@reventlessdev/rescript-pulumi-aws 3.0.0-alpha.10 → 3.0.0-alpha.12

package/CHANGELOG.md

@@ -3,6 +3,21 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.12 (2026-09-09)
+
+**Note:** Version bump only for package @reventlessdev/rescript-pulumi-aws
+
+
+
+
+
+# 3.0.0-alpha.11 (2026-09-08)
+
+### Bug Fixes
+
+* **aws:** the collector gate waits on the one property an update changes ([2c48193](https://github.com/ReventlessDev/reventless-core/commit/2c481934d58c64b8e637d0df1b051b03cf59a35c))
+
+
 # 3.0.0-alpha.10 (2026-09-08)
 
 **Note:** Version bump only for package @reventlessdev/rescript-pulumi-aws

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/rescript-pulumi-aws",
-  "version": "3.0.0-alpha.10",
+  "version": "3.0.0-alpha.12",
   "description": "ReScript bindings for @pulumi/aws",
   "license": "Apache-2.0",
   "jest": {
@@ -22,8 +22,8 @@
     "@pulumi/aws": "~7.19.0",
     "@pulumi/aws-native": "^1.62.0",
     "sury": "11.0.0-rc.2",
-    "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.16",
-    "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.19"
+    "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.17",
+    "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.20"
   },
   "devDependencies": {
     "esbuild": "^0.25.12",

package/src/AppSync/AppSync_ResolverRuntime.res

@@ -1,3 +1,7 @@
+// ---------------------------------------------------------------------------
+// Context types
+// ---------------------------------------------------------------------------
+
 /** Bindings for @aws-appsync/utils and AppSync JS resolver context types.
     Used in resolver source files compiled to APPSYNC_JS — not Pulumi deploy-time code.
 
@@ -6,11 +10,6 @@
     AppSync provides the module as an object with named exports. When bundled with
     esbuild (--external:@aws-appsync/utils), the import is preserved for AppSync runtime.
 */
-
-// ---------------------------------------------------------------------------
-// Context types
-// ---------------------------------------------------------------------------
-
 type error = {
   message: string,
   @as("type") type_: string,

package/src/AppSync/AppSync_Resolver_Functions.res

@@ -4,12 +4,11 @@
     exported `request` and `response` functions, ready to be passed as the `code`
     field of AppSync_Resolver.makeUnitJsResolver / makePipelineJsResolver.
 */
-
-// ---------------------------------------------------------------------------
+let // ---------------------------------------------------------------------------
 // Shared response snippets (inlined into each resolver's template literal)
 // ---------------------------------------------------------------------------
 
-let resultResponseCode = `
+resultResponseCode = `
 export function response(ctx) {
   if (ctx.error) util.error(ctx.error.message, ctx.error.type);
   return ctx.result;
@@ -191,15 +190,18 @@ let ownerScopedResultResponse = (
   | _ =>
     let ownerPart = switch ownerField {
     // Takes the row it ignores: APPSYNC_JS type-checks the resolver, so a
-  // zero-parameter stub called as `_owns(row)` is TS2554 ("Expected 0
-  // arguments, but got 1") and AppSync rejects the whole resolver at create
-  // time with "The code contains one or more errors". Only a door that emits
-  // the call conditionally is safe with a bare `() => true`, and that is not a
-  // property worth relying on across three templates.
-  | None => "\n  const _owns = (row) => true;"
+    // zero-parameter stub called as `_owns(row)` is TS2554 ("Expected 0
+    // arguments, but got 1") and AppSync rejects the whole resolver at create
+    // time with "The code contains one or more errors". Only a door that emits
+    // the call conditionally is safe with a bare `() => true`, and that is not a
+    // property worth relying on across three templates.
+    | None => "\n  const _owns = (row) => true;"
     | Some(field) =>
       `
-  // ── owner scoping (generated) ──${ownerGuardPreamble(~ownerField=field, ~elevatedGroups)}`
+  // ── owner scoping (generated) ──${ownerGuardPreamble(
+          ~ownerField=field,
+          ~elevatedGroups,
+        )}`
     }
     let retiredPart = retiredGuardPreamble(
       ~retiredField,
@@ -210,7 +212,9 @@ let ownerScopedResultResponse = (
     `
 export function response(ctx) {
   if (ctx.error) util.error(ctx.error.message, ctx.error.type);${ownerPart}${retiredPart}
-  return _owns(ctx.result)${retiredField->Option.isSome ? " && _live(ctx.result)" : ""} ? ctx.result : null;
+  return _owns(ctx.result)${retiredField->Option.isSome
+        ? " && _live(ctx.result)"
+        : ""} ? ctx.result : null;
 }`
   }
 
@@ -226,15 +230,18 @@ let ownerScopedFirstResultResponse = (
   | _ =>
     let ownerPart = switch ownerField {
     // Takes the row it ignores: APPSYNC_JS type-checks the resolver, so a
-  // zero-parameter stub called as `_owns(row)` is TS2554 ("Expected 0
-  // arguments, but got 1") and AppSync rejects the whole resolver at create
-  // time with "The code contains one or more errors". Only a door that emits
-  // the call conditionally is safe with a bare `() => true`, and that is not a
-  // property worth relying on across three templates.
-  | None => "\n  const _owns = (row) => true;"
+    // zero-parameter stub called as `_owns(row)` is TS2554 ("Expected 0
+    // arguments, but got 1") and AppSync rejects the whole resolver at create
+    // time with "The code contains one or more errors". Only a door that emits
+    // the call conditionally is safe with a bare `() => true`, and that is not a
+    // property worth relying on across three templates.
+    | None => "\n  const _owns = (row) => true;"
     | Some(field) =>
       `
-  // ── owner scoping (generated) ──${ownerGuardPreamble(~ownerField=field, ~elevatedGroups)}`
+  // ── owner scoping (generated) ──${ownerGuardPreamble(
+          ~ownerField=field,
+          ~elevatedGroups,
+        )}`
     }
     let retiredPart = retiredGuardPreamble(
       ~retiredField,
@@ -255,8 +262,7 @@ export function response(ctx) {
 // ---------------------------------------------------------------------------
 
 /** Pipeline resolver code with no pre-processing and a standard error-check response. */
-let pipelinePassThrough =
-  `${importUtil}
+let pipelinePassThrough = `${importUtil}
 export function request(ctx) { return {}; }
 ${resultResponseCode}
 `->Pulumi.Input.make
@@ -329,8 +335,7 @@ export function request(ctx) {
 ${ownerScopedResultResponse(~ownerField, ~elevatedGroups, ~retiredField?, ~retiredValues?)}
 `->Pulumi.Input.make
 
-let queryById =
-  `${importUtil}
+let queryById = `${importUtil}
 export function request(ctx) {
   return {
     operation: 'Query',
@@ -348,11 +353,11 @@ ${resultResponseCode}
     Relay pagination: `first`/`after` (forward) or `last`/`before` (backward).
     Cursor is base64 of the sort key value.
     Returns a Relay `{ edges, pageInfo }` shape reusing the entity's `Connection` type. */
-// A list in everything but its name, so it scopes the way `listAllItemsConnection`
+let // A list in everything but its name, so it scopes the way `listAllItemsConnection`
 // does — a FilterExpression on the request, not a guard on the response. The
 // response is where the page is cut, and narrowing after that cut would report
 // `hasNextPage` from a count the caller was never allowed to see.
-let queryItemsWithSortConditions = (
+queryItemsWithSortConditions = (
   sortField: string,
   ~ownerField: option<string>=?,
   ~elevatedGroups: array<string>=[],
@@ -585,7 +590,8 @@ index among that window's matches (`n`). Pre-window cursors carried
 tag existed came off a Scan. Only a door with more than one read tests it — see
 `cursorPathGuard`.
 */
-let cursorDecode = (~args: string) => `
+let cursorDecode = (~args: string) =>
+  `
   let _window = null;
   let _from = 0;
   let _cursorPath = null;
@@ -779,7 +785,11 @@ export function request(ctx) {
       values[':' + key] = '' + value;
     }
   });
-${ownerFilterClause(~ownerField, ~elevatedGroups)}${retiredFilterClause(~retiredField, ~retiredValues, ~elevatedGroups)}${indexCursorPreamble}
+${ownerFilterClause(~ownerField, ~elevatedGroups)}${retiredFilterClause(
+      ~retiredField,
+      ~retiredValues,
+      ~elevatedGroups,
+    )}${indexCursorPreamble}
   const result = {
     operation: 'Query',
     query,
@@ -842,7 +852,11 @@ export function request(ctx) {
       values[':' + key] = '' + value;
     }
   });
-${ownerFilterClause(~ownerField, ~elevatedGroups)}${retiredFilterClause(~retiredField, ~retiredValues, ~elevatedGroups)}${indexCursorPreamble}
+${ownerFilterClause(~ownerField, ~elevatedGroups)}${retiredFilterClause(
+      ~retiredField,
+      ~retiredValues,
+      ~elevatedGroups,
+    )}${indexCursorPreamble}
   const result = {
     operation: 'Query',
     query,
@@ -863,8 +877,7 @@ ${indexConnectionResponseCode}
 // DynamoDB read — list all
 // ---------------------------------------------------------------------------
 
-let listAllItems =
-  `${importUtil}
+let listAllItems = `${importUtil}
 export function request(ctx) {
   return {
     operation: 'Scan',
@@ -928,7 +941,8 @@ let listAllItemsConnection = (
   // have nothing to name in the key condition.
   let ownerIndex = ownerField->Option.isSome ? ownerIndex : None
   let requireAttributeClause = switch requireAttribute {
-  | Some(attr) => `
+  | Some(attr) =>
+    `
   names['#${attr}'] = '${attr}';
   parts.push('attribute_exists(#${attr})');`
   | None => ""
@@ -986,7 +1000,8 @@ let listAllItemsConnection = (
     let elevatedLiteral = elevatedGroups->Array.map(g => `'${g}'`)->Array.join(", ")
     let exemptPrelude = switch ownerField {
     | Some(_) => ""
-    | None => `
+    | None =>
+      `
   const _id = ctx.identity;
   const _sub = _id == null ? null : _id.sub;
   const _groups = (_id != null && _id.claims != null && _id.claims['cognito:groups']) || [];
@@ -1007,10 +1022,13 @@ ${switch retiredValues {
       // once for the whole clause — a row that states no lifecycle is not
       // retired, the same reading every other adapter takes.
       | Some(states) =>
-        let placeholders = states->Array.mapWithIndex((state, i) => (`:retiredValue${Int.toString(i)}`, state))
+        let placeholders =
+          states->Array.mapWithIndex((state, i) => (`:retiredValue${Int.toString(i)}`, state))
         let assignments =
           placeholders
-          ->Array.map(((ph, state)) => `    values['${ph}'] = util.dynamodb.toDynamoDB('${state}');`)
+          ->Array.map(((ph, state)) =>
+            `    values['${ph}'] = util.dynamodb.toDynamoDB('${state}');`
+          )
           ->Array.join("\n")
         let comparisons =
           placeholders->Array.map(((ph, _)) => `#retired <> ${ph}`)->Array.join(" AND ")
@@ -1026,16 +1044,19 @@ ${switch retiredValues {
   }
   let filterClauses =
     filterFields
-    ->Array.map(f => `
+    ->Array.map(f =>
+      `
   if (filter.${f}Eq !== undefined && filter.${f}Eq !== null && filter.${f}Eq !== '') {
     names['#${f}'] = '${f}';
     values[':${f}Eq'] = util.dynamodb.toDynamoDB(filter.${f}Eq);
     parts.push('#${f} = :${f}Eq');
-  }`)
+  }`
+    )
     ->Array.join("")
   let rangeClauses =
     rangeFields
-    ->Array.map(f => `
+    ->Array.map(f =>
+      `
   if (filter.${f}From !== undefined && filter.${f}From !== null && filter.${f}From !== '') {
     names['#${f}'] = '${f}';
     values[':${f}From'] = util.dynamodb.toDynamoDB(filter.${f}From);
@@ -1045,10 +1066,10 @@ ${switch retiredValues {
     names['#${f}'] = '${f}';
     values[':${f}To'] = util.dynamodb.toDynamoDB(filter.${f}To);
     parts.push('#${f} <= :${f}To');
-  }`)
+  }`
+    )
     ->Array.join("")
-  let sortFieldsLiteral =
-    sortFields->Array.map(f => `'${f}'`)->Array.join(", ")
+  let sortFieldsLiteral = sortFields->Array.map(f => `'${f}'`)->Array.join(", ")
   // When the Query branch already ordered on the index's own sort key, the page
   // arrives globally ordered and re-sorting it here is the one way to break that
   // order — a sort over a page is not a sort over the caller's rows.
@@ -1090,8 +1111,7 @@ ${switch retiredValues {
   // halves, because both need it: the request to set `scanIndexForward`, the
   // response to leave an already-ordered page alone.
   let indexOrderedExpr = switch (ownerIndex, ownerIndexSortField) {
-  | (Some(_), Some(sf)) =>
-    `!_exempt && !!(ctx.args.orderBy && ctx.args.orderBy.field === '${sf}')`
+  | (Some(_), Some(sf)) => `!_exempt && !!(ctx.args.orderBy && ctx.args.orderBy.field === '${sf}')`
   | _ => "false"
   }
   // The two reads, chosen by the same test that used to choose a predicate.
@@ -1099,7 +1119,8 @@ ${switch retiredValues {
   // branch inside one resolver — no second field, no second data source, no
   // client change.
   let requestOperation = switch (ownerField, ownerIndex) {
-  | (Some(field), Some(index)) => `
+  | (Some(field), Some(index)) =>
+    `
   const _indexOrdered = ${indexOrderedExpr};
   const req = _exempt
     ? {
@@ -1119,7 +1140,8 @@ ${switch retiredValues {
         nextToken: _window,
         scanIndexForward: !(_indexOrdered && ctx.args.orderBy.direction === 'DESC'),
       };`
-  | _ => `
+  | _ =>
+    `
   const req = {
     operation: 'Scan',
     limit: ${listPageWindowBudget},
@@ -1130,7 +1152,8 @@ ${switch retiredValues {
   let requestPathGuard = ownerIndex->Option.isSome ? cursorPathGuard : ""
   let responsePathPreamble = switch ownerIndex {
   | None => ""
-  | Some(_) => `${ownerIdentityPreamble}
+  | Some(_) =>
+    `${ownerIdentityPreamble}
   const _path = _exempt ? 's' : 'q';
   const _indexOrdered = ${indexOrderedExpr};`
   }
@@ -1224,7 +1247,10 @@ let resolvedFieldResponse = (
     | None => "\n  const _owns = (row) => true;"
     | Some(field) =>
       `
-  // ── owner scoping (generated) ──${ownerGuardPreamble(~ownerField=field, ~elevatedGroups)}`
+  // ── owner scoping (generated) ──${ownerGuardPreamble(
+          ~ownerField=field,
+          ~elevatedGroups,
+        )}`
     }
     let retiredPart = retiredGuardPreamble(
       ~retiredField,
@@ -1427,13 +1453,14 @@ let resolveIds = (
   ~retiredField: option<string>=?,
   ~retiredValues: option<array<string>>=?,
   ~elevatedGroups: array<string>=[],
-) => (tableName: string) => {
-  let keysCode = switch sortField {
-  | Some(sf) =>
-    `id => ({ id: util.dynamodb.toString(id.id), ${sf}: util.dynamodb.toString(id.${sf}) })`
-  | None => `id => ({ id: util.dynamodb.toString(id) })`
-  }
-  `${importUtil}
+) =>
+  (tableName: string) => {
+    let keysCode = switch sortField {
+    | Some(sf) =>
+      `id => ({ id: util.dynamodb.toString(id.id), ${sf}: util.dynamodb.toString(id.${sf}) })`
+    | None => `id => ({ id: util.dynamodb.toString(id) })`
+    }
+    `${importUtil}
 import { runtime } from '@aws-appsync/utils';
 export function request(ctx) {
   const idList = ctx.source.${idsField} ?? [];
@@ -1450,21 +1477,21 @@ export function request(ctx) {
 }
 export function response(ctx) {
   if (ctx.error) util.error(ctx.error.message, ctx.error.type);${switch ownerField {
-    | None => ""
-    | Some(field) => ownerGuardPreamble(~ownerField=field, ~elevatedGroups)
-    }}${retiredGuardPreamble(
-      ~retiredField,
-      ~retiredValues,
-      ~elevatedGroups,
-      ~ownerScoped=ownerField->Option.isSome,
-    )}
+      | None => ""
+      | Some(field) => ownerGuardPreamble(~ownerField=field, ~elevatedGroups)
+      }}${retiredGuardPreamble(
+        ~retiredField,
+        ~retiredValues,
+        ~elevatedGroups,
+        ~ownerScoped=ownerField->Option.isSome,
+      )}
   return (ctx.result?.data?.['${tableName}'] ?? []).filter(item =>
     item !== null${ownerField->Option.isSome ? " && _owns(item)" : ""}${retiredField->Option.isSome
-      ? " && _live(item)"
-      : ""});
+        ? " && _live(item)"
+        : ""});
 }
 `
-}
+  }
 
 /** Batched-by-ids — reads `ctx.args.ids: [String!]!` through one BatchGetItem.
     Missing ids drop out; empty input short-circuits without hitting DDB. The
@@ -1475,8 +1502,9 @@ let batchGetItemsByIds = (
   ~retiredField: option<string>=?,
   ~retiredValues: option<array<string>>=?,
   ~elevatedGroups: array<string>=[],
-) => (tableName: string) =>
-  `${importUtil}
+) =>
+  (tableName: string) =>
+    `${importUtil}
 import { runtime } from '@aws-appsync/utils';
 export function request(ctx) {
   const ids = ctx.args.ids ?? [];
@@ -1501,18 +1529,18 @@ export function response(ctx) {
   // caller does not own is dropped rather than refused, for the reason the
   // single-key door answers null: distinguishing "not yours" from "not there"
   // would make this door an oracle for which ids exist.${switch ownerField {
-    | None => ""
-    | Some(field) => ownerGuardPreamble(~ownerField=field, ~elevatedGroups)
-    }}${retiredGuardPreamble(
-      ~retiredField,
-      ~retiredValues,
-      ~elevatedGroups,
-      ~ownerScoped=ownerField->Option.isSome,
-    )}
+      | None => ""
+      | Some(field) => ownerGuardPreamble(~ownerField=field, ~elevatedGroups)
+      }}${retiredGuardPreamble(
+        ~retiredField,
+        ~retiredValues,
+        ~elevatedGroups,
+        ~ownerScoped=ownerField->Option.isSome,
+      )}
   return (ctx.result?.data?.['${tableName}'] ?? []).filter(item =>
     item !== null${ownerField->Option.isSome ? " && _owns(item)" : ""}${retiredField->Option.isSome
-      ? " && _live(item)"
-      : ""});
+        ? " && _live(item)"
+        : ""});
 }
 `
 
@@ -1536,35 +1564,36 @@ let refsByIds = (
   ~imageExpr: option<string>=?,
   ~ownerField: option<string>=?,
   ~elevatedGroups: array<string>=[],
-) => (tableName: string) => {
-  let ownerGuard = switch ownerField {
-  // Takes the row it ignores: APPSYNC_JS type-checks the resolver, so a
-  // zero-parameter stub called as `_owns(row)` is TS2554 ("Expected 0
-  // arguments, but got 1") and AppSync rejects the whole resolver at create
-  // time with "The code contains one or more errors". Only a door that emits
-  // the call conditionally is safe with a bare `() => true`, and that is not a
-  // property worth relying on across three templates.
-  | None => "\n  const _owns = (row) => true;"
-  | Some(field) => ownerGuardPreamble(~ownerField=field, ~elevatedGroups)
-  }
-  // Retirement, in the vocabulary the row itself uses: a member test for the
-  // state form, truthiness for the boolean one. Absent keeps the row live, which
-  // is what a row written before the annotation is.
-  let retiredExpr = switch (retiredField, retiredValues) {
-  | (None, _) => "false"
-  | (Some(f), Some(values)) =>
-    let literal = values->Array.map(v => `'${v}'`)->Array.join(", ")
-    `[${literal}].indexOf(row['${f}']) >= 0`
-  | (Some(f), None) => `row['${f}'] === true`
-  }
-  // Only the state form has a state to name, and only a retired row reports one:
-  // this door names rows, it does not publish a lifecycle column to callers the
-  // list withholds.
-  let stateExpr = switch (retiredField, retiredValues) {
-  | (Some(f), Some(_)) => `_retired(row) ? (row['${f}'] ?? null) : null`
-  | _ => "null"
-  }
-  `${importUtil}
+) =>
+  (tableName: string) => {
+    let ownerGuard = switch ownerField {
+    // Takes the row it ignores: APPSYNC_JS type-checks the resolver, so a
+    // zero-parameter stub called as `_owns(row)` is TS2554 ("Expected 0
+    // arguments, but got 1") and AppSync rejects the whole resolver at create
+    // time with "The code contains one or more errors". Only a door that emits
+    // the call conditionally is safe with a bare `() => true`, and that is not a
+    // property worth relying on across three templates.
+    | None => "\n  const _owns = (row) => true;"
+    | Some(field) => ownerGuardPreamble(~ownerField=field, ~elevatedGroups)
+    }
+    // Retirement, in the vocabulary the row itself uses: a member test for the
+    // state form, truthiness for the boolean one. Absent keeps the row live, which
+    // is what a row written before the annotation is.
+    let retiredExpr = switch (retiredField, retiredValues) {
+    | (None, _) => "false"
+    | (Some(f), Some(values)) =>
+      let literal = values->Array.map(v => `'${v}'`)->Array.join(", ")
+      `[${literal}].indexOf(row['${f}']) >= 0`
+    | (Some(f), None) => `row['${f}'] === true`
+    }
+    // Only the state form has a state to name, and only a retired row reports one:
+    // this door names rows, it does not publish a lifecycle column to callers the
+    // list withholds.
+    let stateExpr = switch (retiredField, retiredValues) {
+    | (Some(f), Some(_)) => `_retired(row) ? (row['${f}'] ?? null) : null`
+    | _ => "null"
+    }
+    `${importUtil}
 import { runtime } from '@aws-appsync/utils';
 export function request(ctx) {
   const ids = ctx.args.ids ?? [];
@@ -1595,14 +1624,13 @@ export function response(ctx) {
     }));
 }
 `
-}
+  }
 
 // ---------------------------------------------------------------------------
 // DynamoDB write
 // ---------------------------------------------------------------------------
 
-let putItem =
-  `${importUtil}
+let putItem = `${importUtil}
 export function request(ctx) {
   return {
     operation: 'PutItem',
@@ -1629,8 +1657,7 @@ export function request(ctx) {
 ${resultResponseCode}
 `->Pulumi.Input.make
 
-let deleteItem =
-  `${importUtil}
+let deleteItem = `${importUtil}
 export function request(ctx) {
   return {
     operation: 'DeleteItem',
@@ -1773,8 +1800,7 @@ export function response(ctx) {
 let authorizeIndexedAccessRequest = authorizeIndexedAccess
 
 /** @deprecated The response check is now part of authorizeIndexedAccess. */
-let authorizeIndexedAccessResponse = (~group as _: string) =>
-  resultResponseCode->Pulumi.Input.make
+let authorizeIndexedAccessResponse = (~group as _: string) => resultResponseCode->Pulumi.Input.make
 
 // ---------------------------------------------------------------------------
 // Response-only helpers

package/src/AppSync/AppSync_SourceApiAssociation.res

@@ -28,9 +28,7 @@ type args = {
   mergedApiArn?: Pulumi.Input.t<string>,
   sourceApiId?: Pulumi.Input.t<string>,
   sourceApiArn?: Pulumi.Input.t<string>,
-  sourceApiAssociationConfigs?: Pulumi.Input.t<
-    array<Pulumi.Input.t<sourceApiAssociationConfig>>,
-  >,
+  sourceApiAssociationConfigs?: Pulumi.Input.t<array<Pulumi.Input.t<sourceApiAssociationConfig>>>,
   description?: Pulumi.Input.t<string>,
 }
 

package/src/AwsNative/AppSync/AwsNative_AppSync_Api.res

@@ -1,11 +1,10 @@
+// ── Auth types ────────────────────────────────────────────────────────────────
+
 /** @pulumi/aws-native/appsync/Api — AppSync Events (Pub/Sub) API.
     Distinct from AppSync GraphQL API (`aws.appsync.GraphQLApi`).
     Used for real-time server-to-client event push via AppSync Events channels.
     See: https://www.pulumi.com/registry/packages/aws-native/api-docs/appsync/api
 */
-
-// ── Auth types ────────────────────────────────────────────────────────────────
-
 /** Authentication mode for connections / publish / subscribe. */
 type authMode = {
   /** Auth type string — use the `authType` constants below. */

package/src/AwsNative/AppSync/AwsNative_AppSync_ChannelNamespace.res

@@ -4,7 +4,6 @@
     Channels within the namespace are addressed as `/default/{channelName}`.
     See: https://www.pulumi.com/registry/packages/aws-native/api-docs/appsync/channelnamespace
 */
-
 type authMode = {
   authType?: Pulumi.Input.t<string>,
 }
@@ -74,8 +73,5 @@ type args = {
 }
 
 @module("@pulumi/aws-native") @scope("appsync") @new
-external make: (
-  ~name: string,
-  ~args: args,
-  ~opts: option<Pulumi.CustomResourceOptions.t>=?,
-) => t = "ChannelNamespace"
+external make: (~name: string, ~args: args, ~opts: option<Pulumi.CustomResourceOptions.t>=?) => t =
+  "ChannelNamespace"

package/src/AwsNative/AppSync/AwsNative_AppSync_Resolver.res

@@ -32,8 +32,5 @@ type args = {
 }
 
 @module("@pulumi/aws-native") @scope("appsync") @new
-external make: (
-  ~name: string,
-  ~args: args,
-  ~opts: option<Pulumi.CustomResourceOptions.t>=?,
-) => t = "Resolver"
+external make: (~name: string, ~args: args, ~opts: option<Pulumi.CustomResourceOptions.t>=?) => t =
+  "Resolver"

package/src/Cloudwatch/Cloudwatch_LogMetricFilter.res

@@ -1,7 +1,6 @@
 /** @pulumi/aws/cloudwatch/logmetricfilter
   see: https://www.pulumi.com/registry/packages/aws/api-docs/cloudwatch/logmetricfilter/
 */
-
 /** How matched log events are turned into a CloudWatch metric data point.
   `value`/`dimensions` use metric-filter JSON selectors (e.g. `"$.value"`). */
 type metricTransformation = {

package/src/Cloudwatch/Cloudwatch_MetricAlarm.res

@@ -1,7 +1,6 @@
 /** @pulumi/aws/cloudwatch/metricalarm
   see: https://www.pulumi.com/registry/packages/aws/api-docs/cloudwatch/metricalarm/
 */
-
 type t = {arn: Pulumi.Output.t<string>, id: Pulumi.Output.t<string>}
 
 /** Single-metric alarm args. `comparisonOperator` uses CloudWatch's operator

package/src/Cognito/Cognito_UserPool.res

@@ -119,7 +119,5 @@ type getResult = {
 }
 
 @module("@pulumi/aws") @scope("cognito") @val
-external getUserPoolOutput: (
-  ~args: getArgs,
-  ~opts: InvokeOptions.t=?,
-) => Output.t<getResult> = "getUserPoolOutput"
+external getUserPoolOutput: (~args: getArgs, ~opts: InvokeOptions.t=?) => Output.t<getResult> =
+  "getUserPoolOutput"

package/src/IAM/IAM.res

@@ -103,7 +103,7 @@ module Role = {
         assumeRolePolicy: servicePrincipal
         ->Pulumi.Output.apply(principal => Policy.assumeRolePolicy(name, principal))
         ->Pulumi.Output.asInput,
-        tags: ?tags,
+        ?tags,
       },
       ~opts,
     )

package/src/Kinesis/Kinesis_Stream.res

@@ -54,11 +54,8 @@ module EventSubscription = {
 }
 
 @module("@pulumi/aws") @scope("kinesis") @new
-external make: (
-  ~name: string,
-  ~args: args=?,
-  ~opts: Pulumi.CustomResourceOptions.t=?
-) => stream = "Stream"
+external make: (~name: string, ~args: args=?, ~opts: Pulumi.CustomResourceOptions.t=?) => stream =
+  "Stream"
 
 @send
 external onEvent: (
@@ -66,5 +63,5 @@ external onEvent: (
   ~name: string,
   ~handler: Lambda.eventHandlerNoResult<event>,
   ~args: subscriptionArgs=?,
-  ~opts: Pulumi.CustomResourceOptions.t=?
+  ~opts: Pulumi.CustomResourceOptions.t=?,
 ) => EventSubscription.t = "onEvent"

package/src/Lambda/FunctionUrl.res

@@ -37,5 +37,8 @@ external make: (~name: string, ~args: args, ~opts: Pulumi.CustomResourceOptions.
   "FunctionUrl"
 
 @module("@pulumi/aws") @scope(("lambda", "FunctionUrl"))
-external get: (~name: string, ~id: Pulumi.Input.t<string>, ~opts: Pulumi.CustomResourceOptions.t=?) => t =
-  "get"
+external get: (
+  ~name: string,
+  ~id: Pulumi.Input.t<string>,
+  ~opts: Pulumi.CustomResourceOptions.t=?,
+) => t = "get"

package/src/Lambda/Lambda.res

@@ -88,11 +88,10 @@ let _resolveLayerArnFromSsm = (): option<string> =>
  *      manually.
  *   3. `None` when both fail — Lambdas deploy without the layer.
  */
-let reventlessLayerArn: option<string> =
-  switch _layerArnEnv {
-  | Some(arn) if arn->String.trim->String.length > 0 => Some(arn->String.trim)
-  | _ => _resolveLayerArnFromSsm()
-  }
+let reventlessLayerArn: option<string> = switch _layerArnEnv {
+| Some(arn) if arn->String.trim->String.length > 0 => Some(arn->String.trim)
+| _ => _resolveLayerArnFromSsm()
+}
 
 @val
 external environment: option<string> = "process.env.Environment"
@@ -253,14 +252,17 @@ module Function = {
     id: Pulumi.Output.t<string>,
     name: Pulumi.Output.t<string>,
     invokeArn: Pulumi.Output.t<string>,
+    /** When AWS last wrote the function. Server-computed and different after
+        every code update, which is what separates it from the four identifiers
+        above: those are equal before and after, so the engine can resolve them
+        from existing state without waiting for the update. Depend on this one to
+        wait for the new code to actually be live. */
+    lastModified: Pulumi.Output.t<string>,
   }
 
   @module("@pulumi/aws") @scope("lambda") @new
-  external make: (
-    ~name: string,
-    ~args: args,
-    ~opts: Pulumi.CustomResourceOptions.t=?,
-  ) => t = "Function"
+  external make: (~name: string, ~args: args, ~opts: Pulumi.CustomResourceOptions.t=?) => t =
+    "Function"
 
   @module("@pulumi/aws") @scope(("lambda", "Function"))
   external get: (

package/src/Rds/Rds_Cluster.res

@@ -4,7 +4,6 @@
   Aurora (incl. Aurora Serverless v2) Postgres cluster. Pair with one or more
   `Rds_ClusterInstance` — a cluster has no compute of its own.
 */
-
 /** See `Rds_Instance.masterUserSecret`. */
 type masterUserSecret = {
   kmsKeyId: string,

package/src/Rds/Rds_Instance.res

@@ -1,7 +1,6 @@
 /** @pulumi/aws/rds/instance
   see: https://www.pulumi.com/registry/packages/aws/api-docs/rds/instance
 */
-
 /** One entry of `masterUserSecrets`, populated when `manageMasterUserPassword`
   is true — RDS creates and rotates the master password in Secrets Manager and
   reports the secret ARN here. */

package/src/Rds/Rds_Proxy.res

@@ -34,5 +34,4 @@ type args = {
 }
 
 @module("@pulumi/aws") @scope("rds") @new
-external make: (~name: string, ~args: args, ~opts: Pulumi.CustomResourceOptions.t=?) => t =
-  "Proxy"
+external make: (~name: string, ~args: args, ~opts: Pulumi.CustomResourceOptions.t=?) => t = "Proxy"

package/src/S3/S3_BucketV2.res

@@ -1,9 +1,7 @@
 /** @pulumi/aws/s3/BucketV2
   see: https://www.pulumi.com/registry/packages/aws/api-docs/s3/bucketv2
 */
-@module("@pulumi/aws")
-@scope("s3")
-@new
+@module("@pulumi/aws") @scope("s3") @new
 external make: (
   ~name: string,
   ~args: S3_Bucket.args=?,

package/src/example/CustomDomainExample.res

@@ -18,9 +18,8 @@ let cert = Acm.Certificate.make(
   ~opts={provider: usEast1},
 )
 
-let firstValidationOption = cert.domainValidationOptions->Pulumi.Output.apply(opts =>
-  opts->Array.getUnsafe(0)
-)
+let firstValidationOption =
+  cert.domainValidationOptions->Pulumi.Output.apply(opts => opts->Array.getUnsafe(0))
 
 let validationRecord = Route53.Record.make(
   ~name="example-cert-validation",

package/src/example/MergedApiExample.res

@@ -8,9 +8,7 @@
 let mergedExecRole = IAM.Role.make(
   ~name="example-merged-exec-role",
   ~args={
-    assumeRolePolicy: Pulumi.Input.make(
-      `{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":{"Service":"appsync.amazonaws.com"},"Action":"sts:AssumeRole"}]}`,
-    ),
+    assumeRolePolicy: Pulumi.Input.make(`{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":{"Service":"appsync.amazonaws.com"},"Action":"sts:AssumeRole"}]}`),
   },
 )