@reventlessdev/reventless-local 3.0.0-alpha.281 → 3.0.0-alpha.283

package/CHANGELOG.md

@@ -3,6 +3,24 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.283 (2026-10-10)
+
+* feat!: a command's rule is looked up by its name, without a cast ([5f02c40](https://github.com/ReventlessDev/reventless-core/commit/5f02c4081d077bf4a6951d8c9b2b16553a8ca87b))
+
+### BREAKING CHANGES
+
+* a spec that writes `commandAuthorization` by hand writes
+`authorizationOf = (name: string) => …` instead; the PPX refuses the old name.
+
+
+
+# 3.0.0-alpha.282 (2026-10-10)
+
+### Bug Fixes
+
+* an inbound translation is gated alike on every door, and encodes its commands by schema ([6ec3ce6](https://github.com/ReventlessDev/reventless-core/commit/6ec3ce672e53e2c162c64a90d103be691391be5e))
+
+
 # 3.0.0-alpha.281 (2026-10-08)
 
 **Note:** Version bump only for package @reventlessdev/reventless-local

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-local",
-  "version": "3.0.0-alpha.281",
+  "version": "3.0.0-alpha.283",
   "description": "Local platform for Reventless (in-memory or SQLite backend, for development and testing without AWS)",
   "license": "Apache-2.0",
   "bin": {
@@ -37,21 +37,21 @@
     "@reventlessdev/rescript-effect": "0.1.0-alpha.34",
     "@reventlessdev/rescript-graphql-yoga": "1.0.0-alpha.29",
     "@reventlessdev/rescript-jest": "1.0.0-alpha.11",
-    "@reventlessdev/rescript-mcp-sdk": "1.0.0-alpha.23",
     "@reventlessdev/rescript-node": "2.0.0-alpha.22",
+    "@reventlessdev/rescript-mcp-sdk": "1.0.0-alpha.23",
     "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.23",
-    "@reventlessdev/reventless-core": "3.0.0-alpha.291",
-    "@reventlessdev/reventless-graphql-server": "1.0.0-alpha.139",
-    "@reventlessdev/reventless-gwt": "1.0.0-alpha.238",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.188",
-    "@reventlessdev/reventless-postgres": "3.0.0-alpha.155",
+    "@reventlessdev/reventless-graphql-server": "1.0.0-alpha.141",
+    "@reventlessdev/reventless-core": "3.0.0-alpha.293",
+    "@reventlessdev/reventless-gwt": "1.0.0-alpha.240",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.190",
     "@reventlessdev/reventless-seed": "1.0.0-alpha.33",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.160"
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.162",
+    "@reventlessdev/reventless-postgres": "3.0.0-alpha.157"
   },
   "devDependencies": {
     "rescript": "12.3.1",
     "sury-ppx": "11.0.0",
-    "@reventlessdev/reventless-ppx": "1.0.0-alpha.98"
+    "@reventlessdev/reventless-ppx": "1.0.0-alpha.99"
   },
   "peerDependencies": {
     "rescript": "^12.3.1"

package/src/Platform.res

@@ -290,14 +290,14 @@ module MakeWithConfig = (
     deployTarget: ref("Domain"),
     // Phase 1: register SDL + resolver stub synchronously.
     // Pass the resolved server so the correct target (domain or platform) receives the schema.
-    mutationResolverHook: (~kind, ~fields, ~commandSchema, ~commandAuthorization) => {
+    mutationResolverHook: (~kind, ~fields, ~commandSchema, ~authorizationOf) => {
       let server = resolveTargetGraphQL()
       switch kind {
       | ReventlessCore.Plugin_Helpers.Aggregate =>
         CommandGeneratorResolvers_GraphQL.register(
           ~fields,
           ~commandSchema,
-          ~commandAuthorization,
+          ~authorizationOf,
           ~server,
         )
       | Dcb =>
@@ -305,7 +305,7 @@ module MakeWithConfig = (
           CommandGeneratorResolvers_GraphQL.registerDcb(
             ~fieldName=field,
             ~commandSchema,
-            ~commandAuthorization,
+            ~authorizationOf,
             ~server,
           )
         )
@@ -314,10 +314,11 @@ module MakeWithConfig = (
     // Phase 2: bind generateCommand when Output.apply resolves.
     mutationBindHook: CommandGeneratorResolvers_GraphQL.bindHandler,
     // InboundTranslationSlice hooks — pass resolved server for correct target routing.
-    inboundMutationResolverHook: (~fieldName, ~externalInputSchema) =>
+    inboundMutationResolverHook: (~fieldName, ~externalInputSchema, ~permission=?) =>
       InboundTranslationResolvers_GraphQL.register(
         ~fieldName,
         ~externalInputSchema,
+        ~permission?,
         ~server=resolveTargetGraphQL(),
       ),
     inboundMutationBindReceiveHook: InboundTranslationResolvers_GraphQL.bindReceive,

package/src/Platform.res.mjs

@@ -225,15 +225,15 @@ function MakeWithConfig(Config) {
     }
   };
   let EventHistoryResolvers = EventHistoryResolvers_GraphQL$ReventlessLocal.Make(Bus);
-  let hooks_mutationResolverHook = (kind, fields, commandSchema, commandAuthorization) => {
+  let hooks_mutationResolverHook = (kind, fields, commandSchema, authorizationOf) => {
     let server = resolveTargetGraphQL();
     if (kind === "Aggregate") {
-      return CommandGeneratorResolvers_GraphQL$ReventlessLocal.register(fields, commandSchema, commandAuthorization, server);
+      return CommandGeneratorResolvers_GraphQL$ReventlessLocal.register(fields, commandSchema, authorizationOf, server);
     }
-    fields.forEach(field => CommandGeneratorResolvers_GraphQL$ReventlessLocal.registerDcb(field, commandSchema, commandAuthorization, server));
+    fields.forEach(field => CommandGeneratorResolvers_GraphQL$ReventlessLocal.registerDcb(field, commandSchema, authorizationOf, server));
   };
   let hooks_mutationBindHook = CommandGeneratorResolvers_GraphQL$ReventlessLocal.bindHandler;
-  let hooks_inboundMutationResolverHook = (fieldName, externalInputSchema) => InboundTranslationResolvers_GraphQL$ReventlessLocal.register(fieldName, externalInputSchema, resolveTargetGraphQL());
+  let hooks_inboundMutationResolverHook = (fieldName, externalInputSchema, permission) => InboundTranslationResolvers_GraphQL$ReventlessLocal.register(fieldName, externalInputSchema, permission, resolveTargetGraphQL());
   let hooks_inboundMutationBindReceiveHook = InboundTranslationResolvers_GraphQL$ReventlessLocal.bindReceive;
   let hooks_schemaTypeRegistrationHook = sdlTypes => resolveTargetGraphQL().registerTypes(sdlTypes);
   let hooks_mcpSchemaRegistrationHook = param => {
@@ -649,7 +649,7 @@ function MakeWithConfig(Config) {
     errorSchema: UiFragmentRegistry$ReventlessCore.errorSchema,
     eventSchema: UiFragmentRegistry$ReventlessCore.eventSchema,
     commandSchema: UiFragmentRegistry$ReventlessCore.commandSchema,
-    commandAuthorization: UiFragmentRegistry$ReventlessCore.commandAuthorization,
+    authorizationOf: UiFragmentRegistry$ReventlessCore.authorizationOf,
     commandTransition: UiFragmentRegistry$ReventlessCore.commandTransition,
     traits: UiFragmentRegistry$ReventlessCore.traits,
     readConsistency: UiFragmentRegistry$ReventlessCore.readConsistency
@@ -761,7 +761,7 @@ function MakeWithConfig(Config) {
     errorSchema: PluginSpec$ReventlessCore.errorSchema,
     commandSchema: PluginSpec$ReventlessCore.commandSchema,
     moduleUrl: PluginSpec$ReventlessCore.moduleUrl,
-    commandAuthorization: PluginSpec$ReventlessCore.commandAuthorization,
+    authorizationOf: PluginSpec$ReventlessCore.authorizationOf,
     commandTransition: PluginSpec$ReventlessCore.commandTransition,
     traits: PluginSpec$ReventlessCore.traits
   })({
@@ -1985,15 +1985,15 @@ function Make($star) {
     }
   };
   let EventHistoryResolvers = EventHistoryResolvers_GraphQL$ReventlessLocal.Make(Bus);
-  let hooks_mutationResolverHook = (kind, fields, commandSchema, commandAuthorization) => {
+  let hooks_mutationResolverHook = (kind, fields, commandSchema, authorizationOf) => {
     let server = resolveTargetGraphQL();
     if (kind === "Aggregate") {
-      return CommandGeneratorResolvers_GraphQL$ReventlessLocal.register(fields, commandSchema, commandAuthorization, server);
+      return CommandGeneratorResolvers_GraphQL$ReventlessLocal.register(fields, commandSchema, authorizationOf, server);
     }
-    fields.forEach(field => CommandGeneratorResolvers_GraphQL$ReventlessLocal.registerDcb(field, commandSchema, commandAuthorization, server));
+    fields.forEach(field => CommandGeneratorResolvers_GraphQL$ReventlessLocal.registerDcb(field, commandSchema, authorizationOf, server));
   };
   let hooks_mutationBindHook = CommandGeneratorResolvers_GraphQL$ReventlessLocal.bindHandler;
-  let hooks_inboundMutationResolverHook = (fieldName, externalInputSchema) => InboundTranslationResolvers_GraphQL$ReventlessLocal.register(fieldName, externalInputSchema, resolveTargetGraphQL());
+  let hooks_inboundMutationResolverHook = (fieldName, externalInputSchema, permission) => InboundTranslationResolvers_GraphQL$ReventlessLocal.register(fieldName, externalInputSchema, permission, resolveTargetGraphQL());
   let hooks_inboundMutationBindReceiveHook = InboundTranslationResolvers_GraphQL$ReventlessLocal.bindReceive;
   let hooks_schemaTypeRegistrationHook = sdlTypes => resolveTargetGraphQL().registerTypes(sdlTypes);
   let hooks_mcpSchemaRegistrationHook = param => {
@@ -2409,7 +2409,7 @@ function Make($star) {
     errorSchema: UiFragmentRegistry$ReventlessCore.errorSchema,
     eventSchema: UiFragmentRegistry$ReventlessCore.eventSchema,
     commandSchema: UiFragmentRegistry$ReventlessCore.commandSchema,
-    commandAuthorization: UiFragmentRegistry$ReventlessCore.commandAuthorization,
+    authorizationOf: UiFragmentRegistry$ReventlessCore.authorizationOf,
     commandTransition: UiFragmentRegistry$ReventlessCore.commandTransition,
     traits: UiFragmentRegistry$ReventlessCore.traits,
     readConsistency: UiFragmentRegistry$ReventlessCore.readConsistency
@@ -2521,7 +2521,7 @@ function Make($star) {
     errorSchema: PluginSpec$ReventlessCore.errorSchema,
     commandSchema: PluginSpec$ReventlessCore.commandSchema,
     moduleUrl: PluginSpec$ReventlessCore.moduleUrl,
-    commandAuthorization: PluginSpec$ReventlessCore.commandAuthorization,
+    authorizationOf: PluginSpec$ReventlessCore.authorizationOf,
     commandTransition: PluginSpec$ReventlessCore.commandTransition,
     traits: PluginSpec$ReventlessCore.traits
   })({

package/src/adapter/CommandGenerator/CommandGeneratorResolvers_GraphQL.res

@@ -83,17 +83,6 @@ let checkPluginStatus = (~field: string): option<JSON.t> =>
   | None => None
   }
 
-// Build a synthetic command value sufficient for evaluating
-// `commandAuthorization`. ReScript variants with record payloads compile to
-// `{TAG: cname, ...payload}` and the PPX-generated switch matches `Ctor(_)`
-// which only checks `command.TAG === cname`. Payload-less constructors
-// compile to bare string literals and the switch matches them with
-// `command === "Cname"`, so the synthetic value must be a bare string in
-// that case — otherwise the wildcard branch (file-level default) wins
-// instead of the per-constructor rule.
-let syntheticCommand = (cname: string, ~hasPayload: bool): unknown =>
-  hasPayload ? {"TAG": cname}->Obj.magic : cname->Obj.magic
-
 let capitalize = s => s->String.charAt(0)->String.toUpperCase ++ s->String.slice(~start=1)
 
 // -- CommandResult SDL types --------------------------------------------------
@@ -139,7 +128,7 @@ let extractVariantSchema = (commandSchema: S.t<unknown>, ~index=0) =>
 // stale `_0` payload arg into the SDL. Looking up by name avoids that.
 let variantIndexForField = (commandSchema: S.t<unknown>, ~field: string): int => {
   let cname = extractCommandName(field)
-  let allNames = Reventless.DcbTag.extractAllVariantNames(commandSchema->Obj.magic)
+  let allNames = Reventless.DcbTag.extractAllVariantNames(commandSchema)
   allNames->Array.indexOf(cname)
 }
 
@@ -188,7 +177,7 @@ let runCommand = async (
 let register = (
   ~fields: array<string>,
   ~commandSchema: S.t<unknown>,
-  ~commandAuthorization: unknown => Reventless.Authorization.permission,
+  ~authorizationOf: string => Reventless.Authorization.permission,
   ~server: ReventlessGraphqlServer.GraphQL_ServerInstance.t,
 ) => {
   ensureCommandResultTypes(server)
@@ -210,13 +199,6 @@ let register = (
   fields->Array.forEach(field => {
     let handlerRef = ref(None)
     handlerRefs->Dict.set(field, handlerRef)
-    // hasPayload is fixed per field — capture once at registration time so
-    // the resolver doesn't re-walk the schema per request.
-    let variantIndex = variantIndexForField(commandSchema, ~field)
-    let hasPayload = switch extractVariantSchema(commandSchema, ~index=variantIndex) {
-    | Object(_) => true
-    | _ => false
-    }
     let commandName = extractCommandName(field)
     let resolver: ReventlessGraphqlServer.GraphQL_ServerInstance.resolverFn = async (
       _root,
@@ -229,7 +211,7 @@ let register = (
         | Some(rejected) => rejected
         | None =>
           let identity = extractIdentity(ctx)
-          let rule = commandAuthorization(syntheticCommand(commandName, ~hasPayload))
+          let rule = authorizationOf(commandName)
           if !Reventless.Authorization.isAllowed(rule, identity) {
             rejectForbidden(~field)
           } else {
@@ -262,7 +244,7 @@ let register = (
 let registerDcb = (
   ~fieldName: string,
   ~commandSchema: S.t<unknown>,
-  ~commandAuthorization: unknown => Reventless.Authorization.permission,
+  ~authorizationOf: string => Reventless.Authorization.permission,
   ~server: ReventlessGraphqlServer.GraphQL_ServerInstance.t,
 ) => {
   ensureCommandResultTypes(server)
@@ -271,7 +253,7 @@ let registerDcb = (
   // constructor (slice name == constructor); a multi-command slice's `Plugin_Ctor`
   // resolves to `Ctor`. Position 0 was previously hardcoded, which dropped every
   // non-first constructor of a multi-command slice.
-  let constructorNames = Reventless.DcbTag.extractAllVariantNames(commandSchema->Obj.magic)
+  let constructorNames = Reventless.DcbTag.extractAllVariantNames(commandSchema)
   let variantIndex = variantIndexForField(commandSchema, ~field=fieldName)
   let variantSchema = extractVariantSchema(
     commandSchema,
@@ -284,7 +266,6 @@ let registerDcb = (
     (
       variantIndex >= 0 ? constructorNames->Array.get(variantIndex) : constructorNames->Array.get(0)
     )->Option.getOr(fieldName)
-  let hasPayload = Reventless.DcbTag.isVariantPayloadBearing(commandSchema->Obj.magic, tag)
 
   let handlerRef = ref(None)
   handlerRefs->Dict.set(fieldName, handlerRef)
@@ -300,7 +281,7 @@ let registerDcb = (
       | Some(rejected) => rejected
       | None =>
         let identity = extractIdentity(ctx)
-        let rule = commandAuthorization(syntheticCommand(tag, ~hasPayload))
+        let rule = authorizationOf(tag)
         if !Reventless.Authorization.isAllowed(rule, identity) {
           rejectForbidden(~field=fieldName)
         } else {

package/src/adapter/CommandGenerator/CommandGeneratorResolvers_GraphQL.res.mjs

@@ -93,16 +93,6 @@ function checkPluginStatus(field) {
   }
 }
 
-function syntheticCommand(cname, hasPayload) {
-  if (hasPayload) {
-    return {
-      TAG: cname
-    };
-  } else {
-    return cname;
-  }
-}
-
 function capitalize(s) {
   return s.charAt(0).toUpperCase() + s.slice(1);
 }
@@ -156,7 +146,7 @@ async function runCommand(generateCommand, payload) {
   }
 }
 
-function register(fields, commandSchema, commandAuthorization, server) {
+function register(fields, commandSchema, authorizationOf, server) {
   server.registerTypes([commandResultSdl]);
   let sdlFields = fields.map(field => {
     let variantIndex = variantIndexForField(commandSchema, field);
@@ -173,10 +163,6 @@ function register(fields, commandSchema, commandAuthorization, server) {
       contents: undefined
     };
     handlerRefs[field] = handlerRef;
-    let variantIndex = variantIndexForField(commandSchema, field);
-    let match = extractVariantSchema(commandSchema, variantIndex);
-    let hasPayload;
-    hasPayload = match.type === "object";
     let commandName = extractCommandName(field);
     let resolver = async (_root, args, ctx) => {
       let generateCommand = handlerRef.contents;
@@ -188,7 +174,7 @@ function register(fields, commandSchema, commandAuthorization, server) {
         return rejected;
       }
       let identity = extractIdentity(ctx);
-      let rule = commandAuthorization(syntheticCommand(commandName, hasPayload));
+      let rule = authorizationOf(commandName);
       if (!Authorization$Reventless.isAllowed(rule, identity)) {
         return rejectForbidden(field);
       }
@@ -210,14 +196,13 @@ function register(fields, commandSchema, commandAuthorization, server) {
   server.registerMutations(sdlFields, resolvers);
 }
 
-function registerDcb(fieldName, commandSchema, commandAuthorization, server) {
+function registerDcb(fieldName, commandSchema, authorizationOf, server) {
   server.registerTypes([commandResultSdl]);
   let constructorNames = DcbTag$Reventless.extractAllVariantNames(commandSchema);
   let variantIndex = variantIndexForField(commandSchema, fieldName);
   let variantSchema = extractVariantSchema(commandSchema, variantIndex >= 0 ? variantIndex : 0);
   let sdlFields = [deriveSdlField(fieldName, variantSchema)];
   let tag = Stdlib_Option.getOr(variantIndex >= 0 ? constructorNames[variantIndex] : constructorNames[0], fieldName);
-  let hasPayload = DcbTag$Reventless.isVariantPayloadBearing(commandSchema, tag);
   let handlerRef = {
     contents: undefined
   };
@@ -232,7 +217,7 @@ function registerDcb(fieldName, commandSchema, commandAuthorization, server) {
       return rejected;
     }
     let identity = extractIdentity(ctx);
-    let rule = commandAuthorization(syntheticCommand(tag, hasPayload));
+    let rule = authorizationOf(tag);
     if (!Authorization$Reventless.isAllowed(rule, identity)) {
       return rejectForbidden(fieldName);
     }
@@ -296,7 +281,6 @@ export {
   resetPluginStatusGate,
   rejectPluginStatus,
   checkPluginStatus,
-  syntheticCommand,
   capitalize,
   commandResultSdl,
   ensureCommandResultTypes,

package/src/adapter/CommandGenerator/InboundTranslationResolvers_GraphQL.res

@@ -1,39 +1,35 @@
-// GraphQL mutation resolvers for in-memory InboundTranslationSlices.
-// Registers one GraphQL mutation field per InboundTranslationSlice.
-// Each resolver calls `receive(argsJson)` directly — the InboundTranslationSlice
-// handles parsing, validation, translation, and command publishing internally.
+// GraphQL mutation resolvers for in-memory InboundTranslationSlices: one field per
+// slice, gated by the door's rule and handing the caller on to `receive`.
 
 @@warning("-44")
 open ReventlessCore
 
-// Mutable registry: fieldName → receive function.
-// Pre-populated synchronously in Phase 1 via a queuing forwarder so callers
-// (e.g. PlatformInspector's onPlatformDeployedHook) can invoke receive before
-// Phase 2 bindReceive runs. Calls park in a Promise queue and drain once bound.
-let receiveRegistry: dict<
-  JSON.t => promise<ReventlessInfra.InboundTranslationSlice.receiveResult>,
-> = Dict.make()
+type receive = (
+  JSON.t,
+  ~caller: Reventless.Identity.t=?,
+) => promise<ReventlessInfra.InboundTranslationSlice.receiveResult>
+
+// fieldName → receive. Pre-populated with a queuing forwarder so a call made
+// before `bindReceive` parks until it runs.
+let receiveRegistry: dict<receive> = Dict.make()
 
 type pendingCall = {
   inputJson: JSON.t,
+  caller: option<Reventless.Identity.t>,
   resolve: ReventlessInfra.InboundTranslationSlice.receiveResult => unit,
 }
 
-// Per-field pending-call queues — drained when bindReceive fires.
 let pendingQueueRegistry: dict<ref<array<pendingCall>>> = Dict.make()
 
-// Phase 1: Register SDL + resolver stub synchronously (before server starts).
-// Also pre-registers a queuing forwarder in receiveRegistry so callers can
-// invoke receive immediately; calls are parked until bindReceive drains them.
+// Phase 1: register SDL + resolver stub synchronously (before server starts).
+// `permission` is the door's rule; without one the field admits nobody.
 let register = (
   ~fieldName: string,
   ~externalInputSchema: S.t<unknown>,
+  ~permission: option<Reventless.Authorization.permission>=?,
   ~server: ReventlessGraphqlServer.GraphQL_ServerInstance.t,
 ) => {
-  // The mutation field returns CommandResult, so its union members must exist in
-  // this scope's document. Registered here rather than relying on a plugin's
-  // command handlers having registered them first — a plugin whose only mutation
-  // is an inbound translation must not depend on registration order.
+  // Registered here, so a plugin whose only mutation is inbound has its result union.
   CommandGeneratorResolvers_GraphQL.ensureCommandResultTypes(server)
 
   let sdlFields = switch GraphQL_FragmentGenerator.deriveMutationFieldFromObject(
@@ -46,28 +42,32 @@ let register = (
   | None => [`  ${fieldName}: CommandResult!`]
   }
 
-  // Queue of pending calls when receive is not yet bound.
   let pendingQueue: ref<array<pendingCall>> = ref([])
   pendingQueueRegistry->Dict.set(fieldName, pendingQueue)
 
-  // Queuing forwarder: parks calls until bindReceive populates receiveRegistry.
-  let queuingReceive = (inputJson: JSON.t) =>
+  let queuingReceive: receive = (inputJson, ~caller=?) =>
     Promise.make((resolve, _reject) => {
-      pendingQueue.contents->Array.push({inputJson, resolve})
+      pendingQueue.contents->Array.push({inputJson, caller, resolve})
     })
   receiveRegistry->Dict.set(fieldName, queuingReceive)
 
   let resolver: ReventlessGraphqlServer.GraphQL_ServerInstance.resolverFn = async (
     _root,
     args,
-    _ctx,
+    ctx,
   ) => {
-    let inputJson: JSON.t = args->Obj.magic
-    let receive = receiveRegistry->Dict.getUnsafe(fieldName)
-    let result = await receive(inputJson)
-    result
-    ->InboundTranslationSlice_Callback.receiveResultToOutcome
-    ->CommandTopic.commandOutcomeToJson
+    let caller = CommandGeneratorResolvers_GraphQL.extractIdentity(ctx)
+    let admitted =
+      permission->Option.mapOr(false, rule => Reventless.Authorization.isAllowed(rule, caller))
+    if !admitted {
+      CommandGeneratorResolvers_GraphQL.rejectForbidden(~field=fieldName)
+    } else {
+      let receive = receiveRegistry->Dict.getUnsafe(fieldName)
+      let result = await receive(args->Obj.magic, ~caller)
+      result
+      ->InboundTranslationSlice_Callback.receiveResultToOutcome
+      ->CommandTopic.commandOutcomeToJson
+    }
   }
 
   let resolvers = Dict.make()
@@ -75,19 +75,15 @@ let register = (
   server.registerMutations(~sdlFields, ~resolvers)
 }
 
-// Phase 2: Bind the real receive function once Output.apply resolves.
-// Replaces the queuing forwarder in receiveRegistry and drains pending calls.
-let bindReceive = (
-  ~fieldName: string,
-  ~receive: JSON.t => promise<ReventlessInfra.InboundTranslationSlice.receiveResult>,
-) => {
+// Phase 2: bind the real receive, replacing the forwarder and draining its queue.
+let bindReceive = (~fieldName: string, ~receive: receive) => {
   receiveRegistry->Dict.set(fieldName, receive)
   switch pendingQueueRegistry->Dict.get(fieldName) {
   | Some(pendingQueue) =>
     let pending = pendingQueue.contents
     pendingQueue.contents = []
-    pending->Array.forEach(({inputJson, resolve}) => {
-      let _ = receive(inputJson)->Promise.thenResolve(result => resolve(result))
+    pending->Array.forEach(({inputJson, caller, resolve}) => {
+      let _ = receive(inputJson, ~caller?)->Promise.thenResolve(result => resolve(result))
     })
   | None => ()
   }

package/src/adapter/CommandGenerator/InboundTranslationResolvers_GraphQL.res.mjs

@@ -1,5 +1,7 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
+import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+import * as Authorization$Reventless from "@reventlessdev/reventless-spec/src/types/Authorization.res.mjs";
 import * as CommandTopic$ReventlessCore from "@reventlessdev/reventless-core/src/components/CommandTopic/CommandTopic.res.mjs";
 import * as GraphQL_FragmentGenerator$ReventlessCore from "@reventlessdev/reventless-core/src/components/Api/GraphQL_FragmentGenerator.res.mjs";
 import * as InboundTranslationSlice_Callback$ReventlessCore from "@reventlessdev/reventless-core/src/components/InboundTranslationSlice/InboundTranslationSlice_Callback.res.mjs";
@@ -9,7 +11,7 @@ let receiveRegistry = {};
 
 let pendingQueueRegistry = {};
 
-function register(fieldName, externalInputSchema, server) {
+function register(fieldName, externalInputSchema, permission, server) {
   CommandGeneratorResolvers_GraphQL$ReventlessLocal.ensureCommandResultTypes(server);
   let field = GraphQL_FragmentGenerator$ReventlessCore.deriveMutationFieldFromObject(fieldName, [], new Set(), externalInputSchema);
   let sdlFields = field !== undefined ? [field] : [`  ` + fieldName + `: CommandResult!`];
@@ -17,16 +19,22 @@ function register(fieldName, externalInputSchema, server) {
     contents: []
   };
   pendingQueueRegistry[fieldName] = pendingQueue;
-  let queuingReceive = inputJson => new Promise((resolve, _reject) => {
+  let queuingReceive = (inputJson, caller) => new Promise((resolve, _reject) => {
     pendingQueue.contents.push({
       inputJson: inputJson,
+      caller: caller,
       resolve: resolve
     });
   });
   receiveRegistry[fieldName] = queuingReceive;
-  let resolver = async (_root, args, _ctx) => {
+  let resolver = async (_root, args, ctx) => {
+    let caller = CommandGeneratorResolvers_GraphQL$ReventlessLocal.extractIdentity(ctx);
+    let admitted = Stdlib_Option.mapOr(permission, false, rule => Authorization$Reventless.isAllowed(rule, caller));
+    if (!admitted) {
+      return CommandGeneratorResolvers_GraphQL$ReventlessLocal.rejectForbidden(fieldName);
+    }
     let receive = receiveRegistry[fieldName];
-    let result = await receive(args);
+    let result = await receive(args, caller);
     return CommandTopic$ReventlessCore.commandOutcomeToJson(InboundTranslationSlice_Callback$ReventlessCore.receiveResultToOutcome(result));
   };
   let resolvers = {};
@@ -44,7 +52,7 @@ function bindReceive(fieldName, receive) {
   pendingQueue.contents = [];
   pending.forEach(param => {
     let resolve = param.resolve;
-    receive(param.inputJson).then(result => resolve(result));
+    receive(param.inputJson, param.caller).then(result => resolve(result));
   });
 }
 
@@ -54,4 +62,4 @@ export {
   register,
   bindReceive,
 }
-/* CommandTopic-ReventlessCore Not a pure module */
+/* Authorization-Reventless Not a pure module */

package/src/adapter/PlatformGraphQL_Server.res

@@ -21,7 +21,7 @@
 // failure, and cannot afford to read it as a session that has ended.
 //
 // Mutations are wrapped (in addition to their per-command
-// `commandAuthorization` rule inside `CommandGeneratorResolvers_GraphQL.register`)
+// `authorizationOf` rule inside `CommandGeneratorResolvers_GraphQL.register`)
 // because the per-command rule defaults to `AllowAuthenticated` and the
 // in-memory adapter falls back to `defaultUser` on missing-bearer requests
 // — without the wrapper, anonymous callers could trigger admin mutations

package/tests/adapter/CommandAuthorizationTest.res

@@ -3,7 +3,7 @@
 // constructor `Add({name})` defaulting to AllowAuthenticated, plus a
 // payload-less `Archive` constrained to AllowRoles([Admin]).
 //
-// The PPX emits a `commandAuthorization` switch at compile time (see
+// The PPX emits an `authorizationOf` switch at compile time (see
 // examples/online-shop-hybrid/catalog/.../Category.res.mjs). This test hand-
 // writes an equivalent switch and feeds it through the live resolver path
 // (CommandGeneratorResolvers_GraphQL.register), so the test covers the same
@@ -25,11 +25,10 @@ type command =
 
 // Matches the shape the PPX emits for `@authorize(AllowRoles([Admin]))` on
 // the payload-less `Archive` constructor with a file-level default.
-let commandAuthorization = (cmd: unknown): Reventless.Authorization.permission =>
-  if (cmd->Obj.magic: 'a) === "Archive" {
-    AllowRoles([Reventless.Role.make("Admin")])
-  } else {
-    AllowAuthenticated
+let authorizationOf = (name: string): Reventless.Authorization.permission =>
+  switch name {
+  | "Archive" => AllowRoles([Reventless.Role.make("Admin")])
+  | _ => AllowAuthenticated
   }
 
 // ── Identity fixtures ────────────────────────────────────────────────────────
@@ -84,7 +83,7 @@ let buildFixture = (~namespace: string) => {
   CommandGeneratorResolvers_GraphQL.register(
     ~fields=[addField, renameField, archiveField],
     ~commandSchema=commandSchema->S.castToUnknown,
-    ~commandAuthorization,
+    ~authorizationOf,
     ~server,
   )
 
@@ -242,7 +241,7 @@ let failingFixture = (~namespace: string, ~failWith: unit => unit) => {
   CommandGeneratorResolvers_GraphQL.register(
     ~fields=[field],
     ~commandSchema=commandSchema->S.castToUnknown,
-    ~commandAuthorization,
+    ~authorizationOf,
     ~server,
   )
   let generateCommand: ReventlessCore.CommandGenerator.commandGenerator = _payload =>

package/tests/adapter/CommandAuthorizationTest.res.mjs

@@ -28,8 +28,8 @@ let commandSchema = Sury.union([
   Sury.literal("Archive")
 ]);
 
-function commandAuthorization(cmd) {
-  if (cmd === "Archive") {
+function authorizationOf(name) {
+  if (name === "Archive") {
     return {
       TAG: "AllowRoles",
       _0: ["Admin"]
@@ -91,7 +91,7 @@ function buildFixture(namespace) {
     addField,
     renameField,
     archiveField
-  ], commandSchema, commandAuthorization, DomainGraphQL_Server$ReventlessLocal.asInterface);
+  ], commandSchema, authorizationOf, DomainGraphQL_Server$ReventlessLocal.asInterface);
   let stubGenerateCommand = payload => Effect.promise(() => {
     calls.contents.push(payload.command);
     return Promise.resolve({
@@ -203,7 +203,7 @@ globalThis.describe("CommandGeneratorResolvers_GraphQL — per-constructor autho
 
 function failingFixture(namespace, failWith) {
   let field = namespace + `_Add`;
-  CommandGeneratorResolvers_GraphQL$ReventlessLocal.register([field], commandSchema, commandAuthorization, DomainGraphQL_Server$ReventlessLocal.asInterface);
+  CommandGeneratorResolvers_GraphQL$ReventlessLocal.register([field], commandSchema, authorizationOf, DomainGraphQL_Server$ReventlessLocal.asInterface);
   let generateCommand = _payload => Effect.promise(() => {
     failWith();
     return Promise.resolve({
@@ -260,7 +260,7 @@ globalThis.describe("CommandGeneratorResolvers_GraphQL — a failure the caller
 
 export {
   commandSchema,
-  commandAuthorization,
+  authorizationOf,
   adminIdentity,
   userIdentity,
   ctxFor,