@reventlessdev/reventless-spec 3.0.0-alpha.161 → 3.0.0-alpha.162

package/CHANGELOG.md

@@ -3,6 +3,17 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.162 (2026-10-10)
+
+* feat!: a command's rule is looked up by its name, without a cast ([5f02c40](https://github.com/ReventlessDev/reventless-core/commit/5f02c4081d077bf4a6951d8c9b2b16553a8ca87b))
+
+### BREAKING CHANGES
+
+* a spec that writes `commandAuthorization` by hand writes
+`authorizationOf = (name: string) => …` instead; the PPX refuses the old name.
+
+
+
 # 3.0.0-alpha.161 (2026-10-10)
 
 ### Bug Fixes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-spec",
-  "version": "3.0.0-alpha.161",
+  "version": "3.0.0-alpha.162",
   "description": "Specifications for Reventless",
   "license": "Apache-2.0",
   "bin": {

package/src/components/Aggregate.res

@@ -58,12 +58,13 @@ module type Spec = {
   /** The roles this spec's rules name: its plugin's `Roles.t`, which the PPX
       supplies; `Role.name` where the plugin declares none. */
   type role
-  /** Authorization rule evaluated at the GraphQL resolver entry before any
-      command is dispatched. Auto-injected by `@@reventless.spec` and on
-      structurally-detected inline spec modules — defaults to
-      `AllowAuthenticated`; override at the file/module level with
-      `@@reventless.authorize(<rule>)`. */
-  let commandAuthorization: command => Authorization.rule<role>
+  /** Who may issue the command with this constructor name, asked before any
+      command exists (API, published structure, resolvers). Total: a name the
+      spec does not know gets its default rule. Auto-injected by
+      `@@reventless.spec` and on structurally-detected inline spec modules from
+      `@authorize` / `@@reventless.authorize(<rule>)`; defaults to
+      `AllowAuthenticated`. */
+  let authorizationOf: string => Authorization.rule<role>
 
   /** The lifecycle enum this component's commands move a row through — the
       linked view's own, e.g. `type lifecycleState = Customers.accountStatus`.

package/src/components/DcbTag.res

@@ -698,8 +698,8 @@ Returns `true` if the given variant constructor (by name) carries a record
 payload (compiled to `{TAG, ...}`), `false` if payload-less (compiled to a
 bare string literal). Returns `false` for names not found in the schema.
 
-Used by resolver shims to synthesize the correct runtime shape when feeding
-a command value into the PPX-generated `commandAuthorization` switch.
+Used to synthesize the correct runtime shape when feeding a stand-in command
+into a spec's `commandTransition` switch.
 */
 let isVariantPayloadBearing = (schema: S.t<'a>, name: string): bool => {
   // Returns true iff a record-payload variant in the schema has TAG === name.

package/src/components/InboundTranslationSlice.res

@@ -29,10 +29,11 @@ module type Spec = {
   /** The roles this spec's rules name: its plugin's `Roles.t`, which the PPX
       supplies; `Role.name` where the plugin declares none. */
   type role
-  /** Each command's rule. The door admits a caller satisfying any command's
-      rule; each command the input translates into is then checked against its
-      own, and one refused refuses the whole input. Defaults to `AllowAuthenticated`. */
-  let commandAuthorization: command => Authorization.rule<role>
+  /** Each command's rule, by constructor name. The door admits a caller
+      satisfying any command's rule; each command the input translates into is
+      then checked against its own, and one refused refuses the whole input.
+      Defaults to `AllowAuthenticated`. */
+  let authorizationOf: string => Authorization.rule<role>
 }
 
 /** The synchronous translate function. */

package/src/components/StateChangeSlice.res

@@ -78,12 +78,13 @@ module type Spec = {
   /** The roles this spec's rules name: its plugin's `Roles.t`, which the PPX
       supplies; `Role.name` where the plugin declares none. */
   type role
-  /** Authorization rule evaluated at the GraphQL resolver entry before any
-      command is dispatched. Auto-injected by `@@reventless.spec` and on
-      structurally-detected inline spec modules — defaults to
-      `AllowAuthenticated`; override at the file/module level with
-      `@@reventless.authorize(<rule>)`. */
-  let commandAuthorization: command => Authorization.rule<role>
+  /** Who may issue the command with this constructor name, asked before any
+      command exists (API, published structure, resolvers). Total: a name the
+      spec does not know gets its default rule. Auto-injected by
+      `@@reventless.spec` and on structurally-detected inline spec modules from
+      `@authorize` / `@@reventless.authorize(<rule>)`; defaults to
+      `AllowAuthenticated`. */
+  let authorizationOf: string => Authorization.rule<role>
 
   /** The lifecycle enum this component's commands move a row through — the
       linked view's own, e.g. `type lifecycleState = Customers.accountStatus`.

package/src/types/Transition.res

@@ -29,8 +29,8 @@
 // generated module imports nothing from the view — which is also why it cannot
 // cycle: a view spec holds no reference back to the aggregate it projects.
 //
-// Read the same way `commandAuthorization` is: `Plugin_Structure.toCommandDef`
-// evaluates it against a synthetic value per constructor.
+// `Plugin_Structure.toCommandDef` evaluates it against a synthetic value per
+// constructor.
 //
 // No `@schema`: nothing serialises a transition. It is read once, while the
 // plugin structure is assembled, and what leaves is the pair of names the