@reventlessdev/reventless-core 3.0.0-alpha.247 → 3.0.0-alpha.249

package/CHANGELOG.md

@@ -3,6 +3,27 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.249 (2026-08-23)
+
+### Features
+
+* **querydb:** serve owner-scoped lists from an index instead of a filtered Scan ([ad26c28](https://github.com/ReventlessDev/reventless-core/commit/ad26c284b4b0650fa3f3b6109ed33bbfe8608f6d))
+
+
+# 3.0.0-alpha.248 (2026-08-23)
+
+* feat(aws)!: scope the active-role store to the identity provider ([08e287d](https://github.com/ReventlessDev/reventless-core/commit/08e287db9721977b818bad76671ec4c62be6f9af))
+
+### BREAKING CHANGES
+
+* platform:cognitoUserPoolId is now
+platform:identityProviderId (REVENTLESS_IDENTITY_PROVIDER_ID). The old
+spelling is still read and warns — do not drop it until the new secret
+is in place, because an unset provider id is auto mode, and auto mode
+creates a new user pool.
+
+
+
 # 3.0.0-alpha.247 (2026-08-22)
 
 * feat(core)!: a slice that has given up says so ([f5559ab](https://github.com/ReventlessDev/reventless-core/commit/f5559abede3a9cf2c9a48aadc69a666c46cc75bf))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-core",
-  "version": "3.0.0-alpha.247",
+  "version": "3.0.0-alpha.249",
   "description": "Core package for Reventless framework",
   "license": "Apache-2.0",
   "jest": {
@@ -36,14 +36,14 @@
     "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.19",
     "@reventlessdev/rescript-ssh2": "2.0.0-alpha.8",
     "@reventlessdev/rescript-uuid": "2.0.0-alpha.0",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.150",
     "@reventlessdev/reventless-interop": "3.0.0-alpha.33",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.122"
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.151",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.123"
   },
   "devDependencies": {
     "rescript": "12.3.0",
     "sury-ppx": "11.0.0-rc.2",
-    "@reventlessdev/reventless-ppx": "1.0.0-alpha.72"
+    "@reventlessdev/reventless-ppx": "1.0.0-alpha.73"
   },
   "peerDependencies": {
     "rescript": "12.3.0"

package/src/adapter/Auth/Auth_ActiveRole.res

@@ -43,6 +43,21 @@ they picked stopped taking effect.
 */
 let staleRoleClaim = "activeRoleStale"
 
+// 🚨 **State that narrows an identity is scoped to the identity provider, not to
+// the platform.**
+//
+// A provider has one minting point, and narrowing works by driving it. Keep the
+// state a platform-scoped resource and two deployments sharing one provider each
+// drive their own copy — whichever holds the minting point reads state the other
+// never writes, so a role switch reports success and changes nothing. Each half
+// is individually correct, so nothing short of two deployments can observe it.
+//
+// On AWS that is a pool's single `PreTokenGeneration` slot and the
+// `platform:activeRoleStore` that follows it; elsewhere the shape differs and the
+// rule does not. It cannot be a `conformanceCases` entry — those are
+// `(membership, requested) → expected`, and this is about *where two deployments
+// keep state*. See [docs/plans/active-role-store-scoped-to-the-pool.md].
+
 /**
 The conformance table §6 of the plan requires: the same (membership, requested,
 expected) cases run against both minting paths, so the two implementations cannot

package/src/components/Api/GraphQL_FragmentGenerator.res

@@ -903,7 +903,12 @@ let generate = (
     switch entry.indexQueries {
     | Some(indexes) =>
       let connectionTypeName = entry.returnTypeName ++ "Connection"
-      indexes->Array.forEach(indexConfig =>
+      // Derived indexes are skipped: they key a read the list resolver already
+      // makes on the caller's behalf, and a `<single>By<OwnerField>` door any
+      // caller may name is not the read they serve.
+      indexes
+      ->Array.filter(ic => !Reventless.ReadModel.isDerivedIndex(ic))
+      ->Array.forEach(indexConfig =>
         queries->Array.push(
           deriveIndexQueryField(
             ~singleFieldName=entry.singleFieldName,

package/src/components/Api/GraphQL_FragmentGenerator.res.mjs

@@ -5,6 +5,7 @@ import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Stdlib_String from "@rescript/runtime/lib/es6/Stdlib_String.js";
 import * as Stdlib_JsError from "@rescript/runtime/lib/es6/Stdlib_JsError.js";
 import * as Primitive_object from "@rescript/runtime/lib/es6/Primitive_object.js";
+import * as ReadModel$Reventless from "@reventlessdev/reventless-spec/src/components/ReadModel.res.mjs";
 import * as Logger$ReventlessCore from "../../util/Logger.res.mjs";
 import * as Api_Naming$ReventlessCore from "./Api_Naming.res.mjs";
 import * as SchemaType$ReventlessCore from "./SchemaType.res.mjs";
@@ -580,7 +581,7 @@ function generate(mutationEntries, queryEntries) {
     let indexes = entry.indexQueries;
     if (indexes !== undefined) {
       let connectionTypeName = entry.returnTypeName + "Connection";
-      indexes.forEach(indexConfig => {
+      indexes.filter(ic => !ReadModel$Reventless.isDerivedIndex(ic)).forEach(indexConfig => {
         queries.push(deriveIndexQueryField(entry.singleFieldName, indexConfig, connectionTypeName));
       });
     }

package/tests/api/GraphQL_FragmentGeneratorTest.res

@@ -509,6 +509,42 @@ describe("the by-index door", () => {
       GraphQL_FragmentGenerator.indexQueryFieldName(~singleFieldName="X", ~index="by"),
     ))->toEqual(("XByOwner", "XByOwnerId", "XByBy"))
   )
+
+  // The regression that would otherwise land in silence: `@owner` provisions an
+  // index on every view that declares one, and if that index emitted a door, a
+  // `<single>By<OwnerField>` field any caller may name would appear in every
+  // published SDL — a schema change nobody asked for, on views that only wanted
+  // their own list read to stop scanning.
+  testSync("a derived index adds no query field", () => {
+    let entryWith = (indexes): ReventlessInfra.Api.querySchemaEntry => {
+      singleFieldName: "Ordering_Order",
+      listFieldName: "Ordering_Orders",
+      returnTypeName: "Ordering_Order",
+      stateSchema: S.unknown,
+      authorization: None,
+      indexQueries: indexes,
+    }
+    let derived: Reventless.ReadModel.indexConfig = {
+      index: "_owner",
+      type_: "S",
+      idField: "customerId",
+      subIdField: "id",
+      projectionType: ALL,
+      derived: true,
+    }
+    let authored: Reventless.ReadModel.indexConfig = {
+      index: "byCategory",
+      type_: "S",
+      idField: "categoryId",
+      projectionType: ALL,
+    }
+    let doorsOf = indexes =>
+      GraphQL_Stitcher.decode(
+        GraphQL_FragmentGenerator.generate(~mutationEntries=[], ~queryEntries=[entryWith(indexes)]),
+      ).queries->Array.filter(q => q->String.includes("Ordering_OrderBy"))
+    expect((doorsOf([derived])->Array.length, doorsOf([authored, derived])->Array.length))
+    ->toEqual((0, 1))
+  })
 })
 
 // ── @internal: a field that is not on the GraphQL surface ────────────────────

package/tests/api/GraphQL_FragmentGeneratorTest.res.mjs

@@ -427,6 +427,40 @@ globalThis.describe("the by-index door", () => {
       "XByBy"
     ]);
   });
+  globalThis.test("a derived index adds no query field", () => {
+    let entryWith = indexes => ({
+      singleFieldName: "Ordering_Order",
+      listFieldName: "Ordering_Orders",
+      returnTypeName: "Ordering_Order",
+      stateSchema: Sury.unknown,
+      authorization: undefined,
+      indexQueries: indexes
+    });
+    let derived = {
+      index: "_owner",
+      type_: "S",
+      idField: "customerId",
+      subIdField: "id",
+      projectionType: "ALL",
+      derived: true
+    };
+    let doorsOf = indexes => GraphQL_Stitcher$ReventlessCore.decode(GraphQL_FragmentGenerator$ReventlessCore.generate([], [entryWith(indexes)])).queries.filter(q => q.includes("Ordering_OrderBy"));
+    globalThis.expect([
+      doorsOf([derived]).length,
+      doorsOf([
+        {
+          index: "byCategory",
+          type_: "S",
+          idField: "categoryId",
+          projectionType: "ALL"
+        },
+        derived
+      ]).length
+    ]).toEqual([
+      0,
+      1
+    ]);
+  });
 });
 
 globalThis.describe("@internal keeps a field off the generated type", () => {