@reventlessdev/rescript-pulumi-aws 3.0.0-alpha.34 → 3.0.0-alpha.36

package/CHANGELOG.md

@@ -3,6 +3,28 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.36 (2026-10-29)
+
+**Note:** Version bump only for package @reventlessdev/rescript-pulumi-aws
+
+
+
+
+
+# 3.0.0-alpha.35 (2026-10-29)
+
+* feat(core)!: the caller's IP address leaves the messages a request causes ([aa9e8c7](https://github.com/ReventlessDev/reventless-core/commit/aa9e8c79c0360528a5cfeda2bb88d1da52f28674))
+
+### BREAKING CHANGES
+
+* `Message.generateMeta` no longer takes `~ip`. Drop the argument; a
+message that must carry the address declares it as a field of its own payload.
+
+Step PD3 of docs/plans/a-personal-field-is-marked-redacted-and-encrypted-at-the-seam.md.
+Claude-Session: https://claude.ai/code/session_01HiQfdxVEsHwLHRoHSUcus1
+
+
+
 # 3.0.0-alpha.34 (2026-10-25)
 
 * refactor(bindings)!: response fields AWS may omit are optional fields ([8babc00](https://github.com/ReventlessDev/reventless-core/commit/8babc008c4cdd6e88721d856ca35648f0552d5b9))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/rescript-pulumi-aws",
-  "version": "3.0.0-alpha.34",
+  "version": "3.0.0-alpha.36",
   "description": "ReScript bindings for @pulumi/aws",
   "license": "Apache-2.0",
   "jest": {
@@ -22,9 +22,9 @@
     "@pulumi/aws": "~7.19.0",
     "@pulumi/aws-native": "^1.62.0",
     "sury": "11.0.0",
-    "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.36",
-    "@reventlessdev/rescript-node": "2.0.0-alpha.23",
-    "@reventlessdev/rescript-pulumi-pulumi": "3.0.0-alpha.0"
+    "@reventlessdev/rescript-node": "2.0.0-alpha.24",
+    "@reventlessdev/rescript-pulumi-pulumi": "3.0.0-alpha.0",
+    "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.37"
   },
   "devDependencies": {
     "esbuild": "^0.25.12",

package/src/AppSync/AppSync_Resolver_Functions.res

@@ -1706,7 +1706,6 @@ export function request(ctx) {
       command: '${command}',
       arguments: ctx.args,
       meta: {
-        ip: id?.sourceIp ?? null,
         user: id?.username ?? null,
         info: ctx.info.parentTypeName + '.' + ctx.info.fieldName
       },
@@ -1729,7 +1728,6 @@ export function request(ctx) {
       command: '${tag}',
       arguments: ctx.args,
       meta: {
-        ip: id?.sourceIp ?? null,
         user: id?.username ?? null,
         info: ctx.info.parentTypeName + '.' + ctx.info.fieldName
       },

package/src/AppSync/AppSync_Resolver_Functions.res.mjs

@@ -1168,7 +1168,6 @@ export function request(ctx) {
       command: '` + command + `',
       arguments: ctx.args,
       meta: {
-        ip: id?.sourceIp ?? null,
         user: id?.username ?? null,
         info: ctx.info.parentTypeName + '.' + ctx.info.fieldName
       },
@@ -1191,7 +1190,6 @@ export function request(ctx) {
       command: '` + tag + `',
       arguments: ctx.args,
       meta: {
-        ip: id?.sourceIp ?? null,
         user: id?.username ?? null,
         info: ctx.info.parentTypeName + '.' + ctx.info.fieldName
       },

package/tests/AppSync_Resolver_FunctionsTest.mjs

@@ -729,7 +729,8 @@ describe('invokeCommandGenerator', () => {
     expect(payload.identity.userArn).toBe('arn:aws:iam::123:role/SyncRole')
     expect(payload.identity.accountId).toBe('123')
     expect(payload.identity.username).toBe('AROAEXAMPLE:caller')
-    expect(payload.meta.ip).toEqual(['10.0.0.1'])
+    // The caller's address is personal data and never reaches the command.
+    expect(payload.meta).not.toHaveProperty('ip')
     expect(payload.meta.user).toBe('AROAEXAMPLE:caller')
   })
 
@@ -737,7 +738,7 @@ describe('invokeCommandGenerator', () => {
     const ctx = makeCtx({ identity: null })
     const { payload } = request(ctx)
     expect(payload.identity).toBeNull()
-    expect(payload.meta.ip).toBeNull()
+    expect(payload.meta).not.toHaveProperty('ip')
     expect(payload.meta.user).toBeNull()
     expect(payload.command).toBe('CreateProduct')
   })