loom-kernel 10.0.0__tar.gz → 10.2.0__tar.gz

{loom_kernel-10.0.0 → loom_kernel-10.2.0}/CHANGELOG.md

@@ -1,5 +1,52 @@
 # Unreleased
 
+## 💥 Breaking
+
+### lambda
+
+- **lambda:** the deploy manifest reuses the loader: `served_routes(source,
+  select_interfaces=None)` reads and validates `app.rest.interfaces` and
+  `app.rest.disable_routes` itself, the placeholders are read by OmegaConf's
+  grammar (`loom.core.config.resolver.referenced`; an escaped `\${secrets:...}`
+  is no longer listed, `${secrets:a,b}` names `a`), the resolvers' `.reference()`
+  methods are gone and `FunctionManifest.event` is a `dict` with the same keys
+  the removed `Route`, `HttpEvent`, `QueueEvent`, `OnFailure` and `DirectEvent`
+  structs encoded. The JSON does not change. `omegaconf` is bound to `<2.4`:
+  the manifest reads its generated grammar (`loom.core.config._interpolations`).
+
+- **lambda:** one adapter, `LambdaAdapter`, serves every Lambda function: it
+  binds the handler of the trigger the deployed function declares. Nothing
+  of the previous surface remains:
+
+  | Before | Now |
+  |---|---|
+  | `LambdaHTTPAdapter()` | `LambdaAdapter()` |
+  | `LambdaSQSAdapter(jobs=...)` | `LambdaAdapter(jobs=...)` on a function with `trigger: {source: jobs}` |
+  | `app.entry: lambda_http` | `app.entry: lambda` |
+  | `app.entry: lambda_sqs` | `app.entry: <function>` with `trigger: {source: jobs}` |
+  | `lambda.functions.<f>.http: [...]` | `lambda.functions.<f>.trigger: {source: http, interfaces: [...]}` |
+  | `lambda.functions.<f>.auth` | `lambda.functions.<f>.trigger.auth` |
+  | `lambda.functions.<f>.sqs: true` | `lambda.functions.<f>.trigger: {source: jobs, queue: {name: ...}}` |
+  | `lambda.functions.<f>.queue`, `batch_size`, `batching_window_s`, `max_concurrency`, `report_batch_item_failures` | The same keys under `trigger.queue` (`queue` becomes `queue.name`) |
+  | `loom.serverless.aws.lambda_.http` | `loom.serverless.aws.lambda_.triggers.http` |
+  | `loom.serverless.aws.lambda_.sqs.SQSBatchFailedError` | `loom.serverless.aws.lambda_.SQSBatchFailedError` |
+  | `loom.serverless.aws.lambda_.sqs.SQSHandler` | `loom.serverless.aws.lambda_.LambdaHandler` |
+  | `loom.serverless.aws.lambda_.LambdaHTTPHandler` | `LambdaHandler`; the class is internal |
+  | `loom.serverless.aws.lambda_.sqs.DuplicateJobName` | `loom.core.discovery.worker.DuplicateJobName` |
+  | `loom.serverless.aws.lambda_.sqs.MALFORMED_JOB`, `TIMEOUT_SAFETY_MARGIN_MS` | Internal |
+  | `loom.testing.sqs_record(Job, payload, ...)` | `loom.testing.LambdaEvent.jobs(Job, payload, ...)` |
+  | `loom.testing.sqs_raw_record(body, ...)` | `loom.testing.LambdaEvent.sqs_record(body, ...)["Records"][0]` |
+  | Deploy manifest `manifest_version: 1`, event `type` (`http`, `sqs`) | `manifest_version: 2`: each function's `source` and `via` |
+
+  `loom.serverless.aws.lambda_` exports `LambdaAdapter`, `LambdaHandler`,
+  `LambdaUnservedConfigError`, `S3Object` and `SQSBatchFailedError` only.
+
+### config
+
+- **config:** a `config.overridable` entry reaching `lambda.handler`,
+  `app.discovery` or `lambda.functions.*.trigger` stops every load, as one
+  reaching `aws` or `sqs.queues` does; `app.*` is such an entry.
+
 ## ✨ Features
 
 ### jobs
@@ -11,30 +58,38 @@
   injecting `JobService`.
 - **jobs:** `app.job_service: sqs` (extra `loom[sqs]`) sends each job to the
   SQS queue `sqs.queues` maps its queue to, after the commit, as the
-  `JobEnvelope` the Lambda SQS adapter runs. `sqs:` inherits `aws:`.
+  `JobEnvelope` a Lambda `jobs` function runs. `sqs:` inherits `aws:`.
   FIFO queues take the SHA-256 of the new `Job.__group_by__` payload field as
   `MessageGroupId`. Callbacks, priorities, delays SQS cannot honour and bodies
   over 256 KiB raise `SQSDispatchError`; unmapped queues stop startup.
 - **jobs:** an execution's SQS jobs leave after the commit in
   `SendMessageBatch` calls per queue, in dispatch order (`sqs.batch`,
   `sqs.batch_size`, `sqs.max_concurrent_sends`); a standard queue resends the
-  entries SQS refuses once, a FIFO queue stops at its first failure. `lambda.functions.<name>` with `sqs: true` declares `batch_size`,
+  entries SQS refuses once, a FIFO queue stops at its first failure. A
+  Lambda `jobs` trigger's `queue` block declares `batch_size`,
   `batching_window_s`, `max_concurrency` and `report_batch_item_failures`;
   `false` makes the SQS handler fail the whole batch.
 
 ### lambda
 
+- **lambda:** event triggers: `trigger: {source: eventbridge | s3 | sns |
+  schedule, job, identity}` runs the job for each event, directly or through
+  a `queue:` block, as the configured identity only. A failed job fails the
+  event, which Lambda retries, then sends to its on-failure destination;
+  through a queue it is reported, then dead-lettered. See "Event triggers" in
+  the composition guide.
 - **lambda:** `loom deploy manifest <config> [--function x]` prints a
-  versioned JSON manifest (`manifest_version: 1`) of each function of
+  versioned JSON manifest (`manifest_version: 2`) of each function of
   `lambda.functions` for a deployment tool: the handler, code path and
-  queues once, then per function its http routes and `auth` or its sqs queue
-  and event source mapping, and the secret and SSM parameter names it
-  resolves (never values; no resolver runs). It runs the deploy
-  checks of `loom check --deploy` first, prints their findings to stderr and
-  no manifest when one fails. New keys: `lambda.handler` and
-  `lambda.functions.<name>.queue` (a key of `sqs.queues`), both required by
-  the manifest only.
-- **rest:** `loom.rest.E001` also fails a `lambda.functions.<name>.auth`
+  queues once, then per function its trigger's `source` and `via`, what its
+  event needs deployed (http routes and `auth`, the queue and its event
+  source mapping, or a direct trigger's job, identity and `on_failure`), and
+  the secret and SSM parameter names it resolves (never values; no resolver
+  runs). It runs the deploy checks of `loom check --deploy` first, prints
+  their findings to stderr and no manifest when one fails. `lambda.handler`
+  and a trigger's `queue` (a key of `sqs.queues`) are required by the
+  manifest only.
+- **rest:** `loom.rest.E001` also fails a `lambda.functions.<name>.trigger.auth`
   that names no mechanism (`{}`, `jwt: null`, `custom: false`): it replaces
   `app.rest.auth` for that function.
 
@@ -42,9 +97,10 @@
 
 - **testing:** Lambda functions are tested in process, without AWS:
   `LambdaTestClient`, an `httpx.Client` like FastAPI's `TestClient`, sends API
-  Gateway HTTP API or REST events to the real handler; `sqs_record` and
-  `sqs_raw_record` drive the SQS handler with the `JobEnvelope`
-  `SQSJobService` sends; `RecordingJobService`
+  Gateway HTTP API or REST events to the real handler;
+  `LambdaEvent` builds the event AWS delivers, one typed constructor per
+  trigger source (`LambdaEvent.s3([...])`, `.sns({...})`, `.jobs(Job, ...)`)
+  and `.via_sqs()` for the queue in between; `RecordingJobService`
   (`app.job_service: loom.testing:RecordingJobService`) records each dispatch
   after the commit. The `testing` extra now includes `httpx`.
 
@@ -80,6 +136,10 @@
   `UndeclaredStoreWrite` and `NestedElevation` from `loom.core.uow`,
   `ForeignSessionError` from `loom.core.errors`, and `ReadOnlyElevation` from
   `loom.core.repository.sqlalchemy.rls`, next to `elevate`.
+- **stores:** `async with session_manager.operation_session(write=...)`
+  gives raw SQL the session its operation runs in, as a repository's: the
+  invocation's when the store is enlisted, else a transaction of its own.
+  Repositories now run through it.
 
 ### config
 
@@ -146,6 +206,52 @@
   raise `NotImplementedError`. Cache scenarios and frames, not runners: tests
   that mutate state need a function-scoped runner on their own `tmp_path`.
 
+## 💥 Breaking
+
+### errors
+
+- **errors:** `loom.core.errors` is a package split by area (`base`, `domain`,
+  `auth`, `model`, `jobs`, `stores`, `codes`) and re-exports every error, so
+  `from loom.core.errors import X` is unchanged. The errors below are
+  importable only from `loom.core.errors`; their old paths, and the package
+  re-exports that pointed at them, are gone:
+
+  | Old path | New path |
+  |---|---|
+  | every class of the removed `errors` submodule of `loom.core.errors` | `loom.core.errors` |
+  | `loom.core.uow.scope.ScopeOwnershipError`, `UnitOfWorkInsideScope`, `UndeclaredStoreWrite`, `NestedIdentityMismatch`, `NestedElevation`, `StoresNotCommitted` (also `loom.core.uow.*`) | `loom.core.errors` |
+  | `loom.core.uow.coordinator.UncomposedStore` | `loom.core.errors` |
+  | `loom.core.job.handle.JobTimeoutError`, `JobFailedError` (also `loom.core.job.*`) | `loom.core.errors` |
+  | `loom.core.job.router.MixedJobBackendsError` (also `loom.core.job.*`) | `loom.core.errors` |
+  | `loom.core.engine.post_commit.PostCommitError` (also `loom.core.engine.*`) | `loom.core.errors` |
+  | `loom.core.model._loom_type.BoundaryValidationError`, `UnsupportedBoundaryType` (also `loom.core.model.*`) | `loom.core.errors` |
+  | `loom.core.repository.abc.errors.UnsupportedQuery` (also `loom.core.repository.abc.*`; the module is removed) | `loom.core.errors` |
+  | `loom.jobs.aws.sqs.SQSDispatchError` | `loom.jobs.aws.errors` |
+  | `loom.serverless.aws.lambda_.triggers.sqs.SQSBatchFailedError` | `loom.serverless.aws.lambda_.errors` (also `loom.serverless.aws.lambda_`) |
+  | `loom.rest.auth.abc.AuthenticationUnavailable` | `loom.rest.auth.errors` (also `loom.rest.auth`) |
+  | `loom.etl.backends._format_registry.UnsupportedFormatError` | `loom.etl.runner.errors` (also `loom.etl`) |
+
+- **errors:** a `LoomError` code is a catalogue member, never a literal
+  string: `LoomError(message, code=)` is typed `StrEnum`, `ErrorCode` gains
+  `JOB_TIMEOUT`, `JOB_FAILED`, `JOB_BACKENDS_MIXED` and
+  `BOUNDARY_TYPE_UNSUPPORTED` (same string values, mapped to 500 explicitly),
+  and the SQS adapters' `sqs_*` codes are the members of
+  `loom.jobs.aws.errors.SQSErrorCode`, which `SQSDispatchError(message, code=)`
+  now requires. An application catalogue is its own `StrEnum`.
+  `AuthenticationUnavailable` is a `SystemError`, so the generic retry and
+  circuit-breaker handlers see the outage it reports.
+
+- **errors:** every error belongs to a family. `BoundaryValidationError` and
+  `UnsupportedFormatError` are `DomainError`s (still `ValueError`s);
+  `JobTimeoutError`, `JobFailedError`, `MixedJobBackendsError`,
+  `PostCommitError`, `UnsupportedBoundaryType`, `SQSDispatchError` and
+  `SQSBatchFailedError` are `SystemError`s. HTTP statuses do not change. A
+  `DomainError` is never retryable: Celery and the SQS consumers consume a
+  job that raises one instead of requeuing it, and the streaming boundary
+  files a `BoundaryValidationError` as a business error. `UnsupportedQuery`
+  takes `(reason, *, backend=None, model=None)` and its message names the
+  model and the reason, never the backend.
+
 ## ⚠ Behaviour changes
 
 ### jobs
@@ -168,6 +274,16 @@
 
 ### stores
 
+- **stores:** a repository read, a `@with_session_scope(write=False)` method
+  or `operation_session(write=False)` on a store the invocation did not
+  enlist (a read-only execution such as a REST `GET`, or no invocation)
+  runs in a transaction of its own that is never committed: a write in it
+  persists nothing. On an enlisted store a `write=False` block still runs,
+  unrecorded, in the invocation's transaction and commits with it; declare
+  writes as `write=True`.
+- **stores:** a failed transaction of its own logs `OperationSessionRollback`
+  with `store=` and the exception type only, where it logged
+  `RepositorySessionRollback` with `repository=` and the exception text.
 - **stores:** a write to a store the running use case did not declare raises
   `UndeclaredStoreWrite` (`undeclared_store_write`, HTTP 500) before the
   driver is called, where it raised `ForeignSessionError`. So does a

{loom_kernel-10.0.0 → loom_kernel-10.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: loom-kernel
-Version: 10.0.0
+Version: 10.2.0
 Summary: Loom Python project
 License-File: LICENSE
 Classifier: Programming Language :: Python :: 3
@@ -13,7 +13,7 @@ Classifier: Typing :: Typed
 Requires-Python: >=3.11
 Requires-Dist: aiocache<1.0,>=0.12
 Requires-Dist: msgspec<1.0,>=0.18
-Requires-Dist: omegaconf<3.0,>=2.3
+Requires-Dist: omegaconf<2.4,>=2.3
 Requires-Dist: opentelemetry-api<2.0,>=1.27
 Requires-Dist: prometheus-client>=0.20
 Requires-Dist: structlog<27.0,>=24.4
@@ -37,7 +37,7 @@ Provides-Extra: ai-typesafe
 Requires-Dist: pydantic-ai-slim[typesafe]<3,>=2.45; extra == 'ai-typesafe'
 Provides-Extra: cache
 Requires-Dist: aiocache<1.0,>=0.12; extra == 'cache'
-Requires-Dist: omegaconf<3.0,>=2.3; extra == 'cache'
+Requires-Dist: omegaconf<2.4,>=2.3; extra == 'cache'
 Provides-Extra: celery
 Requires-Dist: celery<6.0,>=5.3; extra == 'celery'
 Requires-Dist: kombu<6.0,>=5.3; extra == 'celery'
@@ -49,11 +49,11 @@ Provides-Extra: clickhouse
 Requires-Dist: clickhouse-connect<1.0,>=0.9.2; extra == 'clickhouse'
 Provides-Extra: config
 Requires-Dist: fsspec>=2024.2.0; extra == 'config'
-Requires-Dist: omegaconf<3.0,>=2.3; extra == 'config'
+Requires-Dist: omegaconf<2.4,>=2.3; extra == 'config'
 Provides-Extra: config-ssm
 Requires-Dist: boto3>=1.35; extra == 'config-ssm'
 Requires-Dist: fsspec>=2024.2.0; extra == 'config-ssm'
-Requires-Dist: omegaconf<3.0,>=2.3; extra == 'config-ssm'
+Requires-Dist: omegaconf<2.4,>=2.3; extra == 'config-ssm'
 Provides-Extra: dynamodb
 Requires-Dist: boto3>=1.35; extra == 'dynamodb'
 Provides-Extra: etl-otel
@@ -87,16 +87,16 @@ Requires-Dist: mangum<1.0,>=0.22; extra == 'lambda'
 Requires-Dist: prometheus-client>=0.20; extra == 'lambda'
 Requires-Dist: pydantic<3.0,>=2.0; extra == 'lambda'
 Provides-Extra: logfire
-Requires-Dist: logfire<5,>=4.0; extra == 'logfire'
+Requires-Dist: logfire<6,>=4.0; extra == 'logfire'
 Requires-Dist: opentelemetry-api<2.0,>=1.27; extra == 'logfire'
 Requires-Dist: opentelemetry-sdk<2.0,>=1.27; extra == 'logfire'
 Provides-Extra: mongo
-Requires-Dist: pymongo<5.0,>=4.9; extra == 'mongo'
+Requires-Dist: pymongo<5.0,>=4.18.3; extra == 'mongo'
 Provides-Extra: prefect
 Requires-Dist: boto3>=1.35; extra == 'prefect'
 Requires-Dist: docker>=7.0; extra == 'prefect'
 Requires-Dist: fsspec>=2024.2.0; extra == 'prefect'
-Requires-Dist: omegaconf<3.0,>=2.3; extra == 'prefect'
+Requires-Dist: omegaconf<2.4,>=2.3; extra == 'prefect'
 Requires-Dist: prefect<4.0,>=3.0; extra == 'prefect'
 Requires-Dist: pyyaml>=6.0; extra == 'prefect'
 Provides-Extra: prometheus

{loom_kernel-10.0.0 → loom_kernel-10.2.0}/pyproject.toml

@@ -16,7 +16,7 @@ classifiers = [
 dependencies = [
     "msgspec>=0.18,<1.0",
     "structlog>=24.4,<27.0",
-    "omegaconf>=2.3,<3.0",
+    "omegaconf>=2.3,<2.4",
     "prometheus-client>=0.20",
     "aiocache>=0.12,<1.0",
     "typing_extensions>=4.12",
@@ -56,23 +56,23 @@ sqs = [
     "boto3>=1.35",
 ]
 mongo = [
-    "pymongo>=4.9,<5.0",
+    "pymongo>=4.18.3,<5.0",
 ]
 jwt = [
     "pyjwt[crypto]>=2.8,<3",
 ]
 config = [
-    "omegaconf>=2.3,<3.0",
+    "omegaconf>=2.3,<2.4",
     "fsspec>=2024.2.0",
 ]
 config-ssm = [
-    "omegaconf>=2.3,<3.0",
+    "omegaconf>=2.3,<2.4",
     "fsspec>=2024.2.0",
     "boto3>=1.35",
 ]
 cache = [
     "aiocache>=0.12,<1.0",
-    "omegaconf>=2.3,<3.0",
+    "omegaconf>=2.3,<2.4",
 ]
 etl-polars = [
     "polars>=1.24,<2.0",
@@ -107,7 +107,7 @@ prefect = [
     "prefect>=3.0,<4.0",
     "fsspec>=2024.2.0",
     "pyyaml>=6.0",
-    "omegaconf>=2.3,<3.0",
+    "omegaconf>=2.3,<2.4",
     "boto3>=1.35",
     "docker>=7.0",
 ]
@@ -162,7 +162,7 @@ ai-harness = [
 # See docs/ai/observability.md — a non-empty endpoint makes loom build its own
 # provider, and the two are mutually exclusive by construction.
 logfire = [
-    "logfire>=4.0,<5",
+    "logfire>=4.0,<6",
     "opentelemetry-api>=1.27,<2.0",
     "opentelemetry-sdk>=1.27,<2.0",
 ]
@@ -256,7 +256,7 @@ dev = [
     "fastapi>=0.115,<1.0",
     "greenlet>=3.0.0",
     "mypy>=1.11.0,<2.0",
-    "omegaconf>=2.3,<3.0",
+    "omegaconf>=2.3,<2.4",
     "pydantic>=2.0,<3.0",
     "pre-commit>=3.8.0",
     "pyright>=1.1.390,<2.0",
@@ -281,7 +281,7 @@ dev = [
     "confluent-kafka>=2.6,<3.0",
     "bytewax>=0.21; python_version < '3.13'",
     "boto3>=1.35",
-    "pymongo>=4.9,<5.0",
+    "pymongo>=4.18.3,<5.0",
     "opentelemetry-api>=1.27,<2.0",
     "opentelemetry-sdk>=1.27,<2.0",
     "opentelemetry-exporter-otlp-proto-http>=1.27,<2.0",

{loom_kernel-10.0.0 → loom_kernel-10.2.0}/src/loom/ai/compiler/phases/_output.py

@@ -36,7 +36,8 @@ from loom.ai.abc import OutputCheck
 from loom.ai.compiler._plan import CompiledOutput
 from loom.ai.declarative import JsonSchemaOutput, OutputSpec, TypeRefOutput
 from loom.ai.errors import AgentCompilationIssue, AgentErrorCode
-from loom.core.model import LoomType, UnsupportedBoundaryType, loom_type, msgspec_type
+from loom.core.errors import UnsupportedBoundaryType
+from loom.core.model import LoomType, loom_type, msgspec_type
 from loom.core.symbols import import_symbol
 
 _CompileResult = tuple[CompiledOutput | None, list[AgentCompilationIssue]]

{loom_kernel-10.0.0 → loom_kernel-10.2.0}/src/loom/ai/compiler/phases/_state.py

@@ -38,7 +38,8 @@ import msgspec
 from loom.ai.abc import StateShape
 from loom.ai.compiler.phases._output import _resolve_symbol, _schema_to_annotation
 from loom.ai.errors import AgentCompilationIssue, AgentErrorCode
-from loom.core.model import UnsupportedBoundaryType, loom_type, msgspec_type
+from loom.core.errors import UnsupportedBoundaryType
+from loom.core.model import loom_type, msgspec_type
 
 _CompileResult = tuple[StateShape | None, list[AgentCompilationIssue]]
 

{loom_kernel-10.0.0 → loom_kernel-10.2.0}/src/loom/ai/engines/pydantic_ai/_output.py

@@ -48,7 +48,7 @@ from pydantic_ai.messages import ModelResponse, TextPart, ToolCallPart
 
 from loom.ai.compiler import CompiledOutput
 from loom.ai.errors import AgentRunError, AgentRunErrorCode
-from loom.core.model import BoundaryValidationError
+from loom.core.errors import BoundaryValidationError
 
 
 class MissingOutputPayload(Exception):

{loom_kernel-10.0.0 → loom_kernel-10.2.0}/src/loom/ai/fastapi/endpoints.py

@@ -56,8 +56,9 @@ from loom.ai.fastapi.response import AgentJSONResponse, error_response, result_p
 from loom.ai.fastapi.streaming import encode_sse_event, stream_sse
 from loom.ai.runtime import AgentRuntime
 from loom.core.config.errors import ConfigError
+from loom.core.errors import BoundaryValidationError
 from loom.core.identity import Identity, current_identity
-from loom.core.model import BoundaryValidationError, LoomFrozenStruct
+from loom.core.model import LoomFrozenStruct
 from loom.core.observability.event import Scope
 from loom.core.observability.runtime import ObservabilityRuntime
 from loom.core.observability.span import LoomSpan

{loom_kernel-10.0.0 → loom_kernel-10.2.0}/src/loom/ai/runtime/_grants.py

@@ -49,8 +49,9 @@ from loom.ai._roles import bound_query_roles
 from loom.ai.abc import McpHandle, McpSession, McpToolInfo, SqlGrantHandle
 from loom.ai.compiler import CompiledMcpCapability, CompiledSqlCapability
 from loom.ai.errors import AgentRunError, AgentRunErrorCode
+from loom.core.errors import BoundaryValidationError, UnsupportedBoundaryType
 from loom.core.identity import Identity
-from loom.core.model import BoundaryValidationError, UnsupportedBoundaryType, loom_type_of
+from loom.core.model import loom_type_of
 from loom.core.observability.event import Scope
 from loom.core.observability.runtime import ObservabilityRuntime
 from loom.core.sql.abc import SqlQueryResult

{loom_kernel-10.0.0 → loom_kernel-10.2.0}/src/loom/ai/runtime/_lifecycle.py

@@ -79,8 +79,9 @@ from loom.ai.runtime._mcp import (
     mcp_session_for,
 )
 from loom.core.di import LoomContainer
+from loom.core.errors import BoundaryValidationError
 from loom.core.identity import ANONYMOUS, Identity
-from loom.core.model import BoundaryValidationError, LoomType
+from loom.core.model import LoomType
 from loom.core.sql.config import SqlConfig
 from loom.core.use_case.invoker import ApplicationInvoker
 

{loom_kernel-10.0.0 → loom_kernel-10.2.0}/src/loom/celery/errors.py

@@ -4,7 +4,7 @@ from __future__ import annotations
 
 import re
 
-from loom.core.errors.errors import SystemError
+from loom.core.errors import SystemError
 from loom.core.model.redaction import mask_dsn
 
 _ADDRESS = re.compile(r"[A-Za-z][A-Za-z0-9+.-]*://\S+")

{loom_kernel-10.0.0 → loom_kernel-10.2.0}/src/loom/celery/runner.py

@@ -233,7 +233,7 @@ def _make_job_task(
     decoded from the envelope is forwarded, so a job declaring ``Caller()``
     fails closed rather than running as an unknown caller.
 
-    A :class:`~loom.core.engine.post_commit.PostCommitError` whose
+    A :class:`~loom.core.errors.PostCommitError` whose
     transaction committed is terminal: the task is not retried, since the
     write already stands.  One raised without a commit is retried like any
     other failure.

{loom_kernel-10.0.0 → loom_kernel-10.2.0}/src/loom/cli/check.py

@@ -32,6 +32,7 @@ from loom.core.config.errors import ConfigError
 from loom.core.config.overrides import load_application_config
 from loom.core.environment import Environment, resolve_environment, select_config_paths
 from loom.core.locator import DEFAULT_CODE_PATH, add_code_path
+from loom.serverless.aws.lambda_.checks import check_triggers
 
 
 def check(
@@ -79,7 +80,8 @@ def load_checked(config: list[Path], env: str | None, skip: tuple[str, ...]) ->
     """Load *config* for *env*, put its code path on the import path and run the deploy checks.
 
     Raises:
-        ConfigError: When the configuration does not load.
+        ConfigError: When the configuration does not load, or ``lambda`` is
+            one startup would refuse.
     """
     _load_check_packages()
     environment = resolve_environment(env)
@@ -89,6 +91,7 @@ def load_checked(config: list[Path], env: str | None, skip: tuple[str, ...]) ->
     )
     config_root = Path(paths[0]).resolve().parent
     code_path = _add_code_path(context, config_root)
+    check_triggers(context)
     report = run_deploy_checks(context, skip=skip)
     return CheckedConfig(context, environment, report, skip, config_root, code_path)
 

{loom_kernel-10.0.0 → loom_kernel-10.2.0}/src/loom/composition/build.py

@@ -100,8 +100,8 @@ def create_app(
     Args:
         *config_paths: YAML files merged left to right; exclusive with *config_dir*.
         adapter: The transport, and how it wants the application composed;
-            ``app.entry`` picks it when omitted: ``fastapi``, ``lambda_http``,
-            ``lambda_sqs`` or a function of ``lambda.functions``.
+            ``app.entry`` picks it when omitted: ``fastapi``, ``lambda`` or a
+            function of ``lambda.functions``.
         config_dir: Directory with ``base.yaml`` and the per-environment overlays.
         environment: Environment of the application; overrides ``LOOM_ENV``.
         code_path: Overrides ``app.code_path``, relative to the first config file.
@@ -140,22 +140,15 @@ def _fastapi() -> Adapter[object]:
     return FastAPIAdapter()
 
 
-def _lambda_http() -> Adapter[object]:
-    from loom.serverless.aws.lambda_.http import LambdaHTTPAdapter
+def _lambda(function: str | None = None) -> Adapter[object]:
+    from loom.serverless.aws.lambda_.handler import LambdaAdapter
 
-    return LambdaHTTPAdapter()
-
-
-def _lambda_sqs() -> Adapter[object]:
-    from loom.serverless.aws.lambda_.sqs import LambdaSQSAdapter
-
-    return LambdaSQSAdapter()
+    return LambdaAdapter(function=function)
 
 
 _BUILTIN_ENTRIES: Final[Mapping[str, Callable[[], Adapter[object]]]] = {
     "fastapi": _fastapi,
-    "lambda_http": _lambda_http,
-    "lambda_sqs": _lambda_sqs,
+    "lambda": _lambda,
 }
 
 
@@ -164,15 +157,7 @@ def _adapter_from_entry(source: CompositionSource) -> Adapter[object]:
     if entry is None:
         raise ConfigError("create_app needs adapter= or app.entry")
     builtin = _BUILTIN_ENTRIES.get(entry)
-    if builtin is not None:
-        return builtin()
-    from loom.serverless.aws.lambda_.functions import declared_function
-
-    if declared_function(source.config, entry).sqs:
-        return _lambda_sqs()
-    from loom.serverless.aws.lambda_.http import LambdaHTTPAdapter
-
-    return LambdaHTTPAdapter(function=entry)
+    return builtin() if builtin is not None else _lambda(entry)
 
 
 def build_application(

{loom_kernel-10.0.0 → loom_kernel-10.2.0}/src/loom/core/cache/repository.py

@@ -30,8 +30,9 @@ from loom.core.cache.result_codec import (
     to_payload,
 )
 from loom.core.engine.post_commit import store_channel
+from loom.core.errors import BoundaryValidationError
 from loom.core.logger import get_logger
-from loom.core.model import BoundaryValidationError, LoomType, is_pydantic_model, loom_type_of
+from loom.core.model import LoomType, is_pydantic_model, loom_type_of
 from loom.core.model.convert import to_struct
 from loom.core.model.enums import Cardinality
 from loom.core.model.introspection import (

loom_kernel-10.2.0/src/loom/core/config/_interpolations.py

@@ -0,0 +1,68 @@
+"""The placeholders of a configuration string, read by OmegaConf's own grammar.
+
+This module is the one place loom touches the generated ANTLR parser behind
+OmegaConf (``omegaconf.grammar``; written against omegaconf 2.3). It reads a
+string the way the loader would, without resolving anything, so the deploy
+manifest can name the secrets and parameters a configuration fetches.
+``tests/unit/core/config/test_referenced.py`` pins every grammar path the
+manifest relies on; an omegaconf upgrade that moves the parser fails there.
+"""
+
+from __future__ import annotations
+
+from collections.abc import Collection, Iterator
+from typing import Any
+
+from loom.core.config.errors import ConfigError
+
+
+def referenced(text: str, names: Collection[str]) -> dict[str, list[str]]:
+    """The first argument of every ``${name:...}`` of *text* whose *name* is one of *names*.
+
+    OmegaConf's own grammar reads *text*, so the surrounding literal text, an
+    escaped ``\\${``, quotes and argument separators mean what they mean to
+    the loader; nothing is resolved.
+
+    Returns:
+        The arguments by resolver name, as the resolver would receive them,
+        in order of appearance; a name nothing references is absent.
+
+    Raises:
+        ConfigError: When a selected resolver's arguments nest another
+            interpolation, whose value the caller cannot know as written.
+    """
+    if "${" not in text:
+        return {}
+    # Local imports keep omegaconf out of the import of ``loom.core.config``.
+    from omegaconf.grammar.gen.OmegaConfGrammarParser import OmegaConfGrammarParser as Grammar
+    from omegaconf.grammar_parser import parse
+    from omegaconf.grammar_visitor import GrammarVisitor
+
+    literal = GrammarVisitor(lambda _key, _memo: None, lambda **_kwargs: None, None)
+    found: dict[str, list[str]] = {}
+    for node in _parse_nodes(parse(text, parser_rule="configValue")):
+        if not isinstance(node, Grammar.InterpolationResolverContext):
+            continue
+        call: Any = node  # the generated parser carries no useful types
+        name = call.resolverName().getText()
+        if name not in names:
+            continue
+        sequence = call.sequence()
+        if any(isinstance(n, Grammar.InterpolationContext) for n in _parse_nodes(sequence)):
+            raise ConfigError(f"nests a placeholder in a {name} key")
+        arguments = [] if sequence is None else sequence.element()
+        first = str(literal.visitElement(arguments[0])) if arguments else ""
+        found.setdefault(name, []).append(first)
+    return found
+
+
+def _parse_nodes(tree: Any) -> Iterator[Any]:
+    """*tree* and every node under it, parents first; nothing for ``None``."""
+    if tree is None:
+        return
+    yield tree
+    for index in range(tree.getChildCount()):
+        yield from _parse_nodes(tree.getChild(index))
+
+
+__all__ = ["referenced"]

{loom_kernel-10.0.0 → loom_kernel-10.2.0}/src/loom/core/config/loader.py

@@ -78,7 +78,7 @@ reported across them::
 from __future__ import annotations
 
 import inspect
-from collections.abc import Sequence
+from collections.abc import Iterator, Sequence
 from dataclasses import dataclass
 from typing import TYPE_CHECKING, Any, NamedTuple, TypeVar
 
@@ -633,3 +633,17 @@ def convert_section(data: Any, key: str, target_type: type[T]) -> T:
         raise ConfigError(
             f"Config section {key!r} failed validation as {target_type.__name__!r}: {exc}"
         ) from exc
+
+
+def config_strings(
+    node: object, path: tuple[str, ...] = ()
+) -> Iterator[tuple[tuple[str, ...], str]]:
+    """Every string of a configuration *node* as written, with its path of keys and indexes."""
+    if isinstance(node, str):
+        yield path, node
+    elif isinstance(node, dict):
+        for key, value in node.items():
+            yield from config_strings(value, (*path, str(key)))
+    elif isinstance(node, list):
+        for index, value in enumerate(node):
+            yield from config_strings(value, (*path, str(index)))