@reventlessdev/reventless-aws 3.0.0-alpha.402 → 3.0.0-alpha.404

package/CHANGELOG.md

@@ -3,6 +3,21 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.404 (2026-10-29)
+
+### Features
+
+* **core:** no log line prints a personal value ([af03709](https://github.com/ReventlessDev/reventless-core/commit/af037090770992c254e5dc69ab71ef251bad2db9))
+
+
+# 3.0.0-alpha.403 (2026-10-29)
+
+**Note:** Version bump only for package @reventlessdev/reventless-aws
+
+
+
+
+
 # 3.0.0-alpha.402 (2026-10-29)
 
 * feat(core)!: the caller's IP address leaves the messages a request causes ([aa9e8c7](https://github.com/ReventlessDev/reventless-core/commit/aa9e8c79c0360528a5cfeda2bb88d1da52f28674))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-aws",
-  "version": "3.0.0-alpha.402",
+  "version": "3.0.0-alpha.404",
   "description": "AWS adapters for Reventless",
   "license": "Apache-2.0",
   "bin": {
@@ -24,17 +24,17 @@
     "yaml": "^2.8.3",
     "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.36",
     "@reventlessdev/rescript-effect": "1.0.0-alpha.1",
-    "@reventlessdev/rescript-jest": "1.0.0-alpha.13",
     "@reventlessdev/rescript-node": "2.0.0-alpha.23",
+    "@reventlessdev/rescript-jest": "1.0.0-alpha.13",
     "@reventlessdev/rescript-pulumi-aws": "3.0.0-alpha.35",
-    "@reventlessdev/rescript-uuid": "2.0.0-alpha.1",
     "@reventlessdev/rescript-pulumi-pulumi": "3.0.0-alpha.0",
-    "@reventlessdev/reventless-core": "3.0.0-alpha.312",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.209",
-    "@reventlessdev/reventless-interop": "3.0.0-alpha.42",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.180",
+    "@reventlessdev/rescript-uuid": "2.0.0-alpha.1",
     "@reventlessdev/rescript-web": "1.0.0-alpha.8",
-    "@reventlessdev/reventless-postgres": "3.0.0-alpha.176"
+    "@reventlessdev/reventless-interop": "3.0.0-alpha.42",
+    "@reventlessdev/reventless-core": "3.0.0-alpha.314",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.211",
+    "@reventlessdev/reventless-postgres": "3.0.0-alpha.178",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.182"
   },
   "devDependencies": {
     "rescript": "12.3.1",

package/src/components/Api/AppSync_Adapter.res

@@ -522,6 +522,9 @@ let _makeApiResourceWith = (
   let appsyncLogConfig: AppSync.GraphQLApi.logConfig = {
     cloudwatchLogsRoleArn: iamRole.arn->Pulumi.Output.asInput,
     fieldLogLevel: AppSync.GraphQLApi.ERROR->Pulumi.Input.make,
+    // Without it an error line carries the request's arguments and the resolver's
+    // context, which hold whatever the caller sent, a person's name included.
+    excludeVerboseContent: true->Pulumi.Input.make,
   }
 
   // Resolve the Cognito UserPool — either supplied by the caller (plugin-stack

package/src/components/Api/AppSync_Adapter.res.mjs

@@ -268,9 +268,11 @@ function _makeApiResourceWith(name, schema, userPoolConfig, opts) {
     role: iamRole.name
   }, customOpts);
   let appsyncLogConfig_cloudwatchLogsRoleArn = iamRole.arn;
+  let appsyncLogConfig_excludeVerboseContent = true;
   let appsyncLogConfig = {
     cloudwatchLogsRoleArn: appsyncLogConfig_cloudwatchLogsRoleArn,
-    fieldLogLevel: "ERROR"
+    fieldLogLevel: "ERROR",
+    excludeVerboseContent: appsyncLogConfig_excludeVerboseContent
   };
   let userPoolConfigOut = userPoolConfig !== undefined ? userPoolConfig : Auth_Cognito$ReventlessAws.make(name + `-auth`, undefined).apply(c => ({
       userPoolId: c.userPoolId,

package/src/util/Util_DeadLetterQueue.res

@@ -88,9 +88,10 @@ let lambdaRole = IAM.Role.makeWithDefaultPolicy(
 // bug removes the message that was stranded by it. Seven of them were still
 // cycling twelve hours after the fix that made them impossible.
 //
-// What the loop costs is now a function of the line, not the count: the full
-// record is written once — on the first delivery, the one carrying the diagnostic
-// — and every redelivery after it costs a single identity line. A stranded
+// What the loop costs is now a function of the line, not the count: the first
+// delivery writes the record's ids, kind, size and attribute names — never its
+// body, which is a command or event and may be about a person — and every
+// redelivery after it costs a single identity line. A stranded
 // message is ~150 KB over a fortnight rather than ~17 MB, which is small enough
 // that ending the loop early is an operator's job rather than the topology's.
 let entryPointCode = `export const handler = async (event) => {
@@ -104,7 +105,12 @@ let entryPointCode = `export const handler = async (event) => {
       " receiveCount=" + receiveCount +
       " bodyBytes=" + (record?.body?.length ?? 0);
     if (receiveCount <= 1) {
-      console.error("DEAD LETTER ITEM: " + identity, JSON.stringify(record));
+      // Ids, type and size, never the body: a dead letter is a command or event,
+      // and its payload may be about a person.
+      const body = (() => { try { return JSON.parse(record?.body ?? "null") } catch { return null } })();
+      const kind = body?.command?.TAG ?? body?.event?.TAG ?? (body?.Message ? "sns" : "unknown");
+      console.error("DEAD LETTER ITEM: " + identity + " kind=" + kind +
+        " attributes=" + JSON.stringify(Object.keys(record?.messageAttributes ?? {})));
     } else {
       console.error("DEAD LETTER REDELIVERY: " + identity);
     }

package/src/util/Util_DeadLetterQueue.res.mjs

@@ -56,7 +56,12 @@ let entryPointCode = `export const handler = async (event) => {
       " receiveCount=" + receiveCount +
       " bodyBytes=" + (record?.body?.length ?? 0);
     if (receiveCount <= 1) {
-      console.error("DEAD LETTER ITEM: " + identity, JSON.stringify(record));
+      // Ids, type and size, never the body: a dead letter is a command or event,
+      // and its payload may be about a person.
+      const body = (() => { try { return JSON.parse(record?.body ?? "null") } catch { return null } })();
+      const kind = body?.command?.TAG ?? body?.event?.TAG ?? (body?.Message ? "sns" : "unknown");
+      console.error("DEAD LETTER ITEM: " + identity + " kind=" + kind +
+        " attributes=" + JSON.stringify(Object.keys(record?.messageAttributes ?? {})));
     } else {
       console.error("DEAD LETTER REDELIVERY: " + identity);
     }