hecks 0.3.0 → 1.0.1

data/lib/hecks/framework/bluebook/console_settings.bluebook

@@ -105,7 +105,7 @@ Hecks.bluebook "ConsoleSettings" do
       given("a style names its own aggregate") { !agg.value.to_s.empty? }
       given("a style names its own state") { !state.value.to_s.empty? }
 
-      emits "StateStyleDeclared"
+      emits StateStyleDeclared
     end
 
     command "SetTone" do
@@ -116,7 +116,7 @@ Hecks.bluebook "ConsoleSettings" do
       attribute :tone, one_of("good", "warn", "danger", "muted", "accent")
 
       sets :tone
-      emits "ToneSet"
+      emits ToneSet
     end
 
     command "SetAttention" do
@@ -127,7 +127,7 @@ Hecks.bluebook "ConsoleSettings" do
       attribute :attention, Flag
 
       sets :attention
-      emits "AttentionSet"
+      emits AttentionSet
     end
 
     command "SetExtra" do
@@ -138,7 +138,7 @@ Hecks.bluebook "ConsoleSettings" do
       attribute :extra_json, StateStyleExtra
 
       sets :extra_json
-      emits "StateStyleExtraSet"
+      emits StateStyleExtraSet
     end
   end
 
@@ -261,7 +261,7 @@ Hecks.bluebook "ConsoleSettings" do
 
       given("a collection names its own aggregate") { !agg.value.to_s.empty? }
 
-      emits "CollectionDeclared"
+      emits CollectionDeclared
     end
 
     command "SetLabel" do
@@ -272,7 +272,7 @@ Hecks.bluebook "ConsoleSettings" do
       attribute :label, SettingsText
 
       sets :label
-      emits "LabelSet"
+      emits LabelSet
     end
 
     command "SetKey" do
@@ -283,7 +283,7 @@ Hecks.bluebook "ConsoleSettings" do
       attribute :key, SettingsText
 
       sets :key
-      emits "KeySet"
+      emits KeySet
     end
 
     command "SetNavOrder" do
@@ -294,7 +294,7 @@ Hecks.bluebook "ConsoleSettings" do
       attribute :nav_order, SettingsNumber
 
       sets :nav_order
-      emits "NavOrderSet"
+      emits NavOrderSet
     end
 
     command "SetPrimaryField" do
@@ -305,7 +305,7 @@ Hecks.bluebook "ConsoleSettings" do
       attribute :primary_field, SettingsText
 
       sets :primary_field
-      emits "PrimaryFieldSet"
+      emits PrimaryFieldSet
     end
 
     command "SetListQuery" do
@@ -316,7 +316,7 @@ Hecks.bluebook "ConsoleSettings" do
       attribute :list_query, SettingsText
 
       sets :list_query
-      emits "ListQuerySet"
+      emits ListQuerySet
     end
 
     command "SetIdentity" do
@@ -332,7 +332,7 @@ Hecks.bluebook "ConsoleSettings" do
       sets :identity_source
       sets :identity_prefix
       sets :identity_extra_json
-      emits "IdentitySet"
+      emits IdentitySet
     end
 
     command "SetExtra" do
@@ -343,7 +343,7 @@ Hecks.bluebook "ConsoleSettings" do
       attribute :extra_json, CollectionExtra
 
       sets :extra_json
-      emits "CollectionExtraSet"
+      emits CollectionExtraSet
     end
 
     command "ReplaceColumns" do
@@ -353,7 +353,7 @@ Hecks.bluebook "ConsoleSettings" do
       reference_to Collection
 
       sets :columns
-      emits "ColumnsReplaced"
+      emits ColumnsReplaced
     end
 
     command "ReplaceDetailFields" do
@@ -363,7 +363,7 @@ Hecks.bluebook "ConsoleSettings" do
       reference_to Collection
 
       sets :detail_fields
-      emits "DetailFieldsReplaced"
+      emits DetailFieldsReplaced
     end
 
     command "ReplaceDetailFieldColumns" do
@@ -373,7 +373,7 @@ Hecks.bluebook "ConsoleSettings" do
       reference_to Collection
 
       sets :detail_field_columns
-      emits "DetailFieldColumnsReplaced"
+      emits DetailFieldColumnsReplaced
     end
 
     command "ReplacePreconditions" do
@@ -383,7 +383,7 @@ Hecks.bluebook "ConsoleSettings" do
       reference_to Collection
 
       sets :preconditions
-      emits "PreconditionsReplaced"
+      emits PreconditionsReplaced
     end
 
     command "ReplaceFieldFormats" do
@@ -393,7 +393,7 @@ Hecks.bluebook "ConsoleSettings" do
       reference_to Collection
 
       sets :field_formats
-      emits "FieldFormatsReplaced"
+      emits FieldFormatsReplaced
     end
   end
 
@@ -450,7 +450,7 @@ Hecks.bluebook "ConsoleSettings" do
 
       given("only the one true singleton key is ever declared") { key.value == "overview" }
 
-      emits "OverviewDeclared"
+      emits OverviewDeclared
     end
 
     command "ReplaceStats" do
@@ -460,7 +460,7 @@ Hecks.bluebook "ConsoleSettings" do
       reference_to Overview
 
       sets :stats
-      emits "StatsReplaced"
+      emits StatsReplaced
     end
   end
 

data/lib/hecks/framework/bluebook/governance.bluebook

@@ -48,7 +48,7 @@ Hecks.bluebook "Governance" do
       attribute :scope,     Scope
       attribute :starts_at, Timestamp
 
-      emits "RoleAssigned"
+      emits RoleAssigned
     end
 
     command "Revoke" do
@@ -59,7 +59,7 @@ Hecks.bluebook "Governance" do
       attribute :ends_at, Timestamp
 
       sets :ends_at
-      emits "RoleRevoked"
+      emits RoleRevoked
     end
 
     query "AssignmentsForActor" do
@@ -73,15 +73,26 @@ Hecks.bluebook "Governance" do
   # may role X ACT AS role Y — the fact `act_as` (the plan's §2) needs before
   # a caller is allowed to dispatch under a role it does not itself hold.
   # Same event-log shape as RoleAssignment : a natural key, `ends_at` for
-  # revocation, no delete.
+  # revocation, no delete — and, like RoleAssignment, THE IDENTITY IS THE
+  # GRANT, not the (from_role, to_role) pair. `starts_at` used to be
+  # missing from here — the one field RoleAssignment's own identity adds
+  # beyond its own (actor, role) pair specifically so a second, later
+  # assignment is a SECOND real record rather than a collision. Without
+  # it, `identified_by :from_role, :to_role` alone made a revoked pair's
+  # own identity permanently occupied: `Grant` is a creating command, the
+  # same (from_role, to_role) pair is the SAME id forever, and a repeat
+  # `Grant` after a `Revoke` was refused as `AlreadyExists` no matter how
+  # long ago the prior grant ended — an absorbing "revoked" state this
+  # very comment already claimed didn't exist.
   aggregate "RoleTransition" do
-    description "Role X is authorized to act as role Y — until revoked."
+    description "Role X is authorized to act as role Y, from one point in time — until revoked, and grantable again afterward, exactly like RoleAssignment."
 
     attribute :from_role, RoleName
     attribute :to_role,   RoleName
+    attribute :starts_at, Timestamp
     attribute :ends_at,   Timestamp, optional: true
 
-    identified_by :from_role, :to_role
+    identified_by :from_role, :to_role, :starts_at
 
     value_object "RoleName" do
       attribute :value, String
@@ -99,8 +110,9 @@ Hecks.bluebook "Governance" do
 
       attribute :from_role, RoleName
       attribute :to_role,   RoleName
+      attribute :starts_at, Timestamp
 
-      emits "RoleTransitionGranted"
+      emits RoleTransitionGranted
     end
 
     command "Revoke" do
@@ -111,17 +123,20 @@ Hecks.bluebook "Governance" do
       attribute :ends_at, Timestamp
 
       sets :ends_at
-      emits "RoleTransitionRevoked"
+      emits RoleTransitionRevoked
     end
 
-    # THE RECORD FOR THIS PAIR, granted or revoked — same deferral
+    # EVERY GRANT OF THIS PAIR, current or historical — same deferral
     # `AssignmentsForActor` already makes for RoleAssignment: the where
     # clause has no way to ask "and ends_at is absent", so the query
-    # answers with the row and the CALLER reads `ends_at` to tell a
+    # answers with every row and the CALLER reads `ends_at` to tell a
     # live grant from a revoked one, exactly as it already must for
-    # every assignment.
+    # every assignment. Can answer MORE than one row now that `starts_at`
+    # is part of the identity — a pair granted again after a revocation is
+    # a SECOND row, not an overwrite of the first, the same way a
+    # re-assigned actor/role is for RoleAssignment.
     query "Allowed" do
-      description "The role transition granted for this exact pair, if any — revoked or not."
+      description "Every role transition granted for this exact pair, current or historical."
       attribute :from_role, RoleName
       attribute :to_role,   RoleName
       where(from_role: :from_role, to_role: :to_role)

data/lib/hecks/framework/bluebook/identity.bluebook

@@ -30,7 +30,7 @@ Hecks.bluebook "Identity" do
       goal "Recognize an identity"
 
       attribute :identity_id, IdentityId
-      emits "IdentityRegistered"
+      emits IdentityRegistered
     end
   end
 
@@ -71,7 +71,7 @@ Hecks.bluebook "Identity" do
       attribute :issuer,  Issuer
       attribute :subject, Subject
 
-      emits "ExternalIdentifierLinked"
+      emits ExternalIdentifierLinked
     end
 
     # THE OIDC-SHAPED LOOKUP — a token hands over `(issuer, subject)`,