@reventlessdev/reventless-local 3.0.0-alpha.299 → 3.0.0-alpha.301

package/CHANGELOG.md

@@ -3,6 +3,22 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.301 (2026-10-25)
+
+**Note:** Version bump only for package @reventlessdev/reventless-local
+
+
+
+
+
+# 3.0.0-alpha.300 (2026-10-25)
+
+**Note:** Version bump only for package @reventlessdev/reventless-local
+
+
+
+
+
 # 3.0.0-alpha.299 (2026-10-25)
 
 * refactor!: internal results and tool records whose parts may be absent are optional fields ([7009ddf](https://github.com/ReventlessDev/reventless-core/commit/7009ddf5d522f39ec9946a3b5cd062ceae889bbf))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-local",
-  "version": "3.0.0-alpha.299",
+  "version": "3.0.0-alpha.301",
   "description": "Local platform for Reventless (in-memory or SQLite backend, for development and testing without AWS)",
   "license": "Apache-2.0",
   "bin": {
@@ -35,23 +35,23 @@
     "sury": "11.0.0",
     "ws": "^8.18.0",
     "@reventlessdev/rescript-effect": "1.0.0-alpha.1",
+    "@reventlessdev/rescript-graphql-yoga": "1.0.0-alpha.29",
     "@reventlessdev/rescript-jest": "1.0.0-alpha.13",
     "@reventlessdev/rescript-mcp-sdk": "1.0.0-alpha.24",
     "@reventlessdev/rescript-node": "2.0.0-alpha.23",
-    "@reventlessdev/rescript-graphql-yoga": "1.0.0-alpha.29",
     "@reventlessdev/rescript-pulumi-pulumi": "3.0.0-alpha.0",
-    "@reventlessdev/reventless-graphql-server": "1.0.0-alpha.156",
-    "@reventlessdev/reventless-gwt": "1.0.0-alpha.256",
-    "@reventlessdev/reventless-core": "3.0.0-alpha.308",
-    "@reventlessdev/reventless-postgres": "3.0.0-alpha.172",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.176",
-    "@reventlessdev/reventless-seed": "1.0.0-alpha.37",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.205"
+    "@reventlessdev/reventless-core": "3.0.0-alpha.310",
+    "@reventlessdev/reventless-gwt": "1.0.0-alpha.258",
+    "@reventlessdev/reventless-graphql-server": "1.0.0-alpha.158",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.207",
+    "@reventlessdev/reventless-seed": "1.0.0-alpha.38",
+    "@reventlessdev/reventless-postgres": "3.0.0-alpha.174",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.178"
   },
   "devDependencies": {
     "rescript": "12.3.1",
     "sury-ppx": "11.0.0",
-    "@reventlessdev/reventless-ppx": "1.0.0-alpha.107"
+    "@reventlessdev/reventless-ppx": "1.0.0-alpha.108"
   },
   "peerDependencies": {
     "rescript": "^12.3.1"

package/src/Platform.res

@@ -109,7 +109,7 @@ module MakeWithConfig = (
   // What this platform provides for the roles its plugins need: every account it
   // can sign in as, built-in and loaded alike, or the file the store will load
   // when the servers start — after the plugins are built and checked.
-  Reventless.Role.provideGroupsFrom(UserStore.providedGroups)
+  Reventless.Role.provideGroupsFrom(AccountStore.providedGroups)
   // Activate Pulumi mock mode — must happen before any component creation.
   // Idempotent, so safe to call even if TestRunner.setup() was already called.
   let _ = TestRunner.setup()
@@ -1377,11 +1377,11 @@ module MakeWithConfig = (
   // this is a no-op (start() is called inline inside makePlatform/deployPlugin).
   let startServers = () => {
     if Config.splitApi {
-      // Hydrate Login store from .reventless/users.yaml (or ~users/~usersFile
+      // Hydrate Login store from .reventless/accounts.yaml (or ~accounts/~accountsFile
       // if provided programmatically) before the Domain server accepts
       // requests. Unified mode does this in makePlatform; split mode defers
       // server startup to here so it must do the same.
-      UserStore.autoLoadOnce()
+      AccountStore.autoLoadOnce()
       DomainGraphQL_Server.start(~port=domainPort, ())
       DomainMCP_Server.start(~port=domainMcpPort, ())
       PlatformGraphQL_Server.start(
@@ -1579,7 +1579,7 @@ module MakeWithConfig = (
     geocoderPlaceIndex?: ReventlessInfra.Platform.geocoderIndex,
     messagingSender?: ReventlessInfra.Platform.messagingSender,
     // Local only, until the AWS platform has a provider to pass the same way:
-    // `Capability_IdentityProvider_UserStore.make()`, writing the accounts file
+    // `Capability_IdentityProvider_AccountStore.make()`, writing the accounts file
     // the auth adapter loads.
     identityProvider?: Reventless.IdentityProvider.t,
     uploadBucket?: ReventlessInfra.Platform.objectStore,
@@ -2350,7 +2350,7 @@ module MakeWithConfig = (
     // (domain and platform) can register their schema first.
     // In unified mode, start immediately (backwards-compatible).
     if !Config.splitApi {
-      UserStore.autoLoadOnce()
+      AccountStore.autoLoadOnce()
       DomainGraphQL_Server.start()
       DomainMCP_Server.start()
     }
@@ -2534,7 +2534,7 @@ module MakeWithConfig = (
 
     // The role check below reads the accounts as they stand; a user store
     // loaded from elsewhere after this would leave it compared with the wrong ones.
-    UserStore.pluginChecked := true
+    AccountStore.pluginChecked := true
 
     // Set the active deploy target so resolveTargetGraphQL/MCP() and QueryDb serverRef/relayRef
     // route registrations to the correct server. Mirrors AWS resolveTargetApi() pattern.

package/src/Platform.res.mjs

@@ -30,12 +30,12 @@ import * as AdmissionCheck$Reventless from "@reventlessdev/reventless-spec/src/t
 import * as Api_Naming$ReventlessCore from "@reventlessdev/reventless-core/src/components/Api/Api_Naming.res.mjs";
 import * as CommandOutcome$Reventless from "@reventlessdev/reventless-spec/src/components/CommandOutcome.res.mjs";
 import * as PluginSpec$ReventlessCore from "@reventlessdev/reventless-core/src/plugin/lifecycle/PluginSpec.res.mjs";
-import * as UserStore$ReventlessLocal from "./adapter/Auth/UserStore.res.mjs";
 import * as TestRunner$ReventlessLocal from "./test/TestRunner.res.mjs";
 import * as UiFragments$ReventlessCore from "@reventlessdev/reventless-core/src/admin/UiFragmentRegistry/StateView/UiFragments.res.mjs";
 import * as CommandTopic$ReventlessCore from "@reventlessdev/reventless-core/src/components/CommandTopic/CommandTopic.res.mjs";
 import * as EffectLogger$ReventlessCore from "@reventlessdev/reventless-core/src/util/EffectLogger.res.mjs";
 import * as ShellConfig$ReventlessLocal from "./ShellConfig.res.mjs";
+import * as AccountStore$ReventlessLocal from "./adapter/Auth/AccountStore.res.mjs";
 import * as BackendState$ReventlessLocal from "./adapter/BackendState.res.mjs";
 import * as ComponentType$ReventlessCore from "@reventlessdev/reventless-core/src/ComponentType.res.mjs";
 import * as SqliteDriver$ReventlessLocal from "./adapter/SqliteDriver.res.mjs";
@@ -146,7 +146,7 @@ function decodeUiFragmentRegistryEventEnvelope(eventJson) {
 }
 
 function MakeWithConfig(Config) {
-  Role$Reventless.provideGroupsFrom(UserStore$ReventlessLocal.providedGroups);
+  Role$Reventless.provideGroupsFrom(AccountStore$ReventlessLocal.providedGroups);
   TestRunner$ReventlessLocal.setup();
   let match = Config.backend;
   if (typeof match !== "object") {
@@ -1151,7 +1151,7 @@ function MakeWithConfig(Config) {
   };
   let startServers = () => {
     if (Config.splitApi) {
-      UserStore$ReventlessLocal.autoLoadOnce();
+      AccountStore$ReventlessLocal.autoLoadOnce();
       DomainGraphQL_Server$ReventlessLocal.start(domainPort, undefined, undefined);
       DomainMCP_Server$ReventlessLocal.start(domainMcpPort, undefined);
       PlatformGraphQL_Server$ReventlessLocal.start(platformPort, Auth_GraphqlContext$ReventlessLocal.buildAuthContext, undefined);
@@ -1694,7 +1694,7 @@ function MakeWithConfig(Config) {
     }
     currentDeployTarget.contents = "Domain";
     if (!Config.splitApi) {
-      UserStore$ReventlessLocal.autoLoadOnce();
+      AccountStore$ReventlessLocal.autoLoadOnce();
       DomainGraphQL_Server$ReventlessLocal.start(undefined, undefined, undefined);
       return DomainMCP_Server$ReventlessLocal.start(undefined, undefined);
     }
@@ -1795,7 +1795,7 @@ function MakeWithConfig(Config) {
     let tmp;
     tmp = apiTarget === "Domain" ? "Domain" : "Platform";
     log.info("Platform", undefined, `deployPlugin target=` + tmp);
-    UserStore$ReventlessLocal.pluginChecked.contents = true;
+    AccountStore$ReventlessLocal.pluginChecked.contents = true;
     currentDeployTarget.contents = apiTarget;
     StateViewSliceMaker.QueryDbResolvers.serverRef.contents = resolveTargetGraphQL();
     let tmp$1;
@@ -1948,7 +1948,7 @@ function MakeWithConfig(Config) {
 
 function Make($star) {
   let backend = Backend$ReventlessLocal.fromEnv();
-  Role$Reventless.provideGroupsFrom(UserStore$ReventlessLocal.providedGroups);
+  Role$Reventless.provideGroupsFrom(AccountStore$ReventlessLocal.providedGroups);
   TestRunner$ReventlessLocal.setup();
   if (typeof backend !== "object") {
     BackendState$ReventlessLocal.setMemory();
@@ -2945,7 +2945,7 @@ function Make($star) {
     });
   };
   let startServers = () => {
-    UserStore$ReventlessLocal.autoLoadOnce();
+    AccountStore$ReventlessLocal.autoLoadOnce();
     DomainGraphQL_Server$ReventlessLocal.start(domainPort, undefined, undefined);
     DomainMCP_Server$ReventlessLocal.start(domainMcpPort, undefined);
     PlatformGraphQL_Server$ReventlessLocal.start(platformPort, Auth_GraphqlContext$ReventlessLocal.buildAuthContext, undefined);
@@ -3576,7 +3576,7 @@ function Make($star) {
     let tmp;
     tmp = apiTarget === "Domain" ? "Domain" : "Platform";
     log.info("Platform", undefined, `deployPlugin target=` + tmp);
-    UserStore$ReventlessLocal.pluginChecked.contents = true;
+    AccountStore$ReventlessLocal.pluginChecked.contents = true;
     currentDeployTarget.contents = apiTarget;
     StateViewSliceMaker.QueryDbResolvers.serverRef.contents = resolveTargetGraphQL();
     let tmp$1;

package/src/adapter/Auth/{UserStore.res → AccountStore.res}

@@ -1,13 +1,13 @@
 // In-memory user store loader. Hydrates `LocalAuth.Login.store` from
 // three resolution paths (first match wins):
-//   1. `~users` arg — explicit list passed by the caller
-//   2. `~usersFile` arg — explicit YAML path
-//   3. `.reventless/users.yaml` (relative to process.cwd()) — auto-discovery
+//   1. `~accounts` arg — explicit list passed by the caller
+//   2. `~accountsFile` arg — explicit YAML path
+//   3. `.reventless/accounts.yaml` (relative to process.cwd()) — auto-discovery
 //
 // All three are silent on absence: when no path is provided and no default
 // file exists, the store stays empty and `LocalAuth.Login.issue` rejects
 // every credential. A one-line stdout hint is printed so developers know to
-// either set the file or pass `~users` programmatically.
+// either set the file or pass `~accounts` programmatically.
 
 open Reventless
 
@@ -45,13 +45,13 @@ let _defaultPath = AccountsManifest.defaultPath
 
 /**
  * Hydrates the Login store. Returns the resolution path actually used
- * (`InlineUsers`, `UsersFile(path)`, `DefaultFile(path)`, or `Empty`).
+ * (`InlineAccounts`, `AccountsFile(path)`, `DefaultFile(path)`, or `Empty`).
  * Errors from a *resolved* path are returned as `Error`; absence of the
  * auto-discovered default file is silent.
  */
 type resolution =
-  | InlineUsers
-  | UsersFile(string)
+  | InlineAccounts
+  | AccountsFile(string)
   | DefaultFile(string)
   | Empty
 
@@ -79,29 +79,29 @@ makes it from). Never the working directory once another source was loaded.
 let providedGroups = (): array<string> =>
   LocalAuth.knownGroups()->Array.concat(resolved.contents ? [] : AccountsManifest.declaredGroups())
 
-let load = (~users: option<array<entry>>=?, ~usersFile: option<string>=?, ()): result<
+let load = (~accounts: option<array<entry>>=?, ~accountsFile: option<string>=?, ()): result<
   resolution,
   string,
 > => {
   // The default file is what the check already read; any other source arrives
   // after it, and the check would have compared the plugins with other accounts.
-  if pluginChecked.contents && (users->Option.isSome || usersFile->Option.isSome) {
+  if pluginChecked.contents && (accounts->Option.isSome || accountsFile->Option.isSome) {
     JsError.throwWithMessage(
-      "UserStore.load(~users / ~usersFile) after a plugin was built — the check that every role it needs has a group read other accounts. Call UserStore.load before deploying plugins.",
+      "AccountStore.load(~accounts / ~accountsFile) after a plugin was built — the check that every role it needs has a group read other accounts. Call AccountStore.load before deploying plugins.",
     )
   }
   resolved := true
-  switch users {
+  switch accounts {
   | Some(entries) =>
     _registerEntries(entries)
-    Ok(InlineUsers)
+    Ok(InlineAccounts)
   | None =>
-    switch usersFile {
+    switch accountsFile {
     | Some(path) =>
       parseFile(path)->Result.map(entries => {
         _registerEntries(entries)
         fromFile := entries->Array.map(e => e.username)
-        UsersFile(path)
+        AccountsFile(path)
       })
     | None =>
       let defaultPath = _defaultPath()
@@ -113,7 +113,7 @@ let load = (~users: option<array<entry>>=?, ~usersFile: option<string>=?, ()): r
         })
       } else {
         Console.log(
-          "[LocalAuth] no users configured — POST /__inmemory/login will reject all. " ++ "Provide ~users / ~usersFile or create .reventless/users.yaml relative to cwd.",
+          "[LocalAuth] no accounts configured — POST /__inmemory/login will reject all. " ++ "Provide ~accounts / ~accountsFile or create .reventless/accounts.yaml relative to cwd.",
         )
         Ok(Empty)
       }
@@ -212,14 +212,14 @@ let watch = (path: string): unit => {
 
 /**
  * Idempotent auto-discovery. Platform.startServers calls this before
- * `DomainGraphQL_Server.start`, so a `.reventless/users.yaml` in cwd
+ * `DomainGraphQL_Server.start`, so a `.reventless/accounts.yaml` in cwd
  * hydrates the Login store automatically, and follows the file from then on.
  * No-op once `load` has been called from anywhere.
  */
 let autoLoadOnce = (): unit =>
   if !resolved.contents {
     switch load() {
-    | Ok(DefaultFile(path)) | Ok(UsersFile(path)) => watch(path)
+    | Ok(DefaultFile(path)) | Ok(AccountsFile(path)) => watch(path)
     | _ => ()
     }
   }

package/src/adapter/Auth/{UserStore.res.mjs → AccountStore.res.mjs}

@@ -49,25 +49,25 @@ function providedGroups() {
   return LocalAuth$ReventlessLocal.knownGroups().concat(resolved.contents ? [] : AccountsManifest$Reventless.declaredGroups());
 }
 
-function load(users, usersFile, param) {
-  if (pluginChecked.contents && (Stdlib_Option.isSome(users) || Stdlib_Option.isSome(usersFile))) {
-    Stdlib_JsError.throwWithMessage("UserStore.load(~users / ~usersFile) after a plugin was built — the check that every role it needs has a group read other accounts. Call UserStore.load before deploying plugins.");
+function load(accounts, accountsFile, param) {
+  if (pluginChecked.contents && (Stdlib_Option.isSome(accounts) || Stdlib_Option.isSome(accountsFile))) {
+    Stdlib_JsError.throwWithMessage("AccountStore.load(~accounts / ~accountsFile) after a plugin was built — the check that every role it needs has a group read other accounts. Call AccountStore.load before deploying plugins.");
   }
   resolved.contents = true;
-  if (users !== undefined) {
-    _registerEntries(users);
+  if (accounts !== undefined) {
+    _registerEntries(accounts);
     return {
       TAG: "Ok",
-      _0: "InlineUsers"
+      _0: "InlineAccounts"
     };
   }
-  if (usersFile !== undefined) {
-    return Stdlib_Result.map(AccountsManifest$Reventless.parseFile(usersFile), entries => {
+  if (accountsFile !== undefined) {
+    return Stdlib_Result.map(AccountsManifest$Reventless.parseFile(accountsFile), entries => {
       _registerEntries(entries);
       fromFile.contents = entries.map(e => e.username);
       return {
-        TAG: "UsersFile",
-        _0: usersFile
+        TAG: "AccountsFile",
+        _0: accountsFile
       };
     });
   }
@@ -82,7 +82,7 @@ function load(users, usersFile, param) {
       };
     });
   } else {
-    console.log("[LocalAuth] no users configured — POST /__inmemory/login will reject all. Provide ~users / ~usersFile or create .reventless/users.yaml relative to cwd.");
+    console.log("[LocalAuth] no accounts configured — POST /__inmemory/login will reject all. Provide ~accounts / ~accountsFile or create .reventless/accounts.yaml relative to cwd.");
     return {
       TAG: "Ok",
       _0: "Empty"

package/src/adapter/Auth/LocalAuth.res

@@ -8,7 +8,7 @@
 //   none of the above              → Authenticated(defaultUser) (dev default)
 //
 // Stage A4 adds the `Login` submodule (token issuance + verification) and
-// the companion `UserStore` module (YAML hydration).
+// the companion `AccountStore` module (YAML hydration).
 
 open Reventless
 
@@ -33,7 +33,7 @@ let adminUser = (): Identity.t => {
 // ── User registry ─────────────────────────────────────────────────────────
 //
 // A `dict<Identity.t>` keyed by `username`. A4 hydrates this from
-// `.reventless/users.yaml`; tests inject via `registerUser`. The built-in
+// `.reventless/accounts.yaml`; tests inject via `registerUser`. The built-in
 // `admin` is answered on lookup, for the reason above, unless one is registered.
 
 let initialUsers = () => Dict.fromArray([("user", defaultUser)])
@@ -86,7 +86,7 @@ let getHeader = (headers: dict<string>, name: string): option<string> =>
 module Login = {
   type credentials = {password: string, identity: Identity.t}
 
-  // Hydrated by `UserStore` at platform start; tests can inject directly.
+  // Hydrated by `AccountStore` at platform start; tests can inject directly.
   let store: ref<dict<credentials>> = ref(Dict.make())
 
   let setCredentials = (~username: string, ~password: string, ~identity: Identity.t): unit => {
@@ -127,13 +127,13 @@ module Login = {
   //      that has no `.reventless/` to write to.
   //
   // The directory is used but never created. Its presence is what distinguishes
-  // a platform someone develops against — `pnpm run setup` puts `users.yaml`
+  // a platform someone develops against — `pnpm run setup` puts `accounts.yaml`
   // there, so anything with logins to preserve has one — from a unit test, and
   // an auth module that made directories would leave one in every test's cwd.
   //
   // Local dev only, as the whole module is: these tokens are not security-grade
   // and AWS never sees them. The file sits in a gitignored directory beside
-  // `users.yaml`, which already holds plaintext dev passwords.
+  // `accounts.yaml`, which already holds plaintext dev passwords.
 
   let _secretFileName = "token-secret"
   let _secretDir = (): string => NodePath.join([NodeProcess.cwd(), ".reventless"])

package/src/adapter/LocalCapabilities.res

@@ -31,7 +31,7 @@ let registerMessagingSender = (sender: string) => messagingSenderRef := sender
 let identityProviderRef = ref(Reventless.Capabilities.none.identityProvider)
 
 /** Provision the identity provider. Called by `makePlatform` from the handle a
-    root declared, `Capability_IdentityProvider_UserStore.make()`. */
+    root declared, `Capability_IdentityProvider_AccountStore.make()`. */
 let registerIdentityProvider = (provider: Reventless.IdentityProvider.t) =>
   identityProviderRef := provider
 
@@ -70,7 +70,7 @@ let unmetWarning = (~declared: array<(string, string)>): option<string> =>
         | Messaging =>
           `\n  Messaging is \`Capability_Messaging_Log.make()\`, passed to the platform as ` ++ `\`~messagingSender\`.`
         | IdentityProvider =>
-          `\n  IdentityProvider is \`Capability_IdentityProvider_UserStore.make()\`, passed to the ` ++ `platform as \`~identityProvider\`.`
+          `\n  IdentityProvider is \`Capability_IdentityProvider_AccountStore.make()\`, passed to the ` ++ `platform as \`~identityProvider\`.`
         // Never unmet here: the local platform always provisions one.
         | Stash => ``
         }

package/src/adapter/LocalCapabilities.res.mjs

@@ -43,7 +43,7 @@ function unmetWarning(declared) {
         case "Messaging" :
           return `\n  Messaging is \`Capability_Messaging_Log.make()\`, passed to the platform as \`~messagingSender\`.`;
         case "IdentityProvider" :
-          return `\n  IdentityProvider is \`Capability_IdentityProvider_UserStore.make()\`, passed to the platform as \`~identityProvider\`.`;
+          return `\n  IdentityProvider is \`Capability_IdentityProvider_AccountStore.make()\`, passed to the platform as \`~identityProvider\`.`;
         case "Stash" :
           return ``;
       }

package/src/adapter/ObjectStore/ObjectStoreStorage_FileSystem.res

@@ -205,7 +205,7 @@ let deleteOffloadAll = (~root: string): int => {
 }
 
 // Removes the three trees, leaving the rest of the root (the database file, the
-// dev `users.yaml`) untouched.
+// dev `accounts.yaml`) untouched.
 let reset = (~root: string): unit =>
   [objectsDir(~root), metaDir(~root), offloadDir(~root)]->Array.forEach(dir =>
     try NodeFs.rmSync(dir, {recursive: true, force: true}) catch {

package/src/capability/{Capability_IdentityProvider_UserStore.res → Capability_IdentityProvider_AccountStore.res}

@@ -4,7 +4,7 @@
 // `~identityProvider` in `~hostUiBundle`, and the platform puts it on the
 // capability record every slice's `translate` receives.
 //
-// Its store is `.reventless/users.yaml`, the file the in-memory auth adapter
+// Its store is `.reventless/accounts.yaml`, the file the in-memory auth adapter
 // already loads at startup, so an account made here survives a restart with no
 // second store to keep in step. Every write goes to the file and to the live
 // `LocalAuth.Login` store together, so the running process and the next one

package/tests/adapter/{LocalAuthUserStoreTest.res → LocalAuthAccountStoreTest.res}

@@ -1,4 +1,4 @@
-// Stage A4 — UserStore.load resolution order and YAML parsing.
+// Stage A4 — AccountStore.load resolution order and YAML parsing.
 
 @@warning("-44")
 
@@ -7,12 +7,12 @@ open JestGlobals
 let resetAll = () => {
   LocalAuth.resetUsers()
   LocalAuth.Login.resetStore()
-  UserStore.resetResolution()
+  AccountStore.resetResolution()
 }
 
 let _writeYamlFile = (contents: string): string => {
   let dir = NodeFs.mkdtempSync(NodePath.join([NodeOs.tmpdir(), "reventless-userstore-"]))
-  let path = NodePath.join([dir, "users.yaml"])
+  let path = NodePath.join([dir, "accounts.yaml"])
   NodeFs.writeFileSync(path, contents)
   path
 }
@@ -26,7 +26,7 @@ testPromise("parseString decodes a well-formed YAML document", async () => {
   password: bob-pw
   groups: []
 `
-  switch UserStore.parseString(yaml) {
+  switch AccountStore.parseString(yaml) {
   | Ok(entries) =>
     expect(entries->Array.length)->toEqual(2)
     let first = entries->Array.getUnsafe(0)
@@ -38,7 +38,7 @@ testPromise("parseString decodes a well-formed YAML document", async () => {
 })
 
 testPromise("parseString rejects malformed YAML", async () => {
-  switch UserStore.parseString("not: valid: yaml: at all: ::") {
+  switch AccountStore.parseString("not: valid: yaml: at all: ::") {
   | Error(_) => ()
   | Ok(_) => JsError.throwWithMessage("expected Error for malformed YAML")
   }
@@ -49,21 +49,21 @@ testPromise("parseString rejects entries missing required fields", async () => {
 - username: alice
   groups: [Editor]
 `
-  switch UserStore.parseString(yaml) {
+  switch AccountStore.parseString(yaml) {
   | Error(_) => ()
   | Ok(_) => JsError.throwWithMessage("expected Error for missing password")
   }
 })
 
-testPromise("load(~users) registers credentials and returns InlineUsers", async () => {
+testPromise("load(~accounts) registers credentials and returns InlineAccounts", async () => {
   resetAll()
-  let entries: array<UserStore.entry> = [
+  let entries: array<AccountStore.entry> = [
     {username: "alice", password: "alice-pw", groups: ["Editor"]},
     {username: "bob", password: "bob-pw", groups: [], userId: "u-bob"},
   ]
-  switch UserStore.load(~users=entries, ()) {
-  | Ok(InlineUsers) => ()
-  | Ok(_) => JsError.throwWithMessage("expected InlineUsers")
+  switch AccountStore.load(~accounts=entries, ()) {
+  | Ok(InlineAccounts) => ()
+  | Ok(_) => JsError.throwWithMessage("expected InlineAccounts")
   | Error(msg) => JsError.throwWithMessage("load failed: " ++ msg)
   }
   // Verify Login.issue accepts the credentials.
@@ -79,16 +79,16 @@ testPromise("load(~users) registers credentials and returns InlineUsers", async
   }
 })
 
-testPromise("load(~usersFile) reads a YAML file from disk", async () => {
+testPromise("load(~accountsFile) reads a YAML file from disk", async () => {
   resetAll()
   let path = _writeYamlFile(`
 - username: carol
   password: carol-pw
   groups: [Admin]
 `)
-  switch UserStore.load(~usersFile=path, ()) {
-  | Ok(UsersFile(p)) => expect(p)->toEqual(path)
-  | Ok(_) => JsError.throwWithMessage("expected UsersFile resolution")
+  switch AccountStore.load(~accountsFile=path, ()) {
+  | Ok(AccountsFile(p)) => expect(p)->toEqual(path)
+  | Ok(_) => JsError.throwWithMessage("expected AccountsFile resolution")
   | Error(msg) => JsError.throwWithMessage("load failed: " ++ msg)
   }
   let result = await LocalAuth.Login.issue(~username="carol", ~password="carol-pw")
@@ -99,9 +99,9 @@ testPromise("load(~usersFile) reads a YAML file from disk", async () => {
   NodeFs.rmSync(path, {force: true})
 })
 
-testPromise("load(~usersFile) returns Error when the file is missing", async () => {
+testPromise("load(~accountsFile) returns Error when the file is missing", async () => {
   resetAll()
-  switch UserStore.load(~usersFile="/tmp/does-not-exist-reventless.yaml", ()) {
+  switch AccountStore.load(~accountsFile="/tmp/does-not-exist-reventless.yaml", ()) {
   | Error(_) => ()
   | Ok(_) => JsError.throwWithMessage("expected Error for missing file")
   }
@@ -109,12 +109,12 @@ testPromise("load(~usersFile) returns Error when the file is missing", async ()
 
 testPromise("load() with no args + no default file returns Empty", async () => {
   resetAll()
-  // The test's cwd has no .reventless/users.yaml — verify Empty is returned.
+  // The test's cwd has no .reventless/accounts.yaml — verify Empty is returned.
   // (The package's own cwd is reventless-local/ during `pnpm test`, where
   // no such file exists.)
-  switch UserStore.load() {
+  switch AccountStore.load() {
   | Ok(Empty) => ()
-  | Ok(DefaultFile(_)) => // If a .reventless/users.yaml happens to exist in CI, accept it.
+  | Ok(DefaultFile(_)) => // If a .reventless/accounts.yaml happens to exist in CI, accept it.
     ()
   | Ok(_) => JsError.throwWithMessage("expected Empty or DefaultFile")
   | Error(msg) => JsError.throwWithMessage("load failed: " ++ msg)
@@ -128,12 +128,12 @@ testPromise("inline users win over a file path", async () => {
   password: file-pw
   groups: []
 `)
-  let inline: array<UserStore.entry> = [
+  let inline: array<AccountStore.entry> = [
     {username: "inline-user", password: "inline-pw", groups: []},
   ]
-  switch UserStore.load(~users=inline, ~usersFile=path, ()) {
-  | Ok(InlineUsers) => ()
-  | Ok(_) => JsError.throwWithMessage("expected InlineUsers (inline should win)")
+  switch AccountStore.load(~accounts=inline, ~accountsFile=path, ()) {
+  | Ok(InlineAccounts) => ()
+  | Ok(_) => JsError.throwWithMessage("expected InlineAccounts (inline should win)")
   | Error(msg) => JsError.throwWithMessage("load failed: " ++ msg)
   }
   // file-user must NOT be in the registry.
@@ -150,10 +150,10 @@ testPromise("inline users win over a file path", async () => {
 
 testPromise("autoLoadOnce is a no-op after an explicit load", async () => {
   resetAll()
-  let _ = UserStore.load(~users=[{username: "x", password: "x", groups: []}], ())
-  // Second call should not crash even if .reventless/users.yaml doesn't
+  let _ = AccountStore.load(~accounts=[{username: "x", password: "x", groups: []}], ())
+  // Second call should not crash even if .reventless/accounts.yaml doesn't
   // exist; resolved=true prevents the default-discovery branch.
-  UserStore.autoLoadOnce()
+  AccountStore.autoLoadOnce()
   // Sanity: explicit-load registration persists.
   switch LocalAuth.lookupUser("x") {
   | Some(_) => ()
@@ -162,7 +162,7 @@ testPromise("autoLoadOnce is a no-op after an explicit load", async () => {
 })
 
 // What the role check counts as provided, before the servers load the store.
-describe("UserStore.providedGroups", () => {
+describe("AccountStore.providedGroups", () => {
   // Runs `f` in a directory holding `files` (path relative to it → contents).
   let inDir = (files: array<(string, string)>, f) => {
     let dir = NodeFs.mkdtempSync(NodePath.join([NodeOs.tmpdir(), "reventless-provided-"]))
@@ -188,8 +188,8 @@ describe("UserStore.providedGroups", () => {
   testSync("counts the default file the servers will load", () => {
     resetAll()
     let groups = inDir(
-      [(".reventless/users.yaml", manifest("Merchandiser"))],
-      () => UserStore.providedGroups(),
+      [(".reventless/accounts.yaml", manifest("Merchandiser"))],
+      () => AccountStore.providedGroups(),
     )
     expect(has("Merchandiser", groups))->toBe(true)
   })
@@ -197,27 +197,27 @@ describe("UserStore.providedGroups", () => {
   testSync("counts the template where setup has not made the file yet", () => {
     resetAll()
     let groups = inDir(
-      [("users.example.yaml", manifest("Fulfilment"))],
-      () => UserStore.providedGroups(),
+      [("accounts.example.yaml", manifest("Fulfilment"))],
+      () => AccountStore.providedGroups(),
     )
     expect(has("Fulfilment", groups))->toBe(true)
   })
 
   testSync("once loaded from elsewhere, counts those accounts and not the directory's", () => {
     resetAll()
-    let _ = UserStore.load(~users=[{username: "i", password: "i", groups: ["Inline"]}], ())
+    let _ = AccountStore.load(~accounts=[{username: "i", password: "i", groups: ["Inline"]}], ())
     let groups = inDir(
-      [(".reventless/users.yaml", manifest("Merchandiser"))],
-      () => UserStore.providedGroups(),
+      [(".reventless/accounts.yaml", manifest("Merchandiser"))],
+      () => AccountStore.providedGroups(),
     )
     expect((has("Inline", groups), has("Merchandiser", groups)))->toEqual((true, false))
   })
 
   testSync("loading other accounts after a plugin was checked is refused", () => {
     resetAll()
-    UserStore.pluginChecked := true
-    let refused = switch UserStore.load(
-      ~users=[{username: "late", password: "l", groups: ["Late"]}],
+    AccountStore.pluginChecked := true
+    let refused = switch AccountStore.load(
+      ~accounts=[{username: "late", password: "l", groups: ["Late"]}],
       (),
     ) {
     | _ => false
@@ -228,13 +228,13 @@ describe("UserStore.providedGroups", () => {
 
   testSync("the default load after a plugin was checked is the one the check read", () => {
     resetAll()
-    UserStore.pluginChecked := true
-    let loaded = inDir([], () => UserStore.load()->Result.isOk)
+    AccountStore.pluginChecked := true
+    let loaded = inDir([], () => AccountStore.load()->Result.isOk)
     expect(loaded)->toBe(true)
   })
 })
 
-describe("UserStore.reload", () => {
+describe("AccountStore.reload", () => {
   let signsIn = async (~username, ~password) =>
     switch await LocalAuth.Login.issue(~username, ~password) {
     | Ok(_) => true
@@ -251,7 +251,7 @@ describe("UserStore.reload", () => {
   password: b1
   groups: []
 `)
-    let _ = UserStore.load(~usersFile=path, ())
+    let _ = AccountStore.load(~accountsFile=path, ())
     NodeFs.writeFileSync(
       path,
       `
@@ -263,7 +263,7 @@ describe("UserStore.reload", () => {
   groups: [Driver]
 `,
     )
-    switch UserStore.reload(path) {
+    switch AccountStore.reload(path) {
     | Ok(said) => expect(said)->toEqual("2 accounts, removed: bob")
     | Error(e) => JsError.throwWithMessage(e)
     }
@@ -281,9 +281,9 @@ describe("UserStore.reload", () => {
   password: a1
   groups: [Editor]
 `)
-    let _ = UserStore.load(~usersFile=path, ())
+    let _ = AccountStore.load(~accountsFile=path, ())
     NodeFs.writeFileSync(path, "- username: alice\n  groups: [Editor]\n")
-    expect(UserStore.reload(path)->Result.isError)->toBe(true)
+    expect(AccountStore.reload(path)->Result.isError)->toBe(true)
     expect(await signsIn(~username="alice", ~password="a1"))->toBe(true)
   })
 
@@ -294,8 +294,8 @@ describe("UserStore.reload", () => {
   password: a1
   groups: [Editor]
 `)
-    let _ = UserStore.load(~usersFile=path, ())
-    UserStore.watch(path)
+    let _ = AccountStore.load(~accountsFile=path, ())
+    AccountStore.watch(path)
     NodeFs.writeFileSync(
       path,
       `
@@ -317,7 +317,7 @@ describe("UserStore.reload", () => {
         await waitFor(tries - 1)
       }
     let added = await waitFor(60)
-    UserStore.unwatch()
+    AccountStore.unwatch()
     expect(added)->toBe(true)
   })
 })

package/tests/adapter/{LocalAuthUserStoreTest.res.mjs → LocalAuthAccountStoreTest.res.mjs}

@@ -7,23 +7,23 @@ import * as Stdlib_Result from "@rescript/runtime/lib/es6/Stdlib_Result.js";
 import * as Stdlib_JsError from "@rescript/runtime/lib/es6/Stdlib_JsError.js";
 import * as Primitive_exceptions from "@rescript/runtime/lib/es6/Primitive_exceptions.js";
 import * as LocalAuth$ReventlessLocal from "../../src/adapter/Auth/LocalAuth.res.mjs";
-import * as UserStore$ReventlessLocal from "../../src/adapter/Auth/UserStore.res.mjs";
+import * as AccountStore$ReventlessLocal from "../../src/adapter/Auth/AccountStore.res.mjs";
 
 function resetAll() {
   LocalAuth$ReventlessLocal.resetUsers();
   LocalAuth$ReventlessLocal.Login.resetStore();
-  UserStore$ReventlessLocal.resetResolution();
+  AccountStore$ReventlessLocal.resetResolution();
 }
 
 function _writeYamlFile(contents) {
   let dir = Nodefs.mkdtempSync(Nodepath.join(Nodeos.tmpdir(), "reventless-userstore-"));
-  let path = Nodepath.join(dir, "users.yaml");
+  let path = Nodepath.join(dir, "accounts.yaml");
   Nodefs.writeFileSync(path, contents, "utf8");
   return path;
 }
 
 globalThis.test("parseString decodes a well-formed YAML document", async () => {
-  let entries = UserStore$ReventlessLocal.parseString(`
+  let entries = AccountStore$ReventlessLocal.parseString(`
 - username: alice
   password: alice-pw
   groups: [Editor]
@@ -43,14 +43,14 @@ globalThis.test("parseString decodes a well-formed YAML document", async () => {
 });
 
 globalThis.test("parseString rejects malformed YAML", async () => {
-  let match = UserStore$ReventlessLocal.parseString("not: valid: yaml: at all: ::");
+  let match = AccountStore$ReventlessLocal.parseString("not: valid: yaml: at all: ::");
   if (match.TAG === "Ok") {
     return Stdlib_JsError.throwWithMessage("expected Error for malformed YAML");
   }
 });
 
 globalThis.test("parseString rejects entries missing required fields", async () => {
-  let match = UserStore$ReventlessLocal.parseString(`
+  let match = AccountStore$ReventlessLocal.parseString(`
 - username: alice
   groups: [Editor]
 `);
@@ -59,7 +59,7 @@ globalThis.test("parseString rejects entries missing required fields", async ()
   }
 });
 
-globalThis.test("load(~users) registers credentials and returns InlineUsers", async () => {
+globalThis.test("load(~accounts) registers credentials and returns InlineAccounts", async () => {
   resetAll();
   let entries = [
     {
@@ -74,11 +74,11 @@ globalThis.test("load(~users) registers credentials and returns InlineUsers", as
       userId: "u-bob"
     }
   ];
-  let msg = UserStore$ReventlessLocal.load(entries, undefined, undefined);
+  let msg = AccountStore$ReventlessLocal.load(entries, undefined, undefined);
   if (msg.TAG === "Ok") {
     let tmp = msg._0;
-    if (typeof tmp === "object" || tmp !== "InlineUsers") {
-      Stdlib_JsError.throwWithMessage("expected InlineUsers");
+    if (typeof tmp === "object" || tmp !== "InlineAccounts") {
+      Stdlib_JsError.throwWithMessage("expected InlineAccounts");
     }
   } else {
     Stdlib_JsError.throwWithMessage("load failed: " + msg._0);
@@ -96,18 +96,18 @@ globalThis.test("load(~users) registers credentials and returns InlineUsers", as
   }
 });
 
-globalThis.test("load(~usersFile) reads a YAML file from disk", async () => {
+globalThis.test("load(~accountsFile) reads a YAML file from disk", async () => {
   resetAll();
   let path = _writeYamlFile(`
 - username: carol
   password: carol-pw
   groups: [Admin]
 `);
-  let msg = UserStore$ReventlessLocal.load(undefined, path, undefined);
+  let msg = AccountStore$ReventlessLocal.load(undefined, path, undefined);
   if (msg.TAG === "Ok") {
     let p = msg._0;
-    if (typeof p !== "object" || p.TAG !== "UsersFile") {
-      Stdlib_JsError.throwWithMessage("expected UsersFile resolution");
+    if (typeof p !== "object" || p.TAG !== "AccountsFile") {
+      Stdlib_JsError.throwWithMessage("expected AccountsFile resolution");
     } else {
       globalThis.expect(p._0).toEqual(path);
     }
@@ -123,9 +123,9 @@ globalThis.test("load(~usersFile) reads a YAML file from disk", async () => {
   });
 });
 
-globalThis.test("load(~usersFile) returns Error when the file is missing", async () => {
+globalThis.test("load(~accountsFile) returns Error when the file is missing", async () => {
   resetAll();
-  let match = UserStore$ReventlessLocal.load(undefined, "/tmp/does-not-exist-reventless.yaml", undefined);
+  let match = AccountStore$ReventlessLocal.load(undefined, "/tmp/does-not-exist-reventless.yaml", undefined);
   if (match.TAG === "Ok") {
     return Stdlib_JsError.throwWithMessage("expected Error for missing file");
   }
@@ -133,18 +133,18 @@ globalThis.test("load(~usersFile) returns Error when the file is missing", async
 
 globalThis.test("load() with no args + no default file returns Empty", async () => {
   resetAll();
-  let msg = UserStore$ReventlessLocal.load(undefined, undefined, undefined);
+  let msg = AccountStore$ReventlessLocal.load(undefined, undefined, undefined);
   if (msg.TAG !== "Ok") {
     return Stdlib_JsError.throwWithMessage("load failed: " + msg._0);
   }
   let tmp = msg._0;
   if (typeof tmp !== "object") {
-    if (tmp === "InlineUsers") {
+    if (tmp === "InlineAccounts") {
       return Stdlib_JsError.throwWithMessage("expected Empty or DefaultFile");
     } else {
       return;
     }
-  } else if (tmp.TAG === "UsersFile") {
+  } else if (tmp.TAG === "AccountsFile") {
     return Stdlib_JsError.throwWithMessage("expected Empty or DefaultFile");
   } else {
     return;
@@ -163,11 +163,11 @@ globalThis.test("inline users win over a file path", async () => {
       password: "inline-pw",
       groups: []
     }];
-  let msg = UserStore$ReventlessLocal.load(inline, path, undefined);
+  let msg = AccountStore$ReventlessLocal.load(inline, path, undefined);
   if (msg.TAG === "Ok") {
     let tmp = msg._0;
-    if (typeof tmp === "object" || tmp !== "InlineUsers") {
-      Stdlib_JsError.throwWithMessage("expected InlineUsers (inline should win)");
+    if (typeof tmp === "object" || tmp !== "InlineAccounts") {
+      Stdlib_JsError.throwWithMessage("expected InlineAccounts (inline should win)");
     }
   } else {
     Stdlib_JsError.throwWithMessage("load failed: " + msg._0);
@@ -189,12 +189,12 @@ globalThis.test("inline users win over a file path", async () => {
 
 globalThis.test("autoLoadOnce is a no-op after an explicit load", async () => {
   resetAll();
-  UserStore$ReventlessLocal.load([{
+  AccountStore$ReventlessLocal.load([{
       username: "x",
       password: "x",
       groups: []
     }], undefined, undefined);
-  UserStore$ReventlessLocal.autoLoadOnce();
+  AccountStore$ReventlessLocal.autoLoadOnce();
   let match = LocalAuth$ReventlessLocal.lookupUser("x");
   if (match !== undefined) {
     return;
@@ -203,7 +203,7 @@ globalThis.test("autoLoadOnce is a no-op after an explicit load", async () => {
   }
 });
 
-globalThis.describe("UserStore.providedGroups", () => {
+globalThis.describe("AccountStore.providedGroups", () => {
   let inDir = (files, f) => {
     let dir = Nodefs.mkdtempSync(Nodepath.join(Nodeos.tmpdir(), "reventless-provided-"));
     files.forEach(param => {
@@ -232,30 +232,30 @@ globalThis.describe("UserStore.providedGroups", () => {
   globalThis.test("counts the default file the servers will load", () => {
     resetAll();
     let groups = inDir([[
-        ".reventless/users.yaml",
+        ".reventless/accounts.yaml",
         `- username: m\n  password: m\n  groups: [` + "Merchandiser" + `]\n`
-      ]], () => UserStore$ReventlessLocal.providedGroups());
+      ]], () => AccountStore$ReventlessLocal.providedGroups());
     globalThis.expect(groups.includes("Merchandiser")).toBe(true);
   });
   globalThis.test("counts the template where setup has not made the file yet", () => {
     resetAll();
     let groups = inDir([[
-        "users.example.yaml",
+        "accounts.example.yaml",
         `- username: m\n  password: m\n  groups: [` + "Fulfilment" + `]\n`
-      ]], () => UserStore$ReventlessLocal.providedGroups());
+      ]], () => AccountStore$ReventlessLocal.providedGroups());
     globalThis.expect(groups.includes("Fulfilment")).toBe(true);
   });
   globalThis.test("once loaded from elsewhere, counts those accounts and not the directory's", () => {
     resetAll();
-    UserStore$ReventlessLocal.load([{
+    AccountStore$ReventlessLocal.load([{
         username: "i",
         password: "i",
         groups: ["Inline"]
       }], undefined, undefined);
     let groups = inDir([[
-        ".reventless/users.yaml",
+        ".reventless/accounts.yaml",
         `- username: m\n  password: m\n  groups: [` + "Merchandiser" + `]\n`
-      ]], () => UserStore$ReventlessLocal.providedGroups());
+      ]], () => AccountStore$ReventlessLocal.providedGroups());
     globalThis.expect([
       groups.includes("Inline"),
       groups.includes("Merchandiser")
@@ -266,10 +266,10 @@ globalThis.describe("UserStore.providedGroups", () => {
   });
   globalThis.test("loading other accounts after a plugin was checked is refused", () => {
     resetAll();
-    UserStore$ReventlessLocal.pluginChecked.contents = true;
+    AccountStore$ReventlessLocal.pluginChecked.contents = true;
     let refused;
     try {
-      UserStore$ReventlessLocal.load([{
+      AccountStore$ReventlessLocal.load([{
           username: "late",
           password: "l",
           groups: ["Late"]
@@ -287,13 +287,13 @@ globalThis.describe("UserStore.providedGroups", () => {
   });
   globalThis.test("the default load after a plugin was checked is the one the check read", () => {
     resetAll();
-    UserStore$ReventlessLocal.pluginChecked.contents = true;
-    let loaded = inDir([], () => Stdlib_Result.isOk(UserStore$ReventlessLocal.load(undefined, undefined, undefined)));
+    AccountStore$ReventlessLocal.pluginChecked.contents = true;
+    let loaded = inDir([], () => Stdlib_Result.isOk(AccountStore$ReventlessLocal.load(undefined, undefined, undefined)));
     globalThis.expect(loaded).toBe(true);
   });
 });
 
-globalThis.describe("UserStore.reload", () => {
+globalThis.describe("AccountStore.reload", () => {
   let signsIn = async (username, password) => {
     let match = await LocalAuth$ReventlessLocal.Login.issue(username, password, undefined);
     return match.TAG === "Ok";
@@ -308,7 +308,7 @@ globalThis.describe("UserStore.reload", () => {
   password: b1
   groups: []
 `);
-    UserStore$ReventlessLocal.load(undefined, path, undefined);
+    AccountStore$ReventlessLocal.load(undefined, path, undefined);
     Nodefs.writeFileSync(path, `
 - username: alice
   password: a2
@@ -317,7 +317,7 @@ globalThis.describe("UserStore.reload", () => {
   password: driver
   groups: [Driver]
 `, "utf8");
-    let said = UserStore$ReventlessLocal.reload(path);
+    let said = AccountStore$ReventlessLocal.reload(path);
     if (said.TAG === "Ok") {
       globalThis.expect(said._0).toEqual("2 accounts, removed: bob");
     } else {
@@ -336,9 +336,9 @@ globalThis.describe("UserStore.reload", () => {
   password: a1
   groups: [Editor]
 `);
-    UserStore$ReventlessLocal.load(undefined, path, undefined);
+    AccountStore$ReventlessLocal.load(undefined, path, undefined);
     Nodefs.writeFileSync(path, "- username: alice\n  groups: [Editor]\n", "utf8");
-    globalThis.expect(Stdlib_Result.isError(UserStore$ReventlessLocal.reload(path))).toBe(true);
+    globalThis.expect(Stdlib_Result.isError(AccountStore$ReventlessLocal.reload(path))).toBe(true);
     globalThis.expect(await signsIn("alice", "a1")).toBe(true);
   });
   globalThis.test("watch reads the file again once it is saved", async () => {
@@ -348,8 +348,8 @@ globalThis.describe("UserStore.reload", () => {
   password: a1
   groups: [Editor]
 `);
-    UserStore$ReventlessLocal.load(undefined, path, undefined);
-    UserStore$ReventlessLocal.watch(path);
+    AccountStore$ReventlessLocal.load(undefined, path, undefined);
+    AccountStore$ReventlessLocal.watch(path);
     Nodefs.writeFileSync(path, `
 - username: alice
   password: a1
@@ -371,7 +371,7 @@ globalThis.describe("UserStore.reload", () => {
       }
     };
     let added = await waitFor(60);
-    UserStore$ReventlessLocal.unwatch();
+    AccountStore$ReventlessLocal.unwatch();
     globalThis.expect(added).toBe(true);
   });
 });

package/tests/capability/{Capability_IdentityProvider_UserStoreTest.res → Capability_IdentityProvider_AccountStoreTest.res}

@@ -8,26 +8,28 @@ let email = address => Reventless.Messaging.ToEmail(Reventless.Email.unsafe(addr
 
 let freshFile = (): string => {
   let dir = NodeFs.mkdtempSync(NodePath.join([NodeOs.tmpdir(), "reventless-identity-"]))
-  NodePath.join([dir, ".reventless", "users.yaml"])
+  NodePath.join([dir, ".reventless", "accounts.yaml"])
 }
 
 let resetAll = () => {
   LocalAuth.resetUsers()
   LocalAuth.Login.resetStore()
-  UserStore.resetResolution()
+  AccountStore.resetResolution()
 }
 
 let restartFrom = (file: string): unit => {
   resetAll()
-  switch UserStore.load(~usersFile=file, ()) {
+  switch AccountStore.load(~accountsFile=file, ()) {
   | Ok(_) => ()
   | Error(message) => JsError.throwWithMessage(`reload failed: ${message}`)
   }
 }
 
-describe("Capability_IdentityProvider_UserStore", () => {
+describe("Capability_IdentityProvider_AccountStore", () => {
   testSync("publishes all four operations", () =>
-    expect(Capability_IdentityProvider_UserStore.make(~path=freshFile(), ()).operations)->toEqual([
+    expect(
+      Capability_IdentityProvider_AccountStore.make(~path=freshFile(), ()).operations,
+    )->toEqual([
       Reventless.IdentityProvider.CreatePrincipal,
       AddToGroup,
       RemoveFromGroup,
@@ -38,7 +40,7 @@ describe("Capability_IdentityProvider_UserStore", () => {
   testPromise("a created principal can log in now and after a restart", async () => {
     resetAll()
     let file = freshFile()
-    let provider = Capability_IdentityProvider_UserStore.make(~path=file, ())
+    let provider = Capability_IdentityProvider_AccountStore.make(~path=file, ())
     let created = await provider.createPrincipal(
       ~contact=email("new@example.com"),
       ~credential=Password("secret-1"),
@@ -66,7 +68,7 @@ describe("Capability_IdentityProvider_UserStore", () => {
 
   testPromise("the same contact twice is a Conflict, not a second account", async () => {
     resetAll()
-    let provider = Capability_IdentityProvider_UserStore.make(~path=freshFile(), ())
+    let provider = Capability_IdentityProvider_AccountStore.make(~path=freshFile(), ())
     let create = () =>
       provider.createPrincipal(
         ~contact=email("twice@example.com"),
@@ -81,7 +83,7 @@ describe("Capability_IdentityProvider_UserStore", () => {
   // exists for the next provisioning step without a credential anyone holds.
   testPromise("NoCredential writes an account no password opens", async () => {
     resetAll()
-    let provider = Capability_IdentityProvider_UserStore.make(~path=freshFile(), ())
+    let provider = Capability_IdentityProvider_AccountStore.make(~path=freshFile(), ())
     let _ = await provider.createPrincipal(
       ~contact=email("later@example.com"),
       ~credential=NoCredential,
@@ -94,7 +96,7 @@ describe("Capability_IdentityProvider_UserStore", () => {
   })
 
   testPromise("a push address is refused, since nothing signs in with one", async () => {
-    let provider = Capability_IdentityProvider_UserStore.make(~path=freshFile(), ())
+    let provider = Capability_IdentityProvider_AccountStore.make(~path=freshFile(), ())
     let answer = await provider.createPrincipal(
       ~contact=ToPush(Fcm({registrationToken: "tok"})),
       ~credential=NoCredential,
@@ -111,7 +113,7 @@ describe("Capability_IdentityProvider_UserStore", () => {
   testPromise("groups round-trip through the file", async () => {
     resetAll()
     let file = freshFile()
-    let provider = Capability_IdentityProvider_UserStore.make(~path=file, ())
+    let provider = Capability_IdentityProvider_AccountStore.make(~path=file, ())
     let principal: Reventless.IdentityProvider.principal = {providerId: "grp@example.com"}
     let _ = await provider.createPrincipal(
       ~contact=email("grp@example.com"),
@@ -133,7 +135,7 @@ describe("Capability_IdentityProvider_UserStore", () => {
 
   testPromise("grouping a principal that does not exist is refused", async () => {
     resetAll()
-    let provider = Capability_IdentityProvider_UserStore.make(~path=freshFile(), ())
+    let provider = Capability_IdentityProvider_AccountStore.make(~path=freshFile(), ())
     let answer = await provider.addToGroup(~principal={providerId: "ghost"}, ~group="Shopper")
     expect(answer)->toEqual(Error(Reventless.IdentityProvider.Refused("no principal ghost")))
   })
@@ -141,7 +143,7 @@ describe("Capability_IdentityProvider_UserStore", () => {
   testPromise("deleting removes the account from the file and the login, twice", async () => {
     resetAll()
     let file = freshFile()
-    let provider = Capability_IdentityProvider_UserStore.make(~path=file, ())
+    let provider = Capability_IdentityProvider_AccountStore.make(~path=file, ())
     let principal: Reventless.IdentityProvider.principal = {providerId: "gone@example.com"}
     let _ = await provider.createPrincipal(
       ~contact=email("gone@example.com"),
@@ -166,7 +168,7 @@ describe("Capability_IdentityProvider_UserStore", () => {
   groups: [Admin]
 `,
     )
-    let provider = Capability_IdentityProvider_UserStore.make(~path=file, ())
+    let provider = Capability_IdentityProvider_AccountStore.make(~path=file, ())
     let _ = await provider.createPrincipal(
       ~contact=email("c@example.com"),
       ~credential=Password("pw"),

package/tests/capability/{Capability_IdentityProvider_UserStoreTest.res.mjs → Capability_IdentityProvider_AccountStoreTest.res.mjs}

@@ -7,9 +7,9 @@ import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Stdlib_Result from "@rescript/runtime/lib/es6/Stdlib_Result.js";
 import * as Stdlib_JsError from "@rescript/runtime/lib/es6/Stdlib_JsError.js";
 import * as LocalAuth$ReventlessLocal from "../../src/adapter/Auth/LocalAuth.res.mjs";
-import * as UserStore$ReventlessLocal from "../../src/adapter/Auth/UserStore.res.mjs";
 import * as Auth_UserId$ReventlessCore from "@reventlessdev/reventless-core/src/adapter/Auth/Auth_UserId.res.mjs";
-import * as Capability_IdentityProvider_UserStore$ReventlessLocal from "../../src/capability/Capability_IdentityProvider_UserStore.res.mjs";
+import * as AccountStore$ReventlessLocal from "../../src/adapter/Auth/AccountStore.res.mjs";
+import * as Capability_IdentityProvider_AccountStore$ReventlessLocal from "../../src/capability/Capability_IdentityProvider_AccountStore.res.mjs";
 
 function email(address) {
   return {
@@ -20,18 +20,18 @@ function email(address) {
 
 function freshFile() {
   let dir = Nodefs.mkdtempSync(Nodepath.join(Nodeos.tmpdir(), "reventless-identity-"));
-  return Nodepath.join(dir, ".reventless", "users.yaml");
+  return Nodepath.join(dir, ".reventless", "accounts.yaml");
 }
 
 function resetAll() {
   LocalAuth$ReventlessLocal.resetUsers();
   LocalAuth$ReventlessLocal.Login.resetStore();
-  UserStore$ReventlessLocal.resetResolution();
+  AccountStore$ReventlessLocal.resetResolution();
 }
 
 function restartFrom(file) {
   resetAll();
-  let message = UserStore$ReventlessLocal.load(undefined, file, undefined);
+  let message = AccountStore$ReventlessLocal.load(undefined, file, undefined);
   if (message.TAG === "Ok") {
     return;
   } else {
@@ -39,9 +39,9 @@ function restartFrom(file) {
   }
 }
 
-globalThis.describe("Capability_IdentityProvider_UserStore", () => {
+globalThis.describe("Capability_IdentityProvider_AccountStore", () => {
   globalThis.test("publishes all four operations", () => {
-    globalThis.expect(Capability_IdentityProvider_UserStore$ReventlessLocal.make(freshFile(), undefined).operations).toEqual([
+    globalThis.expect(Capability_IdentityProvider_AccountStore$ReventlessLocal.make(freshFile(), undefined).operations).toEqual([
       "CreatePrincipal",
       "AddToGroup",
       "RemoveFromGroup",
@@ -51,7 +51,7 @@ globalThis.describe("Capability_IdentityProvider_UserStore", () => {
   globalThis.test("a created principal can log in now and after a restart", async () => {
     resetAll();
     let file = freshFile();
-    let provider = Capability_IdentityProvider_UserStore$ReventlessLocal.make(file, undefined);
+    let provider = Capability_IdentityProvider_AccountStore$ReventlessLocal.make(file, undefined);
     let created = await provider.createPrincipal({
       TAG: "ToEmail",
       _0: "new@example.com"
@@ -75,7 +75,7 @@ globalThis.describe("Capability_IdentityProvider_UserStore", () => {
   });
   globalThis.test("the same contact twice is a Conflict, not a second account", async () => {
     resetAll();
-    let provider = Capability_IdentityProvider_UserStore$ReventlessLocal.make(freshFile(), undefined);
+    let provider = Capability_IdentityProvider_AccountStore$ReventlessLocal.make(freshFile(), undefined);
     let create = () => provider.createPrincipal({
       TAG: "ToEmail",
       _0: "twice@example.com"
@@ -88,7 +88,7 @@ globalThis.describe("Capability_IdentityProvider_UserStore", () => {
   });
   globalThis.test("NoCredential writes an account no password opens", async () => {
     resetAll();
-    let provider = Capability_IdentityProvider_UserStore$ReventlessLocal.make(freshFile(), undefined);
+    let provider = Capability_IdentityProvider_AccountStore$ReventlessLocal.make(freshFile(), undefined);
     await provider.createPrincipal({
       TAG: "ToEmail",
       _0: "later@example.com"
@@ -97,7 +97,7 @@ globalThis.describe("Capability_IdentityProvider_UserStore", () => {
     globalThis.expect(Stdlib_Result.isOk(await LocalAuth$ReventlessLocal.Login.issue("later@example.com", "", undefined))).toBe(true);
   });
   globalThis.test("a push address is refused, since nothing signs in with one", async () => {
-    let provider = Capability_IdentityProvider_UserStore$ReventlessLocal.make(freshFile(), undefined);
+    let provider = Capability_IdentityProvider_AccountStore$ReventlessLocal.make(freshFile(), undefined);
     let answer = await provider.createPrincipal({
       TAG: "ToPush",
       _0: {
@@ -117,7 +117,7 @@ globalThis.describe("Capability_IdentityProvider_UserStore", () => {
   globalThis.test("groups round-trip through the file", async () => {
     resetAll();
     let file = freshFile();
-    let provider = Capability_IdentityProvider_UserStore$ReventlessLocal.make(file, undefined);
+    let provider = Capability_IdentityProvider_AccountStore$ReventlessLocal.make(file, undefined);
     let principal = {
       providerId: "grp@example.com"
     };
@@ -150,7 +150,7 @@ globalThis.describe("Capability_IdentityProvider_UserStore", () => {
   });
   globalThis.test("grouping a principal that does not exist is refused", async () => {
     resetAll();
-    let provider = Capability_IdentityProvider_UserStore$ReventlessLocal.make(freshFile(), undefined);
+    let provider = Capability_IdentityProvider_AccountStore$ReventlessLocal.make(freshFile(), undefined);
     let answer = await provider.addToGroup({
       providerId: "ghost"
     }, "Shopper");
@@ -165,7 +165,7 @@ globalThis.describe("Capability_IdentityProvider_UserStore", () => {
   globalThis.test("deleting removes the account from the file and the login, twice", async () => {
     resetAll();
     let file = freshFile();
-    let provider = Capability_IdentityProvider_UserStore$ReventlessLocal.make(file, undefined);
+    let provider = Capability_IdentityProvider_AccountStore$ReventlessLocal.make(file, undefined);
     let principal = {
       providerId: "gone@example.com"
     };
@@ -198,7 +198,7 @@ globalThis.describe("Capability_IdentityProvider_UserStore", () => {
   password: pw
   groups: [Admin]
 `, "utf8");
-    let provider = Capability_IdentityProvider_UserStore$ReventlessLocal.make(file, undefined);
+    let provider = Capability_IdentityProvider_AccountStore$ReventlessLocal.make(file, undefined);
     await provider.createPrincipal({
       TAG: "ToEmail",
       _0: "c@example.com"

package/tests/capability/LocalCapabilitiesTest.res

@@ -22,14 +22,14 @@ describe("LocalCapabilities.unmetWarning", () => {
     let message = LocalCapabilities.unmetWarning(~declared)->Option.getOr("")
     expect(message->String.includes("Geocoding (GeocodeAddress)"))->toBe(true)
     expect(message->String.includes("Capability_Messaging_Log.make()"))->toBe(true)
-    expect(message->String.includes("Capability_IdentityProvider_UserStore.make()"))->toBe(true)
+    expect(message->String.includes("Capability_IdentityProvider_AccountStore.make()"))->toBe(true)
   })
 
   testSync("a registered provider leaves the warning", () => {
     reset()
     LocalCapabilities.registerMessagingSender("Shop <shop@example.test>")
     LocalCapabilities.registerIdentityProvider(
-      Capability_IdentityProvider_UserStore.make(~path="/nonexistent/users.yaml", ()),
+      Capability_IdentityProvider_AccountStore.make(~path="/nonexistent/accounts.yaml", ()),
     )
     expect(LocalCapabilities.provisioned())->toEqual([
       Reventless.CapabilityNeed.Messaging,

package/tests/capability/LocalCapabilitiesTest.res.mjs

@@ -3,7 +3,7 @@
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Capabilities$Reventless from "@reventlessdev/reventless-spec/src/semantic/Capabilities.res.mjs";
 import * as LocalCapabilities$ReventlessLocal from "../../src/adapter/LocalCapabilities.res.mjs";
-import * as Capability_IdentityProvider_UserStore$ReventlessLocal from "../../src/capability/Capability_IdentityProvider_UserStore.res.mjs";
+import * as Capability_IdentityProvider_AccountStore$ReventlessLocal from "../../src/capability/Capability_IdentityProvider_AccountStore.res.mjs";
 
 let declared = [
   [
@@ -32,12 +32,12 @@ globalThis.describe("LocalCapabilities.unmetWarning", () => {
     let message = Stdlib_Option.getOr(LocalCapabilities$ReventlessLocal.unmetWarning(declared), "");
     globalThis.expect(message.includes("Geocoding (GeocodeAddress)")).toBe(true);
     globalThis.expect(message.includes("Capability_Messaging_Log.make()")).toBe(true);
-    globalThis.expect(message.includes("Capability_IdentityProvider_UserStore.make()")).toBe(true);
+    globalThis.expect(message.includes("Capability_IdentityProvider_AccountStore.make()")).toBe(true);
   });
   globalThis.test("a registered provider leaves the warning", () => {
     reset();
     LocalCapabilities$ReventlessLocal.registerMessagingSender("Shop <shop@example.test>");
-    LocalCapabilities$ReventlessLocal.registerIdentityProvider(Capability_IdentityProvider_UserStore$ReventlessLocal.make("/nonexistent/users.yaml", undefined));
+    LocalCapabilities$ReventlessLocal.registerIdentityProvider(Capability_IdentityProvider_AccountStore$ReventlessLocal.make("/nonexistent/accounts.yaml", undefined));
     globalThis.expect(LocalCapabilities$ReventlessLocal.provisioned()).toEqual([
       "Messaging",
       "IdentityProvider",