@reventlessdev/reventless-aws 3.0.0-alpha.231 → 3.0.0-alpha.233

package/src/adapter/Api/Platform_UIFragments_Lambda_Ops.res.mjs

@@ -0,0 +1,63 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Stdlib_JSON from "@rescript/runtime/lib/es6/Stdlib_JSON.js";
+import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+import * as Platform_AdminScan_Ops$ReventlessAws from "./Platform_AdminScan_Ops.res.mjs";
+
+function str(item, key) {
+  return Stdlib_Option.flatMap(item[key], Stdlib_JSON.Decode.string);
+}
+
+function toEntry(item, name) {
+  let match = str(item, "pluginId");
+  let match$1 = str(item, "remoteEntryUrl");
+  if (match !== undefined && match$1 !== undefined && match$1 !== "") {
+    return Object.fromEntries([
+      [
+        "pluginId",
+        name
+      ],
+      [
+        "remoteEntryUrl",
+        match$1
+      ],
+      [
+        "panels",
+        Stdlib_Option.getOr(item["panels"], [])
+      ],
+      [
+        "pages",
+        Stdlib_Option.getOr(item["pages"], [])
+      ],
+      [
+        "registeredAt",
+        Stdlib_Option.getOr(item["registeredAt"], "")
+      ],
+      [
+        "updatedAt",
+        Stdlib_Option.getOr(item["updatedAt"], "")
+      ]
+    ]);
+  }
+}
+
+async function handler(_event) {
+  let table = process.env["UI_FRAGMENT_RM_TABLE"];
+  if (table !== undefined) {
+    if (table === "") {
+      console.error("Platform_UIFragments: UI_FRAGMENT_RM_TABLE env var not set");
+      return [];
+    }
+    let items = await Platform_AdminScan_Ops$ReventlessAws.scanAll(table, undefined, undefined, undefined);
+    return Platform_AdminScan_Ops$ReventlessAws.latestByName(items, item => str(item, "pluginId"), toEntry);
+  }
+  console.error("Platform_UIFragments: UI_FRAGMENT_RM_TABLE env var not set");
+  return [];
+}
+
+export {
+  str,
+  toEntry,
+  handler,
+}
+/* Platform_AdminScan_Ops-ReventlessAws Not a pure module */

package/src/adapter/EventLogSubscription/EventLogSubscription_AppSync.res

@@ -15,78 +15,13 @@
 
 open PulumiAws
 
-// ── Handler code ─────────────────────────────────────────────────────────────
-//
-// Receives SNS-via-SQS records (rawMessageDelivery=true → body IS the event JSON).
-// Publishes {position, eventType, payload} to AppSync Events channel.
-
-let makeHandlerCode = (~topicName: string): string => {
-  // Mirrors StateTopic_AppSync.pathSegment: AppSync Events channel segments
-  // allow only [A-Za-z0-9-]. Today's event-log displayNames are bare
-  // PascalCase identifiers (Catalog, Ordering, Plugin) so the rule is a no-op
-  // in practice — kept in lock-step prophylactically so a future displayName
-  // carrying `@/./:` etc. doesn't hit the same silent-drop the Plugins admin
-  // RM did when StateTopic still only normalised underscores.
-  let channelName = topicName->String.replaceRegExp(%re("/[^A-Za-z0-9-]/g"), "-")
-  `
-import { createHmac, createHash } from "node:crypto";
-
-const CHANNEL = "/default/${channelName}";
-const APPSYNC_ENDPOINT = process.env.APPSYNC_ENDPOINT;
-const AWS_REGION = process.env.AWS_REGION ?? "eu-west-1";
-
-function sha256hex(data) {
-  return createHash("sha256").update(typeof data === "string" ? data : JSON.stringify(data)).digest("hex");
-}
-function hmacBuf(key, data) {
-  return createHmac("sha256", key).update(data).digest();
-}
-
-async function signedHeaders(host, path, body) {
-  const accessKeyId = process.env.AWS_ACCESS_KEY_ID;
-  const secretAccessKey = process.env.AWS_SECRET_ACCESS_KEY;
-  const sessionToken = process.env.AWS_SESSION_TOKEN;
-  const now = new Date();
-  const amzDate = now.toISOString().replace(/[:\\-]|\\..../g, "").slice(0, 15) + "Z";
-  const dateStamp = now.toISOString().slice(0, 10).replace(/-/g, "");
-  const headers = { host, "x-amz-date": amzDate, ...(sessionToken ? { "x-amz-security-token": sessionToken } : {}) };
-  const canonH = Object.entries(headers).sort(([a],[b]) => a.localeCompare(b)).map(([k,v]) => \`\${k}:\${v}\\n\`).join("");
-  const signH = Object.keys(headers).sort().join(";");
-  const cr = ["POST", path, "", canonH, signH, sha256hex(body)].join("\\n");
-  const scope = \`\${dateStamp}/\${AWS_REGION}/appsync/aws4_request\`;
-  const sts = ["AWS4-HMAC-SHA256", amzDate, scope, sha256hex(cr)].join("\\n");
-  const kDate = hmacBuf("AWS4" + secretAccessKey, dateStamp);
-  const kSigning = hmacBuf(hmacBuf(hmacBuf(kDate, AWS_REGION), "appsync"), "aws4_request");
-  const sig = createHmac("sha256", kSigning).update(sts).digest("hex");
-  return { ...headers, Authorization: \`AWS4-HMAC-SHA256 Credential=\${accessKeyId}/\${scope}, SignedHeaders=\${signH}, Signature=\${sig}\` };
-}
-
-export async function handler(event) {
-  const url = new URL(APPSYNC_ENDPOINT);
-  for (const record of event.Records) {
-    let body;
-    try {
-      body = JSON.parse(record.body);
-    } catch (e) {
-      console.error("EventLogSubscription: failed to parse record body", record.body, e);
-      continue;
-    }
-    const payload = { position: body.position, eventType: body.eventType, payload: body.data };
-    const reqBody = JSON.stringify({ id: record.messageId, channel: CHANNEL, events: [JSON.stringify(payload)] });
-    const auth = await signedHeaders(url.hostname, "/event", reqBody);
-    const res = await fetch(APPSYNC_ENDPOINT + "/event", {
-      method: "POST",
-      headers: { accept: "application/json, text/javascript", "content-encoding": "amz-1.0", "content-type": "application/json; charset=UTF-8", ...auth },
-      body: reqBody,
-    });
-    if (!res.ok) {
-      const txt = await res.text();
-      console.error("EventLogSubscription publish failed:", res.status, txt);
-    }
-  }
-}
-`
-}
+// AppSync Events channel segments allow only [A-Za-z0-9-]. Today's event-log
+// displayNames are bare PascalCase identifiers (Catalog, Ordering, Plugin) so
+// the rule is a no-op in practice — kept prophylactically so a future displayName
+// carrying `@/./:` etc. doesn't hit a silent-drop. Mirrors
+// AppSyncEventsSigner_Ops.pathSegment (the runtime handler's equivalent).
+let channelNameOf = (topicName: string): string =>
+  topicName->String.replaceRegExp(%re("/[^A-Za-z0-9-]/g"), "-")
 
 // ── Deploy-time resource builder ──────────────────────────────────────────────
 
@@ -224,15 +159,18 @@ let make = (
       )
     })
 
-  // Lambda function — processes SQS records (SNS events) → AppSync Events channel
-  let handlerCode = makeHandlerCode(~topicName)
-  let archiveContents: dict<Pulumi.Archive.assetOrArchive> = Dict.make()
-  archiveContents->Dict.set(
-    "index.mjs",
-    Pulumi.Asset.stringAsset(handlerCode)->Pulumi.Archive.assetToAssetOrArchive,
+  // Lambda function — processes SQS records (SNS events) → AppSync Events channel.
+  // Bundle reventless-aws (the compiled `_Ops` handler + its node:crypto signer
+  // live inside it) and re-export its `handler`; buildCodeArchive ships the ESM
+  // resolve-hook so `@rescript/runtime` resolves from the layer.
+  let channelName = channelNameOf(topicName)
+  let packageDirs = Dict.fromArray([
+    ("@reventlessdev/reventless-aws", Util_Bundle.resolvePackageRoot("@reventlessdev/reventless-aws")),
+  ])
+  let {code, sourceCodeHash} = Util_Bundle.buildCodeArchive(
+    ~entryPointModule="@reventlessdev/reventless-aws/src/adapter/EventLogSubscription/EventLogSubscription_AppSync_Ops.res.mjs",
+    ~packageDirs,
   )
-  let code = Pulumi.Archive.assetArchive(archiveContents)
-  let sourceCodeHash = Util_Bundle.hashString(handlerCode)
 
   let layers =
     Lambda.reventlessLayerArn
@@ -259,6 +197,9 @@ let make = (
           Lambda.Function.variables: Dict.fromArray([
             ("Environment", Pulumi.Pulumi.getStackName()->Pulumi.Input.make),
             ("APPSYNC_ENDPOINT", appsyncEndpoint->Pulumi.Output.asInput),
+            ("EVENT_LOG_CHANNEL", channelName->Pulumi.Input.make),
+            ("NODE_OPTIONS", Util_Bundle.esmLoaderNodeOptions->Pulumi.Input.make),
+            ("ESM_FALLBACK_DIRS", Util_Bundle.esmFallbackDirs->Pulumi.Input.make),
           ]),
         }: Lambda.Function.functionEnvironment
       )->Pulumi.Input.make,

package/src/adapter/EventLogSubscription/EventLogSubscription_AppSync.res.mjs

@@ -16,66 +16,8 @@ import * as AppSync_EventsApi$ReventlessAws from "../Api/AppSync_EventsApi.res.m
 import * as Util_DeadLetterQueue$ReventlessAws from "../../util/Util_DeadLetterQueue.res.mjs";
 import * as Util_EventSourceMapping$ReventlessAws from "../../util/Util_EventSourceMapping.res.mjs";
 
-function makeHandlerCode(topicName) {
-  let channelName = topicName.replace(/[^A-Za-z0-9-]/g, "-");
-  return `
-import { createHmac, createHash } from "node:crypto";
-
-const CHANNEL = "/default/` + channelName + `";
-const APPSYNC_ENDPOINT = process.env.APPSYNC_ENDPOINT;
-const AWS_REGION = process.env.AWS_REGION ?? "eu-west-1";
-
-function sha256hex(data) {
-  return createHash("sha256").update(typeof data === "string" ? data : JSON.stringify(data)).digest("hex");
-}
-function hmacBuf(key, data) {
-  return createHmac("sha256", key).update(data).digest();
-}
-
-async function signedHeaders(host, path, body) {
-  const accessKeyId = process.env.AWS_ACCESS_KEY_ID;
-  const secretAccessKey = process.env.AWS_SECRET_ACCESS_KEY;
-  const sessionToken = process.env.AWS_SESSION_TOKEN;
-  const now = new Date();
-  const amzDate = now.toISOString().replace(/[:\\-]|\\..../g, "").slice(0, 15) + "Z";
-  const dateStamp = now.toISOString().slice(0, 10).replace(/-/g, "");
-  const headers = { host, "x-amz-date": amzDate, ...(sessionToken ? { "x-amz-security-token": sessionToken } : {}) };
-  const canonH = Object.entries(headers).sort(([a],[b]) => a.localeCompare(b)).map(([k,v]) => \`\${k}:\${v}\\n\`).join("");
-  const signH = Object.keys(headers).sort().join(";");
-  const cr = ["POST", path, "", canonH, signH, sha256hex(body)].join("\\n");
-  const scope = \`\${dateStamp}/\${AWS_REGION}/appsync/aws4_request\`;
-  const sts = ["AWS4-HMAC-SHA256", amzDate, scope, sha256hex(cr)].join("\\n");
-  const kDate = hmacBuf("AWS4" + secretAccessKey, dateStamp);
-  const kSigning = hmacBuf(hmacBuf(hmacBuf(kDate, AWS_REGION), "appsync"), "aws4_request");
-  const sig = createHmac("sha256", kSigning).update(sts).digest("hex");
-  return { ...headers, Authorization: \`AWS4-HMAC-SHA256 Credential=\${accessKeyId}/\${scope}, SignedHeaders=\${signH}, Signature=\${sig}\` };
-}
-
-export async function handler(event) {
-  const url = new URL(APPSYNC_ENDPOINT);
-  for (const record of event.Records) {
-    let body;
-    try {
-      body = JSON.parse(record.body);
-    } catch (e) {
-      console.error("EventLogSubscription: failed to parse record body", record.body, e);
-      continue;
-    }
-    const payload = { position: body.position, eventType: body.eventType, payload: body.data };
-    const reqBody = JSON.stringify({ id: record.messageId, channel: CHANNEL, events: [JSON.stringify(payload)] });
-    const auth = await signedHeaders(url.hostname, "/event", reqBody);
-    const res = await fetch(APPSYNC_ENDPOINT + "/event", {
-      method: "POST",
-      headers: { accept: "application/json, text/javascript", "content-encoding": "amz-1.0", "content-type": "application/json; charset=UTF-8", ...auth },
-      body: reqBody,
-    });
-    if (!res.ok) {
-      const txt = await res.text();
-      console.error("EventLogSubscription publish failed:", res.status, txt);
-    }
-  }
-}
-`;
+function channelNameOf(topicName) {
+  return topicName.replace(/[^A-Za-z0-9-]/g, "-");
 }
 
 function make(name, topicName, eventTopicOutputs, eventsApi, opts) {
@@ -142,17 +84,18 @@ function make(name, topicName, eventTopicOutputs, eventsApi, opts) {
       role: lambdaRole.id
     }, opts);
   });
-  let handlerCode = makeHandlerCode(topicName);
-  let archiveContents = {};
-  archiveContents["index.mjs"] = new (Pulumi.asset.StringAsset)(handlerCode);
-  let code = new (Pulumi.asset.AssetArchive)(archiveContents);
-  let sourceCodeHash = Util_Bundle$ReventlessAws.hashString(handlerCode);
+  let channelName = channelNameOf(topicName);
+  let packageDirs = Object.fromEntries([[
+      "@reventlessdev/reventless-aws",
+      Util_Bundle$ReventlessAws.resolvePackageRoot("@reventlessdev/reventless-aws")
+    ]]);
+  let match = Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/EventLogSubscription/EventLogSubscription_AppSync_Ops.res.mjs", packageDirs, undefined);
   let layers = Stdlib_Option.getOr(Stdlib_Option.map(Lambda$PulumiAws.reventlessLayerArn, arn => [arn]), []);
   let appsyncEndpoint = AppSync_EventsApi$ReventlessAws.httpEndpoint(eventsApi);
   let lambda = new (Aws.lambda.Function)(name + "EventLogSubscriber", {
     handler: "index.handler",
     runtime: "nodejs22.x",
-    code: code,
+    code: match.code,
     role: lambdaRole.arn,
     memorySize: 128,
     timeout: 30,
@@ -167,17 +110,29 @@ function make(name, topicName, eventTopicOutputs, eventsApi, opts) {
         [
           "APPSYNC_ENDPOINT",
           appsyncEndpoint
+        ],
+        [
+          "EVENT_LOG_CHANNEL",
+          channelName
+        ],
+        [
+          "NODE_OPTIONS",
+          Util_Bundle$ReventlessAws.esmLoaderNodeOptions
+        ],
+        [
+          "ESM_FALLBACK_DIRS",
+          Util_Bundle$ReventlessAws.esmFallbackDirs
         ]
       ])
     },
-    sourceCodeHash: sourceCodeHash
+    sourceCodeHash: match.sourceCodeHash
   }, opts);
   let lambdaOutput = Pulumi.output(lambda);
   Util_EventSourceMapping$ReventlessAws.subscribeSqs(lambdaOutput, name + "EventLogSubEventSourceMapping", queue, undefined, AWS_Tags$ReventlessAws.make(name + "EventLogSubEventSourceMapping", EventTopic$ReventlessCore.componentType, "EventSourceMapping", undefined, name, undefined, undefined, undefined), opts);
 }
 
 export {
-  makeHandlerCode,
+  channelNameOf,
   make,
 }
 /* @pulumi/aws Not a pure module */

package/src/adapter/EventLogSubscription/EventLogSubscription_AppSync_Ops.res

@@ -0,0 +1,70 @@
+// Runtime handler for the EventLog → AppSync Events subscription relay —
+// compiled, type-checked ReScript (replaces the inline JS `makeHandlerCode`
+// string in EventLogSubscription_AppSync.res). Runtime-pure and SDK-free: it
+// signs with node:crypto via AppSyncEventsSigner_Ops (see the parity test).
+//
+// Triggered by SQS (SNS event-topic fan-in). For each record it parses the SNS
+// body, wraps it as a `{position, eventType, payload}` event, and publishes it
+// to the fixed plugin event-log channel on the AppSync Events API.
+
+@val @scope("process") external processEnv: dict<string> = "env"
+
+// Baked at deploy time: the normalised channel segment for this event log.
+let channel = "/default/" ++ processEnv->Dict.get("EVENT_LOG_CHANNEL")->Option.getOr("")
+let endpoint = processEnv->Dict.get("APPSYNC_ENDPOINT")->Option.getOr("")
+
+// SQS Lambda event (only the fields this handler reads).
+type sqsRecord = {body: string, messageId: string}
+type sqsEvent = {@as("Records") records: array<sqsRecord>}
+
+let processRecord = async (
+  ~record: sqsRecord,
+  ~region: string,
+  ~creds: AppSyncEventsSigner_Ops.creds,
+): unit => {
+  let parsed = try Some(record.body->JSON.parseOrThrow) catch {
+  | _ => None
+  }
+  switch parsed->Option.flatMap(JSON.Decode.object) {
+  | None => Console.error2("EventLogSubscription: failed to parse record body", record.body)
+  | Some(body) =>
+    // Wrap as {position, eventType, payload}; omit fields absent on the source
+    // body (matches the former JS, where `undefined` fields drop from JSON).
+    let payload = Dict.make()
+    body->Dict.get("position")->Option.forEach(v => payload->Dict.set("position", v))
+    body->Dict.get("eventType")->Option.forEach(v => payload->Dict.set("eventType", v))
+    body->Dict.get("data")->Option.forEach(v => payload->Dict.set("payload", v))
+    let reqBody =
+      Dict.fromArray([
+        ("id", JSON.Encode.string(record.messageId)),
+        ("channel", JSON.Encode.string(channel)),
+        ("events", JSON.Encode.array([JSON.Encode.string(payload->JSON.Encode.object->JSON.stringify)])),
+      ])
+      ->JSON.Encode.object
+      ->JSON.stringify
+    let res = await AppSyncEventsSigner_Ops.postEvent(
+      ~endpoint,
+      ~region,
+      ~isoNow=Date.make()->Date.toISOString,
+      ~creds,
+      ~body=reqBody,
+    )
+    if !(res->AppSyncEventsSigner_Ops.responseOk) {
+      let txt = await res->AppSyncEventsSigner_Ops.responseText
+      Console.error3(
+        "EventLogSubscription publish failed:",
+        res->AppSyncEventsSigner_Ops.responseStatus->Int.toString,
+        txt,
+      )
+    }
+  }
+}
+
+let handler = async (event: sqsEvent): unit => {
+  let region = AppSyncEventsSigner_Ops.region()
+  let creds = AppSyncEventsSigner_Ops.envCreds()
+  // Sequential, mirroring the former for-await loop (order + at-least-once).
+  await event.records->Array.reduce(Promise.resolve(), (acc, record) =>
+    acc->Promise.then(_ => processRecord(~record, ~region, ~creds))
+  )
+}

package/src/adapter/EventLogSubscription/EventLogSubscription_AppSync_Ops.res.mjs

@@ -0,0 +1,68 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Stdlib_JSON from "@rescript/runtime/lib/es6/Stdlib_JSON.js";
+import * as Stdlib_Array from "@rescript/runtime/lib/es6/Stdlib_Array.js";
+import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+import * as AppSyncEventsSigner_Ops$ReventlessAws from "../Api/AppSyncEventsSigner_Ops.res.mjs";
+
+let channel = "/default/" + Stdlib_Option.getOr(process.env["EVENT_LOG_CHANNEL"], "");
+
+let endpoint = Stdlib_Option.getOr(process.env["APPSYNC_ENDPOINT"], "");
+
+async function processRecord(record, region, creds) {
+  let parsed;
+  try {
+    parsed = JSON.parse(record.body);
+  } catch (exn) {
+    parsed = undefined;
+  }
+  let body = Stdlib_Option.flatMap(parsed, Stdlib_JSON.Decode.object);
+  if (body !== undefined) {
+    let payload = {};
+    Stdlib_Option.forEach(body["position"], v => {
+      payload["position"] = v;
+    });
+    Stdlib_Option.forEach(body["eventType"], v => {
+      payload["eventType"] = v;
+    });
+    Stdlib_Option.forEach(body["data"], v => {
+      payload["payload"] = v;
+    });
+    let reqBody = JSON.stringify(Object.fromEntries([
+      [
+        "id",
+        record.messageId
+      ],
+      [
+        "channel",
+        channel
+      ],
+      [
+        "events",
+        [JSON.stringify(payload)]
+      ]
+    ]));
+    let res = await AppSyncEventsSigner_Ops$ReventlessAws.postEvent(endpoint, region, new Date().toISOString(), creds, reqBody);
+    if (res.ok) {
+      return;
+    }
+    let txt = await res.text();
+    console.error("EventLogSubscription publish failed:", res.status.toString(), txt);
+    return;
+  }
+  console.error("EventLogSubscription: failed to parse record body", record.body);
+}
+
+async function handler(event) {
+  let region = AppSyncEventsSigner_Ops$ReventlessAws.region();
+  let creds = AppSyncEventsSigner_Ops$ReventlessAws.envCreds();
+  return await Stdlib_Array.reduce(event.Records, Promise.resolve(), (acc, record) => acc.then(() => processRecord(record, region, creds)));
+}
+
+export {
+  channel,
+  endpoint,
+  processRecord,
+  handler,
+}
+/* channel Not a pure module */

package/src/adapter/Postgres/PgChangeFeedRelay_Builder.res

@@ -49,7 +49,7 @@ let make = (
     opts->Option.map(ReventlessCore.Util.Pulumi.ComponentResourceOptions.toCustomResourceOptions)
 
   let {code, sourceCodeHash} = Util_Bundle.buildCodeArchive(
-    ~entryPointModule="@reventlessdev/reventless-aws/src/adapter/Runtime/PgChangeFeedRelayEntryPoint.mjs",
+    ~entryPointModule="@reventlessdev/reventless-aws/src/adapter/Runtime/PgChangeFeedRelayEntryPoint.res.mjs",
     ~packageDirs=Dict.make(),
   )
 

package/src/adapter/Postgres/PgChangeFeedRelay_Builder.res.mjs

@@ -23,7 +23,7 @@ import * as RuntimeEnvironment_Lambda$ReventlessAws from "../Runtime/RuntimeEnvi
 function make(name, logs, securityGroupId, subnetIds, intervalMinutesOpt, opts) {
   let intervalMinutes = intervalMinutesOpt !== undefined ? intervalMinutesOpt : 1;
   let customOpts = Stdlib_Option.map(opts, Util_Pulumi$ReventlessCore.ComponentResourceOptions.toCustomResourceOptions);
-  let match = Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/Runtime/PgChangeFeedRelayEntryPoint.mjs", {}, undefined);
+  let match = Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/Runtime/PgChangeFeedRelayEntryPoint.res.mjs", {}, undefined);
   let logJsonOutputs = logs.map(l => Pulumi.all([
     l.connectionConfig,
     l.targetQueueUrl

package/src/adapter/Postgres/PgMigration_Builder.res

@@ -33,7 +33,7 @@ let make = (
   open PulumiAws
 
   let {code, sourceCodeHash} = Util_Bundle.buildCodeArchive(
-    ~entryPointModule="@reventlessdev/reventless-aws/src/adapter/Runtime/PgMigrationEntryPoint.mjs",
+    ~entryPointModule="@reventlessdev/reventless-aws/src/adapter/Runtime/PgMigrationEntryPoint.res.mjs",
     ~packageDirs=Dict.make(),
   )
 

package/src/adapter/Postgres/PgMigration_Builder.res.mjs

@@ -11,7 +11,7 @@ import * as Util_Bundle$ReventlessAws from "../../util/Util_Bundle.res.mjs";
 import * as RuntimeEnvironment_Lambda$ReventlessAws from "../Runtime/RuntimeEnvironment_Lambda.res.mjs";
 
 function make(name, handlerConfig, secretArn, securityGroupId, subnetIds, opts) {
-  let match = Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/Runtime/PgMigrationEntryPoint.mjs", {}, undefined);
+  let match = Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/Runtime/PgMigrationEntryPoint.res.mjs", {}, undefined);
   let sourceCodeHash = match.sourceCodeHash;
   let envVars = Object.fromEntries([[
       "HANDLER_CONFIG",