@reventlessdev/reventless-core 3.0.0-alpha.300 → 3.0.0-alpha.302

package/CHANGELOG.md

@@ -3,6 +3,38 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.302 (2026-10-21)
+
+* feat!: a state view's row key is module Id ([08c9726](https://github.com/ReventlessDev/reventless-core/commit/08c972659a3d689a39fd5e2f2026597155e92210))
+* feat!: a plugin structure's component definitions are read-side and write-side defs ([ea2ab69](https://github.com/ReventlessDev/reventless-core/commit/ea2ab69e928ba16d7e640e4c66ab0e9ba034fe5c))
+
+### BREAKING CHANGES
+
+* a state view spec declares its row key as module Id. A
+hand-written module Key in a spec under StateView/ or StateViewStream/
+fails the build with "A state view's row key is `module Id`, not
+`module Key`".
+* Plugin.queryableDef, Plugin.writableDef, their schemas,
+isPublicQueryable and encodeQueryableDef no longer exist; a reader names
+readSideDef, writeSideDef, isPublicReadSide and encodeReadSideDef. There
+are no aliases, so the compiler lists every reader.
+
+
+
+# 3.0.0-alpha.301 (2026-10-21)
+
+* feat!: the write-side logic module is called the decision, and a codemod moves an app over ([cb573ff](https://github.com/ReventlessDev/reventless-core/commit/cb573ff5b928c7d7f3e75988dfaa65066f8c95eb))
+
+### BREAKING CHANGES
+
+* <Spec>_Behavior.res, @@reventless.behavior,
+Reventless.Behavior.T, StateChangeSlice.Behavior, Behavior_GWT and
+thenRefused no longer exist. Run `npx reventless-rename-to-decision` at an
+app's root, then rebuild; comments are not rewritten. The PPX must be the
+matching release.
+
+
+
 # 3.0.0-alpha.300 (2026-10-19)
 
 **Note:** Version bump only for package @reventlessdev/reventless-core

package/README.md

@@ -10,7 +10,7 @@
 The **provider-agnostic core** of [Reventless](https://docs.reventless.dev) — a
 spec-driven, event-sourced CQRS framework written in [ReScript](https://rescript-lang.org).
 This package is the runtime you model your domain against: the type-safe building blocks
-for commands, events, projections, and the behaviors that evolve state — with **no** cloud
+for commands, events, projections, and the decisions that evolve state — with **no** cloud
 or storage dependency. The provider-specific adapters live in separate packages
 (see [Where it fits](#where-it-fits)).
 
@@ -19,8 +19,8 @@ or storage dependency. The provider-specific adapters live in separate packages
 ReScript modules, consumed by adding the package to your `rescript.json` `dependencies`:
 
 - **`Message`** — command / event message contracts and their service interface.
-- **`Behavior`** — the write-side behavior spec: event-sourced state transitions
-  (`evolve(state, event) => state`).
+- **`Decision`** — the write side's decision module type (the decider pattern):
+  event-sourced state transitions (`evolve(state, event) => state`) and `decide`.
 - **`Projection`** / **`ProjectionMapper`** — read models projected from event streams.
 - **`Mapper`** / **`Mapper1toN`** / **`MapperNto1`** — cross-component event translation
   (encode/decode between a source and a target contract).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-core",
-  "version": "3.0.0-alpha.300",
+  "version": "3.0.0-alpha.302",
   "description": "Core package for Reventless framework",
   "license": "Apache-2.0",
   "jest": {
@@ -28,22 +28,22 @@
   "dependencies": {
     "sury": "11.0.0",
     "uuid": "^13.0.0",
-    "@reventlessdev/rescript-effect": "1.0.0-alpha.0",
-    "@reventlessdev/rescript-node": "2.0.0-alpha.22",
-    "@reventlessdev/rescript-jest": "1.0.0-alpha.12",
-    "@reventlessdev/rescript-fast-csv": "2.0.0-alpha.22",
+    "@reventlessdev/rescript-effect": "1.0.0-alpha.1",
     "@reventlessdev/rescript-hash-object": "1.2.0-alpha.15",
+    "@reventlessdev/rescript-fast-csv": "2.0.0-alpha.23",
+    "@reventlessdev/rescript-jest": "1.0.0-alpha.13",
+    "@reventlessdev/rescript-node": "2.0.0-alpha.23",
     "@reventlessdev/rescript-pulumi-pulumi": "3.0.0-alpha.0",
+    "@reventlessdev/rescript-ssh2": "2.0.0-alpha.24",
     "@reventlessdev/rescript-uuid": "2.0.0-alpha.1",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.197",
-    "@reventlessdev/reventless-interop": "3.0.0-alpha.41",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.169",
-    "@reventlessdev/rescript-ssh2": "2.0.0-alpha.23"
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.199",
+    "@reventlessdev/reventless-interop": "3.0.0-alpha.42",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.171"
   },
   "devDependencies": {
     "rescript": "12.3.1",
     "sury-ppx": "11.0.0",
-    "@reventlessdev/reventless-ppx": "1.0.0-alpha.103"
+    "@reventlessdev/reventless-ppx": "1.0.0-alpha.104"
   },
   "peerDependencies": {
     "rescript": "^12.3.1"

package/src/{Behavior.res → Decision.res}

@@ -1,4 +1,4 @@
-include Reventless.Behavior
+include Reventless.Decision
 
 module type Spec = {
   @schema

package/src/Message.res

@@ -308,7 +308,7 @@ let metaKeys = [
 
   `StoredEvent` is the logical shape (nested `meta:meta`). The on-disk shape is
   a flat top-level dict so DynamoDB GSIs can project individual meta attributes
-  (the §1.2/§3.2 behaviour today, preserved here). These two helpers are the
+  (the §1.2/§3.2 behavior today, preserved here). These two helpers are the
   single bridge between the two — used by both EventLog (aggregate) and
   DcbEventLog (DCB) storage paths.
 */

package/src/ResourceAttribution.res

@@ -7,11 +7,11 @@ drifting into private spellings of the same fact.
 
 The three facts are deliberately independent:
 
-- `ComponentType.t` — the *modelling* kind (Aggregate, StateViewSlice, …): what
+- `ComponentType.t` — the *modeling* kind (Aggregate, StateViewSlice, …): what
   the element IS in the domain model.
-- `Role.t` — the *deployment piece* (EventLog, QueryDb, Runtime, …): what job
-  this particular resource does for that element. One component owns several
-  pieces, so kind alone can't identify a resource.
+- `Role.t` — the *deployment role* (EventLog, QueryDb, Runtime, …): what job
+  this particular resource does for that element. One component owns resources in
+  several roles, so kind alone can't identify a resource.
 - `Scope.t` — the level the resource is attributed to: an individual component,
   a plugin's shared substrate, or platform substrate.
 
@@ -40,8 +40,8 @@ module Scope = {
 }
 
 /**
-The deployment piece a resource implements. `Other(string)` is the escape hatch
-for support pieces and future roles (same pattern as `Monitoring.unitKind`).
+The deployment role a resource plays. `Other(string)` is the escape hatch
+for support roles and future ones (same pattern as `Monitoring.unitKind`).
 */
 module Role = {
   type t =
@@ -105,11 +105,11 @@ module Role = {
 /**
 The model component a provisioned resource belongs to.
 
-Piece builders (EventLog, QueryDb, CommandTopic, EventTopic, EventCollector) are
+Role builders (EventLog, QueryDb, CommandTopic, EventTopic, EventCollector) are
 shared building blocks applied as functors by many different component kinds — a
 QueryDb is instantiated by ReadModel, StateViewSlice, AutomationSlice, both
 translation slices and Counter. The adapter that provisions the physical resource
-sits at the bottom of that chain and would otherwise only know its own piece, so
+sits at the bottom of that chain and would otherwise only know its own role, so
 `kind` would collapse onto `role` and the owning component would be unrecoverable.
 The owning builder passes this record down instead.
 

package/src/adapter/Auth/Auth_ActiveRole.res

@@ -69,7 +69,7 @@ boundary — and a table copied into two test suites is exactly the drift it exi
 to prevent.
 
 `expected` is the group set the minted token must carry. `None` means the request
-must be **refused** rather than honoured, ignored, or reduced to the empty set —
+must be **refused** rather than honored, ignored, or reduced to the empty set —
 the distinction §3 turns on. A path with no client to refuse (the trigger, reading
 stored state) resolves `None` by minting `membership` and marking
 [staleRoleClaim]; a path answering a live request refuses it.

package/src/adapter/Auth/Auth_RefusalVocabulary.res

@@ -120,7 +120,7 @@ Classify a refusal without knowing which adapter produced it.
 
 Pass what the response actually carried: its status, the `errorType` of a GraphQL
 error if there was one, and `extensions.code` if there was one. Returns `None`
-when the response is not a refusal this contract recognises — which includes a
+when the response is not a refusal this contract recognizes — which includes a
 successful response, so a caller must not read `None` as "allowed".
 
 Ordering matters and is the point of the function. The transport status is

package/src/adapter/EventLogProvisioning/EventLogProvisioning.res

@@ -1,6 +1,6 @@
 /**
 Deploy-time hook: every event log announces itself as it is provisioned, so an
-extension can attach behaviour to it inside the program that owns it.
+extension can attach behavior to it inside the program that owns it.
 
 No-op by default. Zero behavioral change unless an extension registers a backend
 via `use` before the platform/plugin build. The seam fires once per log at

package/src/adapter/Runtime/AggregateRuntime_Builder.res

@@ -10,12 +10,12 @@ module type T = {
     CommandGenerator.component,
   >
   let forCommandTopic: Runtime.forComponent<
-    Runtime.effectHandler<CommandTopicChannel.callbackEvent, context, unit, string>,
+    Runtime.effectInvocationHandler<CommandTopicChannel.callbackEvent, context, unit, string>,
     runtimeParts,
     CommandTopic.component<'op>,
   >
   let forEventCollector: Runtime.forEventCollector<
-    Runtime.effectHandler<EventCollectorChannel.callbackEvent, context, unit, string>,
+    Runtime.effectInvocationHandler<EventCollectorChannel.callbackEvent, context, unit, string>,
     EventCollector.component,
   >
   let finish: unit => unit

package/src/adapter/Runtime/AggregateRuntime_Builder_Common.res

@@ -24,16 +24,21 @@ module Make = (
     memorySize: int,
     timeout: int,
   }
-  type effectHandler = Runtime.effectHandler<RuntimeEnvironment.event, context, unit, string>
+  type effectInvocationHandler = Runtime.effectInvocationHandler<
+    RuntimeEnvironment.event,
+    context,
+    unit,
+    string,
+  >
 
   // Event collectors nested under this aggregate belong to their own element (a
   // ReadModel, an EventMapper, …), so they carry the comp resolved at registration
   // time rather than the hosting aggregate's.
-  type registeredHandler = {comp: string, handler: effectHandler}
+  type registeredHandler = {comp: string, handler: effectInvocationHandler}
 
   let runtimeSpecs: dict<runtimeSpec> = Dict.make()
   let commandGeneratorHandlers: dict<CommandGenerator.effectEventHandler<context>> = Dict.make()
-  let commandTopicHandlers: dict<effectHandler> = Dict.make()
+  let commandTopicHandlers: dict<effectInvocationHandler> = Dict.make()
   let eventCollectorHandlers: dict<array<registeredHandler>> = Dict.make()
 
   let aggregateHandler = aggregateName =>
@@ -197,7 +202,7 @@ module Make = (
 
   let forCommandTopic = (
     ~handler: Pulumi.Output.t<
-      Runtime.effectHandler<CommandTopicChannel.callbackEvent, context, unit, string>,
+      Runtime.effectInvocationHandler<CommandTopicChannel.callbackEvent, context, unit, string>,
     >,
     ~connect,
     ~memorySize=1024,
@@ -228,7 +233,7 @@ module Make = (
   }
   let forEventCollector = (
     ~handler: Pulumi.Output.t<
-      Runtime.effectHandler<EventCollectorChannel.callbackEvent, context, unit, string>,
+      Runtime.effectInvocationHandler<EventCollectorChannel.callbackEvent, context, unit, string>,
     >,
     ~eventTopics: EventTopic.allOutputs,
     ~resources: array<ReventlessInfra.Adapter.resource>,

package/src/adapter/Runtime/AggregateRuntime_Builder_Micro.res

@@ -45,7 +45,7 @@ module Make = (
   }
   let forCommandTopic = (
     ~handler: Pulumi.Output.t<
-      Runtime.effectHandler<CommandTopicChannel.callbackEvent, context, unit, string>,
+      Runtime.effectInvocationHandler<CommandTopicChannel.callbackEvent, context, unit, string>,
     >,
     ~connect,
     ~memorySize=1024,
@@ -76,7 +76,7 @@ module Make = (
 
   let forEventCollector = (
     ~handler: Pulumi.Output.t<
-      Runtime.effectHandler<EventCollectorChannel.callbackEvent, context, unit, string>,
+      Runtime.effectInvocationHandler<EventCollectorChannel.callbackEvent, context, unit, string>,
     >,
     ~eventTopics: EventTopic.allOutputs,
     ~resources: array<ReventlessInfra.Adapter.resource>,

package/src/adapter/Runtime/EventCollectorRuntime_Builder.res

@@ -4,7 +4,7 @@ module type T = {
   module EventCollectorChannel: EventCollector_Adapter.Channel
 
   let forEventCollector: Runtime.forEventCollector<
-    Runtime.effectHandler<EventCollectorChannel.callbackEvent, context, unit, string>,
+    Runtime.effectInvocationHandler<EventCollectorChannel.callbackEvent, context, unit, string>,
     EventCollector.component,
   >
   let finish: unit => unit

package/src/adapter/Runtime/EventCollectorRuntime_Builder_Single.res

@@ -33,12 +33,17 @@ module Make = (
     maxMemorySize: 0,
     maxTimeout: 0,
   })
-  type effectHandler = Runtime.effectHandler<RuntimeEnvironment.event, context, unit, string>
+  type effectInvocationHandler = Runtime.effectInvocationHandler<
+    RuntimeEnvironment.event,
+    context,
+    unit,
+    string,
+  >
   // `comp` is the *element's* log component, resolved where the handler is registered
   // (the event collector's own resource is in hand there). Keeping it next to the
   // handler is what makes every collector hosted in this one runtime separable by
   // field — the runtime-group name would be identical for all of them.
-  type registeredHandler = {comp: string, handler: effectHandler}
+  type registeredHandler = {comp: string, handler: effectInvocationHandler}
   let eventCollectorHandlers: dict<array<registeredHandler>> = Dict.make()
 
   let eventCollectorHandler = parentName =>
@@ -142,7 +147,7 @@ module Make = (
 
   let forEventCollector = (
     ~handler: Pulumi.Output.t<
-      Runtime.effectHandler<EventCollectorChannel.callbackEvent, context, unit, string>,
+      Runtime.effectInvocationHandler<EventCollectorChannel.callbackEvent, context, unit, string>,
     >,
     ~eventTopics: EventTopic.allOutputs,
     ~resources: array<ReventlessInfra.Adapter.resource>,

package/src/adapter/Runtime/ExtensionPointRuntime_Builder.res

@@ -5,7 +5,7 @@ module type T = {
 
   let forCommandTopic: (
     ~handler: Pulumi.Output.t<
-      Runtime.effectHandler<CommandTopicChannel.callbackEvent, context, unit, string>,
+      Runtime.effectInvocationHandler<CommandTopicChannel.callbackEvent, context, unit, string>,
     >,
     ~connect: Runtime.connect<runtimeParts>,
     ~memorySize: int=?,

package/src/adapter/Runtime/PluginRuntime_Builder.res

@@ -5,16 +5,16 @@ module type T = {
 
   let registerPluginName: string => unit
   let forPluginEventCollector: Runtime.forEventCollector<
-    Runtime.effectHandler<EventCollectorChannel.callbackEvent, context, unit, string>,
+    Runtime.effectInvocationHandler<EventCollectorChannel.callbackEvent, context, unit, string>,
     EventCollector.component,
   >
   let forPluginHeartbeat: Runtime.forComponent<
-    Runtime.eventHandler<unit, context, unit>,
+    Runtime.invocationHandler<unit, context, unit>,
     runtimeParts,
     Heartbeat.component,
   >
   let forDcbCommandTopic: Runtime.forComponent<
-    Runtime.effectHandler<'callbackEvent, context, unit, string>,
+    Runtime.effectInvocationHandler<'callbackEvent, context, unit, string>,
     runtimeParts,
     CommandTopic.component<'op>,
   >

package/src/adapter/Runtime/Runtime.res

@@ -1,6 +1,7 @@
-type eventHandler<'event, 'context, 'result> = ('event, 'context) => promise<'result>
-type effectHandler<'event, 'context, 'result, 'error> = (
-  'event,
+// Handlers of a platform invocation (a Lambda payload), not of domain events.
+type invocationHandler<'payload, 'context, 'result> = ('payload, 'context) => promise<'result>
+type effectInvocationHandler<'payload, 'context, 'result, 'error> = (
+  'payload,
   'context,
 ) => Effect.t<'result, 'error, unit>
 
@@ -92,7 +93,7 @@ let runEffect = (
   )
   ->Effect.runPromise
 
-// Convert an effectHandler to an eventHandler at build time, annotating the
+// Convert an effectInvocationHandler to an invocationHandler at build time, annotating the
 // invocation on each call. Used by the single-component-per-Lambda strategies
 // (Micro / PerAggregate / Plugin / PerEventCollector / PerExtensionPoint), which
 // pass the Environment's `extractCorrelationId` / `extractCausationId` and the
@@ -105,8 +106,8 @@ let runEffectHandler = (
   ~extractRetryCount: option<'event => option<int>>=?,
   ~comp=?,
   ~pluginName=?,
-  handler: effectHandler<'event, 'context, 'result, 'error>,
-): eventHandler<'event, 'context, 'result> =>
+  handler: effectInvocationHandler<'event, 'context, 'result, 'error>,
+): invocationHandler<'event, 'context, 'result> =>
   (event, ctx) => {
     let extract = (f, event) =>
       switch f {
@@ -136,7 +137,7 @@ type environment<'parts> = {
 
 type environmentMaker<'event, 'context, 'result, 'parts> = (
   ~name: string,
-  ~handler: Pulumi.Output.t<eventHandler<'event, 'context, 'result>>,
+  ~handler: Pulumi.Output.t<invocationHandler<'event, 'context, 'result>>,
   ~memorySize: int=?,
   ~timeout: int=?,
   ~opts: Pulumi.ComponentResource.options=?,
@@ -154,8 +155,8 @@ module type Environment = {
   // `None` where the transport carries no such notion (see each implementation).
   let extractSentTimestamp: event => option<float>
   let extractRetryCount: event => option<int>
-  let asEventHandler: 'a => eventHandler<event, context, 'result>
-  let asEffectHandler: 'a => effectHandler<event, context, 'result, 'error>
+  let asEventHandler: 'a => invocationHandler<event, context, 'result>
+  let asEffectHandler: 'a => effectInvocationHandler<event, context, 'result, 'error>
 }
 
 type connect<'parts> = (~runtime: environment<'parts>) => unit

package/src/adapter/Runtime/TaskRuntime_Builder.res

@@ -18,7 +18,7 @@ module type T = {
   type runtimeParts
 
   let forBucketCallback: (
-    ~handler: Pulumi.Output.t<Runtime.eventHandler<callbackEvent, context, unit>>,
+    ~handler: Pulumi.Output.t<Runtime.invocationHandler<callbackEvent, context, unit>>,
     ~connect: Runtime.connect<runtimeParts>,
     ~memorySize: int=?,
     ~timeout: int=?,

package/src/adapter/RuntimeExtension/RuntimeExtension.res

@@ -8,7 +8,7 @@ No-op by default. Zero behavioral change unless an extension registers one via
 no code runs.
 
 `Monitoring` and `EventLogProvisioning` are the deploy-time half of this shape —
-they let an extension attach behaviour to *what gets provisioned*. This is the
+they let an extension attach behavior to *what gets provisioned*. This is the
 runtime half: *what runs inside it*. Without it,
 `CommandGenerator_Callback.registerCommandInterceptor`,
 `QueryDb_Callback.registerQueryInterceptor` and the two
@@ -34,7 +34,7 @@ to internals would make it a second, informal handler API — and the four hooks
 exists to reach already receive their own per-request payloads
 (`commandInterceptor` gets `~componentName` / `~tag` / `~args` on every call).
 
-`~runtimeKind` is the modelling kind of the component the runtime runs — the same
+`~runtimeKind` is the modeling kind of the component the runtime runs — the same
 `ComponentType.t` every AWS runtime builder already passes to
 `RuntimeEnvironment_Lambda.makeFromCodeAsset`, so there is no third taxonomy to
 keep in step with `Monitoring.unitKind` and `ResourceAttribution.Role`.
@@ -67,7 +67,7 @@ runtime handles its first request.
 seam reachable in a *deployed* runtime: registering a first-class module only
 populates the deploy program's process, and the Lambda is a different one, so the
 framework bundles the module's package into the code archive and names the module
-in the runtime's config for the entry shell to import. Spec and behavior modules
+in the runtime's config for the entry shell to import. Spec and decision modules
 are carried into runtimes the same way. The convention matches
 `@@reventless.spec`'s injected `let moduleUrl`, so a ReScript extension can lift
 it from there.

package/src/admin/Platform_Admin_Structure.res

@@ -42,7 +42,7 @@ let pluginCommands: array<commandDef> = Plugin_Structure.extractCommandDefs(
   commandSchema,
 )
 
-let pluginAggregate: writableDef = {
+let pluginAggregate: writeSideDef = {
   name: "Plugin",
   commands: pluginCommands,
   producedEventTypes: [],
@@ -59,8 +59,8 @@ let pluginAggregate: writableDef = {
 
 // Functions, not values: the view's access keys are the group the platform maps
 // the administrator role to, and this module is evaluated before a root maps it.
-let pluginReadModel = (): queryableDef =>
-  Plugin_Structure.queryableDefFromSpec(
+let pluginReadModel = (): readSideDef =>
+  Plugin_Structure.readSideDefFromSpec(
     ~plugin=pluginId,
     ~name=PluginsReadModelSpec.name,
     ~stateSchema=PluginsReadModelSpec.stateSchema->S.castToUnknown,

package/src/admin/Platform_Admin_Structure.res.mjs

@@ -33,7 +33,7 @@ let pluginAggregate = {
 };
 
 function pluginReadModel() {
-  return Plugin_Structure$ReventlessCore.queryableDefFromSpec(pluginId, PluginsReadModelSpec$ReventlessCore.name, PluginsReadModelSpec$ReventlessCore.stateSchema, Authorization$Reventless.named(PluginsReadModelSpec$ReventlessCore.authorization), undefined, undefined, ["Plugin"], undefined);
+  return Plugin_Structure$ReventlessCore.readSideDefFromSpec(pluginId, PluginsReadModelSpec$ReventlessCore.name, PluginsReadModelSpec$ReventlessCore.stateSchema, Authorization$Reventless.named(PluginsReadModelSpec$ReventlessCore.authorization), undefined, undefined, ["Plugin"], undefined);
 }
 
 function structure() {

package/src/admin/Platform_BakedManifest.res

@@ -57,7 +57,7 @@ let describe = (e: error): string =>
 // gives. Unlike the other two, what it selects is not filtered here — there is
 // nothing in a `pluginStructure` to filter, because the pages do not exist until
 // a shell builds them. It travels to the shell instead, which is the only place
-// that can honour it.
+// that can honor it.
 type selection = {
   plugin: string,
   views: option<array<string>>,
@@ -65,12 +65,12 @@ type selection = {
   derived: option<array<string>>,
 }
 
-let publicViews = (def: pluginStructure): array<queryableDef> =>
+let publicViews = (def: pluginStructure): array<readSideDef> =>
   Array.concat(def.readModels, def.stateViewSlices)->Array.filter(
-    Platform_ComponentDefinitionsApi.isPublicQueryable,
+    Platform_ComponentDefinitionsApi.isPublicReadSide,
   )
 
-let writeSides = (def: pluginStructure): array<writableDef> =>
+let writeSides = (def: pluginStructure): array<writeSideDef> =>
   Array.concat(def.stateChangeSlices, def.aggregates)
 
 let commandNames = (def: pluginStructure): array<string> =>
@@ -116,7 +116,7 @@ let isSelected = (selected: option<array<string>>, name: string): bool =>
 // breaks the picker permanently in the one deployment shape with no fallback.
 // Naming it discloses nothing: the domain API already serves that view to the same
 // caller (Internal is a menu hint, not a boundary).
-let referencedEntities = (~pluginName: string, kept: array<writableDef>): array<string> =>
+let referencedEntities = (~pluginName: string, kept: array<writeSideDef>): array<string> =>
   kept
   ->Array.flatMap(w => w.commands)
   ->Array.flatMap(c => c.references)
@@ -133,7 +133,7 @@ let curateStructure = (~pluginId: string, ~def: pluginStructure, sel: selection)
 > =>
   validate(~def, sel)->Result.map(() => {
     let pluginName = Plugin.name(pluginId)
-    let keepCommands = (ws: array<writableDef>) =>
+    let keepCommands = (ws: array<writeSideDef>) =>
       ws
       ->Array.map(w => {
         ...w,
@@ -147,9 +147,9 @@ let curateStructure = (~pluginId: string, ~def: pluginStructure, sel: selection)
     let stateChangeSlices = def.stateChangeSlices->keepCommands
     let aggregates = def.aggregates->keepCommands
     let referenced = referencedEntities(~pluginName, Array.concat(stateChangeSlices, aggregates))
-    let keepViews = (qs: array<queryableDef>) =>
+    let keepViews = (qs: array<readSideDef>) =>
       qs->Array.filter(q =>
-        if Platform_ComponentDefinitionsApi.isPublicQueryable(q) {
+        if Platform_ComponentDefinitionsApi.isPublicReadSide(q) {
           sel.views->isSelected(q.name)
         } else {
           referenced->Array.includes(q.name)

package/src/admin/Platform_BakedManifest.res.mjs

@@ -27,7 +27,7 @@ function describe(e) {
 }
 
 function publicViews(def) {
-  return def.readModels.concat(def.stateViewSlices).filter(Platform_ComponentDefinitionsApi$ReventlessCore.isPublicQueryable);
+  return def.readModels.concat(def.stateViewSlices).filter(Platform_ComponentDefinitionsApi$ReventlessCore.isPublicReadSide);
 }
 
 function writeSides(def) {
@@ -117,7 +117,7 @@ function curateStructure(pluginId, def, sel) {
     let aggregates = keepCommands(def.aggregates);
     let referenced = referencedEntities(pluginName, stateChangeSlices.concat(aggregates));
     let keepViews = qs => qs.filter(q => {
-      if (Platform_ComponentDefinitionsApi$ReventlessCore.isPublicQueryable(q)) {
+      if (Platform_ComponentDefinitionsApi$ReventlessCore.isPublicReadSide(q)) {
         return isSelected(sel.views, q.name);
       } else {
         return referenced.includes(q.name);

package/src/admin/Platform_ComponentDefinitionsApi.res

@@ -92,7 +92,7 @@ let encodeCommandDef = (c: commandDef): JSON.t =>
 
 // Internal ReadModels / StateViewSlices are carried in pluginStructure for developer
 // tooling but must stay out of the deployed AutoUI — the menu, drill-down pages and
-// queryable defs are all derived from this response, so filter them here.
+// read-side defs are all derived from this response, so filter them here.
 //
 // Hidden from the menu is not the same question as denied as a reference target: a
 // denormalised lookup view is precisely the thing an author wants referenceable but
@@ -100,9 +100,9 @@ let encodeCommandDef = (c: commandDef): JSON.t =>
 // (below) answers the second. Neither is a security boundary — an Internal view
 // keeps its resolver and stays queryable, so naming it here publishes a fact the
 // caller is already entitled to.
-let isPublicQueryable = (q: queryableDef): bool => q.visibility != Some("Internal")
+let isPublicReadSide = (q: readSideDef): bool => q.visibility != Some("Internal")
 
-let encodeQueryableDef = (r: queryableDef): JSON.t =>
+let encodeReadSideDef = (r: readSideDef): JSON.t =>
   Dict.fromArray([
     ("name", JSON.Encode.string(r.name)),
     ("queryField", JSON.Encode.string(r.queryField)),
@@ -143,7 +143,7 @@ let encodeErrorDef = (e: errorDef): JSON.t =>
     ("references", e.references->Array.map(encodeFieldReference)->JSON.Encode.array),
   ])->JSON.Encode.object
 
-let encodeWritableDef = (w: writableDef): JSON.t =>
+let encodeWriteSideDef = (w: writeSideDef): JSON.t =>
   Dict.fromArray([
     ("name", JSON.Encode.string(w.name)),
     ("commands", w.commands->Array.map(encodeCommandDef)->JSON.Encode.array),
@@ -254,26 +254,26 @@ let encodePluginStructureEntry = (
     (
       "readModels",
       def.readModels
-      ->Array.filter(isPublicQueryable)
-      ->Array.map(encodeQueryableDef)
+      ->Array.filter(isPublicReadSide)
+      ->Array.map(encodeReadSideDef)
       ->JSON.Encode.array,
     ),
     (
       "stateViewSlices",
       def.stateViewSlices
-      ->Array.filter(isPublicQueryable)
-      ->Array.map(encodeQueryableDef)
+      ->Array.filter(isPublicReadSide)
+      ->Array.map(encodeReadSideDef)
       ->JSON.Encode.array,
     ),
     (
       "internalQueryables",
       Array.concat(def.readModels, def.stateViewSlices)
-      ->Array.filter(q => !isPublicQueryable(q))
-      ->Array.map(encodeQueryableDef)
+      ->Array.filter(q => !isPublicReadSide(q))
+      ->Array.map(encodeReadSideDef)
       ->JSON.Encode.array,
     ),
-    ("stateChangeSlices", def.stateChangeSlices->Array.map(encodeWritableDef)->JSON.Encode.array),
-    ("aggregates", def.aggregates->Array.map(encodeWritableDef)->JSON.Encode.array),
+    ("stateChangeSlices", def.stateChangeSlices->Array.map(encodeWriteSideDef)->JSON.Encode.array),
+    ("aggregates", def.aggregates->Array.map(encodeWriteSideDef)->JSON.Encode.array),
     (
       "automationSlices",
       def.automationSlices->Array.map(encodeAutomationSliceDef)->JSON.Encode.array,