@reventlessdev/reventless-aws 3.0.0-alpha.304 → 3.0.0-alpha.306

package/src/adapter/Runtime/EventCollectorEntryPoint.mjs

@@ -3,7 +3,7 @@
 // driven entirely by HANDLER_CONFIG.
 //
 // Thin untyped shell ("typed core, thin shell" —
-// docs/plans/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
+// docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
 // seams that are inherently untyped — the dynamic `import()` of EP/extension/spec
 // modules named in HANDLER_CONFIG and the functor applications consuming those
 // runtime-loaded modules. Everything else (config parse/validation, the Plugin-RM
@@ -46,12 +46,9 @@
 //       "readModelNames":     string[]         // RMs this extension may enqueue events into (filter into readModelQueueUrls)
 //     }
 //   ],
-//   "publishToAggregates": {                   // aggregateName → env-var name holding the aggregate's cmd-topic SQS URL
-//     "Plugin": "PTA_Plugin_QUEUE_URL"
-//   },
-//   "readModelQueueUrls": {                    // rmName → env-var name holding the RM's EventCollector SQS URL
-//     "ProductDemands": "PRM_ProductDemands_QUEUE_URL"
-//   },
+//   (publishToAggregates / readModelQueueUrls moved to the queueUrls.json asset —
+//    one entry per target, so they outgrew the 4KB environment. Each still maps a
+//    target name to the PTA_/PRM_ env var holding its SQS URL.)
 //   "readModelNamesForSourceName": {           // deploy-side inversion of RM.sourceNames; sourceServiceName → [rmName]
 //     "Ordering.Orders": ["ProductDemands"]
 //   }
@@ -100,6 +97,8 @@ async function buildHandler() {
   await runtimeExtensionsReady;
   const config = Ops.parseHandlerConfig(process.env["HANDLER_CONFIG"] || "");
   const pluginDefinition = Ops.loadPluginDefinition();
+  // target → env-var name; the URLs themselves stay in the environment.
+  const queueUrlNames = Ops.loadQueueUrlNames();
 
   const queryEngine = Ops.makeQueryEngine(config.pluginReadModelTableName);
   const scheduler = Ops.makeScheduler(config.schedulerRoleArn);
@@ -165,7 +164,7 @@ async function buildHandler() {
     return { aggregateNames: ep.aggregateNames, outgoingHandler: ops.outgoingJsonEventsHandler };
   }));
 
-  const publishToAggregates = Ops.buildPublishToAggregates(config.publishToAggregates);
+  const publishToAggregates = Ops.buildPublishToAggregates(queueUrlNames.publishToAggregates);
   const publishToPluginExtensionPoint = Ops.makePublishJsons(config.pluginExtensionPointCmdTopicUrl);
 
   // Connect extension — exactly one entry per plugin Lambda; null for admin.
@@ -230,7 +229,7 @@ async function buildHandler() {
       mappings: [transformedMapping],
     };
 
-    const dicts = Ops.extensionPublishDicts(config, ext);
+    const dicts = Ops.extensionPublishDicts(config, queueUrlNames, ext);
     const ops = extensionOperationsMake(epSpec)(mappingsModule)({
       publishToAggregates: dicts.publishToAggregates,
       publishToPluginExtensionPoint,

package/src/adapter/Runtime/EventCollectorEntryPoint_Ops.res

@@ -1,6 +1,6 @@
 // Typed cold-start core for the Plugin EventCollector Lambda entry point.
 //
-// The "typed core, thin shell" split (docs/plans/minimize-lambda-entrypoint-mjs-shell.md):
+// The "typed core, thin shell" split (docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md):
 // EventCollectorEntryPoint.mjs owns ONLY the untyped seams — the dynamic
 // `import()` of EP/extension/spec modules named in HANDLER_CONFIG and the
 // functor applications consuming those runtime-loaded modules
@@ -109,9 +109,16 @@ type handlerConfig = {
   extensionPoints: array<extensionPointConfig>,
   connectExtension: option<connectExtensionConfig>,
   extensions: array<extensionConfig>,
+  readModelNamesForSourceName: dict<array<string>>,
+}
+
+// The target→env-var maps that used to ride HANDLER_CONFIG, now read from
+// queueUrls.json (PluginRuntime_Builder). Values are env var NAMES, not URLs —
+// the URLs stay in the environment because the builder cannot resolve those
+// Outputs in bulk.
+type queueUrlNames = {
   publishToAggregates: dict<string>,
   readModelQueueUrls: dict<string>,
-  readModelNamesForSourceName: dict<array<string>>,
 }
 
 let strOf = (obj: dict<JSON.t>, key: string): option<string> =>
@@ -149,7 +156,6 @@ let parseHandlerConfig = (rawJson: string): handlerConfig => {
     "schedulerQueueName",
     "extensionPoints",
     "extensions",
-    "publishToAggregates",
   ]->Array.forEach(k =>
     if obj->Dict.get(k)->Option.isNone {
       JsError.throwWithMessage("HANDLER_CONFIG missing required field: " ++ k)
@@ -225,8 +231,6 @@ let parseHandlerConfig = (rawJson: string): handlerConfig => {
     extensionPoints,
     connectExtension,
     extensions,
-    publishToAggregates: obj->strDictOf("publishToAggregates"),
-    readModelQueueUrls: obj->strDictOf("readModelQueueUrls"),
     readModelNamesForSourceName,
   }
 }
@@ -625,7 +629,11 @@ type extensionDicts = {
   readModelNamesForSourceName: dict<array<string>>,
 }
 
-let extensionPublishDicts = (config: handlerConfig, ext: extensionConfig): extensionDicts => {
+let extensionPublishDicts = (
+  config: handlerConfig,
+  names: queueUrlNames,
+  ext: extensionConfig,
+): extensionDicts => {
   let resolve = (names: array<string>, envVarNames: dict<string>) =>
     names
     ->Array.filterMap(name =>
@@ -637,8 +645,8 @@ let extensionPublishDicts = (config: handlerConfig, ext: extensionConfig): exten
     )
     ->Dict.fromArray
   {
-    publishToAggregates: resolve(ext.aggregateNames, config.publishToAggregates),
-    publishToReadModels: resolve(ext.readModelNames, config.readModelQueueUrls),
+    publishToAggregates: resolve(ext.aggregateNames, names.publishToAggregates),
+    publishToReadModels: resolve(ext.readModelNames, names.readModelQueueUrls),
     // Scoped to this extension's EP — Extension_Operations uses this dict to
     // decide which RMs receive each incoming event.
     readModelNamesForSourceName: Dict.fromArray([
@@ -680,6 +688,26 @@ let loadPluginDefinition = (): Reventless.Plugin.pluginDefinition =>
     )
   }
 
+// The target→env-var maps, read once at cold start. A plugin that publishes
+// nowhere writes empty maps rather than omitting the file, so a read failure is
+// a genuinely broken archive and not an empty-map case worth guessing at.
+let loadQueueUrlNames = (): queueUrlNames =>
+  try {
+    let obj =
+      assetPath("queueUrls.json")
+      ->NodeFs.readFileSync
+      ->JSON.parseOrThrow
+      ->JSON.Decode.object
+      ->Option.getOr(Dict.make())
+    {
+      publishToAggregates: obj->strDictOf("publishToAggregates"),
+      readModelQueueUrls: obj->strDictOf("readModelQueueUrls"),
+    }
+  } catch {
+  | exn =>
+    JsError.throwWithMessage("Failed to load queueUrls.json from asset zip: " ++ exnMessage(exn))
+  }
+
 // The plugin's UI-fragment manifest — its own asset since the manifest no
 // longer rides pluginDefinition (the UiFragmentRegistry slice owns fragment
 // state). JSON null (plugins without a UI) and a missing file (older archives)

package/src/adapter/Runtime/EventCollectorEntryPoint_Ops.res.mjs

@@ -111,8 +111,7 @@ function parseHandlerConfig(rawJson) {
     "schedulerQueueArn",
     "schedulerQueueName",
     "extensionPoints",
-    "extensions",
-    "publishToAggregates"
+    "extensions"
   ].forEach(k => {
     if (Stdlib_Option.isNone(obj[k])) {
       return Stdlib_JsError.throwWithMessage("HANDLER_CONFIG missing required field: " + k);
@@ -159,8 +158,6 @@ function parseHandlerConfig(rawJson) {
     extensionPoints: extensionPoints,
     connectExtension: connectExtension,
     extensions: extensions,
-    publishToAggregates: strDictOf(obj, "publishToAggregates"),
-    readModelQueueUrls: strDictOf(obj, "readModelQueueUrls"),
     readModelNamesForSourceName: readModelNamesForSourceName
   };
 }
@@ -495,14 +492,14 @@ function buildPublishToAggregates(map) {
   ]));
 }
 
-function extensionPublishDicts(config, ext) {
+function extensionPublishDicts(config, names, ext) {
   let resolve = (names, envVarNames) => Object.fromEntries(Stdlib_Array.filterMap(names, name => Stdlib_Option.map(Stdlib_Option.filter(Stdlib_Option.flatMap(envVarNames[name], envVarName => process.env[envVarName]), queueUrl => queueUrl !== ""), queueUrl => [
     name,
     makePublishJsons(queueUrl)
   ])));
   return {
-    publishToAggregates: resolve(ext.aggregateNames, config.publishToAggregates),
-    publishToReadModels: resolve(ext.readModelNames, config.readModelQueueUrls),
+    publishToAggregates: resolve(ext.aggregateNames, names.publishToAggregates),
+    publishToReadModels: resolve(ext.readModelNames, names.readModelQueueUrls),
     readModelNamesForSourceName: Object.fromEntries([[
         ext.extensionPointName,
         Stdlib_Option.getOr(config.readModelNamesForSourceName[ext.extensionPointName], [])
@@ -529,6 +526,19 @@ function loadPluginDefinition() {
   }
 }
 
+function loadQueueUrlNames() {
+  try {
+    let obj = Stdlib_Option.getOr(Stdlib_JSON.Decode.object(JSON.parse(Nodefs.readFileSync(assetPath("queueUrls.json"), "utf8"))), {});
+    return {
+      publishToAggregates: strDictOf(obj, "publishToAggregates"),
+      readModelQueueUrls: strDictOf(obj, "readModelQueueUrls")
+    };
+  } catch (raw_exn) {
+    let exn = Primitive_exceptions.internalToException(raw_exn);
+    return Stdlib_JsError.throwWithMessage("Failed to load queueUrls.json from asset zip: " + exnMessage(exn));
+  }
+}
+
 function loadUiFragments() {
   try {
     let json = JSON.parse(Nodefs.readFileSync(assetPath("uiFragments.json"), "utf8"));
@@ -649,6 +659,7 @@ export {
   warnSkippedExtension,
   assetPath,
   loadPluginDefinition,
+  loadQueueUrlNames,
   loadUiFragments,
   pushHandler,
   makeSqsHandlerBundle,

package/src/adapter/Runtime/EventMapperEntryPoint.mjs

@@ -3,7 +3,7 @@
 // wires EventMapper_Callback.MakeCounterHandler + MakeEventCollectorHandler.
 //
 // Thin untyped shell ("typed core, thin shell" —
-// docs/plans/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
+// docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
 // seams that are inherently untyped — the dynamic `import()` of the
 // target-spec/mappings modules named in HANDLER_CONFIG, the shape fix-ups on
 // those runtime-loaded modules (patchSpecId / patchMappingsSourceIds), and the

package/src/adapter/Runtime/EventMapperEntryPoint_Ops.res

@@ -1,6 +1,6 @@
 // Typed cold-start core for the EventMapper Lambda entry point (Micro mode).
 //
-// The "typed core, thin shell" split (docs/plans/minimize-lambda-entrypoint-mjs-shell.md):
+// The "typed core, thin shell" split (docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md):
 // EventMapperEntryPoint.mjs keeps only the untyped seam — the dynamic
 // `import()` of the target-spec/mappings modules named in HANDLER_CONFIG, the
 // `patchSpecId` / mapping-Source-Id fix-ups, and the

package/src/adapter/Runtime/ExtensionPointEntryPoint.mjs

@@ -4,7 +4,7 @@
 // routes SQS events through handleQueueEvent.
 //
 // Thin untyped shell ("typed core, thin shell" —
-// docs/plans/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
+// docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
 // seams that are inherently untyped — the dynamic `import()` of the
 // spec/mappings modules named in HANDLER_CONFIG, the `patchSpecId` fix-up, and
 // the two functor applications consuming them. The callback config,

package/src/adapter/Runtime/ExtensionPointEntryPoint_Ops.res

@@ -1,7 +1,7 @@
 // Typed cold-start core for the (per-extension-point) ExtensionPoint Lambda
 // entry point.
 //
-// The "typed core, thin shell" split (docs/plans/minimize-lambda-entrypoint-mjs-shell.md):
+// The "typed core, thin shell" split (docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md):
 // ExtensionPointEntryPoint.mjs keeps only the untyped seam — the dynamic
 // `import()` of the spec/mappings modules named in HANDLER_CONFIG, the
 // `patchSpecId` fix-up, and the ExtensionPoint_Callback.Make /

package/src/adapter/Runtime/PgQueryResolverEntryPoint.mjs

@@ -9,7 +9,7 @@
 // PgQueryResolver_Lambda.dispatch routes.
 //
 // Thin untyped shell ("typed core, thin shell" —
-// docs/plans/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
+// docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
 // seams that are inherently untyped — the dynamic `import()` of the spec
 // packages named in QUERY_RESOLVER_CONFIG, the `patchSpecId` fix-up, and the
 // reads of the runtime-loaded modules' exports. QUERY_RESOLVER_CONFIG parsing,

package/src/adapter/Runtime/PgQueryResolverEntryPoint_Ops.res

@@ -1,7 +1,7 @@
 // Typed cold-start core for the shared PgQueryResolver Lambda entry point
 // (B3.2b).
 //
-// The "typed core, thin shell" split (docs/plans/minimize-lambda-entrypoint-mjs-shell.md):
+// The "typed core, thin shell" split (docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md):
 // PgQueryResolverEntryPoint.mjs keeps only the untyped seam — the dynamic
 // `import()` of each spec package named in QUERY_RESOLVER_CONFIG, the
 // `patchSpecId` fix-up, and the reads of the runtime-loaded module's exports

package/src/adapter/Runtime/PluginExtensionPointEntryPoint.res

@@ -95,7 +95,7 @@ module Mappings = {
   // Parity with the former shell: only the Plugin lifecycle mapping. The
   // in-process wiring (PluginExtensionPoint_Builder) additionally registers
   // PluginExtensionPoint_UiFragment.Mapping — divergence tracked in
-  // docs/plans/entry-point-rescript-conversion.md.
+  // docs/plans/done/entry-point-rescript-conversion.md.
   let mappings: array<module(Mapping)> = [module(PluginMappingInstance.Mapping)]
 }
 

package/src/adapter/Runtime/ProjectionEntryPoint_Ops.res

@@ -1,7 +1,7 @@
 // Typed QueryDb-assembly core shared by the two projection Lambda entry points
 // (ReadModelEntryPoint.mjs, StateViewSliceEntryPoint.mjs).
 //
-// The "typed core, thin shell" split (docs/plans/minimize-lambda-entrypoint-mjs-shell.md):
+// The "typed core, thin shell" split (docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md):
 // both shells build the QueryDb operation set (DynamoDB or Postgres, live-update
 // wrapped) for each projection from spec-module reads; that machinery lives
 // here, fully type-checked. The routed dispatch boundary they share (with the

package/src/adapter/Runtime/QueryDbEntryPoint_Ops.res

@@ -1,7 +1,7 @@
 // Typed cold-start core shared by the QueryDb-backed entry-point shells
 // (ReadModelEntryPoint.mjs, StateViewSliceEntryPoint.mjs).
 //
-// The "typed core, thin shell" split (docs/plans/minimize-lambda-entrypoint-mjs-shell.md).
+// The "typed core, thin shell" split (docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md).
 // The DynamoDB QueryDb operations were built in each shell with seven positional
 // `load(table)` / `save(table)` / … calls into the compiled runtime, assembled
 // into an object the shell then passes to the ReadModel/StateViewSlice callback

package/src/adapter/Runtime/ReadModelEntryPoint.mjs

@@ -3,7 +3,7 @@
 // wires ReadModel_Callback.Make, builds handler map keyed by source URN.
 //
 // Thin untyped shell ("typed core, thin shell" —
-// docs/plans/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
+// docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
 // seams that are inherently untyped — the dynamic `import()` of spec/mappings
 // modules named in HANDLER_CONFIG, the shape fix-ups on those runtime-loaded
 // modules (patchSpecId / fixMappingsModule), and the ReadModel_Callback.Make

package/src/adapter/Runtime/ReadModelEntryPoint_Ops.res

@@ -1,6 +1,6 @@
 // Typed cold-start core for the ReadModel Lambda entry point.
 //
-// The "typed core, thin shell" split (docs/plans/minimize-lambda-entrypoint-mjs-shell.md):
+// The "typed core, thin shell" split (docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md):
 // ReadModelEntryPoint.mjs keeps only the untyped seams — the dynamic `import()`
 // of spec/mappings modules named in HANDLER_CONFIG, the `patchSpecId` /
 // `fixMappingsModule` shape fix-ups on those runtime-loaded modules, and the

package/src/adapter/Runtime/RuntimeEnvironment_Lambda.res

@@ -354,7 +354,7 @@ let makeFromCodeAsset: (
 
   // Announce the provisioned execution unit to the Monitoring registry. No-op
   // unless a deploy program registered a backend via Monitoring.use — see
-  // docs/plans/monitoring-hook-seam.md.
+  // docs/plans/done/monitoring-hook-seam.md.
   ReventlessCore.Monitoring.notify(~kind=unitKind, ~name, ~component=lambdaResource)
 
   {

package/src/adapter/Runtime/SideEffectEntryPoint.mjs

@@ -3,7 +3,7 @@
 // wires SideEffectHandler_Callback.Make, builds handler map keyed by source URN.
 //
 // Thin untyped shell ("typed core, thin shell" —
-// docs/plans/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
+// docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
 // seams that are inherently untyped — the dynamic `import()` of the side-effect
 // modules named in HANDLER_CONFIG and the SideEffectHandler_Callback.Make
 // functor application consuming them. HANDLER_CONFIG parsing and handler

package/src/adapter/Runtime/SideEffectEntryPoint_Ops.res

@@ -1,6 +1,6 @@
 // Typed cold-start core for the SideEffectHandler Lambda entry point.
 //
-// The "typed core, thin shell" split (docs/plans/minimize-lambda-entrypoint-mjs-shell.md):
+// The "typed core, thin shell" split (docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md):
 // SideEffectEntryPoint.mjs keeps only the untyped seam — the dynamic `import()`
 // of the side-effect modules named in HANDLER_CONFIG and the
 // SideEffectHandler_Callback.Make functor application consuming them.

package/src/adapter/Runtime/StateChangeSliceRuntime_Builder_Single.res

@@ -179,7 +179,9 @@ let forDcbCommandTopic = (
       Pulumi.Output.all4((dcbTableName, queue.id, pgConnectionFragment, inboundFragment))
       ->Pulumi.Output.apply(((table, queueUrl, pgFragment, inbFragment)) => {
         let pluginNameJson = pluginName->JSON.stringifyAny->Option.getOr(`""`)
-        `{"dcbEventLogTableName":"${table}","queueUrl":"${queueUrl}","pluginName":${pluginNameJson}${pgFragment}${inbFragment}}`
+        let json = `{"dcbEventLogTableName":"${table}","queueUrl":"${queueUrl}","pluginName":${pluginNameJson}${pgFragment}${inbFragment}}`
+        Util_LambdaEnvBudget.check(~lambdaName=name, ~handlerConfigJson=json)
+        json
       })
     envVars->Dict.set("HANDLER_CONFIG", handlerConfigJson->Pulumi.Output.asInput)
 

package/src/adapter/Runtime/StateChangeSliceRuntime_Builder_Single.res.mjs

@@ -11,6 +11,7 @@ import * as DcbBackend$ReventlessAws from "../DcbEventLog/DcbBackend.res.mjs";
 import * as PolicyDocument$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/PolicyDocument.res.mjs";
 import * as Util_Bundle$ReventlessAws from "../../util/Util_Bundle.res.mjs";
 import * as PgConnection$ReventlessAws from "../Postgres/PgConnection.res.mjs";
+import * as Util_LambdaEnvBudget$ReventlessAws from "../../util/Util_LambdaEnvBudget.res.mjs";
 import * as CommandTopicChannel_SQS$ReventlessAws from "../CommandTopic/CommandTopicChannel_SQS.res.mjs";
 import * as RuntimeEnvironment_Lambda$ReventlessAws from "./RuntimeEnvironment_Lambda.res.mjs";
 
@@ -79,7 +80,9 @@ function forDcbCommandTopic(slicePaths, inboundSlicesOpt, dcbTableName, pluginNa
     inboundFragment
   ]).apply(param => {
     let pluginNameJson = Stdlib_Option.getOr(JSON.stringify(pluginName), `""`);
-    return `{"dcbEventLogTableName":"` + param[0] + `","queueUrl":"` + param[1] + `","pluginName":` + pluginNameJson + param[2] + param[3] + `}`;
+    let json = `{"dcbEventLogTableName":"` + param[0] + `","queueUrl":"` + param[1] + `","pluginName":` + pluginNameJson + param[2] + param[3] + `}`;
+    Util_LambdaEnvBudget$ReventlessAws.check(name, json, undefined);
+    return json;
   });
   envVars["HANDLER_CONFIG"] = handlerConfigJson;
   let packageDirs = {};

package/src/adapter/Runtime/StateViewSliceEntryPoint.mjs

@@ -4,7 +4,7 @@
 // source URN.
 //
 // Thin untyped shell ("typed core, thin shell" —
-// docs/plans/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
+// docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
 // inherently-untyped seam — the dynamic `import()` of spec/projection modules
 // named in HANDLER_CONFIG and the reads of their exports. Everything else
 // (HANDLER_CONFIG parsing incl. the compact-v2 expansion, the QueryDb operation

package/src/adapter/Runtime/StateViewSliceEntryPoint_Ops.res

@@ -1,6 +1,6 @@
 // Typed cold-start core for the StateViewSlice Lambda entry point.
 //
-// The "typed core, thin shell" split (docs/plans/minimize-lambda-entrypoint-mjs-shell.md):
+// The "typed core, thin shell" split (docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md):
 // StateViewSliceEntryPoint.mjs keeps only the inherently-untyped seam — the
 // dynamic `import()` of spec/projection modules named in HANDLER_CONFIG and the
 // reads of their exports. HANDLER_CONFIG parsing (including the compact-v2

package/src/adapter/Runtime/StreamRoutedEntryPoint_Ops.res

@@ -2,7 +2,7 @@
 // points (ReadModelEntryPoint.mjs, StateViewSliceEntryPoint.mjs,
 // AutomationSliceEntryPoint.mjs).
 //
-// The "typed core, thin shell" split (docs/plans/minimize-lambda-entrypoint-mjs-shell.md):
+// The "typed core, thin shell" split (docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md):
 // all three shells route DynamoDB-stream / SQS-feed records to per-source-URN
 // handler lists with per-handler log attribution — machinery the `.mjs` files
 // previously duplicated verbatim. It lives here so every co-hosted component

package/src/adapter/Runtime/TaskBucketEntryPoint.mjs

@@ -4,7 +4,7 @@
 // Events schedules).
 //
 // Thin untyped shell ("typed core, thin shell" —
-// docs/plans/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
+// docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md): this file owns ONLY the
 // inherently-untyped seam — the dynamic `import()` of the callback module named
 // in HANDLER_CONFIG and the read of its `callback` export. Everything else
 // (HANDLER_CONFIG parsing, S3-event handling via TaskBucket_S3_Runtime, the

package/src/adapter/Runtime/TaskBucketEntryPoint_Ops.res

@@ -1,6 +1,6 @@
 // Typed cold-start core for the TaskBucket Lambda entry point.
 //
-// The "typed core, thin shell" split (docs/plans/minimize-lambda-entrypoint-mjs-shell.md):
+// The "typed core, thin shell" split (docs/plans/done/minimize-lambda-entrypoint-mjs-shell.md):
 // TaskBucketEntryPoint.mjs keeps only the inherently-untyped seam — the
 // dynamic `import()` of the task callback module named in HANDLER_CONFIG and
 // the read of its `callback` export. HANDLER_CONFIG parsing, the S3-event →

package/src/plugin/runtime/PluginRuntime_Builder.res

@@ -503,27 +503,13 @@ module Make = (
           })
         dict->Dict.set("extensions", JSON.Encode.array(extensionsArr))
 
-        let publishToAggregatesDict = Dict.make()
-        context.publishToAggregates
-        ->Dict.keysToArray
-        ->Array.forEach(aggName =>
-          publishToAggregatesDict->Dict.set(
-            aggName,
-            JSON.Encode.string(`PTA_${aggName}_QUEUE_URL`),
-          )
-        )
-        dict->Dict.set("publishToAggregates", JSON.Encode.object(publishToAggregatesDict))
-
-        let readModelQueueUrlsDict = Dict.make()
-        context.readModelQueueUrls
-        ->Dict.keysToArray
-        ->Array.forEach(rmName =>
-          readModelQueueUrlsDict->Dict.set(
-            rmName,
-            JSON.Encode.string(`PRM_${rmName}_QUEUE_URL`),
-          )
-        )
-        dict->Dict.set("readModelQueueUrls", JSON.Encode.object(readModelQueueUrlsDict))
+        // publishToAggregates / readModelQueueUrls live in queueUrls.json (see the
+        // asset bundle below). Both are one entry per target, so they grow with the
+        // plugin, and together with the PTA_/PRM_ vars they name they carried the
+        // catalog EventCollector past Lambda's 4KB environment ceiling. Only the
+        // maps move: they are built from Dict.keysToArray, so they hold no Pulumi
+        // Output and can be serialized here. The URLs themselves cannot follow —
+        // see the note on the aggregate walk further down.
 
         let rmNamesForSourceDict = Dict.make()
         context.readModelNamesForSourceName
@@ -536,7 +522,22 @@ module Make = (
         )
         dict->Dict.set("readModelNamesForSourceName", JSON.Encode.object(rmNamesForSourceDict))
 
-        JSON.Encode.object(dict)->JSON.stringify
+        let json = JSON.Encode.object(dict)->JSON.stringify
+        // The PTA_/PRM_ vars are the rest of this Lambda's environment and the
+        // half that grows with the plugin. Their names are known here; their
+        // values are still Outputs, so the budget check estimates those.
+        let queueUrlKeys = Array.concat(
+          context.publishToAggregates
+          ->Dict.keysToArray
+          ->Array.map(n => `PTA_${n}_QUEUE_URL`),
+          context.readModelQueueUrls->Dict.keysToArray->Array.map(n => `PRM_${n}_QUEUE_URL`),
+        )
+        Util_LambdaEnvBudget.check(
+          ~lambdaName=name,
+          ~handlerConfigJson=json,
+          ~outputValuedKeys=queueUrlKeys,
+        )
+        json
       })
     envVars->Dict.set("HANDLER_CONFIG", handlerConfigJson->Pulumi.Output.asInput)
 
@@ -599,6 +600,29 @@ module Make = (
       ->Pulumi.Output.apply(((pluginDefinitionJson, uiFragmentsJson)) => {
         let extraStringAssets = Dict.make()
         extraStringAssets->Dict.set("pluginDefinition.json", pluginDefinitionJson)
+        // target name → the env var holding that target's queue URL. The
+        // indirection stays (the URLs are Outputs this builder must not resolve
+        // in bulk); only the naming map moves out of HANDLER_CONFIG.
+        let nameMap = (names: array<string>, prefix: string) => {
+          let d = Dict.make()
+          names
+          ->Array.toSorted(String.compare)
+          ->Array.forEach(n => d->Dict.set(n, JSON.Encode.string(`${prefix}_${n}_QUEUE_URL`)))
+          JSON.Encode.object(d)
+        }
+        let queueUrlsDict = Dict.make()
+        queueUrlsDict->Dict.set(
+          "publishToAggregates",
+          nameMap(context.publishToAggregates->Dict.keysToArray, "PTA"),
+        )
+        queueUrlsDict->Dict.set(
+          "readModelQueueUrls",
+          nameMap(context.readModelQueueUrls->Dict.keysToArray, "PRM"),
+        )
+        extraStringAssets->Dict.set(
+          "queueUrls.json",
+          JSON.Encode.object(queueUrlsDict)->JSON.stringify,
+        )
         // The UI-fragment manifest no longer rides pluginDefinition — ship it as
         // its own asset ("null" for plugins without a UI) so the bundled Connect
         // extension can emit RegisterUiFragment in the handshake answer.

package/src/plugin/runtime/PluginRuntime_Builder.res.mjs

@@ -16,6 +16,7 @@ import * as ComponentType$ReventlessCore from "@reventlessdev/reventless-core/sr
 import * as EventCollector$ReventlessCore from "@reventlessdev/reventless-core/src/components/EventCollector/EventCollector.res.mjs";
 import * as EventLogBackend$ReventlessAws from "../../adapter/EventLog/EventLogBackend.res.mjs";
 import * as Plugin_Helpers$ReventlessCore from "@reventlessdev/reventless-core/src/plugin/component/Plugin_Helpers.res.mjs";
+import * as Util_LambdaEnvBudget$ReventlessAws from "../../util/Util_LambdaEnvBudget.res.mjs";
 import * as Platform_Admin_Structure$ReventlessCore from "@reventlessdev/reventless-core/src/admin/Platform_Admin_Structure.res.mjs";
 import * as RuntimeEnvironment_Lambda$ReventlessAws from "../../adapter/Runtime/RuntimeEnvironment_Lambda.res.mjs";
 import * as StateChangeSliceRuntime_Builder_Single$ReventlessAws from "../../adapter/Runtime/StateChangeSliceRuntime_Builder_Single.res.mjs";
@@ -323,22 +324,15 @@ function Make(EventCollectorChannel) {
         return entryDict;
       });
       dict["extensions"] = extensionsArr;
-      let publishToAggregatesDict = {};
-      Object.keys(context.publishToAggregates).forEach(aggName => {
-        publishToAggregatesDict[aggName] = `PTA_` + aggName + `_QUEUE_URL`;
-      });
-      dict["publishToAggregates"] = publishToAggregatesDict;
-      let readModelQueueUrlsDict = {};
-      Object.keys(context.readModelQueueUrls).forEach(rmName => {
-        readModelQueueUrlsDict[rmName] = `PRM_` + rmName + `_QUEUE_URL`;
-      });
-      dict["readModelQueueUrls"] = readModelQueueUrlsDict;
       let rmNamesForSourceDict = {};
       Object.entries(context.readModelNamesForSourceName).forEach(param => {
         rmNamesForSourceDict[param[0]] = param[1].map(prim => prim);
       });
       dict["readModelNamesForSourceName"] = rmNamesForSourceDict;
-      return JSON.stringify(dict);
+      let json = JSON.stringify(dict);
+      let queueUrlKeys = Object.keys(context.publishToAggregates).map(n => `PTA_` + n + `_QUEUE_URL`).concat(Object.keys(context.readModelQueueUrls).map(n => `PRM_` + n + `_QUEUE_URL`));
+      Util_LambdaEnvBudget$ReventlessAws.check(name, json, queueUrlKeys);
+      return json;
     });
     envVars["HANDLER_CONFIG"] = handlerConfigJson;
     let packageDirs = {};
@@ -374,6 +368,17 @@ function Make(EventCollectorChannel) {
     ]).apply(param => {
       let extraStringAssets = {};
       extraStringAssets["pluginDefinition.json"] = param[0];
+      let nameMap = (names, prefix) => {
+        let d = {};
+        names.toSorted(Primitive_string.compare).forEach(n => {
+          d[n] = prefix + `_` + n + `_QUEUE_URL`;
+        });
+        return d;
+      };
+      let queueUrlsDict = {};
+      queueUrlsDict["publishToAggregates"] = nameMap(Object.keys(context.publishToAggregates), "PTA");
+      queueUrlsDict["readModelQueueUrls"] = nameMap(Object.keys(context.readModelQueueUrls), "PRM");
+      extraStringAssets["queueUrls.json"] = JSON.stringify(queueUrlsDict);
       extraStringAssets["uiFragments.json"] = param[1];
       return Util_Bundle$ReventlessAws.buildCodeArchive("@reventlessdev/reventless-aws/src/adapter/Runtime/EventCollectorEntryPoint.mjs", packageDirs, extraStringAssets, undefined);
     });

package/src/util/Util_Bundle.res

@@ -122,7 +122,7 @@ let hashString = (str: string): string =>
 // (set on the Lambda env by RuntimeEnvironment_Lambda.makeFromCodeAsset). Shipped
 // at the root of every code archive; NODE_OPTIONS=--import points Node at
 // register-hook.mjs. Validated on a Node 22.17.1 rig; see
-// docs/plans/deployed-lambda-esm-self-containment.md.
+// docs/plans/done/deployed-lambda-esm-self-containment.md.
 let registerHookFileName = "register-hook.mjs"
 let layerResolverFileName = "layer-resolver.mjs"
 

package/src/util/Util_DynamoDbStream_Runtime.res

@@ -5,7 +5,7 @@ type result =
   | Invalid
 
 // Returns None for rows that aren't events — e.g. DCB FENCE rows and aggregate
-// snapshot rows (position = "SNAPSHOT"; docs/plans/aggregate-snapshotting.md),
+// snapshot rows (position = "SNAPSHOT"; docs/plans/done/aggregate-snapshotting.md),
 // neither of which has an `event` column. The caller filters these out via
 // `Invalid` rather than synthesising a bogus event that sury would later reject.
 let buildJsonEvent' = dict => {