@openhi/constructs 0.0.169 → 0.0.171

package/lib/index.js

@@ -1743,7 +1743,8 @@ var PostAuthenticationLambda = class extends import_constructs.Construct {
     this.lambda = new import_aws_lambda_nodejs.NodejsFunction(this, "handler", {
       entry: resolveHandlerEntry(__dirname),
       runtime: import_aws_lambda.Runtime.NODEJS_LATEST,
-      memorySize: 1024
+      memorySize: 1024,
+      description: "Cognito Post Authentication trigger. Invalidates other active sessions for the signing-in user via `AdminUserGlobalSignOut` to enforce single-session login."
     });
   }
 };
@@ -1769,6 +1770,7 @@ var PostConfirmationLambda = class extends import_constructs2.Construct {
       entry: resolveHandlerEntry2(__dirname),
       runtime: import_aws_lambda2.Runtime.NODEJS_LATEST,
       memorySize: 1024,
+      description: "Cognito Post Confirmation trigger. Publishes the user-onboarding start event onto the control bus and returns \u2014 workflow Lambdas own provisioning.",
       environment: {
         CONTROL_EVENT_BUS_NAME: props.controlEventBusName
       }
@@ -1798,6 +1800,7 @@ var PreTokenGenerationLambda = class extends import_constructs3.Construct {
       entry: resolveHandlerEntry3(__dirname),
       runtime: import_aws_lambda3.Runtime.NODEJS_LATEST,
       memorySize: 1024,
+      description: "Cognito Pre Token Generation trigger. Resolves the OpenHI User from Cognito `sub` and injects `ohi_tid` / `ohi_wid` / `ohi_uid` / `ohi_uname` claims into the ID + access tokens (ADR 2026-03-17-01).",
       environment: {
         DYNAMO_TABLE_NAME: props.dynamoTableName
       }
@@ -1894,7 +1897,7 @@ function buildFhirCurrentResourceChangeDetail(record, keys) {
   const rawName = record.eventName;
   const changeType = rawName === "INSERT" || rawName === "MODIFY" || rawName === "REMOVE" ? rawName : "MODIFY";
   const seq = record.dynamodb?.SequenceNumber;
-  const approxEpochSec = record.dynamodb?.ApproximateCreationDateTime;
+  const approxEpochMs = record.dynamodb?.ApproximateCreationDateTime;
   const newPlain = plainImage(
     record.dynamodb?.NewImage
   );
@@ -1920,7 +1923,7 @@ function buildFhirCurrentResourceChangeDetail(record, keys) {
     resourceId: keys.resourceId,
     resourceVersion: keys.version,
     ...typeof seq === "string" && seq.length > 0 ? { streamSequenceNumber: seq } : {},
-    ...typeof approxEpochSec === "number" && Number.isFinite(approxEpochSec) ? { approximateCreationEpochSec: approxEpochSec } : {},
+    ...typeof approxEpochMs === "number" && Number.isFinite(approxEpochMs) ? { approximateCreationEpochMs: approxEpochMs } : {},
     ...changedAttributeNames ? { changedAttributeNames } : {}
   };
 }
@@ -2653,6 +2656,7 @@ var _StaticHosting = class _StaticHosting extends import_constructs8.Construct {
         handler: hostingMode === "static" ? "staticHandler" : "spaHandler",
         memorySize: 128,
         runtime: import_aws_lambda6.Runtime.NODEJS_LATEST,
+        description: `CloudFront Lambda@Edge viewer-request handler for static hosting (${hostingMode} mode). Rewrites the incoming URI (SPA fallback to /index.html or /<path>/index.html synthesis) before the origin lookup.`,
         logGroup: new import_aws_logs.LogGroup(this, "viewer-request-handler-log-group", {
           retention: import_aws_logs.RetentionDays.ONE_MONTH
         })
@@ -2847,6 +2851,7 @@ var _StaticHosting = class _StaticHosting extends import_constructs8.Construct {
         handler: "originRequestHandler",
         memorySize: 128,
         runtime: import_aws_lambda6.Runtime.NODEJS_LATEST,
+        description: "CloudFront Lambda@Edge origin-request handler for static hosting. Routes requests between the viewer (static-hosting) origin and the API origin based on the configured host prefixes (inlined at synth time via esbuild `define`).",
         logGroup: new import_aws_logs.LogGroup(this, "origin-request-handler-log-group", {
           retention: import_aws_logs.RetentionDays.ONE_MONTH
         }),
@@ -3070,6 +3075,7 @@ var PlatformDeployBridgeLambda = class extends import_constructs11.Construct {
       runtime: import_aws_lambda7.Runtime.NODEJS_LATEST,
       memorySize: 256,
       timeout: import_aws_cdk_lib12.Duration.seconds(30),
+      description: "Bridges CloudFormation Stack Status Change events from the default AWS bus into typed `platform.deployment-completed.v1` envelopes on the OpenHI control bus. Scoped by stack-id prefix to this branch's stacks.",
       environment: {
         [CONTROL_EVENT_BUS_NAME_ENV_VAR]: props.controlEventBus.eventBusName,
         [OPENHI_REPO_TAG_KEY_ENV_VAR]: repoTagKey,
@@ -3337,6 +3343,7 @@ var CounterMaintenanceLambda = class extends import_constructs13.Construct {
       runtime: import_aws_lambda8.Runtime.NODEJS_LATEST,
       memorySize: 256,
       timeout: import_aws_cdk_lib13.Duration.minutes(1),
+      description: "Event-driven consumer that applies atomic counter ADDs to Tenant/Workspace/User canonical rows on Membership / RoleAssignment / Workspace lifecycle events (ADR-028).",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -3401,6 +3408,7 @@ var CounterReconciliationLambda = class extends import_constructs15.Construct {
       // heavier than the single-event counter-maintenance consumer, so
       // the on-demand job gets a longer ceiling.
       timeout: import_aws_cdk_lib14.Duration.minutes(15),
+      description: "On-demand sweep that recomputes and repairs Tenant/Workspace/User membership counters in DynamoDB (ADR-028). Invoked manually or by an external schedule \u2014 no EventBridge trigger.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -10410,6 +10418,7 @@ var SeedDemoDataLambda = class extends import_constructs17.Construct {
       runtime: import_aws_lambda10.Runtime.NODEJS_LATEST,
       memorySize: 512,
       timeout: import_aws_cdk_lib15.Duration.minutes(2),
+      description: "Seeds demo Tenants, Workspaces, Users, Memberships, and RoleAssignments into DynamoDB and provisions Cognito dev users. Triggered by `platform.system-data-seeded.v1` on the control bus. Non-prod stages only.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName,
         [SEED_DEMO_DATA_USER_POOL_ID_ENV_VAR]: props.userPool.userPoolId
@@ -10539,6 +10548,7 @@ var SeedSystemDataLambda = class extends import_constructs19.Construct {
       runtime: import_aws_lambda11.Runtime.NODEJS_LATEST,
       memorySize: 512,
       timeout: import_aws_cdk_lib16.Duration.minutes(1),
+      description: "Seeds platform-singleton control-plane records (Roles) into DynamoDB after the host stack's deployment completes. Emits `platform.system-data-seeded.v1` on the control bus when done.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName,
         [SEED_SYSTEM_DATA_CONTROL_BUS_ENV_VAR]: props.controlEventBus.eventBusName
@@ -10773,7 +10783,8 @@ var CorsOptionsLambda = class extends import_constructs21.Construct {
     this.lambda = new import_aws_lambda_nodejs12.NodejsFunction(this, "handler", {
       entry: resolveHandlerEntry11(__dirname),
       runtime: import_aws_lambda12.Runtime.NODEJS_LATEST,
-      memorySize: 128
+      memorySize: 128,
+      description: "CORS preflight (OPTIONS) handler. Returns 204 so API Gateway can attach CORS response headers from the API's corsPreflight config."
     });
   }
 };
@@ -10800,6 +10811,7 @@ var RestApiLambda = class extends import_constructs22.Construct {
       entry: resolveHandlerEntry12(__dirname),
       runtime: import_aws_lambda13.Runtime.NODEJS_LATEST,
       memorySize: 1024,
+      description: "OpenHI REST API handler. Serves every FHIR resource route and the control-plane data operations behind the HTTP API; reads DynamoDB and the Postgres replication tier and publishes control events for membership / role changes (ADR-028).",
       environment: {
         DYNAMO_TABLE_NAME: props.dynamoTableName,
         BRANCH_TAG_VALUE: props.branchTagValue,
@@ -11609,6 +11621,7 @@ var ProvisionDefaultWorkspaceLambda = class extends import_constructs24.Construc
       entry: resolveHandlerEntry13(__dirname),
       runtime: import_aws_lambda14.Runtime.NODEJS_LATEST,
       memorySize: 1024,
+      description: "User-onboarding worker that creates a new user's default Tenant, Workspace, Memberships, and RoleAssignment in DynamoDB on the `provision-default-workspace` event.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -12098,6 +12111,7 @@ var OwningDeleteCascadeLambdas = class extends import_constructs26.Construct {
       runtime: import_aws_lambda15.Runtime.NODEJS_LATEST,
       memorySize: 512,
       timeout: import_aws_cdk_lib19.Duration.minutes(1),
+      description: "TR-022 owning-entity delete cascade: pages the owner's adjacency-list partition and splits each page into <=100-item chunks for the inline Map state.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -12112,6 +12126,7 @@ var OwningDeleteCascadeLambdas = class extends import_constructs26.Construct {
       runtime: import_aws_lambda15.Runtime.NODEJS_LATEST,
       memorySize: 512,
       timeout: import_aws_cdk_lib19.Duration.minutes(1),
+      description: "TR-022 owning-entity delete cascade: Map iteration handler. Deletes one chunk of owned items via a single TransactWriteItems.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -12131,6 +12146,7 @@ var OwningDeleteCascadeLambdas = class extends import_constructs26.Construct {
       runtime: import_aws_lambda15.Runtime.NODEJS_LATEST,
       memorySize: 512,
       timeout: import_aws_cdk_lib19.Duration.minutes(1),
+      description: "TR-022 owning-entity delete cascade: terminal step. Conditionally deletes the owning canonical record and emits `control-plane.owning-delete-complete.v1` on the ops bus.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName,
         [OWNING_DELETE_OPS_EVENT_BUS_ENV_VAR]: props.opsEventBus.eventBusName
@@ -12348,6 +12364,7 @@ var RenameCascadeLambdas = class extends import_constructs28.Construct {
       runtime: import_aws_lambda16.Runtime.NODEJS_LATEST,
       memorySize: 512,
       timeout: import_aws_cdk_lib21.Duration.minutes(1),
+      description: "TR-023 rename cascade: pages affected projection partitions and emits chunks of up to 50 rewrite targets for the state machine's Distributed Map.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -12362,6 +12379,7 @@ var RenameCascadeLambdas = class extends import_constructs28.Construct {
       runtime: import_aws_lambda16.Runtime.NODEJS_LATEST,
       memorySize: 512,
       timeout: import_aws_cdk_lib21.Duration.minutes(1),
+      description: "TR-023 rename cascade: Distributed-Map iteration handler. Rewrites one chunk of projection rows via a single TransactWriteItems.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -12381,6 +12399,7 @@ var RenameCascadeLambdas = class extends import_constructs28.Construct {
       runtime: import_aws_lambda16.Runtime.NODEJS_LATEST,
       memorySize: 512,
       timeout: import_aws_cdk_lib21.Duration.minutes(1),
+      description: "TR-023 rename cascade: terminal step. Emits `control-plane.rename-complete.v1` on the ops event bus once all chunks have been rewritten.",
       environment: {
         [RENAME_CASCADE_OPS_EVENT_BUS_ENV_VAR]: props.opsEventBus.eventBusName
       }