@reventlessdev/rescript-pulumi-aws 3.0.0-alpha.33 → 3.0.0-alpha.35

package/CHANGELOG.md

@@ -3,6 +3,31 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.35 (2026-10-29)
+
+* feat(core)!: the caller's IP address leaves the messages a request causes ([aa9e8c7](https://github.com/ReventlessDev/reventless-core/commit/aa9e8c79c0360528a5cfeda2bb88d1da52f28674))
+
+### BREAKING CHANGES
+
+* `Message.generateMeta` no longer takes `~ip`. Drop the argument; a
+message that must carry the address declares it as a field of its own payload.
+
+Step PD3 of docs/plans/a-personal-field-is-marked-redacted-and-encrypted-at-the-seam.md.
+Claude-Session: https://claude.ai/code/session_01HiQfdxVEsHwLHRoHSUcus1
+
+
+
+# 3.0.0-alpha.34 (2026-10-25)
+
+* refactor(bindings)!: response fields AWS may omit are optional fields ([8babc00](https://github.com/ReventlessDev/reventless-core/commit/8babc008c4cdd6e88721d856ca35648f0552d5b9))
+
+### BREAKING CHANGES
+
+* code that builds these records drops `name: None` and
+writes `name: x` for `name: Some(x)`.
+
+
+
 # 3.0.0-alpha.33 (2026-10-23)
 
 **Note:** Version bump only for package @reventlessdev/rescript-pulumi-aws

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/rescript-pulumi-aws",
-  "version": "3.0.0-alpha.33",
+  "version": "3.0.0-alpha.35",
   "description": "ReScript bindings for @pulumi/aws",
   "license": "Apache-2.0",
   "jest": {
@@ -22,9 +22,9 @@
     "@pulumi/aws": "~7.19.0",
     "@pulumi/aws-native": "^1.62.0",
     "sury": "11.0.0",
-    "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.35",
-    "@reventlessdev/rescript-pulumi-pulumi": "3.0.0-alpha.0",
-    "@reventlessdev/rescript-node": "2.0.0-alpha.23"
+    "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.36",
+    "@reventlessdev/rescript-node": "2.0.0-alpha.23",
+    "@reventlessdev/rescript-pulumi-pulumi": "3.0.0-alpha.0"
   },
   "devDependencies": {
     "esbuild": "^0.25.12",

package/src/AppSync/AppSync_Resolver_Functions.res

@@ -1706,7 +1706,6 @@ export function request(ctx) {
       command: '${command}',
       arguments: ctx.args,
       meta: {
-        ip: id?.sourceIp ?? null,
         user: id?.username ?? null,
         info: ctx.info.parentTypeName + '.' + ctx.info.fieldName
       },
@@ -1729,7 +1728,6 @@ export function request(ctx) {
       command: '${tag}',
       arguments: ctx.args,
       meta: {
-        ip: id?.sourceIp ?? null,
         user: id?.username ?? null,
         info: ctx.info.parentTypeName + '.' + ctx.info.fieldName
       },

package/src/AppSync/AppSync_Resolver_Functions.res.mjs

@@ -1168,7 +1168,6 @@ export function request(ctx) {
       command: '` + command + `',
       arguments: ctx.args,
       meta: {
-        ip: id?.sourceIp ?? null,
         user: id?.username ?? null,
         info: ctx.info.parentTypeName + '.' + ctx.info.fieldName
       },
@@ -1191,7 +1190,6 @@ export function request(ctx) {
       command: '` + tag + `',
       arguments: ctx.args,
       meta: {
-        ip: id?.sourceIp ?? null,
         user: id?.username ?? null,
         info: ctx.info.parentTypeName + '.' + ctx.info.fieldName
       },

package/src/Lambda/Lambda.res

@@ -21,7 +21,7 @@ type clientContextEnv = {
 
 type clientContext = {
   client: clientContextClient,
-  @as("Custom") custom: option<JSON.t>,
+  @as("Custom") custom?: JSON.t,
   env: clientContextEnv,
 }
 

package/src/S3/S3_Bucket.res

@@ -219,7 +219,7 @@ type subscription = {
   bucket: t,
   handler: Lambda.CallbackFunction.t,
   args: subscriptionArgs,
-  opts: option<Pulumi.CustomResourceOptions.t>,
+  opts?: Pulumi.CustomResourceOptions.t,
 }
 
 @send

package/src/SNS/SNS_Topic.res

@@ -37,15 +37,15 @@ external make: (~name: string, ~args: args=?, ~opts: Pulumi.CustomResourceOption
 
 type message = {
   @as("Message") message: string,
-  @as("SignatureVersion") signatureVersion: option<string>,
-  @as("Timestamp") timestamp: option<string>,
-  @as("Signature") signature: option<string>,
-  @as("SigningCertUrl") signingCertUrl: option<string>,
-  @as("MessageId") messageId: option<string>,
-  @as("Type") type_: option<string>,
-  @as("UnsubscribeUrl") unsubscribeUrl: option<string>,
-  @as("TopicArn") topicArn: option<string>,
-  @as("Subject") subject: option<string>,
+  @as("SignatureVersion") signatureVersion?: string,
+  @as("Timestamp") timestamp?: string,
+  @as("Signature") signature?: string,
+  @as("SigningCertUrl") signingCertUrl?: string,
+  @as("MessageId") messageId?: string,
+  @as("Type") type_?: string,
+  @as("UnsubscribeUrl") unsubscribeUrl?: string,
+  @as("TopicArn") topicArn?: string,
+  @as("Subject") subject?: string,
 }
 
 type record = {

package/src/SecretsManager/GetSecretVersion.res

@@ -14,7 +14,7 @@ type t = {
   secretBinary: string,
   secretString: string,
   versionId: string,
-  versionStage: option<string>,
+  versionStage?: string,
   versionStages: array<string>,
 }
 

package/tests/AppSync_Resolver_FunctionsTest.mjs

@@ -729,7 +729,8 @@ describe('invokeCommandGenerator', () => {
     expect(payload.identity.userArn).toBe('arn:aws:iam::123:role/SyncRole')
     expect(payload.identity.accountId).toBe('123')
     expect(payload.identity.username).toBe('AROAEXAMPLE:caller')
-    expect(payload.meta.ip).toEqual(['10.0.0.1'])
+    // The caller's address is personal data and never reaches the command.
+    expect(payload.meta).not.toHaveProperty('ip')
     expect(payload.meta.user).toBe('AROAEXAMPLE:caller')
   })
 
@@ -737,7 +738,7 @@ describe('invokeCommandGenerator', () => {
     const ctx = makeCtx({ identity: null })
     const { payload } = request(ctx)
     expect(payload.identity).toBeNull()
-    expect(payload.meta.ip).toBeNull()
+    expect(payload.meta).not.toHaveProperty('ip')
     expect(payload.meta.user).toBeNull()
     expect(payload.command).toBe('CreateProduct')
   })