@reventlessdev/online-shop-hybrid-ordering 1.0.0-alpha.304 → 1.0.0-alpha.306

package/CHANGELOG.md

@@ -3,6 +3,21 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 1.0.0-alpha.306 (2026-10-31)
+
+**Note:** Version bump only for package @reventlessdev/online-shop-hybrid-ordering
+
+
+
+
+
+# 1.0.0-alpha.305 (2026-10-30)
+
+### Features
+
+* **spec:** an aggregate keyed by its owner's id refuses other callers ([e05f287](https://github.com/ReventlessDev/reventless-core/commit/e05f287eee959d26190af494691c4fa472797cad))
+
+
 # 1.0.0-alpha.304 (2026-10-30)
 
 **Note:** Version bump only for package @reventlessdev/online-shop-hybrid-ordering

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/online-shop-hybrid-ordering",
-  "version": "1.0.0-alpha.304",
+  "version": "1.0.0-alpha.306",
   "description": "Online Shop Hybrid example — Ordering plugin (Customer aggregate + Order/CatalogProduct DCB)",
   "license": "Apache-2.0",
   "jest": {
@@ -21,15 +21,15 @@
   },
   "dependencies": {
     "sury": "11.0.0",
-    "@reventlessdev/online-shop-hybrid-catalog-spec": "1.0.0-alpha.187",
-    "@reventlessdev/online-shop-hybrid-ordering-spec": "1.0.0-alpha.186",
+    "@reventlessdev/online-shop-hybrid-catalog-spec": "1.0.0-alpha.188",
+    "@reventlessdev/reventless-gwt": "1.0.0-alpha.274",
     "@reventlessdev/rescript-pulumi-pulumi": "3.0.0-alpha.0",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.219",
-    "@reventlessdev/reventless-gwt": "1.0.0-alpha.272",
-    "@reventlessdev/reventless-local": "3.0.0-alpha.315",
-    "@reventlessdev/trait-address-geocoding": "1.0.0-alpha.74",
-    "@reventlessdev/trait-notification": "1.0.0-alpha.74",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.190"
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.220",
+    "@reventlessdev/online-shop-hybrid-ordering-spec": "1.0.0-alpha.187",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.191",
+    "@reventlessdev/trait-notification": "1.0.0-alpha.76",
+    "@reventlessdev/trait-address-geocoding": "1.0.0-alpha.76",
+    "@reventlessdev/reventless-local": "3.0.0-alpha.317"
   },
   "devDependencies": {
     "rescript": "12.3.1",

package/src/Customer/Aggregate/Customer.res

@@ -3,7 +3,9 @@
 
 @@reventless.spec
 
-module Id = CustomerId
+// The customer is the shopper whose account id keys them: only they, or an
+// elevated caller, may act on this aggregate.
+module Id = Reventless.Id.Owned(CustomerId)
 
 // A map coordinate carried by location commands/events. `GeoPoint.t` rather than
 // a local `{lat, lng}` record: the wire shape is identical — so every event
@@ -55,12 +57,12 @@ type command =
   // Carries the address it is a verdict about, so a verdict for an address the
   // customer has since changed can be dropped rather than applied.
   | @noApi MarkEmailVerified({@pii email: string})
-  | Deactivate
+  | @authorize(AllowRoles([Admin])) Deactivate
   // The way back. Deactivation withdraws a customer from ordinary use; it does
   // not erase them, so restoring one needs no payload — the profile is still in
   // the state, and asking a caller to re-supply an email they never changed
   // would be a second chance to get it wrong.
-  | Reactivate
+  | @authorize(AllowRoles([Admin])) Reactivate
 
 @schema
 type event =

package/src/Customer/Aggregate/Customer.res.mjs

@@ -1,10 +1,14 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
 import * as Sury from "sury";
+import * as Id$Reventless from "@reventlessdev/reventless-spec/src/types/Id.res.mjs";
 import * as Pii$Reventless from "@reventlessdev/reventless-spec/src/components/Pii.res.mjs";
 import * as Api$ReventlessInfra from "@reventlessdev/reventless-infra/src/components/Api.res.mjs";
+import * as CustomerId$OrderingPlugin from "../CustomerId.res.mjs";
 import * as AddressGeocoding$TraitAddressGeocoding from "@reventlessdev/trait-address-geocoding/src/AddressGeocoding.res.mjs";
 
+let Id = Id$Reventless.Owned(CustomerId$OrderingPlugin);
+
 let commandSchema = Sury.union([
   Sury.$schema(s => ({
     TAG: "Register",
@@ -85,14 +89,21 @@ let traits = [AddressGeocoding$TraitAddressGeocoding.declaration];
 
 let commandSchema$1 = Api$ReventlessInfra.markNoApiVariants(commandSchema, ["MarkEmailVerified"]);
 
-function authorizationOf(param) {
-  return "AllowAuthenticated";
+function authorizationOf(name) {
+  switch (name) {
+    case "Deactivate" :
+    case "Reactivate" :
+      return {
+        TAG: "AllowRoles",
+        _0: ["Admin"]
+      };
+    default:
+      return "AllowAuthenticated";
+  }
 }
 
 let name = "Customer";
 
-let Id;
-
 let moduleUrl = "@reventlessdev/online-shop-hybrid-ordering/src/Customer/Aggregate/Customer.res.mjs";
 
 export {
@@ -106,4 +117,4 @@ export {
   moduleUrl,
   authorizationOf,
 }
-/* commandSchema Not a pure module */
+/* Id Not a pure module */

package/src/Customer/ReadModelStream/Customers_Projections.res.mjs

@@ -169,7 +169,7 @@ function project(param) {
 }
 
 let CustomerMapping = Projection$Reventless.Mapping.Make({
-  Id: CustomerId$OrderingPlugin,
+  Id: Customer$OrderingPlugin.Id,
   name: Customer$OrderingPlugin.name,
   eventSchema: Customer$OrderingPlugin.eventSchema
 })({

package/src/Plugin.res.mjs

@@ -423,7 +423,7 @@ function Make(Platform) {
     moduleUrl: VerifyCustomerEmail_Translation$OrderingPlugin.moduleUrl
   });
   let CustomerAggregate = Platform.Aggregate.Make({
-    Id: CustomerId$OrderingPlugin,
+    Id: Customer$OrderingPlugin.Id,
     name: Customer$OrderingPlugin.name,
     eventSchema: Customer$OrderingPlugin.eventSchema,
     errorSchema: Customer$OrderingPlugin.errorSchema,
@@ -440,7 +440,7 @@ function Make(Platform) {
     moduleUrl: Customer_Decision$OrderingPlugin.moduleUrl
   })(NoEventMappings$ReventlessInfra.Make({
     name: Customer$OrderingPlugin.name,
-    Id: CustomerId$OrderingPlugin,
+    Id: Customer$OrderingPlugin.Id,
     commandSchema: Customer$OrderingPlugin.commandSchema
   }));
   let CustomersReadModel = Platform.ReadModelStream.Make({

package/src/capabilities.json

@@ -36,6 +36,9 @@
       "declaredBy": [
         {
           "component": "SendNotification"
+        },
+        {
+          "component": "VerifyCustomerEmail"
         }
       ]
     }

package/tests/Customer/AddressGeocodingConformance_GWT.res.mjs

@@ -170,6 +170,7 @@ let Conformance = AddressGeocoding_Conformance$TraitAddressGeocoding.Make({
   subjectB: subjectB,
   posture: "WritesBack",
   Spec: {
+    Id: Customer$OrderingPlugin.Id,
     name: Customer$OrderingPlugin.name,
     commandSchema: Customer$OrderingPlugin.commandSchema,
     eventSchema: Customer$OrderingPlugin.eventSchema,
@@ -178,6 +179,7 @@ let Conformance = AddressGeocoding_Conformance$TraitAddressGeocoding.Make({
   },
   Decision: {
     Spec: {
+      Id: Customer$OrderingPlugin.Id,
       name: Customer$OrderingPlugin.name,
       commandSchema: Customer$OrderingPlugin.commandSchema,
       eventSchema: Customer$OrderingPlugin.eventSchema,

package/tests/Customer/Aggregate/Customer_GWT.res

@@ -194,3 +194,115 @@ describe("Customer email verification", () => {
     ->thenError(CustomerNotFound)
   )
 })
+
+// A customer is the shopper their id names: they, or an administrator, change
+// their profile. Taking a customer out of use, or back, is an administrator's.
+describe("Who may act on a Customer", () => {
+  // scenario-id: 6dc19620-bd20-4e98-a67b-a78aa39083ca
+  test("a customer may register themself", () =>
+    givenEvents([])
+    ->onId(c1)
+    ->asCaller(Caller.owner(c1))
+    ->whenCmd(Register({email: aliceEmail, address: mainStreet}))
+    ->thenEvent(Registered({email: Value(aliceEmail), address: Value(mainStreet)}))
+  )
+
+  // scenario-id: ded81926-2cd1-4b9b-8fbf-2683e23e8114
+  test("a customer may not register someone else", () =>
+    givenEvents([])
+    ->onId(c1)
+    ->asCaller(Caller.owner(c2))
+    ->whenCmd(Register({email: aliceEmail, address: mainStreet}))
+    ->thenForbidden
+  )
+
+  // scenario-id: f9cd0f95-17f7-477b-be54-8a60c3010bbd
+  test("a customer may change their own email", () =>
+    givenEvents([Registered({email: Value(aliceEmail), address: Value(mainStreet)})])
+    ->onId(c1)
+    ->asCaller(Caller.owner(c1))
+    ->whenCmd(UpdateEmail({email: aliceNewEmail}))
+    ->thenEvent(EmailUpdated({email: Value(aliceNewEmail)}))
+  )
+
+  // scenario-id: 786b0aa7-aef7-4e2a-8889-f603c78098ca
+  test("another customer may not change the email", () =>
+    givenEvents([Registered({email: Value(aliceEmail), address: Value(mainStreet)})])
+    ->onId(c1)
+    ->asCaller(Caller.owner(c2))
+    ->whenCmd(UpdateEmail({email: aliceNewEmail}))
+    ->thenForbidden
+  )
+
+  // scenario-id: 5e8240aa-2a3c-49c1-ae4a-ffb29a97d138
+  test("another customer may not change the address", () =>
+    givenEvents([Registered({email: Value(aliceEmail), address: Value(mainStreet)})])
+    ->onId(c1)
+    ->asCaller(Caller.owner(c2))
+    ->whenCmd(UpdateAddress({address: "789 Pine"}))
+    ->thenForbidden
+  )
+
+  // scenario-id: 46bfc29e-4cfc-42d8-b2f6-296b28609001
+  test("an administrator may change any customer's email", () =>
+    givenEvents([Registered({email: Value(aliceEmail), address: Value(mainStreet)})])
+    ->onId(c1)
+    ->asCaller(Caller.operatorIn([Admin]))
+    ->whenCmd(UpdateEmail({email: aliceNewEmail}))
+    ->thenEvent(EmailUpdated({email: Value(aliceNewEmail)}))
+  )
+
+  // scenario-id: 019e2283-a3b3-4972-8fdf-b470320b5ce3
+  test("a caller who is not signed in may not change the email", () =>
+    givenEvents([Registered({email: Value(aliceEmail), address: Value(mainStreet)})])
+    ->onId(c1)
+    ->asCaller(Caller.anonymous)
+    ->whenCmd(UpdateEmail({email: aliceNewEmail}))
+    ->thenForbidden
+  )
+
+  // scenario-id: 69dbc4f8-4009-4caa-9e14-f1dd248d7a2a
+  test("a customer may not deactivate themself", () =>
+    givenEvents([Registered({email: Value(aliceEmail), address: Value(mainStreet)})])
+    ->onId(c1)
+    ->asCaller(Caller.owner(c1))
+    ->whenCmd(Deactivate)
+    ->thenForbidden
+  )
+
+  // scenario-id: 7d4c5293-934e-4fb5-81d2-b3b8f96c3e5e
+  test("an operator who is not an administrator may not deactivate a customer", () =>
+    givenEvents([Registered({email: Value(aliceEmail), address: Value(mainStreet)})])
+    ->onId(c1)
+    ->asCaller(Caller.operatorIn([Fulfilment]))
+    ->whenCmd(Deactivate)
+    ->thenForbidden
+  )
+
+  // scenario-id: 13f06620-a184-4099-be1c-fc727e74788b
+  test("an administrator may deactivate a customer", () =>
+    givenEvents([Registered({email: Value(aliceEmail), address: Value(mainStreet)})])
+    ->onId(c1)
+    ->asCaller(Caller.operatorIn([Admin]))
+    ->whenCmd(Deactivate)
+    ->thenEvent(Deactivated)
+  )
+
+  // scenario-id: c5375866-bf51-47fe-8633-b1b2887e2ab2
+  test("a customer may not reactivate themself", () =>
+    givenEvents([Registered({email: Value(aliceEmail), address: Value(mainStreet)}), Deactivated])
+    ->onId(c1)
+    ->asCaller(Caller.owner(c1))
+    ->whenCmd(Reactivate)
+    ->thenForbidden
+  )
+
+  // scenario-id: f2696c97-6582-4ee7-a403-ee5aed6d8c19
+  test("an administrator may reactivate a customer", () =>
+    givenEvents([Registered({email: Value(aliceEmail), address: Value(mainStreet)}), Deactivated])
+    ->onId(c1)
+    ->asCaller(Caller.operatorIn([Admin]))
+    ->whenCmd(Reactivate)
+    ->thenEvent(Reactivated)
+  )
+})

package/tests/Customer/Aggregate/Customer_GWT.res.mjs

@@ -6,6 +6,7 @@ import * as Customer_Decision$OrderingPlugin from "../../../src/Customer/Aggrega
 import * as Ordering_Examples$OrderingPlugin from "../../Ordering_Examples.res.mjs";
 
 let include = Decision_GWT$ReventlessGwt.MakeFromAggregate({
+  Id: Customer$OrderingPlugin.Id,
   name: Customer$OrderingPlugin.name,
   commandSchema: Customer$OrderingPlugin.commandSchema,
   eventSchema: Customer$OrderingPlugin.eventSchema,
@@ -13,6 +14,7 @@ let include = Decision_GWT$ReventlessGwt.MakeFromAggregate({
   authorizationOf: Customer$OrderingPlugin.authorizationOf
 })({
   Spec: {
+    Id: Customer$OrderingPlugin.Id,
     name: Customer$OrderingPlugin.name,
     commandSchema: Customer$OrderingPlugin.commandSchema,
     eventSchema: Customer$OrderingPlugin.eventSchema,
@@ -32,6 +34,12 @@ let test = include.test;
 
 let givenEvents = include.givenEvents;
 
+let Caller = include.Caller;
+
+let asCaller = include.asCaller;
+
+let onId = include.onId;
+
 let whenCmd = include.whenCmd;
 
 let thenEvent = include.thenEvent;
@@ -40,6 +48,8 @@ let thenNoEvent = include.thenNoEvent;
 
 let thenError = include.thenError;
 
+let thenForbidden = include.thenForbidden;
+
 describe("Customer Decision", () => {
   test("Register on new aggregate produces Registered", () => thenEvent(whenCmd(givenEvents([]), {
     TAG: "Register",
@@ -419,11 +429,175 @@ describe("Customer email verification", () => {
   }), "CustomerNotFound"));
 });
 
-let Spec = include.Spec;
+describe("Who may act on a Customer", () => {
+  test("a customer may register themself", () => thenEvent(whenCmd(asCaller(onId(givenEvents([]), Ordering_Examples$OrderingPlugin.c1), Caller.owner(Ordering_Examples$OrderingPlugin.c1, undefined)), {
+    TAG: "Register",
+    email: Ordering_Examples$OrderingPlugin.aliceEmail,
+    address: Ordering_Examples$OrderingPlugin.mainStreet
+  }), {
+    TAG: "Registered",
+    email: {
+      TAG: "Value",
+      _0: Ordering_Examples$OrderingPlugin.aliceEmail
+    },
+    address: {
+      TAG: "Value",
+      _0: Ordering_Examples$OrderingPlugin.mainStreet
+    }
+  }));
+  test("a customer may not register someone else", () => thenForbidden(whenCmd(asCaller(onId(givenEvents([]), Ordering_Examples$OrderingPlugin.c1), Caller.owner(Ordering_Examples$OrderingPlugin.c2, undefined)), {
+    TAG: "Register",
+    email: Ordering_Examples$OrderingPlugin.aliceEmail,
+    address: Ordering_Examples$OrderingPlugin.mainStreet
+  })));
+  test("a customer may change their own email", () => thenEvent(whenCmd(asCaller(onId(givenEvents([{
+      TAG: "Registered",
+      email: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.aliceEmail
+      },
+      address: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.mainStreet
+      }
+    }]), Ordering_Examples$OrderingPlugin.c1), Caller.owner(Ordering_Examples$OrderingPlugin.c1, undefined)), {
+    TAG: "UpdateEmail",
+    email: Ordering_Examples$OrderingPlugin.aliceNewEmail
+  }), {
+    TAG: "EmailUpdated",
+    email: {
+      TAG: "Value",
+      _0: Ordering_Examples$OrderingPlugin.aliceNewEmail
+    }
+  }));
+  test("another customer may not change the email", () => thenForbidden(whenCmd(asCaller(onId(givenEvents([{
+      TAG: "Registered",
+      email: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.aliceEmail
+      },
+      address: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.mainStreet
+      }
+    }]), Ordering_Examples$OrderingPlugin.c1), Caller.owner(Ordering_Examples$OrderingPlugin.c2, undefined)), {
+    TAG: "UpdateEmail",
+    email: Ordering_Examples$OrderingPlugin.aliceNewEmail
+  })));
+  test("another customer may not change the address", () => thenForbidden(whenCmd(asCaller(onId(givenEvents([{
+      TAG: "Registered",
+      email: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.aliceEmail
+      },
+      address: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.mainStreet
+      }
+    }]), Ordering_Examples$OrderingPlugin.c1), Caller.owner(Ordering_Examples$OrderingPlugin.c2, undefined)), {
+    TAG: "UpdateAddress",
+    address: "789 Pine"
+  })));
+  test("an administrator may change any customer's email", () => thenEvent(whenCmd(asCaller(onId(givenEvents([{
+      TAG: "Registered",
+      email: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.aliceEmail
+      },
+      address: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.mainStreet
+      }
+    }]), Ordering_Examples$OrderingPlugin.c1), Caller.operatorIn(["Admin"])), {
+    TAG: "UpdateEmail",
+    email: Ordering_Examples$OrderingPlugin.aliceNewEmail
+  }), {
+    TAG: "EmailUpdated",
+    email: {
+      TAG: "Value",
+      _0: Ordering_Examples$OrderingPlugin.aliceNewEmail
+    }
+  }));
+  test("a caller who is not signed in may not change the email", () => thenForbidden(whenCmd(asCaller(onId(givenEvents([{
+      TAG: "Registered",
+      email: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.aliceEmail
+      },
+      address: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.mainStreet
+      }
+    }]), Ordering_Examples$OrderingPlugin.c1), Caller.anonymous), {
+    TAG: "UpdateEmail",
+    email: Ordering_Examples$OrderingPlugin.aliceNewEmail
+  })));
+  test("a customer may not deactivate themself", () => thenForbidden(whenCmd(asCaller(onId(givenEvents([{
+      TAG: "Registered",
+      email: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.aliceEmail
+      },
+      address: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.mainStreet
+      }
+    }]), Ordering_Examples$OrderingPlugin.c1), Caller.owner(Ordering_Examples$OrderingPlugin.c1, undefined)), "Deactivate")));
+  test("an operator who is not an administrator may not deactivate a customer", () => thenForbidden(whenCmd(asCaller(onId(givenEvents([{
+      TAG: "Registered",
+      email: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.aliceEmail
+      },
+      address: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.mainStreet
+      }
+    }]), Ordering_Examples$OrderingPlugin.c1), Caller.operatorIn(["Fulfilment"])), "Deactivate")));
+  test("an administrator may deactivate a customer", () => thenEvent(whenCmd(asCaller(onId(givenEvents([{
+      TAG: "Registered",
+      email: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.aliceEmail
+      },
+      address: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.mainStreet
+      }
+    }]), Ordering_Examples$OrderingPlugin.c1), Caller.operatorIn(["Admin"])), "Deactivate"), "Deactivated"));
+  test("a customer may not reactivate themself", () => thenForbidden(whenCmd(asCaller(onId(givenEvents([
+    {
+      TAG: "Registered",
+      email: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.aliceEmail
+      },
+      address: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.mainStreet
+      }
+    },
+    "Deactivated"
+  ]), Ordering_Examples$OrderingPlugin.c1), Caller.owner(Ordering_Examples$OrderingPlugin.c1, undefined)), "Reactivate")));
+  test("an administrator may reactivate a customer", () => thenEvent(whenCmd(asCaller(onId(givenEvents([
+    {
+      TAG: "Registered",
+      email: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.aliceEmail
+      },
+      address: {
+        TAG: "Value",
+        _0: Ordering_Examples$OrderingPlugin.mainStreet
+      }
+    },
+    "Deactivated"
+  ]), Ordering_Examples$OrderingPlugin.c1), Caller.operatorIn(["Admin"])), "Reactivate"), "Reactivated"));
+});
 
-let Caller = include.Caller;
+let Spec = include.Spec;
 
-let asCaller = include.asCaller;
+let todo = include.todo;
 
 let thenCompareEvent = include.thenCompareEvent;
 
@@ -435,15 +609,15 @@ let thenCompareEvents = include.thenCompareEvents;
 
 let thenEventsWithError = include.thenEventsWithError;
 
-let thenForbidden = include.thenForbidden;
-
 export {
   Spec,
   describe,
+  todo,
   test,
   givenEvents,
   Caller,
   asCaller,
+  onId,
   whenCmd,
   thenEvent,
   thenCompareEvent,