@reventlessdev/reventless-aws 3.0.0-alpha.386 → 3.0.0-alpha.388

package/CHANGELOG.md

@@ -3,6 +3,27 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.388 (2026-10-21)
+
+* feat!: the write-side logic module is called the decision, and a codemod moves an app over ([cb573ff](https://github.com/ReventlessDev/reventless-core/commit/cb573ff5b928c7d7f3e75988dfaa65066f8c95eb))
+
+### BREAKING CHANGES
+
+* <Spec>_Behavior.res, @@reventless.behavior,
+Reventless.Behavior.T, StateChangeSlice.Behavior, Behavior_GWT and
+thenRefused no longer exist. Run `npx reventless-rename-to-decision` at an
+app's root, then rebuild; comments are not rewritten. The PPX must be the
+matching release.
+
+
+
+# 3.0.0-alpha.387 (2026-10-19)
+
+### Features
+
+* **spec,aws,local:** tell the host shell which environment it runs in, and write local host UI files into a chosen assetsDir ([4f896d1](https://github.com/ReventlessDev/reventless-core/commit/4f896d13ae9ec0d211c33dbd9271e7197cfebc41))
+
+
 # 3.0.0-alpha.386 (2026-10-17)
 
 **Note:** Version bump only for package @reventlessdev/reventless-aws

package/README.md

@@ -21,7 +21,7 @@ ReScript modules, consumed by adding the package to your `rescript.json` `depend
 
 - **`Platform`** — the AWS platform functor (`Platform.Make()` / `Platform.MakeWithConfig({...})`).
   Applying it wires up AWS builders once; your plugin functor then takes only the
-  application-defined `Spec`, `Behavior`, and `Mappings`.
+  application-defined `Spec`, `Decision`, and `Mappings`.
 - **Component builders** (`Aggregate_Builder`, `ReadModel_Builder`, `Plugin`,
   the slice builders, `Task_Builder`, `Counter_Builder`, `Scheduler`, …) —
   AWS-preconfigured versions of the core hierarchical components, including the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-aws",
-  "version": "3.0.0-alpha.386",
+  "version": "3.0.0-alpha.388",
   "description": "AWS adapters for Reventless",
   "license": "Apache-2.0",
   "bin": {
@@ -22,19 +22,19 @@
     "sury": "11.0.0",
     "uuid": "^13.0.0",
     "yaml": "^2.8.3",
-    "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.32",
-    "@reventlessdev/rescript-effect": "1.0.0-alpha.0",
-    "@reventlessdev/rescript-jest": "1.0.0-alpha.12",
-    "@reventlessdev/rescript-node": "2.0.0-alpha.22",
-    "@reventlessdev/rescript-pulumi-aws": "3.0.0-alpha.30",
+    "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.33",
+    "@reventlessdev/rescript-effect": "1.0.0-alpha.1",
+    "@reventlessdev/rescript-jest": "1.0.0-alpha.13",
+    "@reventlessdev/rescript-pulumi-aws": "3.0.0-alpha.31",
+    "@reventlessdev/rescript-node": "2.0.0-alpha.23",
     "@reventlessdev/rescript-pulumi-pulumi": "3.0.0-alpha.0",
     "@reventlessdev/rescript-uuid": "2.0.0-alpha.1",
-    "@reventlessdev/rescript-web": "1.0.0-alpha.7",
-    "@reventlessdev/reventless-core": "3.0.0-alpha.299",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.196",
-    "@reventlessdev/reventless-interop": "3.0.0-alpha.41",
-    "@reventlessdev/reventless-postgres": "3.0.0-alpha.163",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.168"
+    "@reventlessdev/reventless-core": "3.0.0-alpha.301",
+    "@reventlessdev/rescript-web": "1.0.0-alpha.8",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.198",
+    "@reventlessdev/reventless-postgres": "3.0.0-alpha.165",
+    "@reventlessdev/reventless-interop": "3.0.0-alpha.42",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.170"
   },
   "devDependencies": {
     "rescript": "12.3.1",

package/scripts/ProvisionIdentity.res

@@ -10,7 +10,7 @@ outside every stack. That is this.
 🚨 **It does not attach a pre-token-generation trigger, and must not.** The pool's
 one trigger slot is the deploy's business: a script that filled it would be the
 hand-run `UpdateUserPool` this whole area refuses, leaving the deployment's
-behaviour depending on an act no source describes.
+behavior depending on an act no source describes.
 
 The store's name and key schema come from [Auth_ActiveRoleStore_Schema] rather
 than from constants here. A second copy of either would be one edit away from

package/src/Platform.res

@@ -2,7 +2,7 @@
 //
 // Creates a platform instance with pre-wired AWS builders (DynamoDB, Lambda, SQS, SNS).
 // Config is applied once at platform creation; component Make functors then take only
-// the application-defined arguments (Spec, Behavior, Mappings).
+// the application-defined arguments (Spec, Decision, Mappings).
 //
 // Example:
 //   module Platform = Platform.Make()
@@ -593,19 +593,19 @@ module MakeWithConfig = (
     // _Micro, _NoResolver) — see docs/plans/Backlog/aws-deployment-strategy.md.
     module Make = (
       Spec: Reventless.Aggregate.Spec,
-      Behavior: Reventless.Behavior.T with module Spec := Spec,
+      Decision: Reventless.Decision.T with module Spec := Spec,
       EventMappings: ReventlessInfra.EventMapper.Mappings with module Target := Spec,
     ): (
       ReventlessInfra.Aggregate.T with type api = Types.AppSync.api
-    ) => Aggregate_Builder_Single.Make(Spec, Behavior, EventMappings)
+    ) => Aggregate_Builder_Single.Make(Spec, Decision, EventMappings)
     /** Async variant — uses FIFO SQS channel, commands return `CommandPending`. */
     module MakeAsync = (
       Spec: Reventless.Aggregate.Spec,
-      Behavior: Reventless.Behavior.T with module Spec := Spec,
+      Decision: Reventless.Decision.T with module Spec := Spec,
       EventMappings: ReventlessInfra.EventMapper.Mappings with module Target := Spec,
     ): (
       ReventlessInfra.Aggregate.T with type api = Types.AppSync.api
-    ) => Aggregate_Builder_Single_Async.Make(Spec, Behavior, EventMappings)
+    ) => Aggregate_Builder_Single_Async.Make(Spec, Decision, EventMappings)
   }
 
   module ReadModel = {
@@ -734,16 +734,16 @@ module MakeWithConfig = (
   module StateChangeSlice = {
     module Make = (
       Spec: Reventless.StateChangeSlice.Spec,
-      Behavior: Reventless.StateChangeSlice.Behavior with module Spec := Spec,
+      Decision: Reventless.StateChangeSlice.Decision with module Spec := Spec,
     ): (
       ReventlessInfra.StateChangeSlice.T with module Spec = Spec
-    ) => StateChangeSlice_Builder.Make(Spec, Behavior)
+    ) => StateChangeSlice_Builder.Make(Spec, Decision)
     /** Async variant — uses FIFO SQS channel, commands return `CommandPending`. */
     module MakeAsync = (
       Spec: Reventless.StateChangeSlice.Spec,
-      Behavior: Reventless.StateChangeSlice.Behavior with module Spec := Spec,
+      Decision: Reventless.StateChangeSlice.Decision with module Spec := Spec,
     ): (ReventlessInfra.StateChangeSlice.T with module Spec = Spec) => {
-      include StateChangeSlice_Builder.Make(Spec, Behavior)
+      include StateChangeSlice_Builder.Make(Spec, Decision)
       let isAsync = true
     }
   }
@@ -769,7 +769,7 @@ module MakeWithConfig = (
   // slice's command handler exactly once).
   module UiFragmentRegistrySlice = StateChangeSlice.Make(
     ReventlessCore.UiFragmentRegistry,
-    ReventlessCore.UiFragmentRegistry_Behavior,
+    ReventlessCore.UiFragmentRegistry_Decision,
   )
   module UiFragmentsViewSlice = StateViewSlice.Make(
     ReventlessCore.UiFragments,
@@ -1085,7 +1085,7 @@ module MakeWithConfig = (
   module PluginAggregate: ReventlessInfra.Aggregate.T
     with type api = Types.AppSync.api = Aggregate_Builder_Single.Make(
     ReventlessCore.PluginSpec,
-    ReventlessCore.PluginBehavior,
+    ReventlessCore.PluginDecision,
     ReventlessInfra.NoEventMappings.Make(ReventlessCore.PluginSpec),
   )
 
@@ -2355,6 +2355,12 @@ module MakeWithConfig = (
       // `platformApiEndpoint`, already present) with the store it declares, so there
       // is no per-store URL to publish. The store's *serving* base URL still travels
       // in the `objectStores` stack output above.
+      // Outside the apply; the same name the deployment record carries.
+      let shellEnvironment = Reventless.ShellEnvironment.resolve(
+        ~provenance=Reventless.DeploymentProvenance.current(),
+        ~stack=stackName,
+        ~prodStacks=Util_HostUiDomain.resolveProdStacks(),
+      )
       let configJsonContent =
         (
           (
@@ -2407,6 +2413,7 @@ module MakeWithConfig = (
           // public Function URL and its config key are both gone.
           Util_ShellConfig.fields(
             ~computed=withEvents,
+            ~environment=shellEnvironment,
             ~viewModes=?cfg.viewModes,
             ~bakedManifest=?cfg.bakedManifest,
             ~uiSlotsFile=?cfg.uiSlotsFile,
@@ -2697,7 +2704,7 @@ module MakeWithConfig = (
     //
     // A platform that provisioned no geocoder yields "", and the plugin's client
     // reports `Unavailable` — retried, then surfaced by the heartbeat sweep. That
-    // is a modelled outcome, which is the point of the empty string: a plugin
+    // is a modeled outcome, which is the point of the empty string: a plugin
     // deployed against a platform without the capability degrades rather than
     // failing to deploy.
     // The place index, not the Function URL. A slice's Lambda reaches Amazon
@@ -2900,7 +2907,7 @@ module MakeWithConfig = (
           // why a *declared* need fails the deploy.
           //
           // Only a declared need. A plugin that says nothing still degrades
-          // exactly as before: the empty endpoint is a modelled outcome for a
+          // exactly as before: the empty endpoint is a modeled outcome for a
           // deployment that simply has no geocoder, and failing those would break
           // deployments that work.
           switch Reventless.CapabilityNeed.unmet(

package/src/Platform.res.mjs

@@ -35,6 +35,7 @@ import * as Plugin_Stack$ReventlessAws from "./plugin/stack/Plugin_Stack.res.mjs
 import * as UiFragments$ReventlessCore from "@reventlessdev/reventless-core/src/admin/UiFragmentRegistry/StateView/UiFragments.res.mjs";
 import * as Util_Pulumi$ReventlessCore from "@reventlessdev/reventless-core/src/util/Util_Pulumi.res.mjs";
 import * as AccountsManifest$Reventless from "@reventlessdev/reventless-spec/src/types/AccountsManifest.res.mjs";
+import * as ShellEnvironment$Reventless from "@reventlessdev/reventless-spec/src/types/ShellEnvironment.res.mjs";
 import * as Platform_Casts$ReventlessAws from "./Platform_Casts.res.mjs";
 import * as Platform_Stack$ReventlessAws from "./Platform_Stack.res.mjs";
 import * as QueryDbBackend$ReventlessAws from "./adapter/QueryDb/QueryDbBackend.res.mjs";
@@ -42,7 +43,7 @@ import * as AppSync_Adapter$ReventlessAws from "./components/Api/AppSync_Adapter
 import * as Counter_Builder$ReventlessAws from "./components/Counter_Builder.res.mjs";
 import * as EventLogBackend$ReventlessAws from "./adapter/EventLog/EventLogBackend.res.mjs";
 import * as Platform_Admin$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_Admin.res.mjs";
-import * as PluginBehavior$ReventlessCore from "@reventlessdev/reventless-core/src/plugin/lifecycle/PluginBehavior.res.mjs";
+import * as PluginDecision$ReventlessCore from "@reventlessdev/reventless-core/src/plugin/lifecycle/PluginDecision.res.mjs";
 import * as Plugin_Helpers$ReventlessCore from "@reventlessdev/reventless-core/src/plugin/component/Plugin_Helpers.res.mjs";
 import * as Upload_Claim_S3$ReventlessAws from "./adapter/Upload/Upload_Claim_S3.res.mjs";
 import * as PgProjectionFeed$ReventlessAws from "./adapter/Postgres/PgProjectionFeed.res.mjs";
@@ -52,6 +53,7 @@ import * as Util_StoreLayout$ReventlessAws from "./util/Util_StoreLayout.res.mjs
 import * as IndexJs from "@pulumi/pulumi/runtime/index.js";
 import * as AppSync_EventsApi$ReventlessAws from "./adapter/Api/AppSync_EventsApi.res.mjs";
 import * as AppSync_MergedApi$ReventlessAws from "./components/Api/AppSync_MergedApi.res.mjs";
+import * as DeploymentProvenance$Reventless from "@reventlessdev/reventless-spec/src/types/DeploymentProvenance.res.mjs";
 import * as GraphQL_Stitcher$ReventlessCore from "@reventlessdev/reventless-core/src/components/Api/GraphQL_Stitcher.res.mjs";
 import * as NoEventMappings$ReventlessInfra from "@reventlessdev/reventless-infra/src/types/NoEventMappings.res.mjs";
 import * as Platform_UiSlots$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_UiSlots.res.mjs";
@@ -93,7 +95,7 @@ import * as PluginExtensionPointSpec$ReventlessInfra from "@reventlessdev/revent
 import * as Platform_UIFragments_Lambda$ReventlessAws from "./adapter/Api/Platform_UIFragments_Lambda.res.mjs";
 import * as CommandTopicChannel_SQS_Sync$ReventlessAws from "./adapter/CommandTopic/CommandTopicChannel_SQS_Sync.res.mjs";
 import * as EventLogSubscription_AppSync$ReventlessAws from "./adapter/EventLogSubscription/EventLogSubscription_AppSync.res.mjs";
-import * as UiFragmentRegistry_Behavior$ReventlessCore from "@reventlessdev/reventless-core/src/admin/UiFragmentRegistry/StateChange/UiFragmentRegistry_Behavior.res.mjs";
+import * as UiFragmentRegistry_Decision$ReventlessCore from "@reventlessdev/reventless-core/src/admin/UiFragmentRegistry/StateChange/UiFragmentRegistry_Decision.res.mjs";
 import * as CommandTopicChannel_SQS_Async$ReventlessAws from "./adapter/CommandTopic/CommandTopicChannel_SQS_Async.res.mjs";
 import * as Geocoder_AwsLocation_Resolver$ReventlessAws from "./adapter/Geocoder/Geocoder_AwsLocation_Resolver.res.mjs";
 import * as Plugin_ExtensionPoint_Builder$ReventlessAws from "./plugin/stack/Plugin_ExtensionPoint_Builder.res.mjs";
@@ -381,8 +383,8 @@ function MakeWithConfig(Config) {
     api: resolveTargetApi,
     apiRole: resolveTargetApiRole
   };
-  let Make = Spec => (Behavior => (EventMappings => Aggregate_Builder_Single$ReventlessAws.Make(Spec)(Behavior)(EventMappings)));
-  let MakeAsync = Spec => (Behavior => (EventMappings => Aggregate_Builder_Single_Async$ReventlessAws.Make(Spec)(Behavior)(EventMappings)));
+  let Make = Spec => (Decision => (EventMappings => Aggregate_Builder_Single$ReventlessAws.Make(Spec)(Decision)(EventMappings)));
+  let MakeAsync = Spec => (Decision => (EventMappings => Aggregate_Builder_Single_Async$ReventlessAws.Make(Spec)(Decision)(EventMappings)));
   let Aggregate = {
     Make: Make,
     MakeAsync: MakeAsync
@@ -462,12 +464,12 @@ function MakeWithConfig(Config) {
     Make: Make$5
   };
   let Counter = Counter_Builder$ReventlessAws.Make(ApiConfig);
-  let Make$6 = Spec => (Behavior => StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Behavior));
-  let MakeAsync$1 = Spec => (Behavior => {
-    let include = StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Behavior);
+  let Make$6 = Spec => (Decision => StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Decision));
+  let MakeAsync$1 = Spec => (Decision => {
+    let include = StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Decision);
     return {
       Spec: include.Spec,
-      Behavior: include.Behavior,
+      Decision: include.Decision,
       isAsync: true,
       make: include.make
     };
@@ -496,9 +498,9 @@ function MakeWithConfig(Config) {
   };
   let UiFragmentRegistrySlice = StateChangeSlice_Builder$ReventlessAws.Make(Spec)({
     initialState: undefined,
-    evolve: UiFragmentRegistry_Behavior$ReventlessCore.evolve,
-    decide: UiFragmentRegistry_Behavior$ReventlessCore.decide,
-    moduleUrl: UiFragmentRegistry_Behavior$ReventlessCore.moduleUrl
+    evolve: UiFragmentRegistry_Decision$ReventlessCore.evolve,
+    decide: UiFragmentRegistry_Decision$ReventlessCore.decide,
+    moduleUrl: UiFragmentRegistry_Decision$ReventlessCore.moduleUrl
   });
   let UiFragmentsViewSlice = Make$7({
     name: UiFragments$ReventlessCore.name,
@@ -690,11 +692,11 @@ function MakeWithConfig(Config) {
     commandTransition: PluginSpec$ReventlessCore.commandTransition,
     traits: PluginSpec$ReventlessCore.traits
   })({
-    initialState: PluginBehavior$ReventlessCore.initialState,
-    evolve: PluginBehavior$ReventlessCore.evolve,
-    decide: PluginBehavior$ReventlessCore.decide,
+    initialState: PluginDecision$ReventlessCore.initialState,
+    evolve: PluginDecision$ReventlessCore.evolve,
+    decide: PluginDecision$ReventlessCore.decide,
     snapshot: undefined,
-    moduleUrl: PluginBehavior$ReventlessCore.moduleUrl
+    moduleUrl: PluginDecision$ReventlessCore.moduleUrl
   })(NoEventMappings$ReventlessInfra.Make({
     name: PluginSpec$ReventlessCore.name,
     Id: Id$Reventless.$$String,
@@ -1235,6 +1237,7 @@ function MakeWithConfig(Config) {
       if (capabilities.includes("Messaging") && !emailSenderProvisioned) {
         Stdlib_JsError.throwWithMessage(`A plugin of this deployment declares the Messaging capability, but this platform provisions no email sender.\n  The sender is configuration and has no default: set \`platform:messagingEmailSender\` in Pulumi.<stack>.yaml (or the env var REVENTLESS_MESSAGING_EMAIL_SENDER), then verify the address with SES.\n  A stack that should not mail anybody sets \`platform:messagingEmailProvider: log\` instead — every message is logged and none is sent, and the address is optional.\n  The root must also pass \`~messagingSender\` in \`~hostUiBundle\`, from \`ReventlessAws.Capability_Messaging.make(~name=…)\`.\n  The declaration is generated from the plugins' capabilities.json — regenerate with \`pnpm run generate:platform\` if it is stale.`);
       }
+      let shellEnvironment = ShellEnvironment$Reventless.resolve(DeploymentProvenance$Reventless.current(), stackName, Util_HostUiDomain$ReventlessAws.resolveProdStacks());
       let configJsonContent = Pulumi.all([
         Pulumi.all([
           resolvedDomainApiEndpoint,
@@ -1286,7 +1289,7 @@ function MakeWithConfig(Config) {
               AppSync_EventsApi$ReventlessAws.clientNamespaceName
             ]
           ]) : computed;
-        return JSON.stringify(Util_ShellConfig$ReventlessAws.fields(withEvents, hostUiBundle.viewModes, hostUiBundle.bakedManifest, hostUiBundle.uiSlotsFile, hostUiBundle.shellConfig));
+        return JSON.stringify(Util_ShellConfig$ReventlessAws.fields(withEvents, shellEnvironment, hostUiBundle.viewModes, hostUiBundle.bakedManifest, hostUiBundle.uiSlotsFile, hostUiBundle.shellConfig));
       });
       let bootFileCacheControl = "no-cache";
       new (Aws.s3.BucketObject)("host-ui-config-json", {
@@ -1797,8 +1800,8 @@ function Make($star) {
     api: resolveTargetApi,
     apiRole: resolveTargetApiRole
   };
-  let Make$1 = Spec => (Behavior => (EventMappings => Aggregate_Builder_Single$ReventlessAws.Make(Spec)(Behavior)(EventMappings)));
-  let MakeAsync = Spec => (Behavior => (EventMappings => Aggregate_Builder_Single_Async$ReventlessAws.Make(Spec)(Behavior)(EventMappings)));
+  let Make$1 = Spec => (Decision => (EventMappings => Aggregate_Builder_Single$ReventlessAws.Make(Spec)(Decision)(EventMappings)));
+  let MakeAsync = Spec => (Decision => (EventMappings => Aggregate_Builder_Single_Async$ReventlessAws.Make(Spec)(Decision)(EventMappings)));
   let Aggregate = {
     Make: Make$1,
     MakeAsync: MakeAsync
@@ -1878,12 +1881,12 @@ function Make($star) {
     Make: Make$6
   };
   let Counter = Counter_Builder$ReventlessAws.Make(ApiConfig);
-  let Make$7 = Spec => (Behavior => StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Behavior));
-  let MakeAsync$1 = Spec => (Behavior => {
-    let include = StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Behavior);
+  let Make$7 = Spec => (Decision => StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Decision));
+  let MakeAsync$1 = Spec => (Decision => {
+    let include = StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Decision);
     return {
       Spec: include.Spec,
-      Behavior: include.Behavior,
+      Decision: include.Decision,
       isAsync: true,
       make: include.make
     };
@@ -1912,9 +1915,9 @@ function Make($star) {
   };
   let UiFragmentRegistrySlice = StateChangeSlice_Builder$ReventlessAws.Make(Spec)({
     initialState: undefined,
-    evolve: UiFragmentRegistry_Behavior$ReventlessCore.evolve,
-    decide: UiFragmentRegistry_Behavior$ReventlessCore.decide,
-    moduleUrl: UiFragmentRegistry_Behavior$ReventlessCore.moduleUrl
+    evolve: UiFragmentRegistry_Decision$ReventlessCore.evolve,
+    decide: UiFragmentRegistry_Decision$ReventlessCore.decide,
+    moduleUrl: UiFragmentRegistry_Decision$ReventlessCore.moduleUrl
   });
   let UiFragmentsViewSlice = Make$8({
     name: UiFragments$ReventlessCore.name,
@@ -2106,11 +2109,11 @@ function Make($star) {
     commandTransition: PluginSpec$ReventlessCore.commandTransition,
     traits: PluginSpec$ReventlessCore.traits
   })({
-    initialState: PluginBehavior$ReventlessCore.initialState,
-    evolve: PluginBehavior$ReventlessCore.evolve,
-    decide: PluginBehavior$ReventlessCore.decide,
+    initialState: PluginDecision$ReventlessCore.initialState,
+    evolve: PluginDecision$ReventlessCore.evolve,
+    decide: PluginDecision$ReventlessCore.decide,
     snapshot: undefined,
-    moduleUrl: PluginBehavior$ReventlessCore.moduleUrl
+    moduleUrl: PluginDecision$ReventlessCore.moduleUrl
   })(NoEventMappings$ReventlessInfra.Make({
     name: PluginSpec$ReventlessCore.name,
     Id: Id$Reventless.$$String,
@@ -2628,6 +2631,7 @@ function Make($star) {
       if (capabilities.includes("Messaging") && !emailSenderProvisioned) {
         Stdlib_JsError.throwWithMessage(`A plugin of this deployment declares the Messaging capability, but this platform provisions no email sender.\n  The sender is configuration and has no default: set \`platform:messagingEmailSender\` in Pulumi.<stack>.yaml (or the env var REVENTLESS_MESSAGING_EMAIL_SENDER), then verify the address with SES.\n  A stack that should not mail anybody sets \`platform:messagingEmailProvider: log\` instead — every message is logged and none is sent, and the address is optional.\n  The root must also pass \`~messagingSender\` in \`~hostUiBundle\`, from \`ReventlessAws.Capability_Messaging.make(~name=…)\`.\n  The declaration is generated from the plugins' capabilities.json — regenerate with \`pnpm run generate:platform\` if it is stale.`);
       }
+      let shellEnvironment = ShellEnvironment$Reventless.resolve(DeploymentProvenance$Reventless.current(), stackName, Util_HostUiDomain$ReventlessAws.resolveProdStacks());
       let configJsonContent = Pulumi.all([
         Pulumi.all([
           resolvedDomainApiEndpoint,
@@ -2679,7 +2683,7 @@ function Make($star) {
               AppSync_EventsApi$ReventlessAws.clientNamespaceName
             ]
           ]) : computed;
-        return JSON.stringify(Util_ShellConfig$ReventlessAws.fields(withEvents, hostUiBundle.viewModes, hostUiBundle.bakedManifest, hostUiBundle.uiSlotsFile, hostUiBundle.shellConfig));
+        return JSON.stringify(Util_ShellConfig$ReventlessAws.fields(withEvents, shellEnvironment, hostUiBundle.viewModes, hostUiBundle.bakedManifest, hostUiBundle.uiSlotsFile, hostUiBundle.shellConfig));
       });
       let bootFileCacheControl = "no-cache";
       new (Aws.s3.BucketObject)("host-ui-config-json", {

package/src/Platform_Stack.res

@@ -110,7 +110,7 @@ let _identityProviderId = (~cfg: Pulumi.Config.t): option<string> => {
   `platform:loginIdentifier` (or `REVENTLESS_LOGIN_IDENTIFIER` / the sidecar).
 
   Absent means `email`, which is what every pool so far was created with. An
-  unrecognised spelling fails the deploy — see [Auth_LoginIdentifier] for why
+  unrecognized spelling fails the deploy — see [Auth_LoginIdentifier] for why
   defaulting past a typo here is unrecoverable. */
 let _loginIdentifier = (~cfg: Pulumi.Config.t): Auth_LoginIdentifier.t => {
   let raw = switch Util_LocalConfig.get("loginIdentifier") {
@@ -128,7 +128,7 @@ let _loginIdentifier = (~cfg: Pulumi.Config.t): Auth_LoginIdentifier.t => {
 
   Absent means `adminOnly`, which is what every pool so far was created with, so
   an existing stack redeploys unchanged. Unlike the sign-in attribute this is an
-  ordinary in-place update on a live pool — but an unrecognised spelling still
+  ordinary in-place update on a live pool — but an unrecognized spelling still
   fails the deploy, because defaulting past it would refuse every registration
   while the config read as if it allowed them. See [Auth_SignUpMode]. */
 let _signUpMode = (~cfg: Pulumi.Config.t): Auth_SignUpMode.t => {
@@ -215,7 +215,7 @@ let _resolveUncached = (): cognitoUserPool => {
     // separate attachment resource — so the trigger is attached by a declared
     // resource that describes the pool, merges into what it finds, and sends the
     // result back whole. Never a hand-run command: that would leave the
-    // deployment's behaviour depending on an act no source describes.
+    // deployment's behavior depending on an act no source describes.
     // The code hash is an input so a new build of the trigger reaches this
     // resource: the function ARN is stable, so it alone would let a broken
     // version onto the pool unchecked after the first deploy.

package/src/adapter/AWS_Tags.res

@@ -14,7 +14,7 @@ dimension; the bare spelling bought nothing.
 The three attribution facts are independent and all three are needed to identify
 a resource (see `ResourceAttribution`):
 
-- `~kind` — the modelling kind of the owning component (Aggregate, …)
+- `~kind` — the modeling kind of the owning component (Aggregate, …)
 - `~role` — the deployment piece this resource implements (EventLog, Runtime, …)
 - `~scope` — component / plugin / platform
 

package/src/adapter/Auth/Auth_ActiveRolePoolAttachment.res

@@ -14,7 +14,7 @@
     attachment resource, so something has to call `UpdateUserPool` against a pool
     no stack owns. That belongs in a declared resource executed at deploy time,
     never a hand-run command against a live pool, which would leave the
-    deployment's behaviour depending on an act no source describes.
+    deployment's behavior depending on an act no source describes.
 
     🚨 **The slot is the pool's, and this resource takes it only when it is
     free or already ours.** Cognito allows a pool exactly one

package/src/adapter/Auth/Auth_ActiveRoleStore_Ops.res

@@ -8,7 +8,7 @@
 // the pre-token-generation trigger ([Auth_ActiveRoleTrigger_Ops.res]) reads this
 // row on the next refresh and narrows the group claim to it. Nothing here can
 // grant anything: the trigger re-checks the stored role against real membership
-// before applying it, so a row is at most a request that the trigger may honour.
+// before applying it, so a row is at most a request that the trigger may honor.
 //
 // 🚨 **The subject is taken from the verified identity, never from the arguments.**
 // The row key is `ctx.identity.sub` as the AppSync Cognito authorizer resolved it.
@@ -115,7 +115,7 @@ type appSyncEvent = {
 The name to address this caller by when asking Cognito what groups they are in.
 
 The username when the authorizer supplied one, the subject otherwise. The
-fallback is not a guess at a username: it is the behaviour this handler had
+fallback is not a guess at a username: it is the behavior this handler had
 before the username was forwarded, kept for the pool shapes where it is correct —
 one whose username *is* the subject — rather than turning a working deployment
 into a hard failure on an absent field. Pure so the choice can be tested without

package/src/adapter/Auth/Auth_ActiveRoleStore_Schema.res

@@ -74,7 +74,7 @@ repaired for. So adoption checks the schema and refuses, rather than reporting
 success.
 
 The pre-`clientId` store is exactly this case: keyed on the subject alone. An
-operator upgrading meets a sentence instead of a silent misbehaviour.
+operator upgrading meets a sentence instead of a silent misbehavior.
 
 Order-insensitive, because `DescribeTable` does not promise one.
 */

package/src/adapter/Auth/Auth_Cognito.res

@@ -11,7 +11,7 @@
 //
 //   * `fromAppSyncIdentity` — AppSync-resolver path. Reads the
 //     already-validated identity context attached by AppSync to the
-//     resolver event (`event.identity`). Recognises both the Cognito
+//     resolver event (`event.identity`). Recognizes both the Cognito
 //     UserPool shape (`sub`, `username`, `claims['cognito:groups']`) and
 //     the AWS_IAM additional-provider shape (`userArn`, `accountId`) used
 //     by server-to-server lambdas signed via the existing IAM role.

package/src/adapter/Auth/Auth_LoginIdentifier.res

@@ -44,7 +44,7 @@ let usernameAttributes = (identifier: t): array<string> =>
 /**
 The deploy-time choice, or why the deploy cannot proceed.
 
-An unrecognised spelling refuses rather than falling back to the default: a typo
+An unrecognized spelling refuses rather than falling back to the default: a typo
 that defaulted would create a pool signing in on the wrong attribute, which is
 the one property no later deploy can correct.
 */

package/src/adapter/Auth/Auth_SignUpMode.res

@@ -53,7 +53,7 @@ let allowAdminCreateUserOnly = (mode: t): bool =>
 /**
 The deploy-time choice, or why the deploy cannot proceed.
 
-An unrecognised spelling refuses rather than falling back to the default, and the
+An unrecognized spelling refuses rather than falling back to the default, and the
 reason is *not* [Auth_LoginIdentifier]'s — this setting is correctable at any
 time. It is that the mistake would be silent. The default is closed, so a typo
 fails safe, but it fails safe *invisibly*: the deploy is green, the config says

package/src/adapter/DcbEventLog/DcbEventLogStorage_DynamoDb_Runtime.res

@@ -138,7 +138,7 @@ let toItem = (
   item->Dict.set("tags", tagsJson->JSON.Encode.array)
 
   // Flatten meta.* to top-level item attributes so individual meta keys stay
-  // GSI-projectable (matches the EventLog adapter behaviour). The DCB read
+  // GSI-projectable (matches the EventLog adapter behavior). The DCB read
   // path reassembles meta via `Reventless.Message.composeMeta`.
   event.meta
   ->ReventlessCore.Message.decomposeMeta
@@ -986,7 +986,7 @@ let appendUnconditional = async (
 // The synthetic fence tag is keyed on `getCompositePartitionKeyValue` — the same
 // value `derivePartitionKey` uses for the base-table `id` — so it is exactly as
 // selective as the entity's storage partition (and the `tag_composite` read
-// scope). Fencing per-member (the historical behaviour) gave every low-cardinality
+// scope). Fencing per-member (the historical behavior) gave every low-cardinality
 // member (e.g. `environment`, `platformName`) its own fence, which a deploy-time
 // fan-out sharing those prefixes turns into a hot partition → `TransactionConflict`
 // → `retries exhausted`; it also over-fenced (two DISTINCT composite entities

package/src/adapter/EventLog/EventLogBackend.res

@@ -14,7 +14,7 @@
 //     its plugin's EventCollector SQS queue.
 //
 // All classic EventLogs in the platform share one selection, mirroring the DCB
-// toggle. Only the Single (sync/async) aggregate strategies honour it; the
+// toggle. Only the Single (sync/async) aggregate strategies honor it; the
 // PerAggregate and Micro strategies stay DynamoDB-only.
 
 type selection = {

package/src/adapter/QueryDb/PgQueryResolver_Lambda.res

@@ -143,7 +143,7 @@ let emptyConnection = (): JSON.t =>
 
 // Spec-level authorization then the (optional) user interceptor — mirrors
 // QueryDbResolvers_GraphQL.runInterceptor. Denials return the kind's empty shape
-// (the provider-agnostic resolver behaviour), not an error.
+// (the provider-agnostic resolver behavior), not an error.
 let runInterceptor = async (
   ~binding,
   ~payload,
@@ -192,7 +192,7 @@ let dispatch = async (
       | RefuseOwned => false
       | ScopeTo(field, required) => item->argStr(field)->Option.mapOr(false, v => v == required)
       }
-    // The caller's request to see the archive, honoured only where the
+    // The caller's request to see the archive, honored only where the
     // classification says it counts.
     let askedForRetired =
       payload.arguments

package/src/adapter/Runtime/AggregateEntryPoint.mjs

@@ -1,5 +1,5 @@
 // Aggregate Lambda entry point.
-// At cold start: reads HANDLER_CONFIG, dynamically imports Spec+Behavior modules,
+// At cold start: reads HANDLER_CONFIG, dynamically imports Spec+Decision modules,
 // wires EventLog_Operations, Aggregate_Callback, CommandTopic_Callback.
 // Handles both SQS CommandTopic events (Route 2) and AppSync direct invocation (Route 1).
 
@@ -135,7 +135,7 @@ async function checkPluginStatus(event) {
 // Postgres EventLog runtime; absence keeps the DynamoDB path byte-identical.
 // `eventLogTableName` doubles as the Postgres `event_log.log_name` discriminator
 // (all aggregates share one Postgres table, unlike DynamoDB's table-per-aggregate).
-function buildAggregateParts(specModule, behaviorModule, eventLogTableName, queueUrl, pgConnection) {
+function buildAggregateParts(specModule, decisionModule, eventLogTableName, queueUrl, pgConnection) {
   const patchedSpec = patchSpecId(specModule);
   // Typed core: backend-specific EventLog storage ops (Postgres when pgConnection
   // is present, else DynamoDB). Returns the full 6-field EventLog_Adapter.operations
@@ -147,7 +147,7 @@ function buildAggregateParts(specModule, behaviorModule, eventLogTableName, queu
     eventTopic: { publish: async () => {} },
     storage: rawStorageOps,
   });
-  const aggregateCallback = aggregateCallbackMake(patchedSpec)(behaviorModule)({
+  const aggregateCallback = aggregateCallbackMake(patchedSpec)(decisionModule)({
     Spec: patchedSpec,
     EventLog: { Spec: patchedSpec },
     eventLog: eventLogOps,
@@ -227,7 +227,7 @@ const DISPATCH_MODE = process.env["DISPATCH_MODE"] === "async" ? "async" : "sync
 // already-parsed `HANDLER_CONFIG` shape, with an injectable module loader. In
 // production, `buildAllHandlers` wraps this with the env config + the Lambda's
 // `/var/task/node_modules` dynamic import; the integration test injects a loader
-// returning pre-imported spec/behavior modules so it can drive the real
+// returning pre-imported spec/decision modules so it can drive the real
 // cmdGenHandler end-to-end against DynamoDB Local. (Mirrors the DCB entry point.)
 export async function buildHandlersForConfig(config, opts = {}) {
   const loadModule = opts.loadModule ?? dynamicImport;
@@ -236,8 +236,8 @@ export async function buildHandlersForConfig(config, opts = {}) {
   const cmdGenHandlers = {};
   await Promise.all((config.handlers || []).map(async h => {
     const specModule = await loadModule(h.specModule);
-    const behaviorModule = await loadModule(h.behaviorModule);
-    const parts = buildAggregateParts(specModule, behaviorModule, h.eventLogTable, h.queueUrl, h.pgConnection);
+    const decisionModule = await loadModule(h.decisionModule);
+    const parts = buildAggregateParts(specModule, decisionModule, h.eventLogTable, h.queueUrl, h.pgConnection);
     // Pair each handler with the comp of the aggregate it belongs to: this
     // Lambda can host every aggregate in the platform, so the comp is what keeps
     // their log lines separable.

package/src/adapter/Runtime/AggregateEntryPoint_Ops.res

@@ -2,7 +2,7 @@
 //
 // The "typed core, thin shell" split (docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md).
 // The `.mjs` shell owns the untyped seams — reading `HANDLER_CONFIG`, the dynamic
-// `import()` of user Spec/Behavior modules, and the functor wiring that consumes
+// `import()` of user Spec/Decision modules, and the functor wiring that consumes
 // those runtime-loaded modules (`EventLog_Operations.Make`, `Aggregate_Callback.Make`,
 // `CommandTopic_Callback.Make`). This module owns the one piece that is pure
 // typed framework wiring: selecting and building the EventLog storage operations.