@reventlessdev/reventless-local 3.0.0-alpha.297 → 3.0.0-alpha.299

package/src/capability/Capability_IdentityProvider_UserStore.res

@@ -56,9 +56,13 @@ let make = (~path: option<string>=?, ()): IdentityProvider.t => {
     | Ok(username) if LocalAuth.Login.credentialsOf(~username)->Option.isSome => Error(Conflict)
     | Ok(username) =>
       let password = passwordOf(credential)
+      // Minted here, never the username: the id reaches the event log as
+      // `meta.user` and every `@owner` field, and a log keyed by login names
+      // cannot survive a rename or a move to another provider.
+      let userId = ReventlessCore.Auth_UserId.mint()
       switch AccountsManifest.editFile(
         ~path=file(),
-        ~edits=[Append({username, password, groups})],
+        ~edits=[Append({username, password, groups, userId})],
       ) {
       | Error(message) if message->String.endsWith("already declared in the manifest") =>
         Error(Conflict)
@@ -67,7 +71,7 @@ let make = (~path: option<string>=?, ()): IdentityProvider.t => {
         LocalAuth.Login.setCredentials(
           ~username,
           ~password,
-          ~identity=identityOf(~username, ~groups),
+          ~identity={...identityOf(~username, ~groups), userId},
         )
         Ok({IdentityProvider.providerId: username})
       }

package/src/capability/Capability_IdentityProvider_UserStore.res.mjs

@@ -3,6 +3,7 @@
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Primitive_object from "@rescript/runtime/lib/es6/Primitive_object.js";
 import * as LocalAuth$ReventlessLocal from "../adapter/Auth/LocalAuth.res.mjs";
+import * as Auth_UserId$ReventlessCore from "@reventlessdev/reventless-core/src/adapter/Auth/Auth_UserId.res.mjs";
 import * as AccountsManifest$Reventless from "@reventlessdev/reventless-spec/src/types/AccountsManifest.res.mjs";
 import * as IdentityProvider$Reventless from "@reventlessdev/reventless-spec/src/semantic/IdentityProvider.res.mjs";
 
@@ -60,16 +61,19 @@ function make(path, param) {
       };
     }
     let password = passwordOf(credential);
+    let userId = Auth_UserId$ReventlessCore.mint();
     let message = AccountsManifest$Reventless.editFile(Stdlib_Option.getOr(path, AccountsManifest$Reventless.defaultPath()), [{
         TAG: "Append",
         _0: {
           username: username,
           password: password,
-          groups: groups
+          groups: groups,
+          userId: userId
         }
       }]);
     if (message.TAG === "Ok") {
-      LocalAuth$ReventlessLocal.Login.setCredentials(username, password, identityOf(username, groups));
+      let newrecord = {...identityOf(username, groups)};
+      LocalAuth$ReventlessLocal.Login.setCredentials(username, password, (newrecord.userId = userId, newrecord));
       return {
         TAG: "Ok",
         _0: {

package/src/components/InboundTranslationSlice_Builder.res

@@ -15,6 +15,7 @@ module Make = (Bus: LocalBus.T) => {
     QueryDbStorage,
     QueryDbResolvers,
     Api,
+    LocalCapabilities,
   )
 
   module Make = (

package/src/components/InboundTranslationSlice_Builder.res.mjs

@@ -2,6 +2,7 @@
 
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Component$ReventlessCore from "@reventlessdev/reventless-core/src/components/Component.res.mjs";
+import * as LocalCapabilities$ReventlessLocal from "../adapter/LocalCapabilities.res.mjs";
 import * as LocalQueryDbStorage$ReventlessLocal from "../adapter/QueryDb/LocalQueryDbStorage.res.mjs";
 import * as LocalWebhookRegistry$ReventlessLocal from "../adapter/Webhook/LocalWebhookRegistry.res.mjs";
 import * as QueryDbResolvers_GraphQL$ReventlessLocal from "../adapter/QueryDb/QueryDbResolvers_GraphQL.res.mjs";
@@ -21,7 +22,9 @@ function Make(Bus) {
     make: QueryDbStorage.make
   })({
     make: QueryDbResolvers.make
-  })(Api);
+  })(Api)({
+    capabilities: LocalCapabilities$ReventlessLocal.capabilities
+  });
   let Make$1 = Spec => (Translation => {
     let Inner = CoreMaker.Make(Spec)(Translation);
     let make = (publishJsons, runtime, opts) => {

package/tests/EmitCapabilitiesTest.res

@@ -5,14 +5,12 @@ open JestGlobals
 
 describe("EmitCapabilities.parseArgs", () => {
   testSync("a plugin's postbuild: emit-capabilities src/", () =>
-    expect(EmitCapabilities.parseArgs(["src/"]))->toEqual(
-      Ok({EmitCapabilities.srcDir: "src/", compositionModule: None}),
-    )
+    expect(EmitCapabilities.parseArgs(["src/"]))->toEqual(Ok({EmitCapabilities.srcDir: "src/"}))
   )
 
   testSync("a hand-written composition root is named after the source directory", () =>
     expect(EmitCapabilities.parseArgs(["src", "Catalog"]))->toEqual(
-      Ok({EmitCapabilities.srcDir: "src", compositionModule: Some("Catalog")}),
+      Ok({EmitCapabilities.srcDir: "src", compositionModule: "Catalog"}),
     )
   )
 
@@ -29,7 +27,7 @@ describe("emit-capabilities on the command line", () => {
     expect(await CliArgs.observe(EmitCapabilities.cli, ["src/", "--help"]))->toEqual({
       CliArgs.stdout: [usage],
       stderr: [],
-      exitCode: Some(0),
+      exitCode: 0,
       reachedMain: false,
     })
   )
@@ -38,7 +36,7 @@ describe("emit-capabilities on the command line", () => {
     expect(await CliArgs.observe(EmitCapabilities.cli, ["src", "Catalog", "extra"]))->toEqual({
       CliArgs.stdout: [],
       stderr: [`emit-capabilities: unknown argument "extra"\n\n${usage}`],
-      exitCode: Some(2),
+      exitCode: 2,
       reachedMain: false,
     })
   )

package/tests/EmitCapabilitiesTest.res.mjs

@@ -9,8 +9,7 @@ globalThis.describe("EmitCapabilities.parseArgs", () => {
     globalThis.expect(EmitCapabilities$ReventlessLocal.parseArgs(["src/"])).toEqual({
       TAG: "Ok",
       _0: {
-        srcDir: "src/",
-        compositionModule: undefined
+        srcDir: "src/"
       }
     });
   });

package/tests/HostShellDistTest.res.mjs

@@ -53,7 +53,7 @@ globalThis.describe("the local writers in a chosen assetsDir", () => {
     let bake = {
       components: bake_components
     };
-    ShellConfig$ReventlessLocal.emit(bake, undefined, undefined, dir);
+    ShellConfig$ReventlessLocal.emit(bake, undefined, undefined, undefined, dir);
     UiHints$ReventlessLocal.emit(source("ui-hints.json"), dir);
     UiSlots$ReventlessLocal.emit(source("slots.js"), dir);
     BakedManifest$ReventlessLocal.emit([], bake, dir);

package/tests/LocalPlatformRegistryTest.res

@@ -17,8 +17,8 @@ let tempRoot = (): string =>
 // rather than hitting an unrelated process that happens to be running.
 let deadPid = 2147483646
 
-let sqliteStore = (path): LocalPlatformRegistry.store => {kind: "sqlite", path: Some(path)}
-let memoryStore: LocalPlatformRegistry.store = {kind: "memory", path: None}
+let sqliteStore = (path): LocalPlatformRegistry.store => {kind: "sqlite", path}
+let memoryStore: LocalPlatformRegistry.store = {kind: "memory"}
 
 let writeAt = (~cwd, ~port, ~store, ~pid=NodeProcess.pid) =>
   LocalPlatformRegistry.write(
@@ -127,9 +127,7 @@ describe("LocalSeedTarget.storePath", () => {
 
     expect(target(memoryStore)->reason->String.includes("in memory"))->toEqual(true)
     expect(target(memoryStore)->reason->String.includes("localhost:4000"))->toEqual(true)
-    expect(
-      target({kind: "postgres", path: None})->reason->String.includes("off this machine"),
-    )->toEqual(true)
+    expect(target({kind: "postgres"})->reason->String.includes("off this machine"))->toEqual(true)
     expect(
       {
         endpoint: "http://localhost:4000/graphql",

package/tests/LocalPlatformRegistryTest.res.mjs

@@ -19,8 +19,7 @@ function sqliteStore(path) {
 }
 
 let memoryStore = {
-  kind: "memory",
-  path: undefined
+  kind: "memory"
 };
 
 function writeAt(cwd, port, store, pidOpt) {
@@ -129,8 +128,7 @@ globalThis.describe("LocalSeedTarget.storePath", () => {
     globalThis.expect(reason(target(memoryStore)).includes("in memory")).toEqual(true);
     globalThis.expect(reason(target(memoryStore)).includes("localhost:4000")).toEqual(true);
     globalThis.expect(reason(target({
-      kind: "postgres",
-      path: undefined
+      kind: "postgres"
     })).includes("off this machine")).toEqual(true);
     globalThis.expect(reason({
       endpoint: "http://localhost:4000/graphql",

package/tests/LocalPlatformStartTest.res

@@ -10,8 +10,8 @@ let tempRoot = (): string =>
 
 let deadPid = 2147483646
 
-let sqliteStore = (path): LocalPlatformRegistry.store => {kind: "sqlite", path: Some(path)}
-let memoryStore: LocalPlatformRegistry.store = {kind: "memory", path: None}
+let sqliteStore = (path): LocalPlatformRegistry.store => {kind: "sqlite", path}
+let memoryStore: LocalPlatformRegistry.store = {kind: "memory"}
 
 let writeAt = (~cwd, ~port, ~store, ~pid=NodeProcess.pid) =>
   LocalPlatformRegistry.write(

package/tests/LocalPlatformStartTest.res.mjs

@@ -23,8 +23,7 @@ function sqliteStore(path) {
 }
 
 let memoryStore = {
-  kind: "memory",
-  path: undefined
+  kind: "memory"
 };
 
 function writeAt(cwd, port, store, pidOpt) {

package/tests/ShellConfigTest.res.mjs

@@ -37,14 +37,14 @@ function threw(f) {
 
 globalThis.describe("ShellConfig.overlay", () => {
   globalThis.test("carries only the environment when the deployment declares nothing", () => {
-    let out = ShellConfig$ReventlessLocal.overlay(undefined, undefined, undefined);
+    let out = ShellConfig$ReventlessLocal.overlay(undefined, undefined, undefined, undefined);
     globalThis.expect(Object.keys(out)).toEqual([
       "environment",
       "environmentPurpose"
     ]);
   });
   globalThis.test("names the environment and its purpose local", () => {
-    let out = ShellConfig$ReventlessLocal.overlay(undefined, undefined, undefined);
+    let out = ShellConfig$ReventlessLocal.overlay(undefined, undefined, undefined, undefined);
     globalThis.expect([
       str(out, "environment"),
       str(out, "environmentPurpose")
@@ -61,18 +61,18 @@ globalThis.describe("ShellConfig.overlay", () => {
       ShellConfig$ReventlessLocal.overlay(undefined, undefined, Object.fromEntries([[
           key,
           "prod"
-        ]]));
+        ]]), undefined);
     }))).toEqual([
       true,
       true
     ]);
   });
   globalThis.test("points manifestUrl at the bake's default key", () => {
-    let out = ShellConfig$ReventlessLocal.overlay(manifest(undefined), undefined, undefined);
+    let out = ShellConfig$ReventlessLocal.overlay(manifest(undefined), undefined, undefined, undefined);
     globalThis.expect(str(out, "manifestUrl")).toEqual("/component-manifest.json");
   });
   globalThis.test("follows a renamed bake", () => {
-    let out = ShellConfig$ReventlessLocal.overlay(manifest("storefront.json"), undefined, undefined);
+    let out = ShellConfig$ReventlessLocal.overlay(manifest("storefront.json"), undefined, undefined, undefined);
     globalThis.expect(str(out, "manifestUrl")).toEqual("/storefront.json");
   });
   globalThis.test("passes the deployment's own keys through verbatim", () => {
@@ -85,7 +85,7 @@ globalThis.describe("ShellConfig.overlay", () => {
         "elevatedGroups",
         ["Admin"].map(prim => prim)
       ]
-    ]));
+    ]), undefined);
     globalThis.expect(str(out, "appName")).toEqual("Online Shop");
     globalThis.expect(Stdlib_Option.isSome(out["elevatedGroups"])).toBe(true);
   });
@@ -94,22 +94,22 @@ globalThis.describe("ShellConfig.overlay", () => {
       ShellConfig$ReventlessLocal.overlay(manifest(undefined), undefined, Object.fromEntries([[
           "manifestUrl",
           "/elsewhere.json"
-        ]]));
+        ]]), undefined);
     })).toBe(true);
   });
 });
 
 globalThis.describe("ShellConfig.overlay — uiSlotsFile", () => {
   globalThis.test("unset ⇒ no uiSlotsUrl", () => {
-    let out = ShellConfig$ReventlessLocal.overlay(undefined, undefined, undefined);
+    let out = ShellConfig$ReventlessLocal.overlay(undefined, undefined, undefined, undefined);
     globalThis.expect(Stdlib_Option.isNone(out["uiSlotsUrl"])).toBe(true);
   });
   globalThis.test("declared ⇒ the URL the platform serves the module from", () => {
-    let out = ShellConfig$ReventlessLocal.overlay(undefined, "/src/storefront-slots.js", undefined);
+    let out = ShellConfig$ReventlessLocal.overlay(undefined, "/src/storefront-slots.js", undefined, undefined);
     globalThis.expect(out["uiSlotsUrl"]).toEqual("/ui-slots.js");
   });
   globalThis.test("withdrawn ⇒ the overlay stops naming it, so the baseline restores", () => {
-    let out = ShellConfig$ReventlessLocal.overlay(undefined, undefined, undefined);
+    let out = ShellConfig$ReventlessLocal.overlay(undefined, undefined, undefined, undefined);
     globalThis.expect(Object.keys(out).includes("uiSlotsUrl")).toBe(false);
   });
   globalThis.test("refuses a shellConfig key redirecting the computed module", () => {
@@ -117,7 +117,7 @@ globalThis.describe("ShellConfig.overlay — uiSlotsFile", () => {
       ShellConfig$ReventlessLocal.overlay(undefined, "/src/storefront-slots.js", Object.fromEntries([[
           "uiSlotsUrl",
           "/elsewhere.js"
-        ]]));
+        ]]), undefined);
     })).toBe(true);
   });
 });
@@ -137,14 +137,14 @@ globalThis.describe("ShellConfig.emit", () => {
     ]]);
   globalThis.test("merges the overlay onto the shipped file and keeps its other keys", () => {
     let dir = distWithConfig();
-    ShellConfig$ReventlessLocal.emit(manifest(undefined), undefined, undefined, dir);
+    ShellConfig$ReventlessLocal.emit(manifest(undefined), undefined, undefined, undefined, dir);
     let out = readConfig(dir);
     globalThis.expect(str(out, "manifestUrl")).toEqual("/component-manifest.json");
     globalThis.expect(str(out, "apiEndpoint")).toEqual("/graphql");
   });
   globalThis.test("adds only the environment for a platform that declares nothing", () => {
     let dir = distWithConfig();
-    ShellConfig$ReventlessLocal.emit(undefined, undefined, undefined, dir);
+    ShellConfig$ReventlessLocal.emit(undefined, undefined, undefined, undefined, dir);
     let out = readConfig(dir);
     globalThis.expect(Object.keys(out)).toEqual([
       "apiEndpoint",
@@ -156,27 +156,27 @@ globalThis.describe("ShellConfig.emit", () => {
   });
   globalThis.test("writes nothing and refuses nothing when only the environment has no baseline", () => {
     let dir = Nodefs.mkdtempSync(Nodepath.join(Nodeos.tmpdir(), "reventless-shellconfig-"));
-    ShellConfig$ReventlessLocal.emit(undefined, undefined, undefined, dir);
+    ShellConfig$ReventlessLocal.emit(undefined, undefined, undefined, undefined, dir);
     globalThis.expect(Nodefs.readdirSync(dir, {})).toEqual([]);
   });
   globalThis.test("starts every boot from the shipped file, not the last output", () => {
     let dir = distWithConfig();
-    ShellConfig$ReventlessLocal.emit(undefined, undefined, named("First"), dir);
-    ShellConfig$ReventlessLocal.emit(undefined, undefined, named("Second"), dir);
+    ShellConfig$ReventlessLocal.emit(undefined, undefined, named("First"), undefined, dir);
+    ShellConfig$ReventlessLocal.emit(undefined, undefined, named("Second"), undefined, dir);
     globalThis.expect(str(readConfig(dir), "appName")).toEqual("Second");
     globalThis.expect(str(readBaseline(dir), "appName")).toEqual("Shipped");
   });
   globalThis.test("restores the shipped file once the declaration is withdrawn", () => {
     let dir = distWithConfig();
-    ShellConfig$ReventlessLocal.emit(manifest(undefined), undefined, undefined, dir);
-    ShellConfig$ReventlessLocal.emit(undefined, undefined, undefined, dir);
+    ShellConfig$ReventlessLocal.emit(manifest(undefined), undefined, undefined, undefined, dir);
+    ShellConfig$ReventlessLocal.emit(undefined, undefined, undefined, undefined, dir);
     let out = readConfig(dir);
     globalThis.expect(out["manifestUrl"]).toEqual(undefined);
     globalThis.expect(str(out, "appName")).toEqual("Shipped");
   });
   globalThis.test("refuses to overlay a dist that ships no config.json", () => {
     let dir = Nodefs.mkdtempSync(Nodepath.join(Nodeos.tmpdir(), "reventless-shellconfig-"));
-    globalThis.expect(threw(() => ShellConfig$ReventlessLocal.emit(manifest(undefined), undefined, undefined, dir))).toBe(true);
+    globalThis.expect(threw(() => ShellConfig$ReventlessLocal.emit(manifest(undefined), undefined, undefined, undefined, dir))).toBe(true);
   });
 });
 
@@ -218,22 +218,22 @@ let fulfilment = {
 
 globalThis.describe("ShellConfig.overlay — journeys", () => {
   globalThis.test("a bake declaring no journeys writes no map", () => {
-    let out = ShellConfig$ReventlessLocal.overlay(manifest(undefined), undefined, undefined);
+    let out = ShellConfig$ReventlessLocal.overlay(manifest(undefined), undefined, undefined, undefined);
     globalThis.expect(out["journeyManifestUrls"]).toEqual(undefined);
   });
   globalThis.test("an empty journeys array is the same as none", () => {
-    let out = ShellConfig$ReventlessLocal.overlay(withJourneys([]), undefined, undefined);
+    let out = ShellConfig$ReventlessLocal.overlay(withJourneys([]), undefined, undefined, undefined);
     globalThis.expect(out["journeyManifestUrls"]).toEqual(undefined);
   });
   globalThis.test("keeps manifestUrl as the default journey", () => {
-    let out = ShellConfig$ReventlessLocal.overlay(withJourneys([shopper]), undefined, undefined);
+    let out = ShellConfig$ReventlessLocal.overlay(withJourneys([shopper]), undefined, undefined, undefined);
     globalThis.expect(str(out, "manifestUrl")).toEqual("/component-manifest.json");
   });
   globalThis.test("maps each declared group to its own file", () => {
     let out = ShellConfig$ReventlessLocal.overlay(withJourneys([
       shopper,
       fulfilment
-    ]), undefined, undefined);
+    ]), undefined, undefined, undefined);
     let map = Stdlib_Option.getOrThrow(Stdlib_Option.flatMap(out["journeyManifestUrls"], Stdlib_JSON.Decode.object), undefined);
     globalThis.expect([
       str(map, "Shopper"),
@@ -248,7 +248,7 @@ globalThis.describe("ShellConfig.overlay — journeys", () => {
       ShellConfig$ReventlessLocal.overlay(withJourneys([shopper]), undefined, Object.fromEntries([[
           "journeyManifestUrls",
           {}
-        ]]));
+        ]]), undefined);
     })).toBe(true);
   });
 });
@@ -256,7 +256,7 @@ globalThis.describe("ShellConfig.overlay — journeys", () => {
 globalThis.describe("ShellConfig.overlay — adminGroup", () => {
   globalThis.test("is absent while the administrator role keeps its own name", () => {
     Role$Reventless.clearGroups();
-    globalThis.expect(ShellConfig$ReventlessLocal.overlay(undefined, undefined, undefined)["adminGroup"]).toEqual(undefined);
+    globalThis.expect(ShellConfig$ReventlessLocal.overlay(undefined, undefined, undefined, undefined)["adminGroup"]).toEqual(undefined);
   });
   globalThis.test("carries the group a renamed administrator role maps to", () => {
     Role$Reventless.clearGroups();
@@ -264,7 +264,7 @@ globalThis.describe("ShellConfig.overlay — adminGroup", () => {
         Role$Reventless.admin,
         "shop-admins"
       ]]);
-    let out = ShellConfig$ReventlessLocal.overlay(undefined, undefined, undefined);
+    let out = ShellConfig$ReventlessLocal.overlay(undefined, undefined, undefined, undefined);
     Role$Reventless.clearGroups();
     globalThis.expect(str(out, "adminGroup")).toEqual("shop-admins");
   });
@@ -273,7 +273,7 @@ globalThis.describe("ShellConfig.overlay — adminGroup", () => {
       ShellConfig$ReventlessLocal.overlay(undefined, undefined, Object.fromEntries([[
           "adminGroup",
           "x"
-        ]]));
+        ]]), undefined);
     })).toBe(true);
   });
 });

package/tests/adapter/InboundTranslationMutationTest.res

@@ -118,7 +118,13 @@ describe("InboundTranslationSlice mutation — response envelope", () => {
 
     InboundTranslationResolvers_GraphQL.bindReceive(
       ~fieldName,
-      ~receive=(inputJson, ~caller=?) => Callback.receive(publishJsons, inputJson, ~caller?),
+      ~receive=(inputJson, ~caller=?) =>
+        Callback.receive(
+          publishJsons,
+          inputJson,
+          ~capabilities=Reventless.Capabilities.none,
+          ~caller?,
+        ),
     )
   })
 
@@ -221,7 +227,12 @@ describe("InboundTranslationSlice mutation — the door", () => {
     InboundTranslationResolvers_GraphQL.bindReceive(
       ~fieldName=feedField,
       ~receive=(inputJson, ~caller=?) =>
-        CatalogFeedCallback.receive(publishJsons, inputJson, ~caller?),
+        CatalogFeedCallback.receive(
+          publishJsons,
+          inputJson,
+          ~capabilities=Reventless.Capabilities.none,
+          ~caller?,
+        ),
     )
   })
 

package/tests/adapter/InboundTranslationMutationTest.res.mjs

@@ -8,6 +8,7 @@ import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Primitive_string from "@rescript/runtime/lib/es6/Primitive_string.js";
 import * as Identity$Reventless from "@reventlessdev/reventless-spec/src/types/Identity.res.mjs";
 import * as Util_Sury$Reventless from "@reventlessdev/reventless-spec/src/util/Util_Sury.res.mjs";
+import * as Capabilities$Reventless from "@reventlessdev/reventless-spec/src/semantic/Capabilities.res.mjs";
 import * as Dcb_Builder$ReventlessCore from "@reventlessdev/reventless-core/src/components/Dcb/Dcb_Builder.res.mjs";
 import * as DomainGraphQL_Server$ReventlessLocal from "../../src/adapter/DomainGraphQL_Server.res.mjs";
 import * as InboundTranslationSliceFixtures$ReventlessLocal from "../components/inboundtranslationslice/InboundTranslationSliceFixtures.res.mjs";
@@ -31,7 +32,8 @@ let Callback = InboundTranslationSlice_Callback$ReventlessCore.Make({
   targetName: InboundTranslationSliceFixtures$ReventlessLocal.PaymentWebhookSpec.targetName,
   externalSystem: InboundTranslationSliceFixtures$ReventlessLocal.PaymentWebhookSpec.externalSystem,
   authorizationOf: InboundTranslationSliceFixtures$ReventlessLocal.PaymentWebhookSpec.authorizationOf,
-  endpoint: InboundTranslationSliceFixtures$ReventlessLocal.PaymentWebhookSpec.endpoint
+  endpoint: InboundTranslationSliceFixtures$ReventlessLocal.PaymentWebhookSpec.endpoint,
+  capabilityNeeds: InboundTranslationSliceFixtures$ReventlessLocal.PaymentWebhookSpec.capabilityNeeds
 })(PaymentWebhookTranslation);
 
 let scope = "Payments";
@@ -113,7 +115,7 @@ globalThis.describe("InboundTranslationSlice mutation — response envelope", ()
     DomainGraphQL_Server$ReventlessLocal.setScope(scope);
     InboundTranslationResolvers_GraphQL$ReventlessLocal.register(fieldName, InboundTranslationSliceFixtures$ReventlessLocal.PaymentWebhookSpec.externalInputSchema, "AllowAuthenticated", DomainGraphQL_Server$ReventlessLocal.asInterface);
     DomainGraphQL_Server$ReventlessLocal.resetScope();
-    InboundTranslationResolvers_GraphQL$ReventlessLocal.bindReceive(fieldName, (inputJson, caller) => Callback.receive(publishJsons, inputJson, caller, undefined));
+    InboundTranslationResolvers_GraphQL$ReventlessLocal.bindReceive(fieldName, (inputJson, caller) => Callback.receive(publishJsons, inputJson, Capabilities$Reventless.none, caller, undefined));
   });
   globalThis.test("a successful translation resolves as CommandAccepted, with no errors", async () => {
     let result = await runMutation("completed", undefined);
@@ -181,7 +183,8 @@ let CatalogFeedCallback = InboundTranslationSlice_Callback$ReventlessCore.Make({
   targetName: InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.targetName,
   externalSystem: InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.externalSystem,
   authorizationOf: InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.authorizationOf,
-  endpoint: InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.endpoint
+  endpoint: InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.endpoint,
+  capabilityNeeds: InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.capabilityNeeds
 })(CatalogFeedTranslation);
 
 let feedField = "Catalog_CatalogFeed";
@@ -197,7 +200,7 @@ globalThis.describe("InboundTranslationSlice mutation — the door", () => {
     DomainGraphQL_Server$ReventlessLocal.setScope("Catalog");
     InboundTranslationResolvers_GraphQL$ReventlessLocal.register(feedField, InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.externalInputSchema, Dcb_Builder$ReventlessCore.inboundDoorPermission(InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.commandSchema, InboundTranslationSliceFixtures$ReventlessLocal.CatalogFeedSpec.authorizationOf), DomainGraphQL_Server$ReventlessLocal.asInterface);
     DomainGraphQL_Server$ReventlessLocal.resetScope();
-    InboundTranslationResolvers_GraphQL$ReventlessLocal.bindReceive(feedField, (inputJson, caller) => CatalogFeedCallback.receive(publishJsons, inputJson, caller, undefined));
+    InboundTranslationResolvers_GraphQL$ReventlessLocal.bindReceive(feedField, (inputJson, caller) => CatalogFeedCallback.receive(publishJsons, inputJson, Capabilities$Reventless.none, caller, undefined));
   });
   globalThis.test("a caller holding none of the commands' roles is refused", async () => {
     let node = payload(await runFeed(signedIn(["Ops"]), "product"));

package/tests/adapter/LocalAnonymousLimitTest.res

@@ -0,0 +1,70 @@
+open JestGlobals
+
+// The local doors' limit, as the resolvers apply it: only a rule that admits
+// anonymous callers is counted, and the answer is a `Throttled` rejection.
+
+@set_index external setEnv: (dict<string>, string, string) => unit = ""
+
+let ctxFrom = (address: string): JSON.t =>
+  JSON.Encode.object(Dict.fromArray([("sourceAddress", JSON.Encode.string(address))]))
+
+let throttled = (~rule, ~ctx) =>
+  CommandGeneratorResolvers_GraphQL.throttled(~rule, ~field="Registration_SignUp", ~ctx)
+
+describe("the limit on anonymous doors", () => {
+  beforeEach(() => {
+    NodeProcess.env->setEnv(Reventless.AnonymousRequestLimit.envKey, "2/3600")
+    LocalAnonymousLimit.reset()
+  })
+  afterEach(() => {
+    NodeProcess.env->Dict.delete(Reventless.AnonymousRequestLimit.envKey)
+    LocalAnonymousLimit.reset()
+  })
+
+  testSync("an anonymous door is limited per source address", () => {
+    let ctx = ctxFrom("10.0.0.1")
+    let answers = [
+      throttled(~rule=AllowAnonymous, ~ctx)->Option.isSome,
+      throttled(~rule=AllowAnonymous, ~ctx)->Option.isSome,
+      throttled(~rule=AllowAnonymous, ~ctx)->Option.isSome,
+    ]
+    expect(answers)->toEqual([false, false, true])
+  })
+
+  testSync("another source is not held back by the first", () => {
+    let _ = throttled(~rule=AllowAnonymous, ~ctx=ctxFrom("10.0.0.1"))
+    let _ = throttled(~rule=AllowAnonymous, ~ctx=ctxFrom("10.0.0.1"))
+    expect(throttled(~rule=AllowAnonymous, ~ctx=ctxFrom("10.0.0.2"))->Option.isSome)->toBe(false)
+  })
+
+  testSync("a door for signed-in callers is never counted", () => {
+    let ctx = ctxFrom("10.0.0.1")
+    let answers = Array.fromInitializer(
+      ~length=5,
+      _ => throttled(~rule=AllowAuthenticated, ~ctx)->Option.isSome,
+    )
+    expect(answers->Array.some(x => x))->toBe(false)
+  })
+
+  testSync("the refusal is a Throttled rejection, retryable by its cause", () => {
+    let ctx = ctxFrom("10.0.0.1")
+    let _ = throttled(~rule=AllowAnonymous, ~ctx)
+    let _ = throttled(~rule=AllowAnonymous, ~ctx)
+    let rejection = throttled(~rule=AllowAnonymous, ~ctx)->Option.getOr(JSON.Encode.null)
+    let text = rejection->JSON.stringify
+    expect((text->String.includes("Throttled"), text->String.includes("INFRASTRUCTURE")))->toEqual((
+      true,
+      true,
+    ))
+  })
+
+  testSync("a mistyped limit fails rather than becoming the default", () => {
+    NodeProcess.env->setEnv(Reventless.AnonymousRequestLimit.envKey, "ten")
+    LocalAnonymousLimit.reset()
+    let threw = switch throttled(~rule=AllowAnonymous, ~ctx=ctxFrom("10.0.0.1")) {
+    | _ => false
+    | exception _ => true
+    }
+    expect(threw)->toBe(true)
+  })
+})

package/tests/adapter/LocalAnonymousLimitTest.res.mjs

@@ -0,0 +1,85 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Stdlib_Dict from "@rescript/runtime/lib/es6/Stdlib_Dict.js";
+import * as Stdlib_Array from "@rescript/runtime/lib/es6/Stdlib_Array.js";
+import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+import * as AnonymousRequestLimit$Reventless from "@reventlessdev/reventless-spec/src/types/AnonymousRequestLimit.res.mjs";
+import * as LocalAnonymousLimit$ReventlessLocal from "../../src/adapter/LocalAnonymousLimit.res.mjs";
+import * as CommandGeneratorResolvers_GraphQL$ReventlessLocal from "../../src/adapter/CommandGenerator/CommandGeneratorResolvers_GraphQL.res.mjs";
+
+function ctxFrom(address) {
+  return Object.fromEntries([[
+      "sourceAddress",
+      address
+    ]]);
+}
+
+function throttled(rule, ctx) {
+  return CommandGeneratorResolvers_GraphQL$ReventlessLocal.throttled(rule, "Registration_SignUp", ctx);
+}
+
+globalThis.describe("the limit on anonymous doors", () => {
+  globalThis.beforeEach(() => {
+    process.env[AnonymousRequestLimit$Reventless.envKey] = "2/3600";
+    LocalAnonymousLimit$ReventlessLocal.reset();
+  });
+  globalThis.afterEach(() => {
+    Stdlib_Dict.$$delete(process.env, AnonymousRequestLimit$Reventless.envKey);
+    LocalAnonymousLimit$ReventlessLocal.reset();
+  });
+  globalThis.test("an anonymous door is limited per source address", () => {
+    let ctx = ctxFrom("10.0.0.1");
+    let answers = [
+      Stdlib_Option.isSome(CommandGeneratorResolvers_GraphQL$ReventlessLocal.throttled("AllowAnonymous", "Registration_SignUp", ctx)),
+      Stdlib_Option.isSome(CommandGeneratorResolvers_GraphQL$ReventlessLocal.throttled("AllowAnonymous", "Registration_SignUp", ctx)),
+      Stdlib_Option.isSome(CommandGeneratorResolvers_GraphQL$ReventlessLocal.throttled("AllowAnonymous", "Registration_SignUp", ctx))
+    ];
+    globalThis.expect(answers).toEqual([
+      false,
+      false,
+      true
+    ]);
+  });
+  globalThis.test("another source is not held back by the first", () => {
+    CommandGeneratorResolvers_GraphQL$ReventlessLocal.throttled("AllowAnonymous", "Registration_SignUp", ctxFrom("10.0.0.1"));
+    CommandGeneratorResolvers_GraphQL$ReventlessLocal.throttled("AllowAnonymous", "Registration_SignUp", ctxFrom("10.0.0.1"));
+    globalThis.expect(Stdlib_Option.isSome(CommandGeneratorResolvers_GraphQL$ReventlessLocal.throttled("AllowAnonymous", "Registration_SignUp", ctxFrom("10.0.0.2")))).toBe(false);
+  });
+  globalThis.test("a door for signed-in callers is never counted", () => {
+    let ctx = ctxFrom("10.0.0.1");
+    let answers = Stdlib_Array.fromInitializer(5, param => Stdlib_Option.isSome(CommandGeneratorResolvers_GraphQL$ReventlessLocal.throttled("AllowAuthenticated", "Registration_SignUp", ctx)));
+    globalThis.expect(answers.some(x => x)).toBe(false);
+  });
+  globalThis.test("the refusal is a Throttled rejection, retryable by its cause", () => {
+    let ctx = ctxFrom("10.0.0.1");
+    CommandGeneratorResolvers_GraphQL$ReventlessLocal.throttled("AllowAnonymous", "Registration_SignUp", ctx);
+    CommandGeneratorResolvers_GraphQL$ReventlessLocal.throttled("AllowAnonymous", "Registration_SignUp", ctx);
+    let rejection = Stdlib_Option.getOr(CommandGeneratorResolvers_GraphQL$ReventlessLocal.throttled("AllowAnonymous", "Registration_SignUp", ctx), null);
+    let text = JSON.stringify(rejection);
+    globalThis.expect([
+      text.includes("Throttled"),
+      text.includes("INFRASTRUCTURE")
+    ]).toEqual([
+      true,
+      true
+    ]);
+  });
+  globalThis.test("a mistyped limit fails rather than becoming the default", () => {
+    process.env[AnonymousRequestLimit$Reventless.envKey] = "ten";
+    LocalAnonymousLimit$ReventlessLocal.reset();
+    let threw;
+    try {
+      CommandGeneratorResolvers_GraphQL$ReventlessLocal.throttled("AllowAnonymous", "Registration_SignUp", ctxFrom("10.0.0.1"));
+      threw = false;
+    } catch (exn) {
+      threw = true;
+    }
+    globalThis.expect(threw).toBe(true);
+  });
+});
+
+export {
+  ctxFrom,
+  throttled,
+}
+/*  Not a pure module */

package/tests/adapter/LocalAuthLoginTest.res

@@ -394,8 +394,8 @@ describe("the conformance table, minted locally", () => {
   ReventlessCore.Auth_ActiveRole.conformanceCases->Array.forEach(({
     label,
     membership,
-    requested,
-    expected,
+    ?requested,
+    ?expected,
   }) =>
     testPromise(
       label,