@openhi/constructs 0.0.77 → 0.0.79

package/lib/index.js

@@ -98,6 +98,9 @@ __export(src_exports, {
   CognitoUserPoolClient: () => CognitoUserPoolClient,
   CognitoUserPoolDomain: () => CognitoUserPoolDomain,
   CognitoUserPoolKmsKey: () => CognitoUserPoolKmsKey,
+  DATA_STORE_CHANGE_DETAIL_MAX_UTF8_BYTES: () => DATA_STORE_CHANGE_DETAIL_MAX_UTF8_BYTES,
+  DATA_STORE_CHANGE_DETAIL_TYPE: () => DATA_STORE_CHANGE_DETAIL_TYPE,
+  DATA_STORE_CHANGE_EVENT_SOURCE: () => DATA_STORE_CHANGE_EVENT_SOURCE,
   DataEventBus: () => DataEventBus,
   DataStoreHistoricalArchive: () => DataStoreHistoricalArchive,
   DiscoverableStringParameter: () => DiscoverableStringParameter,
@@ -120,6 +123,7 @@ __export(src_exports, {
   RootWildcardCertificate: () => RootWildcardCertificate,
   STATIC_HOSTING_SERVICE_TYPE: () => STATIC_HOSTING_SERVICE_TYPE,
   StaticHosting: () => StaticHosting,
+  buildFhirCurrentResourceChangeDetail: () => buildFhirCurrentResourceChangeDetail,
   getDynamoDbDataStoreTableName: () => getDynamoDbDataStoreTableName
 });
 module.exports = __toCommonJS(src_exports);
@@ -696,6 +700,131 @@ var PreTokenGenerationLambda = class extends import_constructs.Construct {
   }
 };
 
+// src/components/dynamodb/dynamodb-stream-record.ts
+function dynamodbValueToJs(av) {
+  if (av.S !== void 0) {
+    return av.S;
+  }
+  if (av.N !== void 0) {
+    return av.N.includes(".") ? Number.parseFloat(av.N) : Number.parseInt(av.N, 10);
+  }
+  if (av.BOOL !== void 0) {
+    return av.BOOL;
+  }
+  if (av.NULL !== void 0) {
+    return null;
+  }
+  if (av.M !== void 0) {
+    return dynamodbImageToPlain(av.M);
+  }
+  if (av.L !== void 0) {
+    return av.L.map((x) => dynamodbValueToJs(x));
+  }
+  if (av.SS !== void 0) {
+    return av.SS;
+  }
+  if (av.NS !== void 0) {
+    return av.NS.map(
+      (n) => n.includes(".") ? Number.parseFloat(n) : Number.parseInt(n, 10)
+    );
+  }
+  return void 0;
+}
+function dynamodbImageToPlain(image) {
+  const out = {};
+  for (const [k, v] of Object.entries(image)) {
+    out[k] = dynamodbValueToJs(v);
+  }
+  return out;
+}
+
+// src/components/dynamodb/data-store-change-events.ts
+var DATA_STORE_CHANGE_EVENT_SOURCE = "openhi.data.store";
+var DATA_STORE_CHANGE_DETAIL_TYPE = "FhirCurrentResourceChanged";
+var DATA_STORE_CHANGE_DETAIL_MAX_UTF8_BYTES = 250 * 1024;
+var EXCLUDED_CHANGE_DETAIL_KEYS = /* @__PURE__ */ new Set([
+  "PK",
+  "SK",
+  "GSI1PK",
+  "GSI1SK",
+  "GSI2PK",
+  "GSI2SK",
+  "GSI3PK",
+  "GSI3SK",
+  "GSI4PK",
+  "GSI4SK",
+  /** Full FHIR JSON may contain PII; never list or ship in the bus payload. */
+  "resource"
+]);
+function shallowValueEqual(a, b) {
+  return JSON.stringify(a) === JSON.stringify(b);
+}
+function changedNonResourceAttributeNames(oldImage, newImage) {
+  if (!oldImage || !newImage) {
+    return void 0;
+  }
+  const names = /* @__PURE__ */ new Set();
+  const keys = /* @__PURE__ */ new Set([...Object.keys(oldImage), ...Object.keys(newImage)]);
+  for (const k of keys) {
+    if (EXCLUDED_CHANGE_DETAIL_KEYS.has(k)) {
+      continue;
+    }
+    if (!shallowValueEqual(oldImage[k], newImage[k])) {
+      names.add(k);
+    }
+  }
+  return names.size > 0 ? [...names].sort() : void 0;
+}
+function presentMetadataAttributeNames(image) {
+  if (!image) {
+    return void 0;
+  }
+  const names = Object.keys(image).filter(
+    (k) => !EXCLUDED_CHANGE_DETAIL_KEYS.has(k)
+  );
+  return names.length > 0 ? names.sort() : void 0;
+}
+function plainImage(image) {
+  if (!image) {
+    return void 0;
+  }
+  return dynamodbImageToPlain(image);
+}
+function buildFhirCurrentResourceChangeDetail(record, keys) {
+  const rawName = record.eventName;
+  const changeType = rawName === "INSERT" || rawName === "MODIFY" || rawName === "REMOVE" ? rawName : "MODIFY";
+  const seq = record.dynamodb?.SequenceNumber;
+  const approxEpochSec = record.dynamodb?.ApproximateCreationDateTime;
+  const newPlain = plainImage(
+    record.dynamodb?.NewImage
+  );
+  const oldPlain = plainImage(
+    record.dynamodb?.OldImage
+  );
+  let changedAttributeNames;
+  if (changeType === "MODIFY") {
+    changedAttributeNames = changedNonResourceAttributeNames(
+      oldPlain,
+      newPlain
+    );
+  } else if (changeType === "INSERT") {
+    changedAttributeNames = presentMetadataAttributeNames(newPlain);
+  } else {
+    changedAttributeNames = presentMetadataAttributeNames(oldPlain);
+  }
+  return {
+    changeType,
+    tenantId: keys.tenantId,
+    workspaceId: keys.workspaceId,
+    resourceType: keys.resourceType,
+    resourceId: keys.resourceId,
+    resourceVersion: keys.version,
+    ...typeof seq === "string" && seq.length > 0 ? { streamSequenceNumber: seq } : {},
+    ...typeof approxEpochSec === "number" && Number.isFinite(approxEpochSec) ? { approximateCreationEpochSec: approxEpochSec } : {},
+    ...changedAttributeNames ? { changedAttributeNames } : {}
+  };
+}
+
 // src/components/dynamodb/data-store-historical-archive.ts
 var import_node_fs2 = __toESM(require("fs"));
 var import_node_path2 = __toESM(require("path"));
@@ -724,17 +853,32 @@ var DataStoreHistoricalArchive = class extends import_constructs2.Construct {
       autoDeleteObjects: props.removalPolicy === import_aws_cdk_lib6.RemovalPolicy.DESTROY,
       versioned: true
     });
+    const putEventsFailureDlqBucket = props.dataEventBus ? new s3.Bucket(this, "PutEventsFailureDlq", {
+      blockPublicAccess: s3.BlockPublicAccess.BLOCK_ALL,
+      encryption: s3.BucketEncryption.S3_MANAGED,
+      enforceSSL: true,
+      removalPolicy: props.removalPolicy,
+      autoDeleteObjects: props.removalPolicy === import_aws_cdk_lib6.RemovalPolicy.DESTROY,
+      versioned: false
+    }) : void 0;
+    this.putEventsFailureDlqBucket = putEventsFailureDlqBucket;
     this.transformFunction = new import_aws_lambda_nodejs2.NodejsFunction(this, "FirehoseTransform", {
       entry: resolveHandlerEntry2(__dirname),
       runtime: import_aws_lambda2.Runtime.NODEJS_LATEST,
       memorySize: 512,
       timeout: import_aws_cdk_lib6.Duration.minutes(1),
-      description: "Firehose transform: filter CURRENT resource rows, S3 dynamic partition keys",
+      description: "Firehose transform: filter CURRENT resource rows, S3 keys, EventBridge PutEvents",
+      environment: props.dataEventBus && putEventsFailureDlqBucket ? {
+        DATA_EVENT_BUS_NAME: props.dataEventBus.eventBusName,
+        DATA_STORE_PUT_EVENTS_DLQ_BUCKET: putEventsFailureDlqBucket.bucketName
+      } : void 0,
       bundling: {
         minify: true,
         sourceMap: false
       }
     });
+    props.dataEventBus?.grantPutEventsTo(this.transformFunction);
+    putEventsFailureDlqBucket?.grantPut(this.transformFunction);
     const processor = new kinesisfirehose.LambdaFunctionProcessor(
       this.transformFunction,
       {
@@ -1290,7 +1434,8 @@ var _OpenHiDataService = class _OpenHiDataService extends OpenHiService {
       {
         kinesisStream: this.dataStoreChangeStream,
         removalPolicy: this.removalPolicy,
-        stackHash: this.stackHash
+        stackHash: this.stackHash,
+        dataEventBus: this.dataEventBus
       }
     );
   }
@@ -1666,6 +1811,9 @@ var OpenHiGraphqlService = _OpenHiGraphqlService;
   CognitoUserPoolClient,
   CognitoUserPoolDomain,
   CognitoUserPoolKmsKey,
+  DATA_STORE_CHANGE_DETAIL_MAX_UTF8_BYTES,
+  DATA_STORE_CHANGE_DETAIL_TYPE,
+  DATA_STORE_CHANGE_EVENT_SOURCE,
   DataEventBus,
   DataStoreHistoricalArchive,
   DiscoverableStringParameter,
@@ -1688,6 +1836,7 @@ var OpenHiGraphqlService = _OpenHiGraphqlService;
   RootWildcardCertificate,
   STATIC_HOSTING_SERVICE_TYPE,
   StaticHosting,
+  buildFhirCurrentResourceChangeDetail,
   getDynamoDbDataStoreTableName
 });
 //# sourceMappingURL=index.js.map