@reventlessdev/online-shop-aggregates-catalog 3.0.0-alpha.264 → 3.0.0-alpha.265

package/CHANGELOG.md

@@ -3,6 +3,21 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.265 (2026-10-01)
+
+* feat!: roles a plugin declares, groups a platform provides ([43daace](https://github.com/ReventlessDev/reventless-core/commit/43daace6ca588afe22562d079af1e6f1da81942e))
+
+### BREAKING CHANGES
+
+* AllowGroups and AdminGroup are removed — write AllowRoles over
+the plugin's Roles.t, and use Role.admin / Platform.adminGroup(). Spec module
+types declare `type role`, and their rules are Authorization.rule<role>; a spec
+that writes its own rule declares `type role` (Reventless.Role.name for a rule
+over Authorization.permission). Role.name is a private string: make one from a
+string with Role.make.
+
+
+
 # 3.0.0-alpha.264 (2026-10-01)
 
 **Note:** Version bump only for package @reventlessdev/online-shop-aggregates-catalog

package/lib/bs/.compiler.log

@@ -1,2 +1,2 @@
-#Start(1790818270914)
-#Done(1790818277109)
+#Start(1790854925300)
+#Done(1790854931571)

package/lib/bs/CatalogPlugin.mlmap

@@ -26,3 +26,4 @@ Products_ExtensionPointMapping
 Products_ExtensionPointMapping_GWT
 Products_GWT
 Products_Projections
+Roles

package/lib/bs/compiler-info.json

@@ -4,5 +4,5 @@
   "bsc_hash": "1006241435e8d5052329c523202a7fe6359a37e1e1688c023d37d6a7ebb5fb6d",
   "rescript_config_hash": "50d5358a2cbe328e82ae9b442e4615b86dbfe6b2ce05e9eca04a0c78da0e4708",
   "runtime_path": "/home/runner/work/reventless-core/reventless-core/node_modules/@rescript/runtime",
-  "generated_at": "1790818277124"
+  "generated_at": "1790854931587"
 }

package/lib/bs/src/Category/Aggregate/Category.res

@@ -9,7 +9,7 @@ module Id = CategoryId
 type command =
   | Add({name: string})
   | Rename({name: string})
-  | @authorize(AllowGroups(["Admin"])) Archive
+  | @authorize(AllowRoles([Admin])) Archive
 
 @schema
 type event =

package/lib/bs/src/Category/Aggregate/Category.res.mjs

@@ -35,7 +35,7 @@ let errorSchema = Sury.union([
 function commandAuthorization(command) {
   if (typeof command !== "object") {
     return {
-      TAG: "AllowGroups",
+      TAG: "AllowRoles",
       _0: ["Admin"]
     };
   } else {

package/lib/bs/src/Roles.res

@@ -0,0 +1,2 @@
+// The roles the catalog's commands require: the framework's administrator.
+type t = Admin

package/lib/bs/src/Roles.res.mjs

@@ -0,0 +1,2 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+/* This output is empty. Its source's type definitions, externals and/or unused code got optimized away. */

package/lib/bs/tests/Catalog_Examples.res

@@ -7,3 +7,4 @@ let laptopImage: string = "/productImages/laptop.jpg"
 let order1: string = "order-1"
 let order2: string = "order-2"
 let renamedTo: string = "New Name"
+let shopper: string = "shopper"

package/lib/bs/tests/Catalog_Examples.res.mjs

@@ -15,6 +15,8 @@ let order2 = "order-2";
 
 let renamedTo = "New Name";
 
+let shopper = "shopper";
+
 export {
   electronics,
   laptop,
@@ -23,5 +25,6 @@ export {
   order1,
   order2,
   renamedTo,
+  shopper,
 }
 /* No side effect */

package/lib/bs/tests/Category/Aggregate/Category_GWT.res

@@ -59,3 +59,29 @@ describe("Category Behavior", () => {
     ->thenNoEvent
   )
 })
+
+describe("Who may Archive", () => {
+  // scenario-id: 5164cae5-bd41-4802-aa03-3d42b3e2fb9f
+  test("an Admin may archive a category", () =>
+    givenEvents([Added({name: electronics})])
+    ->asCaller(Caller.inRoles([Admin]))
+    ->whenCmd(Archive)
+    ->thenEvent(Archived)
+  )
+
+  // scenario-id: 92a627eb-e78c-48ed-88f4-5065dc505885
+  test("a shopper may not archive a category", () =>
+    givenEvents([Added({name: electronics})])
+    ->asCaller(Caller.owner(shopper))
+    ->whenCmd(Archive)
+    ->thenRefused
+  )
+
+  // scenario-id: c4c8e733-7e07-4f3c-b3f2-01bc6b52f601
+  test("an anonymous caller may not archive a category", () =>
+    givenEvents([Added({name: electronics})])
+    ->asCaller(Caller.anonymous)
+    ->whenCmd(Archive)
+    ->thenRefused
+  )
+})

package/lib/bs/tests/Category/Aggregate/Category_GWT.res.mjs

@@ -9,13 +9,15 @@ let include = Behavior_GWT$ReventlessGwt.MakeFromAggregate({
   name: Category$CatalogPlugin.name,
   commandSchema: Category$CatalogPlugin.commandSchema,
   eventSchema: Category$CatalogPlugin.eventSchema,
-  errorSchema: Category$CatalogPlugin.errorSchema
+  errorSchema: Category$CatalogPlugin.errorSchema,
+  commandAuthorization: Category$CatalogPlugin.commandAuthorization
 })({
   Spec: {
     name: Category$CatalogPlugin.name,
     commandSchema: Category$CatalogPlugin.commandSchema,
     eventSchema: Category$CatalogPlugin.eventSchema,
-    errorSchema: Category$CatalogPlugin.errorSchema
+    errorSchema: Category$CatalogPlugin.errorSchema,
+    commandAuthorization: Category$CatalogPlugin.commandAuthorization
   },
   initialState: Category_Behavior$CatalogPlugin.initialState,
   evolve: Category_Behavior$CatalogPlugin.evolve,
@@ -30,6 +32,10 @@ let test = include.test;
 
 let givenEvents = include.givenEvents;
 
+let Caller = include.Caller;
+
+let asCaller = include.asCaller;
+
 let whenCmd = include.whenCmd;
 
 let thenEvent = include.thenEvent;
@@ -38,6 +44,8 @@ let thenNoEvent = include.thenNoEvent;
 
 let thenError = include.thenError;
 
+let thenRefused = include.thenRefused;
+
 describe("Category Behavior", () => {
   test("Add on new aggregate produces Added", () => thenEvent(whenCmd(givenEvents([]), {
     TAG: "Add",
@@ -97,11 +105,22 @@ describe("Category Behavior", () => {
   ]), "Archive")));
 });
 
-let Spec = include.Spec;
-
-let Caller = include.Caller;
+describe("Who may Archive", () => {
+  test("an Admin may archive a category", () => thenEvent(whenCmd(asCaller(givenEvents([{
+      TAG: "Added",
+      name: Catalog_Examples$CatalogPlugin.electronics
+    }]), Caller.inRoles(["Admin"])), "Archive"), "Archived"));
+  test("a shopper may not archive a category", () => thenRefused(whenCmd(asCaller(givenEvents([{
+      TAG: "Added",
+      name: Catalog_Examples$CatalogPlugin.electronics
+    }]), Caller.owner(Catalog_Examples$CatalogPlugin.shopper, undefined)), "Archive")));
+  test("an anonymous caller may not archive a category", () => thenRefused(whenCmd(asCaller(givenEvents([{
+      TAG: "Added",
+      name: Catalog_Examples$CatalogPlugin.electronics
+    }]), Caller.anonymous), "Archive")));
+});
 
-let asCaller = include.asCaller;
+let Spec = include.Spec;
 
 let thenCompareEvent = include.thenCompareEvent;
 
@@ -113,8 +132,6 @@ let thenCompareEvents = include.thenCompareEvents;
 
 let thenEventsWithError = include.thenEventsWithError;
 
-let thenRefused = include.thenRefused;
-
 export {
   Spec,
   describe,

package/lib/bs/tests/Product/Aggregate/Product_GWT.res.mjs

@@ -9,13 +9,15 @@ let include = Behavior_GWT$ReventlessGwt.MakeFromAggregate({
   name: Product$CatalogPlugin.name,
   commandSchema: Product$CatalogPlugin.commandSchema,
   eventSchema: Product$CatalogPlugin.eventSchema,
-  errorSchema: Product$CatalogPlugin.errorSchema
+  errorSchema: Product$CatalogPlugin.errorSchema,
+  commandAuthorization: Product$CatalogPlugin.commandAuthorization
 })({
   Spec: {
     name: Product$CatalogPlugin.name,
     commandSchema: Product$CatalogPlugin.commandSchema,
     eventSchema: Product$CatalogPlugin.eventSchema,
-    errorSchema: Product$CatalogPlugin.errorSchema
+    errorSchema: Product$CatalogPlugin.errorSchema,
+    commandAuthorization: Product$CatalogPlugin.commandAuthorization
   },
   initialState: Product_Behavior$CatalogPlugin.initialState,
   evolve: Product_Behavior$CatalogPlugin.evolve,

package/lib/bs/tests/ProductDemand/Aggregate/ProductDemand_GWT.res.mjs

@@ -9,13 +9,15 @@ let include = Behavior_GWT$ReventlessGwt.MakeFromAggregate({
   name: ProductDemand$CatalogPlugin.name,
   commandSchema: ProductDemand$CatalogPlugin.commandSchema,
   eventSchema: ProductDemand$CatalogPlugin.eventSchema,
-  errorSchema: ProductDemand$CatalogPlugin.errorSchema
+  errorSchema: ProductDemand$CatalogPlugin.errorSchema,
+  commandAuthorization: ProductDemand$CatalogPlugin.commandAuthorization
 })({
   Spec: {
     name: ProductDemand$CatalogPlugin.name,
     commandSchema: ProductDemand$CatalogPlugin.commandSchema,
     eventSchema: ProductDemand$CatalogPlugin.eventSchema,
-    errorSchema: ProductDemand$CatalogPlugin.errorSchema
+    errorSchema: ProductDemand$CatalogPlugin.errorSchema,
+    commandAuthorization: ProductDemand$CatalogPlugin.commandAuthorization
   },
   initialState: ProductDemand_Behavior$CatalogPlugin.initialState,
   evolve: ProductDemand_Behavior$CatalogPlugin.evolve,

package/lib/ocaml/.compiler.log

@@ -1,2 +1,2 @@
-#Start(1790818270914)
-#Done(1790818277109)
+#Start(1790854925300)
+#Done(1790854931571)

package/lib/ocaml/CatalogPlugin.mlmap

@@ -26,3 +26,4 @@ Products_ExtensionPointMapping
 Products_ExtensionPointMapping_GWT
 Products_GWT
 Products_Projections
+Roles

package/lib/ocaml/Catalog_Examples.res

@@ -7,3 +7,4 @@ let laptopImage: string = "/productImages/laptop.jpg"
 let order1: string = "order-1"
 let order2: string = "order-2"
 let renamedTo: string = "New Name"
+let shopper: string = "shopper"

package/lib/ocaml/Category.res

@@ -9,7 +9,7 @@ module Id = CategoryId
 type command =
   | Add({name: string})
   | Rename({name: string})
-  | @authorize(AllowGroups(["Admin"])) Archive
+  | @authorize(AllowRoles([Admin])) Archive
 
 @schema
 type event =

package/lib/ocaml/Category_GWT.res

@@ -59,3 +59,29 @@ describe("Category Behavior", () => {
     ->thenNoEvent
   )
 })
+
+describe("Who may Archive", () => {
+  // scenario-id: 5164cae5-bd41-4802-aa03-3d42b3e2fb9f
+  test("an Admin may archive a category", () =>
+    givenEvents([Added({name: electronics})])
+    ->asCaller(Caller.inRoles([Admin]))
+    ->whenCmd(Archive)
+    ->thenEvent(Archived)
+  )
+
+  // scenario-id: 92a627eb-e78c-48ed-88f4-5065dc505885
+  test("a shopper may not archive a category", () =>
+    givenEvents([Added({name: electronics})])
+    ->asCaller(Caller.owner(shopper))
+    ->whenCmd(Archive)
+    ->thenRefused
+  )
+
+  // scenario-id: c4c8e733-7e07-4f3c-b3f2-01bc6b52f601
+  test("an anonymous caller may not archive a category", () =>
+    givenEvents([Added({name: electronics})])
+    ->asCaller(Caller.anonymous)
+    ->whenCmd(Archive)
+    ->thenRefused
+  )
+})

package/lib/ocaml/Roles.res

@@ -0,0 +1,2 @@
+// The roles the catalog's commands require: the framework's administrator.
+type t = Admin

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/online-shop-aggregates-catalog",
-  "version": "3.0.0-alpha.264",
+  "version": "3.0.0-alpha.265",
   "description": "Online Shop example — Catalog plugin (Product & Category aggregates)",
   "license": "Apache-2.0",
   "jest": {
@@ -21,18 +21,18 @@
   },
   "dependencies": {
     "sury": "11.0.0",
-    "@reventlessdev/online-shop-aggregates-catalog-spec": "3.0.0-alpha.154",
+    "@reventlessdev/online-shop-aggregates-catalog-spec": "3.0.0-alpha.155",
+    "@reventlessdev/online-shop-aggregates-ordering-spec": "3.0.0-alpha.155",
+    "@reventlessdev/reventless-gwt": "1.0.0-alpha.233",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.184",
     "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.22",
-    "@reventlessdev/reventless-gwt": "1.0.0-alpha.232",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.183",
-    "@reventlessdev/online-shop-aggregates-ordering-spec": "3.0.0-alpha.154",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.155",
-    "@reventlessdev/reventless-local": "3.0.0-alpha.275"
+    "@reventlessdev/reventless-local": "3.0.0-alpha.276",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.156"
   },
   "devDependencies": {
     "rescript": "12.3.1",
     "sury-ppx": "11.0.0",
-    "@reventlessdev/reventless-ppx": "1.0.0-alpha.95"
+    "@reventlessdev/reventless-ppx": "1.0.0-alpha.96"
   },
   "peerDependencies": {
     "rescript": "^12.3.1"

package/src/Category/Aggregate/Category.res

@@ -9,7 +9,7 @@ module Id = CategoryId
 type command =
   | Add({name: string})
   | Rename({name: string})
-  | @authorize(AllowGroups(["Admin"])) Archive
+  | @authorize(AllowRoles([Admin])) Archive
 
 @schema
 type event =

package/src/Category/Aggregate/Category.res.mjs

@@ -35,7 +35,7 @@ let errorSchema = Sury.union([
 function commandAuthorization(command) {
   if (typeof command !== "object") {
     return {
-      TAG: "AllowGroups",
+      TAG: "AllowRoles",
       _0: ["Admin"]
     };
   } else {

package/src/Roles.res

@@ -0,0 +1,2 @@
+// The roles the catalog's commands require: the framework's administrator.
+type t = Admin

package/src/Roles.res.mjs

@@ -0,0 +1,2 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+/* This output is empty. Its source's type definitions, externals and/or unused code got optimized away. */

package/tests/Catalog_Examples.res

@@ -7,3 +7,4 @@ let laptopImage: string = "/productImages/laptop.jpg"
 let order1: string = "order-1"
 let order2: string = "order-2"
 let renamedTo: string = "New Name"
+let shopper: string = "shopper"

package/tests/Catalog_Examples.res.mjs

@@ -15,6 +15,8 @@ let order2 = "order-2";
 
 let renamedTo = "New Name";
 
+let shopper = "shopper";
+
 export {
   electronics,
   laptop,
@@ -23,5 +25,6 @@ export {
   order1,
   order2,
   renamedTo,
+  shopper,
 }
 /* No side effect */

package/tests/Category/Aggregate/Category_GWT.res

@@ -59,3 +59,29 @@ describe("Category Behavior", () => {
     ->thenNoEvent
   )
 })
+
+describe("Who may Archive", () => {
+  // scenario-id: 5164cae5-bd41-4802-aa03-3d42b3e2fb9f
+  test("an Admin may archive a category", () =>
+    givenEvents([Added({name: electronics})])
+    ->asCaller(Caller.inRoles([Admin]))
+    ->whenCmd(Archive)
+    ->thenEvent(Archived)
+  )
+
+  // scenario-id: 92a627eb-e78c-48ed-88f4-5065dc505885
+  test("a shopper may not archive a category", () =>
+    givenEvents([Added({name: electronics})])
+    ->asCaller(Caller.owner(shopper))
+    ->whenCmd(Archive)
+    ->thenRefused
+  )
+
+  // scenario-id: c4c8e733-7e07-4f3c-b3f2-01bc6b52f601
+  test("an anonymous caller may not archive a category", () =>
+    givenEvents([Added({name: electronics})])
+    ->asCaller(Caller.anonymous)
+    ->whenCmd(Archive)
+    ->thenRefused
+  )
+})

package/tests/Category/Aggregate/Category_GWT.res.mjs

@@ -9,13 +9,15 @@ let include = Behavior_GWT$ReventlessGwt.MakeFromAggregate({
   name: Category$CatalogPlugin.name,
   commandSchema: Category$CatalogPlugin.commandSchema,
   eventSchema: Category$CatalogPlugin.eventSchema,
-  errorSchema: Category$CatalogPlugin.errorSchema
+  errorSchema: Category$CatalogPlugin.errorSchema,
+  commandAuthorization: Category$CatalogPlugin.commandAuthorization
 })({
   Spec: {
     name: Category$CatalogPlugin.name,
     commandSchema: Category$CatalogPlugin.commandSchema,
     eventSchema: Category$CatalogPlugin.eventSchema,
-    errorSchema: Category$CatalogPlugin.errorSchema
+    errorSchema: Category$CatalogPlugin.errorSchema,
+    commandAuthorization: Category$CatalogPlugin.commandAuthorization
   },
   initialState: Category_Behavior$CatalogPlugin.initialState,
   evolve: Category_Behavior$CatalogPlugin.evolve,
@@ -30,6 +32,10 @@ let test = include.test;
 
 let givenEvents = include.givenEvents;
 
+let Caller = include.Caller;
+
+let asCaller = include.asCaller;
+
 let whenCmd = include.whenCmd;
 
 let thenEvent = include.thenEvent;
@@ -38,6 +44,8 @@ let thenNoEvent = include.thenNoEvent;
 
 let thenError = include.thenError;
 
+let thenRefused = include.thenRefused;
+
 describe("Category Behavior", () => {
   test("Add on new aggregate produces Added", () => thenEvent(whenCmd(givenEvents([]), {
     TAG: "Add",
@@ -97,11 +105,22 @@ describe("Category Behavior", () => {
   ]), "Archive")));
 });
 
-let Spec = include.Spec;
-
-let Caller = include.Caller;
+describe("Who may Archive", () => {
+  test("an Admin may archive a category", () => thenEvent(whenCmd(asCaller(givenEvents([{
+      TAG: "Added",
+      name: Catalog_Examples$CatalogPlugin.electronics
+    }]), Caller.inRoles(["Admin"])), "Archive"), "Archived"));
+  test("a shopper may not archive a category", () => thenRefused(whenCmd(asCaller(givenEvents([{
+      TAG: "Added",
+      name: Catalog_Examples$CatalogPlugin.electronics
+    }]), Caller.owner(Catalog_Examples$CatalogPlugin.shopper, undefined)), "Archive")));
+  test("an anonymous caller may not archive a category", () => thenRefused(whenCmd(asCaller(givenEvents([{
+      TAG: "Added",
+      name: Catalog_Examples$CatalogPlugin.electronics
+    }]), Caller.anonymous), "Archive")));
+});
 
-let asCaller = include.asCaller;
+let Spec = include.Spec;
 
 let thenCompareEvent = include.thenCompareEvent;
 
@@ -113,8 +132,6 @@ let thenCompareEvents = include.thenCompareEvents;
 
 let thenEventsWithError = include.thenEventsWithError;
 
-let thenRefused = include.thenRefused;
-
 export {
   Spec,
   describe,

package/tests/Product/Aggregate/Product_GWT.res.mjs

@@ -9,13 +9,15 @@ let include = Behavior_GWT$ReventlessGwt.MakeFromAggregate({
   name: Product$CatalogPlugin.name,
   commandSchema: Product$CatalogPlugin.commandSchema,
   eventSchema: Product$CatalogPlugin.eventSchema,
-  errorSchema: Product$CatalogPlugin.errorSchema
+  errorSchema: Product$CatalogPlugin.errorSchema,
+  commandAuthorization: Product$CatalogPlugin.commandAuthorization
 })({
   Spec: {
     name: Product$CatalogPlugin.name,
     commandSchema: Product$CatalogPlugin.commandSchema,
     eventSchema: Product$CatalogPlugin.eventSchema,
-    errorSchema: Product$CatalogPlugin.errorSchema
+    errorSchema: Product$CatalogPlugin.errorSchema,
+    commandAuthorization: Product$CatalogPlugin.commandAuthorization
   },
   initialState: Product_Behavior$CatalogPlugin.initialState,
   evolve: Product_Behavior$CatalogPlugin.evolve,

package/tests/ProductDemand/Aggregate/ProductDemand_GWT.res.mjs

@@ -9,13 +9,15 @@ let include = Behavior_GWT$ReventlessGwt.MakeFromAggregate({
   name: ProductDemand$CatalogPlugin.name,
   commandSchema: ProductDemand$CatalogPlugin.commandSchema,
   eventSchema: ProductDemand$CatalogPlugin.eventSchema,
-  errorSchema: ProductDemand$CatalogPlugin.errorSchema
+  errorSchema: ProductDemand$CatalogPlugin.errorSchema,
+  commandAuthorization: ProductDemand$CatalogPlugin.commandAuthorization
 })({
   Spec: {
     name: ProductDemand$CatalogPlugin.name,
     commandSchema: ProductDemand$CatalogPlugin.commandSchema,
     eventSchema: ProductDemand$CatalogPlugin.eventSchema,
-    errorSchema: ProductDemand$CatalogPlugin.errorSchema
+    errorSchema: ProductDemand$CatalogPlugin.errorSchema,
+    commandAuthorization: ProductDemand$CatalogPlugin.commandAuthorization
   },
   initialState: ProductDemand_Behavior$CatalogPlugin.initialState,
   evolve: ProductDemand_Behavior$CatalogPlugin.evolve,