@reventlessdev/reventless-aws 3.0.0-alpha.302 → 3.0.0-alpha.303

package/src/adapter/StateTopic/StateTopic_AppSync.res.mjs

@@ -10,6 +10,8 @@ import * as AWS_Tags$ReventlessAws from "../AWS_Tags.res.mjs";
 import * as QueryDb$ReventlessCore from "@reventlessdev/reventless-core/src/components/QueryDb/QueryDb.res.mjs";
 import * as PolicyDocument$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/PolicyDocument.res.mjs";
 import * as Util_Bundle$ReventlessAws from "../../util/Util_Bundle.res.mjs";
+import * as StateAnnotations$Reventless from "@reventlessdev/reventless-spec/src/components/StateAnnotations.res.mjs";
+import * as Plugin_Helpers$ReventlessCore from "@reventlessdev/reventless-core/src/plugin/component/Plugin_Helpers.res.mjs";
 import * as Util_ReadModel$ReventlessCore from "@reventlessdev/reventless-core/src/util/Util_ReadModel.res.mjs";
 import * as AppSync_EventsApi$ReventlessAws from "../Api/AppSync_EventsApi.res.mjs";
 import * as Util_LambdaLogging$ReventlessAws from "../../util/Util_LambdaLogging.res.mjs";
@@ -18,7 +20,7 @@ import * as StateTopic_AppSync_Helpers$ReventlessAws from "./StateTopic_AppSync_
 
 let registry = {};
 
-function makeForTable(tableName, streamArn, partitionKeyName, topicName, eventsApi, param) {
+function makeForTable(tableName, streamArn, partitionKeyName, topicName, retiredField, retiredValues, eventsApi, param) {
   let checkedTableName = Pulumi.all([
     tableName,
     partitionKeyName
@@ -32,13 +34,15 @@ function makeForTable(tableName, streamArn, partitionKeyName, topicName, eventsA
   registry[key] = entries.concat([{
       tableName: checkedTableName,
       streamArn: streamArn,
-      topicName: topicName
+      topicName: topicName,
+      retiredField: retiredField,
+      retiredValues: retiredValues
     }]);
 }
 
 function make(readModelName, topicName, allQueryDbs, eventsApi, opts) {
   let streamResource = Util_DynamoDbStream$ReventlessAws.findResource(Util_ReadModel$ReventlessCore.queryDbStorageResources(allQueryDbs, readModelName));
-  makeForTable(streamResource.name, Util_DynamoDbStream$ReventlessAws.streamArnFromDynamoDbTableResource(streamResource), Pulumi.output(StateTopic_AppSync_Helpers$ReventlessAws.entityKeyPartitionAttribute), topicName, eventsApi, opts);
+  makeForTable(streamResource.name, Util_DynamoDbStream$ReventlessAws.streamArnFromDynamoDbTableResource(streamResource), Pulumi.output(StateTopic_AppSync_Helpers$ReventlessAws.entityKeyPartitionAttribute), topicName, Stdlib_Option.map(Stdlib_Option.flatMap(Stdlib_Option.flatMap(Plugin_Helpers$ReventlessCore.stateSchemaRegistry[readModelName], StateAnnotations$Reventless.getSpec), spec => spec.retired), r => r.field), Stdlib_Option.flatMap(Stdlib_Option.flatMap(Stdlib_Option.flatMap(Plugin_Helpers$ReventlessCore.stateSchemaRegistry[readModelName], StateAnnotations$Reventless.getSpec), spec => spec.retired), r => r.values), eventsApi, opts);
 }
 
 function finish(eventsApi, opts) {
@@ -94,6 +98,23 @@ function finish(eventsApi, opts) {
     });
     return JSON.stringify(dict);
   });
+  let retiredMapJson = Pulumi.all(entries.map(e => e.tableName)).apply(tableNames => {
+    let dict = {};
+    tableNames.forEach((tableName, i) => {
+      let entry = entries[i];
+      Stdlib_Option.forEach(entry.retiredField, f => {
+        let obj = Object.fromEntries([[
+            "field",
+            f
+          ]]);
+        Stdlib_Option.forEach(entry.retiredValues, vs => {
+          obj["values"] = vs.map(prim => prim);
+        });
+        dict[tableName] = obj;
+      });
+    });
+    return JSON.stringify(dict);
+  });
   let packageDirs = Object.fromEntries([[
       "@reventlessdev/reventless-aws",
       Util_Bundle$ReventlessAws.resolvePackageRoot(undefined, "@reventlessdev/reventless-aws")
@@ -125,6 +146,10 @@ function finish(eventsApi, opts) {
           "STATE_TOPIC_MAP",
           topicMapJson
         ],
+        [
+          "STATE_RETIRED_MAP",
+          retiredMapJson
+        ],
         [
           "NODE_OPTIONS",
           Util_Bundle$ReventlessAws.esmLoaderNodeOptions

package/src/adapter/StateTopic/StateTopic_AppSync_Ops.res

@@ -53,6 +53,55 @@ type event = {@as("Records") records: array<record>}
 
 // ── Per-record derivations (ports of the former inline JS helpers) ───────────
 
+// STATE_RETIRED_MAP: `{ <tableName>: {field, values?} }`, injected at deploy time
+// beside STATE_TOPIC_MAP. This handler runs with no plugin registry in process —
+// there is nothing here that could read a state schema — so the whole predicate
+// has to arrive the same way the topic routing does. A table absent from the map
+// declares no retirement, which is every table until one does.
+//
+// `values` absent is the boolean form. Carried as an object rather than as an
+// encoded string because a `field=Value` convention is a parser this side and a
+// writer the other, and the two drift the first time a state name contains the
+// separator — an argument that only gets stronger now that a lifecycle can name
+// several states.
+let retiredMap: dict<Reventless.OwnerScope.retiredScope> =
+  switch NodeProcess.env
+  ->Dict.get("STATE_RETIRED_MAP")
+  ->Option.getOr("{}")
+  ->JSON.parseOrThrow
+  ->JSON.Decode.object {
+  | Some(d) =>
+    let out = Dict.make()
+    d->Dict.forEachWithKey((v, k) =>
+      v
+      ->JSON.Decode.object
+      ->Option.flatMap(o =>
+        o
+        ->Dict.get("field")
+        ->Option.flatMap(JSON.Decode.string)
+        ->Option.map(field => {
+          Reventless.OwnerScope.field,
+          values: o
+          ->Dict.get("values")
+          ->Option.flatMap(JSON.Decode.array)
+          ->Option.map(vs => vs->Array.filterMap(JSON.Decode.string)),
+        })
+      )
+      ->Option.forEach(scope => out->Dict.set(k, scope))
+    )
+    out
+  | None => Dict.make()
+  }
+
+let tableNameFromEventSourceArn = (arn: string): option<string> => {
+  let parts = arn->String.split("/")
+  switch (parts->Array.get(0), parts->Array.get(1), parts->Array.get(2)) {
+  | (Some(prefix), Some(tableName), Some("stream")) if prefix->String.endsWith(":table") =>
+    Some(tableName)
+  | _ => None
+  }
+}
+
 // Map record.eventSourceARN → topicRoot via STATE_TOPIC_MAP. Stream ARNs look
 // like arn:aws:dynamodb:<region>:<acct>:table/<TableName>/stream/<ts>; split on
 // "/" gives [ "...:table", "<TableName>", "stream", "<ts>" ].
@@ -131,18 +180,34 @@ let makeDescriptor = (
   ~entityKey: string,
   ~image: dict<JSON.t>,
   ~seq: option<string>,
+  ~retiredField: option<string>=?,
+  ~retiredValues: option<array<string>>=?,
 ): JSON.t => {
   let removed = changeKind == "Removed"
+  // A retired row publishes as metadata only, for the reason the other two
+  // implementations do it: this channel reaches every subscriber of the view,
+  // and a payload would deliver the row to the callers the resolvers refuse it
+  // to. `Updated` with no state is the shape an oversized row already takes.
+  // Both forms are the one question `isRetiredValue` answers, so nothing here
+  // branches on which the view declared.
+  let retired = switch retiredField {
+  | Some(field) =>
+    !removed &&
+    {Reventless.OwnerScope.field, values: retiredValues}->Reventless.OwnerScope.isRetiredValue(
+      image->Dict.get(field),
+    )
+  | None => false
+  }
   let descriptor = Dict.make()
   descriptor->Dict.set("changeKind", JSON.Encode.string(changeKind))
   descriptor->Dict.set("id", JSON.Encode.string(entityKey))
-  if !removed {
+  if !removed && !retired {
     pickSortKeyValue(image)->Option.forEach(v =>
       descriptor->Dict.set("sortKeyValue", JSON.Encode.string(v))
     )
   }
   seq->Option.forEach(s => descriptor->Dict.set("seq", JSON.Encode.string(s)))
-  if !removed {
+  if !removed && !retired {
     let state = image->JSON.Encode.object
     let encoded = state->JSON.stringify
     if encoded->String.length <= maxStateChars {
@@ -191,6 +256,12 @@ let processRecord = async (
           ~entityKey,
           ~image=unmarshalled,
           ~seq=dynamodb.sequenceNumber,
+          ~retiredField=?tableNameFromEventSourceArn(record.eventSourceARN)
+          ->Option.flatMap(t => retiredMap->Dict.get(t))
+          ->Option.map(scope => scope.Reventless.OwnerScope.field),
+          ~retiredValues=?tableNameFromEventSourceArn(record.eventSourceARN)
+          ->Option.flatMap(t => retiredMap->Dict.get(t))
+          ->Option.flatMap(scope => scope.Reventless.OwnerScope.values),
         )
         let body =
           Dict.fromArray([

package/src/adapter/StateTopic/StateTopic_AppSync_Ops.res.mjs

@@ -1,5 +1,6 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
+import * as Stdlib_Dict from "@rescript/runtime/lib/es6/Stdlib_Dict.js";
 import * as Stdlib_JSON from "@rescript/runtime/lib/es6/Stdlib_JSON.js";
 import * as Stdlib_Array from "@rescript/runtime/lib/es6/Stdlib_Array.js";
 import * as Stdlib_JsExn from "@rescript/runtime/lib/es6/Stdlib_JsExn.js";
@@ -7,6 +8,7 @@ import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Stdlib_JsError from "@rescript/runtime/lib/es6/Stdlib_JsError.js";
 import * as Primitive_string from "@rescript/runtime/lib/es6/Primitive_string.js";
 import * as Primitive_exceptions from "@rescript/runtime/lib/es6/Primitive_exceptions.js";
+import * as OwnerScope$Reventless from "@reventlessdev/reventless-spec/src/types/OwnerScope.res.mjs";
 import * as DynamoDb_Util_Helpers$AwsSdk from "@reventlessdev/rescript-aws-sdk/src/DynamoDb_Util_Helpers.res.mjs";
 import * as AppSyncEventsSigner_Ops$ReventlessAws from "../Api/AppSyncEventsSigner_Ops.res.mjs";
 
@@ -22,6 +24,33 @@ let topicMap = obj !== undefined ? Object.fromEntries(Stdlib_Array.filterMap(Obj
     ]);
   })) : ({});
 
+let d = Stdlib_JSON.Decode.object(JSON.parse(Stdlib_Option.getOr(process.env["STATE_RETIRED_MAP"], "{}")));
+
+let retiredMap;
+
+if (d !== undefined) {
+  let out = {};
+  Stdlib_Dict.forEachWithKey(d, (v, k) => Stdlib_Option.forEach(Stdlib_Option.flatMap(Stdlib_JSON.Decode.object(v), o => Stdlib_Option.map(Stdlib_Option.flatMap(o["field"], Stdlib_JSON.Decode.string), field => ({
+    field: field,
+    values: Stdlib_Option.map(Stdlib_Option.flatMap(o["values"], Stdlib_JSON.Decode.array), vs => Stdlib_Array.filterMap(vs, Stdlib_JSON.Decode.string))
+  }))), scope => {
+    out[k] = scope;
+  }));
+  retiredMap = out;
+} else {
+  retiredMap = {};
+}
+
+function tableNameFromEventSourceArn(arn) {
+  let parts = arn.split("/");
+  let match = parts[0];
+  let match$1 = parts[1];
+  let match$2 = parts[2];
+  if (match !== undefined && match$1 !== undefined && match$2 !== undefined && match$2 === "stream" && match.endsWith(":table")) {
+    return match$1;
+  }
+}
+
 function topicRootFromEventSourceArn(arn) {
   let parts = arn.split("/");
   let match = parts[0];
@@ -89,12 +118,16 @@ function pickSortKeyValue(image) {
   }
 }
 
-function makeDescriptor(changeKind, entityKey, image, seq) {
+function makeDescriptor(changeKind, entityKey, image, seq, retiredField, retiredValues) {
   let removed = changeKind === "Removed";
+  let retired = retiredField !== undefined ? !removed && OwnerScope$Reventless.isRetiredValue({
+      field: retiredField,
+      values: retiredValues
+    }, image[retiredField]) : false;
   let descriptor = {};
   descriptor["changeKind"] = changeKind;
   descriptor["id"] = entityKey;
-  if (!removed) {
+  if (!removed && !retired) {
     Stdlib_Option.forEach(pickSortKeyValue(image), v => {
       descriptor["sortKeyValue"] = v;
     });
@@ -102,7 +135,7 @@ function makeDescriptor(changeKind, entityKey, image, seq) {
   Stdlib_Option.forEach(seq, s => {
     descriptor["seq"] = s;
   });
-  if (!removed) {
+  if (!removed && !retired) {
     let encoded = JSON.stringify(image);
     if (encoded.length <= 61440) {
       descriptor["state"] = image;
@@ -127,7 +160,7 @@ async function processRecord(record, region, creds) {
     let entityKey = entityKeyFromRecord(dynamodb);
     let channel = `/default/` + topicRoot + `/` + AppSyncEventsSigner_Ops$ReventlessAws.pathSegment(entityKey);
     let unmarshalled = DynamoDb_Util_Helpers$AwsSdk.unmarshallDict(undefined, image);
-    let descriptor = makeDescriptor(changeKindFor(record.eventName), entityKey, unmarshalled, dynamodb.SequenceNumber);
+    let descriptor = makeDescriptor(changeKindFor(record.eventName), entityKey, unmarshalled, dynamodb.SequenceNumber, Stdlib_Option.map(Stdlib_Option.flatMap(tableNameFromEventSourceArn(record.eventSourceARN), t => retiredMap[t]), scope => scope.field), Stdlib_Option.flatMap(Stdlib_Option.flatMap(tableNameFromEventSourceArn(record.eventSourceARN), t => retiredMap[t]), scope => scope.values));
     let body = JSON.stringify(Object.fromEntries([
       [
         "id",
@@ -193,6 +226,8 @@ let maxStateChars = 61440;
 export {
   endpoint,
   topicMap,
+  retiredMap,
+  tableNameFromEventSourceArn,
   topicRootFromEventSourceArn,
   jsonToString,
   entityKeyFromRecord,

package/tests/PgQueryResolver_LambdaTest.res

@@ -52,6 +52,8 @@ let ops: QueryDb_Adapter.operations = {
   deleteBatch: Obj.magic(0),
 }
 
+let lastRetiredScope: ref<option<Reventless.OwnerScope.retiredScope>> = ref(None)
+
 let pushdowns: PgQueryResolver_Lambda.pushdowns = {
   indexLookup: async (~readModelName as _, field, value) =>
     allItems()->Array.filter(i => fieldEq(i, field, value)),
@@ -63,11 +65,20 @@ let pushdowns: PgQueryResolver_Lambda.pushdowns = {
     ~capability as _,
     ~labelField as _,
     ~ownerScope: option<(string, string)>=?,
+    ~retiredScope: option<Reventless.OwnerScope.retiredScope>=?,
   ) => {
     lastOwnerScope := ownerScope
+    lastRetiredScope := retiredScope
     listPageReturn.contents
   },
-  itemsPage: async (~readModelName as _, ~subIdField as _, ~id, ~argsDict as _, ~ownerScope as _=?) =>
+  itemsPage: async (
+    ~readModelName as _,
+    ~subIdField as _,
+    ~id,
+    ~argsDict as _,
+    ~ownerScope as _=?,
+    ~retiredScope as _=?,
+  ) =>
     // Sentinel echoing the requested id, so the dispatch routing is observable.
     JSON.Encode.object(Dict.fromArray([("itemsFor", JSON.Encode.string(id))])),
   scanAll: async (~readModelName as _) => allItems(),
@@ -82,6 +93,8 @@ let makeBinding = (
   ~authorization=Reventless.Authorization.AllowAnonymous,
   ~subIdField=None,
   ~ownerField=None,
+  ~retiredField=None,
+  ~retiredValues=None,
   (),
 ): PgQueryResolver_Lambda.binding => {
   ops,
@@ -96,6 +109,8 @@ let makeBinding = (
   includeIdParam: true,
   authorization,
   ownerField,
+  retiredField,
+  retiredValues,
 }
 
 let mkPayload = (

package/tests/PgQueryResolver_LambdaTest.res.mjs

@@ -68,6 +68,10 @@ let ops = {
   deleteBatch: 0
 };
 
+let lastRetiredScope = {
+  contents: undefined
+};
+
 async function pushdowns_indexLookup(param, field, value) {
   return Object.values(store).filter(i => fieldEq(i, field, value));
 }
@@ -76,12 +80,13 @@ async function pushdowns_byIds(param, ids) {
   return Stdlib_Array.filterMap(ids, id => store[id]);
 }
 
-async function pushdowns_listPage(param, param$1, param$2, param$3, ownerScope) {
+async function pushdowns_listPage(param, param$1, param$2, param$3, ownerScope, retiredScope) {
   lastOwnerScope.contents = ownerScope;
+  lastRetiredScope.contents = retiredScope;
   return listPageReturn.contents;
 }
 
-async function pushdowns_itemsPage(param, param$1, id, param$2, param$3) {
+async function pushdowns_itemsPage(param, param$1, id, param$2, param$3, param$4) {
   return Object.fromEntries([[
       "itemsFor",
       id
@@ -116,10 +121,12 @@ let capability = {
   sortFields: capability_sortFields
 };
 
-function makeBinding(authorizationOpt, subIdFieldOpt, ownerFieldOpt, param) {
+function makeBinding(authorizationOpt, subIdFieldOpt, ownerFieldOpt, retiredFieldOpt, retiredValuesOpt, param) {
   let authorization = authorizationOpt !== undefined ? authorizationOpt : "AllowAnonymous";
   let subIdField = subIdFieldOpt !== undefined ? Primitive_option.valFromOption(subIdFieldOpt) : undefined;
   let ownerField = ownerFieldOpt !== undefined ? Primitive_option.valFromOption(ownerFieldOpt) : undefined;
+  let retiredField = retiredFieldOpt !== undefined ? Primitive_option.valFromOption(retiredFieldOpt) : undefined;
+  let retiredValues = retiredValuesOpt !== undefined ? Primitive_option.valFromOption(retiredValuesOpt) : undefined;
   return {
     ops: ops,
     pushdowns: pushdowns,
@@ -134,7 +141,9 @@ function makeBinding(authorizationOpt, subIdFieldOpt, ownerFieldOpt, param) {
     labelField: "name",
     includeIdParam: true,
     authorization: authorization,
-    ownerField: ownerField
+    ownerField: ownerField,
+    retiredField: retiredField,
+    retiredValues: retiredValues
   };
 }
 
@@ -177,7 +186,7 @@ function ids(arr) {
 
 globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
   globalThis.test("getById returns the item (id-carrying)", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         "p-2"
       ]]), undefined, undefined));
@@ -185,14 +194,14 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
     globalThis.expect(str(r, "name")).toEqual("Bravo");
   });
   globalThis.test("getById miss → null", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         "absent"
       ]]), undefined, undefined));
     globalThis.expect(r).toBe(null);
   });
   globalThis.test("byIds returns matches, drops missing", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("byIds", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("byIds", undefined, Object.fromEntries([[
         "ids",
         [
           "p-1",
@@ -206,7 +215,7 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
     ]);
   });
   globalThis.test("index routes to indexLookup on the idField", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("index", "byStatus", Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("index", "byStatus", Object.fromEntries([[
         "byStatus",
         "active"
       ]]), undefined, undefined));
@@ -217,13 +226,13 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
   });
   globalThis.test("list with push-down → returns the connection listPage gives", async () => {
     listPageReturn.contents = "PUSHED";
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("list", undefined, undefined, undefined, undefined));
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("list", undefined, undefined, undefined, undefined));
     listPageReturn.contents = undefined;
     globalThis.expect(r).toEqual("PUSHED");
   });
   globalThis.test("list without push-down → falls back to the shared spec", async () => {
     listPageReturn.contents = undefined;
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("list", undefined, undefined, undefined, undefined));
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("list", undefined, undefined, undefined, undefined));
     let edgeIds = Stdlib_Array.filterMap(Stdlib_Option.getOr(Stdlib_Option.flatMap(field(r, "edges"), Stdlib_JSON.Decode.array), []), e => Stdlib_Option.flatMap(field(e, "node"), n => str(n, "id")));
     globalThis.expect(edgeIds).toEqual([
       "p-1",
@@ -232,21 +241,21 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
     ]);
   });
   globalThis.test("items with subId routes to itemsPage (id echoed)", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, "seq", undefined, undefined), undefined, mkPayload("items", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, "seq", undefined, undefined, undefined, undefined), undefined, mkPayload("items", undefined, Object.fromEntries([[
         "id",
         "p-2"
       ]]), undefined, undefined));
     globalThis.expect(str(r, "itemsFor")).toEqual("p-2");
   });
   globalThis.test("items without subId → empty connection", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("items", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("items", undefined, Object.fromEntries([[
         "id",
         "p-2"
       ]]), undefined, undefined));
     globalThis.expect(Stdlib_Option.getOr(Stdlib_Option.flatMap(field(r, "edges"), Stdlib_JSON.Decode.array), []).length).toBe(0);
   });
   globalThis.test("authorization DenyAll → empty shape per kind", async () => {
-    let b = makeBinding("DenyAll", undefined, undefined, undefined);
+    let b = makeBinding("DenyAll", undefined, undefined, undefined, undefined, undefined);
     let single = await PgQueryResolver_Lambda$ReventlessAws.dispatch(b, undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         "p-1"
@@ -265,7 +274,7 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
       TAG: "Deny",
       _0: "nope"
     }));
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         "p-1"
       ]]), undefined, undefined));
@@ -291,7 +300,7 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
       arguments: payload_arguments,
       identity: Identity$Reventless.anonymous
     };
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, payload);
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, payload);
     globalThis.expect(str(r, "id")).toEqual("p-2");
   });
   globalThis.test("resolveOne multi via target index → array", async () => {
@@ -317,7 +326,7 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
       arguments: payload_arguments,
       identity: Identity$Reventless.anonymous
     };
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, payload);
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, payload);
     globalThis.expect(ids(r)).toEqual([
       "p-1",
       "p-3"
@@ -344,14 +353,14 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
       arguments: payload_arguments,
       identity: Identity$Reventless.anonymous
     };
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, payload);
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, payload);
     globalThis.expect(ids(r)).toEqual([
       "p-1",
       "p-3"
     ]);
   });
   globalThis.test("node decodes global id → __typename + item", async () => {
-    PgQueryResolver_Lambda$ReventlessAws.register("Things", makeBinding(undefined, undefined, undefined, undefined));
+    PgQueryResolver_Lambda$ReventlessAws.register("Things", makeBinding(undefined, undefined, undefined, undefined, undefined, undefined));
     PgQueryResolver_Lambda$ReventlessAws.registerNodeType("Thing", "Things");
     let payload_arguments = Object.fromEntries([[
         "id",
@@ -401,7 +410,7 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
     delete: 0,
     deleteBatch: 0
   };
-  let init = makeBinding(undefined, undefined, undefined, undefined);
+  let init = makeBinding(undefined, undefined, undefined, undefined, undefined, undefined);
   let authBinding_pushdowns = init.pushdowns;
   let authBinding_indexes = init.indexes;
   let authBinding_subIdField = init.subIdField;
@@ -410,6 +419,8 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
   let authBinding_includeIdParam = init.includeIdParam;
   let authBinding_authorization = init.authorization;
   let authBinding_ownerField = init.ownerField;
+  let authBinding_retiredField = init.retiredField;
+  let authBinding_retiredValues = init.retiredValues;
   let authBinding = {
     ops: authOps,
     pushdowns: authBinding_pushdowns,
@@ -419,7 +430,9 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
     labelField: authBinding_labelField,
     includeIdParam: authBinding_includeIdParam,
     authorization: authBinding_authorization,
-    ownerField: authBinding_ownerField
+    ownerField: authBinding_ownerField,
+    retiredField: authBinding_retiredField,
+    retiredValues: authBinding_retiredValues
   };
   let lookupAuth = name => {
     if (name === "AuthTable") {
@@ -445,18 +458,18 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
     identity: ident(username, groups)
   });
   globalThis.test("auth index: group member who owns → results", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), lookupAuth, authIndexPayload("alice", ["Owner"]));
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), lookupAuth, authIndexPayload("alice", ["Owner"]));
     globalThis.expect(ids(r)).toEqual([
       "p-1",
       "p-3"
     ]);
   });
   globalThis.test("auth index: group member who does NOT own → empty", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), lookupAuth, authIndexPayload("bob", ["Owner"]));
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), lookupAuth, authIndexPayload("bob", ["Owner"]));
     globalThis.expect(Stdlib_Option.getOr(Stdlib_JSON.Decode.array(r), []).length).toBe(0);
   });
   globalThis.test("auth index: non-member passes through → results", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), lookupAuth, authIndexPayload("bob", []));
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), lookupAuth, authIndexPayload("bob", []));
     globalThis.expect(ids(r)).toEqual([
       "p-1",
       "p-3"
@@ -465,7 +478,7 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
   globalThis.test("unmapped kind throws", async () => {
     let threw;
     try {
-      await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("frobnicate", undefined, undefined, undefined, undefined));
+      await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("frobnicate", undefined, undefined, undefined, undefined));
       threw = false;
     } catch (exn) {
       threw = true;
@@ -476,35 +489,35 @@ globalThis.describe("PgQueryResolver_Lambda.dispatch", () => {
 
 globalThis.describe("id form — the typed doors take either", () => {
   globalThis.test("getById resolves a Relay global id", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         Api_Ids$ReventlessCore.encode("Thing", "p-2")
       ]]), undefined, undefined));
     globalThis.expect(str(r, "name")).toEqual("Bravo");
   });
   globalThis.test("getById reports the storage key it resolved to", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         Api_Ids$ReventlessCore.encode("Thing", "p-2")
       ]]), undefined, undefined));
     globalThis.expect(str(r, "id")).toEqual("p-2");
   });
   globalThis.test("getById still resolves a plain storage key", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         "p-2"
       ]]), undefined, undefined));
     globalThis.expect(str(r, "name")).toEqual("Bravo");
   });
   globalThis.test("getById on a global id for a row that does not exist is still null", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("getById", undefined, Object.fromEntries([[
         "id",
         Api_Ids$ReventlessCore.encode("Thing", "absent")
       ]]), undefined, undefined));
     globalThis.expect(r).toBe(null);
   });
   globalThis.test("byIds accepts the two forms mixed in one call", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("byIds", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("byIds", undefined, Object.fromEntries([[
         "ids",
         [
           "p-1",
@@ -517,7 +530,7 @@ globalThis.describe("id form — the typed doors take either", () => {
     ]);
   });
   globalThis.test("byIds with every id found does not double-count", async () => {
-    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined), undefined, mkPayload("byIds", undefined, Object.fromEntries([[
+    let r = await PgQueryResolver_Lambda$ReventlessAws.dispatch(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), undefined, mkPayload("byIds", undefined, Object.fromEntries([[
         "ids",
         [
           "p-1",
@@ -532,7 +545,7 @@ globalThis.describe("id form — the typed doors take either", () => {
 });
 
 globalThis.describe("owner scoping", () => {
-  let ownedBinding = () => makeBinding(undefined, undefined, "owner", undefined);
+  let ownedBinding = () => makeBinding(undefined, undefined, "owner", undefined, undefined, undefined);
   let shopper = cognito("u-a", ["User"]);
   let listWith = async (binding, identity) => {
     lastOwnerScope.contents = undefined;
@@ -557,7 +570,7 @@ globalThis.describe("owner scoping", () => {
     globalThis.expect(match[1]).toBe(undefined);
   });
   globalThis.test("a view with no owner field is never scoped", async () => {
-    let match = await listWith(makeBinding(undefined, undefined, undefined, undefined), shopper);
+    let match = await listWith(makeBinding(undefined, undefined, undefined, undefined, undefined, undefined), shopper);
     globalThis.expect(match[1]).toBe(undefined);
   });
   globalThis.test("an unidentified caller is refused before the push-down runs", async () => {
@@ -620,6 +633,7 @@ export {
   listPageReturn,
   lastOwnerScope,
   ops,
+  lastRetiredScope,
   pushdowns,
   capability,
   makeBinding,