@reventlessdev/reventless-aws 3.0.0-alpha.201 → 3.0.0-alpha.202

package/CHANGELOG.md

@@ -3,6 +3,13 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.202 (2026-07-13)
+
+### Features
+
+* **admin:** ApiFragmentRegistry slice→singleton-aggregate + reactive schema-push SideEffect ([cf70903](https://github.com/ReventlessDev/reventless-core/commit/cf709033f0d822248ebbcfe3fe6b4019b3c1e8a0)), closes [#4](https://github.com/ReventlessDev/reventless-core/issues/4)
+
+
 # 3.0.0-alpha.201 (2026-07-13)
 
 ### Bug Fixes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-aws",
-  "version": "3.0.0-alpha.201",
+  "version": "3.0.0-alpha.202",
   "description": "AWS adapters for Reventless",
   "license": "Apache-2.0",
   "dependencies": {
@@ -11,14 +11,14 @@
     "@reventlessdev/rescript-effect": "0.1.0-alpha.27",
     "@reventlessdev/rescript-aws-sdk": "2.2.0-alpha.21",
     "@reventlessdev/rescript-jest": "1.0.0-alpha.7",
-    "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.15",
     "@reventlessdev/rescript-pulumi-aws": "2.4.0-alpha.50",
+    "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.15",
     "@reventlessdev/rescript-uuid": "1.1.0-alpha.15",
-    "@reventlessdev/reventless-core": "3.0.0-alpha.160",
+    "@reventlessdev/reventless-core": "3.0.0-alpha.161",
     "@reventlessdev/reventless-infra": "3.0.0-alpha.98",
-    "@reventlessdev/reventless-interop": "3.0.0-alpha.26",
+    "@reventlessdev/reventless-postgres": "3.0.0-alpha.25",
     "@reventlessdev/reventless-spec": "3.0.0-alpha.76",
-    "@reventlessdev/reventless-postgres": "3.0.0-alpha.24"
+    "@reventlessdev/reventless-interop": "3.0.0-alpha.26"
   },
   "devDependencies": {
     "rescript": "^12.3.0",

package/src/Platform.res

@@ -113,9 +113,9 @@ module MakeWithConfig = (
     // Lambda (DynamoDB scan) — keep it off the Postgres selection like the other
     // admin stores.
     QueryDbBackend.exempt(ReventlessCore.UiFragments.name)
-    // The ApiFragments StateViewSlice is the durable source of the schema-push
-    // automation and the runtime re-stitcher — admin store, off Postgres too.
-    QueryDbBackend.exempt(ReventlessCore.ApiFragments.name)
+    // The ApiFragments read model backs the Platform_ApiFragments status query
+    // (DynamoDB scan) and the schema-push SideEffect — admin store, off Postgres too.
+    QueryDbBackend.exempt(ReventlessCore.ApiFragmentsReadModelSpec.name)
   })
   type api = Types.AppSync.api
   type role = Types.AppSync.role
@@ -585,14 +585,8 @@ module MakeWithConfig = (
     ReventlessCore.UiFragments,
     ReventlessCore.UiFragments_Projection,
   )
-  module ApiFragmentRegistrySlice = StateChangeSlice.Make(
-    ReventlessCore.ApiFragmentRegistry,
-    ReventlessCore.ApiFragmentRegistry_Behavior,
-  )
-  module ApiFragmentsViewSlice = StateViewSlice.Make(
-    ReventlessCore.ApiFragments,
-    ReventlessCore.ApiFragments_Projection,
-  )
+  // The API-fragment registry is a SINGLETON AGGREGATE now (not a DCB slice) — see
+  // ApiFragmentRegistryAggregate / ApiFragmentsReadModel below.
 
   // Empty base fragment — no types, no mutations, no queries.
   // Used by the plugin Api in split mode so plugin schema has no core fields.
@@ -779,8 +773,10 @@ module MakeWithConfig = (
     ->Pulumi.Output.flatMap(endpoint => {
       let run = async () => {
         let at = Date.make()->Date.toISOString
+        // The registry is a SINGLETON aggregate — the mutation `id` arg is the fixed
+        // constant, `pluginId` (a payload field) carries the plugin name.
         let variables = {
-          "id": name,
+          "id": "registry",
           "pluginId": name,
           "fragment": {"encoded": fragment.encoded, "protocol": fragment.protocol},
           "apiTarget": Util_AppSync_Caller.graphqlEnum(apiTargetName),
@@ -794,14 +790,14 @@ module MakeWithConfig = (
         let result = await Util_AppSync_Caller.sendMutation(
           ~endpoint,
           ~region,
-          ~mutation="Platform_RegisterApiFragment",
+          ~mutation="Platform_ApiFragmentRegistry_RegisterApiFragment",
           ~selection,
           ~variables,
         )
         let outcome =
           result
           ->Option.flatMap(JSON.Decode.object)
-          ->Option.flatMap(d => d->Dict.get("Platform_RegisterApiFragment"))
+          ->Option.flatMap(d => d->Dict.get("Platform_ApiFragmentRegistry_RegisterApiFragment"))
           ->Option.flatMap(JSON.Decode.object)
         switch outcome {
         | Some(cmd) =>
@@ -1480,6 +1476,43 @@ module MakeWithConfig = (
     PluginReadModelMappings,
   )
 
+  // Admin-internal ApiFragmentRegistry singleton aggregate — the platform API-schema
+  // fragment registry (docs/plans/event-sourced-fragment-registries.md). Threaded into
+  // Admin.construct's ~aggregates so registerAdminAggregateMutations wires
+  // Platform_ApiFragmentRegistry_RegisterApiFragment / _DeregisterApiFragment via the
+  // standard CommandGenerator auto-flow (RecordApiFragmentPush carries `@noApi`). IAM
+  // dual-auth for the SigV4 deploy caller comes from AdminApi.systemCallerFieldNames.
+  module ApiFragmentRegistryAggregate: (
+    ReventlessInfra.Aggregate.T with type api = Types.AppSync.api
+  ) = Aggregate_Builder_Single.Make(
+    ReventlessCore.ApiFragmentRegistrySpec,
+    ReventlessCore.ApiFragmentRegistryBehavior,
+    ReventlessInfra.NoEventMappings.Make(ReventlessCore.ApiFragmentRegistrySpec),
+  )
+
+  // Admin ApiFragments read model — per-plugin status rows off the aggregate's event
+  // topic (DynamoDB stream), backing the Platform_ApiFragments status query.
+  module ApiFragmentsReadModelMappings: Reventless.Projection.Mappings
+    with module Target := ReventlessCore.ApiFragmentsReadModelSpec = {
+    module M = ReventlessCore.ApiFragmentsProjection.Mappings
+    module type Mapping = M.Mapping
+    let moduleUrl: string = ReventlessCore.ApiFragmentsProjection.moduleUrl
+    let mappings: array<module(Mapping)> = ReventlessCore.ApiFragmentsProjection.mappings
+  }
+  module ApiFragmentsReadModel = ReadModel_Builder_Single_Stream.Make(
+    ReventlessCore.ApiFragmentsReadModelSpec,
+    ApiFragmentsReadModelMappings,
+  )
+
+  // Admin SideEffectHandler hosting the reactive schema-push side effect (ApiSchemaPush).
+  // Subscribes to the ApiFragmentRegistry aggregate's DynamoDB stream (single-shard for a
+  // singleton → naturally serialized, no concurrent StartSchemaCreation) and, on each
+  // ApiSchemaComputed, stitches + pushes the schema per target API, then records the
+  // outcome via RecordApiFragmentPush. Wired in deployPlatform (the staged path where the
+  // deploy caller fires RegisterApiFragment); makePlatform builds the schema directly and
+  // never triggers it.
+  module AdminApiSchemaPushHandler = SideEffectHandler_Single.Make()
+
   module type PluginMaker = {
     let make: unit => Plugin.component
   }
@@ -1649,14 +1682,14 @@ module MakeWithConfig = (
     let admin = Admin.construct(
       ~version,
       ~extensionPoints=[],
-      ~aggregates=[module(PluginAggregate)],
-      ~readModels=[module(PluginReadModel)],
+      ~aggregates=[module(PluginAggregate), module(ApiFragmentRegistryAggregate)],
+      ~readModels=[module(PluginReadModel), module(ApiFragmentsReadModel)],
       ~scheduler,
       ~resourceNaming=Util_ResourceNaming.operations,
       ~api=platformApi,
       ~apiRole=platformApiRole,
-      ~stateChangeSlices=[module(UiFragmentRegistrySlice), module(ApiFragmentRegistrySlice)],
-      ~stateViewSlices=[module(UiFragmentsViewSlice), module(ApiFragmentsViewSlice)],
+      ~stateChangeSlices=[module(UiFragmentRegistrySlice)],
+      ~stateViewSlices=[module(UiFragmentsViewSlice)],
       ~automationSlices=[],
       ~outboundTranslationSlices=[],
       ~inboundTranslationSlices=[],
@@ -1704,7 +1737,7 @@ module MakeWithConfig = (
     // StateViewSlice table and returns the push-status row per plugin (the deploy
     // waiter polls this). The query field is in the pushed admin base but was
     // unresolved on AWS until now.
-    switch admin.stateViewSlicesOutputs->Dict.get("ApiFragments") {
+    switch admin.readModelsOutputs->Dict.get("ApiFragments") {
     | Some(rm) =>
       switch rm.queryDb.resources->Array.get(0) {
       | Some(r) =>
@@ -1899,19 +1932,84 @@ module MakeWithConfig = (
     let admin = Admin.construct(
       ~version,
       ~extensionPoints=[module(PluginExtensionPoint)],
-      ~aggregates=[module(PluginAggregate)],
-      ~readModels=[module(PluginReadModel)],
+      ~aggregates=[module(PluginAggregate), module(ApiFragmentRegistryAggregate)],
+      ~readModels=[module(PluginReadModel), module(ApiFragmentsReadModel)],
       ~scheduler,
       ~resourceNaming=Util_ResourceNaming.operations,
       ~api=platformApi,
       ~apiRole=platformApiRole,
-      ~stateChangeSlices=[module(UiFragmentRegistrySlice), module(ApiFragmentRegistrySlice)],
-      ~stateViewSlices=[module(UiFragmentsViewSlice), module(ApiFragmentsViewSlice)],
+      ~stateChangeSlices=[module(UiFragmentRegistrySlice)],
+      ~stateViewSlices=[module(UiFragmentsViewSlice)],
       ~automationSlices=[],
       ~outboundTranslationSlices=[],
       ~inboundTranslationSlices=[],
     )
 
+    // Reactive schema-push SideEffect (docs/plans/event-sourced-fragment-registries.md §
+    // Reactive writer design). Host ApiSchemaPush on an admin SideEffectHandler subscribed to
+    // the ApiFragmentRegistry aggregate's event topic (its DynamoDB stream). Deploy-derived
+    // config the runtime-pure push reads at invocation time is injected as Lambda env
+    // (~extraEnvVars); ~targets grants SQS send to the aggregate command topic (for the
+    // RecordApiFragmentPush write-back). Only in deployPlatform (the staged path where the
+    // deploy caller fires RegisterApiFragment); makePlatform pushes the schema directly.
+    let apiSchemaPushEventTopics = ReventlessCore.Aggregate.allEventTopics(admin.aggregatesOutputs)
+    let apiSchemaPushCmdTopics = ReventlessCore.Aggregate.allCommandTopics(admin.aggregatesOutputs)
+    let apiSchemaPushCmdTopicUrl =
+      admin.aggregatesOutputs
+      ->Dict.get(ReventlessCore.ApiFragmentRegistrySpec.name)
+      ->Option.map(agg =>
+        agg.commandTopic->Pulumi.Output.flatMap(ct =>
+          switch ct.resources->Array.get(0) {
+          | Some(r) => r.id
+          | None => Pulumi.Output.make("")
+          }
+        )
+      )
+      ->Option.getOr(Pulumi.Output.make(""))
+    let apiSchemaPushEnv = Dict.fromArray([
+      ("API_SCHEMA_PUSH_DOMAIN_API_ID", domainApiId->Pulumi.Output.asInput),
+      (
+        "API_SCHEMA_PUSH_PLATFORM_API_ID",
+        platformApi->Pulumi.Output.flatMap(api => api.id)->Pulumi.Output.asInput,
+      ),
+      (
+        "API_SCHEMA_PUSH_SPLIT_API",
+        Pulumi.Output.make(Config.splitApi ? "true" : "false")->Pulumi.Output.asInput,
+      ),
+      (
+        "API_SCHEMA_PUSH_CLONER",
+        Pulumi.Output.make(Config.cloner ? "true" : "false")->Pulumi.Output.asInput,
+      ),
+      ("API_SCHEMA_PUSH_CMD_TOPIC_URL", apiSchemaPushCmdTopicUrl->Pulumi.Output.asInput),
+    ])
+    // ApiSchemaPush ignores the injected queryEngine (it self-wires push + write-back from
+    // env); an empty one satisfies the SideEffectHandler contract. `scheduler`/`queryEngine`
+    // are Outputs, so make() runs inside their apply; finish() (which builds the shared
+    // Lambda from the registered handlers) is registered on apiSchemaPushCmdTopics
+    // immediately after make() so it runs AFTER make's own deferred forEventCollector apply
+    // on that same Output (Pulumi runs same-Output apply callbacks in registration order).
+    let apiSchemaPushQueryEngine = QueryEngine.DynamoDb.make(Dict.make())
+    let _ =
+      (scheduler, apiSchemaPushQueryEngine)
+      ->Pulumi.Output.all2
+      ->Pulumi.Output.apply(((sched, qe)) => {
+        let _ = AdminApiSchemaPushHandler.make(
+          ~name="AdminApiSchemaPush",
+          ~sideEffects=[module(ApiSchemaPush)],
+          ~allEventTopics=apiSchemaPushEventTopics,
+          ~allCommandTopics=apiSchemaPushCmdTopics,
+          ~targets=[ReventlessCore.ApiFragmentRegistrySpec.name],
+          ~queryEngine=qe,
+          ~scheduler=sched,
+          ~resourceNaming=Util_ResourceNaming.operations,
+          ~extraEnvVars=apiSchemaPushEnv,
+          ~opts={},
+        )
+        let _ = apiSchemaPushCmdTopics->Pulumi.Output.apply(_ =>
+          SideEffectHandlerRuntime_Builder_Single.finish()
+        )
+      })
+
     // Extract Plugin RM table name as Output.t<string>.
     // IMPORTANT: Do NOT use option<Pulumi.Output.t<…>> — Pulumi Outputs use property
     // lifting, which breaks ReScript's internal option encoding (BS_PRIVATE_NESTED_SOME_NONE).
@@ -1991,7 +2089,7 @@ module MakeWithConfig = (
       // so the consumer's `tableOutput->Pulumi.Output.apply` crashes with
       // "apply is not a function". A `Some(r.name)` LITERAL compiles unboxed (bare
       // r.name), preserving the Output — the same dodge `pluginReadModelTableName` uses.
-      ~apiFragmentRegistryTableName=?switch admin.stateViewSlicesOutputs
+      ~apiFragmentRegistryTableName=?switch admin.readModelsOutputs
       ->Dict.get("ApiFragments")
       ->Option.flatMap(rm => rm.queryDb.resources->Array.get(0)) {
       | Some(r) => Some(r.name)
@@ -2040,7 +2138,7 @@ module MakeWithConfig = (
     // StateViewSlice table and returns the push-status row per plugin (the deploy
     // waiter polls this). The query field is in the pushed admin base but was
     // unresolved on AWS until now.
-    switch admin.stateViewSlicesOutputs->Dict.get("ApiFragments") {
+    switch admin.readModelsOutputs->Dict.get("ApiFragments") {
     | Some(rm) =>
       switch rm.queryDb.resources->Array.get(0) {
       | Some(r) =>

package/src/Platform.res.mjs

@@ -31,7 +31,7 @@ import * as Api_Builder$ReventlessCore from "@reventlessdev/reventless-core/src/
 import * as Plugin_Stack$ReventlessAws from "./plugin/stack/Plugin_Stack.res.mjs";
 import * as UiFragments$ReventlessCore from "@reventlessdev/reventless-core/src/admin/UiFragmentRegistry/StateViewSlice/UiFragments.res.mjs";
 import * as Util_Pulumi$ReventlessCore from "@reventlessdev/reventless-core/src/util/Util_Pulumi.res.mjs";
-import * as ApiFragments$ReventlessCore from "@reventlessdev/reventless-core/src/admin/ApiFragmentRegistry/StateViewSlice/ApiFragments.res.mjs";
+import * as ApiSchemaPush$ReventlessAws from "./adapter/Api/ApiSchemaPush.res.mjs";
 import * as Util_DynamoDb$ReventlessAws from "./util/Util_DynamoDb.res.mjs";
 import * as Platform_Casts$ReventlessAws from "./Platform_Casts.res.mjs";
 import * as Platform_Stack$ReventlessAws from "./Platform_Stack.res.mjs";
@@ -57,7 +57,6 @@ import * as StateTopic_AppSync$ReventlessAws from "./adapter/StateTopic/StateTop
 import * as UiFragmentRegistry$ReventlessCore from "@reventlessdev/reventless-core/src/admin/UiFragmentRegistry/StateChangeSlice/UiFragmentRegistry.res.mjs";
 import * as Util_AppSync_Caller$ReventlessAws from "./util/Util_AppSync_Caller.res.mjs";
 import * as Util_ResourceNaming$ReventlessAws from "./util/Util_ResourceNaming.res.mjs";
-import * as ApiFragmentRegistry$ReventlessCore from "@reventlessdev/reventless-core/src/admin/ApiFragmentRegistry/StateChangeSlice/ApiFragmentRegistry.res.mjs";
 import * as ClonerRunner_Fargate$ReventlessAws from "./plugin/cloner/ClonerRunner_Fargate.res.mjs";
 import * as QueryEngine_DynamoDb$ReventlessAws from "./adapter/QueryEngine/QueryEngine_DynamoDb.res.mjs";
 import * as PluginRuntime_Builder$ReventlessAws from "./plugin/runtime/PluginRuntime_Builder.res.mjs";
@@ -65,26 +64,29 @@ import * as PluginsReadModelSpec$ReventlessCore from "@reventlessdev/reventless-
 import * as ExtensionPoint_Builder$ReventlessAws from "./components/ExtensionPoint_Builder.res.mjs";
 import * as StateViewSlice_Builder$ReventlessAws from "./components/StateViewSlice_Builder.res.mjs";
 import * as Task_Builder_PerBucket$ReventlessAws from "./components/Task_Builder_PerBucket.res.mjs";
+import * as ApiFragmentsProjection$ReventlessCore from "@reventlessdev/reventless-core/src/admin/ApiFragmentRegistry/ApiFragmentsProjection.res.mjs";
 import * as AutomationSlice_Builder$ReventlessAws from "./components/AutomationSlice_Builder.res.mjs";
 import * as EventTopicPublisher_SNS$ReventlessAws from "./adapter/EventTopic/EventTopicPublisher_SNS.res.mjs";
 import * as ExtensionPointMapping$ReventlessInfra from "@reventlessdev/reventless-infra/src/types/ExtensionPointMapping.res.mjs";
 import * as PgQueryResolver_Builder$ReventlessAws from "./adapter/QueryDb/PgQueryResolver_Builder.res.mjs";
 import * as UiFragments_Projection$ReventlessCore from "@reventlessdev/reventless-core/src/admin/UiFragmentRegistry/StateViewSlice/UiFragments_Projection.res.mjs";
 import * as Aggregate_Builder_Single$ReventlessAws from "./components/Aggregate_Builder_Single.res.mjs";
-import * as ApiFragments_Projection$ReventlessCore from "@reventlessdev/reventless-core/src/admin/ApiFragmentRegistry/StateViewSlice/ApiFragments_Projection.res.mjs";
+import * as ApiFragmentRegistrySpec$ReventlessCore from "@reventlessdev/reventless-core/src/admin/ApiFragmentRegistry/ApiFragmentRegistrySpec.res.mjs";
 import * as ReadModel_Builder_Single$ReventlessAws from "./components/ReadModel_Builder_Single.res.mjs";
+import * as SideEffectHandler_Single$ReventlessAws from "./components/SideEffectHandler_Single.res.mjs";
 import * as StateChangeSlice_Builder$ReventlessAws from "./components/StateChangeSlice_Builder.res.mjs";
 import * as ApiFragmentDeregistration$ReventlessAws from "./adapter/Api/ApiFragmentDeregistration.res.mjs";
 import * as EventCollectorChannel_SQS$ReventlessAws from "./adapter/EventCollector/EventCollectorChannel_SQS.res.mjs";
 import * as PgChangeFeedRelay_Builder$ReventlessAws from "./adapter/Postgres/PgChangeFeedRelay_Builder.res.mjs";
 import * as RuntimeEnvironment_Lambda$ReventlessAws from "./adapter/Runtime/RuntimeEnvironment_Lambda.res.mjs";
+import * as ApiFragmentsReadModelSpec$ReventlessCore from "@reventlessdev/reventless-core/src/admin/ApiFragmentRegistry/ApiFragmentsReadModelSpec.res.mjs";
 import * as PluginExtensionPointSpec$ReventlessInfra from "@reventlessdev/reventless-infra/src/types/PluginExtensionPointSpec.res.mjs";
 import * as Platform_UIFragments_Lambda$ReventlessAws from "./adapter/Api/Platform_UIFragments_Lambda.res.mjs";
+import * as ApiFragmentRegistryBehavior$ReventlessCore from "@reventlessdev/reventless-core/src/admin/ApiFragmentRegistry/ApiFragmentRegistryBehavior.res.mjs";
 import * as CommandTopicChannel_SQS_Sync$ReventlessAws from "./adapter/CommandTopic/CommandTopicChannel_SQS_Sync.res.mjs";
 import * as EventLogSubscription_AppSync$ReventlessAws from "./adapter/EventLogSubscription/EventLogSubscription_AppSync.res.mjs";
 import * as Platform_ApiFragments_Lambda$ReventlessAws from "./adapter/Api/Platform_ApiFragments_Lambda.res.mjs";
 import * as UiFragmentRegistry_Behavior$ReventlessCore from "@reventlessdev/reventless-core/src/admin/UiFragmentRegistry/StateChangeSlice/UiFragmentRegistry_Behavior.res.mjs";
-import * as ApiFragmentRegistry_Behavior$ReventlessCore from "@reventlessdev/reventless-core/src/admin/ApiFragmentRegistry/StateChangeSlice/ApiFragmentRegistry_Behavior.res.mjs";
 import * as CommandTopicChannel_SQS_Async$ReventlessAws from "./adapter/CommandTopic/CommandTopicChannel_SQS_Async.res.mjs";
 import * as Plugin_ExtensionPoint_Builder$ReventlessAws from "./plugin/stack/Plugin_ExtensionPoint_Builder.res.mjs";
 import * as QueryDbStorage_DynamoDbStream$ReventlessAws from "./adapter/QueryDb/QueryDbStorage_DynamoDbStream.res.mjs";
@@ -104,6 +106,7 @@ import * as Platform_ComponentDefinitions_Lambda$ReventlessAws from "./adapter/A
 import * as StateViewSliceRuntime_Builder_Single$ReventlessAws from "./adapter/Runtime/StateViewSliceRuntime_Builder_Single.res.mjs";
 import * as AggregateRuntime_Builder_Single_Async$ReventlessAws from "./adapter/Runtime/AggregateRuntime_Builder_Single_Async.res.mjs";
 import * as AutomationSliceRuntime_Builder_Single$ReventlessAws from "./adapter/Runtime/AutomationSliceRuntime_Builder_Single.res.mjs";
+import * as SideEffectHandlerRuntime_Builder_Single$ReventlessAws from "./adapter/Runtime/SideEffectHandlerRuntime_Builder_Single.res.mjs";
 
 let log = Logger$ReventlessCore.fromEnv();
 
@@ -154,7 +157,7 @@ function MakeWithConfig(Config) {
     });
     QueryDbBackend$ReventlessAws.exempt(PluginsReadModelSpec$ReventlessCore.name);
     QueryDbBackend$ReventlessAws.exempt(UiFragments$ReventlessCore.name);
-    QueryDbBackend$ReventlessAws.exempt(ApiFragments$ReventlessCore.name);
+    QueryDbBackend$ReventlessAws.exempt(ApiFragmentsReadModelSpec$ReventlessCore.name);
   });
   let currentDeployTarget = {
     contents: "Domain"
@@ -459,36 +462,6 @@ function MakeWithConfig(Config) {
     project: UiFragments_Projection$ReventlessCore.project,
     moduleUrl: UiFragments_Projection$ReventlessCore.moduleUrl
   });
-  let Spec$1 = {
-    name: ApiFragmentRegistry$ReventlessCore.name,
-    moduleUrl: ApiFragmentRegistry$ReventlessCore.moduleUrl,
-    Id: Id$Reventless.$$String,
-    consumedEventSchema: ApiFragmentRegistry$ReventlessCore.consumedEventSchema,
-    errorSchema: ApiFragmentRegistry$ReventlessCore.errorSchema,
-    eventSchema: ApiFragmentRegistry$ReventlessCore.eventSchema,
-    commandSchema: ApiFragmentRegistry$ReventlessCore.commandSchema,
-    commandAuthorization: ApiFragmentRegistry$ReventlessCore.commandAuthorization,
-    readConsistency: ApiFragmentRegistry$ReventlessCore.readConsistency
-  };
-  let ApiFragmentRegistrySlice = StateChangeSlice_Builder$ReventlessAws.Make(Spec$1)({
-    initialState: undefined,
-    evolve: ApiFragmentRegistry_Behavior$ReventlessCore.evolve,
-    decide: ApiFragmentRegistry_Behavior$ReventlessCore.decide,
-    moduleUrl: ApiFragmentRegistry_Behavior$ReventlessCore.moduleUrl
-  });
-  let ApiFragmentsViewSlice = Make$7({
-    name: ApiFragments$ReventlessCore.name,
-    moduleUrl: ApiFragments$ReventlessCore.moduleUrl,
-    stateSchema: ApiFragments$ReventlessCore.stateSchema,
-    consumedEventSchema: ApiFragments$ReventlessCore.consumedEventSchema,
-    config: ApiFragments$ReventlessCore.config,
-    subIdConfig: undefined,
-    authorization: ApiFragments$ReventlessCore.authorization,
-    visibility: ApiFragments$ReventlessCore.visibility
-  })({
-    project: ApiFragments_Projection$ReventlessCore.project,
-    moduleUrl: ApiFragments_Projection$ReventlessCore.moduleUrl
-  });
   let emptyBaseFragment = GraphQL_Stitcher$ReventlessCore.encode({
     types: [],
     mutations: [],
@@ -629,7 +602,7 @@ function MakeWithConfig(Config) {
         let run = async () => {
           let at = new Date().toISOString();
           let variables = {
-            id: name,
+            id: "registry",
             pluginId: name,
             fragment: {
               encoded: pluginFragment.encoded,
@@ -639,8 +612,8 @@ function MakeWithConfig(Config) {
             at: at
           };
           log.info("registerFragmentViaApi", undefined, `Registering API fragment for ` + name + ` (` + apiTargetName + `) via ` + endpoint);
-          let result = await Util_AppSync_Caller$ReventlessAws.sendMutation(endpoint, region, "Platform_RegisterApiFragment", "{ __typename ... on CommandAccepted { eventCount } ... on CommandRejected { errorCode errorDetail } }", variables);
-          let outcome = Stdlib_Option.flatMap(Stdlib_Option.flatMap(Stdlib_Option.flatMap(result, Stdlib_JSON.Decode.object), d => d["Platform_RegisterApiFragment"]), Stdlib_JSON.Decode.object);
+          let result = await Util_AppSync_Caller$ReventlessAws.sendMutation(endpoint, region, "Platform_ApiFragmentRegistry_RegisterApiFragment", "{ __typename ... on CommandAccepted { eventCount } ... on CommandRejected { errorCode errorDetail } }", variables);
+          let outcome = Stdlib_Option.flatMap(Stdlib_Option.flatMap(Stdlib_Option.flatMap(result, Stdlib_JSON.Decode.object), d => d["Platform_ApiFragmentRegistry_RegisterApiFragment"]), Stdlib_JSON.Decode.object);
           if (outcome === undefined) {
             return await waitForApiFragmentPush(endpoint, region, name, at);
           }
@@ -987,6 +960,40 @@ function MakeWithConfig(Config) {
     authorization: PluginsReadModelSpec$ReventlessCore.authorization,
     visibility: PluginsReadModelSpec$ReventlessCore.visibility
   })(PluginReadModelMappings);
+  let ApiFragmentRegistryAggregate = Aggregate_Builder_Single$ReventlessAws.Make({
+    Id: Id$Reventless.$$String,
+    name: ApiFragmentRegistrySpec$ReventlessCore.name,
+    eventSchema: ApiFragmentRegistrySpec$ReventlessCore.eventSchema,
+    errorSchema: ApiFragmentRegistrySpec$ReventlessCore.errorSchema,
+    commandSchema: ApiFragmentRegistrySpec$ReventlessCore.commandSchema,
+    moduleUrl: ApiFragmentRegistrySpec$ReventlessCore.moduleUrl,
+    commandAuthorization: ApiFragmentRegistrySpec$ReventlessCore.commandAuthorization
+  })({
+    initialState: ApiFragmentRegistryBehavior$ReventlessCore.initialState,
+    evolve: ApiFragmentRegistryBehavior$ReventlessCore.evolve,
+    decide: ApiFragmentRegistryBehavior$ReventlessCore.decide,
+    snapshot: undefined,
+    moduleUrl: ApiFragmentRegistryBehavior$ReventlessCore.moduleUrl
+  })(NoEventMappings$ReventlessInfra.Make({
+    name: ApiFragmentRegistrySpec$ReventlessCore.name,
+    Id: Id$Reventless.$$String,
+    commandSchema: ApiFragmentRegistrySpec$ReventlessCore.commandSchema
+  }));
+  let ApiFragmentsReadModelMappings = {
+    moduleUrl: ApiFragmentsProjection$ReventlessCore.moduleUrl,
+    mappings: ApiFragmentsProjection$ReventlessCore.mappings
+  };
+  let ApiFragmentsReadModel = ReadModel_Builder_Single_Stream$ReventlessAws.Make({
+    Id: Id$Reventless.$$String,
+    name: ApiFragmentsReadModelSpec$ReventlessCore.name,
+    moduleUrl: ApiFragmentsReadModelSpec$ReventlessCore.moduleUrl,
+    stateSchema: ApiFragmentsReadModelSpec$ReventlessCore.stateSchema,
+    config: ApiFragmentsReadModelSpec$ReventlessCore.config,
+    subIdConfig: undefined,
+    authorization: ApiFragmentsReadModelSpec$ReventlessCore.authorization,
+    visibility: ApiFragmentsReadModelSpec$ReventlessCore.visibility
+  })(ApiFragmentsReadModelMappings);
+  let AdminApiSchemaPushHandler = SideEffectHandler_Single$ReventlessAws.Make({});
   let makeScheduler = () => {
     let component = Scheduler$ReventlessAws.make(undefined);
     let outputs = Component$ReventlessCore.outputs(component);
@@ -1118,13 +1125,13 @@ function MakeWithConfig(Config) {
         };
       }
     }
-    let admin = Admin.construct(version, [], [PluginAggregate], [PluginReadModel], scheduler, Util_ResourceNaming$ReventlessAws.operations, platformApi, platformApiRole, [
-      UiFragmentRegistrySlice,
-      ApiFragmentRegistrySlice
+    let admin = Admin.construct(version, [], [
+      PluginAggregate,
+      ApiFragmentRegistryAggregate
     ], [
-      UiFragmentsViewSlice,
-      ApiFragmentsViewSlice
-    ], [], [], []);
+      PluginReadModel,
+      ApiFragmentsReadModel
+    ], scheduler, Util_ResourceNaming$ReventlessAws.operations, platformApi, platformApiRole, [UiFragmentRegistrySlice], [UiFragmentsViewSlice], [], [], []);
     let pluginRm = admin.readModelsOutputs["Plugins"];
     if (pluginRm !== undefined) {
       let r = pluginRm.queryDb.resources[0];
@@ -1140,7 +1147,7 @@ function MakeWithConfig(Config) {
         Platform_UIFragments_Lambda$ReventlessAws.make(platformApi, r$1.name, admin.adminSchemaPushed, {});
       }
     }
-    let rm$1 = admin.stateViewSlicesOutputs["ApiFragments"];
+    let rm$1 = admin.readModelsOutputs["ApiFragments"];
     if (rm$1 !== undefined) {
       let r$2 = rm$1.queryDb.resources[0];
       if (r$2 !== undefined) {
@@ -1233,13 +1240,61 @@ function MakeWithConfig(Config) {
       updateApiSchema: updateApiSchema,
       manageSubscriptions: undefined
     });
-    let admin = Admin.construct(version, [PluginExtensionPoint], [PluginAggregate], [PluginReadModel], scheduler, Util_ResourceNaming$ReventlessAws.operations, platformApi, platformApiRole, [
-      UiFragmentRegistrySlice,
-      ApiFragmentRegistrySlice
+    let admin = Admin.construct(version, [PluginExtensionPoint], [
+      PluginAggregate,
+      ApiFragmentRegistryAggregate
     ], [
-      UiFragmentsViewSlice,
-      ApiFragmentsViewSlice
-    ], [], [], []);
+      PluginReadModel,
+      ApiFragmentsReadModel
+    ], scheduler, Util_ResourceNaming$ReventlessAws.operations, platformApi, platformApiRole, [UiFragmentRegistrySlice], [UiFragmentsViewSlice], [], [], []);
+    let apiSchemaPushEventTopics = Aggregate$ReventlessCore.allEventTopics(admin.aggregatesOutputs);
+    let apiSchemaPushCmdTopics = Aggregate$ReventlessCore.allCommandTopics(admin.aggregatesOutputs);
+    let apiSchemaPushCmdTopicUrl = Stdlib_Option.getOr(Stdlib_Option.map(admin.aggregatesOutputs[ApiFragmentRegistrySpec$ReventlessCore.name], agg => Output$Pulumi.flatMap(agg.commandTopic, ct => {
+      let r = ct.resources[0];
+      if (r !== undefined) {
+        return r.id;
+      } else {
+        return Pulumi.output("");
+      }
+    })), Pulumi.output(""));
+    let apiSchemaPushEnv = Object.fromEntries([
+      [
+        "API_SCHEMA_PUSH_DOMAIN_API_ID",
+        domainApiId
+      ],
+      [
+        "API_SCHEMA_PUSH_PLATFORM_API_ID",
+        Output$Pulumi.flatMap(platformApi, api => api.id)
+      ],
+      [
+        "API_SCHEMA_PUSH_SPLIT_API",
+        Pulumi.output(Config.splitApi ? "true" : "false")
+      ],
+      [
+        "API_SCHEMA_PUSH_CLONER",
+        Pulumi.output(Config.cloner ? "true" : "false")
+      ],
+      [
+        "API_SCHEMA_PUSH_CMD_TOPIC_URL",
+        apiSchemaPushCmdTopicUrl
+      ]
+    ]);
+    let apiSchemaPushQueryEngine = QueryEngine_DynamoDb$ReventlessAws.make({});
+    Pulumi.all([
+      scheduler,
+      apiSchemaPushQueryEngine
+    ]).apply(param => {
+      AdminApiSchemaPushHandler.make("AdminApiSchemaPush", [{
+          Source: {
+            name: ApiFragmentRegistrySpec$ReventlessCore.name,
+            Id: Id$Reventless.$$String,
+            eventSchema: ApiFragmentRegistrySpec$ReventlessCore.eventSchema
+          },
+          moduleUrl: ApiSchemaPush$ReventlessAws.moduleUrl,
+          execute: ApiSchemaPush$ReventlessAws.execute
+        }], apiSchemaPushEventTopics, apiSchemaPushCmdTopics, [ApiFragmentRegistrySpec$ReventlessCore.name], param[1], param[0], Util_ResourceNaming$ReventlessAws.operations, undefined, undefined, apiSchemaPushEnv, {});
+      apiSchemaPushCmdTopics.apply(param => SideEffectHandlerRuntime_Builder_Single$ReventlessAws.finish());
+    });
     let pluginRm = admin.readModelsOutputs["Plugins"];
     let pluginReadModelTableName;
     if (pluginRm !== undefined) {
@@ -1268,7 +1323,7 @@ function MakeWithConfig(Config) {
         return Pulumi.output("NOT_AVAILABLE");
       }
     });
-    let r$1 = Stdlib_Option.flatMap(admin.stateViewSlicesOutputs["ApiFragments"], rm => rm.queryDb.resources[0]);
+    let r$1 = Stdlib_Option.flatMap(admin.readModelsOutputs["ApiFragments"], rm => rm.queryDb.resources[0]);
     PluginRuntime_Builder$ReventlessAws.registerConfig(pluginEpEventTopicArn, pluginReadModelTableName, pluginSchemaPersistenceTable.name, hooks_schedulerRoleUrn.contents, undefined, undefined, domainApiId, Config.cloner, Output$Pulumi.flatMap(platformApi, api => api.id), r$1 !== undefined ? r$1.name : undefined, AutomationSliceRuntime_Builder_Single$ReventlessAws.getDcbQueueUrl(), Config.splitApi, undefined);
     if (pluginReadModelTableName !== undefined) {
       AggregateRuntime_Builder_Single$ReventlessAws.setPluginReadModelTable(pluginReadModelTableName);
@@ -1281,7 +1336,7 @@ function MakeWithConfig(Config) {
         Platform_UIFragments_Lambda$ReventlessAws.make(platformApi, r$2.name, admin.adminSchemaPushed, {});
       }
     }
-    let rm$1 = admin.stateViewSlicesOutputs["ApiFragments"];
+    let rm$1 = admin.readModelsOutputs["ApiFragments"];
     if (rm$1 !== undefined) {
       let r$3 = rm$1.queryDb.resources[0];
       if (r$3 !== undefined) {
@@ -1544,7 +1599,7 @@ function Make($star) {
     });
     QueryDbBackend$ReventlessAws.exempt(PluginsReadModelSpec$ReventlessCore.name);
     QueryDbBackend$ReventlessAws.exempt(UiFragments$ReventlessCore.name);
-    QueryDbBackend$ReventlessAws.exempt(ApiFragments$ReventlessCore.name);
+    QueryDbBackend$ReventlessAws.exempt(ApiFragmentsReadModelSpec$ReventlessCore.name);
   });
   let currentDeployTarget = {
     contents: "Domain"
@@ -1849,36 +1904,6 @@ function Make($star) {
     project: UiFragments_Projection$ReventlessCore.project,
     moduleUrl: UiFragments_Projection$ReventlessCore.moduleUrl
   });
-  let Spec$1 = {
-    name: ApiFragmentRegistry$ReventlessCore.name,
-    moduleUrl: ApiFragmentRegistry$ReventlessCore.moduleUrl,
-    Id: Id$Reventless.$$String,
-    consumedEventSchema: ApiFragmentRegistry$ReventlessCore.consumedEventSchema,
-    errorSchema: ApiFragmentRegistry$ReventlessCore.errorSchema,
-    eventSchema: ApiFragmentRegistry$ReventlessCore.eventSchema,
-    commandSchema: ApiFragmentRegistry$ReventlessCore.commandSchema,
-    commandAuthorization: ApiFragmentRegistry$ReventlessCore.commandAuthorization,
-    readConsistency: ApiFragmentRegistry$ReventlessCore.readConsistency
-  };
-  let ApiFragmentRegistrySlice = StateChangeSlice_Builder$ReventlessAws.Make(Spec$1)({
-    initialState: undefined,
-    evolve: ApiFragmentRegistry_Behavior$ReventlessCore.evolve,
-    decide: ApiFragmentRegistry_Behavior$ReventlessCore.decide,
-    moduleUrl: ApiFragmentRegistry_Behavior$ReventlessCore.moduleUrl
-  });
-  let ApiFragmentsViewSlice = Make$8({
-    name: ApiFragments$ReventlessCore.name,
-    moduleUrl: ApiFragments$ReventlessCore.moduleUrl,
-    stateSchema: ApiFragments$ReventlessCore.stateSchema,
-    consumedEventSchema: ApiFragments$ReventlessCore.consumedEventSchema,
-    config: ApiFragments$ReventlessCore.config,
-    subIdConfig: undefined,
-    authorization: ApiFragments$ReventlessCore.authorization,
-    visibility: ApiFragments$ReventlessCore.visibility
-  })({
-    project: ApiFragments_Projection$ReventlessCore.project,
-    moduleUrl: ApiFragments_Projection$ReventlessCore.moduleUrl
-  });
   let emptyBaseFragment = GraphQL_Stitcher$ReventlessCore.encode({
     types: [],
     mutations: [],
@@ -2018,7 +2043,7 @@ function Make($star) {
         let run = async () => {
           let at = new Date().toISOString();
           let variables = {
-            id: name,
+            id: "registry",
             pluginId: name,
             fragment: {
               encoded: pluginFragment.encoded,
@@ -2028,8 +2053,8 @@ function Make($star) {
             at: at
           };
           log.info("registerFragmentViaApi", undefined, `Registering API fragment for ` + name + ` (` + apiTargetName + `) via ` + endpoint);
-          let result = await Util_AppSync_Caller$ReventlessAws.sendMutation(endpoint, region, "Platform_RegisterApiFragment", "{ __typename ... on CommandAccepted { eventCount } ... on CommandRejected { errorCode errorDetail } }", variables);
-          let outcome = Stdlib_Option.flatMap(Stdlib_Option.flatMap(Stdlib_Option.flatMap(result, Stdlib_JSON.Decode.object), d => d["Platform_RegisterApiFragment"]), Stdlib_JSON.Decode.object);
+          let result = await Util_AppSync_Caller$ReventlessAws.sendMutation(endpoint, region, "Platform_ApiFragmentRegistry_RegisterApiFragment", "{ __typename ... on CommandAccepted { eventCount } ... on CommandRejected { errorCode errorDetail } }", variables);
+          let outcome = Stdlib_Option.flatMap(Stdlib_Option.flatMap(Stdlib_Option.flatMap(result, Stdlib_JSON.Decode.object), d => d["Platform_ApiFragmentRegistry_RegisterApiFragment"]), Stdlib_JSON.Decode.object);
           if (outcome === undefined) {
             return await waitForApiFragmentPush(endpoint, region, name, at);
           }
@@ -2372,6 +2397,40 @@ function Make($star) {
     authorization: PluginsReadModelSpec$ReventlessCore.authorization,
     visibility: PluginsReadModelSpec$ReventlessCore.visibility
   })(PluginReadModelMappings);
+  let ApiFragmentRegistryAggregate = Aggregate_Builder_Single$ReventlessAws.Make({
+    Id: Id$Reventless.$$String,
+    name: ApiFragmentRegistrySpec$ReventlessCore.name,
+    eventSchema: ApiFragmentRegistrySpec$ReventlessCore.eventSchema,
+    errorSchema: ApiFragmentRegistrySpec$ReventlessCore.errorSchema,
+    commandSchema: ApiFragmentRegistrySpec$ReventlessCore.commandSchema,
+    moduleUrl: ApiFragmentRegistrySpec$ReventlessCore.moduleUrl,
+    commandAuthorization: ApiFragmentRegistrySpec$ReventlessCore.commandAuthorization
+  })({
+    initialState: ApiFragmentRegistryBehavior$ReventlessCore.initialState,
+    evolve: ApiFragmentRegistryBehavior$ReventlessCore.evolve,
+    decide: ApiFragmentRegistryBehavior$ReventlessCore.decide,
+    snapshot: undefined,
+    moduleUrl: ApiFragmentRegistryBehavior$ReventlessCore.moduleUrl
+  })(NoEventMappings$ReventlessInfra.Make({
+    name: ApiFragmentRegistrySpec$ReventlessCore.name,
+    Id: Id$Reventless.$$String,
+    commandSchema: ApiFragmentRegistrySpec$ReventlessCore.commandSchema
+  }));
+  let ApiFragmentsReadModelMappings = {
+    moduleUrl: ApiFragmentsProjection$ReventlessCore.moduleUrl,
+    mappings: ApiFragmentsProjection$ReventlessCore.mappings
+  };
+  let ApiFragmentsReadModel = ReadModel_Builder_Single_Stream$ReventlessAws.Make({
+    Id: Id$Reventless.$$String,
+    name: ApiFragmentsReadModelSpec$ReventlessCore.name,
+    moduleUrl: ApiFragmentsReadModelSpec$ReventlessCore.moduleUrl,
+    stateSchema: ApiFragmentsReadModelSpec$ReventlessCore.stateSchema,
+    config: ApiFragmentsReadModelSpec$ReventlessCore.config,
+    subIdConfig: undefined,
+    authorization: ApiFragmentsReadModelSpec$ReventlessCore.authorization,
+    visibility: ApiFragmentsReadModelSpec$ReventlessCore.visibility
+  })(ApiFragmentsReadModelMappings);
+  let AdminApiSchemaPushHandler = SideEffectHandler_Single$ReventlessAws.Make({});
   let makeScheduler = () => {
     let component = Scheduler$ReventlessAws.make(undefined);
     let outputs = Component$ReventlessCore.outputs(component);
@@ -2498,13 +2557,13 @@ function Make($star) {
         platformApiRole: platformApiRole
       };
     }
-    let admin = Admin.construct(version, [], [PluginAggregate], [PluginReadModel], scheduler, Util_ResourceNaming$ReventlessAws.operations, platformApi, platformApiRole, [
-      UiFragmentRegistrySlice,
-      ApiFragmentRegistrySlice
+    let admin = Admin.construct(version, [], [
+      PluginAggregate,
+      ApiFragmentRegistryAggregate
     ], [
-      UiFragmentsViewSlice,
-      ApiFragmentsViewSlice
-    ], [], [], []);
+      PluginReadModel,
+      ApiFragmentsReadModel
+    ], scheduler, Util_ResourceNaming$ReventlessAws.operations, platformApi, platformApiRole, [UiFragmentRegistrySlice], [UiFragmentsViewSlice], [], [], []);
     let pluginRm = admin.readModelsOutputs["Plugins"];
     if (pluginRm !== undefined) {
       let r = pluginRm.queryDb.resources[0];
@@ -2520,7 +2579,7 @@ function Make($star) {
         Platform_UIFragments_Lambda$ReventlessAws.make(platformApi, r$1.name, admin.adminSchemaPushed, {});
       }
     }
-    let rm$1 = admin.stateViewSlicesOutputs["ApiFragments"];
+    let rm$1 = admin.readModelsOutputs["ApiFragments"];
     if (rm$1 !== undefined) {
       let r$2 = rm$1.queryDb.resources[0];
       if (r$2 !== undefined) {
@@ -2601,13 +2660,61 @@ function Make($star) {
       updateApiSchema: updateApiSchema,
       manageSubscriptions: undefined
     });
-    let admin = Admin.construct(version, [PluginExtensionPoint], [PluginAggregate], [PluginReadModel], scheduler, Util_ResourceNaming$ReventlessAws.operations, platformApi, platformApiRole, [
-      UiFragmentRegistrySlice,
-      ApiFragmentRegistrySlice
+    let admin = Admin.construct(version, [PluginExtensionPoint], [
+      PluginAggregate,
+      ApiFragmentRegistryAggregate
     ], [
-      UiFragmentsViewSlice,
-      ApiFragmentsViewSlice
-    ], [], [], []);
+      PluginReadModel,
+      ApiFragmentsReadModel
+    ], scheduler, Util_ResourceNaming$ReventlessAws.operations, platformApi, platformApiRole, [UiFragmentRegistrySlice], [UiFragmentsViewSlice], [], [], []);
+    let apiSchemaPushEventTopics = Aggregate$ReventlessCore.allEventTopics(admin.aggregatesOutputs);
+    let apiSchemaPushCmdTopics = Aggregate$ReventlessCore.allCommandTopics(admin.aggregatesOutputs);
+    let apiSchemaPushCmdTopicUrl = Stdlib_Option.getOr(Stdlib_Option.map(admin.aggregatesOutputs[ApiFragmentRegistrySpec$ReventlessCore.name], agg => Output$Pulumi.flatMap(agg.commandTopic, ct => {
+      let r = ct.resources[0];
+      if (r !== undefined) {
+        return r.id;
+      } else {
+        return Pulumi.output("");
+      }
+    })), Pulumi.output(""));
+    let apiSchemaPushEnv = Object.fromEntries([
+      [
+        "API_SCHEMA_PUSH_DOMAIN_API_ID",
+        domainApiId
+      ],
+      [
+        "API_SCHEMA_PUSH_PLATFORM_API_ID",
+        Output$Pulumi.flatMap(platformApi, api => api.id)
+      ],
+      [
+        "API_SCHEMA_PUSH_SPLIT_API",
+        Pulumi.output("true")
+      ],
+      [
+        "API_SCHEMA_PUSH_CLONER",
+        Pulumi.output("false")
+      ],
+      [
+        "API_SCHEMA_PUSH_CMD_TOPIC_URL",
+        apiSchemaPushCmdTopicUrl
+      ]
+    ]);
+    let apiSchemaPushQueryEngine = QueryEngine_DynamoDb$ReventlessAws.make({});
+    Pulumi.all([
+      scheduler,
+      apiSchemaPushQueryEngine
+    ]).apply(param => {
+      AdminApiSchemaPushHandler.make("AdminApiSchemaPush", [{
+          Source: {
+            name: ApiFragmentRegistrySpec$ReventlessCore.name,
+            Id: Id$Reventless.$$String,
+            eventSchema: ApiFragmentRegistrySpec$ReventlessCore.eventSchema
+          },
+          moduleUrl: ApiSchemaPush$ReventlessAws.moduleUrl,
+          execute: ApiSchemaPush$ReventlessAws.execute
+        }], apiSchemaPushEventTopics, apiSchemaPushCmdTopics, [ApiFragmentRegistrySpec$ReventlessCore.name], param[1], param[0], Util_ResourceNaming$ReventlessAws.operations, undefined, undefined, apiSchemaPushEnv, {});
+      apiSchemaPushCmdTopics.apply(param => SideEffectHandlerRuntime_Builder_Single$ReventlessAws.finish());
+    });
     let pluginRm = admin.readModelsOutputs["Plugins"];
     let pluginReadModelTableName;
     if (pluginRm !== undefined) {
@@ -2636,7 +2743,7 @@ function Make($star) {
         return Pulumi.output("NOT_AVAILABLE");
       }
     });
-    let r$1 = Stdlib_Option.flatMap(admin.stateViewSlicesOutputs["ApiFragments"], rm => rm.queryDb.resources[0]);
+    let r$1 = Stdlib_Option.flatMap(admin.readModelsOutputs["ApiFragments"], rm => rm.queryDb.resources[0]);
     PluginRuntime_Builder$ReventlessAws.registerConfig(pluginEpEventTopicArn, pluginReadModelTableName, pluginSchemaPersistenceTable.name, hooks_schedulerRoleUrn.contents, undefined, undefined, domainApiId, false, Output$Pulumi.flatMap(platformApi, api => api.id), r$1 !== undefined ? r$1.name : undefined, AutomationSliceRuntime_Builder_Single$ReventlessAws.getDcbQueueUrl(), true, undefined);
     if (pluginReadModelTableName !== undefined) {
       AggregateRuntime_Builder_Single$ReventlessAws.setPluginReadModelTable(pluginReadModelTableName);
@@ -2649,7 +2756,7 @@ function Make($star) {
         Platform_UIFragments_Lambda$ReventlessAws.make(platformApi, r$2.name, admin.adminSchemaPushed, {});
       }
     }
-    let rm$1 = admin.stateViewSlicesOutputs["ApiFragments"];
+    let rm$1 = admin.readModelsOutputs["ApiFragments"];
     if (rm$1 !== undefined) {
       let r$3 = rm$1.queryDb.resources[0];
       if (r$3 !== undefined) {

package/src/adapter/Api/ApiFragmentDeregistration.res

@@ -44,7 +44,7 @@ let decodeId = (id: string): option<providerInputs> =>
 let sendDeregister: (JSON.t, string, string) => promise<unit> = %raw(`
   async function (variables, endpoint, region) {
     const mod = await import("@reventlessdev/reventless-aws/src/util/Util_AppSync_Caller.res.mjs");
-    await mod.sendMutation(endpoint, region, "Platform_DeregisterApiFragment", "{ __typename }", variables);
+    await mod.sendMutation(endpoint, region, "Platform_ApiFragmentRegistry_DeregisterApiFragment", "{ __typename }", variables);
   }
 `)
 
@@ -75,9 +75,10 @@ let delete_ = async (id: string, props: providerInputs): unit => {
   }
   let variables =
     Dict.fromArray([
-      // Platform_DeregisterApiFragment(id: ID!, pluginId: ID!) — id is the
-      // generator-prepended arg (unused server-side); pass the pluginId for both.
-      ("id", JSON.Encode.string(carrier.pluginId)),
+      // Platform_ApiFragmentRegistry_DeregisterApiFragment(id: ID!, pluginId: ID!) — the
+      // registry is a SINGLETON aggregate, so `id` is the fixed constant; `pluginId`
+      // (payload) names the plugin whose fragment is removed.
+      ("id", JSON.Encode.string("registry")),
       ("pluginId", JSON.Encode.string(carrier.pluginId)),
     ])->JSON.Encode.object
   // Best-effort: on a full teardown the platform API may already be gone, and a

package/src/adapter/Api/ApiFragmentDeregistration.res.mjs

@@ -27,7 +27,7 @@ function decodeId(id) {
 
 let sendDeregister = (async function (variables, endpoint, region) {
     const mod = await import("@reventlessdev/reventless-aws/src/util/Util_AppSync_Caller.res.mjs");
-    await mod.sendMutation(endpoint, region, "Platform_DeregisterApiFragment", "{ __typename }", variables);
+    await mod.sendMutation(endpoint, region, "Platform_ApiFragmentRegistry_DeregisterApiFragment", "{ __typename }", variables);
   });
 
 let errMessage = ((e) => (e && e.message) ? String(e.message) : String(e));
@@ -59,7 +59,7 @@ async function delete_(id, props) {
   let variables = Object.fromEntries([
     [
       "id",
-      carrier.pluginId
+      "registry"
     ],
     [
       "pluginId",

package/src/adapter/Api/ApiSchemaPush.res

@@ -0,0 +1,54 @@
+// ApiSchemaPush — the admin reactive schema-push SideEffect
+// (docs/plans/event-sourced-fragment-registries.md § Reactive writer design).
+//
+// Source = the ApiFragmentRegistry singleton aggregate. On every ApiSchemaComputed
+// { snapshot } (emitted by the aggregate behaviour alongside each ApiFragment* fact,
+// carrying the WHOLE consistent per-plugin fragment set), this hands the snapshot to
+// the runtime-pure push engine (ApiSchemaPush_Runtime.mjs), which stitches one
+// AWS-decorated schema per target API, pushes each behind the shrink guard, and writes
+// the outcome back via RecordApiFragmentPush.
+//
+// The generic SideEffect.T context (`queryEngine`) is unused: this bespoke platform
+// side effect self-acquires its config (API ids, split flag, command-topic URL) from
+// Lambda env injected by the admin SideEffectHandler (~extraEnvVars). The push module
+// is loaded via dynamic import so no @aws-sdk / provider code is statically captured
+// beyond what the SideEffectHandler Lambda already bundles (runtime-purity — see
+// reference_pulumi_leaks_into_lambda_runtime_graph).
+module Source = ReventlessCore.ApiFragmentRegistrySpec
+
+let moduleUrl: string = %raw(`import.meta.url`)
+
+type jsEntry = {pluginId: string, encoded: string, protocol: string, apiTarget: string}
+
+let pushApiSchema: array<jsEntry> => promise<unit> = %raw(`
+  async function (snapshot) {
+    const mod = await import("@reventlessdev/reventless-aws/src/adapter/Runtime/ApiSchemaPush_Runtime.mjs");
+    await mod.pushApiSchema(snapshot);
+  }
+`)
+
+let execute = async (
+  _id: Source.Id.t,
+  _meta: Reventless.Message.meta,
+  event: Source.event,
+  _queryEngine: Reventless.QueryEngine.operations,
+) =>
+  switch event {
+  | ApiSchemaComputed({snapshot}) =>
+    let jsSnapshot = snapshot->Array.map((e: Source.fragmentSnapshotEntry) => {
+      pluginId: e.pluginId,
+      encoded: e.encoded,
+      protocol: e.protocol,
+      apiTarget: switch e.apiTarget {
+      | Reventless.Plugin.Domain => "Domain"
+      | Reventless.Plugin.Platform => "Platform"
+      },
+    })
+    await pushApiSchema(jsSnapshot)
+  // Fact events are handled via the ApiSchemaComputed echo (which carries the
+  // consistent snapshot); the write-back and lifecycle facts are no-ops here.
+  | ApiFragmentRegistered(_)
+  | ApiFragmentUpdated(_)
+  | ApiFragmentDeregistered(_)
+  | ApiFragmentPushRecorded(_) => ()
+  }

package/src/adapter/Api/ApiSchemaPush.res.mjs

@@ -0,0 +1,37 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+
+let moduleUrl = import.meta.url;
+
+let pushApiSchema = (async function (snapshot) {
+    const mod = await import("@reventlessdev/reventless-aws/src/adapter/Runtime/ApiSchemaPush_Runtime.mjs");
+    await mod.pushApiSchema(snapshot);
+  });
+
+async function execute(_id, _meta, event, _queryEngine) {
+  if (event.TAG !== "ApiSchemaComputed") {
+    return;
+  }
+  let jsSnapshot = event.snapshot.map(e => {
+    let match = e.apiTarget;
+    let tmp;
+    tmp = match === "Domain" ? "Domain" : "Platform";
+    return {
+      pluginId: e.pluginId,
+      encoded: e.encoded,
+      protocol: e.protocol,
+      apiTarget: tmp
+    };
+  });
+  return await pushApiSchema(jsSnapshot);
+}
+
+let Source;
+
+export {
+  Source,
+  moduleUrl,
+  pushApiSchema,
+  execute,
+}
+/* moduleUrl Not a pure module */

package/src/adapter/Runtime/ApiSchemaPush_Runtime.mjs

@@ -0,0 +1,197 @@
+// Runtime-pure push engine for the admin ApiSchemaPush SideEffect
+// (docs/plans/event-sourced-fragment-registries.md § Reactive writer design).
+//
+// The ApiFragmentRegistry singleton aggregate's behaviour emits ApiSchemaComputed
+// { snapshot } — the WHOLE per-plugin fragment set folded from the aggregate's own
+// consistent single-partition state after each change. The ApiSchemaPush SideEffect
+// (compiled from ApiSchemaPush.res) subscribes to that event via the aggregate's
+// DynamoDB stream (single-shard for a singleton → naturally serialized, no concurrent
+// StartSchemaCreation), and hands the snapshot here.
+//
+// This module stitches one AWS-decorated schema per target API from the snapshot
+// (identical decoration to the deploy path via the runtime-pure
+// AppSync_SdlDecorate.planAwsPushes), pushes each behind the catastrophic-shrink
+// guard, and writes the outcome back with RecordApiFragmentPush onto the
+// ApiFragmentRegistry aggregate's command topic so the deploy waiter can poll
+// Platform_ApiFragments.
+//
+// Runtime-purity discipline: NO @pulumi imports (this loads in the SideEffectHandler
+// Lambda — see reference_pulumi_leaks_into_lambda_runtime_graph). All config is read
+// from env at invocation time; the AppSync push uses the AppSync SDK directly.
+
+import { makeQueueRef, log } from "./HandlerFactoryHelpers.mjs";
+import { publishJsons as sqsPublishJsons } from "@reventlessdev/reventless-aws/src/adapter/CommandTopic/CommandTopicChannel_SQS_Runtime.res.mjs";
+import { planAwsPushes } from "@reventlessdev/reventless-aws/src/components/Api/AppSync_SdlDecorate.res.mjs";
+import {
+  countRootTypeFields,
+  isCatastrophicSchemaShrink,
+} from "@reventlessdev/reventless-core/src/components/Api/GraphQL_Stitcher.res.mjs";
+import {
+  baseFragment as adminBaseFragment,
+  systemCallerFieldNames,
+} from "@reventlessdev/reventless-core/src/admin/AdminApi.res.mjs";
+
+const COMP = "apiSchemaPush";
+
+// ── AppSync push primitives (mirror AdminEventCollectorEntryPoint.mjs) ──────────
+
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+
+// Push the SDL. Bounded retry on the AppSync API-level lock ("Schema is currently being
+// altered" / ConcurrentModification) — the legacy connect-driven mkUpdateApiSchema still
+// pushes until Plan Phase 4, and a standalone-service push can also contend. The lock
+// clears in seconds, so this is NOT the plan's rejected lagging-read retry (that had no
+// ceiling). The singleton aggregate's single-shard stream already serializes THIS writer
+// against itself; this only covers cross-writer contention.
+async function updateAppSyncSchema(apiId, sdl) {
+  const { AppSyncClient, StartSchemaCreationCommand } = await import("@aws-sdk/client-appsync");
+  const client = new AppSyncClient({});
+  const maxAttempts = 6;
+  for (let attempt = 1; ; attempt++) {
+    try {
+      await client.send(new StartSchemaCreationCommand({ apiId, definition: sdl }));
+      return;
+    } catch (e) {
+      const msg = (e && e.message) || String(e);
+      const locked = /being altered|ConcurrentModification|currently in the process/i.test(msg);
+      if (!locked || attempt >= maxAttempts) throw e;
+      const backoff = Math.min(1000 * 2 ** (attempt - 1), 8000);
+      log.warn(`schema push contended (${msg}) — retry ${attempt}/${maxAttempts} in ${backoff}ms`, { comp: COMP });
+      await sleep(backoff);
+    }
+  }
+}
+
+// Current live schema as SDL for the shrink guard. "" (not error) when the API has
+// no schema yet or introspection fails — the caller treats "" as "no baseline".
+async function getCurrentSchemaSdl(apiId) {
+  try {
+    const { AppSyncClient, GetIntrospectionSchemaCommand } = await import("@aws-sdk/client-appsync");
+    const client = new AppSyncClient({});
+    const resp = await client.send(new GetIntrospectionSchemaCommand({ apiId, format: "SDL" }));
+    if (!resp || !resp.schema) return "";
+    return Buffer.from(resp.schema).toString("utf-8");
+  } catch (e) {
+    log.warn(`could not introspect current schema (${(e && e.message) || e}) — skipping shrink guard`, { comp: COMP });
+    return "";
+  }
+}
+
+function parseShrinkThreshold(raw) {
+  const n = raw ? Number(raw) : NaN;
+  return Number.isFinite(n) && n > 0 && n < 1 ? n : 0.5;
+}
+
+// Emit the SchemaShrinkRejected CloudWatch metric via EMF (raw console.log — must
+// stay unwrapped so CloudWatch's EMF auto-detect fires).
+function emitShrinkRejectionMetric(apiId, currentRootFields, newRootFields) {
+  try {
+    // eslint-disable-next-line no-console
+    console.log(
+      JSON.stringify({
+        _aws: {
+          Timestamp: Date.now(),
+          CloudWatchMetrics: [
+            {
+              Namespace: "Reventless/Runtime",
+              Dimensions: [["ApiId"]],
+              Metrics: [{ Name: "SchemaShrinkRejected", Unit: "Count" }],
+            },
+          ],
+        },
+        ApiId: apiId,
+        SchemaShrinkRejected: 1,
+        currentRootFields,
+        newRootFields,
+      })
+    );
+  } catch {
+    // metric emission is best-effort
+  }
+}
+
+// ── Config (deploy-derived, injected as Lambda env by the admin SideEffectHandler) ──
+
+function readConfig() {
+  const na = (v) => (v && v !== "NOT_AVAILABLE" ? v : "");
+  const domainApiId = na(process.env["API_SCHEMA_PUSH_DOMAIN_API_ID"]);
+  const platformApiId = na(process.env["API_SCHEMA_PUSH_PLATFORM_API_ID"]) || domainApiId;
+  return {
+    domainApiId,
+    platformApiId,
+    splitApi: process.env["API_SCHEMA_PUSH_SPLIT_API"] === "true",
+    clonerEnabled: process.env["API_SCHEMA_PUSH_CLONER"] === "true",
+    cmdTopicUrl: na(process.env["API_SCHEMA_PUSH_CMD_TOPIC_URL"]),
+  };
+}
+
+// Write RecordApiFragmentPush back per plugin onto the ApiFragmentRegistry aggregate's
+// command topic (FIFO, singleton id="registry"). @noApi + idempotent — a no-op in the
+// aggregate behaviour if the plugin was deregistered in the meantime.
+async function recordPushOutcomes(cmdTopicUrl, pluginIds, ok, message) {
+  if (!cmdTopicUrl || pluginIds.length === 0) return;
+  const publisher = sqsPublishJsons(makeQueueRef(cmdTopicUrl), "SQS_FIFO");
+  const at = new Date().toISOString();
+  const commandJsons = pluginIds.map((pluginId) => ({
+    id: "registry",
+    meta: { service: "ApiFragmentRegistry", time: at, msgId: "pending", correlationId: pluginId },
+    commandJson: { TAG: "RecordApiFragmentPush", pluginId, ok, message, at },
+  }));
+  try {
+    await publisher(commandJsons);
+  } catch (e) {
+    log.error(`RecordApiFragmentPush dispatch failed: ${(e && e.message) || e}`, { comp: COMP });
+  }
+}
+
+// ── Entry point ────────────────────────────────────────────────────────────────
+
+// snapshot: array of { pluginId, encoded, protocol, apiTarget } — the consistent
+// registry contents after the triggering change, carried on the ApiSchemaComputed event.
+export async function pushApiSchema(snapshot) {
+  const cfg = readConfig();
+  const entries = Array.isArray(snapshot) ? snapshot.filter((e) => e && typeof e.encoded === "string" && e.encoded) : [];
+  const pluginIds = [...new Set(entries.map((e) => e.pluginId).filter((p) => typeof p === "string"))];
+  if (!cfg.cmdTopicUrl) {
+    log.warn("ApiSchemaPush: no command-topic URL configured — skipping", { comp: COMP });
+    return;
+  }
+
+  // Fragments straight from the consistent snapshot — NO eventually-consistent read.
+  const fragments = entries.map((e) => ({
+    encoded: e.encoded,
+    protocol: typeof e.protocol === "string" ? e.protocol : "graphql",
+    target: e.apiTarget === "Platform" ? "Platform" : "Domain",
+  }));
+
+  const rawAdminBase = adminBaseFragment(cfg.clonerEnabled);
+  const plans = planAwsPushes(rawAdminBase, systemCallerFieldNames, fragments, cfg.splitApi);
+
+  let ok = true;
+  let message = "";
+  for (const plan of plans) {
+    const apiId = plan.api === "PlatformApi" ? cfg.platformApiId : cfg.domainApiId;
+    if (!apiId) continue;
+    const threshold = parseShrinkThreshold(process.env["RUNTIME_SCHEMA_SHRINK_THRESHOLD"]);
+    const currentSdl = await getCurrentSchemaSdl(apiId);
+    if (isCatastrophicSchemaShrink(currentSdl, plan.sdl, threshold)) {
+      const cur = countRootTypeFields(currentSdl, "Mutation") + countRootTypeFields(currentSdl, "Query");
+      const nw = countRootTypeFields(plan.sdl, "Mutation") + countRootTypeFields(plan.sdl, "Query");
+      log.error(`ABORTED schema push for ${plan.api} (${apiId}): ${nw} root field(s) vs ${cur} live (threshold ${threshold}).`, { comp: COMP });
+      emitShrinkRejectionMetric(apiId, cur, nw);
+      ok = false;
+      message = `shrink guard aborted push for ${plan.api}`;
+      continue;
+    }
+    try {
+      await updateAppSyncSchema(apiId, plan.sdl);
+      log.info(`schema push OK: ${plan.api} (${apiId})`, { comp: COMP });
+    } catch (e) {
+      ok = false;
+      message = (e && e.message) || String(e);
+      log.error(`schema push FAILED: ${plan.api} (${apiId}): ${message}`, { comp: COMP });
+    }
+  }
+
+  await recordPushOutcomes(cfg.cmdTopicUrl, pluginIds, ok, message);
+}

package/src/adapter/Runtime/SideEffectHandlerRuntime_Builder_Single.res

@@ -15,6 +15,15 @@ let sideEffectInfos: dict<sideEffectInfo> = Dict.make()
 let registerSideEffectHandler = (~sideEffectHandlerName, ~sideEffectModulePaths) =>
   sideEffectInfos->Dict.set(sideEffectHandlerName, {sideEffectModulePaths: sideEffectModulePaths})
 
+// Extra Lambda env vars contributed by bespoke side effects (e.g. admin ApiSchemaPush).
+// The shared "AllSideEffectHandlers" Lambda is built once in finish(); all registered
+// entries are merged onto its env there. Deploy-derived config only — never overrides
+// HANDLER_CONFIG.
+let extraEnvVarsAll: dict<Pulumi.Input.t<string>> = Dict.make()
+
+let registerExtraEnv = (~extraEnvVars: dict<Pulumi.Input.t<string>>) =>
+  extraEnvVars->Dict.forEachWithKey((v, k) => extraEnvVarsAll->Dict.set(k, v))
+
 type storedSpec = {
   componentName: string,
   parentResource: Pulumi.Resource.t,
@@ -143,6 +152,12 @@ let finish = () =>
 
         let envVars: dict<Pulumi.Input.t<string>> = Dict.make()
         envVars->Dict.set("HANDLER_CONFIG", handlerConfigOutput->Pulumi.Output.asInput)
+        // Merge bespoke side-effect config (never overrides HANDLER_CONFIG).
+        extraEnvVarsAll->Dict.forEachWithKey((v, k) =>
+          if k != "HANDLER_CONFIG" {
+            envVars->Dict.set(k, v)
+          }
+        )
 
         // Build AssetArchive: static re-export + user packages
         let {code, sourceCodeHash} = Util_Bundle.buildCodeArchive(
@@ -161,6 +176,38 @@ let finish = () =>
           ~opts,
         )
 
+        // The admin ApiSchemaPush side effect (the only extra-env contributor) pushes the
+        // stitched schema to AppSync via StartSchemaCreation and reads the live schema for
+        // the shrink guard. Grant those AppSync perms to the shared side-effect-handler
+        // Lambda role ONLY when a bespoke side effect registered config — Task-only
+        // deployments keep the narrow default perimeter. Mirrors the admin EventCollector's
+        // AllowAdminStartSchemaCreation grant (PluginRuntime_Builder).
+        if extraEnvVarsAll->Dict.keysToArray->Array.length > 0 {
+          let _ = PulumiAws.IAM.RolePolicy.make(
+            ~name="AllSideEffectHandlers-appsyncSchemaPush",
+            ~args={
+              policy: PulumiAws.PolicyDocument.make(
+                ~id="AllSideEffectHandlersAppsyncSchemaPushPolicy",
+                ~statements=[
+                  {
+                    sid: "AllowSideEffectStartSchemaCreation",
+                    effect: Allow,
+                    actions: Actions([
+                      "appsync:StartSchemaCreation",
+                      "appsync:GetSchemaCreationStatus",
+                      "appsync:GetIntrospectionSchema",
+                    ]),
+                    resources: AllResources,
+                  },
+                ],
+              )
+              ->PulumiAws.PolicyDocument.toJsonString
+              ->Pulumi.Input.make,
+              role: runtime.parts.lambdaRole.id->Pulumi.Output.asInput,
+            },
+          )
+        }
+
         let channelSpecs = storedSpecs->Array.map(({channelSpec}) => channelSpec)
         let _connectResources = EventCollectorChannel.connect(
           ~name="AllSideEffectHandlers",

package/src/adapter/Runtime/SideEffectHandlerRuntime_Builder_Single.res.mjs

@@ -1,11 +1,14 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
+import * as Aws from "@pulumi/aws";
+import * as Stdlib_Dict from "@rescript/runtime/lib/es6/Stdlib_Dict.js";
 import * as Stdlib_Array from "@rescript/runtime/lib/es6/Stdlib_Array.js";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Pulumi from "@pulumi/pulumi";
 import * as Stdlib_JsError from "@rescript/runtime/lib/es6/Stdlib_JsError.js";
 import * as Logger$ReventlessCore from "@reventlessdev/reventless-core/src/util/Logger.res.mjs";
 import * as Component$ReventlessCore from "@reventlessdev/reventless-core/src/components/Component.res.mjs";
+import * as PolicyDocument$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/PolicyDocument.res.mjs";
 import * as Util_Bundle$ReventlessAws from "../../util/Util_Bundle.res.mjs";
 import * as RuntimeEnvironment_Lambda$ReventlessAws from "./RuntimeEnvironment_Lambda.res.mjs";
 import * as EventCollectorChannel_DynamoDbStream$ReventlessAws from "../EventCollector/EventCollectorChannel_DynamoDbStream.res.mjs";
@@ -20,6 +23,14 @@ function registerSideEffectHandler(sideEffectHandlerName, sideEffectModulePaths)
   };
 }
 
+let extraEnvVarsAll = {};
+
+function registerExtraEnv(extraEnvVars) {
+  Stdlib_Dict.forEachWithKey(extraEnvVars, (v, k) => {
+    extraEnvVarsAll[k] = v;
+  });
+}
+
 let storedSpecs = [];
 
 let grandParent = {
@@ -99,8 +110,29 @@ function finish() {
       let handlerConfigOutput = Pulumi.all(handlerOutputs).apply(handlers => `{"handlers":[` + handlers.join(",") + `]}`);
       let envVars = {};
       envVars["HANDLER_CONFIG"] = handlerConfigOutput;
+      Stdlib_Dict.forEachWithKey(extraEnvVarsAll, (v, k) => {
+        if (k !== "HANDLER_CONFIG") {
+          envVars[k] = v;
+          return;
+        }
+      });
       let match$1 = Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/Runtime/SideEffectEntryPoint.mjs", packageDirs, undefined);
       let runtime = RuntimeEnvironment_Lambda$ReventlessAws.makeFromCodeAsset("AllSideEffectHandlers", "Reactor", match$1.code, match$1.sourceCodeHash, envVars, match[0], match[1], undefined, undefined, undefined, undefined, undefined, opts);
+      if (Object.keys(extraEnvVarsAll).length !== 0) {
+        new (Aws.iam.RolePolicy)("AllSideEffectHandlers-appsyncSchemaPush", {
+          policy: PolicyDocument$PulumiAws.toJsonString(PolicyDocument$PulumiAws.make(undefined, "AllSideEffectHandlersAppsyncSchemaPushPolicy", [{
+              Sid: "AllowSideEffectStartSchemaCreation",
+              Effect: "Allow",
+              Action: [
+                "appsync:StartSchemaCreation",
+                "appsync:GetSchemaCreationStatus",
+                "appsync:GetIntrospectionSchema"
+              ],
+              Resource: "*"
+            }])),
+          role: runtime.parts.lambdaRole.id
+        });
+      }
       let channelSpecs = storedSpecs.map(param => param.channelSpec);
       EventCollectorChannel_DynamoDbStream$ReventlessAws.connect("AllSideEffectHandlers", channelSpecs, runtime, opts);
     } else {
@@ -120,6 +152,8 @@ export {
   log,
   sideEffectInfos,
   registerSideEffectHandler,
+  extraEnvVarsAll,
+  registerExtraEnv,
   storedSpecs,
   grandParent,
   forEventCollector,

package/src/components/SideEffectHandler_Single.res

@@ -22,6 +22,7 @@ module Make = (): ReventlessCore.SideEffectHandler.T => {
     ~resourceNaming,
     ~memorySize=?,
     ~timeout=?,
+    ~extraEnvVars=?,
     ~opts=?,
   ) => {
     let component = Inner.make(
@@ -49,6 +50,13 @@ module Make = (): ReventlessCore.SideEffectHandler.T => {
       ~sideEffectModulePaths,
     )
 
+    // Bespoke side effects (e.g. admin ApiSchemaPush) inject deploy-derived config as
+    // extra Lambda env vars, merged onto the shared side-effect-handler Lambda in finish().
+    switch extraEnvVars {
+    | Some(env) => EventCollectorRuntimeBuilder.registerExtraEnv(~extraEnvVars=env)
+    | None => ()
+    }
+
     component
   }
 }

package/src/components/SideEffectHandler_Single.res.mjs

@@ -34,10 +34,13 @@ function Make($star) {
     forEventCollector: SideEffectHandlerRuntime_Builder_Single$ReventlessAws.forEventCollector,
     finish: SideEffectHandlerRuntime_Builder_Single$ReventlessAws.finish
   });
-  let make = (name, sideEffects, allEventTopics, allCommandTopics, targets, queryEngine, scheduler, resourceNaming, memorySize, timeout, opts) => {
-    let component = Inner.make(name, sideEffects, allEventTopics, allCommandTopics, targets, queryEngine, scheduler, resourceNaming, memorySize, timeout, opts);
+  let make = (name, sideEffects, allEventTopics, allCommandTopics, targets, queryEngine, scheduler, resourceNaming, memorySize, timeout, extraEnvVars, opts) => {
+    let component = Inner.make(name, sideEffects, allEventTopics, allCommandTopics, targets, queryEngine, scheduler, resourceNaming, memorySize, timeout, undefined, opts);
     let sideEffectModulePaths = sideEffects.map(SE => Util_Bundle$ReventlessAws.getModuleSpecifier(SE.moduleUrl));
     SideEffectHandlerRuntime_Builder_Single$ReventlessAws.registerSideEffectHandler(name, sideEffectModulePaths);
+    if (extraEnvVars !== undefined) {
+      SideEffectHandlerRuntime_Builder_Single$ReventlessAws.registerExtraEnv(extraEnvVars);
+    }
     return component;
   };
   return {