@reventlessdev/online-shop-hybrid-ordering 1.0.0-alpha.262 → 1.0.0-alpha.264

package/CHANGELOG.md

@@ -3,6 +3,28 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 1.0.0-alpha.264 (2026-10-01)
+
+* feat!: roles a plugin declares, groups a platform provides ([43daace](https://github.com/ReventlessDev/reventless-core/commit/43daace6ca588afe22562d079af1e6f1da81942e))
+
+### BREAKING CHANGES
+
+* AllowGroups and AdminGroup are removed — write AllowRoles over
+the plugin's Roles.t, and use Role.admin / Platform.adminGroup(). Spec module
+types declare `type role`, and their rules are Authorization.rule<role>; a spec
+that writes its own rule declares `type role` (Reventless.Role.name for a rule
+over Authorization.permission). Role.name is a private string: make one from a
+string with Role.make.
+
+
+
+# 1.0.0-alpha.263 (2026-10-01)
+
+### Features
+
+* **spec, core, gwt, ppx:** a command acts only on what its caller owns ([2636f0e](https://github.com/ReventlessDev/reventless-core/commit/2636f0ee44797ee2c0b0c40a7107cf306113173f))
+
+
 # 1.0.0-alpha.262 (2026-09-29)
 
 **Note:** Version bump only for package @reventlessdev/online-shop-hybrid-ordering

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/online-shop-hybrid-ordering",
-  "version": "1.0.0-alpha.262",
+  "version": "1.0.0-alpha.264",
   "description": "Online Shop Hybrid example — Ordering plugin (Customer aggregate + Order/CatalogProduct DCB)",
   "license": "Apache-2.0",
   "jest": {
@@ -21,20 +21,20 @@
   },
   "dependencies": {
     "sury": "11.0.0",
-    "@reventlessdev/online-shop-hybrid-ordering-spec": "1.0.0-alpha.150",
-    "@reventlessdev/online-shop-hybrid-catalog-spec": "1.0.0-alpha.151",
+    "@reventlessdev/online-shop-hybrid-catalog-spec": "1.0.0-alpha.153",
     "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.22",
-    "@reventlessdev/reventless-gwt": "1.0.0-alpha.231",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.182",
-    "@reventlessdev/reventless-local": "3.0.0-alpha.274",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.154",
-    "@reventlessdev/trait-address-geocoding": "1.0.0-alpha.33",
-    "@reventlessdev/trait-notification": "1.0.0-alpha.33"
+    "@reventlessdev/online-shop-hybrid-ordering-spec": "1.0.0-alpha.152",
+    "@reventlessdev/reventless-gwt": "1.0.0-alpha.233",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.184",
+    "@reventlessdev/reventless-local": "3.0.0-alpha.276",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.156",
+    "@reventlessdev/trait-address-geocoding": "1.0.0-alpha.35",
+    "@reventlessdev/trait-notification": "1.0.0-alpha.35"
   },
   "devDependencies": {
     "rescript": "12.3.1",
     "sury-ppx": "11.0.0",
-    "@reventlessdev/reventless-ppx": "1.0.0-alpha.95"
+    "@reventlessdev/reventless-ppx": "1.0.0-alpha.96"
   },
   "peerDependencies": {
     "rescript": "^12.3.1"

package/src/Customer/ReadModelStream/Customers.res

@@ -7,7 +7,7 @@ module Id = CustomerId
 
 // Operator surface: everyone's profile, so operator-only. A shopper reads their
 // own orders instead.
-@@reventless.authorize(AllowGroups(["Admin", "Fulfilment"]))
+@@reventless.authorize(AllowRoles([Admin, Fulfilment]))
 
 // A state rather than a flag beside one, so a command can say where it belongs:
 // `Moves([Deactivated], Active)` on `Reactivate`. `@retired` withdraws

package/src/Customer/ReadModelStream/Customers.res.mjs

@@ -60,7 +60,7 @@ let stateSchema$2 = Sury.$Metadata_set(stateSchema$1, StateAnnotations$Reventles
 });
 
 let authorization = {
-  TAG: "AllowGroups",
+  TAG: "AllowRoles",
   _0: [
     "Admin",
     "Fulfilment"

package/src/Order/StateChange/CancelOrder.res

@@ -3,9 +3,12 @@
 
 @@reventless.spec
 
+// `@owner` on the consumed `customerId` says whose order this is. The framework
+// reads it before `decide` and refuses a shopper cancelling someone else's order;
+// an operator, or an automation, still acts on anyone's.
 @schema
 type consumedEvent =
-  | OrderPlaced({productIds: array<CatalogSpec.ProductId.t>})
+  | OrderPlaced({productIds: array<CatalogSpec.ProductId.t>, @owner customerId: CustomerId.t})
   | OrderShipped
   | OrderCancelled
   | OrderReopened

package/src/Order/StateChange/CancelOrder.res.mjs

@@ -1,15 +1,18 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
 import * as Sury from "sury";
+import * as Owner$Reventless from "@reventlessdev/reventless-spec/src/components/Owner.res.mjs";
 import * as DcbTag$Reventless from "@reventlessdev/reventless-spec/src/components/DcbTag.res.mjs";
 import * as Api$ReventlessInfra from "@reventlessdev/reventless-infra/src/components/Api.res.mjs";
 import * as ProductId$CatalogSpec from "@reventlessdev/online-shop-hybrid-catalog-spec/src/ProductId.res.mjs";
 import * as OrderId$OrderingPlugin from "../OrderId.res.mjs";
+import * as CustomerId$OrderingPlugin from "../../Customer/CustomerId.res.mjs";
 
 let consumedEventSchema = Sury.union([
   Sury.$schema(s => ({
     TAG: "OrderPlaced",
-    productIds: s.m(Sury.array(DcbTag$Reventless.mark(ProductId$CatalogSpec.schema)))
+    productIds: s.m(Sury.array(DcbTag$Reventless.mark(ProductId$CatalogSpec.schema))),
+    customerId: s.m(Owner$Reventless.mark(DcbTag$Reventless.mark(CustomerId$OrderingPlugin.schema)))
   })),
   Sury.literal("OrderShipped"),
   Sury.literal("OrderCancelled"),

package/src/Order/StateChange/ShipOrder.res

@@ -29,7 +29,7 @@ type consumedEvent =
   | OrderReopened
 
 @schema
-type command = | @authorize(AllowGroups(["Admin", "Fulfilment"])) ShipOrder({orderId: OrderId.t})
+type command = | @authorize(AllowRoles([Admin, Fulfilment])) ShipOrder({orderId: OrderId.t})
 
 @schema
 type error =

package/src/Order/StateChange/ShipOrder.res.mjs

@@ -43,7 +43,7 @@ function commandTransition(command) {
 
 function commandAuthorization(command) {
   return {
-    TAG: "AllowGroups",
+    TAG: "AllowRoles",
     _0: [
       "Admin",
       "Fulfilment"

package/src/Roles.res

@@ -0,0 +1,5 @@
+// The roles the ordering commands and views require. `Admin` is the framework's
+// administrator; joined by name, so it needs no shared package.
+type t =
+  | Admin
+  | Fulfilment

package/src/Roles.res.mjs

@@ -0,0 +1,2 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+/* This output is empty. Its source's type definitions, externals and/or unused code got optimized away. */

package/tests/CatalogProduct/StateChange/SyncCatalogProduct_GWT.res.mjs

@@ -10,7 +10,8 @@ let include = Behavior_GWT$ReventlessGwt.Make({
   consumedEventSchema: SyncCatalogProduct$OrderingPlugin.consumedEventSchema,
   commandSchema: SyncCatalogProduct$OrderingPlugin.commandSchema,
   errorSchema: SyncCatalogProduct$OrderingPlugin.errorSchema,
-  eventSchema: SyncCatalogProduct$OrderingPlugin.eventSchema
+  eventSchema: SyncCatalogProduct$OrderingPlugin.eventSchema,
+  commandAuthorization: SyncCatalogProduct$OrderingPlugin.commandAuthorization
 })({
   initialState: SyncCatalogProduct_Behavior$OrderingPlugin.initialState,
   evolve: SyncCatalogProduct_Behavior$OrderingPlugin.evolve,
@@ -149,6 +150,10 @@ let Spec = include.Spec;
 
 let todo = include.todo;
 
+let Caller = include.Caller;
+
+let asCaller = include.asCaller;
+
 let thenEvents = include.thenEvents;
 
 let thenEventWithError = include.thenEventWithError;
@@ -157,6 +162,8 @@ let thenEventsWithError = include.thenEventsWithError;
 
 let thenError = include.thenError;
 
+let thenRefused = include.thenRefused;
+
 let thenAppendsConditionedOn = include.thenAppendsConditionedOn;
 
 let thenAppendsConditionedOnExactly = include.thenAppendsConditionedOnExactly;
@@ -167,6 +174,8 @@ export {
   todo,
   test,
   givenEvents,
+  Caller,
+  asCaller,
   whenCmd,
   thenEvent,
   thenEvents,
@@ -174,6 +183,7 @@ export {
   thenEventWithError,
   thenEventsWithError,
   thenError,
+  thenRefused,
   thenAppendsConditionedOn,
   thenAppendsConditionedOnExactly,
 }

package/tests/Customer/AddressGeocodingConformance_GWT.res.mjs

@@ -147,14 +147,16 @@ let Conformance = AddressGeocoding_Conformance$TraitAddressGeocoding.Make({
     name: Customer$OrderingPlugin.name,
     commandSchema: Customer$OrderingPlugin.commandSchema,
     eventSchema: Customer$OrderingPlugin.eventSchema,
-    errorSchema: Customer$OrderingPlugin.errorSchema
+    errorSchema: Customer$OrderingPlugin.errorSchema,
+    commandAuthorization: Customer$OrderingPlugin.commandAuthorization
   },
   Behavior: {
     Spec: {
       name: Customer$OrderingPlugin.name,
       commandSchema: Customer$OrderingPlugin.commandSchema,
       eventSchema: Customer$OrderingPlugin.eventSchema,
-      errorSchema: Customer$OrderingPlugin.errorSchema
+      errorSchema: Customer$OrderingPlugin.errorSchema,
+      commandAuthorization: Customer$OrderingPlugin.commandAuthorization
     },
     initialState: Customer_Behavior$OrderingPlugin.initialState,
     evolve: Customer_Behavior$OrderingPlugin.evolve,

package/tests/Customer/Aggregate/Customer_GWT.res.mjs

@@ -9,13 +9,15 @@ let include = Behavior_GWT$ReventlessGwt.MakeFromAggregate({
   name: Customer$OrderingPlugin.name,
   commandSchema: Customer$OrderingPlugin.commandSchema,
   eventSchema: Customer$OrderingPlugin.eventSchema,
-  errorSchema: Customer$OrderingPlugin.errorSchema
+  errorSchema: Customer$OrderingPlugin.errorSchema,
+  commandAuthorization: Customer$OrderingPlugin.commandAuthorization
 })({
   Spec: {
     name: Customer$OrderingPlugin.name,
     commandSchema: Customer$OrderingPlugin.commandSchema,
     eventSchema: Customer$OrderingPlugin.eventSchema,
-    errorSchema: Customer$OrderingPlugin.errorSchema
+    errorSchema: Customer$OrderingPlugin.errorSchema,
+    commandAuthorization: Customer$OrderingPlugin.commandAuthorization
   },
   initialState: Customer_Behavior$OrderingPlugin.initialState,
   evolve: Customer_Behavior$OrderingPlugin.evolve,
@@ -278,6 +280,10 @@ describe("Customer email verification", () => {
 
 let Spec = include.Spec;
 
+let Caller = include.Caller;
+
+let asCaller = include.asCaller;
+
 let thenCompareEvent = include.thenCompareEvent;
 
 let thenEventWithError = include.thenEventWithError;
@@ -288,11 +294,15 @@ let thenCompareEvents = include.thenCompareEvents;
 
 let thenEventsWithError = include.thenEventsWithError;
 
+let thenRefused = include.thenRefused;
+
 export {
   Spec,
   describe,
   test,
   givenEvents,
+  Caller,
+  asCaller,
   whenCmd,
   thenEvent,
   thenCompareEvent,
@@ -302,5 +312,6 @@ export {
   thenCompareEvents,
   thenEventsWithError,
   thenError,
+  thenRefused,
 }
 /* include Not a pure module */

package/tests/Customer/StateChange/EmailVerificationChallenges_GWT.res.mjs

@@ -10,7 +10,8 @@ let include = Behavior_GWT$ReventlessGwt.Make({
   consumedEventSchema: EmailVerificationChallenges$OrderingPlugin.consumedEventSchema,
   commandSchema: EmailVerificationChallenges$OrderingPlugin.commandSchema,
   errorSchema: EmailVerificationChallenges$OrderingPlugin.errorSchema,
-  eventSchema: EmailVerificationChallenges$OrderingPlugin.eventSchema
+  eventSchema: EmailVerificationChallenges$OrderingPlugin.eventSchema,
+  commandAuthorization: EmailVerificationChallenges$OrderingPlugin.commandAuthorization
 })({
   initialState: EmailVerificationChallenges_Behavior$OrderingPlugin.initialState,
   evolve: EmailVerificationChallenges_Behavior$OrderingPlugin.evolve,
@@ -161,12 +162,18 @@ let Spec = include.Spec;
 
 let todo = include.todo;
 
+let Caller = include.Caller;
+
+let asCaller = include.asCaller;
+
 let thenEvents = include.thenEvents;
 
 let thenEventWithError = include.thenEventWithError;
 
 let thenEventsWithError = include.thenEventsWithError;
 
+let thenRefused = include.thenRefused;
+
 let thenAppendsConditionedOn = include.thenAppendsConditionedOn;
 
 let thenAppendsConditionedOnExactly = include.thenAppendsConditionedOnExactly;
@@ -177,6 +184,8 @@ export {
   todo,
   test,
   givenEvents,
+  Caller,
+  asCaller,
   whenCmd,
   thenEvent,
   thenEvents,
@@ -184,6 +193,7 @@ export {
   thenEventWithError,
   thenEventsWithError,
   thenError,
+  thenRefused,
   thenAppendsConditionedOn,
   thenAppendsConditionedOnExactly,
   issuedAt,

package/tests/Flow/OrderingFlow_GWT.res.mjs

@@ -95,7 +95,8 @@ let Sync = Flow_GWT$ReventlessGwt.CommandStep({
   consumedEventSchema: SyncCatalogProduct$OrderingPlugin.consumedEventSchema,
   commandSchema: SyncCatalogProduct$OrderingPlugin.commandSchema,
   errorSchema: SyncCatalogProduct$OrderingPlugin.errorSchema,
-  eventSchema: SyncCatalogProduct$OrderingPlugin.eventSchema
+  eventSchema: SyncCatalogProduct$OrderingPlugin.eventSchema,
+  commandAuthorization: SyncCatalogProduct$OrderingPlugin.commandAuthorization
 })({
   initialState: SyncCatalogProduct_Behavior$OrderingPlugin.initialState,
   evolve: SyncCatalogProduct_Behavior$OrderingPlugin.evolve,
@@ -107,7 +108,8 @@ let Place = Flow_GWT$ReventlessGwt.CommandStep({
   consumedEventSchema: PlaceOrder$OrderingPlugin.consumedEventSchema,
   commandSchema: PlaceOrder$OrderingPlugin.commandSchema,
   errorSchema: PlaceOrder$OrderingPlugin.errorSchema,
-  eventSchema: PlaceOrder$OrderingPlugin.eventSchema
+  eventSchema: PlaceOrder$OrderingPlugin.eventSchema,
+  commandAuthorization: PlaceOrder$OrderingPlugin.commandAuthorization
 })({
   initialState: PlaceOrder_Behavior$OrderingPlugin.initialState,
   evolve: PlaceOrder_Behavior$OrderingPlugin.evolve,
@@ -129,7 +131,8 @@ let Ship = Flow_GWT$ReventlessGwt.CommandStep({
   consumedEventSchema: ShipOrder$OrderingPlugin.consumedEventSchema,
   commandSchema: ShipOrder$OrderingPlugin.commandSchema,
   errorSchema: ShipOrder$OrderingPlugin.errorSchema,
-  eventSchema: ShipOrder$OrderingPlugin.eventSchema
+  eventSchema: ShipOrder$OrderingPlugin.eventSchema,
+  commandAuthorization: ShipOrder$OrderingPlugin.commandAuthorization
 })({
   initialState: ShipOrder_Behavior$OrderingPlugin.initialState,
   evolve: ShipOrder_Behavior$OrderingPlugin.evolve,

package/tests/Notification/NotificationConformance_GWT.res.mjs

@@ -248,7 +248,8 @@ let Conformance = Notification_Conformance$TraitNotification.Make({
     consumedEventSchema: NotificationPreferences$OrderingPlugin.consumedEventSchema,
     commandSchema: NotificationPreferences$OrderingPlugin.commandSchema,
     errorSchema: NotificationPreferences$OrderingPlugin.errorSchema,
-    eventSchema: NotificationPreferences$OrderingPlugin.eventSchema
+    eventSchema: NotificationPreferences$OrderingPlugin.eventSchema,
+    commandAuthorization: NotificationPreferences$OrderingPlugin.commandAuthorization
   },
   Behavior: {
     Spec: {
@@ -256,7 +257,8 @@ let Conformance = Notification_Conformance$TraitNotification.Make({
       consumedEventSchema: NotificationPreferences$OrderingPlugin.consumedEventSchema,
       commandSchema: NotificationPreferences$OrderingPlugin.commandSchema,
       errorSchema: NotificationPreferences$OrderingPlugin.errorSchema,
-      eventSchema: NotificationPreferences$OrderingPlugin.eventSchema
+      eventSchema: NotificationPreferences$OrderingPlugin.eventSchema,
+      commandAuthorization: NotificationPreferences$OrderingPlugin.commandAuthorization
     },
     initialState: NotificationPreferences_Behavior$OrderingPlugin.initialState,
     evolve: NotificationPreferences_Behavior$OrderingPlugin.evolve,

package/tests/Notification/StateChange/NotificationPreferences_GWT.res.mjs

@@ -10,7 +10,8 @@ let include = Behavior_GWT$ReventlessGwt.Make({
   consumedEventSchema: NotificationPreferences$OrderingPlugin.consumedEventSchema,
   commandSchema: NotificationPreferences$OrderingPlugin.commandSchema,
   errorSchema: NotificationPreferences$OrderingPlugin.errorSchema,
-  eventSchema: NotificationPreferences$OrderingPlugin.eventSchema
+  eventSchema: NotificationPreferences$OrderingPlugin.eventSchema,
+  commandAuthorization: NotificationPreferences$OrderingPlugin.commandAuthorization
 })({
   initialState: NotificationPreferences_Behavior$OrderingPlugin.initialState,
   evolve: NotificationPreferences_Behavior$OrderingPlugin.evolve,
@@ -105,6 +106,10 @@ let Spec = include.Spec;
 
 let todo = include.todo;
 
+let Caller = include.Caller;
+
+let asCaller = include.asCaller;
+
 let thenEvents = include.thenEvents;
 
 let thenNoEvent = include.thenNoEvent;
@@ -115,6 +120,8 @@ let thenEventsWithError = include.thenEventsWithError;
 
 let thenError = include.thenError;
 
+let thenRefused = include.thenRefused;
+
 let thenAppendsConditionedOn = include.thenAppendsConditionedOn;
 
 let thenAppendsConditionedOnExactly = include.thenAppendsConditionedOnExactly;
@@ -125,6 +132,8 @@ export {
   todo,
   test,
   givenEvents,
+  Caller,
+  asCaller,
   whenCmd,
   thenEvent,
   thenEvents,
@@ -132,6 +141,7 @@ export {
   thenEventWithError,
   thenEventsWithError,
   thenError,
+  thenRefused,
   thenAppendsConditionedOn,
   thenAppendsConditionedOnExactly,
 }

package/tests/Notification/StateChange/NotificationSourceClaims_GWT.res.mjs

@@ -10,7 +10,8 @@ let include = Behavior_GWT$ReventlessGwt.Make({
   consumedEventSchema: NotificationSourceClaims$OrderingPlugin.consumedEventSchema,
   commandSchema: NotificationSourceClaims$OrderingPlugin.commandSchema,
   errorSchema: NotificationSourceClaims$OrderingPlugin.errorSchema,
-  eventSchema: NotificationSourceClaims$OrderingPlugin.eventSchema
+  eventSchema: NotificationSourceClaims$OrderingPlugin.eventSchema,
+  commandAuthorization: NotificationSourceClaims$OrderingPlugin.commandAuthorization
 })({
   initialState: NotificationSourceClaims_Behavior$OrderingPlugin.initialState,
   evolve: NotificationSourceClaims_Behavior$OrderingPlugin.evolve,
@@ -76,6 +77,10 @@ let Spec = include.Spec;
 
 let todo = include.todo;
 
+let Caller = include.Caller;
+
+let asCaller = include.asCaller;
+
 let thenEvents = include.thenEvents;
 
 let thenEventWithError = include.thenEventWithError;
@@ -84,6 +89,8 @@ let thenEventsWithError = include.thenEventsWithError;
 
 let thenError = include.thenError;
 
+let thenRefused = include.thenRefused;
+
 let thenAppendsConditionedOn = include.thenAppendsConditionedOn;
 
 let thenAppendsConditionedOnExactly = include.thenAppendsConditionedOnExactly;
@@ -94,6 +101,8 @@ export {
   todo,
   test,
   givenEvents,
+  Caller,
+  asCaller,
   whenCmd,
   thenEvent,
   thenEvents,
@@ -101,6 +110,7 @@ export {
   thenEventWithError,
   thenEventsWithError,
   thenError,
+  thenRefused,
   thenAppendsConditionedOn,
   thenAppendsConditionedOnExactly,
 }

package/tests/Order/StateChange/CancelOrder_GWT.res

@@ -12,35 +12,35 @@ describe("CancelOrder StateChangeSlice", () => {
 
   // scenario-id: 44e2fd1b-d3da-4581-b102-0ccb47e004eb
   test("placed order produces OrderCancelled with productIds carried over", () =>
-    givenEvents([OrderPlaced({productIds: [p1, p2]})])
+    givenEvents([OrderPlaced({productIds: [p1, p2], customerId: c1})])
     ->whenCmd(CancelOrder({orderId: o1}))
     ->thenEvent(OrderCancelled({orderId: o1, productIds: [p1, p2]}))
   )
 
   // scenario-id: 36e7a929-73a3-48ad-96bf-98265877dd9f
   test("already cancelled order produces no events for CancelOrder (idempotent)", () =>
-    givenEvents([OrderPlaced({productIds: [p1]}), OrderCancelled])
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1}), OrderCancelled])
     ->whenCmd(CancelOrder({orderId: o1}))
     ->thenNoEvent
   )
 
   // scenario-id: a8adfaaf-2a97-487d-b80b-34b2e79a621d
   test("shipped order returns OrderAlreadyShipped for CancelOrder", () =>
-    givenEvents([OrderPlaced({productIds: [p1]}), OrderShipped])
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1}), OrderShipped])
     ->whenCmd(CancelOrder({orderId: o1}))
     ->thenError(OrderAlreadyShipped)
   )
 
   // scenario-id: da5c2d1d-adaf-412c-ba71-293158b29841
   test("ReopenOrder on cancelled order produces OrderReopened", () =>
-    givenEvents([OrderPlaced({productIds: [p1]}), OrderCancelled])
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1}), OrderCancelled])
     ->whenCmd(ReopenOrder({orderId: o1}))
     ->thenEvent(OrderReopened({orderId: o1}))
   )
 
   // scenario-id: edebec12-a5ec-4f71-a1fc-f1db65108db9
   test("ReopenOrder on a placed order produces no events (idempotent)", () =>
-    givenEvents([OrderPlaced({productIds: [p1]})])
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1})])
     ->whenCmd(ReopenOrder({orderId: o1}))
     ->thenNoEvent
   )
@@ -50,7 +50,7 @@ describe("CancelOrder StateChangeSlice", () => {
   // shipped — the case no test covered, which is how it survived.
   // scenario-id: 96bdee04-7518-4297-81f5-7242a0cffa9f
   test("ReopenOrder on a shipped order returns OrderAlreadyShipped", () =>
-    givenEvents([OrderPlaced({productIds: [p1]}), OrderShipped])
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1}), OrderShipped])
     ->whenCmd(ReopenOrder({orderId: o1}))
     ->thenError(OrderAlreadyShipped)
   )
@@ -61,4 +61,39 @@ describe("CancelOrder StateChangeSlice", () => {
     ->whenCmd(ReopenOrder({orderId: o1}))
     ->thenError(OrderNotFound)
   )
+
+  // Only the customer who placed an order may cancel it. The slice says so by
+  // marking `@owner` on the `customerId` its `OrderPlaced` carries; an operator
+  // still cancels on anyone's behalf.
+  // scenario-id: 80c0ad21-a352-43d6-862c-74c5250991d1
+  test("the customer who placed the order may cancel it", () =>
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1})])
+    ->asCaller(Caller.owner(c1))
+    ->whenCmd(CancelOrder({orderId: o1}))
+    ->thenEvent(OrderCancelled({orderId: o1, productIds: [p1]}))
+  )
+
+  // scenario-id: 48fc5fa8-449d-40df-b58d-e87f0acea478
+  test("another customer cannot cancel the order", () =>
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1})])
+    ->asCaller(Caller.owner(c2))
+    ->whenCmd(CancelOrder({orderId: o1}))
+    ->thenRefused
+  )
+
+  // scenario-id: e7561ebf-5566-4a4e-87c0-9aa403d68310
+  test("an operator may cancel any customer's order", () =>
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1})])
+    ->asCaller(Caller.operator)
+    ->whenCmd(CancelOrder({orderId: o1}))
+    ->thenEvent(OrderCancelled({orderId: o1, productIds: [p1]}))
+  )
+
+  // scenario-id: e0df85d2-f997-4833-816e-39ddce5c895e
+  test("a caller who is not signed in cannot cancel an order", () =>
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1})])
+    ->asCaller(Caller.anonymous)
+    ->whenCmd(CancelOrder({orderId: o1}))
+    ->thenRefused
+  )
 })

package/tests/Order/StateChange/CancelOrder_GWT.res.mjs

@@ -10,7 +10,8 @@ let include = Behavior_GWT$ReventlessGwt.Make({
   consumedEventSchema: CancelOrder$OrderingPlugin.consumedEventSchema,
   commandSchema: CancelOrder$OrderingPlugin.commandSchema,
   errorSchema: CancelOrder$OrderingPlugin.errorSchema,
-  eventSchema: CancelOrder$OrderingPlugin.eventSchema
+  eventSchema: CancelOrder$OrderingPlugin.eventSchema,
+  commandAuthorization: CancelOrder$OrderingPlugin.commandAuthorization
 })({
   initialState: CancelOrder_Behavior$OrderingPlugin.initialState,
   evolve: CancelOrder_Behavior$OrderingPlugin.evolve,
@@ -23,6 +24,10 @@ let test = include.test;
 
 let givenEvents = include.givenEvents;
 
+let Caller = include.Caller;
+
+let asCaller = include.asCaller;
+
 let whenCmd = include.whenCmd;
 
 let thenEvent = include.thenEvent;
@@ -31,6 +36,8 @@ let thenNoEvent = include.thenNoEvent;
 
 let thenError = include.thenError;
 
+let thenRefused = include.thenRefused;
+
 describe("CancelOrder StateChangeSlice", () => {
   test("non-existent order returns OrderNotFound for CancelOrder", () => thenError(whenCmd(givenEvents([]), {
     TAG: "CancelOrder",
@@ -41,7 +48,8 @@ describe("CancelOrder StateChangeSlice", () => {
       productIds: [
         Ordering_Examples$OrderingPlugin.p1,
         Ordering_Examples$OrderingPlugin.p2
-      ]
+      ],
+      customerId: Ordering_Examples$OrderingPlugin.c1
     }]), {
     TAG: "CancelOrder",
     orderId: Ordering_Examples$OrderingPlugin.o1
@@ -56,7 +64,8 @@ describe("CancelOrder StateChangeSlice", () => {
   test("already cancelled order produces no events for CancelOrder (idempotent)", () => thenNoEvent(whenCmd(givenEvents([
     {
       TAG: "OrderPlaced",
-      productIds: [Ordering_Examples$OrderingPlugin.p1]
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
     },
     "OrderCancelled"
   ]), {
@@ -66,7 +75,8 @@ describe("CancelOrder StateChangeSlice", () => {
   test("shipped order returns OrderAlreadyShipped for CancelOrder", () => thenError(whenCmd(givenEvents([
     {
       TAG: "OrderPlaced",
-      productIds: [Ordering_Examples$OrderingPlugin.p1]
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
     },
     "OrderShipped"
   ]), {
@@ -76,7 +86,8 @@ describe("CancelOrder StateChangeSlice", () => {
   test("ReopenOrder on cancelled order produces OrderReopened", () => thenEvent(whenCmd(givenEvents([
     {
       TAG: "OrderPlaced",
-      productIds: [Ordering_Examples$OrderingPlugin.p1]
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
     },
     "OrderCancelled"
   ]), {
@@ -88,7 +99,8 @@ describe("CancelOrder StateChangeSlice", () => {
   }));
   test("ReopenOrder on a placed order produces no events (idempotent)", () => thenNoEvent(whenCmd(givenEvents([{
       TAG: "OrderPlaced",
-      productIds: [Ordering_Examples$OrderingPlugin.p1]
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
     }]), {
     TAG: "ReopenOrder",
     orderId: Ordering_Examples$OrderingPlugin.o1
@@ -96,7 +108,8 @@ describe("CancelOrder StateChangeSlice", () => {
   test("ReopenOrder on a shipped order returns OrderAlreadyShipped", () => thenError(whenCmd(givenEvents([
     {
       TAG: "OrderPlaced",
-      productIds: [Ordering_Examples$OrderingPlugin.p1]
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
     },
     "OrderShipped"
   ]), {
@@ -107,6 +120,46 @@ describe("CancelOrder StateChangeSlice", () => {
     TAG: "ReopenOrder",
     orderId: Ordering_Examples$OrderingPlugin.o1
   }), "OrderNotFound"));
+  test("the customer who placed the order may cancel it", () => thenEvent(whenCmd(asCaller(givenEvents([{
+      TAG: "OrderPlaced",
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
+    }]), Caller.owner(Ordering_Examples$OrderingPlugin.c1, undefined)), {
+    TAG: "CancelOrder",
+    orderId: Ordering_Examples$OrderingPlugin.o1
+  }), {
+    TAG: "OrderCancelled",
+    orderId: Ordering_Examples$OrderingPlugin.o1,
+    productIds: [Ordering_Examples$OrderingPlugin.p1]
+  }));
+  test("another customer cannot cancel the order", () => thenRefused(whenCmd(asCaller(givenEvents([{
+      TAG: "OrderPlaced",
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
+    }]), Caller.owner(Ordering_Examples$OrderingPlugin.c2, undefined)), {
+    TAG: "CancelOrder",
+    orderId: Ordering_Examples$OrderingPlugin.o1
+  })));
+  test("an operator may cancel any customer's order", () => thenEvent(whenCmd(asCaller(givenEvents([{
+      TAG: "OrderPlaced",
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
+    }]), Caller.operator), {
+    TAG: "CancelOrder",
+    orderId: Ordering_Examples$OrderingPlugin.o1
+  }), {
+    TAG: "OrderCancelled",
+    orderId: Ordering_Examples$OrderingPlugin.o1,
+    productIds: [Ordering_Examples$OrderingPlugin.p1]
+  }));
+  test("a caller who is not signed in cannot cancel an order", () => thenRefused(whenCmd(asCaller(givenEvents([{
+      TAG: "OrderPlaced",
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
+    }]), Caller.anonymous), {
+    TAG: "CancelOrder",
+    orderId: Ordering_Examples$OrderingPlugin.o1
+  })));
 });
 
 let Spec = include.Spec;
@@ -129,6 +182,8 @@ export {
   todo,
   test,
   givenEvents,
+  Caller,
+  asCaller,
   whenCmd,
   thenEvent,
   thenEvents,
@@ -136,6 +191,7 @@ export {
   thenEventWithError,
   thenEventsWithError,
   thenError,
+  thenRefused,
   thenAppendsConditionedOn,
   thenAppendsConditionedOnExactly,
 }

package/tests/Order/StateChange/PlaceOrder_GWT.res.mjs

@@ -14,7 +14,8 @@ let include = Behavior_GWT$ReventlessGwt.Make({
   consumedEventSchema: PlaceOrder$OrderingPlugin.consumedEventSchema,
   commandSchema: PlaceOrder$OrderingPlugin.commandSchema,
   errorSchema: PlaceOrder$OrderingPlugin.errorSchema,
-  eventSchema: PlaceOrder$OrderingPlugin.eventSchema
+  eventSchema: PlaceOrder$OrderingPlugin.eventSchema,
+  commandAuthorization: PlaceOrder$OrderingPlugin.commandAuthorization
 })({
   initialState: PlaceOrder_Behavior$OrderingPlugin.initialState,
   evolve: PlaceOrder_Behavior$OrderingPlugin.evolve,
@@ -814,6 +815,10 @@ let Spec = include.Spec;
 
 let todo = include.todo;
 
+let Caller = include.Caller;
+
+let asCaller = include.asCaller;
+
 let thenEvents = include.thenEvents;
 
 let thenNoEvent = include.thenNoEvent;
@@ -822,6 +827,8 @@ let thenEventWithError = include.thenEventWithError;
 
 let thenEventsWithError = include.thenEventsWithError;
 
+let thenRefused = include.thenRefused;
+
 let thenAppendsConditionedOn = include.thenAppendsConditionedOn;
 
 let thenAppendsConditionedOnExactly = include.thenAppendsConditionedOnExactly;
@@ -832,6 +839,8 @@ export {
   todo,
   test,
   givenEvents,
+  Caller,
+  asCaller,
   whenCmd,
   thenEvent,
   thenEvents,
@@ -839,6 +848,7 @@ export {
   thenEventWithError,
   thenEventsWithError,
   thenError,
+  thenRefused,
   thenAppendsConditionedOn,
   thenAppendsConditionedOnExactly,
 }

package/tests/Order/StateChange/ShipOrder_GWT.res

@@ -43,3 +43,37 @@ describe("ShipOrder StateChangeSlice", () => {
     ->thenEvent(OrderShipped({orderId: o1, customerId: c1}))
   )
 })
+
+describe("Who may ShipOrder", () => {
+  // scenario-id: a0ce6e35-29df-48c8-81d8-5af12a0f48d1
+  test("a Fulfilment may ship an order", () =>
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1})])
+    ->asCaller(Caller.inRoles([Fulfilment]))
+    ->whenCmd(ShipOrder({orderId: o1}))
+    ->thenEvent(OrderShipped({orderId: o1, customerId: c1}))
+  )
+
+  // scenario-id: 6af9d686-1310-43e5-946e-90ed1ec14d18
+  test("an Admin may ship an order", () =>
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1})])
+    ->asCaller(Caller.inRoles([Admin]))
+    ->whenCmd(ShipOrder({orderId: o1}))
+    ->thenEvent(OrderShipped({orderId: o1, customerId: c1}))
+  )
+
+  // scenario-id: 5b4f7a52-ec5e-4282-a7c8-a74432af13da
+  test("a shopper may not ship an order", () =>
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1})])
+    ->asCaller(Caller.owner(c1))
+    ->whenCmd(ShipOrder({orderId: o1}))
+    ->thenRefused
+  )
+
+  // scenario-id: 020c3695-3e3d-4343-8d38-d9d33ccf22f0
+  test("an anonymous caller may not ship an order", () =>
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1})])
+    ->asCaller(Caller.anonymous)
+    ->whenCmd(ShipOrder({orderId: o1}))
+    ->thenRefused
+  )
+})

package/tests/Order/StateChange/ShipOrder_GWT.res.mjs

@@ -10,7 +10,8 @@ let include = Behavior_GWT$ReventlessGwt.Make({
   consumedEventSchema: ShipOrder$OrderingPlugin.consumedEventSchema,
   commandSchema: ShipOrder$OrderingPlugin.commandSchema,
   errorSchema: ShipOrder$OrderingPlugin.errorSchema,
-  eventSchema: ShipOrder$OrderingPlugin.eventSchema
+  eventSchema: ShipOrder$OrderingPlugin.eventSchema,
+  commandAuthorization: ShipOrder$OrderingPlugin.commandAuthorization
 })({
   initialState: ShipOrder_Behavior$OrderingPlugin.initialState,
   evolve: ShipOrder_Behavior$OrderingPlugin.evolve,
@@ -23,6 +24,10 @@ let test = include.test;
 
 let givenEvents = include.givenEvents;
 
+let Caller = include.Caller;
+
+let asCaller = include.asCaller;
+
 let whenCmd = include.whenCmd;
 
 let thenEvent = include.thenEvent;
@@ -31,6 +36,8 @@ let thenNoEvent = include.thenNoEvent;
 
 let thenError = include.thenError;
 
+let thenRefused = include.thenRefused;
+
 describe("ShipOrder StateChangeSlice", () => {
   test("non-existent order returns OrderNotFound", () => thenError(whenCmd(givenEvents([]), {
     TAG: "ShipOrder",
@@ -88,6 +95,49 @@ describe("ShipOrder StateChangeSlice", () => {
   }));
 });
 
+describe("Who may ShipOrder", () => {
+  test("a Fulfilment may ship an order", () => thenEvent(whenCmd(asCaller(givenEvents([{
+      TAG: "OrderPlaced",
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
+    }]), Caller.inRoles(["Fulfilment"])), {
+    TAG: "ShipOrder",
+    orderId: Ordering_Examples$OrderingPlugin.o1
+  }), {
+    TAG: "OrderShipped",
+    orderId: Ordering_Examples$OrderingPlugin.o1,
+    customerId: Ordering_Examples$OrderingPlugin.c1
+  }));
+  test("an Admin may ship an order", () => thenEvent(whenCmd(asCaller(givenEvents([{
+      TAG: "OrderPlaced",
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
+    }]), Caller.inRoles(["Admin"])), {
+    TAG: "ShipOrder",
+    orderId: Ordering_Examples$OrderingPlugin.o1
+  }), {
+    TAG: "OrderShipped",
+    orderId: Ordering_Examples$OrderingPlugin.o1,
+    customerId: Ordering_Examples$OrderingPlugin.c1
+  }));
+  test("a shopper may not ship an order", () => thenRefused(whenCmd(asCaller(givenEvents([{
+      TAG: "OrderPlaced",
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
+    }]), Caller.owner(Ordering_Examples$OrderingPlugin.c1, undefined)), {
+    TAG: "ShipOrder",
+    orderId: Ordering_Examples$OrderingPlugin.o1
+  })));
+  test("an anonymous caller may not ship an order", () => thenRefused(whenCmd(asCaller(givenEvents([{
+      TAG: "OrderPlaced",
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
+    }]), Caller.anonymous), {
+    TAG: "ShipOrder",
+    orderId: Ordering_Examples$OrderingPlugin.o1
+  })));
+});
+
 let Spec = include.Spec;
 
 let todo = include.todo;
@@ -108,6 +158,8 @@ export {
   todo,
   test,
   givenEvents,
+  Caller,
+  asCaller,
   whenCmd,
   thenEvent,
   thenEvents,
@@ -115,6 +167,7 @@ export {
   thenEventWithError,
   thenEventsWithError,
   thenError,
+  thenRefused,
   thenAppendsConditionedOn,
   thenAppendsConditionedOnExactly,
 }

package/tests/Ordering_Examples.res

@@ -4,6 +4,7 @@ let p1: CatalogSpec.ProductId.t = CatalogSpec.ProductId.makeFromString("p1")
 let p2: CatalogSpec.ProductId.t = CatalogSpec.ProductId.makeFromString("p2")
 
 let c1: CustomerId.t = CustomerId.makeFromString("c1")
+let c2: CustomerId.t = CustomerId.makeFromString("c2")
 let id: CustomerId.t = CustomerId.makeFromString("id")
 
 let o1: OrderId.t = OrderId.makeFromString("o1")

package/tests/Ordering_Examples.res.mjs

@@ -11,6 +11,8 @@ let p2 = ProductId$CatalogSpec.makeFromString("p2");
 
 let c1 = CustomerId$OrderingPlugin.makeFromString("c1");
 
+let c2 = CustomerId$OrderingPlugin.makeFromString("c2");
+
 let id = CustomerId$OrderingPlugin.makeFromString("id");
 
 let o1 = OrderId$OrderingPlugin.makeFromString("o1");
@@ -71,6 +73,7 @@ export {
   p1,
   p2,
   c1,
+  c2,
   id,
   o1,
   o2,