@reventlessdev/rescript-pulumi-aws 3.0.0-alpha.4 → 3.0.0-alpha.40

package/src/AppSync/AppSync_Resolver_Functions.res.mjs

@@ -43,6 +43,18 @@ function exemptPreamble(elevatedGroups) {
   const _exempt = _sub == null || _groups.some(g => _elevated.indexOf(g) >= 0);`;
 }
 
+function rowChangeField(field, elevatedGroups) {
+  return `import { util, runtime } from '@aws-appsync/utils';
+export function request(ctx) {` + exemptPreamble(elevatedGroups) + `
+  const _row = ctx.source;
+  return runtime.earlyReturn(_exempt && _row != null && _row['` + field + `'] != null ? _row['` + field + `'] : null);
+}
+export function response(ctx) {
+  return ctx.result;
+}
+`;
+}
+
 function retiredGuardPreamble(retiredField, retiredValues, elevatedGroups, ownerScoped) {
   if (retiredField === undefined) {
     return "";
@@ -389,9 +401,13 @@ export function request(ctx) {
 }
 
 function pageWindowBudget(filtered) {
-  return `(` + filtered + ` ? (_first > 1000 ? _first : 1000) : _first + _from)`;
+  return `(` + filtered + ` ? (_first > 1000 ? _first : 1000) : _first + _from + 1)`;
 }
 
+let need = "(_backward ? _upTo : _first + _from + 1)";
+
+let listPageWindowBudget = `(parts.length > 0 ? (` + need + ` > 1000 ? ` + need + ` : 1000) : ` + need + `)`;
+
 function cursorDecode(args) {
   return `
   let _window = null;
@@ -410,13 +426,42 @@ let cursorPathGuard = `
     util.error('This cursor belongs to a different read of this list; restart from the first page.', 'CursorPathMismatch');
   }`;
 
-function connectionPageResponse(pathExpr) {
-  let tag = pathExpr !== undefined ? `, p: ` + pathExpr : "";
-  return `
+let listCursorPreamble = `
   const _first = ctx.args.first ?? 50;
+  let _window = null;
+  let _from = 0;
+  let _cursorPath = null;
+  let _backward = false;
+  let _upTo = -1;
+  if (ctx.args.before != null && ctx.args.before !== '') {
+    const _c = JSON.parse(util.base64Decode(ctx.args.before));
+    _window = (_c.t !== undefined ? _c.t : _c.token) ?? null;
+    _cursorPath = _c.p ?? 's';
+    _backward = true;
+    _upTo = _c.n !== undefined ? _c.n : 0;
+    _from = (_upTo - _first) > 0 ? (_upTo - _first) : 0;
+  } else if (ctx.args.after != null && ctx.args.after !== '') {
+    const _c = JSON.parse(util.base64Decode(ctx.args.after));
+    _window = (_c.t !== undefined ? _c.t : _c.token) ?? null;
+    _from = _c.n !== undefined ? _c.n + 1 : 0;
+    _cursorPath = _c.p ?? 's';
+  }`;
+
+function connectionPageResponse(pathExpr, bidirectionalOpt) {
+  let bidirectional = bidirectionalOpt !== undefined ? bidirectionalOpt : false;
+  let tag = pathExpr !== undefined ? `, p: ` + pathExpr : "";
+  let firstDecl = bidirectional ? "" : "\n  const _first = ctx.args.first ?? 50;";
+  let slice = bidirectional ? `
+  const _rest = _backward ? items.slice(_from, _upTo) : items.slice(_from);
+  const _page = _backward ? _rest : _rest.slice(0, _first);
+  // A backward page was cut from ahead, so a next page provably exists — the one
+  // the caller came from — whatever this window's tail looks like.
+  const _more = _backward ? true : _rest.length > _first;` : `
   const _rest = items.slice(_from);
   const _page = _rest.slice(0, _first);
-  const _more = _rest.length > _first;
+  const _more = _rest.length > _first;`;
+  let hasPrevious = bidirectional ? "_from > 0" : "!!ctx.args.after";
+  return firstDecl + slice + `
   const _next = ctx.result?.nextToken ?? null;
   const _lastIndex = _page.length - 1;
   // A row's cursor names its own position. The last row of a page that closes its
@@ -437,7 +482,7 @@ function connectionPageResponse(pathExpr) {
     edges,
     pageInfo: {
       hasNextPage: _more || !!_next,
-      hasPreviousPage: !!ctx.args.after,
+      hasPreviousPage: ` + hasPrevious + `,
       startCursor: edges.length > 0 ? edges[0].cursor : _boundary,
       endCursor: edges.length > 0 ? edges[edges.length - 1].cursor : _boundary,
     },
@@ -447,7 +492,7 @@ function connectionPageResponse(pathExpr) {
 let indexConnectionResponseCode = `
 export function response(ctx) {
   if (ctx.error) util.error(ctx.error.message, ctx.error.type);
-  const items = ctx.result?.items ?? [];` + cursorDecode("ctx.args") + connectionPageResponse(undefined) + `
+  const items = ctx.result?.items ?? [];` + cursorDecode("ctx.args") + connectionPageResponse(undefined, undefined) + `
 }`;
 
 let indexBackwardPagingGuard = `
@@ -495,7 +540,7 @@ export function request(ctx) {
     operation: 'Query',
     query,
     index: '` + index + `',
-    limit: ` + (`(` + "expression" + ` ? (_first > 1000 ? _first : 1000) : _first + _from)`) + `,
+    limit: ` + (`(` + "expression" + ` ? (_first > 1000 ? _first : 1000) : _first + _from + 1)`) + `,
     nextToken: _window,
     scanIndexForward: (args.forward ?? true)
   };
@@ -552,7 +597,7 @@ export function request(ctx) {
     operation: 'Query',
     query,
     index: '` + index + `',
-    limit: ` + (`(` + "expression" + ` ? (_first > 1000 ? _first : 1000) : _first + _from)`) + `,
+    limit: ` + (`(` + "expression" + ` ? (_first > 1000 ? _first : 1000) : _first + _from + 1)`) + `,
     nextToken: _window,
     scanIndexForward: (args.forward ?? true)
   };
@@ -686,7 +731,7 @@ function listAllItemsConnection(labelField, filterFieldsOpt, rangeFieldsOpt, sor
   const req = _exempt
     ? {
         operation: 'Scan',
-        limit: ` + (`(` + "parts.length > 0" + ` ? (_first > 1000 ? _first : 1000) : _first + _from)`) + `,
+        limit: ` + listPageWindowBudget + `,
         nextToken: _window,
       }
     : {
@@ -697,33 +742,35 @@ function listAllItemsConnection(labelField, filterFieldsOpt, rangeFieldsOpt, sor
           expressionNames: { '#owner': '` + ownerField + `' },
           expressionValues: { ':owner': util.dynamodb.toDynamoDB(_sub) },
         },
-        limit: ` + (`(` + "parts.length > 0" + ` ? (_first > 1000 ? _first : 1000) : _first + _from)`) + `,
+        limit: ` + listPageWindowBudget + `,
         nextToken: _window,
         scanIndexForward: !(_indexOrdered && ctx.args.orderBy.direction === 'DESC'),
       };` : `
   const req = {
     operation: 'Scan',
-    limit: ` + (`(` + "parts.length > 0" + ` ? (_first > 1000 ? _first : 1000) : _first + _from)`) + `,
+    limit: ` + listPageWindowBudget + `,
     nextToken: _window,
   };`
     ) : `
   const req = {
     operation: 'Scan',
-    limit: ` + (`(` + "parts.length > 0" + ` ? (_first > 1000 ? _first : 1000) : _first + _from)`) + `,
+    limit: ` + listPageWindowBudget + `,
     nextToken: _window,
   };`;
   let requestPathGuard = Stdlib_Option.isSome(ownerIndex$1) ? cursorPathGuard : "";
   let responsePathPreamble = ownerIndex$1 !== undefined ? ownerIdentityPreamble + `
   const _path = _exempt ? 's' : 'q';
   const _indexOrdered = ` + indexOrderedExpr + `;` : "";
-  let pageResponse = ownerIndex$1 !== undefined ? connectionPageResponse("_path") : connectionPageResponse(undefined);
+  let pageResponse = ownerIndex$1 !== undefined ? connectionPageResponse("_path", true) : connectionPageResponse(undefined, true);
   return importUtil + `
 export function request(ctx) {
-  // Scan cannot page backward (ScanIndexForward is Query-only). Fail loud rather than
-  // silently returning the forward page. The ordered {single}Items connection
-  // (queryItemsWithSortConditions) supports last/before — direct backward callers there.
-  if (ctx.args.before != null || ctx.args.last != null) {
-    util.error('Backward pagination (last/before) is not supported on full-list connections; use first/after.', 'UnsupportedPagination');
+  // 'before' IS served — the page is cut backward out of the window the cursor
+  // names. 'last' is not: "the last N rows of the list" needs the end of the
+  // list, which a forward-only Scan cursor cannot reach. The ordered
+  // {single}Items connection (queryItemsWithSortConditions) has a real keyset
+  // cursor and honours both — direct callers who need 'last' there.
+  if (ctx.args.last != null) {
+    util.error('last is not supported on full-list connections; page backward with first and before.', 'UnsupportedPagination');
   }
   const filter = ctx.args.filter ?? {};
   const names = {};
@@ -748,8 +795,14 @@ export function request(ctx) {
     });
     parts.push('#id IN (' + placeholders.join(', ') + ')');
   }` + filterClauses + rangeClauses + requireAttributeClause + ownerClause + retiredClause + `
-` + cursorDecode("ctx.args") + requestPathGuard + `
-  const _first = ctx.args.first ?? 50;` + requestOperation + `
+` + listCursorPreamble + requestPathGuard + `
+  // The one page a cursor cannot reach: it begins in an earlier window, and a
+  // continuation token cannot name the one before it. Refused by itself rather
+  // than folded into the 'last' guard, because the two are different limits and a
+  // caller can act on this one (page forward from the start).
+  if (_backward && _upTo <= 0 && _window !== null) {
+    util.error('The previous page begins in an earlier read window, which this cursor cannot name; page forward from the start.', 'UnsupportedPagination');
+  }` + requestOperation + `
   if (parts.length > 0) {
     req.filter = {
       expression: parts.join(' AND '),
@@ -761,7 +814,7 @@ export function request(ctx) {
 }
 export function response(ctx) {
   if (ctx.error) util.error(ctx.error.message, ctx.error.type);
-  let items = ctx.result?.items ?? [];` + responsePathPreamble + sortBlock + cursorDecode("ctx.args") + pageResponse + `
+  let items = ctx.result?.items ?? [];` + responsePathPreamble + sortBlock + listCursorPreamble + pageResponse + `
 }
 `;
 }
@@ -936,9 +989,9 @@ export function request(ctx) {
 `;
 }
 
-function resolveIds(idsField, sortField, ownerField, retiredField, retiredValues, $staropt$star) {
+function resolveIds(idsField, sortField, ownerField, retiredField, retiredValues, elevatedGroupsOpt) {
+  let elevatedGroups = elevatedGroupsOpt !== undefined ? elevatedGroupsOpt : [];
   return tableName => {
-    let elevatedGroups = $staropt$star !== undefined ? $staropt$star : [];
     let keysCode = sortField !== undefined ? `id => ({ id: util.dynamodb.toString(id.id), ` + sortField + `: util.dynamodb.toString(id.` + sortField + `) })` : `id => ({ id: util.dynamodb.toString(id) })`;
     return importUtil + `
 import { runtime } from '@aws-appsync/utils';
@@ -970,10 +1023,9 @@ export function response(ctx) {
   };
 }
 
-function batchGetItemsByIds(ownerField, retiredField, retiredValues, $staropt$star) {
-  return tableName => {
-    let elevatedGroups = $staropt$star !== undefined ? $staropt$star : [];
-    return importUtil + `
+function batchGetItemsByIds(ownerField, retiredField, retiredValues, elevatedGroupsOpt) {
+  let elevatedGroups = elevatedGroupsOpt !== undefined ? elevatedGroupsOpt : [];
+  return tableName => importUtil + `
 import { runtime } from '@aws-appsync/utils';
 export function request(ctx) {
   const ids = ctx.args.ids ?? [];
@@ -998,22 +1050,21 @@ export function response(ctx) {
   // caller does not own is dropped rather than refused, for the reason the
   // single-key door answers null: distinguishing "not yours" from "not there"
   // would make this door an oracle for which ids exist.` + (
-      ownerField !== undefined ? ownerGuardPreamble(ownerField, elevatedGroups) : ""
-    ) + retiredGuardPreamble(retiredField, retiredValues, elevatedGroups, Stdlib_Option.isSome(ownerField)) + `
+    ownerField !== undefined ? ownerGuardPreamble(ownerField, elevatedGroups) : ""
+  ) + retiredGuardPreamble(retiredField, retiredValues, elevatedGroups, Stdlib_Option.isSome(ownerField)) + `
   return (ctx.result?.data?.['` + tableName + `'] ?? []).filter(item =>
     item !== null` + (
-      Stdlib_Option.isSome(ownerField) ? " && _owns(item)" : ""
-    ) + (
-      Stdlib_Option.isSome(retiredField) ? " && _live(item)" : ""
-    ) + `);
+    Stdlib_Option.isSome(ownerField) ? " && _owns(item)" : ""
+  ) + (
+    Stdlib_Option.isSome(retiredField) ? " && _live(item)" : ""
+  ) + `);
 }
 `;
-  };
 }
 
-function refsByIds(labelField, retiredField, retiredValues, namedWhenRetired, ownerField, $staropt$star) {
+function refsByIds(labelField, retiredField, retiredValues, namedWhenRetired, imageExpr, ownerField, elevatedGroupsOpt) {
+  let elevatedGroups = elevatedGroupsOpt !== undefined ? elevatedGroupsOpt : [];
   return tableName => {
-    let elevatedGroups = $staropt$star !== undefined ? $staropt$star : [];
     let ownerGuard = ownerField !== undefined ? ownerGuardPreamble(ownerField, elevatedGroups) : "\n  const _owns = (row) => true;";
     let retiredExpr;
     if (retiredField !== undefined) {
@@ -1054,6 +1105,7 @@ export function response(ctx) {
     .map(row => ({
       id: row.id,
       label: row['` + labelField + `'] ?? row.id,
+      image: ` + Stdlib_Option.getOr(imageExpr, "null") + `,
       retired: _retired(row),
       retiredState: ` + stateExpr + `,
     }));
@@ -1100,22 +1152,7 @@ export function request(ctx) {
 ` + resultResponseCode + `
 `;
 
-function invokeCommandGenerator(command) {
-  return importUtil + `
-export function request(ctx) {
-  const id = ctx.identity;
-  const isCognito = id != null && id.sub != null;
-  return {
-    operation: 'Invoke',
-    payload: {
-      command: '` + command + `',
-      arguments: ctx.args,
-      meta: {
-        ip: id?.sourceIp ?? null,
-        user: id?.username ?? null,
-        info: ctx.info.parentTypeName + '.' + ctx.info.fieldName
-      },
-      identity: isCognito
+let callerIdentity = `identity: isCognito
         ? {
             userId: id.sub,
             username: id.username,
@@ -1130,7 +1167,23 @@ export function request(ctx) {
               username: id.username ?? null,
               provider: 'IAM'
             }
-          : null
+          : null`;
+
+function invokeCommandGenerator(command) {
+  return importUtil + `
+export function request(ctx) {
+  const id = ctx.identity;
+  const isCognito = id != null && id.sub != null;
+  return {
+    operation: 'Invoke',
+    payload: {
+      command: '` + command + `',
+      arguments: ctx.args,
+      meta: {
+        user: id?.username ?? null,
+        info: ctx.info.parentTypeName + '.' + ctx.info.fieldName
+      },
+      ` + callerIdentity + `
     }
   };
 }
@@ -1149,26 +1202,10 @@ export function request(ctx) {
       command: '` + tag + `',
       arguments: ctx.args,
       meta: {
-        ip: id?.sourceIp ?? null,
         user: id?.username ?? null,
         info: ctx.info.parentTypeName + '.' + ctx.info.fieldName
       },
-      identity: isCognito
-        ? {
-            userId: id.sub,
-            username: id.username,
-            groups: id.claims?.['cognito:groups'] ?? [],
-            claims: id.claims,
-            provider: 'Cognito'
-          }
-        : id != null
-          ? {
-              userArn: id.userArn ?? null,
-              accountId: id.accountId ?? null,
-              username: id.username ?? null,
-              provider: 'IAM'
-            }
-          : null
+      ` + callerIdentity + `
     }
   };
 }
@@ -1179,12 +1216,15 @@ export function request(ctx) {
 function invokeInboundTranslation(fieldName) {
   return importUtil + `
 export function request(ctx) {
+  const id = ctx.identity;
+  const isCognito = id != null && id.sub != null;
   return {
     operation: 'Invoke',
     payload: {
       __inboundTranslation: true,
       fieldName: '` + fieldName + `',
-      arguments: ctx.args
+      arguments: ctx.args,
+      ` + callerIdentity + `
     }
   };
 }
@@ -1273,6 +1313,7 @@ export {
   importUtil,
   ownerGuardPreamble,
   exemptPreamble,
+  rowChangeField,
   retiredGuardPreamble,
   ownerFilterClause,
   retiredFilterClause,
@@ -1289,8 +1330,10 @@ export {
   queryByIndexDeletable,
   queryByIndexSort,
   pageWindowBudget,
+  listPageWindowBudget,
   cursorDecode,
   cursorPathGuard,
+  listCursorPreamble,
   connectionPageResponse,
   indexConnectionResponseCode,
   indexBackwardPagingGuard,
@@ -1313,6 +1356,7 @@ export {
   putItem,
   addItemToList,
   deleteItem,
+  callerIdentity,
   invokeCommandGenerator,
   invokeDcbMutation,
   invokeInboundTranslation,

package/src/AppSync/AppSync_SourceApiAssociation.res

@@ -28,9 +28,7 @@ type args = {
   mergedApiArn?: Pulumi.Input.t<string>,
   sourceApiId?: Pulumi.Input.t<string>,
   sourceApiArn?: Pulumi.Input.t<string>,
-  sourceApiAssociationConfigs?: Pulumi.Input.t<
-    array<Pulumi.Input.t<sourceApiAssociationConfig>>,
-  >,
+  sourceApiAssociationConfigs?: Pulumi.Input.t<array<Pulumi.Input.t<sourceApiAssociationConfig>>>,
   description?: Pulumi.Input.t<string>,
 }
 

package/src/AwsNative/AppSync/AwsNative_AppSync_Api.res

@@ -1,11 +1,10 @@
+// ── Auth types ────────────────────────────────────────────────────────────────
+
 /** @pulumi/aws-native/appsync/Api — AppSync Events (Pub/Sub) API.
     Distinct from AppSync GraphQL API (`aws.appsync.GraphQLApi`).
     Used for real-time server-to-client event push via AppSync Events channels.
     See: https://www.pulumi.com/registry/packages/aws-native/api-docs/appsync/api
 */
-
-// ── Auth types ────────────────────────────────────────────────────────────────
-
 /** Authentication mode for connections / publish / subscribe. */
 type authMode = {
   /** Auth type string — use the `authType` constants below. */

package/src/AwsNative/AppSync/AwsNative_AppSync_ChannelNamespace.res

@@ -4,7 +4,6 @@
     Channels within the namespace are addressed as `/default/{channelName}`.
     See: https://www.pulumi.com/registry/packages/aws-native/api-docs/appsync/channelnamespace
 */
-
 type authMode = {
   authType?: Pulumi.Input.t<string>,
 }
@@ -74,8 +73,5 @@ type args = {
 }
 
 @module("@pulumi/aws-native") @scope("appsync") @new
-external make: (
-  ~name: string,
-  ~args: args,
-  ~opts: option<Pulumi.CustomResourceOptions.t>=?,
-) => t = "ChannelNamespace"
+external make: (~name: string, ~args: args, ~opts: option<Pulumi.CustomResourceOptions.t>=?) => t =
+  "ChannelNamespace"

package/src/AwsNative/AppSync/AwsNative_AppSync_Resolver.res

@@ -32,8 +32,5 @@ type args = {
 }
 
 @module("@pulumi/aws-native") @scope("appsync") @new
-external make: (
-  ~name: string,
-  ~args: args,
-  ~opts: option<Pulumi.CustomResourceOptions.t>=?,
-) => t = "Resolver"
+external make: (~name: string, ~args: args, ~opts: option<Pulumi.CustomResourceOptions.t>=?) => t =
+  "Resolver"

package/src/Cloudwatch/Cloudwatch_EventRule.res

@@ -44,6 +44,10 @@ module ScheduleExpression: {
 type args = {
   description?: Pulumi.Input.t<string>,
   scheduleExpression?: ScheduleExpression.t,
+  /** JSON event pattern the rule matches on. A rule fires on a schedule or on a
+    pattern — set exactly one of the two.
+    see: https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-patterns.html */
+  eventPattern?: Pulumi.Input.t<string>,
   roleArn?: Pulumi.Input.t<string>,
   tags?: Pulumi.Input.t<Aws.tags>,
 }

package/src/Cloudwatch/Cloudwatch_EventTarget.res

@@ -17,10 +17,21 @@ module Rule: {
   let ofEventRule = (rule: Cloudwatch_EventRule.t) => rule.name->Pulumi.Output.asInput
 }
 
+/** Rewrites a matched event before it reaches the target. `inputPaths` binds names to
+  JSON paths in the event; `inputTemplate` substitutes them where it writes `<name>`.
+  A template that is not JSON arrives as plain text — an SNS email body, say.
+  see: https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-transform-target-input.html */
+type inputTransformer = {
+  inputPaths?: dict<string>,
+  inputTemplate: Pulumi.Input.t<string>,
+}
+
 type args = {
   rule: Rule.t,
   arn: Pulumi.Input.t<string>,
+  /** A fixed payload, sent verbatim. Mutually exclusive with `inputTransformer`. */
   input?: Pulumi.Input.t<string>,
+  inputTransformer?: Pulumi.Input.t<inputTransformer>,
 }
 
 @module("@pulumi/aws") @scope("cloudwatch") @new

package/src/Cloudwatch/Cloudwatch_LogMetricFilter.res

@@ -1,7 +1,6 @@
 /** @pulumi/aws/cloudwatch/logmetricfilter
   see: https://www.pulumi.com/registry/packages/aws/api-docs/cloudwatch/logmetricfilter/
 */
-
 /** How matched log events are turned into a CloudWatch metric data point.
   `value`/`dimensions` use metric-filter JSON selectors (e.g. `"$.value"`). */
 type metricTransformation = {

package/src/Cloudwatch/Cloudwatch_MetricAlarm.res

@@ -1,7 +1,6 @@
 /** @pulumi/aws/cloudwatch/metricalarm
   see: https://www.pulumi.com/registry/packages/aws/api-docs/cloudwatch/metricalarm/
 */
-
 type t = {arn: Pulumi.Output.t<string>, id: Pulumi.Output.t<string>}
 
 /** Single-metric alarm args. `comparisonOperator` uses CloudWatch's operator
@@ -15,7 +14,7 @@ type args = {
   evaluationPeriods: Pulumi.Input.t<int>,
   /** How many of the last `evaluationPeriods` datapoints must breach to alarm
     ("M out of N"). Defaults to `evaluationPeriods` when omitted, which is the
-    all-or-nothing behaviour. Setting it below `evaluationPeriods` is how an
+    all-or-nothing behavior. Setting it below `evaluationPeriods` is how an
     alarm rides out an isolated blip without going blind to a sustained one. */
   datapointsToAlarm?: Pulumi.Input.t<int>,
   metricName: Pulumi.Input.t<string>,

package/src/Cognito/Cognito_UserPool.res

@@ -119,7 +119,5 @@ type getResult = {
 }
 
 @module("@pulumi/aws") @scope("cognito") @val
-external getUserPoolOutput: (
-  ~args: getArgs,
-  ~opts: InvokeOptions.t=?,
-) => Output.t<getResult> = "getUserPoolOutput"
+external getUserPoolOutput: (~args: getArgs, ~opts: InvokeOptions.t=?) => Output.t<getResult> =
+  "getUserPoolOutput"

package/src/IAM/IAM.res

@@ -103,7 +103,7 @@ module Role = {
         assumeRolePolicy: servicePrincipal
         ->Pulumi.Output.apply(principal => Policy.assumeRolePolicy(name, principal))
         ->Pulumi.Output.asInput,
-        tags: ?tags,
+        ?tags,
       },
       ~opts,
     )

package/src/IAM/PolicyDocument.res

@@ -124,12 +124,12 @@ type t = policy
 
 let toJsonString: t => string = t => {
   t
-  ->S.decodeOrThrow(~from=policySchema, ~to=S.json)
+  ->S.convertOrThrow(~from=policySchema, ~to=S.json)
   ->JSON.stringify(~space=1)
 }
 
 let fromJsonString: string => t = (policyString: string) =>
-  policyString->S.decodeOrThrow(~from=S.jsonString, ~to=policySchema)
+  S.JsonString(policyString)->S.convertOrThrow(~from=S.jsonString, ~to=policySchema)
 
 let make = (~version=Version2012, ~id=?, ~statements) => {
   version,

package/src/IAM/PolicyDocument.res.mjs

@@ -48,7 +48,7 @@ let conditionEntrySchema = Sury.union([
   Sury.$schema(s => (s.m(Sury.array(Sury.string))))
 ]);
 
-let conditionMapSchema = Sury.dict(conditionEntrySchema);
+let conditionMapSchema = Sury.record(conditionEntrySchema);
 
 let conditionSchema = Sury.$schema(s => ({
   StringEquals: s.m(Sury.$option(conditionMapSchema)),
@@ -121,11 +121,11 @@ let policySchema = Sury.$schema(s => ({
 }));
 
 function toJsonString(t) {
-  return JSON.stringify(S.decodeOrThrow(t, policySchema, Sury.json), undefined, 1);
+  return JSON.stringify(S.convertOrThrow(t, policySchema, undefined, Sury.json), undefined, 1);
 }
 
 function fromJsonString(policyString) {
-  return S.decodeOrThrow(policyString, Sury.jsonString, policySchema);
+  return S.convertOrThrow(policyString, Sury.jsonString, undefined, policySchema);
 }
 
 function make(versionOpt, id, statements) {

package/src/Kinesis/Kinesis_Stream.res

@@ -54,11 +54,8 @@ module EventSubscription = {
 }
 
 @module("@pulumi/aws") @scope("kinesis") @new
-external make: (
-  ~name: string,
-  ~args: args=?,
-  ~opts: Pulumi.CustomResourceOptions.t=?
-) => stream = "Stream"
+external make: (~name: string, ~args: args=?, ~opts: Pulumi.CustomResourceOptions.t=?) => stream =
+  "Stream"
 
 @send
 external onEvent: (
@@ -66,5 +63,5 @@ external onEvent: (
   ~name: string,
   ~handler: Lambda.eventHandlerNoResult<event>,
   ~args: subscriptionArgs=?,
-  ~opts: Pulumi.CustomResourceOptions.t=?
+  ~opts: Pulumi.CustomResourceOptions.t=?,
 ) => EventSubscription.t = "onEvent"

package/src/Kms/Kms.res

@@ -0,0 +1,5 @@
+/** @pulumi/aws/kms
+  see: https://www.pulumi.com/registry/packages/aws/api-docs/kms
+*/
+module Key = Kms_Key
+module Alias = Kms_Alias

package/src/Kms/Kms.res.mjs

@@ -0,0 +1,12 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+
+let Key;
+
+let Alias;
+
+export {
+  Key,
+  Alias,
+}
+/* No side effect */

package/src/Kms/Kms_Alias.res

@@ -0,0 +1,16 @@
+/** @pulumi/aws/kms/alias
+  see: https://www.pulumi.com/registry/packages/aws/api-docs/kms/alias
+*/
+type t = {
+  arn: Pulumi.Output.t<string>,
+  name: Pulumi.Output.t<string>,
+}
+
+type args = {
+  /** Must start with `alias/`. */
+  name?: Pulumi.Input.t<string>,
+  targetKeyId: Pulumi.Input.t<string>,
+}
+
+@module("@pulumi/aws") @scope("kms") @new
+external make: (~name: string, ~args: args, ~opts: Pulumi.CustomResourceOptions.t=?) => t = "Alias"

package/src/Kms/Kms_Alias.res.mjs

@@ -0,0 +1,2 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+/* This output is empty. Its source's type definitions, externals and/or unused code got optimized away. */

package/src/Kms/Kms_Key.res

@@ -0,0 +1,23 @@
+/** @pulumi/aws/kms/key
+  see: https://www.pulumi.com/registry/packages/aws/api-docs/kms/key
+*/
+type t = {
+  arn: Pulumi.Output.t<string>,
+  id: Pulumi.Output.t<string>,
+  keyId: Pulumi.Output.t<string>,
+}
+
+type args = {
+  description?: Pulumi.Input.t<string>,
+  /** Days a scheduled deletion waits, 7 to 30. */
+  deletionWindowInDays?: Pulumi.Input.t<int>,
+  enableKeyRotation?: Pulumi.Input.t<bool>,
+  /** `ENCRYPT_DECRYPT` (the default) for a symmetric key. */
+  keyUsage?: Pulumi.Input.t<string>,
+  /** A JSON key policy; absent, the account's default policy applies. */
+  policy?: Pulumi.Input.t<string>,
+  tags?: Pulumi.Input.t<Aws.tags>,
+}
+
+@module("@pulumi/aws") @scope("kms") @new
+external make: (~name: string, ~args: args=?, ~opts: Pulumi.CustomResourceOptions.t=?) => t = "Key"

package/src/Kms/Kms_Key.res.mjs

@@ -0,0 +1,2 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+/* This output is empty. Its source's type definitions, externals and/or unused code got optimized away. */

package/src/Lambda/FunctionUrl.res

@@ -37,5 +37,8 @@ external make: (~name: string, ~args: args, ~opts: Pulumi.CustomResourceOptions.
   "FunctionUrl"
 
 @module("@pulumi/aws") @scope(("lambda", "FunctionUrl"))
-external get: (~name: string, ~id: Pulumi.Input.t<string>, ~opts: Pulumi.CustomResourceOptions.t=?) => t =
-  "get"
+external get: (
+  ~name: string,
+  ~id: Pulumi.Input.t<string>,
+  ~opts: Pulumi.CustomResourceOptions.t=?,
+) => t = "get"