@reventlessdev/online-shop-hybrid-ordering 1.0.0-alpha.263 → 1.0.0-alpha.264

package/CHANGELOG.md

@@ -3,6 +3,21 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 1.0.0-alpha.264 (2026-10-01)
+
+* feat!: roles a plugin declares, groups a platform provides ([43daace](https://github.com/ReventlessDev/reventless-core/commit/43daace6ca588afe22562d079af1e6f1da81942e))
+
+### BREAKING CHANGES
+
+* AllowGroups and AdminGroup are removed — write AllowRoles over
+the plugin's Roles.t, and use Role.admin / Platform.adminGroup(). Spec module
+types declare `type role`, and their rules are Authorization.rule<role>; a spec
+that writes its own rule declares `type role` (Reventless.Role.name for a rule
+over Authorization.permission). Role.name is a private string: make one from a
+string with Role.make.
+
+
+
 # 1.0.0-alpha.263 (2026-10-01)
 
 ### Features

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/online-shop-hybrid-ordering",
-  "version": "1.0.0-alpha.263",
+  "version": "1.0.0-alpha.264",
   "description": "Online Shop Hybrid example — Ordering plugin (Customer aggregate + Order/CatalogProduct DCB)",
   "license": "Apache-2.0",
   "jest": {
@@ -21,20 +21,20 @@
   },
   "dependencies": {
     "sury": "11.0.0",
-    "@reventlessdev/online-shop-hybrid-catalog-spec": "1.0.0-alpha.152",
-    "@reventlessdev/reventless-gwt": "1.0.0-alpha.232",
+    "@reventlessdev/online-shop-hybrid-catalog-spec": "1.0.0-alpha.153",
     "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.22",
-    "@reventlessdev/online-shop-hybrid-ordering-spec": "1.0.0-alpha.151",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.183",
-    "@reventlessdev/reventless-local": "3.0.0-alpha.275",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.155",
-    "@reventlessdev/trait-address-geocoding": "1.0.0-alpha.34",
-    "@reventlessdev/trait-notification": "1.0.0-alpha.34"
+    "@reventlessdev/online-shop-hybrid-ordering-spec": "1.0.0-alpha.152",
+    "@reventlessdev/reventless-gwt": "1.0.0-alpha.233",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.184",
+    "@reventlessdev/reventless-local": "3.0.0-alpha.276",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.156",
+    "@reventlessdev/trait-address-geocoding": "1.0.0-alpha.35",
+    "@reventlessdev/trait-notification": "1.0.0-alpha.35"
   },
   "devDependencies": {
     "rescript": "12.3.1",
     "sury-ppx": "11.0.0",
-    "@reventlessdev/reventless-ppx": "1.0.0-alpha.95"
+    "@reventlessdev/reventless-ppx": "1.0.0-alpha.96"
   },
   "peerDependencies": {
     "rescript": "^12.3.1"

package/src/Customer/ReadModelStream/Customers.res

@@ -7,7 +7,7 @@ module Id = CustomerId
 
 // Operator surface: everyone's profile, so operator-only. A shopper reads their
 // own orders instead.
-@@reventless.authorize(AllowGroups(["Admin", "Fulfilment"]))
+@@reventless.authorize(AllowRoles([Admin, Fulfilment]))
 
 // A state rather than a flag beside one, so a command can say where it belongs:
 // `Moves([Deactivated], Active)` on `Reactivate`. `@retired` withdraws

package/src/Customer/ReadModelStream/Customers.res.mjs

@@ -60,7 +60,7 @@ let stateSchema$2 = Sury.$Metadata_set(stateSchema$1, StateAnnotations$Reventles
 });
 
 let authorization = {
-  TAG: "AllowGroups",
+  TAG: "AllowRoles",
   _0: [
     "Admin",
     "Fulfilment"

package/src/Order/StateChange/ShipOrder.res

@@ -29,7 +29,7 @@ type consumedEvent =
   | OrderReopened
 
 @schema
-type command = | @authorize(AllowGroups(["Admin", "Fulfilment"])) ShipOrder({orderId: OrderId.t})
+type command = | @authorize(AllowRoles([Admin, Fulfilment])) ShipOrder({orderId: OrderId.t})
 
 @schema
 type error =

package/src/Order/StateChange/ShipOrder.res.mjs

@@ -43,7 +43,7 @@ function commandTransition(command) {
 
 function commandAuthorization(command) {
   return {
-    TAG: "AllowGroups",
+    TAG: "AllowRoles",
     _0: [
       "Admin",
       "Fulfilment"

package/src/Roles.res

@@ -0,0 +1,5 @@
+// The roles the ordering commands and views require. `Admin` is the framework's
+// administrator; joined by name, so it needs no shared package.
+type t =
+  | Admin
+  | Fulfilment

package/src/Roles.res.mjs

@@ -0,0 +1,2 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+/* This output is empty. Its source's type definitions, externals and/or unused code got optimized away. */

package/tests/CatalogProduct/StateChange/SyncCatalogProduct_GWT.res.mjs

@@ -10,7 +10,8 @@ let include = Behavior_GWT$ReventlessGwt.Make({
   consumedEventSchema: SyncCatalogProduct$OrderingPlugin.consumedEventSchema,
   commandSchema: SyncCatalogProduct$OrderingPlugin.commandSchema,
   errorSchema: SyncCatalogProduct$OrderingPlugin.errorSchema,
-  eventSchema: SyncCatalogProduct$OrderingPlugin.eventSchema
+  eventSchema: SyncCatalogProduct$OrderingPlugin.eventSchema,
+  commandAuthorization: SyncCatalogProduct$OrderingPlugin.commandAuthorization
 })({
   initialState: SyncCatalogProduct_Behavior$OrderingPlugin.initialState,
   evolve: SyncCatalogProduct_Behavior$OrderingPlugin.evolve,

package/tests/Customer/AddressGeocodingConformance_GWT.res.mjs

@@ -147,14 +147,16 @@ let Conformance = AddressGeocoding_Conformance$TraitAddressGeocoding.Make({
     name: Customer$OrderingPlugin.name,
     commandSchema: Customer$OrderingPlugin.commandSchema,
     eventSchema: Customer$OrderingPlugin.eventSchema,
-    errorSchema: Customer$OrderingPlugin.errorSchema
+    errorSchema: Customer$OrderingPlugin.errorSchema,
+    commandAuthorization: Customer$OrderingPlugin.commandAuthorization
   },
   Behavior: {
     Spec: {
       name: Customer$OrderingPlugin.name,
       commandSchema: Customer$OrderingPlugin.commandSchema,
       eventSchema: Customer$OrderingPlugin.eventSchema,
-      errorSchema: Customer$OrderingPlugin.errorSchema
+      errorSchema: Customer$OrderingPlugin.errorSchema,
+      commandAuthorization: Customer$OrderingPlugin.commandAuthorization
     },
     initialState: Customer_Behavior$OrderingPlugin.initialState,
     evolve: Customer_Behavior$OrderingPlugin.evolve,

package/tests/Customer/Aggregate/Customer_GWT.res.mjs

@@ -9,13 +9,15 @@ let include = Behavior_GWT$ReventlessGwt.MakeFromAggregate({
   name: Customer$OrderingPlugin.name,
   commandSchema: Customer$OrderingPlugin.commandSchema,
   eventSchema: Customer$OrderingPlugin.eventSchema,
-  errorSchema: Customer$OrderingPlugin.errorSchema
+  errorSchema: Customer$OrderingPlugin.errorSchema,
+  commandAuthorization: Customer$OrderingPlugin.commandAuthorization
 })({
   Spec: {
     name: Customer$OrderingPlugin.name,
     commandSchema: Customer$OrderingPlugin.commandSchema,
     eventSchema: Customer$OrderingPlugin.eventSchema,
-    errorSchema: Customer$OrderingPlugin.errorSchema
+    errorSchema: Customer$OrderingPlugin.errorSchema,
+    commandAuthorization: Customer$OrderingPlugin.commandAuthorization
   },
   initialState: Customer_Behavior$OrderingPlugin.initialState,
   evolve: Customer_Behavior$OrderingPlugin.evolve,

package/tests/Customer/StateChange/EmailVerificationChallenges_GWT.res.mjs

@@ -10,7 +10,8 @@ let include = Behavior_GWT$ReventlessGwt.Make({
   consumedEventSchema: EmailVerificationChallenges$OrderingPlugin.consumedEventSchema,
   commandSchema: EmailVerificationChallenges$OrderingPlugin.commandSchema,
   errorSchema: EmailVerificationChallenges$OrderingPlugin.errorSchema,
-  eventSchema: EmailVerificationChallenges$OrderingPlugin.eventSchema
+  eventSchema: EmailVerificationChallenges$OrderingPlugin.eventSchema,
+  commandAuthorization: EmailVerificationChallenges$OrderingPlugin.commandAuthorization
 })({
   initialState: EmailVerificationChallenges_Behavior$OrderingPlugin.initialState,
   evolve: EmailVerificationChallenges_Behavior$OrderingPlugin.evolve,

package/tests/Flow/OrderingFlow_GWT.res.mjs

@@ -95,7 +95,8 @@ let Sync = Flow_GWT$ReventlessGwt.CommandStep({
   consumedEventSchema: SyncCatalogProduct$OrderingPlugin.consumedEventSchema,
   commandSchema: SyncCatalogProduct$OrderingPlugin.commandSchema,
   errorSchema: SyncCatalogProduct$OrderingPlugin.errorSchema,
-  eventSchema: SyncCatalogProduct$OrderingPlugin.eventSchema
+  eventSchema: SyncCatalogProduct$OrderingPlugin.eventSchema,
+  commandAuthorization: SyncCatalogProduct$OrderingPlugin.commandAuthorization
 })({
   initialState: SyncCatalogProduct_Behavior$OrderingPlugin.initialState,
   evolve: SyncCatalogProduct_Behavior$OrderingPlugin.evolve,
@@ -107,7 +108,8 @@ let Place = Flow_GWT$ReventlessGwt.CommandStep({
   consumedEventSchema: PlaceOrder$OrderingPlugin.consumedEventSchema,
   commandSchema: PlaceOrder$OrderingPlugin.commandSchema,
   errorSchema: PlaceOrder$OrderingPlugin.errorSchema,
-  eventSchema: PlaceOrder$OrderingPlugin.eventSchema
+  eventSchema: PlaceOrder$OrderingPlugin.eventSchema,
+  commandAuthorization: PlaceOrder$OrderingPlugin.commandAuthorization
 })({
   initialState: PlaceOrder_Behavior$OrderingPlugin.initialState,
   evolve: PlaceOrder_Behavior$OrderingPlugin.evolve,
@@ -129,7 +131,8 @@ let Ship = Flow_GWT$ReventlessGwt.CommandStep({
   consumedEventSchema: ShipOrder$OrderingPlugin.consumedEventSchema,
   commandSchema: ShipOrder$OrderingPlugin.commandSchema,
   errorSchema: ShipOrder$OrderingPlugin.errorSchema,
-  eventSchema: ShipOrder$OrderingPlugin.eventSchema
+  eventSchema: ShipOrder$OrderingPlugin.eventSchema,
+  commandAuthorization: ShipOrder$OrderingPlugin.commandAuthorization
 })({
   initialState: ShipOrder_Behavior$OrderingPlugin.initialState,
   evolve: ShipOrder_Behavior$OrderingPlugin.evolve,

package/tests/Notification/NotificationConformance_GWT.res.mjs

@@ -248,7 +248,8 @@ let Conformance = Notification_Conformance$TraitNotification.Make({
     consumedEventSchema: NotificationPreferences$OrderingPlugin.consumedEventSchema,
     commandSchema: NotificationPreferences$OrderingPlugin.commandSchema,
     errorSchema: NotificationPreferences$OrderingPlugin.errorSchema,
-    eventSchema: NotificationPreferences$OrderingPlugin.eventSchema
+    eventSchema: NotificationPreferences$OrderingPlugin.eventSchema,
+    commandAuthorization: NotificationPreferences$OrderingPlugin.commandAuthorization
   },
   Behavior: {
     Spec: {
@@ -256,7 +257,8 @@ let Conformance = Notification_Conformance$TraitNotification.Make({
       consumedEventSchema: NotificationPreferences$OrderingPlugin.consumedEventSchema,
       commandSchema: NotificationPreferences$OrderingPlugin.commandSchema,
       errorSchema: NotificationPreferences$OrderingPlugin.errorSchema,
-      eventSchema: NotificationPreferences$OrderingPlugin.eventSchema
+      eventSchema: NotificationPreferences$OrderingPlugin.eventSchema,
+      commandAuthorization: NotificationPreferences$OrderingPlugin.commandAuthorization
     },
     initialState: NotificationPreferences_Behavior$OrderingPlugin.initialState,
     evolve: NotificationPreferences_Behavior$OrderingPlugin.evolve,

package/tests/Notification/StateChange/NotificationPreferences_GWT.res.mjs

@@ -10,7 +10,8 @@ let include = Behavior_GWT$ReventlessGwt.Make({
   consumedEventSchema: NotificationPreferences$OrderingPlugin.consumedEventSchema,
   commandSchema: NotificationPreferences$OrderingPlugin.commandSchema,
   errorSchema: NotificationPreferences$OrderingPlugin.errorSchema,
-  eventSchema: NotificationPreferences$OrderingPlugin.eventSchema
+  eventSchema: NotificationPreferences$OrderingPlugin.eventSchema,
+  commandAuthorization: NotificationPreferences$OrderingPlugin.commandAuthorization
 })({
   initialState: NotificationPreferences_Behavior$OrderingPlugin.initialState,
   evolve: NotificationPreferences_Behavior$OrderingPlugin.evolve,

package/tests/Notification/StateChange/NotificationSourceClaims_GWT.res.mjs

@@ -10,7 +10,8 @@ let include = Behavior_GWT$ReventlessGwt.Make({
   consumedEventSchema: NotificationSourceClaims$OrderingPlugin.consumedEventSchema,
   commandSchema: NotificationSourceClaims$OrderingPlugin.commandSchema,
   errorSchema: NotificationSourceClaims$OrderingPlugin.errorSchema,
-  eventSchema: NotificationSourceClaims$OrderingPlugin.eventSchema
+  eventSchema: NotificationSourceClaims$OrderingPlugin.eventSchema,
+  commandAuthorization: NotificationSourceClaims$OrderingPlugin.commandAuthorization
 })({
   initialState: NotificationSourceClaims_Behavior$OrderingPlugin.initialState,
   evolve: NotificationSourceClaims_Behavior$OrderingPlugin.evolve,

package/tests/Order/StateChange/CancelOrder_GWT.res.mjs

@@ -10,7 +10,8 @@ let include = Behavior_GWT$ReventlessGwt.Make({
   consumedEventSchema: CancelOrder$OrderingPlugin.consumedEventSchema,
   commandSchema: CancelOrder$OrderingPlugin.commandSchema,
   errorSchema: CancelOrder$OrderingPlugin.errorSchema,
-  eventSchema: CancelOrder$OrderingPlugin.eventSchema
+  eventSchema: CancelOrder$OrderingPlugin.eventSchema,
+  commandAuthorization: CancelOrder$OrderingPlugin.commandAuthorization
 })({
   initialState: CancelOrder_Behavior$OrderingPlugin.initialState,
   evolve: CancelOrder_Behavior$OrderingPlugin.evolve,
@@ -123,7 +124,7 @@ describe("CancelOrder StateChangeSlice", () => {
       TAG: "OrderPlaced",
       productIds: [Ordering_Examples$OrderingPlugin.p1],
       customerId: Ordering_Examples$OrderingPlugin.c1
-    }]), Caller.owner(Ordering_Examples$OrderingPlugin.c1)), {
+    }]), Caller.owner(Ordering_Examples$OrderingPlugin.c1, undefined)), {
     TAG: "CancelOrder",
     orderId: Ordering_Examples$OrderingPlugin.o1
   }), {
@@ -135,7 +136,7 @@ describe("CancelOrder StateChangeSlice", () => {
       TAG: "OrderPlaced",
       productIds: [Ordering_Examples$OrderingPlugin.p1],
       customerId: Ordering_Examples$OrderingPlugin.c1
-    }]), Caller.owner(Ordering_Examples$OrderingPlugin.c2)), {
+    }]), Caller.owner(Ordering_Examples$OrderingPlugin.c2, undefined)), {
     TAG: "CancelOrder",
     orderId: Ordering_Examples$OrderingPlugin.o1
   })));

package/tests/Order/StateChange/PlaceOrder_GWT.res.mjs

@@ -14,7 +14,8 @@ let include = Behavior_GWT$ReventlessGwt.Make({
   consumedEventSchema: PlaceOrder$OrderingPlugin.consumedEventSchema,
   commandSchema: PlaceOrder$OrderingPlugin.commandSchema,
   errorSchema: PlaceOrder$OrderingPlugin.errorSchema,
-  eventSchema: PlaceOrder$OrderingPlugin.eventSchema
+  eventSchema: PlaceOrder$OrderingPlugin.eventSchema,
+  commandAuthorization: PlaceOrder$OrderingPlugin.commandAuthorization
 })({
   initialState: PlaceOrder_Behavior$OrderingPlugin.initialState,
   evolve: PlaceOrder_Behavior$OrderingPlugin.evolve,

package/tests/Order/StateChange/ShipOrder_GWT.res

@@ -43,3 +43,37 @@ describe("ShipOrder StateChangeSlice", () => {
     ->thenEvent(OrderShipped({orderId: o1, customerId: c1}))
   )
 })
+
+describe("Who may ShipOrder", () => {
+  // scenario-id: a0ce6e35-29df-48c8-81d8-5af12a0f48d1
+  test("a Fulfilment may ship an order", () =>
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1})])
+    ->asCaller(Caller.inRoles([Fulfilment]))
+    ->whenCmd(ShipOrder({orderId: o1}))
+    ->thenEvent(OrderShipped({orderId: o1, customerId: c1}))
+  )
+
+  // scenario-id: 6af9d686-1310-43e5-946e-90ed1ec14d18
+  test("an Admin may ship an order", () =>
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1})])
+    ->asCaller(Caller.inRoles([Admin]))
+    ->whenCmd(ShipOrder({orderId: o1}))
+    ->thenEvent(OrderShipped({orderId: o1, customerId: c1}))
+  )
+
+  // scenario-id: 5b4f7a52-ec5e-4282-a7c8-a74432af13da
+  test("a shopper may not ship an order", () =>
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1})])
+    ->asCaller(Caller.owner(c1))
+    ->whenCmd(ShipOrder({orderId: o1}))
+    ->thenRefused
+  )
+
+  // scenario-id: 020c3695-3e3d-4343-8d38-d9d33ccf22f0
+  test("an anonymous caller may not ship an order", () =>
+    givenEvents([OrderPlaced({productIds: [p1], customerId: c1})])
+    ->asCaller(Caller.anonymous)
+    ->whenCmd(ShipOrder({orderId: o1}))
+    ->thenRefused
+  )
+})

package/tests/Order/StateChange/ShipOrder_GWT.res.mjs

@@ -10,7 +10,8 @@ let include = Behavior_GWT$ReventlessGwt.Make({
   consumedEventSchema: ShipOrder$OrderingPlugin.consumedEventSchema,
   commandSchema: ShipOrder$OrderingPlugin.commandSchema,
   errorSchema: ShipOrder$OrderingPlugin.errorSchema,
-  eventSchema: ShipOrder$OrderingPlugin.eventSchema
+  eventSchema: ShipOrder$OrderingPlugin.eventSchema,
+  commandAuthorization: ShipOrder$OrderingPlugin.commandAuthorization
 })({
   initialState: ShipOrder_Behavior$OrderingPlugin.initialState,
   evolve: ShipOrder_Behavior$OrderingPlugin.evolve,
@@ -23,6 +24,10 @@ let test = include.test;
 
 let givenEvents = include.givenEvents;
 
+let Caller = include.Caller;
+
+let asCaller = include.asCaller;
+
 let whenCmd = include.whenCmd;
 
 let thenEvent = include.thenEvent;
@@ -31,6 +36,8 @@ let thenNoEvent = include.thenNoEvent;
 
 let thenError = include.thenError;
 
+let thenRefused = include.thenRefused;
+
 describe("ShipOrder StateChangeSlice", () => {
   test("non-existent order returns OrderNotFound", () => thenError(whenCmd(givenEvents([]), {
     TAG: "ShipOrder",
@@ -88,22 +95,59 @@ describe("ShipOrder StateChangeSlice", () => {
   }));
 });
 
+describe("Who may ShipOrder", () => {
+  test("a Fulfilment may ship an order", () => thenEvent(whenCmd(asCaller(givenEvents([{
+      TAG: "OrderPlaced",
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
+    }]), Caller.inRoles(["Fulfilment"])), {
+    TAG: "ShipOrder",
+    orderId: Ordering_Examples$OrderingPlugin.o1
+  }), {
+    TAG: "OrderShipped",
+    orderId: Ordering_Examples$OrderingPlugin.o1,
+    customerId: Ordering_Examples$OrderingPlugin.c1
+  }));
+  test("an Admin may ship an order", () => thenEvent(whenCmd(asCaller(givenEvents([{
+      TAG: "OrderPlaced",
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
+    }]), Caller.inRoles(["Admin"])), {
+    TAG: "ShipOrder",
+    orderId: Ordering_Examples$OrderingPlugin.o1
+  }), {
+    TAG: "OrderShipped",
+    orderId: Ordering_Examples$OrderingPlugin.o1,
+    customerId: Ordering_Examples$OrderingPlugin.c1
+  }));
+  test("a shopper may not ship an order", () => thenRefused(whenCmd(asCaller(givenEvents([{
+      TAG: "OrderPlaced",
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
+    }]), Caller.owner(Ordering_Examples$OrderingPlugin.c1, undefined)), {
+    TAG: "ShipOrder",
+    orderId: Ordering_Examples$OrderingPlugin.o1
+  })));
+  test("an anonymous caller may not ship an order", () => thenRefused(whenCmd(asCaller(givenEvents([{
+      TAG: "OrderPlaced",
+      productIds: [Ordering_Examples$OrderingPlugin.p1],
+      customerId: Ordering_Examples$OrderingPlugin.c1
+    }]), Caller.anonymous), {
+    TAG: "ShipOrder",
+    orderId: Ordering_Examples$OrderingPlugin.o1
+  })));
+});
+
 let Spec = include.Spec;
 
 let todo = include.todo;
 
-let Caller = include.Caller;
-
-let asCaller = include.asCaller;
-
 let thenEvents = include.thenEvents;
 
 let thenEventWithError = include.thenEventWithError;
 
 let thenEventsWithError = include.thenEventsWithError;
 
-let thenRefused = include.thenRefused;
-
 let thenAppendsConditionedOn = include.thenAppendsConditionedOn;
 
 let thenAppendsConditionedOnExactly = include.thenAppendsConditionedOnExactly;