@openhi/constructs 0.0.32 → 0.0.34

package/lib/index.d.mts

@@ -2,7 +2,7 @@ import { OPEN_HI_STAGE, OPEN_HI_DEPLOYMENT_TARGET_ROLE, OpenHiEnvironmentConfig,
 import { Stage, StageProps, App, AppProps, Stack, StackProps, RemovalPolicy } from 'aws-cdk-lib';
 import { IConstruct, Construct } from 'constructs';
 import { Certificate, CertificateProps, ICertificate } from 'aws-cdk-lib/aws-certificatemanager';
-import { HttpApi, HttpApiProps, IHttpApi, CorsHttpMethod, DomainName } from 'aws-cdk-lib/aws-apigatewayv2';
+import { HttpApiProps, HttpApi, IHttpApi, DomainName } from 'aws-cdk-lib/aws-apigatewayv2';
 import { GraphqlApi, IGraphqlApi, GraphqlApiProps } from 'aws-cdk-lib/aws-appsync';
 import { UserPool, UserPoolProps, UserPoolClient, UserPoolClientProps, UserPoolDomain, UserPoolDomainProps, IUserPool, IUserPoolClient, IUserPoolDomain } from 'aws-cdk-lib/aws-cognito';
 import { Key, KeyProps, IKey } from 'aws-cdk-lib/aws-kms';
@@ -14,7 +14,6 @@ import { StringParameterProps, StringParameter } from 'aws-cdk-lib/aws-ssm';
 import { Distribution, DistributionProps } from 'aws-cdk-lib/aws-cloudfront';
 import { IBucket, BucketProps } from 'aws-cdk-lib/aws-s3';
 import { IFunction } from 'aws-cdk-lib/aws-lambda';
-import { Duration } from 'aws-cdk-lib/core';
 
 /**
  * Properties for creating an OpenHiStage instance.
@@ -358,12 +357,14 @@ declare class RootWildcardCertificate extends Certificate {
 /**
  * @see sites/www-docs/content/packages/@openhi/constructs/components/api-gateway/root-http-api.md
  */
+interface RootHttpApiProps extends HttpApiProps {
+}
 declare class RootHttpApi extends HttpApi {
     /**
      * Used when storing the API ID in SSM.
      */
     static readonly SSM_PARAM_NAME = "ROOT_HTTP_API";
-    constructor(scope: Construct, props?: HttpApiProps);
+    constructor(scope: Construct, props?: RootHttpApiProps);
 }
 
 /**
@@ -437,8 +438,7 @@ declare class PreTokenGenerationLambda extends Construct {
  */
 /**
  * DynamoDB table name for the data store. Used for cross-stack reference and
- * deterministic naming per branch. The table backs multiple use cases (e.g.
- * CRM, CMS, ERP, EHR).
+ * deterministic naming per branch. The table backs the app data store.
  */
 declare function getDynamoDbDataStoreTableName(scope: Construct): string;
 interface DynamoDbDataStoreProps extends Omit<TableProps, "tableName" | "removalPolicy"> {
@@ -450,7 +450,7 @@ interface DynamoDbDataStoreProps extends Omit<TableProps, "tableName" | "removal
 }
 /**
  * DynamoDB table implementing the single-table design for app data (e.g. FHIR
- * resources, CRM, CMS, ERP, EHR).
+ * resources and configuration).
  *
  * @see {@link https://github.com/codedrifters/openhi/blob/main/sites/www-docs/content/architecture/dynamodb-single-table-design.md | DynamoDB Single-Table Design}
  *
@@ -778,29 +778,12 @@ declare class OpenHiGlobalService extends OpenHiService {
 /**
  * @see sites/www-docs/content/packages/@openhi/constructs/services/open-hi-rest-api-service.md
  */
-/**
- * CORS configuration for the REST API HTTP API (API Gateway v2).
- * When origins are set, API Gateway sends CORS headers; backend CORS headers are ignored for browser requests.
- */
-interface RestApiCorsOptions {
-    /** Allowed origins (e.g. https://app.example.com, http://localhost:3000). Required when enabling CORS. */
-    readonly allowOrigins: string[];
-    /** Allowed HTTP methods. Defaults to GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS. */
-    readonly allowMethods?: CorsHttpMethod[];
-    /** Allowed request headers. Defaults to Content-Type, Authorization. */
-    readonly allowHeaders?: string[];
-    /** Whether to allow credentials (cookies, auth headers). Default true. */
-    readonly allowCredentials?: boolean;
-    /** How long preflight results can be cached. Default 1 day. */
-    readonly maxAge?: Duration;
-}
 interface OpenHiRestApiServiceProps extends OpenHiServiceProps {
     /**
-     * Optional CORS configuration for the root HTTP API.
-     * When set, API Gateway will send CORS headers for the given origins.
-     * When omitted, no CORS is configured at the gateway (Express CORS in the Lambda still applies for direct or non-browser use).
+     * Optional props passed through to the RootHttpApi (API Gateway HTTP API) construct.
+     * Use corsPreflight (CDK CorsPreflightOptions) for CORS; other HttpApiProps (e.g. description, disableExecuteApiEndpoint) apply as well.
      */
-    readonly cors?: RestApiCorsOptions;
+    readonly rootHttpApiProps?: RootHttpApiProps;
 }
 /**
  * SSM parameter name suffix for the REST API base URL.
@@ -823,7 +806,7 @@ declare class OpenHiRestApiService extends OpenHiService {
      */
     static restApiBaseUrlFromConstruct(scope: Construct): string;
     get serviceType(): string;
-    /** Override so this.props is typed with this service's options (e.g. cors). */
+    /** Override so this.props is typed with this service's options (e.g. rootHttpApiProps). */
     props: OpenHiRestApiServiceProps;
     readonly rootHttpApi: RootHttpApi;
     constructor(ohEnv: OpenHiEnvironment, props?: OpenHiRestApiServiceProps);
@@ -878,7 +861,7 @@ interface OpenHiDataServiceProps extends OpenHiServiceProps {
 /**
  * Data storage service stack: centralizes DynamoDB, S3, EventBridge event buses,
  * and other persistence resources for OpenHI. Creates the single-table data store
- * (CRM, CMS, ERP, EHR) and the data/ops event buses in protected methods;
+ * and the data/ops event buses in protected methods;
  * subclasses may override to customize.
  */
 declare class OpenHiDataService extends OpenHiService {
@@ -953,4 +936,4 @@ declare class OpenHiGraphqlService extends OpenHiService {
     protected createRootGraphqlApi(): RootGraphqlApi;
 }
 
-export { type BuildParameterNameProps, ChildHostedZone, type ChildHostedZoneProps, CognitoUserPool, CognitoUserPoolClient, CognitoUserPoolDomain, CognitoUserPoolKmsKey, DataEventBus, DiscoverableStringParameter, type DiscoverableStringParameterProps, DynamoDbDataStore, type DynamoDbDataStoreProps, OpenHiApp, type OpenHiAppProps, OpenHiAuthService, type OpenHiAuthServiceProps, OpenHiDataService, type OpenHiDataServiceProps, OpenHiEnvironment, type OpenHiEnvironmentProps, OpenHiGlobalService, type OpenHiGlobalServiceProps, OpenHiGraphqlService, type OpenHiGraphqlServiceProps, OpenHiRestApiService, type OpenHiRestApiServiceProps, OpenHiService, type OpenHiServiceProps, type OpenHiServiceType, OpenHiStage, type OpenHiStageProps, OpsEventBus, PreTokenGenerationLambda, REST_API_BASE_URL_SSM_NAME, type RestApiCorsOptions, RootGraphqlApi, type RootGraphqlApiProps, RootHostedZone, RootHttpApi, RootWildcardCertificate, STATIC_HOSTING_SERVICE_TYPE, StaticHosting, type StaticHostingProps, getDynamoDbDataStoreTableName };
+export { type BuildParameterNameProps, ChildHostedZone, type ChildHostedZoneProps, CognitoUserPool, CognitoUserPoolClient, CognitoUserPoolDomain, CognitoUserPoolKmsKey, DataEventBus, DiscoverableStringParameter, type DiscoverableStringParameterProps, DynamoDbDataStore, type DynamoDbDataStoreProps, OpenHiApp, type OpenHiAppProps, OpenHiAuthService, type OpenHiAuthServiceProps, OpenHiDataService, type OpenHiDataServiceProps, OpenHiEnvironment, type OpenHiEnvironmentProps, OpenHiGlobalService, type OpenHiGlobalServiceProps, OpenHiGraphqlService, type OpenHiGraphqlServiceProps, OpenHiRestApiService, type OpenHiRestApiServiceProps, OpenHiService, type OpenHiServiceProps, type OpenHiServiceType, OpenHiStage, type OpenHiStageProps, OpsEventBus, PreTokenGenerationLambda, REST_API_BASE_URL_SSM_NAME, RootGraphqlApi, type RootGraphqlApiProps, RootHostedZone, RootHttpApi, type RootHttpApiProps, RootWildcardCertificate, STATIC_HOSTING_SERVICE_TYPE, StaticHosting, type StaticHostingProps, getDynamoDbDataStoreTableName };

package/lib/index.d.ts

@@ -1,7 +1,7 @@
 import { RemovalPolicy, App, AppProps, Stage, StageProps, Stack, StackProps } from 'aws-cdk-lib';
 import { Construct, IConstruct } from 'constructs';
 import { ICertificate, Certificate, CertificateProps } from 'aws-cdk-lib/aws-certificatemanager';
-import { IHttpApi, CorsHttpMethod, HttpApi, HttpApiProps, DomainName } from 'aws-cdk-lib/aws-apigatewayv2';
+import { IHttpApi, HttpApiProps, HttpApi, DomainName } from 'aws-cdk-lib/aws-apigatewayv2';
 import { IGraphqlApi, GraphqlApi, GraphqlApiProps } from 'aws-cdk-lib/aws-appsync';
 import { UserPool, UserPoolProps, UserPoolClient, UserPoolClientProps, UserPoolDomain, UserPoolDomainProps, IUserPool, IUserPoolClient, IUserPoolDomain } from 'aws-cdk-lib/aws-cognito';
 import { Key, KeyProps, IKey } from 'aws-cdk-lib/aws-kms';
@@ -13,7 +13,6 @@ import { StringParameterProps, StringParameter } from 'aws-cdk-lib/aws-ssm';
 import { Distribution, DistributionProps } from 'aws-cdk-lib/aws-cloudfront';
 import { IBucket, BucketProps } from 'aws-cdk-lib/aws-s3';
 import { IFunction } from 'aws-cdk-lib/aws-lambda';
-import { Duration } from 'aws-cdk-lib/core';
 
 /*******************************************************************************
  *
@@ -438,12 +437,14 @@ declare class RootWildcardCertificate extends Certificate {
 /**
  * @see sites/www-docs/content/packages/@openhi/constructs/components/api-gateway/root-http-api.md
  */
+interface RootHttpApiProps extends HttpApiProps {
+}
 declare class RootHttpApi extends HttpApi {
     /**
      * Used when storing the API ID in SSM.
      */
     static readonly SSM_PARAM_NAME = "ROOT_HTTP_API";
-    constructor(scope: Construct, props?: HttpApiProps);
+    constructor(scope: Construct, props?: RootHttpApiProps);
 }
 
 /**
@@ -517,8 +518,7 @@ declare class PreTokenGenerationLambda extends Construct {
  */
 /**
  * DynamoDB table name for the data store. Used for cross-stack reference and
- * deterministic naming per branch. The table backs multiple use cases (e.g.
- * CRM, CMS, ERP, EHR).
+ * deterministic naming per branch. The table backs the app data store.
  */
 declare function getDynamoDbDataStoreTableName(scope: Construct): string;
 interface DynamoDbDataStoreProps extends Omit<TableProps, "tableName" | "removalPolicy"> {
@@ -530,7 +530,7 @@ interface DynamoDbDataStoreProps extends Omit<TableProps, "tableName" | "removal
 }
 /**
  * DynamoDB table implementing the single-table design for app data (e.g. FHIR
- * resources, CRM, CMS, ERP, EHR).
+ * resources and configuration).
  *
  * @see {@link https://github.com/codedrifters/openhi/blob/main/sites/www-docs/content/architecture/dynamodb-single-table-design.md | DynamoDB Single-Table Design}
  *
@@ -858,29 +858,12 @@ declare class OpenHiGlobalService extends OpenHiService {
 /**
  * @see sites/www-docs/content/packages/@openhi/constructs/services/open-hi-rest-api-service.md
  */
-/**
- * CORS configuration for the REST API HTTP API (API Gateway v2).
- * When origins are set, API Gateway sends CORS headers; backend CORS headers are ignored for browser requests.
- */
-interface RestApiCorsOptions {
-    /** Allowed origins (e.g. https://app.example.com, http://localhost:3000). Required when enabling CORS. */
-    readonly allowOrigins: string[];
-    /** Allowed HTTP methods. Defaults to GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS. */
-    readonly allowMethods?: CorsHttpMethod[];
-    /** Allowed request headers. Defaults to Content-Type, Authorization. */
-    readonly allowHeaders?: string[];
-    /** Whether to allow credentials (cookies, auth headers). Default true. */
-    readonly allowCredentials?: boolean;
-    /** How long preflight results can be cached. Default 1 day. */
-    readonly maxAge?: Duration;
-}
 interface OpenHiRestApiServiceProps extends OpenHiServiceProps {
     /**
-     * Optional CORS configuration for the root HTTP API.
-     * When set, API Gateway will send CORS headers for the given origins.
-     * When omitted, no CORS is configured at the gateway (Express CORS in the Lambda still applies for direct or non-browser use).
+     * Optional props passed through to the RootHttpApi (API Gateway HTTP API) construct.
+     * Use corsPreflight (CDK CorsPreflightOptions) for CORS; other HttpApiProps (e.g. description, disableExecuteApiEndpoint) apply as well.
      */
-    readonly cors?: RestApiCorsOptions;
+    readonly rootHttpApiProps?: RootHttpApiProps;
 }
 /**
  * SSM parameter name suffix for the REST API base URL.
@@ -903,7 +886,7 @@ declare class OpenHiRestApiService extends OpenHiService {
      */
     static restApiBaseUrlFromConstruct(scope: Construct): string;
     get serviceType(): string;
-    /** Override so this.props is typed with this service's options (e.g. cors). */
+    /** Override so this.props is typed with this service's options (e.g. rootHttpApiProps). */
     props: OpenHiRestApiServiceProps;
     readonly rootHttpApi: RootHttpApi;
     constructor(ohEnv: OpenHiEnvironment, props?: OpenHiRestApiServiceProps);
@@ -958,7 +941,7 @@ interface OpenHiDataServiceProps extends OpenHiServiceProps {
 /**
  * Data storage service stack: centralizes DynamoDB, S3, EventBridge event buses,
  * and other persistence resources for OpenHI. Creates the single-table data store
- * (CRM, CMS, ERP, EHR) and the data/ops event buses in protected methods;
+ * and the data/ops event buses in protected methods;
  * subclasses may override to customize.
  */
 declare class OpenHiDataService extends OpenHiService {
@@ -1034,4 +1017,4 @@ declare class OpenHiGraphqlService extends OpenHiService {
 }
 
 export { ChildHostedZone, CognitoUserPool, CognitoUserPoolClient, CognitoUserPoolDomain, CognitoUserPoolKmsKey, DataEventBus, DiscoverableStringParameter, DynamoDbDataStore, OpenHiApp, OpenHiAuthService, OpenHiDataService, OpenHiEnvironment, OpenHiGlobalService, OpenHiGraphqlService, OpenHiRestApiService, OpenHiService, OpenHiStage, OpsEventBus, PreTokenGenerationLambda, REST_API_BASE_URL_SSM_NAME, RootGraphqlApi, RootHostedZone, RootHttpApi, RootWildcardCertificate, STATIC_HOSTING_SERVICE_TYPE, StaticHosting, getDynamoDbDataStoreTableName };
-export type { BuildParameterNameProps, ChildHostedZoneProps, DiscoverableStringParameterProps, DynamoDbDataStoreProps, OpenHiAppProps, OpenHiAuthServiceProps, OpenHiDataServiceProps, OpenHiEnvironmentProps, OpenHiGlobalServiceProps, OpenHiGraphqlServiceProps, OpenHiRestApiServiceProps, OpenHiServiceProps, OpenHiServiceType, OpenHiStageProps, RestApiCorsOptions, RootGraphqlApiProps, StaticHostingProps };
+export type { BuildParameterNameProps, ChildHostedZoneProps, DiscoverableStringParameterProps, DynamoDbDataStoreProps, OpenHiAppProps, OpenHiAuthServiceProps, OpenHiDataServiceProps, OpenHiEnvironmentProps, OpenHiGlobalServiceProps, OpenHiGraphqlServiceProps, OpenHiRestApiServiceProps, OpenHiServiceProps, OpenHiServiceType, OpenHiStageProps, RootGraphqlApiProps, RootHttpApiProps, StaticHostingProps };

package/lib/index.js

@@ -1153,7 +1153,6 @@ var import_aws_apigatewayv2_integrations = require("aws-cdk-lib/aws-apigatewayv2
 var import_aws_iam = require("aws-cdk-lib/aws-iam");
 var import_aws_route533 = require("aws-cdk-lib/aws-route53");
 var import_aws_route53_targets = require("aws-cdk-lib/aws-route53-targets");
-var import_core2 = require("aws-cdk-lib/core");
 
 // src/services/open-hi-data-service.ts
 var import_aws_dynamodb2 = require("aws-cdk-lib/aws-dynamodb");
@@ -1272,6 +1271,10 @@ var RestApiLambda = class extends import_constructs5.Construct {
         DYNAMO_TABLE_NAME: props.dynamoTableName,
         BRANCH_TAG_VALUE: props.branchTagValue,
         HTTP_API_TAG_VALUE: props.httpApiTagValue
+      },
+      bundling: {
+        minify: true,
+        sourceMap: false
       }
     });
   }
@@ -1475,32 +1478,13 @@ var _OpenHiRestApiService = class _OpenHiRestApiService extends OpenHiService {
       userPool,
       { userPoolClients: [userPoolClient] }
     );
-    const cors = this.props.cors;
-    const corsPreflight = cors && cors.allowOrigins.length > 0 ? {
-      allowOrigins: cors.allowOrigins,
-      allowMethods: cors.allowMethods ?? [
-        import_aws_apigatewayv22.CorsHttpMethod.GET,
-        import_aws_apigatewayv22.CorsHttpMethod.HEAD,
-        import_aws_apigatewayv22.CorsHttpMethod.POST,
-        import_aws_apigatewayv22.CorsHttpMethod.PUT,
-        import_aws_apigatewayv22.CorsHttpMethod.PATCH,
-        import_aws_apigatewayv22.CorsHttpMethod.DELETE,
-        import_aws_apigatewayv22.CorsHttpMethod.OPTIONS
-      ],
-      allowHeaders: cors.allowHeaders ?? [
-        "Content-Type",
-        "Authorization"
-      ],
-      allowCredentials: cors.allowCredentials ?? true,
-      maxAge: cors.maxAge ?? import_core2.Duration.days(1)
-    } : void 0;
     const rootHttpApi = new RootHttpApi(this, {
+      ...this.props.rootHttpApiProps,
       defaultDomainMapping: {
         domainName,
         mappingKey: void 0
       },
-      defaultAuthorizer: cognitoAuthorizer,
-      ...corsPreflight && { corsPreflight }
+      defaultAuthorizer: cognitoAuthorizer
     });
     new DiscoverableStringParameter(this, "http-api-url-param", {
       ssmParamName: RootHttpApi.SSM_PARAM_NAME,