@reventlessdev/reventless-core 3.0.0-alpha.182 → 3.0.0-alpha.184

package/CHANGELOG.md

@@ -3,6 +3,20 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.184 (2026-07-27)
+
+### Bug Fixes
+
+* **aws:** grant DCB command Lambda write access to InboundTranslationSlice audit tables ([2c445fa](https://github.com/ReventlessDev/reventless-core/commit/2c445faf9692573d0eab2f0d4a456e8c5d723b41))
+
+
+# 3.0.0-alpha.183 (2026-07-27)
+
+### Bug Fixes
+
+* **aws:** keep InboundTranslationSlice runtime path out of the Pulumi graph ([9166cff](https://github.com/ReventlessDev/reventless-core/commit/9166cff85939012d12e44835e2eb79a88fd1b66a))
+
+
 # 3.0.0-alpha.182 (2026-07-26)
 
 ### Bug Fixes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-core",
-  "version": "3.0.0-alpha.182",
+  "version": "3.0.0-alpha.184",
   "description": "Core package for Reventless framework",
   "license": "Apache-2.0",
   "jest": {
@@ -30,15 +30,15 @@
     "uuid": "^13.0.0",
     "@reventlessdev/rescript-effect": "0.1.0-alpha.31",
     "@reventlessdev/rescript-fast-csv": "1.2.0-alpha.14",
-    "@reventlessdev/rescript-hash-object": "1.2.0-alpha.13",
-    "@reventlessdev/rescript-jest": "1.0.0-alpha.9",
     "@reventlessdev/rescript-node-streams": "1.1.0-alpha.13",
+    "@reventlessdev/rescript-jest": "1.0.0-alpha.9",
+    "@reventlessdev/rescript-hash-object": "1.2.0-alpha.13",
     "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.17",
     "@reventlessdev/rescript-ssh2": "1.1.0-alpha.14",
     "@reventlessdev/rescript-uuid": "1.1.0-alpha.17",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.105",
     "@reventlessdev/reventless-interop": "3.0.0-alpha.29",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.81",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.105"
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.81"
   },
   "devDependencies": {
     "rescript": "12.3.0",

package/src/components/Dcb/Dcb_Builder.res

@@ -720,7 +720,7 @@ module Make = (
                     let result = await receiveFn(args)
                     let response =
                       result
-                      ->InboundTranslationSlice.receiveResultToOutcome
+                      ->InboundTranslationSlice_Callback.receiveResultToOutcome
                       ->CommandTopic.commandOutcomeToJson
                     response->Obj.magic
                   })
@@ -739,12 +739,19 @@ module Make = (
             composite->Obj.magic
           })
 
-        // Resources the sync Lambda needs access to
+        // Resources the sync Lambda needs access to. An InboundTranslationSlice
+        // exposes its audit table under `queryDb.resources` — its top-level
+        // `resources` is empty — and the sync DCB command Lambda is the Route 0
+        // target that writes those audit rows. Granting only `outputs.resources`
+        // left the Lambda role without `PutItem` on the audit table, so every
+        // audit write failed with AccessDenied (swallowed at the write site,
+        // surfacing only as a permanently empty audit view). Include the audit
+        // table's resources so the role can write it.
         let dcbResources = Array.concat(
           stateChangeSlicesOutputs->Dict.valuesToArray->Array.flatMap(outputs => outputs.resources),
           inboundTranslationSlicesOutputs
           ->Dict.valuesToArray
-          ->Array.flatMap(outputs => outputs.resources),
+          ->Array.flatMap(outputs => Array.concat(outputs.resources, outputs.queryDb.resources)),
         )
 
         // Resources the async Lambda needs access to

package/src/components/Dcb/Dcb_Builder.res.mjs

@@ -23,7 +23,6 @@ import * as ApiNoApiHelpers$ReventlessCore from "../Api/ApiNoApiHelpers.res.mjs"
 import * as Plugin_Structure$ReventlessCore from "../../plugin/component/Plugin_Structure.res.mjs";
 import * as DcbEventLog_Builder$ReventlessCore from "../DcbEventLog/DcbEventLog_Builder.res.mjs";
 import * as CommandTopic_Builder$ReventlessCore from "../CommandTopic/CommandTopic_Builder.res.mjs";
-import * as InboundTranslationSlice$ReventlessCore from "../InboundTranslationSlice/InboundTranslationSlice.res.mjs";
 import * as AutomationSlice_Callback$ReventlessCore from "../AutomationSlice/AutomationSlice_Callback.res.mjs";
 import * as CommandGenerator_Callback$ReventlessCore from "../CommandGenerator/CommandGenerator_Callback.res.mjs";
 import * as InboundTranslationSlice_Callback$ReventlessCore from "../InboundTranslationSlice/InboundTranslationSlice_Callback.res.mjs";
@@ -384,7 +383,7 @@ function Make(DcbEventLogStorage) {
             if (receiveFn !== undefined) {
               return Effect.promise(async () => {
                 let result = await receiveFn(args);
-                return CommandTopic$ReventlessCore.commandOutcomeToJson(InboundTranslationSlice$ReventlessCore.receiveResultToOutcome(result));
+                return CommandTopic$ReventlessCore.commandOutcomeToJson(InboundTranslationSlice_Callback$ReventlessCore.receiveResultToOutcome(result));
               });
             } else {
               return baseHandler(event, ctx);
@@ -399,7 +398,7 @@ function Make(DcbEventLogStorage) {
           }
         };
       });
-      let dcbResources = Object.values(stateChangeSlicesOutputs).flatMap(outputs => outputs.resources).concat(Object.values(inboundTranslationSlicesOutputs).flatMap(outputs => outputs.resources));
+      let dcbResources = Object.values(stateChangeSlicesOutputs).flatMap(outputs => outputs.resources).concat(Object.values(inboundTranslationSlicesOutputs).flatMap(outputs => outputs.resources.concat(outputs.queryDb.resources)));
       let asyncDcbResources = Object.values(asyncStateChangeSlicesOutputs).flatMap(outputs => outputs.resources);
       let inboundFieldNames = inboundTranslationSliceData.map(param => param[1]);
       let inboundSchemas = inboundTranslationSliceData.map(param => param[3]);

package/src/components/InboundTranslationSlice/InboundTranslationSlice.res

@@ -5,31 +5,8 @@ type outputs = ReventlessInfra.InboundTranslationSlice.outputs
 type operations = ReventlessInfra.InboundTranslationSlice.operations
 type acceptedResult = ReventlessInfra.InboundTranslationSlice.acceptedResult
 type rejectedResult = ReventlessInfra.InboundTranslationSlice.rejectedResult
-type receiveResult = ReventlessInfra.InboundTranslationSlice.receiveResult
 type component = Component.t<t, outputs, operations>
 
-/**
-Map a `receive` outcome onto the `CommandResult` union the slice's mutation field
-declares, so both surfaces feed `CommandTopic.commandOutcomeToJson` rather than
-hand-rolling a second `__typename` writer.
-
-A translation can fan out across several targets; the mutation response reports
-the first target as `entityId` and the fan-out count as `eventCount`. The
-per-target detail stays queryable through the slice's audit read model. When the
-translation legitimately produced no command, `entityId` is omitted (encoding as
-`null`) rather than reporting a target that does not exist.
-*/
-let receiveResultToOutcome = (result: receiveResult): CommandTopic.commandOutcome =>
-  switch result {
-  | Ok({requestId, targetIds, commandCount}) =>
-    switch targetIds->Array.get(0) {
-    | Some(entityId) => Accepted({msgId: requestId, entityId, eventCount: commandCount})
-    | None => Accepted({msgId: requestId, eventCount: commandCount})
-    }
-  | Error({requestId, error}) =>
-    Rejected({msgId: requestId, errorCode: "TranslationFailed", errorDetail: Some(error)})
-  }
-
 let toResolvedOutputs = (
   outputs: outputs,
 ): Pulumi.Output.t<ReventlessInterop.InboundTranslationSlice.resolvedOutputs> =>

package/src/components/InboundTranslationSlice/InboundTranslationSlice.res.mjs

@@ -3,36 +3,6 @@
 import * as Pulumi from "@pulumi/pulumi";
 import * as Adapter$ReventlessCore from "../../adapter/Adapter.res.mjs";
 
-function receiveResultToOutcome(result) {
-  if (result.TAG === "Ok") {
-    let match = result._0;
-    let commandCount = match.commandCount;
-    let requestId = match.requestId;
-    let entityId = match.targetIds[0];
-    if (entityId !== undefined) {
-      return {
-        TAG: "Accepted",
-        msgId: requestId,
-        entityId: entityId,
-        eventCount: commandCount
-      };
-    } else {
-      return {
-        TAG: "Accepted",
-        msgId: requestId,
-        eventCount: commandCount
-      };
-    }
-  }
-  let match$1 = result._0;
-  return {
-    TAG: "Rejected",
-    msgId: match$1.requestId,
-    errorCode: "TranslationFailed",
-    errorDetail: match$1.error
-  };
-}
-
 function toResolvedOutputs(outputs) {
   return Pulumi.all([
     Adapter$ReventlessCore.resourcesToInterop(outputs.resources),
@@ -49,7 +19,6 @@ let componentType = "InboundTranslationSlice";
 
 export {
   componentType,
-  receiveResultToOutcome,
   toResolvedOutputs,
 }
 /* @pulumi/pulumi Not a pure module */

package/src/components/InboundTranslationSlice/InboundTranslationSlice_Callback.res

@@ -18,6 +18,34 @@ type auditRow = {
   receivedAt: string,
 }
 
+/**
+Map a `receive` outcome onto the `CommandResult` union the slice's mutation field
+declares, so both surfaces feed `CommandTopic.commandOutcomeToJson` rather than
+hand-rolling a second `__typename` writer.
+
+A translation can fan out across several targets; the mutation response reports
+the first target as `entityId` and the fan-out count as `eventCount`. The
+per-target detail stays queryable through the slice's audit read model. When the
+translation legitimately produced no command, `entityId` is omitted (encoding as
+`null`) rather than reporting a target that does not exist.
+
+Lives here rather than in `InboundTranslationSlice.res` because the deployed DCB
+command Lambda calls it at runtime, and the base module imports `@pulumi/pulumi`
+at deploy time — keeping this runtime-pure keeps Pulumi out of the Lambda graph.
+*/
+let receiveResultToOutcome = (
+  result: ReventlessInfra.InboundTranslationSlice.receiveResult,
+): CommandTopic.commandOutcome =>
+  switch result {
+  | Ok({requestId, targetIds, commandCount}) =>
+    switch targetIds->Array.get(0) {
+    | Some(entityId) => Accepted({msgId: requestId, entityId, eventCount: commandCount})
+    | None => Accepted({msgId: requestId, eventCount: commandCount})
+    }
+  | Error({requestId, error}) =>
+    Rejected({msgId: requestId, errorCode: "TranslationFailed", errorDetail: Some(error)})
+  }
+
 module type T = {
   module Spec: Reventless.InboundTranslationSlice.Spec
   module Translation: Reventless.InboundTranslationSlice.Translation with module Spec := Spec

package/src/components/InboundTranslationSlice/InboundTranslationSlice_Callback.res.mjs

@@ -25,6 +25,36 @@ let auditRowSchema = S.schema(s => ({
   receivedAt: s.m(S.string)
 }));
 
+function receiveResultToOutcome(result) {
+  if (result.TAG === "Ok") {
+    let match = result._0;
+    let commandCount = match.commandCount;
+    let requestId = match.requestId;
+    let entityId = match.targetIds[0];
+    if (entityId !== undefined) {
+      return {
+        TAG: "Accepted",
+        msgId: requestId,
+        entityId: entityId,
+        eventCount: commandCount
+      };
+    } else {
+      return {
+        TAG: "Accepted",
+        msgId: requestId,
+        eventCount: commandCount
+      };
+    }
+  }
+  let match$1 = result._0;
+  return {
+    TAG: "Rejected",
+    msgId: match$1.requestId,
+    errorCode: "TranslationFailed",
+    errorDetail: match$1.error
+  };
+}
+
 function Make(Spec) {
   return Translation => {
     let auditLog = {};
@@ -190,6 +220,7 @@ function Make(Spec) {
 export {
   auditStatusSchema,
   auditRowSchema,
+  receiveResultToOutcome,
   Make,
 }
 /*  Not a pure module */