@reventlessdev/reventless-local 3.0.0-alpha.300 → 3.0.0-alpha.302

package/CHANGELOG.md

@@ -3,6 +3,36 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.302 (2026-10-29)
+
+### Bug Fixes
+
+* **local:** emit-capabilities writes an empty manifest for a plugin with no parts yet ([56586a6](https://github.com/ReventlessDev/reventless-core/commit/56586a687aa4658e2357c836878b44050b424d41))
+* refactor!: drop `dcbSources`, the cross-plugin DCB subscription nobody declared ([cf3b66d](https://github.com/ReventlessDev/reventless-core/commit/cf3b66d8c1b5d87673197b64eaee174598bb8253))
+* refactor!: a read model hears another plugin only through an Extension and a slice ([15c7cae](https://github.com/ReventlessDev/reventless-core/commit/15c7cae214d5aa04404779fcd87a8429aad1965c))
+### Features
+
+* **core:** a handler drops a command it has already handled ([605862b](https://github.com/ReventlessDev/reventless-core/commit/605862bba765b1501eb19d08f3924bf619159e21))
+
+### BREAKING CHANGES
+
+* `Reventless.Plugin.extensionDefinition` has no `dcbSources`
+field, and `Platform_PluginExtensions.dcbSources` is gone from the GraphQL
+schema. A query that selects it fails as a whole; drop the selection.
+* `ReventlessInfra.Extension.T.make` and the core
+`Extension_Builder.make` no longer take `~readModelNamesForSourceName` and
+`~publishToReadModels`. Both arguments did nothing; drop them at the call site.
+
+
+
+# 3.0.0-alpha.301 (2026-10-25)
+
+**Note:** Version bump only for package @reventlessdev/reventless-local
+
+
+
+
+
 # 3.0.0-alpha.300 (2026-10-25)
 
 **Note:** Version bump only for package @reventlessdev/reventless-local

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-local",
-  "version": "3.0.0-alpha.300",
+  "version": "3.0.0-alpha.302",
   "description": "Local platform for Reventless (in-memory or SQLite backend, for development and testing without AWS)",
   "license": "Apache-2.0",
   "bin": {
@@ -34,19 +34,19 @@
     "graphql-yoga": "^5.21.0",
     "sury": "11.0.0",
     "ws": "^8.18.0",
-    "@reventlessdev/rescript-jest": "1.0.0-alpha.13",
-    "@reventlessdev/rescript-graphql-yoga": "1.0.0-alpha.29",
     "@reventlessdev/rescript-effect": "1.0.0-alpha.1",
-    "@reventlessdev/rescript-mcp-sdk": "1.0.0-alpha.24",
+    "@reventlessdev/rescript-graphql-yoga": "1.0.0-alpha.29",
+    "@reventlessdev/rescript-jest": "1.0.0-alpha.13",
     "@reventlessdev/rescript-node": "2.0.0-alpha.23",
+    "@reventlessdev/rescript-mcp-sdk": "1.0.0-alpha.24",
     "@reventlessdev/rescript-pulumi-pulumi": "3.0.0-alpha.0",
-    "@reventlessdev/reventless-core": "3.0.0-alpha.309",
-    "@reventlessdev/reventless-gwt": "1.0.0-alpha.257",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.206",
-    "@reventlessdev/reventless-postgres": "3.0.0-alpha.173",
-    "@reventlessdev/reventless-graphql-server": "1.0.0-alpha.157",
-    "@reventlessdev/reventless-seed": "1.0.0-alpha.37",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.177"
+    "@reventlessdev/reventless-core": "3.0.0-alpha.311",
+    "@reventlessdev/reventless-gwt": "1.0.0-alpha.259",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.208",
+    "@reventlessdev/reventless-postgres": "3.0.0-alpha.175",
+    "@reventlessdev/reventless-seed": "1.0.0-alpha.38",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.179",
+    "@reventlessdev/reventless-graphql-server": "1.0.0-alpha.159"
   },
   "devDependencies": {
     "rescript": "12.3.1",

package/src/EmitCapabilities.res

@@ -25,9 +25,19 @@
 
 type platform
 type localPlatformExports = {"Make": unit => platform}
-type builtPlugin = {"pluginStructure": Reventless.Plugin.pluginStructure}
+// A plugin with no parts yet has no structure: `generate-plugin` leaves `pluginStructure` out of
+// its composition root.
+type builtPlugin = {"pluginStructure": Nullable.t<Reventless.Plugin.pluginStructure>}
 type compositionExports = {"Make": platform => builtPlugin}
 
+/** The manifest's text for a plugin's structure. A plugin with no parts yet has none and
+    declares nothing: its manifest says so, as one for a structure with no declarations does. */
+let manifestText = (structure: option<Reventless.Plugin.pluginStructure>): string =>
+  switch structure {
+  | Some(structure) => Reventless.CapabilityManifest.renderForStructure(structure)
+  | None => Reventless.CapabilityManifest.render({capabilities: []})
+  }
+
 // ── Which module holds the composition root ──────────────────────────────────
 
 /** `Plugin.res.mjs` is what `generate-plugin` emits, so it is the default and
@@ -99,10 +109,7 @@ let main = () =>
     let built = composition["Make"](platform)
 
     let manifestPath = NodePath.join([srcDir, "capabilities.json"])
-    NodeFs.writeFileSync(
-      manifestPath,
-      Reventless.CapabilityManifest.renderForStructure(built["pluginStructure"]),
-    )
+    NodeFs.writeFileSync(manifestPath, manifestText(built["pluginStructure"]->Nullable.toOption))
     Console.log("Generated: " ++ manifestPath)
 
     // Applying the platform functor wires in-process infrastructure; exit

package/src/EmitCapabilities.res.mjs

@@ -4,9 +4,20 @@ import * as Nodefs from "node:fs";
 import * as Nodeurl from "node:url";
 import * as Nodepath from "node:path";
 import * as Stdlib_Result from "@rescript/runtime/lib/es6/Stdlib_Result.js";
+import * as Primitive_option from "@rescript/runtime/lib/es6/Primitive_option.js";
 import * as CliArgs$Reventless from "@reventlessdev/reventless-spec/src/CliArgs.res.mjs";
 import * as CapabilityManifest$Reventless from "@reventlessdev/reventless-spec/src/components/CapabilityManifest.res.mjs";
 
+function manifestText(structure) {
+  if (structure !== undefined) {
+    return CapabilityManifest$Reventless.renderForStructure(structure);
+  } else {
+    return CapabilityManifest$Reventless.render({
+      capabilities: []
+    });
+  }
+}
+
 function compositionModulePath(srcDir, moduleArg) {
   let withExtension = name => {
     if (name.endsWith(".mjs")) {
@@ -84,13 +95,14 @@ function main() {
     let composition = await import(Nodeurl.pathToFileURL(modulePath).href);
     let built = composition.Make(platform);
     let manifestPath = Nodepath.join(srcDir, "capabilities.json");
-    Nodefs.writeFileSync(manifestPath, CapabilityManifest$Reventless.renderForStructure(built.pluginStructure), "utf8");
+    Nodefs.writeFileSync(manifestPath, manifestText(Primitive_option.fromNullable(built.pluginStructure)), "utf8");
     console.log("Generated: " + manifestPath);
     process.exit(0);
   });
 }
 
 export {
+  manifestText,
   compositionModulePath,
   fail,
   usage,

package/src/Platform.res

@@ -109,7 +109,7 @@ module MakeWithConfig = (
   // What this platform provides for the roles its plugins need: every account it
   // can sign in as, built-in and loaded alike, or the file the store will load
   // when the servers start — after the plugins are built and checked.
-  Reventless.Role.provideGroupsFrom(UserStore.providedGroups)
+  Reventless.Role.provideGroupsFrom(AccountStore.providedGroups)
   // Activate Pulumi mock mode — must happen before any component creation.
   // Idempotent, so safe to call even if TestRunner.setup() was already called.
   let _ = TestRunner.setup()
@@ -1255,7 +1255,6 @@ module MakeWithConfig = (
               ((_, ext: ReventlessInfra.Extension.outputs)) => {
                 Reventless.Plugin.name: ext.name,
                 extensionPointName: ext.extensionPointName,
-                dcbSources: [],
               },
             ),
             extensionProtocols: [],
@@ -1377,11 +1376,11 @@ module MakeWithConfig = (
   // this is a no-op (start() is called inline inside makePlatform/deployPlugin).
   let startServers = () => {
     if Config.splitApi {
-      // Hydrate Login store from .reventless/users.yaml (or ~users/~usersFile
+      // Hydrate Login store from .reventless/accounts.yaml (or ~accounts/~accountsFile
       // if provided programmatically) before the Domain server accepts
       // requests. Unified mode does this in makePlatform; split mode defers
       // server startup to here so it must do the same.
-      UserStore.autoLoadOnce()
+      AccountStore.autoLoadOnce()
       DomainGraphQL_Server.start(~port=domainPort, ())
       DomainMCP_Server.start(~port=domainMcpPort, ())
       PlatformGraphQL_Server.start(
@@ -1579,7 +1578,7 @@ module MakeWithConfig = (
     geocoderPlaceIndex?: ReventlessInfra.Platform.geocoderIndex,
     messagingSender?: ReventlessInfra.Platform.messagingSender,
     // Local only, until the AWS platform has a provider to pass the same way:
-    // `Capability_IdentityProvider_UserStore.make()`, writing the accounts file
+    // `Capability_IdentityProvider_AccountStore.make()`, writing the accounts file
     // the auth adapter loads.
     identityProvider?: Reventless.IdentityProvider.t,
     uploadBucket?: ReventlessInfra.Platform.objectStore,
@@ -2350,7 +2349,7 @@ module MakeWithConfig = (
     // (domain and platform) can register their schema first.
     // In unified mode, start immediately (backwards-compatible).
     if !Config.splitApi {
-      UserStore.autoLoadOnce()
+      AccountStore.autoLoadOnce()
       DomainGraphQL_Server.start()
       DomainMCP_Server.start()
     }
@@ -2534,7 +2533,7 @@ module MakeWithConfig = (
 
     // The role check below reads the accounts as they stand; a user store
     // loaded from elsewhere after this would leave it compared with the wrong ones.
-    UserStore.pluginChecked := true
+    AccountStore.pluginChecked := true
 
     // Set the active deploy target so resolveTargetGraphQL/MCP() and QueryDb serverRef/relayRef
     // route registrations to the correct server. Mirrors AWS resolveTargetApi() pattern.

package/src/Platform.res.mjs

@@ -30,12 +30,12 @@ import * as AdmissionCheck$Reventless from "@reventlessdev/reventless-spec/src/t
 import * as Api_Naming$ReventlessCore from "@reventlessdev/reventless-core/src/components/Api/Api_Naming.res.mjs";
 import * as CommandOutcome$Reventless from "@reventlessdev/reventless-spec/src/components/CommandOutcome.res.mjs";
 import * as PluginSpec$ReventlessCore from "@reventlessdev/reventless-core/src/plugin/lifecycle/PluginSpec.res.mjs";
-import * as UserStore$ReventlessLocal from "./adapter/Auth/UserStore.res.mjs";
 import * as TestRunner$ReventlessLocal from "./test/TestRunner.res.mjs";
 import * as UiFragments$ReventlessCore from "@reventlessdev/reventless-core/src/admin/UiFragmentRegistry/StateView/UiFragments.res.mjs";
 import * as CommandTopic$ReventlessCore from "@reventlessdev/reventless-core/src/components/CommandTopic/CommandTopic.res.mjs";
 import * as EffectLogger$ReventlessCore from "@reventlessdev/reventless-core/src/util/EffectLogger.res.mjs";
 import * as ShellConfig$ReventlessLocal from "./ShellConfig.res.mjs";
+import * as AccountStore$ReventlessLocal from "./adapter/Auth/AccountStore.res.mjs";
 import * as BackendState$ReventlessLocal from "./adapter/BackendState.res.mjs";
 import * as ComponentType$ReventlessCore from "@reventlessdev/reventless-core/src/ComponentType.res.mjs";
 import * as SqliteDriver$ReventlessLocal from "./adapter/SqliteDriver.res.mjs";
@@ -146,7 +146,7 @@ function decodeUiFragmentRegistryEventEnvelope(eventJson) {
 }
 
 function MakeWithConfig(Config) {
-  Role$Reventless.provideGroupsFrom(UserStore$ReventlessLocal.providedGroups);
+  Role$Reventless.provideGroupsFrom(AccountStore$ReventlessLocal.providedGroups);
   TestRunner$ReventlessLocal.setup();
   let match = Config.backend;
   if (typeof match !== "object") {
@@ -1063,8 +1063,7 @@ function MakeWithConfig(Config) {
             let ext = param[1];
             return {
               name: ext.name,
-              extensionPointName: ext.extensionPointName,
-              dcbSources: []
+              extensionPointName: ext.extensionPointName
             };
           }),
           eventCollector: param[2].name,
@@ -1151,7 +1150,7 @@ function MakeWithConfig(Config) {
   };
   let startServers = () => {
     if (Config.splitApi) {
-      UserStore$ReventlessLocal.autoLoadOnce();
+      AccountStore$ReventlessLocal.autoLoadOnce();
       DomainGraphQL_Server$ReventlessLocal.start(domainPort, undefined, undefined);
       DomainMCP_Server$ReventlessLocal.start(domainMcpPort, undefined);
       PlatformGraphQL_Server$ReventlessLocal.start(platformPort, Auth_GraphqlContext$ReventlessLocal.buildAuthContext, undefined);
@@ -1694,7 +1693,7 @@ function MakeWithConfig(Config) {
     }
     currentDeployTarget.contents = "Domain";
     if (!Config.splitApi) {
-      UserStore$ReventlessLocal.autoLoadOnce();
+      AccountStore$ReventlessLocal.autoLoadOnce();
       DomainGraphQL_Server$ReventlessLocal.start(undefined, undefined, undefined);
       return DomainMCP_Server$ReventlessLocal.start(undefined, undefined);
     }
@@ -1795,7 +1794,7 @@ function MakeWithConfig(Config) {
     let tmp;
     tmp = apiTarget === "Domain" ? "Domain" : "Platform";
     log.info("Platform", undefined, `deployPlugin target=` + tmp);
-    UserStore$ReventlessLocal.pluginChecked.contents = true;
+    AccountStore$ReventlessLocal.pluginChecked.contents = true;
     currentDeployTarget.contents = apiTarget;
     StateViewSliceMaker.QueryDbResolvers.serverRef.contents = resolveTargetGraphQL();
     let tmp$1;
@@ -1948,7 +1947,7 @@ function MakeWithConfig(Config) {
 
 function Make($star) {
   let backend = Backend$ReventlessLocal.fromEnv();
-  Role$Reventless.provideGroupsFrom(UserStore$ReventlessLocal.providedGroups);
+  Role$Reventless.provideGroupsFrom(AccountStore$ReventlessLocal.providedGroups);
   TestRunner$ReventlessLocal.setup();
   if (typeof backend !== "object") {
     BackendState$ReventlessLocal.setMemory();
@@ -2858,8 +2857,7 @@ function Make($star) {
             let ext = param[1];
             return {
               name: ext.name,
-              extensionPointName: ext.extensionPointName,
-              dcbSources: []
+              extensionPointName: ext.extensionPointName
             };
           }),
           eventCollector: param[2].name,
@@ -2945,7 +2943,7 @@ function Make($star) {
     });
   };
   let startServers = () => {
-    UserStore$ReventlessLocal.autoLoadOnce();
+    AccountStore$ReventlessLocal.autoLoadOnce();
     DomainGraphQL_Server$ReventlessLocal.start(domainPort, undefined, undefined);
     DomainMCP_Server$ReventlessLocal.start(domainMcpPort, undefined);
     PlatformGraphQL_Server$ReventlessLocal.start(platformPort, Auth_GraphqlContext$ReventlessLocal.buildAuthContext, undefined);
@@ -3576,7 +3574,7 @@ function Make($star) {
     let tmp;
     tmp = apiTarget === "Domain" ? "Domain" : "Platform";
     log.info("Platform", undefined, `deployPlugin target=` + tmp);
-    UserStore$ReventlessLocal.pluginChecked.contents = true;
+    AccountStore$ReventlessLocal.pluginChecked.contents = true;
     currentDeployTarget.contents = apiTarget;
     StateViewSliceMaker.QueryDbResolvers.serverRef.contents = resolveTargetGraphQL();
     let tmp$1;

package/src/adapter/Auth/{UserStore.res → AccountStore.res}

@@ -1,13 +1,13 @@
 // In-memory user store loader. Hydrates `LocalAuth.Login.store` from
 // three resolution paths (first match wins):
-//   1. `~users` arg — explicit list passed by the caller
-//   2. `~usersFile` arg — explicit YAML path
-//   3. `.reventless/users.yaml` (relative to process.cwd()) — auto-discovery
+//   1. `~accounts` arg — explicit list passed by the caller
+//   2. `~accountsFile` arg — explicit YAML path
+//   3. `.reventless/accounts.yaml` (relative to process.cwd()) — auto-discovery
 //
 // All three are silent on absence: when no path is provided and no default
 // file exists, the store stays empty and `LocalAuth.Login.issue` rejects
 // every credential. A one-line stdout hint is printed so developers know to
-// either set the file or pass `~users` programmatically.
+// either set the file or pass `~accounts` programmatically.
 
 open Reventless
 
@@ -45,13 +45,13 @@ let _defaultPath = AccountsManifest.defaultPath
 
 /**
  * Hydrates the Login store. Returns the resolution path actually used
- * (`InlineUsers`, `UsersFile(path)`, `DefaultFile(path)`, or `Empty`).
+ * (`InlineAccounts`, `AccountsFile(path)`, `DefaultFile(path)`, or `Empty`).
  * Errors from a *resolved* path are returned as `Error`; absence of the
  * auto-discovered default file is silent.
  */
 type resolution =
-  | InlineUsers
-  | UsersFile(string)
+  | InlineAccounts
+  | AccountsFile(string)
   | DefaultFile(string)
   | Empty
 
@@ -79,29 +79,29 @@ makes it from). Never the working directory once another source was loaded.
 let providedGroups = (): array<string> =>
   LocalAuth.knownGroups()->Array.concat(resolved.contents ? [] : AccountsManifest.declaredGroups())
 
-let load = (~users: option<array<entry>>=?, ~usersFile: option<string>=?, ()): result<
+let load = (~accounts: option<array<entry>>=?, ~accountsFile: option<string>=?, ()): result<
   resolution,
   string,
 > => {
   // The default file is what the check already read; any other source arrives
   // after it, and the check would have compared the plugins with other accounts.
-  if pluginChecked.contents && (users->Option.isSome || usersFile->Option.isSome) {
+  if pluginChecked.contents && (accounts->Option.isSome || accountsFile->Option.isSome) {
     JsError.throwWithMessage(
-      "UserStore.load(~users / ~usersFile) after a plugin was built — the check that every role it needs has a group read other accounts. Call UserStore.load before deploying plugins.",
+      "AccountStore.load(~accounts / ~accountsFile) after a plugin was built — the check that every role it needs has a group read other accounts. Call AccountStore.load before deploying plugins.",
     )
   }
   resolved := true
-  switch users {
+  switch accounts {
   | Some(entries) =>
     _registerEntries(entries)
-    Ok(InlineUsers)
+    Ok(InlineAccounts)
   | None =>
-    switch usersFile {
+    switch accountsFile {
     | Some(path) =>
       parseFile(path)->Result.map(entries => {
         _registerEntries(entries)
         fromFile := entries->Array.map(e => e.username)
-        UsersFile(path)
+        AccountsFile(path)
       })
     | None =>
       let defaultPath = _defaultPath()
@@ -113,7 +113,7 @@ let load = (~users: option<array<entry>>=?, ~usersFile: option<string>=?, ()): r
         })
       } else {
         Console.log(
-          "[LocalAuth] no users configured — POST /__inmemory/login will reject all. " ++ "Provide ~users / ~usersFile or create .reventless/users.yaml relative to cwd.",
+          "[LocalAuth] no accounts configured — POST /__inmemory/login will reject all. " ++ "Provide ~accounts / ~accountsFile or create .reventless/accounts.yaml relative to cwd.",
         )
         Ok(Empty)
       }
@@ -212,14 +212,14 @@ let watch = (path: string): unit => {
 
 /**
  * Idempotent auto-discovery. Platform.startServers calls this before
- * `DomainGraphQL_Server.start`, so a `.reventless/users.yaml` in cwd
+ * `DomainGraphQL_Server.start`, so a `.reventless/accounts.yaml` in cwd
  * hydrates the Login store automatically, and follows the file from then on.
  * No-op once `load` has been called from anywhere.
  */
 let autoLoadOnce = (): unit =>
   if !resolved.contents {
     switch load() {
-    | Ok(DefaultFile(path)) | Ok(UsersFile(path)) => watch(path)
+    | Ok(DefaultFile(path)) | Ok(AccountsFile(path)) => watch(path)
     | _ => ()
     }
   }

package/src/adapter/Auth/{UserStore.res.mjs → AccountStore.res.mjs}

@@ -49,25 +49,25 @@ function providedGroups() {
   return LocalAuth$ReventlessLocal.knownGroups().concat(resolved.contents ? [] : AccountsManifest$Reventless.declaredGroups());
 }
 
-function load(users, usersFile, param) {
-  if (pluginChecked.contents && (Stdlib_Option.isSome(users) || Stdlib_Option.isSome(usersFile))) {
-    Stdlib_JsError.throwWithMessage("UserStore.load(~users / ~usersFile) after a plugin was built — the check that every role it needs has a group read other accounts. Call UserStore.load before deploying plugins.");
+function load(accounts, accountsFile, param) {
+  if (pluginChecked.contents && (Stdlib_Option.isSome(accounts) || Stdlib_Option.isSome(accountsFile))) {
+    Stdlib_JsError.throwWithMessage("AccountStore.load(~accounts / ~accountsFile) after a plugin was built — the check that every role it needs has a group read other accounts. Call AccountStore.load before deploying plugins.");
   }
   resolved.contents = true;
-  if (users !== undefined) {
-    _registerEntries(users);
+  if (accounts !== undefined) {
+    _registerEntries(accounts);
     return {
       TAG: "Ok",
-      _0: "InlineUsers"
+      _0: "InlineAccounts"
     };
   }
-  if (usersFile !== undefined) {
-    return Stdlib_Result.map(AccountsManifest$Reventless.parseFile(usersFile), entries => {
+  if (accountsFile !== undefined) {
+    return Stdlib_Result.map(AccountsManifest$Reventless.parseFile(accountsFile), entries => {
       _registerEntries(entries);
       fromFile.contents = entries.map(e => e.username);
       return {
-        TAG: "UsersFile",
-        _0: usersFile
+        TAG: "AccountsFile",
+        _0: accountsFile
       };
     });
   }
@@ -82,7 +82,7 @@ function load(users, usersFile, param) {
       };
     });
   } else {
-    console.log("[LocalAuth] no users configured — POST /__inmemory/login will reject all. Provide ~users / ~usersFile or create .reventless/users.yaml relative to cwd.");
+    console.log("[LocalAuth] no accounts configured — POST /__inmemory/login will reject all. Provide ~accounts / ~accountsFile or create .reventless/accounts.yaml relative to cwd.");
     return {
       TAG: "Ok",
       _0: "Empty"

package/src/adapter/Auth/LocalAuth.res

@@ -8,7 +8,7 @@
 //   none of the above              → Authenticated(defaultUser) (dev default)
 //
 // Stage A4 adds the `Login` submodule (token issuance + verification) and
-// the companion `UserStore` module (YAML hydration).
+// the companion `AccountStore` module (YAML hydration).
 
 open Reventless
 
@@ -33,7 +33,7 @@ let adminUser = (): Identity.t => {
 // ── User registry ─────────────────────────────────────────────────────────
 //
 // A `dict<Identity.t>` keyed by `username`. A4 hydrates this from
-// `.reventless/users.yaml`; tests inject via `registerUser`. The built-in
+// `.reventless/accounts.yaml`; tests inject via `registerUser`. The built-in
 // `admin` is answered on lookup, for the reason above, unless one is registered.
 
 let initialUsers = () => Dict.fromArray([("user", defaultUser)])
@@ -86,7 +86,7 @@ let getHeader = (headers: dict<string>, name: string): option<string> =>
 module Login = {
   type credentials = {password: string, identity: Identity.t}
 
-  // Hydrated by `UserStore` at platform start; tests can inject directly.
+  // Hydrated by `AccountStore` at platform start; tests can inject directly.
   let store: ref<dict<credentials>> = ref(Dict.make())
 
   let setCredentials = (~username: string, ~password: string, ~identity: Identity.t): unit => {
@@ -127,13 +127,13 @@ module Login = {
   //      that has no `.reventless/` to write to.
   //
   // The directory is used but never created. Its presence is what distinguishes
-  // a platform someone develops against — `pnpm run setup` puts `users.yaml`
+  // a platform someone develops against — `pnpm run setup` puts `accounts.yaml`
   // there, so anything with logins to preserve has one — from a unit test, and
   // an auth module that made directories would leave one in every test's cwd.
   //
   // Local dev only, as the whole module is: these tokens are not security-grade
   // and AWS never sees them. The file sits in a gitignored directory beside
-  // `users.yaml`, which already holds plaintext dev passwords.
+  // `accounts.yaml`, which already holds plaintext dev passwords.
 
   let _secretFileName = "token-secret"
   let _secretDir = (): string => NodePath.join([NodeProcess.cwd(), ".reventless"])

package/src/adapter/LocalCapabilities.res

@@ -31,7 +31,7 @@ let registerMessagingSender = (sender: string) => messagingSenderRef := sender
 let identityProviderRef = ref(Reventless.Capabilities.none.identityProvider)
 
 /** Provision the identity provider. Called by `makePlatform` from the handle a
-    root declared, `Capability_IdentityProvider_UserStore.make()`. */
+    root declared, `Capability_IdentityProvider_AccountStore.make()`. */
 let registerIdentityProvider = (provider: Reventless.IdentityProvider.t) =>
   identityProviderRef := provider
 
@@ -70,7 +70,7 @@ let unmetWarning = (~declared: array<(string, string)>): option<string> =>
         | Messaging =>
           `\n  Messaging is \`Capability_Messaging_Log.make()\`, passed to the platform as ` ++ `\`~messagingSender\`.`
         | IdentityProvider =>
-          `\n  IdentityProvider is \`Capability_IdentityProvider_UserStore.make()\`, passed to the ` ++ `platform as \`~identityProvider\`.`
+          `\n  IdentityProvider is \`Capability_IdentityProvider_AccountStore.make()\`, passed to the ` ++ `platform as \`~identityProvider\`.`
         // Never unmet here: the local platform always provisions one.
         | Stash => ``
         }

package/src/adapter/LocalCapabilities.res.mjs

@@ -43,7 +43,7 @@ function unmetWarning(declared) {
         case "Messaging" :
           return `\n  Messaging is \`Capability_Messaging_Log.make()\`, passed to the platform as \`~messagingSender\`.`;
         case "IdentityProvider" :
-          return `\n  IdentityProvider is \`Capability_IdentityProvider_UserStore.make()\`, passed to the platform as \`~identityProvider\`.`;
+          return `\n  IdentityProvider is \`Capability_IdentityProvider_AccountStore.make()\`, passed to the platform as \`~identityProvider\`.`;
         case "Stash" :
           return ``;
       }

package/src/adapter/ObjectStore/ObjectStoreStorage_FileSystem.res

@@ -205,7 +205,7 @@ let deleteOffloadAll = (~root: string): int => {
 }
 
 // Removes the three trees, leaving the rest of the root (the database file, the
-// dev `users.yaml`) untouched.
+// dev `accounts.yaml`) untouched.
 let reset = (~root: string): unit =>
   [objectsDir(~root), metaDir(~root), offloadDir(~root)]->Array.forEach(dir =>
     try NodeFs.rmSync(dir, {recursive: true, force: true}) catch {

package/src/capability/{Capability_IdentityProvider_UserStore.res → Capability_IdentityProvider_AccountStore.res}

@@ -4,7 +4,7 @@
 // `~identityProvider` in `~hostUiBundle`, and the platform puts it on the
 // capability record every slice's `translate` receives.
 //
-// Its store is `.reventless/users.yaml`, the file the in-memory auth adapter
+// Its store is `.reventless/accounts.yaml`, the file the in-memory auth adapter
 // already loads at startup, so an account made here survives a restart with no
 // second store to keep in step. Every write goes to the file and to the live
 // `LocalAuth.Login` store together, so the running process and the next one

package/tests/EmitCapabilitiesTest.res

@@ -19,6 +19,12 @@ describe("EmitCapabilities.parseArgs", () => {
   )
 })
 
+describe("EmitCapabilities.manifestText", () => {
+  testSync("a plugin with no parts yet declares nothing", () =>
+    expect(EmitCapabilities.manifestText(None))->toBe(`{\n  "capabilities": []\n}\n`)
+  )
+})
+
 describe("emit-capabilities on the command line", () => {
   module CliArgs = Reventless.CliArgs
   let usage = EmitCapabilities.usage->String.trim

package/tests/EmitCapabilitiesTest.res.mjs

@@ -30,6 +30,12 @@ globalThis.describe("EmitCapabilities.parseArgs", () => {
   });
 });
 
+globalThis.describe("EmitCapabilities.manifestText", () => {
+  globalThis.test("a plugin with no parts yet declares nothing", () => {
+    globalThis.expect(EmitCapabilities$ReventlessLocal.manifestText(undefined)).toBe(`{\n  "capabilities": []\n}\n`);
+  });
+});
+
 globalThis.describe("emit-capabilities on the command line", () => {
   let usage = EmitCapabilities$ReventlessLocal.usage.trim();
   globalThis.test("--help anywhere prints the usage to stdout and exits 0", async () => {