@openhi/constructs 0.0.162 → 0.0.163

package/lib/{chunk-7TRO2STL.mjs → chunk-ZODGX37H.mjs}

@@ -20,7 +20,7 @@ import {
   createRoleAssignmentOperation,
   createTenantOperation,
   createWorkspaceOperation
-} from "./chunk-MLFMW5IF.mjs";
+} from "./chunk-XHG4SODS.mjs";
 import {
   NotFoundError
 } from "./chunk-FYHBHHWK.mjs";
@@ -65,59 +65,59 @@ var OPENHI_RESOURCE_URN_SYSTEM = "http://openhi.org/";
 var DEMO_PERIOD = { start: "2026-01-01T00:00:00Z" };
 var PLACEHOLDER_TENANT_ID = "placeholder-tenant-id";
 var PLACEHOLDER_WORKSPACE_ID = "placeholder-workspace-id";
-var ON_SITE_DEMO_TENANT_ID = "on-site-demo-tenant";
-var ON_SITE_DEMO_WORKSPACE_ID = "on-site-demo-workspace";
+var ON_SITE_DEMO_TENANT_ID = "01KDVDNKKD34R8DX97HRR0N69J";
+var ON_SITE_DEMO_WORKSPACE_ID = "01KDVDPKNJ9MZYC1PH8S4VTC7S";
 var DEV_USERS = [
   {
-    id: "dev-russell",
+    id: "01KDVDZC15D5R37PTBR2WVHH94",
     email: "russell@codedrifters.com",
     firstName: "Russell",
     lastName: "Ingram"
   },
   {
-    id: "dev-cameron",
+    id: "01KDVDZWMSYTKC0MHRPYKCNDF3",
     email: "cameron@codedrifters.com",
     firstName: "Cameron",
     lastName: "Childress"
   },
   {
-    id: "dev-neelima",
+    id: "01KDVE1C1CK58EHD8C5SSGWJQW",
     email: "neelima@codedrifters.com",
     firstName: "Neelima",
     lastName: "Ramaraju"
   },
   {
-    id: "dev-garon",
+    id: "01KDVE1W7T37E4SV629R2XC0EY",
     email: "garon@codedrifters.com",
     firstName: "Garon",
     lastName: "Bailey"
   },
   {
-    id: "dev-dave",
+    id: "01KDVE31S7PDWE2PED771VAQP6",
     email: "dave@codedrifters.com",
     firstName: "Dave",
     lastName: "Finlay"
   },
   {
-    id: "dev-drew",
+    id: "01KDVE4PZ61JTFT4S80KZ1BM4K",
     email: "drew@codedrifters.com",
     firstName: "Drew",
     lastName: "Morris"
   },
   {
-    id: "dev-jessica",
+    id: "01KDVE69RQ4GK8APBG1FFS0P5S",
     email: "jessica@codedrifters.com",
     firstName: "Jessica",
     lastName: "Branks"
   },
   {
-    id: "dev-jared",
+    id: "01KDVE7Q07TCMSS154HGKZWCYY",
     email: "jared@codedrifters.com",
     firstName: "Jared",
     lastName: "Trotter"
   },
   {
-    id: "dev-goddess",
+    id: "01KDVE8HWP9H361ZBQ4M1D5PGK",
     email: "goddess@codedrifters.com",
     firstName: "Goddess",
     lastName: "Culberson"
@@ -132,25 +132,33 @@ var DEV_USERS = [
   // out of band, and the seeded Cognito user picks it up via
   // AdminSetUserPassword on every seed run.
   {
-    id: "dev-e2e-admin-console",
+    id: "01KDVE99B649JPDTB8BX15XZVH",
     email: "e2e-admin-console@codedrifters.com",
     firstName: "E2E",
     lastName: "AdminConsole"
   }
 ];
+var DEMO_WOUND_CARE_TENANT_ID = "01KDVDQTK67CT2EEJ9DNMYSX05";
+var DEMO_WOUND_CARE_WORKSPACE_ID = "01KDVDRVPEDF48EAZCRSR7QSW5";
+var DEMO_PRIMARY_CARE_TENANT_ID = "01KDVDTC89KK3422W49AXCDW3Q";
+var DEMO_PRIMARY_CARE_WORKSPACE_ID = "01KDVDVEMA0TEFDGPX6TDRJ857";
+var DEMO_MIXED_TENANT_ID = "01KDVDWQFMN07BY8QSVZQA5AS9";
+var DEMO_MIXED_WORKSPACE_WOUND_CARE_ID = "01KDVDXJSHA1C3B1NY1QEZRMK2";
+var DEMO_MIXED_WORKSPACE_PRIMARY_CARE_ID = "01KDVDYQBFSRE80N3PZQXWEB3Y";
+var PLACEHOLDER_TENANT_SPEC = {
+  scenario: "placeholder",
+  tenantId: PLACEHOLDER_TENANT_ID,
+  tenantName: "OpenHI Placeholder Tenant",
+  workspaces: [
+    {
+      id: PLACEHOLDER_WORKSPACE_ID,
+      name: "OpenHI Placeholder Workspace",
+      roleSuffix: "workspace"
+    }
+  ]
+};
 var DEMO_TENANT_SPECS = [
-  {
-    scenario: "placeholder",
-    tenantId: PLACEHOLDER_TENANT_ID,
-    tenantName: "OpenHI Placeholder Tenant",
-    workspaces: [
-      {
-        id: PLACEHOLDER_WORKSPACE_ID,
-        name: "OpenHI Placeholder Workspace",
-        roleSuffix: "workspace"
-      }
-    ]
-  },
+  PLACEHOLDER_TENANT_SPEC,
   {
     scenario: "on-site-demo",
     tenantId: ON_SITE_DEMO_TENANT_ID,
@@ -165,11 +173,11 @@ var DEMO_TENANT_SPECS = [
   },
   {
     scenario: "demo-wound-care",
-    tenantId: "demo-wound-care-tenant",
+    tenantId: DEMO_WOUND_CARE_TENANT_ID,
     tenantName: "Cedarbrook Wound Healing Institute",
     workspaces: [
       {
-        id: "demo-wound-care-workspace",
+        id: DEMO_WOUND_CARE_WORKSPACE_ID,
         name: "Cedarbrook Outpatient Wound Clinic",
         roleSuffix: "workspace"
       }
@@ -177,11 +185,11 @@ var DEMO_TENANT_SPECS = [
   },
   {
     scenario: "demo-primary-care",
-    tenantId: "demo-primary-care-tenant",
+    tenantId: DEMO_PRIMARY_CARE_TENANT_ID,
     tenantName: "Maple Ridge Family Medicine",
     workspaces: [
       {
-        id: "demo-primary-care-workspace",
+        id: DEMO_PRIMARY_CARE_WORKSPACE_ID,
         name: "Maple Ridge Main Street Office",
         roleSuffix: "workspace"
       }
@@ -189,22 +197,249 @@ var DEMO_TENANT_SPECS = [
   },
   {
     scenario: "demo-mixed",
-    tenantId: "demo-mixed-tenant",
+    tenantId: DEMO_MIXED_TENANT_ID,
     tenantName: "Northbridge Health Network",
     workspaces: [
       {
-        id: "demo-mixed-workspace-wound-care",
+        id: DEMO_MIXED_WORKSPACE_WOUND_CARE_ID,
         name: "Northbridge Wound Care Center",
         roleSuffix: "workspace-wound-care"
       },
       {
-        id: "demo-mixed-workspace-primary-care",
+        id: DEMO_MIXED_WORKSPACE_PRIMARY_CARE_ID,
         name: "Northbridge Family Practice",
         roleSuffix: "workspace-primary-care"
       }
     ]
   }
 ];
+var ON_SITE_WOUNDS_TENANT_ID = "01KDY03CJBF6FWQG9B8WXYXXS6";
+var ON_SITE_WOUNDS_OKLAHOMA_WORKSPACE_ID = "01KDY03KW88CNSGKNB89M7FS2X";
+var ON_SITE_WOUNDS_TEXAS_WORKSPACE_ID = "01KDY04FCGYXVQGS24S0NG1ETM";
+var ON_SITE_MEDICAL_TENANT_ID = "01KDY063WE34DWA3J5260BSEME";
+var ON_SITE_MEDICAL_OKLAHOMA_WORKSPACE_ID = "01KDY06QV8DKYJJZ7X1DP0GGDD";
+var ON_SITE_MEDICAL_TEXAS_WORKSPACE_ID = "01KDY074RZXRZS5K9TBRCVVSX1";
+var ON_SITE_CLINIC_TENANT_ID = "01KDY07XGSMPX7AAM6ZJN8HWS2";
+var ON_SITE_CLINIC_OKLAHOMA_WORKSPACE_ID = "01KDY08F0J7DPTM7XZKV72QFNV";
+var ON_SITE_CLINIC_TEXAS_WORKSPACE_ID = "01KDY0A1YYY5TT4A1SP96KTF0G";
+var ON_SITE_UAT_TENANT_SPECS = [
+  {
+    scenario: "on-site-wounds",
+    tenantId: ON_SITE_WOUNDS_TENANT_ID,
+    tenantName: "On-Site Wounds",
+    workspaces: [
+      {
+        id: ON_SITE_WOUNDS_OKLAHOMA_WORKSPACE_ID,
+        name: "Oklahoma",
+        roleSuffix: "workspace-oklahoma"
+      },
+      {
+        id: ON_SITE_WOUNDS_TEXAS_WORKSPACE_ID,
+        name: "Texas",
+        roleSuffix: "workspace-texas"
+      }
+    ]
+  },
+  {
+    scenario: "on-site-medical",
+    tenantId: ON_SITE_MEDICAL_TENANT_ID,
+    tenantName: "On-Site Medical",
+    workspaces: [
+      {
+        id: ON_SITE_MEDICAL_OKLAHOMA_WORKSPACE_ID,
+        name: "Oklahoma",
+        roleSuffix: "workspace-oklahoma"
+      },
+      {
+        id: ON_SITE_MEDICAL_TEXAS_WORKSPACE_ID,
+        name: "Texas",
+        roleSuffix: "workspace-texas"
+      }
+    ]
+  },
+  {
+    scenario: "on-site-clinic",
+    tenantId: ON_SITE_CLINIC_TENANT_ID,
+    tenantName: "On-Site Clinic",
+    workspaces: [
+      {
+        id: ON_SITE_CLINIC_OKLAHOMA_WORKSPACE_ID,
+        name: "Oklahoma",
+        roleSuffix: "workspace-oklahoma"
+      },
+      {
+        id: ON_SITE_CLINIC_TEXAS_WORKSPACE_ID,
+        name: "Texas",
+        roleSuffix: "workspace-texas"
+      }
+    ]
+  }
+];
+var ON_SITE_TESTERS = [
+  {
+    id: "01KE0JG26M0CGFFP9P71PJHXKZ",
+    email: "kim@onsitewounds.com",
+    displayName: "Kim Leland, RN",
+    given: "Kim",
+    family: "Leland",
+    role: PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KE0JH2X6XCJAY8FVJKKKHBGK",
+    email: "kera@onsitewounds.com",
+    displayName: "Kera Morris",
+    given: "Kera",
+    family: "Morris",
+    role: PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KE0JHPB9K6AJNDYFDE17SQXT",
+    email: "nicole@onsitemed.com",
+    displayName: "Nicole Smith",
+    given: "Nicole",
+    family: "Smith",
+    role: PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KE0JJKAV56ECSSYHNZENCTTW",
+    email: "sidney@onsitewounds.com",
+    displayName: "Sidney Vaughn",
+    given: "Sidney",
+    family: "Vaughn",
+    role: PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JKX2ZK5H93JFFP1V8T3MF",
+    email: "chelsea@onsitewounds.com",
+    displayName: "Chelsea Romine",
+    given: "Chelsea",
+    family: "Romine",
+    role: PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JMWHW7HYB8DZD4J70PVSD",
+    email: "drmetheny@onsitewounds.com",
+    displayName: "Dr. Heidi Metheny",
+    given: "Heidi",
+    family: "Metheny",
+    role: PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JP9GEJR7JT0GNAB502DBV",
+    email: "drtucker@onsitewounds.com",
+    displayName: "Dr. Tucker",
+    family: "Tucker",
+    role: PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JPMV1X8Y5DQS3MYEJQP3T",
+    email: "drwright@onsitewounds.com",
+    displayName: "Dr. Wright",
+    family: "Wright",
+    role: PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JQ18T3BGQZWK1SRY5J73K",
+    email: "lauren@onsitewounds.com",
+    displayName: "Lauren",
+    given: "Lauren",
+    role: PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JQBG3X26EHWKBT71AYT6Y",
+    email: "caity.np@onsitewounds.com",
+    displayName: "Caity",
+    given: "Caity",
+    role: PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JS0VC6SDB9Q0S1XTKC031",
+    email: "shelly@onsitewounds.com",
+    displayName: "Shelly",
+    given: "Shelly",
+    role: PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JS90A94R4E2M1K6HMB0K6",
+    email: "kimi@onsitewounds.com",
+    displayName: "Kimi",
+    given: "Kimi",
+    role: PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JSH6B4A5SPJ65V1PQEHZA",
+    email: "erika@onsitemed.com",
+    displayName: "Erika Fernandez, MA",
+    given: "Erika",
+    family: "Fernandez",
+    role: PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  {
+    id: "01KE0JSQ6CWSCJS25PJEKQWGWM",
+    email: "dr.nguyen@onsiteprimary.com",
+    displayName: "Dr. Nguyen",
+    family: "Nguyen",
+    role: PLATFORM_ROLE_CODE.TENANT_USER
+  },
+  // Extended UAT roster — all `tenant-admin` for now (tenant-scoped
+  // only; no platform/system-admin). Members of all three on-site
+  // tenants + both workspaces in each, and of the placeholder tenant.
+  {
+    id: "01KSSZ3K6BNZB6D18TTK5TQ9FA",
+    email: "ashton@onsitewounds.com",
+    displayName: "Ashton",
+    given: "Ashton",
+    role: PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KSSZ3K6C8B7SWHHRVA2HPWNA",
+    email: "debbie@onsitewounds.com",
+    displayName: "Debbie",
+    given: "Debbie",
+    role: PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KSSZ3K6CMEHW5EG2P474VDFE",
+    email: "kim.berkey@onsiteprimary.com",
+    displayName: "Kim Berkey",
+    given: "Kim",
+    family: "Berkey",
+    role: PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KSSZ3K6CYF9FXAS515YEZEB0",
+    email: "fanniesha@onsitewounds.com",
+    displayName: "Fanniesha",
+    given: "Fanniesha",
+    role: PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KSSZ3K6CDZ90PF1BQBWX55YT",
+    email: "brittany.jones@onsitewounds.com",
+    displayName: "Brittany Jones",
+    given: "Brittany",
+    family: "Jones",
+    role: PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KSSZ3K6C145GCG0ZH03DQJ0R",
+    email: "sabrina@onsiteprimary.com",
+    displayName: "Sabrina",
+    given: "Sabrina",
+    role: PLATFORM_ROLE_CODE.TENANT_ADMIN
+  },
+  {
+    id: "01KSSZ3K6CQZBJGVME470DJQFP",
+    email: "stacey.cauthen@onsitewounds.com",
+    displayName: "Stacey Cauthen",
+    given: "Stacey",
+    family: "Cauthen",
+    role: PLATFORM_ROLE_CODE.TENANT_ADMIN
+  }
+];
+var onSiteTenantMembershipId = (userId, tenantId) => `onsite-membership-${userId}-${tenantId}`;
+var onSiteWorkspaceMembershipId = (userId, workspaceId) => `onsite-membership-${userId}-ws-${workspaceId}`;
+var onSiteRoleAssignmentId = (userId, tenantId, roleCode) => `onsite-roleassignment-${userId}-${tenantId}-${roleCode}`;
 var demoMembershipId = (devUserId, tenantId) => `demo-membership-${devUserId}-${tenantId}`;
 var demoRoleAssignmentId = (devUserId, tenantId, roleCode) => `demo-roleassignment-${devUserId}-${tenantId}-${roleCode}`;
 var demoScenarioIdentifier = (scenario, roleSuffix) => ({
@@ -3759,26 +3994,26 @@ var DEMO_DATA_PLANE_FIXTURES = [
   ON_SITE_DEMO_FIXTURES,
   buildWoundCareFixtures(
     "demo-wound-care",
-    "demo-wound-care-tenant",
-    "demo-wound-care-workspace",
+    DEMO_WOUND_CARE_TENANT_ID,
+    DEMO_WOUND_CARE_WORKSPACE_ID,
     "demo-wound-care"
   ),
   buildPrimaryCareFixtures(
     "demo-primary-care",
-    "demo-primary-care-tenant",
-    "demo-primary-care-workspace",
+    DEMO_PRIMARY_CARE_TENANT_ID,
+    DEMO_PRIMARY_CARE_WORKSPACE_ID,
     "demo-primary-care"
   ),
   buildWoundCareFixtures(
     "demo-mixed",
-    "demo-mixed-tenant",
-    "demo-mixed-workspace-wound-care",
+    DEMO_MIXED_TENANT_ID,
+    DEMO_MIXED_WORKSPACE_WOUND_CARE_ID,
     "demo-mixed-wound-care"
   ),
   buildPrimaryCareFixtures(
     "demo-mixed",
-    "demo-mixed-tenant",
-    "demo-mixed-workspace-primary-care",
+    DEMO_MIXED_TENANT_ID,
+    DEMO_MIXED_WORKSPACE_PRIMARY_CARE_ID,
     "demo-mixed-primary-care"
   )
 ];
@@ -3950,6 +4185,204 @@ var upsertUser = async (context, user, cognitoSub) => {
     lastUpdated: context.date ?? (/* @__PURE__ */ new Date()).toISOString()
   }).go();
 };
+var buildTesterName = (tester) => ({
+  text: tester.displayName,
+  ...tester.given !== void 0 ? { given: [tester.given] } : {},
+  ...tester.family !== void 0 ? { family: tester.family } : {}
+});
+var testerUserResourceBody = (tester, cognitoSub) => ({
+  resourceType: "User",
+  id: tester.id,
+  name: [buildTesterName(tester)],
+  telecom: [{ system: "email", value: tester.email }],
+  status: "active",
+  cognitoSub,
+  currentTenant: { reference: `Tenant/${ON_SITE_WOUNDS_TENANT_ID}` },
+  currentWorkspace: {
+    reference: `Workspace/${ON_SITE_WOUNDS_OKLAHOMA_WORKSPACE_ID}`
+  }
+});
+var upsertTesterUser = async (context, tester, cognitoSub) => {
+  const service = getDynamoControlService();
+  const resource = testerUserResourceBody(tester, cognitoSub);
+  const summary = JSON.stringify(extractSummary(resource));
+  await service.entities.user.put({
+    id: tester.id,
+    cognitoSub,
+    resource: JSON.stringify(resource),
+    summary,
+    vid: "1",
+    lastUpdated: context.date ?? (/* @__PURE__ */ new Date()).toISOString()
+  }).go();
+};
+var onSiteTenantMembershipBody = (spec, userId, membershipId) => ({
+  identifier: [
+    demoScenarioIdentifier(spec.scenario, `membership-${userId}`),
+    openhiResourceIdentifier({
+      tenantId: spec.tenantId,
+      workspaceId: "",
+      resourceType: "Membership",
+      id: membershipId
+    })
+  ],
+  user: { reference: `User/${userId}`, type: "User" },
+  tenant: { reference: `Tenant/${spec.tenantId}`, type: "Tenant" },
+  period: DEMO_PERIOD
+});
+var onSiteWorkspaceMembershipBody = (spec, workspace, userId, membershipId) => ({
+  identifier: [
+    demoScenarioIdentifier(
+      spec.scenario,
+      `membership-${userId}-${workspace.roleSuffix}`
+    ),
+    openhiResourceIdentifier({
+      tenantId: spec.tenantId,
+      workspaceId: workspace.id,
+      resourceType: "Membership",
+      id: membershipId
+    })
+  ],
+  user: { reference: `User/${userId}`, type: "User" },
+  tenant: { reference: `Tenant/${spec.tenantId}`, type: "Tenant" },
+  workspace: { reference: `Workspace/${workspace.id}`, type: "Workspace" },
+  period: DEMO_PERIOD
+});
+var onSiteRoleAssignmentBody = (spec, userId, roleCode, roleAssignmentId) => ({
+  identifier: [
+    demoScenarioIdentifier(
+      spec.scenario,
+      `roleassignment-${userId}-${roleCode}`
+    ),
+    openhiResourceIdentifier({
+      tenantId: spec.tenantId,
+      workspaceId: "",
+      resourceType: "RoleAssignment",
+      id: roleAssignmentId
+    })
+  ],
+  user: { reference: `User/${userId}`, type: "User" },
+  role: { reference: `Role/${idForRoleCode(roleCode)}`, type: "Role" },
+  tenant: { reference: `Tenant/${spec.tenantId}`, type: "Tenant" },
+  period: DEMO_PERIOD
+});
+var seedOnSiteUatForPrincipal = async (failures, baseContext, userId, role) => {
+  for (const spec of ON_SITE_UAT_TENANT_SPECS) {
+    const tenantContext = {
+      ...baseContext,
+      tenantId: spec.tenantId
+    };
+    const scope = `${userId}@${spec.tenantId}`;
+    const tenantMembershipId = onSiteTenantMembershipId(userId, spec.tenantId);
+    await tryRun(
+      failures,
+      "phase-2",
+      scope,
+      "Membership",
+      tenantMembershipId,
+      () => createMembershipOperation({
+        context: tenantContext,
+        body: {
+          id: tenantMembershipId,
+          resource: onSiteTenantMembershipBody(
+            spec,
+            userId,
+            tenantMembershipId
+          )
+        }
+      })
+    );
+    for (const workspace of spec.workspaces) {
+      const wsMembershipId = onSiteWorkspaceMembershipId(userId, workspace.id);
+      await tryRun(
+        failures,
+        "phase-2",
+        scope,
+        "Membership",
+        wsMembershipId,
+        () => createMembershipOperation({
+          context: tenantContext,
+          body: {
+            id: wsMembershipId,
+            resource: onSiteWorkspaceMembershipBody(
+              spec,
+              workspace,
+              userId,
+              wsMembershipId
+            )
+          }
+        })
+      );
+    }
+    const raId = onSiteRoleAssignmentId(userId, spec.tenantId, role);
+    await tryRun(
+      failures,
+      "phase-2",
+      scope,
+      "RoleAssignment",
+      raId,
+      () => createRoleAssignmentOperation({
+        context: tenantContext,
+        body: {
+          id: raId,
+          resource: onSiteRoleAssignmentBody(spec, userId, role, raId)
+        }
+      })
+    );
+  }
+};
+var seedPlaceholderTenantForPrincipal = async (failures, baseContext, userId, role) => {
+  const tenantContext = {
+    ...baseContext,
+    tenantId: PLACEHOLDER_TENANT_SPEC.tenantId
+  };
+  const scope = `${userId}@${PLACEHOLDER_TENANT_SPEC.tenantId}`;
+  const tenantMembershipId = onSiteTenantMembershipId(
+    userId,
+    PLACEHOLDER_TENANT_SPEC.tenantId
+  );
+  await tryRun(
+    failures,
+    "phase-2",
+    scope,
+    "Membership",
+    tenantMembershipId,
+    () => createMembershipOperation({
+      context: tenantContext,
+      body: {
+        id: tenantMembershipId,
+        resource: onSiteTenantMembershipBody(
+          PLACEHOLDER_TENANT_SPEC,
+          userId,
+          tenantMembershipId
+        )
+      }
+    })
+  );
+  const raId = onSiteRoleAssignmentId(
+    userId,
+    PLACEHOLDER_TENANT_SPEC.tenantId,
+    role
+  );
+  await tryRun(
+    failures,
+    "phase-2",
+    scope,
+    "RoleAssignment",
+    raId,
+    () => createRoleAssignmentOperation({
+      context: tenantContext,
+      body: {
+        id: raId,
+        resource: onSiteRoleAssignmentBody(
+          PLACEHOLDER_TENANT_SPEC,
+          userId,
+          role,
+          raId
+        )
+      }
+    })
+  );
+};
 var seedWorkspaceDataPlane = async (baseContext, group, failures) => {
   const workspaceContext = {
     ...baseContext,
@@ -4137,9 +4570,9 @@ var seedWorkspaceDataPlane = async (baseContext, group, failures) => {
   }
 };
 var seedDemoGraph = async (params) => {
-  const { baseContext, devUsers, cognito } = params;
+  const { baseContext, devUsers, cognito, onSiteTesters = [] } = params;
   const failures = [];
-  for (const spec of DEMO_TENANT_SPECS) {
+  for (const spec of [...DEMO_TENANT_SPECS, ...ON_SITE_UAT_TENANT_SPECS]) {
     const tenantContext = {
       ...baseContext,
       tenantId: spec.tenantId
@@ -4269,6 +4702,47 @@ var seedDemoGraph = async (params) => {
         }
       })
     );
+    await seedOnSiteUatForPrincipal(
+      failures,
+      baseContext,
+      user.id,
+      PLATFORM_ROLE_CODE2.TENANT_ADMIN
+    );
+  }
+  for (const tester of onSiteTesters) {
+    let cognitoSub;
+    try {
+      cognitoSub = await cognito.ensureUser(tester.email);
+    } catch (err) {
+      failures.push({
+        phase: "phase-2",
+        scope: tester.id,
+        resourceType: "CognitoUser",
+        resourceId: tester.email,
+        error: err
+      });
+      continue;
+    }
+    await tryRun(
+      failures,
+      "phase-2",
+      tester.id,
+      "User",
+      tester.id,
+      () => upsertTesterUser(baseContext, tester, cognitoSub)
+    );
+    await seedPlaceholderTenantForPrincipal(
+      failures,
+      baseContext,
+      tester.id,
+      tester.role
+    );
+    await seedOnSiteUatForPrincipal(
+      failures,
+      baseContext,
+      tester.id,
+      tester.role
+    );
   }
   for (const group of DEMO_DATA_PLANE_FIXTURES) {
     try {
@@ -4287,7 +4761,7 @@ var seedDemoGraph = async (params) => {
     throw aggregateFailureError(failures);
   }
 };
-var runSeedDemoData = async (event, deps, devUsers) => {
+var runSeedDemoData = async (event, deps, devUsers, onSiteTesters = []) => {
   const parsed = (0, import_workflows2.parseWorkflowEvent)(event, import_workflows.PlatformSystemDataSeededV1);
   const recordResult = await deps.dedupClient.recordIfAbsent({
     consumerName: SEED_DEMO_DATA_CONSUMER_NAME,
@@ -4311,7 +4785,8 @@ var runSeedDemoData = async (event, deps, devUsers) => {
     await deps.seedDemoGraph({
       baseContext,
       devUsers,
-      cognito: deps.cognito
+      cognito: deps.cognito,
+      onSiteTesters
     });
   } catch (err) {
     await deps.dedupClient.markFailed({
@@ -4465,7 +4940,7 @@ var productionDependencies = () => {
     cognito
   };
 };
-var handler = async (event) => runSeedDemoData(event, productionDependencies(), DEV_USERS);
+var handler = async (event) => runSeedDemoData(event, productionDependencies(), DEV_USERS, ON_SITE_TESTERS);
 
 export {
   import_workflows,
@@ -4478,7 +4953,29 @@ export {
   ON_SITE_DEMO_TENANT_ID,
   ON_SITE_DEMO_WORKSPACE_ID,
   DEV_USERS,
+  DEMO_WOUND_CARE_TENANT_ID,
+  DEMO_WOUND_CARE_WORKSPACE_ID,
+  DEMO_PRIMARY_CARE_TENANT_ID,
+  DEMO_PRIMARY_CARE_WORKSPACE_ID,
+  DEMO_MIXED_TENANT_ID,
+  DEMO_MIXED_WORKSPACE_WOUND_CARE_ID,
+  DEMO_MIXED_WORKSPACE_PRIMARY_CARE_ID,
+  PLACEHOLDER_TENANT_SPEC,
   DEMO_TENANT_SPECS,
+  ON_SITE_WOUNDS_TENANT_ID,
+  ON_SITE_WOUNDS_OKLAHOMA_WORKSPACE_ID,
+  ON_SITE_WOUNDS_TEXAS_WORKSPACE_ID,
+  ON_SITE_MEDICAL_TENANT_ID,
+  ON_SITE_MEDICAL_OKLAHOMA_WORKSPACE_ID,
+  ON_SITE_MEDICAL_TEXAS_WORKSPACE_ID,
+  ON_SITE_CLINIC_TENANT_ID,
+  ON_SITE_CLINIC_OKLAHOMA_WORKSPACE_ID,
+  ON_SITE_CLINIC_TEXAS_WORKSPACE_ID,
+  ON_SITE_UAT_TENANT_SPECS,
+  ON_SITE_TESTERS,
+  onSiteTenantMembershipId,
+  onSiteWorkspaceMembershipId,
+  onSiteRoleAssignmentId,
   demoMembershipId,
   demoRoleAssignmentId,
   demoScenarioIdentifier,
@@ -4613,4 +5110,4 @@ export {
   productionCognitoProvisioner,
   handler
 };
-//# sourceMappingURL=chunk-7TRO2STL.mjs.map
+//# sourceMappingURL=chunk-ZODGX37H.mjs.map