@reventlessdev/rescript-aws-sdk 3.0.0-alpha.17 → 3.0.0-alpha.18

package/CHANGELOG.md

@@ -3,6 +3,14 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.18 (2026-09-11)
+
+### Features
+
+* **aws:** the first administrator is one command, not the console ([5f1a846](https://github.com/ReventlessDev/reventless-core/commit/5f1a84603b21a9feb691a08a148751c6c6e8eca8))
+* **aws:** the rest of the cast is a file, not a comment ([aa23581](https://github.com/ReventlessDev/reventless-core/commit/aa23581f09948a47fb451ec2ecf2fc2bdd8e6ee6))
+
+
 # 3.0.0-alpha.17 (2026-09-09)
 
 **Note:** Version bump only for package @reventlessdev/rescript-aws-sdk

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/rescript-aws-sdk",
-  "version": "3.0.0-alpha.17",
+  "version": "3.0.0-alpha.18",
   "description": "ReScript bindings for aws-sdk",
   "license": "Apache-2.0",
   "dependencies": {

package/src/CognitoIdentityServiceProvider.res

@@ -70,6 +70,145 @@ module SignUpCommand = {
   let send: t => promise<output> = command => Raw.send(client(), command)
 }
 
+module AdminCreateUserCommand = {
+  type t
+
+  type attributeType = {
+    @as("Name") name: string,
+    @as("Value") value: string,
+  }
+
+  /** `MessageAction: "SUPPRESS"` stops Cognito emailing an invitation carrying a
+    temporary password. A caller that follows this with `AdminSetUserPassword`
+    owns the credential, and the invitation would name one that no longer works —
+    a message inviting somebody to sign in with the wrong password is worse than
+    no message. Omit it to get Cognito's ordinary invitation flow. */
+  type input = {
+    @as("UserPoolId") userPoolId: string,
+    @as("Username") username: string,
+    @as("UserAttributes") userAttributes?: array<attributeType>,
+    @as("MessageAction") messageAction?: string,
+    @as("DesiredDeliveryMediums") desiredDeliveryMediums?: array<string>,
+  }
+
+  /** `UserStatus` is `FORCE_CHANGE_PASSWORD` for a user created this way — an
+    administrator-created account holds a temporary password and meets a challenge
+    on first sign-in. Reported so a caller can say what it did about it. */
+  type userType = {
+    @as("Username") username?: string,
+    @as("UserStatus") userStatus?: string,
+  }
+
+  type output = {@as("User") user?: userType}
+
+  @new @module("@aws-sdk/client-cognito-identity-provider")
+  external make: input => t = "AdminCreateUserCommand"
+
+  module Raw = {
+    /**
+      see: https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/AdminCreateUserCommand/
+    */
+    @send
+    external send: (client, t) => promise<output> = "send"
+  }
+
+  let send: t => promise<output> = command => Raw.send(client(), command)
+}
+
+module AdminGetUserCommand = {
+  type t
+
+  type attributeType = {
+    @as("Name") name: string,
+    @as("Value") value: string,
+  }
+
+  type input = {
+    @as("UserPoolId") userPoolId: string,
+    @as("Username") username: string,
+  }
+
+  /** `UserAttributes` is where `sub` lives — the id the pool minted, which no
+    request supplies and which `AdminCreateUser` does not return. A caller that
+    has to record it (an accounts manifest, say) reads it back from here, and
+    reads it the same way for an account it just made and one that was already
+    there. A username the pool cannot resolve raises `UserNotFoundException`. */
+  type output = {
+    @as("Username") username?: string,
+    @as("UserAttributes") userAttributes?: array<attributeType>,
+    @as("UserStatus") userStatus?: string,
+  }
+
+  @new @module("@aws-sdk/client-cognito-identity-provider")
+  external make: input => t = "AdminGetUserCommand"
+
+  module Raw = {
+    /**
+      see: https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/AdminGetUserCommand/
+    */
+    @send
+    external send: (client, t) => promise<output> = "send"
+  }
+
+  let send: t => promise<output> = command => Raw.send(client(), command)
+}
+
+module AdminSetUserPasswordCommand = {
+  type t
+
+  /** `Permanent: true` leaves the account `CONFIRMED` and the password usable as
+    it stands. `false` (the default, if omitted) sets a *temporary* one and puts
+    the account back into `FORCE_CHANGE_PASSWORD` — so a caller bootstrapping an
+    account that must simply work has to say `true` explicitly. */
+  type input = {
+    @as("UserPoolId") userPoolId: string,
+    @as("Username") username: string,
+    @as("Password") password: string,
+    @as("Permanent") permanent?: bool,
+  }
+
+  @new @module("@aws-sdk/client-cognito-identity-provider")
+  external make: input => t = "AdminSetUserPasswordCommand"
+
+  module Raw = {
+    /**
+      see: https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/AdminSetUserPasswordCommand/
+    */
+    @send
+    external send: (client, t) => promise<unit> = "send"
+  }
+
+  let send: t => promise<unit> = command => Raw.send(client(), command)
+}
+
+module CreateGroupCommand = {
+  type t
+
+  type input = {
+    @as("GroupName") groupName: string,
+    @as("UserPoolId") userPoolId: string,
+    @as("Description") description?: string,
+    @as("Precedence") precedence?: int,
+  }
+
+  type groupType = {@as("GroupName") groupName?: string}
+
+  type output = {@as("Group") group?: groupType}
+
+  @new @module("@aws-sdk/client-cognito-identity-provider")
+  external make: input => t = "CreateGroupCommand"
+
+  module Raw = {
+    /**
+      see: https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/CreateGroupCommand/
+    */
+    @send
+    external send: (client, t) => promise<output> = "send"
+  }
+
+  let send: t => promise<output> = command => Raw.send(client(), command)
+}
+
 module AdminAddUserToGroupCommand = {
   type t
 
@@ -242,10 +381,15 @@ module DescribeUserPoolCommand = {
 
   type input = {@as("UserPoolId") userPoolId: string}
 
+  /** `UsernameAttributes` is how a caller learns what this pool signs in on
+    without having created it — the one pool setting no update can change, so a
+    caller that guesses wrong creates an account nobody can use. Absent means the
+    pool signs in on a plain username rather than on an attribute. */
   type userPoolType = {
     @as("Id") id?: string,
     @as("Name") name?: string,
     @as("Arn") arn?: string,
+    @as("UsernameAttributes") usernameAttributes?: array<string>,
   }
 
   type output = {@as("UserPool") userPool?: userPoolType}

package/src/CognitoIdentityServiceProvider.res.mjs

@@ -43,7 +43,7 @@ function send$1(command) {
   return client().send(command);
 }
 
-let AdminAddUserToGroupCommand = {
+let AdminCreateUserCommand = {
   Raw: Raw$2,
   send: send$1
 };
@@ -54,7 +54,7 @@ function send$2(command) {
   return client().send(command);
 }
 
-let AdminRemoveUserFromGroupCommand = {
+let AdminGetUserCommand = {
   Raw: Raw$3,
   send: send$2
 };
@@ -65,7 +65,7 @@ function send$3(command) {
   return client().send(command);
 }
 
-let AdminListGroupsForUserCommand = {
+let AdminSetUserPasswordCommand = {
   Raw: Raw$4,
   send: send$3
 };
@@ -76,7 +76,7 @@ function send$4(command) {
   return client().send(command);
 }
 
-let CreateUserPoolCommand = {
+let CreateGroupCommand = {
   Raw: Raw$5,
   send: send$4
 };
@@ -87,7 +87,7 @@ function send$5(command) {
   return client().send(command);
 }
 
-let ListUserPoolsCommand = {
+let AdminAddUserToGroupCommand = {
   Raw: Raw$6,
   send: send$5
 };
@@ -98,16 +98,64 @@ function send$6(command) {
   return client().send(command);
 }
 
-let DescribeUserPoolCommand = {
+let AdminRemoveUserFromGroupCommand = {
   Raw: Raw$7,
   send: send$6
 };
 
+let Raw$8 = {};
+
+function send$7(command) {
+  return client().send(command);
+}
+
+let AdminListGroupsForUserCommand = {
+  Raw: Raw$8,
+  send: send$7
+};
+
+let Raw$9 = {};
+
+function send$8(command) {
+  return client().send(command);
+}
+
+let CreateUserPoolCommand = {
+  Raw: Raw$9,
+  send: send$8
+};
+
+let Raw$10 = {};
+
+function send$9(command) {
+  return client().send(command);
+}
+
+let ListUserPoolsCommand = {
+  Raw: Raw$10,
+  send: send$9
+};
+
+let Raw$11 = {};
+
+function send$10(command) {
+  return client().send(command);
+}
+
+let DescribeUserPoolCommand = {
+  Raw: Raw$11,
+  send: send$10
+};
+
 export {
   Raw,
   clientInstance,
   client,
   SignUpCommand,
+  AdminCreateUserCommand,
+  AdminGetUserCommand,
+  AdminSetUserPasswordCommand,
+  CreateGroupCommand,
   AdminAddUserToGroupCommand,
   AdminRemoveUserFromGroupCommand,
   AdminListGroupsForUserCommand,