@reventlessdev/reventless-local 3.0.0-alpha.281 → 3.0.0-alpha.283

package/tests/adapter/InboundTranslationMutationTest.res

@@ -44,16 +44,36 @@ let selection = `__typename
   ... on CommandAccepted { msgId entityId eventCount }
   ... on CommandRejected { msgId errorCode errorDetail }`
 
-let runMutation = async (~status: string) => {
-  let source = `mutation {
-    r: ${fieldName}(paymentId: "pay-1", orderId: "ord-1", status: "${status}") { ${selection} }
-  }`
+let signedIn = (groups): Reventless.Identity.t => {
+  userId: "u-1",
+  username: "alice",
+  groups,
+  provider: InMemory,
+}
+
+let contextOf = (identity: option<Reventless.Identity.t>): JSON.t =>
+  switch identity {
+  | Some(identity) =>
+    Dict.fromArray([
+      ("identity", identity->Reventless.Util_Sury.toJson(Reventless.Identity.schema)),
+    ])->JSON.Encode.object
+  | None => JSON.Encode.null
+  }
+
+let execute = async (~caller, source) =>
   await GraphqlYoga.graphql({
     "schema": DomainGraphQL_Server.composeSchema(),
     "source": source,
-    "contextValue": JSON.Encode.null,
+    "contextValue": contextOf(caller),
   })
-}
+
+let runMutation = async (~status: string) =>
+  await execute(
+    ~caller=Some(signedIn([])),
+    `mutation {
+    r: ${fieldName}(paymentId: "pay-1", orderId: "ord-1", status: "${status}") { ${selection} }
+  }`,
+  )
 
 let errorMessages = (result: GraphqlYoga.executionResult): array<string> =>
   result.errors
@@ -86,13 +106,14 @@ describe("InboundTranslationSlice mutation — response envelope", () => {
     InboundTranslationResolvers_GraphQL.register(
       ~fieldName,
       ~externalInputSchema=PaymentWebhookSpec.externalInputSchema->S.castToUnknown,
+      ~permission=AllowAuthenticated,
       ~server=DomainGraphQL_Server.asInterface,
     )
     DomainGraphQL_Server.resetScope()
 
     InboundTranslationResolvers_GraphQL.bindReceive(
       ~fieldName,
-      ~receive=inputJson => Callback.receive(publishJsons, inputJson),
+      ~receive=(inputJson, ~caller=?) => Callback.receive(publishJsons, inputJson, ~caller?),
     )
   })
 
@@ -140,3 +161,70 @@ describe("InboundTranslationSlice mutation — response envelope", () => {
     expect(fieldLine->Option.map(l => l->String.endsWith(": CommandResult!")))->toEqual(Some(true))
   })
 })
+
+module CatalogFeedTranslation = {
+  let translate = CatalogFeedSpec.translate
+  let moduleUrl = CatalogFeedSpec.moduleUrl
+}
+module CatalogFeedCallback = ReventlessCore.InboundTranslationSlice_Callback.Make(
+  CatalogFeedSpec,
+  CatalogFeedTranslation,
+)
+
+let feedField = "Catalog_CatalogFeed"
+
+let runFeed = async (~caller, ~kind) =>
+  await execute(
+    ~caller,
+    `mutation { r: ${feedField}(kind: "${kind}", id: "x-1") { ${selection} } }`,
+  )
+
+describe("InboundTranslationSlice mutation — the door", () => {
+  beforeEach(() => {
+    DomainGraphQL_Server.asInterface.reset()
+    published.contents = []
+
+    DomainGraphQL_Server.setScope("Catalog")
+    InboundTranslationResolvers_GraphQL.register(
+      ~fieldName=feedField,
+      ~externalInputSchema=CatalogFeedSpec.externalInputSchema->S.castToUnknown,
+      ~permission=?ReventlessCore.Dcb_Builder.inboundDoorPermission(
+        CatalogFeedSpec.commandSchema,
+        CatalogFeedSpec.authorizationOf,
+      ),
+      ~server=DomainGraphQL_Server.asInterface,
+    )
+    DomainGraphQL_Server.resetScope()
+
+    InboundTranslationResolvers_GraphQL.bindReceive(
+      ~fieldName=feedField,
+      ~receive=(inputJson, ~caller=?) =>
+        CatalogFeedCallback.receive(publishJsons, inputJson, ~caller?),
+    )
+  })
+
+  testPromise("a caller holding none of the commands' roles is refused", async () => {
+    let node = payload(await runFeed(~caller=Some(signedIn(["Ops"])), ~kind="product"))
+    expect(node->str("errorCode"))->toEqual(Some("Forbidden"))
+    expect(published.contents->Array.length)->toBe(0)
+  })
+
+  testPromise("an unauthenticated caller is refused", async () => {
+    let node = payload(await runFeed(~caller=None, ~kind="product"))
+    expect(node->str("errorCode"))->toEqual(Some("Forbidden"))
+    expect(published.contents->Array.length)->toBe(0)
+  })
+
+  testPromise("a caller holding a command's role is let through", async () => {
+    let node = payload(await runFeed(~caller=Some(signedIn(["Merchandiser"])), ~kind="product"))
+    expect(node->str("__typename"))->toEqual(Some("CommandAccepted"))
+    expect(published.contents->Array.length)->toBe(1)
+  })
+
+  // The caller reaches `receive`, which refuses the command the door could not see.
+  testPromise("the caller reaches the per-command check", async () => {
+    let node = payload(await runFeed(~caller=Some(signedIn(["Merchandiser"])), ~kind="both"))
+    expect(node->str("errorCode"))->toEqual(Some("Forbidden"))
+    expect(published.contents->Array.length)->toBe(0)
+  })
+})

package/tests/adapter/InboundTranslationMutationTest.res.mjs

@@ -5,6 +5,9 @@ import * as Stdlib_Dict from "@rescript/runtime/lib/es6/Stdlib_Dict.js";
 import * as Stdlib_JSON from "@rescript/runtime/lib/es6/Stdlib_JSON.js";
 import * as Stdlib_JsExn from "@rescript/runtime/lib/es6/Stdlib_JsExn.js";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+import * as Identity$Reventless from "@reventlessdev/reventless-spec/src/types/Identity.res.mjs";
+import * as Util_Sury$Reventless from "@reventlessdev/reventless-spec/src/util/Util_Sury.res.mjs";
+import * as Dcb_Builder$ReventlessCore from "@reventlessdev/reventless-core/src/components/Dcb/Dcb_Builder.res.mjs";
 import * as DomainGraphQL_Server$ReventlessLocal from "../../src/adapter/DomainGraphQL_Server.res.mjs";
 import * as InboundTranslationSliceFixtures$ReventlessLocal from "../components/inboundtranslationslice/InboundTranslationSliceFixtures.res.mjs";
 import * as InboundTranslationSlice_Callback$ReventlessCore from "@reventlessdev/reventless-core/src/components/InboundTranslationSlice/InboundTranslationSlice_Callback.res.mjs";
@@ -26,8 +29,7 @@ let Callback = InboundTranslationSlice_Callback$ReventlessCore.Make({
   commandSchema: InboundTranslationSliceFixtures$ReventlessLocal.PaymentWebhookSpec.commandSchema,
   targetName: InboundTranslationSliceFixtures$ReventlessLocal.PaymentWebhookSpec.targetName,
   externalSystem: InboundTranslationSliceFixtures$ReventlessLocal.PaymentWebhookSpec.externalSystem,
-  commandAuthorization: InboundTranslationSliceFixtures$ReventlessLocal.PaymentWebhookSpec.commandAuthorization,
-  commandTransition: InboundTranslationSliceFixtures$ReventlessLocal.PaymentWebhookSpec.commandTransition
+  authorizationOf: InboundTranslationSliceFixtures$ReventlessLocal.PaymentWebhookSpec.authorizationOf
 })(PaymentWebhookTranslation);
 
 let scope = "Payments";
@@ -46,17 +48,40 @@ let selection = `__typename
   ... on CommandAccepted { msgId entityId eventCount }
   ... on CommandRejected { msgId errorCode errorDetail }`;
 
-async function runMutation(status) {
-  let source = `mutation {
-    r: ` + fieldName + `(paymentId: "pay-1", orderId: "ord-1", status: "` + status + `") { ` + selection + ` }
-  }`;
+function signedIn(groups) {
+  return {
+    userId: "u-1",
+    username: "alice",
+    groups: groups,
+    provider: "InMemory"
+  };
+}
+
+function contextOf(identity) {
+  if (identity !== undefined) {
+    return Object.fromEntries([[
+        "identity",
+        Util_Sury$Reventless.toJson(identity, Identity$Reventless.schema)
+      ]]);
+  } else {
+    return null;
+  }
+}
+
+async function execute(caller, source) {
   return await Graphql.graphql({
     schema: DomainGraphQL_Server$ReventlessLocal.composeSchema(),
     source: source,
-    contextValue: null
+    contextValue: contextOf(caller)
   });
 }
 
+async function runMutation(status) {
+  return await execute(signedIn([]), `mutation {
+    r: ` + fieldName + `(paymentId: "pay-1", orderId: "ord-1", status: "` + status + `") { ` + selection + ` }
+  }`);
+}
+
 function errorMessages(result) {
   return Stdlib_Option.getOr(result.errors, []).map(e => Stdlib_Option.getOr(Stdlib_JsExn.message(e), "unknown error"));
 }
@@ -79,9 +104,9 @@ globalThis.describe("InboundTranslationSlice mutation — response envelope", ()
     published.contents = [];
     Object.keys(Callback.auditLog).forEach(k => Stdlib_Dict.$$delete(Callback.auditLog, k));
     DomainGraphQL_Server$ReventlessLocal.setScope(scope);
-    InboundTranslationResolvers_GraphQL$ReventlessLocal.register(fieldName, InboundTranslationSliceFixtures$ReventlessLocal.PaymentWebhookSpec.externalInputSchema, DomainGraphQL_Server$ReventlessLocal.asInterface);
+    InboundTranslationResolvers_GraphQL$ReventlessLocal.register(fieldName, InboundTranslationSliceFixtures$ReventlessLocal.PaymentWebhookSpec.externalInputSchema, "AllowAuthenticated", DomainGraphQL_Server$ReventlessLocal.asInterface);
     DomainGraphQL_Server$ReventlessLocal.resetScope();
-    InboundTranslationResolvers_GraphQL$ReventlessLocal.bindReceive(fieldName, inputJson => Callback.receive(publishJsons, inputJson));
+    InboundTranslationResolvers_GraphQL$ReventlessLocal.bindReceive(fieldName, (inputJson, caller) => Callback.receive(publishJsons, inputJson, caller));
   });
   globalThis.test("a successful translation resolves as CommandAccepted, with no errors", async () => {
     let result = await runMutation("completed");
@@ -116,6 +141,62 @@ globalThis.describe("InboundTranslationSlice mutation — response envelope", ()
   });
 });
 
+let translate$1 = InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.translate;
+
+let moduleUrl$1 = InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.moduleUrl;
+
+let CatalogFeedTranslation = {
+  translate: translate$1,
+  moduleUrl: moduleUrl$1
+};
+
+let CatalogFeedCallback = InboundTranslationSlice_Callback$ReventlessCore.Make({
+  name: InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.name,
+  moduleUrl: InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.moduleUrl,
+  externalInputSchema: InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.externalInputSchema,
+  commandSchema: InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.commandSchema,
+  targetName: InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.targetName,
+  externalSystem: InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.externalSystem,
+  authorizationOf: InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.authorizationOf
+})(CatalogFeedTranslation);
+
+let feedField = "Catalog_CatalogFeed";
+
+async function runFeed(caller, kind) {
+  return await execute(caller, `mutation { r: ` + feedField + `(kind: "` + kind + `", id: "x-1") { ` + selection + ` } }`);
+}
+
+globalThis.describe("InboundTranslationSlice mutation — the door", () => {
+  globalThis.beforeEach(() => {
+    DomainGraphQL_Server$ReventlessLocal.asInterface.reset();
+    published.contents = [];
+    DomainGraphQL_Server$ReventlessLocal.setScope("Catalog");
+    InboundTranslationResolvers_GraphQL$ReventlessLocal.register(feedField, InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.externalInputSchema, Dcb_Builder$ReventlessCore.inboundDoorPermission(InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.commandSchema, InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.authorizationOf), DomainGraphQL_Server$ReventlessLocal.asInterface);
+    DomainGraphQL_Server$ReventlessLocal.resetScope();
+    InboundTranslationResolvers_GraphQL$ReventlessLocal.bindReceive(feedField, (inputJson, caller) => CatalogFeedCallback.receive(publishJsons, inputJson, caller));
+  });
+  globalThis.test("a caller holding none of the commands' roles is refused", async () => {
+    let node = payload(await runFeed(signedIn(["Ops"]), "product"));
+    globalThis.expect(str(node, "errorCode")).toEqual("Forbidden");
+    globalThis.expect(published.contents.length).toBe(0);
+  });
+  globalThis.test("an unauthenticated caller is refused", async () => {
+    let node = payload(await runFeed(undefined, "product"));
+    globalThis.expect(str(node, "errorCode")).toEqual("Forbidden");
+    globalThis.expect(published.contents.length).toBe(0);
+  });
+  globalThis.test("a caller holding a command's role is let through", async () => {
+    let node = payload(await runFeed(signedIn(["Merchandiser"]), "product"));
+    globalThis.expect(str(node, "__typename")).toEqual("CommandAccepted");
+    globalThis.expect(published.contents.length).toBe(1);
+  });
+  globalThis.test("the caller reaches the per-command check", async () => {
+    let node = payload(await runFeed(signedIn(["Merchandiser"]), "both"));
+    globalThis.expect(str(node, "errorCode")).toEqual("Forbidden");
+    globalThis.expect(published.contents.length).toBe(0);
+  });
+});
+
 export {
   PaymentWebhookTranslation,
   Callback,
@@ -124,10 +205,17 @@ export {
   published,
   publishJsons,
   selection,
+  signedIn,
+  contextOf,
+  execute,
   runMutation,
   errorMessages,
   payload,
   str,
   num,
+  CatalogFeedTranslation,
+  CatalogFeedCallback,
+  feedField,
+  runFeed,
 }
 /* Callback Not a pure module */

package/tests/components/aggregate/AggregateFixtures.res.mjs

@@ -23,7 +23,7 @@ let errorSchema = Sury.literal("AlreadyExists");
 
 let moduleUrl = import.meta.url;
 
-function commandAuthorization(param) {
+function authorizationOf(param) {
   return "AllowAuthenticated";
 }
 
@@ -40,7 +40,7 @@ let ItemSpec = {
   eventSchema: eventSchema,
   errorSchema: errorSchema,
   moduleUrl: moduleUrl,
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits
 };
@@ -97,7 +97,7 @@ let ItemAgg = ItemAggregateMaker.Make({
   errorSchema: errorSchema,
   commandSchema: commandSchema,
   moduleUrl: moduleUrl,
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits
 })(ItemBehavior)(NoEventMappings$ReventlessInfra.Make({

package/tests/components/aggregate/AggregateSelfMappingFixtures.res.mjs

@@ -25,7 +25,7 @@ let errorSchema = Sury.$unit;
 
 let moduleUrl = import.meta.url;
 
-function commandAuthorization(param) {
+function authorizationOf(param) {
   return "AllowAuthenticated";
 }
 
@@ -42,7 +42,7 @@ let ShipmentSpec = {
   eventSchema: eventSchema,
   errorSchema: errorSchema,
   moduleUrl: moduleUrl,
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits
 };
@@ -155,7 +155,7 @@ let ShipmentAgg = ShipmentAggregateMaker.Make({
   errorSchema: errorSchema,
   commandSchema: commandSchema,
   moduleUrl: moduleUrl,
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits
 })(ShipmentBehavior)({

package/tests/components/automationslice/AutomationSliceFixtures.res.mjs

@@ -59,7 +59,7 @@ let commandSchema = Sury.$schema(s => ({
   orderId: s.m(DcbTag$Reventless.string)
 }));
 
-function commandAuthorization(param) {
+function authorizationOf(param) {
   return "AllowAuthenticated";
 }
 
@@ -77,7 +77,7 @@ let ShipOrderSpec = {
   maxRetries: 3,
   heartbeatInterval: 60,
   targetName: "CreateShipment",
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits
 };
@@ -90,7 +90,7 @@ let todoItemSchema$1 = Sury.$schema(s => ({
 
 let commandSchema$1 = Sury.literal("Noop");
 
-function commandAuthorization$1(param) {
+function authorizationOf$1(param) {
   return "AllowAuthenticated";
 }
 
@@ -108,7 +108,7 @@ let SkipProcessSpec = {
   maxRetries: 0,
   heartbeatInterval: 60,
   targetName: "Noop",
-  commandAuthorization: commandAuthorization$1,
+  authorizationOf: authorizationOf$1,
   commandTransition: commandTransition$1,
   traits: traits$1
 };

package/tests/components/automationslice/AutomationSliceSelfDeadlockFixtures.res.mjs

@@ -37,7 +37,7 @@ let commandSchema = Sury.$schema(s => ({
 
 let errorSchema = Sury.literal("AlreadyPlaced");
 
-function commandAuthorization(param) {
+function authorizationOf(param) {
   return "AllowAuthenticated";
 }
 
@@ -55,7 +55,7 @@ let PlaceSpec = {
   consumedEventSchema: consumedEventSchema,
   errorSchema: errorSchema,
   commandSchema: commandSchema,
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits,
   readConsistency: "EscalateOnRetry"
@@ -116,7 +116,7 @@ let commandSchema$1 = Sury.$schema(s => ({
 
 let errorSchema$1 = Sury.literal("NotPlaced");
 
-function commandAuthorization$1(param) {
+function authorizationOf$1(param) {
   return "AllowAuthenticated";
 }
 
@@ -134,7 +134,7 @@ let ShipSpec = {
   consumedEventSchema: consumedEventSchema$1,
   errorSchema: errorSchema$1,
   commandSchema: commandSchema$1,
-  commandAuthorization: commandAuthorization$1,
+  authorizationOf: authorizationOf$1,
   commandTransition: commandTransition$1,
   traits: traits$1,
   readConsistency: "EscalateOnRetry"
@@ -225,7 +225,7 @@ let commandSchema$2 = Sury.$schema(s => ({
   orderId: s.m(DcbTag$Reventless.string)
 }));
 
-function commandAuthorization$2(param) {
+function authorizationOf$2(param) {
   return "AllowAuthenticated";
 }
 
@@ -243,7 +243,7 @@ let AutoShipSpec = {
   maxRetries: 3,
   heartbeatInterval: 60,
   targetName: "Ship",
-  commandAuthorization: commandAuthorization$2,
+  authorizationOf: authorizationOf$2,
   commandTransition: commandTransition$2,
   traits: traits$2
 };
@@ -362,7 +362,7 @@ let PlaceMaker = StateChangeSlice_Builder$ReventlessLocal.Make({
   errorSchema: errorSchema,
   eventSchema: eventSchema,
   commandSchema: commandSchema,
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits,
   readConsistency: "EscalateOnRetry"
@@ -382,7 +382,7 @@ let ShipMaker = StateChangeSlice_Builder$ReventlessLocal.Make({
   errorSchema: errorSchema$1,
   eventSchema: eventSchema$1,
   commandSchema: commandSchema$1,
-  commandAuthorization: commandAuthorization$1,
+  authorizationOf: authorizationOf$1,
   commandTransition: commandTransition$1,
   traits: traits$1,
   readConsistency: "EscalateOnRetry"

package/tests/components/automationslice/MixedSourceAutomationSliceFixtures.res.mjs

@@ -64,7 +64,7 @@ let commandSchema = Sury.$schema(s => ({
   productId: s.m(DcbTag$Reventless.string)
 }));
 
-function commandAuthorization(param) {
+function authorizationOf(param) {
   return "AllowAuthenticated";
 }
 
@@ -82,7 +82,7 @@ let AutoFulfillSpec = {
   maxRetries: 3,
   heartbeatInterval: 60,
   targetName: "MarkFulfilled",
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits
 };

package/tests/components/commandgenerator/CommandGeneratorFixtures.res.mjs

@@ -24,7 +24,7 @@ let errorSchema = Sury.literal("CGAlreadyExists");
 
 let moduleUrl = import.meta.url;
 
-function commandAuthorization(param) {
+function authorizationOf(param) {
   return "AllowAuthenticated";
 }
 
@@ -41,7 +41,7 @@ let CGSpec = {
   eventSchema: eventSchema,
   errorSchema: errorSchema,
   moduleUrl: moduleUrl,
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits
 };
@@ -89,7 +89,7 @@ let CGMaker = CommandGenerator_Builder$ReventlessCore.Make({
   errorSchema: errorSchema,
   commandSchema: commandSchema,
   moduleUrl: moduleUrl,
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits
 })(LocalCommandGeneratorResolvers$ReventlessLocal);

package/tests/components/commandtopic/CommandTopicFixtures.res.mjs

@@ -29,7 +29,7 @@ let errorSchema = Sury.literal("AlreadyExists");
 
 let moduleUrl = import.meta.url;
 
-function commandAuthorization(param) {
+function authorizationOf(param) {
   return "AllowAuthenticated";
 }
 
@@ -46,7 +46,7 @@ let ItemSpec = {
   eventSchema: eventSchema,
   errorSchema: errorSchema,
   moduleUrl: moduleUrl,
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits
 };

package/tests/components/commandtopic/CommandTopicStreamFixtures.res.mjs

@@ -31,7 +31,7 @@ let errorSchema = Sury.literal("AlreadyExists");
 
 let moduleUrl = import.meta.url;
 
-function commandAuthorization(param) {
+function authorizationOf(param) {
   return "AllowAuthenticated";
 }
 
@@ -48,7 +48,7 @@ let ItemSpec = {
   eventSchema: eventSchema,
   errorSchema: errorSchema,
   moduleUrl: moduleUrl,
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits
 };

package/tests/components/dcb/DcbCrossPartitionFixtures.res.mjs

@@ -68,7 +68,7 @@ let errorSchema = Sury.union([
   Sury.literal("CategoryNotFound")
 ]);
 
-function commandAuthorization(param) {
+function authorizationOf(param) {
   return "AllowAuthenticated";
 }
 
@@ -86,7 +86,7 @@ let AddProductSpec = {
   consumedEventSchema: consumedEventSchema,
   errorSchema: errorSchema,
   commandSchema: commandSchema,
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits,
   readConsistency: "EscalateOnRetry"
@@ -177,7 +177,7 @@ let AddProductMaker = StateChangeSlice_Builder$ReventlessLocal.Make({
   errorSchema: errorSchema,
   eventSchema: eventSchema$1,
   commandSchema: commandSchema,
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits,
   readConsistency: "EscalateOnRetry"

package/tests/components/dcb/DcbFixtures.res.mjs

@@ -45,7 +45,7 @@ let commandSchema = Sury.$schema(s => ({
 
 let errorSchema = Sury.literal("ItemAlreadyExists");
 
-function commandAuthorization(param) {
+function authorizationOf(param) {
   return "AllowAuthenticated";
 }
 
@@ -63,7 +63,7 @@ let AddItemSpec = {
   consumedEventSchema: consumedEventSchema,
   errorSchema: errorSchema,
   commandSchema: commandSchema,
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits,
   readConsistency: "EscalateOnRetry"
@@ -129,7 +129,7 @@ let AddItemMaker = StateChangeSlice_Builder$ReventlessLocal.Make({
   errorSchema: errorSchema,
   eventSchema: eventSchema$1,
   commandSchema: commandSchema,
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits,
   readConsistency: "EscalateOnRetry"

package/tests/components/extensionpoint/ExtensionPointFixtures.res.mjs

@@ -25,7 +25,7 @@ let directiveSchema = Sury.literal("TEPNoDirective");
 
 let moduleUrl = import.meta.url;
 
-function commandAuthorization(param) {
+function authorizationOf(param) {
   return "AllowAuthenticated";
 }
 
@@ -41,7 +41,7 @@ let TestEPSpec = {
   eventSchema: eventSchema,
   directiveSchema: directiveSchema,
   moduleUrl: moduleUrl,
-  commandAuthorization: commandAuthorization,
+  authorizationOf: authorizationOf,
   commandTransition: commandTransition,
   traits: traits
 };
@@ -62,7 +62,7 @@ let errorSchema = Sury.literal("TEAggNoError");
 
 let moduleUrl$1 = import.meta.url;
 
-function commandAuthorization$1(param) {
+function authorizationOf$1(param) {
   return "AllowAuthenticated";
 }
 
@@ -79,7 +79,7 @@ let DelegateAggSpec = {
   eventSchema: eventSchema$1,
   errorSchema: errorSchema,
   moduleUrl: moduleUrl$1,
-  commandAuthorization: commandAuthorization$1,
+  authorizationOf: authorizationOf$1,
   commandTransition: commandTransition$1,
   traits: traits$1
 };
@@ -137,7 +137,7 @@ let TestEPMapping1 = ExtensionPointMapping$ReventlessInfra.Make({
     errorSchema: errorSchema,
     commandSchema: commandSchema$1,
     moduleUrl: moduleUrl$1,
-    commandAuthorization: commandAuthorization$1,
+    authorizationOf: authorizationOf$1,
     commandTransition: commandTransition$1,
     traits: traits$1
   },