@reventlessdev/reventless-seed-aws 1.0.0-alpha.3 → 1.0.0-alpha.30

package/lib/bs/src/ReventlessSeedAws.res.mjs

@@ -4,6 +4,8 @@ import * as Stdlib_Array from "@rescript/runtime/lib/es6/Stdlib_Array.js";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Nodechild_process from "node:child_process";
 import * as Seed$ReventlessSeed from "@reventlessdev/reventless-seed/src/Seed.res.mjs";
+import * as Primitive_exceptions from "@rescript/runtime/lib/es6/Primitive_exceptions.js";
+import * as Seed_Client$ReventlessSeed from "@reventlessdev/reventless-seed/src/Seed_Client.res.mjs";
 import * as Seed_Prompt$ReventlessSeed from "@reventlessdev/reventless-seed/src/Seed_Prompt.res.mjs";
 import * as Seed_Connect$ReventlessSeed from "@reventlessdev/reventless-seed/src/Seed_Connect.res.mjs";
 
@@ -108,7 +110,7 @@ async function resolveStack(projectDir, backend, stack) {
   return await Seed_Prompt$ReventlessSeed.select("Stack:", stacks.map(s => [
     s,
     s
-  ]), undefined);
+  ]), undefined, undefined);
 }
 
 async function fetchConfig(hostShellUrl) {
@@ -152,34 +154,28 @@ function resolveField(envKey, fromSource, human) {
   };
 }
 
-async function resolveEndpoints(projectDir, backend, stack) {
-  let outputs = stackOutputs(projectDir, backend, stack);
-  let hostShellUrl = Stdlib_Option.flatMap(field(outputs, "hostShellUrl"), asString);
-  if (hostShellUrl !== undefined) {
-    let cfg = await fetchConfig(hostShellUrl);
+function endpointsFrom(stack, source) {
+  if (source.TAG === "HostShellConfig") {
+    let cfg = source._0;
     let fromCfg = key => Stdlib_Option.flatMap(field(cfg, key), asString);
-    let endpoint = resolveField("REVENTLESS_GRAPHQL_ENDPOINT", fromCfg("apiEndpoint"), "apiEndpoint");
-    let uploadEndpoint = resolveField("REVENTLESS_UPLOAD_ENDPOINT", fromCfg("uploadEndpoint"), "uploadEndpoint");
-    let region = resolveField("AWS_REGION", fromCfg("region"), "region");
-    let clientId = resolveField("COGNITO_CLIENT_ID", fromCfg("cognitoClientId"), "cognitoClientId");
-    return [
-      endpoint,
-      uploadEndpoint,
-      region,
-      clientId
-    ];
+    return {
+      graphql: resolveField("REVENTLESS_GRAPHQL_ENDPOINT", fromCfg("apiEndpoint"), "apiEndpoint"),
+      cognitoRegion: resolveField("AWS_REGION", fromCfg("region"), "region"),
+      cognitoClientId: resolveField("COGNITO_CLIENT_ID", fromCfg("cognitoClientId"), "cognitoClientId")
+    };
   }
+  let outputs = source._0;
   let out = key => Stdlib_Option.flatMap(field(outputs, key), asString);
   let match = Seed_Prompt$ReventlessSeed.envValue("REVENTLESS_GRAPHQL_ENDPOINT");
   let match$1 = out("domainMergedApiEndpoint");
   let match$2 = out("domainApiEndpoint");
-  let endpoint$1;
+  let tmp;
   if (match !== undefined) {
-    endpoint$1 = match;
+    tmp = match;
   } else if (match$1 !== undefined) {
-    endpoint$1 = match$1;
+    tmp = match$1;
   } else if (match$2 !== undefined) {
-    endpoint$1 = match$2;
+    tmp = match$2;
   } else {
     throw {
       RE_EXN_ID: Seed$ReventlessSeed.Failed,
@@ -187,15 +183,24 @@ async function resolveEndpoints(projectDir, backend, stack) {
       Error: new Error()
     };
   }
-  let region$1 = resolveField("AWS_REGION", out("cognitoRegion"), "cognitoRegion");
-  let clientId$1 = resolveField("COGNITO_CLIENT_ID", out("cognitoUserPoolClientId"), "cognitoUserPoolClientId");
-  let uploadEndpoint$1 = Stdlib_Option.getOr(Seed_Prompt$ReventlessSeed.envValue("REVENTLESS_UPLOAD_ENDPOINT"), "");
-  return [
-    endpoint$1,
-    uploadEndpoint$1,
-    region$1,
-    clientId$1
-  ];
+  return {
+    graphql: tmp,
+    cognitoRegion: resolveField("AWS_REGION", out("cognitoRegion"), "cognitoRegion"),
+    cognitoClientId: resolveField("COGNITO_CLIENT_ID", out("cognitoUserPoolClientId"), "cognitoUserPoolClientId")
+  };
+}
+
+async function resolveEndpoints(projectDir, backend, stack) {
+  let outputs = stackOutputs(projectDir, backend, stack);
+  let hostShellUrl = Stdlib_Option.flatMap(field(outputs, "hostShellUrl"), asString);
+  let source = hostShellUrl !== undefined ? ({
+      TAG: "HostShellConfig",
+      _0: await fetchConfig(hostShellUrl)
+    }) : ({
+      TAG: "StackOutputs",
+      _0: outputs
+    });
+  return endpointsFrom(stack, source);
 }
 
 function cognito(region, clientId) {
@@ -276,14 +281,33 @@ function cognito(region, clientId) {
   };
 }
 
+async function setActiveRole(client, role) {
+  let argument = role !== undefined ? JSON.stringify(role) : "null";
+  try {
+    await Seed_Client$ReventlessSeed.gql(client, `mutation { Platform_SetActiveRole(activeRole: ` + argument + `) { activeRole availableRoles } }`, "Platform_SetActiveRole");
+    return;
+  } catch (raw_message) {
+    let message = Primitive_exceptions.internalToException(raw_message);
+    if (message.RE_EXN_ID === Seed$ReventlessSeed.Failed) {
+      let message$1 = message._1;
+      throw {
+        RE_EXN_ID: Seed$ReventlessSeed.Failed,
+        _1: message$1.includes("Platform_SetActiveRole") ? `this deployment offers no role switch — \`Platform_SetActiveRole\` is a split-API field, and a unified-mode API does not carry it. Change the role in the host shell instead.\n  ` + message$1 : message$1,
+        Error: new Error()
+      };
+    }
+    throw message;
+  }
+}
+
 function connect($staropt$star, stack, backend, param) {
   return async () => {
     let projectDir = $staropt$star !== undefined ? $staropt$star : ".";
     let url = Seed_Prompt$ReventlessSeed.envValue("SEED_PULUMI_BACKEND");
     let backend$1 = url !== undefined ? url : backend;
     let stackName = await resolveStack(projectDir, backend$1, stack);
-    let match = await resolveEndpoints(projectDir, backend$1, stackName);
-    return await Seed_Connect$ReventlessSeed.make(stackName, match[0], match[1], cognito(match[2], match[3]), undefined);
+    let eps = await resolveEndpoints(projectDir, backend$1, stackName);
+    return await Seed_Connect$ReventlessSeed.make(stackName, eps.graphql, cognito(eps.cognitoRegion, eps.cognitoClientId), setActiveRole, undefined);
   };
 }
 
@@ -298,8 +322,10 @@ export {
   resolveStack,
   fetchConfig,
   resolveField,
+  endpointsFrom,
   resolveEndpoints,
   cognito,
+  setActiveRole,
   connect,
 }
 /* node:child_process Not a pure module */

package/lib/bs/src/ReventlessSeedAws_Quiesce.res

@@ -0,0 +1,307 @@
+// Taking a deployed stack's runtimes out of service for the length of a wipe,
+// and putting them back exactly as they were.
+//
+// Why a wipe needs this at all: a truncate is not durable while the runtimes
+// that own the data are running. A slice runtime keeps its TODO list in a
+// module-level dict for the lifetime of its execution environment and re-saves
+// every row it holds at the end of each invocation — including the scheduled
+// sweep, which carries no events. Emptying the table under a warm container
+// therefore succeeds and is then undone, byte for byte, by the next sweep: the
+// rows are not recomputed from anything, so their ids and timestamps come back
+// identical. Emptying the upstream stores first does not help, because nothing
+// upstream is read.
+//
+// The answer is to remove the contention rather than to outrun it, which takes
+// two distinct steps, in this order:
+//
+//   1. HOLD — reserve 0 concurrency on every function in scope, so no new
+//      invocation can start while the wipe and its verification run. This alone
+//      is not enough: a reservation stops invocations, it does not discard the
+//      execution environment that holds the state.
+//   2. RECYCLE — change each function's configuration once. A configuration
+//      change is the documented way to make Lambda discard existing execution
+//      environments, so whatever a warm container was holding is gone before it
+//      can be invoked again. Done while still held, so the container that
+//      eventually replaces it starts from the emptied store.
+//
+// The recycle is a round trip — a marker variable added, then the original map
+// put back — so the function ends the run byte-identical to how it started and
+// `pulumi preview` reports no drift. The second update recycles again, which is
+// harmless: it happens while the hold is still on and the store is already
+// empty.
+//
+// Everything acquired here is released on the failure path as well as the
+// success path, and the release never throws: a reset that aborted mid-wipe
+// must still hand the stack back. Release failures come back as warnings for
+// the caller to print, because a function left at zero concurrency is a stack
+// left switched off, and that has to be said out loud rather than raised as one
+// more exception on top of whatever already went wrong.
+
+module Lambda = AwsSdk.Lambda
+
+/** The variable a recycle adds and then removes. Named for what it is, so an
+    operator who finds one left behind by a killed run knows it is inert and can
+    be deleted (or left for the next `pulumi up` to remove). */
+let markerKey = "REVENTLESS_RESET_RECYCLE"
+
+/** What one function looked like before the reset touched it. */
+type held = {
+  functionName: string,
+  /** `None` = the function had no reservation at all. That is a different state
+      from a reservation of 0, and restoring it needs
+      `DeleteFunctionConcurrency` rather than a put. */
+  priorReserved: option<int>,
+  /** The variable map as it was, flattened: a function with no `Environment`
+      block at all reads as an empty map and is restored to an empty map. */
+  priorVariables: dict<string>,
+}
+
+/** The Lambda control plane is rate-limited well below the data plane, and a
+    reset touches every function in a project at once. Six at a time keeps a
+    forty-function stack under a minute per pass without risking a throttle. */
+let concurrency = 6
+
+let mapBounded = async (items: array<'a>, ~limit: int, f: 'a => promise<'b>): array<'b> => {
+  let results = Array.make(~length=items->Array.length, None)
+  let next = ref(0)
+  let worker = async () => {
+    let running = ref(true)
+    while running.contents {
+      let i = next.contents
+      if i >= items->Array.length {
+        running := false
+      } else {
+        next := i + 1
+        let r = await f(items->Array.getUnsafe(i))
+        results->Array.set(i, Some(r))
+      }
+    }
+  }
+  let _ = await Array.fromInitializer(~length=Math.Int.min(limit, items->Array.length), _ =>
+    worker()
+  )->Promise.all
+  results->Array.filterMap(x => x)
+}
+
+let errorText = (exn: exn): string =>
+  exn->JsExn.fromException->Option.flatMap(JsExn.message)->Option.getOr("unknown error")
+
+/** A throttle and a missing permission both surface as a failure to hold, and
+    they call for opposite responses — wait and re-run, versus go and fix the
+    policy. The control plane says "Rate exceeded"; the SDK says
+    "TooManyRequestsException". Match on either. */
+let isThrottle = (reason: string): bool => {
+  let r = reason->String.toLowerCase
+  r->String.includes("rate exceeded") ||
+  r->String.includes("toomanyrequests") ||
+  r->String.includes("throttl")
+}
+
+// An update is rejected while another is still settling, and a stack that was
+// deployed moments ago can still be settling. Poll rather than assume.
+let awaitSettled = async (~client, ~functionName: string): unit => {
+  let deadline = 60
+  let rec poll = async (attempt: int): unit =>
+    if attempt < deadline {
+      let out = await Lambda.GetFunctionConfigurationCommand.send(
+        client,
+        Lambda.GetFunctionConfigurationCommand.make({functionName: functionName}),
+      )
+      switch out.lastUpdateStatus {
+      | Some("InProgress") =>
+        await ReventlessSeed.Seed.Client.sleep(1000)
+        await poll(attempt + 1)
+      | _ => ()
+      }
+    }
+  await poll(0)
+}
+
+let updateVariables = async (~client, ~functionName: string, ~variables: dict<string>): unit => {
+  await awaitSettled(~client, ~functionName)
+  let _ = await Lambda.UpdateFunctionConfigurationCommand.send(
+    client,
+    Lambda.UpdateFunctionConfigurationCommand.make({
+      functionName,
+      environment: {variables: variables},
+    }),
+  )
+  await awaitSettled(~client, ~functionName)
+}
+
+/** Put one function's reservation back exactly as it was — a value it had, or no
+    reservation at all. Never throws: a function left reserved at 0 is a function
+    left switched off, which has to be said rather than raised. */
+let restoreConcurrency = async (~client, ~h: held): option<string> =>
+  switch await (
+    switch h.priorReserved {
+    | Some(n) =>
+      Lambda.PutFunctionConcurrencyCommand.send(
+        client,
+        Lambda.PutFunctionConcurrencyCommand.make({
+          functionName: h.functionName,
+          reservedConcurrentExecutions: n,
+        }),
+      )->Promise.thenResolve(_ => ())
+    | None =>
+      Lambda.DeleteFunctionConcurrencyCommand.send(
+        client,
+        Lambda.DeleteFunctionConcurrencyCommand.make({functionName: h.functionName}),
+      )->Promise.thenResolve(_ => ())
+    }
+  ) {
+  | () => None
+  | exception exn =>
+    Some(
+      `LEFT SWITCHED OFF: could not restore concurrency on ${h.functionName} (${errorText(
+          exn,
+        )}). ` ++ `It is still reserved at 0 and will not run until that is undone.`,
+    )
+  }
+
+/**
+Hand the stack back: original environment first (which also drops the marker),
+then the original concurrency.
+
+That order matters. The environment restore is itself a configuration change, so
+it recycles a second time; doing it while the function is still held means the
+container that finally serves traffic is created after the restore, not during
+it.
+
+Never throws, for either step and for any function — this runs on the abort path
+too, where an exception would replace the reason the reset failed with a
+secondary one.
+*/
+let release = async (~client, ~held: array<held>): array<string> => {
+  let warnings = await held->mapBounded(~limit=concurrency, async h => {
+    let envWarning = switch await updateVariables(
+      ~client,
+      ~functionName=h.functionName,
+      ~variables=h.priorVariables,
+    ) {
+    | () => None
+    | exception exn =>
+      Some(
+        `could not restore the environment of ${h.functionName} (${errorText(
+            exn,
+          )}) — it may still ` ++
+        `carry ${markerKey}, which is inert and is removed by the next deploy.`,
+      )
+    }
+    let concurrencyWarning = await restoreConcurrency(~client, ~h)
+    [envWarning, concurrencyWarning]->Array.filterMap(w => w)
+  })
+  warnings->Array.flat
+}
+
+/**
+Discard every held function's execution environments, so nothing that loaded
+state before the wipe can write it back afterwards.
+
+Never throws. A function that cannot be recycled is the one case where the reset
+genuinely cannot promise the store stays empty, so it comes back as a warning
+naming the function — the caller reports it rather than swallowing it.
+*/
+let recycle = async (~client, ~held: array<held>): array<string> => {
+  let warnings = await held->mapBounded(~limit=concurrency, async h => {
+    let marked = h.priorVariables->Dict.copy
+    marked->Dict.set(markerKey, "1")
+    switch await updateVariables(~client, ~functionName=h.functionName, ~variables=marked) {
+    | () => None
+    | exception exn =>
+      Some(
+        `could not recycle ${h.functionName} (${errorText(
+            exn,
+          )}) — a warm container may still hold ` ++ `pre-wipe state and write it back. Redeploy or update that function to clear it.`,
+      )
+    }
+  })
+  warnings->Array.filterMap(w => w)
+}
+
+/**
+Take every named function out of service, recording what to put back.
+
+Throws if any function cannot be held — before a single delete has been issued,
+so a reset that cannot hold the platform still has the option of not starting.
+The message names the IAM actions involved, because a missing permission is much
+the likeliest cause and "AccessDenied" on its own does not say which one.
+
+Crucially, it hands back whatever it did manage to take before throwing. The
+functions are held concurrently, so a failure part-way through the batch leaves
+earlier ones already at zero — and a reset that aborted while silently switching
+off half a stack would be a worse failure than the one it was reporting. Only the
+reservations are rolled back: this runs before `recycle`, so no environment has
+been touched yet.
+*/
+let hold = async (~client, ~functionNames: array<string>): array<held> => {
+  let attempts = await functionNames->mapBounded(~limit=concurrency, async functionName =>
+    switch await (
+      async () => {
+        let concurrencyOut = await Lambda.GetFunctionConcurrencyCommand.send(
+          client,
+          Lambda.GetFunctionConcurrencyCommand.make({functionName: functionName}),
+        )
+        let configOut = await Lambda.GetFunctionConfigurationCommand.send(
+          client,
+          Lambda.GetFunctionConfigurationCommand.make({functionName: functionName}),
+        )
+        let held = {
+          functionName,
+          priorReserved: concurrencyOut.reservedConcurrentExecutions,
+          priorVariables: configOut.environment
+          ->Option.flatMap(e => e.variables)
+          ->Option.getOr(Dict.make()),
+        }
+        let _ = await Lambda.PutFunctionConcurrencyCommand.send(
+          client,
+          Lambda.PutFunctionConcurrencyCommand.make({
+            functionName,
+            reservedConcurrentExecutions: 0,
+          }),
+        )
+        held
+      }
+    )() {
+    | held => Ok(held)
+    | exception exn => Error((functionName, errorText(exn)))
+    }
+  )
+
+  let taken = attempts->Array.filterMap(a =>
+    switch a {
+    | Ok(h) => Some(h)
+    | Error(_) => None
+    }
+  )
+  switch attempts->Array.findMap(a =>
+    switch a {
+    | Error(failure) => Some(failure)
+    | Ok(_) => None
+    }
+  ) {
+  | None => taken
+  | Some((functionName, reason)) =>
+    let rollback = await taken->mapBounded(~limit=concurrency, h => restoreConcurrency(~client, ~h))
+    let stranded = rollback->Array.filterMap(w => w)
+    let advice = if reason->isThrottle {
+      `The Lambda control plane throttled the hold. That budget is per account and region and is ` ++
+      `shared with anything else using it — a deploy, an inspector sync, another stack in the same ` ++
+      `region — so this is transient and nothing is wrong with the credentials. Wait for whatever ` ++ `else is running to finish and re-run.`
+    } else {
+      `The reset holds every runtime in scope for the length of the wipe, which needs ` ++
+      `lambda:GetFunctionConcurrency, lambda:GetFunctionConfiguration, lambda:PutFunctionConcurrency, ` ++ `lambda:DeleteFunctionConcurrency and lambda:UpdateFunctionConfiguration.`
+    }
+    throw(
+      ReventlessSeed.Seed.Failed(
+        `could not hold Lambda function ${functionName} at zero concurrency (${reason}) — nothing was ` ++
+        `deleted. ${advice} Set SEED_RESET_NO_QUIESCE=1 to wipe without the hold — but a running ` ++
+        `runtime can then write back what the wipe removes.` ++
+        switch stranded {
+        | [] => ""
+        | messages => `\n\n  ` ++ messages->Array.join("\n  ")
+        },
+      ),
+    )
+  }
+}

package/lib/bs/src/ReventlessSeedAws_Quiesce.res.mjs

@@ -0,0 +1,217 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Stdlib_Array from "@rescript/runtime/lib/es6/Stdlib_Array.js";
+import * as Stdlib_JsExn from "@rescript/runtime/lib/es6/Stdlib_JsExn.js";
+import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+import * as Primitive_option from "@rescript/runtime/lib/es6/Primitive_option.js";
+import * as Seed$ReventlessSeed from "@reventlessdev/reventless-seed/src/Seed.res.mjs";
+import * as Primitive_exceptions from "@rescript/runtime/lib/es6/Primitive_exceptions.js";
+import * as ClientLambda from "@aws-sdk/client-lambda";
+import * as Seed_Client$ReventlessSeed from "@reventlessdev/reventless-seed/src/Seed_Client.res.mjs";
+
+let markerKey = "REVENTLESS_RESET_RECYCLE";
+
+async function mapBounded(items, limit, f) {
+  let results = Stdlib_Array.make(items.length, undefined);
+  let next = {
+    contents: 0
+  };
+  let worker = async () => {
+    let running = true;
+    while (running) {
+      let i = next.contents;
+      if (i >= items.length) {
+        running = false;
+      } else {
+        next.contents = i + 1 | 0;
+        let r = await f(items[i]);
+        results[i] = Primitive_option.some(r);
+      }
+    };
+  };
+  await Promise.all(Stdlib_Array.fromInitializer(Math.min(limit, items.length), param => worker()));
+  return Stdlib_Array.filterMap(results, x => x);
+}
+
+function errorText(exn) {
+  return Stdlib_Option.getOr(Stdlib_Option.flatMap(Stdlib_JsExn.fromException(exn), Stdlib_JsExn.message), "unknown error");
+}
+
+function isThrottle(reason) {
+  let r = reason.toLowerCase();
+  if (r.includes("rate exceeded") || r.includes("toomanyrequests")) {
+    return true;
+  } else {
+    return r.includes("throttl");
+  }
+}
+
+async function awaitSettled(client, functionName) {
+  let poll = async attempt => {
+    if (attempt >= 60) {
+      return;
+    }
+    let out = await client.send(new ClientLambda.GetFunctionConfigurationCommand({
+      FunctionName: functionName
+    }));
+    let match = out.LastUpdateStatus;
+    if (match === undefined) {
+      return;
+    }
+    if (match !== "InProgress") {
+      return;
+    }
+    await Seed_Client$ReventlessSeed.sleep(1000);
+    return await poll(attempt + 1 | 0);
+  };
+  return await poll(0);
+}
+
+async function updateVariables(client, functionName, variables) {
+  await awaitSettled(client, functionName);
+  await client.send(new ClientLambda.UpdateFunctionConfigurationCommand({
+    FunctionName: functionName,
+    Environment: {
+      Variables: variables
+    }
+  }));
+  return await awaitSettled(client, functionName);
+}
+
+async function restoreConcurrency(client, h) {
+  try {
+    let n = h.priorReserved;
+    await (
+      n !== undefined ? client.send(new ClientLambda.PutFunctionConcurrencyCommand({
+          FunctionName: h.functionName,
+          ReservedConcurrentExecutions: n
+        })).then(param => {}) : client.send(new ClientLambda.DeleteFunctionConcurrencyCommand({
+          FunctionName: h.functionName
+        })).then(param => {})
+    );
+    return;
+  } catch (raw_exn) {
+    let exn = Primitive_exceptions.internalToException(raw_exn);
+    return `LEFT SWITCHED OFF: could not restore concurrency on ` + h.functionName + ` (` + errorText(exn) + `). It is still reserved at 0 and will not run until that is undone.`;
+  }
+}
+
+async function release(client, held) {
+  return (await mapBounded(held, 6, async h => {
+    let envWarning;
+    try {
+      await updateVariables(client, h.functionName, h.priorVariables);
+      envWarning = undefined;
+    } catch (raw_exn) {
+      let exn = Primitive_exceptions.internalToException(raw_exn);
+      envWarning = `could not restore the environment of ` + h.functionName + ` (` + errorText(exn) + `) — it may still ` + (`carry ` + markerKey + `, which is inert and is removed by the next deploy.`);
+    }
+    let concurrencyWarning = await restoreConcurrency(client, h);
+    return Stdlib_Array.filterMap([
+      envWarning,
+      concurrencyWarning
+    ], w => w);
+  })).flat();
+}
+
+async function recycle(client, held) {
+  let warnings = await mapBounded(held, 6, async h => {
+    let marked = Object.assign({}, h.priorVariables);
+    marked[markerKey] = "1";
+    try {
+      await updateVariables(client, h.functionName, marked);
+      return;
+    } catch (raw_exn) {
+      let exn = Primitive_exceptions.internalToException(raw_exn);
+      return `could not recycle ` + h.functionName + ` (` + errorText(exn) + `) — a warm container may still hold pre-wipe state and write it back. Redeploy or update that function to clear it.`;
+    }
+  });
+  return Stdlib_Array.filterMap(warnings, w => w);
+}
+
+async function hold(client, functionNames) {
+  let attempts = await mapBounded(functionNames, 6, async functionName => {
+    let held;
+    try {
+      held = await (async () => {
+        let concurrencyOut = await client.send(new ClientLambda.GetFunctionConcurrencyCommand({
+          FunctionName: functionName
+        }));
+        let configOut = await client.send(new ClientLambda.GetFunctionConfigurationCommand({
+          FunctionName: functionName
+        }));
+        let held_priorReserved = concurrencyOut.ReservedConcurrentExecutions;
+        let held_priorVariables = Stdlib_Option.getOr(Stdlib_Option.flatMap(configOut.Environment, e => e.Variables), {});
+        let held = {
+          functionName: functionName,
+          priorReserved: held_priorReserved,
+          priorVariables: held_priorVariables
+        };
+        await client.send(new ClientLambda.PutFunctionConcurrencyCommand({
+          FunctionName: functionName,
+          ReservedConcurrentExecutions: 0
+        }));
+        return held;
+      })();
+    } catch (raw_exn) {
+      let exn = Primitive_exceptions.internalToException(raw_exn);
+      return {
+        TAG: "Error",
+        _0: [
+          functionName,
+          errorText(exn)
+        ]
+      };
+    }
+    return {
+      TAG: "Ok",
+      _0: held
+    };
+  });
+  let taken = Stdlib_Array.filterMap(attempts, a => {
+    if (a.TAG === "Ok") {
+      return a._0;
+    }
+  });
+  let match = Stdlib_Array.findMap(attempts, a => {
+    if (a.TAG === "Ok") {
+      return;
+    } else {
+      return a._0;
+    }
+  });
+  if (match === undefined) {
+    return taken;
+  }
+  let reason = match[1];
+  let rollback = await mapBounded(taken, 6, h => restoreConcurrency(client, h));
+  let stranded = Stdlib_Array.filterMap(rollback, w => w);
+  let advice = isThrottle(reason) ? `The Lambda control plane throttled the hold. That budget is per account and region and is shared with anything else using it — a deploy, an inspector sync, another stack in the same region — so this is transient and nothing is wrong with the credentials. Wait for whatever else is running to finish and re-run.` : `The reset holds every runtime in scope for the length of the wipe, which needs lambda:GetFunctionConcurrency, lambda:GetFunctionConfiguration, lambda:PutFunctionConcurrency, lambda:DeleteFunctionConcurrency and lambda:UpdateFunctionConfiguration.`;
+  throw {
+    RE_EXN_ID: Seed$ReventlessSeed.Failed,
+    _1: `could not hold Lambda function ` + match[0] + ` at zero concurrency (` + reason + `) — nothing was ` + (`deleted. ` + advice + ` Set SEED_RESET_NO_QUIESCE=1 to wipe without the hold — but a running `) + `runtime can then write back what the wipe removes.` + (
+      stranded.length !== 0 ? `\n\n  ` + stranded.join("\n  ") : ""
+    ),
+    Error: new Error()
+  };
+}
+
+let Lambda;
+
+let concurrency = 6;
+
+export {
+  Lambda,
+  markerKey,
+  concurrency,
+  mapBounded,
+  errorText,
+  isThrottle,
+  awaitSettled,
+  updateVariables,
+  restoreConcurrency,
+  release,
+  recycle,
+  hold,
+}
+/* Stdlib_JsExn Not a pure module */