@reventlessdev/reventless-aws 3.0.0-alpha.345 → 3.0.0-alpha.347

package/src/adapter/Auth/Auth_LoginIdentifier.res

@@ -0,0 +1,66 @@
+// The attribute a person signs in with. One definition, two consumers: the auto
+// pool the platform stack declares, and the provisioning script that makes a
+// pool no stack owns. Free of Pulumi and of the AWS SDK so both can import it.
+
+/**
+Which attribute identifies a person at sign-in.
+
+🚨 **Fixed at pool creation, and no later deploy can change it.** `CreateUserPool`
+accepts `UsernameAttributes`; `UpdateUserPool` has no such member, so nothing can
+change it in place and every provider replaces the pool instead. A replaced pool
+is an empty one — Cognito exports no password material, so every account
+re-registers. A deployment that will ever want phone sign-in has to say so on its
+first deploy.
+*/
+type t =
+  | Email
+  | Phone
+  | EmailOrPhone
+
+/** What every pool has been created with so far, so an existing stack redeploys
+  unchanged. */
+let default = Email
+
+let all: array<t> = [Email, Phone, EmailOrPhone]
+
+/** The config spelling, and the stack output. */
+let toString = (identifier: t): string =>
+  switch identifier {
+  | Email => "email"
+  | Phone => "phone"
+  | EmailOrPhone => "emailOrPhone"
+  }
+
+let fromString = (value: string): option<t> => all->Array.find(i => toString(i) == value)
+
+/** Cognito's `usernameAttributes`. */
+let usernameAttributes = (identifier: t): array<string> =>
+  switch identifier {
+  | Email => ["email"]
+  | Phone => ["phone_number"]
+  | EmailOrPhone => ["email", "phone_number"]
+  }
+
+/**
+The deploy-time choice, or why the deploy cannot proceed.
+
+An unrecognised spelling refuses rather than falling back to the default: a typo
+that defaulted would create a pool signing in on the wrong attribute, which is
+the one property no later deploy can correct.
+*/
+let parse = (value: option<string>): result<t, string> =>
+  switch value {
+  | None => Ok(default)
+  | Some(raw) =>
+    switch fromString(raw) {
+    | Some(identifier) => Ok(identifier)
+    | None =>
+      Error(
+        `loginIdentifier "${raw}" is not one of ${all
+          ->Array.map(toString)
+          ->Array.join(
+            ", ",
+          )}. It fixes the sign-in attribute at pool creation and no later deploy can change it, so an unrecognised spelling refuses rather than defaulting.`,
+      )
+    }
+  }

package/src/adapter/Auth/Auth_LoginIdentifier.res.mjs

@@ -0,0 +1,70 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+
+let all = [
+  "Email",
+  "Phone",
+  "EmailOrPhone"
+];
+
+function toString(identifier) {
+  switch (identifier) {
+    case "Email" :
+      return "email";
+    case "Phone" :
+      return "phone";
+    case "EmailOrPhone" :
+      return "emailOrPhone";
+  }
+}
+
+function fromString(value) {
+  return all.find(i => toString(i) === value);
+}
+
+function usernameAttributes(identifier) {
+  switch (identifier) {
+    case "Email" :
+      return ["email"];
+    case "Phone" :
+      return ["phone_number"];
+    case "EmailOrPhone" :
+      return [
+        "email",
+        "phone_number"
+      ];
+  }
+}
+
+function parse(value) {
+  if (value === undefined) {
+    return {
+      TAG: "Ok",
+      _0: "Email"
+    };
+  }
+  let identifier = fromString(value);
+  if (identifier !== undefined) {
+    return {
+      TAG: "Ok",
+      _0: identifier
+    };
+  } else {
+    return {
+      TAG: "Error",
+      _0: `loginIdentifier "` + value + `" is not one of ` + all.map(toString).join(", ") + `. It fixes the sign-in attribute at pool creation and no later deploy can change it, so an unrecognised spelling refuses rather than defaulting.`
+    };
+  }
+}
+
+let $$default = "Email";
+
+export {
+  $$default as default,
+  all,
+  toString,
+  fromString,
+  usernameAttributes,
+  parse,
+}
+/* No side effect */

package/src/adapter/Auth/Auth_SignUpMode.res

@@ -0,0 +1,78 @@
+// Whether a stranger can create their own account. One definition, two consumers:
+// the auto pool the platform stack declares, and the provisioning script that
+// makes a pool no stack owns. Free of Pulumi and of the AWS SDK so both can
+// import it — the same shape, and the same drift it prevents, as
+// [Auth_LoginIdentifier].
+
+/**
+Who may create a principal in this pool.
+
+Unlike the sign-in attribute, this **is** updatable in place: `AdminCreateUserConfig`
+is a member of `UpdateUserPoolRequest`, so a pool full of accounts can be flipped
+either way at any time, for free and reversibly. It is a setting, not a
+first-deploy-or-never decision.
+
+🚨 **On a shared pool the flip is pool-wide, not stack-wide.** The setting belongs
+to the pool and the pool has one of it, so every stack pointed at that pool gets
+self-service the moment one deployment turns it on. A deployment that must never
+self-register cannot rely on its own config to prevent it, and should not share a
+pool with one that does.
+*/
+type t =
+  /** Only an administrator creates principals — what every pool so far was
+      created with, and what a deployment with no registration flow wants. */
+  | AdminOnly
+  /** A stranger can register themselves. */
+  | SelfService
+
+/** What every pool has been created with so far, so an existing stack redeploys
+  unchanged. Closed is also the right default on its own terms: a deployment that
+  has not asked for self-registration should not acquire it by upgrading. */
+let default = AdminOnly
+
+let all: array<t> = [AdminOnly, SelfService]
+
+/** The config spelling. */
+let toString = (mode: t): string =>
+  switch mode {
+  | AdminOnly => "adminOnly"
+  | SelfService => "selfService"
+  }
+
+let fromString = (value: string): option<t> => all->Array.find(m => toString(m) == value)
+
+/** Cognito's `allowAdminCreateUserOnly`, which asks the negative of what this
+  type asks. Converting in one place is the point: a bool named for the negative
+  is easy to read backwards at a call site. */
+let allowAdminCreateUserOnly = (mode: t): bool =>
+  switch mode {
+  | AdminOnly => true
+  | SelfService => false
+  }
+
+/**
+The deploy-time choice, or why the deploy cannot proceed.
+
+An unrecognised spelling refuses rather than falling back to the default, and the
+reason is *not* [Auth_LoginIdentifier]'s — this setting is correctable at any
+time. It is that the mistake would be silent. The default is closed, so a typo
+fails safe, but it fails safe *invisibly*: the deploy is green, the config says
+what the operator meant, and the symptom is every registration being refused,
+which surfaces far from the misspelling that caused it.
+*/
+let parse = (value: option<string>): result<t, string> =>
+  switch value {
+  | None => Ok(default)
+  | Some(raw) =>
+    switch fromString(raw) {
+    | Some(mode) => Ok(mode)
+    | None =>
+      Error(
+        `signUpMode "${raw}" is not one of ${all
+          ->Array.map(toString)
+          ->Array.join(
+            ", ",
+          )}. It decides whether a stranger can create an account. An unrecognised spelling refuses rather than defaulting, because defaulting would deploy green and refuse every registration, with nothing pointing back at the spelling.`,
+      )
+    }
+  }

package/src/adapter/Auth/Auth_SignUpMode.res.mjs

@@ -0,0 +1,56 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+
+let all = [
+  "AdminOnly",
+  "SelfService"
+];
+
+function toString(mode) {
+  if (mode === "AdminOnly") {
+    return "adminOnly";
+  } else {
+    return "selfService";
+  }
+}
+
+function fromString(value) {
+  return all.find(m => toString(m) === value);
+}
+
+function allowAdminCreateUserOnly(mode) {
+  return mode === "AdminOnly";
+}
+
+function parse(value) {
+  if (value === undefined) {
+    return {
+      TAG: "Ok",
+      _0: "AdminOnly"
+    };
+  }
+  let mode = fromString(value);
+  if (mode !== undefined) {
+    return {
+      TAG: "Ok",
+      _0: mode
+    };
+  } else {
+    return {
+      TAG: "Error",
+      _0: `signUpMode "` + value + `" is not one of ` + all.map(toString).join(", ") + `. It decides whether a stranger can create an account. An unrecognised spelling refuses rather than defaulting, because defaulting would deploy green and refuse every registration, with nothing pointing back at the spelling.`
+    };
+  }
+}
+
+let $$default = "AdminOnly";
+
+export {
+  $$default as default,
+  all,
+  toString,
+  fromString,
+  allowAdminCreateUserOnly,
+  parse,
+}
+/* No side effect */

package/src/adapter/DcbEventLog/DcbEventLogStorage_DynamoDb_Runtime.res

@@ -61,28 +61,55 @@ let compositeTagKey = (tags: array<Reventless.DcbTag.tag>) =>
 
 // --- Partition Key Derivation ---
 
-let derivePartitionKey = (
-  ~partitionTag: option<Reventless.DcbTag.derivedPartitionTag>=?,
+// The tag an event is filed under: the one named by its partition key. An event
+// that lacks it throws — filing it under another tag would put it where no
+// decision read of its entity looks. With no partition configured at all (a
+// single-tag log), the event's only tag.
+let partitionTagOfEvent = (
+  ~partitionTag: option<Reventless.DcbTag.derivedPartitionTag>,
+  ~eventType: string,
   tags: array<Reventless.DcbTag.tag>,
-): string => {
-  if tags->Array.length == 0 {
-    "dcb"
-  } else {
-    switch partitionTag {
+): option<Reventless.DcbTag.tag> => {
+  let byKey = key =>
+    switch tags->Array.find(t => t.key == key) {
+    | Some(t) => Some(t)
     | None =>
-      let tag = tags->Array.getUnsafe(0)
-      `${tag.key}:${tag.value}`
-    | Some(Simple(pt)) =>
-      let tag = switch tags->Array.find(t => t.key == pt.key) {
-      | Some(t) => t
-      | None => tags->Array.getUnsafe(0)
-      }
-      `${tag.key}:${tag.value}`
-    | Some(Composite(spec)) => Reventless.DcbTag.getCompositePartitionKeyValue(tags, spec)
+      JsError.throwWithMessage(
+        `DCB event ${eventType} carries no ${key} tag (tags: ${tags
+          ->Array.map(t => t.key)
+          ->Array.join(", ")}) — it cannot be filed under its partition`,
+      )
+    }
+  switch (tags, partitionTag) {
+  | ([], _) | (_, Some(Composite(_))) => None
+  | (_, None) => tags->Array.get(0)
+  | (_, Some(Simple({key}))) => byKey(key)
+  | (_, Some(ByEventType(keys))) =>
+    switch keys->Dict.get(eventType) {
+    | Some(key) => byKey(key)
+    | None =>
+      JsError.throwWithMessage(
+        `DCB event ${eventType} has no partition key — no slice of this boundary writes it`,
+      )
     }
   }
 }
 
+let derivePartitionKey = (
+  ~partitionTag: option<Reventless.DcbTag.derivedPartitionTag>=?,
+  ~eventType: string,
+  tags: array<Reventless.DcbTag.tag>,
+): string =>
+  switch (tags, partitionTag) {
+  | ([], _) => "dcb"
+  | (_, Some(Composite(spec))) => Reventless.DcbTag.getCompositePartitionKeyValue(tags, spec)
+  | _ =>
+    switch partitionTagOfEvent(~partitionTag, ~eventType, tags) {
+    | Some(tag) => `${tag.key}:${tag.value}`
+    | None => "dcb"
+    }
+  }
+
 // --- Item Conversion ---
 
 let toItem = (
@@ -93,7 +120,10 @@ let toItem = (
 ): JSON.t => {
   // Create base item
   let item = Dict.make()
-  item->Dict.set("id", derivePartitionKey(~partitionTag?, event.tags)->JSON.Encode.string)
+  item->Dict.set(
+    "id",
+    derivePartitionKey(~partitionTag?, ~eventType=event.eventType, event.tags)->JSON.Encode.string,
+  )
   item->Dict.set("position", position->JSON.Encode.string)
   item->Dict.set("event", event.eventType->JSON.Encode.string)
   item->Dict.set("data", event.data)
@@ -985,20 +1015,11 @@ let eventPartitionTags = (
 ): array<Reventless.DcbTag.tag> =>
   switch partitionTag {
   | Some(Composite(spec)) => [makeCompositeFenceTag(event.tags, spec)]
-  | Some(Simple(pt)) =>
-    switch event.tags->Array.find(t => t.key == pt.key) {
-    | Some(t) => [t]
-    | None =>
-      switch event.tags->Array.get(0) {
-      | Some(t) => [t]
-      | None => []
-      }
-    }
-  | None =>
-    switch event.tags->Array.get(0) {
-    | Some(t) => [t]
-    | None => []
-    }
+  | _ =>
+    partitionTagOfEvent(~partitionTag, ~eventType=event.eventType, event.tags)->Option.mapOr(
+      [],
+      t => [t],
+    )
   }
 
 let collectEventPartitionTags = (

package/src/adapter/DcbEventLog/DcbEventLogStorage_DynamoDb_Runtime.res.mjs

@@ -64,26 +64,60 @@ function compositeTagKey(tags) {
   return tags.toSorted((a, b) => Primitive_string.compare(a.key, b.key)).map(t => t.key + `:` + t.value).join("#");
 }
 
-function derivePartitionKey(partitionTag, tags) {
+function partitionTagOfEvent(partitionTag, eventType, tags) {
+  let byKey = key => {
+    let t = tags.find(t => t.key === key);
+    if (t !== undefined) {
+      return t;
+    } else {
+      return Stdlib_JsError.throwWithMessage(`DCB event ` + eventType + ` carries no ` + key + ` tag (tags: ` + tags.map(t => t.key).join(", ") + `) — it cannot be filed under its partition`);
+    }
+  };
+  if (tags.length === 0) {
+    return;
+  }
+  if (partitionTag === undefined) {
+    return tags[0];
+  }
+  switch (partitionTag.TAG) {
+    case "Simple" :
+      return byKey(partitionTag._0.key);
+    case "Composite" :
+      return;
+    case "ByEventType" :
+      let key = partitionTag._0[eventType];
+      if (key !== undefined) {
+        return byKey(key);
+      } else {
+        return Stdlib_JsError.throwWithMessage(`DCB event ` + eventType + ` has no partition key — no slice of this boundary writes it`);
+      }
+  }
+}
+
+function derivePartitionKey(partitionTag, eventType, tags) {
   if (tags.length === 0) {
     return "dcb";
   }
   if (partitionTag !== undefined) {
-    if (partitionTag.TAG !== "Simple") {
-      return DcbTag$Reventless.getCompositePartitionKeyValue(tags, partitionTag._0);
+    switch (partitionTag.TAG) {
+      case "Composite" :
+        return DcbTag$Reventless.getCompositePartitionKeyValue(tags, partitionTag._0);
+      case "Simple" :
+      case "ByEventType" :
+        break;
     }
-    let pt = partitionTag._0;
-    let t = tags.find(t => t.key === pt.key);
-    let tag = t !== undefined ? t : tags[0];
+  }
+  let tag = partitionTagOfEvent(partitionTag, eventType, tags);
+  if (tag !== undefined) {
     return tag.key + `:` + tag.value;
+  } else {
+    return "dcb";
   }
-  let tag$1 = tags[0];
-  return tag$1.key + `:` + tag$1.value;
 }
 
 function toItem(position, event, partitionTag, recordedAt) {
   let item = {};
-  item["id"] = derivePartitionKey(partitionTag, event.tags);
+  item["id"] = derivePartitionKey(partitionTag, event.eventType, event.tags);
   item["position"] = position;
   item["event"] = event.eventType;
   item["data"] = event.data;
@@ -733,27 +767,15 @@ function makeCompositeFenceTag(tags, spec) {
 
 function eventPartitionTags(event, partitionTag) {
   if (partitionTag !== undefined) {
-    if (partitionTag.TAG !== "Simple") {
-      return [makeCompositeFenceTag(event.tags, partitionTag._0)];
-    }
-    let pt = partitionTag._0;
-    let t = event.tags.find(t => t.key === pt.key);
-    if (t !== undefined) {
-      return [t];
-    }
-    let t$1 = event.tags[0];
-    if (t$1 !== undefined) {
-      return [t$1];
-    } else {
-      return [];
+    switch (partitionTag.TAG) {
+      case "Composite" :
+        return [makeCompositeFenceTag(event.tags, partitionTag._0)];
+      case "Simple" :
+      case "ByEventType" :
+        break;
     }
   }
-  let t$2 = event.tags[0];
-  if (t$2 !== undefined) {
-    return [t$2];
-  } else {
-    return [];
-  }
+  return Stdlib_Option.mapOr(partitionTagOfEvent(partitionTag, event.eventType, event.tags), [], t => [t]);
 }
 
 function collectEventPartitionTags(events, partitionTag) {
@@ -790,22 +812,30 @@ function partitionTypesByTag(events, partitionTag) {
 function buildConditionalTransactItems(table, events, cond, basePosition, partitionTag, crossPartitionTagKeysOpt) {
   let crossPartitionTagKeys = crossPartitionTagKeysOpt !== undefined ? crossPartitionTagKeysOpt : [];
   let cond$1;
-  if (partitionTag !== undefined && partitionTag.TAG !== "Simple") {
-    let spec = partitionTag._0;
-    let newrecord = {...cond};
-    newrecord.query = cond.query.map(qi => {
-      let clauseTags = qi.tags;
-      if (clauseTags === undefined) {
-        return qi;
-      }
-      if (clauseTags.length <= 1) {
-        return qi;
-      }
-      let newrecord = {...qi};
-      newrecord.tags = [makeCompositeFenceTag(clauseTags, spec)];
-      return newrecord;
-    });
-    cond$1 = newrecord;
+  if (partitionTag !== undefined) {
+    switch (partitionTag.TAG) {
+      case "Composite" :
+        let spec = partitionTag._0;
+        let newrecord = {...cond};
+        newrecord.query = cond.query.map(qi => {
+          let clauseTags = qi.tags;
+          if (clauseTags === undefined) {
+            return qi;
+          }
+          if (clauseTags.length <= 1) {
+            return qi;
+          }
+          let newrecord = {...qi};
+          newrecord.tags = [makeCompositeFenceTag(clauseTags, spec)];
+          return newrecord;
+        });
+        cond$1 = newrecord;
+        break;
+      case "Simple" :
+      case "ByEventType" :
+        cond$1 = cond;
+        break;
+    }
   } else {
     cond$1 = cond;
   }
@@ -1166,6 +1196,7 @@ export {
   compositeIndexName,
   indexKeepsFullProjection,
   compositeTagKey,
+  partitionTagOfEvent,
   derivePartitionKey,
   toItem,
   fromItem,

package/src/adapter/EventLogSubscription/EventLogSubscription_AppSync.res

@@ -173,11 +173,7 @@ let make = (
     ~bundleRuntimeExtensions=false,
   )
 
-  let layers =
-    Lambda.reventlessLayerArn
-    ->Option.map(arn => [arn->Pulumi.Input.make])
-    ->Option.getOr([])
-    ->Pulumi.Input.make
+  let layers = Lambda.reventlessLayers()
 
   let appsyncEndpoint = AppSync_EventsApi.httpEndpoint(eventsApi)
 

package/src/adapter/EventLogSubscription/EventLogSubscription_AppSync.res.mjs

@@ -2,7 +2,6 @@
 
 import * as Aws from "@pulumi/aws";
 import * as IAM$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/IAM.res.mjs";
-import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Pulumi from "@pulumi/pulumi";
 import * as Lambda$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/Lambda/Lambda.res.mjs";
 import * as AWS$ReventlessAws from "../AWS.res.mjs";
@@ -90,7 +89,7 @@ function make(name, topicName, eventTopicOutputs, eventsApi, opts) {
       Util_Bundle$ReventlessAws.resolvePackageRoot(undefined, "@reventlessdev/reventless-aws")
     ]]);
   let match = Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/EventLogSubscription/EventLogSubscription_AppSync_Ops.res.mjs", packageDirs, undefined, false);
-  let layers = Stdlib_Option.getOr(Stdlib_Option.map(Lambda$PulumiAws.reventlessLayerArn, arn => [arn]), []);
+  let layers = Lambda$PulumiAws.reventlessLayers();
   let appsyncEndpoint = AppSync_EventsApi$ReventlessAws.httpEndpoint(eventsApi);
   let lambda = new (Aws.lambda.Function)(name + "EventLogSubscriber", {
     handler: "index.handler",

package/src/adapter/Geocoder/Geocoder_AwsLocation_Resolver.res

@@ -115,11 +115,7 @@ let make = (
     ~bundleRuntimeExtensions=false,
   )
 
-  let layers =
-    Lambda.reventlessLayerArn
-    ->Option.map(arn => [arn->Pulumi.Input.make])
-    ->Option.getOr([])
-    ->Pulumi.Input.make
+  let layers = Lambda.reventlessLayers()
 
   // Created before the function that writes to it — see
   // `Util_LambdaLogging.makeManagedLogGroup` for why the ordering matters.

package/src/adapter/Geocoder/Geocoder_AwsLocation_Resolver.res.mjs

@@ -3,7 +3,6 @@
 import * as Aws from "@pulumi/aws";
 import * as IAM$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/IAM.res.mjs";
 import * as Output$Pulumi from "@reventlessdev/rescript-pulumi-pulumi/src/Output.res.mjs";
-import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Pulumi from "@pulumi/pulumi";
 import * as Lambda$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/Lambda/Lambda.res.mjs";
 import * as AWS$ReventlessAws from "../AWS.res.mjs";
@@ -57,7 +56,7 @@ function make(api, placeIndexName, nameOpt, opts) {
       Util_Bundle$ReventlessAws.resolvePackageRoot(undefined, "@reventlessdev/reventless-aws")
     ]]);
   let match = Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/Geocoder/Geocoder_AwsLocation_Resolver_Ops.res.mjs", packageDirs, undefined, false);
-  let layers = Stdlib_Option.getOr(Stdlib_Option.map(Lambda$PulumiAws.reventlessLayerArn, arn => [arn]), []);
+  let layers = Lambda$PulumiAws.reventlessLayers();
   let logGroup = Util_LambdaLogging$ReventlessAws.makeManagedLogGroup(name + "Lambda", undefined, AWS_Tags$ReventlessAws.make(name + "LambdaLogGroup", "Platform", "Logs", "Platform", undefined, undefined, undefined, undefined), opts$1, undefined);
   let lambda = new (Aws.lambda.Function)(name + "Lambda", {
     handler: "index.handler",

package/src/adapter/Postgres/PgChangeFeedRelay_Runtime.res

@@ -27,6 +27,7 @@ let toEventCollectorJson = (
     "id",
     DcbEventLogStorage_DynamoDb_Runtime.derivePartitionKey(
       ~partitionTag?,
+      ~eventType=event.eventType,
       event.tags,
     )->JSON.Encode.string,
   )
@@ -55,10 +56,10 @@ let relayWithPool = async (
   ~pool: ReventlessPostgres.PgDriver.pool,
   ~logName: string,
   ~subscriber: string,
-  // ~partitionTagJson: the DCB log's partition tag, sury-encoded into HANDLER_CONFIG
-  // by the relay builder (B2.3d). Parsed once via the shared derivedPartitionTagSchema
-  // so the `id` the relay emits matches the DynamoDB-stream path. Absent → None (a
-  // single-tag log derives the same id without it).
+  // ~partitionTagJson: the DCB log's partition (the per-event-type key map, or a
+  // composite), sury-encoded into HANDLER_CONFIG by the relay builder (B2.3d). Parsed
+  // once via the shared derivedPartitionTagSchema so the `id` the relay emits matches
+  // the DynamoDB-stream path. Absent → None (a single-tag log derives the same id).
   ~partitionTagJson: option<JSON.t>=?,
   ~sendBatch: array<JSON.t> => promise<unit>,
 ): int => {

package/src/adapter/Postgres/PgChangeFeedRelay_Runtime.res.mjs

@@ -14,7 +14,7 @@ import * as DcbEventLogStorage_DynamoDb_Runtime$ReventlessAws from "../DcbEventL
 
 function toEventCollectorJson(event, partitionTag) {
   let item = {};
-  item["id"] = DcbEventLogStorage_DynamoDb_Runtime$ReventlessAws.derivePartitionKey(partitionTag, event.tags);
+  item["id"] = DcbEventLogStorage_DynamoDb_Runtime$ReventlessAws.derivePartitionKey(partitionTag, event.eventType, event.tags);
   item["position"] = event.position;
   item["event"] = event.eventType;
   item["data"] = event.data;

package/src/adapter/Postgres/PgMigration_Builder.res

@@ -88,7 +88,7 @@ let make = (
 
   // Re-invoke whenever the migration code or the Reventless layer (which ships
   // PgSchema's DDL) changes; idempotent DDL makes an unchanged re-run a no-op.
-  let layerArn = PulumiAws.Lambda.reventlessLayerArn->Option.getOr("no-layer")
+  let layerArn = PulumiAws.Lambda.reventlessLayerArn()
   let inputJson =
     [("trigger", `${sourceCodeHash}:${layerArn}`->JSON.Encode.string)]
     ->Dict.fromArray

package/src/adapter/Postgres/PgMigration_Builder.res.mjs

@@ -2,7 +2,6 @@
 
 import * as Aws from "@pulumi/aws";
 import * as Output$Pulumi from "@reventlessdev/rescript-pulumi-pulumi/src/Output.res.mjs";
-import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Pulumi from "@pulumi/pulumi";
 import * as Lambda$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/Lambda/Lambda.res.mjs";
 import * as Adapter$ReventlessInfra from "@reventlessdev/reventless-infra/src/adapter/Adapter.res.mjs";
@@ -34,7 +33,7 @@ function make(name, handlerConfig, secretArn, securityGroupId, subnetIds, opts)
       }]))),
     role: runtime.parts.lambdaRole.id
   });
-  let layerArn = Stdlib_Option.getOr(Lambda$PulumiAws.reventlessLayerArn, "no-layer");
+  let layerArn = Lambda$PulumiAws.reventlessLayerArn();
   let inputJson = JSON.stringify(Object.fromEntries([[
       "trigger",
       sourceCodeHash + `:` + layerArn