@reventlessdev/reventless-core 3.0.0-alpha.239 → 3.0.0-alpha.241

package/src/plugin/connect/PluginExtensionPoint_Plugin.res.mjs

@@ -1,6 +1,6 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
-import * as S from "sury/src/S.res.mjs";
+import * as Sury from "sury";
 import * as Stdlib_JsExn from "@rescript/runtime/lib/es6/Stdlib_JsExn.js";
 import * as Id$Reventless from "@reventlessdev/reventless-spec/src/types/Id.res.mjs";
 import * as Primitive_int from "@rescript/runtime/lib/es6/Primitive_int.js";
@@ -79,19 +79,6 @@ function Make(Spec) {
   };
   let directiveHandler = async (createSchedule, deleteSchedule, queryEngine, directive) => {
     switch (directive.TAG) {
-      case "CreateDisconnectSchedule" :
-        let id = directive._0;
-        return await createSchedule({
-          name: disconnectScheduleName(id),
-          rate: ScheduleOps$ReventlessCore.minutesFromNow(directive._1),
-          payload: JSON.stringify(Message$ReventlessCore.encodeCommand$p({
-            id: id,
-            meta: Message$ReventlessCore.generateMeta(PluginExtensionPointSpec$ReventlessInfra.name, undefined, "Scheduler", undefined, undefined, undefined, undefined, undefined),
-            command: "DisconnectPlugin"
-          }, S.string, PluginExtensionPointSpec$ReventlessInfra.commandSchema))
-        });
-      case "DeleteDisconnectSchedule" :
-        return await deleteSchedule(disconnectScheduleName(directive._0));
       case "DoConnectPlugin" :
         let fn = Spec.manageSubscriptions;
         if (fn !== undefined) {
@@ -117,6 +104,19 @@ function Make(Spec) {
       case "ForwardCommand" :
         let match = directive._0;
         return await forwardCommand(match.id, match.command, match.extensionPointName, queryEngine);
+      case "CreateDisconnectSchedule" :
+        let id = directive._0;
+        return await createSchedule({
+          name: disconnectScheduleName(id),
+          rate: ScheduleOps$ReventlessCore.minutesFromNow(directive._1),
+          payload: JSON.stringify(Message$ReventlessCore.encodeCommand$p({
+            id: id,
+            meta: Message$ReventlessCore.generateMeta(PluginExtensionPointSpec$ReventlessInfra.name, undefined, "Scheduler", undefined, undefined, undefined, undefined, undefined),
+            command: "DisconnectPlugin"
+          }, Sury.string, PluginExtensionPointSpec$ReventlessInfra.commandSchema))
+        });
+      case "DeleteDisconnectSchedule" :
+        return await deleteSchedule(disconnectScheduleName(directive._0));
     }
   };
   let mapIncomingCommand = (id, cmd, _meta) => {
@@ -380,4 +380,4 @@ export {
   Make,
   moduleUrl,
 }
-/* S Not a pure module */
+/* sury Not a pure module */

package/src/plugin/lifecycle/PluginBehavior.res.mjs

@@ -1,26 +1,26 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
-import * as S from "sury/src/S.res.mjs";
+import * as Sury from "sury";
 import * as Stdlib_Array from "@rescript/runtime/lib/es6/Stdlib_Array.js";
 import * as Primitive_object from "@rescript/runtime/lib/es6/Primitive_object.js";
 import * as Plugin$Reventless from "@reventlessdev/reventless-spec/src/components/Plugin.res.mjs";
 import * as Plugin$ReventlessCore from "../component/Plugin.res.mjs";
 
-let versionStatusSchema = S.union([
-  S.literal("Connected"),
-  S.literal("Disconnected"),
-  S.literal("Inactive"),
-  S.literal("Retired")
+let versionStatusSchema = Sury.union([
+  Sury.literal("Connected"),
+  Sury.literal("Disconnected"),
+  Sury.literal("Inactive"),
+  Sury.literal("Retired")
 ]);
 
-let knownVersionSchema = S.schema(s => ({
+let knownVersionSchema = Sury.$schema(s => ({
   definition: s.m(Plugin$Reventless.pluginDefinitionSchema),
   status: s.m(versionStatusSchema)
 }));
 
-let stateSchema = S.schema(s => ({
-  current: s.m(S.option(Plugin$Reventless.versionSchema)),
-  known: s.m(S.dict(knownVersionSchema))
+let stateSchema = Sury.$schema(s => ({
+  current: s.m(Sury.$option(Plugin$Reventless.versionSchema)),
+  known: s.m(Sury.dict(knownVersionSchema))
 }));
 
 let initialState_known = {};
@@ -119,23 +119,56 @@ function promoteEvents(state, v) {
 
 function decide(state, command) {
   switch (command.TAG) {
-    case "Heartbeat" :
-      let v = command._0;
+    case "Connect" :
+      let def = command._0;
+      let v = def.version;
       let match = state.known[v];
-      if (match === undefined) {
+      if (match !== undefined && match.status === "Connected") {
+        if (Primitive_object.equal(match.definition, def)) {
+          return {
+            TAG: "Ok",
+            _0: []
+          };
+        } else {
+          return {
+            TAG: "Ok",
+            _0: [{
+                TAG: "VersionConnected",
+                _0: def
+              }]
+          };
+        }
+      } else {
+        return {
+          TAG: "Ok",
+          _0: connectEvents(state, v, def)
+        };
+      }
+    case "ReportIncompatibility" :
+      return {
+        TAG: "Ok",
+        _0: [{
+            TAG: "IncompatiblePluginDetected",
+            _0: command._0
+          }]
+      };
+    case "Heartbeat" :
+      let v$1 = command._0;
+      let match$1 = state.known[v$1];
+      if (match$1 === undefined) {
         return {
           TAG: "Ok",
           _0: [{
               TAG: "VersionDetected",
-              _0: v
+              _0: v$1
             }]
         };
       }
-      switch (match.status) {
+      switch (match$1.status) {
         case "Disconnected" :
           return {
             TAG: "Ok",
-            _0: connectEvents(state, v, match.definition)
+            _0: connectEvents(state, v$1, match$1.definition)
           };
         case "Connected" :
         case "Inactive" :
@@ -146,25 +179,25 @@ function decide(state, command) {
           };
       }
     case "Redetect" :
-      let v$1 = command._0;
-      let match$1 = state.known[v$1];
-      if (match$1 === undefined) {
+      let v$2 = command._0;
+      let match$2 = state.known[v$2];
+      if (match$2 === undefined) {
         return {
           TAG: "Ok",
           _0: [{
               TAG: "VersionDetected",
-              _0: v$1
+              _0: v$2
             }]
         };
       }
-      switch (match$1.status) {
+      switch (match$2.status) {
         case "Connected" :
         case "Disconnected" :
           return {
             TAG: "Ok",
             _0: [{
                 TAG: "VersionDetected",
-                _0: v$1
+                _0: v$2
               }]
           };
         case "Inactive" :
@@ -174,31 +207,6 @@ function decide(state, command) {
             _0: []
           };
       }
-    case "Connect" :
-      let def = command._0;
-      let v$2 = def.version;
-      let match$2 = state.known[v$2];
-      if (match$2 !== undefined && match$2.status === "Connected") {
-        if (Primitive_object.equal(match$2.definition, def)) {
-          return {
-            TAG: "Ok",
-            _0: []
-          };
-        } else {
-          return {
-            TAG: "Ok",
-            _0: [{
-                TAG: "VersionConnected",
-                _0: def
-              }]
-          };
-        }
-      } else {
-        return {
-          TAG: "Ok",
-          _0: connectEvents(state, v$2, def)
-        };
-      }
     case "Disconnect" :
       let v$3 = command._0;
       let match$3 = state.known[v$3];
@@ -309,14 +317,6 @@ function decide(state, command) {
           }].concat(promoteEvents(state, v$5))
       };
       break;
-    case "ReportIncompatibility" :
-      return {
-        TAG: "Ok",
-        _0: [{
-            TAG: "IncompatiblePluginDetected",
-            _0: command._0
-          }]
-      };
     case "Retire" :
       let v$6 = command._0;
       let match$7 = state.known[v$6];

package/src/plugin/lifecycle/PluginSpec.res

@@ -2,29 +2,44 @@
 
 open Reventless.Plugin
 
+// Alias, not `open`: the PPX strips `@transition` before the typechecker, so the
+// state constructors never reach it and an `open` would warn as unused.
+module Plugins = PluginsReadModelSpec
+
 // The Plugin aggregate is keyed by plugin **name** (not name@version). One
 // instance owns the whole lifecycle of every version of that name, deciding
 // supersession synchronously. Version-scoped commands carry the `version`
 // the transition targets; the ExtensionPoint→Plugin mapping supplies it
 // (translated from the transport-level `name@version` id — Approach 1).
+// Order is load-bearing: sury strands constructors declared after a run of two or
+// more same-shaped ones, so the `pluginDefinition` pair must lead (DZakh/sury#392).
 @schema
 type command =
+  // The handshake brings the version's row into being, so it runs from no state
+  // — `decide` accepts it against an unknown version and against every status
+  // but `Connected`, where it is a definition refresh rather than a move.
+  | @noApi @transition(() => Plugins.Connected) Connect(pluginDefinition)
+  // Records a protocol-version incompatibility without changing connection state.
+  | @noApi ReportIncompatibility(pluginDefinition)
   | @noApi Heartbeat(version)
   // Deploy-time re-detect (from RedetectPlugin). Forces the connect handshake to
   // re-run for an already-connected version so its definition is refreshed on the
   // row — unlike Heartbeat, which no-ops a connected keep-alive.
   | @noApi Redetect(version)
-  | @noApi Connect(pluginDefinition)
-  | @noApi Disconnect(version)
+  // A heartbeat timing out is the only way a row reaches `Disconnected`, and
+  // `decide` moves the row for exactly one status — anything else is a stray
+  // disconnect it tolerates without emitting.
+  | @noApi @transition(([Plugins.Connected]) => Plugins.Disconnected) Disconnect(version)
   // Admin lifecycle commands — API-exposed (auto-derived admin mutations,
   // Cognito group-gated). `version` selects which known version to act on.
-  | Activate(version)
-  | Deactivate(version)
-  // Records a protocol-version incompatibility without changing connection state.
-  | @noApi ReportIncompatibility(pluginDefinition)
+  // The `@transition` edges must agree with `decide` below; `Platform_Admin_Structure`
+  // reads them off this schema rather than restating them.
+  | @transition(([Plugins.Inactive, Plugins.Retired]) => Plugins.Connected) Activate(version)
+  | @transition(([Plugins.Connected, Plugins.Disconnected]) => Plugins.Inactive) Deactivate(version)
   // Manual admin retirement of a specific version (archive). Distinct from the
   // automatic `Superseded` transition (which is decided, not commanded).
-  | Retire(version)
+  | @transition(([Plugins.Connected, Plugins.Disconnected, Plugins.Inactive]) => Plugins.Retired)
+  Retire(version)
 
 // Carries both the superseded and the superseding version's full definition —
 // a deterministic trigger for version-to-version schema/data migrations

package/src/plugin/lifecycle/PluginSpec.res.mjs

@@ -1,103 +1,155 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
-import * as S from "sury/src/S.res.mjs";
+import * as Sury from "sury";
 import * as Plugin$Reventless from "@reventlessdev/reventless-spec/src/components/Plugin.res.mjs";
 import * as Api$ReventlessInfra from "@reventlessdev/reventless-infra/src/components/Api.res.mjs";
 
-let commandSchema = S.union([
-  S.schema(s => ({
+let commandSchema = Sury.union([
+  Sury.$schema(s => ({
+    TAG: "Connect",
+    _0: s.m(Plugin$Reventless.pluginDefinitionSchema)
+  })),
+  Sury.$schema(s => ({
+    TAG: "ReportIncompatibility",
+    _0: s.m(Plugin$Reventless.pluginDefinitionSchema)
+  })),
+  Sury.$schema(s => ({
     TAG: "Heartbeat",
     _0: s.m(Plugin$Reventless.versionSchema)
   })),
-  S.schema(s => ({
+  Sury.$schema(s => ({
     TAG: "Redetect",
     _0: s.m(Plugin$Reventless.versionSchema)
   })),
-  S.schema(s => ({
-    TAG: "Connect",
-    _0: s.m(Plugin$Reventless.pluginDefinitionSchema)
-  })),
-  S.schema(s => ({
+  Sury.$schema(s => ({
     TAG: "Disconnect",
     _0: s.m(Plugin$Reventless.versionSchema)
   })),
-  S.schema(s => ({
+  Sury.$schema(s => ({
     TAG: "Activate",
     _0: s.m(Plugin$Reventless.versionSchema)
   })),
-  S.schema(s => ({
+  Sury.$schema(s => ({
     TAG: "Deactivate",
     _0: s.m(Plugin$Reventless.versionSchema)
   })),
-  S.schema(s => ({
-    TAG: "ReportIncompatibility",
-    _0: s.m(Plugin$Reventless.pluginDefinitionSchema)
-  })),
-  S.schema(s => ({
+  Sury.$schema(s => ({
     TAG: "Retire",
     _0: s.m(Plugin$Reventless.versionSchema)
   }))
 ]);
 
-let versionSupersededDataSchema = S.schema(s => ({
+let versionSupersededDataSchema = Sury.$schema(s => ({
   supersededVersion: s.m(Plugin$Reventless.versionSchema),
   supersededDefinition: s.m(Plugin$Reventless.pluginDefinitionSchema),
   newVersion: s.m(Plugin$Reventless.versionSchema),
   newDefinition: s.m(Plugin$Reventless.pluginDefinitionSchema)
 }));
 
-let eventSchema = S.union([
-  S.schema(s => ({
+let eventSchema = Sury.union([
+  Sury.$schema(s => ({
     TAG: "VersionDetected",
     _0: s.m(Plugin$Reventless.versionSchema)
   })),
-  S.schema(s => ({
+  Sury.$schema(s => ({
     TAG: "VersionConnected",
     _0: s.m(Plugin$Reventless.pluginDefinitionSchema)
   })),
-  S.schema(s => ({
+  Sury.$schema(s => ({
     TAG: "VersionSuperseded",
     _0: s.m(versionSupersededDataSchema)
   })),
-  S.schema(s => ({
+  Sury.$schema(s => ({
     TAG: "VersionPromoted",
     _0: s.m(Plugin$Reventless.pluginDefinitionSchema)
   })),
-  S.schema(s => ({
+  Sury.$schema(s => ({
     TAG: "VersionDisconnected",
     _0: s.m(Plugin$Reventless.pluginDefinitionSchema)
   })),
-  S.schema(s => ({
+  Sury.$schema(s => ({
     TAG: "VersionActivated",
     _0: s.m(Plugin$Reventless.pluginDefinitionSchema)
   })),
-  S.schema(s => ({
+  Sury.$schema(s => ({
     TAG: "VersionDeactivated",
     _0: s.m(Plugin$Reventless.pluginDefinitionSchema)
   })),
-  S.schema(s => ({
+  Sury.$schema(s => ({
     TAG: "VersionRetired",
     _0: s.m(Plugin$Reventless.pluginDefinitionSchema)
   })),
-  S.schema(s => ({
+  Sury.$schema(s => ({
     TAG: "IncompatiblePluginDetected",
     _0: s.m(Plugin$Reventless.pluginDefinitionSchema)
   }))
 ]);
 
-let errorSchema = S.union([
-  S.literal("UnknownVersion"),
-  S.literal("AlreadyConnected"),
-  S.literal("IsDisconnected"),
-  S.literal("IsInactive")
+let errorSchema = Sury.union([
+  Sury.literal("UnknownVersion"),
+  Sury.literal("AlreadyConnected"),
+  Sury.literal("IsDisconnected"),
+  Sury.literal("IsInactive")
 ]);
 
 let commandSchema$1 = Api$ReventlessInfra.markNoApiVariants(commandSchema, [
+  "Connect",
+  "ReportIncompatibility",
   "Heartbeat",
   "Redetect",
-  "Connect",
-  "Disconnect",
-  "ReportIncompatibility"
+  "Disconnect"
+]);
+
+let commandSchema$2 = Api$ReventlessInfra.markAllowedStates(commandSchema$1, [
+  [
+    "Disconnect",
+    ["Connected"]
+  ],
+  [
+    "Activate",
+    [
+      "Inactive",
+      "Retired"
+    ]
+  ],
+  [
+    "Deactivate",
+    [
+      "Connected",
+      "Disconnected"
+    ]
+  ],
+  [
+    "Retire",
+    [
+      "Connected",
+      "Disconnected",
+      "Inactive"
+    ]
+  ]
+]);
+
+let commandSchema$3 = Api$ReventlessInfra.markTargetState(commandSchema$2, [
+  [
+    "Connect",
+    "Connected"
+  ],
+  [
+    "Disconnect",
+    "Disconnected"
+  ],
+  [
+    "Activate",
+    "Connected"
+  ],
+  [
+    "Deactivate",
+    "Inactive"
+  ],
+  [
+    "Retire",
+    "Retired"
+  ]
 ]);
 
 function commandAuthorization(param) {
@@ -108,15 +160,18 @@ let name = "Plugin";
 
 let Id;
 
+let Plugins;
+
 let moduleUrl = "@reventlessdev/reventless-core/src/plugin/lifecycle/PluginSpec.res.mjs";
 
 export {
   name,
   Id,
+  Plugins,
   versionSupersededDataSchema,
   eventSchema,
   errorSchema,
-  commandSchema$1 as commandSchema,
+  commandSchema$3 as commandSchema,
   moduleUrl,
   commandAuthorization,
 }

package/src/plugin/lifecycle/PluginsReadModelSpec.res

@@ -1,5 +1,17 @@
 @@reventless.spec("Plugins")
 
+// Who may read this view. Declared rather than left to default, because the
+// default was `AllowAuthenticated` and it was not true: `PluginBaseFragment`
+// hand-wrote an `Admin` Cognito gate beside it, and the local platform serves
+// every `Platform_*` field behind an `Admin` wrapper. Three statements of one
+// rule, one of which disagreed with the other two.
+//
+// Stating it here makes the spec the source. The AppSync directive comes from
+// this (spec-level `permission` outranks the legacy `{tableName, group}` pair),
+// and so does the `requiredAccess` the platform publishes — so a shell can gate
+// the Plugins view up front instead of offering it and meeting a refusal.
+@@reventless.authorize(Reventless.Authorization.AllowGroups(["Admin"]))
+
 // Current view — one row per plugin **name**, holding the currently-active
 // version's definition. Keyed by the aggregate id (= plugin name). The status
 // here is the *current* version's status; "Superseded" is not represented (a
@@ -17,21 +29,33 @@ type status =
 type state = {
   name: Reventless.Plugin.name,
   version: Reventless.Plugin.version,
-  eventCollector: string,
+  // Projection/storage only — never on the GraphQL surface. `@internal` says so
+  // on the field, where the next person to edit the record will see it; the same
+  // three names used to live in a hand-written exclude list in `PluginBaseFragment`
+  // that nothing kept in step with this declaration.
+  @internal eventCollector: string,
   extensionPoints: array<Reventless.Plugin.extensionPointDefinition>,
-  extensionPointNames: array<string>,
-  extensionNames: array<string>,
+  @internal extensionPointNames: array<string>,
+  @internal extensionNames: array<string>,
   extensions: array<Reventless.Plugin.extensionDefinition>,
-  status: status,
+  // Annotated rather than renamed to `lifecycle` to meet the convention: `status`
+  // is published in the SDL, in stored rows and in the UI's hand-written plugin
+  // views. Without this the transition check has no states to compare and passes
+  // while verifying nothing.
+  @lifecycle status: status,
   statusChange: Message.statusChange,
   // Stored as the **untagged** offload wire JSON (a bare fragment, or an
   // `{$offload: {...}}` reference) — NOT the `Offload.payload` variant. The QueryDb
   // write path marshals the raw ReScript value straight to DynamoDB without
   // sury-encoding through this field's schema, so a variant would persist as its
-  // runtime `{TAG, _0}` shape and no reader could parse it. UI-excluded
-  // (PluginBaseFragment.pluginUIOnlyExcludeFields), so JSON.t typing costs no
-  // GraphQL consumer. PluginsProjection.displayState writes it via Offload.toJson.
-  apiSchemaFragment: option<JSON.t>,
+  // runtime `{TAG, _0}` shape and no reader could parse it.
+  // PluginsProjection.displayState writes it via Offload.toJson.
+  //
+  // `@hidden`, not `@internal`: the field IS on the API and the host shell fetches
+  // it through a dedicated resolver path. What it must not be is a column in a
+  // generated list view — it is a multi-kilobyte JSON blob, and a query that names
+  // it drags one per row over the wire to render a cell nobody reads.
+  @hidden apiSchemaFragment: option<JSON.t>,
   // API target for split-API schema routing. Absent/None means "Domain" (backward compat).
   // "Platform" → excluded from DomainApi runtime schema stitching in updateApiSchema.
   apiTarget?: string,
@@ -39,7 +63,10 @@ type state = {
   // None for older plugins whose protocol version did not carry the field. Same
   // untagged-JSON storage as apiSchemaFragment above; the ComponentDefinitions
   // Lambda detects the `$offload` sentinel and resolves it from S3.
-  structure: option<JSON.t>,
+  //
+  // `@hidden` for the same reason, and more so: this is the larger of the two
+  // blobs.
+  @hidden structure: option<JSON.t>,
   // DCB EventLog definition for plugins that bundle a DcbEventLog component.
   // Admin's manageSubscriptions uses this to wire cross-plugin SNS subscriptions
   // from this plugin's DCB topic → peer EventCollectors (and vice-versa). None

package/src/plugin/lifecycle/PluginsReadModelSpec.res.mjs

@@ -1,46 +1,54 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
-import * as S from "sury/src/S.res.mjs";
+import * as Sury from "sury";
 import * as Plugin$Reventless from "@reventlessdev/reventless-spec/src/components/Plugin.res.mjs";
 import * as ReadModel$Reventless from "@reventlessdev/reventless-spec/src/components/ReadModel.res.mjs";
 import * as Message$ReventlessCore from "../../Message.res.mjs";
 import * as StateAnnotations$Reventless from "@reventlessdev/reventless-spec/src/components/StateAnnotations.res.mjs";
 
-let statusSchema = S.union([
-  S.literal("Connected"),
-  S.literal("Disconnected"),
-  S.literal("Inactive"),
-  S.literal("Retired")
+let statusSchema = Sury.union([
+  Sury.literal("Connected"),
+  Sury.literal("Disconnected"),
+  Sury.literal("Inactive"),
+  Sury.literal("Retired")
 ]);
 
-let stateSchema = S.schema(s => ({
+let stateSchema = Sury.$schema(s => ({
   name: s.m(Plugin$Reventless.nameSchema),
   version: s.m(Plugin$Reventless.versionSchema),
-  eventCollector: s.m(S.string),
-  extensionPoints: s.m(S.array(Plugin$Reventless.extensionPointDefinitionSchema)),
-  extensionPointNames: s.m(S.array(S.string)),
-  extensionNames: s.m(S.array(S.string)),
-  extensions: s.m(S.array(Plugin$Reventless.extensionDefinitionSchema)),
+  eventCollector: s.m(Sury.string),
+  extensionPoints: s.m(Sury.array(Plugin$Reventless.extensionPointDefinitionSchema)),
+  extensionPointNames: s.m(Sury.array(Sury.string)),
+  extensionNames: s.m(Sury.array(Sury.string)),
+  extensions: s.m(Sury.array(Plugin$Reventless.extensionDefinitionSchema)),
   status: s.m(statusSchema),
   statusChange: s.m(Message$ReventlessCore.statusChangeSchema),
-  apiSchemaFragment: s.m(S.option(S.json)),
-  apiTarget: s.m(S.option(S.string)),
-  structure: s.m(S.option(S.json)),
+  apiSchemaFragment: s.m(Sury.$option(Sury.json)),
+  apiTarget: s.m(Sury.$option(Sury.string)),
+  structure: s.m(Sury.$option(Sury.json)),
   dcbEventLog: s.m(Plugin$Reventless.dcbEventLogOptionSchema),
-  kind: s.m(S.option(Plugin$Reventless.pluginKindSchema)),
-  otherConnectedVersions: s.m(S.array(Plugin$Reventless.versionSchema))
+  kind: s.m(Sury.$option(Plugin$Reventless.pluginKindSchema)),
+  otherConnectedVersions: s.m(Sury.array(Plugin$Reventless.versionSchema))
 }));
 
 let config = ReadModel$Reventless.config(undefined, undefined, undefined);
 
-let stateSchema$1 = S.Metadata.set(stateSchema, StateAnnotations$Reventless.stateAnnotationsId, {
+let stateSchema$1 = Sury.$Metadata_set(stateSchema, StateAnnotations$Reventless.stateAnnotationsId, {
   ids: [],
   compositeIds: [],
   subIds: [],
   compositeSubIds: [],
   indexes: [],
-  hidden: [],
+  hidden: [
+    "apiSchemaFragment",
+    "structure"
+  ],
   summary: [],
+  internal: [
+    "eventCollector",
+    "extensionPointNames",
+    "extensionNames"
+  ],
   drillTargets: [],
   drillTargetKeys: [],
   collapsed: [],
@@ -48,13 +56,18 @@ let stateSchema$1 = S.Metadata.set(stateSchema, StateAnnotations$Reventless.stat
   scanSort: [],
   semantic: [],
   metric: [],
-  lifecycle: undefined,
+  lifecycle: "status",
   groupBy: "kind",
   visibility: undefined,
   live: undefined,
   retired: undefined
 });
 
+let authorization = {
+  TAG: "AllowGroups",
+  _0: ["Admin"]
+};
+
 let name = "Plugins";
 
 let Id;
@@ -63,8 +76,6 @@ let subIdConfig;
 
 let moduleUrl = "@reventlessdev/reventless-core/src/plugin/lifecycle/PluginsReadModelSpec.res.mjs";
 
-let authorization = "AllowAuthenticated";
-
 let visibility = "Public";
 
 export {