@reventlessdev/reventless-core 3.0.0-alpha.219 → 3.0.0-alpha.220

package/CHANGELOG.md

@@ -3,6 +3,13 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.220 (2026-08-09)
+
+### Features
+
+* **core,aws:** bundle a runtime extension's companion packages, guard imports at deploy ([e975175](https://github.com/ReventlessDev/reventless-core/commit/e9751758f51582a8e46db362219f725bb5f1bcde))
+
+
 # 3.0.0-alpha.219 (2026-08-09)
 
 **Note:** Version bump only for package @reventlessdev/reventless-core

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-core",
-  "version": "3.0.0-alpha.219",
+  "version": "3.0.0-alpha.220",
   "description": "Core package for Reventless framework",
   "license": "Apache-2.0",
   "jest": {
@@ -29,16 +29,16 @@
     "sury": "11.0.0-alpha.4",
     "uuid": "^13.0.0",
     "@reventlessdev/rescript-effect": "0.1.0-alpha.32",
-    "@reventlessdev/rescript-fast-csv": "2.0.0-alpha.2",
     "@reventlessdev/rescript-hash-object": "1.2.0-alpha.14",
     "@reventlessdev/rescript-jest": "1.0.0-alpha.10",
-    "@reventlessdev/rescript-node": "2.0.0-alpha.2",
-    "@reventlessdev/rescript-ssh2": "2.0.0-alpha.2",
+    "@reventlessdev/rescript-fast-csv": "2.0.0-alpha.3",
     "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.18",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.130",
+    "@reventlessdev/rescript-node": "2.0.0-alpha.3",
+    "@reventlessdev/rescript-ssh2": "2.0.0-alpha.3",
     "@reventlessdev/rescript-uuid": "2.0.0-alpha.0",
-    "@reventlessdev/reventless-interop": "3.0.0-alpha.30",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.104"
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.131",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.105",
+    "@reventlessdev/reventless-interop": "3.0.0-alpha.30"
   },
   "devDependencies": {
     "rescript": "12.3.0",

package/src/adapter/RuntimeExtension/RuntimeExtension.res

@@ -90,6 +90,28 @@ trade than a loud, skipped hook.
 */
 module type Extension = {
   let moduleUrl: string
+  /**
+  `import.meta.url` of one module per COMPANION package this extension imports at
+  runtime — packages that must ride into the code archive alongside the
+  extension's own. `[]` for an extension importing nothing outside the
+  framework-provided set.
+
+  Needed because a companion is invisible to every conventional lookup: the
+  ecosystem convention for split packages declares the neutral core as a
+  `peerDependency` (true in the deploy program's process, false in the Lambda),
+  so a `dependencies` walk finds nothing; and a companion named by bare package
+  name has no resolution root the framework could use — the one thing that
+  resolves robustly is a module URL the companion states about itself, exactly
+  like `moduleUrl`. A companion package exposes one by exporting
+  `let moduleUrl: string = %raw("import.meta.url")` from any module the
+  extension already imports (spec modules can lift the
+  `@@reventless.spec`-injected one).
+
+  Companions are bundle-only: the entry shell imports only the extension
+  modules, and Node resolves companions from the archive's `node_modules` like
+  any other import.
+  */
+  let companionModuleUrls: array<string>
   let onColdStart: coldStartHook
 }
 
@@ -127,6 +149,18 @@ let moduleUrls = (): array<string> =>
     E.moduleUrl
   })
 
+/**
+Every registered extension's companion module URLs, flattened in registration
+order. Read only by the provider's code-archive builder — unlike `moduleUrls`,
+these never reach a runtime's config: companions are bundled so the extension's
+own imports resolve, not imported by the entry shell.
+*/
+let companionModuleUrls = (): array<string> =>
+  extensions.contents->Array.flatMap(e => {
+    module E = unpack(e)
+    E.companionModuleUrls
+  })
+
 let log = Logger.fromEnv()
 
 /**

package/src/adapter/RuntimeExtension/RuntimeExtension.res.mjs

@@ -26,6 +26,10 @@ function moduleUrls() {
   return extensions.contents.map(e => e.moduleUrl);
 }
 
+function companionModuleUrls() {
+  return extensions.contents.flatMap(e => e.companionModuleUrls);
+}
+
 let log = Logger$ReventlessCore.fromEnv();
 
 function runHook(hook, index, runtimeKind, component, plugin, platform) {
@@ -52,6 +56,7 @@ export {
   reset,
   isEmpty,
   moduleUrls,
+  companionModuleUrls,
   log,
   runHook,
   notifyColdStartHooks,

package/tests/adapter/RuntimeExtensionHookReachTest.res

@@ -47,6 +47,7 @@ describe("RuntimeExtension reaches the runtime callback hooks", () => {
     let seenAtColdStart: array<string> = []
     module Gatekeeper: RuntimeExtension.Extension = {
       let moduleUrl = "file:///pkg/gatekeeper.res.mjs"
+      let companionModuleUrls = []
       let onColdStart = (~runtimeKind as _, ~component, ~plugin as _, ~platform as _) => {
         seenAtColdStart->Array.push(component)
         CommandGenerator_Callback.registerCommandInterceptor(async (

package/tests/adapter/RuntimeExtensionHookReachTest.res.mjs

@@ -53,6 +53,7 @@ globalThis.describe("RuntimeExtension reaches the runtime callback hooks", () =>
   });
   globalThis.test("an interceptor registered at cold start denies a later command", async () => {
     let seenAtColdStart = [];
+    let companionModuleUrls = [];
     let onColdStart = (param, component, param$1, param$2) => {
       seenAtColdStart.push(component);
       CommandGenerator_Callback$ReventlessCore.registerCommandInterceptor(async (param, componentName, param$1, tag, param$2) => ({
@@ -62,6 +63,7 @@ globalThis.describe("RuntimeExtension reaches the runtime callback hooks", () =>
     };
     let Gatekeeper = {
       moduleUrl: "file:///pkg/gatekeeper.res.mjs",
+      companionModuleUrls: companionModuleUrls,
       onColdStart: onColdStart
     };
     RuntimeExtension$ReventlessCore.use(Gatekeeper);

package/tests/adapter/RuntimeExtensionTest.res

@@ -7,11 +7,12 @@ type call = {
   platform: option<string>,
 }
 
-let recorderNamed = (label: string, into: array<(string, call)>): module(
+let recorderNamed = (~companions: array<string>=[], label: string, into: array<(string, call)>): module(
   RuntimeExtension.Extension
 ) => {
   module R = {
     let moduleUrl = `file:///pkg/${label}.res.mjs`
+    let companionModuleUrls = companions
     let onColdStart = (~runtimeKind, ~component, ~plugin, ~platform) =>
       into->Array.push((label, {runtimeKind, component, plugin, platform}))
   }
@@ -32,6 +33,7 @@ describe("RuntimeExtension", () => {
   testSync("empty registry is the default and notifyColdStart is silent", () => {
     expect(RuntimeExtension.isEmpty())->toBe(true)
     expect(RuntimeExtension.moduleUrls())->toEqual([])
+    expect(RuntimeExtension.companionModuleUrls())->toEqual([])
     fireAggregate()
     expect(true)->toBe(true)
   })
@@ -77,10 +79,38 @@ describe("RuntimeExtension", () => {
     ])
   })
 
+  testSync("companionModuleUrls flattens every registration's companions, in order", () => {
+    let calls: array<(string, call)> = []
+    RuntimeExtension.use(
+      recorderNamed(
+        ~companions=["file:///pkg/companion-a.res.mjs", "file:///pkg/companion-b.res.mjs"],
+        "tracing",
+        calls,
+      ),
+    )
+    RuntimeExtension.use(recorderNamed("accounting", calls))
+    RuntimeExtension.use(
+      recorderNamed(~companions=["file:///pkg/companion-c.res.mjs"], "quota", calls),
+    )
+
+    expect(RuntimeExtension.companionModuleUrls())->toEqual([
+      "file:///pkg/companion-a.res.mjs",
+      "file:///pkg/companion-b.res.mjs",
+      "file:///pkg/companion-c.res.mjs",
+    ])
+    // Companions are bundle-only: the entry shell's import list is untouched.
+    expect(RuntimeExtension.moduleUrls())->toEqual([
+      "file:///pkg/tracing.res.mjs",
+      "file:///pkg/accounting.res.mjs",
+      "file:///pkg/quota.res.mjs",
+    ])
+  })
+
   testSync("a throwing extension is skipped; the runtime and its siblings survive", () => {
     let calls: array<(string, call)> = []
     module Broken: RuntimeExtension.Extension = {
       let moduleUrl = "file:///pkg/broken.res.mjs"
+      let companionModuleUrls = []
       let onColdStart = (~runtimeKind as _, ~component as _, ~plugin as _, ~platform as _) =>
         JsError.throwWithMessage("extension blew up")
     }

package/tests/adapter/RuntimeExtensionTest.res.mjs

@@ -3,7 +3,8 @@
 import * as Stdlib_JsError from "@rescript/runtime/lib/es6/Stdlib_JsError.js";
 import * as RuntimeExtension$ReventlessCore from "../../src/adapter/RuntimeExtension/RuntimeExtension.res.mjs";
 
-function recorderNamed(label, into) {
+function recorderNamed(companionsOpt, label, into) {
+  let companions = companionsOpt !== undefined ? companionsOpt : [];
   let moduleUrl = `file:///pkg/` + label + `.res.mjs`;
   let onColdStart = (runtimeKind, component, plugin, platform) => {
     into.push([
@@ -18,6 +19,7 @@ function recorderNamed(label, into) {
   };
   return {
     moduleUrl: moduleUrl,
+    companionModuleUrls: companions,
     onColdStart: onColdStart
   };
 }
@@ -31,12 +33,13 @@ globalThis.describe("RuntimeExtension", () => {
   globalThis.test("empty registry is the default and notifyColdStart is silent", () => {
     globalThis.expect(RuntimeExtension$ReventlessCore.isEmpty()).toBe(true);
     globalThis.expect(RuntimeExtension$ReventlessCore.moduleUrls()).toEqual([]);
+    globalThis.expect(RuntimeExtension$ReventlessCore.companionModuleUrls()).toEqual([]);
     fireAggregate();
     globalThis.expect(true).toBe(true);
   });
   globalThis.test("a registered extension receives the runtime's full identity", () => {
     let calls = [];
-    RuntimeExtension$ReventlessCore.use(recorderNamed("tracing", calls));
+    RuntimeExtension$ReventlessCore.use(recorderNamed(undefined, "tracing", calls));
     fireAggregate();
     globalThis.expect(calls).toEqual([[
         "tracing",
@@ -50,8 +53,8 @@ globalThis.describe("RuntimeExtension", () => {
   });
   globalThis.test("several extensions compose, in registration order", () => {
     let calls = [];
-    RuntimeExtension$ReventlessCore.use(recorderNamed("tracing", calls));
-    RuntimeExtension$ReventlessCore.use(recorderNamed("accounting", calls));
+    RuntimeExtension$ReventlessCore.use(recorderNamed(undefined, "tracing", calls));
+    RuntimeExtension$ReventlessCore.use(recorderNamed(undefined, "accounting", calls));
     fireAggregate();
     globalThis.expect(calls.map(param => param[0])).toEqual([
       "tracing",
@@ -60,23 +63,44 @@ globalThis.describe("RuntimeExtension", () => {
   });
   globalThis.test("moduleUrls reports every registration, in order", () => {
     let calls = [];
-    RuntimeExtension$ReventlessCore.use(recorderNamed("tracing", calls));
-    RuntimeExtension$ReventlessCore.use(recorderNamed("accounting", calls));
+    RuntimeExtension$ReventlessCore.use(recorderNamed(undefined, "tracing", calls));
+    RuntimeExtension$ReventlessCore.use(recorderNamed(undefined, "accounting", calls));
     globalThis.expect(RuntimeExtension$ReventlessCore.isEmpty()).toBe(false);
     globalThis.expect(RuntimeExtension$ReventlessCore.moduleUrls()).toEqual([
       "file:///pkg/tracing.res.mjs",
       "file:///pkg/accounting.res.mjs"
     ]);
   });
+  globalThis.test("companionModuleUrls flattens every registration's companions, in order", () => {
+    let calls = [];
+    RuntimeExtension$ReventlessCore.use(recorderNamed([
+      "file:///pkg/companion-a.res.mjs",
+      "file:///pkg/companion-b.res.mjs"
+    ], "tracing", calls));
+    RuntimeExtension$ReventlessCore.use(recorderNamed(undefined, "accounting", calls));
+    RuntimeExtension$ReventlessCore.use(recorderNamed(["file:///pkg/companion-c.res.mjs"], "quota", calls));
+    globalThis.expect(RuntimeExtension$ReventlessCore.companionModuleUrls()).toEqual([
+      "file:///pkg/companion-a.res.mjs",
+      "file:///pkg/companion-b.res.mjs",
+      "file:///pkg/companion-c.res.mjs"
+    ]);
+    globalThis.expect(RuntimeExtension$ReventlessCore.moduleUrls()).toEqual([
+      "file:///pkg/tracing.res.mjs",
+      "file:///pkg/accounting.res.mjs",
+      "file:///pkg/quota.res.mjs"
+    ]);
+  });
   globalThis.test("a throwing extension is skipped; the runtime and its siblings survive", () => {
     let calls = [];
+    let companionModuleUrls = [];
     let onColdStart = (param, param$1, param$2, param$3) => Stdlib_JsError.throwWithMessage("extension blew up");
     let Broken = {
       moduleUrl: "file:///pkg/broken.res.mjs",
+      companionModuleUrls: companionModuleUrls,
       onColdStart: onColdStart
     };
     RuntimeExtension$ReventlessCore.use(Broken);
-    RuntimeExtension$ReventlessCore.use(recorderNamed("accounting", calls));
+    RuntimeExtension$ReventlessCore.use(recorderNamed(undefined, "accounting", calls));
     fireAggregate();
     globalThis.expect(calls.map(param => param[0])).toEqual(["accounting"]);
   });
@@ -96,7 +120,7 @@ globalThis.describe("RuntimeExtension", () => {
   });
   globalThis.test("reset clears the registry", () => {
     let calls = [];
-    RuntimeExtension$ReventlessCore.use(recorderNamed("tracing", calls));
+    RuntimeExtension$ReventlessCore.use(recorderNamed(undefined, "tracing", calls));
     RuntimeExtension$ReventlessCore.reset();
     fireAggregate();
     globalThis.expect(RuntimeExtension$ReventlessCore.isEmpty()).toBe(true);

package/tests/commandtopic/CommandOutcomeHookTest.res

@@ -228,6 +228,7 @@ describe("CommandTopic command-outcome hook:", () => {
       // seam already reaches, so an extension picks it up alongside the other four.
       module Accountant: RuntimeExtension.Extension = {
         let moduleUrl = "file:///pkg/accountant.res.mjs"
+        let companionModuleUrls = []
         let onColdStart = (~runtimeKind as _, ~component as _, ~plugin as _, ~platform as _) =>
           record()
       }

package/tests/commandtopic/CommandOutcomeHookTest.res.mjs

@@ -321,9 +321,11 @@ globalThis.describe("CommandTopic command-outcome hook:", () => {
       globalThis.expect(observed.contents.length).toBe(0);
     });
     globalThis.test("an out-of-tree extension can register it from onColdStart", async () => {
+      let companionModuleUrls = [];
       let onColdStart = (param, param$1, param$2, param$3) => record();
       let Accountant = {
         moduleUrl: "file:///pkg/accountant.res.mjs",
+        companionModuleUrls: companionModuleUrls,
         onColdStart: onColdStart
       };
       RuntimeExtension$ReventlessCore.use(Accountant);