@reventlessdev/reventless-aws 3.0.0-alpha.301 → 3.0.0-alpha.303

package/src/adapter/StateTopic/StateTopic_AppSync_Ops.res.mjs

@@ -1,5 +1,6 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
+import * as Stdlib_Dict from "@rescript/runtime/lib/es6/Stdlib_Dict.js";
 import * as Stdlib_JSON from "@rescript/runtime/lib/es6/Stdlib_JSON.js";
 import * as Stdlib_Array from "@rescript/runtime/lib/es6/Stdlib_Array.js";
 import * as Stdlib_JsExn from "@rescript/runtime/lib/es6/Stdlib_JsExn.js";
@@ -7,6 +8,7 @@ import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Stdlib_JsError from "@rescript/runtime/lib/es6/Stdlib_JsError.js";
 import * as Primitive_string from "@rescript/runtime/lib/es6/Primitive_string.js";
 import * as Primitive_exceptions from "@rescript/runtime/lib/es6/Primitive_exceptions.js";
+import * as OwnerScope$Reventless from "@reventlessdev/reventless-spec/src/types/OwnerScope.res.mjs";
 import * as DynamoDb_Util_Helpers$AwsSdk from "@reventlessdev/rescript-aws-sdk/src/DynamoDb_Util_Helpers.res.mjs";
 import * as AppSyncEventsSigner_Ops$ReventlessAws from "../Api/AppSyncEventsSigner_Ops.res.mjs";
 
@@ -22,6 +24,33 @@ let topicMap = obj !== undefined ? Object.fromEntries(Stdlib_Array.filterMap(Obj
     ]);
   })) : ({});
 
+let d = Stdlib_JSON.Decode.object(JSON.parse(Stdlib_Option.getOr(process.env["STATE_RETIRED_MAP"], "{}")));
+
+let retiredMap;
+
+if (d !== undefined) {
+  let out = {};
+  Stdlib_Dict.forEachWithKey(d, (v, k) => Stdlib_Option.forEach(Stdlib_Option.flatMap(Stdlib_JSON.Decode.object(v), o => Stdlib_Option.map(Stdlib_Option.flatMap(o["field"], Stdlib_JSON.Decode.string), field => ({
+    field: field,
+    values: Stdlib_Option.map(Stdlib_Option.flatMap(o["values"], Stdlib_JSON.Decode.array), vs => Stdlib_Array.filterMap(vs, Stdlib_JSON.Decode.string))
+  }))), scope => {
+    out[k] = scope;
+  }));
+  retiredMap = out;
+} else {
+  retiredMap = {};
+}
+
+function tableNameFromEventSourceArn(arn) {
+  let parts = arn.split("/");
+  let match = parts[0];
+  let match$1 = parts[1];
+  let match$2 = parts[2];
+  if (match !== undefined && match$1 !== undefined && match$2 !== undefined && match$2 === "stream" && match.endsWith(":table")) {
+    return match$1;
+  }
+}
+
 function topicRootFromEventSourceArn(arn) {
   let parts = arn.split("/");
   let match = parts[0];
@@ -89,12 +118,16 @@ function pickSortKeyValue(image) {
   }
 }
 
-function makeDescriptor(changeKind, entityKey, image, seq) {
+function makeDescriptor(changeKind, entityKey, image, seq, retiredField, retiredValues) {
   let removed = changeKind === "Removed";
+  let retired = retiredField !== undefined ? !removed && OwnerScope$Reventless.isRetiredValue({
+      field: retiredField,
+      values: retiredValues
+    }, image[retiredField]) : false;
   let descriptor = {};
   descriptor["changeKind"] = changeKind;
   descriptor["id"] = entityKey;
-  if (!removed) {
+  if (!removed && !retired) {
     Stdlib_Option.forEach(pickSortKeyValue(image), v => {
       descriptor["sortKeyValue"] = v;
     });
@@ -102,7 +135,7 @@ function makeDescriptor(changeKind, entityKey, image, seq) {
   Stdlib_Option.forEach(seq, s => {
     descriptor["seq"] = s;
   });
-  if (!removed) {
+  if (!removed && !retired) {
     let encoded = JSON.stringify(image);
     if (encoded.length <= 61440) {
       descriptor["state"] = image;
@@ -127,7 +160,7 @@ async function processRecord(record, region, creds) {
     let entityKey = entityKeyFromRecord(dynamodb);
     let channel = `/default/` + topicRoot + `/` + AppSyncEventsSigner_Ops$ReventlessAws.pathSegment(entityKey);
     let unmarshalled = DynamoDb_Util_Helpers$AwsSdk.unmarshallDict(undefined, image);
-    let descriptor = makeDescriptor(changeKindFor(record.eventName), entityKey, unmarshalled, dynamodb.SequenceNumber);
+    let descriptor = makeDescriptor(changeKindFor(record.eventName), entityKey, unmarshalled, dynamodb.SequenceNumber, Stdlib_Option.map(Stdlib_Option.flatMap(tableNameFromEventSourceArn(record.eventSourceARN), t => retiredMap[t]), scope => scope.field), Stdlib_Option.flatMap(Stdlib_Option.flatMap(tableNameFromEventSourceArn(record.eventSourceARN), t => retiredMap[t]), scope => scope.values));
     let body = JSON.stringify(Object.fromEntries([
       [
         "id",
@@ -193,6 +226,8 @@ let maxStateChars = 61440;
 export {
   endpoint,
   topicMap,
+  retiredMap,
+  tableNameFromEventSourceArn,
   topicRootFromEventSourceArn,
   jsonToString,
   entityKeyFromRecord,

package/src/util/Util_DynamoDbStream.res

@@ -1,13 +1,17 @@
 let toResourceInfo = (table: PulumiAws.DynamoDb.Table.t) =>
   table.streamArn->Pulumi.Output.apply(streamArn => ReventlessInfra.Adapter.StreamSource({sourceUrn: streamArn}))
 
+// The table name rides IN the apply rather than being read with `Output.get` on
+// the failure arm: `get` throws "Cannot call '.get' during update or preview" on
+// every deploy, so the arm meant to name the offending table replaced its own
+// message with that one and hid which resource was missing a stream.
 let streamArnFromDynamoDbTableResource = (resource: ReventlessInfra.Adapter.resource) =>
-  resource.resourceInfo->Pulumi.Output.apply(resourceInfo =>
+  (resource.resourceInfo, resource.name)
+  ->Pulumi.Output.all2
+  ->Pulumi.Output.apply(((resourceInfo, tableName)) =>
     switch resourceInfo {
     | StreamSource({sourceUrn}) => sourceUrn
-    | _ =>
-      let tableName = resource.name->Pulumi.Output.get
-      JsError.throwWithMessage("No streamArn field given for table " ++ tableName)
+    | _ => JsError.throwWithMessage("No streamArn field given for table " ++ tableName)
     }
   )
 
@@ -30,6 +34,13 @@ let toStreamResource = (table: ReventlessInfra.Adapter.resource): ReventlessInfr
     ~id=streamArn,
     ~urn=streamArn,
     ~service=table.name->Pulumi.Output.apply(_ => AWS.DynamoDbStream.service),
+    // Carries the same StreamSource the table resource carries, so asking a
+    // stream resource for its ARN answers instead of throwing. The event-topic
+    // resources a publisher exports are these, and `Upload_Claim_S3` asks
+    // exactly that of resources[0].
+    ~resourceInfo=streamArn->Pulumi.Output.apply(sourceUrn => ReventlessInfra.Adapter.StreamSource({
+      sourceUrn: sourceUrn,
+    })),
     ~resourceType="aws:dynamodb:Stream"->Pulumi.Output.make,
   )
 }

package/src/util/Util_DynamoDbStream.res.mjs

@@ -22,12 +22,19 @@ function toResourceInfo(table) {
 }
 
 function streamArnFromDynamoDbTableResource(resource) {
-  return resource.resourceInfo.apply(resourceInfo => {
-    if (typeof resourceInfo === "object" && resourceInfo.TAG === "StreamSource") {
+  return Pulumi.all([
+    resource.resourceInfo,
+    resource.name
+  ]).apply(param => {
+    let tableName = param[1];
+    let resourceInfo = param[0];
+    if (typeof resourceInfo !== "object") {
+      return Stdlib_JsError.throwWithMessage("No streamArn field given for table " + tableName);
+    } else if (resourceInfo.TAG === "StreamSource") {
       return resourceInfo.sourceUrn;
+    } else {
+      return Stdlib_JsError.throwWithMessage("No streamArn field given for table " + tableName);
     }
-    let tableName = resource.name.get();
-    return Stdlib_JsError.throwWithMessage("No streamArn field given for table " + tableName);
   });
 }
 
@@ -37,7 +44,10 @@ function toResource(tags, table) {
 
 function toStreamResource(table) {
   let streamArn = streamArnFromDynamoDbTableResource(table);
-  return Adapter$ReventlessInfra.make(table.name, streamArn, streamArn, table.name.apply(param => AWS$ReventlessAws.DynamoDbStream.service), undefined, undefined, undefined, Pulumi.output("aws:dynamodb:Stream"), undefined, undefined);
+  return Adapter$ReventlessInfra.make(table.name, streamArn, streamArn, table.name.apply(param => AWS$ReventlessAws.DynamoDbStream.service), streamArn.apply(sourceUrn => ({
+    TAG: "StreamSource",
+    sourceUrn: sourceUrn
+  })), undefined, undefined, Pulumi.output("aws:dynamodb:Stream"), undefined, undefined);
 }
 
 let log = Logger$ReventlessCore.fromEnv();

package/src/util/Util_ShellConfig.res

@@ -9,6 +9,10 @@
 
 module Platform = ReventlessInfra.Platform
 
+// Where a caller acting as a given role discovers from — a group→url map. Named
+// here as the shell reads it, the same way `manifestUrl` is.
+let journeyManifestsKey = "journeyManifestUrls"
+
 // A mode's options, flattened to the wire shape. They are payloads of their arm
 // on the deploy side (so `mapStyle` with the map off cannot be expressed) and
 // flat siblings of `viewModes` on the wire (because that is where the released
@@ -52,12 +56,28 @@ let fields = (
   // decides where the file goes — a passthrough could point the shell at a key
   // nothing writes, and a statically-discovered shell has no admin API behind it
   // to notice.
-  bakedManifest->Option.forEach(bake =>
+  bakedManifest->Option.forEach(bake => {
     out->Dict.set(
       "manifestUrl",
       JSON.Encode.string(ReventlessCore.Platform_BakedManifest.urlForKey(bake.key)),
     )
-  )
+    // Where a caller acting as a given role discovers from, beside the default
+    // rather than instead of it: `manifestUrl` stays the default journey, which
+    // is what a caller matching no declared group gets. Omitted entirely when
+    // nothing is declared, so a single-audience deployment writes the key set it
+    // always did and a shell that has never heard of journeys sees no new key.
+    switch ReventlessCore.Platform_BakedManifest.journeyUrls(~config=bake) {
+    | [] => ()
+    | urls =>
+      out->Dict.set(
+        journeyManifestsKey,
+        urls
+        ->Array.map(((group, url)) => (group, JSON.Encode.string(url)))
+        ->Dict.fromArray
+        ->JSON.Encode.object,
+      )
+    }
+  })
 
   switch viewModes {
   | Some(modes) =>

package/src/util/Util_ShellConfig.res.mjs

@@ -6,6 +6,8 @@ import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Platform$ReventlessInfra from "@reventlessdev/reventless-infra/src/types/Platform.res.mjs";
 import * as Platform_BakedManifest$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_BakedManifest.res.mjs";
 
+let journeyManifestsKey = "journeyManifestUrls";
+
 function modeOptions(mode) {
   if (mode.TAG === "Map") {
     let style = mode._0.style;
@@ -33,6 +35,14 @@ function fields(computed, viewModes, bakedManifest, shellConfig) {
   let out = Object.fromEntries(computed);
   Stdlib_Option.forEach(bakedManifest, bake => {
     out["manifestUrl"] = Platform_BakedManifest$ReventlessCore.urlForKey(bake.key);
+    let urls = Platform_BakedManifest$ReventlessCore.journeyUrls(bake);
+    if (urls.length !== 0) {
+      out[journeyManifestsKey] = Object.fromEntries(urls.map(param => [
+        param[0],
+        param[1]
+      ]));
+      return;
+    }
   });
   if (viewModes !== undefined) {
     out["viewModes"] = viewModes.map(Platform$ReventlessInfra.viewModeToString);
@@ -58,6 +68,7 @@ let Platform;
 
 export {
   Platform,
+  journeyManifestsKey,
   modeOptions,
   fields,
 }

package/tests/PgQueryResolver_LambdaTest.res

@@ -52,6 +52,8 @@ let ops: QueryDb_Adapter.operations = {
   deleteBatch: Obj.magic(0),
 }
 
+let lastRetiredScope: ref<option<Reventless.OwnerScope.retiredScope>> = ref(None)
+
 let pushdowns: PgQueryResolver_Lambda.pushdowns = {
   indexLookup: async (~readModelName as _, field, value) =>
     allItems()->Array.filter(i => fieldEq(i, field, value)),
@@ -63,11 +65,20 @@ let pushdowns: PgQueryResolver_Lambda.pushdowns = {
     ~capability as _,
     ~labelField as _,
     ~ownerScope: option<(string, string)>=?,
+    ~retiredScope: option<Reventless.OwnerScope.retiredScope>=?,
   ) => {
     lastOwnerScope := ownerScope
+    lastRetiredScope := retiredScope
     listPageReturn.contents
   },
-  itemsPage: async (~readModelName as _, ~subIdField as _, ~id, ~argsDict as _, ~ownerScope as _=?) =>
+  itemsPage: async (
+    ~readModelName as _,
+    ~subIdField as _,
+    ~id,
+    ~argsDict as _,
+    ~ownerScope as _=?,
+    ~retiredScope as _=?,
+  ) =>
     // Sentinel echoing the requested id, so the dispatch routing is observable.
     JSON.Encode.object(Dict.fromArray([("itemsFor", JSON.Encode.string(id))])),
   scanAll: async (~readModelName as _) => allItems(),
@@ -82,6 +93,8 @@ let makeBinding = (
   ~authorization=Reventless.Authorization.AllowAnonymous,
   ~subIdField=None,
   ~ownerField=None,
+  ~retiredField=None,
+  ~retiredValues=None,
   (),
 ): PgQueryResolver_Lambda.binding => {
   ops,
@@ -96,6 +109,8 @@ let makeBinding = (
   includeIdParam: true,
   authorization,
   ownerField,
+  retiredField,
+  retiredValues,
 }
 
 let mkPayload = (

package/tests/PgQueryResolver_LambdaTest.res.mjs

@@ -68,6 +68,10 @@ let ops = {
   deleteBatch: 0
 };
 
+let lastRetiredScope = {
+  contents: undefined
+};
+
 async function pushdowns_indexLookup(param, field, value) {
   return Object.values(store).filter(i => fieldEq(i, field, value));
 }
@@ -76,12 +80,13 @@ async function pushdowns_byIds(param, ids) {
   return Stdlib_Array.filterMap(ids, id => store[id]);
 }
 
-async function pushdowns_listPage(param, param$1, param$2, param$3, ownerScope) {
+async function pushdowns_listPage(param, param$1, param$2, param$3, ownerScope, retiredScope) {
   lastOwnerScope.contents = ownerScope;
+  lastRetiredScope.contents = retiredScope;
   return listPageReturn.contents;
 }
 
-async function pushdowns_itemsPage(param, param$1, id, param$2, param$3) {
+async function pushdowns_itemsPage(param, param$1, id, param$2, param$3, param$4) {
   return Object.fromEntries([[
       "itemsFor",
       id
@@ -116,10 +121,12 @@ let capability = {
   sortFields: capability_sortFields
 };
 
-function makeBinding(authorizationOpt, subIdFieldOpt, ownerFieldOpt, param) {
+function makeBinding(authorizationOpt, subIdFieldOpt, ownerFieldOpt, retiredFieldOpt, retiredValuesOpt, param) {
   let authorization = authorizationOpt !== undefined ? authorizationOpt : "AllowAnonymous";
   let subIdField = subIdFieldOpt !== undefined ? Primitive_option.valFromOption(subIdFieldOpt) : undefined;
   let ownerField = ownerFieldOpt !== undefined ? Primitive_option.valFromOption(ownerFieldOpt) : undefined;
+  let retiredField = retiredFieldOpt !== undefined ? Primitive_option.valFromOption(retiredFieldOpt) : undefined;
+  let retiredValues = retiredValuesOpt !== undefined ? Primitive_option.valFromOption(retiredValuesOpt) : undefined;
   return {
     ops: ops,
     pushdowns: pushdowns,
@@ -134,7 +141,9 @@ function makeBinding(authorizationOpt, subIdFieldOpt, ownerFieldOpt, param) {
     labelField: "name",
     includeIdParam: true,
     authorization: authorization,
-    ownerField: ownerField
+    ownerField: ownerField,
+    retiredField: retiredField,
+    retiredValues: retiredValues
   };
 }
 
@@ -177,7 +186,7 @@ function ids(arr) {
 
 globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
   globalThis.test("getById returns the item (id-carrying)", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         "p-2"
       ]]), undefined, undefined));
@@ -185,14 +194,14 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
     globalThis.expect(str(r, "name")).toEqual("Bravo");
   });
   globalThis.test("getById miss → null", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         "absent"
       ]]), undefined, undefined));
     globalThis.expect(r).toBe(null);
   });
   globalThis.test("byIds returns matches, drops missing", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("byIds", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("byIds", undefined, Object.fromEntries([[
         "ids",
         [
           "p-1",
@@ -206,7 +215,7 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
     ]);
   });
   globalThis.test("index routes to indexLookup on the idField", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("index", "byStatus", Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("index", "byStatus", Object.fromEntries([[
         "byStatus",
         "active"
       ]]), undefined, undefined));
@@ -217,13 +226,13 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
   });
   globalThis.test("list with push-down → returns the connection listPage gives", async () => {
     listPageReturn.contents = "PUSHED";
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("list", undefined, undefined, undefined, undefined));
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("list", undefined, undefined, undefined, undefined));
     listPageReturn.contents = undefined;
     globalThis.expect(r).toEqual("PUSHED");
   });
   globalThis.test("list without push-down → falls back to the shared spec", async () => {
     listPageReturn.contents = undefined;
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("list", undefined, undefined, undefined, undefined));
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("list", undefined, undefined, undefined, undefined));
     let edgeIds = Stdlib_Array.filterMap(Stdlib_Option.getOr(Stdlib_Option.flatMap(field(r, "edges"), Stdlib_JSON.Decode.array), []), e => Stdlib_Option.flatMap(field(e, "node"), n => str(n, "id")));
     globalThis.expect(edgeIds).toEqual([
       "p-1",
@@ -232,21 +241,21 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
     ]);
   });
   globalThis.test("items with subId routes to itemsPage (id echoed)", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, "seq", undefined, undefined), undefined, mkPayload("items", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, "seq", undefined, undefined, undefined, undefined), undefined, mkPayload("items", undefined, Object.fromEntries([[
         "id",
         "p-2"
       ]]), undefined, undefined));
     globalThis.expect(str(r, "itemsFor")).toEqual("p-2");
   });
   globalThis.test("items without subId → empty connection", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("items", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("items", undefined, Object.fromEntries([[
         "id",
         "p-2"
       ]]), undefined, undefined));
     globalThis.expect(Stdlib_Option.getOr(Stdlib_Option.flatMap(field(r, "edges"), Stdlib_JSON.Decode.array), []).length).toBe(0);
   });
   globalThis.test("authorization DenyAll → empty shape per kind", async () => {
-    let b = makeBinding("DenyAll", undefined, undefined, undefined);
+    let b = makeBinding("DenyAll", undefined, undefined, undefined, undefined, undefined);
     let single = await PgQueryResolver_Lambda$ReventlessAws.dispatch(b, undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         "p-1"
@@ -265,7 +274,7 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
       TAG: "Deny",
       _0: "nope"
     }));
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         "p-1"
       ]]), undefined, undefined));
@@ -291,7 +300,7 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
       arguments: payload_arguments,
       identity: Identity$Reventless.anonymous
     };
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, payload);
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, payload);
     globalThis.expect(str(r, "id")).toEqual("p-2");
   });
   globalThis.test("resolveOne multi via target index → array", async () => {
@@ -317,7 +326,7 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
       arguments: payload_arguments,
       identity: Identity$Reventless.anonymous
     };
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, payload);
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, payload);
     globalThis.expect(ids(r)).toEqual([
       "p-1",
       "p-3"
@@ -344,14 +353,14 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
       arguments: payload_arguments,
       identity: Identity$Reventless.anonymous
     };
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, payload);
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, payload);
     globalThis.expect(ids(r)).toEqual([
       "p-1",
       "p-3"
     ]);
   });
   globalThis.test("node decodes global id → __typename + item", async () => {
-    PgQueryResolver_Lambda$ReventlessAws.register("Things", makeBinding(undefined, undefined, undefined, undefined));
+    PgQueryResolver_Lambda$ReventlessAws.register("Things", makeBinding(undefined, undefined, undefined, undefined, undefined, undefined));
     PgQueryResolver_Lambda$ReventlessAws.registerNodeType("Thing", "Things");
     let payload_arguments = Object.fromEntries([[
         "id",
@@ -401,7 +410,7 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
     delete: 0,
     deleteBatch: 0
   };
-  let init = makeBinding(undefined, undefined, undefined, undefined);
+  let init = makeBinding(undefined, undefined, undefined, undefined, undefined, undefined);
   let authBinding_pushdowns = init.pushdowns;
   let authBinding_indexes = init.indexes;
   let authBinding_subIdField = init.subIdField;
@@ -410,6 +419,8 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
   let authBinding_includeIdParam = init.includeIdParam;
   let authBinding_authorization = init.authorization;
   let authBinding_ownerField = init.ownerField;
+  let authBinding_retiredField = init.retiredField;
+  let authBinding_retiredValues = init.retiredValues;
   let authBinding = {
     ops: authOps,
     pushdowns: authBinding_pushdowns,
@@ -419,7 +430,9 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
     labelField: authBinding_labelField,
     includeIdParam: authBinding_includeIdParam,
     authorization: authBinding_authorization,
-    ownerField: authBinding_ownerField
+    ownerField: authBinding_ownerField,
+    retiredField: authBinding_retiredField,
+    retiredValues: authBinding_retiredValues
   };
   let lookupAuth = name => {
     if (name === "AuthTable") {
@@ -445,18 +458,18 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
     identity: ident(username, groups)
   });
   globalThis.test("auth index: group member who owns → results", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), lookupAuth, authIndexPayload("alice", ["Owner"]));
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), lookupAuth, authIndexPayload("alice", ["Owner"]));
     globalThis.expect(ids(r)).toEqual([
       "p-1",
       "p-3"
     ]);
   });
   globalThis.test("auth index: group member who does NOT own → empty", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), lookupAuth, authIndexPayload("bob", ["Owner"]));
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), lookupAuth, authIndexPayload("bob", ["Owner"]));
     globalThis.expect(Stdlib_Option.getOr(Stdlib_JSON.Decode.array(r), []).length).toBe(0);
   });
   globalThis.test("auth index: non-member passes through → results", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), lookupAuth, authIndexPayload("bob", []));
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), lookupAuth, authIndexPayload("bob", []));
     globalThis.expect(ids(r)).toEqual([
       "p-1",
       "p-3"
@@ -465,7 +478,7 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
   globalThis.test("unmapped kind throws", async () => {
     let threw;
     try {
-      await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("frobnicate", undefined, undefined, undefined, undefined));
+      await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("frobnicate", undefined, undefined, undefined, undefined));
       threw = false;
     } catch (exn) {
       threw = true;
@@ -476,35 +489,35 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
 
 globalThis.describe("id form — the typed doors take either", () => {
   globalThis.test("getById resolves a Relay global id", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         Api_Ids$ReventlessCore.encode("Thing", "p-2")
       ]]), undefined, undefined));
     globalThis.expect(str(r, "name")).toEqual("Bravo");
   });
   globalThis.test("getById reports the storage key it resolved to", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         Api_Ids$ReventlessCore.encode("Thing", "p-2")
       ]]), undefined, undefined));
     globalThis.expect(str(r, "id")).toEqual("p-2");
   });
   globalThis.test("getById still resolves a plain storage key", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         "p-2"
       ]]), undefined, undefined));
     globalThis.expect(str(r, "name")).toEqual("Bravo");
   });
   globalThis.test("getById on a global id for a row that does not exist is still null", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         Api_Ids$ReventlessCore.encode("Thing", "absent")
       ]]), undefined, undefined));
     globalThis.expect(r).toBe(null);
   });
   globalThis.test("byIds accepts the two forms mixed in one call", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("byIds", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("byIds", undefined, Object.fromEntries([[
         "ids",
         [
           "p-1",
@@ -517,7 +530,7 @@ globalThis.describe("id form — the typed doors take either", () => {
     ]);
   });
   globalThis.test("byIds with every id found does not double-count", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("byIds", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("byIds", undefined, Object.fromEntries([[
         "ids",
         [
           "p-1",
@@ -532,7 +545,7 @@ globalThis.describe("id form — the typed doors take either", () => {
 });
 
 globalThis.describe("owner scoping", () => {
-  let ownedBinding = () => makeBinding(undefined, undefined, "owner", undefined);
+  let ownedBinding = () => makeBinding(undefined, undefined, "owner", undefined, undefined, undefined);
   let shopper = cognito("u-a", ["User"]);
   let listWith = async (binding, identity) => {
     lastOwnerScope.contents = undefined;
@@ -557,7 +570,7 @@ globalThis.describe("owner scoping", () => {
     globalThis.expect(match[1]).toBe(undefined);
   });
   globalThis.test("a view with no owner field is never scoped", async () => {
-    let match = await listWith(makeBinding(undefined, undefined, undefined, undefined), shopper);
+    let match = await listWith(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), shopper);
     globalThis.expect(match[1]).toBe(undefined);
   });
   globalThis.test("an unidentified caller is refused before the push-down runs", async () => {
@@ -620,6 +633,7 @@ export {
   listPageReturn,
   lastOwnerScope,
   ops,
+  lastRetiredScope,
   pushdowns,
   capability,
   makeBinding,