@openhi/constructs 0.0.177 → 0.0.179

package/lib/{chunk-Z4PZSLYY.mjs → chunk-3M4QTQH6.mjs}

@@ -23,7 +23,7 @@ import {
 import {
   DATA_ENTITY_SK,
   createDataEntityRecord
-} from "./chunk-FDBBTNCI.mjs";
+} from "./chunk-Q4KQD2NB.mjs";
 import {
   ConflictError,
   ValidationError
@@ -431,4 +431,4 @@ export {
   createTenantOperation,
   createWorkspaceOperation
 };
-//# sourceMappingURL=chunk-Z4PZSLYY.mjs.map
+//# sourceMappingURL=chunk-3M4QTQH6.mjs.map

package/lib/{chunk-JUSVETWK.mjs → chunk-4LQR32D2.mjs}

@@ -1,33 +1,32 @@
-import {
-  buildSkPrefix
-} from "./chunk-6HGSR3TG.mjs";
 import {
   batchGetWithRetry,
+  buildSkPrefix,
   dispatchListMode
-} from "./chunk-FDBBTNCI.mjs";
+} from "./chunk-Q4KQD2NB.mjs";
 import {
   SHARD_COUNT,
   getDynamoControlService
 } from "./chunk-EUIP2U5F.mjs";
 
-// src/data/operations/control/tenant/tenant-list-operation.ts
+// src/data/operations/control/workspace/workspace-list-operation.ts
 var SK = "CURRENT";
 function counterValue(value) {
   return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
-async function listTenantsOperation(params) {
-  const { tableName, mode = "full" } = params;
+async function listWorkspacesOperation(params) {
+  const { context, tableName, mode = "full" } = params;
+  const { tenantId } = context;
   const service = getDynamoControlService(tableName);
   const shardResults = await Promise.all(
     Array.from(
       { length: SHARD_COUNT },
-      (_, shard) => service.entities.tenant.query.gsi1({ gsi1Shard: String(shard) }).go()
+      (_, shard) => service.entities.workspace.query.gsi1({ tenantId, gsi1Shard: String(shard) }).go()
     )
   );
   return dispatchListMode(mode, shardResults, {
     hydrate: (orderedIds) => batchGetWithRetry(
-      service.entities.tenant,
-      orderedIds.map((id) => ({ tenantId: id, sk: SK }))
+      service.entities.workspace,
+      orderedIds.map((id) => ({ tenantId, id, sk: SK }))
     ),
     getId: (item) => item.id,
     // FULL mode (admin list default): read the ADR-028 counters off the
@@ -36,48 +35,52 @@ async function listTenantsOperation(params) {
     buildEntry: (id, item) => ({
       id,
       resource: {
-        resourceType: "Tenant",
+        resourceType: "Workspace",
         id,
         ...JSON.parse(item.resource),
         counts: {
-          usersInTenant: counterValue(item.usersInTenant),
-          workspacesInTenant: counterValue(item.workspacesInTenant)
+          usersInWorkspace: counterValue(item.usersInWorkspace),
+          adminUsersInWorkspace: counterValue(item.adminUsersInWorkspace),
+          normalUsersInWorkspace: counterValue(item.normalUsersInWorkspace)
         }
       }
     }),
-    // SUMMARY mode reads only the GSI1 `summary` projection, which does
-    // not carry the counters; surface zeros so the shape stays uniform.
+    // SUMMARY mode reads only the GSI1 `summary` projection (no
+    // counters); surface zeros so the shape stays uniform.
     buildSummaryEntry: (id, parsed) => ({
       id,
       resource: {
-        resourceType: "Tenant",
+        resourceType: "Workspace",
         id,
         ...parsed,
-        counts: { usersInTenant: 0, workspacesInTenant: 0 }
+        counts: {
+          usersInWorkspace: 0,
+          adminUsersInWorkspace: 0,
+          normalUsersInWorkspace: 0
+        }
       }
     })
   });
 }
 
-// src/data/operations/control/workspace/workspace-list-operation.ts
+// src/data/operations/control/tenant/tenant-list-operation.ts
 var SK2 = "CURRENT";
 function counterValue2(value) {
   return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
-async function listWorkspacesOperation(params) {
-  const { context, tableName, mode = "full" } = params;
-  const { tenantId } = context;
+async function listTenantsOperation(params) {
+  const { tableName, mode = "full" } = params;
   const service = getDynamoControlService(tableName);
   const shardResults = await Promise.all(
     Array.from(
       { length: SHARD_COUNT },
-      (_, shard) => service.entities.workspace.query.gsi1({ tenantId, gsi1Shard: String(shard) }).go()
+      (_, shard) => service.entities.tenant.query.gsi1({ gsi1Shard: String(shard) }).go()
     )
   );
   return dispatchListMode(mode, shardResults, {
     hydrate: (orderedIds) => batchGetWithRetry(
-      service.entities.workspace,
-      orderedIds.map((id) => ({ tenantId, id, sk: SK2 }))
+      service.entities.tenant,
+      orderedIds.map((id) => ({ tenantId: id, sk: SK2 }))
     ),
     getId: (item) => item.id,
     // FULL mode (admin list default): read the ADR-028 counters off the
@@ -86,29 +89,24 @@ async function listWorkspacesOperation(params) {
     buildEntry: (id, item) => ({
       id,
       resource: {
-        resourceType: "Workspace",
+        resourceType: "Tenant",
         id,
         ...JSON.parse(item.resource),
         counts: {
-          usersInWorkspace: counterValue2(item.usersInWorkspace),
-          adminUsersInWorkspace: counterValue2(item.adminUsersInWorkspace),
-          normalUsersInWorkspace: counterValue2(item.normalUsersInWorkspace)
+          usersInTenant: counterValue2(item.usersInTenant),
+          workspacesInTenant: counterValue2(item.workspacesInTenant)
         }
       }
     }),
-    // SUMMARY mode reads only the GSI1 `summary` projection (no
-    // counters); surface zeros so the shape stays uniform.
+    // SUMMARY mode reads only the GSI1 `summary` projection, which does
+    // not carry the counters; surface zeros so the shape stays uniform.
     buildSummaryEntry: (id, parsed) => ({
       id,
       resource: {
-        resourceType: "Workspace",
+        resourceType: "Tenant",
         id,
         ...parsed,
-        counts: {
-          usersInWorkspace: 0,
-          adminUsersInWorkspace: 0,
-          normalUsersInWorkspace: 0
-        }
+        counts: { usersInTenant: 0, workspacesInTenant: 0 }
       }
     })
   });
@@ -209,10 +207,10 @@ async function roleAssignmentListByWorkspaceOperation(params) {
 }
 
 export {
-  listTenantsOperation,
-  listWorkspacesOperation,
   countMembershipsByUserOperation,
   membershipListByWorkspaceOperation,
-  roleAssignmentListByWorkspaceOperation
+  roleAssignmentListByWorkspaceOperation,
+  listWorkspacesOperation,
+  listTenantsOperation
 };
-//# sourceMappingURL=chunk-JUSVETWK.mjs.map
+//# sourceMappingURL=chunk-4LQR32D2.mjs.map

package/lib/{chunk-JUSVETWK.mjs.map → chunk-4LQR32D2.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/data/operations/control/tenant/tenant-list-operation.ts","../src/data/operations/control/workspace/workspace-list-operation.ts","../src/data/operations/control/membership/membership-count-by-user-operation.ts","../src/data/operations/control/membership/membership-list-by-workspace-operation.ts","../src/data/operations/control/roleassignment/roleassignment-list-by-workspace-operation.ts"],"sourcesContent":["import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\nimport { SHARD_COUNT } from \"../../../dynamo/shard\";\nimport type { OpenHiContext } from \"../../../openhi-context\";\nimport {\n  batchGetWithRetry,\n  dispatchListMode,\n  type ListOperationMode,\n} from \"../../data-operations-common\";\n\nconst SK = \"CURRENT\";\n\nexport interface ListTenantsParams {\n  context: OpenHiContext;\n  tableName?: string;\n  /** #853: defaults to `\"full\"`. `\"summary\"` skips BatchGet, `\"count\"` returns total only. */\n  mode?: ListOperationMode;\n}\n\n/**\n * ADR-028 denormalized counter shape surfaced on a Tenant list entry's\n * `resource.counts`. Missing counters render as `0` so the admin console\n * never sees `undefined`.\n */\nexport interface TenantCounts {\n  usersInTenant: number;\n  workspacesInTenant: number;\n}\n\nexport interface TenantListEntry {\n  id: string;\n  resource: Record<string, unknown> & { counts: TenantCounts };\n}\n\nexport interface ListTenantsResult {\n  entries: TenantListEntry[];\n  total: number;\n}\n\n/** Coerce a possibly-absent counter attribute to a non-negative number (default 0). */\nfunction counterValue(value: unknown): number {\n  return typeof value === \"number\" && Number.isFinite(value) ? value : 0;\n}\n\n/**\n * Lists all Tenants (platform-wide, no scope filter) via GSI1 (sharded). Tenant uses tenantId\n * as its identity (tenantId === id), so BatchGet keys reuse `id` as `tenantId`. See\n * `dispatchListMode` for the mode contract (#853).\n */\nexport async function listTenantsOperation(\n  params: ListTenantsParams,\n): Promise<ListTenantsResult> {\n  const { tableName, mode = \"full\" } = params;\n  const service = getDynamoControlService(tableName);\n\n  const shardResults = await Promise.all(\n    Array.from({ length: SHARD_COUNT }, (_, shard) =>\n      service.entities.tenant.query.gsi1({ gsi1Shard: String(shard) }).go(),\n    ),\n  );\n\n  return dispatchListMode<\n    {\n      id: string;\n      resource: string;\n      usersInTenant?: number;\n      workspacesInTenant?: number;\n    },\n    TenantListEntry\n  >(mode, shardResults, {\n    hydrate: (orderedIds) =>\n      batchGetWithRetry(\n        service.entities.tenant,\n        orderedIds.map((id) => ({ tenantId: id, sk: SK })),\n      ) as Promise<\n        Array<{\n          id: string;\n          resource: string;\n          usersInTenant?: number;\n          workspacesInTenant?: number;\n        }>\n      >,\n    getId: (item) => item.id,\n    // FULL mode (admin list default): read the ADR-028 counters off the\n    // canonical record hydrated by BatchGet and expose them as\n    // `resource.counts`. Missing counters render as 0.\n    buildEntry: (id, item) => ({\n      id,\n      resource: {\n        resourceType: \"Tenant\",\n        id,\n        ...(JSON.parse(item.resource) as Record<string, unknown>),\n        counts: {\n          usersInTenant: counterValue(item.usersInTenant),\n          workspacesInTenant: counterValue(item.workspacesInTenant),\n        },\n      },\n    }),\n    // SUMMARY mode reads only the GSI1 `summary` projection, which does\n    // not carry the counters; surface zeros so the shape stays uniform.\n    buildSummaryEntry: (id, parsed) => ({\n      id,\n      resource: {\n        resourceType: \"Tenant\",\n        id,\n        ...parsed,\n        counts: { usersInTenant: 0, workspacesInTenant: 0 },\n      },\n    }),\n  });\n}\n","import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\nimport { SHARD_COUNT } from \"../../../dynamo/shard\";\nimport type { OpenHiContext } from \"../../../openhi-context\";\nimport {\n  batchGetWithRetry,\n  dispatchListMode,\n  type ListOperationMode,\n} from \"../../data-operations-common\";\n\nconst SK = \"CURRENT\";\n\nexport interface ListWorkspacesParams {\n  context: OpenHiContext;\n  tableName?: string;\n  /** #853: defaults to `\"full\"`. `\"summary\"` skips BatchGet, `\"count\"` returns total only. */\n  mode?: ListOperationMode;\n}\n\n/**\n * ADR-028 denormalized counter shape surfaced on a Workspace list\n * entry's `resource.counts`. Missing counters render as `0`.\n */\nexport interface WorkspaceCounts {\n  usersInWorkspace: number;\n  adminUsersInWorkspace: number;\n  normalUsersInWorkspace: number;\n}\n\nexport interface WorkspaceListEntry {\n  id: string;\n  resource: Record<string, unknown> & { counts: WorkspaceCounts };\n}\n\nexport interface ListWorkspacesResult {\n  entries: WorkspaceListEntry[];\n  total: number;\n}\n\n/** Coerce a possibly-absent counter attribute to a non-negative number (default 0). */\nfunction counterValue(value: unknown): number {\n  return typeof value === \"number\" && Number.isFinite(value) ? value : 0;\n}\n\n/**\n * Lists all Workspaces for the context tenant via GSI1 (sharded). See `dispatchListMode` for\n * the mode contract (#853).\n */\nexport async function listWorkspacesOperation(\n  params: ListWorkspacesParams,\n): Promise<ListWorkspacesResult> {\n  const { context, tableName, mode = \"full\" } = params;\n  const { tenantId } = context;\n  const service = getDynamoControlService(tableName);\n\n  const shardResults = await Promise.all(\n    Array.from({ length: SHARD_COUNT }, (_, shard) =>\n      service.entities.workspace.query\n        .gsi1({ tenantId, gsi1Shard: String(shard) })\n        .go(),\n    ),\n  );\n\n  return dispatchListMode<\n    {\n      id: string;\n      resource: string;\n      usersInWorkspace?: number;\n      adminUsersInWorkspace?: number;\n      normalUsersInWorkspace?: number;\n    },\n    WorkspaceListEntry\n  >(mode, shardResults, {\n    hydrate: (orderedIds) =>\n      batchGetWithRetry(\n        service.entities.workspace,\n        orderedIds.map((id) => ({ tenantId, id, sk: SK })),\n      ) as Promise<\n        Array<{\n          id: string;\n          resource: string;\n          usersInWorkspace?: number;\n          adminUsersInWorkspace?: number;\n          normalUsersInWorkspace?: number;\n        }>\n      >,\n    getId: (item) => item.id,\n    // FULL mode (admin list default): read the ADR-028 counters off the\n    // canonical record hydrated by BatchGet and expose them as\n    // `resource.counts`. Missing counters render as 0.\n    buildEntry: (id, item) => ({\n      id,\n      resource: {\n        resourceType: \"Workspace\",\n        id,\n        ...(JSON.parse(item.resource) as Record<string, unknown>),\n        counts: {\n          usersInWorkspace: counterValue(item.usersInWorkspace),\n          adminUsersInWorkspace: counterValue(item.adminUsersInWorkspace),\n          normalUsersInWorkspace: counterValue(item.normalUsersInWorkspace),\n        },\n      },\n    }),\n    // SUMMARY mode reads only the GSI1 `summary` projection (no\n    // counters); surface zeros so the shape stays uniform.\n    buildSummaryEntry: (id, parsed) => ({\n      id,\n      resource: {\n        resourceType: \"Workspace\",\n        id,\n        ...parsed,\n        counts: {\n          usersInWorkspace: 0,\n          adminUsersInWorkspace: 0,\n          normalUsersInWorkspace: 0,\n        },\n      },\n    }),\n  });\n}\n","import {\n  buildSkPrefix,\n  type MembershipListByUserMode,\n} from \"./membership-list-by-user-operation\";\nimport { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\n\n/** Inputs accepted by {@link countMembershipsByUserOperation}. */\nexport interface CountMembershipsByUserParams {\n  readonly userId: string;\n  /** Filter mode — see {@link MembershipListByUserMode}. Defaults to `\"all\"`. */\n  readonly mode?: MembershipListByUserMode;\n  /** Required only when `mode === \"workspaceInTenant\"`. */\n  readonly tenantId?: string;\n  /** Optional table-name override; resolved via env when omitted. */\n  readonly tableName?: string;\n}\n\n/**\n * Count a user's Memberships via the ADR-018 user-partition projection, with the\n * same `SK begins_with` lane discriminator as {@link membershipListByUserOperation}.\n *\n * Pages through every matching projection row (`{ pages: \"all\" }`) projecting only\n * the `membershipId` key, and returns the row count. Backs\n * `GET /User/:id/Membership?_summary=count`.\n *\n * Note: the per-user counts (`tenantsForUser`, `workspacesForUser`) are also\n * maintained as denormalized counters on the User record per ADR-028; this\n * recompute-from-projection count is the FHIR `_summary=count` shape and the\n * authoritative source the counters are reconciled against.\n */\nexport async function countMembershipsByUserOperation(\n  params: CountMembershipsByUserParams,\n): Promise<number> {\n  const { userId, mode = \"all\", tenantId, tableName } = params;\n\n  if (mode === \"workspaceInTenant\" && !tenantId) {\n    throw new Error(\n      'countMembershipsByUserOperation: tenantId is required when mode === \"workspaceInTenant\"',\n    );\n  }\n\n  const service = getDynamoControlService(tableName);\n  const skPrefix = buildSkPrefix(mode, tenantId);\n\n  const result = await service.entities.membershipUserProjection.query\n    .record({ userId })\n    .begins({ sk: skPrefix })\n    .go({ pages: \"all\", attributes: [\"membershipId\"] });\n\n  return (result.data ?? []).length;\n}\n","import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\n\n/** Inputs accepted by {@link membershipListByWorkspaceOperation}. */\nexport interface MembershipListByWorkspaceParams {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  /** ElectroDB cursor from a prior page. Forwarded to `.go({ cursor })`. */\n  readonly cursor?: string | null;\n  /** Per-page item limit forwarded to `.go({ limit })`. */\n  readonly limit?: number;\n  /** Sort order forwarded to `.go({ order })`. Defaults to ElectroDB's `\"asc\"`. */\n  readonly order?: \"asc\" | \"desc\";\n  /** Optional table-name override; resolved via env when omitted. */\n  readonly tableName?: string;\n}\n\n/** One projection-row payload as returned to a consumer. */\nexport interface MembershipWorkspaceProjectionEntry {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  readonly sk: string;\n  readonly userId: string;\n  readonly membershipId: string;\n  readonly summary: string;\n  readonly vid: string;\n  readonly lastUpdated: string;\n  readonly denormalizedUserName?: string;\n}\n\n/** Page returned by {@link membershipListByWorkspaceOperation}. */\nexport interface MembershipListByWorkspaceResult {\n  readonly items: Array<MembershipWorkspaceProjectionEntry>;\n  /** ElectroDB cursor for the next page, or `null` when exhausted. */\n  readonly cursor: string | null;\n}\n\n/**\n * List Memberships for a workspace via the ADR-018 workspace-partition\n * projection (no GSI hop).\n *\n * Reads `MembershipWorkspaceProjectionEntity` rows under\n * `PK = TID#<tenantId>#WORKSPACE#ID#<workspaceId>` with\n * `SK begins_with 'MEMBERSHIP#'`. The projection's SK shape\n * (`MEMBERSHIP#<normalizedUserName>#USER#<userId>#<membershipId>`) sorts\n * members alphabetically by user name within the workspace partition, so\n * the natural Query order is exactly what the access pattern expects —\n * no client-side sort.\n *\n * Returns the projection rows verbatim (`summary`, `vid`, `lastUpdated`\n * plus the projection-discriminating fields) — full canonical-resource\n * hydration is opt-in for callers via\n * `MembershipEntity.get({ tenantId, id: membershipId })`. Pagination\n * mirrors ElectroDB's native `.go({ cursor })` shape; the returned\n * `cursor` is opaque to callers.\n *\n * @see ADR-018 § Access Pattern Coverage (pattern #2)\n * @see .state/adr-018-implementation-guide.md § 1 (SK grammar)\n */\nexport async function membershipListByWorkspaceOperation(\n  params: MembershipListByWorkspaceParams,\n): Promise<MembershipListByWorkspaceResult> {\n  const {\n    tenantId,\n    workspaceId,\n    cursor = null,\n    limit,\n    order,\n    tableName,\n  } = params;\n\n  const service = getDynamoControlService(tableName);\n\n  const goOptions: {\n    cursor?: string | null;\n    limit?: number;\n    order?: \"asc\" | \"desc\";\n  } = {\n    cursor,\n  };\n  if (limit !== undefined) {\n    goOptions.limit = limit;\n  }\n  if (order !== undefined) {\n    goOptions.order = order;\n  }\n\n  const result = await service.entities.membershipWorkspaceProjection.query\n    .record({ tenantId, workspaceId })\n    .begins({ sk: \"MEMBERSHIP#\" })\n    .go(goOptions);\n\n  const items: Array<MembershipWorkspaceProjectionEntry> = (\n    result.data ?? []\n  ).map((row) => ({\n    tenantId: row.tenantId,\n    workspaceId: row.workspaceId,\n    sk: row.sk,\n    userId: row.userId,\n    membershipId: row.membershipId,\n    summary: row.summary,\n    vid: row.vid,\n    lastUpdated: row.lastUpdated,\n    denormalizedUserName: row.denormalizedUserName,\n  }));\n\n  return { items, cursor: result.cursor ?? null };\n}\n","import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\n\n/** Inputs accepted by {@link roleAssignmentListByWorkspaceOperation}. */\nexport interface RoleAssignmentListByWorkspaceParams {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  /**\n   * Optional role discriminator. When supplied, narrows the listing to\n   * users assigned to a single role via the discriminator-first\n   * `begins_with('ROLEASSIGNMENT#<roleId>#')` prefix — the central read\n   * pattern (#9 is \"users with role X in workspace Y\"). Omit to return\n   * every role assignment in the workspace interleaved by `<roleId>`.\n   */\n  readonly roleId?: string;\n  /** ElectroDB cursor from a prior page. Forwarded to `.go({ cursor })`. */\n  readonly cursor?: string | null;\n  /** Per-page item limit forwarded to `.go({ limit })`. */\n  readonly limit?: number;\n  /** Sort order forwarded to `.go({ order })`. Defaults to ElectroDB's `\"asc\"`. */\n  readonly order?: \"asc\" | \"desc\";\n  /** Optional table-name override; resolved via env when omitted. */\n  readonly tableName?: string;\n}\n\n/** One projection-row payload as returned to a consumer. */\nexport interface RoleAssignmentWorkspaceProjectionEntry {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  readonly sk: string;\n  readonly userId: string;\n  readonly roleId: string;\n  readonly roleAssignmentId: string;\n  readonly summary: string;\n  readonly vid: string;\n  readonly lastUpdated: string;\n  readonly denormalizedUserName?: string;\n  readonly denormalizedRoleName?: string;\n}\n\n/** Page returned by {@link roleAssignmentListByWorkspaceOperation}. */\nexport interface RoleAssignmentListByWorkspaceResult {\n  readonly items: Array<RoleAssignmentWorkspaceProjectionEntry>;\n  /** ElectroDB cursor for the next page, or `null` when exhausted. */\n  readonly cursor: string | null;\n}\n\n/**\n * Compose the SK prefix for the workspace-projection list. The\n * pattern-#9 SK is **discriminator-first on the raw `<roleId>`**\n * (`ROLEASSIGNMENT#<roleId>#<normalizedUserName>#USER#<userId>#<id>`)\n * so a `begins_with('ROLEASSIGNMENT#<roleId>#')` filter returns every\n * user assigned to that role in the workspace. The trailing `#` after\n * the role id is critical — without it `ROLEASSIGNMENT#role-1` would\n * also match `ROLEASSIGNMENT#role-10`, `role-100`, etc. Omitting the\n * `roleId` arg falls back to the wider `ROLEASSIGNMENT#` prefix.\n */\nfunction buildSkPrefix(roleId: string | undefined): string {\n  if (roleId === undefined || roleId.length === 0) {\n    return \"ROLEASSIGNMENT#\";\n  }\n  return `ROLEASSIGNMENT#${roleId}#`;\n}\n\n/**\n * List RoleAssignments for a workspace via the ADR-018 workspace-\n * partition projection (no GSI hop).\n *\n * Reads `RoleAssignmentWorkspaceProjectionEntity` rows under\n * `PK = TID#<tenantId>#WORKSPACE#ID#<workspaceId>` with an\n * `SK begins_with` filter:\n *\n * | `roleId` arg | SK begins_with | Covers |\n * |---|---|---|\n * | omitted | `ROLEASSIGNMENT#` | Every role assignment in the workspace, interleaved by `<roleId>` |\n * | supplied | `ROLEASSIGNMENT#<roleId>#` | Pattern #9 — every user assigned to that role, sorted alphabetically by `<normalizedUserName>` |\n *\n * The projection's SK shape\n * (`ROLEASSIGNMENT#<roleId>#<normalizedUserName>#USER#<userId>#<id>`)\n * is discriminator-first on the raw `<roleId>` (mirroring the canonical\n * GSI1SK from pattern #8) so the natural Query order is exactly what\n * the access pattern expects — no client-side sort. Tenant-scoped\n * RoleAssignments (no `workspaceId`) skip this projection entirely;\n * they live only in the user-projection's tenant sub-lane.\n *\n * Returns the projection rows verbatim (`summary`, `vid`, `lastUpdated`\n * plus the projection-discriminating fields) — full canonical-resource\n * hydration is opt-in for callers via\n * `RoleAssignmentEntity.get({ tenantId, id: roleAssignmentId })`.\n * Pagination mirrors ElectroDB's native `.go({ cursor })` shape; the\n * returned `cursor` is opaque to callers.\n *\n * @see ADR-018 § Access Pattern Coverage (pattern #9)\n * @see .state/adr-018-implementation-guide.md § 1 (SK grammar) and § 2 (attribute set)\n */\nexport async function roleAssignmentListByWorkspaceOperation(\n  params: RoleAssignmentListByWorkspaceParams,\n): Promise<RoleAssignmentListByWorkspaceResult> {\n  const {\n    tenantId,\n    workspaceId,\n    roleId,\n    cursor = null,\n    limit,\n    order,\n    tableName,\n  } = params;\n\n  const service = getDynamoControlService(tableName);\n  const skPrefix = buildSkPrefix(roleId);\n\n  const goOptions: {\n    cursor?: string | null;\n    limit?: number;\n    order?: \"asc\" | \"desc\";\n  } = {\n    cursor,\n  };\n  if (limit !== undefined) {\n    goOptions.limit = limit;\n  }\n  if (order !== undefined) {\n    goOptions.order = order;\n  }\n\n  const result = await service.entities.roleAssignmentWorkspaceProjection.query\n    .record({ tenantId, workspaceId })\n    .begins({ sk: skPrefix })\n    .go(goOptions);\n\n  const items: Array<RoleAssignmentWorkspaceProjectionEntry> = (\n    result.data ?? []\n  ).map((row) => ({\n    tenantId: row.tenantId,\n    workspaceId: row.workspaceId,\n    sk: row.sk,\n    userId: row.userId,\n    roleId: row.roleId,\n    roleAssignmentId: row.roleAssignmentId,\n    summary: row.summary,\n    vid: row.vid,\n    lastUpdated: row.lastUpdated,\n    denormalizedUserName: row.denormalizedUserName,\n    denormalizedRoleName: row.denormalizedRoleName,\n  }));\n\n  return { items, cursor: result.cursor ?? null };\n}\n"],"mappings":";;;;;;;;;;;;;AASA,IAAM,KAAK;AA8BX,SAAS,aAAa,OAAwB;AAC5C,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE;AAOA,eAAsB,qBACpB,QAC4B;AAC5B,QAAM,EAAE,WAAW,OAAO,OAAO,IAAI;AACrC,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,eAAe,MAAM,QAAQ;AAAA,IACjC,MAAM;AAAA,MAAK,EAAE,QAAQ,YAAY;AAAA,MAAG,CAAC,GAAG,UACtC,QAAQ,SAAS,OAAO,MAAM,KAAK,EAAE,WAAW,OAAO,KAAK,EAAE,CAAC,EAAE,GAAG;AAAA,IACtE;AAAA,EACF;AAEA,SAAO,iBAQL,MAAM,cAAc;AAAA,IACpB,SAAS,CAAC,eACR;AAAA,MACE,QAAQ,SAAS;AAAA,MACjB,WAAW,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,IAAI,GAAG,EAAE;AAAA,IACnD;AAAA,IAQF,OAAO,CAAC,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA,IAItB,YAAY,CAAC,IAAI,UAAU;AAAA,MACzB;AAAA,MACA,UAAU;AAAA,QACR,cAAc;AAAA,QACd;AAAA,QACA,GAAI,KAAK,MAAM,KAAK,QAAQ;AAAA,QAC5B,QAAQ;AAAA,UACN,eAAe,aAAa,KAAK,aAAa;AAAA,UAC9C,oBAAoB,aAAa,KAAK,kBAAkB;AAAA,QAC1D;AAAA,MACF;AAAA,IACF;AAAA;AAAA;AAAA,IAGA,mBAAmB,CAAC,IAAI,YAAY;AAAA,MAClC;AAAA,MACA,UAAU;AAAA,QACR,cAAc;AAAA,QACd;AAAA,QACA,GAAG;AAAA,QACH,QAAQ,EAAE,eAAe,GAAG,oBAAoB,EAAE;AAAA,MACpD;AAAA,IACF;AAAA,EACF,CAAC;AACH;;;ACpGA,IAAMA,MAAK;AA8BX,SAASC,cAAa,OAAwB;AAC5C,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE;AAMA,eAAsB,wBACpB,QAC+B;AAC/B,QAAM,EAAE,SAAS,WAAW,OAAO,OAAO,IAAI;AAC9C,QAAM,EAAE,SAAS,IAAI;AACrB,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,eAAe,MAAM,QAAQ;AAAA,IACjC,MAAM;AAAA,MAAK,EAAE,QAAQ,YAAY;AAAA,MAAG,CAAC,GAAG,UACtC,QAAQ,SAAS,UAAU,MACxB,KAAK,EAAE,UAAU,WAAW,OAAO,KAAK,EAAE,CAAC,EAC3C,GAAG;AAAA,IACR;AAAA,EACF;AAEA,SAAO,iBASL,MAAM,cAAc;AAAA,IACpB,SAAS,CAAC,eACR;AAAA,MACE,QAAQ,SAAS;AAAA,MACjB,WAAW,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,IAAID,IAAG,EAAE;AAAA,IACnD;AAAA,IASF,OAAO,CAAC,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA,IAItB,YAAY,CAAC,IAAI,UAAU;AAAA,MACzB;AAAA,MACA,UAAU;AAAA,QACR,cAAc;AAAA,QACd;AAAA,QACA,GAAI,KAAK,MAAM,KAAK,QAAQ;AAAA,QAC5B,QAAQ;AAAA,UACN,kBAAkBC,cAAa,KAAK,gBAAgB;AAAA,UACpD,uBAAuBA,cAAa,KAAK,qBAAqB;AAAA,UAC9D,wBAAwBA,cAAa,KAAK,sBAAsB;AAAA,QAClE;AAAA,MACF;AAAA,IACF;AAAA;AAAA;AAAA,IAGA,mBAAmB,CAAC,IAAI,YAAY;AAAA,MAClC;AAAA,MACA,UAAU;AAAA,QACR,cAAc;AAAA,QACd;AAAA,QACA,GAAG;AAAA,QACH,QAAQ;AAAA,UACN,kBAAkB;AAAA,UAClB,uBAAuB;AAAA,UACvB,wBAAwB;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACH;;;ACxFA,eAAsB,gCACpB,QACiB;AACjB,QAAM,EAAE,QAAQ,OAAO,OAAO,UAAU,UAAU,IAAI;AAEtD,MAAI,SAAS,uBAAuB,CAAC,UAAU;AAC7C,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,wBAAwB,SAAS;AACjD,QAAM,WAAW,cAAc,MAAM,QAAQ;AAE7C,QAAM,SAAS,MAAM,QAAQ,SAAS,yBAAyB,MAC5D,OAAO,EAAE,OAAO,CAAC,EACjB,OAAO,EAAE,IAAI,SAAS,CAAC,EACvB,GAAG,EAAE,OAAO,OAAO,YAAY,CAAC,cAAc,EAAE,CAAC;AAEpD,UAAQ,OAAO,QAAQ,CAAC,GAAG;AAC7B;;;ACQA,eAAsB,mCACpB,QAC0C;AAC1C,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,YAIF;AAAA,IACF;AAAA,EACF;AACA,MAAI,UAAU,QAAW;AACvB,cAAU,QAAQ;AAAA,EACpB;AACA,MAAI,UAAU,QAAW;AACvB,cAAU,QAAQ;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM,QAAQ,SAAS,8BAA8B,MACjE,OAAO,EAAE,UAAU,YAAY,CAAC,EAChC,OAAO,EAAE,IAAI,cAAc,CAAC,EAC5B,GAAG,SAAS;AAEf,QAAM,SACJ,OAAO,QAAQ,CAAC,GAChB,IAAI,CAAC,SAAS;AAAA,IACd,UAAU,IAAI;AAAA,IACd,aAAa,IAAI;AAAA,IACjB,IAAI,IAAI;AAAA,IACR,QAAQ,IAAI;AAAA,IACZ,cAAc,IAAI;AAAA,IAClB,SAAS,IAAI;AAAA,IACb,KAAK,IAAI;AAAA,IACT,aAAa,IAAI;AAAA,IACjB,sBAAsB,IAAI;AAAA,EAC5B,EAAE;AAEF,SAAO,EAAE,OAAO,QAAQ,OAAO,UAAU,KAAK;AAChD;;;AClDA,SAASC,eAAc,QAAoC;AACzD,MAAI,WAAW,UAAa,OAAO,WAAW,GAAG;AAC/C,WAAO;AAAA,EACT;AACA,SAAO,kBAAkB,MAAM;AACjC;AAiCA,eAAsB,uCACpB,QAC8C;AAC9C,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,UAAU,wBAAwB,SAAS;AACjD,QAAM,WAAWA,eAAc,MAAM;AAErC,QAAM,YAIF;AAAA,IACF;AAAA,EACF;AACA,MAAI,UAAU,QAAW;AACvB,cAAU,QAAQ;AAAA,EACpB;AACA,MAAI,UAAU,QAAW;AACvB,cAAU,QAAQ;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM,QAAQ,SAAS,kCAAkC,MACrE,OAAO,EAAE,UAAU,YAAY,CAAC,EAChC,OAAO,EAAE,IAAI,SAAS,CAAC,EACvB,GAAG,SAAS;AAEf,QAAM,SACJ,OAAO,QAAQ,CAAC,GAChB,IAAI,CAAC,SAAS;AAAA,IACd,UAAU,IAAI;AAAA,IACd,aAAa,IAAI;AAAA,IACjB,IAAI,IAAI;AAAA,IACR,QAAQ,IAAI;AAAA,IACZ,QAAQ,IAAI;AAAA,IACZ,kBAAkB,IAAI;AAAA,IACtB,SAAS,IAAI;AAAA,IACb,KAAK,IAAI;AAAA,IACT,aAAa,IAAI;AAAA,IACjB,sBAAsB,IAAI;AAAA,IAC1B,sBAAsB,IAAI;AAAA,EAC5B,EAAE;AAEF,SAAO,EAAE,OAAO,QAAQ,OAAO,UAAU,KAAK;AAChD;","names":["SK","counterValue","buildSkPrefix"]}
+{"version":3,"sources":["../src/data/operations/control/workspace/workspace-list-operation.ts","../src/data/operations/control/tenant/tenant-list-operation.ts","../src/data/operations/control/membership/membership-count-by-user-operation.ts","../src/data/operations/control/membership/membership-list-by-workspace-operation.ts","../src/data/operations/control/roleassignment/roleassignment-list-by-workspace-operation.ts"],"sourcesContent":["import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\nimport { SHARD_COUNT } from \"../../../dynamo/shard\";\nimport type { OpenHiContext } from \"../../../openhi-context\";\nimport {\n  batchGetWithRetry,\n  dispatchListMode,\n  type ListOperationMode,\n} from \"../../data-operations-common\";\n\nconst SK = \"CURRENT\";\n\nexport interface ListWorkspacesParams {\n  context: OpenHiContext;\n  tableName?: string;\n  /** #853: defaults to `\"full\"`. `\"summary\"` skips BatchGet, `\"count\"` returns total only. */\n  mode?: ListOperationMode;\n}\n\n/**\n * ADR-028 denormalized counter shape surfaced on a Workspace list\n * entry's `resource.counts`. Missing counters render as `0`.\n */\nexport interface WorkspaceCounts {\n  usersInWorkspace: number;\n  adminUsersInWorkspace: number;\n  normalUsersInWorkspace: number;\n}\n\nexport interface WorkspaceListEntry {\n  id: string;\n  resource: Record<string, unknown> & { counts: WorkspaceCounts };\n}\n\nexport interface ListWorkspacesResult {\n  entries: WorkspaceListEntry[];\n  total: number;\n}\n\n/** Coerce a possibly-absent counter attribute to a non-negative number (default 0). */\nfunction counterValue(value: unknown): number {\n  return typeof value === \"number\" && Number.isFinite(value) ? value : 0;\n}\n\n/**\n * Lists all Workspaces for the context tenant via GSI1 (sharded). See `dispatchListMode` for\n * the mode contract (#853).\n */\nexport async function listWorkspacesOperation(\n  params: ListWorkspacesParams,\n): Promise<ListWorkspacesResult> {\n  const { context, tableName, mode = \"full\" } = params;\n  const { tenantId } = context;\n  const service = getDynamoControlService(tableName);\n\n  const shardResults = await Promise.all(\n    Array.from({ length: SHARD_COUNT }, (_, shard) =>\n      service.entities.workspace.query\n        .gsi1({ tenantId, gsi1Shard: String(shard) })\n        .go(),\n    ),\n  );\n\n  return dispatchListMode<\n    {\n      id: string;\n      resource: string;\n      usersInWorkspace?: number;\n      adminUsersInWorkspace?: number;\n      normalUsersInWorkspace?: number;\n    },\n    WorkspaceListEntry\n  >(mode, shardResults, {\n    hydrate: (orderedIds) =>\n      batchGetWithRetry(\n        service.entities.workspace,\n        orderedIds.map((id) => ({ tenantId, id, sk: SK })),\n      ) as Promise<\n        Array<{\n          id: string;\n          resource: string;\n          usersInWorkspace?: number;\n          adminUsersInWorkspace?: number;\n          normalUsersInWorkspace?: number;\n        }>\n      >,\n    getId: (item) => item.id,\n    // FULL mode (admin list default): read the ADR-028 counters off the\n    // canonical record hydrated by BatchGet and expose them as\n    // `resource.counts`. Missing counters render as 0.\n    buildEntry: (id, item) => ({\n      id,\n      resource: {\n        resourceType: \"Workspace\",\n        id,\n        ...(JSON.parse(item.resource) as Record<string, unknown>),\n        counts: {\n          usersInWorkspace: counterValue(item.usersInWorkspace),\n          adminUsersInWorkspace: counterValue(item.adminUsersInWorkspace),\n          normalUsersInWorkspace: counterValue(item.normalUsersInWorkspace),\n        },\n      },\n    }),\n    // SUMMARY mode reads only the GSI1 `summary` projection (no\n    // counters); surface zeros so the shape stays uniform.\n    buildSummaryEntry: (id, parsed) => ({\n      id,\n      resource: {\n        resourceType: \"Workspace\",\n        id,\n        ...parsed,\n        counts: {\n          usersInWorkspace: 0,\n          adminUsersInWorkspace: 0,\n          normalUsersInWorkspace: 0,\n        },\n      },\n    }),\n  });\n}\n","import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\nimport { SHARD_COUNT } from \"../../../dynamo/shard\";\nimport type { OpenHiContext } from \"../../../openhi-context\";\nimport {\n  batchGetWithRetry,\n  dispatchListMode,\n  type ListOperationMode,\n} from \"../../data-operations-common\";\n\nconst SK = \"CURRENT\";\n\nexport interface ListTenantsParams {\n  context: OpenHiContext;\n  tableName?: string;\n  /** #853: defaults to `\"full\"`. `\"summary\"` skips BatchGet, `\"count\"` returns total only. */\n  mode?: ListOperationMode;\n}\n\n/**\n * ADR-028 denormalized counter shape surfaced on a Tenant list entry's\n * `resource.counts`. Missing counters render as `0` so the admin console\n * never sees `undefined`.\n */\nexport interface TenantCounts {\n  usersInTenant: number;\n  workspacesInTenant: number;\n}\n\nexport interface TenantListEntry {\n  id: string;\n  resource: Record<string, unknown> & { counts: TenantCounts };\n}\n\nexport interface ListTenantsResult {\n  entries: TenantListEntry[];\n  total: number;\n}\n\n/** Coerce a possibly-absent counter attribute to a non-negative number (default 0). */\nfunction counterValue(value: unknown): number {\n  return typeof value === \"number\" && Number.isFinite(value) ? value : 0;\n}\n\n/**\n * Lists all Tenants (platform-wide, no scope filter) via GSI1 (sharded). Tenant uses tenantId\n * as its identity (tenantId === id), so BatchGet keys reuse `id` as `tenantId`. See\n * `dispatchListMode` for the mode contract (#853).\n */\nexport async function listTenantsOperation(\n  params: ListTenantsParams,\n): Promise<ListTenantsResult> {\n  const { tableName, mode = \"full\" } = params;\n  const service = getDynamoControlService(tableName);\n\n  const shardResults = await Promise.all(\n    Array.from({ length: SHARD_COUNT }, (_, shard) =>\n      service.entities.tenant.query.gsi1({ gsi1Shard: String(shard) }).go(),\n    ),\n  );\n\n  return dispatchListMode<\n    {\n      id: string;\n      resource: string;\n      usersInTenant?: number;\n      workspacesInTenant?: number;\n    },\n    TenantListEntry\n  >(mode, shardResults, {\n    hydrate: (orderedIds) =>\n      batchGetWithRetry(\n        service.entities.tenant,\n        orderedIds.map((id) => ({ tenantId: id, sk: SK })),\n      ) as Promise<\n        Array<{\n          id: string;\n          resource: string;\n          usersInTenant?: number;\n          workspacesInTenant?: number;\n        }>\n      >,\n    getId: (item) => item.id,\n    // FULL mode (admin list default): read the ADR-028 counters off the\n    // canonical record hydrated by BatchGet and expose them as\n    // `resource.counts`. Missing counters render as 0.\n    buildEntry: (id, item) => ({\n      id,\n      resource: {\n        resourceType: \"Tenant\",\n        id,\n        ...(JSON.parse(item.resource) as Record<string, unknown>),\n        counts: {\n          usersInTenant: counterValue(item.usersInTenant),\n          workspacesInTenant: counterValue(item.workspacesInTenant),\n        },\n      },\n    }),\n    // SUMMARY mode reads only the GSI1 `summary` projection, which does\n    // not carry the counters; surface zeros so the shape stays uniform.\n    buildSummaryEntry: (id, parsed) => ({\n      id,\n      resource: {\n        resourceType: \"Tenant\",\n        id,\n        ...parsed,\n        counts: { usersInTenant: 0, workspacesInTenant: 0 },\n      },\n    }),\n  });\n}\n","import {\n  buildSkPrefix,\n  type MembershipListByUserMode,\n} from \"./membership-list-by-user-operation\";\nimport { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\n\n/** Inputs accepted by {@link countMembershipsByUserOperation}. */\nexport interface CountMembershipsByUserParams {\n  readonly userId: string;\n  /** Filter mode — see {@link MembershipListByUserMode}. Defaults to `\"all\"`. */\n  readonly mode?: MembershipListByUserMode;\n  /** Required only when `mode === \"workspaceInTenant\"`. */\n  readonly tenantId?: string;\n  /** Optional table-name override; resolved via env when omitted. */\n  readonly tableName?: string;\n}\n\n/**\n * Count a user's Memberships via the ADR-018 user-partition projection, with the\n * same `SK begins_with` lane discriminator as {@link membershipListByUserOperation}.\n *\n * Pages through every matching projection row (`{ pages: \"all\" }`) projecting only\n * the `membershipId` key, and returns the row count. Backs\n * `GET /User/:id/Membership?_summary=count`.\n *\n * Note: the per-user counts (`tenantsForUser`, `workspacesForUser`) are also\n * maintained as denormalized counters on the User record per ADR-028; this\n * recompute-from-projection count is the FHIR `_summary=count` shape and the\n * authoritative source the counters are reconciled against.\n */\nexport async function countMembershipsByUserOperation(\n  params: CountMembershipsByUserParams,\n): Promise<number> {\n  const { userId, mode = \"all\", tenantId, tableName } = params;\n\n  if (mode === \"workspaceInTenant\" && !tenantId) {\n    throw new Error(\n      'countMembershipsByUserOperation: tenantId is required when mode === \"workspaceInTenant\"',\n    );\n  }\n\n  const service = getDynamoControlService(tableName);\n  const skPrefix = buildSkPrefix(mode, tenantId);\n\n  const result = await service.entities.membershipUserProjection.query\n    .record({ userId })\n    .begins({ sk: skPrefix })\n    .go({ pages: \"all\", attributes: [\"membershipId\"] });\n\n  return (result.data ?? []).length;\n}\n","import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\n\n/** Inputs accepted by {@link membershipListByWorkspaceOperation}. */\nexport interface MembershipListByWorkspaceParams {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  /** ElectroDB cursor from a prior page. Forwarded to `.go({ cursor })`. */\n  readonly cursor?: string | null;\n  /** Per-page item limit forwarded to `.go({ limit })`. */\n  readonly limit?: number;\n  /** Sort order forwarded to `.go({ order })`. Defaults to ElectroDB's `\"asc\"`. */\n  readonly order?: \"asc\" | \"desc\";\n  /** Optional table-name override; resolved via env when omitted. */\n  readonly tableName?: string;\n}\n\n/** One projection-row payload as returned to a consumer. */\nexport interface MembershipWorkspaceProjectionEntry {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  readonly sk: string;\n  readonly userId: string;\n  readonly membershipId: string;\n  readonly summary: string;\n  readonly vid: string;\n  readonly lastUpdated: string;\n  readonly denormalizedUserName?: string;\n}\n\n/** Page returned by {@link membershipListByWorkspaceOperation}. */\nexport interface MembershipListByWorkspaceResult {\n  readonly items: Array<MembershipWorkspaceProjectionEntry>;\n  /** ElectroDB cursor for the next page, or `null` when exhausted. */\n  readonly cursor: string | null;\n}\n\n/**\n * List Memberships for a workspace via the ADR-018 workspace-partition\n * projection (no GSI hop).\n *\n * Reads `MembershipWorkspaceProjectionEntity` rows under\n * `PK = TID#<tenantId>#WORKSPACE#ID#<workspaceId>` with\n * `SK begins_with 'MEMBERSHIP#'`. The projection's SK shape\n * (`MEMBERSHIP#<normalizedUserName>#USER#<userId>#<membershipId>`) sorts\n * members alphabetically by user name within the workspace partition, so\n * the natural Query order is exactly what the access pattern expects —\n * no client-side sort.\n *\n * Returns the projection rows verbatim (`summary`, `vid`, `lastUpdated`\n * plus the projection-discriminating fields) — full canonical-resource\n * hydration is opt-in for callers via\n * `MembershipEntity.get({ tenantId, id: membershipId })`. Pagination\n * mirrors ElectroDB's native `.go({ cursor })` shape; the returned\n * `cursor` is opaque to callers.\n *\n * @see ADR-018 § Access Pattern Coverage (pattern #2)\n * @see .state/adr-018-implementation-guide.md § 1 (SK grammar)\n */\nexport async function membershipListByWorkspaceOperation(\n  params: MembershipListByWorkspaceParams,\n): Promise<MembershipListByWorkspaceResult> {\n  const {\n    tenantId,\n    workspaceId,\n    cursor = null,\n    limit,\n    order,\n    tableName,\n  } = params;\n\n  const service = getDynamoControlService(tableName);\n\n  const goOptions: {\n    cursor?: string | null;\n    limit?: number;\n    order?: \"asc\" | \"desc\";\n  } = {\n    cursor,\n  };\n  if (limit !== undefined) {\n    goOptions.limit = limit;\n  }\n  if (order !== undefined) {\n    goOptions.order = order;\n  }\n\n  const result = await service.entities.membershipWorkspaceProjection.query\n    .record({ tenantId, workspaceId })\n    .begins({ sk: \"MEMBERSHIP#\" })\n    .go(goOptions);\n\n  const items: Array<MembershipWorkspaceProjectionEntry> = (\n    result.data ?? []\n  ).map((row) => ({\n    tenantId: row.tenantId,\n    workspaceId: row.workspaceId,\n    sk: row.sk,\n    userId: row.userId,\n    membershipId: row.membershipId,\n    summary: row.summary,\n    vid: row.vid,\n    lastUpdated: row.lastUpdated,\n    denormalizedUserName: row.denormalizedUserName,\n  }));\n\n  return { items, cursor: result.cursor ?? null };\n}\n","import { getDynamoControlService } from \"../../../dynamo/dynamo-control-service\";\n\n/** Inputs accepted by {@link roleAssignmentListByWorkspaceOperation}. */\nexport interface RoleAssignmentListByWorkspaceParams {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  /**\n   * Optional role discriminator. When supplied, narrows the listing to\n   * users assigned to a single role via the discriminator-first\n   * `begins_with('ROLEASSIGNMENT#<roleId>#')` prefix — the central read\n   * pattern (#9 is \"users with role X in workspace Y\"). Omit to return\n   * every role assignment in the workspace interleaved by `<roleId>`.\n   */\n  readonly roleId?: string;\n  /** ElectroDB cursor from a prior page. Forwarded to `.go({ cursor })`. */\n  readonly cursor?: string | null;\n  /** Per-page item limit forwarded to `.go({ limit })`. */\n  readonly limit?: number;\n  /** Sort order forwarded to `.go({ order })`. Defaults to ElectroDB's `\"asc\"`. */\n  readonly order?: \"asc\" | \"desc\";\n  /** Optional table-name override; resolved via env when omitted. */\n  readonly tableName?: string;\n}\n\n/** One projection-row payload as returned to a consumer. */\nexport interface RoleAssignmentWorkspaceProjectionEntry {\n  readonly tenantId: string;\n  readonly workspaceId: string;\n  readonly sk: string;\n  readonly userId: string;\n  readonly roleId: string;\n  readonly roleAssignmentId: string;\n  readonly summary: string;\n  readonly vid: string;\n  readonly lastUpdated: string;\n  readonly denormalizedUserName?: string;\n  readonly denormalizedRoleName?: string;\n}\n\n/** Page returned by {@link roleAssignmentListByWorkspaceOperation}. */\nexport interface RoleAssignmentListByWorkspaceResult {\n  readonly items: Array<RoleAssignmentWorkspaceProjectionEntry>;\n  /** ElectroDB cursor for the next page, or `null` when exhausted. */\n  readonly cursor: string | null;\n}\n\n/**\n * Compose the SK prefix for the workspace-projection list. The\n * pattern-#9 SK is **discriminator-first on the raw `<roleId>`**\n * (`ROLEASSIGNMENT#<roleId>#<normalizedUserName>#USER#<userId>#<id>`)\n * so a `begins_with('ROLEASSIGNMENT#<roleId>#')` filter returns every\n * user assigned to that role in the workspace. The trailing `#` after\n * the role id is critical — without it `ROLEASSIGNMENT#role-1` would\n * also match `ROLEASSIGNMENT#role-10`, `role-100`, etc. Omitting the\n * `roleId` arg falls back to the wider `ROLEASSIGNMENT#` prefix.\n */\nfunction buildSkPrefix(roleId: string | undefined): string {\n  if (roleId === undefined || roleId.length === 0) {\n    return \"ROLEASSIGNMENT#\";\n  }\n  return `ROLEASSIGNMENT#${roleId}#`;\n}\n\n/**\n * List RoleAssignments for a workspace via the ADR-018 workspace-\n * partition projection (no GSI hop).\n *\n * Reads `RoleAssignmentWorkspaceProjectionEntity` rows under\n * `PK = TID#<tenantId>#WORKSPACE#ID#<workspaceId>` with an\n * `SK begins_with` filter:\n *\n * | `roleId` arg | SK begins_with | Covers |\n * |---|---|---|\n * | omitted | `ROLEASSIGNMENT#` | Every role assignment in the workspace, interleaved by `<roleId>` |\n * | supplied | `ROLEASSIGNMENT#<roleId>#` | Pattern #9 — every user assigned to that role, sorted alphabetically by `<normalizedUserName>` |\n *\n * The projection's SK shape\n * (`ROLEASSIGNMENT#<roleId>#<normalizedUserName>#USER#<userId>#<id>`)\n * is discriminator-first on the raw `<roleId>` (mirroring the canonical\n * GSI1SK from pattern #8) so the natural Query order is exactly what\n * the access pattern expects — no client-side sort. Tenant-scoped\n * RoleAssignments (no `workspaceId`) skip this projection entirely;\n * they live only in the user-projection's tenant sub-lane.\n *\n * Returns the projection rows verbatim (`summary`, `vid`, `lastUpdated`\n * plus the projection-discriminating fields) — full canonical-resource\n * hydration is opt-in for callers via\n * `RoleAssignmentEntity.get({ tenantId, id: roleAssignmentId })`.\n * Pagination mirrors ElectroDB's native `.go({ cursor })` shape; the\n * returned `cursor` is opaque to callers.\n *\n * @see ADR-018 § Access Pattern Coverage (pattern #9)\n * @see .state/adr-018-implementation-guide.md § 1 (SK grammar) and § 2 (attribute set)\n */\nexport async function roleAssignmentListByWorkspaceOperation(\n  params: RoleAssignmentListByWorkspaceParams,\n): Promise<RoleAssignmentListByWorkspaceResult> {\n  const {\n    tenantId,\n    workspaceId,\n    roleId,\n    cursor = null,\n    limit,\n    order,\n    tableName,\n  } = params;\n\n  const service = getDynamoControlService(tableName);\n  const skPrefix = buildSkPrefix(roleId);\n\n  const goOptions: {\n    cursor?: string | null;\n    limit?: number;\n    order?: \"asc\" | \"desc\";\n  } = {\n    cursor,\n  };\n  if (limit !== undefined) {\n    goOptions.limit = limit;\n  }\n  if (order !== undefined) {\n    goOptions.order = order;\n  }\n\n  const result = await service.entities.roleAssignmentWorkspaceProjection.query\n    .record({ tenantId, workspaceId })\n    .begins({ sk: skPrefix })\n    .go(goOptions);\n\n  const items: Array<RoleAssignmentWorkspaceProjectionEntry> = (\n    result.data ?? []\n  ).map((row) => ({\n    tenantId: row.tenantId,\n    workspaceId: row.workspaceId,\n    sk: row.sk,\n    userId: row.userId,\n    roleId: row.roleId,\n    roleAssignmentId: row.roleAssignmentId,\n    summary: row.summary,\n    vid: row.vid,\n    lastUpdated: row.lastUpdated,\n    denormalizedUserName: row.denormalizedUserName,\n    denormalizedRoleName: row.denormalizedRoleName,\n  }));\n\n  return { items, cursor: result.cursor ?? null };\n}\n"],"mappings":";;;;;;;;;;;AASA,IAAM,KAAK;AA8BX,SAAS,aAAa,OAAwB;AAC5C,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE;AAMA,eAAsB,wBACpB,QAC+B;AAC/B,QAAM,EAAE,SAAS,WAAW,OAAO,OAAO,IAAI;AAC9C,QAAM,EAAE,SAAS,IAAI;AACrB,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,eAAe,MAAM,QAAQ;AAAA,IACjC,MAAM;AAAA,MAAK,EAAE,QAAQ,YAAY;AAAA,MAAG,CAAC,GAAG,UACtC,QAAQ,SAAS,UAAU,MACxB,KAAK,EAAE,UAAU,WAAW,OAAO,KAAK,EAAE,CAAC,EAC3C,GAAG;AAAA,IACR;AAAA,EACF;AAEA,SAAO,iBASL,MAAM,cAAc;AAAA,IACpB,SAAS,CAAC,eACR;AAAA,MACE,QAAQ,SAAS;AAAA,MACjB,WAAW,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,IAAI,GAAG,EAAE;AAAA,IACnD;AAAA,IASF,OAAO,CAAC,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA,IAItB,YAAY,CAAC,IAAI,UAAU;AAAA,MACzB;AAAA,MACA,UAAU;AAAA,QACR,cAAc;AAAA,QACd;AAAA,QACA,GAAI,KAAK,MAAM,KAAK,QAAQ;AAAA,QAC5B,QAAQ;AAAA,UACN,kBAAkB,aAAa,KAAK,gBAAgB;AAAA,UACpD,uBAAuB,aAAa,KAAK,qBAAqB;AAAA,UAC9D,wBAAwB,aAAa,KAAK,sBAAsB;AAAA,QAClE;AAAA,MACF;AAAA,IACF;AAAA;AAAA;AAAA,IAGA,mBAAmB,CAAC,IAAI,YAAY;AAAA,MAClC;AAAA,MACA,UAAU;AAAA,QACR,cAAc;AAAA,QACd;AAAA,QACA,GAAG;AAAA,QACH,QAAQ;AAAA,UACN,kBAAkB;AAAA,UAClB,uBAAuB;AAAA,UACvB,wBAAwB;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACH;;;AC7GA,IAAMA,MAAK;AA8BX,SAASC,cAAa,OAAwB;AAC5C,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE;AAOA,eAAsB,qBACpB,QAC4B;AAC5B,QAAM,EAAE,WAAW,OAAO,OAAO,IAAI;AACrC,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,eAAe,MAAM,QAAQ;AAAA,IACjC,MAAM;AAAA,MAAK,EAAE,QAAQ,YAAY;AAAA,MAAG,CAAC,GAAG,UACtC,QAAQ,SAAS,OAAO,MAAM,KAAK,EAAE,WAAW,OAAO,KAAK,EAAE,CAAC,EAAE,GAAG;AAAA,IACtE;AAAA,EACF;AAEA,SAAO,iBAQL,MAAM,cAAc;AAAA,IACpB,SAAS,CAAC,eACR;AAAA,MACE,QAAQ,SAAS;AAAA,MACjB,WAAW,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,IAAID,IAAG,EAAE;AAAA,IACnD;AAAA,IAQF,OAAO,CAAC,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA,IAItB,YAAY,CAAC,IAAI,UAAU;AAAA,MACzB;AAAA,MACA,UAAU;AAAA,QACR,cAAc;AAAA,QACd;AAAA,QACA,GAAI,KAAK,MAAM,KAAK,QAAQ;AAAA,QAC5B,QAAQ;AAAA,UACN,eAAeC,cAAa,KAAK,aAAa;AAAA,UAC9C,oBAAoBA,cAAa,KAAK,kBAAkB;AAAA,QAC1D;AAAA,MACF;AAAA,IACF;AAAA;AAAA;AAAA,IAGA,mBAAmB,CAAC,IAAI,YAAY;AAAA,MAClC;AAAA,MACA,UAAU;AAAA,QACR,cAAc;AAAA,QACd;AAAA,QACA,GAAG;AAAA,QACH,QAAQ,EAAE,eAAe,GAAG,oBAAoB,EAAE;AAAA,MACpD;AAAA,IACF;AAAA,EACF,CAAC;AACH;;;AC/EA,eAAsB,gCACpB,QACiB;AACjB,QAAM,EAAE,QAAQ,OAAO,OAAO,UAAU,UAAU,IAAI;AAEtD,MAAI,SAAS,uBAAuB,CAAC,UAAU;AAC7C,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,wBAAwB,SAAS;AACjD,QAAM,WAAW,cAAc,MAAM,QAAQ;AAE7C,QAAM,SAAS,MAAM,QAAQ,SAAS,yBAAyB,MAC5D,OAAO,EAAE,OAAO,CAAC,EACjB,OAAO,EAAE,IAAI,SAAS,CAAC,EACvB,GAAG,EAAE,OAAO,OAAO,YAAY,CAAC,cAAc,EAAE,CAAC;AAEpD,UAAQ,OAAO,QAAQ,CAAC,GAAG;AAC7B;;;ACQA,eAAsB,mCACpB,QAC0C;AAC1C,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,UAAU,wBAAwB,SAAS;AAEjD,QAAM,YAIF;AAAA,IACF;AAAA,EACF;AACA,MAAI,UAAU,QAAW;AACvB,cAAU,QAAQ;AAAA,EACpB;AACA,MAAI,UAAU,QAAW;AACvB,cAAU,QAAQ;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM,QAAQ,SAAS,8BAA8B,MACjE,OAAO,EAAE,UAAU,YAAY,CAAC,EAChC,OAAO,EAAE,IAAI,cAAc,CAAC,EAC5B,GAAG,SAAS;AAEf,QAAM,SACJ,OAAO,QAAQ,CAAC,GAChB,IAAI,CAAC,SAAS;AAAA,IACd,UAAU,IAAI;AAAA,IACd,aAAa,IAAI;AAAA,IACjB,IAAI,IAAI;AAAA,IACR,QAAQ,IAAI;AAAA,IACZ,cAAc,IAAI;AAAA,IAClB,SAAS,IAAI;AAAA,IACb,KAAK,IAAI;AAAA,IACT,aAAa,IAAI;AAAA,IACjB,sBAAsB,IAAI;AAAA,EAC5B,EAAE;AAEF,SAAO,EAAE,OAAO,QAAQ,OAAO,UAAU,KAAK;AAChD;;;AClDA,SAASC,eAAc,QAAoC;AACzD,MAAI,WAAW,UAAa,OAAO,WAAW,GAAG;AAC/C,WAAO;AAAA,EACT;AACA,SAAO,kBAAkB,MAAM;AACjC;AAiCA,eAAsB,uCACpB,QAC8C;AAC9C,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,UAAU,wBAAwB,SAAS;AACjD,QAAM,WAAWA,eAAc,MAAM;AAErC,QAAM,YAIF;AAAA,IACF;AAAA,EACF;AACA,MAAI,UAAU,QAAW;AACvB,cAAU,QAAQ;AAAA,EACpB;AACA,MAAI,UAAU,QAAW;AACvB,cAAU,QAAQ;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM,QAAQ,SAAS,kCAAkC,MACrE,OAAO,EAAE,UAAU,YAAY,CAAC,EAChC,OAAO,EAAE,IAAI,SAAS,CAAC,EACvB,GAAG,SAAS;AAEf,QAAM,SACJ,OAAO,QAAQ,CAAC,GAChB,IAAI,CAAC,SAAS;AAAA,IACd,UAAU,IAAI;AAAA,IACd,aAAa,IAAI;AAAA,IACjB,IAAI,IAAI;AAAA,IACR,QAAQ,IAAI;AAAA,IACZ,QAAQ,IAAI;AAAA,IACZ,kBAAkB,IAAI;AAAA,IACtB,SAAS,IAAI;AAAA,IACb,KAAK,IAAI;AAAA,IACT,aAAa,IAAI;AAAA,IACjB,sBAAsB,IAAI;AAAA,IAC1B,sBAAsB,IAAI;AAAA,EAC5B,EAAE;AAEF,SAAO,EAAE,OAAO,QAAQ,OAAO,UAAU,KAAK;AAChD;","names":["SK","counterValue","buildSkPrefix"]}

package/lib/{chunk-XNUCKVSE.mjs → chunk-7GMTHOYF.mjs}

@@ -4,7 +4,7 @@ import {
 import {
   createDataEntityRecord,
   mergeAuditIntoMeta
-} from "./chunk-FDBBTNCI.mjs";
+} from "./chunk-Q4KQD2NB.mjs";
 import {
   NotFoundError
 } from "./chunk-FYHBHHWK.mjs";
@@ -499,4 +499,4 @@ export {
   createPractitionerOperation,
   createProcedureOperation
 };
-//# sourceMappingURL=chunk-XNUCKVSE.mjs.map
+//# sourceMappingURL=chunk-7GMTHOYF.mjs.map

package/lib/{chunk-E2OWEBBH.mjs → chunk-DIVYB6GD.mjs}

@@ -1,3 +1,6 @@
+import {
+  reconcileAllCountersOperation
+} from "./chunk-F2LY4TEI.mjs";
 import {
   createAccountOperation,
   createAppointmentOperation,
@@ -13,14 +16,14 @@ import {
   createPractitionerOperation,
   createProcedureOperation,
   getRoleByIdOperation
-} from "./chunk-XNUCKVSE.mjs";
+} from "./chunk-7GMTHOYF.mjs";
 import {
   PLATFORM_SCOPE_TENANT_ID,
   createMembershipOperation,
   createRoleAssignmentOperation,
   createTenantOperation,
   createWorkspaceOperation
-} from "./chunk-Z4PZSLYY.mjs";
+} from "./chunk-3M4QTQH6.mjs";
 import {
   NotFoundError
 } from "./chunk-FYHBHHWK.mjs";
@@ -4570,7 +4573,13 @@ var seedWorkspaceDataPlane = async (baseContext, group, failures) => {
   }
 };
 var seedDemoGraph = async (params) => {
-  const { baseContext, devUsers, cognito, onSiteTesters = [] } = params;
+  const {
+    baseContext,
+    devUsers,
+    cognito,
+    onSiteTesters = [],
+    reconcileCounters = () => reconcileAllCountersOperation({})
+  } = params;
   const failures = [];
   for (const spec of [...DEMO_TENANT_SPECS, ...ON_SITE_UAT_TENANT_SPECS]) {
     const tenantContext = {
@@ -4744,6 +4753,11 @@ var seedDemoGraph = async (params) => {
       tester.role
     );
   }
+  try {
+    await reconcileCounters();
+  } catch (err) {
+    console.error("seed-demo-data: counter reconciliation failed:", err);
+  }
   for (const group of DEMO_DATA_PLANE_FIXTURES) {
     try {
       await seedWorkspaceDataPlane(baseContext, group, failures);
@@ -5110,4 +5124,4 @@ export {
   productionCognitoProvisioner,
   handler
 };
-//# sourceMappingURL=chunk-E2OWEBBH.mjs.map
+//# sourceMappingURL=chunk-DIVYB6GD.mjs.map