@reventlessdev/reventless-aws 3.0.0-alpha.231 → 3.0.0-alpha.233

package/src/adapter/Api/Platform_ComponentDefinitions_Lambda.res.mjs

@@ -15,81 +15,6 @@ import * as AppSync_Resolver_Native$ReventlessAws from "./AppSync_Resolver_Nativ
 import * as Platform_Admin_Structure$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_Admin_Structure.res.mjs";
 import * as Platform_ComponentDefinitionsApi$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_ComponentDefinitionsApi.res.mjs";
 
-function makeHandlerCode(param, adminEntryJson) {
-  return `
-import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
-import { DynamoDBDocumentClient, ScanCommand } from "@aws-sdk/lib-dynamodb";
-
-const client = DynamoDBDocumentClient.from(new DynamoDBClient({}));
-const TABLE = process.env.PLUGIN_RM_TABLE;
-const ADMIN_ENTRY = ` + adminEntryJson + `;
-
-export async function handler() {
-  if (!TABLE) {
-    console.error("Platform_ComponentDefinitions: PLUGIN_RM_TABLE env var not set");
-    return [ADMIN_ENTRY];
-  }
-  const items = [];
-  let exclusiveStartKey;
-  do {
-    const out = await client.send(new ScanCommand({
-      TableName: TABLE,
-      FilterExpression: "contains(#status, :connected)",
-      ExpressionAttributeNames: { "#status": "status" },
-      ExpressionAttributeValues: { ":connected": "Connected" },
-      Limit: 1000,
-      ExclusiveStartKey: exclusiveStartKey,
-    }));
-    if (out.Items) items.push(...out.Items);
-    exclusiveStartKey = out.LastEvaluatedKey;
-  } while (exclusiveStartKey);
-
-  // Platform invariant: one version per plugin at a time, so the UI sees just
-  // the bare plugin name (mirrors ReventlessCore.Plugin.name). The Connected
-  // filter above does not enforce single-version: during a rolling deploy or a
-  // missed retire, several versions of the same plugin sit in Connected at once
-  // and each would otherwise emit a full duplicate set of AutoUI menu entries.
-  // Collapse to the highest version per plugin name (mirrors
-  // ReventlessCore.Plugin.compareVersions).
-  const cmpVer = (a, b) => {
-    const pa = String(a).replace(/[-+]/g, ".").split(".");
-    const pb = String(b).replace(/[-+]/g, ".").split(".");
-    const len = Math.max(pa.length, pb.length);
-    for (let i = 0; i < len; i++) {
-      const sa = pa[i] ?? "", sb = pb[i] ?? "";
-      const na = Number(sa), nb = Number(sb);
-      const bothNum = sa !== "" && sb !== "" && !Number.isNaN(na) && !Number.isNaN(nb);
-      if (bothNum) { if (na !== nb) return na > nb ? 1 : -1; }
-      else if (sa !== sb) return sa > sb ? 1 : -1;
-    }
-    return 0;
-  };
-  // The persisted structure carries Internal ReadModels / StateViewSlices for
-  // developer tooling; they must stay out of the deployed AutoUI. Mirror
-  // ReventlessCore.Platform_ComponentDefinitionsApi.isPublicQueryable here on the
-  // read path (the persisted structure is pre-filter — it is NOT re-encoded).
-  const isPublicQueryable = (q) => q?.visibility !== "Internal";
-  const filterStructure = (s) => ({
-    ...s,
-    readModels: (s.readModels ?? []).filter(isPublicQueryable),
-    stateViewSlices: (s.stateViewSlices ?? []).filter(isPublicQueryable),
-  });
-  const latestByName = new Map();
-  for (const item of items) {
-    if (!item || !item.structure) continue;
-    const name = String(item.name).split("@")[0];
-    const version = String(item.name).split("@")[1] ?? "";
-    const prev = latestByName.get(name);
-    if (!prev || cmpVer(version, prev.version) > 0) {
-      latestByName.set(name, { version, entry: { pluginId: name, ...filterStructure(item.structure) } });
-    }
-  }
-  const userEntries = [...latestByName.values()].map(v => v.entry);
-  return [ADMIN_ENTRY, ...userEntries];
-}
-`;
-}
-
 let resolverCode = `
 import { util } from '@aws-appsync/utils';
 export function request(ctx) {
@@ -125,17 +50,16 @@ function make(api, pluginReadModelTableName, opts) {
     }, opts$1);
   });
   let adminEntryJson = JSON.stringify(Platform_ComponentDefinitionsApi$ReventlessCore.encodePluginStructureEntry(Platform_Admin_Structure$ReventlessCore.pluginId, Platform_Admin_Structure$ReventlessCore.structure));
-  let archiveContents = {};
-  let handlerCodeStub = makeHandlerCode("", adminEntryJson);
-  archiveContents["index.mjs"] = new (Pulumi.asset.StringAsset)(handlerCodeStub);
-  let loaderHash = Util_Bundle$ReventlessAws.addEsmLoaderAssets(archiveContents);
-  let code = new (Pulumi.asset.AssetArchive)(archiveContents);
-  let sourceCodeHash = Util_Bundle$ReventlessAws.hashString(handlerCodeStub + "\n---\n" + loaderHash);
+  let packageDirs = Object.fromEntries([[
+      "@reventlessdev/reventless-aws",
+      Util_Bundle$ReventlessAws.resolvePackageRoot("@reventlessdev/reventless-aws")
+    ]]);
+  let match = Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/Api/Platform_ComponentDefinitions_Lambda_Ops.res.mjs", packageDirs, undefined);
   let layers = Stdlib_Option.getOr(Stdlib_Option.map(Lambda$PulumiAws.reventlessLayerArn, arn => [arn]), []);
   let lambda = new (Aws.lambda.Function)(name + "Lambda", {
     handler: "index.handler",
     runtime: "nodejs22.x",
-    code: code,
+    code: match.code,
     role: lambdaRole.arn,
     memorySize: 512,
     timeout: 30,
@@ -151,6 +75,10 @@ function make(api, pluginReadModelTableName, opts) {
           "PLUGIN_RM_TABLE",
           pluginReadModelTableName
         ],
+        [
+          "ADMIN_ENTRY_JSON",
+          adminEntryJson
+        ],
         [
           "NODE_OPTIONS",
           Util_Bundle$ReventlessAws.esmLoaderNodeOptions
@@ -161,7 +89,7 @@ function make(api, pluginReadModelTableName, opts) {
         ]
       ])
     },
-    sourceCodeHash: sourceCodeHash
+    sourceCodeHash: match.sourceCodeHash
   }, opts$1);
   let dataSourceRole = IAM$PulumiAws.Role.makeWithDefaultPolicy(name + "DataSource", Pulumi.output(AWS$ReventlessAws.AppSync.principal), AWS_Tags$ReventlessAws.make(name + "DataSource", "Platform", "Identity", "Platform", undefined, undefined, undefined, undefined), opts$1);
   Pulumi.all([
@@ -190,7 +118,6 @@ function make(api, pluginReadModelTableName, opts) {
 }
 
 export {
-  makeHandlerCode,
   resolverCode,
   make,
 }

package/src/adapter/Api/Platform_ComponentDefinitions_Lambda_Ops.res

@@ -0,0 +1,86 @@
+// Runtime handler for the `Platform_ComponentDefinitions` admin GraphQL resolver
+// — compiled, type-checked ReScript (replaces the inline JS `makeHandlerCode`
+// string in Platform_ComponentDefinitions_Lambda.res). Runtime-pure (see
+// Platform_AdminScan_Ops); the deploy-time module bundles this into an
+// EntryPoint archive and re-exports `handler`.
+//
+// Scans the Plugin read model for Connected plugins carrying a `structure`,
+// collapses to the highest version per plugin name, re-applies the
+// `isPublicQueryable` filter (the persisted structure is PRE-filter — it still
+// carries Internal ReadModels / StateViewSlices for developer tooling), and
+// prepends the built-in Platform_Admin entry. The persisted structure is
+// sury-encoded with the same shape as the in-memory adapter's
+// encodePluginStructureEntry, so it is wrapped with `pluginId` without decoding.
+
+@val @scope("process") external processEnv: dict<string> = "env"
+
+let str = (item: dict<JSON.t>, key: string): option<string> =>
+  item->Dict.get(key)->Option.flatMap(JSON.Decode.string)
+
+// Mirror ReventlessCore.Platform_ComponentDefinitionsApi.isPublicQueryable on
+// the read path: a component is public unless its visibility is "Internal".
+let isPublicQueryable = (q: JSON.t): bool =>
+  switch q->JSON.Decode.object->Option.flatMap(o => o->Dict.get("visibility"))->Option.flatMap(JSON.Decode.string) {
+  | Some("Internal") => false
+  | _ => true
+  }
+
+// Drop Internal ReadModels / StateViewSlices from a persisted structure. A
+// missing/non-array field defaults to `[]` (mirrors the JS `?? []`).
+let filterStructure = (structure: JSON.t): option<dict<JSON.t>> =>
+  switch structure->JSON.Decode.object {
+  | None => None
+  | Some(obj) =>
+    let out = Dict.fromArray(obj->Dict.toArray)
+    let filterArr = key =>
+      out
+      ->Dict.get(key)
+      ->Option.flatMap(JSON.Decode.array)
+      ->Option.getOr([])
+      ->Array.filter(isPublicQueryable)
+      ->JSON.Encode.array
+    out->Dict.set("readModels", filterArr("readModels"))
+    out->Dict.set("stateViewSlices", filterArr("stateViewSlices"))
+    Some(out)
+  }
+
+// `{pluginId: name, ...filterStructure(structure)}` — pluginId first so the
+// structure's fields win on the (never-expected) key collision, matching the JS
+// spread. Drops a row with no decodable structure (former `!item.structure`).
+let toEntry = (item: dict<JSON.t>, ~name: string): option<JSON.t> =>
+  switch item->Dict.get("structure")->Option.flatMap(filterStructure) {
+  | None => None
+  | Some(structureObj) =>
+    let entry = Dict.make()
+    entry->Dict.set("pluginId", JSON.Encode.string(name))
+    structureObj->Dict.toArray->Array.forEach(((k, v)) => entry->Dict.set(k, v))
+    Some(JSON.Encode.object(entry))
+  }
+
+// The built-in Platform_Admin entry, injected at deploy time as the
+// ADMIN_ENTRY_JSON env var (the admin never Connects to itself, so its structure
+// never enters the Plugin read model).
+let adminEntry: option<JSON.t> =
+  switch processEnv->Dict.get("ADMIN_ENTRY_JSON") {
+  | Some(s) if s != "" => Some(JSON.parseOrThrow(s))
+  | _ => None
+  }
+
+let handler = async (_event: JSON.t): array<JSON.t> => {
+  let admin = adminEntry->Option.mapOr([], e => [e])
+  switch processEnv->Dict.get("PLUGIN_RM_TABLE") {
+  | None | Some("") =>
+    Console.error("Platform_ComponentDefinitions: PLUGIN_RM_TABLE env var not set")
+    admin
+  | Some(table) =>
+    let items = await Platform_AdminScan_Ops.scanAll(
+      ~tableName=table,
+      ~filterExpression="contains(#status, :connected)",
+      ~expressionAttributeNames=Dict.fromArray([("#status", "status")]),
+      ~expressionAttributeValues=Dict.fromArray([(":connected", JSON.Encode.string("Connected"))]),
+    )
+    let userEntries =
+      Platform_AdminScan_Ops.latestByName(items, ~nameVersionOf=item => item->str("name"), ~toEntry)
+    Array.concat(admin, userEntries)
+  }
+}

package/src/adapter/Api/Platform_ComponentDefinitions_Lambda_Ops.res.mjs

@@ -0,0 +1,79 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Stdlib_JSON from "@rescript/runtime/lib/es6/Stdlib_JSON.js";
+import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+import * as Platform_AdminScan_Ops$ReventlessAws from "./Platform_AdminScan_Ops.res.mjs";
+
+function str(item, key) {
+  return Stdlib_Option.flatMap(item[key], Stdlib_JSON.Decode.string);
+}
+
+function isPublicQueryable(q) {
+  let match = Stdlib_Option.flatMap(Stdlib_Option.flatMap(Stdlib_JSON.Decode.object(q), o => o["visibility"]), Stdlib_JSON.Decode.string);
+  if (match !== undefined) {
+    return match !== "Internal";
+  } else {
+    return true;
+  }
+}
+
+function filterStructure(structure) {
+  let obj = Stdlib_JSON.Decode.object(structure);
+  if (obj === undefined) {
+    return;
+  }
+  let out = Object.fromEntries(Object.entries(obj));
+  let filterArr = key => Stdlib_Option.getOr(Stdlib_Option.flatMap(out[key], Stdlib_JSON.Decode.array), []).filter(isPublicQueryable);
+  out["readModels"] = filterArr("readModels");
+  out["stateViewSlices"] = filterArr("stateViewSlices");
+  return out;
+}
+
+function toEntry(item, name) {
+  let structureObj = Stdlib_Option.flatMap(item["structure"], filterStructure);
+  if (structureObj === undefined) {
+    return;
+  }
+  let entry = {};
+  entry["pluginId"] = name;
+  Object.entries(structureObj).forEach(param => {
+    entry[param[0]] = param[1];
+  });
+  return entry;
+}
+
+let s = process.env["ADMIN_ENTRY_JSON"];
+
+let adminEntry = s !== undefined && s !== "" ? JSON.parse(s) : undefined;
+
+async function handler(_event) {
+  let admin = Stdlib_Option.mapOr(adminEntry, [], e => [e]);
+  let table = process.env["PLUGIN_RM_TABLE"];
+  if (table !== undefined) {
+    if (table === "") {
+      console.error("Platform_ComponentDefinitions: PLUGIN_RM_TABLE env var not set");
+      return admin;
+    }
+    let items = await Platform_AdminScan_Ops$ReventlessAws.scanAll(table, "contains(#status, :connected)", Object.fromEntries([[
+        "#status",
+        "status"
+      ]]), Object.fromEntries([[
+        ":connected",
+        "Connected"
+      ]]));
+    let userEntries = Platform_AdminScan_Ops$ReventlessAws.latestByName(items, item => str(item, "name"), toEntry);
+    return admin.concat(userEntries);
+  }
+  console.error("Platform_ComponentDefinitions: PLUGIN_RM_TABLE env var not set");
+  return admin;
+}
+
+export {
+  str,
+  isPublicQueryable,
+  filterStructure,
+  toEntry,
+  adminEntry,
+  handler,
+}
+/* s Not a pure module */

package/src/adapter/Api/Platform_UIFragments_Lambda.res

@@ -8,74 +8,6 @@
 
 open PulumiAws
 
-let makeHandlerCode = (~tableName as _: string): string =>
-  `
-import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
-import { DynamoDBDocumentClient, ScanCommand } from "@aws-sdk/lib-dynamodb";
-
-const client = DynamoDBDocumentClient.from(new DynamoDBClient({}));
-const TABLE = process.env.UI_FRAGMENT_RM_TABLE;
-
-export async function handler() {
-  if (!TABLE) {
-    console.error("Platform_UIFragments: UI_FRAGMENT_RM_TABLE env var not set");
-    return [];
-  }
-  const items = [];
-  let exclusiveStartKey;
-  do {
-    const out = await client.send(new ScanCommand({
-      TableName: TABLE,
-      Limit: 1000,
-      ExclusiveStartKey: exclusiveStartKey,
-    }));
-    if (out.Items) items.push(...out.Items);
-    exclusiveStartKey = out.LastEvaluatedKey;
-  } while (exclusiveStartKey);
-
-  // Platform invariant: one version per plugin at a time, so the UI sees just
-  // the bare plugin name (mirrors ReventlessCore.Plugin.name). The registry is
-  // keyed by bare plugin name (a no-op for the split below), but rows persisted
-  // by the pre-slice registry were keyed name@version — keep the collapse to the
-  // highest version per plugin name (mirrors ReventlessCore.Plugin.compareVersions)
-  // so a mixed table never surfaces duplicate fragments.
-  const cmpVer = (a, b) => {
-    const pa = String(a).replace(/[-+]/g, ".").split(".");
-    const pb = String(b).replace(/[-+]/g, ".").split(".");
-    const len = Math.max(pa.length, pb.length);
-    for (let i = 0; i < len; i++) {
-      const sa = pa[i] ?? "", sb = pb[i] ?? "";
-      const na = Number(sa), nb = Number(sb);
-      const bothNum = sa !== "" && sb !== "" && !Number.isNaN(na) && !Number.isNaN(nb);
-      if (bothNum) { if (na !== nb) return na > nb ? 1 : -1; }
-      else if (sa !== sb) return sa > sb ? 1 : -1;
-    }
-    return 0;
-  };
-  const latestByName = new Map();
-  for (const item of items) {
-    if (!item || !item.pluginId || !item.remoteEntryUrl) continue;
-    const name = String(item.pluginId).split("@")[0];
-    const version = String(item.pluginId).split("@")[1] ?? "";
-    const prev = latestByName.get(name);
-    if (!prev || cmpVer(version, prev.version) > 0) {
-      latestByName.set(name, {
-        version,
-        entry: {
-          pluginId: name,
-          remoteEntryUrl: item.remoteEntryUrl,
-          panels: item.panels || [],
-          pages: item.pages || [],
-          registeredAt: item.registeredAt || "",
-          updatedAt: item.updatedAt || "",
-        },
-      });
-    }
-  }
-  return [...latestByName.values()].map(v => v.entry);
-}
-`
-
 let resolverCode = `
 import { util } from '@aws-appsync/utils';
 export function request(ctx) {
@@ -143,18 +75,16 @@ let make = (
       )
     })
 
-  let archiveContents: dict<Pulumi.Archive.assetOrArchive> = Dict.make()
-  let handlerCodeStub = makeHandlerCode(~tableName="")
-  archiveContents->Dict.set(
-    "index.mjs",
-    Pulumi.Asset.stringAsset(handlerCodeStub)->Pulumi.Archive.assetToAssetOrArchive,
+  // Bundle reventless-aws (the compiled `_Ops` handler lives inside it) and
+  // re-export its `handler`; buildCodeArchive also ships the ESM resolve-hook so
+  // the handler's bare @aws-sdk/* specifiers resolve from the managed runtime.
+  let packageDirs = Dict.fromArray([
+    ("@reventlessdev/reventless-aws", Util_Bundle.resolvePackageRoot("@reventlessdev/reventless-aws")),
+  ])
+  let {code, sourceCodeHash} = Util_Bundle.buildCodeArchive(
+    ~entryPointModule="@reventlessdev/reventless-aws/src/adapter/Api/Platform_UIFragments_Lambda_Ops.res.mjs",
+    ~packageDirs,
   )
-  // ESM self-containment: the handler imports @aws-sdk/* bare specifiers the
-  // nodejs22.x runtime provides only under /var/runtime — unreachable from
-  // /var/task ESM without the resolver hook. Ship the loader + set its env vars.
-  let loaderHash = Util_Bundle.addEsmLoaderAssets(archiveContents)
-  let code = Pulumi.Archive.assetArchive(archiveContents)
-  let sourceCodeHash = Util_Bundle.hashString(handlerCodeStub ++ "\n---\n" ++ loaderHash)
 
   let layers =
     Lambda.reventlessLayerArn

package/src/adapter/Api/Platform_UIFragments_Lambda.res.mjs

@@ -13,75 +13,6 @@ import * as Util_Bundle$ReventlessAws from "../../util/Util_Bundle.res.mjs";
 import * as Util_Pulumi$ReventlessCore from "@reventlessdev/reventless-core/src/util/Util_Pulumi.res.mjs";
 import * as AppSync_Resolver_Native$ReventlessAws from "./AppSync_Resolver_Native.res.mjs";
 
-function makeHandlerCode(param) {
-  return `
-import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
-import { DynamoDBDocumentClient, ScanCommand } from "@aws-sdk/lib-dynamodb";
-
-const client = DynamoDBDocumentClient.from(new DynamoDBClient({}));
-const TABLE = process.env.UI_FRAGMENT_RM_TABLE;
-
-export async function handler() {
-  if (!TABLE) {
-    console.error("Platform_UIFragments: UI_FRAGMENT_RM_TABLE env var not set");
-    return [];
-  }
-  const items = [];
-  let exclusiveStartKey;
-  do {
-    const out = await client.send(new ScanCommand({
-      TableName: TABLE,
-      Limit: 1000,
-      ExclusiveStartKey: exclusiveStartKey,
-    }));
-    if (out.Items) items.push(...out.Items);
-    exclusiveStartKey = out.LastEvaluatedKey;
-  } while (exclusiveStartKey);
-
-  // Platform invariant: one version per plugin at a time, so the UI sees just
-  // the bare plugin name (mirrors ReventlessCore.Plugin.name). The registry is
-  // keyed by bare plugin name (a no-op for the split below), but rows persisted
-  // by the pre-slice registry were keyed name@version — keep the collapse to the
-  // highest version per plugin name (mirrors ReventlessCore.Plugin.compareVersions)
-  // so a mixed table never surfaces duplicate fragments.
-  const cmpVer = (a, b) => {
-    const pa = String(a).replace(/[-+]/g, ".").split(".");
-    const pb = String(b).replace(/[-+]/g, ".").split(".");
-    const len = Math.max(pa.length, pb.length);
-    for (let i = 0; i < len; i++) {
-      const sa = pa[i] ?? "", sb = pb[i] ?? "";
-      const na = Number(sa), nb = Number(sb);
-      const bothNum = sa !== "" && sb !== "" && !Number.isNaN(na) && !Number.isNaN(nb);
-      if (bothNum) { if (na !== nb) return na > nb ? 1 : -1; }
-      else if (sa !== sb) return sa > sb ? 1 : -1;
-    }
-    return 0;
-  };
-  const latestByName = new Map();
-  for (const item of items) {
-    if (!item || !item.pluginId || !item.remoteEntryUrl) continue;
-    const name = String(item.pluginId).split("@")[0];
-    const version = String(item.pluginId).split("@")[1] ?? "";
-    const prev = latestByName.get(name);
-    if (!prev || cmpVer(version, prev.version) > 0) {
-      latestByName.set(name, {
-        version,
-        entry: {
-          pluginId: name,
-          remoteEntryUrl: item.remoteEntryUrl,
-          panels: item.panels || [],
-          pages: item.pages || [],
-          registeredAt: item.registeredAt || "",
-          updatedAt: item.updatedAt || "",
-        },
-      });
-    }
-  }
-  return [...latestByName.values()].map(v => v.entry);
-}
-`;
-}
-
 let resolverCode = `
 import { util } from '@aws-appsync/utils';
 export function request(ctx) {
@@ -116,82 +47,16 @@ function make(api, uiFragmentRegistryTableName, schemaReady, opts) {
       role: lambdaRole.id
     }, opts$1);
   });
-  let archiveContents = {};
-  let handlerCodeStub = `
-import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
-import { DynamoDBDocumentClient, ScanCommand } from "@aws-sdk/lib-dynamodb";
-
-const client = DynamoDBDocumentClient.from(new DynamoDBClient({}));
-const TABLE = process.env.UI_FRAGMENT_RM_TABLE;
-
-export async function handler() {
-  if (!TABLE) {
-    console.error("Platform_UIFragments: UI_FRAGMENT_RM_TABLE env var not set");
-    return [];
-  }
-  const items = [];
-  let exclusiveStartKey;
-  do {
-    const out = await client.send(new ScanCommand({
-      TableName: TABLE,
-      Limit: 1000,
-      ExclusiveStartKey: exclusiveStartKey,
-    }));
-    if (out.Items) items.push(...out.Items);
-    exclusiveStartKey = out.LastEvaluatedKey;
-  } while (exclusiveStartKey);
-
-  // Platform invariant: one version per plugin at a time, so the UI sees just
-  // the bare plugin name (mirrors ReventlessCore.Plugin.name). The registry is
-  // keyed by bare plugin name (a no-op for the split below), but rows persisted
-  // by the pre-slice registry were keyed name@version — keep the collapse to the
-  // highest version per plugin name (mirrors ReventlessCore.Plugin.compareVersions)
-  // so a mixed table never surfaces duplicate fragments.
-  const cmpVer = (a, b) => {
-    const pa = String(a).replace(/[-+]/g, ".").split(".");
-    const pb = String(b).replace(/[-+]/g, ".").split(".");
-    const len = Math.max(pa.length, pb.length);
-    for (let i = 0; i < len; i++) {
-      const sa = pa[i] ?? "", sb = pb[i] ?? "";
-      const na = Number(sa), nb = Number(sb);
-      const bothNum = sa !== "" && sb !== "" && !Number.isNaN(na) && !Number.isNaN(nb);
-      if (bothNum) { if (na !== nb) return na > nb ? 1 : -1; }
-      else if (sa !== sb) return sa > sb ? 1 : -1;
-    }
-    return 0;
-  };
-  const latestByName = new Map();
-  for (const item of items) {
-    if (!item || !item.pluginId || !item.remoteEntryUrl) continue;
-    const name = String(item.pluginId).split("@")[0];
-    const version = String(item.pluginId).split("@")[1] ?? "";
-    const prev = latestByName.get(name);
-    if (!prev || cmpVer(version, prev.version) > 0) {
-      latestByName.set(name, {
-        version,
-        entry: {
-          pluginId: name,
-          remoteEntryUrl: item.remoteEntryUrl,
-          panels: item.panels || [],
-          pages: item.pages || [],
-          registeredAt: item.registeredAt || "",
-          updatedAt: item.updatedAt || "",
-        },
-      });
-    }
-  }
-  return [...latestByName.values()].map(v => v.entry);
-}
-`;
-  archiveContents["index.mjs"] = new (Pulumi.asset.StringAsset)(handlerCodeStub);
-  let loaderHash = Util_Bundle$ReventlessAws.addEsmLoaderAssets(archiveContents);
-  let code = new (Pulumi.asset.AssetArchive)(archiveContents);
-  let sourceCodeHash = Util_Bundle$ReventlessAws.hashString(handlerCodeStub + "\n---\n" + loaderHash);
+  let packageDirs = Object.fromEntries([[
+      "@reventlessdev/reventless-aws",
+      Util_Bundle$ReventlessAws.resolvePackageRoot("@reventlessdev/reventless-aws")
+    ]]);
+  let match = Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/Api/Platform_UIFragments_Lambda_Ops.res.mjs", packageDirs, undefined);
   let layers = Stdlib_Option.getOr(Stdlib_Option.map(Lambda$PulumiAws.reventlessLayerArn, arn => [arn]), []);
   let lambda = new (Aws.lambda.Function)(name + "Lambda", {
     handler: "index.handler",
     runtime: "nodejs22.x",
-    code: code,
+    code: match.code,
     role: lambdaRole.arn,
     memorySize: 512,
     timeout: 30,
@@ -217,7 +82,7 @@ export async function handler() {
         ]
       ])
     },
-    sourceCodeHash: sourceCodeHash
+    sourceCodeHash: match.sourceCodeHash
   }, opts$1);
   let dataSourceRole = IAM$PulumiAws.Role.makeWithDefaultPolicy(name + "DataSource", Pulumi.output(AWS$ReventlessAws.AppSync.principal), AWS_Tags$ReventlessAws.make(name + "DataSource", "Platform", "Identity", "Platform", undefined, undefined, undefined, undefined), opts$1);
   Pulumi.all([
@@ -246,7 +111,6 @@ export async function handler() {
 }
 
 export {
-  makeHandlerCode,
   resolverCode,
   make,
 }

package/src/adapter/Api/Platform_UIFragments_Lambda_Ops.res

@@ -0,0 +1,48 @@
+// Runtime handler for the `Platform_UIFragments` admin GraphQL resolver —
+// compiled, type-checked ReScript (replaces the inline JS `makeHandlerCode`
+// string in Platform_UIFragments_Lambda.res). Runtime-pure (see
+// Platform_AdminScan_Ops); the deploy-time module bundles this into an
+// EntryPoint archive and re-exports `handler`.
+//
+// Scans the UiFragments StateViewSlice table (one item per plugin with a
+// registered UI-fragment manifest), collapses to the highest version per plugin
+// name (platform invariant: one version per plugin), and returns the entries.
+// The persisted state is sury-encoded with the same shape the in-memory
+// adapter's Platform_UIFragmentsApi.encodeUIFragmentEntry produces, so rows are
+// returned as-is (bar the name/version collapse).
+
+@val @scope("process") external processEnv: dict<string> = "env"
+
+let str = (item: dict<JSON.t>, key: string): option<string> =>
+  item->Dict.get(key)->Option.flatMap(JSON.Decode.string)
+
+// Build one entry, dropping a row missing pluginId or remoteEntryUrl (mirrors
+// the former `!item.pluginId || !item.remoteEntryUrl` guard). `name` is the bare
+// plugin name; panels/pages/timestamps default like the JS `|| []` / `|| ""`.
+let toEntry = (item: dict<JSON.t>, ~name: string): option<JSON.t> =>
+  switch (item->str("pluginId"), item->str("remoteEntryUrl")) {
+  | (Some(_), Some(remoteEntryUrl)) if remoteEntryUrl != "" =>
+    Some(
+      JSON.Encode.object(
+        Dict.fromArray([
+          ("pluginId", JSON.Encode.string(name)),
+          ("remoteEntryUrl", JSON.Encode.string(remoteEntryUrl)),
+          ("panels", item->Dict.get("panels")->Option.getOr(JSON.Encode.array([]))),
+          ("pages", item->Dict.get("pages")->Option.getOr(JSON.Encode.array([]))),
+          ("registeredAt", item->Dict.get("registeredAt")->Option.getOr(JSON.Encode.string(""))),
+          ("updatedAt", item->Dict.get("updatedAt")->Option.getOr(JSON.Encode.string(""))),
+        ]),
+      ),
+    )
+  | _ => None
+  }
+
+let handler = async (_event: JSON.t): array<JSON.t> =>
+  switch processEnv->Dict.get("UI_FRAGMENT_RM_TABLE") {
+  | None | Some("") =>
+    Console.error("Platform_UIFragments: UI_FRAGMENT_RM_TABLE env var not set")
+    []
+  | Some(table) =>
+    let items = await Platform_AdminScan_Ops.scanAll(~tableName=table)
+    Platform_AdminScan_Ops.latestByName(items, ~nameVersionOf=item => item->str("pluginId"), ~toEntry)
+  }