@reventlessdev/reventless-core 3.0.0-alpha.284 → 3.0.0-alpha.285

package/src/components/StateChangeSlice/StateChangeSlice_Callback.res.mjs

@@ -8,10 +8,12 @@ import * as Id$Reventless from "@reventlessdev/reventless-spec/src/types/Id.res.
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Effect from "effect/Effect";
 import * as Stream$1 from "effect/Stream";
+import * as Owner$Reventless from "@reventlessdev/reventless-spec/src/components/Owner.res.mjs";
 import * as DcbTag$Reventless from "@reventlessdev/reventless-spec/src/components/DcbTag.res.mjs";
 import * as Lru$ReventlessCore from "../../util/Lru.res.mjs";
 import * as DcbDecode$Reventless from "@reventlessdev/reventless-spec/src/components/DcbDecode.res.mjs";
 import * as Util_Sury$Reventless from "@reventlessdev/reventless-spec/src/util/Util_Sury.res.mjs";
+import * as OwnerScope$Reventless from "@reventlessdev/reventless-spec/src/types/OwnerScope.res.mjs";
 import * as Message$ReventlessCore from "../../Message.res.mjs";
 import * as Metrics$ReventlessCore from "../../util/Metrics.res.mjs";
 import * as LogFormat$ReventlessCore from "../../util/LogFormat.res.mjs";
@@ -37,6 +39,8 @@ function Make(Spec) {
       }
     });
     let scopeShape = DcbTag$Reventless.sliceShapeFromSchemas(Spec.name, Spec.commandSchema, Spec.consumedEventSchema, Spec.eventSchema, undefined);
+    let ownerFieldsByEventType = Owner$Reventless.fieldNamesByVariant(Spec.consumedEventSchema);
+    let actsOnOwned = Object.keys(ownerFieldsByEventType).length !== 0;
     let readEventId = (partitionTag, tags) => {
       let ownTagValues = () => {
         let vals = Stdlib_Array.reduce(tags, [], (acc, t) => {
@@ -104,6 +108,26 @@ function Make(Spec) {
       } else {
         entityId = undefined;
       }
+      let ownerFieldsOf = raw => {
+        if (partitionTag !== undefined) {
+          if (entityId !== undefined) {
+            if (actsOnOwned && DcbTag$Reventless.partitionValueOfTags(raw.tags, partitionTag) === entityId) {
+              return Stdlib_Option.getOr(ownerFieldsByEventType[raw.eventType], []);
+            } else {
+              return [];
+            }
+          } else {
+            return [];
+          }
+        } else {
+          return [];
+        }
+      };
+      let ownershipRefusal = owners => {
+        if (actsOnOwned) {
+          return CommandTopic_Helpers$ReventlessCore.ownershipRefusal(OwnerScope$Reventless.decideActing(command$p.meta.callerClaim, Stdlib_Option.map(entityId, param => owners)), Spec.name, Message$ReventlessCore.variantNameOfJson(cmdJson.commandJson));
+        }
+      };
       let cacheKey = JSON.stringify(query);
       let cacheGet = () => {
         if (cacheKey !== undefined) {
@@ -128,10 +152,12 @@ function Make(Spec) {
         let match = seed.contents;
         let match$1 = match !== undefined ? [
             match[0],
-            match[1]
+            match[1],
+            match[2]
           ] : [
             Behavior.initialState,
-            undefined
+            undefined,
+            []
           ];
         let afterPos = match$1[1];
         let cacheHit = Stdlib_Option.isSome(seed.contents);
@@ -148,12 +174,17 @@ function Make(Spec) {
             break;
         }
         return Effect.flatMap(Effect.tap(Stream$1.runFold(Stream$1.flatMap(Stream$1.map(dcbEventLog.readStream(query, afterPos, strongConsistency), raw => {
-          let decoded = decoder.decode(raw.eventType, Stdlib_Option.getOr(Stdlib_JSON.Decode.object(raw.data), {}));
+          let data = Stdlib_Option.getOr(Stdlib_JSON.Decode.object(raw.data), {});
+          let decoded = decoder.decode(raw.eventType, data);
           return Stdlib_Option.map(decoded, event => [
             event,
             raw.position,
             raw.eventType,
-            readEventId(partitionTag, raw.tags)
+            readEventId(partitionTag, raw.tags),
+            [
+              ownerFieldsOf(raw),
+              data
+            ]
           ]);
         }), opt => {
           if (opt !== undefined) {
@@ -164,14 +195,17 @@ function Make(Spec) {
         }), [
           match$1[0],
           afterPos,
-          []
+          [],
+          match$1[2]
         ], (param, param$1) => {
+          let match = param$1[4];
           let eventId = param$1[3];
           let eventType = param$1[2];
           return [
             Behavior.evolve(param[0], param$1[0]),
             param$1[1],
-            param[2].concat([eventId !== undefined ? LogFormat$ReventlessCore.bold(eventType) + `(` + eventId + `)` : LogFormat$ReventlessCore.bold(eventType)])
+            param[2].concat([eventId !== undefined ? LogFormat$ReventlessCore.bold(eventType) + `(` + eventId + `)` : LogFormat$ReventlessCore.bold(eventType)]),
+            OwnerScope$Reventless.recordOwners(param[3], match[0], match[1])
           ];
         }), param => {
           let reads = param[2];
@@ -184,16 +218,33 @@ function Make(Spec) {
             reads.length === 0 ? "" : ` [` + reads.join(", ") + `]`
           ));
         }), param => {
+          let owners = param[3];
           let headPosition = param[1];
           let state = param[0];
           return Effect.flatMap(EffectLogger$ReventlessCore.logDebug(comp, undefined, `deciding: id=` + Stdlib_Option.getOr(entityId, "-") + ` head=` + Stdlib_Option.getOr(headPosition, "-") + ` cmd=` + LogFormat$ReventlessCore.cmdName(cmdJson)), () => {
+            let match = ownershipRefusal(owners);
+            if (match !== undefined) {
+              let rejected = match.rejected;
+              cachePut([
+                state,
+                headPosition,
+                owners
+              ]);
+              CommandTopic_Helpers$ReventlessCore.reportRejected(Spec.name, "AccessRefusal", cmdJson.meta.msgId, rejected);
+              let line = `refused: ` + rejected.errorDetail + ` id=` + Stdlib_Option.getOr(entityId, "-");
+              return Effect.map(match.isDefect ? EffectLogger$ReventlessCore.logError(comp, undefined, line) : EffectLogger$ReventlessCore.logWarn(comp, undefined, line), () => ({
+                TAG: "Ok",
+                _0: "rejected"
+              }));
+            }
             let newEvents = Behavior.decide(state, command$p.command);
             if (newEvents.TAG === "Ok") {
               let newEvents$1 = newEvents._0;
               if (newEvents$1.length === 0) {
                 cachePut([
                   state,
-                  headPosition
+                  headPosition,
+                  owners
                 ]);
                 CommandTopic_Helpers$ReventlessCore.reportAccepted(Spec.name, cmdJson.meta.msgId, entityId !== undefined ? ({
                     entityId: entityId,
@@ -243,7 +294,8 @@ function Make(Spec) {
                 if (appendResult.TAG === "Ok") {
                   cachePut([
                     state,
-                    headPosition
+                    headPosition,
+                    owners
                   ]);
                   CommandTopic_Helpers$ReventlessCore.reportAccepted(Spec.name, cmdJson.meta.msgId, entityId !== undefined ? ({
                       entityId: entityId,
@@ -270,7 +322,8 @@ function Make(Spec) {
                 if (retries > 0) {
                   seed.contents = [
                     state,
-                    headPosition
+                    headPosition,
+                    owners
                   ];
                   Metrics$ReventlessCore.emitCount("AppendRetry", Spec.name, undefined);
                   return Effect.flatMap(EffectLogger$ReventlessCore.logWarn(comp, undefined, `append failed (retrying ` + ((3 - retries | 0) + 1 | 0).toString() + `/` + (3).toString() + `): ` + errDetail), () => attempt(retries - 1 | 0));
@@ -292,12 +345,13 @@ function Make(Spec) {
             }
             cachePut([
               state,
-              headPosition
+              headPosition,
+              owners
             ]);
             let errorJson = Util_Sury$Reventless.toJson(newEvents._0, Spec.errorSchema);
             let errorCode = Message$ReventlessCore.variantNameOfJson(errorJson);
-            let match = Message$ReventlessCore.splitMessage(errorJson);
-            let payloadDict = match[1];
+            let match$1 = Message$ReventlessCore.splitMessage(errorJson);
+            let payloadDict = match$1[1];
             let errorDetail = Object.entries(payloadDict).length === 0 ? "" : JSON.stringify(payloadDict);
             CommandTopic_Helpers$ReventlessCore.reportRejected(Spec.name, "DomainRejection", cmdJson.meta.msgId, {
               errorCode: errorCode,

package/src/plugin/component/Plugin_Helpers.res

@@ -783,6 +783,15 @@ type pluginDeployedInfo = {
   deployedAt: string,
   actor: string,
   deploymentId: string,
+  /** The commit the deployment was built from, when CI or git could say. */
+  commit?: string,
+  /** The working tree had changes the commit does not hold. */
+  dirty?: bool,
+  /** What the environment is for, from the app's `environments.yaml`. */
+  purpose?: string,
+  tag?: string,
+  /** The pull request a review environment was deployed for. */
+  pullRequest?: int,
   kind?: pluginKind,
   displayName?: string,
   vendor?: string,
@@ -1237,21 +1246,34 @@ let getInteropMeta = (): Pulumi.Output.t<JSON.t> => {
 }
 
 // ---------------------------------------------------------------------------
-// Stack metadata export — environment, region, timestamp, actor, git SHA.
+// Stack metadata export — environment, region, timestamp, actor, commit.
 // Called from both exportPluginOutputs and exportPlatformOutputs.
 // ---------------------------------------------------------------------------
 let exportDeploymentMetadata = () => {
+  let provenance = Reventless.DeploymentProvenance.current()
+  let stack = Pulumi.Pulumi.getStackName()
+  let optional =
+    [
+      ("commit", provenance.commit),
+      ("purpose", provenance.purpose),
+      ("tag", provenance.tag),
+      ("pullRequest", provenance.pullRequest->Option.map(n => n->Int.toString)),
+    ]->Array.filterMap(((key, value)) => value->Option.map(v => (key, v)))
   let metadata =
     [
-      ("environment", Pulumi.Pulumi.getStackName()),
+      ("environment", provenance.environment->Option.getOr(stack)),
+      ("stack", stack),
       (
         "region",
         Pulumi.Config.make(Some("aws"))->Pulumi.Config.get("region")->Option.getOr("unknown"),
       ),
       ("timestamp", Date.make()->Date.toISOString),
-      ("gitSha", NodeProcess.env->Dict.get("GITHUB_SHA")->Option.getOr("unknown")),
+      ("gitSha", provenance.commit->Option.getOr("unknown")),
+      ("dirty", provenance.dirty ? "true" : "false"),
       ("actor", NodeProcess.env->Dict.get("GITHUB_ACTOR")->Option.getOr("unknown")),
-    ]->Dict.fromArray
+    ]
+    ->Array.concat(optional)
+    ->Dict.fromArray
   Pulumi.Pulumi.export(
     "deploymentMetadata",
     metadata->Dict.mapValues(JSON.Encode.string)->JSON.Encode.object->Pulumi.Output.make,
@@ -1595,6 +1617,7 @@ let exportPluginOutputs = (pluginOutputs: Plugin.outputs) => {
       ->Dict.get("GITHUB_SHA")
       ->Option.orElse(NodeProcess.env->Dict.get("CI_COMMIT_SHA"))
       ->Option.getOr(Date.make()->Date.toISOString)
+    let provenance = Reventless.DeploymentProvenance.current()
     let schemaFor = name => componentSchemaRegistry->Dict.get(name)->Option.getOr({})
     let resolveAggregates = pluginOutputs.aggregates->Pulumi.Output.flatMap(aggs =>
       aggs
@@ -1855,11 +1878,16 @@ let exportPluginOutputs = (pluginOutputs: Plugin.outputs) => {
           let info: pluginDeployedInfo = {
             name,
             version,
-            environment: Pulumi.Pulumi.getStackName(),
+            environment: provenance.environment->Option.getOr(Pulumi.Pulumi.getStackName()),
             stackName: Pulumi.Pulumi.getStackName(),
             deployedAt: Date.make()->Date.toISOString,
             actor,
             deploymentId,
+            commit: ?provenance.commit,
+            dirty: ?(provenance.dirty ? Some(true) : None),
+            purpose: ?provenance.purpose,
+            tag: ?provenance.tag,
+            pullRequest: ?provenance.pullRequest,
             kind: ?(meta->Option.flatMap(m => m.kind)),
             displayName: ?(meta->Option.flatMap(m => m.displayName)),
             vendor: ?(meta->Option.flatMap(m => m.vendor)),

package/src/plugin/component/Plugin_Helpers.res.mjs

@@ -42,6 +42,7 @@ import * as ApiNoApiHelpers$ReventlessCore from "../../components/Api/ApiNoApiHe
 import * as AutomationSlice$ReventlessCore from "../../components/AutomationSlice/AutomationSlice.res.mjs";
 import * as Builder_Helpers$ReventlessCore from "../../components/Builder_Helpers.res.mjs";
 import * as Plugin_Callback$ReventlessCore from "./Plugin_Callback.res.mjs";
+import * as DeploymentProvenance$Reventless from "@reventlessdev/reventless-spec/src/types/DeploymentProvenance.res.mjs";
 import * as Plugin_BuiltHook$ReventlessCore from "./Plugin_BuiltHook.res.mjs";
 import * as StateChangeSlice$ReventlessCore from "../../components/StateChangeSlice/StateChangeSlice.res.mjs";
 import * as ExtensionPoint$ReventlessInterop from "@reventlessdev/reventless-interop/src/components/ExtensionPoint.res.mjs";
@@ -607,10 +608,40 @@ function getInteropMeta() {
 }
 
 function exportDeploymentMetadata() {
+  let provenance = DeploymentProvenance$Reventless.current();
+  let stack = Pulumi.getStack();
+  let optional = Stdlib_Array.filterMap([
+    [
+      "commit",
+      provenance.commit
+    ],
+    [
+      "purpose",
+      provenance.purpose
+    ],
+    [
+      "tag",
+      provenance.tag
+    ],
+    [
+      "pullRequest",
+      Stdlib_Option.map(provenance.pullRequest, n => n.toString())
+    ]
+  ], param => {
+    let key = param[0];
+    return Stdlib_Option.map(param[1], v => [
+      key,
+      v
+    ]);
+  });
   let metadata = Object.fromEntries([
     [
       "environment",
-      Pulumi.getStack()
+      Stdlib_Option.getOr(provenance.environment, stack)
+    ],
+    [
+      "stack",
+      stack
     ],
     [
       "region",
@@ -622,13 +653,17 @@ function exportDeploymentMetadata() {
     ],
     [
       "gitSha",
-      Stdlib_Option.getOr(process.env["GITHUB_SHA"], "unknown")
+      Stdlib_Option.getOr(provenance.commit, "unknown")
+    ],
+    [
+      "dirty",
+      provenance.dirty ? "true" : "false"
     ],
     [
       "actor",
       Stdlib_Option.getOr(process.env["GITHUB_ACTOR"], "unknown")
     ]
-  ]);
+  ].concat(optional));
   Pulumi$Pulumi.$$export("deploymentMetadata", Pulumi.output(Stdlib_Dict.mapValues(metadata, prim => prim)));
 }
 
@@ -725,6 +760,7 @@ function exportPluginOutputs(pluginOutputs) {
   }
   let actor = Stdlib_Option.getOr(Stdlib_Option.orElse(Stdlib_Option.orElse(process.env["GITHUB_ACTOR"], process.env["CI_COMMIT_AUTHOR"]), process.env["USER"]), "local");
   let deploymentId = Stdlib_Option.getOr(Stdlib_Option.orElse(process.env["GITHUB_SHA"], process.env["CI_COMMIT_SHA"]), new Date().toISOString());
+  let provenance = DeploymentProvenance$Reventless.current();
   let resolveAggregates = Output$Pulumi.flatMap(pluginOutputs.aggregates, aggs => Pulumi.all(Object.entries(aggs).map(param => {
     let name = param[0];
     return Aggregate$ReventlessCore.toResolvedOutputs(param[1]).apply(resolved => ({
@@ -904,11 +940,16 @@ function exportPluginOutputs(pluginOutputs) {
       return hook({
         name: name,
         version: version,
-        environment: Pulumi.getStack(),
+        environment: Stdlib_Option.getOr(provenance.environment, Pulumi.getStack()),
         stackName: Pulumi.getStack(),
         deployedAt: new Date().toISOString(),
         actor: actor,
         deploymentId: deploymentId,
+        commit: provenance.commit,
+        dirty: provenance.dirty ? true : undefined,
+        purpose: provenance.purpose,
+        tag: provenance.tag,
+        pullRequest: provenance.pullRequest,
         kind: Stdlib_Option.flatMap(meta, m => m.kind),
         displayName: Stdlib_Option.flatMap(meta, m => m.displayName),
         vendor: Stdlib_Option.flatMap(meta, m => m.vendor),