@reventlessdev/reventless-infra 3.0.0-alpha.201 → 3.0.0-alpha.203

package/CHANGELOG.md

@@ -3,6 +3,20 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.203 (2026-10-22)
+
+### Features
+
+* **local:** the local platform provisions an identity provider over the accounts file ([1a46867](https://github.com/ReventlessDev/reventless-core/commit/1a46867ac391b3b4a2d6973606d782547190dcb8))
+
+
+# 3.0.0-alpha.202 (2026-10-22)
+
+### Features
+
+* **local:** the local platform provisions an identity provider over the accounts file ([1a46867](https://github.com/ReventlessDev/reventless-core/commit/1a46867ac391b3b4a2d6973606d782547190dcb8))
+
+
 # 3.0.0-alpha.201 (2026-10-21)
 
 **Note:** Version bump only for package @reventlessdev/reventless-infra

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-infra",
-  "version": "3.0.0-alpha.201",
+  "version": "3.0.0-alpha.203",
   "description": "Infrastructure types for Reventless framework",
   "license": "Apache-2.0",
   "jest": {
@@ -17,9 +17,9 @@
     "sury-ppx": "11.0.0",
     "uuid": "^13.0.0",
     "@reventlessdev/rescript-effect": "1.0.0-alpha.1",
-    "@reventlessdev/rescript-uuid": "2.0.0-alpha.1",
     "@reventlessdev/rescript-pulumi-pulumi": "3.0.0-alpha.0",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.173"
+    "@reventlessdev/rescript-uuid": "2.0.0-alpha.1",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.175"
   },
   "devDependencies": {
     "rescript": "12.3.1",

package/src/types/Platform.res

@@ -475,6 +475,13 @@ module type T = {
     // from the deployment's identity. Unset ⇒ no export, no grant. In-memory
     // platforms ignore this.
     messagingSender?: messagingSender,
+    // Optional identity provider for the unattended slice path: making,
+    // grouping and unmaking principals. A provider that runs in the platform's
+    // own process, which is why only the in-memory platform hosts one today
+    // (`Capability_IdentityProvider_UserStore.make()`, over the accounts file
+    // its login reads). The AWS deploy ignores it until a pool-backed handle
+    // exists; a plugin declaring the need is refused there by the deploy gate.
+    identityProvider?: Reventless.IdentityProvider.t,
     // Optional object store for direct-to-store uploads. When set, the deploy
     // provisions a presign service against it, threads that service's URL into
     // config.json as `uploadEndpoint`, and serves the store read-only from the