@reventlessdev/reventless-aws 3.0.0-alpha.406 → 3.0.0-alpha.407

package/CHANGELOG.md

@@ -3,6 +3,14 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.407 (2026-10-29)
+
+**Note:** Version bump only for package @reventlessdev/reventless-aws
+
+
+
+
+
 # 3.0.0-alpha.406 (2026-10-29)
 
 **Note:** Version bump only for package @reventlessdev/reventless-aws

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-aws",
-  "version": "3.0.0-alpha.406",
+  "version": "3.0.0-alpha.407",
   "description": "AWS adapters for Reventless",
   "license": "Apache-2.0",
   "bin": {
@@ -23,18 +23,18 @@
     "uuid": "^13.0.0",
     "yaml": "^2.8.3",
     "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.37",
-    "@reventlessdev/rescript-jest": "1.0.0-alpha.13",
     "@reventlessdev/rescript-effect": "1.0.0-alpha.1",
-    "@reventlessdev/rescript-node": "2.0.0-alpha.24",
+    "@reventlessdev/rescript-jest": "1.0.0-alpha.13",
     "@reventlessdev/rescript-pulumi-aws": "3.0.0-alpha.36",
+    "@reventlessdev/rescript-node": "2.0.0-alpha.24",
     "@reventlessdev/rescript-pulumi-pulumi": "3.0.0-alpha.0",
-    "@reventlessdev/rescript-web": "1.0.0-alpha.8",
     "@reventlessdev/rescript-uuid": "2.0.0-alpha.1",
-    "@reventlessdev/reventless-core": "3.0.0-alpha.316",
+    "@reventlessdev/rescript-web": "1.0.0-alpha.8",
+    "@reventlessdev/reventless-core": "3.0.0-alpha.317",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.214",
     "@reventlessdev/reventless-interop": "3.0.0-alpha.42",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.184",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.213",
-    "@reventlessdev/reventless-postgres": "3.0.0-alpha.180"
+    "@reventlessdev/reventless-postgres": "3.0.0-alpha.181",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.185"
   },
   "devDependencies": {
     "rescript": "12.3.1",

package/src/adapter/Runtime/StreamRoutedEntryPoint_Ops.res

@@ -71,11 +71,29 @@ type registeredHandler = {
   plugin?: string,
 }
 
+// Each Lambda keeps its own key cache, so an event naming a key fetches it here,
+// before the handler decodes it; an event naming none passes straight through.
+let withPreparedKeys = (
+  handleJsonEvents: ReventlessCore.EventCollector.jsonEventsHandler,
+): ReventlessCore.EventCollector.jsonEventsHandler =>
+  stream =>
+    stream
+    ->Stream.mapEffect(json =>
+      Reventless.Pii.needsPrepare([json])
+        ? Effect.promise(() => Reventless.Pii.prepareOrThrow([json]))->Effect.map(_ => json)
+        : Effect.succeed(json)
+    )
+    ->handleJsonEvents
+
 let toStreamHandler = (
   handleJsonEvents: ReventlessCore.EventCollector.jsonEventsHandler,
 ): streamHandler =>
   (event, context) =>
-    EventCollectorChannel_DynamoDbStream_Runtime.handleStreamEvent(handleJsonEvents, event, context)
+    EventCollectorChannel_DynamoDbStream_Runtime.handleStreamEvent(
+      withPreparedKeys(handleJsonEvents),
+      event,
+      context,
+    )
 
 // Multiple components can share one source stream — e.g. every admin read
 // model (Plugins, PluginHistory, PlatformEventGraph, UIFragmentRegistry)

package/src/adapter/Runtime/StreamRoutedEntryPoint_Ops.res.mjs

@@ -2,6 +2,9 @@
 
 import * as Stdlib_JsExn from "@rescript/runtime/lib/es6/Stdlib_JsExn.js";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+import * as Effect from "effect/Effect";
+import * as Stream from "effect/Stream";
+import * as Pii$Reventless from "@reventlessdev/reventless-spec/src/components/Pii.res.mjs";
 import * as HandlerFactoryHelpersMjs from "./HandlerFactoryHelpers.mjs";
 import * as EventCollectorChannel_DynamoDbStream_Runtime$ReventlessAws from "../EventCollector/EventCollectorChannel_DynamoDbStream_Runtime.res.mjs";
 
@@ -41,8 +44,18 @@ function exnMessage(exn) {
   return Stdlib_Option.getOr(Stdlib_Option.flatMap(Stdlib_JsExn.fromException(exn), Stdlib_JsExn.message), "unknown error");
 }
 
+function withPreparedKeys(handleJsonEvents) {
+  return stream => handleJsonEvents(Stream.mapEffect(stream, json => {
+    if (Pii$Reventless.needsPrepare([json])) {
+      return Effect.map(Effect.promise(() => Pii$Reventless.prepareOrThrow([json])), () => json);
+    } else {
+      return Effect.succeed(json);
+    }
+  }));
+}
+
 function toStreamHandler(handleJsonEvents) {
-  return (event, context) => EventCollectorChannel_DynamoDbStream_Runtime$ReventlessAws.handleStreamEvent(handleJsonEvents, event, context);
+  return (event, context) => EventCollectorChannel_DynamoDbStream_Runtime$ReventlessAws.handleStreamEvent(withPreparedKeys(handleJsonEvents), event, context);
 }
 
 function addToRegistry(registry, sourceUrn, handler) {
@@ -115,6 +128,7 @@ export {
   logWarn,
   logError,
   exnMessage,
+  withPreparedKeys,
   toStreamHandler,
   addToRegistry,
   groupBySource,

package/tests/StreamRoutedPreparedKeysTest.res

@@ -0,0 +1,51 @@
+// A Lambda's stream handler fetches the keys an event's sealed fields name before
+// the component decodes it, and asks for nothing when an event names none.
+
+open JestGlobals
+
+let asked: ref<array<array<string>>> = ref([])
+let provider: Reventless.Pii.provider = {
+  ...Reventless.Pii.plain,
+  name: "counting",
+  prefetch: async keyIds => {
+    asked := asked.contents->Array.concat([keyIds])
+    Ok()
+  },
+}
+
+let sealed =
+  Dict.fromArray([
+    (
+      "event",
+      Dict.fromArray([
+        ("TAG", JSON.Encode.string("MemberNamed")),
+        ("name", Reventless.Pii.wrap("enc:v1:k-7:fake:AAAA")),
+      ])->JSON.Encode.object,
+    ),
+  ])->JSON.Encode.object
+
+describe("StreamRoutedEntryPoint_Ops.withPreparedKeys", () => {
+  beforeEach(() => {
+    asked := []
+    Reventless.Pii.Provider.install(provider)
+  })
+  afterEach(() => Reventless.Pii.Provider.install(Reventless.Pii.plain))
+
+  testPromise("prefetches before the handler sees the event, and only what it names", async () => {
+    let seen = ref([])
+    let handler: ReventlessCore.EventCollector.jsonEventsHandler = stream =>
+      stream->Stream.runForEach(
+        json =>
+          Effect.sync(
+            () => seen := seen.contents->Array.concat([(json, asked.contents->Array.length)]),
+          ),
+      )
+    let wrapped = StreamRoutedEntryPoint_Ops.withPreparedKeys(handler)
+    let _ = await wrapped(
+      Stream.fromIterable([sealed, JSON.Encode.string("plain")]),
+    )->Effect.runPromise
+    expect(asked.contents)->toEqual([["k-7"]])
+    // The sealed event arrived after its key was asked for.
+    expect(seen.contents->Array.map(((_, n)) => n))->toEqual([1, 1])
+  })
+})