@reventlessdev/reventless-aws 3.0.0-alpha.344 → 3.0.0-alpha.346

package/src/adapter/Api/Platform_UIFragments_Lambda_Ops.res

@@ -11,7 +11,6 @@
 // adapter's Platform_UIFragmentsApi.encodeUIFragmentEntry produces, so rows are
 // returned as-is (bar the name/version collapse).
 
-
 let str = (item: dict<JSON.t>, key: string): option<string> =>
   item->Dict.get(key)->Option.flatMap(JSON.Decode.string)
 
@@ -43,5 +42,9 @@ let handler = async (_event: JSON.t): array<JSON.t> =>
     []
   | Some(table) =>
     let items = await Platform_AdminScan_Ops.scanAll(~tableName=table)
-    Platform_AdminScan_Ops.latestByName(items, ~nameVersionOf=item => item->str("pluginId"), ~toEntry)
+    Platform_AdminScan_Ops.latestByName(
+      items,
+      ~nameVersionOf=item => item->str("pluginId"),
+      ~toEntry,
+    )
   }

package/src/adapter/Auth/Auth_ActiveRolePoolAttachment.res

@@ -37,7 +37,6 @@
     [AppSync_SourceApiAssociation_Retrying.res]: Pulumi serialises a dynamic
     provider's whole captured closure into stack state, so the SDK is imported
     lazily and nothing here captures a Pulumi Output. */
-
 let log = ReventlessCore.Logger.fromEnv()
 
 // ── The merge ────────────────────────────────────────────────────────────────

package/src/adapter/Auth/Auth_ActiveRoleStore.res

@@ -70,8 +70,7 @@ nothing else is consulted.
 let chooseStore = (~identityProviderId: option<string>): storeChoice =>
   switch identityProviderId {
   | None => StackScoped
-  | Some(id) =>
-    ProviderScoped(Auth_ActiveRoleStore_Schema.derivedStoreName(~identityProviderId=id))
+  | Some(id) => ProviderScoped(Auth_ActiveRoleStore_Schema.derivedStoreName(~identityProviderId=id))
   }
 
 // JS resolver code (APPSYNC_JS runtime): forward the caller's arguments and the

package/src/adapter/Auth/Auth_ActiveRoleStore_Schema.res

@@ -78,10 +78,7 @@ operator upgrading meets a sentence instead of a silent misbehaviour.
 
 Order-insensitive, because `DescribeTable` does not promise one.
 */
-let keySchemaRefusal = (
-  ~tableName: string,
-  ~actual: array<(string, string)>,
-): option<string> => {
+let keySchemaRefusal = (~tableName: string, ~actual: array<(string, string)>): option<string> => {
   let actualKey = describeKeySchema(actual)
   let wantedKey = describeKeySchema(expectedKeySchema)
   actualKey == wantedKey

package/src/adapter/Auth/Auth_ActiveRoleTrigger_Ops.res

@@ -137,7 +137,7 @@ let respond = (~event: event, ~decision: decision): event => {
         groupOverrideDetails: {
           groupsToOverride: groups,
           iamRolesToOverride,
-          preferredRole: ?preferredRole,
+          ?preferredRole,
         },
       },
     },
@@ -204,7 +204,10 @@ let handler = async (event: event): event => {
     ->Option.getOr([])
 
   let sub =
-    event.request->Option.flatMap(r => r.userAttributes)->Option.flatMap(u => u.sub)->Option.getOr("")
+    event.request
+    ->Option.flatMap(r => r.userAttributes)
+    ->Option.flatMap(u => u.sub)
+    ->Option.getOr("")
 
   let clientId = event.callerContext->Option.flatMap(c => c.clientId)->Option.getOr("")
 

package/src/adapter/Auth/Auth_Cognito.res

@@ -93,11 +93,8 @@ type authConfig = {
   region: string,
 }
 
-let authenticate = async (
-  ctx: ReventlessCore.Auth_Adapter.requestContext,
-): Identity.authResult => {
-  let token =
-    _getHeader(ctx.headers, "Authorization")->Option.flatMap(_bearerToken)
+let authenticate = async (ctx: ReventlessCore.Auth_Adapter.requestContext): Identity.authResult => {
+  let token = _getHeader(ctx.headers, "Authorization")->Option.flatMap(_bearerToken)
   switch token {
   | None => Anonymous
   | Some(t) =>
@@ -154,10 +151,7 @@ let fromAppSyncIdentity = (id: option<appSyncIdentity>): Identity.authResult =>
       let claims =
         rawClaims
         ->Dict.toArray
-        ->Array.map(((k, v)) => (
-          k,
-          v->JSON.Decode.string->Option.getOr(v->JSON.stringify),
-        ))
+        ->Array.map(((k, v)) => (k, v->JSON.Decode.string->Option.getOr(v->JSON.stringify)))
         ->Dict.fromArray
       Authenticated({
         userId: sub,

package/src/adapter/Auth/Auth_LoginIdentifier.res

@@ -0,0 +1,66 @@
+// The attribute a person signs in with. One definition, two consumers: the auto
+// pool the platform stack declares, and the provisioning script that makes a
+// pool no stack owns. Free of Pulumi and of the AWS SDK so both can import it.
+
+/**
+Which attribute identifies a person at sign-in.
+
+🚨 **Fixed at pool creation, and no later deploy can change it.** `CreateUserPool`
+accepts `UsernameAttributes`; `UpdateUserPool` has no such member, so nothing can
+change it in place and every provider replaces the pool instead. A replaced pool
+is an empty one — Cognito exports no password material, so every account
+re-registers. A deployment that will ever want phone sign-in has to say so on its
+first deploy.
+*/
+type t =
+  | Email
+  | Phone
+  | EmailOrPhone
+
+/** What every pool has been created with so far, so an existing stack redeploys
+  unchanged. */
+let default = Email
+
+let all: array<t> = [Email, Phone, EmailOrPhone]
+
+/** The config spelling, and the stack output. */
+let toString = (identifier: t): string =>
+  switch identifier {
+  | Email => "email"
+  | Phone => "phone"
+  | EmailOrPhone => "emailOrPhone"
+  }
+
+let fromString = (value: string): option<t> => all->Array.find(i => toString(i) == value)
+
+/** Cognito's `usernameAttributes`. */
+let usernameAttributes = (identifier: t): array<string> =>
+  switch identifier {
+  | Email => ["email"]
+  | Phone => ["phone_number"]
+  | EmailOrPhone => ["email", "phone_number"]
+  }
+
+/**
+The deploy-time choice, or why the deploy cannot proceed.
+
+An unrecognised spelling refuses rather than falling back to the default: a typo
+that defaulted would create a pool signing in on the wrong attribute, which is
+the one property no later deploy can correct.
+*/
+let parse = (value: option<string>): result<t, string> =>
+  switch value {
+  | None => Ok(default)
+  | Some(raw) =>
+    switch fromString(raw) {
+    | Some(identifier) => Ok(identifier)
+    | None =>
+      Error(
+        `loginIdentifier "${raw}" is not one of ${all
+          ->Array.map(toString)
+          ->Array.join(
+            ", ",
+          )}. It fixes the sign-in attribute at pool creation and no later deploy can change it, so an unrecognised spelling refuses rather than defaulting.`,
+      )
+    }
+  }

package/src/adapter/Auth/Auth_LoginIdentifier.res.mjs

@@ -0,0 +1,70 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+
+let all = [
+  "Email",
+  "Phone",
+  "EmailOrPhone"
+];
+
+function toString(identifier) {
+  switch (identifier) {
+    case "Email" :
+      return "email";
+    case "Phone" :
+      return "phone";
+    case "EmailOrPhone" :
+      return "emailOrPhone";
+  }
+}
+
+function fromString(value) {
+  return all.find(i => toString(i) === value);
+}
+
+function usernameAttributes(identifier) {
+  switch (identifier) {
+    case "Email" :
+      return ["email"];
+    case "Phone" :
+      return ["phone_number"];
+    case "EmailOrPhone" :
+      return [
+        "email",
+        "phone_number"
+      ];
+  }
+}
+
+function parse(value) {
+  if (value === undefined) {
+    return {
+      TAG: "Ok",
+      _0: "Email"
+    };
+  }
+  let identifier = fromString(value);
+  if (identifier !== undefined) {
+    return {
+      TAG: "Ok",
+      _0: identifier
+    };
+  } else {
+    return {
+      TAG: "Error",
+      _0: `loginIdentifier "` + value + `" is not one of ` + all.map(toString).join(", ") + `. It fixes the sign-in attribute at pool creation and no later deploy can change it, so an unrecognised spelling refuses rather than defaulting.`
+    };
+  }
+}
+
+let $$default = "Email";
+
+export {
+  $$default as default,
+  all,
+  toString,
+  fromString,
+  usernameAttributes,
+  parse,
+}
+/* No side effect */

package/src/adapter/Auth/Auth_SignUpMode.res

@@ -0,0 +1,78 @@
+// Whether a stranger can create their own account. One definition, two consumers:
+// the auto pool the platform stack declares, and the provisioning script that
+// makes a pool no stack owns. Free of Pulumi and of the AWS SDK so both can
+// import it — the same shape, and the same drift it prevents, as
+// [Auth_LoginIdentifier].
+
+/**
+Who may create a principal in this pool.
+
+Unlike the sign-in attribute, this **is** updatable in place: `AdminCreateUserConfig`
+is a member of `UpdateUserPoolRequest`, so a pool full of accounts can be flipped
+either way at any time, for free and reversibly. It is a setting, not a
+first-deploy-or-never decision.
+
+🚨 **On a shared pool the flip is pool-wide, not stack-wide.** The setting belongs
+to the pool and the pool has one of it, so every stack pointed at that pool gets
+self-service the moment one deployment turns it on. A deployment that must never
+self-register cannot rely on its own config to prevent it, and should not share a
+pool with one that does.
+*/
+type t =
+  /** Only an administrator creates principals — what every pool so far was
+      created with, and what a deployment with no registration flow wants. */
+  | AdminOnly
+  /** A stranger can register themselves. */
+  | SelfService
+
+/** What every pool has been created with so far, so an existing stack redeploys
+  unchanged. Closed is also the right default on its own terms: a deployment that
+  has not asked for self-registration should not acquire it by upgrading. */
+let default = AdminOnly
+
+let all: array<t> = [AdminOnly, SelfService]
+
+/** The config spelling. */
+let toString = (mode: t): string =>
+  switch mode {
+  | AdminOnly => "adminOnly"
+  | SelfService => "selfService"
+  }
+
+let fromString = (value: string): option<t> => all->Array.find(m => toString(m) == value)
+
+/** Cognito's `allowAdminCreateUserOnly`, which asks the negative of what this
+  type asks. Converting in one place is the point: a bool named for the negative
+  is easy to read backwards at a call site. */
+let allowAdminCreateUserOnly = (mode: t): bool =>
+  switch mode {
+  | AdminOnly => true
+  | SelfService => false
+  }
+
+/**
+The deploy-time choice, or why the deploy cannot proceed.
+
+An unrecognised spelling refuses rather than falling back to the default, and the
+reason is *not* [Auth_LoginIdentifier]'s — this setting is correctable at any
+time. It is that the mistake would be silent. The default is closed, so a typo
+fails safe, but it fails safe *invisibly*: the deploy is green, the config says
+what the operator meant, and the symptom is every registration being refused,
+which surfaces far from the misspelling that caused it.
+*/
+let parse = (value: option<string>): result<t, string> =>
+  switch value {
+  | None => Ok(default)
+  | Some(raw) =>
+    switch fromString(raw) {
+    | Some(mode) => Ok(mode)
+    | None =>
+      Error(
+        `signUpMode "${raw}" is not one of ${all
+          ->Array.map(toString)
+          ->Array.join(
+            ", ",
+          )}. It decides whether a stranger can create an account. An unrecognised spelling refuses rather than defaulting, because defaulting would deploy green and refuse every registration, with nothing pointing back at the spelling.`,
+      )
+    }
+  }

package/src/adapter/Auth/Auth_SignUpMode.res.mjs

@@ -0,0 +1,56 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+
+let all = [
+  "AdminOnly",
+  "SelfService"
+];
+
+function toString(mode) {
+  if (mode === "AdminOnly") {
+    return "adminOnly";
+  } else {
+    return "selfService";
+  }
+}
+
+function fromString(value) {
+  return all.find(m => toString(m) === value);
+}
+
+function allowAdminCreateUserOnly(mode) {
+  return mode === "AdminOnly";
+}
+
+function parse(value) {
+  if (value === undefined) {
+    return {
+      TAG: "Ok",
+      _0: "AdminOnly"
+    };
+  }
+  let mode = fromString(value);
+  if (mode !== undefined) {
+    return {
+      TAG: "Ok",
+      _0: mode
+    };
+  } else {
+    return {
+      TAG: "Error",
+      _0: `signUpMode "` + value + `" is not one of ` + all.map(toString).join(", ") + `. It decides whether a stranger can create an account. An unrecognised spelling refuses rather than defaulting, because defaulting would deploy green and refuse every registration, with nothing pointing back at the spelling.`
+    };
+  }
+}
+
+let $$default = "AdminOnly";
+
+export {
+  $$default as default,
+  all,
+  toString,
+  fromString,
+  allowAdminCreateUserOnly,
+  parse,
+}
+/* No side effect */

package/src/adapter/CommandGenerator/CommandGeneratorResolvers_AppSync.res

@@ -214,10 +214,7 @@ let makeDcb = (
   )
 
   let _ =
-    (
-      lambda->Pulumi.Output.flatMap(lambda => lambda.arn),
-      dataSourceRole.id,
-    )
+    (lambda->Pulumi.Output.flatMap(lambda => lambda.arn), dataSourceRole.id)
     ->Pulumi.Output.all2
     ->Pulumi.Output.apply(((lambdaArn, dataSourceRoleId)) => {
       let _attachDataSourcePolicy = PulumiAws.IAM.RolePolicy.make(

package/src/adapter/CommandGenerator/CommandGeneratorResolvers_AppSync_NoOp.res

@@ -5,7 +5,9 @@ type api = Types.AppSync.api
 type runtimeParts = Util.Lambda.runtimeParts
 
 let handleResolversEvent = (_generateCommand: ReventlessCore.CommandGenerator.commandGenerator) =>
-  Pulumi.Output.make((_event, _context) => Effect.succeed(ReventlessCore.CommandTopic.Pending({msgId: ""})))
+  Pulumi.Output.make((_event, _context) =>
+    Effect.succeed(ReventlessCore.CommandTopic.Pending({msgId: ""}))
+  )
 
 let make: ReventlessCore.CommandGenerator_Adapter.resolversMaker<api, runtimeParts> = (
   ~name as _,

package/src/adapter/CommandGenerator/InboundTranslationResolvers_AppSync.res

@@ -31,10 +31,7 @@ let make = (
   )
 
   let _ =
-    (
-      lambda->Pulumi.Output.flatMap(lambda => lambda.arn),
-      dataSourceRole.id,
-    )
+    (lambda->Pulumi.Output.flatMap(lambda => lambda.arn), dataSourceRole.id)
     ->Pulumi.Output.all2
     ->Pulumi.Output.apply(((lambdaArn, dataSourceRoleId)) => {
       let _attachDataSourcePolicy = PulumiAws.IAM.RolePolicy.make(

package/src/adapter/CommandTopic/CommandTopicChannel_SQS.res

@@ -48,7 +48,12 @@ let make: ReventlessCore.CommandTopic_Adapter.channelMaker<
   let opts =
     opts->Option.map(ReventlessCore.Util.Pulumi.ComponentResourceOptions.toCustomResourceOptions)
 
-  let tags = AWS.Tags.make(~name, ~kind=ReventlessCore.CommandTopic.componentType, ~role=CommandTopic, ~owner?)
+  let tags = AWS.Tags.make(
+    ~name,
+    ~kind=ReventlessCore.CommandTopic.componentType,
+    ~role=CommandTopic,
+    ~owner?,
+  )
   let queue = PulumiAws.SQS.Queue.make(
     ~name,
     ~args={
@@ -82,9 +87,7 @@ let make: ReventlessCore.CommandTopic_Adapter.channelMaker<
       stream =>
         stream
         ->Stream.grouped(10)
-        ->Stream.runForEach(jsons =>
-          Effect.promise(() => publishJsons(jsons))
-        )
+        ->Stream.runForEach(jsons => Effect.promise(() => publishJsons(jsons)))
     }),
     publishJsonsAndWait: None->Pulumi.Output.make,
     connect,

package/src/adapter/CommandTopic/CommandTopicChannel_SQS_Async.res

@@ -23,7 +23,12 @@ let make: ReventlessCore.CommandTopic_Adapter.channelMaker<
 > = (~name, ~owner, ~opts=?) => {
   let opts =
     opts->Option.map(ReventlessCore.Util.Pulumi.ComponentResourceOptions.toCustomResourceOptions)
-  let tags = AWS.Tags.make(~name, ~kind=ReventlessCore.CommandTopic.componentType, ~role=CommandTopic, ~owner?)
+  let tags = AWS.Tags.make(
+    ~name,
+    ~kind=ReventlessCore.CommandTopic.componentType,
+    ~role=CommandTopic,
+    ~owner?,
+  )
   let queue = PulumiAws.SQS.Queue.make(
     ~name,
     ~args={

package/src/adapter/CommandTopic/CommandTopicChannel_SQS_FIFO.res

@@ -12,7 +12,12 @@ let make: ReventlessCore.CommandTopic_Adapter.channelMaker<
 > = (~name, ~owner, ~opts=?) => {
   let opts =
     opts->Option.map(ReventlessCore.Util.Pulumi.ComponentResourceOptions.toCustomResourceOptions)
-  let tags = AWS.Tags.make(~name, ~kind=ReventlessCore.CommandTopic.componentType, ~role=CommandTopic, ~owner?)
+  let tags = AWS.Tags.make(
+    ~name,
+    ~kind=ReventlessCore.CommandTopic.componentType,
+    ~role=CommandTopic,
+    ~owner?,
+  )
   let queue = PulumiAws.SQS.Queue.make(
     ~name,
     ~args={
@@ -51,9 +56,7 @@ let make: ReventlessCore.CommandTopic_Adapter.channelMaker<
       stream =>
         stream
         ->Stream.grouped(10)
-        ->Stream.runForEach(jsons =>
-          Effect.promise(() => publishJsons(jsons))
-        )
+        ->Stream.runForEach(jsons => Effect.promise(() => publishJsons(jsons)))
     }),
     publishJsonsAndWait: None->Pulumi.Output.make,
     connect,

package/src/adapter/CommandTopic/CommandTopicChannel_SQS_Runtime.res

@@ -25,22 +25,21 @@ let handleQueueEvent = (
     ->Effect.flatMap(results => {
       let deleteEntries =
         results
-        ->Array.mapWithIndex(
-          (result, idx) =>
-            switch result {
-            | Ok(reference) =>
-              let deleteMessageBatchEntry: AwsSdk.SQS.DeleteMessageBatchCommand.deleteMessageBatchEntry = {
-                id: idx->Int.toString,
-                receiptHandle: reference,
-              }
-              deleteMessageBatchEntry->Some
-            | Error(reference) =>
-              ReventlessCore.EffectLogger.logError(
-                ~comp=__MODULE__,
-                "handleQueueEvent: Couldn't handle command with ReceiptHandle: " ++ reference,
-              )->Effect.runSync
-              None
-            },
+        ->Array.mapWithIndex((result, idx) =>
+          switch result {
+          | Ok(reference) =>
+            let deleteMessageBatchEntry: AwsSdk.SQS.DeleteMessageBatchCommand.deleteMessageBatchEntry = {
+              id: idx->Int.toString,
+              receiptHandle: reference,
+            }
+            deleteMessageBatchEntry->Some
+          | Error(reference) =>
+            ReventlessCore.EffectLogger.logError(
+              ~comp=__MODULE__,
+              "handleQueueEvent: Couldn't handle command with ReceiptHandle: " ++ reference,
+            )->Effect.runSync
+            None
+          }
         )
         ->Array.filterMap(x => x)
 
@@ -48,7 +47,12 @@ let handleQueueEvent = (
       | [] => Effect.succeed()
       | entries =>
         Util.SQS_Runtime.deleteMessages(entries, queue)
-        ->Effect.tap(_ => ReventlessCore.EffectLogger.logInfo(~comp=__MODULE__, "handleQueueEvent: Deleted all commands from queue"))
+        ->Effect.tap(_ =>
+          ReventlessCore.EffectLogger.logInfo(
+            ~comp=__MODULE__,
+            "handleQueueEvent: Deleted all commands from queue",
+          )
+        )
         ->Effect.catchAll(errorMsg =>
           ReventlessCore.EffectLogger.logError(
             ~comp=__MODULE__,
@@ -63,7 +67,9 @@ let publishJsons = (queue, queueService) =>
   async jsons =>
     switch jsons->Array.length {
     | 0 =>
-      ReventlessCore.EffectLogger.logInfo(~comp=__MODULE__, "publishJsons: No commands to send")->Effect.runPromise->ignore
+      ReventlessCore.EffectLogger.logInfo(~comp=__MODULE__, "publishJsons: No commands to send")
+      ->Effect.runPromise
+      ->ignore
     | 1 =>
       await queue->Util_SQS_Runtime.send(queueService, jsons->Array.getUnsafe(0))->Effect.runPromise
     | _ =>

package/src/adapter/CommandTopic/CommandTopicChannel_SQS_Sync.res

@@ -28,7 +28,12 @@ let make: ReventlessCore.CommandTopic_Adapter.channelMaker<
   let opts =
     opts->Option.map(ReventlessCore.Util.Pulumi.ComponentResourceOptions.toCustomResourceOptions)
 
-  let tags = AWS.Tags.make(~name, ~kind=ReventlessCore.CommandTopic.componentType, ~role=CommandTopic, ~owner?)
+  let tags = AWS.Tags.make(
+    ~name,
+    ~kind=ReventlessCore.CommandTopic.componentType,
+    ~role=CommandTopic,
+    ~owner?,
+  )
   let queue = PulumiAws.SQS.Queue.make(
     ~name,
     ~args={
@@ -73,9 +78,9 @@ let make: ReventlessCore.CommandTopic_Adapter.channelMaker<
         | None =>
           // Handler not yet registered — fall back to fire-and-forget, return Pending
           let _ = await sendToSqs(jsons)
-          jsons->Array.map(cmdJson =>
-            ReventlessCore.CommandTopic.Pending({msgId: cmdJson.meta.msgId})
-          )
+          jsons->Array.map(cmdJson => ReventlessCore.CommandTopic.Pending({
+            msgId: cmdJson.meta.msgId,
+          }))
         | Some(handleCmds) =>
           await ReventlessCore.CommandTopic.runInlineAndCollect(jsons, handleCmds)
         }

package/src/adapter/CommandTopic/CommandTopicRegistry.res

@@ -38,10 +38,7 @@ let register = (
   ~queueUrl: Pulumi.Output.t<string>,
   ~resource: ReventlessInfra.Adapter.resource,
   ~isFifo: bool,
-) =>
-  owner->Option.forEach(({name}) =>
-    byOwner->Dict.set(name, {queueUrl, resource, isFifo})
-  )
+) => owner->Option.forEach(({name}) => byOwner->Dict.set(name, {queueUrl, resource, isFifo}))
 
 /** The CommandTopic of the component with this name, if one has been created.
     `None` for a target that is not an Aggregate in this plugin — a DCB

package/src/adapter/Counter/CounterHandler_DynamoDbStream.res

@@ -19,24 +19,24 @@ let make: ReventlessCore.Counter_Adapter.handlerMaker = (
 
   let countsTableName = (countsDb.resources->Array.getUnsafe(0)).name
 
-  let targetSpecModule =
-    specModulePath->JSON.stringifyAny->Option.getOr(`""`)
-  let mappingsModule =
-    mappingsModulePath->JSON.stringifyAny->Option.getOr(`""`)
+  let targetSpecModule = specModulePath->JSON.stringifyAny->Option.getOr(`""`)
+  let mappingsModule = mappingsModulePath->JSON.stringifyAny->Option.getOr(`""`)
 
-  let handlerConfigJson =
-    Pulumi.Output.all3((countsTableName, publishChannelId, referencesStream.urn))
-    ->Pulumi.Output.apply(((table, queueUrl, refArn)) => {
-      let countsArn = "" // Will be set separately
-      `{"targetSpecModule":${targetSpecModule},"mappingsModule":${mappingsModule},"countsTableName":"${table}","publishChannelId":"${queueUrl}","referencesStreamArn":"${refArn}","countsStreamArn":"${countsArn}"}`
-    })
+  let handlerConfigJson = Pulumi.Output.all3((
+    countsTableName,
+    publishChannelId,
+    referencesStream.urn,
+  ))->Pulumi.Output.apply(((table, queueUrl, refArn)) => {
+    let countsArn = "" // Will be set separately
+    `{"targetSpecModule":${targetSpecModule},"mappingsModule":${mappingsModule},"countsTableName":"${table}","publishChannelId":"${queueUrl}","referencesStreamArn":"${refArn}","countsStreamArn":"${countsArn}"}`
+  })
 
   // countsStreamArn is in a separate Output — merge into config
   let fullHandlerConfigJson =
-    Pulumi.Output.all2((handlerConfigJson, countsStream.urn))
-    ->Pulumi.Output.apply(((config, countsArn)) =>
-      config->String.replace(`"countsStreamArn":""`, `"countsStreamArn":"${countsArn}"`)
-    )
+    Pulumi.Output.all2((handlerConfigJson, countsStream.urn))->Pulumi.Output.apply(((
+      config,
+      countsArn,
+    )) => config->String.replace(`"countsStreamArn":""`, `"countsStreamArn":"${countsArn}"`))
 
   envVars->Dict.set("HANDLER_CONFIG", fullHandlerConfigJson->Pulumi.Output.asInput)
 
@@ -73,7 +73,7 @@ let make: ReventlessCore.Counter_Adapter.handlerMaker = (
 
   let subscribe = (sourceName, source) =>
     Util_EventSourceMapping.subscribe(
-      ~lambda=lambda,
+      ~lambda,
       ~targetName=name,
       ~sourceName,
       ~source,

package/src/adapter/DcbEventLog/DcbEventLogStorage_DynamoDb.res

@@ -34,10 +34,9 @@ let make: ReventlessCore.DcbEventLog_Adapter.storageMaker = (
   let globalSecondaryIndexes =
     indexes
     ->Array.map(indexName => {
-      let projectionType =
-        DcbEventLogStorage_DynamoDb_Runtime.indexKeepsFullProjection(indexName)
-          ? PulumiAws.DynamoDb.Table.ALL
-          : PulumiAws.DynamoDb.Table.KEYS_ONLY
+      let projectionType = DcbEventLogStorage_DynamoDb_Runtime.indexKeepsFullProjection(indexName)
+        ? PulumiAws.DynamoDb.Table.ALL
+        : PulumiAws.DynamoDb.Table.KEYS_ONLY
       {
         PulumiAws.DynamoDb.Table.name: indexName,
         hashKey: indexName,
@@ -50,7 +49,12 @@ let make: ReventlessCore.DcbEventLog_Adapter.storageMaker = (
 
   // Create DynamoDB table with stream enabled — EventTopicPublisher_DynamoDbStream
   // needs a DynamoDbStream resource to connect the EventTopic.
-  let tags = AWS.Tags.make(~name, ~kind=ReventlessCore.ComponentType.Plugin, ~role=DcbEventLog, ~scope=Plugin)
+  let tags = AWS.Tags.make(
+    ~name,
+    ~kind=ReventlessCore.ComponentType.Plugin,
+    ~role=DcbEventLog,
+    ~scope=Plugin,
+  )
   let table = Util_DynamoDbStream.makeTable(
     name,
     ~attributes,