@reventlessdev/reventless-aws 3.0.0-alpha.397 → 3.0.0-alpha.398

package/src/Platform_ProvidedGroups.res

@@ -8,7 +8,7 @@ read outside any `Output.apply`.
 
 module Cognito = AwsSdk.CognitoIdentityServiceProvider
 
-type pool = {id: string, region: option<string>}
+type pool = {id: string, region?: string}
 
 type send = Cognito.ListGroupsCommand.input => promise<Cognito.ListGroupsCommand.output>
 
@@ -39,7 +39,7 @@ let poolFromExports = (~get: string => option<JSON.t>): option<pool> => {
   ->Option.orElse(read("cognitoUserPoolId"))
   ->Option.map(id => {
     id,
-    region: read("identityProviderRegion")->Option.orElse(read("cognitoRegion")),
+    region: ?(read("identityProviderRegion")->Option.orElse(read("cognitoRegion"))),
   })
 }
 
@@ -72,7 +72,7 @@ let resolvePool = async (~stackRef: option<Pulumi.StackReference.t>): option<poo
       ~cfg=Pulumi.Config.make(Some("platform")),
     )->Option.map(id => {
       id,
-      region: Pulumi.Config.make(Some("aws"))->Pulumi.Config.get("region"),
+      region: ?(Pulumi.Config.make(Some("aws"))->Pulumi.Config.get("region")),
     })
   }
 
@@ -86,7 +86,7 @@ let sendTo = (~region: option<string>): send => {
 let load = async (~stackRef: option<Pulumi.StackReference.t>): unit =>
   switch await resolvePool(~stackRef) {
   | None => ()
-  | Some({id, region}) =>
+  | Some({id, ?region}) =>
     let groups = try await listAll(~send=sendTo(~region), ~userPoolId=id) catch {
     | exn if exn->Util_AwsError.hasCode(~code="AccessDeniedException") =>
       JsError.throwWithMessage(

package/src/Platform_Stack.res

@@ -18,7 +18,7 @@ type cognitoUserPool = {
   /** The sign-in attribute this stack created the pool with. `None` in BYO mode:
     the pool's own choice was made elsewhere and no lookup here reads it back,
     so reporting one would be a guess. */
-  loginIdentifier: option<Auth_LoginIdentifier.t>,
+  loginIdentifier?: Auth_LoginIdentifier.t,
 }
 
 /**
@@ -250,7 +250,6 @@ let _resolveUncached = (): cognitoUserPool => {
       managed: false,
       activeRoleTable,
       identityTable,
-      loginIdentifier: None,
     }
 
   | None =>
@@ -346,7 +345,7 @@ let _resolveUncached = (): cognitoUserPool => {
       managed: true,
       activeRoleTable,
       identityTable,
-      loginIdentifier: Some(loginIdentifier),
+      loginIdentifier,
     }
   }
 

package/src/Platform_Stack.res.mjs

@@ -107,8 +107,7 @@ function _resolveUncached() {
       poolArn: lookup.apply(r => r.arn),
       managed: false,
       activeRoleTable: activeRoleTable,
-      identityTable: identityTable,
-      loginIdentifier: undefined
+      identityTable: identityTable
     };
   } else {
     let loginIdentifier = _loginIdentifier(cfg);

package/src/adapter/Api/AppSyncEventsSigner_Ops.res

@@ -23,13 +23,13 @@ let hmacFromBuf = (key: NodeCrypto.buffer, data: string): NodeCrypto.buffer =>
 
 // ── SigV4 ───────────────────────────────────────────────────────────────────
 
-type creds = {accessKeyId: string, secretAccessKey: string, sessionToken: option<string>}
+type creds = {accessKeyId: string, secretAccessKey: string, sessionToken?: string}
 
 // Ambient Lambda execution-role credentials (the managed runtime injects these).
 let envCreds = (): creds => {
   accessKeyId: NodeProcess.env->Dict.get("AWS_ACCESS_KEY_ID")->Option.getOr(""),
   secretAccessKey: NodeProcess.env->Dict.get("AWS_SECRET_ACCESS_KEY")->Option.getOr(""),
-  sessionToken: NodeProcess.env->Dict.get("AWS_SESSION_TOKEN"),
+  sessionToken: ?(NodeProcess.env->Dict.get("AWS_SESSION_TOKEN")),
 }
 
 let region = (): string => NodeProcess.env->Dict.get("AWS_REGION")->Option.getOr("eu-west-1")

package/src/adapter/Api/AppSync_EventsApi.res

@@ -80,7 +80,7 @@ type t = {
   /** Full AppSync Events API output — carry this through the stack. */
   api: Api.t,
   /** The `default` channel namespace created on the API. */
-  defaultNamespace: option<ChannelNamespace.t>,
+  defaultNamespace?: ChannelNamespace.t,
   /** The client-publishable `client` namespace. Absent on plugin-stack
       phantoms (namespaces live on the platform stack's API). */
   clientNamespace?: ChannelNamespace.t,
@@ -202,7 +202,7 @@ let make = (
     ~opts=Some({...opts, parent: api->Pulumi.Resource.makeFromJs}),
   )
 
-  {name, api, defaultNamespace: Some(defaultNamespace), clientNamespace}
+  {name, api, defaultNamespace, clientNamespace}
 }
 
 /** HTTP endpoint URL for use as Lambda `APPSYNC_ENDPOINT` env var.

package/src/adapter/Api/Platform_ComponentDefinitions_Lambda_Ops.res

@@ -334,9 +334,9 @@ let bakeSelection = (json: JSON.t): option<ReventlessCore.Platform_BakedManifest
     ->Option.flatMap(JSON.Decode.string)
     ->Option.map(plugin => {
       ReventlessCore.Platform_BakedManifest.plugin,
-      views: strings(o, "views"),
-      commands: strings(o, "commands"),
-      derived: strings(o, "derived"),
+      views: ?strings(o, "views"),
+      commands: ?strings(o, "commands"),
+      derived: ?strings(o, "derived"),
     })
   )
 }
@@ -502,8 +502,8 @@ type registrationState =
 type registration = {
   plugin: string,
   expected: string,
-  found: option<string>,
-  writtenAt: option<string>,
+  found?: string,
+  writtenAt?: string,
   state: registrationState,
 }
 
@@ -550,7 +550,7 @@ let registrations = (
     let row = current->Dict.get(plugin)
     let found = row->Option.map(((key, _)) => key)
     let writtenAt = row->Option.flatMap(((_, at)) => at)
-    {plugin, expected, found, writtenAt, state: classify(~expected, ~found, ~writtenAt, ~since)}
+    {plugin, expected, ?found, ?writtenAt, state: classify(~expected, ~found, ~writtenAt, ~since)}
   })
 }
 

package/src/adapter/DcbEventLog/DcbBackend.res

@@ -53,8 +53,8 @@ let isPostgres = (): bool => selectionRef.contents->Option.isSome
 type relayLogEntry = {
   logName: string,
   partitionTag: Reventless.DcbTag.derivedPartitionTag,
-  mutable collectorQueueUrl: option<Pulumi.Output.t<string>>,
-  mutable collectorQueueArn: option<Pulumi.Output.t<string>>,
+  mutable collectorQueueUrl?: Pulumi.Output.t<string>,
+  mutable collectorQueueArn?: Pulumi.Output.t<string>,
 }
 
 let relayLogs: array<relayLogEntry> = []
@@ -62,7 +62,7 @@ let relayLogs: array<relayLogEntry> = []
 /** Step 1: record a Postgres DCB log and its partition tag (from the storage maker). */
 let registerRelayLog = (~logName: string, ~partitionTag: Reventless.DcbTag.derivedPartitionTag) =>
   relayLogs
-  ->Array.push({logName, partitionTag, collectorQueueUrl: None, collectorQueueArn: None})
+  ->Array.push({logName, partitionTag})
   ->ignore
 
 /** Step 2: attach a plugin's EventCollector SQS queue to its DCB log's relay entry. */

package/src/adapter/DcbEventLog/DcbBackend.res.mjs

@@ -23,9 +23,7 @@ let relayLogs = [];
 function registerRelayLog(logName, partitionTag) {
   relayLogs.push({
     logName: logName,
-    partitionTag: partitionTag,
-    collectorQueueUrl: undefined,
-    collectorQueueArn: undefined
+    partitionTag: partitionTag
   });
 }
 

package/src/adapter/DcbEventLog/DcbEventLogStorage_DynamoDb_Runtime.res

@@ -265,9 +265,9 @@ let queryByCompositeTags = async (
 
 // Filter clause shared by both scan paths.
 type scanFilter = {
-  filterExpression: option<string>,
-  expressionAttributeNames: option<Dict.t<string>>,
-  expressionAttributeValues: option<Dict.t<JSON.t>>,
+  filterExpression?: string,
+  expressionAttributeNames?: Dict.t<string>,
+  expressionAttributeValues?: Dict.t<JSON.t>,
 }
 
 // Builds the scan FilterExpression. Always asserts `attribute_exists(event)` so
@@ -294,9 +294,9 @@ let buildScanFilter = (~eventTypes: option<array<string>>=?): scanFilter => {
 
   let hasAttributeValues = expressionAttributeValues->Dict.keysToArray->Array.length > 0
   {
-    filterExpression: Some(filterParts->Array.join(" AND ")),
-    expressionAttributeNames: Some(expressionAttributeNames),
-    expressionAttributeValues: hasAttributeValues ? Some(expressionAttributeValues) : None,
+    filterExpression: filterParts->Array.join(" AND "),
+    expressionAttributeNames,
+    expressionAttributeValues: ?(hasAttributeValues ? Some(expressionAttributeValues) : None),
   }
 }
 
@@ -523,7 +523,7 @@ let deduplicateByPosition = (
 
 type mergeSlot = {
   queue: Queue.t<option<ReventlessCore.DcbEventLog_Adapter.rawSequencedEvent>>,
-  head: option<ReventlessCore.DcbEventLog_Adapter.rawSequencedEvent>,
+  head?: ReventlessCore.DcbEventLog_Adapter.rawSequencedEvent,
 }
 
 // Wraps a sub-stream in a Queue(1) producer fiber and pulls the first element.
@@ -539,7 +539,9 @@ let initSlot = (
       // unhandled-fiber-failure warning).
       ->Effect.ensuring(Queue.offer(queue, None)->Effect.map(_ => ()))
       ->Effect.catchAll(_ => Effect.succeed())
-    Effect.fork(producer)->Effect.flatMap(_ => Queue.take(queue)->Effect.map(head => {queue, head}))
+    Effect.fork(producer)->Effect.flatMap(_ =>
+      Queue.take(queue)->Effect.map(head => {queue, ?head})
+    )
   })
 
 // Returns the index of the slot with the smallest position, or None if all exhausted.
@@ -596,7 +598,7 @@ let mergeSortedEvents = (
             let newSlots = slots->Array.mapWithIndex(
               (s, i) =>
                 if i == idx {
-                  {...s, head: nextHead}
+                  {...s, head: ?nextHead}
                 } else {
                   s
                 },

package/src/adapter/DcbEventLog/DcbEventLogStorage_DynamoDb_Runtime.res.mjs

@@ -468,14 +468,12 @@ function mergeSortedEvents(streams) {
     let emitEvent = Stdlib_Option.getOrThrow(slot.head, undefined);
     return Effect$1.map(Queue.take(slot.queue), nextHead => {
       let newSlots = slots.map((s, i) => {
-        if (i === idx) {
-          return {
-            queue: s.queue,
-            head: nextHead
-          };
-        } else {
+        if (i !== idx) {
           return s;
         }
+        let newrecord = {...s};
+        newrecord.head = nextHead;
+        return newrecord;
       });
       let hasActive = newSlots.some(s => Stdlib_Option.isSome(s.head));
       return [

package/src/adapter/EventLog/EventLogBackend.res

@@ -53,8 +53,8 @@ let isPostgres = (): bool => selectionRef.contents->Option.isSome
 type relayLogEntry = {
   logName: string,
   aggregateName: string,
-  mutable collectorQueueUrl: option<Pulumi.Output.t<string>>,
-  mutable collectorQueueArn: option<Pulumi.Output.t<string>>,
+  mutable collectorQueueUrl?: Pulumi.Output.t<string>,
+  mutable collectorQueueArn?: Pulumi.Output.t<string>,
 }
 
 let relayLogs: array<relayLogEntry> = []
@@ -62,7 +62,7 @@ let relayLogs: array<relayLogEntry> = []
 /** Step 1: record a Postgres classic log (from the storage maker). */
 let registerRelayLog = (~logName: string, ~aggregateName: string) =>
   relayLogs
-  ->Array.push({logName, aggregateName, collectorQueueUrl: None, collectorQueueArn: None})
+  ->Array.push({logName, aggregateName})
   ->ignore
 
 /** Step 2: attach a plugin's EventCollector SQS queue to one aggregate's relay entry. */

package/src/adapter/EventLog/EventLogBackend.res.mjs

@@ -23,9 +23,7 @@ let relayLogs = [];
 function registerRelayLog(logName, aggregateName) {
   relayLogs.push({
     logName: logName,
-    aggregateName: aggregateName,
-    collectorQueueUrl: undefined,
-    collectorQueueArn: undefined
+    aggregateName: aggregateName
   });
 }
 

package/src/adapter/Geocoder/Geocoder_AwsLocation_Backend.res

@@ -57,7 +57,7 @@ let search = async (~indexName: string, ~text: string, ~maxResults: int=5): resu
                 Some({
                   Reventless.Geocoding.label: place.label->Option.getOr(""),
                   point,
-                  relevance: r.relevance,
+                  relevance: ?r.relevance,
                 })
               // A coordinate that fails the range check is dropped rather than
               // propagated: it cannot be stored, and one bad row should not lose

package/src/adapter/QueryDb/PgQueryResolver_Lambda.res

@@ -89,7 +89,7 @@ type binding = {
   ops: ReventlessCore.QueryDb_Adapter.operations,
   pushdowns: pushdowns,
   indexes: array<Reventless.ReadModel.indexConfig>,
-  subIdField: option<string>,
+  subIdField?: string,
   capability: ReventlessCore.GraphQL_FragmentGenerator.serverCapability,
   labelField: string,
   includeIdParam: bool,
@@ -97,9 +97,9 @@ type binding = {
   /** The state's `@owner` field, when it declares one. Derived at Lambda init
       from the same schema `capability` comes from, so the two cannot disagree
       about which fields this read model has. */
-  ownerField: option<string>,
-  retiredField: option<string>,
-  retiredValues: option<array<string>>,
+  ownerField?: string,
+  retiredField?: string,
+  retiredValues?: array<string>,
   /** Whether a reference to a retired row of this read model still resolves its
       name — the `@namedWhenRetired` opt-in. Read only by the reference door;
       every other door narrows as it always did. */
@@ -107,7 +107,7 @@ type binding = {
   /** The field a reference shows this row's picture from, derived from the same
       schema as `capability` by `Reventless.RowImage`. `None` for a view that
       declares no picture, which is most of them. */
-  imageSource: option<Reventless.RowImage.source>,
+  imageSource?: Reventless.RowImage.source,
 }
 
 // -- arg helpers -------------------------------------------------------------

package/src/adapter/Runtime/AggregateRuntime_Builder_Micro.res

@@ -11,7 +11,7 @@ type aggregateInfo = {
   specModulePath: string,
   decisionModulePath: string,
   eventLogTableName: Pulumi.Output.t<string>,
-  mappingsModulePath: option<string>,
+  mappingsModulePath?: string,
 }
 
 let aggregateInfos: dict<aggregateInfo> = Dict.make()
@@ -25,7 +25,7 @@ let registerAggregate = (
 ) =>
   aggregateInfos->Dict.set(
     aggregateName,
-    {specModulePath, decisionModulePath, eventLogTableName, mappingsModulePath},
+    {specModulePath, decisionModulePath, eventLogTableName, ?mappingsModulePath},
   )
 
 type storedSpec = {

package/src/adapter/Runtime/AggregateRuntime_Builder_Micro_Async.res

@@ -15,7 +15,7 @@ type aggregateInfo = {
   specModulePath: string,
   decisionModulePath: string,
   eventLogTableName: Pulumi.Output.t<string>,
-  mappingsModulePath: option<string>,
+  mappingsModulePath?: string,
 }
 
 let aggregateInfos: dict<aggregateInfo> = Dict.make()
@@ -29,7 +29,7 @@ let registerAggregate = (
 ) =>
   aggregateInfos->Dict.set(
     aggregateName,
-    {specModulePath, decisionModulePath, eventLogTableName, mappingsModulePath},
+    {specModulePath, decisionModulePath, eventLogTableName, ?mappingsModulePath},
   )
 
 type storedSpec = {

package/src/adapter/Runtime/AutomationSliceEntryPoint_Ops.res

@@ -29,11 +29,11 @@ type handlerEntry = {
   /** Whether `dcbQueueUrl` is a FIFO queue. Absent in a config written before
       the flavor travelled with the URL, where `false` — a standard queue — is
       what these command topics actually are. */
-  commandQueueIsFifo: option<bool>,
+  commandQueueIsFifo?: bool,
   sourceUrn: string,
-  context: option<Reventless.AutomationSlice.context>,
+  context?: Reventless.AutomationSlice.context,
   /** The slice's schedules store; absent for a slice that maps no `Clock`. */
-  schedulesTableName: option<string>,
+  schedulesTableName?: string,
 }
 
 let strOf = (obj: dict<JSON.t>, key: string): option<string> =>
@@ -58,10 +58,10 @@ let decodeEntry = (json: JSON.t): option<handlerEntry> =>
     callbackType: h->strOf("callbackType")->Option.getOr("automation"),
     queryDbTableName: h->strOf("queryDbTableName")->Option.getOr(""),
     dcbQueueUrl: h->strOf("dcbQueueUrl")->Option.getOr(""),
-    commandQueueIsFifo: h->Dict.get("commandQueueIsFifo")->Option.flatMap(JSON.Decode.bool),
+    commandQueueIsFifo: ?(h->Dict.get("commandQueueIsFifo")->Option.flatMap(JSON.Decode.bool)),
     sourceUrn: h->strOf("sourceUrn")->Option.getOr(""),
-    context: h->Dict.get("context")->Option.flatMap(decodeContext),
-    schedulesTableName: h->strOf("schedulesTableName"),
+    context: ?(h->Dict.get("context")->Option.flatMap(decodeContext)),
+    schedulesTableName: ?(h->strOf("schedulesTableName")),
   })
 
 // A compact entry names its slice and carries only what the deploy resolved;
@@ -91,15 +91,15 @@ let decodeCompactEntry = (
     callbackType: m->strOf("callbackType")->Option.getOr("automation"),
     queryDbTableName: h->strOf("q")->Option.getOr(""),
     dcbQueueUrl: h->strOf("k")->Option.getOr(sharedQueueUrl),
-    commandQueueIsFifo: switch h->Dict.get("f")->Option.flatMap(JSON.Decode.bool) {
+    commandQueueIsFifo: ?switch h->Dict.get("f")->Option.flatMap(JSON.Decode.bool) {
     | Some(f) => Some(f)
     | None => sharedIsFifo
     },
     // Only the first, which is all the shell registers today. The remaining
     // urns stay in the config for the multi-source registration to use.
     sourceUrn: urns->Array.get(0)->Option.getOr(""),
-    context: m->Dict.get("context")->Option.flatMap(decodeContext),
-    schedulesTableName: h->strOf("s"),
+    context: ?(m->Dict.get("context")->Option.flatMap(decodeContext)),
+    schedulesTableName: ?(h->strOf("s")),
   }
 }
 
@@ -428,6 +428,9 @@ let capabilities = (): Reventless.Capabilities.t => {
     ~identityStore=NodeProcess.env->Dict.get("IDENTITY_STORE_TABLE")->Option.getOr(""),
   ),
   secrets: ReventlessCore.Secrets_Node_Backend.provider,
+  // None deployed yet: a slice declaring the need is refused by the deploy gate,
+  // and this answers `Unavailable` should one run regardless.
+  stash: Reventless.Capabilities.none.stash,
 }
 
 // ── Phase-1/phase-2 pipelines ───────────────────────────────────────────────
@@ -576,7 +579,7 @@ type builtSlice = {
   tick: option<(~key: string, ~at: float) => promise<unit>>,
   /** Brings the slice's schedules in line with its spec and its rows, at a deploy;
       `None` for an outbound slice. */
-  reconcile: option<unit => promise<unit>>,
+  reconcile?: unit => promise<unit>,
 }
 
 let makeAutomationRegisteredHandler = (
@@ -651,27 +654,25 @@ let makeAutomationRegisteredHandler = (
         await syncTodoItems()
       },
     ),
-    reconcile: Some(
-      async () =>
-        switch schedules() {
-        | Some({load, sync, platform}) =>
-          await load()
-          await ReventlessCore.AutomationSlice_Schedules.reconcile(
-            callback.schedules,
-            platform,
-            ~declaredTime=schedule,
-            ~now=Date.now(),
-          )
-          await sync()
-        // No Clock mapping, so no schedule of the slice may stay on the platform.
-        | None =>
-          let platform = platformSchedulesOf(~slice=sliceName)
-          let names = await platform.names()
-          for i in 0 to names->Array.length - 1 {
-            await platform.removeName(names->Array.getUnsafe(i))
-          }
-        },
-    ),
+    reconcile: async () =>
+      switch schedules() {
+      | Some({load, sync, platform}) =>
+        await load()
+        await ReventlessCore.AutomationSlice_Schedules.reconcile(
+          callback.schedules,
+          platform,
+          ~declaredTime=schedule,
+          ~now=Date.now(),
+        )
+        await sync()
+      // No Clock mapping, so no schedule of the slice may stay on the platform.
+      | None =>
+        let platform = platformSchedulesOf(~slice=sliceName)
+        let names = await platform.names()
+        for i in 0 to names->Array.length - 1 {
+          await platform.removeName(names->Array.getUnsafe(i))
+        }
+      },
   }
 }
 
@@ -718,7 +719,6 @@ let makeOutboundRegisteredHandler = (
     comp,
     name: sliceName,
     tick: None,
-    reconcile: None,
   }
 }
 

package/src/adapter/Runtime/AutomationSliceEntryPoint_Ops.res.mjs

@@ -13,6 +13,7 @@ import * as DcbDecode$Reventless from "@reventlessdev/reventless-spec/src/compon
 import * as Primitive_exceptions from "@rescript/runtime/lib/es6/Primitive_exceptions.js";
 import * as Util_Sury$Reventless from "@reventlessdev/reventless-spec/src/util/Util_Sury.res.mjs";
 import * as Message$ReventlessCore from "@reventlessdev/reventless-core/src/Message.res.mjs";
+import * as Capabilities$Reventless from "@reventlessdev/reventless-spec/src/semantic/Capabilities.res.mjs";
 import * as EffectLogger$ReventlessCore from "@reventlessdev/reventless-core/src/util/EffectLogger.res.mjs";
 import * as DynamoDb_Error$ReventlessAws from "../../errors/DynamoDb_Error.res.mjs";
 import * as Messaging_Ses_Backend$ReventlessAws from "../Messaging/Messaging_Ses_Backend.res.mjs";
@@ -276,7 +277,8 @@ function capabilities() {
     geocode: text => Geocoder_AwsLocation_Backend$ReventlessAws.search(Stdlib_Option.getOr(process.env["PLACE_INDEX_NAME"], ""), text, undefined),
     messaging: messagingEmailProvider(),
     identityProvider: IdentityProvider_Cognito_Backend$ReventlessAws.provider(Stdlib_Option.getOr(process.env["IDENTITY_PROVIDER_ID"], ""), Stdlib_Option.getOr(process.env["IDENTITY_STORE_TABLE"], "")),
-    secrets: Secrets_Node_Backend$ReventlessCore.provider
+    secrets: Secrets_Node_Backend$ReventlessCore.provider,
+    stash: Capabilities$Reventless.none.stash
   };
 }
 
@@ -422,8 +424,7 @@ function makeOutboundRegisteredHandler(entry, sliceName, consumedEventSchema, ca
     },
     comp: comp,
     name: sliceName,
-    tick: undefined,
-    reconcile: undefined
+    tick: undefined
   };
 }
 

package/src/adapter/Runtime/AutomationSliceRuntime_Builder_Single.res

@@ -23,7 +23,7 @@ type sliceInfo = {
   queryDbResources: array<ReventlessInfra.Adapter.resource>,
   // Threaded to phase 1 collect/resolve on the automation path (mirrors the
   // in-process builder's `~context`); outbound slices take no context.
-  context: option<Reventless.AutomationSlice.context>,
+  context?: Reventless.AutomationSlice.context,
   // The non-DCB topics this slice subscribes to — an Aggregate's EventTopic when
   // it names one by `Spec.name`. Empty for the common DCB-only slice.
   //
@@ -47,10 +47,10 @@ type sliceInfo = {
   // Resolved in the finalizer rather than here: an Aggregate's CommandTopic is
   // created *after* the slices that target it, so a lookup at registration time
   // finds nothing. Only the name is knowable this early.
-  commandTargetName: option<string>,
+  commandTargetName?: string,
   // The automation's declared time; what the deploy's reconcile puts on the
   // platform, and what re-runs it when it changes.
-  schedule: option<Reventless.Schedule.time>,
+  schedule?: Reventless.Schedule.time,
   // The schedules store's table, empty for a slice that maps no `Clock`. Granted to
   // the Lambda with the to-do tables, and named in the slice's handler config.
   schedulesResources: array<ReventlessInfra.Adapter.resource>,
@@ -116,11 +116,11 @@ let registerAutomationSlice = (
       callbackType,
       queryDbTableName,
       queryDbResources,
-      context,
+      ?context,
       sourceTopics,
       consumesDcbLog,
-      commandTargetName,
-      schedule,
+      ?commandTargetName,
+      ?schedule,
       schedulesResources,
       capabilityNeeds,
     },

package/src/adapter/Runtime/DcbCommandTopicEntryPoint_Ops.res

@@ -45,7 +45,7 @@ type derivedScope = {
   crossPartitionTagKeys: array<string>,
   tagKeysByEventType: dict<array<string>>,
   /** `None` only for a Lambda hosting no StateChangeSlices, which never appends. */
-  partitionTag: option<Reventless.DcbTag.derivedPartitionTag>,
+  partitionTag?: Reventless.DcbTag.derivedPartitionTag,
   /** Slice name -> its partition: the handler's entity id and each command's envelope id. */
   partitionTagBySlice: dict<Reventless.DcbTag.derivedPartitionTag>,
 }
@@ -55,7 +55,6 @@ let deriveScope = (specs: array<specModule>): derivedScope =>
   | [] => {
       crossPartitionTagKeys: [],
       tagKeysByEventType: Dict.make(),
-      partitionTag: None,
       partitionTagBySlice: Dict.make(),
     }
   | _ =>
@@ -89,7 +88,7 @@ let deriveScope = (specs: array<specModule>): derivedScope =>
     {
       crossPartitionTagKeys: scope.crossPartitionTagKeys,
       tagKeysByEventType: scope.tagKeysByEventType,
-      partitionTag: Some(boundary.partitionTag),
+      partitionTag: boundary.partitionTag,
       partitionTagBySlice,
     }
   }
@@ -257,6 +256,7 @@ type inboundCallback = {
   receive: (
     ReventlessInfra.CommandTopic.publishJsons,
     JSON.t,
+    ~capabilities: Reventless.Capabilities.t,
     ~caller: Reventless.Identity.t=?,
     ~door: ReventlessInfra.InboundTranslationSlice.door=?,
   ) => promise<ReventlessInfra.InboundTranslationSlice.receiveResult>,
@@ -265,7 +265,7 @@ type inboundCallback = {
     ~errorCode: string,
     string,
   ) => ReventlessInfra.InboundTranslationSlice.receiveResult,
-  webhook: option<ReventlessCore.InboundTranslationSlice_Webhook.route>,
+  webhook?: ReventlessCore.InboundTranslationSlice_Webhook.route,
   auditLog: dict<ReventlessCore.InboundTranslationSlice_Callback.auditRow>,
 }
 @module(
@@ -324,9 +324,12 @@ let buildInboundReceiver = (
 ) => {
   let callback = makeInboundCallback(spec)(translation)
   async (args: JSON.t, identity: Nullable.t<Reventless.Identity.t>): JSON.t => {
+    // No capabilities in this Lambda: a slice declaring a need is refused at
+    // deploy, so `none` is what every slice reaching here expects.
     let result = await callback.receive(
       publishJsons,
       args,
+      ~capabilities=Reventless.Capabilities.none,
       ~caller=ReventlessCore.InboundTranslationSlice_Callback.doorCaller(identity),
     )
     await persistAudit(callback, auditQueryDbOps, result)
@@ -354,7 +357,15 @@ let buildWebhookSlice = (
   ->Option.map((route): ReventlessCore.InboundTranslationSlice_Webhook.slice => {
     route,
     receive: async (input, ~caller) =>
-      await persisted(await callback.receive(publishJsons, input, ~caller, ~door=Webhook)),
+      await persisted(
+        await callback.receive(
+          publishJsons,
+          input,
+          ~capabilities=Reventless.Capabilities.none,
+          ~caller,
+          ~door=Webhook,
+        ),
+      ),
     refuse: async (~body, ~errorCode, error) =>
       await persisted(callback.refuse(~body, ~errorCode, error)),
   })

package/src/adapter/Runtime/DcbCommandTopicEntryPoint_Ops.res.mjs

@@ -12,6 +12,7 @@ import * as Primitive_exceptions from "@rescript/runtime/lib/es6/Primitive_excep
 import * as Util_Sury$Reventless from "@reventlessdev/reventless-spec/src/util/Util_Sury.res.mjs";
 import * as Message$ReventlessCore from "@reventlessdev/reventless-core/src/Message.res.mjs";
 import * as QueryDb$ReventlessCore from "@reventlessdev/reventless-core/src/components/QueryDb/QueryDb.res.mjs";
+import * as Capabilities$Reventless from "@reventlessdev/reventless-spec/src/semantic/Capabilities.res.mjs";
 import * as EffectLogger$ReventlessCore from "@reventlessdev/reventless-core/src/util/EffectLogger.res.mjs";
 import * as CommandTopic_Helpers$ReventlessCore from "@reventlessdev/reventless-core/src/components/CommandTopic/CommandTopic_Helpers.res.mjs";
 import * as InboundTranslationSlice_Webhook$ReventlessCore from "@reventlessdev/reventless-core/src/components/InboundTranslationSlice/InboundTranslationSlice_Webhook.res.mjs";
@@ -26,7 +27,6 @@ function deriveScope(specs) {
     return {
       crossPartitionTagKeys: [],
       tagKeysByEventType: {},
-      partitionTag: undefined,
       partitionTagBySlice: {}
     };
   }
@@ -147,7 +147,7 @@ async function persistAudit(callback, auditQueryDbOps, result) {
 function buildInboundReceiver(spec, translation, publishJsons, auditQueryDbOps) {
   let callback = InboundTranslationSlice_CallbackResMjs.Make(spec)(translation);
   return async (args, identity) => {
-    let result = await callback.receive(publishJsons, args, InboundTranslationSlice_Callback$ReventlessCore.doorCaller(identity), undefined);
+    let result = await callback.receive(publishJsons, args, Capabilities$Reventless.none, InboundTranslationSlice_Callback$ReventlessCore.doorCaller(identity), undefined);
     await persistAudit(callback, auditQueryDbOps, result);
     return CommandTopic_Helpers$ReventlessCore.commandOutcomeToJson(InboundTranslationSlice_Callback$ReventlessCore.receiveResultToOutcome(result));
   };
@@ -161,7 +161,7 @@ function buildWebhookSlice(spec, translation, publishJsons, auditQueryDbOps) {
   };
   return Stdlib_Nullable.fromOption(Stdlib_Option.map(callback.webhook, route => ({
     route: route,
-    receive: async (input, caller) => await persisted(await callback.receive(publishJsons, input, caller, "Webhook")),
+    receive: async (input, caller) => await persisted(await callback.receive(publishJsons, input, Capabilities$Reventless.none, caller, "Webhook")),
     refuse: async (body, errorCode, error) => await persisted(callback.refuse(body, errorCode, error))
   })));
 }