@reventlessdev/reventless-aws 3.0.0-alpha.221 → 3.0.0-alpha.223

package/CHANGELOG.md

@@ -3,6 +3,37 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# 3.0.0-alpha.223 (2026-07-22)
+
+* refactor!: retire the stale "Admin" vocabulary for platform-owned resources ([2770bd9](https://github.com/ReventlessDev/reventless-core/commit/2770bd96f309142bdfc65b9f36bd1a3ef60641bd))
+
+### BREAKING CHANGES
+
+* platform-owned resources are renamed Admin* -> Platform*
+(PlatformDcbEventLog, PlatformDcbCmdTopic, PlatformEventColl). This replaces
+a DynamoDB table, an SQS queue and an SNS topic — wipe and redeploy rather
+than migrate. Both alpha AdminDcbEventLog tables held 0 items at the time of
+the rename. MCP resource URI templates change from Admin/<field>/{id} to
+Platform/<field>/{id}; MCP tool names are unaffected.
+
+
+
+# 3.0.0-alpha.222 (2026-07-22)
+
+* refactor!: retire the stale "core" vocabulary for platform things ([34e7480](https://github.com/ReventlessDev/reventless-core/commit/34e7480992bd58906a250b0a1ce6ff2c5ba45260))
+
+### BREAKING CHANGES
+
+* the built-in extension point is renamed Core.Plugin ->
+Platform.Plugin. This replaces the CorePluginExtPointCmdTopic SQS queue
+with PlatformPluginExtPointCmdTopic (a replacement, not an update) and
+breaks every already-deployed plugin's connection until redeployed.
+Wipe the alpha stack and redeploy fresh rather than migrating.
+
+Build clean; 1349 tests green (interop 50, core 518, local 501, aws 280).
+
+
+
 # 3.0.0-alpha.221 (2026-07-22)
 
 ### Features

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reventlessdev/reventless-aws",
-  "version": "3.0.0-alpha.221",
+  "version": "3.0.0-alpha.223",
   "description": "AWS adapters for Reventless",
   "license": "Apache-2.0",
   "dependencies": {
@@ -8,17 +8,17 @@
     "@aws-sdk/client-cloudfront": "3.970.0",
     "sury": "11.0.0-alpha.4",
     "uuid": "^13.0.0",
-    "@reventlessdev/rescript-effect": "0.1.0-alpha.30",
     "@reventlessdev/rescript-aws-sdk": "2.2.0-alpha.24",
+    "@reventlessdev/rescript-effect": "0.1.0-alpha.30",
     "@reventlessdev/rescript-jest": "1.0.0-alpha.9",
-    "@reventlessdev/rescript-pulumi-aws": "2.4.0-alpha.57",
     "@reventlessdev/rescript-pulumi-pulumi": "2.3.0-alpha.17",
-    "@reventlessdev/reventless-core": "3.0.0-alpha.175",
-    "@reventlessdev/reventless-infra": "3.0.0-alpha.103",
-    "@reventlessdev/reventless-postgres": "3.0.0-alpha.39",
-    "@reventlessdev/reventless-spec": "3.0.0-alpha.80",
+    "@reventlessdev/rescript-pulumi-aws": "2.4.0-alpha.57",
     "@reventlessdev/rescript-uuid": "1.1.0-alpha.17",
-    "@reventlessdev/reventless-interop": "3.0.0-alpha.28"
+    "@reventlessdev/reventless-core": "3.0.0-alpha.177",
+    "@reventlessdev/reventless-spec": "3.0.0-alpha.80",
+    "@reventlessdev/reventless-interop": "3.0.0-alpha.29",
+    "@reventlessdev/reventless-postgres": "3.0.0-alpha.41",
+    "@reventlessdev/reventless-infra": "3.0.0-alpha.104"
   },
   "devDependencies": {
     "rescript": "12.3.0",

package/src/Platform.res

@@ -154,7 +154,7 @@ module MakeWithConfig = (
   let adminSourceSdl = (): string =>
     assembleCanonicalSourceSdl(
       ~baseFragment=AppSync_Adapter.injectAwsAuthAll(
-        ReventlessCore.AdminApi.baseFragment(~cloner=Config.cloner),
+        ReventlessCore.Platform_AdminApi.baseFragment(~cloner=Config.cloner),
         ~group="Admin",
       ),
     )
@@ -234,7 +234,7 @@ module MakeWithConfig = (
 
   // Populate apiConfig with both domain and platform API references.
   // In platform/monolithic mode, platformApi starts as domainApi and is updated
-  // by deployPlatform/makePlatform once the core API resource is created (split mode).
+  // by deployPlatform/makePlatform once the platform API resource is created (split mode).
   let () = apiConfigRef := Some({
     domainApi: domainApi,
     domainApiRole: domainApiRole,
@@ -850,7 +850,7 @@ module MakeWithConfig = (
   // admin-prefixed `Platform_Plugin` / `Platform_Plugins` SDL fields declared by
   // PluginBaseFragment.queryEntries. Field-name alignment is handled by the
   // queryFieldNamesRegistry entries that Platform_Admin.construct populates
-  // from AdminApi.queryEntries before this builder runs.
+  // from Platform_AdminApi.queryEntries before this builder runs.
   module PluginReadModel = ReadModel_Builder_Single_Stream.Make(
     ReventlessCore.PluginsReadModelSpec,
     PluginReadModelMappings,
@@ -980,7 +980,7 @@ module MakeWithConfig = (
     }
   }
 
-  // In split mode, create a dedicated core AppSync API and push the core schema.
+  // In split mode, create a dedicated platform AppSync API and push the platform schema.
   // In unified mode, makePlatform is a no-op (schema stitching handled by events).
   let makePlatform = (~version, ~plugins: array<module(PluginMaker)>) => {
     log.info(~comp="Platform", `v${version}`)
@@ -1124,7 +1124,7 @@ module MakeWithConfig = (
 
     module PluginExtensionPoint = Plugin_ExtensionPoint_Builder.MakeWithConfig({
       // Cross-plugin SNS subscription management runs in the bundled
-      // AdminEventCollector Lambda (AdminEventCollectorEntryPoint.mjs), not in
+      // AdminEventCollector Lambda (EventCollectorEntryPoint.mjs), not in
       // this deploy-time EP Lambda — which only handles incoming commands
       // (Heartbeat, ForwardCommand). None here keeps the deploy-time path
       // unchanged; the .mjs entry point supplies a real implementation.

package/src/Platform.res.mjs

@@ -15,7 +15,6 @@ import * as Primitive_option from "@rescript/runtime/lib/es6/Primitive_option.js
 import * as Plugin$ReventlessAws from "./components/Plugin.res.mjs";
 import * as Logger$ReventlessCore from "@reventlessdev/reventless-core/src/util/Logger.res.mjs";
 import * as Message$ReventlessCore from "@reventlessdev/reventless-core/src/Message.res.mjs";
-import * as AdminApi$ReventlessCore from "@reventlessdev/reventless-core/src/admin/AdminApi.res.mjs";
 import * as Scheduler$ReventlessAws from "./components/Scheduler.res.mjs";
 import * as Aggregate$ReventlessCore from "@reventlessdev/reventless-core/src/components/Aggregate/Aggregate.res.mjs";
 import * as Component$ReventlessCore from "@reventlessdev/reventless-core/src/components/Component.res.mjs";
@@ -44,6 +43,7 @@ import * as NoEventMappings$ReventlessInfra from "@reventlessdev/reventless-infr
 import * as Util_HostUiDomain$ReventlessAws from "./util/Util_HostUiDomain.res.mjs";
 import * as DcbEventLogStorage$ReventlessAws from "./adapter/DcbEventLog/DcbEventLogStorage.res.mjs";
 import * as ExtensionMapping$ReventlessInfra from "@reventlessdev/reventless-infra/src/types/ExtensionMapping.res.mjs";
+import * as Platform_AdminApi$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_AdminApi.res.mjs";
 import * as PluginsProjection$ReventlessCore from "@reventlessdev/reventless-core/src/plugin/lifecycle/PluginsProjection.res.mjs";
 import * as StateTopic_AppSync$ReventlessAws from "./adapter/StateTopic/StateTopic_AppSync.res.mjs";
 import * as AppSync_SdlDecorate$ReventlessAws from "./components/Api/AppSync_SdlDecorate.res.mjs";
@@ -148,7 +148,7 @@ function MakeWithConfig(Config) {
     subscriptionSources: []
   });
   let adminSourceSdl = () => {
-    let baseFragment = AppSync_Adapter$ReventlessAws.injectAwsAuthAll(AdminApi$ReventlessCore.baseFragment(Config.cloner), "Admin", undefined);
+    let baseFragment = AppSync_Adapter$ReventlessAws.injectAwsAuthAll(Platform_AdminApi$ReventlessCore.baseFragment(Config.cloner), "Admin", undefined);
     return AppSync_SdlDecorate$ReventlessAws.stampCanonicalTypes(AppSync_Adapter$ReventlessAws.stitchStandaloneWithAwsDirectives(baseFragment));
   };
   let match;
@@ -1123,7 +1123,7 @@ function Make($star) {
     subscriptionSources: []
   });
   let adminSourceSdl = () => {
-    let baseFragment = AppSync_Adapter$ReventlessAws.injectAwsAuthAll(AdminApi$ReventlessCore.baseFragment(false), "Admin", undefined);
+    let baseFragment = AppSync_Adapter$ReventlessAws.injectAwsAuthAll(Platform_AdminApi$ReventlessCore.baseFragment(false), "Admin", undefined);
     return AppSync_SdlDecorate$ReventlessAws.stampCanonicalTypes(AppSync_Adapter$ReventlessAws.stitchStandaloneWithAwsDirectives(baseFragment));
   };
   let match;

package/src/adapter/CommandGenerator/CommandGeneratorResolvers_AppSync.res

@@ -190,7 +190,7 @@ let makeDcb = (
   ~fieldNames: array<string>,
   ~tags: array<string>,
   // Admin (onAdminApi) DCB slices expose ONLY their mutation fields (declared in the
-  // static AdminApi.baseFragment). The static base does NOT declare their `on<Field>`
+  // static Platform_AdminApi.baseFragment). The static base does NOT declare their `on<Field>`
   // subscription counterparts, so creating Source-C subscription resolvers would fail
   // with CreateResolver NotFound. Suppress subscriptions for admin; plugins keep them
   // (their generated fragment declares the matching subscription fields).

package/src/adapter/Mcp/MCP_Lambda.res

@@ -102,11 +102,11 @@ let generateConfig = (
   {serverName, serverVersion, tools, resources, eventHistoryResources}
 }
 
-/** Generate the core-only MCP config for split mode.
-    Contains only core administrative tools (Plugin_Activate, Plugin_Deactivate, Clone)
-    and core resources (Plugin, Plugins). No plugin-contributed entries.
+/** Generate the platform-only MCP config for split mode.
+    Contains only platform administrative tools (Plugin_Activate, Plugin_Deactivate, Clone)
+    and platform resources (Plugin, Plugins). No plugin-contributed entries.
 
-    The commandTopicArns and queryDbTableNames must map core field names to their
+    The commandTopicArns and queryDbTableNames must map platform field names to their
     corresponding AWS resource ARNs/names. When Lambda Function URL deployment is
     available (Step 13), these will be wired from Pulumi stack outputs. */
 let generateAdminConfig = (
@@ -119,8 +119,10 @@ let generateAdminConfig = (
   generateConfig(
     ~serverName=`${serverName}-admin`,
     ~serverVersion,
-    ~pluginName="Admin",
-    ~mutationEntries=ReventlessCore.AdminApi.mutationEntries(~cloner),
+    // Must match what Platform_Admin.construct registers — it forms the resource URI
+    // templates (`<pluginName>/<field>/{id}`) that MCP clients address.
+    ~pluginName=ReventlessCore.Platform_Admin_Structure.pluginId,
+    ~mutationEntries=ReventlessCore.Platform_AdminApi.mutationEntries(~cloner),
     ~queryEntries=ReventlessCore.PluginBaseFragment.queryEntries,
     ~commandTopicArns,
     ~queryDbTableNames,

package/src/adapter/Mcp/MCP_Lambda.res.mjs

@@ -11,11 +11,12 @@ import * as Primitive_option from "@rescript/runtime/lib/es6/Primitive_option.js
 import * as AWS$ReventlessAws from "../AWS.res.mjs";
 import * as Identity$Reventless from "@reventlessdev/reventless-spec/src/types/Identity.res.mjs";
 import * as Runtime$ReventlessCore from "@reventlessdev/reventless-core/src/adapter/Runtime/Runtime.res.mjs";
-import * as AdminApi$ReventlessCore from "@reventlessdev/reventless-core/src/admin/AdminApi.res.mjs";
 import * as DynamoDb_Error$ReventlessAws from "../../errors/DynamoDb_Error.res.mjs";
+import * as Platform_AdminApi$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_AdminApi.res.mjs";
 import * as PluginBaseFragment$ReventlessCore from "@reventlessdev/reventless-core/src/plugin/api/PluginBaseFragment.res.mjs";
 import * as MCP_SchemaGenerator$ReventlessCore from "@reventlessdev/reventless-core/src/components/Api/MCP_SchemaGenerator.res.mjs";
 import * as Util_DynamoDb_Runtime$ReventlessAws from "../../util/Util_DynamoDb_Runtime.res.mjs";
+import * as Platform_Admin_Structure$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_Admin_Structure.res.mjs";
 import * as DcbEventLogStorage_DynamoDb_Runtime$ReventlessAws from "../DcbEventLog/DcbEventLogStorage_DynamoDb_Runtime.res.mjs";
 import * as CommandTopicChannel_SQS_RuntimeResMjs from "@reventlessdev/reventless-aws/src/adapter/CommandTopic/CommandTopicChannel_SQS_Runtime.res.mjs";
 import * as CommandGenerator_CallbackResMjs from "@reventlessdev/reventless-core/src/components/CommandGenerator/CommandGenerator_Callback.res.mjs";
@@ -69,7 +70,7 @@ function generateAdminConfig(serverName, serverVersion, clonerOpt, commandTopicA
   let cloner = clonerOpt !== undefined ? clonerOpt : false;
   let commandTopicArns = commandTopicArnsOpt !== undefined ? commandTopicArnsOpt : ({});
   let queryDbTableNames = queryDbTableNamesOpt !== undefined ? queryDbTableNamesOpt : ({});
-  return generateConfig(serverName + `-admin`, serverVersion, "Admin", AdminApi$ReventlessCore.mutationEntries(cloner), PluginBaseFragment$ReventlessCore.queryEntries, undefined, commandTopicArns, queryDbTableNames, undefined);
+  return generateConfig(serverName + `-admin`, serverVersion, Platform_Admin_Structure$ReventlessCore.pluginId, Platform_AdminApi$ReventlessCore.mutationEntries(cloner), PluginBaseFragment$ReventlessCore.queryEntries, undefined, commandTopicArns, queryDbTableNames, undefined);
 }
 
 function extractEntityId(uri) {

package/src/adapter/Postgres/PgChangeFeedRelay_Runtime.res

@@ -2,7 +2,7 @@
 //
 // Drains a Postgres DCB log via `PgChangeFeed` and pushes each event — transformed
 // into the `{id, meta, event}` shape the plugin EventCollector SQS handler
-// consumes — onto that queue. The plugin EventCollector (`AdminEventCollectorEntryPoint`)
+// consumes — onto that queue. The plugin EventCollector (`EventCollectorEntryPoint`)
 // then drives the full fan-out: read-model projections, aggregate command topics,
 // and the cross-plugin SNS EventTopic. See
 // docs/plans/aws-postgres-change-feed-bridge.md.

package/src/adapter/Runtime/{AdminEventCollectorEntryPoint.mjs → EventCollectorEntryPoint.mjs}

@@ -1,12 +1,12 @@
-// Plugin EventCollector Lambda entry point — shared between the admin and every
-// per-plugin EventCollector Lambda. Despite the historical "Admin" filename, this
-// module is plugin-agnostic: behaviour is driven entirely by HANDLER_CONFIG.
+// Plugin EventCollector Lambda entry point — shared between the platform and every
+// per-plugin EventCollector Lambda. This module is plugin-agnostic: behaviour is
+// driven entirely by HANDLER_CONFIG.
 //
 // HANDLER_CONFIG schema (JSON in env var "HANDLER_CONFIG"):
 //
 // {
 //   "queueUrl":                       string  // SQS URL of the EventCollector this Lambda drains
-//   "pluginExtensionPointCmdTopicUrl":string  // SQS URL of CorePluginExtPoint cmd topic (admin's Plugin EP)
+//   "pluginExtensionPointCmdTopicUrl":string  // SQS URL of PlatformPluginExtPoint cmd topic (admin's Plugin EP)
 //   "eventTopicArn":                  string  // SNS ARN the EP's outgoing events publish to ("NOT_AVAILABLE" if none)
 //   "pluginReadModelTableName":       string  // DynamoDB table for Plugin RM (used by QueryEngine.scan)
 //   "pluginSchemaPersistenceTableName":string // DynamoDB table holding deploy-time SDL fragments
@@ -30,7 +30,7 @@
 //   "connectExtension": {                      // The auto-included PluginConnectExtension entry; null for admin Lambda
 //     "specModule":         string,
 //     "mappingsModule":     string,
-//     "extensionPointName": string             // service key for incomingConnectExtensionEventHandlers (e.g. "Core.Plugin")
+//     "extensionPointName": string             // service key for incomingConnectExtensionEventHandlers (e.g. "Platform.Plugin")
 //   } | null,
 //   "extensions": [                            // User-declared extensions — wired into incoming/outgoing dicts at cold start
 //     {
@@ -411,7 +411,7 @@ function loadUiFragments() {
 // Cross-plugin spec packages (e.g. "@reventlessdev/online-shop-hybrid-catalog-spec")
 // are bundled into the function asset under /var/task/node_modules/ by
 // PluginRuntime_Builder.forPluginEventCollector. This entry-point file, however,
-// lives in the Lambda LAYER at /opt/nodejs/node_modules/.../AdminEventCollectorEntryPoint.mjs,
+// lives in the Lambda LAYER at /opt/nodejs/node_modules/.../EventCollectorEntryPoint.mjs,
 // so a bare `await import("@reventlessdev/online-shop-hybrid-catalog-spec/...")`
 // from here resolves through /opt/nodejs/node_modules/ and never reaches the
 // function asset. Anchoring createRequire at file:///var/task/index.mjs makes
@@ -585,7 +585,7 @@ async function buildHandler() {
   // it through ExtensionMapping.Make, and build per-extension Extension_Operations.
   const userExtensionHandlers = await Promise.all(config.extensions.map(async (ext) => {
     if (!ext.specModule || !ext.mappingsModule || !ext.delegateModule) {
-      log.warn("extension '" + ext.name + "' missing module specifier(s); skipping. specModule=" + ext.specModule + ", mappingsModule=" + ext.mappingsModule + ", delegateModule=" + ext.delegateModule, { comp: "AdminEventCollectorEntryPoint" });
+      log.warn("extension '" + ext.name + "' missing module specifier(s); skipping. specModule=" + ext.specModule + ", mappingsModule=" + ext.mappingsModule + ", delegateModule=" + ext.delegateModule, { comp: "EventCollectorEntryPoint" });
       return null;
     }
     const epSpec = patchSpecId(await importFromAsset(ext.specModule));

package/src/components/Api/AppSync_SdlDecorate.res

@@ -7,7 +7,7 @@
 // STITCHED schema at push time — the additive counterpart of the neutral
 // emission, mirroring how `injectAwsAuthAll`/`stampSharedIamTypes` decorate
 // auth. Runtime-pure so the bundled Lambda entry points
-// (AdminEventCollectorEntryPoint.mjs) can import it without dragging
+// (EventCollectorEntryPoint.mjs) can import it without dragging
 // deploy-time dependencies into the runtime module graph.
 
 /**

package/src/plugin/cloner/ClonerRunner_Fargate.res

@@ -375,7 +375,7 @@ export function response(ctx) {
 }
 `->Pulumi.Input.make
 
-      let field = ReventlessCore.AdminApi.cloneMutationEntry.fieldNames->Array.getUnsafe(0)
+      let field = ReventlessCore.Platform_AdminApi.cloneMutationEntry.fieldNames->Array.getUnsafe(0)
       let resolver = AppSync_Resolver_Retrying.makeUnitJsResolver(
         ~name=field,
         ~api,

package/src/plugin/cloner/ClonerRunner_Fargate.res.mjs

@@ -11,11 +11,11 @@ import * as AWS$ReventlessAws from "../../adapter/AWS.res.mjs";
 import * as Cloner$ReventlessCore from "@reventlessdev/reventless-core/src/components/Cloner.res.mjs";
 import * as AWS_Tags$ReventlessAws from "../../adapter/AWS_Tags.res.mjs";
 import * as Util_Vpc$ReventlessAws from "../../util/Util_Vpc.res.mjs";
-import * as AdminApi$ReventlessCore from "@reventlessdev/reventless-core/src/admin/AdminApi.res.mjs";
 import * as PolicyDocument$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/PolicyDocument.res.mjs";
 import * as Util_Bundle$ReventlessAws from "../../util/Util_Bundle.res.mjs";
 import * as GetSecretVersion$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/SecretsManager/GetSecretVersion.res.mjs";
 import * as Util_AppSync$ReventlessAws from "../../util/Util_AppSync.res.mjs";
+import * as Platform_AdminApi$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_AdminApi.res.mjs";
 import * as AppSync_Resolver_Retrying$ReventlessAws from "../../adapter/Api/AppSync_Resolver_Retrying.res.mjs";
 
 function make(name, api, fullQualifiedStackName, reventlessCiSecretUrn, secretUrns, opts) {
@@ -226,7 +226,7 @@ export const handler = async (event) => {
       },
       serviceRoleArn: dataSourceRole.arn
     }, opts);
-    let field = AdminApi$ReventlessCore.cloneMutationEntry.fieldNames[0];
+    let field = Platform_AdminApi$ReventlessCore.cloneMutationEntry.fieldNames[0];
     let resolver = AppSync_Resolver_Retrying$ReventlessAws.makeUnitJsResolver(field, api, dataSource.name, "Mutation", field, `import { util } from '@aws-appsync/utils';
 export function request(ctx) {
   return {

package/src/plugin/heartbeat/HeartbeatRunner_CloudWatchEvents.res

@@ -14,7 +14,7 @@ let make: ReventlessCore.Heartbeat_Adapter.runnerMaker<runtimeParts> = (
     EventRule.make(
       ~name=Pulumi.Pulumi.getStackName() ++ ("-" ++ name),
       ~args={
-        description: "Send a heartbeat to the Core Plugin ExtensionPoint"->Pulumi.Input.make,
+        description: "Send a heartbeat to the Platform Plugin ExtensionPoint"->Pulumi.Input.make,
         scheduleExpression: EventRule.ScheduleExpression.every(timeout->Minutes),
         tags: AWS.Tags.make(
           ~name=Pulumi.Pulumi.getStackName() ++ ("-" ++ name),
@@ -29,14 +29,14 @@ let make: ReventlessCore.Heartbeat_Adapter.runnerMaker<runtimeParts> = (
 
   let lambda = runtime.parts.lambda
   let lambdaRole = runtime.parts.lambdaRole
-  let coreSqsQueue = remoteChannel.resources->Util_SQS.findResolvedResource
+  let platformSqsQueue = remoteChannel.resources->Util_SQS.findResolvedResource
 
-  // Grant sqs:SendMessage on the Core Plugin ExtensionPoint command topic at
-  // TOP LEVEL. Previously this RolePolicy was created inside the
+  // Grant sqs:SendMessage on the Platform Plugin ExtensionPoint command topic
+  // at TOP LEVEL. Previously this RolePolicy was created inside the
   // `Pulumi.Output.apply` below — and a resource created inside an apply
   // callback does not reliably register with the engine, which intermittently
-  // left the heartbeat Lambda without this grant (IAM AccessDenied:
-  // `sqs:sendmessage on CorePluginExtPointCmdTopic`). `coreSqsQueue.urn` is an
+  // left the heartbeat Lambda without this grant (IAM AccessDenied on the
+  // extension point's command-topic queue). `platformSqsQueue.urn` is an
   // already-resolved ARN string from the remote channel and `lambdaRole.id` an
   // Output, so neither needs an apply. Mirrors the EC `pta` grant fix — see
   // docs/analysis/ec-publish-to-aggregates-grant-broken.md.
@@ -48,7 +48,7 @@ let make: ReventlessCore.Heartbeat_Adapter.runnerMaker<runtimeParts> = (
           sid: "AllowLambdaToSendSQS",
           effect: Allow,
           actions: Action("sqs:SendMessage"),
-          resources: Resource(coreSqsQueue.urn),
+          resources: Resource(platformSqsQueue.urn),
         },
       ],
     )

package/src/plugin/heartbeat/HeartbeatRunner_CloudWatchEvents.res.mjs

@@ -20,7 +20,7 @@ import * as Cloudwatch_EventTarget$PulumiAws from "@reventlessdev/rescript-pulum
 function make(name, remoteChannel, timeout, runtime, opts) {
   let opts$1 = Util_Pulumi$ReventlessCore.ComponentResourceOptions.toCustomResourceOptions(opts);
   let cloudwatchEventRule = new (Aws.cloudwatch.EventRule)(Pulumi.getStack() + ("-" + name), {
-    description: "Send a heartbeat to the Core Plugin ExtensionPoint",
+    description: "Send a heartbeat to the Platform Plugin ExtensionPoint",
     scheduleExpression: Primitive_option.some(Cloudwatch_EventRule$PulumiAws.ScheduleExpression.every({
       TAG: "Minutes",
       _0: timeout
@@ -29,12 +29,12 @@ function make(name, remoteChannel, timeout, runtime, opts) {
   }, opts$1);
   let lambda = runtime.parts.lambda;
   let lambdaRole = runtime.parts.lambdaRole;
-  let coreSqsQueue = Util_SQS$ReventlessAws.findResolvedResource(remoteChannel.resources);
+  let platformSqsQueue = Util_SQS$ReventlessAws.findResolvedResource(remoteChannel.resources);
   let heartbeatLambdaSendMessagePolicyDocument = PolicyDocument$PulumiAws.make(undefined, undefined, [{
       Sid: "AllowLambdaToSendSQS",
       Effect: "Allow",
       Action: "sqs:SendMessage",
-      Resource: coreSqsQueue.urn
+      Resource: platformSqsQueue.urn
     }]);
   new (Aws.iam.RolePolicy)(name + "RolePolicy", {
     policy: PolicyDocument$PulumiAws.mergePolicyDocuments(name + "Policy", [

package/src/plugin/runtime/PluginRuntime_Builder.res

@@ -118,7 +118,7 @@ let registerConfig = (
 
 // PluginRuntime_Builder is a functor so that the caller can inject the EventCollectorChannel
 // implementation. All other runtime builders hardcode EventCollectorChannel.DynamoDbStream, but
-// the Plugin admin handler (AdminEventCollectorEntryPoint) is shared across DCB and aggregate
+// the Plugin admin handler (EventCollectorEntryPoint) is shared across DCB and aggregate
 // plugins which may use different event log backends. The functor keeps the builder generic
 // while the concrete instantiation picks the right channel at the platform level.
 module Make = (
@@ -151,9 +151,11 @@ module Make = (
   let synthesizeAdminContext = (): ReventlessCore.Plugin_Helpers.eventCollectorContext => {
     let config = configRef.contents
     // Stable JSON literal — matches Reventless.Plugin.pluginDefinitionSchema
-    // (optional fields encoded as null via js_nullable).
+    // (optional fields encoded as null via js_nullable). Must stay byte-aligned with
+    // the ReScript-built twin in `Platform_Admin.construct`'s `fakePluginDefinition`.
+    let platformId = ReventlessCore.Platform_Admin_Structure.pluginId
     let fakePluginDefinitionJson =
-      `{"id":"Admin@INTERNAL","name":"Admin","version":"INTERNAL","extensionPoints":[],"extensions":[],"eventCollector":"NOT-SET","extensionProtocols":[],"apiSchemaFragment":null,"apiTarget":null,"structure":null}`->Pulumi.Output.make
+      `{"id":"${platformId}@INTERNAL","name":"${platformId}","version":"INTERNAL","extensionPoints":[],"extensions":[],"eventCollector":"NOT-SET","extensionProtocols":[],"apiSchemaFragment":null,"apiTarget":null,"structure":null}`->Pulumi.Output.make
     let adminEpEventTopicArn = switch config.eventTopicArn {
     | Some(arn) => arn
     | None => Pulumi.Output.make("NOT_AVAILABLE")
@@ -436,7 +438,7 @@ module Make = (
       [ext.specModule, ext.mappingsModule, ext.delegateModule]->Array.forEach(addPackageFor)
     })
     // Outgoing EPs: the entry point dynamic-imports ep.specModule and
-    // ep.mappingsModule at cold start (AdminEventCollectorEntryPoint.mjs).
+    // ep.mappingsModule at cold start (EventCollectorEntryPoint.mjs).
     // Without this walk the EP spec package (e.g. <plugin>-spec) is missing
     // from the asset zip even though HANDLER_CONFIG references it, and the
     // Lambda crashes with MODULE_NOT_FOUND before any event is processed.
@@ -484,7 +486,9 @@ module Make = (
         // extension can emit RegisterUiFragment in the handshake answer.
         extraStringAssets->Dict.set("uiFragments.json", uiFragmentsJson)
         Util_Bundle.buildCodeArchive(
-          ~entryPointModule="@reventlessdev/reventless-aws/src/adapter/Runtime/AdminEventCollectorEntryPoint.mjs",
+          // Path string, not a module reference — a rename that misses this stays green
+          // at build time and fails at bundle time or Lambda cold start.
+          ~entryPointModule="@reventlessdev/reventless-aws/src/adapter/Runtime/EventCollectorEntryPoint.mjs",
           ~packageDirs,
           ~extraStringAssets,
         )
@@ -608,7 +612,7 @@ module Make = (
 
     // Plugin EC sqs:SendMessage grants on the aggregate / StateChangeSlice
     // command-topic queues that user extensions publish to. The default
-    // AllowLambdaSendSQS only covers CorePluginExtPointCmdTopic (added because
+    // AllowLambdaSendSQS only covers PlatformPluginExtPointCmdTopic (added because
     // the auto-included Connect extension publishes there), so without this
     // grant every cross-plugin extension's first command publish fails with
     // IAM AccessDenied (e.g. Catalog's Orders_Extension → RecordProductDemand).

package/src/plugin/runtime/PluginRuntime_Builder.res.mjs

@@ -15,6 +15,7 @@ import * as ComponentType$ReventlessCore from "@reventlessdev/reventless-core/sr
 import * as EventCollector$ReventlessCore from "@reventlessdev/reventless-core/src/components/EventCollector/EventCollector.res.mjs";
 import * as EventLogBackend$ReventlessAws from "../../adapter/EventLog/EventLogBackend.res.mjs";
 import * as Plugin_Helpers$ReventlessCore from "@reventlessdev/reventless-core/src/plugin/component/Plugin_Helpers.res.mjs";
+import * as Platform_Admin_Structure$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_Admin_Structure.res.mjs";
 import * as RuntimeEnvironment_Lambda$ReventlessAws from "../../adapter/Runtime/RuntimeEnvironment_Lambda.res.mjs";
 import * as StateChangeSliceRuntime_Builder_Single$ReventlessAws from "../../adapter/Runtime/StateChangeSliceRuntime_Builder_Single.res.mjs";
 
@@ -132,7 +133,7 @@ function Make(EventCollectorChannel) {
   };
   let synthesizeAdminContext = () => {
     let config = configRef.contents;
-    let fakePluginDefinitionJson = Pulumi.output(`{"id":"Admin@INTERNAL","name":"Admin","version":"INTERNAL","extensionPoints":[],"extensions":[],"eventCollector":"NOT-SET","extensionProtocols":[],"apiSchemaFragment":null,"apiTarget":null,"structure":null}`);
+    let fakePluginDefinitionJson = Pulumi.output(`{"id":"` + Platform_Admin_Structure$ReventlessCore.pluginId + `@INTERNAL","name":"` + Platform_Admin_Structure$ReventlessCore.pluginId + `","version":"INTERNAL","extensionPoints":[],"extensions":[],"eventCollector":"NOT-SET","extensionProtocols":[],"apiSchemaFragment":null,"apiTarget":null,"structure":null}`);
     let arn = config.eventTopicArn;
     let adminEpEventTopicArn = arn !== undefined ? arn : Pulumi.output("NOT_AVAILABLE");
     return {
@@ -306,7 +307,7 @@ function Make(EventCollectorChannel) {
       let extraStringAssets = {};
       extraStringAssets["pluginDefinition.json"] = param[0];
       extraStringAssets["uiFragments.json"] = param[1];
-      return Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/Runtime/AdminEventCollectorEntryPoint.mjs", packageDirs, extraStringAssets);
+      return Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/Runtime/EventCollectorEntryPoint.mjs", packageDirs, extraStringAssets);
     });
     let codeOutput = bundleOutput.apply(b => b.code);
     let sourceCodeHashOutput = bundleOutput.apply(b => b.sourceCodeHash);

package/tests/AppSync_AdapterTest.res

@@ -23,7 +23,7 @@ let decodeFragment = (fragment: Reventless.Plugin.apiSchemaFragment) =>
   ReventlessCore.GraphQL_Stitcher.decode(fragment)
 
 describe("AppSync_Adapter.injectAwsAuthAll", () => {
-  let baseFragment = ReventlessCore.AdminApi.baseFragment(~cloner=true)
+  let baseFragment = ReventlessCore.Platform_AdminApi.baseFragment(~cloner=true)
 
   testSync("adds @aws_auth directive to all mutation fields", () => {
     let augmented = AppSync_Adapter.injectAwsAuthAll(baseFragment, ~group="Admin")
@@ -86,10 +86,10 @@ describe("AppSync_Adapter.injectAwsAuth", () => {
   testSync("injects auth only on entries with authorization", () => {
     // Build a fragment with known entries
     let mutationEntries: array<ReventlessInfra.Api.mutationSchemaEntry> =
-      ReventlessCore.AdminApi.mutationEntries(~cloner=false)
+      ReventlessCore.Platform_AdminApi.mutationEntries(~cloner=false)
     let queryEntries = ReventlessCore.PluginBaseFragment.queryEntries
 
-    let baseFragment = ReventlessCore.AdminApi.baseFragment(~cloner=false)
+    let baseFragment = ReventlessCore.Platform_AdminApi.baseFragment(~cloner=false)
     let augmented = AppSync_Adapter.injectAwsAuth(
       baseFragment,
       ~mutationEntries,
@@ -111,7 +111,7 @@ describe("AppSync_Adapter.injectAwsAuth", () => {
 
 describe("AppSync_Adapter.generateFragment", () => {
   testSync("produces fragment with auth directives from entries", () => {
-    let mutationEntries = ReventlessCore.AdminApi.mutationEntries(~cloner=false)
+    let mutationEntries = ReventlessCore.Platform_AdminApi.mutationEntries(~cloner=false)
     let queryEntries = ReventlessCore.PluginBaseFragment.queryEntries
 
     let fragment = AppSync_Adapter.generateFragment(~mutationEntries, ~queryEntries)
@@ -570,7 +570,7 @@ describe("AppSync_Adapter — type-level dual-auth", () => {
 })
 
 describe("AppSync_Adapter.injectAwsAuthAll — ~iamFieldNames", () => {
-  let baseFragment = ReventlessCore.AdminApi.baseFragment(~cloner=true)
+  let baseFragment = ReventlessCore.Platform_AdminApi.baseFragment(~cloner=true)
 
   testSync("marks only the named field dual-auth, leaving others single-mode", () => {
     // Pick a real mutation field name from the admin base fragment.
@@ -644,7 +644,7 @@ describe("Split mode — empty base fragment", () => {
   })
 
   testSync("stitching admin base without plugins produces only admin fields", () => {
-    let adminBase = ReventlessCore.AdminApi.baseFragment(~cloner=false)
+    let adminBase = ReventlessCore.Platform_AdminApi.baseFragment(~cloner=false)
     let sdl = ReventlessCore.GraphQL_Stitcher.stitch(
       ~baseFragment=adminBase,
       ~pluginFragments=[],
@@ -678,7 +678,7 @@ describe("Merged mode — canonical source documents", () => {
 
   let adminSourceSdl = assembleCanonicalSourceSdl(
     ~baseFragment=AppSync_Adapter.injectAwsAuthAll(
-      ReventlessCore.AdminApi.baseFragment(~cloner=false),
+      ReventlessCore.Platform_AdminApi.baseFragment(~cloner=false),
       ~group="Admin",
     ),
   )

package/tests/AppSync_AdapterTest.res.mjs

@@ -5,9 +5,9 @@ import * as Stdlib_JsExn from "@rescript/runtime/lib/es6/Stdlib_JsExn.js";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Stdlib_JsError from "@rescript/runtime/lib/es6/Stdlib_JsError.js";
 import * as Primitive_exceptions from "@rescript/runtime/lib/es6/Primitive_exceptions.js";
-import * as AdminApi$ReventlessCore from "@reventlessdev/reventless-core/src/admin/AdminApi.res.mjs";
 import * as AppSync_Adapter$ReventlessAws from "../src/components/Api/AppSync_Adapter.res.mjs";
 import * as GraphQL_Stitcher$ReventlessCore from "@reventlessdev/reventless-core/src/components/Api/GraphQL_Stitcher.res.mjs";
+import * as Platform_AdminApi$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_AdminApi.res.mjs";
 import * as AppSync_SdlDecorate$ReventlessAws from "../src/components/Api/AppSync_SdlDecorate.res.mjs";
 import * as PluginBaseFragment$ReventlessCore from "@reventlessdev/reventless-core/src/plugin/api/PluginBaseFragment.res.mjs";
 
@@ -28,7 +28,7 @@ globalThis.describe("AppSync_Adapter.sha256Hex", () => {
 let decodeFragment = GraphQL_Stitcher$ReventlessCore.decode;
 
 globalThis.describe("AppSync_Adapter.injectAwsAuthAll", () => {
-  let baseFragment = AdminApi$ReventlessCore.baseFragment(true);
+  let baseFragment = Platform_AdminApi$ReventlessCore.baseFragment(true);
   globalThis.test("adds @aws_auth directive to all mutation fields", () => {
     let augmented = AppSync_Adapter$ReventlessAws.injectAwsAuthAll(baseFragment, "Admin", undefined);
     let parts = GraphQL_Stitcher$ReventlessCore.decode(augmented);
@@ -77,8 +77,8 @@ globalThis.describe("AppSync_Adapter.injectAwsAuthAll", () => {
 
 globalThis.describe("AppSync_Adapter.injectAwsAuth", () => {
   globalThis.test("injects auth only on entries with authorization", () => {
-    let mutationEntries = AdminApi$ReventlessCore.mutationEntries(false);
-    let baseFragment = AdminApi$ReventlessCore.baseFragment(false);
+    let mutationEntries = Platform_AdminApi$ReventlessCore.mutationEntries(false);
+    let baseFragment = Platform_AdminApi$ReventlessCore.baseFragment(false);
     let augmented = AppSync_Adapter$ReventlessAws.injectAwsAuth(baseFragment, mutationEntries, PluginBaseFragment$ReventlessCore.queryEntries);
     let parts = GraphQL_Stitcher$ReventlessCore.decode(augmented);
     let queryWithAuth = PluginBaseFragment$ReventlessCore.queryEntries.some(entry => Stdlib_Option.isSome(entry.authorization));
@@ -92,7 +92,7 @@ globalThis.describe("AppSync_Adapter.injectAwsAuth", () => {
 
 globalThis.describe("AppSync_Adapter.generateFragment", () => {
   globalThis.test("produces fragment with auth directives from entries", () => {
-    let mutationEntries = AdminApi$ReventlessCore.mutationEntries(false);
+    let mutationEntries = Platform_AdminApi$ReventlessCore.mutationEntries(false);
     let fragment = AppSync_Adapter$ReventlessAws.generateFragment(mutationEntries, PluginBaseFragment$ReventlessCore.queryEntries);
     let parts = GraphQL_Stitcher$ReventlessCore.decode(fragment);
     globalThis.expect(parts.types.length).toBeGreaterThan(0);
@@ -536,7 +536,7 @@ globalThis.describe("AppSync_Adapter — type-level dual-auth", () => {
 });
 
 globalThis.describe("AppSync_Adapter.injectAwsAuthAll — ~iamFieldNames", () => {
-  let baseFragment = AdminApi$ReventlessCore.baseFragment(true);
+  let baseFragment = Platform_AdminApi$ReventlessCore.baseFragment(true);
   globalThis.test("marks only the named field dual-auth, leaving others single-mode", () => {
     let firstMutationName = GraphQL_Stitcher$ReventlessCore.extractLeadingName(GraphQL_Stitcher$ReventlessCore.decode(baseFragment).mutations[0]);
     let augmented = AppSync_Adapter$ReventlessAws.injectAwsAuthAll(baseFragment, "Admin", [firstMutationName]);
@@ -600,7 +600,7 @@ globalThis.describe("Split mode — empty base fragment", () => {
     globalThis.expect(sdl).not.toContain("Platform_Plugin");
   });
   globalThis.test("stitching admin base without plugins produces only admin fields", () => {
-    let adminBase = AdminApi$ReventlessCore.baseFragment(false);
+    let adminBase = Platform_AdminApi$ReventlessCore.baseFragment(false);
     let sdl = GraphQL_Stitcher$ReventlessCore.stitch(adminBase, []);
     globalThis.expect(sdl).toContain("Platform_Plugin");
   });
@@ -614,7 +614,7 @@ globalThis.describe("Merged mode — canonical source documents", () => {
     subscriptions: [],
     subscriptionSources: []
   });
-  let baseFragment = AppSync_Adapter$ReventlessAws.injectAwsAuthAll(AdminApi$ReventlessCore.baseFragment(false), "Admin", undefined);
+  let baseFragment = AppSync_Adapter$ReventlessAws.injectAwsAuthAll(Platform_AdminApi$ReventlessCore.baseFragment(false), "Admin", undefined);
   let adminSourceSdl = AppSync_SdlDecorate$ReventlessAws.stampCanonicalTypes(AppSync_Adapter$ReventlessAws.stitchStandaloneWithAwsDirectives(baseFragment));
   let domainBaseSourceSdl = AppSync_SdlDecorate$ReventlessAws.stampCanonicalTypes(AppSync_Adapter$ReventlessAws.stitchStandaloneWithAwsDirectives(domainBaseFragment));
   globalThis.test("no AWS source document carries the global node query (dropped — see plan)", () => {

package/tests/MCP_LambdaTest.res

@@ -73,7 +73,7 @@ describe("MCP_Lambda.generateAdminConfig", () => {
     let arns = Dict.make()
     // Use a tool name that matches the first mutation field
     let firstEntry: ReventlessInfra.Api.mutationSchemaEntry =
-      ReventlessCore.AdminApi.mutationEntries(~cloner=false)->Array.getUnsafe(0)
+      ReventlessCore.Platform_AdminApi.mutationEntries(~cloner=false)->Array.getUnsafe(0)
     let firstFieldName = firstEntry.fieldNames->Array.getUnsafe(0)
     arns->Dict.set(firstFieldName, "arn:aws:sqs:us-east-1:123:queue")
 

package/tests/MCP_LambdaTest.res.mjs

@@ -1,7 +1,7 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
-import * as AdminApi$ReventlessCore from "@reventlessdev/reventless-core/src/admin/AdminApi.res.mjs";
 import * as MCP_Lambda$ReventlessAws from "../src/adapter/Mcp/MCP_Lambda.res.mjs";
+import * as Platform_AdminApi$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_AdminApi.res.mjs";
 
 globalThis.describe("MCP_Lambda.generateAdminConfig", () => {
   globalThis.test("produces tools from admin mutation entries (no cloner)", () => {
@@ -40,7 +40,7 @@ globalThis.describe("MCP_Lambda.generateAdminConfig", () => {
   });
   globalThis.test("commandTopicArns are mapped to tools", () => {
     let arns = {};
-    let firstEntry = AdminApi$ReventlessCore.mutationEntries(false)[0];
+    let firstEntry = Platform_AdminApi$ReventlessCore.mutationEntries(false)[0];
     let firstFieldName = firstEntry.fieldNames[0];
     arns[firstFieldName] = "arn:aws:sqs:us-east-1:123:queue";
     let config = MCP_Lambda$ReventlessAws.generateAdminConfig("test", "1.0.0", undefined, arns, undefined);