@reventlessdev/reventless-core 3.0.0-alpha.288 → 3.0.0-alpha.289

package/CHANGELOG.md

@@ -3,6 +3,14 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.289 (2026-10-08)
+
+**Note:** Version bump only for package @reventlessdev/reventless-core
+
+
+
+
+
 # 3.0.0-alpha.288 (2026-10-06)
 
 **Note:** Version bump only for package @reventlessdev/reventless-core

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-core",
-  "version": "3.0.0-alpha.288",
+  "version": "3.0.0-alpha.289",
   "description": "Core package for Reventless framework",
   "license": "Apache-2.0",
   "jest": {
@@ -30,14 +30,14 @@
     "uuid": "^13.0.0",
     "@reventlessdev/rescript-effect": "0.1.0-alpha.34",
     "@reventlessdev/rescript-fast-csv": "2.0.0-alpha.21",
-    "@reventlessdev/rescript-hash-object": "1.2.0-alpha.15",
-    "@reventlessdev/rescript-node": "2.0.0-alpha.21",
     "@reventlessdev/rescript-jest": "1.0.0-alpha.11",
-    "@reventlessdev/rescript-ssh2": "2.0.0-alpha.22",
+    "@reventlessdev/rescript-node": "2.0.0-alpha.21",
+    "@reventlessdev/rescript-hash-object": "1.2.0-alpha.15",
     "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.23",
-    "@reventlessdev/rescript-uuid": "2.0.0-alpha.1",
-    "@reventlessdev/reventless-interop": "3.0.0-alpha.39",
+    "@reventlessdev/rescript-ssh2": "2.0.0-alpha.22",
     "@reventlessdev/reventless-infra": "3.0.0-alpha.186",
+    "@reventlessdev/reventless-interop": "3.0.0-alpha.39",
+    "@reventlessdev/rescript-uuid": "2.0.0-alpha.1",
     "@reventlessdev/reventless-spec": "3.0.0-alpha.158"
   },
   "devDependencies": {

package/src/adapter/Auth/Auth_ActiveRole.res

@@ -1,5 +1,5 @@
 // The cross-provider contract for "a caller holding several roles acting as one
-// of them" — see [docs/plans/active-role-narrows-the-token.md].
+// of them" — see [docs/plans/done/active-role-narrows-the-token.md].
 //
 // The narrowing itself is minted in two places that cannot share code: the local
 // platform signs its own tokens (`LocalAuth.Login`), and on AWS the minting point
@@ -56,7 +56,7 @@ let staleRoleClaim = "activeRoleStale"
 // `platform:activeRoleStore` that follows it; elsewhere the shape differs and the
 // rule does not. It cannot be a `conformanceCases` entry — those are
 // `(membership, requested) → expected`, and this is about *where two deployments
-// keep state*. See [docs/plans/active-role-store-scoped-to-the-pool.md].
+// keep state*. See [docs/plans/done/active-role-store-scoped-to-the-pool.md].
 
 /**
 The conformance table §6 of the plan requires: the same (membership, requested,

package/src/adapter/Auth/Auth_RefusalVocabulary.res

@@ -1,5 +1,5 @@
 // The cross-provider contract for "which refusal did I just get" — see
-// [docs/plans/appsync-refusal-vocabulary.md].
+// [docs/plans/done/appsync-refusal-vocabulary.md].
 //
 // An authorization gate has two ways to refuse and they ask the caller for
 // opposite things. A caller whose credentials did not verify should present new

package/src/admin/Platform_AdminApi.res

@@ -119,7 +119,7 @@ let geocodeTypes = [
 
 let geocodeQueryFields = [`  geocode(text: String!): [GeocodeCandidate!]`]
 
-// Acting as one of the roles you hold (docs/plans/active-role-narrows-the-token.md).
+// Acting as one of the roles you hold (docs/plans/done/active-role-narrows-the-token.md).
 //
 // The write door for the caller's chosen role. Like uploads and geocoding this is
 // an ordinary authenticated-user operation, so it belongs on the **domain** base