@reventlessdev/reventless-aws 3.0.0-alpha.196 → 3.0.0-alpha.198

package/src/plugin/runtime/PluginRuntime_Builder.res.mjs

@@ -30,7 +30,11 @@ let configRef = {
     schedulerQueueArn: undefined,
     schedulerQueueName: undefined,
     appSyncApiId: undefined,
-    clonerEnabled: false
+    clonerEnabled: false,
+    platformApiId: undefined,
+    apiFragmentRegistryTableName: undefined,
+    adminDcbCmdTopicUrl: undefined,
+    splitApi: false
   }
 };
 
@@ -104,8 +108,9 @@ function setStateChangesConfig(sync, async, param) {
   });
 }
 
-function registerConfig(eventTopicArn, pluginReadModelTableName, pluginSchemaPersistenceTableName, schedulerRoleArn, schedulerQueueArn, schedulerQueueName, appSyncApiId, clonerEnabledOpt, param) {
+function registerConfig(eventTopicArn, pluginReadModelTableName, pluginSchemaPersistenceTableName, schedulerRoleArn, schedulerQueueArn, schedulerQueueName, appSyncApiId, clonerEnabledOpt, platformApiId, apiFragmentRegistryTableName, adminDcbCmdTopicUrl, splitApiOpt, param) {
   let clonerEnabled = clonerEnabledOpt !== undefined ? clonerEnabledOpt : false;
+  let splitApi = splitApiOpt !== undefined ? splitApiOpt : false;
   configRef.contents = {
     eventTopicArn: eventTopicArn,
     pluginReadModelTableName: pluginReadModelTableName,
@@ -114,7 +119,11 @@ function registerConfig(eventTopicArn, pluginReadModelTableName, pluginSchemaPer
     schedulerQueueArn: schedulerQueueArn,
     schedulerQueueName: schedulerQueueName,
     appSyncApiId: appSyncApiId,
-    clonerEnabled: clonerEnabled
+    clonerEnabled: clonerEnabled,
+    platformApiId: platformApiId,
+    apiFragmentRegistryTableName: apiFragmentRegistryTableName,
+    adminDcbCmdTopicUrl: adminDcbCmdTopicUrl,
+    splitApi: splitApi
   };
 }
 
@@ -136,11 +145,12 @@ function Make(EventCollectorChannel) {
   };
   let synthesizeAdminContext = () => {
     let config = configRef.contents;
-    let fakePluginDefinitionJson = Pulumi.output(`{"id":"Admin@INTERNAL","name":"Admin","version":"INTERNAL","extensionPoints":[],"extensions":[],"eventCollector":"NOT-SET","extensionProtocols":[],"apiSchemaFragment":null,"apiTarget":null,"uiFragments":null,"structure":null}`);
+    let fakePluginDefinitionJson = Pulumi.output(`{"id":"Admin@INTERNAL","name":"Admin","version":"INTERNAL","extensionPoints":[],"extensions":[],"eventCollector":"NOT-SET","extensionProtocols":[],"apiSchemaFragment":null,"apiTarget":null,"structure":null}`);
     let arn = config.eventTopicArn;
     let adminEpEventTopicArn = arn !== undefined ? arn : Pulumi.output("NOT_AVAILABLE");
     return {
       pluginDefinitionJson: fakePluginDefinitionJson,
+      uiFragmentsJson: Pulumi.output("null"),
       extensionPoints: [{
           specModule: Plugin_Helpers$ReventlessCore.adminPluginExtensionPointSpecModule,
           mappingsModule: Plugin_Helpers$ReventlessCore.adminPluginExtensionPointMappingsModule,
@@ -200,7 +210,10 @@ function Make(EventCollectorChannel) {
       outputOrPlaceholder(config.schedulerQueueName),
       outputOrPlaceholder(config.appSyncApiId),
       epEventTopicArnsOutput,
-      outputOrPlaceholder(config.pluginSchemaPersistenceTableName)
+      outputOrPlaceholder(config.pluginSchemaPersistenceTableName),
+      outputOrPlaceholder(config.platformApiId),
+      outputOrPlaceholder(config.apiFragmentRegistryTableName),
+      outputOrPlaceholder(config.adminDcbCmdTopicUrl)
     ]).apply(values => {
       let queueUrl = values[0];
       let pluginEpCmdTopicUrl = values[1];
@@ -212,6 +225,9 @@ function Make(EventCollectorChannel) {
       let appSyncApiId = values[7];
       let epEventTopicArns = values[8];
       let schemaPersistenceTable = values[9];
+      let platformApiId = values[10];
+      let apiFragmentRegistryTable = values[11];
+      let adminDcbCmdTopicUrl = values[12];
       let dict = {};
       dict["queueUrl"] = queueUrl;
       dict["pluginExtensionPointCmdTopicUrl"] = pluginEpCmdTopicUrl;
@@ -219,6 +235,10 @@ function Make(EventCollectorChannel) {
       dict["pluginReadModelTableName"] = rmTable;
       dict["pluginSchemaPersistenceTableName"] = schemaPersistenceTable;
       dict["appSyncApiId"] = appSyncApiId;
+      dict["platformApiId"] = platformApiId;
+      dict["apiFragmentRegistryTableName"] = apiFragmentRegistryTable;
+      dict["adminDcbCmdTopicUrl"] = adminDcbCmdTopicUrl;
+      dict["splitApi"] = config.splitApi;
       dict["clonerEnabled"] = config.clonerEnabled;
       dict["schedulerRoleArn"] = schedRoleArn;
       dict["schedulerQueueArn"] = schedQueueArn;
@@ -305,9 +325,13 @@ function Make(EventCollectorChannel) {
     }
     packageDirs["@reventlessdev/reventless-aws"] = Util_Bundle$ReventlessAws.resolvePackageRoot("@reventlessdev/reventless-aws");
     packageDirs["@reventlessdev/reventless-core"] = Util_Bundle$ReventlessAws.resolvePackageRoot("@reventlessdev/reventless-core");
-    let bundleOutput = context.pluginDefinitionJson.apply(pluginDefinitionJson => {
+    let bundleOutput = Pulumi.all([
+      context.pluginDefinitionJson,
+      context.uiFragmentsJson
+    ]).apply(param => {
       let extraStringAssets = {};
-      extraStringAssets["pluginDefinition.json"] = pluginDefinitionJson;
+      extraStringAssets["pluginDefinition.json"] = param[0];
+      extraStringAssets["uiFragments.json"] = param[1];
       return Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/Runtime/AdminEventCollectorEntryPoint.mjs", packageDirs, extraStringAssets);
     });
     let codeOutput = bundleOutput.apply(b => b.code);
@@ -372,6 +396,45 @@ function Make(EventCollectorChannel) {
           role: runtime.parts.lambdaRole.id
         });
       }
+      let tableOutput = config.apiFragmentRegistryTableName;
+      if (tableOutput !== undefined) {
+        let policyJson$2 = tableOutput.apply(tableName => PolicyDocument$PulumiAws.toJsonString(PolicyDocument$PulumiAws.make(undefined, name + `ApiFragmentsScanPolicy`, [{
+            Sid: "AllowAdminScanApiFragments",
+            Effect: "Allow",
+            Action: ["dynamodb:Scan"],
+            Resource: "arn:aws:dynamodb:*:*:table/" + tableName
+          }])));
+        new (Aws.iam.RolePolicy)(name + `-apiFragmentsScan`, {
+          policy: policyJson$2,
+          role: runtime.parts.lambdaRole.id
+        });
+      }
+      let urlOutput = config.adminDcbCmdTopicUrl;
+      if (urlOutput !== undefined) {
+        let policyJson$3 = urlOutput.apply(url => {
+          let match = url.split("/");
+          let arn;
+          if (match.length !== 5) {
+            arn = url;
+          } else {
+            let host = match[2];
+            let acct = match[3];
+            let qn = match[4];
+            let region = Stdlib_Option.getOr(host.split(".")[1], "eu-west-1");
+            arn = `arn:aws:sqs:` + region + `:` + acct + `:` + qn;
+          }
+          return PolicyDocument$PulumiAws.toJsonString(PolicyDocument$PulumiAws.make(undefined, name + `AdminDcbSendPolicy`, [{
+              Sid: "AllowAdminDispatchRecordApiFragmentPush",
+              Effect: "Allow",
+              Action: ["sqs:SendMessage"],
+              Resource: arn
+            }]));
+        });
+        new (Aws.iam.RolePolicy)(name + `-adminDcbSend`, {
+          policy: policyJson$3,
+          role: runtime.parts.lambdaRole.id
+        });
+      }
     }
     let aggregateNameSet = {};
     context.extensions.forEach(ext => {

package/src/util/Util_AppSync_Caller.res

@@ -225,9 +225,17 @@ let sendMutation = async (
   let response = await fetch(endpoint, {method: "POST", headers: signed.headers, body: signed.body})
 
   let json = await response->responseJson
-  switch json->JSON.Decode.object->Option.flatMap(d => d->Dict.get("errors")) {
-  | Some(errors) =>
-    log.error(~comp="Util_AppSync_Caller", ~data=errors, `${mutation} errors`)
-  | None => ()
+  // Returns the `data` object (or None on GraphQL errors) so a caller can inspect
+  // the result — e.g. the deploy-time RegisterApiFragment caller reads the
+  // CommandResult __typename / eventCount to decide whether to wait for a push.
+  switch json->JSON.Decode.object {
+  | Some(d) =>
+    switch d->Dict.get("errors") {
+    | Some(errors) =>
+      log.error(~comp="Util_AppSync_Caller", ~data=errors, `${mutation} errors`)
+      None
+    | None => d->Dict.get("data")
+    }
+  | None => None
   }
 }

package/src/util/Util_AppSync_Caller.res.mjs

@@ -1,7 +1,6 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
 import * as Stdlib_JSON from "@rescript/runtime/lib/es6/Stdlib_JSON.js";
-import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as HashNode from "@smithy/hash-node";
 import * as SignatureV4 from "@smithy/signature-v4";
 import * as Logger$ReventlessCore from "@reventlessdev/reventless-core/src/util/Logger.res.mjs";
@@ -155,9 +154,16 @@ async function sendMutation(endpoint, region, mutation, selectionOpt, variables)
     body: signed.body
   });
   let json = await response.json();
-  let errors = Stdlib_Option.flatMap(Stdlib_JSON.Decode.object(json), d => d["errors"]);
+  let d$1 = Stdlib_JSON.Decode.object(json);
+  if (d$1 === undefined) {
+    return;
+  }
+  let errors = d$1["errors"];
   if (errors !== undefined) {
-    return log.error("Util_AppSync_Caller", errors, mutation + ` errors`);
+    log.error("Util_AppSync_Caller", errors, mutation + ` errors`);
+    return;
+  } else {
+    return d$1["data"];
   }
 }
 

package/tests/AppSync_AdapterTest.res

@@ -140,6 +140,7 @@ describe("AppSync_Adapter.injectAwsAuth — Stage E2 permission lifting", () =>
       mutations: mutationFields,
       queries: queryFields,
       subscriptions: [],
+      subscriptionSources: [],
     })
 
   let mutationEntry = (
@@ -361,6 +362,7 @@ describe("AppSync_Adapter.injectAwsAuth — systemCallable dual-auth", () => {
       mutations: mutationFields,
       queries: queryFields,
       subscriptions: [],
+      subscriptionSources: [],
     })
 
   testSync("systemCallable mutation with a group emits @aws_cognito_user_pools + @aws_iam", () => {
@@ -500,6 +502,7 @@ describe("AppSync_Adapter — type-level dual-auth", () => {
       mutations: [],
       queries: queryFields,
       subscriptions: [],
+      subscriptionSources: [],
     })
 
   let callableEntry: ReventlessInfra.Api.querySchemaEntry = {
@@ -606,6 +609,7 @@ describe("Split mode — empty base fragment", () => {
       mutations: [],
       queries: [],
       subscriptions: [],
+      subscriptionSources: [],
     })
     let parts = decodeFragment(emptyFragment)
     expect(parts.types)->toHaveLength(0)
@@ -619,12 +623,14 @@ describe("Split mode — empty base fragment", () => {
       mutations: [],
       queries: [],
       subscriptions: [],
+      subscriptionSources: [],
     })
     let pluginFragment = ReventlessCore.GraphQL_Stitcher.encode({
       types: [`type MyPlugin_Item { id: ID! }`],
       mutations: [`MyPlugin_Item_Create(id: ID!): String`],
       queries: [`MyPlugin_Item(id: ID!): MyPlugin_Item`],
       subscriptions: [],
+      subscriptionSources: [],
     })
     let sdl = ReventlessCore.GraphQL_Stitcher.stitch(
       ~baseFragment=emptyBase,

package/tests/AppSync_AdapterTest.res.mjs

@@ -103,7 +103,8 @@ globalThis.describe("AppSync_Adapter.injectAwsAuth — Stage E2 permission lifti
     types: [],
     mutations: mutationFields,
     queries: queryFields,
-    subscriptions: []
+    subscriptions: [],
+    subscriptionSources: []
   });
   let mutationEntry = (fieldNames, fieldPermissions) => ({
     fieldNames: fieldNames,
@@ -287,7 +288,8 @@ globalThis.describe("AppSync_Adapter.injectAwsAuth — systemCallable dual-auth"
     types: [],
     mutations: mutationFields,
     queries: queryFields,
-    subscriptions: []
+    subscriptions: [],
+    subscriptionSources: []
   });
   globalThis.test("systemCallable mutation with a group emits @aws_cognito_user_pools + @aws_iam", () => {
     let entry_fieldNames = ["p_Sync"];
@@ -464,7 +466,8 @@ globalThis.describe("AppSync_Adapter — type-level dual-auth", () => {
     types: types,
     mutations: [],
     queries: queryFields,
-    subscriptions: []
+    subscriptions: [],
+    subscriptionSources: []
   });
   let callableEntry_permission = {
     TAG: "AllowGroups",
@@ -565,7 +568,8 @@ globalThis.describe("Split mode — empty base fragment", () => {
       types: [],
       mutations: [],
       queries: [],
-      subscriptions: []
+      subscriptions: [],
+      subscriptionSources: []
     });
     let parts = GraphQL_Stitcher$ReventlessCore.decode(emptyFragment);
     globalThis.expect(parts.types).toHaveLength(0);
@@ -577,13 +581,15 @@ globalThis.describe("Split mode — empty base fragment", () => {
       types: [],
       mutations: [],
       queries: [],
-      subscriptions: []
+      subscriptions: [],
+      subscriptionSources: []
     });
     let pluginFragment = GraphQL_Stitcher$ReventlessCore.encode({
       types: [`type MyPlugin_Item { id: ID! }`],
       mutations: [`MyPlugin_Item_Create(id: ID!): String`],
       queries: [`MyPlugin_Item(id: ID!): MyPlugin_Item`],
-      subscriptions: []
+      subscriptions: [],
+      subscriptionSources: []
     });
     let sdl = GraphQL_Stitcher$ReventlessCore.stitch(emptyBase, [pluginFragment]);
     globalThis.expect(sdl).toContain("MyPlugin_Item_Create");

package/tests/AppSync_SdlDecorateTest.res

@@ -0,0 +1,157 @@
+// AppSync_SdlDecorate — push-time @aws_subscribe injection from the neutral
+// subscription→mutation source metadata. Core emits directive-free SDL; the
+// AWS provider appends its dialect onto the STITCHED schema here.
+
+open JestGlobals
+
+let sources: array<ReventlessCore.GraphQL_Stitcher.subscriptionSource> = [
+  {field: "onCatalog_AddProduct", mutations: ["Catalog_AddProduct"]},
+  {
+    field: "onUIFragmentChange",
+    mutations: [
+      "Platform_UIFragmentRegistered",
+      "Platform_UIFragmentUpdated",
+      "Platform_UIFragmentDeregistered",
+    ],
+  },
+]
+
+let stitchedSdl = `type UIFragmentChangeEvent {
+  pluginId: ID!
+}
+
+type Query {
+  node(id: ID!): Node
+}
+
+type Mutation {
+  Catalog_AddProduct(input: AddInput): CommandResult
+}
+
+type Subscription {
+  onCatalog_AddProduct(id: ID): CommandResult
+  onUIFragmentChange: UIFragmentChangeEvent
+    @aws_auth(cognito_groups: ["Admin"])
+  onCatalogEventLog_eventAppended: CatalogEventLogEvent
+}`
+
+describe("AppSync_SdlDecorate.injectAwsSubscribe", () => {
+  testSync("appends @aws_subscribe on a 1:1 mutation-sourced field (with args)", () => {
+    let sdl = AppSync_SdlDecorate.injectAwsSubscribe(stitchedSdl, ~sources)
+    expect(sdl)->toContain(
+      `onCatalog_AddProduct(id: ID): CommandResult\n    @aws_subscribe(mutations: ["Catalog_AddProduct"])`,
+    )
+  })
+
+  testSync("appends the many-mutations fan-in on a no-arg field, keeping @aws_auth", () => {
+    let sdl = AppSync_SdlDecorate.injectAwsSubscribe(stitchedSdl, ~sources)
+    expect(sdl)->toContain(
+      `onUIFragmentChange: UIFragmentChangeEvent\n    @aws_subscribe(mutations: ["Platform_UIFragmentRegistered", "Platform_UIFragmentUpdated", "Platform_UIFragmentDeregistered"])`,
+    )
+    // The auth directive line appended by injectAwsAuthAll survives.
+    expect(sdl)->toContain(`@aws_auth(cognito_groups: ["Admin"])`)
+  })
+
+  testSync("leaves unmapped fields (Source A) and non-Subscription blocks untouched", () => {
+    let sdl = AppSync_SdlDecorate.injectAwsSubscribe(stitchedSdl, ~sources)
+    expect(sdl)->toContain(`onCatalogEventLog_eventAppended: CatalogEventLogEvent\n}`)
+    // The Mutation field shares its leading name with a source's mutation —
+    // it must not be decorated (only the Subscription block is).
+    expect(sdl)->toContain(`Catalog_AddProduct(input: AddInput): CommandResult\n}`)
+  })
+
+  testSync("no-op on empty sources or an SDL without a Subscription block", () => {
+    expect(AppSync_SdlDecorate.injectAwsSubscribe(stitchedSdl, ~sources=[]))->toBe(stitchedSdl)
+    let noSubs = `type Query {\n  node(id: ID!): Node\n}`
+    expect(AppSync_SdlDecorate.injectAwsSubscribe(noSubs, ~sources))->toBe(noSubs)
+  })
+})
+
+describe("AppSync_Adapter.stitchWithAwsDirectives", () => {
+  testSync("assembles neutral fragments into AWS-dialect SDL", () => {
+    let baseFragment = ReventlessCore.GraphQL_Stitcher.encode({
+      types: [],
+      mutations: [`  Platform_PluginStatusChanged(pluginId: ID!, status: PluginStatus!): PluginStatusChangeEvent`],
+      queries: [],
+      subscriptions: [`  onPluginStatusChange: PluginStatusChangeEvent`],
+      subscriptionSources: [
+        {field: "onPluginStatusChange", mutations: ["Platform_PluginStatusChanged"]},
+      ],
+    })
+    let pluginFragment = ReventlessCore.GraphQL_Stitcher.encode({
+      types: [`type PluginStatusChangeEvent {\n  pluginId: ID!\n}`],
+      mutations: [`  Catalog_AddProduct(input: AddInput): CommandResult`],
+      queries: [],
+      subscriptions: [`  onCatalog_AddProduct(id: ID): CommandResult`],
+      subscriptionSources: [{field: "onCatalog_AddProduct", mutations: ["Catalog_AddProduct"]}],
+    })
+    let sdl = AppSync_Adapter.stitchWithAwsDirectives(
+      ~baseFragment,
+      ~pluginFragments=[pluginFragment],
+    )
+    expect(sdl)->toContain(`@aws_subscribe(mutations: ["Platform_PluginStatusChanged"])`)
+    expect(sdl)->toContain(`@aws_subscribe(mutations: ["Catalog_AddProduct"])`)
+  })
+})
+
+describe("AppSync_SdlDecorate.planAwsPushes", () => {
+  // Neutral admin base: a system-callable mutation + a shared traversal type.
+  let rawAdminBase = ReventlessCore.GraphQL_Stitcher.encode({
+    types: [`type CommandAccepted {\n  id: ID!\n}`],
+    mutations: [`  Platform_RegisterApiFragment(input: ApiFragmentInput): CommandResult`],
+    queries: [],
+    subscriptions: [],
+    subscriptionSources: [],
+  })
+  let iamFieldNames = ["Platform_RegisterApiFragment"]
+  let mkFrag = (~mutation, ~target): AppSync_SdlDecorate.targetedFragmentInput => {
+    encoded: ReventlessCore.GraphQL_Stitcher.encode({
+      types: [],
+      mutations: [mutation],
+      queries: [],
+      subscriptions: [],
+      subscriptionSources: [],
+    }).encoded,
+    protocol: "graphql",
+    target,
+  }
+  let platformFrag = mkFrag(~mutation=`  Inspector_Ping: CommandResult`, ~target="Platform")
+  let domainFrag = mkFrag(~mutation=`  Catalog_AddProduct(input: AddInput): CommandResult`, ~target="Domain")
+
+  testSync("split mode: Platform API carries admin base (dual-auth) + Platform frags; Domain API excludes the admin base", () => {
+    let plans = AppSync_SdlDecorate.planAwsPushes(
+      ~rawAdminBase,
+      ~iamFieldNames,
+      ~fragments=[platformFrag, domainFrag],
+      ~splitApi=true,
+    )
+    expect(plans->Array.length)->toBe(2)
+    let platformPlan = plans->Array.find(p => p.api == "PlatformApi")->Option.getOrThrow
+    let domainPlan = plans->Array.find(p => p.api == "DomainApi")->Option.getOrThrow
+    // Admin base mutation lands on the Platform API with dual-auth (system caller).
+    expect(platformPlan.sdl)->toContain("Platform_RegisterApiFragment")
+    expect(platformPlan.sdl)->toContain(`@aws_cognito_user_pools(cognito_groups: ["Admin"]) @aws_iam`)
+    // Platform-target plugin field present on the Platform API.
+    expect(platformPlan.sdl)->toContain("Inspector_Ping")
+    // Shared traversal type stamped once on the assembled SDL.
+    expect(platformPlan.sdl)->toContain(`type CommandAccepted @aws_cognito_user_pools @aws_iam {`)
+    // Domain-target field on the Domain API; admin base absent (empty base in split mode).
+    expect(domainPlan.sdl)->toContain("Catalog_AddProduct")
+    expect(domainPlan.sdl->String.includes("Platform_RegisterApiFragment"))->toBe(false)
+  })
+
+  testSync("unified mode: a single Domain API carries admin base + all frags", () => {
+    let plans = AppSync_SdlDecorate.planAwsPushes(
+      ~rawAdminBase,
+      ~iamFieldNames,
+      ~fragments=[platformFrag, domainFrag],
+      ~splitApi=false,
+    )
+    expect(plans->Array.length)->toBe(1)
+    let plan = plans->Array.getUnsafe(0)
+    expect(plan.api)->toBe("DomainApi")
+    expect(plan.sdl)->toContain("Platform_RegisterApiFragment")
+    expect(plan.sdl)->toContain("Inspector_Ping")
+    expect(plan.sdl)->toContain("Catalog_AddProduct")
+  })
+})

package/tests/AppSync_SdlDecorateTest.res.mjs

@@ -0,0 +1,147 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+import * as AppSync_Adapter$ReventlessAws from "../src/components/Api/AppSync_Adapter.res.mjs";
+import * as GraphQL_Stitcher$ReventlessCore from "@reventlessdev/reventless-core/src/components/Api/GraphQL_Stitcher.res.mjs";
+import * as AppSync_SdlDecorate$ReventlessAws from "../src/components/Api/AppSync_SdlDecorate.res.mjs";
+
+let sources = [
+  {
+    field: "onCatalog_AddProduct",
+    mutations: ["Catalog_AddProduct"]
+  },
+  {
+    field: "onUIFragmentChange",
+    mutations: [
+      "Platform_UIFragmentRegistered",
+      "Platform_UIFragmentUpdated",
+      "Platform_UIFragmentDeregistered"
+    ]
+  }
+];
+
+let stitchedSdl = `type UIFragmentChangeEvent {
+  pluginId: ID!
+}
+
+type Query {
+  node(id: ID!): Node
+}
+
+type Mutation {
+  Catalog_AddProduct(input: AddInput): CommandResult
+}
+
+type Subscription {
+  onCatalog_AddProduct(id: ID): CommandResult
+  onUIFragmentChange: UIFragmentChangeEvent
+    @aws_auth(cognito_groups: ["Admin"])
+  onCatalogEventLog_eventAppended: CatalogEventLogEvent
+}`;
+
+globalThis.describe("AppSync_SdlDecorate.injectAwsSubscribe", () => {
+  globalThis.test("appends @aws_subscribe on a 1:1 mutation-sourced field (with args)", () => {
+    let sdl = AppSync_SdlDecorate$ReventlessAws.injectAwsSubscribe(stitchedSdl, sources);
+    globalThis.expect(sdl).toContain(`onCatalog_AddProduct(id: ID): CommandResult\n    @aws_subscribe(mutations: ["Catalog_AddProduct"])`);
+  });
+  globalThis.test("appends the many-mutations fan-in on a no-arg field, keeping @aws_auth", () => {
+    let sdl = AppSync_SdlDecorate$ReventlessAws.injectAwsSubscribe(stitchedSdl, sources);
+    globalThis.expect(sdl).toContain(`onUIFragmentChange: UIFragmentChangeEvent\n    @aws_subscribe(mutations: ["Platform_UIFragmentRegistered", "Platform_UIFragmentUpdated", "Platform_UIFragmentDeregistered"])`);
+    globalThis.expect(sdl).toContain(`@aws_auth(cognito_groups: ["Admin"])`);
+  });
+  globalThis.test("leaves unmapped fields (Source A) and non-Subscription blocks untouched", () => {
+    let sdl = AppSync_SdlDecorate$ReventlessAws.injectAwsSubscribe(stitchedSdl, sources);
+    globalThis.expect(sdl).toContain(`onCatalogEventLog_eventAppended: CatalogEventLogEvent\n}`);
+    globalThis.expect(sdl).toContain(`Catalog_AddProduct(input: AddInput): CommandResult\n}`);
+  });
+  globalThis.test("no-op on empty sources or an SDL without a Subscription block", () => {
+    globalThis.expect(AppSync_SdlDecorate$ReventlessAws.injectAwsSubscribe(stitchedSdl, [])).toBe(stitchedSdl);
+    let noSubs = `type Query {\n  node(id: ID!): Node\n}`;
+    globalThis.expect(AppSync_SdlDecorate$ReventlessAws.injectAwsSubscribe(noSubs, sources)).toBe(noSubs);
+  });
+});
+
+globalThis.describe("AppSync_Adapter.stitchWithAwsDirectives", () => {
+  globalThis.test("assembles neutral fragments into AWS-dialect SDL", () => {
+    let baseFragment = GraphQL_Stitcher$ReventlessCore.encode({
+      types: [],
+      mutations: [`  Platform_PluginStatusChanged(pluginId: ID!, status: PluginStatus!): PluginStatusChangeEvent`],
+      queries: [],
+      subscriptions: [`  onPluginStatusChange: PluginStatusChangeEvent`],
+      subscriptionSources: [{
+          field: "onPluginStatusChange",
+          mutations: ["Platform_PluginStatusChanged"]
+        }]
+    });
+    let pluginFragment = GraphQL_Stitcher$ReventlessCore.encode({
+      types: [`type PluginStatusChangeEvent {\n  pluginId: ID!\n}`],
+      mutations: [`  Catalog_AddProduct(input: AddInput): CommandResult`],
+      queries: [],
+      subscriptions: [`  onCatalog_AddProduct(id: ID): CommandResult`],
+      subscriptionSources: [{
+          field: "onCatalog_AddProduct",
+          mutations: ["Catalog_AddProduct"]
+        }]
+    });
+    let sdl = AppSync_Adapter$ReventlessAws.stitchWithAwsDirectives(baseFragment, [pluginFragment]);
+    globalThis.expect(sdl).toContain(`@aws_subscribe(mutations: ["Platform_PluginStatusChanged"])`);
+    globalThis.expect(sdl).toContain(`@aws_subscribe(mutations: ["Catalog_AddProduct"])`);
+  });
+});
+
+globalThis.describe("AppSync_SdlDecorate.planAwsPushes", () => {
+  let rawAdminBase = GraphQL_Stitcher$ReventlessCore.encode({
+    types: [`type CommandAccepted {\n  id: ID!\n}`],
+    mutations: [`  Platform_RegisterApiFragment(input: ApiFragmentInput): CommandResult`],
+    queries: [],
+    subscriptions: [],
+    subscriptionSources: []
+  });
+  let iamFieldNames = ["Platform_RegisterApiFragment"];
+  let mkFrag = (mutation, target) => ({
+    encoded: GraphQL_Stitcher$ReventlessCore.encode({
+      types: [],
+      mutations: [mutation],
+      queries: [],
+      subscriptions: [],
+      subscriptionSources: []
+    }).encoded,
+    protocol: "graphql",
+    target: target
+  });
+  let platformFrag = mkFrag(`  Inspector_Ping: CommandResult`, "Platform");
+  let domainFrag = mkFrag(`  Catalog_AddProduct(input: AddInput): CommandResult`, "Domain");
+  globalThis.test("split mode: Platform API carries admin base (dual-auth) + Platform frags; Domain API excludes the admin base", () => {
+    let plans = AppSync_SdlDecorate$ReventlessAws.planAwsPushes(rawAdminBase, iamFieldNames, [
+      platformFrag,
+      domainFrag
+    ], true);
+    globalThis.expect(plans.length).toBe(2);
+    let platformPlan = Stdlib_Option.getOrThrow(plans.find(p => p.api === "PlatformApi"), undefined);
+    let domainPlan = Stdlib_Option.getOrThrow(plans.find(p => p.api === "DomainApi"), undefined);
+    globalThis.expect(platformPlan.sdl).toContain("Platform_RegisterApiFragment");
+    globalThis.expect(platformPlan.sdl).toContain(`@aws_cognito_user_pools(cognito_groups: ["Admin"]) @aws_iam`);
+    globalThis.expect(platformPlan.sdl).toContain("Inspector_Ping");
+    globalThis.expect(platformPlan.sdl).toContain(`type CommandAccepted @aws_cognito_user_pools @aws_iam {`);
+    globalThis.expect(domainPlan.sdl).toContain("Catalog_AddProduct");
+    globalThis.expect(domainPlan.sdl.includes("Platform_RegisterApiFragment")).toBe(false);
+  });
+  globalThis.test("unified mode: a single Domain API carries admin base + all frags", () => {
+    let plans = AppSync_SdlDecorate$ReventlessAws.planAwsPushes(rawAdminBase, iamFieldNames, [
+      platformFrag,
+      domainFrag
+    ], false);
+    globalThis.expect(plans.length).toBe(1);
+    let plan = plans[0];
+    globalThis.expect(plan.api).toBe("DomainApi");
+    globalThis.expect(plan.sdl).toContain("Platform_RegisterApiFragment");
+    globalThis.expect(plan.sdl).toContain("Inspector_Ping");
+    globalThis.expect(plan.sdl).toContain("Catalog_AddProduct");
+  });
+});
+
+export {
+  sources,
+  stitchedSdl,
+}
+/*  Not a pure module */