@openhi/constructs 0.0.162 → 0.0.163

package/lib/seed-demo-data.handler.js

@@ -785,59 +785,59 @@ var OPENHI_RESOURCE_URN_SYSTEM = "http://openhi.org/";
 var DEMO_PERIOD = { start: "2026-01-01T00:00:00Z" };
 var PLACEHOLDER_TENANT_ID = "placeholder-tenant-id";
 var PLACEHOLDER_WORKSPACE_ID = "placeholder-workspace-id";
-var ON_SITE_DEMO_TENANT_ID = "on-site-demo-tenant";
-var ON_SITE_DEMO_WORKSPACE_ID = "on-site-demo-workspace";
+var ON_SITE_DEMO_TENANT_ID = "01KDVDNKKD34R8DX97HRR0N69J";
+var ON_SITE_DEMO_WORKSPACE_ID = "01KDVDPKNJ9MZYC1PH8S4VTC7S";
 var DEV_USERS = [
   {
-    id: "dev-russell",
+    id: "01KDVDZC15D5R37PTBR2WVHH94",
     email: "russell@codedrifters.com",
     firstName: "Russell",
     lastName: "Ingram"
   },
   {
-    id: "dev-cameron",
+    id: "01KDVDZWMSYTKC0MHRPYKCNDF3",
     email: "cameron@codedrifters.com",
     firstName: "Cameron",
     lastName: "Childress"
   },
   {
-    id: "dev-neelima",
+    id: "01KDVE1C1CK58EHD8C5SSGWJQW",
     email: "neelima@codedrifters.com",
     firstName: "Neelima",
     lastName: "Ramaraju"
   },
   {
-    id: "dev-garon",
+    id: "01KDVE1W7T37E4SV629R2XC0EY",
     email: "garon@codedrifters.com",
     firstName: "Garon",
     lastName: "Bailey"
   },
   {
-    id: "dev-dave",
+    id: "01KDVE31S7PDWE2PED771VAQP6",
     email: "dave@codedrifters.com",
     firstName: "Dave",
     lastName: "Finlay"
   },
   {
-    id: "dev-drew",
+    id: "01KDVE4PZ61JTFT4S80KZ1BM4K",
     email: "drew@codedrifters.com",
     firstName: "Drew",
     lastName: "Morris"
   },
   {
-    id: "dev-jessica",
+    id: "01KDVE69RQ4GK8APBG1FFS0P5S",
     email: "jessica@codedrifters.com",
     firstName: "Jessica",
     lastName: "Branks"
   },
   {
-    id: "dev-jared",
+    id: "01KDVE7Q07TCMSS154HGKZWCYY",
     email: "jared@codedrifters.com",
     firstName: "Jared",
     lastName: "Trotter"
   },
   {
-    id: "dev-goddess",
+    id: "01KDVE8HWP9H361ZBQ4M1D5PGK",
     email: "goddess@codedrifters.com",
     firstName: "Goddess",
     lastName: "Culberson"
@@ -852,25 +852,33 @@ var DEV_USERS = [
   // out of band, and the seeded Cognito user picks it up via
   // AdminSetUserPassword on every seed run.
   {
-    id: "dev-e2e-admin-console",
+    id: "01KDVE99B649JPDTB8BX15XZVH",
     email: "e2e-admin-console@codedrifters.com",
     firstName: "E2E",
     lastName: "AdminConsole"
   }
 ];
+var DEMO_WOUND_CARE_TENANT_ID = "01KDVDQTK67CT2EEJ9DNMYSX05";
+var DEMO_WOUND_CARE_WORKSPACE_ID = "01KDVDRVPEDF48EAZCRSR7QSW5";
+var DEMO_PRIMARY_CARE_TENANT_ID = "01KDVDTC89KK3422W49AXCDW3Q";
+var DEMO_PRIMARY_CARE_WORKSPACE_ID = "01KDVDVEMA0TEFDGPX6TDRJ857";
+var DEMO_MIXED_TENANT_ID = "01KDVDWQFMN07BY8QSVZQA5AS9";
+var DEMO_MIXED_WORKSPACE_WOUND_CARE_ID = "01KDVDXJSHA1C3B1NY1QEZRMK2";
+var DEMO_MIXED_WORKSPACE_PRIMARY_CARE_ID = "01KDVDYQBFSRE80N3PZQXWEB3Y";
+var PLACEHOLDER_TENANT_SPEC = {
+  scenario: "placeholder",
+  tenantId: PLACEHOLDER_TENANT_ID,
+  tenantName: "OpenHI Placeholder Tenant",
+  workspaces: [
+    {
+      id: PLACEHOLDER_WORKSPACE_ID,
+      name: "OpenHI Placeholder Workspace",
+      roleSuffix: "workspace"
+    }
+  ]
+};
 var DEMO_TENANT_SPECS = [
-  {
-    scenario: "placeholder",
-    tenantId: PLACEHOLDER_TENANT_ID,
-    tenantName: "OpenHI Placeholder Tenant",
-    workspaces: [
-      {
-        id: PLACEHOLDER_WORKSPACE_ID,
-        name: "OpenHI Placeholder Workspace",
-        roleSuffix: "workspace"
-      }
-    ]
-  },
+  PLACEHOLDER_TENANT_SPEC,
   {
     scenario: "on-site-demo",
     tenantId: ON_SITE_DEMO_TENANT_ID,
@@ -885,11 +893,11 @@ var DEMO_TENANT_SPECS = [
   },
   {
     scenario: "demo-wound-care",
-    tenantId: "demo-wound-care-tenant",
+    tenantId: DEMO_WOUND_CARE_TENANT_ID,
     tenantName: "Cedarbrook Wound Healing Institute",
     workspaces: [
       {
-        id: "demo-wound-care-workspace",
+        id: DEMO_WOUND_CARE_WORKSPACE_ID,
         name: "Cedarbrook Outpatient Wound Clinic",
         roleSuffix: "workspace"
       }
@@ -897,11 +905,11 @@ var DEMO_TENANT_SPECS = [
   },
   {
     scenario: "demo-primary-care",
-    tenantId: "demo-primary-care-tenant",
+    tenantId: DEMO_PRIMARY_CARE_TENANT_ID,
     tenantName: "Maple Ridge Family Medicine",
     workspaces: [
       {
-        id: "demo-primary-care-workspace",
+        id: DEMO_PRIMARY_CARE_WORKSPACE_ID,
         name: "Maple Ridge Main Street Office",
         roleSuffix: "workspace"
       }
@@ -909,22 +917,249 @@ var DEMO_TENANT_SPECS = [
   },
   {
     scenario: "demo-mixed",
-    tenantId: "demo-mixed-tenant",
+    tenantId: DEMO_MIXED_TENANT_ID,
     tenantName: "Northbridge Health Network",
     workspaces: [
       {
-        id: "demo-mixed-workspace-wound-care",
+        id: DEMO_MIXED_WORKSPACE_WOUND_CARE_ID,
         name: "Northbridge Wound Care Center",
         roleSuffix: "workspace-wound-care"
       },
       {
-        id: "demo-mixed-workspace-primary-care",
+        id: DEMO_MIXED_WORKSPACE_PRIMARY_CARE_ID,
         name: "Northbridge Family Practice",
         roleSuffix: "workspace-primary-care"
       }
     ]
   }
 ];
+var ON_SITE_WOUNDS_TENANT_ID = "01KDY03CJBF6FWQG9B8WXYXXS6";
+var ON_SITE_WOUNDS_OKLAHOMA_WORKSPACE_ID = "01KDY03KW88CNSGKNB89M7FS2X";
+var ON_SITE_WOUNDS_TEXAS_WORKSPACE_ID = "01KDY04FCGYXVQGS24S0NG1ETM";
+var ON_SITE_MEDICAL_TENANT_ID = "01KDY063WE34DWA3J5260BSEME";
+var ON_SITE_MEDICAL_OKLAHOMA_WORKSPACE_ID = "01KDY06QV8DKYJJZ7X1DP0GGDD";
+var ON_SITE_MEDICAL_TEXAS_WORKSPACE_ID = "01KDY074RZXRZS5K9TBRCVVSX1";
+var ON_SITE_CLINIC_TENANT_ID = "01KDY07XGSMPX7AAM6ZJN8HWS2";
+var ON_SITE_CLINIC_OKLAHOMA_WORKSPACE_ID = "01KDY08F0J7DPTM7XZKV72QFNV";
+var ON_SITE_CLINIC_TEXAS_WORKSPACE_ID = "01KDY0A1YYY5TT4A1SP96KTF0G";
+var ON_SITE_UAT_TENANT_SPECS = [
+  {
+    scenario: "on-site-wounds",
+    tenantId: ON_SITE_WOUNDS_TENANT_ID,
+    tenantName: "On-Site Wounds",
+    workspaces: [
+      {
+        id: ON_SITE_WOUNDS_OKLAHOMA_WORKSPACE_ID,
+        name: "Oklahoma",
+        roleSuffix: "workspace-oklahoma"
+      },
+      {
+        id: ON_SITE_WOUNDS_TEXAS_WORKSPACE_ID,
+        name: "Texas",
+        roleSuffix: "workspace-texas"
+      }
+    ]
+  },
+  {
+    scenario: "on-site-medical",
+    tenantId: ON_SITE_MEDICAL_TENANT_ID,
+    tenantName: "On-Site Medical",
+    workspaces: [
+      {
+        id: ON_SITE_MEDICAL_OKLAHOMA_WORKSPACE_ID,
+        name: "Oklahoma",
+        roleSuffix: "workspace-oklahoma"
+      },
+      {
+        id: ON_SITE_MEDICAL_TEXAS_WORKSPACE_ID,
+        name: "Texas",
+        roleSuffix: "workspace-texas"
+      }
+    ]
+  },
+  {
+    scenario: "on-site-clinic",
+    tenantId: ON_SITE_CLINIC_TENANT_ID,
+    tenantName: "On-Site Clinic",
+    workspaces: [
+      {
+        id: ON_SITE_CLINIC_OKLAHOMA_WORKSPACE_ID,
+        name: "Oklahoma",
+        roleSuffix: "workspace-oklahoma"
+      },
+      {
+        id: ON_SITE_CLINIC_TEXAS_WORKSPACE_ID,
+        name: "Texas",
+        roleSuffix: "workspace-texas"
+      }
+    ]
+  }
+];
+var ON_SITE_TESTERS = [
+  {
+    id: "01KE0JG26M0CGFFP9P71PJHXKZ",
+    email: "kim@onsitewounds.com",
+    displayName: "Kim Leland, RN",
+    given: "Kim",
+    family: "Leland",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KE0JH2X6XCJAY8FVJKKKHBGK",
+    email: "kera@onsitewounds.com",
+    displayName: "Kera Morris",
+    given: "Kera",
+    family: "Morris",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KE0JHPB9K6AJNDYFDE17SQXT",
+    email: "nicole@onsitemed.com",
+    displayName: "Nicole Smith",
+    given: "Nicole",
+    family: "Smith",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KE0JJKAV56ECSSYHNZENCTTW",
+    email: "sidney@onsitewounds.com",
+    displayName: "Sidney Vaughn",
+    given: "Sidney",
+    family: "Vaughn",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JKX2ZK5H93JFFP1V8T3MF",
+    email: "chelsea@onsitewounds.com",
+    displayName: "Chelsea Romine",
+    given: "Chelsea",
+    family: "Romine",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JMWHW7HYB8DZD4J70PVSD",
+    email: "drmetheny@onsitewounds.com",
+    displayName: "Dr. Heidi Metheny",
+    given: "Heidi",
+    family: "Metheny",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JP9GEJR7JT0GNAB502DBV",
+    email: "drtucker@onsitewounds.com",
+    displayName: "Dr. Tucker",
+    family: "Tucker",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JPMV1X8Y5DQS3MYEJQP3T",
+    email: "drwright@onsitewounds.com",
+    displayName: "Dr. Wright",
+    family: "Wright",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JQ18T3BGQZWK1SRY5J73K",
+    email: "lauren@onsitewounds.com",
+    displayName: "Lauren",
+    given: "Lauren",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JQBG3X26EHWKBT71AYT6Y",
+    email: "caity.np@onsitewounds.com",
+    displayName: "Caity",
+    given: "Caity",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JS0VC6SDB9Q0S1XTKC031",
+    email: "shelly@onsitewounds.com",
+    displayName: "Shelly",
+    given: "Shelly",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JS90A94R4E2M1K6HMB0K6",
+    email: "kimi@onsitewounds.com",
+    displayName: "Kimi",
+    given: "Kimi",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JSH6B4A5SPJ65V1PQEHZA",
+    email: "erika@onsitemed.com",
+    displayName: "Erika Fernandez, MA",
+    given: "Erika",
+    family: "Fernandez",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JSQ6CWSCJS25PJEKQWGWM",
+    email: "dr.nguyen@onsiteprimary.com",
+    displayName: "Dr. Nguyen",
+    family: "Nguyen",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  // Extended UAT roster — all `tenant-admin` for now (tenant-scoped
+  // only; no platform/system-admin). Members of all three on-site
+  // tenants + both workspaces in each, and of the placeholder tenant.
+  {
+    id: "01KSSZ3K6BNZB6D18TTK5TQ9FA",
+    email: "ashton@onsitewounds.com",
+    displayName: "Ashton",
+    given: "Ashton",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KSSZ3K6C8B7SWHHRVA2HPWNA",
+    email: "debbie@onsitewounds.com",
+    displayName: "Debbie",
+    given: "Debbie",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KSSZ3K6CMEHW5EG2P474VDFE",
+    email: "kim.berkey@onsiteprimary.com",
+    displayName: "Kim Berkey",
+    given: "Kim",
+    family: "Berkey",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KSSZ3K6CYF9FXAS515YEZEB0",
+    email: "fanniesha@onsitewounds.com",
+    displayName: "Fanniesha",
+    given: "Fanniesha",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KSSZ3K6CDZ90PF1BQBWX55YT",
+    email: "brittany.jones@onsitewounds.com",
+    displayName: "Brittany Jones",
+    given: "Brittany",
+    family: "Jones",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KSSZ3K6C145GCG0ZH03DQJ0R",
+    email: "sabrina@onsiteprimary.com",
+    displayName: "Sabrina",
+    given: "Sabrina",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KSSZ3K6CQZBJGVME470DJQFP",
+    email: "stacey.cauthen@onsitewounds.com",
+    displayName: "Stacey Cauthen",
+    given: "Stacey",
+    family: "Cauthen",
+    role: import_types.PLATFORM_ROLE_CODE.TENANT_ADMIN
+  }
+];
+var onSiteTenantMembershipId = (userId, tenantId) => `onsite-membership-${userId}-${tenantId}`;
+var onSiteWorkspaceMembershipId = (userId, workspaceId) => `onsite-membership-${userId}-ws-${workspaceId}`;
+var onSiteRoleAssignmentId = (userId, tenantId, roleCode) => `onsite-roleassignment-${userId}-${tenantId}-${roleCode}`;
 var demoMembershipId = (devUserId, tenantId) => `demo-membership-${devUserId}-${tenantId}`;
 var demoRoleAssignmentId = (devUserId, tenantId, roleCode) => `demo-roleassignment-${devUserId}-${tenantId}-${roleCode}`;
 var demoScenarioIdentifier = (scenario, roleSuffix) => ({
@@ -4453,26 +4688,26 @@ var DEMO_DATA_PLANE_FIXTURES = [
   ON_SITE_DEMO_FIXTURES,
   buildWoundCareFixtures(
     "demo-wound-care",
-    "demo-wound-care-tenant",
-    "demo-wound-care-workspace",
+    DEMO_WOUND_CARE_TENANT_ID,
+    DEMO_WOUND_CARE_WORKSPACE_ID,
     "demo-wound-care"
   ),
   buildPrimaryCareFixtures(
     "demo-primary-care",
-    "demo-primary-care-tenant",
-    "demo-primary-care-workspace",
+    DEMO_PRIMARY_CARE_TENANT_ID,
+    DEMO_PRIMARY_CARE_WORKSPACE_ID,
     "demo-primary-care"
   ),
   buildWoundCareFixtures(
     "demo-mixed",
-    "demo-mixed-tenant",
-    "demo-mixed-workspace-wound-care",
+    DEMO_MIXED_TENANT_ID,
+    DEMO_MIXED_WORKSPACE_WOUND_CARE_ID,
     "demo-mixed-wound-care"
   ),
   buildPrimaryCareFixtures(
     "demo-mixed",
-    "demo-mixed-tenant",
-    "demo-mixed-workspace-primary-care",
+    DEMO_MIXED_TENANT_ID,
+    DEMO_MIXED_WORKSPACE_PRIMARY_CARE_ID,
     "demo-mixed-primary-care"
   )
 ];
@@ -6401,6 +6636,7 @@ var ConflictError = class extends DomainError {
 
 // src/data/operations/control/membership/membership-create-operation.ts
 var import_types5 = require("@openhi/types");
+var import_ulid = require("ulid");
 
 // src/data/operations/control/membership/membership-user-projection.ts
 var import_types3 = require("@openhi/types");
@@ -6682,7 +6918,7 @@ function extractCancellationReasons(err) {
 async function createMembershipOperation(params) {
   const { context, body, tableName } = params;
   const service = getDynamoControlService(tableName);
-  const id = body.id ?? `membership-${Date.now()}`;
+  const id = body.id ?? (0, import_ulid.ulid)();
   const parsedResource = typeof body.resource === "string" ? JSON.parse(body.resource) : body.resource ?? {};
   const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = `1`;
@@ -6811,6 +7047,7 @@ async function getRoleByIdOperation(params) {
 
 // src/data/operations/control/roleassignment/roleassignment-create-operation.ts
 var import_types8 = require("@openhi/types");
+var import_ulid2 = require("ulid");
 
 // src/data/operations/control/roleassignment/roleassignment-user-projection.ts
 var import_types6 = require("@openhi/types");
@@ -6932,7 +7169,7 @@ async function assertUserHasTenantMembershipOperation(params) {
 async function createRoleAssignmentOperation(params) {
   const { context, body, tableName } = params;
   const service = getDynamoControlService(tableName);
-  const id = body.id ?? `roleassignment-${Date.now()}`;
+  const id = body.id ?? (0, import_ulid2.ulid)();
   const parsedResource = typeof body.resource === "string" ? JSON.parse(body.resource) : body.resource ?? {};
   const lastUpdated = context.date ?? (/* @__PURE__ */ new Date()).toISOString();
   const vid = `1`;
@@ -7048,10 +7285,11 @@ async function createRoleAssignmentOperation(params) {
 
 // src/data/operations/control/tenant/tenant-create-operation.ts
 var import_types9 = require("@openhi/types");
+var import_ulid3 = require("ulid");
 async function createTenantOperation(params) {
   const { context, body, tableName } = params;
   const service = getDynamoControlService(tableName);
-  const id = body.id ?? `tenant-${Date.now()}`;
+  const id = body.id ?? (0, import_ulid3.ulid)();
   const lastUpdated = context.date;
   const vid = lastUpdated.replace(/[-:T.Z]/g, "").slice(0, 12) || Date.now().toString(36);
   const parsedResource = typeof body.resource === "string" ? JSON.parse(body.resource) : body.resource ?? {};
@@ -7070,6 +7308,7 @@ async function createTenantOperation(params) {
 
 // src/data/operations/control/workspace/workspace-create-operation.ts
 var import_types11 = require("@openhi/types");
+var import_ulid4 = require("ulid");
 
 // src/data/dynamo/dynamo-data-service.ts
 var import_electrodb16 = require("electrodb");
@@ -8229,7 +8468,7 @@ async function createWorkspaceOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId } = context;
   const service = getDynamoControlService(tableName);
-  const id = body.id ?? `workspace-${Date.now()}`;
+  const id = body.id ?? (0, import_ulid4.ulid)();
   const lastUpdated = context.date;
   const vid = lastUpdated.replace(/[-:T.Z]/g, "").slice(0, 12) || Date.now().toString(36);
   const parsedResource = typeof body.resource === "string" ? JSON.parse(body.resource) : body.resource ?? {};
@@ -8258,11 +8497,11 @@ async function createWorkspaceOperation(params) {
 }
 
 // src/data/operations/data/account/account-create-operation.ts
-var import_ulid = require("ulid");
+var import_ulid5 = require("ulid");
 async function createAccountOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId, workspaceId, date, actorId, actorName } = context;
-  const id = body.id ?? (0, import_ulid.ulid)();
+  const id = body.id ?? (0, import_ulid5.ulid)();
   const meta = {
     ...body.meta ?? {},
     lastUpdated: date,
@@ -8293,11 +8532,11 @@ async function createAccountOperation(params) {
 }
 
 // src/data/operations/data/appointment/appointment-create-operation.ts
-var import_ulid2 = require("ulid");
+var import_ulid6 = require("ulid");
 async function createAppointmentOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId, workspaceId, date, actorId, actorName } = context;
-  const id = body.id ?? (0, import_ulid2.ulid)();
+  const id = body.id ?? (0, import_ulid6.ulid)();
   const meta = {
     ...body.meta ?? {},
     lastUpdated: date,
@@ -8328,11 +8567,11 @@ async function createAppointmentOperation(params) {
 }
 
 // src/data/operations/data/claim/claim-create-operation.ts
-var import_ulid3 = require("ulid");
+var import_ulid7 = require("ulid");
 async function createClaimOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId, workspaceId, date, actorId, actorName } = context;
-  const id = body.id ?? (0, import_ulid3.ulid)();
+  const id = body.id ?? (0, import_ulid7.ulid)();
   const meta = {
     ...body.meta ?? {},
     lastUpdated: date,
@@ -8363,11 +8602,11 @@ async function createClaimOperation(params) {
 }
 
 // src/data/operations/data/condition/condition-create-operation.ts
-var import_ulid4 = require("ulid");
+var import_ulid8 = require("ulid");
 async function createConditionOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId, workspaceId, date, actorId, actorName } = context;
-  const id = body.id ?? (0, import_ulid4.ulid)();
+  const id = body.id ?? (0, import_ulid8.ulid)();
   const meta = {
     ...body.meta ?? {},
     lastUpdated: date,
@@ -8398,11 +8637,11 @@ async function createConditionOperation(params) {
 }
 
 // src/data/operations/data/coverage/coverage-create-operation.ts
-var import_ulid5 = require("ulid");
+var import_ulid9 = require("ulid");
 async function createCoverageOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId, workspaceId, date, actorId, actorName } = context;
-  const id = body.id ?? (0, import_ulid5.ulid)();
+  const id = body.id ?? (0, import_ulid9.ulid)();
   const meta = {
     ...body.meta ?? {},
     lastUpdated: date,
@@ -8433,11 +8672,11 @@ async function createCoverageOperation(params) {
 }
 
 // src/data/operations/data/encounter/encounter-create-operation.ts
-var import_ulid6 = require("ulid");
+var import_ulid10 = require("ulid");
 async function createEncounterOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId, workspaceId, date, actorId, actorName } = context;
-  const id = body.id ?? (0, import_ulid6.ulid)();
+  const id = body.id ?? (0, import_ulid10.ulid)();
   const meta = {
     ...body.meta ?? {},
     lastUpdated: date,
@@ -8468,11 +8707,11 @@ async function createEncounterOperation(params) {
 }
 
 // src/data/operations/data/location/location-create-operation.ts
-var import_ulid7 = require("ulid");
+var import_ulid11 = require("ulid");
 async function createLocationOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId, workspaceId, date, actorId, actorName } = context;
-  const id = body.id ?? (0, import_ulid7.ulid)();
+  const id = body.id ?? (0, import_ulid11.ulid)();
   const meta = {
     ...body.meta ?? {},
     lastUpdated: date,
@@ -8503,11 +8742,11 @@ async function createLocationOperation(params) {
 }
 
 // src/data/operations/data/observation/observation-create-operation.ts
-var import_ulid8 = require("ulid");
+var import_ulid12 = require("ulid");
 async function createObservationOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId, workspaceId, date, actorId, actorName } = context;
-  const id = body.id ?? (0, import_ulid8.ulid)();
+  const id = body.id ?? (0, import_ulid12.ulid)();
   const meta = {
     ...body.meta ?? {},
     lastUpdated: date,
@@ -8538,11 +8777,11 @@ async function createObservationOperation(params) {
 }
 
 // src/data/operations/data/organization/organization-create-operation.ts
-var import_ulid9 = require("ulid");
+var import_ulid13 = require("ulid");
 async function createOrganizationOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId, workspaceId, date, actorId, actorName } = context;
-  const id = body.id ?? (0, import_ulid9.ulid)();
+  const id = body.id ?? (0, import_ulid13.ulid)();
   const meta = {
     ...body.meta ?? {},
     lastUpdated: date,
@@ -8573,11 +8812,11 @@ async function createOrganizationOperation(params) {
 }
 
 // src/data/operations/data/patient/patient-create-operation.ts
-var import_ulid10 = require("ulid");
+var import_ulid14 = require("ulid");
 async function createPatientOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId, workspaceId, date, actorId, actorName } = context;
-  const id = body.id ?? (0, import_ulid10.ulid)();
+  const id = body.id ?? (0, import_ulid14.ulid)();
   const meta = {
     ...body.meta ?? {},
     lastUpdated: date,
@@ -8608,11 +8847,11 @@ async function createPatientOperation(params) {
 }
 
 // src/data/operations/data/paymentnotice/paymentnotice-create-operation.ts
-var import_ulid11 = require("ulid");
+var import_ulid15 = require("ulid");
 async function createPaymentNoticeOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId, workspaceId, date, actorId, actorName } = context;
-  const id = body.id ?? (0, import_ulid11.ulid)();
+  const id = body.id ?? (0, import_ulid15.ulid)();
   const meta = {
     ...body.meta ?? {},
     lastUpdated: date,
@@ -8643,11 +8882,11 @@ async function createPaymentNoticeOperation(params) {
 }
 
 // src/data/operations/data/practitioner/practitioner-create-operation.ts
-var import_ulid12 = require("ulid");
+var import_ulid16 = require("ulid");
 async function createPractitionerOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId, workspaceId, date, actorId, actorName } = context;
-  const id = body.id ?? (0, import_ulid12.ulid)();
+  const id = body.id ?? (0, import_ulid16.ulid)();
   const meta = {
     ...body.meta ?? {},
     lastUpdated: date,
@@ -8678,11 +8917,11 @@ async function createPractitionerOperation(params) {
 }
 
 // src/data/operations/data/procedure/procedure-create-operation.ts
-var import_ulid13 = require("ulid");
+var import_ulid17 = require("ulid");
 async function createProcedureOperation(params) {
   const { context, body, tableName } = params;
   const { tenantId, workspaceId, date, actorId, actorName } = context;
-  const id = body.id ?? (0, import_ulid13.ulid)();
+  const id = body.id ?? (0, import_ulid17.ulid)();
   const meta = {
     ...body.meta ?? {},
     lastUpdated: date,
@@ -8855,6 +9094,204 @@ var upsertUser = async (context, user, cognitoSub) => {
     lastUpdated: context.date ?? (/* @__PURE__ */ new Date()).toISOString()
   }).go();
 };
+var buildTesterName = (tester) => ({
+  text: tester.displayName,
+  ...tester.given !== void 0 ? { given: [tester.given] } : {},
+  ...tester.family !== void 0 ? { family: tester.family } : {}
+});
+var testerUserResourceBody = (tester, cognitoSub) => ({
+  resourceType: "User",
+  id: tester.id,
+  name: [buildTesterName(tester)],
+  telecom: [{ system: "email", value: tester.email }],
+  status: "active",
+  cognitoSub,
+  currentTenant: { reference: `Tenant/${ON_SITE_WOUNDS_TENANT_ID}` },
+  currentWorkspace: {
+    reference: `Workspace/${ON_SITE_WOUNDS_OKLAHOMA_WORKSPACE_ID}`
+  }
+});
+var upsertTesterUser = async (context, tester, cognitoSub) => {
+  const service = getDynamoControlService();
+  const resource = testerUserResourceBody(tester, cognitoSub);
+  const summary = JSON.stringify((0, import_types12.extractSummary)(resource));
+  await service.entities.user.put({
+    id: tester.id,
+    cognitoSub,
+    resource: JSON.stringify(resource),
+    summary,
+    vid: "1",
+    lastUpdated: context.date ?? (/* @__PURE__ */ new Date()).toISOString()
+  }).go();
+};
+var onSiteTenantMembershipBody = (spec, userId, membershipId) => ({
+  identifier: [
+    demoScenarioIdentifier(spec.scenario, `membership-${userId}`),
+    openhiResourceIdentifier({
+      tenantId: spec.tenantId,
+      workspaceId: "",
+      resourceType: "Membership",
+      id: membershipId
+    })
+  ],
+  user: { reference: `User/${userId}`, type: "User" },
+  tenant: { reference: `Tenant/${spec.tenantId}`, type: "Tenant" },
+  period: DEMO_PERIOD
+});
+var onSiteWorkspaceMembershipBody = (spec, workspace, userId, membershipId) => ({
+  identifier: [
+    demoScenarioIdentifier(
+      spec.scenario,
+      `membership-${userId}-${workspace.roleSuffix}`
+    ),
+    openhiResourceIdentifier({
+      tenantId: spec.tenantId,
+      workspaceId: workspace.id,
+      resourceType: "Membership",
+      id: membershipId
+    })
+  ],
+  user: { reference: `User/${userId}`, type: "User" },
+  tenant: { reference: `Tenant/${spec.tenantId}`, type: "Tenant" },
+  workspace: { reference: `Workspace/${workspace.id}`, type: "Workspace" },
+  period: DEMO_PERIOD
+});
+var onSiteRoleAssignmentBody = (spec, userId, roleCode, roleAssignmentId) => ({
+  identifier: [
+    demoScenarioIdentifier(
+      spec.scenario,
+      `roleassignment-${userId}-${roleCode}`
+    ),
+    openhiResourceIdentifier({
+      tenantId: spec.tenantId,
+      workspaceId: "",
+      resourceType: "RoleAssignment",
+      id: roleAssignmentId
+    })
+  ],
+  user: { reference: `User/${userId}`, type: "User" },
+  role: { reference: `Role/${idForRoleCode(roleCode)}`, type: "Role" },
+  tenant: { reference: `Tenant/${spec.tenantId}`, type: "Tenant" },
+  period: DEMO_PERIOD
+});
+var seedOnSiteUatForPrincipal = async (failures, baseContext, userId, role) => {
+  for (const spec of ON_SITE_UAT_TENANT_SPECS) {
+    const tenantContext = {
+      ...baseContext,
+      tenantId: spec.tenantId
+    };
+    const scope = `${userId}@${spec.tenantId}`;
+    const tenantMembershipId = onSiteTenantMembershipId(userId, spec.tenantId);
+    await tryRun(
+      failures,
+      "phase-2",
+      scope,
+      "Membership",
+      tenantMembershipId,
+      () => createMembershipOperation({
+        context: tenantContext,
+        body: {
+          id: tenantMembershipId,
+          resource: onSiteTenantMembershipBody(
+            spec,
+            userId,
+            tenantMembershipId
+          )
+        }
+      })
+    );
+    for (const workspace of spec.workspaces) {
+      const wsMembershipId = onSiteWorkspaceMembershipId(userId, workspace.id);
+      await tryRun(
+        failures,
+        "phase-2",
+        scope,
+        "Membership",
+        wsMembershipId,
+        () => createMembershipOperation({
+          context: tenantContext,
+          body: {
+            id: wsMembershipId,
+            resource: onSiteWorkspaceMembershipBody(
+              spec,
+              workspace,
+              userId,
+              wsMembershipId
+            )
+          }
+        })
+      );
+    }
+    const raId = onSiteRoleAssignmentId(userId, spec.tenantId, role);
+    await tryRun(
+      failures,
+      "phase-2",
+      scope,
+      "RoleAssignment",
+      raId,
+      () => createRoleAssignmentOperation({
+        context: tenantContext,
+        body: {
+          id: raId,
+          resource: onSiteRoleAssignmentBody(spec, userId, role, raId)
+        }
+      })
+    );
+  }
+};
+var seedPlaceholderTenantForPrincipal = async (failures, baseContext, userId, role) => {
+  const tenantContext = {
+    ...baseContext,
+    tenantId: PLACEHOLDER_TENANT_SPEC.tenantId
+  };
+  const scope = `${userId}@${PLACEHOLDER_TENANT_SPEC.tenantId}`;
+  const tenantMembershipId = onSiteTenantMembershipId(
+    userId,
+    PLACEHOLDER_TENANT_SPEC.tenantId
+  );
+  await tryRun(
+    failures,
+    "phase-2",
+    scope,
+    "Membership",
+    tenantMembershipId,
+    () => createMembershipOperation({
+      context: tenantContext,
+      body: {
+        id: tenantMembershipId,
+        resource: onSiteTenantMembershipBody(
+          PLACEHOLDER_TENANT_SPEC,
+          userId,
+          tenantMembershipId
+        )
+      }
+    })
+  );
+  const raId = onSiteRoleAssignmentId(
+    userId,
+    PLACEHOLDER_TENANT_SPEC.tenantId,
+    role
+  );
+  await tryRun(
+    failures,
+    "phase-2",
+    scope,
+    "RoleAssignment",
+    raId,
+    () => createRoleAssignmentOperation({
+      context: tenantContext,
+      body: {
+        id: raId,
+        resource: onSiteRoleAssignmentBody(
+          PLACEHOLDER_TENANT_SPEC,
+          userId,
+          role,
+          raId
+        )
+      }
+    })
+  );
+};
 var seedWorkspaceDataPlane = async (baseContext, group, failures) => {
   const workspaceContext = {
     ...baseContext,
@@ -9042,9 +9479,9 @@ var seedWorkspaceDataPlane = async (baseContext, group, failures) => {
   }
 };
 var seedDemoGraph = async (params) => {
-  const { baseContext, devUsers, cognito } = params;
+  const { baseContext, devUsers, cognito, onSiteTesters = [] } = params;
   const failures = [];
-  for (const spec of DEMO_TENANT_SPECS) {
+  for (const spec of [...DEMO_TENANT_SPECS, ...ON_SITE_UAT_TENANT_SPECS]) {
     const tenantContext = {
       ...baseContext,
       tenantId: spec.tenantId
@@ -9174,6 +9611,47 @@ var seedDemoGraph = async (params) => {
         }
       })
     );
+    await seedOnSiteUatForPrincipal(
+      failures,
+      baseContext,
+      user.id,
+      import_types12.PLATFORM_ROLE_CODE.TENANT_ADMIN
+    );
+  }
+  for (const tester of onSiteTesters) {
+    let cognitoSub;
+    try {
+      cognitoSub = await cognito.ensureUser(tester.email);
+    } catch (err) {
+      failures.push({
+        phase: "phase-2",
+        scope: tester.id,
+        resourceType: "CognitoUser",
+        resourceId: tester.email,
+        error: err
+      });
+      continue;
+    }
+    await tryRun(
+      failures,
+      "phase-2",
+      tester.id,
+      "User",
+      tester.id,
+      () => upsertTesterUser(baseContext, tester, cognitoSub)
+    );
+    await seedPlaceholderTenantForPrincipal(
+      failures,
+      baseContext,
+      tester.id,
+      tester.role
+    );
+    await seedOnSiteUatForPrincipal(
+      failures,
+      baseContext,
+      tester.id,
+      tester.role
+    );
   }
   for (const group of DEMO_DATA_PLANE_FIXTURES) {
     try {
@@ -9192,7 +9670,7 @@ var seedDemoGraph = async (params) => {
     throw aggregateFailureError(failures);
   }
 };
-var runSeedDemoData = async (event, deps, devUsers) => {
+var runSeedDemoData = async (event, deps, devUsers, onSiteTesters = []) => {
   const parsed = (0, import_workflows3.parseWorkflowEvent)(event, import_workflows.PlatformSystemDataSeededV1);
   const recordResult = await deps.dedupClient.recordIfAbsent({
     consumerName: SEED_DEMO_DATA_CONSUMER_NAME,
@@ -9216,7 +9694,8 @@ var runSeedDemoData = async (event, deps, devUsers) => {
     await deps.seedDemoGraph({
       baseContext,
       devUsers,
-      cognito: deps.cognito
+      cognito: deps.cognito,
+      onSiteTesters
     });
   } catch (err) {
     await deps.dedupClient.markFailed({
@@ -9370,7 +9849,7 @@ var productionDependencies = () => {
     cognito
   };
 };
-var handler = async (event) => runSeedDemoData(event, productionDependencies(), DEV_USERS);
+var handler = async (event) => runSeedDemoData(event, productionDependencies(), DEV_USERS, ON_SITE_TESTERS);
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   SEED_DEMO_DATA_USER_POOL_ID_ENV_VAR,