@reventlessdev/reventless-aws 3.0.0-alpha.308 → 3.0.0-alpha.310

package/src/adapter/Runtime/StateViewSliceEntryPoint_Ops.res.mjs

@@ -1,12 +1,12 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
-import * as S from "sury/src/S.res.mjs";
 import * as Stdlib_JSON from "@rescript/runtime/lib/es6/Stdlib_JSON.js";
 import * as Stdlib_Array from "@rescript/runtime/lib/es6/Stdlib_Array.js";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Effect from "effect/Effect";
 import * as Stream from "effect/Stream";
 import * as Primitive_exceptions from "@rescript/runtime/lib/es6/Primitive_exceptions.js";
+import * as Util_Sury$Reventless from "@reventlessdev/reventless-spec/src/util/Util_Sury.res.mjs";
 import * as Projection$ReventlessCore from "@reventlessdev/reventless-core/src/Projection.res.mjs";
 import * as ProjectionEntryPoint_Ops$ReventlessAws from "./ProjectionEntryPoint_Ops.res.mjs";
 import * as StreamRoutedEntryPoint_Ops$ReventlessAws from "./StreamRoutedEntryPoint_Ops.res.mjs";
@@ -68,7 +68,7 @@ function makeJsonEventsHandler(sliceName, eventSchema, project, queryDbOps, subI
     try {
       let match = decodeEnvelope(json);
       return project({
-        event: S.parseJsonOrThrow(match.event, eventSchema),
+        event: Util_Sury$Reventless.fromJson(match.event, eventSchema),
         meta: match.meta,
         recordedAt: match.recordedAt
       });
@@ -102,4 +102,4 @@ export {
   makeJsonEventsHandler,
   makeRegisteredHandler,
 }
-/* S Not a pure module */
+/* effect/Effect Not a pure module */

package/src/util/Util_DeadLetterQueue.res

@@ -113,15 +113,20 @@ let handler = Lambda.Function.make(
   ~opts,
 )
 
-// Second Monitoring provisioning site (§2): the dead-letter mechanism. Role-based
+// Second Monitoring provisioning site: the dead-letter mechanism. Role-based
 // kind, mechanism-agnostic resource — no-op unless a backend is registered.
+let deadLetterResource = Util_Lambda.functionToResource(
+  handler,
+  ~tags=AWS.Tags.make(~name, ~kind=ReventlessCore.ComponentType.Plugin, ~role=DeadLetter, ~scope=Plugin)->Pulumi.Output.fromInput,
+)
+
 ReventlessCore.Monitoring.notify(
   ~kind=DeadLetterSink,
   ~name,
-  ~component=Util_Lambda.functionToResource(
-    handler,
-    ~tags=AWS.Tags.make(~name, ~kind=ReventlessCore.ComponentType.Plugin, ~role=DeadLetter, ~scope=Plugin)->Pulumi.Output.fromInput,
-  ),
+  ~component=deadLetterResource,
+  // This handler is built without a managed group, so its logs are in the one
+  // Lambda auto-creates from the physical name.
+  ~logLocator=Util_LambdaLogging.logLocatorFor(~logGroup=None, ~physicalName=deadLetterResource.name),
 )
 
 let lambda = handler->Pulumi.Output.make

package/src/util/Util_DeadLetterQueue.res.mjs

@@ -85,7 +85,9 @@ let handler = new (Aws.lambda.Function)(name, {
   sourceCodeHash: sourceCodeHash
 }, opts);
 
-Monitoring$ReventlessCore.notify("DeadLetterSink", name, Util_Lambda$ReventlessAws.functionToResource(AWS_Tags$ReventlessAws.make(name, "Plugin", "DeadLetter", "Plugin", undefined, undefined, undefined, undefined), handler));
+let deadLetterResource = Util_Lambda$ReventlessAws.functionToResource(AWS_Tags$ReventlessAws.make(name, "Plugin", "DeadLetter", "Plugin", undefined, undefined, undefined, undefined), handler);
+
+Monitoring$ReventlessCore.notify("DeadLetterSink", name, deadLetterResource, Util_LambdaLogging$ReventlessAws.logLocatorFor(undefined, deadLetterResource.name));
 
 let lambda = Pulumi.output(handler);
 
@@ -177,6 +179,7 @@ export {
   sourceCodeHash,
   layers,
   handler,
+  deadLetterResource,
   lambda,
   esmTags,
   _subscription,

package/src/util/Util_DynamoDb.res

@@ -7,7 +7,12 @@ let log = ReventlessCore.Logger.fromEnv()
 let toResourceInfo: table => Pulumi.Output.t<ReventlessInfra.Adapter.resourceInfo> = ({hashKey, rangeKey}) =>
   (hashKey, rangeKey)
   ->Pulumi.Output.all2
-  ->Pulumi.Output.apply(((hashKey, rangeKey)) => ReventlessInfra.Adapter.StorageKeys({partitionKey: hashKey, sortKey: rangeKey}))
+  ->Pulumi.Output.apply(((hashKey, rangeKey)) => ReventlessInfra.Adapter.StorageKeys({
+    partitionKey: hashKey,
+    // Normalize here: a null reaching the plugin-structure export fails sury's
+    // encode-side validation, which expects `option`'s undefined.
+    sortKey: rangeKey->Nullable.toOption,
+  }))
 
 let toResolvedTableOutput = ({name, id, arn, hashKey, rangeKey}) =>
   (name, id, arn, hashKey, rangeKey)
@@ -17,7 +22,7 @@ let toResolvedTableOutput = ({name, id, arn, hashKey, rangeKey}) =>
     name,
     arn,
     hashKey,
-    rangeKey: ?(rangeKey->Option.map(rangeKey => rangeKey->Nullable.make)),
+    rangeKey: ?(rangeKey->Nullable.toOption->Option.map(Nullable.make)),
   })
 
 let toResource = (~tags=?, {id, name, arn} as table) =>

package/src/util/Util_DynamoDb.res.mjs

@@ -24,7 +24,7 @@ function toResourceInfo(param) {
   ]).apply(param => ({
     TAG: "StorageKeys",
     partitionKey: param[0],
-    sortKey: param[1]
+    sortKey: Primitive_option.fromNullable(param[1])
   }));
 }
 
@@ -40,7 +40,7 @@ function toResolvedTableOutput(param) {
     name: param[0],
     arn: param[2],
     hashKey: param[3],
-    rangeKey: Stdlib_Option.map(param[4], rangeKey => rangeKey)
+    rangeKey: Stdlib_Option.map(Primitive_option.fromNullable(param[4]), prim => prim)
   }));
 }
 

package/src/util/Util_LambdaLogging.res

@@ -124,6 +124,34 @@ let makeManagedLogGroup = (
   )
 }
 
+/** The group Lambda auto-creates for a function it was given no `loggingConfig`
+    for — keyed on the function's PHYSICAL name, suffix and all, which is the
+    whole reason it differs from the managed name above.
+
+    Kept here, beside `logGroupNameFor`, so both naming shapes a Lambda's logs can
+    take live in the one module that owns log-group naming and neither is
+    reconstructed at a call site. */
+let autoCreatedLogGroupNameFor = (~physicalName: string): string =>
+  `/aws/lambda/${physicalName}`
+
+/** Where a function's logs actually land, for a caller that wants to point
+    somebody at them (a monitoring backend stamping an address into an alert).
+
+    Which of the two shapes applies is decided by `makeManagedLogGroup`, from
+    stack configuration, and is invisible to anyone downstream — a consumer that
+    derives the name instead of asking would be right only on the stacks that
+    manage their groups and would send an operator to a group that does not exist
+    on the ones that do not. So the answer comes from the site that took the
+    branch, and the caller passes what it got back from `makeManagedLogGroup`. */
+let logLocatorFor = (
+  ~logGroup: option<Cloudwatch.LogGroup.t>,
+  ~physicalName: Pulumi.Output.t<string>,
+): Pulumi.Output.t<string> =>
+  switch logGroup {
+  | Some(group) => group.name
+  | None => physicalName->Pulumi.Output.map(n => autoCreatedLogGroupNameFor(~physicalName=n))
+  }
+
 // The `loggingConfig` that points a function at the group `makeManagedLogGroup`
 // just created. Reading `logGroup.name` is also what orders the two: Pulumi sees
 // the function depend on the group, so the group exists first and the function

package/src/util/Util_LambdaLogging.res.mjs

@@ -2,6 +2,7 @@
 
 import * as Stdlib_Int from "@rescript/runtime/lib/es6/Stdlib_Int.js";
 import * as Aws from "@pulumi/aws";
+import * as Output$Pulumi from "@reventlessdev/rescript-pulumi-pulumi/src/Output.res.mjs";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Pulumi from "@pulumi/pulumi";
 import * as Primitive_option from "@rescript/runtime/lib/es6/Primitive_option.js";
@@ -54,6 +55,18 @@ function makeManagedLogGroup(name, retentionDaysOverride, tags, opts, param) {
   }, opts !== undefined ? Primitive_option.valFromOption(opts) : undefined));
 }
 
+function autoCreatedLogGroupNameFor(physicalName) {
+  return `/aws/lambda/` + physicalName;
+}
+
+function logLocatorFor(logGroup, physicalName) {
+  if (logGroup !== undefined) {
+    return logGroup.name;
+  } else {
+    return Output$Pulumi.map(physicalName, autoCreatedLogGroupNameFor);
+  }
+}
+
 function loggingConfigFor(logGroup) {
   return Stdlib_Option.map(logGroup, group => ({
     logFormat: "Text",
@@ -67,6 +80,8 @@ export {
   applyLogLevelDefault,
   logGroupNameFor,
   makeManagedLogGroup,
+  autoCreatedLogGroupNameFor,
+  logLocatorFor,
   loggingConfigFor,
 }
 /* @pulumi/aws Not a pure module */

package/tests/AppSync_AdapterTest.res.mjs

@@ -1,6 +1,6 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
-import * as S from "sury/src/S.res.mjs";
+import * as Sury from "sury";
 import * as Stdlib_JsExn from "@rescript/runtime/lib/es6/Stdlib_JsExn.js";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Stdlib_JsError from "@rescript/runtime/lib/es6/Stdlib_JsError.js";
@@ -118,14 +118,14 @@ globalThis.describe("AppSync_Adapter.injectAwsAuth — Stage E2 permission lifti
   });
   let mutationEntry = (fieldNames, fieldPermissions) => ({
     fieldNames: fieldNames,
-    commandSchema: S.unknown,
+    commandSchema: Sury.unknown,
     fieldPermissions: fieldPermissions
   });
   let queryEntry = (single, list, permission) => ({
     singleFieldName: single,
     listFieldName: list,
     returnTypeName: single,
-    stateSchema: S.unknown,
+    stateSchema: Sury.unknown,
     authorization: undefined,
     permission: permission
   });
@@ -261,7 +261,7 @@ globalThis.describe("AppSync_Adapter.injectAwsAuth — Stage E2 permission lifti
     let entry_fieldPermissions = fp;
     let entry = {
       fieldNames: entry_fieldNames,
-      commandSchema: S.unknown,
+      commandSchema: Sury.unknown,
       authorization: entry_authorization,
       fieldPermissions: entry_fieldPermissions
     };
@@ -285,7 +285,7 @@ globalThis.describe("AppSync_Adapter.injectAwsAuth — Stage E2 permission lifti
     let entry_fieldPermissions = fp;
     let entry = {
       fieldNames: entry_fieldNames,
-      commandSchema: S.unknown,
+      commandSchema: Sury.unknown,
       authorization: entry_authorization,
       fieldPermissions: entry_fieldPermissions
     };
@@ -318,7 +318,7 @@ globalThis.describe("AppSync_Adapter.injectAwsAuth — systemCallable dual-auth"
     let entry_systemCallable = true;
     let entry = {
       fieldNames: entry_fieldNames,
-      commandSchema: S.unknown,
+      commandSchema: Sury.unknown,
       fieldPermissions: entry_fieldPermissions,
       systemCallable: entry_systemCallable
     };
@@ -338,7 +338,7 @@ globalThis.describe("AppSync_Adapter.injectAwsAuth — systemCallable dual-auth"
     let entry_systemCallable = true;
     let entry = {
       fieldNames: entry_fieldNames,
-      commandSchema: S.unknown,
+      commandSchema: Sury.unknown,
       fieldPermissions: entry_fieldPermissions,
       systemCallable: entry_systemCallable
     };
@@ -373,7 +373,7 @@ globalThis.describe("AppSync_Adapter.injectAwsAuth — systemCallable dual-auth"
     let entry_systemCallable = false;
     let entry = {
       fieldNames: entry_fieldNames,
-      commandSchema: S.unknown,
+      commandSchema: Sury.unknown,
       fieldPermissions: entry_fieldPermissions,
       systemCallable: entry_systemCallable
     };
@@ -388,7 +388,7 @@ globalThis.describe("AppSync_Adapter.injectAwsAuth — systemCallable dual-auth"
     let iamEntry_systemCallable = true;
     let iamEntry = {
       fieldNames: iamEntry_fieldNames,
-      commandSchema: S.unknown,
+      commandSchema: Sury.unknown,
       fieldPermissions: iamEntry_fieldPermissions,
       systemCallable: iamEntry_systemCallable
     };
@@ -420,7 +420,7 @@ globalThis.describe("AppSync_Adapter.injectAwsAuth — systemCallable dual-auth"
       singleFieldName: "p_Item",
       listFieldName: "p_Items",
       returnTypeName: "p_Item",
-      stateSchema: S.unknown,
+      stateSchema: Sury.unknown,
       authorization: undefined,
       permission: entry_permission,
       systemCallable: entry_systemCallable
@@ -453,7 +453,7 @@ globalThis.describe("AppSync_Adapter.injectAwsAuth — systemCallable dual-auth"
       singleFieldName: "p_Item",
       listFieldName: "p_Items",
       returnTypeName: "p_Item",
-      stateSchema: S.unknown,
+      stateSchema: Sury.unknown,
       authorization: undefined,
       permission: entry_permission,
       systemCallable: entry_systemCallable
@@ -493,7 +493,7 @@ globalThis.describe("AppSync_Adapter — type-level dual-auth", () => {
     singleFieldName: "p_Item",
     listFieldName: "p_Items",
     returnTypeName: "p_Item",
-    stateSchema: S.unknown,
+    stateSchema: Sury.unknown,
     authorization: undefined,
     permission: callableEntry_permission,
     systemCallable: callableEntry_systemCallable
@@ -761,7 +761,7 @@ globalThis.describe("AppSync_Adapter.injectAwsAuth — subscriptions", () => {
   });
   let entry = (fieldNames, fieldPermissions) => ({
     fieldNames: fieldNames,
-    commandSchema: S.unknown,
+    commandSchema: Sury.unknown,
     fieldPermissions: fieldPermissions
   });
   globalThis.test("an unannotated subscription gets the group-less Cognito directive", () => {

package/tests/AutomationSliceEntryPoint_OpsTest.res.mjs

@@ -1,6 +1,6 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
-import * as S from "sury/src/S.res.mjs";
+import * as Sury from "sury";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Effect from "effect/Effect";
 import * as Stream from "effect/Stream";
@@ -246,12 +246,12 @@ globalThis.describe("AutomationSliceEntryPoint_Ops.runSweeps", () => {
   });
 });
 
-let outboundEventSchema = S.union([
-  S.schema(s => ({
+let outboundEventSchema = Sury.union([
+  Sury.$schema(s => ({
     TAG: "OrderPlaced",
-    orderId: s.m(S.string)
+    orderId: s.m(Sury.string)
   })),
-  S.literal("OrderArchived")
+  Sury.literal("OrderArchived")
 ]);
 
 globalThis.describe("AutomationSliceEntryPoint_Ops.makeOutboundJsonEventsHandler", () => {

package/tests/EpInboundTestSlice.res.mjs

@@ -1,15 +1,15 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
-import * as S from "sury/src/S.res.mjs";
+import * as Sury from "sury";
 
-let externalInputSchema = S.schema(s => ({
-  sku: s.m(S.string),
-  currency: s.m(S.string)
+let externalInputSchema = Sury.$schema(s => ({
+  sku: s.m(Sury.string),
+  currency: s.m(Sury.string)
 }));
 
-let commandSchema = S.schema(s => ({
+let commandSchema = Sury.$schema(s => ({
   TAG: "AddThing",
-  thingId: s.m(S.string)
+  thingId: s.m(Sury.string)
 }));
 
 let name = "EpInboundTest";

package/tests/PgChangeFeedRelay_IntegrationTest.res

@@ -239,7 +239,7 @@ switch NodeProcess.env->Dict.get("PG_URL") {
 
       // The relay receives the sury-encoded partition tag exactly as the builder emits it.
       let partitionTagJson =
-        DcbTag.Simple({key: "customerId"})->S.reverseConvertToJsonOrThrow(
+        DcbTag.Simple({key: "customerId"})->Reventless.Util_Sury.toJson(
           Reventless.DcbTag.derivedPartitionTagSchema,
         )
 

package/tests/PgChangeFeedRelay_IntegrationTest.res.mjs

@@ -1,9 +1,9 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
-import * as S from "sury/src/S.res.mjs";
 import * as Stdlib_JSON from "@rescript/runtime/lib/es6/Stdlib_JSON.js";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as DcbTag$Reventless from "@reventlessdev/reventless-spec/src/components/DcbTag.res.mjs";
+import * as Util_Sury$Reventless from "@reventlessdev/reventless-spec/src/util/Util_Sury.res.mjs";
 import * as Message$ReventlessCore from "@reventlessdev/reventless-core/src/Message.res.mjs";
 import * as PgDriver$ReventlessPostgres from "@reventlessdev/reventless-postgres/src/PgDriver.res.mjs";
 import * as PgSchema$ReventlessPostgres from "@reventlessdev/reventless-postgres/src/PgSchema.res.mjs";
@@ -209,7 +209,7 @@ if (url !== undefined) {
           1
         ]]));
       await match[1].append([ev], undefined);
-      let partitionTagJson = S.reverseConvertToJsonOrThrow({
+      let partitionTagJson = Util_Sury$Reventless.toJson({
         TAG: "Simple",
         _0: {
           key: "customerId"

package/tests/PgChangeFeedRelay_RuntimeTest.res

@@ -67,8 +67,8 @@ describe("PgChangeFeedRelay_Runtime partitionTag (B2.3d)", () => {
     let composite =
       Reventless.DcbTag.Composite({keys: ["studentId", "courseId"], seps: [":"]})
     [simple, composite]->Array.forEach(pt => {
-      let wire = pt->S.reverseConvertToJsonOrThrow(Reventless.DcbTag.derivedPartitionTagSchema)
-      let back = wire->S.parseJsonOrThrow(Reventless.DcbTag.derivedPartitionTagSchema)
+      let wire = pt->Reventless.Util_Sury.toJson(Reventless.DcbTag.derivedPartitionTagSchema)
+      let back = wire->Reventless.Util_Sury.fromJson(Reventless.DcbTag.derivedPartitionTagSchema)
       expect(back)->toEqual(pt)
     })
   })

package/tests/PgChangeFeedRelay_RuntimeTest.res.mjs

@@ -1,9 +1,9 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
-import * as S from "sury/src/S.res.mjs";
 import * as Stdlib_JSON from "@rescript/runtime/lib/es6/Stdlib_JSON.js";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as DcbTag$Reventless from "@reventlessdev/reventless-spec/src/components/DcbTag.res.mjs";
+import * as Util_Sury$Reventless from "@reventlessdev/reventless-spec/src/util/Util_Sury.res.mjs";
 import * as PgChangeFeedRelay_Runtime$ReventlessAws from "../src/adapter/Postgres/PgChangeFeedRelay_Runtime.res.mjs";
 
 let sampleEvent_data = Object.fromEntries([[
@@ -122,8 +122,8 @@ globalThis.describe("PgChangeFeedRelay_Runtime partitionTag (B2.3d)", () => {
       },
       composite
     ].forEach(pt => {
-      let wire = S.reverseConvertToJsonOrThrow(pt, DcbTag$Reventless.derivedPartitionTagSchema);
-      let back = S.parseJsonOrThrow(wire, DcbTag$Reventless.derivedPartitionTagSchema);
+      let wire = Util_Sury$Reventless.toJson(pt, DcbTag$Reventless.derivedPartitionTagSchema);
+      let back = Util_Sury$Reventless.fromJson(wire, DcbTag$Reventless.derivedPartitionTagSchema);
       globalThis.expect(back).toEqual(pt);
     });
   });

package/tests/PgPipeline_IntegrationTest.res

@@ -68,7 +68,7 @@ module OrdersMappings = {
 let flatItem = (~id, ~seq, ~service, ~event: OrderSource.event) => {
   let (eventType, data) =
     event
-    ->S.reverseConvertToJsonOrThrow(OrderSource.eventSchema)
+    ->Reventless.Util_Sury.toJson(OrderSource.eventSchema)
     ->Message.splitMessage
   [
     ("id", JSON.Encode.string(id)),

package/tests/PgPipeline_IntegrationTest.res.mjs

@@ -1,11 +1,12 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
-import * as S from "sury/src/S.res.mjs";
+import * as Sury from "sury";
 import * as Stdlib_JSON from "@rescript/runtime/lib/es6/Stdlib_JSON.js";
 import * as Id$Reventless from "@reventlessdev/reventless-spec/src/types/Id.res.mjs";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Effect from "effect/Effect";
 import * as ReadModel$Reventless from "@reventlessdev/reventless-spec/src/components/ReadModel.res.mjs";
+import * as Util_Sury$Reventless from "@reventlessdev/reventless-spec/src/util/Util_Sury.res.mjs";
 import * as Projection$Reventless from "@reventlessdev/reventless-spec/src/types/Projection.res.mjs";
 import * as Message$ReventlessCore from "@reventlessdev/reventless-core/src/Message.res.mjs";
 import * as PgDriver$ReventlessPostgres from "@reventlessdev/reventless-postgres/src/PgDriver.res.mjs";
@@ -18,9 +19,9 @@ import * as EventCollectorChannel_DynamoDbStream_Runtime$ReventlessAws from "../
 
 let name = "Order";
 
-let eventSchema = S.schema(s => ({
+let eventSchema = Sury.$schema(s => ({
   TAG: "OrderPlaced",
-  product: s.m(S.string)
+  product: s.m(Sury.string)
 }));
 
 let OrderSource = {
@@ -33,9 +34,9 @@ let name$1 = "PipelineOrders";
 
 let moduleUrl = "";
 
-let stateSchema = S.schema(s => ({
-  id: s.m(S.string),
-  product: s.m(S.string)
+let stateSchema = Sury.$schema(s => ({
+  id: s.m(Sury.string),
+  product: s.m(Sury.string)
 }));
 
 let config = ReadModel$Reventless.config(undefined, undefined, undefined);
@@ -113,7 +114,7 @@ let OrdersMappings = {
 };
 
 function flatItem(id, seq, service, event) {
-  let match = Message$ReventlessCore.splitMessage(S.reverseConvertToJsonOrThrow(event, eventSchema));
+  let match = Message$ReventlessCore.splitMessage(Util_Sury$Reventless.toJson(event, eventSchema));
   return Object.fromEntries([
     [
       "id",

package/tests/StateViewSliceEntryPoint_OpsTest.res.mjs

@@ -1,6 +1,6 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
-import * as S from "sury/src/S.res.mjs";
+import * as Sury from "sury";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Effect from "effect/Effect";
 import * as Stream from "effect/Stream";
@@ -249,7 +249,7 @@ globalThis.describe("StateViewSliceEntryPoint_Ops.makeJsonEventsHandler", () =>
     }];
   globalThis.test("decodes envelopes, projects, and runs actions against the ops", async () => {
     let saved = [];
-    let handler = StateViewSliceEntryPoint_Ops$ReventlessAws.makeJsonEventsHandler("TestSlice", S.string, project, makeStub(saved), undefined);
+    let handler = StateViewSliceEntryPoint_Ops$ReventlessAws.makeJsonEventsHandler("TestSlice", Sury.string, project, makeStub(saved), undefined);
     let envelope = Object.fromEntries([
       [
         "event",
@@ -277,7 +277,7 @@ globalThis.describe("StateViewSliceEntryPoint_Ops.makeJsonEventsHandler", () =>
   });
   globalThis.test("a decode failure yields no actions and does not wedge the batch", async () => {
     let saved = [];
-    let handler = StateViewSliceEntryPoint_Ops$ReventlessAws.makeJsonEventsHandler("TestSlice", S.string, project, makeStub(saved), undefined);
+    let handler = StateViewSliceEntryPoint_Ops$ReventlessAws.makeJsonEventsHandler("TestSlice", Sury.string, project, makeStub(saved), undefined);
     await Effect.runPromise(handler(Stream.fromIterable([
       42,
       "row-after"

package/tests/Util_DynamoDbTest.res

@@ -0,0 +1,44 @@
+open JestGlobals
+
+// Guards the null a table without a sort key resolves to.
+//
+// Pulumi resolves an absent `rangeKey` to `null`, and ReScript's `option` reads
+// None as undefined — so the null travelled into `resourceInfo` unconverted and
+// the plugin-structure export threw `Expected string | undefined, received null`
+// out of sury's encode-side validation, failing the deploy after it had already
+// applied part of the stack.
+
+let resolve = (output: Pulumi.Output.t<'a>): promise<'a> =>
+  Promise.make((resolve, _) => {
+    let _ = output->Pulumi.Output.apply(value => resolve(value))
+  })
+
+let table = (~rangeKey): PulumiAws.DynamoDb.Table.t => {
+  arn: "arn:aws:dynamodb:eu-west-1:123456789012:table/UiFragments-abc123"->Pulumi.Output.make,
+  name: "UiFragments-abc123"->Pulumi.Output.make,
+  id: "UiFragments-abc123"->Pulumi.Output.make,
+  hashKey: "id"->Pulumi.Output.make,
+  rangeKey: rangeKey->Pulumi.Output.make,
+  streamEnabled: None->Pulumi.Output.make,
+  streamArn: ""->Pulumi.Output.make,
+  streamLabel: ""->Pulumi.Output.make,
+  ttl: {PulumiAws.DynamoDb.Table.attributeName: ""}->Pulumi.Output.make,
+  pointInTimeRecovery: {PulumiAws.DynamoDb.Table.enabled: true}->Pulumi.Output.make,
+}
+
+describe("Util_DynamoDb.toResourceInfo", () => {
+  test("reads a table without a sort key as None", async () => {
+    let resourceInfo = await table(~rangeKey=Nullable.null)->Util_DynamoDb.toResourceInfo->resolve
+    expect(resourceInfo)->toEqual(
+      ReventlessInfra.Adapter.StorageKeys({partitionKey: "id", sortKey: None}),
+    )
+  })
+
+  test("carries a sort key when the table has one", async () => {
+    let resourceInfo =
+      await table(~rangeKey=Nullable.make("seq"))->Util_DynamoDb.toResourceInfo->resolve
+    expect(resourceInfo)->toEqual(
+      ReventlessInfra.Adapter.StorageKeys({partitionKey: "id", sortKey: Some("seq")}),
+    )
+  })
+})

package/tests/Util_DynamoDbTest.res.mjs

@@ -0,0 +1,54 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Pulumi from "@pulumi/pulumi";
+import * as Util_DynamoDb$ReventlessAws from "../src/util/Util_DynamoDb.res.mjs";
+
+function resolve(output) {
+  return new Promise((resolve, param) => {
+    output.apply(value => resolve(value));
+  });
+}
+
+function table(rangeKey) {
+  return {
+    arn: Pulumi.output("arn:aws:dynamodb:eu-west-1:123456789012:table/UiFragments-abc123"),
+    name: Pulumi.output("UiFragments-abc123"),
+    id: Pulumi.output("UiFragments-abc123"),
+    hashKey: Pulumi.output("id"),
+    rangeKey: Pulumi.output(rangeKey),
+    streamEnabled: Pulumi.output(undefined),
+    streamArn: Pulumi.output(""),
+    streamLabel: Pulumi.output(""),
+    ttl: Pulumi.output({
+      attributeName: ""
+    }),
+    pointInTimeRecovery: Pulumi.output({
+      enabled: true
+    })
+  };
+}
+
+globalThis.describe("Util_DynamoDb.toResourceInfo", () => {
+  globalThis.test("reads a table without a sort key as None", async () => {
+    let resourceInfo = await resolve(Util_DynamoDb$ReventlessAws.toResourceInfo(table(null)));
+    globalThis.expect(resourceInfo).toEqual({
+      TAG: "StorageKeys",
+      partitionKey: "id",
+      sortKey: undefined
+    });
+  });
+  globalThis.test("carries a sort key when the table has one", async () => {
+    let resourceInfo = await resolve(Util_DynamoDb$ReventlessAws.toResourceInfo(table("seq")));
+    globalThis.expect(resourceInfo).toEqual({
+      TAG: "StorageKeys",
+      partitionKey: "id",
+      sortKey: "seq"
+    });
+  });
+});
+
+export {
+  resolve,
+  table,
+}
+/*  Not a pure module */

package/tests/Util_LambdaLoggingTest.res

@@ -46,3 +46,30 @@ describe("Util_LambdaLogging.logGroupNameFor", () => {
     expect(nameFor(~name="AllReadModels"))->not_->toBe(autoCreated)
   })
 })
+
+// A Lambda's logs land in one of two differently-shaped groups, and which one is
+// a stack-configuration decision invisible outside this module. Anything that
+// wants to point a human at those logs has to be told which shape applied, so
+// both are pinned here — a consumer deriving one of them would be right on half
+// the estate and send an operator to a nonexistent group on the other half.
+describe("Util_LambdaLogging.autoCreatedLogGroupNameFor", () => {
+  testSync("is the group Lambda makes from the PHYSICAL name, suffix and all", () =>
+    expect(Util_LambdaLogging.autoCreatedLogGroupNameFor(~physicalName="AllReadModels-0287438"))
+    ->toBe("/aws/lambda/AllReadModels-0287438")
+  )
+
+  // The two shapes must not converge: the managed name is chosen from the static
+  // name so it survives a replacement, the auto-created one is not. If these ever
+  // matched, the managed group would be racing the auto-create it exists to avoid.
+  testSync("never equals the managed name for the same unit", () =>
+    expect(
+      Util_LambdaLogging.autoCreatedLogGroupNameFor(~physicalName="AllReadModels-0287438"),
+    )->not_->toBe(
+      Util_LambdaLogging.logGroupNameFor(
+        ~project="online-shop-catalog-aws",
+        ~stack="alpha",
+        ~name="AllReadModels",
+      ),
+    )
+  )
+})

package/tests/Util_LambdaLoggingTest.res.mjs

@@ -27,4 +27,13 @@ globalThis.describe("Util_LambdaLogging.logGroupNameFor", () => {
   });
 });
 
+globalThis.describe("Util_LambdaLogging.autoCreatedLogGroupNameFor", () => {
+  globalThis.test("is the group Lambda makes from the PHYSICAL name, suffix and all", () => {
+    globalThis.expect(Util_LambdaLogging$ReventlessAws.autoCreatedLogGroupNameFor("AllReadModels-0287438")).toBe("/aws/lambda/AllReadModels-0287438");
+  });
+  globalThis.test("never equals the managed name for the same unit", () => {
+    globalThis.expect(Util_LambdaLogging$ReventlessAws.autoCreatedLogGroupNameFor("AllReadModels-0287438")).not.toBe(Util_LambdaLogging$ReventlessAws.logGroupNameFor("online-shop-catalog-aws", "alpha", "AllReadModels"));
+  });
+});
+
 /*  Not a pure module */