@reventlessdev/reventless-aws 3.0.0-alpha.271 → 3.0.0-alpha.272

package/CHANGELOG.md

@@ -3,6 +3,13 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.272 (2026-08-08)
+
+### Bug Fixes
+
+* **aws:** ship the admin structure as a code asset, not an env var ([93bc8a4](https://github.com/ReventlessDev/reventless-core/commit/93bc8a4891b54efeb13b99845a96f990dea6d41c))
+
+
 # 3.0.0-alpha.271 (2026-08-08)
 
 **Note:** Version bump only for package @reventlessdev/reventless-aws

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-aws",
-  "version": "3.0.0-alpha.271",
+  "version": "3.0.0-alpha.272",
   "description": "AWS adapters for Reventless",
   "license": "Apache-2.0",
   "dependencies": {
@@ -11,18 +11,18 @@
     "@aws-sdk/s3-request-presigner": "3.970.0",
     "sury": "11.0.0-alpha.4",
     "uuid": "^13.0.0",
-    "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.4",
     "@reventlessdev/rescript-jest": "1.0.0-alpha.10",
-    "@reventlessdev/rescript-node": "2.0.0-alpha.2",
     "@reventlessdev/rescript-pulumi-aws": "2.4.0-alpha.66",
+    "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.4",
     "@reventlessdev/rescript-effect": "0.1.0-alpha.32",
-    "@reventlessdev/reventless-core": "3.0.0-alpha.216",
-    "@reventlessdev/reventless-interop": "3.0.0-alpha.30",
+    "@reventlessdev/rescript-node": "2.0.0-alpha.2",
+    "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.18",
     "@reventlessdev/rescript-uuid": "2.0.0-alpha.0",
+    "@reventlessdev/reventless-interop": "3.0.0-alpha.30",
     "@reventlessdev/reventless-postgres": "3.0.0-alpha.80",
     "@reventlessdev/reventless-infra": "3.0.0-alpha.128",
-    "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.18",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.102"
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.102",
+    "@reventlessdev/reventless-core": "3.0.0-alpha.216"
   },
   "devDependencies": {
     "rescript": "12.3.0",

package/src/adapter/Api/Platform_ComponentDefinitions_Lambda.res

@@ -115,14 +115,17 @@ let make = (
   // Bundle reventless-aws (the compiled `_Ops` handler lives inside it) and
   // re-export its `handler`; buildCodeArchive also ships the ESM resolve-hook so
   // the handler's bare @aws-sdk/* specifiers resolve from the managed runtime.
-  // The admin entry is passed as an env var (ADMIN_ENTRY_JSON) rather than
-  // interpolated into the source, so the archive hash is stable across deploys.
+  // The admin entry rides the archive as `adminEntry.json` rather than an env var:
+  // it alone encodes to ~3 KB, which together with the other variables exceeds the
+  // 4096-byte UpdateFunctionConfiguration limit. Its content participates in
+  // `sourceCodeHash`, so a change to the admin structure redeploys the code.
   let packageDirs = Dict.fromArray([
     ("@reventlessdev/reventless-aws", Util_Bundle.resolvePackageRoot("@reventlessdev/reventless-aws")),
   ])
   let {code, sourceCodeHash} = Util_Bundle.buildCodeArchive(
     ~entryPointModule="@reventlessdev/reventless-aws/src/adapter/Api/Platform_ComponentDefinitions_Lambda_Ops.res.mjs",
     ~packageDirs,
+    ~extraStringAssets=Dict.fromArray([("adminEntry.json", adminEntryJson)]),
     ~bundleRuntimeExtensions=false,
   )
 
@@ -150,7 +153,6 @@ let make = (
             ("Environment", Pulumi.Pulumi.getStackName()->Pulumi.Input.make),
             ("PLUGIN_RM_TABLE", pluginReadModelTableName->Pulumi.Output.asInput),
             ("OFFLOAD_BUCKET", offloadBucketName->Pulumi.Output.asInput),
-            ("ADMIN_ENTRY_JSON", adminEntryJson->Pulumi.Input.make),
             ("NODE_OPTIONS", Util_Bundle.esmLoaderNodeOptions->Pulumi.Input.make),
             ("ESM_FALLBACK_DIRS", Util_Bundle.esmFallbackDirs->Pulumi.Input.make),
             Util_LambdaLogging.logLevelEntry(),

package/src/adapter/Api/Platform_ComponentDefinitions_Lambda.res.mjs

@@ -75,7 +75,10 @@ function make(api, pluginReadModelTableName, offloadBucketName, schemaReady, opt
       "@reventlessdev/reventless-aws",
       Util_Bundle$ReventlessAws.resolvePackageRoot(undefined, "@reventlessdev/reventless-aws")
     ]]);
-  let match = Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/Api/Platform_ComponentDefinitions_Lambda_Ops.res.mjs", packageDirs, undefined, false);
+  let match = Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/Api/Platform_ComponentDefinitions_Lambda_Ops.res.mjs", packageDirs, Object.fromEntries([[
+      "adminEntry.json",
+      adminEntryJson
+    ]]), false);
   let layers = Stdlib_Option.getOr(Stdlib_Option.map(Lambda$PulumiAws.reventlessLayerArn, arn => [arn]), []);
   let lambda = new (Aws.lambda.Function)(name + "Lambda", {
     handler: "index.handler",
@@ -100,10 +103,6 @@ function make(api, pluginReadModelTableName, offloadBucketName, schemaReady, opt
           "OFFLOAD_BUCKET",
           offloadBucketName
         ],
-        [
-          "ADMIN_ENTRY_JSON",
-          adminEntryJson
-        ],
         [
           "NODE_OPTIONS",
           Util_Bundle$ReventlessAws.esmLoaderNodeOptions

package/src/adapter/Api/Platform_ComponentDefinitions_Lambda_Ops.res

@@ -68,17 +68,26 @@ let toEntryWith = (~filter: bool, item: dict<JSON.t>, ~name: string): option<JSO
 }
 
 
-// The built-in Platform_Admin entry, injected at deploy time as the
-// ADMIN_ENTRY_JSON env var (the admin never Connects to itself, so its structure
-// never enters the Plugin read model).
+// The built-in Platform_Admin entry, written at deploy time as an asset file in
+// the code archive (the admin never Connects to itself, so its structure never
+// enters the Plugin read model). It rides the archive rather than an env var
+// because it alone is ~3 KB and the function's variables must fit AWS's 4096-byte
+// UpdateFunctionConfiguration limit. process.cwd() is /var/task in Lambda, where
+// the archive is extracted.
 //
 // Shared by both fields. The admin structure has no Internal components and no
 // extension points, so its filtered and complete encodings carry the same
 // components; the structure-level fields the complete entry adds are absent from
 // this JSON and resolve to null, which is what `extensionPoints: None` means.
 let adminEntry: option<JSON.t> =
-  switch NodeProcess.env->Dict.get("ADMIN_ENTRY_JSON") {
-  | Some(s) if s != "" => Some(JSON.parseOrThrow(s))
+  try {
+    switch NodePath.join([NodeProcess.cwd(), "adminEntry.json"])
+    ->NodeFs.readFileSync
+    ->JSON.parseOrThrow {
+    | JSON.Null => None
+    | json => Some(json)
+    }
+  } catch {
   | _ => None
   }
 

package/src/adapter/Api/Platform_ComponentDefinitions_Lambda_Ops.res.mjs

@@ -1,6 +1,8 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
+import * as Nodefs from "node:fs";
 import * as S3$AwsSdk from "@reventlessdev/rescript-aws-sdk/src/S3.res.mjs";
+import * as Nodepath from "node:path";
 import * as Stdlib_JSON from "@rescript/runtime/lib/es6/Stdlib_JSON.js";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Offload$Reventless from "@reventlessdev/reventless-spec/src/semantic/Offload.res.mjs";
@@ -50,9 +52,14 @@ function toEntryWith(filter, item, name) {
   return entry;
 }
 
-let s = process.env["ADMIN_ENTRY_JSON"];
+let adminEntry;
 
-let adminEntry = s !== undefined && s !== "" ? JSON.parse(s) : undefined;
+try {
+  let json = JSON.parse(Nodefs.readFileSync(Nodepath.join(process.cwd(), "adminEntry.json"), "utf8"));
+  adminEntry = json === null ? undefined : json;
+} catch (exn) {
+  adminEntry = undefined;
+}
 
 function resolveStructure(fetch, item) {
   let refJson = Stdlib_Option.flatMap(Stdlib_Option.flatMap(item["structure"], Stdlib_JSON.Decode.object), o => o[Offload$Reventless.sentinelKey]);
@@ -112,4 +119,4 @@ export {
   isComplete,
   handler,
 }
-/* s Not a pure module */
+/* adminEntry Not a pure module */