@reventlessdev/reventless-local 3.0.0-alpha.301 → 3.0.0-alpha.303

package/CHANGELOG.md

@@ -3,6 +3,52 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.303 (2026-10-29)
+
+* feat(registration)!: the ledger tags an address by its keyed fingerprint ([ccafddf](https://github.com/ReventlessDev/reventless-core/commit/ccafddfc7eb8039687afc62a483ce34b8e7081dd))
+* feat(core)!: the caller's IP address leaves the messages a request causes ([aa9e8c7](https://github.com/ReventlessDev/reventless-core/commit/aa9e8c79c0360528a5cfeda2bb88d1da52f28674))
+### Features
+
+* **upload:** an upload's path carries nothing a person typed ([456c88c](https://github.com/ReventlessDev/reventless-core/commit/456c88c4ccee6a50943e3a71011a2e78aef0d770))
+
+### BREAKING CHANGES
+
+* `Secrets.t` has a third field, `fingerprint`; a hand-built provider
+adds it. `Register` and `Invite` take `address`, and their `email` is the
+fingerprint from `ContactAddressId.fingerprint`, not `makeFromString(address)`.
+
+Step PD5 of docs/plans/a-personal-field-is-marked-redacted-and-encrypted-at-the-seam.md.
+Claude-Session: https://claude.ai/code/session_01HiQfdxVEsHwLHRoHSUcus1
+* `Message.generateMeta` no longer takes `~ip`. Drop the argument; a
+message that must carry the address declares it as a field of its own payload.
+
+Step PD3 of docs/plans/a-personal-field-is-marked-redacted-and-encrypted-at-the-seam.md.
+Claude-Session: https://claude.ai/code/session_01HiQfdxVEsHwLHRoHSUcus1
+
+
+
+# 3.0.0-alpha.302 (2026-10-29)
+
+### Bug Fixes
+
+* **local:** emit-capabilities writes an empty manifest for a plugin with no parts yet ([56586a6](https://github.com/ReventlessDev/reventless-core/commit/56586a687aa4658e2357c836878b44050b424d41))
+* refactor!: drop `dcbSources`, the cross-plugin DCB subscription nobody declared ([cf3b66d](https://github.com/ReventlessDev/reventless-core/commit/cf3b66d8c1b5d87673197b64eaee174598bb8253))
+* refactor!: a read model hears another plugin only through an Extension and a slice ([15c7cae](https://github.com/ReventlessDev/reventless-core/commit/15c7cae214d5aa04404779fcd87a8429aad1965c))
+### Features
+
+* **core:** a handler drops a command it has already handled ([605862b](https://github.com/ReventlessDev/reventless-core/commit/605862bba765b1501eb19d08f3924bf619159e21))
+
+### BREAKING CHANGES
+
+* `Reventless.Plugin.extensionDefinition` has no `dcbSources`
+field, and `Platform_PluginExtensions.dcbSources` is gone from the GraphQL
+schema. A query that selects it fails as a whole; drop the selection.
+* `ReventlessInfra.Extension.T.make` and the core
+`Extension_Builder.make` no longer take `~readModelNamesForSourceName` and
+`~publishToReadModels`. Both arguments did nothing; drop them at the call site.
+
+
+
 # 3.0.0-alpha.301 (2026-10-25)
 
 **Note:** Version bump only for package @reventlessdev/reventless-local

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-local",
-  "version": "3.0.0-alpha.301",
+  "version": "3.0.0-alpha.303",
   "description": "Local platform for Reventless (in-memory or SQLite backend, for development and testing without AWS)",
   "license": "Apache-2.0",
   "bin": {
@@ -34,19 +34,19 @@
     "graphql-yoga": "^5.21.0",
     "sury": "11.0.0",
     "ws": "^8.18.0",
-    "@reventlessdev/rescript-effect": "1.0.0-alpha.1",
     "@reventlessdev/rescript-graphql-yoga": "1.0.0-alpha.29",
-    "@reventlessdev/rescript-jest": "1.0.0-alpha.13",
     "@reventlessdev/rescript-mcp-sdk": "1.0.0-alpha.24",
+    "@reventlessdev/rescript-effect": "1.0.0-alpha.1",
+    "@reventlessdev/rescript-jest": "1.0.0-alpha.13",
     "@reventlessdev/rescript-node": "2.0.0-alpha.23",
+    "@reventlessdev/reventless-core": "3.0.0-alpha.312",
     "@reventlessdev/rescript-pulumi-pulumi": "3.0.0-alpha.0",
-    "@reventlessdev/reventless-core": "3.0.0-alpha.310",
-    "@reventlessdev/reventless-gwt": "1.0.0-alpha.258",
-    "@reventlessdev/reventless-graphql-server": "1.0.0-alpha.158",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.207",
+    "@reventlessdev/reventless-graphql-server": "1.0.0-alpha.160",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.209",
+    "@reventlessdev/reventless-gwt": "1.0.0-alpha.260",
+    "@reventlessdev/reventless-postgres": "3.0.0-alpha.176",
     "@reventlessdev/reventless-seed": "1.0.0-alpha.38",
-    "@reventlessdev/reventless-postgres": "3.0.0-alpha.174",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.178"
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.180"
   },
   "devDependencies": {
     "rescript": "12.3.1",

package/src/EmitCapabilities.res

@@ -25,9 +25,19 @@
 
 type platform
 type localPlatformExports = {"Make": unit => platform}
-type builtPlugin = {"pluginStructure": Reventless.Plugin.pluginStructure}
+// A plugin with no parts yet has no structure: `generate-plugin` leaves `pluginStructure` out of
+// its composition root.
+type builtPlugin = {"pluginStructure": Nullable.t<Reventless.Plugin.pluginStructure>}
 type compositionExports = {"Make": platform => builtPlugin}
 
+/** The manifest's text for a plugin's structure. A plugin with no parts yet has none and
+    declares nothing: its manifest says so, as one for a structure with no declarations does. */
+let manifestText = (structure: option<Reventless.Plugin.pluginStructure>): string =>
+  switch structure {
+  | Some(structure) => Reventless.CapabilityManifest.renderForStructure(structure)
+  | None => Reventless.CapabilityManifest.render({capabilities: []})
+  }
+
 // ── Which module holds the composition root ──────────────────────────────────
 
 /** `Plugin.res.mjs` is what `generate-plugin` emits, so it is the default and
@@ -99,10 +109,7 @@ let main = () =>
     let built = composition["Make"](platform)
 
     let manifestPath = NodePath.join([srcDir, "capabilities.json"])
-    NodeFs.writeFileSync(
-      manifestPath,
-      Reventless.CapabilityManifest.renderForStructure(built["pluginStructure"]),
-    )
+    NodeFs.writeFileSync(manifestPath, manifestText(built["pluginStructure"]->Nullable.toOption))
     Console.log("Generated: " ++ manifestPath)
 
     // Applying the platform functor wires in-process infrastructure; exit

package/src/EmitCapabilities.res.mjs

@@ -4,9 +4,20 @@ import * as Nodefs from "node:fs";
 import * as Nodeurl from "node:url";
 import * as Nodepath from "node:path";
 import * as Stdlib_Result from "@rescript/runtime/lib/es6/Stdlib_Result.js";
+import * as Primitive_option from "@rescript/runtime/lib/es6/Primitive_option.js";
 import * as CliArgs$Reventless from "@reventlessdev/reventless-spec/src/CliArgs.res.mjs";
 import * as CapabilityManifest$Reventless from "@reventlessdev/reventless-spec/src/components/CapabilityManifest.res.mjs";
 
+function manifestText(structure) {
+  if (structure !== undefined) {
+    return CapabilityManifest$Reventless.renderForStructure(structure);
+  } else {
+    return CapabilityManifest$Reventless.render({
+      capabilities: []
+    });
+  }
+}
+
 function compositionModulePath(srcDir, moduleArg) {
   let withExtension = name => {
     if (name.endsWith(".mjs")) {
@@ -84,13 +95,14 @@ function main() {
     let composition = await import(Nodeurl.pathToFileURL(modulePath).href);
     let built = composition.Make(platform);
     let manifestPath = Nodepath.join(srcDir, "capabilities.json");
-    Nodefs.writeFileSync(manifestPath, CapabilityManifest$Reventless.renderForStructure(built.pluginStructure), "utf8");
+    Nodefs.writeFileSync(manifestPath, manifestText(Primitive_option.fromNullable(built.pluginStructure)), "utf8");
     console.log("Generated: " + manifestPath);
     process.exit(0);
   });
 }
 
 export {
+  manifestText,
   compositionModulePath,
   fail,
   usage,

package/src/Platform.res

@@ -351,7 +351,7 @@ module MakeWithConfig = (
             let payload: ReventlessCore.CommandGenerator.payload = {
               command: toolName,
               arguments: args->Obj.magic,
-              meta: {ip: [], user: identity.userId, info: `mcp/tools/${toolName}`},
+              meta: {user: identity.userId, info: `mcp/tools/${toolName}`},
               identity,
             }
             let outcome = await generateCommand(payload)->Effect.runPromise
@@ -1255,7 +1255,6 @@ module MakeWithConfig = (
               ((_, ext: ReventlessInfra.Extension.outputs)) => {
                 Reventless.Plugin.name: ext.name,
                 extensionPointName: ext.extensionPointName,
-                dcbSources: [],
               },
             ),
             extensionProtocols: [],

package/src/Platform.res.mjs

@@ -256,7 +256,6 @@ function MakeWithConfig(Config) {
         return `{"error":"no handler for ` + toolName + `"}`;
       }
       let payload_meta = {
-        ip: [],
         user: identity.userId,
         info: `mcp/tools/` + toolName
       };
@@ -937,7 +936,7 @@ function MakeWithConfig(Config) {
   let pluginCmdTopicKey = PluginSpec$ReventlessCore.name + "AggrCmdTopic";
   let pluginEventTopicKey = PluginSpec$ReventlessCore.name + "AggrEventTopic";
   let dispatchPluginCommand = (pluginName, command) => {
-    let cmdJson_meta = Message$ReventlessCore.generateMeta(PluginSpec$ReventlessCore.name, undefined, undefined, undefined, undefined, undefined, undefined, undefined);
+    let cmdJson_meta = Message$ReventlessCore.generateMeta(PluginSpec$ReventlessCore.name, undefined, undefined, undefined, undefined, undefined, undefined);
     let cmdJson_commandJson = Util_Sury$Reventless.toJson(command, PluginSpec$ReventlessCore.commandSchema);
     let cmdJson = {
       id: pluginName,
@@ -948,7 +947,7 @@ function MakeWithConfig(Config) {
   };
   let adminDcbCmdTopicKey = ComponentType$ReventlessCore.name(Platform_Admin_Structure$ReventlessCore.pluginId + "Dcb", "CommandTopic");
   let dispatchUiFragmentCommand = (pluginName, command) => {
-    let cmdJson_meta = Message$ReventlessCore.generateMeta(UiFragmentRegistry$ReventlessCore.name, undefined, undefined, undefined, undefined, undefined, undefined, undefined);
+    let cmdJson_meta = Message$ReventlessCore.generateMeta(UiFragmentRegistry$ReventlessCore.name, undefined, undefined, undefined, undefined, undefined, undefined);
     let cmdJson_commandJson = Util_Sury$Reventless.toJson(command, UiFragmentRegistry$ReventlessCore.commandSchema);
     let cmdJson = {
       id: pluginName,
@@ -1063,8 +1062,7 @@ function MakeWithConfig(Config) {
             let ext = param[1];
             return {
               name: ext.name,
-              extensionPointName: ext.extensionPointName,
-              dcbSources: []
+              extensionPointName: ext.extensionPointName
             };
           }),
           eventCollector: param[2].name,
@@ -2051,7 +2049,6 @@ function Make($star) {
         return `{"error":"no handler for ` + toolName + `"}`;
       }
       let payload_meta = {
-        ip: [],
         user: identity.userId,
         info: `mcp/tools/` + toolName
       };
@@ -2732,7 +2729,7 @@ function Make($star) {
   let pluginCmdTopicKey = PluginSpec$ReventlessCore.name + "AggrCmdTopic";
   let pluginEventTopicKey = PluginSpec$ReventlessCore.name + "AggrEventTopic";
   let dispatchPluginCommand = (pluginName, command) => {
-    let cmdJson_meta = Message$ReventlessCore.generateMeta(PluginSpec$ReventlessCore.name, undefined, undefined, undefined, undefined, undefined, undefined, undefined);
+    let cmdJson_meta = Message$ReventlessCore.generateMeta(PluginSpec$ReventlessCore.name, undefined, undefined, undefined, undefined, undefined, undefined);
     let cmdJson_commandJson = Util_Sury$Reventless.toJson(command, PluginSpec$ReventlessCore.commandSchema);
     let cmdJson = {
       id: pluginName,
@@ -2743,7 +2740,7 @@ function Make($star) {
   };
   let adminDcbCmdTopicKey = ComponentType$ReventlessCore.name(Platform_Admin_Structure$ReventlessCore.pluginId + "Dcb", "CommandTopic");
   let dispatchUiFragmentCommand = (pluginName, command) => {
-    let cmdJson_meta = Message$ReventlessCore.generateMeta(UiFragmentRegistry$ReventlessCore.name, undefined, undefined, undefined, undefined, undefined, undefined, undefined);
+    let cmdJson_meta = Message$ReventlessCore.generateMeta(UiFragmentRegistry$ReventlessCore.name, undefined, undefined, undefined, undefined, undefined, undefined);
     let cmdJson_commandJson = Util_Sury$Reventless.toJson(command, UiFragmentRegistry$ReventlessCore.commandSchema);
     let cmdJson = {
       id: pluginName,
@@ -2858,8 +2855,7 @@ function Make($star) {
             let ext = param[1];
             return {
               name: ext.name,
-              extensionPointName: ext.extensionPointName,
-              dcbSources: []
+              extensionPointName: ext.extensionPointName
             };
           }),
           eventCollector: param[2].name,

package/src/adapter/CommandGenerator/CommandGeneratorResolvers_GraphQL.res

@@ -248,7 +248,7 @@ let register = (
             let payload: CommandGenerator.payload = {
               command: commandName,
               arguments: args->Obj.magic,
-              meta: {ip: [], user: identity.userId, info: `Mutation.${field}`},
+              meta: {user: identity.userId, info: `Mutation.${field}`},
               identity,
             }
             let outcome = await runCommand(generateCommand, payload)
@@ -320,7 +320,7 @@ let registerDcb = (
           let payload: CommandGenerator.payload = {
             command: tag,
             arguments: args->Obj.magic,
-            meta: {ip: [], user: identity.userId, info: `Mutation.${fieldName}`},
+            meta: {user: identity.userId, info: `Mutation.${fieldName}`},
             identity,
           }
           let outcome = await runCommand(generateCommand, payload)

package/src/adapter/CommandGenerator/CommandGeneratorResolvers_GraphQL.res.mjs

@@ -179,7 +179,6 @@ function register(fields, commandSchema, authorizationOf, server) {
         return rejectThrottled(field);
       }
       let payload_meta = {
-        ip: [],
         user: identity.userId,
         info: `Mutation.` + field
       };
@@ -225,7 +224,6 @@ function registerDcb(fieldName, commandSchema, authorizationOf, server) {
       return rejectThrottled(fieldName);
     }
     let payload_meta = {
-      ip: [],
       user: identity.userId,
       info: `Mutation.` + fieldName
     };

package/src/adapter/LocalCapabilities.res

@@ -92,6 +92,6 @@ let capabilities = (): Reventless.Capabilities.t => {
   geocode: Reventless.Capabilities.none.geocode,
   messaging: ReventlessCore.Messaging_Log_Backend.provider(~sender=messagingSenderRef.contents),
   identityProvider: identityProviderRef.contents,
-  secrets: ReventlessCore.Secrets_Node_Backend.provider,
+  secrets: ReventlessCore.Secrets_Node_Backend.make(~fingerprintKey=LocalFingerprintKey.get),
   stash: stash.contents,
 }

package/src/adapter/LocalCapabilities.res.mjs

@@ -4,6 +4,7 @@ import * as Belt_SetString from "@rescript/runtime/lib/es6/Belt_SetString.js";
 import * as Primitive_object from "@rescript/runtime/lib/es6/Primitive_object.js";
 import * as Capabilities$Reventless from "@reventlessdev/reventless-spec/src/semantic/Capabilities.res.mjs";
 import * as CapabilityNeed$Reventless from "@reventlessdev/reventless-spec/src/semantic/CapabilityNeed.res.mjs";
+import * as LocalFingerprintKey$ReventlessLocal from "./LocalFingerprintKey.res.mjs";
 import * as Secrets_Node_Backend$ReventlessCore from "@reventlessdev/reventless-core/src/adapter/Secrets/Secrets_Node_Backend.res.mjs";
 import * as Stash_Memory_Backend$ReventlessCore from "@reventlessdev/reventless-core/src/adapter/Stash/Stash_Memory_Backend.res.mjs";
 import * as Messaging_Log_Backend$ReventlessCore from "@reventlessdev/reventless-core/src/adapter/Messaging/Messaging_Log_Backend.res.mjs";
@@ -64,7 +65,7 @@ function capabilities() {
     geocode: Capabilities$Reventless.none.geocode,
     messaging: Messaging_Log_Backend$ReventlessCore.provider(messagingSenderRef.contents),
     identityProvider: identityProviderRef.contents,
-    secrets: Secrets_Node_Backend$ReventlessCore.provider,
+    secrets: Secrets_Node_Backend$ReventlessCore.make(LocalFingerprintKey$ReventlessLocal.get),
     stash: stash.contents
   };
 }

package/src/adapter/LocalFingerprintKey.res

@@ -0,0 +1,66 @@
+// The local platform's fingerprint key, the one `secrets.fingerprint` is keyed by.
+//
+// Resolved once, on first use, from the same ladder as the local token secret:
+//
+//   1. `REVENTLESS_FINGERPRINT_KEY` — an explicit pin, for a test or a developer
+//      who wants to state it.
+//   2. `.reventless/fingerprint-key` beside the platform's other local state,
+//      minted on the first run that finds the directory and reused after. A
+//      fingerprint is a tag in the event log, so a key that changed on restart
+//      would lose every registration a SQLite store kept.
+//   3. A random 32 bytes, per process, for a run with no `.reventless/`.
+//
+// The directory is used, never created, for the reason `LocalAuth` gives: its
+// presence is what tells a platform someone develops against from a unit test.
+
+let fileName = "fingerprint-key"
+
+let mint = (): string => NodeCrypto.randomBytes(32)->NodeCrypto.bufferToString("hex")
+
+let readAt = (path: string): option<string> =>
+  switch NodeFs.readFileSync(path) {
+  | contents
+    if String.length(String.trim(contents)) >=
+    ReventlessCore.Secrets_Node_Backend.minimumFingerprintKeyLength =>
+    Some(String.trim(contents))
+  | _ => None
+  | exception _ => None
+  }
+
+/** The ladder, against a stated directory, so a test can walk it without a
+    `.reventless/` in its own working directory. */
+let resolveIn = (~dir: string): string =>
+  switch NodeProcess.env->Dict.get(ReventlessCore.Secrets_Node_Backend.fingerprintKeyVariable) {
+  | Some(key) if key != "" => key
+  | _ =>
+    if NodeFs.existsSync(dir) {
+      let path = NodePath.join([dir, fileName])
+      switch readAt(path) {
+      | Some(persisted) => persisted
+      | None =>
+        let minted = mint()
+        switch NodeFs.writeFileSync(path, minted) {
+        | () => ()
+        | exception _ => ()
+        }
+        minted
+      }
+    } else {
+      mint()
+    }
+  }
+
+let resolved: ref<option<string>> = ref(None)
+
+/** The key, resolved on first use and kept for the process. */
+let get = (): option<string> =>
+  switch resolved.contents {
+  | Some(key) => Some(key)
+  | None =>
+    let key = resolveIn(~dir=NodePath.join([NodeProcess.cwd(), ".reventless"]))
+    resolved := Some(key)
+    Some(key)
+  }
+
+/** Forget the resolved key, for a test that pins another. */
+let reset = () => resolved := None

package/src/adapter/LocalFingerprintKey.res.mjs

@@ -0,0 +1,75 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Nodefs from "node:fs";
+import * as Nodepath from "node:path";
+import * as Nodecrypto from "node:crypto";
+import * as Secrets_Node_Backend$ReventlessCore from "@reventlessdev/reventless-core/src/adapter/Secrets/Secrets_Node_Backend.res.mjs";
+
+let fileName = "fingerprint-key";
+
+function mint() {
+  return Nodecrypto.randomBytes(32).toString("hex");
+}
+
+function readAt(path) {
+  let contents;
+  try {
+    contents = Nodefs.readFileSync(path, "utf8");
+  } catch (exn) {
+    return;
+  }
+  if (contents.trim().length >= Secrets_Node_Backend$ReventlessCore.minimumFingerprintKeyLength) {
+    return contents.trim();
+  }
+}
+
+function resolveIn(dir) {
+  let key = process.env[Secrets_Node_Backend$ReventlessCore.fingerprintKeyVariable];
+  if (key !== undefined && key !== "") {
+    return key;
+  }
+  if (!Nodefs.existsSync(dir)) {
+    return Nodecrypto.randomBytes(32).toString("hex");
+  }
+  let path = Nodepath.join(dir, fileName);
+  let persisted = readAt(path);
+  if (persisted !== undefined) {
+    return persisted;
+  }
+  let minted = Nodecrypto.randomBytes(32).toString("hex");
+  try {
+    Nodefs.writeFileSync(path, minted, "utf8");
+  } catch (exn) {
+    
+  }
+  return minted;
+}
+
+let resolved = {
+  contents: undefined
+};
+
+function get() {
+  let key = resolved.contents;
+  if (key !== undefined) {
+    return key;
+  }
+  let key$1 = resolveIn(Nodepath.join(process.cwd(), ".reventless"));
+  resolved.contents = key$1;
+  return key$1;
+}
+
+function reset() {
+  resolved.contents = undefined;
+}
+
+export {
+  fileName,
+  mint,
+  readAt,
+  resolveIn,
+  resolved,
+  get,
+  reset,
+}
+/* node:fs Not a pure module */

package/src/adapter/LocalUploadResolvers.res

@@ -7,8 +7,9 @@
 // — dev parity is about the client seeing the same contract, not reproducing AWS's
 // guarantees. See [docs/plans/done/upload-release-path.md] § Step 3.
 
-// Mint a same-origin `/{prefix}/{uuid}/{fileName}` ref: both the PUT target and the
-// stored value, mirroring the AWS presign ticket's shape.
+// Mint a same-origin `/{prefix}/{uuid}.{ext}` ref: both the PUT target and the
+// stored value, mirroring the AWS presign ticket's shape. The name is opaque and the
+// extension comes from the declared content type, never from the file name.
 //
 // The prefix is the declaring store's (`{plugin}/{store}`), so an object carries
 // the plugin that owns it in its own key — what lets a scoped reset attribute it,
@@ -16,12 +17,12 @@
 // back to the shared `uploads/` space rather than being refused: local plugins
 // need not declare a store to upload during development, and refusing here would
 // make dev stricter than deploy about something dev cannot check.
-let mintRef = (~store: string, ~fileName: string): string => {
+let mintRef = (~store: string, ~contentType: option<string>=?): string => {
   let prefix =
     LocalObjectStore.storePrefix(~qualified=store)->Option.getOr(
       LocalObjectStore.defaultUploadPrefix,
     )
-  `/${prefix}/${NodeCrypto.randomUUID()}/${fileName}`
+  `/${prefix}/${Reventless.StorageRef.objectName(~uuid=NodeCrypto.randomUUID(), ~contentType)}`
 }
 
 // Release a ref: delete iff it sits under a served prefix; idempotent (deleting an
@@ -40,10 +41,9 @@ let register = (server: ReventlessGraphqlServer.GraphQL_ServerInstance.t): unit
   let resolvers = Dict.make()
   resolvers->Dict.set("Upload_Presign", async (_root, args, _ctx): JSON.t => {
     let obj = args->JSON.Decode.object->Option.getOr(Dict.make())
-    let fileName =
-      obj->Dict.get("fileName")->Option.flatMap(JSON.Decode.string)->Option.getOr("upload")
+    let contentType = obj->Dict.get("contentType")->Option.flatMap(JSON.Decode.string)
     let store = obj->Dict.get("store")->Option.flatMap(JSON.Decode.string)->Option.getOr("")
-    let ref = mintRef(~store, ~fileName)
+    let ref = mintRef(~store, ~contentType?)
     Dict.fromArray([
       ("uploadUrl", JSON.Encode.string(ref)),
       ("storageRef", JSON.Encode.string(ref)),

package/src/adapter/LocalUploadResolvers.res.mjs

@@ -3,12 +3,13 @@
 import * as Stdlib_JSON from "@rescript/runtime/lib/es6/Stdlib_JSON.js";
 import * as Nodecrypto from "node:crypto";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+import * as StorageRef$Reventless from "@reventlessdev/reventless-spec/src/semantic/StorageRef.res.mjs";
 import * as LocalObjectStore$ReventlessLocal from "./ObjectStore/LocalObjectStore.res.mjs";
 import * as Platform_AdminApi$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_AdminApi.res.mjs";
 
-function mintRef(store, fileName) {
+function mintRef(store, contentType) {
   let prefix = Stdlib_Option.getOr(LocalObjectStore$ReventlessLocal.storePrefix(store), LocalObjectStore$ReventlessLocal.defaultUploadPrefix);
-  return `/` + prefix + `/` + Nodecrypto.randomUUID() + `/` + fileName;
+  return `/` + prefix + `/` + StorageRef$Reventless.objectName(Nodecrypto.randomUUID(), contentType);
 }
 
 function release(storageRef) {
@@ -31,9 +32,9 @@ function register(server) {
   let resolvers = {};
   resolvers["Upload_Presign"] = async (_root, args, _ctx) => {
     let obj = Stdlib_Option.getOr(Stdlib_JSON.Decode.object(args), {});
-    let fileName = Stdlib_Option.getOr(Stdlib_Option.flatMap(obj["fileName"], Stdlib_JSON.Decode.string), "upload");
+    let contentType = Stdlib_Option.flatMap(obj["contentType"], Stdlib_JSON.Decode.string);
     let store = Stdlib_Option.getOr(Stdlib_Option.flatMap(obj["store"], Stdlib_JSON.Decode.string), "");
-    let ref = mintRef(store, fileName);
+    let ref = mintRef(store, contentType);
     return Object.fromEntries([
       [
         "uploadUrl",

package/src/adapter/Scheduler/LocalScheduledPublisher.res

@@ -14,7 +14,6 @@ module Make = (Bus: LocalBus.T) => {
   let scheduleMeta: ReventlessCore.Message.meta = {
     service: "Scheduler",
     time: "",
-    ip: "",
     user: "Scheduler",
     msgId: "",
     correlationId: "",

package/src/adapter/Scheduler/LocalScheduledPublisher.res.mjs

@@ -9,7 +9,6 @@ function Make(Bus) {
   let scheduleMeta = {
     service: "Scheduler",
     time: "",
-    ip: "",
     user: "Scheduler",
     msgId: "",
     correlationId: ""

package/tests/EmitCapabilitiesTest.res

@@ -19,6 +19,12 @@ describe("EmitCapabilities.parseArgs", () => {
   )
 })
 
+describe("EmitCapabilities.manifestText", () => {
+  testSync("a plugin with no parts yet declares nothing", () =>
+    expect(EmitCapabilities.manifestText(None))->toBe(`{\n  "capabilities": []\n}\n`)
+  )
+})
+
 describe("emit-capabilities on the command line", () => {
   module CliArgs = Reventless.CliArgs
   let usage = EmitCapabilities.usage->String.trim

package/tests/EmitCapabilitiesTest.res.mjs

@@ -30,6 +30,12 @@ globalThis.describe("EmitCapabilities.parseArgs", () => {
   });
 });
 
+globalThis.describe("EmitCapabilities.manifestText", () => {
+  globalThis.test("a plugin with no parts yet declares nothing", () => {
+    globalThis.expect(EmitCapabilities$ReventlessLocal.manifestText(undefined)).toBe(`{\n  "capabilities": []\n}\n`);
+  });
+});
+
 globalThis.describe("emit-capabilities on the command line", () => {
   let usage = EmitCapabilities$ReventlessLocal.usage.trim();
   globalThis.test("--help anywhere prints the usage to stdout and exits 0", async () => {

package/tests/PluginEventDecodeTest.res.mjs

@@ -12,7 +12,7 @@ import * as Platform_Admin_Structure$ReventlessCore from "@reventlessdev/reventl
 
 TestRunner$ReventlessLocal.setup();
 
-let meta = Message$ReventlessCore.generateMeta(PluginSpec$ReventlessCore.name, undefined, undefined, undefined, undefined, undefined, undefined, undefined);
+let meta = Message$ReventlessCore.generateMeta(PluginSpec$ReventlessCore.name, undefined, undefined, undefined, undefined, undefined, undefined);
 
 function envelopeOf(event) {
   return Message$ReventlessCore.composeEventJson$p("Catalog", meta, "2024-01-01T00:00:00Z", Util_Sury$Reventless.toJson(event, PluginSpec$ReventlessCore.eventSchema));
@@ -60,7 +60,7 @@ globalThis.describe("Platform.decodePluginEventEnvelope", () => {
 });
 
 globalThis.describe("Platform.decodeUiFragmentRegistryEventEnvelope", () => {
-  let dcbMeta = Message$ReventlessCore.generateMeta(ComponentType$ReventlessCore.name(Platform_Admin_Structure$ReventlessCore.pluginId, "DcbEventLog"), undefined, undefined, undefined, undefined, undefined, undefined, undefined);
+  let dcbMeta = Message$ReventlessCore.generateMeta(ComponentType$ReventlessCore.name(Platform_Admin_Structure$ReventlessCore.pluginId, "DcbEventLog"), undefined, undefined, undefined, undefined, undefined, undefined);
   let dcbEnvelopeOf = event => {
     let json = Util_Sury$Reventless.toJson(event, UiFragmentRegistry$ReventlessCore.eventSchema);
     let match = Message$ReventlessCore.splitMessage(json);

package/tests/adapter/DcbEventLogStorageSqliteTest.res.mjs

@@ -24,7 +24,7 @@ function stored(eventType, tags, data) {
     eventType: eventType,
     data: data,
     tags: tags,
-    meta: Message$ReventlessCore.generateMeta("test", undefined, undefined, undefined, undefined, undefined, undefined, undefined)
+    meta: Message$ReventlessCore.generateMeta("test", undefined, undefined, undefined, undefined, undefined, undefined)
   };
 }
 

package/tests/adapter/DcbEventLogStorageTest.res.mjs

@@ -23,7 +23,7 @@ function makeEvent(eventType, data, tagsOpt) {
     eventType: eventType,
     data: data,
     tags: tags,
-    meta: Message$ReventlessCore.generateMeta("test", undefined, undefined, undefined, undefined, undefined, undefined, undefined)
+    meta: Message$ReventlessCore.generateMeta("test", undefined, undefined, undefined, undefined, undefined, undefined)
   };
 }
 

package/tests/adapter/ObjectStorePersistenceTest.res

@@ -200,13 +200,16 @@ describe("declared store prefixes", () => {
       ~qualified="Catalog.productImages",
       ~prefix=LocalObjectStore.localPrefixFor(~qualified="Catalog.productImages"),
     )
-    let ref = LocalUploadResolvers.mintRef(~store="Catalog.productImages", ~fileName="logo.svg")
+    let ref = LocalUploadResolvers.mintRef(
+      ~store="Catalog.productImages",
+      ~contentType="image/svg+xml",
+    )
     expect(ref->String.startsWith("/uploads/Catalog/productImages/"))->toEqual(true)
-    expect(ref->String.endsWith("/logo.svg"))->toEqual(true)
+    expect(ref->String.endsWith(".svg"))->toEqual(true)
   })
 
   testSync("an undeclared store falls back to the shared uploads prefix", () => {
-    let ref = LocalUploadResolvers.mintRef(~store="Nobody.knows", ~fileName="logo.svg")
+    let ref = LocalUploadResolvers.mintRef(~store="Nobody.knows", ~contentType="image/svg+xml")
     expect(ref->String.startsWith("/uploads/"))->toEqual(true)
   })
 

package/tests/adapter/ObjectStorePersistenceTest.res.mjs

@@ -128,12 +128,12 @@ globalThis.describe("declared store prefixes", () => {
   globalThis.afterEach(() => LocalObjectStore$ReventlessLocal.reset());
   globalThis.test("a declared store mints under uploads/{plugin}/{store}", () => {
     LocalObjectStore$ReventlessLocal.registerStore("Catalog.productImages", LocalObjectStore$ReventlessLocal.localPrefixFor("Catalog.productImages"));
-    let ref = LocalUploadResolvers$ReventlessLocal.mintRef("Catalog.productImages", "logo.svg");
+    let ref = LocalUploadResolvers$ReventlessLocal.mintRef("Catalog.productImages", "image/svg+xml");
     globalThis.expect(ref.startsWith("/uploads/Catalog/productImages/")).toEqual(true);
-    globalThis.expect(ref.endsWith("/logo.svg")).toEqual(true);
+    globalThis.expect(ref.endsWith(".svg")).toEqual(true);
   });
   globalThis.test("an undeclared store falls back to the shared uploads prefix", () => {
-    let ref = LocalUploadResolvers$ReventlessLocal.mintRef("Nobody.knows", "logo.svg");
+    let ref = LocalUploadResolvers$ReventlessLocal.mintRef("Nobody.knows", "image/svg+xml");
     globalThis.expect(ref.startsWith("/uploads/")).toEqual(true);
   });
   globalThis.test("a store's objects stay under the served uploads prefix", () => {