@reventlessdev/reventless-aws 3.0.0-alpha.219 → 3.0.0-alpha.221

package/CHANGELOG.md

@@ -3,6 +3,24 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.221 (2026-07-22)
+
+### Features
+
+* **aws:** give deployed resources a complete attribution tag schema ([f931a44](https://github.com/ReventlessDev/reventless-core/commit/f931a44ab311a4aff1cd73939b42e7e5221621c9))
+* **aws:** resolve plugin at deploy time for aggregate/DCB dispatch ([4d81320](https://github.com/ReventlessDev/reventless-core/commit/4d813200d77362791263357490aa31f63eac1879))
+* **aws:** unify the deployed entry-point dispatch boundary; add latency fields ([ad7b3f6](https://github.com/ReventlessDev/reventless-core/commit/ad7b3f60e7b2b2213677732bbf13f486043075ef))
+* **core:** attribute piece resources to the component that owns them ([2ddd91a](https://github.com/ReventlessDev/reventless-core/commit/2ddd91ae1a5394257dec4b9b6e5021d5aa6e7f63))
+* **core:** attribute shared substrate to the plugin that owns it ([a440d4f](https://github.com/ReventlessDev/reventless-core/commit/a440d4f827dfab9e2e9a763ffd9fc40240852e09))
+
+
+# 3.0.0-alpha.220 (2026-07-21)
+
+### Bug Fixes
+
+* **aws:** declare output-only props on the retrying SourceApiAssociation ([5e1cdcc](https://github.com/ReventlessDev/reventless-core/commit/5e1cdcc8612d717649afa520285f854060d1e276))
+
+
 # 3.0.0-alpha.219 (2026-07-21)
 
 ### Features

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-aws",
-  "version": "3.0.0-alpha.219",
+  "version": "3.0.0-alpha.221",
   "description": "AWS adapters for Reventless",
   "license": "Apache-2.0",
   "dependencies": {
@@ -8,17 +8,17 @@
     "@aws-sdk/client-cloudfront": "3.970.0",
     "sury": "11.0.0-alpha.4",
     "uuid": "^13.0.0",
+    "@reventlessdev/rescript-effect": "0.1.0-alpha.30",
     "@reventlessdev/rescript-aws-sdk": "2.2.0-alpha.24",
-    "@reventlessdev/rescript-effect": "0.1.0-alpha.29",
     "@reventlessdev/rescript-jest": "1.0.0-alpha.9",
+    "@reventlessdev/rescript-pulumi-aws": "2.4.0-alpha.57",
     "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.17",
-    "@reventlessdev/rescript-pulumi-aws": "2.4.0-alpha.56",
+    "@reventlessdev/reventless-core": "3.0.0-alpha.175",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.103",
+    "@reventlessdev/reventless-postgres": "3.0.0-alpha.39",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.80",
     "@reventlessdev/rescript-uuid": "1.1.0-alpha.17",
-    "@reventlessdev/reventless-core": "3.0.0-alpha.174",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.102",
-    "@reventlessdev/reventless-interop": "3.0.0-alpha.28",
-    "@reventlessdev/reventless-postgres": "3.0.0-alpha.38",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.79"
+    "@reventlessdev/reventless-interop": "3.0.0-alpha.28"
   },
   "devDependencies": {
     "rescript": "12.3.0",

package/src/Platform.res.mjs

@@ -542,6 +542,8 @@ function MakeWithConfig(Config) {
     groupBySource: RuntimeEnvironment_Lambda$ReventlessAws.groupBySource,
     extractCorrelationId: RuntimeEnvironment_Lambda$ReventlessAws.extractCorrelationId,
     extractCausationId: RuntimeEnvironment_Lambda$ReventlessAws.extractCausationId,
+    extractSentTimestamp: RuntimeEnvironment_Lambda$ReventlessAws.extractSentTimestamp,
+    extractRetryCount: RuntimeEnvironment_Lambda$ReventlessAws.extractRetryCount,
     asEventHandler: prim => prim,
     asEffectHandler: prim => prim
   })({
@@ -1515,6 +1517,8 @@ function Make($star) {
     groupBySource: RuntimeEnvironment_Lambda$ReventlessAws.groupBySource,
     extractCorrelationId: RuntimeEnvironment_Lambda$ReventlessAws.extractCorrelationId,
     extractCausationId: RuntimeEnvironment_Lambda$ReventlessAws.extractCausationId,
+    extractSentTimestamp: RuntimeEnvironment_Lambda$ReventlessAws.extractSentTimestamp,
+    extractRetryCount: RuntimeEnvironment_Lambda$ReventlessAws.extractRetryCount,
     asEventHandler: prim => prim,
     asEffectHandler: prim => prim
   })({

package/src/Platform_Stack.res

@@ -90,6 +90,12 @@ let _resolveUncached = (): cognitoUserPool => {
         usernameAttributes: Pulumi.Input.make([Pulumi.Input.make("email")]),
         passwordPolicy: Pulumi.Input.make(pwdPolicy),
         mfaConfiguration: Pulumi.Input.make("OFF"),
+        tags: AWS.Tags.make(
+          ~name="HostUiPool",
+          ~kind=ReventlessCore.ComponentType.Platform,
+          ~role=Auth,
+          ~scope=Platform,
+        ),
       },
     )
 

package/src/Platform_Stack.res.mjs

@@ -4,6 +4,7 @@ import * as Aws from "@pulumi/aws";
 import * as Pulumi$Pulumi from "@reventlessdev/rescript-pulumi-pulumi/src/Pulumi.res.mjs";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Pulumi from "@pulumi/pulumi";
+import * as AWS_Tags$ReventlessAws from "./adapter/AWS_Tags.res.mjs";
 import * as Util_LocalConfig$ReventlessAws from "./util/Util_LocalConfig.res.mjs";
 
 function _resolveUncached() {
@@ -60,7 +61,8 @@ function _resolveUncached() {
       adminCreateUserConfig: adminConfig,
       usernameAttributes: ["email"],
       passwordPolicy: pwdPolicy,
-      mfaConfiguration: "OFF"
+      mfaConfiguration: "OFF",
+      tags: AWS_Tags$ReventlessAws.make("HostUiPool", "Platform", "Auth", "Platform", undefined, undefined, undefined, undefined)
     });
     let tokenUnits2_accessToken = "minutes";
     let tokenUnits2_idToken = "minutes";

package/src/adapter/AWS_Tags.res

@@ -1,16 +1,131 @@
-let make = (~name, componentType) => {
-  let plugin = Pulumi.Pulumi.getProjectName()
-  let kind = componentType->ReventlessCore.ComponentType.toString
+module Attribution = ReventlessCore.ResourceAttribution
+
+/**
+Attribution tags for a framework-created AWS resource.
+
+Every framework fact is namespaced `reventless:*`, lower-case, and appears
+exactly once. `Name` is the single bare key, and it is earned: the AWS console
+reads that literal spelling to populate the resource-name column, so namespacing
+it would leave the column blank. Everything else — including the environment —
+is a framework fact and carries the namespace. AWS cost allocation groups by any
+activated tag key, so `reventless:environment` is a first-class cost-allocation
+dimension; the bare spelling bought nothing.
+
+The three attribution facts are independent and all three are needed to identify
+a resource (see `ResourceAttribution`):
+
+- `~kind` — the modelling kind of the owning component (Aggregate, …)
+- `~role` — the deployment piece this resource implements (EventLog, Runtime, …)
+- `~scope` — component / plugin / platform
+
+`~plugin` and `~platform` default to the ambient context published by
+`Plugin_Builder` while a plugin is under construction, falling back to the Pulumi
+project name for platform-scope resources built outside any plugin. Note the
+project name is what the framework already calls the *platform* name
+(`Plugin_Builder.Spec.platformName`) — attributing it to `reventless:plugin`, as
+this helper used to, mislabelled every resource.
+
+Non-component scopes carry an empty `reventless:component` by definition:
+substrate is attributed to its level, not to a fabricated component.
+*/
+let makeDict = (
+  ~name: string,
+  ~kind: ReventlessCore.ComponentType.t,
+  ~role: Attribution.Role.t,
+  ~scope: Attribution.Scope.t=Component,
+  // The model component stem, when it differs from the resource name
+  // ("Products" for a resource named "ProductsQueryDb"). Defaults to `~name`.
+  ~component: option<string>=?,
+  // The model element that owns this resource. Overrides `~kind`, `~component`
+  // and `~scope`: the piece adapters pass their own ComponentType as `~kind`,
+  // which names the PIECE, so it collapses onto `~role` whenever the owner is
+  // unknown. Supplied by the owning builder via `ResourceAttribution.owner` —
+  // see docs/plans/done/resource-attribution-owner-kind.md.
+  //
+  // A plugin is a model element too, so shared substrate (a DcbEventLog, a
+  // plugin's DCB command topics, its event collector) is owned by the Plugin
+  // rather than by nothing — that is how it gets attributed to the element it
+  // actually belongs to. `Plugin`-kinded owners therefore imply plugin scope,
+  // where `reventless:plugin` names the owner and `reventless:component` is
+  // empty by definition.
+  ~owner: option<Attribution.owner>=?,
+  ~plugin: option<string>=?,
+  ~platform: option<string>=?,
+) => {
+  let ambient = Attribution.current.contents
+  let projectName = Pulumi.Pulumi.getProjectName()
+
+  let platform = switch platform {
+  | Some(p) => p
+  | None => ambient.platform->Option.getOr(projectName)
+  }
+
+  let kind = switch owner {
+  | Some({kind}) => kind
+  | None => kind
+  }
+
+  // A Plugin-kinded owner IS the plugin, so the resource is plugin substrate
+  // whatever default scope the piece adapter passed.
+  let scope = switch owner {
+  | Some({kind: Plugin}) => Attribution.Scope.Plugin
+  | Some(_) | None => scope
+  }
+
+  let plugin = switch scope {
+  | Platform => ""
+  | Component | Plugin =>
+    switch (plugin, owner) {
+    | (Some(p), _) => p
+    | (None, Some({kind: Plugin, name})) => name
+    | (None, _) => ambient.plugin->Option.getOr("")
+    }
+  }
+
+  let component = switch scope {
+  | Component =>
+    switch owner {
+    | Some({name}) => name
+    | None => component->Option.getOr(name)
+    }
+  | Plugin | Platform => ""
+  }
+
   [
     ("Name", name),
-    ("Type", kind),
-    ("Environment", Pulumi.Pulumi.getStackName()),
-    ("Plugin", plugin),
+    ("reventless:platform", platform),
     ("reventless:plugin", plugin),
-    ("reventless:component", name),
-    ("reventless:role", kind),
-    ("reventless:kind", kind),
-  ]
-  ->Dict.fromArray
-  ->Pulumi.Input.make
+    ("reventless:component", component),
+    ("reventless:kind", kind->ReventlessCore.ComponentType.toString),
+    ("reventless:role", role->Attribution.Role.toString),
+    ("reventless:scope", scope->Attribution.Scope.toString),
+    ("reventless:environment", Pulumi.Pulumi.getStackName()),
+  ]->Dict.fromArray
 }
+
+/**
+The same schema as `makeDict`, wrapped as a Pulumi input — what nearly every
+resource's `tags` field expects. Use `makeDict` only for the bindings that take
+raw tags because they post-process them (e.g. `EC2.Vpc`, which supplements a
+`Name` of its own).
+*/
+let make = (
+  ~name,
+  ~kind,
+  ~role,
+  ~scope=Attribution.Scope.Component,
+  ~component=?,
+  ~owner=?,
+  ~plugin=?,
+  ~platform=?,
+) =>
+  makeDict(
+    ~name,
+    ~kind,
+    ~role,
+    ~scope,
+    ~component?,
+    ~owner?,
+    ~plugin?,
+    ~platform?,
+  )->Pulumi.Input.make

package/src/adapter/AWS_Tags.res.mjs

@@ -1,48 +1,89 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
+import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Pulumi from "@pulumi/pulumi";
 import * as ComponentType$ReventlessCore from "@reventlessdev/reventless-core/src/ComponentType.res.mjs";
+import * as ResourceAttribution$ReventlessCore from "@reventlessdev/reventless-core/src/ResourceAttribution.res.mjs";
 
-function make(name, componentType) {
-  let plugin = Pulumi.getProject();
-  let kind = ComponentType$ReventlessCore.toString(componentType);
+function makeDict(name, kind, role, scopeOpt, component, owner, plugin, platform) {
+  let scope = scopeOpt !== undefined ? scopeOpt : "Component";
+  let ambient = ResourceAttribution$ReventlessCore.current.contents;
+  let projectName = Pulumi.getProject();
+  let platform$1 = platform !== undefined ? platform : Stdlib_Option.getOr(ambient.platform, projectName);
+  let kind$1 = owner !== undefined ? owner.kind : kind;
+  let scope$1 = owner !== undefined && owner.kind === "Plugin" ? "Plugin" : scope;
+  let plugin$1;
+  let exit = 0;
+  switch (scope$1) {
+    case "Component" :
+    case "Plugin" :
+      exit = 1;
+      break;
+    case "Platform" :
+      plugin$1 = "";
+      break;
+  }
+  if (exit === 1) {
+    plugin$1 = plugin !== undefined ? plugin : (
+        owner !== undefined && owner.kind === "Plugin" ? owner.name : Stdlib_Option.getOr(ambient.plugin, "")
+      );
+  }
+  let component$1;
+  switch (scope$1) {
+    case "Component" :
+      component$1 = owner !== undefined ? owner.name : Stdlib_Option.getOr(component, name);
+      break;
+    case "Plugin" :
+    case "Platform" :
+      component$1 = "";
+      break;
+  }
   return Object.fromEntries([
     [
       "Name",
       name
     ],
     [
-      "Type",
-      kind
+      "reventless:platform",
+      platform$1
     ],
     [
-      "Environment",
-      Pulumi.getStack()
+      "reventless:plugin",
+      plugin$1
     ],
     [
-      "Plugin",
-      plugin
+      "reventless:component",
+      component$1
     ],
     [
-      "reventless:plugin",
-      plugin
+      "reventless:kind",
+      ComponentType$ReventlessCore.toString(kind$1)
     ],
     [
-      "reventless:component",
-      name
+      "reventless:role",
+      ResourceAttribution$ReventlessCore.Role.toString(role)
     ],
     [
-      "reventless:role",
-      kind
+      "reventless:scope",
+      ResourceAttribution$ReventlessCore.Scope.toString(scope$1)
     ],
     [
-      "reventless:kind",
-      kind
+      "reventless:environment",
+      Pulumi.getStack()
     ]
   ]);
 }
 
+function make(name, kind, role, scopeOpt, component, owner, plugin, platform) {
+  let scope = scopeOpt !== undefined ? scopeOpt : "Component";
+  return makeDict(name, kind, role, scope, component, owner, plugin, platform);
+}
+
+let Attribution;
+
 export {
+  Attribution,
+  makeDict,
   make,
 }
 /* @pulumi/pulumi Not a pure module */

package/src/adapter/Api/AppSync_SourceApiAssociation_Retrying.res

@@ -410,6 +410,31 @@ type constructorProps = {
   mergeType: Pulumi.Input.t<string>,
 }
 
+/** What is actually handed to `pulumi.dynamic.Resource`. The base constructor
+    defines a resource property for every KEY of `props` (it walks
+    `Object.keys`), so an output-only field that is not declared here never
+    materialises on the resource — `association.associationId` reads a plain
+    `undefined` instead of an Output, and `mergeStatusGateWith` then calls
+    GetSourceApiAssociation with no id ("No value provided for input HTTP
+    label: associationId"). Declaring them `undefined` is Pulumi's documented
+    way to register output-only properties; undefined values are dropped from
+    the inputs RPC, so `create` still receives only the three real inputs. */
+type resourceProps = {
+  mergedApiIdentifier: Pulumi.Input.t<string>,
+  sourceApiIdentifier: Pulumi.Input.t<string>,
+  mergeType: Pulumi.Input.t<string>,
+  arn: Nullable.t<string>,
+  associationId: Nullable.t<string>,
+}
+
+let resourcePropsOf = (props: constructorProps): resourceProps => {
+  mergedApiIdentifier: props.mergedApiIdentifier,
+  sourceApiIdentifier: props.sourceApiIdentifier,
+  mergeType: props.mergeType,
+  arn: Nullable.undefined,
+  associationId: Nullable.undefined,
+}
+
 // pulumi.dynamic.Resource constructor: (provider, name, props, opts). Explicit
 // /index.js path because @pulumi/pulumi/dynamic is a directory import not
 // resolvable in ESM mode.
@@ -432,5 +457,5 @@ let make = (
   | Some(o) => {...o, aliases: [migrationAlias]}
   | None => {aliases: [migrationAlias]}
   }
-  _newResource(provider, name, props, finalOpts)
+  _newResource(provider, name, props->resourcePropsOf, finalOpts)
 }

package/src/adapter/Api/AppSync_SourceApiAssociation_Retrying.res.mjs

@@ -295,6 +295,16 @@ let provider = {
   read: read_
 };
 
+function resourcePropsOf(props) {
+  return {
+    mergedApiIdentifier: props.mergedApiIdentifier,
+    sourceApiIdentifier: props.sourceApiIdentifier,
+    mergeType: props.mergeType,
+    arn: undefined,
+    associationId: undefined
+  };
+}
+
 function make(name, props, opts) {
   let migrationAlias = Alias$Pulumi.make(name, "aws:appsync/sourceApiAssociation:SourceApiAssociation", undefined);
   let finalOpts;
@@ -307,7 +317,7 @@ function make(name, props, opts) {
       aliases: [migrationAlias]
     };
   }
-  return new IndexJs.Resource(provider, name, props, finalOpts);
+  return new IndexJs.Resource(provider, name, resourcePropsOf(props), finalOpts);
 }
 
 export {
@@ -335,6 +345,7 @@ export {
   diff_,
   read_,
   provider,
+  resourcePropsOf,
   make,
 }
 /* log Not a pure module */

package/src/adapter/Api/Platform_ComponentDefinitions_Lambda.res

@@ -114,6 +114,12 @@ let make = (
   let lambdaRole = IAM.Role.makeWithDefaultPolicy(
     ~name=name ++ "Lambda",
     ~servicePrincipal=AWS.Lambda.principal->Pulumi.Output.make,
+    ~tags=AWS.Tags.make(
+      ~name=name ++ "Lambda",
+      ~kind=ReventlessCore.ComponentType.Platform,
+      ~role=Identity,
+      ~scope=Platform,
+    ),
     ~opts,
   )
 
@@ -184,7 +190,7 @@ let make = (
       memorySize: 512->Pulumi.Input.make,
       timeout: 30->Pulumi.Input.make,
       layers,
-      tags: AWS.Tags.make(~name=name ++ "Lambda", ReventlessCore.ReadModel.componentType),
+      tags: AWS.Tags.make(~name=name ++ "Lambda", ~kind=ReventlessCore.ComponentType.Platform, ~role=Runtime, ~scope=Platform),
       environment: (
         {
           Lambda.Function.variables: Dict.fromArray([
@@ -202,6 +208,12 @@ let make = (
   let dataSourceRole = IAM.Role.makeWithDefaultPolicy(
     ~name=name ++ "DataSource",
     ~servicePrincipal=AWS.AppSync.principal->Pulumi.Output.make,
+    ~tags=AWS.Tags.make(
+      ~name=name ++ "DataSource",
+      ~kind=ReventlessCore.ComponentType.Platform,
+      ~role=Identity,
+      ~scope=Platform,
+    ),
     ~opts,
   )
 

package/src/adapter/Api/Platform_ComponentDefinitions_Lambda.res.mjs

@@ -9,7 +9,6 @@ import * as Lambda$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/Lambda
 import * as AWS$ReventlessAws from "../AWS.res.mjs";
 import * as AWS_Tags$ReventlessAws from "../AWS_Tags.res.mjs";
 import * as PolicyDocument$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/PolicyDocument.res.mjs";
-import * as ReadModel$ReventlessCore from "@reventlessdev/reventless-core/src/components/ReadModel/ReadModel.res.mjs";
 import * as Util_Bundle$ReventlessAws from "../../util/Util_Bundle.res.mjs";
 import * as Util_Pulumi$ReventlessCore from "@reventlessdev/reventless-core/src/util/Util_Pulumi.res.mjs";
 import * as AppSync_Resolver_Native$ReventlessAws from "./AppSync_Resolver_Native.res.mjs";
@@ -105,7 +104,7 @@ export function response(ctx) {
 function make(api, pluginReadModelTableName, opts) {
   let opts$1 = Util_Pulumi$ReventlessCore.ComponentResourceOptions.toCustomResourceOptions(opts);
   let name = "PlatformUIDefinitions";
-  let lambdaRole = IAM$PulumiAws.Role.makeWithDefaultPolicy(name + "Lambda", Pulumi.output(AWS$ReventlessAws.Lambda.principal), opts$1);
+  let lambdaRole = IAM$PulumiAws.Role.makeWithDefaultPolicy(name + "Lambda", Pulumi.output(AWS$ReventlessAws.Lambda.principal), AWS_Tags$ReventlessAws.make(name + "Lambda", "Platform", "Identity", "Platform", undefined, undefined, undefined, undefined), opts$1);
   pluginReadModelTableName.apply(tableName => {
     new (Aws.iam.RolePolicy)(name + "LambdaPolicy", {
       policy: PolicyDocument$PulumiAws.toJsonString(PolicyDocument$PulumiAws.make(undefined, name + "LambdaPolicy", [
@@ -141,7 +140,7 @@ function make(api, pluginReadModelTableName, opts) {
     memorySize: 512,
     timeout: 30,
     layers: layers,
-    tags: AWS_Tags$ReventlessAws.make(name + "Lambda", ReadModel$ReventlessCore.componentType),
+    tags: AWS_Tags$ReventlessAws.make(name + "Lambda", "Platform", "Runtime", "Platform", undefined, undefined, undefined, undefined),
     environment: {
       variables: Object.fromEntries([
         [
@@ -164,7 +163,7 @@ function make(api, pluginReadModelTableName, opts) {
     },
     sourceCodeHash: sourceCodeHash
   }, opts$1);
-  let dataSourceRole = IAM$PulumiAws.Role.makeWithDefaultPolicy(name + "DataSource", Pulumi.output(AWS$ReventlessAws.AppSync.principal), opts$1);
+  let dataSourceRole = IAM$PulumiAws.Role.makeWithDefaultPolicy(name + "DataSource", Pulumi.output(AWS$ReventlessAws.AppSync.principal), AWS_Tags$ReventlessAws.make(name + "DataSource", "Platform", "Identity", "Platform", undefined, undefined, undefined, undefined), opts$1);
   Pulumi.all([
     lambda.arn,
     dataSourceRole.id

package/src/adapter/Api/Platform_UIFragments_Lambda.res

@@ -103,6 +103,12 @@ let make = (
   let lambdaRole = IAM.Role.makeWithDefaultPolicy(
     ~name=name ++ "Lambda",
     ~servicePrincipal=AWS.Lambda.principal->Pulumi.Output.make,
+    ~tags=AWS.Tags.make(
+      ~name=name ++ "Lambda",
+      ~kind=ReventlessCore.ComponentType.Platform,
+      ~role=Identity,
+      ~scope=Platform,
+    ),
     ~opts,
   )
 
@@ -167,7 +173,7 @@ let make = (
       memorySize: 512->Pulumi.Input.make,
       timeout: 30->Pulumi.Input.make,
       layers,
-      tags: AWS.Tags.make(~name=name ++ "Lambda", ReventlessCore.ReadModel.componentType),
+      tags: AWS.Tags.make(~name=name ++ "Lambda", ~kind=ReventlessCore.ComponentType.Platform, ~role=Runtime, ~scope=Platform),
       environment: (
         {
           Lambda.Function.variables: Dict.fromArray([
@@ -185,6 +191,12 @@ let make = (
   let dataSourceRole = IAM.Role.makeWithDefaultPolicy(
     ~name=name ++ "DataSource",
     ~servicePrincipal=AWS.AppSync.principal->Pulumi.Output.make,
+    ~tags=AWS.Tags.make(
+      ~name=name ++ "DataSource",
+      ~kind=ReventlessCore.ComponentType.Platform,
+      ~role=Identity,
+      ~scope=Platform,
+    ),
     ~opts,
   )
 

package/src/adapter/Api/Platform_UIFragments_Lambda.res.mjs

@@ -9,7 +9,6 @@ import * as Lambda$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/Lambda
 import * as AWS$ReventlessAws from "../AWS.res.mjs";
 import * as AWS_Tags$ReventlessAws from "../AWS_Tags.res.mjs";
 import * as PolicyDocument$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/PolicyDocument.res.mjs";
-import * as ReadModel$ReventlessCore from "@reventlessdev/reventless-core/src/components/ReadModel/ReadModel.res.mjs";
 import * as Util_Bundle$ReventlessAws from "../../util/Util_Bundle.res.mjs";
 import * as Util_Pulumi$ReventlessCore from "@reventlessdev/reventless-core/src/util/Util_Pulumi.res.mjs";
 import * as AppSync_Resolver_Native$ReventlessAws from "./AppSync_Resolver_Native.res.mjs";
@@ -97,7 +96,7 @@ export function response(ctx) {
 function make(api, uiFragmentRegistryTableName, schemaReady, opts) {
   let opts$1 = Util_Pulumi$ReventlessCore.ComponentResourceOptions.toCustomResourceOptions(opts);
   let name = "PlatformUIFragments";
-  let lambdaRole = IAM$PulumiAws.Role.makeWithDefaultPolicy(name + "Lambda", Pulumi.output(AWS$ReventlessAws.Lambda.principal), opts$1);
+  let lambdaRole = IAM$PulumiAws.Role.makeWithDefaultPolicy(name + "Lambda", Pulumi.output(AWS$ReventlessAws.Lambda.principal), AWS_Tags$ReventlessAws.make(name + "Lambda", "Platform", "Identity", "Platform", undefined, undefined, undefined, undefined), opts$1);
   uiFragmentRegistryTableName.apply(tableName => {
     new (Aws.iam.RolePolicy)(name + "LambdaPolicy", {
       policy: PolicyDocument$PulumiAws.toJsonString(PolicyDocument$PulumiAws.make(undefined, name + "LambdaPolicy", [
@@ -197,7 +196,7 @@ export async function handler() {
     memorySize: 512,
     timeout: 30,
     layers: layers,
-    tags: AWS_Tags$ReventlessAws.make(name + "Lambda", ReadModel$ReventlessCore.componentType),
+    tags: AWS_Tags$ReventlessAws.make(name + "Lambda", "Platform", "Runtime", "Platform", undefined, undefined, undefined, undefined),
     environment: {
       variables: Object.fromEntries([
         [
@@ -220,7 +219,7 @@ export async function handler() {
     },
     sourceCodeHash: sourceCodeHash
   }, opts$1);
-  let dataSourceRole = IAM$PulumiAws.Role.makeWithDefaultPolicy(name + "DataSource", Pulumi.output(AWS$ReventlessAws.AppSync.principal), opts$1);
+  let dataSourceRole = IAM$PulumiAws.Role.makeWithDefaultPolicy(name + "DataSource", Pulumi.output(AWS$ReventlessAws.AppSync.principal), AWS_Tags$ReventlessAws.make(name + "DataSource", "Platform", "Identity", "Platform", undefined, undefined, undefined, undefined), opts$1);
   Pulumi.all([
     lambda.arn,
     dataSourceRole.id

package/src/adapter/CommandGenerator/CommandGeneratorResolvers_AppSync.res

@@ -21,6 +21,12 @@ let make: ReventlessCore.CommandGenerator_Adapter.resolversMaker<api, Util.Lambd
   let dataSourceRole = PulumiAws.IAM.Role.makeWithDefaultPolicy(
     ~name=name ++ "DataSource",
     ~servicePrincipal=AWS.AppSync.principal->Pulumi.Output.make,
+    ~tags=AWS.Tags.make(
+      ~name=name ++ "DataSource",
+      ~kind=ReventlessCore.CommandGenerator.componentType,
+      ~role=Identity,
+      ~component=name,
+    ),
     ~opts,
   )
 
@@ -198,6 +204,12 @@ let makeDcb = (
   let dataSourceRole = PulumiAws.IAM.Role.makeWithDefaultPolicy(
     ~name="DcbMutationDS",
     ~servicePrincipal=AWS.AppSync.principal->Pulumi.Output.make,
+    ~tags=AWS.Tags.make(
+      ~name="DcbMutationDS",
+      ~kind=ReventlessCore.ComponentType.Plugin,
+      ~role=Identity,
+      ~scope=Plugin,
+    ),
     ~opts,
   )
 

package/src/adapter/CommandGenerator/CommandGeneratorResolvers_AppSync.res.mjs

@@ -9,12 +9,14 @@ import * as Stdlib_String from "@rescript/runtime/lib/es6/Stdlib_String.js";
 import * as Pulumi from "@pulumi/pulumi";
 import * as Lambda$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/Lambda/Lambda.res.mjs";
 import * as AWS$ReventlessAws from "../AWS.res.mjs";
+import * as AWS_Tags$ReventlessAws from "../AWS_Tags.res.mjs";
 import * as Adapter$ReventlessCore from "@reventlessdev/reventless-core/src/adapter/Adapter.res.mjs";
 import * as PolicyDocument$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/PolicyDocument.res.mjs";
 import * as Api_Naming$ReventlessCore from "@reventlessdev/reventless-core/src/components/Api/Api_Naming.res.mjs";
 import * as Util_AppSync$ReventlessAws from "../../util/Util_AppSync.res.mjs";
 import * as Util_Pulumi$ReventlessCore from "@reventlessdev/reventless-core/src/util/Util_Pulumi.res.mjs";
 import * as Util_Adapter$ReventlessCore from "@reventlessdev/reventless-core/src/util/Util_Adapter.res.mjs";
+import * as CommandGenerator$ReventlessCore from "@reventlessdev/reventless-core/src/components/CommandGenerator/CommandGenerator.res.mjs";
 import * as AppSync_Resolver_Functions$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/AppSync/AppSync_Resolver_Functions.res.mjs";
 import * as AppSync_Resolver_Retrying$ReventlessAws from "../Api/AppSync_Resolver_Retrying.res.mjs";
 import * as CommandSubscriptionResolvers_AppSync$ReventlessAws from "../Api/CommandSubscriptionResolvers_AppSync.res.mjs";
@@ -27,7 +29,7 @@ function make(name, api, fields, param, runtime, resources, opts) {
   let opts$1 = Util_Pulumi$ReventlessCore.ComponentResourceOptions.toCustomResourceOptions(opts);
   let lambda = runtime.parts.lambda;
   let lambdaRole = runtime.parts.lambdaRole;
-  let dataSourceRole = IAM$PulumiAws.Role.makeWithDefaultPolicy(name + "DataSource", Pulumi.output(AWS$ReventlessAws.AppSync.principal), opts$1);
+  let dataSourceRole = IAM$PulumiAws.Role.makeWithDefaultPolicy(name + "DataSource", Pulumi.output(AWS$ReventlessAws.AppSync.principal), AWS_Tags$ReventlessAws.make(name + "DataSource", CommandGenerator$ReventlessCore.componentType, "Identity", undefined, name, undefined, undefined, undefined), opts$1);
   Pulumi.all([
     Output$Pulumi.flatMap(lambda, lambda => lambda.arn),
     Output$Pulumi.flatMap(lambda, lambda => lambda.name),
@@ -91,7 +93,7 @@ function makeDcb(api, runtime, fieldNames, tags, onAdminApiOpt, opts) {
   let onAdminApi = onAdminApiOpt !== undefined ? onAdminApiOpt : false;
   let opts$1 = Util_Pulumi$ReventlessCore.ComponentResourceOptions.toCustomResourceOptions(opts);
   let lambda = runtime.parts.lambda;
-  let dataSourceRole = IAM$PulumiAws.Role.makeWithDefaultPolicy("DcbMutationDS", Pulumi.output(AWS$ReventlessAws.AppSync.principal), opts$1);
+  let dataSourceRole = IAM$PulumiAws.Role.makeWithDefaultPolicy("DcbMutationDS", Pulumi.output(AWS$ReventlessAws.AppSync.principal), AWS_Tags$ReventlessAws.make("DcbMutationDS", "Plugin", "Identity", "Plugin", undefined, undefined, undefined, undefined), opts$1);
   Pulumi.all([
     Output$Pulumi.flatMap(lambda, lambda => lambda.arn),
     dataSourceRole.id

package/src/adapter/CommandGenerator/InboundTranslationResolvers_AppSync.res

@@ -21,6 +21,12 @@ let make = (
   let dataSourceRole = PulumiAws.IAM.Role.makeWithDefaultPolicy(
     ~name="InboundTranslationDS",
     ~servicePrincipal=AWS.AppSync.principal->Pulumi.Output.make,
+    ~tags=AWS.Tags.make(
+      ~name="InboundTranslationDS",
+      ~kind=ReventlessCore.ComponentType.Plugin,
+      ~role=Identity,
+      ~scope=Plugin,
+    ),
     ~opts,
   )