@reventlessdev/rescript-pulumi-aws 2.4.0-alpha.50 → 2.4.0-alpha.51

package/CHANGELOG.md

@@ -3,6 +3,13 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 2.4.0-alpha.51 (2026-07-14)
+
+### Features
+
+* **pulumi-aws:** AppSync Merged API bindings (apiType, mergedApiExecutionRoleArn, SourceApiAssociation) ([f020e87](https://github.com/ReventlessDev/reventless-core/commit/f020e871fdd1f5ae3a0395eb73bc24589139e40e))
+
+
 # 2.4.0-alpha.50 (2026-07-11)
 
 **Note:** Version bump only for package @reventlessdev/rescript-pulumi-aws

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/rescript-pulumi-aws",
-  "version": "2.4.0-alpha.50",
+  "version": "2.4.0-alpha.51",
   "description": "ReScript bindings for @pulumi/aws",
   "license": "Apache-2.0",
   "jest": {
@@ -22,8 +22,8 @@
     "@pulumi/aws": "~7.19.0",
     "@pulumi/aws-native": "^1.62.0",
     "sury": "11.0.0-alpha.4",
-    "@reventlessdev/rescript-aws-sdk": "2.2.0-alpha.21",
-    "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.15"
+    "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.15",
+    "@reventlessdev/rescript-aws-sdk": "2.2.0-alpha.21"
   },
   "devDependencies": {
     "esbuild": "^0.25.12",

package/src/AppSync/AppSync.res

@@ -5,3 +5,4 @@ module GraphQLApi = AppSync_GraphQLApi
 module DataSource = AppSync_DataSource
 module Function = AppSync_Function
 module Resolver = AppSync_Resolver
+module SourceApiAssociation = AppSync_SourceApiAssociation

package/src/AppSync/AppSync.res.mjs

@@ -9,10 +9,13 @@ let $$Function;
 
 let Resolver;
 
+let SourceApiAssociation;
+
 export {
   GraphQLApi,
   DataSource,
   $$Function,
   Resolver,
+  SourceApiAssociation,
 }
 /* No side effect */

package/src/AppSync/AppSync_GraphQLApi.res

@@ -25,6 +25,15 @@ type authenticationType =
   | AMAZON_COGNITO_USER_POOLS
   | OPENID_CONNECT
 
+/** `MERGED` turns the API into an AppSync Merged API: it carries no schema of
+    its own — source APIs contribute theirs via `AppSync.SourceApiAssociation`
+    and AWS composes the merged endpoint. Requires `mergedApiExecutionRoleArn`
+    (`appsync:SourceGraphQL` on the associated source APIs; also
+    `appsync:StartSchemaMerge` when associations use `MANUAL_MERGE`). */
+type apiType =
+  | GRAPHQL
+  | MERGED
+
 /** Entry of the `additionalAuthenticationProviders` array — minimal shape
     covering the IAM and Cognito cases used by the Reventless platform.
     Extend with `openidConnectConfig` / `lambdaAuthorizerConfig` if needed. */
@@ -41,6 +50,8 @@ type args = {
   additionalAuthenticationProviders?: Pulumi.Input.t<
     array<Pulumi.Input.t<additionalAuthenticationProvider>>,
   >,
+  apiType?: Pulumi.Input.t<apiType>,
+  mergedApiExecutionRoleArn?: Pulumi.Input.t<string>,
 }
 
 @module("@pulumi/aws") @scope("appsync") @new

package/src/AppSync/AppSync_SourceApiAssociation.res

@@ -0,0 +1,42 @@
+/** @pulumi/aws/appsync/SourceApiAssociation
+  see: https://www.pulumi.com/registry/packages/aws/api-docs/appsync/sourceapiassociation
+
+  Links a source `GraphQLApi` to a Merged API (`apiType: MERGED`). Creation
+  triggers the initial schema merge; under `AUTO_MERGE` AWS re-merges on every
+  source-API schema change (no further calls). AWS serializes association
+  writes per merged API — concurrent creates against one merged API fail with
+  409 `ConcurrentModificationException`, so first-time associations from
+  parallel stacks need retry-with-backoff (steady-state schema updates are
+  unaffected).
+*/
+type t = {
+  id: Pulumi.Output.t<string>,
+  arn: Pulumi.Output.t<string>,
+  associationId: Pulumi.Output.t<string>,
+}
+type sourceApiAssociation = t
+
+type mergeType =
+  | AUTO_MERGE
+  | MANUAL_MERGE
+
+type sourceApiAssociationConfig = {mergeType: Pulumi.Input.t<mergeType>}
+
+/** Identify each side by id or ARN (exactly one per side). */
+type args = {
+  mergedApiId?: Pulumi.Input.t<string>,
+  mergedApiArn?: Pulumi.Input.t<string>,
+  sourceApiId?: Pulumi.Input.t<string>,
+  sourceApiArn?: Pulumi.Input.t<string>,
+  sourceApiAssociationConfigs?: Pulumi.Input.t<
+    array<Pulumi.Input.t<sourceApiAssociationConfig>>,
+  >,
+  description?: Pulumi.Input.t<string>,
+}
+
+@module("@pulumi/aws") @scope("appsync") @new
+external make: (
+  ~name: string,
+  ~args: args=?,
+  ~opts: option<Pulumi.CustomResourceOptions.t>=?,
+) => sourceApiAssociation = "SourceApiAssociation"

package/src/AppSync/AppSync_SourceApiAssociation.res.mjs

@@ -0,0 +1,2 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+/* This output is empty. Its source's type definitions, externals and/or unused code got optimized away. */

package/src/example/MergedApiExample.res

@@ -0,0 +1,62 @@
+// Compile-only smoke for the Merged-API bindings: a MERGED GraphQLApi, a
+// GRAPHQL source API with a declarative inline schema, and the
+// SourceApiAssociation linking them under AUTO_MERGE. Not executed at deploy
+// time — it keeps the three binding surfaces type-checked together.
+// Validated on real AWS by the Phase-0 spike of
+// docs/plans/merged-api-push-free-composition.md.
+
+let mergedExecRole = IAM.Role.make(
+  ~name="example-merged-exec-role",
+  ~args={
+    assumeRolePolicy: Pulumi.Input.make(
+      `{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":{"Service":"appsync.amazonaws.com"},"Action":"sts:AssumeRole"}]}`,
+    ),
+  },
+)
+
+let iamSecondaryAuth: AppSync.GraphQLApi.additionalAuthenticationProvider = {
+  authenticationType: Pulumi.Input.make(AppSync.GraphQLApi.AWS_IAM),
+}
+
+let mergedApi = AppSync.GraphQLApi.make(
+  ~name="example-domain-merged",
+  ~args={
+    authenticationType: Pulumi.Input.make(AppSync.GraphQLApi.AMAZON_COGNITO_USER_POOLS),
+    userPoolConfig: Pulumi.Input.make({
+      AppSync.GraphQLApi.userPoolId: "eu-west-1_example",
+      defaultAction: AppSync.GraphQLApi.ALLOW,
+    }),
+    additionalAuthenticationProviders: Pulumi.Input.make([Pulumi.Input.make(iamSecondaryAuth)]),
+    apiType: Pulumi.Input.make(AppSync.GraphQLApi.MERGED),
+    mergedApiExecutionRoleArn: mergedExecRole.arn->Pulumi.Output.asInput,
+  },
+)
+
+let sourceApi = AppSync.GraphQLApi.make(
+  ~name="example-plugin-source",
+  ~args={
+    authenticationType: Pulumi.Input.make(AppSync.GraphQLApi.AMAZON_COGNITO_USER_POOLS),
+    userPoolConfig: Pulumi.Input.make({
+      AppSync.GraphQLApi.userPoolId: "eu-west-1_example",
+      defaultAction: AppSync.GraphQLApi.ALLOW,
+    }),
+    schema: Pulumi.Input.make(`schema { query: Query }\ntype Query { ping: String }`),
+  },
+)
+
+let association = AppSync.SourceApiAssociation.make(
+  ~name="example-source-association",
+  ~args={
+    mergedApiId: mergedApi.id->Pulumi.Output.asInput,
+    sourceApiId: sourceApi.id->Pulumi.Output.asInput,
+    sourceApiAssociationConfigs: Pulumi.Input.make([
+      Pulumi.Input.make({
+        AppSync.SourceApiAssociation.mergeType: Pulumi.Input.make(
+          AppSync.SourceApiAssociation.AUTO_MERGE,
+        ),
+      }),
+    ]),
+  },
+)
+
+let associationId = association.associationId

package/src/example/MergedApiExample.res.mjs

@@ -0,0 +1,51 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Aws from "@pulumi/aws";
+
+let mergedExecRole = new (Aws.iam.Role)("example-merged-exec-role", {
+  assumeRolePolicy: `{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":{"Service":"appsync.amazonaws.com"},"Action":"sts:AssumeRole"}]}`
+});
+
+let iamSecondaryAuth = {
+  authenticationType: "AWS_IAM"
+};
+
+let mergedApi = new (Aws.appsync.GraphQLApi)("example-domain-merged", {
+  authenticationType: "AMAZON_COGNITO_USER_POOLS",
+  userPoolConfig: {
+    userPoolId: "eu-west-1_example",
+    defaultAction: "ALLOW"
+  },
+  additionalAuthenticationProviders: [iamSecondaryAuth],
+  apiType: "MERGED",
+  mergedApiExecutionRoleArn: mergedExecRole.arn
+});
+
+let sourceApi = new (Aws.appsync.GraphQLApi)("example-plugin-source", {
+  authenticationType: "AMAZON_COGNITO_USER_POOLS",
+  schema: `schema { query: Query }\ntype Query { ping: String }`,
+  userPoolConfig: {
+    userPoolId: "eu-west-1_example",
+    defaultAction: "ALLOW"
+  }
+});
+
+let association = new (Aws.appsync.SourceApiAssociation)("example-source-association", {
+  mergedApiId: mergedApi.id,
+  sourceApiId: sourceApi.id,
+  sourceApiAssociationConfigs: [{
+      mergeType: "AUTO_MERGE"
+    }]
+});
+
+let associationId = association.associationId;
+
+export {
+  mergedExecRole,
+  iamSecondaryAuth,
+  mergedApi,
+  sourceApi,
+  association,
+  associationId,
+}
+/* mergedExecRole Not a pure module */