@openhi/constructs 0.0.169 → 0.0.171

package/lib/index.mjs

@@ -10,7 +10,7 @@ import {
   DATA_STORE_CHANGE_DETAIL_MAX_UTF8_BYTES,
   DATA_STORE_CHANGE_DETAIL_TYPE,
   buildFhirCurrentResourceChangeDetail
-} from "./chunk-ZXPA6W3G.mjs";
+} from "./chunk-RC7HHZR6.mjs";
 import {
   SEED_SYSTEM_DATA_ACTOR_SYSTEM,
   SEED_SYSTEM_DATA_CONSUMER_NAME,
@@ -176,7 +176,7 @@ import {
   practitionerCredentialingForDoctor,
   practitionerCredentialingForState,
   woundConditionIdForPatient
-} from "./chunk-ZODGX37H.mjs";
+} from "./chunk-E2OWEBBH.mjs";
 import {
   COUNTER_MAINTENANCE_CONSUMER_NAME,
   COUNTER_MAINTENANCE_DETAIL_TYPES,
@@ -189,7 +189,7 @@ import {
   OWNING_DELETE_OPS_EVENT_BUS_ENV_VAR,
   import_workflows as import_workflows4
 } from "./chunk-VESULYQQ.mjs";
-import "./chunk-P3NFCKTZ.mjs";
+import "./chunk-XNUCKVSE.mjs";
 import {
   PROVISION_DEFAULT_WORKSPACE_DETAIL_TYPE,
   USER_ONBOARDING_EVENT_SOURCE,
@@ -206,13 +206,14 @@ import {
 } from "./chunk-SVXLZCF7.mjs";
 import {
   PLATFORM_SCOPE_TENANT_ID
-} from "./chunk-XHG4SODS.mjs";
+} from "./chunk-Z4PZSLYY.mjs";
 import "./chunk-BUAYVN3C.mjs";
 import "./chunk-5S6VFBLT.mjs";
 import "./chunk-I6LUPJUY.mjs";
 import "./chunk-QJDHVMKT.mjs";
 import "./chunk-6BB4CRSS.mjs";
-import "./chunk-O5VQWB6U.mjs";
+import "./chunk-FDBBTNCI.mjs";
+import "./chunk-APVVG7BO.mjs";
 import "./chunk-FYHBHHWK.mjs";
 import "./chunk-EUIP2U5F.mjs";
 import "./chunk-TRY7JGWO.mjs";
@@ -953,7 +954,8 @@ var PostAuthenticationLambda = class extends Construct {
     this.lambda = new NodejsFunction(this, "handler", {
       entry: resolveHandlerEntry(__dirname),
       runtime: Runtime.NODEJS_LATEST,
-      memorySize: 1024
+      memorySize: 1024,
+      description: "Cognito Post Authentication trigger. Invalidates other active sessions for the signing-in user via `AdminUserGlobalSignOut` to enforce single-session login."
     });
   }
 };
@@ -979,6 +981,7 @@ var PostConfirmationLambda = class extends Construct2 {
       entry: resolveHandlerEntry2(__dirname),
       runtime: Runtime2.NODEJS_LATEST,
       memorySize: 1024,
+      description: "Cognito Post Confirmation trigger. Publishes the user-onboarding start event onto the control bus and returns \u2014 workflow Lambdas own provisioning.",
       environment: {
         CONTROL_EVENT_BUS_NAME: props.controlEventBusName
       }
@@ -1008,6 +1011,7 @@ var PreTokenGenerationLambda = class extends Construct3 {
       entry: resolveHandlerEntry3(__dirname),
       runtime: Runtime3.NODEJS_LATEST,
       memorySize: 1024,
+      description: "Cognito Pre Token Generation trigger. Resolves the OpenHI User from Cognito `sub` and injects `ohi_tid` / `ohi_wid` / `ohi_uid` / `ohi_uname` claims into the ID + access tokens (ADR 2026-03-17-01).",
       environment: {
         DYNAMO_TABLE_NAME: props.dynamoTableName
       }
@@ -1774,6 +1778,7 @@ var _StaticHosting = class _StaticHosting extends Construct8 {
         handler: hostingMode === "static" ? "staticHandler" : "spaHandler",
         memorySize: 128,
         runtime: Runtime6.NODEJS_LATEST,
+        description: `CloudFront Lambda@Edge viewer-request handler for static hosting (${hostingMode} mode). Rewrites the incoming URI (SPA fallback to /index.html or /<path>/index.html synthesis) before the origin lookup.`,
         logGroup: new LogGroup(this, "viewer-request-handler-log-group", {
           retention: RetentionDays.ONE_MONTH
         })
@@ -1968,6 +1973,7 @@ var _StaticHosting = class _StaticHosting extends Construct8 {
         handler: "originRequestHandler",
         memorySize: 128,
         runtime: Runtime6.NODEJS_LATEST,
+        description: "CloudFront Lambda@Edge origin-request handler for static hosting. Routes requests between the viewer (static-hosting) origin and the API origin based on the configured host prefixes (inlined at synth time via esbuild `define`).",
         logGroup: new LogGroup(this, "origin-request-handler-log-group", {
           retention: RetentionDays.ONE_MONTH
         }),
@@ -2193,6 +2199,7 @@ var PlatformDeployBridgeLambda = class extends Construct11 {
       runtime: Runtime7.NODEJS_LATEST,
       memorySize: 256,
       timeout: Duration6.seconds(30),
+      description: "Bridges CloudFormation Stack Status Change events from the default AWS bus into typed `platform.deployment-completed.v1` envelopes on the OpenHI control bus. Scoped by stack-id prefix to this branch's stacks.",
       environment: {
         [CONTROL_EVENT_BUS_NAME_ENV_VAR]: props.controlEventBus.eventBusName,
         [OPENHI_REPO_TAG_KEY_ENV_VAR]: repoTagKey,
@@ -2448,6 +2455,7 @@ var CounterMaintenanceLambda = class extends Construct13 {
       runtime: Runtime8.NODEJS_LATEST,
       memorySize: 256,
       timeout: Duration7.minutes(1),
+      description: "Event-driven consumer that applies atomic counter ADDs to Tenant/Workspace/User canonical rows on Membership / RoleAssignment / Workspace lifecycle events (ADR-028).",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -2512,6 +2520,7 @@ var CounterReconciliationLambda = class extends Construct15 {
       // heavier than the single-event counter-maintenance consumer, so
       // the on-demand job gets a longer ceiling.
       timeout: Duration8.minutes(15),
+      description: "On-demand sweep that recomputes and repairs Tenant/Workspace/User membership counters in DynamoDB (ADR-028). Invoked manually or by an external schedule \u2014 no EventBridge trigger.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -2557,6 +2566,7 @@ var SeedDemoDataLambda = class extends Construct17 {
       runtime: Runtime10.NODEJS_LATEST,
       memorySize: 512,
       timeout: Duration9.minutes(2),
+      description: "Seeds demo Tenants, Workspaces, Users, Memberships, and RoleAssignments into DynamoDB and provisions Cognito dev users. Triggered by `platform.system-data-seeded.v1` on the control bus. Non-prod stages only.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName,
         [SEED_DEMO_DATA_USER_POOL_ID_ENV_VAR]: props.userPool.userPoolId
@@ -2680,6 +2690,7 @@ var SeedSystemDataLambda = class extends Construct19 {
       runtime: Runtime11.NODEJS_LATEST,
       memorySize: 512,
       timeout: Duration10.minutes(1),
+      description: "Seeds platform-singleton control-plane records (Roles) into DynamoDB after the host stack's deployment completes. Emits `platform.system-data-seeded.v1` on the control bus when done.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName,
         [SEED_SYSTEM_DATA_CONTROL_BUS_ENV_VAR]: props.controlEventBus.eventBusName
@@ -2926,7 +2937,8 @@ var CorsOptionsLambda = class extends Construct21 {
     this.lambda = new NodejsFunction12(this, "handler", {
       entry: resolveHandlerEntry11(__dirname),
       runtime: Runtime12.NODEJS_LATEST,
-      memorySize: 128
+      memorySize: 128,
+      description: "CORS preflight (OPTIONS) handler. Returns 204 so API Gateway can attach CORS response headers from the API's corsPreflight config."
     });
   }
 };
@@ -2953,6 +2965,7 @@ var RestApiLambda = class extends Construct22 {
       entry: resolveHandlerEntry12(__dirname),
       runtime: Runtime13.NODEJS_LATEST,
       memorySize: 1024,
+      description: "OpenHI REST API handler. Serves every FHIR resource route and the control-plane data operations behind the HTTP API; reads DynamoDB and the Postgres replication tier and publishes control events for membership / role changes (ADR-028).",
       environment: {
         DYNAMO_TABLE_NAME: props.dynamoTableName,
         BRANCH_TAG_VALUE: props.branchTagValue,
@@ -3737,6 +3750,7 @@ var ProvisionDefaultWorkspaceLambda = class extends Construct24 {
       entry: resolveHandlerEntry13(__dirname),
       runtime: Runtime14.NODEJS_LATEST,
       memorySize: 1024,
+      description: "User-onboarding worker that creates a new user's default Tenant, Workspace, Memberships, and RoleAssignment in DynamoDB on the `provision-default-workspace` event.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -4222,6 +4236,7 @@ var OwningDeleteCascadeLambdas = class extends Construct26 {
       runtime: Runtime15.NODEJS_LATEST,
       memorySize: 512,
       timeout: Duration13.minutes(1),
+      description: "TR-022 owning-entity delete cascade: pages the owner's adjacency-list partition and splits each page into <=100-item chunks for the inline Map state.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -4236,6 +4251,7 @@ var OwningDeleteCascadeLambdas = class extends Construct26 {
       runtime: Runtime15.NODEJS_LATEST,
       memorySize: 512,
       timeout: Duration13.minutes(1),
+      description: "TR-022 owning-entity delete cascade: Map iteration handler. Deletes one chunk of owned items via a single TransactWriteItems.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -4255,6 +4271,7 @@ var OwningDeleteCascadeLambdas = class extends Construct26 {
       runtime: Runtime15.NODEJS_LATEST,
       memorySize: 512,
       timeout: Duration13.minutes(1),
+      description: "TR-022 owning-entity delete cascade: terminal step. Conditionally deletes the owning canonical record and emits `control-plane.owning-delete-complete.v1` on the ops bus.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName,
         [OWNING_DELETE_OPS_EVENT_BUS_ENV_VAR]: props.opsEventBus.eventBusName
@@ -4475,6 +4492,7 @@ var RenameCascadeLambdas = class extends Construct28 {
       runtime: Runtime16.NODEJS_LATEST,
       memorySize: 512,
       timeout: Duration15.minutes(1),
+      description: "TR-023 rename cascade: pages affected projection partitions and emits chunks of up to 50 rewrite targets for the state machine's Distributed Map.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -4489,6 +4507,7 @@ var RenameCascadeLambdas = class extends Construct28 {
       runtime: Runtime16.NODEJS_LATEST,
       memorySize: 512,
       timeout: Duration15.minutes(1),
+      description: "TR-023 rename cascade: Distributed-Map iteration handler. Rewrites one chunk of projection rows via a single TransactWriteItems.",
       environment: {
         DYNAMO_TABLE_NAME: props.dataStoreTable.tableName
       }
@@ -4508,6 +4527,7 @@ var RenameCascadeLambdas = class extends Construct28 {
       runtime: Runtime16.NODEJS_LATEST,
       memorySize: 512,
       timeout: Duration15.minutes(1),
+      description: "TR-023 rename cascade: terminal step. Emits `control-plane.rename-complete.v1` on the ops event bus once all chunks have been rewritten.",
       environment: {
         [RENAME_CASCADE_OPS_EVENT_BUS_ENV_VAR]: props.opsEventBus.eventBusName
       }