@reventlessdev/reventless-aws 3.0.0-alpha.203 → 3.0.0-alpha.205

package/CHANGELOG.md

@@ -3,6 +3,20 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.205 (2026-07-13)
+
+### Bug Fixes
+
+* **admin:** type-level [@aws](https://github.com/aws)_iam on Platform_ApiFragmentEntry for the SigV4 waiter (deploy [#7](https://github.com/ReventlessDev/reventless-core/issues/7)) ([927a93b](https://github.com/ReventlessDev/reventless-core/commit/927a93b550f9f3f56dca93810cafa9575663a0e9))
+
+
+# 3.0.0-alpha.204 (2026-07-13)
+
+### Bug Fixes
+
+* **admin:** skip over-long Source-C subscriptions on the ApiFragmentRegistry aggregate (deploy [#6](https://github.com/ReventlessDev/reventless-core/issues/6)) ([0977120](https://github.com/ReventlessDev/reventless-core/commit/0977120d5c6cb2331d9384747d136fe99855690e))
+
+
 # 3.0.0-alpha.203 (2026-07-13)
 
 ### Bug Fixes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-aws",
-  "version": "3.0.0-alpha.203",
+  "version": "3.0.0-alpha.205",
   "description": "AWS adapters for Reventless",
   "license": "Apache-2.0",
   "dependencies": {
@@ -9,15 +9,15 @@
     "sury": "11.0.0-alpha.4",
     "uuid": "^13.0.0",
     "@reventlessdev/rescript-aws-sdk": "2.2.0-alpha.21",
-    "@reventlessdev/rescript-pulumi-aws": "2.4.0-alpha.50",
+    "@reventlessdev/rescript-effect": "0.1.0-alpha.27",
     "@reventlessdev/rescript-jest": "1.0.0-alpha.7",
+    "@reventlessdev/rescript-pulumi-aws": "2.4.0-alpha.50",
     "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.15",
-    "@reventlessdev/rescript-effect": "0.1.0-alpha.27",
-    "@reventlessdev/reventless-core": "3.0.0-alpha.162",
     "@reventlessdev/rescript-uuid": "1.1.0-alpha.15",
-    "@reventlessdev/reventless-interop": "3.0.0-alpha.26",
     "@reventlessdev/reventless-infra": "3.0.0-alpha.98",
-    "@reventlessdev/reventless-postgres": "3.0.0-alpha.26",
+    "@reventlessdev/reventless-core": "3.0.0-alpha.163",
+    "@reventlessdev/reventless-postgres": "3.0.0-alpha.27",
+    "@reventlessdev/reventless-interop": "3.0.0-alpha.26",
     "@reventlessdev/reventless-spec": "3.0.0-alpha.76"
   },
   "devDependencies": {

package/src/adapter/CommandGenerator/CommandGeneratorResolvers_AppSync.res

@@ -150,9 +150,18 @@ let make: ReventlessCore.CommandGenerator_Adapter.resolversMaker<api, Util.Lambd
   // fragment's subscription-source metadata) handles
   // delivery. AWS requires a dataSourceName even on UNIT subscription resolvers,
   // so we reuse the mutation's data source (its code never executes for subs).
+  //
+  // Skip fields whose `on<field>` subscription name exceeds AppSync's 50-char cap — the
+  // pushed SDL drops those Source-C subscription fields (Plugin_SubscriptionSchema.sourceCFields
+  // applies the SAME gate), so creating their resolvers would fail CreateResolver NotFound
+  // (e.g. the admin-aggregate `Platform_ApiFragmentRegistry_DeregisterApiFragment` → 52 chars).
+  let subscribableFields =
+    fields->Array.filter(field =>
+      `on${field}`->String.length <= ReventlessCore.Api_Naming.appSyncSubscriptionMaxLen
+    )
   CommandSubscriptionResolvers_AppSync.make(
     ~api,
-    ~mutationFields=fields,
+    ~mutationFields=subscribableFields,
     ~dataSourceName=dataSource.name->Pulumi.Output.asInput,
     ~opts,
   )

package/src/adapter/CommandGenerator/CommandGeneratorResolvers_AppSync.res.mjs

@@ -11,6 +11,7 @@ import * as Lambda$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/Lambda
 import * as AWS$ReventlessAws from "../AWS.res.mjs";
 import * as Adapter$ReventlessCore from "@reventlessdev/reventless-core/src/adapter/Adapter.res.mjs";
 import * as PolicyDocument$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/PolicyDocument.res.mjs";
+import * as Api_Naming$ReventlessCore from "@reventlessdev/reventless-core/src/components/Api/Api_Naming.res.mjs";
 import * as Util_AppSync$ReventlessAws from "../../util/Util_AppSync.res.mjs";
 import * as Util_Pulumi$ReventlessCore from "@reventlessdev/reventless-core/src/util/Util_Pulumi.res.mjs";
 import * as Util_Adapter$ReventlessCore from "@reventlessdev/reventless-core/src/util/Util_Adapter.res.mjs";
@@ -78,7 +79,8 @@ function make(name, api, fields, param, runtime, resources, opts) {
     let commandName = Stdlib_String.capitalize(Stdlib_Option.getOr(parts[parts.length - 1 | 0], field));
     return AppSync_Resolver_Retrying$ReventlessAws.makeUnitJsResolver(Stdlib_String.capitalize(field), api, dataSource.name, "Mutation", field, AppSync_Resolver_Functions$PulumiAws.invokeCommandGenerator(commandName), opts$1);
   });
-  CommandSubscriptionResolvers_AppSync$ReventlessAws.make(api, fields, dataSource.name, opts$1);
+  let subscribableFields = fields.filter(field => (`on` + field).length <= Api_Naming$ReventlessCore.appSyncSubscriptionMaxLen);
+  CommandSubscriptionResolvers_AppSync$ReventlessAws.make(api, subscribableFields, dataSource.name, opts$1);
   let resources$1 = resolvers.map(Util_AppSync$ReventlessAws.toResourceNative);
   return {
     resources: resources$1

package/src/components/Api/AppSync_SdlDecorate.res

@@ -119,11 +119,20 @@ let injectAwsAuthAll = (
 }
 
 // Shared traversal types every callable surface reaches — `PageInfo` (relay
-// connections, injected by the stitcher) and the `CommandResult` members
-// (mutation returns, deduped across fragments by the stitcher). Stamped once on
-// the ASSEMBLED SDL: per-fragment stamping would race the stitcher's first-wins
-// dedupe against unstamped sibling copies.
-let sharedIamTypeNames = ["PageInfo", "CommandAccepted", "CommandRejected", "CommandPending"]
+// connections, injected by the stitcher), the `CommandResult` members (mutation
+// returns, deduped across fragments by the stitcher), and `Platform_ApiFragmentEntry`
+// (the return type of the IAM-callable `Platform_ApiFragments` status query the deploy
+// waiter polls via SigV4 — without the type-level `@aws_iam` the SigV4 caller reaches the
+// query field but is "Not Authorized to access <field> on type Platform_ApiFragmentEntry").
+// Stamped once on the ASSEMBLED SDL: per-fragment stamping would race the stitcher's
+// first-wins dedupe against unstamped sibling copies.
+let sharedIamTypeNames = [
+  "PageInfo",
+  "CommandAccepted",
+  "CommandRejected",
+  "CommandPending",
+  "Platform_ApiFragmentEntry",
+]
 
 let stampSharedIamTypes = (sdl: string): string =>
   sharedIamTypeNames->Array.reduce(sdl, (acc, name) =>

package/src/components/Api/AppSync_SdlDecorate.res.mjs

@@ -80,7 +80,8 @@ let sharedIamTypeNames = [
   "PageInfo",
   "CommandAccepted",
   "CommandRejected",
-  "CommandPending"
+  "CommandPending",
+  "Platform_ApiFragmentEntry"
 ];
 
 function stampSharedIamTypes(sdl) {

package/tests/AppSync_SdlDecorateTest.res

@@ -187,3 +187,21 @@ describe("AppSync_SdlDecorate.planAwsPushes", () => {
     expect(plan.sdl)->toContain("Catalog_AddProduct")
   })
 })
+
+describe("AppSync_SdlDecorate.stampSharedIamTypes", () => {
+  // Regression: the deploy waiter polls the IAM-callable Platform_ApiFragments query via
+  // SigV4; its return type Platform_ApiFragmentEntry must carry the type-level @aws_iam or
+  // the SigV4 caller reaches the query field but gets "Not Authorized to access <field> on
+  // type Platform_ApiFragmentEntry" (deploy validation #7).
+  testSync("stamps Platform_ApiFragmentEntry with dual-auth", () => {
+    let sdl = AppSync_SdlDecorate.stampSharedIamTypes(
+      "type Platform_ApiFragmentEntry {\n  pluginId: String!\n  pushStatus: String!\n}",
+    )
+    expect(sdl)->toContain("type Platform_ApiFragmentEntry @aws_cognito_user_pools @aws_iam {")
+  })
+
+  testSync("still stamps the CommandResult members", () => {
+    let sdl = AppSync_SdlDecorate.stampSharedIamTypes("type CommandAccepted {\n  id: ID!\n}")
+    expect(sdl)->toContain("type CommandAccepted @aws_cognito_user_pools @aws_iam {")
+  })
+})

package/tests/AppSync_SdlDecorateTest.res.mjs

@@ -166,6 +166,17 @@ globalThis.describe("AppSync_SdlDecorate.planAwsPushes", () => {
   });
 });
 
+globalThis.describe("AppSync_SdlDecorate.stampSharedIamTypes", () => {
+  globalThis.test("stamps Platform_ApiFragmentEntry with dual-auth", () => {
+    let sdl = AppSync_SdlDecorate$ReventlessAws.stampSharedIamTypes("type Platform_ApiFragmentEntry {\n  pluginId: String!\n  pushStatus: String!\n}");
+    globalThis.expect(sdl).toContain("type Platform_ApiFragmentEntry @aws_cognito_user_pools @aws_iam {");
+  });
+  globalThis.test("still stamps the CommandResult members", () => {
+    let sdl = AppSync_SdlDecorate$ReventlessAws.stampSharedIamTypes("type CommandAccepted {\n  id: ID!\n}");
+    globalThis.expect(sdl).toContain("type CommandAccepted @aws_cognito_user_pools @aws_iam {");
+  });
+});
+
 export {
   sources,
   stitchedSdl,