@reventlessdev/reventless-infra 3.0.0-alpha.85 → 3.0.0-alpha.86
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +7 -0
- package/package.json +3 -3
- package/src/components/Api.res +15 -0
package/CHANGELOG.md
CHANGED
|
@@ -3,6 +3,13 @@
|
|
|
3
3
|
All notable changes to this project will be documented in this file.
|
|
4
4
|
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
|
|
5
5
|
|
|
6
|
+
# 3.0.0-alpha.86 (2026-07-05)
|
|
7
|
+
|
|
8
|
+
### Features
|
|
9
|
+
|
|
10
|
+
* **reventless-aws:** opt-in [@aws](https://github.com/aws)_iam dual-auth for deploy-time AppSync callers ([94037f1](https://github.com/ReventlessDev/reventless-core/commit/94037f17ae48a33415b02e8e7b178906be8b59a4))
|
|
11
|
+
|
|
12
|
+
|
|
6
13
|
# 3.0.0-alpha.85 (2026-07-05)
|
|
7
14
|
|
|
8
15
|
### Features
|
package/package.json
CHANGED
|
@@ -1,16 +1,16 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@reventlessdev/reventless-infra",
|
|
3
|
-
"version": "3.0.0-alpha.
|
|
3
|
+
"version": "3.0.0-alpha.86",
|
|
4
4
|
"description": "Infrastructure types for Reventless framework",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"dependencies": {
|
|
7
7
|
"sury": "11.0.0-alpha.4",
|
|
8
8
|
"sury-ppx": "11.0.0-alpha.2",
|
|
9
9
|
"uuid": "^13.0.0",
|
|
10
|
+
"@reventlessdev/rescript-effect": "0.1.0-alpha.24",
|
|
10
11
|
"@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.14",
|
|
11
12
|
"@reventlessdev/rescript-uuid": "1.1.0-alpha.13",
|
|
12
|
-
"@reventlessdev/reventless-spec": "3.0.0-alpha.64"
|
|
13
|
-
"@reventlessdev/rescript-effect": "0.1.0-alpha.24"
|
|
13
|
+
"@reventlessdev/reventless-spec": "3.0.0-alpha.64"
|
|
14
14
|
},
|
|
15
15
|
"devDependencies": {
|
|
16
16
|
"rescript": "^12.3.0"
|
package/src/components/Api.res
CHANGED
|
@@ -45,6 +45,16 @@ type mutationSchemaEntry = {
|
|
|
45
45
|
`docs/plans/host-ui-login-core.md`). In-memory enforcement still happens
|
|
46
46
|
at the resolver layer via the same `commandAuthorization` function. */
|
|
47
47
|
fieldPermissions?: dict<Reventless.Authorization.permission>,
|
|
48
|
+
/** Opt a mutation field into deploy-time IAM (SigV4) invocation in addition to
|
|
49
|
+
its Cognito authorization. When `true`, the AWS provider emits the
|
|
50
|
+
multi-auth directive form `@aws_cognito_user_pools(cognito_groups: [...])
|
|
51
|
+
@aws_iam` on the field instead of the single-mode `@aws_auth(...)`, so a
|
|
52
|
+
deploy-time system caller signing with ambient AWS credentials
|
|
53
|
+
(`Util_AppSync_Caller`) is authorized alongside the console UI. Opt-in per
|
|
54
|
+
field — only fields a system caller actually invokes should set this, and
|
|
55
|
+
the IAM principal must be scoped by the API resource policy / deploy-role
|
|
56
|
+
policy (see `docs/guides/appsync-iam-system-caller.md`). Default `false`. */
|
|
57
|
+
iamCallable?: bool,
|
|
48
58
|
description?: string,
|
|
49
59
|
linkedViews?: array<string>,
|
|
50
60
|
consistencyRead?: string,
|
|
@@ -76,6 +86,11 @@ type querySchemaEntry = {
|
|
|
76
86
|
`docs/plans/host-ui-login-core.md`). In-memory enforcement happens at
|
|
77
87
|
the QueryDb resolver via the same field. */
|
|
78
88
|
permission?: Reventless.Authorization.permission,
|
|
89
|
+
/** Opt the single-id and list query fields into deploy-time IAM (SigV4)
|
|
90
|
+
invocation in addition to their Cognito authorization. See
|
|
91
|
+
`mutationSchemaEntry.iamCallable` for the emitted directive form and
|
|
92
|
+
scoping requirements. Default `false`. */
|
|
93
|
+
iamCallable?: bool,
|
|
79
94
|
excludeFields?: array<string>,
|
|
80
95
|
description?: string,
|
|
81
96
|
includeIdParam?: bool,
|