@reventlessdev/reventless-aws 3.0.0-alpha.378 → 3.0.0-alpha.379

package/CHANGELOG.md

@@ -3,6 +3,20 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.379 (2026-10-10)
+
+### Bug Fixes
+
+* **pulumi-aws:** a list's last page no longer promises another ([00b141f](https://github.com/ReventlessDev/reventless-core/commit/00b141fbfdbf44544fbea8ab979356831381f48a))
+* feat!: a command's rule is looked up by its name, without a cast ([5f02c40](https://github.com/ReventlessDev/reventless-core/commit/5f02c4081d077bf4a6951d8c9b2b16553a8ca87b))
+
+### BREAKING CHANGES
+
+* a spec that writes `commandAuthorization` by hand writes
+`authorizationOf = (name: string) => …` instead; the PPX refuses the old name.
+
+
+
 # 3.0.0-alpha.378 (2026-10-10)
 
 ### Bug Fixes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-aws",
-  "version": "3.0.0-alpha.378",
+  "version": "3.0.0-alpha.379",
   "description": "AWS adapters for Reventless",
   "license": "Apache-2.0",
   "bin": {
@@ -23,18 +23,18 @@
     "uuid": "^13.0.0",
     "yaml": "^2.8.3",
     "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.30",
-    "@reventlessdev/rescript-jest": "1.0.0-alpha.11",
     "@reventlessdev/rescript-effect": "0.1.0-alpha.34",
+    "@reventlessdev/rescript-pulumi-aws": "3.0.0-alpha.27",
     "@reventlessdev/rescript-node": "2.0.0-alpha.22",
-    "@reventlessdev/rescript-pulumi-aws": "3.0.0-alpha.26",
+    "@reventlessdev/rescript-jest": "1.0.0-alpha.11",
     "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.23",
-    "@reventlessdev/rescript-web": "1.0.0-alpha.7",
     "@reventlessdev/rescript-uuid": "2.0.0-alpha.1",
-    "@reventlessdev/reventless-core": "3.0.0-alpha.292",
-    "@reventlessdev/reventless-postgres": "3.0.0-alpha.156",
+    "@reventlessdev/rescript-web": "1.0.0-alpha.7",
+    "@reventlessdev/reventless-core": "3.0.0-alpha.293",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.190",
     "@reventlessdev/reventless-interop": "3.0.0-alpha.39",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.189",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.161"
+    "@reventlessdev/reventless-postgres": "3.0.0-alpha.157",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.162"
   },
   "devDependencies": {
     "rescript": "12.3.1",

package/src/Platform.res.mjs

@@ -485,7 +485,7 @@ function MakeWithConfig(Config) {
     errorSchema: UiFragmentRegistry$ReventlessCore.errorSchema,
     eventSchema: UiFragmentRegistry$ReventlessCore.eventSchema,
     commandSchema: UiFragmentRegistry$ReventlessCore.commandSchema,
-    commandAuthorization: UiFragmentRegistry$ReventlessCore.commandAuthorization,
+    authorizationOf: UiFragmentRegistry$ReventlessCore.authorizationOf,
     commandTransition: UiFragmentRegistry$ReventlessCore.commandTransition,
     traits: UiFragmentRegistry$ReventlessCore.traits,
     readConsistency: UiFragmentRegistry$ReventlessCore.readConsistency
@@ -682,7 +682,7 @@ function MakeWithConfig(Config) {
     errorSchema: PluginSpec$ReventlessCore.errorSchema,
     commandSchema: PluginSpec$ReventlessCore.commandSchema,
     moduleUrl: PluginSpec$ReventlessCore.moduleUrl,
-    commandAuthorization: PluginSpec$ReventlessCore.commandAuthorization,
+    authorizationOf: PluginSpec$ReventlessCore.authorizationOf,
     commandTransition: PluginSpec$ReventlessCore.commandTransition,
     traits: PluginSpec$ReventlessCore.traits
   })({
@@ -1901,7 +1901,7 @@ function Make($star) {
     errorSchema: UiFragmentRegistry$ReventlessCore.errorSchema,
     eventSchema: UiFragmentRegistry$ReventlessCore.eventSchema,
     commandSchema: UiFragmentRegistry$ReventlessCore.commandSchema,
-    commandAuthorization: UiFragmentRegistry$ReventlessCore.commandAuthorization,
+    authorizationOf: UiFragmentRegistry$ReventlessCore.authorizationOf,
     commandTransition: UiFragmentRegistry$ReventlessCore.commandTransition,
     traits: UiFragmentRegistry$ReventlessCore.traits,
     readConsistency: UiFragmentRegistry$ReventlessCore.readConsistency
@@ -2098,7 +2098,7 @@ function Make($star) {
     errorSchema: PluginSpec$ReventlessCore.errorSchema,
     commandSchema: PluginSpec$ReventlessCore.commandSchema,
     moduleUrl: PluginSpec$ReventlessCore.moduleUrl,
-    commandAuthorization: PluginSpec$ReventlessCore.commandAuthorization,
+    authorizationOf: PluginSpec$ReventlessCore.authorizationOf,
     commandTransition: PluginSpec$ReventlessCore.commandTransition,
     traits: PluginSpec$ReventlessCore.traits
   })({

package/tests/AppSync_AdapterTest.res

@@ -154,12 +154,11 @@ module TwoRuleFeed = {
   @schema
   type command = AddProduct({sku: string}) | AddCategory({sku: string})
 
-  let commandAuthorization = (command: command): Reventless.Authorization.rule<
-    Reventless.Role.name,
-  > =>
-    switch command {
-    | AddProduct(_) => AllowRoles([Reventless.Role.make("Merchandiser")])
-    | AddCategory(_) => AllowRoles([Reventless.Role.make("Admin")])
+  let authorizationOf = (name: string): Reventless.Authorization.rule<Reventless.Role.name> =>
+    switch name {
+    | "AddProduct" => AllowRoles([Reventless.Role.make("Merchandiser")])
+    | "AddCategory" => AllowRoles([Reventless.Role.make("Admin")])
+    | _ => DenyAll
     }
 }
 
@@ -244,7 +243,7 @@ describe("AppSync_Adapter.injectAwsAuth — Stage E2 permission lifting", () =>
   testSync("an inbound slice's field carries every constructor's groups", () => {
     let permission = ReventlessCore.Dcb_Builder.inboundDoorPermission(
       TwoRuleFeed.commandSchema,
-      TwoRuleFeed.commandAuthorization,
+      TwoRuleFeed.authorizationOf,
     )
     let fp = Dict.fromArray(permission->Option.mapOr([], p => [("p_TwoRuleFeed", p)]))
     let entry = mutationEntry(~fieldNames=["p_TwoRuleFeed"], ~fieldPermissions=fp)

package/tests/AppSync_AdapterTest.res.mjs

@@ -121,23 +121,26 @@ let commandSchema = Sury.union([
   }))
 ]);
 
-function commandAuthorization(command) {
-  if (command.TAG === "AddProduct") {
-    return {
-      TAG: "AllowRoles",
-      _0: ["Merchandiser"]
-    };
-  } else {
-    return {
-      TAG: "AllowRoles",
-      _0: ["Admin"]
-    };
+function authorizationOf(name) {
+  switch (name) {
+    case "AddCategory" :
+      return {
+        TAG: "AllowRoles",
+        _0: ["Admin"]
+      };
+    case "AddProduct" :
+      return {
+        TAG: "AllowRoles",
+        _0: ["Merchandiser"]
+      };
+    default:
+      return "DenyAll";
   }
 }
 
 let TwoRuleFeed = {
   commandSchema: commandSchema,
-  commandAuthorization: commandAuthorization
+  authorizationOf: authorizationOf
 };
 
 globalThis.describe("AppSync_Adapter.injectAwsAuth — Stage E2 permission lifting", () => {
@@ -201,7 +204,7 @@ globalThis.describe("AppSync_Adapter.injectAwsAuth — Stage E2 permission lifti
     globalThis.expect(GraphQL_Stitcher$ReventlessCore.decode(aug).mutations[0]).toContain(`@aws_cognito_user_pools(cognito_groups: ["Admin", "shop-merch-team"])`);
   });
   globalThis.test("an inbound slice's field carries every constructor's groups", () => {
-    let permission = Dcb_Builder$ReventlessCore.inboundDoorPermission(commandSchema, commandAuthorization);
+    let permission = Dcb_Builder$ReventlessCore.inboundDoorPermission(commandSchema, authorizationOf);
     let fp = Object.fromEntries(Stdlib_Option.mapOr(permission, [], p => [[
         "p_TwoRuleFeed",
         p

package/tests/EpInboundTestSlice.res

@@ -17,6 +17,6 @@ let targetName = "AddThing"
 let externalSystem: option<string> = Some("TestFeed")
 
 type role = Reventless.Role.name
-let commandAuthorization = (_: command): Reventless.Authorization.rule<role> => AllowRoles([
+let authorizationOf = (_: string): Reventless.Authorization.rule<role> => AllowRoles([
   Reventless.Role.make("Admin"),
 ])

package/tests/EpInboundTestSlice.res.mjs

@@ -12,7 +12,7 @@ let commandSchema = Sury.$schema(s => ({
   thingId: s.m(Sury.string)
 }));
 
-function commandAuthorization(param) {
+function authorizationOf(param) {
   return {
     TAG: "AllowRoles",
     _0: ["Admin"]
@@ -34,6 +34,6 @@ export {
   commandSchema,
   targetName,
   externalSystem,
-  commandAuthorization,
+  authorizationOf,
 }
 /* externalInputSchema Not a pure module */

package/tests/QueryDbResolvers_AppSyncTest.res

@@ -58,9 +58,9 @@ describe("listAllItemsConnection — paging", () => {
 
   testSync("a filtered read examines more rows than it serves", () => {
     // The budget reads as deep as the page needs, which for a backward cut is
-    // `_upTo` rather than `_first + _from`.
+    // `_upTo` rather than one row past `_first + _from`.
     expect(
-      code->String.includes("parts.length > 0 ? ((_backward ? _upTo : _first + _from) > 1000"),
+      code->String.includes("parts.length > 0 ? ((_backward ? _upTo : _first + _from + 1) > 1000"),
     )->toBe(true)
     expect(
       code->String.includes("const _page = _backward ? _rest : _rest.slice(0, _first);"),

package/tests/QueryDbResolvers_AppSyncTest.res.mjs

@@ -37,7 +37,7 @@ globalThis.describe("listAllItemsConnection — paging", () => {
     globalThis.expect(code.includes("ctx.args.after + '_' + i")).toBe(false);
   });
   globalThis.test("a filtered read examines more rows than it serves", () => {
-    globalThis.expect(code.includes("parts.length > 0 ? ((_backward ? _upTo : _first + _from) > 1000")).toBe(true);
+    globalThis.expect(code.includes("parts.length > 0 ? ((_backward ? _upTo : _first + _from + 1) > 1000")).toBe(true);
     globalThis.expect(code.includes("const _page = _backward ? _rest : _rest.slice(0, _first);")).toBe(true);
     globalThis.expect(code.includes("hasNextPage: _more || !!_next,")).toBe(true);
   });

package/tests/integration/AggTestAggregate.res

@@ -5,7 +5,7 @@
 // wired into reventless-core's rescript.json, not reventless-aws's), exposing
 // exactly the fields the compiled `@@reventless.spec` output would: name, Id
 // (patched in at runtime by patchSpecId), commandSchema/eventSchema/errorSchema
-// (via sury-ppx), moduleUrl, commandAuthorization.
+// (via sury-ppx), moduleUrl, authorizationOf.
 
 @schema
 type command = Add({name: string})
@@ -19,6 +19,6 @@ type error = AlreadyExists
 let name = "AggTestAggregate"
 let moduleUrl = "agg-test://AggTestAggregate"
 type role = Reventless.Role.name
-let commandAuthorization = (_: command): Reventless.Authorization.rule<role> => AllowAnonymous
+let authorizationOf = (_: string): Reventless.Authorization.rule<role> => AllowAnonymous
 type lifecycleState = unit
 let commandTransition = (_: command): Reventless.Transition.t<lifecycleState> => Unrestricted

package/tests/integration/AggTestAggregate.res.mjs

@@ -14,7 +14,7 @@ let eventSchema = Sury.$schema(s => ({
 
 let errorSchema = Sury.literal("AlreadyExists");
 
-function commandAuthorization(param) {
+function authorizationOf(param) {
   return "AllowAnonymous";
 }
 
@@ -32,7 +32,7 @@ export {
   errorSchema,
   name,
   moduleUrl,
-  commandAuthorization,
+  authorizationOf,
   commandTransition,
 }
 /* commandSchema Not a pure module */

package/tests/integration/EpCompositeSlice.res

@@ -64,7 +64,7 @@ type event =
 let name = "EpCompositeSlice"
 let moduleUrl = "ep-test://EpCompositeSlice"
 type role = Reventless.Role.name
-let commandAuthorization = (_: command): Reventless.Authorization.rule<role> => AllowAnonymous
+let authorizationOf = (_: string): Reventless.Authorization.rule<role> => AllowAnonymous
 type lifecycleState = unit
 let commandTransition = (_: command): Reventless.Transition.t<lifecycleState> => Unrestricted
 let readConsistency = Reventless.ReadConsistency.EscalateOnRetry

package/tests/integration/EpCompositeSlice.res.mjs

@@ -47,7 +47,7 @@ let eventSchema = Sury.union([
   }))
 ]);
 
-function commandAuthorization(param) {
+function authorizationOf(param) {
   return "AllowAnonymous";
 }
 
@@ -68,7 +68,7 @@ export {
   eventSchema,
   name,
   moduleUrl,
-  commandAuthorization,
+  authorizationOf,
   commandTransition,
   readConsistency,
 }

package/tests/integration/EpTestSlice.res

@@ -22,7 +22,7 @@ type event = WidgetAdded({widgetId: @s.matches(Reventless.DcbTag.partition) stri
 let name = "EpTestSlice"
 let moduleUrl = "ep-test://EpTestSlice"
 type role = Reventless.Role.name
-let commandAuthorization = (_: command): Reventless.Authorization.rule<role> => AllowAnonymous
+let authorizationOf = (_: string): Reventless.Authorization.rule<role> => AllowAnonymous
 type lifecycleState = unit
 let commandTransition = (_: command): Reventless.Transition.t<lifecycleState> => Unrestricted
 let readConsistency = Reventless.ReadConsistency.EscalateOnRetry

package/tests/integration/EpTestSlice.res.mjs

@@ -20,7 +20,7 @@ let eventSchema = Sury.$schema(s => ({
   widgetId: s.m(DcbTag$Reventless.partition)
 }));
 
-function commandAuthorization(param) {
+function authorizationOf(param) {
   return "AllowAnonymous";
 }
 
@@ -41,7 +41,7 @@ export {
   eventSchema,
   name,
   moduleUrl,
-  commandAuthorization,
+  authorizationOf,
   commandTransition,
   readConsistency,
 }