@reventlessdev/reventless-aws 3.0.0-alpha.343 → 3.0.0-alpha.345

package/src/adapter/Runtime/EventMapperEntryPoint_Ops.res

@@ -95,32 +95,26 @@ let makeStreamHandler = (
 // mapper Lambda serves a single target: every source group runs the same
 // handler, attributed `EventMapper(<Target>)`.
 
-let makeHandler = (
-  buildPromise: promise<(StreamRoutedEntryPoint_Ops.streamHandler, string)>,
-) =>
+let makeHandler = (buildPromise: promise<(StreamRoutedEntryPoint_Ops.streamHandler, string)>) =>
   async (event: PulumiAws.Lambda.CallbackFunction.event, context: PulumiAws.Lambda.context) => {
     StreamRoutedEntryPoint_Ops.setRequestId(context.awsRequestId)
     let (streamHandler, comp) = await buildPromise
-    let _ =
-      await StreamRoutedEntryPoint_Ops.groupBySource(event.records)
-      ->Dict.toArray
-      ->Array.map(async ((arn, subRecords)) => {
-        StreamRoutedEntryPoint_Ops.logDebug("processing " ++ arn, {comp: "EventMapperRuntime"})
-        let subEvent: PulumiAws.Lambda.CallbackFunction.event = {records: subRecords}
-        await StreamRoutedEntryPoint_Ops.runEffect(
-          streamHandler(subEvent, context),
-          {
-            correlationId: ?StreamRoutedEntryPoint_Ops.extractMetaField(
-              subRecords,
-              "correlationId",
-            ),
-            causationId: ?StreamRoutedEntryPoint_Ops.extractMetaField(subRecords, "causationId"),
-            comp,
-            timestamp: ?StreamRoutedEntryPoint_Ops.extractSentTimestamp(subRecords),
-            retryCount: StreamRoutedEntryPoint_Ops.extractRetryCount(subRecords),
-          },
-        )
-      })
-      ->Promise.all
+    let _ = await StreamRoutedEntryPoint_Ops.groupBySource(event.records)
+    ->Dict.toArray
+    ->Array.map(async ((arn, subRecords)) => {
+      StreamRoutedEntryPoint_Ops.logDebug("processing " ++ arn, {comp: "EventMapperRuntime"})
+      let subEvent: PulumiAws.Lambda.CallbackFunction.event = {records: subRecords}
+      await StreamRoutedEntryPoint_Ops.runEffect(
+        streamHandler(subEvent, context),
+        {
+          correlationId: ?StreamRoutedEntryPoint_Ops.extractMetaField(subRecords, "correlationId"),
+          causationId: ?StreamRoutedEntryPoint_Ops.extractMetaField(subRecords, "causationId"),
+          comp,
+          timestamp: ?StreamRoutedEntryPoint_Ops.extractSentTimestamp(subRecords),
+          retryCount: StreamRoutedEntryPoint_Ops.extractRetryCount(subRecords),
+        },
+      )
+    })
+    ->Promise.all
     ""
   }

package/src/adapter/Runtime/ExtensionPointEntryPoint_Ops.res

@@ -16,7 +16,6 @@
 // records fix the shapes; scheduler/queryEngine still throw by design (not
 // available in the bundled handler).
 
-
 // ── Shim bindings (HandlerFactoryHelpers.mjs), typed for SQS records ────────
 @module("./HandlerFactoryHelpers.mjs")
 external setRequestId: string => unit = "setRequestId"
@@ -106,10 +105,7 @@ let makeCallbackSpec = (config: handlerConfig): callbackSpec => {
 
 type built = {
   comp: string,
-  sqsHandler: (
-    PulumiAws.SQS.Queue.event,
-    PulumiAws.Lambda.context,
-  ) => Effect.t<unit, string, unit>,
+  sqsHandler: (PulumiAws.SQS.Queue.event, PulumiAws.Lambda.context) => Effect.t<unit, string, unit>,
 }
 
 let makeBuilt = (

package/src/adapter/Runtime/ExtensionPointRuntime_Builder_PerExtensionPoint.res

@@ -45,13 +45,14 @@ let forCommandTopic = (
     publishToAggregatesEnvVars
     ->Dict.toArray
     ->Array.map(((aggName, envVar)) =>
-      `${aggName->JSON.stringifyAny->Option.getOr(`""`)}: ${envVar->JSON.stringifyAny->Option.getOr(`""`)}`
+      `${aggName->JSON.stringifyAny->Option.getOr(`""`)}: ${envVar
+        ->JSON.stringifyAny
+        ->Option.getOr(`""`)}`
     )
     ->Array.join(",")
 
   let handlerConfigJson =
-    queue.id
-    ->Pulumi.Output.apply(queueUrl =>
+    queue.id->Pulumi.Output.apply(queueUrl =>
       `{"specModule":${specModule},"mappingsModule":${mappingsModule},"queueUrl":"${queueUrl}","publishToAggregates":{${publishToAggregatesJson}}}`
     )
   envVars->Dict.set("HANDLER_CONFIG", handlerConfigJson->Pulumi.Output.asInput)

package/src/adapter/Runtime/HeartbeatEntryPoint.res

@@ -7,7 +7,6 @@
 // Pulumi value reaches this module's import graph (deploy-time wiring lives in
 // PluginRuntime_Builder.forPluginHeartbeat).
 
-
 // === Initialize eagerly at module load (Lambda cold start) ===
 
 let epQueueUrl = NodeProcess.env->Dict.get("EP_QUEUE_URL")->Option.getOr("")

package/src/adapter/Runtime/PgChangeFeedRelayEntryPoint.res

@@ -23,7 +23,6 @@
 //                 "kind"?: "classic",          // absent → DCB
 //                 "partitionTag"?: <derivedPartitionTag> } ] }  // DCB only
 
-
 // Structured JSON logging shared by every deployed entry point (HandlerFactoryHelpers).
 type logExtra = {comp?: string}
 @module("./HandlerFactoryHelpers.mjs") @scope("log")
@@ -78,7 +77,10 @@ let relayLog = async (l: relayLogConfig): unit => {
         ~sendBatch,
       )
     }
-    logDebug(`relayed ${count->Int.toString} event(s) for ${l.logName}`, {comp: "PgChangeFeedRelay"})
+    logDebug(
+      `relayed ${count->Int.toString} event(s) for ${l.logName}`,
+      {comp: "PgChangeFeedRelay"},
+    )
   } catch {
   | exn =>
     let msg = exn->JsExn.fromException->Option.flatMap(JsExn.message)->Option.getOr("unknown error")

package/src/adapter/Runtime/PgMigrationEntryPoint.res

@@ -18,7 +18,6 @@
 // HANDLER_CONFIG shape:
 //   { "pgConnection": { host, port, database, username, secretArn } }
 
-
 // Structured JSON logging shared by every deployed entry point (HandlerFactoryHelpers).
 type logExtra = {comp?: string}
 @module("./HandlerFactoryHelpers.mjs") @scope("log")

package/src/adapter/Runtime/PgQueryResolverEntryPoint_Ops.res

@@ -106,7 +106,8 @@ let makePushdowns = (
     byIds: Engine.byIds,
     listPage: Engine.listPage,
     itemsPage: Engine.itemsPage,
-    scanAll: (~readModelName) => Engine.scan(~readModelName, ~filterConfigs=[], ~limit=scanAllLimit),
+    scanAll: (~readModelName) =>
+      Engine.scan(~readModelName, ~filterConfigs=[], ~limit=scanAllLimit),
   }
 }
 
@@ -138,7 +139,7 @@ let registerBinding = (
         pgConnection,
         ~name=entry.readModelName,
         ~indexes,
-        ~subIdField=?subIdField,
+        ~subIdField?,
       ),
       pushdowns,
       indexes,

package/src/adapter/Runtime/PluginExtensionPointEntryPoint.res

@@ -10,7 +10,6 @@
 // binds the Id module at the ReScript level, mirroring ExtensionPoint_Builder.
 // Runtime-pure: no Pulumi value reaches this module's import graph.
 
-
 // ── Shim bindings (HandlerFactoryHelpers.mjs) ───────────────────────────────
 // The structured-log + Effect dispatch boundary shared by every deployed entry
 // point (single place where invocations get their log annotations and
@@ -160,7 +159,7 @@ let commandTopicResources: array<ReventlessInfra.Adapter.resolvedResource> = {
       ]
 }
 
-let invalidNameChars = %re("/[^.\-_a-zA-Z0-9]/g")
+let invalidNameChars = /[^.\-_a-zA-Z0-9]/g
 let resourceNaming: ReventlessInfra.ResourceNaming.operations = {
   validateName: n => n->String.replaceRegExp(invalidNameChars, "_"),
   urnName: arn =>

package/src/adapter/Runtime/ProjectionEntryPoint_Ops.res

@@ -16,7 +16,6 @@
 // Runtime-pure: no `open PulumiAws` values — Pulumi appears in type positions
 // only (erased).
 
-
 // ── Runtime-loaded spec-module reads (typed at the seam) ────────────────────
 // The shells read `config` / `subIdConfig` off dynamically imported spec
 // modules; these are the shapes those reads are typed against. `indexes` is
@@ -28,9 +27,9 @@ type specConfig = {indexes?: array<Reventless.ReadModel.indexConfig>}
 let indexesOf = (config: option<specConfig>): array<Reventless.ReadModel.indexConfig> =>
   config->Option.flatMap(c => c.indexes)->Option.getOr([])
 
-let subIdFieldOf = (
-  subIdConfig: option<Reventless.ReadModel.subIdConfig<JSON.t>>,
-): option<string> => subIdConfig->Option.map(c => c.subIdField)
+let subIdFieldOf = (subIdConfig: option<Reventless.ReadModel.subIdConfig<JSON.t>>): option<
+  string,
+> => subIdConfig->Option.map(c => c.subIdField)
 
 // ── QueryDb operations (DynamoDB / Postgres backend branch) ─────────────────
 // `pgConnection`, when present, selects the Postgres QueryDb runtime for the
@@ -143,7 +142,7 @@ let makeQueryDbOps = (
       endpoint: ?(NodeProcess.env->Dict.get("APPSYNC_ENDPOINT")),
       region: ?(NodeProcess.env->Dict.get("AWS_REGION")),
       topicName: ?stateTopicName,
-      subIdField: ?subIdField,
+      ?subIdField,
     })
   | None => QueryDbEntryPoint_Ops.makeDynamoQueryDbOps(~tableName=queryDbTableName)
   }

package/src/adapter/Runtime/RuntimeEnvironment_Lambda.res

@@ -48,7 +48,12 @@ let make: ReventlessCore.Runtime.environmentMaker<'event, context, 'result, part
 
   // The environmentMaker signature carries no component kind, so callers cannot
   // pass one through; attributed to the Platform rather than to an invented kind.
-  let tags = AWS.Tags.make(~name, ~kind=ReventlessCore.ComponentType.Platform, ~role=Runtime, ~scope=Platform)
+  let tags = AWS.Tags.make(
+    ~name,
+    ~kind=ReventlessCore.ComponentType.Platform,
+    ~role=Runtime,
+    ~scope=Platform,
+  )
 
   let lambdaRole = IAM.Role.makeWithDefaultPolicy(
     ~name,
@@ -85,7 +90,9 @@ let make: ReventlessCore.Runtime.environmentMaker<'event, context, 'result, part
     parts: {lambda: lambdaAsFunction, lambdaRole},
     resources: [
       lambdaAsFunction
-      ->Pulumi.Output.apply(lambda => lambda->Util.Lambda.toResource(~tags=tags->Pulumi.Output.fromInput))
+      ->Pulumi.Output.apply(lambda =>
+        lambda->Util.Lambda.toResource(~tags=tags->Pulumi.Output.fromInput)
+      )
       ->ReventlessCore.Adapter.outputToResource,
       Util_IAM_Role.toResource(lambdaRole),
     ],
@@ -264,8 +271,10 @@ let makeFromCodeAsset: (
   // UpdateFunctionConfiguration limit. Absent entirely when nothing is
   // registered — an extension-free deployment gets the env it always had.
   if !ReventlessCore.RuntimeExtension.isEmpty() {
-    let {ReventlessCore.ResourceAttribution.plugin: plugin, platform} =
-      ReventlessCore.ResourceAttribution.current.contents
+    let {
+      ReventlessCore.ResourceAttribution.plugin: plugin,
+      platform,
+    } = ReventlessCore.ResourceAttribution.current.contents
     let orNull = o => o->Option.mapOr(JSON.Null, s => JSON.String(s))
     let config = JSON.Object(
       Dict.fromArray([
@@ -313,15 +322,18 @@ let makeFromCodeAsset: (
       role: lambdaRole.arn->Pulumi.Output.asInput,
       memorySize: memorySize->Pulumi.Input.make,
       timeout: timeout->Pulumi.Input.make,
-      reservedConcurrentExecutions: ?reservedConcurrency->Option.map(Pulumi.Input.make),
-      ephemeralStorage: ?ephemeralStorageMb->Option.map(mb =>
-        ({size: mb->Pulumi.Input.make}: Lambda.Function.ephemeralStorage)->Pulumi.Input.make
+      reservedConcurrentExecutions: ?(reservedConcurrency->Option.map(Pulumi.Input.make)),
+      ephemeralStorage: ?(
+        ephemeralStorageMb->Option.map(mb =>
+          ({size: mb->Pulumi.Input.make}: Lambda.Function.ephemeralStorage)->Pulumi.Input.make
+        )
       ),
       layers,
       tags,
-      vpcConfig: ?vpcConfig,
-      environment: ({Lambda.Function.variables: variables}: Lambda.Function.functionEnvironment)
-        ->Pulumi.Input.make,
+      ?vpcConfig,
+      environment: (
+        {Lambda.Function.variables: variables}: Lambda.Function.functionEnvironment
+      )->Pulumi.Input.make,
       // Points the function at the group above and, by reading its name output,
       // orders the function after it.
       loggingConfig: ?Util_LambdaLogging.loggingConfigFor(logGroup),

package/src/adapter/Runtime/RuntimeExtensionEntryPoint_Ops.res

@@ -59,7 +59,11 @@ let parseConfig = (raw: option<string>): option<config> =>
         ->Option.flatMap(JSON.Decode.array)
         ->Option.getOr([])
         ->Array.filterMap(JSON.Decode.string)
-      switch (modules->Array.length, obj->decodeString("runtimeKind"), obj->decodeString("component")) {
+      switch (
+        modules->Array.length,
+        obj->decodeString("runtimeKind"),
+        obj->decodeString("component"),
+      ) {
       | (0, _, _) => None
       | (_, Some(runtimeKind), Some(component)) =>
         Some({
@@ -100,7 +104,9 @@ let fire = (config: config, hooks: array<ReventlessCore.RuntimeExtension.coldSta
   | Some(runtimeKind) =>
     log.debug(
       ~comp="RuntimeExtension",
-      `firing ${hooks->Array.length->Int.toString} cold-start extension(s) for ${config.runtimeKind}(${config.component})`,
+      `firing ${hooks
+        ->Array.length
+        ->Int.toString} cold-start extension(s) for ${config.runtimeKind}(${config.component})`,
     )
     ReventlessCore.RuntimeExtension.notifyColdStartHooks(
       ~hooks,

package/src/adapter/Runtime/SideEffectHandlerRuntime_Builder_Single.res

@@ -41,21 +41,9 @@ let storedSpecs: array<storedSpec> = []
 let grandParent = ref(None)
 
 let forEventCollector: ReventlessCore.Runtime.forEventCollector<
-  ReventlessCore.Runtime.effectHandler<
-    EventCollectorChannel.callbackEvent,
-    context,
-    unit,
-    string,
-  >,
+  ReventlessCore.Runtime.effectHandler<EventCollectorChannel.callbackEvent, context, unit, string>,
   ReventlessCore.EventCollector.component,
-> = (
-  ~handler as _,
-  ~eventTopics,
-  ~resources,
-  ~memorySize=1024,
-  ~timeout=30,
-  eventCollector,
-) => {
+> = (~handler as _, ~eventTopics, ~resources, ~memorySize=1024, ~timeout=30, eventCollector) => {
   let eventCollectorResource = eventCollector->ReventlessCore.Component.toPulumiResource
   let channel = eventCollector->ReventlessCore.EventCollector_Adapter.channel
   let eventCollectorName = eventCollectorResource.name->Option.getOr("Unnamed")
@@ -136,12 +124,10 @@ let finish = () =>
             let attribution = Util_LogAttribution.fragments(
               ~comp=`SideEffectHandler(${spec.componentName})`,
             )
-            let handlerJson =
-              spec.sourceUrns
-              ->Pulumi.Output.apply(urns => {
-                let sourceUrn = urns->Array.getUnsafe(0)
-                `{"sideEffectModules":[${modulesJson}],"sourceUrn":"${sourceUrn}"${attribution}}`
-              })
+            let handlerJson = spec.sourceUrns->Pulumi.Output.apply(urns => {
+              let sourceUrn = urns->Array.getUnsafe(0)
+              `{"sideEffectModules":[${modulesJson}],"sourceUrn":"${sourceUrn}"${attribution}}`
+            })
             let _ = handlerOutputs->Array.push(handlerJson)
           | None =>
             log.warn(
@@ -151,13 +137,13 @@ let finish = () =>
           }
         })
 
-        let handlerConfigOutput =
-          Pulumi.Output.all(handlerOutputs)
-          ->Pulumi.Output.apply(handlers => {
-            let json = `{"handlers":[${handlers->Array.join(",")}]}`
-            Util_LambdaEnvBudget.check(~lambdaName="AllSideEffectHandlers", ~handlerConfigJson=json)
-            json
-          })
+        let handlerConfigOutput = Pulumi.Output.all(
+          handlerOutputs,
+        )->Pulumi.Output.apply(handlers => {
+          let json = `{"handlers":[${handlers->Array.join(",")}]}`
+          Util_LambdaEnvBudget.check(~lambdaName="AllSideEffectHandlers", ~handlerConfigJson=json)
+          json
+        })
 
         let envVars: dict<Pulumi.Input.t<string>> = Dict.make()
         envVars->Dict.set("HANDLER_CONFIG", handlerConfigOutput->Pulumi.Output.asInput)
@@ -225,10 +211,7 @@ let finish = () =>
           ~opts,
         )
       | None =>
-        log.warn(
-          ~comp="SideEffectHandlerRuntime_Builder_Single",
-          `finish: grandParent not set`,
-        )
+        log.warn(~comp="SideEffectHandlerRuntime_Builder_Single", `finish: grandParent not set`)
       }
     }
     finished := true

package/src/adapter/Runtime/StateChangeSliceRuntime_Builder_Single.res

@@ -175,14 +175,17 @@ let forDcbCommandTopic = (
       })
     }
 
-    let handlerConfigJson =
-      Pulumi.Output.all4((dcbTableName, queue.id, pgConnectionFragment, inboundFragment))
-      ->Pulumi.Output.apply(((table, queueUrl, pgFragment, inbFragment)) => {
-        let pluginNameJson = pluginName->JSON.stringifyAny->Option.getOr(`""`)
-        let json = `{"dcbEventLogTableName":"${table}","queueUrl":"${queueUrl}","pluginName":${pluginNameJson}${pgFragment}${inbFragment}}`
-        Util_LambdaEnvBudget.check(~lambdaName=name, ~handlerConfigJson=json)
-        json
-      })
+    let handlerConfigJson = Pulumi.Output.all4((
+      dcbTableName,
+      queue.id,
+      pgConnectionFragment,
+      inboundFragment,
+    ))->Pulumi.Output.apply(((table, queueUrl, pgFragment, inbFragment)) => {
+      let pluginNameJson = pluginName->JSON.stringifyAny->Option.getOr(`""`)
+      let json = `{"dcbEventLogTableName":"${table}","queueUrl":"${queueUrl}","pluginName":${pluginNameJson}${pgFragment}${inbFragment}}`
+      Util_LambdaEnvBudget.check(~lambdaName=name, ~handlerConfigJson=json)
+      json
+    })
     envVars->Dict.set("HANDLER_CONFIG", handlerConfigJson->Pulumi.Output.asInput)
 
     // Build code asset
@@ -235,14 +238,10 @@ let forDcbCommandTopic = (
     | Some(sel) =>
       Some(
         sel.securityGroupId
-        ->Pulumi.Output.apply(sgId =>
-          (
-            {
-              PulumiAws.Lambda.Function.subnetIds: sel.subnetIds->Pulumi.Input.make,
-              securityGroupIds: [sgId->Pulumi.Input.make]->Pulumi.Input.make,
-            }: PulumiAws.Lambda.Function.vpcConfig
-          )
-        )
+        ->Pulumi.Output.apply((sgId): PulumiAws.Lambda.Function.vpcConfig => {
+          PulumiAws.Lambda.Function.subnetIds: sel.subnetIds->Pulumi.Input.make,
+          securityGroupIds: [sgId->Pulumi.Input.make]->Pulumi.Input.make,
+        })
         ->Pulumi.Output.asInput,
       )
     | None => None
@@ -260,7 +259,7 @@ let forDcbCommandTopic = (
       ~reservedConcurrency=?cfg.reservedConcurrency,
       ~ephemeralStorageMb=?cfg.ephemeralStorageMb,
       ~logRetentionDays=?cfg.logRetentionDays,
-      ~vpcConfig=?vpcConfig,
+      ~vpcConfig?,
       // This is the StateChangeSlice command handler — provision the DCB
       // retry/conflict metric filters (takes effect when logRetentionDays is set).
       ~dcbMetrics=true,

package/src/adapter/Runtime/StateViewSliceEntryPoint_Ops.res

@@ -207,15 +207,16 @@ let makeRegisteredHandler = (
   entry: handlerEntry,
   modules: sliceModules<'event>,
 ): StreamRoutedEntryPoint_Ops.registeredHandler => {
-  let queryDbOps = ProjectionEntryPoint_Ops.makeQueryDbOps(
-    ~queryDbTableName=entry.queryDbTableName,
-    ~pgConnection=entry.pgConnection,
-    ~stateTopicName=entry.stateTopicName,
-    ~indexes=ProjectionEntryPoint_Ops.indexesOf(modules.config),
-    ~subIdField=ProjectionEntryPoint_Ops.subIdFieldOf(modules.subIdConfig),
-  )
-  ->ProjectionEntryPoint_Ops.withUnionMemberTypes(~stateSchema=modules.stateSchema)
-  ->ProjectionEntryPoint_Ops.withDisplayName(~stateSchema=modules.stateSchema)
+  let queryDbOps =
+    ProjectionEntryPoint_Ops.makeQueryDbOps(
+      ~queryDbTableName=entry.queryDbTableName,
+      ~pgConnection=entry.pgConnection,
+      ~stateTopicName=entry.stateTopicName,
+      ~indexes=ProjectionEntryPoint_Ops.indexesOf(modules.config),
+      ~subIdField=ProjectionEntryPoint_Ops.subIdFieldOf(modules.subIdConfig),
+    )
+    ->ProjectionEntryPoint_Ops.withUnionMemberTypes(~stateSchema=modules.stateSchema)
+    ->ProjectionEntryPoint_Ops.withDisplayName(~stateSchema=modules.stateSchema)
   {
     handler: StreamRoutedEntryPoint_Ops.toStreamHandler(
       makeJsonEventsHandler(

package/src/adapter/Runtime/StateViewSliceRuntime_Builder_Single.res

@@ -93,21 +93,9 @@ let storedSpecs: array<storedSpec> = []
 let grandParent = ref(None)
 
 let forEventCollector: ReventlessCore.Runtime.forEventCollector<
-  ReventlessCore.Runtime.effectHandler<
-    EventCollectorChannel.callbackEvent,
-    context,
-    unit,
-    string,
-  >,
+  ReventlessCore.Runtime.effectHandler<EventCollectorChannel.callbackEvent, context, unit, string>,
   ReventlessCore.EventCollector.component,
-> = (
-  ~handler as _,
-  ~eventTopics,
-  ~resources,
-  ~memorySize=1024,
-  ~timeout=30,
-  eventCollector,
-) => {
+> = (~handler as _, ~eventTopics, ~resources, ~memorySize=1024, ~timeout=30, eventCollector) => {
   let eventCollectorResource = eventCollector->ReventlessCore.Component.toPulumiResource
   let channel = eventCollector->ReventlessCore.EventCollector_Adapter.channel
   let eventCollectorName = eventCollectorResource.name->Option.getOr("Unnamed")
@@ -263,14 +251,10 @@ let buildLambda = (
   | Some(sel) =>
     Some(
       sel.securityGroupId
-      ->Pulumi.Output.apply(sgId =>
-        (
-          {
-            PulumiAws.Lambda.Function.subnetIds: sel.subnetIds->Pulumi.Input.make,
-            securityGroupIds: [sgId->Pulumi.Input.make]->Pulumi.Input.make,
-          }: PulumiAws.Lambda.Function.vpcConfig
-        )
-      )
+      ->Pulumi.Output.apply((sgId): PulumiAws.Lambda.Function.vpcConfig => {
+        PulumiAws.Lambda.Function.subnetIds: sel.subnetIds->Pulumi.Input.make,
+        securityGroupIds: [sgId->Pulumi.Input.make]->Pulumi.Input.make,
+      })
       ->Pulumi.Output.asInput,
     )
   | None => None
@@ -285,7 +269,7 @@ let buildLambda = (
     ~envVars,
     ~memorySize,
     ~timeout,
-    ~vpcConfig=?vpcConfig,
+    ~vpcConfig?,
     ~opts,
   )
 
@@ -375,14 +359,16 @@ let finishWithDcbEventLog = (dcbEventLog: ReventlessCore.DcbEventLog.component)
       let dcbResource = dcbEventLog->ReventlessCore.Component.toPulumiResource
       switch dcbResource.parent {
       | Some(parent) =>
-        let dcbOutputs: ReventlessCore.DcbEventLog.outputs = dcbEventLog->ReventlessCore.Component.outputs
+        let dcbOutputs: ReventlessCore.DcbEventLog.outputs =
+          dcbEventLog->ReventlessCore.Component.outputs
         let eventTopics: ReventlessCore.EventTopic.allOutputs = Dict.fromArray([
           ("DcbEventLog", dcbOutputs.eventTopic),
         ])
         let channel = EventCollectorChannel.make(
           ~name="AllStateViewSlices",
           ~eventTopics,
-          ~owner=None, ~opts={Pulumi.ComponentResource.parent: parent},
+          ~owner=None,
+          ~opts={Pulumi.ComponentResource.parent: parent},
         )
 
         // B3.0: a Postgres-backed DCB log has no stream resource — provision the
@@ -422,18 +408,19 @@ let finishWithDcbEventLog = (dcbEventLog: ReventlessCore.DcbEventLog.component)
           | None => feedArnOutput
           }
 
-          let handlerJson =
-            Pulumi.Output.all2((info.queryDbTableName, sourceUrn))
-            ->Pulumi.Output.apply(((tableName, urn)) => {
-              let entry: handlerEntry = {
-                specModule: info.specModulePath,
-                projectionModule: info.projectionModulePath,
-                queryDbTableName: tableName,
-                sourceUrn: urn,
-                stateTopicName: stateTopicNameFor(name),
-              }
-              entry
-            })
+          let handlerJson = Pulumi.Output.all2((
+            info.queryDbTableName,
+            sourceUrn,
+          ))->Pulumi.Output.apply(((tableName, urn)) => {
+            let entry: handlerEntry = {
+              specModule: info.specModulePath,
+              projectionModule: info.projectionModulePath,
+              queryDbTableName: tableName,
+              sourceUrn: urn,
+              stateTopicName: stateTopicNameFor(name),
+            }
+            entry
+          })
           let _ = handlerOutputs->Array.push(handlerJson)
         })
 
@@ -445,7 +432,7 @@ let finishWithDcbEventLog = (dcbEventLog: ReventlessCore.DcbEventLog.component)
           ~parent,
           ~handlerOutputs,
           ~packageDirs,
-          ~channelSpecs=[{channel: channel, eventTopics, resources: allQueryDbResources}],
+          ~channelSpecs=[{channel, eventTopics, resources: allQueryDbResources}],
           ~feedQueue,
           ~pgStreamConfig=anyPgStream ? eventsApiConfig.contents : None,
         )
@@ -463,7 +450,12 @@ let finish = () =>
   if !finished.contents {
     log.info(
       ~comp="StateViewSliceRuntime_Builder_Single",
-      `finish: ${storedSpecs->Array.length->Int.toString} storedSpecs, ${sliceInfos->Dict.keysToArray->Array.length->Int.toString} sliceInfos, grandParent=${grandParent.contents->Option.map(_ => "Some")->Option.getOr("None")}`,
+      `finish: ${storedSpecs->Array.length->Int.toString} storedSpecs, ${sliceInfos
+        ->Dict.keysToArray
+        ->Array.length
+        ->Int.toString} sliceInfos, grandParent=${grandParent.contents
+        ->Option.map(_ => "Some")
+        ->Option.getOr("None")}`,
     )
     if storedSpecs->Array.length > 0 {
       let (maxMemorySize, maxTimeout) = storedSpecs->Array.reduce((0, 0), (
@@ -503,19 +495,21 @@ let finish = () =>
             let projectionPkg = Util_Bundle.extractPackageName(info.projectionModulePath)
             packageDirs->Dict.set(projectionPkg, Util_Bundle.resolvePackageRoot(projectionPkg))
 
-            let handlerJson =
-              Pulumi.Output.all3((info.queryDbTableName, spec.sourceUrns, feedArnOutput))
-              ->Pulumi.Output.apply(((tableName, urns, feedArn)) => {
-                let entry: handlerEntry = {
-                  specModule: info.specModulePath,
-                  projectionModule: info.projectionModulePath,
-                  queryDbTableName: tableName,
-                  // No stream resource (Postgres) → dispatch on the feed queue ARN.
-                  sourceUrn: urns->Array.get(0)->Option.getOr(feedArn),
-                  stateTopicName: stateTopicNameFor(spec.componentName),
-                }
-                entry
-              })
+            let handlerJson = Pulumi.Output.all3((
+              info.queryDbTableName,
+              spec.sourceUrns,
+              feedArnOutput,
+            ))->Pulumi.Output.apply(((tableName, urns, feedArn)) => {
+              let entry: handlerEntry = {
+                specModule: info.specModulePath,
+                projectionModule: info.projectionModulePath,
+                queryDbTableName: tableName,
+                // No stream resource (Postgres) → dispatch on the feed queue ARN.
+                sourceUrn: urns->Array.get(0)->Option.getOr(feedArn),
+                stateTopicName: stateTopicNameFor(spec.componentName),
+              }
+              entry
+            })
             let _ = handlerOutputs->Array.push(handlerJson)
           | None =>
             log.warn(