@reventlessdev/reventless-aws 3.0.0-alpha.167

package/src/adapter/EventLogSubscription/EventLogSubscription_AppSync.res.mjs

@@ -0,0 +1,185 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Aws from "@pulumi/aws";
+import * as IAM$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/IAM.res.mjs";
+import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+import * as Pulumi from "@pulumi/pulumi";
+import * as Lambda$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/Lambda/Lambda.res.mjs";
+import * as AWS$ReventlessAws from "../AWS.res.mjs";
+import * as SQS_Queue$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/SQS/SQS_Queue.res.mjs";
+import * as AWS_Tags$ReventlessAws from "../AWS_Tags.res.mjs";
+import * as Util_SQS$ReventlessAws from "../../util/Util_SQS.res.mjs";
+import * as PolicyDocument$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/PolicyDocument.res.mjs";
+import * as EventTopic$ReventlessCore from "@reventlessdev/reventless-core/src/components/EventTopic/EventTopic.res.mjs";
+import * as Util_Bundle$ReventlessAws from "../../util/Util_Bundle.res.mjs";
+import * as AppSync_EventsApi$ReventlessAws from "../Api/AppSync_EventsApi.res.mjs";
+import * as Util_DeadLetterQueue$ReventlessAws from "../../util/Util_DeadLetterQueue.res.mjs";
+import * as Util_EventSourceMapping$ReventlessAws from "../../util/Util_EventSourceMapping.res.mjs";
+
+function makeHandlerCode(topicName) {
+  let channelName = topicName.replace(/[^A-Za-z0-9-]/g, "-");
+  return `
+import { createHmac, createHash } from "node:crypto";
+
+const CHANNEL = "/default/` + channelName + `";
+const APPSYNC_ENDPOINT = process.env.APPSYNC_ENDPOINT;
+const AWS_REGION = process.env.AWS_REGION ?? "eu-west-1";
+
+function sha256hex(data) {
+  return createHash("sha256").update(typeof data === "string" ? data : JSON.stringify(data)).digest("hex");
+}
+function hmacBuf(key, data) {
+  return createHmac("sha256", key).update(data).digest();
+}
+
+async function signedHeaders(host, path, body) {
+  const accessKeyId = process.env.AWS_ACCESS_KEY_ID;
+  const secretAccessKey = process.env.AWS_SECRET_ACCESS_KEY;
+  const sessionToken = process.env.AWS_SESSION_TOKEN;
+  const now = new Date();
+  const amzDate = now.toISOString().replace(/[:\\-]|\\..../g, "").slice(0, 15) + "Z";
+  const dateStamp = now.toISOString().slice(0, 10).replace(/-/g, "");
+  const headers = { host, "x-amz-date": amzDate, ...(sessionToken ? { "x-amz-security-token": sessionToken } : {}) };
+  const canonH = Object.entries(headers).sort(([a],[b]) => a.localeCompare(b)).map(([k,v]) => \`\${k}:\${v}\\n\`).join("");
+  const signH = Object.keys(headers).sort().join(";");
+  const cr = ["POST", path, "", canonH, signH, sha256hex(body)].join("\\n");
+  const scope = \`\${dateStamp}/\${AWS_REGION}/appsync/aws4_request\`;
+  const sts = ["AWS4-HMAC-SHA256", amzDate, scope, sha256hex(cr)].join("\\n");
+  const kDate = hmacBuf("AWS4" + secretAccessKey, dateStamp);
+  const kSigning = hmacBuf(hmacBuf(hmacBuf(kDate, AWS_REGION), "appsync"), "aws4_request");
+  const sig = createHmac("sha256", kSigning).update(sts).digest("hex");
+  return { ...headers, Authorization: \`AWS4-HMAC-SHA256 Credential=\${accessKeyId}/\${scope}, SignedHeaders=\${signH}, Signature=\${sig}\` };
+}
+
+export async function handler(event) {
+  const url = new URL(APPSYNC_ENDPOINT);
+  for (const record of event.Records) {
+    let body;
+    try {
+      body = JSON.parse(record.body);
+    } catch (e) {
+      console.error("EventLogSubscription: failed to parse record body", record.body, e);
+      continue;
+    }
+    const originatorSlice = body.tags?.find(t => t.key === "originatorSlice")?.value;
+    const payload = { position: body.position, eventType: body.eventType, payload: body.data, originatorSlice: originatorSlice ?? null };
+    const reqBody = JSON.stringify({ id: record.messageId, channel: CHANNEL, events: [JSON.stringify(payload)] });
+    const auth = await signedHeaders(url.hostname, "/event", reqBody);
+    const res = await fetch(APPSYNC_ENDPOINT + "/event", {
+      method: "POST",
+      headers: { accept: "application/json, text/javascript", "content-encoding": "amz-1.0", "content-type": "application/json; charset=UTF-8", ...auth },
+      body: reqBody,
+    });
+    if (!res.ok) {
+      const txt = await res.text();
+      console.error("EventLogSubscription publish failed:", res.status, txt);
+    }
+  }
+}
+`;
+}
+
+function make(name, topicName, eventTopicOutputs, eventsApi, opts) {
+  let queue = new (Aws.sqs.Queue)(name + "EventLogSubQueue", {
+    redrivePolicy: Util_DeadLetterQueue$ReventlessAws.queue.arn.apply(dlqArn => SQS_Queue$PulumiAws.RedrivePolicy.make(dlqArn, 5)),
+    visibilityTimeoutSeconds: 60,
+    sqsManagedSseEnabled: false
+  }, opts);
+  let snsResource = eventTopicOutputs.resources[0];
+  Pulumi.all([
+    queue.arn,
+    queue.id,
+    snsResource.urn
+  ]).apply(param => {
+    new (Aws.sqs.QueuePolicy)(name + "EventLogSubQueuePolicy", {
+      policy: PolicyDocument$PulumiAws.toJsonString(PolicyDocument$PulumiAws.make(undefined, name + "EventLogSubQueuePolicy", [{
+          Sid: "AllowSNSSend",
+          Principal: {
+            Service: [AWS$ReventlessAws.SNS.principal]
+          },
+          Effect: "Allow",
+          Action: ["sqs:SendMessage"],
+          Resource: param[0],
+          Condition: {
+            ArnEquals: Object.fromEntries([[
+                "aws:SourceArn",
+                [param[2]]
+              ]])
+          }
+        }])),
+      queueUrl: param[1]
+    }, opts);
+  });
+  Util_SQS$ReventlessAws.subscribeToSnsTopic(queue, name + "EventLogSub", name, snsResource, opts);
+  let lambdaRole = IAM$PulumiAws.Role.makeWithDefaultPolicy(name + "EventLogSubRole", Pulumi.output(AWS$ReventlessAws.Lambda.principal), opts);
+  Pulumi.all([
+    queue.arn,
+    eventsApi.api.apiArn
+  ]).apply(param => {
+    new (Aws.iam.RolePolicy)(name + "EventLogSubPolicy", {
+      policy: PolicyDocument$PulumiAws.toJsonString(PolicyDocument$PulumiAws.make(undefined, name + "EventLogSubPolicy", [
+        {
+          Sid: "AllowLambdaLogging",
+          Effect: "Allow",
+          Action: "logs:*",
+          Resource: "arn:aws:logs:*:*:*"
+        },
+        {
+          Sid: "AllowReceiveSQS",
+          Effect: "Allow",
+          Action: [
+            "sqs:ReceiveMessage",
+            "sqs:DeleteMessage",
+            "sqs:GetQueueAttributes"
+          ],
+          Resource: param[0]
+        },
+        {
+          Sid: "AllowPublishAppSyncEvents",
+          Effect: "Allow",
+          Action: "appsync:EventPublish",
+          Resource: param[1] + "/*"
+        }
+      ])),
+      role: lambdaRole.id
+    }, opts);
+  });
+  let handlerCode = makeHandlerCode(topicName);
+  let archiveContents = {};
+  archiveContents["index.mjs"] = new (Pulumi.asset.StringAsset)(handlerCode);
+  let code = new (Pulumi.asset.AssetArchive)(archiveContents);
+  let sourceCodeHash = Util_Bundle$ReventlessAws.hashString(handlerCode);
+  let layers = Stdlib_Option.getOr(Stdlib_Option.map(Lambda$PulumiAws.reventlessLayerArn, arn => [arn]), []);
+  let appsyncEndpoint = AppSync_EventsApi$ReventlessAws.httpEndpoint(eventsApi);
+  let lambda = new (Aws.lambda.Function)(name + "EventLogSubscriber", {
+    handler: "index.handler",
+    runtime: "nodejs22.x",
+    code: code,
+    role: lambdaRole.arn,
+    memorySize: 128,
+    timeout: 30,
+    layers: layers,
+    tags: AWS_Tags$ReventlessAws.make(name + "EventLogSub", EventTopic$ReventlessCore.componentType),
+    environment: {
+      variables: Object.fromEntries([
+        [
+          "Environment",
+          Pulumi.getStack()
+        ],
+        [
+          "APPSYNC_ENDPOINT",
+          appsyncEndpoint
+        ]
+      ])
+    },
+    sourceCodeHash: sourceCodeHash
+  }, opts);
+  let lambdaOutput = Pulumi.output(lambda);
+  Util_EventSourceMapping$ReventlessAws.subscribeSqs(lambdaOutput, name + "EventLogSubEventSourceMapping", queue, undefined, opts);
+}
+
+export {
+  makeHandlerCode,
+  make,
+}
+/* @pulumi/aws Not a pure module */

package/src/adapter/EventTopic/EventTopicPublisher.res

@@ -0,0 +1,6 @@
+let name = "EventTopicPublisher"
+
+module SNS = EventTopicPublisher_SNS
+module SNS_Runtime = EventTopicPublisher_SNS_Runtime
+module SNS_FIFO = EventTopicPublisher_SNS_FIFO
+module DynamoDbStream = EventTopicPublisher_DynamoDbStream

package/src/adapter/EventTopic/EventTopicPublisher.res.mjs

@@ -0,0 +1,21 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+
+let name = "EventTopicPublisher";
+
+let SNS;
+
+let SNS_Runtime;
+
+let SNS_FIFO;
+
+let DynamoDbStream;
+
+export {
+  name,
+  SNS,
+  SNS_Runtime,
+  SNS_FIFO,
+  DynamoDbStream,
+}
+/* No side effect */

package/src/adapter/EventTopic/EventTopicPublisher_DynamoDbStream.res

@@ -0,0 +1,25 @@
+let make: ReventlessCore.EventTopic_Adapter.publisherMaker = (
+  ~name as _,
+  ~storageResources,
+  ~opts as _,
+) => {
+  let storageResource = storageResources->Util.DynamoDbStream.findResource
+
+  {
+    resources: [
+      storageResource.service
+      ->Pulumi.Output.apply(service =>
+        if service == AWS.DynamoDbStream.service {
+          storageResource->Util_DynamoDbStream.toStreamResource
+        } else {
+          JsError.throwWithMessage(
+            "EventTopicPublisher_DynamoDbStream cannot connect to EventLogStorage_" ++ service,
+          )
+        }
+      )
+      ->ReventlessCore.Adapter.outputToResource,
+    ],
+    publishJson: Pulumi.Output.make((_, _, _) => Promise.resolve()), // ignore
+    publishJsonStream: Pulumi.Output.make(_stream => Effect.succeed(())), // ignore
+  }
+}

package/src/adapter/EventTopic/EventTopicPublisher_DynamoDbStream.res.mjs

@@ -0,0 +1,28 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Effect from "effect/Effect";
+import * as Pulumi from "@pulumi/pulumi";
+import * as Stdlib_JsError from "@rescript/runtime/lib/es6/Stdlib_JsError.js";
+import * as AWS$ReventlessAws from "../AWS.res.mjs";
+import * as Adapter$ReventlessCore from "@reventlessdev/reventless-core/src/adapter/Adapter.res.mjs";
+import * as Util_DynamoDbStream$ReventlessAws from "../../util/Util_DynamoDbStream.res.mjs";
+
+function make(param, storageResources, param$1) {
+  let storageResource = Util_DynamoDbStream$ReventlessAws.findResource(storageResources);
+  return {
+    resources: [Adapter$ReventlessCore.outputToResource(storageResource.service.apply(service => {
+        if (service === AWS$ReventlessAws.DynamoDbStream.service) {
+          return Util_DynamoDbStream$ReventlessAws.toStreamResource(storageResource);
+        } else {
+          return Stdlib_JsError.throwWithMessage("EventTopicPublisher_DynamoDbStream cannot connect to EventLogStorage_" + service);
+        }
+      }))],
+    publishJson: Pulumi.output((param, param$1, param$2) => Promise.resolve()),
+    publishJsonStream: Pulumi.output(_stream => Effect.succeed())
+  };
+}
+
+export {
+  make,
+}
+/* effect/Effect Not a pure module */

package/src/adapter/EventTopic/EventTopicPublisher_SNS.res

@@ -0,0 +1,40 @@
+open PulumiAws
+
+/** EventTopic names backed by SNS (not DynamoDB stream).
+    Read by subscriptionInfraHook (Phase 5) to skip non-SNS entries. */
+let snsRegistry: Set.t<string> = Set.make()
+
+let make: ReventlessCore.EventTopic_Adapter.publisherMaker = (~name, ~storageResources as _, ~opts) => {
+  snsRegistry->Set.add(name)
+  let tags = AWS.Tags.make(~name, ReventlessCore.EventTopic.componentType)
+  let topic = SNS.Topic.make(
+    ~name,
+    ~args={SNS.Topic.tags: tags},
+    ~opts,
+  )
+
+  let resolvedTopicOutput = topic->Util_SNS.toResolvedTopicOutput
+
+  {
+    resources: [topic->Util_SNS.toResource(~tags=tags->Pulumi.Output.fromInput)],
+    publishJson: resolvedTopicOutput->Pulumi.Output.apply(resolvedTopic =>
+      EventTopicPublisher_SNS_Runtime.publish(resolvedTopic, ...)
+    ),
+    publishJsonStream: resolvedTopicOutput->Pulumi.Output.apply(resolvedTopic => {
+      let publishJson = EventTopicPublisher_SNS_Runtime.publish(resolvedTopic, ...)
+      stream =>
+        stream
+        ->Stream.grouped(10)
+        ->Stream.runForEach(items =>
+          Effect.promise(() =>
+            items
+            ->Array.map(({ReventlessInfra.EventTopic.service, meta, json}) =>
+              publishJson(service, meta, json)
+            )
+            ->Promise.all
+            ->Promise.thenResolve(_ => ())
+          )
+        )
+    }),
+  }
+}

package/src/adapter/EventTopic/EventTopicPublisher_SNS.res.mjs

@@ -0,0 +1,39 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Stream from "@reventlessdev/rescript-effect/src/Stream.res.mjs";
+import * as Aws from "@pulumi/aws";
+import * as Effect from "effect/Effect";
+import * as Stream$1 from "effect/Stream";
+import * as AWS_Tags$ReventlessAws from "../AWS_Tags.res.mjs";
+import * as Util_SNS$ReventlessAws from "../../util/Util_SNS.res.mjs";
+import * as EventTopic$ReventlessCore from "@reventlessdev/reventless-core/src/components/EventTopic/EventTopic.res.mjs";
+import * as EventTopicPublisher_SNS_Runtime$ReventlessAws from "./EventTopicPublisher_SNS_Runtime.res.mjs";
+
+let snsRegistry = new Set();
+
+function make(name, param, opts) {
+  snsRegistry.add(name);
+  let tags = AWS_Tags$ReventlessAws.make(name, EventTopic$ReventlessCore.componentType);
+  let topic = new (Aws.sns.Topic)(name, {
+    tags: tags
+  }, opts);
+  let resolvedTopicOutput = Util_SNS$ReventlessAws.toResolvedTopicOutput(topic);
+  return {
+    resources: [Util_SNS$ReventlessAws.toResource(tags, topic)],
+    publishJson: resolvedTopicOutput.apply(resolvedTopic => ((extra, extra$1, extra$2) => EventTopicPublisher_SNS_Runtime$ReventlessAws.publish(resolvedTopic, extra, extra$1, extra$2))),
+    publishJsonStream: resolvedTopicOutput.apply(resolvedTopic => {
+      return stream => Stream$1.runForEach(Stream.grouped(stream, 10), items => Effect.promise(() => Promise.all(items.map(param => {
+        let extra = param.service;
+        let extra$1 = param.meta;
+        let extra$2 = param.json;
+        return EventTopicPublisher_SNS_Runtime$ReventlessAws.publish(resolvedTopic, extra, extra$1, extra$2);
+      })).then(param => {})));
+    })
+  };
+}
+
+export {
+  snsRegistry,
+  make,
+}
+/* snsRegistry Not a pure module */

package/src/adapter/EventTopic/EventTopicPublisher_SNS_FIFO.res

@@ -0,0 +1,39 @@
+open PulumiAws
+
+let make: ReventlessCore.EventTopic_Adapter.publisherMaker = (~name, ~storageResources as _, ~opts) => {
+  let tags = AWS.Tags.make(~name, ReventlessCore.EventTopic.componentType)
+  let topic = SNS.Topic.make(
+    ~name,
+    ~args={
+      SNS.Topic.fifoTopic: true->Pulumi.Input.make,
+      contentBasedDeduplication: true->Pulumi.Input.make,
+      tags,
+    },
+    ~opts,
+  )
+
+  let resolvedTopicOutput = topic->Util_SNS.toResolvedTopicOutput
+
+  {
+    resources: [topic->Util_SNS_FIFO.toResource(~tags=tags->Pulumi.Output.fromInput)],
+    publishJson: resolvedTopicOutput->Pulumi.Output.apply(resolvedTopic =>
+      EventTopicPublisher_SNS_Runtime.publishFifo(resolvedTopic, ...)
+    ),
+    publishJsonStream: resolvedTopicOutput->Pulumi.Output.apply(resolvedTopic => {
+      let publishJson = EventTopicPublisher_SNS_Runtime.publishFifo(resolvedTopic, ...)
+      stream =>
+        stream
+        ->Stream.grouped(10)
+        ->Stream.runForEach(items =>
+          Effect.promise(() =>
+            items
+            ->Array.map(({ReventlessInfra.EventTopic.service, meta, json}) =>
+              publishJson(service, meta, json)
+            )
+            ->Promise.all
+            ->Promise.thenResolve(_ => ())
+          )
+        )
+    }),
+  }
+}

package/src/adapter/EventTopic/EventTopicPublisher_SNS_FIFO.res.mjs

@@ -0,0 +1,38 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Stream from "@reventlessdev/rescript-effect/src/Stream.res.mjs";
+import * as Aws from "@pulumi/aws";
+import * as Effect from "effect/Effect";
+import * as Stream$1 from "effect/Stream";
+import * as AWS_Tags$ReventlessAws from "../AWS_Tags.res.mjs";
+import * as Util_SNS$ReventlessAws from "../../util/Util_SNS.res.mjs";
+import * as EventTopic$ReventlessCore from "@reventlessdev/reventless-core/src/components/EventTopic/EventTopic.res.mjs";
+import * as Util_SNS_FIFO$ReventlessAws from "../../util/Util_SNS_FIFO.res.mjs";
+import * as EventTopicPublisher_SNS_Runtime$ReventlessAws from "./EventTopicPublisher_SNS_Runtime.res.mjs";
+
+function make(name, param, opts) {
+  let tags = AWS_Tags$ReventlessAws.make(name, EventTopic$ReventlessCore.componentType);
+  let topic = new (Aws.sns.Topic)(name, {
+    contentBasedDeduplication: true,
+    fifoTopic: true,
+    tags: tags
+  }, opts);
+  let resolvedTopicOutput = Util_SNS$ReventlessAws.toResolvedTopicOutput(topic);
+  return {
+    resources: [Util_SNS_FIFO$ReventlessAws.toResource(tags, topic)],
+    publishJson: resolvedTopicOutput.apply(resolvedTopic => ((extra, extra$1, extra$2) => EventTopicPublisher_SNS_Runtime$ReventlessAws.publishFifo(resolvedTopic, extra, extra$1, extra$2))),
+    publishJsonStream: resolvedTopicOutput.apply(resolvedTopic => {
+      return stream => Stream$1.runForEach(Stream.grouped(stream, 10), items => Effect.promise(() => Promise.all(items.map(param => {
+        let extra = param.service;
+        let extra$1 = param.meta;
+        let extra$2 = param.json;
+        return EventTopicPublisher_SNS_Runtime$ReventlessAws.publishFifo(resolvedTopic, extra, extra$1, extra$2);
+      })).then(param => {})));
+    })
+  };
+}
+
+export {
+  make,
+}
+/* Stream Not a pure module */

package/src/adapter/EventTopic/EventTopicPublisher_SNS_Runtime.res

@@ -0,0 +1,5 @@
+let publish = (topic, _id, _meta, json) =>
+  topic->Util_SNS_Runtime.publish(json->JSON.stringify)
+
+let publishFifo = (topic, id, _meta, json) =>
+  topic->Util_SNS_Runtime.publishFifo(~messageGroupId=Util_SQS_Runtime.safeGroupId(id), ~message=json->JSON.stringify)

package/src/adapter/EventTopic/EventTopicPublisher_SNS_Runtime.res.mjs

@@ -0,0 +1,18 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Util_SNS_Runtime$ReventlessAws from "../../util/Util_SNS_Runtime.res.mjs";
+import * as Util_SQS_Runtime$ReventlessAws from "../../util/Util_SQS_Runtime.res.mjs";
+
+function publish(topic, _id, _meta, json) {
+  return Util_SNS_Runtime$ReventlessAws.publish(topic, JSON.stringify(json));
+}
+
+function publishFifo(topic, id, _meta, json) {
+  return Util_SNS_Runtime$ReventlessAws.publishFifo(topic, Util_SQS_Runtime$ReventlessAws.safeGroupId(id), JSON.stringify(json));
+}
+
+export {
+  publish,
+  publishFifo,
+}
+/* Util_SNS_Runtime-ReventlessAws Not a pure module */