@reventlessdev/reventless-aws 3.0.0-alpha.385 → 3.0.0-alpha.387

package/CHANGELOG.md

@@ -3,6 +3,21 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.387 (2026-10-19)
+
+### Features
+
+* **spec,aws,local:** tell the host shell which environment it runs in, and write local host UI files into a chosen assetsDir ([4f896d1](https://github.com/ReventlessDev/reventless-core/commit/4f896d13ae9ec0d211c33dbd9271e7197cfebc41))
+
+
+# 3.0.0-alpha.386 (2026-10-17)
+
+**Note:** Version bump only for package @reventlessdev/reventless-aws
+
+
+
+
+
 # 3.0.0-alpha.385 (2026-10-16)
 
 * feat!(inbound): a translation slice can declare a signed webhook URL ([0ad6994](https://github.com/ReventlessDev/reventless-core/commit/0ad69949fcc91c2756c60ca8cb120dd468841d8b))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-aws",
-  "version": "3.0.0-alpha.385",
+  "version": "3.0.0-alpha.387",
   "description": "AWS adapters for Reventless",
   "license": "Apache-2.0",
   "bin": {
@@ -23,18 +23,18 @@
     "uuid": "^13.0.0",
     "yaml": "^2.8.3",
     "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.32",
+    "@reventlessdev/rescript-pulumi-aws": "3.0.0-alpha.30",
     "@reventlessdev/rescript-jest": "1.0.0-alpha.12",
     "@reventlessdev/rescript-effect": "1.0.0-alpha.0",
     "@reventlessdev/rescript-node": "2.0.0-alpha.22",
-    "@reventlessdev/rescript-pulumi-aws": "3.0.0-alpha.30",
-    "@reventlessdev/rescript-uuid": "2.0.0-alpha.1",
     "@reventlessdev/rescript-pulumi-pulumi": "3.0.0-alpha.0",
     "@reventlessdev/rescript-web": "1.0.0-alpha.7",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.195",
-    "@reventlessdev/reventless-core": "3.0.0-alpha.298",
+    "@reventlessdev/reventless-core": "3.0.0-alpha.300",
+    "@reventlessdev/rescript-uuid": "2.0.0-alpha.1",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.197",
+    "@reventlessdev/reventless-postgres": "3.0.0-alpha.164",
     "@reventlessdev/reventless-interop": "3.0.0-alpha.41",
-    "@reventlessdev/reventless-postgres": "3.0.0-alpha.162",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.167"
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.169"
   },
   "devDependencies": {
     "rescript": "12.3.1",

package/src/Platform.res

@@ -2355,6 +2355,12 @@ module MakeWithConfig = (
       // `platformApiEndpoint`, already present) with the store it declares, so there
       // is no per-store URL to publish. The store's *serving* base URL still travels
       // in the `objectStores` stack output above.
+      // Outside the apply; the same name the deployment record carries.
+      let shellEnvironment = Reventless.ShellEnvironment.resolve(
+        ~provenance=Reventless.DeploymentProvenance.current(),
+        ~stack=stackName,
+        ~prodStacks=Util_HostUiDomain.resolveProdStacks(),
+      )
       let configJsonContent =
         (
           (
@@ -2407,6 +2413,7 @@ module MakeWithConfig = (
           // public Function URL and its config key are both gone.
           Util_ShellConfig.fields(
             ~computed=withEvents,
+            ~environment=shellEnvironment,
             ~viewModes=?cfg.viewModes,
             ~bakedManifest=?cfg.bakedManifest,
             ~uiSlotsFile=?cfg.uiSlotsFile,

package/src/Platform.res.mjs

@@ -35,6 +35,7 @@ import * as Plugin_Stack$ReventlessAws from "./plugin/stack/Plugin_Stack.res.mjs
 import * as UiFragments$ReventlessCore from "@reventlessdev/reventless-core/src/admin/UiFragmentRegistry/StateView/UiFragments.res.mjs";
 import * as Util_Pulumi$ReventlessCore from "@reventlessdev/reventless-core/src/util/Util_Pulumi.res.mjs";
 import * as AccountsManifest$Reventless from "@reventlessdev/reventless-spec/src/types/AccountsManifest.res.mjs";
+import * as ShellEnvironment$Reventless from "@reventlessdev/reventless-spec/src/types/ShellEnvironment.res.mjs";
 import * as Platform_Casts$ReventlessAws from "./Platform_Casts.res.mjs";
 import * as Platform_Stack$ReventlessAws from "./Platform_Stack.res.mjs";
 import * as QueryDbBackend$ReventlessAws from "./adapter/QueryDb/QueryDbBackend.res.mjs";
@@ -52,6 +53,7 @@ import * as Util_StoreLayout$ReventlessAws from "./util/Util_StoreLayout.res.mjs
 import * as IndexJs from "@pulumi/pulumi/runtime/index.js";
 import * as AppSync_EventsApi$ReventlessAws from "./adapter/Api/AppSync_EventsApi.res.mjs";
 import * as AppSync_MergedApi$ReventlessAws from "./components/Api/AppSync_MergedApi.res.mjs";
+import * as DeploymentProvenance$Reventless from "@reventlessdev/reventless-spec/src/types/DeploymentProvenance.res.mjs";
 import * as GraphQL_Stitcher$ReventlessCore from "@reventlessdev/reventless-core/src/components/Api/GraphQL_Stitcher.res.mjs";
 import * as NoEventMappings$ReventlessInfra from "@reventlessdev/reventless-infra/src/types/NoEventMappings.res.mjs";
 import * as Platform_UiSlots$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_UiSlots.res.mjs";
@@ -1235,6 +1237,7 @@ function MakeWithConfig(Config) {
       if (capabilities.includes("Messaging") && !emailSenderProvisioned) {
         Stdlib_JsError.throwWithMessage(`A plugin of this deployment declares the Messaging capability, but this platform provisions no email sender.\n  The sender is configuration and has no default: set \`platform:messagingEmailSender\` in Pulumi.<stack>.yaml (or the env var REVENTLESS_MESSAGING_EMAIL_SENDER), then verify the address with SES.\n  A stack that should not mail anybody sets \`platform:messagingEmailProvider: log\` instead — every message is logged and none is sent, and the address is optional.\n  The root must also pass \`~messagingSender\` in \`~hostUiBundle\`, from \`ReventlessAws.Capability_Messaging.make(~name=…)\`.\n  The declaration is generated from the plugins' capabilities.json — regenerate with \`pnpm run generate:platform\` if it is stale.`);
       }
+      let shellEnvironment = ShellEnvironment$Reventless.resolve(DeploymentProvenance$Reventless.current(), stackName, Util_HostUiDomain$ReventlessAws.resolveProdStacks());
       let configJsonContent = Pulumi.all([
         Pulumi.all([
           resolvedDomainApiEndpoint,
@@ -1286,7 +1289,7 @@ function MakeWithConfig(Config) {
               AppSync_EventsApi$ReventlessAws.clientNamespaceName
             ]
           ]) : computed;
-        return JSON.stringify(Util_ShellConfig$ReventlessAws.fields(withEvents, hostUiBundle.viewModes, hostUiBundle.bakedManifest, hostUiBundle.uiSlotsFile, hostUiBundle.shellConfig));
+        return JSON.stringify(Util_ShellConfig$ReventlessAws.fields(withEvents, shellEnvironment, hostUiBundle.viewModes, hostUiBundle.bakedManifest, hostUiBundle.uiSlotsFile, hostUiBundle.shellConfig));
       });
       let bootFileCacheControl = "no-cache";
       new (Aws.s3.BucketObject)("host-ui-config-json", {
@@ -2628,6 +2631,7 @@ function Make($star) {
       if (capabilities.includes("Messaging") && !emailSenderProvisioned) {
         Stdlib_JsError.throwWithMessage(`A plugin of this deployment declares the Messaging capability, but this platform provisions no email sender.\n  The sender is configuration and has no default: set \`platform:messagingEmailSender\` in Pulumi.<stack>.yaml (or the env var REVENTLESS_MESSAGING_EMAIL_SENDER), then verify the address with SES.\n  A stack that should not mail anybody sets \`platform:messagingEmailProvider: log\` instead — every message is logged and none is sent, and the address is optional.\n  The root must also pass \`~messagingSender\` in \`~hostUiBundle\`, from \`ReventlessAws.Capability_Messaging.make(~name=…)\`.\n  The declaration is generated from the plugins' capabilities.json — regenerate with \`pnpm run generate:platform\` if it is stale.`);
       }
+      let shellEnvironment = ShellEnvironment$Reventless.resolve(DeploymentProvenance$Reventless.current(), stackName, Util_HostUiDomain$ReventlessAws.resolveProdStacks());
       let configJsonContent = Pulumi.all([
         Pulumi.all([
           resolvedDomainApiEndpoint,
@@ -2679,7 +2683,7 @@ function Make($star) {
               AppSync_EventsApi$ReventlessAws.clientNamespaceName
             ]
           ]) : computed;
-        return JSON.stringify(Util_ShellConfig$ReventlessAws.fields(withEvents, hostUiBundle.viewModes, hostUiBundle.bakedManifest, hostUiBundle.uiSlotsFile, hostUiBundle.shellConfig));
+        return JSON.stringify(Util_ShellConfig$ReventlessAws.fields(withEvents, shellEnvironment, hostUiBundle.viewModes, hostUiBundle.bakedManifest, hostUiBundle.uiSlotsFile, hostUiBundle.shellConfig));
       });
       let bootFileCacheControl = "no-cache";
       new (Aws.s3.BucketObject)("host-ui-config-json", {

package/src/util/Util_ShellConfig.res

@@ -81,7 +81,8 @@ let subscriptionEndpoint = (httpsEndpoint: string): string =>
 /**
 The config.json field set.
 
-`computed` arrives in wire order and keeps it. `viewModes` unset ⇒ no
+`computed` arrives in wire order and keeps it; `environment` follows it, its
+purpose key only when the purpose is known. `viewModes` unset ⇒ no
 `viewModes` key and no per-mode key, so a deployment that wants no optional mode
 gets byte-identical output to before this input existed. `bakedManifest` unset ⇒
 no `manifestUrl`, and every caller keeps the admin discovery path. `shellConfig`
@@ -91,6 +92,7 @@ somewhere unintended with nothing in the diff to say so.
 */
 let fields = (
   ~computed: array<(string, JSON.t)>,
+  ~environment: option<Reventless.ShellEnvironment.t>=?,
   ~viewModes: option<array<Platform.viewMode>>=?,
   ~bakedManifest: option<Platform.bakedManifest>=?,
   ~uiSlotsFile: option<string>=?,
@@ -98,6 +100,10 @@ let fields = (
 ): dict<JSON.t> => {
   let out = computed->Dict.fromArray
 
+  environment->Option.forEach(env =>
+    env->Reventless.ShellEnvironment.configFields->Array.forEach(((k, v)) => out->Dict.set(k, v))
+  )
+
   // Computed, like the endpoints: the group the admin API is gated on, from the
   // deploy's own role mapping.
   ReventlessCore.Platform_AdminGroup.configEntry()->Option.forEach(((k, v)) => out->Dict.set(k, v))

package/src/util/Util_ShellConfig.res.mjs

@@ -4,6 +4,7 @@ import * as Pervasives from "@rescript/runtime/lib/es6/Pervasives.js";
 import * as Stdlib_Dict from "@rescript/runtime/lib/es6/Stdlib_Dict.js";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Platform$ReventlessInfra from "@reventlessdev/reventless-infra/src/types/Platform.res.mjs";
+import * as ShellEnvironment$Reventless from "@reventlessdev/reventless-spec/src/types/ShellEnvironment.res.mjs";
 import * as Platform_UiSlots$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_UiSlots.res.mjs";
 import * as Platform_AdminGroup$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_AdminGroup.res.mjs";
 import * as Platform_BakedManifest$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_BakedManifest.res.mjs";
@@ -58,8 +59,13 @@ function subscriptionEndpoint(httpsEndpoint) {
   return httpsEndpoint.replace("https://", "wss://").replace(".appsync-api.", ".appsync-realtime-api.");
 }
 
-function fields(computed, viewModes, bakedManifest, uiSlotsFile, shellConfig) {
+function fields(computed, environment, viewModes, bakedManifest, uiSlotsFile, shellConfig) {
   let out = Object.fromEntries(computed);
+  Stdlib_Option.forEach(environment, env => {
+    ShellEnvironment$Reventless.configFields(env).forEach(param => {
+      out[param[0]] = param[1];
+    });
+  });
   Stdlib_Option.forEach(Platform_AdminGroup$ReventlessCore.configEntry(), param => {
     out[param[0]] = param[1];
   });
@@ -107,4 +113,4 @@ export {
   subscriptionEndpoint,
   fields,
 }
-/* Platform_AdminGroup-ReventlessCore Not a pure module */
+/* ShellEnvironment-Reventless Not a pure module */

package/tests/Util_ShellConfigTest.res

@@ -226,6 +226,46 @@ describe("Util_ShellConfig.fields — journeys", () => {
   })
 })
 
+// The shell badges every environment that is not production, so a purpose that
+// went missing shows as a badge rather than as nothing.
+describe("Util_ShellConfig.fields — environment", () => {
+  testSync("the name and the purpose follow the computed keys", () => {
+    let out = Util_ShellConfig.fields(~computed, ~environment={name: "test", purpose: Some("test")})
+    expect(out->Dict.keysToArray)->toEqual([
+      "apiEndpoint",
+      "region",
+      "environment",
+      "environmentPurpose",
+    ])
+    expect((out->get("environment"), out->get("environmentPurpose")))->toEqual((
+      JSON.Encode.string("test"),
+      JSON.Encode.string("test"),
+    ))
+  })
+
+  testSync("an unknown purpose leaves its key out", () => {
+    let out = Util_ShellConfig.fields(~computed, ~environment={name: "alpha", purpose: None})
+    expect(out->Dict.get("environmentPurpose")->Option.isNone)->toBe(true)
+  })
+
+  testSync("a shellConfig environment fails the deploy rather than renaming it", () => {
+    let failure = try {
+      let _ = Util_ShellConfig.fields(
+        ~computed,
+        ~environment={name: "prod", purpose: Some("production")},
+        ~shellConfig=Dict.fromArray([("environment", JSON.Encode.string("staging"))]),
+      )
+      None
+    } catch {
+    | Failure(message) => Some(message)
+    }
+    switch failure {
+    | Some(message) => expect(message->String.includes("environment"))->toBe(true)
+    | None => fail("a shellConfig key renaming the computed environment must fail the deploy")
+    }
+  })
+})
+
 describe("Util_ShellConfig.fields — shellConfig passthrough", () => {
   testSync("shell-owned keys land verbatim, under the computed ones", () => {
     let out = Util_ShellConfig.fields(

package/tests/Util_ShellConfigTest.res.mjs

@@ -28,7 +28,7 @@ function get(out, key) {
 
 globalThis.describe("Util_ShellConfig.fields — viewModes", () => {
   globalThis.test("unset ⇒ no viewModes key and the computed set is untouched", () => {
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, undefined);
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, undefined, undefined);
     globalThis.expect(Object.keys(out)).toEqual([
       "apiEndpoint",
       "region"
@@ -36,7 +36,7 @@ globalThis.describe("Util_ShellConfig.fields — viewModes", () => {
     globalThis.expect(Stdlib_Option.isNone(out["viewModes"])).toBe(true);
   });
   globalThis.test("Map with defaults ⇒ the mode, and no mapStyle key", () => {
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, [{
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, [{
         TAG: "Map",
         _0: {}
       }], undefined, undefined, undefined);
@@ -44,7 +44,7 @@ globalThis.describe("Util_ShellConfig.fields — viewModes", () => {
     globalThis.expect(Stdlib_Option.isNone(out["mapStyle"])).toBe(true);
   });
   globalThis.test("per-mode options flatten beside the mode", () => {
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, [
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, [
       {
         TAG: "Map",
         _0: {
@@ -77,21 +77,21 @@ globalThis.describe("Util_ShellConfig.fields — bakedManifest", () => {
     key: key
   });
   globalThis.test("unset ⇒ no manifestUrl, so every caller keeps the admin path", () => {
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, undefined);
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, undefined, undefined);
     globalThis.expect(Stdlib_Option.isNone(out["manifestUrl"])).toBe(true);
   });
   globalThis.test("declared ⇒ the URL the deploy writes the file to", () => {
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, bake(undefined), undefined, undefined);
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, bake(undefined), undefined, undefined);
     globalThis.expect(get(out, "manifestUrl")).toEqual("/component-manifest.json");
   });
   globalThis.test("follows a renamed bake", () => {
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, bake("storefront.json"), undefined, undefined);
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, bake("storefront.json"), undefined, undefined);
     globalThis.expect(get(out, "manifestUrl")).toEqual("/storefront.json");
   });
   globalThis.test("a shellConfig manifestUrl fails the deploy rather than redirecting it", () => {
     let failure;
     try {
-      Util_ShellConfig$ReventlessAws.fields(computed, undefined, bake(undefined), undefined, Object.fromEntries([[
+      Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, bake(undefined), undefined, Object.fromEntries([[
           "manifestUrl",
           "/elsewhere.json"
         ]]));
@@ -115,21 +115,21 @@ globalThis.describe("Util_ShellConfig.fields — bakedManifest", () => {
 
 globalThis.describe("Util_ShellConfig.fields — uiSlotsFile", () => {
   globalThis.test("unset ⇒ no uiSlotsUrl, and the shell imports nothing", () => {
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, undefined);
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, undefined, undefined);
     globalThis.expect(Stdlib_Option.isNone(out["uiSlotsUrl"])).toBe(true);
   });
   globalThis.test("declared ⇒ the URL the deploy writes the module to", () => {
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, "/src/storefront-slots.js", undefined);
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, "/src/storefront-slots.js", undefined);
     globalThis.expect(get(out, "uiSlotsUrl")).toEqual("/ui-slots.js");
   });
   globalThis.test("names where the file is served, never where it was authored", () => {
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, "/home/me/prj/slots.js", undefined);
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, "/home/me/prj/slots.js", undefined);
     globalThis.expect(get(out, "uiSlotsUrl")).toEqual("/ui-slots.js");
   });
   globalThis.test("a shellConfig uiSlotsUrl fails the deploy rather than redirecting it", () => {
     let failure;
     try {
-      Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, "/src/storefront-slots.js", Object.fromEntries([[
+      Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, "/src/storefront-slots.js", Object.fromEntries([[
           "uiSlotsUrl",
           "/elsewhere.js"
         ]]));
@@ -181,7 +181,7 @@ globalThis.describe("Util_ShellConfig.fields — journeys", () => {
     key: fulfilment_key
   };
   globalThis.test("a bake declaring no journeys writes no map", () => {
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, {
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, {
       components: [{
           plugin: "Catalog",
           views: ["Products"],
@@ -191,15 +191,15 @@ globalThis.describe("Util_ShellConfig.fields — journeys", () => {
     globalThis.expect(Stdlib_Option.isNone(out["journeyManifestUrls"])).toBe(true);
   });
   globalThis.test("an empty journeys array is the same as none", () => {
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, withJourneys([]), undefined, undefined);
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, withJourneys([]), undefined, undefined);
     globalThis.expect(Stdlib_Option.isNone(out["journeyManifestUrls"])).toBe(true);
   });
   globalThis.test("keeps manifestUrl as the default journey", () => {
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, withJourneys([shopper]), undefined, undefined);
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, withJourneys([shopper]), undefined, undefined);
     globalThis.expect(get(out, "manifestUrl")).toEqual("/component-manifest.json");
   });
   globalThis.test("maps each declared group to its own file", () => {
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, withJourneys([
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, withJourneys([
       shopper,
       fulfilment
     ]), undefined, undefined);
@@ -219,14 +219,14 @@ globalThis.describe("Util_ShellConfig.fields — journeys", () => {
       shopper,
       fulfilment
     ]);
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, bake, undefined, undefined);
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, bake, undefined, undefined);
     let published = Stdlib_Option.mapOr(Stdlib_JSON.Decode.string(get(out, "manifestUrl")), [], url => [url]).concat(Stdlib_Array.filterMap(Object.values(Stdlib_Option.getOr(Stdlib_JSON.Decode.object(get(out, "journeyManifestUrls")), {})), Stdlib_JSON.Decode.string));
     globalThis.expect(published).toEqual(Platform_BakedManifest$ReventlessCore.files(bake).map(param => "/" + param[0]));
   });
   globalThis.test("a shellConfig journey map fails the deploy rather than redirecting it", () => {
     let failure;
     try {
-      Util_ShellConfig$ReventlessAws.fields(computed, undefined, withJourneys([shopper]), undefined, Object.fromEntries([[
+      Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, withJourneys([shopper]), undefined, Object.fromEntries([[
           "journeyManifestUrls",
           {}
         ]]));
@@ -248,9 +248,64 @@ globalThis.describe("Util_ShellConfig.fields — journeys", () => {
   });
 });
 
+globalThis.describe("Util_ShellConfig.fields — environment", () => {
+  globalThis.test("the name and the purpose follow the computed keys", () => {
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, {
+      name: "test",
+      purpose: "test"
+    }, undefined, undefined, undefined, undefined);
+    globalThis.expect(Object.keys(out)).toEqual([
+      "apiEndpoint",
+      "region",
+      "environment",
+      "environmentPurpose"
+    ]);
+    globalThis.expect([
+      get(out, "environment"),
+      get(out, "environmentPurpose")
+    ]).toEqual([
+      "test",
+      "test"
+    ]);
+  });
+  globalThis.test("an unknown purpose leaves its key out", () => {
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, {
+      name: "alpha",
+      purpose: undefined
+    }, undefined, undefined, undefined, undefined);
+    globalThis.expect(Stdlib_Option.isNone(out["environmentPurpose"])).toBe(true);
+  });
+  globalThis.test("a shellConfig environment fails the deploy rather than renaming it", () => {
+    let failure;
+    try {
+      Util_ShellConfig$ReventlessAws.fields(computed, {
+        name: "prod",
+        purpose: "production"
+      }, undefined, undefined, undefined, Object.fromEntries([[
+          "environment",
+          "staging"
+        ]]));
+      failure = undefined;
+    } catch (raw_message) {
+      let message = Primitive_exceptions.internalToException(raw_message);
+      if (message.RE_EXN_ID === "Failure") {
+        failure = message._1;
+      } else {
+        throw message;
+      }
+    }
+    if (failure !== undefined) {
+      globalThis.expect(failure.includes("environment")).toBe(true);
+      return;
+    } else {
+      return JestGlobals.fail("a shellConfig key renaming the computed environment must fail the deploy");
+    }
+  });
+});
+
 globalThis.describe("Util_ShellConfig.fields — shellConfig passthrough", () => {
   globalThis.test("shell-owned keys land verbatim, under the computed ones", () => {
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, Object.fromEntries([
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, undefined, Object.fromEntries([
       [
         "platformName",
         "Online Shop"
@@ -271,7 +326,7 @@ globalThis.describe("Util_ShellConfig.fields — shellConfig passthrough", () =>
   globalThis.test("a key the deploy computes fails the deploy, naming it", () => {
     let failure;
     try {
-      Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, Object.fromEntries([[
+      Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, undefined, Object.fromEntries([[
           "apiEndpoint",
           "https://wrong.example/graphql"
         ]]));
@@ -345,7 +400,7 @@ globalThis.describe("the subscription endpoint", () => {
 globalThis.describe("Util_ShellConfig.fields — adminGroup", () => {
   globalThis.test("is absent while the administrator role keeps its own name", () => {
     Role$Reventless.clearGroups();
-    globalThis.expect(Stdlib_Option.isNone(Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, undefined)["adminGroup"])).toBe(true);
+    globalThis.expect(Stdlib_Option.isNone(Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, undefined, undefined)["adminGroup"])).toBe(true);
   });
   globalThis.test("carries the group a renamed administrator role maps to", () => {
     Role$Reventless.clearGroups();
@@ -353,7 +408,7 @@ globalThis.describe("Util_ShellConfig.fields — adminGroup", () => {
         Role$Reventless.admin,
         "shop-admins"
       ]]);
-    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, undefined);
+    let out = Util_ShellConfig$ReventlessAws.fields(computed, undefined, undefined, undefined, undefined, undefined);
     Role$Reventless.clearGroups();
     globalThis.expect(get(out, "adminGroup")).toEqual("shop-admins");
   });