@reventlessdev/reventless-aws 3.0.0-alpha.387 → 3.0.0-alpha.389

package/CHANGELOG.md

@@ -3,6 +3,38 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.389 (2026-10-21)
+
+* feat!: a state view's row key is module Id ([08c9726](https://github.com/ReventlessDev/reventless-core/commit/08c972659a3d689a39fd5e2f2026597155e92210))
+* feat!: a plugin structure's component definitions are read-side and write-side defs ([ea2ab69](https://github.com/ReventlessDev/reventless-core/commit/ea2ab69e928ba16d7e640e4c66ab0e9ba034fe5c))
+
+### BREAKING CHANGES
+
+* a state view spec declares its row key as module Id. A
+hand-written module Key in a spec under StateView/ or StateViewStream/
+fails the build with "A state view's row key is `module Id`, not
+`module Key`".
+* Plugin.queryableDef, Plugin.writableDef, their schemas,
+isPublicQueryable and encodeQueryableDef no longer exist; a reader names
+readSideDef, writeSideDef, isPublicReadSide and encodeReadSideDef. There
+are no aliases, so the compiler lists every reader.
+
+
+
+# 3.0.0-alpha.388 (2026-10-21)
+
+* feat!: the write-side logic module is called the decision, and a codemod moves an app over ([cb573ff](https://github.com/ReventlessDev/reventless-core/commit/cb573ff5b928c7d7f3e75988dfaa65066f8c95eb))
+
+### BREAKING CHANGES
+
+* <Spec>_Behavior.res, @@reventless.behavior,
+Reventless.Behavior.T, StateChangeSlice.Behavior, Behavior_GWT and
+thenRefused no longer exist. Run `npx reventless-rename-to-decision` at an
+app's root, then rebuild; comments are not rewritten. The PPX must be the
+matching release.
+
+
+
 # 3.0.0-alpha.387 (2026-10-19)
 
 ### Features

package/README.md

@@ -21,7 +21,7 @@ ReScript modules, consumed by adding the package to your `rescript.json` `depend
 
 - **`Platform`** — the AWS platform functor (`Platform.Make()` / `Platform.MakeWithConfig({...})`).
   Applying it wires up AWS builders once; your plugin functor then takes only the
-  application-defined `Spec`, `Behavior`, and `Mappings`.
+  application-defined `Spec`, `Decision`, and `Mappings`.
 - **Component builders** (`Aggregate_Builder`, `ReadModel_Builder`, `Plugin`,
   the slice builders, `Task_Builder`, `Counter_Builder`, `Scheduler`, …) —
   AWS-preconfigured versions of the core hierarchical components, including the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-aws",
-  "version": "3.0.0-alpha.387",
+  "version": "3.0.0-alpha.389",
   "description": "AWS adapters for Reventless",
   "license": "Apache-2.0",
   "bin": {
@@ -22,19 +22,19 @@
     "sury": "11.0.0",
     "uuid": "^13.0.0",
     "yaml": "^2.8.3",
-    "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.32",
-    "@reventlessdev/rescript-pulumi-aws": "3.0.0-alpha.30",
-    "@reventlessdev/rescript-jest": "1.0.0-alpha.12",
-    "@reventlessdev/rescript-effect": "1.0.0-alpha.0",
-    "@reventlessdev/rescript-node": "2.0.0-alpha.22",
+    "@reventlessdev/rescript-aws-sdk": "3.0.0-alpha.33",
+    "@reventlessdev/rescript-effect": "1.0.0-alpha.1",
+    "@reventlessdev/rescript-node": "2.0.0-alpha.23",
+    "@reventlessdev/rescript-jest": "1.0.0-alpha.13",
+    "@reventlessdev/rescript-pulumi-aws": "3.0.0-alpha.31",
     "@reventlessdev/rescript-pulumi-pulumi": "3.0.0-alpha.0",
-    "@reventlessdev/rescript-web": "1.0.0-alpha.7",
-    "@reventlessdev/reventless-core": "3.0.0-alpha.300",
     "@reventlessdev/rescript-uuid": "2.0.0-alpha.1",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.197",
-    "@reventlessdev/reventless-postgres": "3.0.0-alpha.164",
-    "@reventlessdev/reventless-interop": "3.0.0-alpha.41",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.169"
+    "@reventlessdev/rescript-web": "1.0.0-alpha.8",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.199",
+    "@reventlessdev/reventless-interop": "3.0.0-alpha.42",
+    "@reventlessdev/reventless-postgres": "3.0.0-alpha.166",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.171",
+    "@reventlessdev/reventless-core": "3.0.0-alpha.302"
   },
   "devDependencies": {
     "rescript": "12.3.1",

package/scripts/ProvisionIdentity.res

@@ -10,7 +10,7 @@ outside every stack. That is this.
 🚨 **It does not attach a pre-token-generation trigger, and must not.** The pool's
 one trigger slot is the deploy's business: a script that filled it would be the
 hand-run `UpdateUserPool` this whole area refuses, leaving the deployment's
-behaviour depending on an act no source describes.
+behavior depending on an act no source describes.
 
 The store's name and key schema come from [Auth_ActiveRoleStore_Schema] rather
 than from constants here. A second copy of either would be one edit away from

package/src/Platform.res

@@ -2,7 +2,7 @@
 //
 // Creates a platform instance with pre-wired AWS builders (DynamoDB, Lambda, SQS, SNS).
 // Config is applied once at platform creation; component Make functors then take only
-// the application-defined arguments (Spec, Behavior, Mappings).
+// the application-defined arguments (Spec, Decision, Mappings).
 //
 // Example:
 //   module Platform = Platform.Make()
@@ -593,19 +593,19 @@ module MakeWithConfig = (
     // _Micro, _NoResolver) — see docs/plans/Backlog/aws-deployment-strategy.md.
     module Make = (
       Spec: Reventless.Aggregate.Spec,
-      Behavior: Reventless.Behavior.T with module Spec := Spec,
+      Decision: Reventless.Decision.T with module Spec := Spec,
       EventMappings: ReventlessInfra.EventMapper.Mappings with module Target := Spec,
     ): (
       ReventlessInfra.Aggregate.T with type api = Types.AppSync.api
-    ) => Aggregate_Builder_Single.Make(Spec, Behavior, EventMappings)
+    ) => Aggregate_Builder_Single.Make(Spec, Decision, EventMappings)
     /** Async variant — uses FIFO SQS channel, commands return `CommandPending`. */
     module MakeAsync = (
       Spec: Reventless.Aggregate.Spec,
-      Behavior: Reventless.Behavior.T with module Spec := Spec,
+      Decision: Reventless.Decision.T with module Spec := Spec,
       EventMappings: ReventlessInfra.EventMapper.Mappings with module Target := Spec,
     ): (
       ReventlessInfra.Aggregate.T with type api = Types.AppSync.api
-    ) => Aggregate_Builder_Single_Async.Make(Spec, Behavior, EventMappings)
+    ) => Aggregate_Builder_Single_Async.Make(Spec, Decision, EventMappings)
   }
 
   module ReadModel = {
@@ -734,16 +734,16 @@ module MakeWithConfig = (
   module StateChangeSlice = {
     module Make = (
       Spec: Reventless.StateChangeSlice.Spec,
-      Behavior: Reventless.StateChangeSlice.Behavior with module Spec := Spec,
+      Decision: Reventless.StateChangeSlice.Decision with module Spec := Spec,
     ): (
       ReventlessInfra.StateChangeSlice.T with module Spec = Spec
-    ) => StateChangeSlice_Builder.Make(Spec, Behavior)
+    ) => StateChangeSlice_Builder.Make(Spec, Decision)
     /** Async variant — uses FIFO SQS channel, commands return `CommandPending`. */
     module MakeAsync = (
       Spec: Reventless.StateChangeSlice.Spec,
-      Behavior: Reventless.StateChangeSlice.Behavior with module Spec := Spec,
+      Decision: Reventless.StateChangeSlice.Decision with module Spec := Spec,
     ): (ReventlessInfra.StateChangeSlice.T with module Spec = Spec) => {
-      include StateChangeSlice_Builder.Make(Spec, Behavior)
+      include StateChangeSlice_Builder.Make(Spec, Decision)
       let isAsync = true
     }
   }
@@ -769,7 +769,7 @@ module MakeWithConfig = (
   // slice's command handler exactly once).
   module UiFragmentRegistrySlice = StateChangeSlice.Make(
     ReventlessCore.UiFragmentRegistry,
-    ReventlessCore.UiFragmentRegistry_Behavior,
+    ReventlessCore.UiFragmentRegistry_Decision,
   )
   module UiFragmentsViewSlice = StateViewSlice.Make(
     ReventlessCore.UiFragments,
@@ -964,7 +964,7 @@ module MakeWithConfig = (
           allQueryDbs->Dict.forEachWithKey((_queryDbOutputs, readModelName) => {
             if QueryDbStorage_DynamoDbStream.streamRegistry->Set.has(readModelName) {
               // Channel root MUST equal what the host-shell subscribes to. The
-              // AutoUI manifest sets queryableDef.queryField = listFieldName
+              // AutoUI manifest sets readSideDef.queryField = listFieldName
               // (plural, e.g. "Catalog_Products") and AutoLive subscribes on that.
               // Publishing on the singular returnTypeName ("Catalog_Product")
               // would land descriptors on a channel no client listens to.
@@ -1085,7 +1085,7 @@ module MakeWithConfig = (
   module PluginAggregate: ReventlessInfra.Aggregate.T
     with type api = Types.AppSync.api = Aggregate_Builder_Single.Make(
     ReventlessCore.PluginSpec,
-    ReventlessCore.PluginBehavior,
+    ReventlessCore.PluginDecision,
     ReventlessInfra.NoEventMappings.Make(ReventlessCore.PluginSpec),
   )
 
@@ -2704,7 +2704,7 @@ module MakeWithConfig = (
     //
     // A platform that provisioned no geocoder yields "", and the plugin's client
     // reports `Unavailable` — retried, then surfaced by the heartbeat sweep. That
-    // is a modelled outcome, which is the point of the empty string: a plugin
+    // is a modeled outcome, which is the point of the empty string: a plugin
     // deployed against a platform without the capability degrades rather than
     // failing to deploy.
     // The place index, not the Function URL. A slice's Lambda reaches Amazon
@@ -2907,7 +2907,7 @@ module MakeWithConfig = (
           // why a *declared* need fails the deploy.
           //
           // Only a declared need. A plugin that says nothing still degrades
-          // exactly as before: the empty endpoint is a modelled outcome for a
+          // exactly as before: the empty endpoint is a modeled outcome for a
           // deployment that simply has no geocoder, and failing those would break
           // deployments that work.
           switch Reventless.CapabilityNeed.unmet(

package/src/Platform.res.mjs

@@ -43,7 +43,7 @@ import * as AppSync_Adapter$ReventlessAws from "./components/Api/AppSync_Adapter
 import * as Counter_Builder$ReventlessAws from "./components/Counter_Builder.res.mjs";
 import * as EventLogBackend$ReventlessAws from "./adapter/EventLog/EventLogBackend.res.mjs";
 import * as Platform_Admin$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_Admin.res.mjs";
-import * as PluginBehavior$ReventlessCore from "@reventlessdev/reventless-core/src/plugin/lifecycle/PluginBehavior.res.mjs";
+import * as PluginDecision$ReventlessCore from "@reventlessdev/reventless-core/src/plugin/lifecycle/PluginDecision.res.mjs";
 import * as Plugin_Helpers$ReventlessCore from "@reventlessdev/reventless-core/src/plugin/component/Plugin_Helpers.res.mjs";
 import * as Upload_Claim_S3$ReventlessAws from "./adapter/Upload/Upload_Claim_S3.res.mjs";
 import * as PgProjectionFeed$ReventlessAws from "./adapter/Postgres/PgProjectionFeed.res.mjs";
@@ -95,7 +95,7 @@ import * as PluginExtensionPointSpec$ReventlessInfra from "@reventlessdev/revent
 import * as Platform_UIFragments_Lambda$ReventlessAws from "./adapter/Api/Platform_UIFragments_Lambda.res.mjs";
 import * as CommandTopicChannel_SQS_Sync$ReventlessAws from "./adapter/CommandTopic/CommandTopicChannel_SQS_Sync.res.mjs";
 import * as EventLogSubscription_AppSync$ReventlessAws from "./adapter/EventLogSubscription/EventLogSubscription_AppSync.res.mjs";
-import * as UiFragmentRegistry_Behavior$ReventlessCore from "@reventlessdev/reventless-core/src/admin/UiFragmentRegistry/StateChange/UiFragmentRegistry_Behavior.res.mjs";
+import * as UiFragmentRegistry_Decision$ReventlessCore from "@reventlessdev/reventless-core/src/admin/UiFragmentRegistry/StateChange/UiFragmentRegistry_Decision.res.mjs";
 import * as CommandTopicChannel_SQS_Async$ReventlessAws from "./adapter/CommandTopic/CommandTopicChannel_SQS_Async.res.mjs";
 import * as Geocoder_AwsLocation_Resolver$ReventlessAws from "./adapter/Geocoder/Geocoder_AwsLocation_Resolver.res.mjs";
 import * as Plugin_ExtensionPoint_Builder$ReventlessAws from "./plugin/stack/Plugin_ExtensionPoint_Builder.res.mjs";
@@ -383,8 +383,8 @@ function MakeWithConfig(Config) {
     api: resolveTargetApi,
     apiRole: resolveTargetApiRole
   };
-  let Make = Spec => (Behavior => (EventMappings => Aggregate_Builder_Single$ReventlessAws.Make(Spec)(Behavior)(EventMappings)));
-  let MakeAsync = Spec => (Behavior => (EventMappings => Aggregate_Builder_Single_Async$ReventlessAws.Make(Spec)(Behavior)(EventMappings)));
+  let Make = Spec => (Decision => (EventMappings => Aggregate_Builder_Single$ReventlessAws.Make(Spec)(Decision)(EventMappings)));
+  let MakeAsync = Spec => (Decision => (EventMappings => Aggregate_Builder_Single_Async$ReventlessAws.Make(Spec)(Decision)(EventMappings)));
   let Aggregate = {
     Make: Make,
     MakeAsync: MakeAsync
@@ -464,12 +464,12 @@ function MakeWithConfig(Config) {
     Make: Make$5
   };
   let Counter = Counter_Builder$ReventlessAws.Make(ApiConfig);
-  let Make$6 = Spec => (Behavior => StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Behavior));
-  let MakeAsync$1 = Spec => (Behavior => {
-    let include = StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Behavior);
+  let Make$6 = Spec => (Decision => StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Decision));
+  let MakeAsync$1 = Spec => (Decision => {
+    let include = StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Decision);
     return {
       Spec: include.Spec,
-      Behavior: include.Behavior,
+      Decision: include.Decision,
       isAsync: true,
       make: include.make
     };
@@ -498,15 +498,15 @@ function MakeWithConfig(Config) {
   };
   let UiFragmentRegistrySlice = StateChangeSlice_Builder$ReventlessAws.Make(Spec)({
     initialState: undefined,
-    evolve: UiFragmentRegistry_Behavior$ReventlessCore.evolve,
-    decide: UiFragmentRegistry_Behavior$ReventlessCore.decide,
-    moduleUrl: UiFragmentRegistry_Behavior$ReventlessCore.moduleUrl
+    evolve: UiFragmentRegistry_Decision$ReventlessCore.evolve,
+    decide: UiFragmentRegistry_Decision$ReventlessCore.decide,
+    moduleUrl: UiFragmentRegistry_Decision$ReventlessCore.moduleUrl
   });
   let UiFragmentsViewSlice = Make$7({
     name: UiFragments$ReventlessCore.name,
     moduleUrl: UiFragments$ReventlessCore.moduleUrl,
     stateSchema: UiFragments$ReventlessCore.stateSchema,
-    Key: {
+    Id: {
       schema: Id$Reventless.StringPure.schema,
       make: prim => prim,
       makeFromString: prim => prim,
@@ -692,11 +692,11 @@ function MakeWithConfig(Config) {
     commandTransition: PluginSpec$ReventlessCore.commandTransition,
     traits: PluginSpec$ReventlessCore.traits
   })({
-    initialState: PluginBehavior$ReventlessCore.initialState,
-    evolve: PluginBehavior$ReventlessCore.evolve,
-    decide: PluginBehavior$ReventlessCore.decide,
+    initialState: PluginDecision$ReventlessCore.initialState,
+    evolve: PluginDecision$ReventlessCore.evolve,
+    decide: PluginDecision$ReventlessCore.decide,
     snapshot: undefined,
-    moduleUrl: PluginBehavior$ReventlessCore.moduleUrl
+    moduleUrl: PluginDecision$ReventlessCore.moduleUrl
   })(NoEventMappings$ReventlessInfra.Make({
     name: PluginSpec$ReventlessCore.name,
     Id: Id$Reventless.$$String,
@@ -1800,8 +1800,8 @@ function Make($star) {
     api: resolveTargetApi,
     apiRole: resolveTargetApiRole
   };
-  let Make$1 = Spec => (Behavior => (EventMappings => Aggregate_Builder_Single$ReventlessAws.Make(Spec)(Behavior)(EventMappings)));
-  let MakeAsync = Spec => (Behavior => (EventMappings => Aggregate_Builder_Single_Async$ReventlessAws.Make(Spec)(Behavior)(EventMappings)));
+  let Make$1 = Spec => (Decision => (EventMappings => Aggregate_Builder_Single$ReventlessAws.Make(Spec)(Decision)(EventMappings)));
+  let MakeAsync = Spec => (Decision => (EventMappings => Aggregate_Builder_Single_Async$ReventlessAws.Make(Spec)(Decision)(EventMappings)));
   let Aggregate = {
     Make: Make$1,
     MakeAsync: MakeAsync
@@ -1881,12 +1881,12 @@ function Make($star) {
     Make: Make$6
   };
   let Counter = Counter_Builder$ReventlessAws.Make(ApiConfig);
-  let Make$7 = Spec => (Behavior => StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Behavior));
-  let MakeAsync$1 = Spec => (Behavior => {
-    let include = StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Behavior);
+  let Make$7 = Spec => (Decision => StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Decision));
+  let MakeAsync$1 = Spec => (Decision => {
+    let include = StateChangeSlice_Builder$ReventlessAws.Make(Spec)(Decision);
     return {
       Spec: include.Spec,
-      Behavior: include.Behavior,
+      Decision: include.Decision,
       isAsync: true,
       make: include.make
     };
@@ -1915,15 +1915,15 @@ function Make($star) {
   };
   let UiFragmentRegistrySlice = StateChangeSlice_Builder$ReventlessAws.Make(Spec)({
     initialState: undefined,
-    evolve: UiFragmentRegistry_Behavior$ReventlessCore.evolve,
-    decide: UiFragmentRegistry_Behavior$ReventlessCore.decide,
-    moduleUrl: UiFragmentRegistry_Behavior$ReventlessCore.moduleUrl
+    evolve: UiFragmentRegistry_Decision$ReventlessCore.evolve,
+    decide: UiFragmentRegistry_Decision$ReventlessCore.decide,
+    moduleUrl: UiFragmentRegistry_Decision$ReventlessCore.moduleUrl
   });
   let UiFragmentsViewSlice = Make$8({
     name: UiFragments$ReventlessCore.name,
     moduleUrl: UiFragments$ReventlessCore.moduleUrl,
     stateSchema: UiFragments$ReventlessCore.stateSchema,
-    Key: {
+    Id: {
       schema: Id$Reventless.StringPure.schema,
       make: prim => prim,
       makeFromString: prim => prim,
@@ -2109,11 +2109,11 @@ function Make($star) {
     commandTransition: PluginSpec$ReventlessCore.commandTransition,
     traits: PluginSpec$ReventlessCore.traits
   })({
-    initialState: PluginBehavior$ReventlessCore.initialState,
-    evolve: PluginBehavior$ReventlessCore.evolve,
-    decide: PluginBehavior$ReventlessCore.decide,
+    initialState: PluginDecision$ReventlessCore.initialState,
+    evolve: PluginDecision$ReventlessCore.evolve,
+    decide: PluginDecision$ReventlessCore.decide,
     snapshot: undefined,
-    moduleUrl: PluginBehavior$ReventlessCore.moduleUrl
+    moduleUrl: PluginDecision$ReventlessCore.moduleUrl
   })(NoEventMappings$ReventlessInfra.Make({
     name: PluginSpec$ReventlessCore.name,
     Id: Id$Reventless.$$String,

package/src/Platform_Stack.res

@@ -110,7 +110,7 @@ let _identityProviderId = (~cfg: Pulumi.Config.t): option<string> => {
   `platform:loginIdentifier` (or `REVENTLESS_LOGIN_IDENTIFIER` / the sidecar).
 
   Absent means `email`, which is what every pool so far was created with. An
-  unrecognised spelling fails the deploy — see [Auth_LoginIdentifier] for why
+  unrecognized spelling fails the deploy — see [Auth_LoginIdentifier] for why
   defaulting past a typo here is unrecoverable. */
 let _loginIdentifier = (~cfg: Pulumi.Config.t): Auth_LoginIdentifier.t => {
   let raw = switch Util_LocalConfig.get("loginIdentifier") {
@@ -128,7 +128,7 @@ let _loginIdentifier = (~cfg: Pulumi.Config.t): Auth_LoginIdentifier.t => {
 
   Absent means `adminOnly`, which is what every pool so far was created with, so
   an existing stack redeploys unchanged. Unlike the sign-in attribute this is an
-  ordinary in-place update on a live pool — but an unrecognised spelling still
+  ordinary in-place update on a live pool — but an unrecognized spelling still
   fails the deploy, because defaulting past it would refuse every registration
   while the config read as if it allowed them. See [Auth_SignUpMode]. */
 let _signUpMode = (~cfg: Pulumi.Config.t): Auth_SignUpMode.t => {
@@ -215,7 +215,7 @@ let _resolveUncached = (): cognitoUserPool => {
     // separate attachment resource — so the trigger is attached by a declared
     // resource that describes the pool, merges into what it finds, and sends the
     // result back whole. Never a hand-run command: that would leave the
-    // deployment's behaviour depending on an act no source describes.
+    // deployment's behavior depending on an act no source describes.
     // The code hash is an input so a new build of the trigger reaches this
     // resource: the function ARN is stable, so it alone would let a broken
     // version onto the pool unchecked after the first deploy.

package/src/adapter/AWS_Tags.res

@@ -14,7 +14,7 @@ dimension; the bare spelling bought nothing.
 The three attribution facts are independent and all three are needed to identify
 a resource (see `ResourceAttribution`):
 
-- `~kind` — the modelling kind of the owning component (Aggregate, …)
+- `~kind` — the modeling kind of the owning component (Aggregate, …)
 - `~role` — the deployment piece this resource implements (EventLog, Runtime, …)
 - `~scope` — component / plugin / platform
 

package/src/adapter/Api/Platform_ComponentDefinitions_Lambda.res

@@ -8,7 +8,7 @@
 // handler wraps each persisted structure with `pluginId` without decoding.
 // One caveat: the persisted structure is PRE-filter — it still carries Internal
 // ReadModels / StateViewSlices for developer tooling. The handler re-applies the
-// `isPublicQueryable` filter (mirroring `encodePluginStructureEntry`) so Internal
+// `isPublicReadSide` filter (mirroring `encodePluginStructureEntry`) so Internal
 // components stay out of the deployed AutoUI, matching the in-memory adapter.
 
 open PulumiAws

package/src/adapter/Api/Platform_ComponentDefinitions_Lambda_Ops.res

@@ -6,7 +6,7 @@
 //
 // Scans the Plugin read model for Connected plugins carrying a `structure`,
 // collapses to the highest version per plugin name, re-applies the
-// `isPublicQueryable` filter (the persisted structure is PRE-filter — it still
+// `isPublicReadSide` filter (the persisted structure is PRE-filter — it still
 // carries Internal ReadModels / StateViewSlices for developer tooling), and
 // prepends the built-in Platform_Admin entry. The persisted structure is
 // sury-encoded with the same shape as the in-memory adapter's
@@ -128,9 +128,9 @@ let healStructure = (structure: dict<JSON.t>): dict<JSON.t> => {
   out
 }
 
-// Mirror ReventlessCore.Platform_ComponentDefinitionsApi.isPublicQueryable on
+// Mirror ReventlessCore.Platform_ComponentDefinitionsApi.isPublicReadSide on
 // the read path: a component is public unless its visibility is "Internal".
-let isPublicQueryable = (q: JSON.t): bool =>
+let isPublicReadSide = (q: JSON.t): bool =>
   switch q
   ->JSON.Decode.object
   ->Option.flatMap(o => o->Dict.get("visibility"))
@@ -154,15 +154,15 @@ let filterStructure = (structure: dict<JSON.t>): dict<JSON.t> => {
   let arrAt = key => out->Dict.get(key)->Option.flatMap(JSON.Decode.array)->Option.getOr([])
   let readModels = arrAt("readModels")
   let stateViewSlices = arrAt("stateViewSlices")
-  out->Dict.set("readModels", readModels->Array.filter(isPublicQueryable)->JSON.Encode.array)
+  out->Dict.set("readModels", readModels->Array.filter(isPublicReadSide)->JSON.Encode.array)
   out->Dict.set(
     "stateViewSlices",
-    stateViewSlices->Array.filter(isPublicQueryable)->JSON.Encode.array,
+    stateViewSlices->Array.filter(isPublicReadSide)->JSON.Encode.array,
   )
   out->Dict.set(
     "internalQueryables",
     Array.concat(readModels, stateViewSlices)
-    ->Array.filter(q => !isPublicQueryable(q))
+    ->Array.filter(q => !isPublicReadSide(q))
     ->JSON.Encode.array,
   )
   out
@@ -173,7 +173,7 @@ let filterStructure = (structure: dict<JSON.t>): dict<JSON.t> => {
 // no decodable structure (former `!item.structure`).
 //
 // `~filter` is what separates the two fields this handler serves: AutoUI
-// (`Platform_ComponentDefinitions`) gets the public-queryable subset, developer
+// (`Platform_ComponentDefinitions`) gets the public read-side subset, developer
 // tooling (`Platform_PluginStructures`) gets the structure exactly as persisted,
 // including Internal components and the producer-side `extensionPoints` that the
 // AutoUI entry type does not declare. Both are healed first — the SDL's non-null

package/src/adapter/Api/Platform_ComponentDefinitions_Lambda_Ops.res.mjs

@@ -182,7 +182,7 @@ function healStructure(structure) {
   return out;
 }
 
-function isPublicQueryable(q) {
+function isPublicReadSide(q) {
   let match = Stdlib_Option.flatMap(Stdlib_Option.flatMap(Stdlib_JSON.Decode.object(q), o => o["visibility"]), Stdlib_JSON.Decode.string);
   if (match !== undefined) {
     return match !== "Internal";
@@ -196,9 +196,9 @@ function filterStructure(structure) {
   let arrAt = key => Stdlib_Option.getOr(Stdlib_Option.flatMap(out[key], Stdlib_JSON.Decode.array), []);
   let readModels = arrAt("readModels");
   let stateViewSlices = arrAt("stateViewSlices");
-  out["readModels"] = readModels.filter(isPublicQueryable);
-  out["stateViewSlices"] = stateViewSlices.filter(isPublicQueryable);
-  out["internalQueryables"] = readModels.concat(stateViewSlices).filter(q => !isPublicQueryable(q));
+  out["readModels"] = readModels.filter(isPublicReadSide);
+  out["stateViewSlices"] = stateViewSlices.filter(isPublicReadSide);
+  out["internalQueryables"] = readModels.concat(stateViewSlices).filter(q => !isPublicReadSide(q));
   return out;
 }
 
@@ -644,7 +644,7 @@ export {
   fillLifecycleField,
   readSideCollections,
   healStructure,
-  isPublicQueryable,
+  isPublicReadSide,
   filterStructure,
   toEntryWith,
   adminEntry,

package/src/adapter/Auth/Auth_ActiveRolePoolAttachment.res

@@ -14,7 +14,7 @@
     attachment resource, so something has to call `UpdateUserPool` against a pool
     no stack owns. That belongs in a declared resource executed at deploy time,
     never a hand-run command against a live pool, which would leave the
-    deployment's behaviour depending on an act no source describes.
+    deployment's behavior depending on an act no source describes.
 
     🚨 **The slot is the pool's, and this resource takes it only when it is
     free or already ours.** Cognito allows a pool exactly one

package/src/adapter/Auth/Auth_ActiveRoleStore_Ops.res

@@ -8,7 +8,7 @@
 // the pre-token-generation trigger ([Auth_ActiveRoleTrigger_Ops.res]) reads this
 // row on the next refresh and narrows the group claim to it. Nothing here can
 // grant anything: the trigger re-checks the stored role against real membership
-// before applying it, so a row is at most a request that the trigger may honour.
+// before applying it, so a row is at most a request that the trigger may honor.
 //
 // 🚨 **The subject is taken from the verified identity, never from the arguments.**
 // The row key is `ctx.identity.sub` as the AppSync Cognito authorizer resolved it.
@@ -115,7 +115,7 @@ type appSyncEvent = {
 The name to address this caller by when asking Cognito what groups they are in.
 
 The username when the authorizer supplied one, the subject otherwise. The
-fallback is not a guess at a username: it is the behaviour this handler had
+fallback is not a guess at a username: it is the behavior this handler had
 before the username was forwarded, kept for the pool shapes where it is correct —
 one whose username *is* the subject — rather than turning a working deployment
 into a hard failure on an absent field. Pure so the choice can be tested without

package/src/adapter/Auth/Auth_ActiveRoleStore_Schema.res

@@ -74,7 +74,7 @@ repaired for. So adoption checks the schema and refuses, rather than reporting
 success.
 
 The pre-`clientId` store is exactly this case: keyed on the subject alone. An
-operator upgrading meets a sentence instead of a silent misbehaviour.
+operator upgrading meets a sentence instead of a silent misbehavior.
 
 Order-insensitive, because `DescribeTable` does not promise one.
 */

package/src/adapter/Auth/Auth_Cognito.res

@@ -11,7 +11,7 @@
 //
 //   * `fromAppSyncIdentity` — AppSync-resolver path. Reads the
 //     already-validated identity context attached by AppSync to the
-//     resolver event (`event.identity`). Recognises both the Cognito
+//     resolver event (`event.identity`). Recognizes both the Cognito
 //     UserPool shape (`sub`, `username`, `claims['cognito:groups']`) and
 //     the AWS_IAM additional-provider shape (`userArn`, `accountId`) used
 //     by server-to-server lambdas signed via the existing IAM role.

package/src/adapter/Auth/Auth_LoginIdentifier.res

@@ -44,7 +44,7 @@ let usernameAttributes = (identifier: t): array<string> =>
 /**
 The deploy-time choice, or why the deploy cannot proceed.
 
-An unrecognised spelling refuses rather than falling back to the default: a typo
+An unrecognized spelling refuses rather than falling back to the default: a typo
 that defaulted would create a pool signing in on the wrong attribute, which is
 the one property no later deploy can correct.
 */

package/src/adapter/Auth/Auth_SignUpMode.res

@@ -53,7 +53,7 @@ let allowAdminCreateUserOnly = (mode: t): bool =>
 /**
 The deploy-time choice, or why the deploy cannot proceed.
 
-An unrecognised spelling refuses rather than falling back to the default, and the
+An unrecognized spelling refuses rather than falling back to the default, and the
 reason is *not* [Auth_LoginIdentifier]'s — this setting is correctable at any
 time. It is that the mistake would be silent. The default is closed, so a typo
 fails safe, but it fails safe *invisibly*: the deploy is green, the config says

package/src/adapter/DcbEventLog/DcbEventLogStorage_DynamoDb_Runtime.res

@@ -138,7 +138,7 @@ let toItem = (
   item->Dict.set("tags", tagsJson->JSON.Encode.array)
 
   // Flatten meta.* to top-level item attributes so individual meta keys stay
-  // GSI-projectable (matches the EventLog adapter behaviour). The DCB read
+  // GSI-projectable (matches the EventLog adapter behavior). The DCB read
   // path reassembles meta via `Reventless.Message.composeMeta`.
   event.meta
   ->ReventlessCore.Message.decomposeMeta
@@ -986,7 +986,7 @@ let appendUnconditional = async (
 // The synthetic fence tag is keyed on `getCompositePartitionKeyValue` — the same
 // value `derivePartitionKey` uses for the base-table `id` — so it is exactly as
 // selective as the entity's storage partition (and the `tag_composite` read
-// scope). Fencing per-member (the historical behaviour) gave every low-cardinality
+// scope). Fencing per-member (the historical behavior) gave every low-cardinality
 // member (e.g. `environment`, `platformName`) its own fence, which a deploy-time
 // fan-out sharing those prefixes turns into a hot partition → `TransactionConflict`
 // → `retries exhausted`; it also over-fenced (two DISTINCT composite entities

package/src/adapter/EventLog/EventLogBackend.res

@@ -14,7 +14,7 @@
 //     its plugin's EventCollector SQS queue.
 //
 // All classic EventLogs in the platform share one selection, mirroring the DCB
-// toggle. Only the Single (sync/async) aggregate strategies honour it; the
+// toggle. Only the Single (sync/async) aggregate strategies honor it; the
 // PerAggregate and Micro strategies stay DynamoDB-only.
 
 type selection = {

package/src/adapter/QueryDb/PgQueryResolver_Lambda.res

@@ -143,7 +143,7 @@ let emptyConnection = (): JSON.t =>
 
 // Spec-level authorization then the (optional) user interceptor — mirrors
 // QueryDbResolvers_GraphQL.runInterceptor. Denials return the kind's empty shape
-// (the provider-agnostic resolver behaviour), not an error.
+// (the provider-agnostic resolver behavior), not an error.
 let runInterceptor = async (
   ~binding,
   ~payload,
@@ -192,7 +192,7 @@ let dispatch = async (
       | RefuseOwned => false
       | ScopeTo(field, required) => item->argStr(field)->Option.mapOr(false, v => v == required)
       }
-    // The caller's request to see the archive, honoured only where the
+    // The caller's request to see the archive, honored only where the
     // classification says it counts.
     let askedForRetired =
       payload.arguments

package/src/adapter/Runtime/AggregateEntryPoint.mjs

@@ -1,5 +1,5 @@
 // Aggregate Lambda entry point.
-// At cold start: reads HANDLER_CONFIG, dynamically imports Spec+Behavior modules,
+// At cold start: reads HANDLER_CONFIG, dynamically imports Spec+Decision modules,
 // wires EventLog_Operations, Aggregate_Callback, CommandTopic_Callback.
 // Handles both SQS CommandTopic events (Route 2) and AppSync direct invocation (Route 1).
 
@@ -135,7 +135,7 @@ async function checkPluginStatus(event) {
 // Postgres EventLog runtime; absence keeps the DynamoDB path byte-identical.
 // `eventLogTableName` doubles as the Postgres `event_log.log_name` discriminator
 // (all aggregates share one Postgres table, unlike DynamoDB's table-per-aggregate).
-function buildAggregateParts(specModule, behaviorModule, eventLogTableName, queueUrl, pgConnection) {
+function buildAggregateParts(specModule, decisionModule, eventLogTableName, queueUrl, pgConnection) {
   const patchedSpec = patchSpecId(specModule);
   // Typed core: backend-specific EventLog storage ops (Postgres when pgConnection
   // is present, else DynamoDB). Returns the full 6-field EventLog_Adapter.operations
@@ -147,7 +147,7 @@ function buildAggregateParts(specModule, behaviorModule, eventLogTableName, queu
     eventTopic: { publish: async () => {} },
     storage: rawStorageOps,
   });
-  const aggregateCallback = aggregateCallbackMake(patchedSpec)(behaviorModule)({
+  const aggregateCallback = aggregateCallbackMake(patchedSpec)(decisionModule)({
     Spec: patchedSpec,
     EventLog: { Spec: patchedSpec },
     eventLog: eventLogOps,
@@ -227,7 +227,7 @@ const DISPATCH_MODE = process.env["DISPATCH_MODE"] === "async" ? "async" : "sync
 // already-parsed `HANDLER_CONFIG` shape, with an injectable module loader. In
 // production, `buildAllHandlers` wraps this with the env config + the Lambda's
 // `/var/task/node_modules` dynamic import; the integration test injects a loader
-// returning pre-imported spec/behavior modules so it can drive the real
+// returning pre-imported spec/decision modules so it can drive the real
 // cmdGenHandler end-to-end against DynamoDB Local. (Mirrors the DCB entry point.)
 export async function buildHandlersForConfig(config, opts = {}) {
   const loadModule = opts.loadModule ?? dynamicImport;
@@ -236,8 +236,8 @@ export async function buildHandlersForConfig(config, opts = {}) {
   const cmdGenHandlers = {};
   await Promise.all((config.handlers || []).map(async h => {
     const specModule = await loadModule(h.specModule);
-    const behaviorModule = await loadModule(h.behaviorModule);
-    const parts = buildAggregateParts(specModule, behaviorModule, h.eventLogTable, h.queueUrl, h.pgConnection);
+    const decisionModule = await loadModule(h.decisionModule);
+    const parts = buildAggregateParts(specModule, decisionModule, h.eventLogTable, h.queueUrl, h.pgConnection);
     // Pair each handler with the comp of the aggregate it belongs to: this
     // Lambda can host every aggregate in the platform, so the comp is what keeps
     // their log lines separable.