = new Rule7(this, "rule", {
       eventBus: props.dataEventBus,
       eventPattern: {
-        source: [import_workflows4.OPENHI_DATA_SOURCE],
-        detailType: [import_workflows4.ControlPlaneRenameV1.detailType]
+        source: [import_workflows5.OPENHI_DATA_SOURCE],
+        detailType: [import_workflows5.ControlPlaneRenameV1.detailType]
       },
       targets: [
         new SfnStateMachine2(this.stateMachine, {
           retryAttempts: 2,
-          maxEventAge: Duration14.hours(2)
+          maxEventAge: Duration16.hours(2)
         })
       ]
     });
   }
 };
-var export_ControlPlaneOwningDeleteCompleteV1 = import_workflows3.ControlPlaneOwningDeleteCompleteV1;
-var export_ControlPlaneOwningDeleteFailedV1 = import_workflows3.ControlPlaneOwningDeleteFailedV1;
-var export_ControlPlaneOwningDeleteV1 = import_workflows3.ControlPlaneOwningDeleteV1;
-var export_ControlPlaneRenameCompleteV1 = import_workflows4.ControlPlaneRenameCompleteV1;
-var export_ControlPlaneRenameFailedV1 = import_workflows4.ControlPlaneRenameFailedV1;
-var export_ControlPlaneRenameV1 = import_workflows4.ControlPlaneRenameV1;
-var export_OWNING_ENTITY_TYPE = import_workflows3.OWNING_ENTITY_TYPE;
-var export_PlatformDeploymentCompletedV1 = import_workflows2.PlatformDeploymentCompletedV1;
-var export_RENAMABLE_ENTITY_TYPE = import_workflows4.RENAMABLE_ENTITY_TYPE;
+var export_ControlPlaneMembershipCreatedV1 = import_workflows.ControlPlaneMembershipCreatedV1;
+var export_ControlPlaneMembershipDeletedV1 = import_workflows.ControlPlaneMembershipDeletedV1;
+var export_ControlPlaneOwningDeleteCompleteV1 = import_workflows4.ControlPlaneOwningDeleteCompleteV1;
+var export_ControlPlaneOwningDeleteFailedV1 = import_workflows4.ControlPlaneOwningDeleteFailedV1;
+var export_ControlPlaneOwningDeleteV1 = import_workflows4.ControlPlaneOwningDeleteV1;
+var export_ControlPlaneRenameCompleteV1 = import_workflows5.ControlPlaneRenameCompleteV1;
+var export_ControlPlaneRenameFailedV1 = import_workflows5.ControlPlaneRenameFailedV1;
+var export_ControlPlaneRenameV1 = import_workflows5.ControlPlaneRenameV1;
+var export_ControlPlaneRoleAssignmentCreatedV1 = import_workflows.ControlPlaneRoleAssignmentCreatedV1;
+var export_ControlPlaneRoleAssignmentDeletedV1 = import_workflows.ControlPlaneRoleAssignmentDeletedV1;
+var export_ControlPlaneWorkspaceCreatedV1 = import_workflows.ControlPlaneWorkspaceCreatedV1;
+var export_ControlPlaneWorkspaceDeletedV1 = import_workflows.ControlPlaneWorkspaceDeletedV1;
+var export_OWNING_ENTITY_TYPE = import_workflows4.OWNING_ENTITY_TYPE;
+var export_PlatformDeploymentCompletedV1 = import_workflows3.PlatformDeploymentCompletedV1;
+var export_RENAMABLE_ENTITY_TYPE = import_workflows5.RENAMABLE_ENTITY_TYPE;
 export {
   ADMIN_DOMAIN_PREFIX,
+  BLOCK_OCCURRENCES_PER_TEMPLATE,
+  BLOCK_OCCURRENCE_WEEKS_FUTURE,
+  BLOCK_OCCURRENCE_WEEKS_PAST,
   BRIDGED_STATUSES,
+  CLAIM_WORKFLOW_STATUS,
+  CLAIM_WORKFLOW_STATUS_EXTENSION_URL,
+  CLAIM_WORKFLOW_STATUS_LAST_TRANSITION_SUB_EXTENSION_URL,
+  CLAIM_WORKFLOW_STATUS_VALUE_SUB_EXTENSION_URL,
   CLOUDFORMATION_EVENT_SOURCE,
   CLOUDFORMATION_STACK_STATUS_CHANGE_DETAIL_TYPE,
+  CONDITION_CLINICAL_STATUS_SYSTEM,
   CONTROL_EVENT_BUS_NAME_ENV_VAR,
+  COUNTER_MAINTENANCE_CONSUMER_NAME,
+  COUNTER_MAINTENANCE_DETAIL_TYPES,
+  COVERAGE_PAYOR_TYPE_SYSTEM,
+  COVERAGE_QMB_STATUS_EXTENSION_URL,
+  COVERAGE_VERIFICATION_DATE_EXTENSION_URL,
+  CPT_SYSTEM,
+  CREDENTIALING_STATUS,
   ChildHostedZone,
   CognitoUserPool,
   CognitoUserPoolClient,
   CognitoUserPoolDomain,
   CognitoUserPoolKmsKey,
   ControlEventBus,
+  export_ControlPlaneMembershipCreatedV1 as ControlPlaneMembershipCreatedV1,
+  export_ControlPlaneMembershipDeletedV1 as ControlPlaneMembershipDeletedV1,
   export_ControlPlaneOwningDeleteCompleteV1 as ControlPlaneOwningDeleteCompleteV1,
   export_ControlPlaneOwningDeleteFailedV1 as ControlPlaneOwningDeleteFailedV1,
   export_ControlPlaneOwningDeleteV1 as ControlPlaneOwningDeleteV1,
   export_ControlPlaneRenameCompleteV1 as ControlPlaneRenameCompleteV1,
   export_ControlPlaneRenameFailedV1 as ControlPlaneRenameFailedV1,
   export_ControlPlaneRenameV1 as ControlPlaneRenameV1,
+  export_ControlPlaneRoleAssignmentCreatedV1 as ControlPlaneRoleAssignmentCreatedV1,
+  export_ControlPlaneRoleAssignmentDeletedV1 as ControlPlaneRoleAssignmentDeletedV1,
+  export_ControlPlaneWorkspaceCreatedV1 as ControlPlaneWorkspaceCreatedV1,
+  export_ControlPlaneWorkspaceDeletedV1 as ControlPlaneWorkspaceDeletedV1,
+  CounterMaintenanceLambda,
+  CounterMaintenanceWorkflow,
+  CounterReconciliationLambda,
+  CounterReconciliationWorkflow,
   DATA_STORE_CHANGE_DETAIL_MAX_UTF8_BYTES,
   DATA_STORE_CHANGE_DETAIL_TYPE,
   DEFAULT_PREVIEW_EXPIRATION_DAYS,
@@ -4444,13 +4744,48 @@ export {
   DEMO_URN_SYSTEM,
   DEV_CORS_ALLOW_ORIGINS,
   DEV_USERS,
+  DIRECTOR_OF_NURSING_EMAIL_EXTENSION_URL,
+  DIRECTOR_OF_NURSING_EXTENSION_URL,
+  DIRECTOR_OF_NURSING_NAME_EXTENSION_URL,
+  DIRECTOR_OF_NURSING_PHONE_EXTENSION_URL,
+  DME_SUPPLIER_CATEGORY_CODE,
   DataEventBus,
   DataStoreHistoricalArchive,
   DataStorePostgresReplica,
   DiscoverableStringParameter,
   DynamoDbDataStore,
+  ENCOUNTER_CLASS_FACILITY,
+  ENCOUNTER_CLASS_HOME_HEALTH,
+  ENCOUNTER_CLASS_SYSTEM,
+  FHIR_ORGANIZATION_TYPE_SYSTEM,
+  HOME_HEALTH_ELIGIBLE_EXTENSION_URL,
+  HOME_HEALTH_VISITS_PAST,
+  HOME_HEALTH_VISIT_CADENCE_DAYS_EXTENSION_URL,
+  HOME_HEALTH_VISIT_CADENCE_OPTIONS,
+  HOSPICE_EFFECTIVE_DATE_SUB_EXTENSION_URL,
+  HOSPICE_STATUS_VALUE_SUB_EXTENSION_URL,
+  INSURANCE_PAYOR_CATEGORY_CODE,
+  INSURANCE_PAYOR_PLAN_TYPE_SYSTEM,
   LOCALHOST_OAUTH_CALLBACK_URLS,
   LOCALHOST_OAUTH_LOGOUT_URLS,
+  LOINC_SYSTEM,
+  ON_SITE_APPOINTMENT_TYPE_SYSTEM,
+  ON_SITE_DEMO_BLOCK_CAPACITY_EXTENSION_URL,
+  ON_SITE_DEMO_BLOCK_TEMPLATE_IDS,
+  ON_SITE_DEMO_DIRECTORY_ORGANIZATIONS,
+  ON_SITE_DEMO_DME_SUPPLIERS,
+  ON_SITE_DEMO_DOCTORS,
+  ON_SITE_DEMO_DOCTOR_IDS,
+  ON_SITE_DEMO_FACILITIES,
+  ON_SITE_DEMO_FACILITY_IDS,
+  ON_SITE_DEMO_FIXTURES,
+  ON_SITE_DEMO_INSURANCE_PAYORS,
+  ON_SITE_DEMO_SCRIBES,
+  ON_SITE_DEMO_SCRIBE_IDS,
+  ON_SITE_DEMO_TENANT_ID,
+  ON_SITE_DEMO_WORKSPACE_ID,
+  ON_SITE_DIRECTORY_CATEGORY_SYSTEM,
+  ON_SITE_STAFF_ID_SYSTEM,
   OPENHI_REPO_TAG_KEY_ENV_VAR,
   OPENHI_RESOURCE_URN_SYSTEM,
   OPENHI_TAG_KEY_PREFIX_ENV_VAR,
@@ -4476,6 +4811,21 @@ export {
   OpsEventBus,
   OwningDeleteCascadeLambdas,
   OwningDeleteCascadeWorkflow,
+  PATIENT_ASSIGNED_BLOCK_TEMPLATE_EXTENSION_URL,
+  PATIENT_ASSIGNED_HOME_HEALTH_PROVIDER_EXTENSION_URL,
+  PATIENT_DEFAULT_CARE_LOCATION_EXTENSION_URL,
+  PATIENT_DEFAULT_CARE_SETTING_EXTENSION_URL,
+  PATIENT_HOSPICE_STATUS_EXTENSION_URL,
+  PATIENT_RESIDENCY_ADMISSION_DATE_EXTENSION_URL,
+  PATIENT_RESIDENCY_ROOM_EXTENSION_URL,
+  PAYMENT_STATUS,
+  PAYMENT_STATUS_SYSTEM,
+  PAYOR_PLAN_TYPE_COMMERCIAL,
+  PAYOR_PLAN_TYPE_MEDICARE,
+  PAYOR_PLAN_TYPE_MEDICARE_ADVANTAGE,
+  PAYOR_TYPE_COMMERCIAL,
+  PAYOR_TYPE_MEDICARE,
+  PAYOR_TYPE_MEDICARE_ADVANTAGE,
   PER_BRANCH_PREVIEW_PREFIX,
   PLACEHOLDER_TENANT_ID,
   PLACEHOLDER_WORKSPACE_ID,
@@ -4484,6 +4834,11 @@ export {
   POSTGRES_REPLICA_CLUSTER_ARN_SSM_NAME,
   POSTGRES_REPLICA_DATABASE_NAME_SSM_NAME,
   POSTGRES_REPLICA_SECRET_ARN_SSM_NAME,
+  PRACTITIONER_CREDENTIALING_EXTENSION_URL,
+  PRACTITIONER_CREDENTIALING_STATE_SUB_EXTENSION_URL,
+  PRACTITIONER_CREDENTIALING_STATUS_SUB_EXTENSION_URL,
+  PRACTITIONER_ROLE_PHYSICIAN,
+  PRACTITIONER_ROLE_SCRIBE,
   PROVISION_DEFAULT_WORKSPACE_DETAIL_TYPE,
   PerBranchHostname,
   PlatformDeployBridge,
@@ -4493,6 +4848,8 @@ export {
   PostConfirmationLambda,
   PreTokenGenerationLambda,
   ProvisionDefaultWorkspaceLambda,
+  QMB_EFFECTIVE_DATE_SUB_EXTENSION_URL,
+  QMB_STATUS_VALUE_SUB_EXTENSION_URL,
   export_RENAMABLE_ENTITY_TYPE as RENAMABLE_ENTITY_TYPE,
   RENAME_CASCADE_CONSUMER_NAME,
   RENAME_CASCADE_DEFAULT_CONCURRENCY,
@@ -4511,7 +4868,9 @@ export {
   SEED_SYSTEM_DATA_ACTOR_SYSTEM,
   SEED_SYSTEM_DATA_CONSUMER_NAME,
   SEED_SYSTEM_DATA_CONTROL_BUS_ENV_VAR,
+  SNOMED_SYSTEM,
   SSM_PARAM_NAME_FULL_DOMAIN,
+  STATE_MEDICAL_LICENSE_SYSTEM,
   STATIC_HOSTING_SERVICE_TYPE,
   SeedDemoDataLambda,
   SeedDemoDataWorkflow,
@@ -4519,22 +4878,70 @@ export {
   SeedSystemDataWorkflow,
   StaticContent,
   StaticHosting,
+  TOTAL_HOME_HEALTH_PATIENTS,
   USER_ONBOARDING_EVENT_SOURCE,
+  US_NPI_SYSTEM,
   UserOnboardingWorkflow,
+  WOUND_DEPTH_CODE,
+  WOUND_EXAM_PANEL_CODE,
+  WOUND_EXAM_PANEL_DISPLAY,
+  WOUND_LENGTH_CODE,
+  WOUND_STATUS_CODE,
+  WOUND_WIDTH_CODE,
   WorkflowDedupConsumerNameInvalidError,
   WorkflowDedupTable,
   WorkflowDedupTableDuplicateError,
+  __resetOnSiteDemoClaimCachesForTests,
+  __resetOnSiteDemoEncounterCachesForTests,
+  buildCredentialingQualifications,
   buildFhirCurrentResourceChangeDetail,
+  buildOnSiteDemoBlockAppointments,
+  buildOnSiteDemoClaims,
+  buildOnSiteDemoEncounters,
+  buildOnSiteDemoFacilityCoverages,
+  buildOnSiteDemoFacilityPatients,
+  buildOnSiteDemoHomeHealthCoverages,
+  buildOnSiteDemoHomeHealthPatients,
+  buildOnSiteDemoPaymentNotices,
+  buildOnSiteDemoWoundConditions,
+  buildOnSiteDemoWoundObservations,
+  buildOnSiteDemoWoundProcedures,
   buildProvisionDefaultWorkspaceRequestedDetail,
   computeBranchHash,
   demoMembershipId,
   demoRoleAssignmentId,
   demoRolesForUserInTenant,
   demoScenarioIdentifier,
+  facilityPatientsForBlock,
+  findOnSiteDemoBlockTemplate,
+  findOnSiteDemoFacilityPatientBlock,
+  findOnSiteDemoHomeHealthPatientProvider,
+  findOnSiteDemoHomeHealthPatientVisitCadenceDays,
   getDynamoDbDataStoreTableName,
   getPostgresReplicaSchemaName,
   getWorkflowDedupTableName,
+  homeHealthEligibleDoctors,
+  onSiteDemoBilledEncounterIds,
+  onSiteDemoClaimIds,
+  onSiteDemoDmeSupplierIds,
+  onSiteDemoEncounterIds,
+  onSiteDemoEncounterMetadata,
+  onSiteDemoEncountersForPatient,
+  onSiteDemoFacilityPatientIds,
+  onSiteDemoHomeHealthPatientIds,
+  onSiteDemoInsurancePayorIds,
+  onSiteDemoIntakeOnlyFacilityPatientIds,
+  onSiteDemoIntakeOnlyHomeHealthPatientIds,
+  onSiteDemoPaymentNoticeIds,
+  onSiteDemoScheduledFacilityPatientIds,
+  onSiteDemoScheduledHomeHealthPatientIds,
+  onSiteDemoUnbilledEncounterIds,
+  onSiteDemoWoundBearingPatientIds,
+  onSiteDemoWoundProcedurePatientIds,
   openHiTagKey,
-  openhiResourceIdentifier
+  openhiResourceIdentifier,
+  practitionerCredentialingForDoctor,
+  practitionerCredentialingForState,
+  woundConditionIdForPatient
 };
 //# sourceMappingURL=index.mjs.map