@bleedingdev/modern-js-app-tools-extensions 3.9.0-ultramodern.9 → 3.9.3-ultramodern.10

package/README.md

@@ -3,3 +3,26 @@
 Fork-owned UltraModern.js app tooling for Cloudflare Worker delivery, output verification, and release-envelope identity enforcement.
 
 The package is composed into upstream app-tools through existing deploy/plugin extension seams. It must not depend on `@modern-js/app-tools`.
+
+## Private origins and module-scope bindings
+
+Private origins behind a Cloudflare Tunnel are first-class on
+`deploy.worker.vpcServices` (`{ binding, serviceId, prefix? }`). Modern.js
+writes them to `wrangler.json` as `vpc_services` (top level and every
+`wrangler.env.<name>`, because Wrangler bindings are not inherited), and a
+binding with `prefix`
+is dispatched with `env[binding].fetch(request)` like a prefixed
+`deploy.worker.services` entry. A VPC binding name may not reuse any other
+Worker binding: any `binding` field or array-entry `name` in the Wrangler
+config (`ASSETS`, services, D1, KV, Hyperdrive, queue producers, Durable
+Objects, `send_email`, rate limits, …), including each `wrangler.env.<name>`'s
+own bindings, or a `vars` key. A VPC prefix must be a decoded path starting with `/` that URL parsing keeps unchanged (no query, fragment,
+`.` or `..` segments), and may not overlap, even as a percent-encoded alias, the
+Effect BFF prefix or any other routed prefix (the worker decodes the request
+path, dispatches the BFF first, matches path segments and takes the first
+match),
+and the typed option excludes a raw `wrangler.vpc_services`.
+
+Code that needs a binding outside the request handler, such as a Hyperdrive
+connection string or a VPC fetcher, imports `env` from `cloudflare:workers`,
+which worker bundles externalize like `cloudflare:sockets`.

package/dist/cjs/backend-federation-build/codegen.js

@@ -88,28 +88,34 @@ const createBackendRemoteEntrySource = async (workspaceRoot, app, effectApiPath,
         } : {}
     };
     const source = `// Generated by Modern.js backend federation build.
-import * as exposedNamespace from ${JSON.stringify(effectApiSpecifier)};
+import { adoptEffectBffShareScope } from '@modern-js/bff-effect/effect-edge';
 
-const exposedModule = {
-  ...exposedNamespace,
-  backendFederationContract: {
-    ...(exposedNamespace.backendFederationContract ?? {}),
-    compatibility: {
-      ...(exposedNamespace.backendFederationContract?.compatibility ?? {}),
-      ...${JSON.stringify(compatibility)},
+// The expose evaluates lazily so defineEffectBff registers its handler
+// factories with the registry the host shares through init().
+let exposedModule;
+const loadExposedModule = () =>
+  (exposedModule ??= import(${JSON.stringify(effectApiSpecifier)}).then(exposedNamespace => ({
+    ...exposedNamespace,
+    backendFederationContract: {
+      ...(exposedNamespace.backendFederationContract ?? {}),
+      compatibility: {
+        ...(exposedNamespace.backendFederationContract?.compatibility ?? {}),
+        ...${JSON.stringify(compatibility)},
+      },
+      name: ${JSON.stringify(app.backendName)},
+      role: 'microvertical-server',
+      runtimeFramework: 'effect',
+      strictEffectApproach: true,
     },
-    name: ${JSON.stringify(app.backendName)},
-    role: 'microvertical-server',
-    runtimeFramework: 'effect',
-    strictEffectApproach: true,
-  },
-};
+  })));
 const exposedModules = {
-  ${JSON.stringify(backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_EFFECT_EXPOSE)}: () => Promise.resolve(exposedModule),
+  ${JSON.stringify(backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_EFFECT_EXPOSE)}: loadExposedModule,
 };
 const __modernjsBackendFederation = ${JSON.stringify(containerMetadata)};
 
-function init() {}
+function init(shareScope) {
+  return adoptEffectBffShareScope(shareScope);
+}
 
 function get(id) {
   const load = exposedModules[id];
@@ -213,8 +219,13 @@ const createBackendManifest = (workspaceRoot, distDirectory, app, entryIntegrity
             source: {
                 module: sourceModule
             },
-            readinessPath: `${app.apiPrefix}/${app.apiStem}/readiness`,
-            openapiPath: `${app.apiPrefix}/openapi.json`,
+            ...'rpc' === app.apiProtocol ? {
+                rpcPath: app.rpcPath,
+                rpcSerialization: 'json'
+            } : {
+                readinessPath: `${app.apiPrefix}/${app.apiStem}/readiness`,
+                openapiPath: `${app.apiPrefix}/openapi.json`
+            },
             ...app.deliveryUnit ? {
                 deliveryUnit: app.deliveryUnit
             } : {},

package/dist/cjs/backend-federation-build/config.js

@@ -37,13 +37,14 @@ var __webpack_require__ = {};
 var __webpack_exports__ = {};
 __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
-    COMPACT_CONFIG_PATH: ()=>COMPACT_CONFIG_PATH,
+    DEVELOPMENT_OVERLAY_PATH: ()=>external_workspace_topology_js_namespaceObject.DEVELOPMENT_OVERLAY_PATH,
+    REFERENCE_TOPOLOGY_PATH: ()=>external_workspace_topology_js_namespaceObject.REFERENCE_TOPOLOGY_PATH,
     buildArtifactPathFor: ()=>buildArtifactPathFor,
-    createAppFromCompactMetadata: ()=>createAppFromCompactMetadata,
+    createAppFromTopology: ()=>createAppFromTopology,
     createStampedDeliveryUnit: ()=>createStampedDeliveryUnit,
     findBackendFederationApp: ()=>findBackendFederationApp,
-    findWorkspaceRoot: ()=>findWorkspaceRoot,
-    normalizeRelativePath: ()=>normalizeRelativePath,
+    findWorkspaceRoot: ()=>external_workspace_topology_js_namespaceObject.findWorkspaceRoot,
+    normalizeRelativePath: ()=>external_workspace_topology_js_namespaceObject.normalizeRelativePath,
     readBuildIdentity: ()=>readBuildIdentity,
     resolveWorkspaceSourceRevision: ()=>resolveWorkspaceSourceRevision
 });
@@ -54,8 +55,7 @@ const external_node_path_namespaceObject = require("node:path");
 var external_node_path_default = /*#__PURE__*/ __webpack_require__.n(external_node_path_namespaceObject);
 const release_identity_namespaceObject = require("@modern-js/app-tools-extensions/release-identity");
 const backend_federation_contracts_namespaceObject = require("@modern-js/backend-federation-contracts");
-const COMPACT_CONFIG_PATH = '.modernjs/ultramodern.json';
-const normalizeRelativePath = (value)=>value.replace(/\\/gu, '/').replace(/^\.\/+/u, '');
+const external_workspace_topology_js_namespaceObject = require("../workspace-topology.js");
 const isRecord = (value)=>'object' == typeof value && null !== value;
 const readJsonFile = async (filePath)=>JSON.parse(await promises_default().readFile(filePath, 'utf8'));
 const buildArtifactPathFor = (appDirectory)=>external_node_path_default().join(appDirectory, backend_federation_contracts_namespaceObject.ULTRAMODERN_BUILD_ARTIFACT_PATH);
@@ -82,19 +82,20 @@ const readBuildIdentity = async (appDirectory)=>{
 const toPascalCase = (value)=>value.split(/[^a-zA-Z0-9]+/u).filter(Boolean).map((part)=>part.charAt(0).toUpperCase() + part.slice(1)).join('');
 const stringValue = (value)=>'string' == typeof value && value.length > 0 ? value : void 0;
 const createBackendName = (app, id)=>{
-    const configuredName = stringValue(app.backendFederation?.name) ?? stringValue(app.backendFederation?.executionSurfaces?.node?.remoteName) ?? stringValue(app.serverExecution?.node?.remoteName);
+    const configuredName = stringValue(app.backendFederation?.name) ?? stringValue(app.backendFederation?.executionSurfaces?.node?.remoteName);
     if (configuredName) return configuredName;
     const mfName = stringValue(app.moduleFederation?.name);
     return mfName ? `${mfName}Backend` : `vertical${toPascalCase(id)}Backend`;
 };
-const findWorkspaceRoot = (appDirectory)=>{
-    let current = appDirectory;
-    while(true){
-        if ((0, external_node_fs_namespaceObject.existsSync)(external_node_path_default().join(current, COMPACT_CONFIG_PATH))) return current;
-        const parent = external_node_path_default().dirname(current);
-        if (parent === current) return;
-        current = parent;
+const rebaseDefaultLocalUrl = (value, defaultPort, publicOrigin)=>{
+    let url;
+    try {
+        url = new URL(value);
+    } catch  {
+        return value;
     }
+    if ('http:' !== url.protocol || 'localhost' !== url.hostname || Number(url.port) !== defaultPort || url.username || url.password) return value;
+    return `${publicOrigin}${url.pathname}${url.search}${url.hash}`;
 };
 const resolveWorkspaceSourceRevision = async (workspaceRoot)=>(0, release_identity_namespaceObject.resolveUltramodernSourceRevision)(workspaceRoot);
 const createStampedDeliveryUnit = (input)=>{
@@ -114,59 +115,96 @@ const createStampedDeliveryUnit = (input)=>{
     if (!validation.ok) return;
     return (0, backend_federation_contracts_namespaceObject.deliveryUnitContractBlock)(record);
 };
-const createAppFromCompactMetadata = (workspaceRoot, appDirectory, compactApp)=>{
-    const id = stringValue(compactApp.id);
-    const appPath = stringValue(compactApp.path);
-    if (!id || 'vertical' !== compactApp.kind || !isRecord(compactApp.api)) return;
-    const directory = appPath ? normalizeRelativePath(appPath) : `verticals/${id}`;
+const createAppFromTopology = (workspaceRoot, appDirectory, topologyApp, overlay, packageManifest)=>{
+    const id = stringValue(topologyApp.id);
+    const appPath = stringValue(topologyApp.path);
+    if (!id || !appPath || 'vertical' !== topologyApp.kind || !isRecord(topologyApp.api) || !isRecord(topologyApp.backendFederation)) return;
+    const directory = (0, external_workspace_topology_js_namespaceObject.normalizeRelativePath)(appPath);
     if (external_node_path_default().resolve(workspaceRoot, directory) !== external_node_path_default().resolve(appDirectory)) return;
-    const port = 'number' == typeof compactApp.port ? compactApp.port : void 0;
-    if (void 0 === port) return;
-    const apiPrefix = stringValue(compactApp.api.prefix) ?? `/${id}-api`;
-    const apiStem = stringValue(compactApp.api.stem) ?? id;
-    const backendName = createBackendName(compactApp, id);
-    const manifestUrl = stringValue(compactApp.backendFederation?.executionSurfaces?.node?.manifestUrl) ?? stringValue(compactApp.serverExecution?.node?.manifestUrl) ?? `http://localhost:${port}/${backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_MANIFEST_FILE}`;
-    const containerEntry = stringValue(compactApp.backendFederation?.executionSurfaces?.node?.containerEntry) ?? stringValue(compactApp.serverExecution?.node?.containerEntry) ?? `http://localhost:${port}/${backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_REMOTE_ENTRY_FILE}`;
-    const configuredRemoteType = stringValue(compactApp.backendFederation?.executionSurfaces?.node?.remoteType) ?? stringValue(compactApp.serverExecution?.node?.remoteType);
+    const defaultPort = overlay.ports?.[id];
+    if ('number' != typeof defaultPort || !Number.isInteger(defaultPort) || defaultPort < 1 || defaultPort > 65535) throw new Error(`[backend-federation-build] Invalid development port for ${id}.`);
+    const portEnv = stringValue(topologyApp.portEnv) ?? `VERTICAL_${(stringValue(topologyApp.domain) ?? id).replace(/[^a-zA-Z0-9]/gu, '_').toUpperCase()}_PORT`;
+    const port = Number(process.env[portEnv] ?? defaultPort);
+    if (!Number.isInteger(port) || port < 1 || port > 65535) throw new Error(`[backend-federation-build] Invalid ${portEnv} development port for ${id}.`);
+    const publicUrlEnv = stringValue(topologyApp.cloudflare?.publicUrlEnv);
+    const configuredPublicUrl = publicUrlEnv ? process.env[publicUrlEnv]?.trim() : void 0;
+    let publicOrigin = `http://localhost:${port}`;
+    if (configuredPublicUrl) {
+        let url;
+        try {
+            url = new URL(configuredPublicUrl);
+        } catch  {
+            throw new Error(`[backend-federation-build] Invalid ${publicUrlEnv} public URL for ${id}.`);
+        }
+        if (![
+            'http:',
+            'https:'
+        ].includes(url.protocol) || url.username || url.password) throw new Error(`[backend-federation-build] Invalid ${publicUrlEnv} public URL for ${id}.`);
+        publicOrigin = url.origin;
+    }
+    const apiPrefix = stringValue(topologyApp.api.bff?.prefix) ?? `/${id}-api`;
+    const apiProtocol = topologyApp.api.protocol ?? 'rest';
+    if ('rest' !== apiProtocol && 'rpc' !== apiProtocol) throw new Error(`[backend-federation-build] Unsupported API protocol for ${id}.`);
+    const rpcPath = 'rpc' === apiProtocol ? stringValue(topologyApp.api.rpcPath) : void 0;
+    if ('rpc' === apiProtocol && (!rpcPath || 'json' !== topologyApp.api.rpcSerialization)) throw new Error(`[backend-federation-build] Missing JSON RPC route metadata for ${id}.`);
+    const apiStem = stringValue(topologyApp.api.stem) ?? id;
+    const backendName = createBackendName(topologyApp, id);
+    const nodeOverlay = overlay.serverExecution?.[id]?.node;
+    if (!isRecord(nodeOverlay)) throw new Error(`[backend-federation-build] Missing declared Node server execution for ${id}.`);
+    const manifestUrl = rebaseDefaultLocalUrl(stringValue(nodeOverlay?.manifestUrl) ?? `http://localhost:${defaultPort}/${backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_MANIFEST_FILE}`, defaultPort, publicOrigin);
+    const containerEntry = rebaseDefaultLocalUrl(stringValue(nodeOverlay?.containerEntry) ?? `http://localhost:${defaultPort}/${backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_REMOTE_ENTRY_FILE}`, defaultPort, publicOrigin);
+    const configuredRemoteType = stringValue(nodeOverlay?.remoteType) ?? stringValue(topologyApp.backendFederation?.executionSurfaces?.node?.remoteType);
     if (void 0 !== configuredRemoteType && 'commonjs-module' !== configuredRemoteType) throw new Error(`[backend-federation-build] Node backend federation remoteType must be "commonjs-module"; received "${configuredRemoteType}" for ${id}.`);
     if (!new URL(containerEntry).pathname.endsWith(`/${backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_REMOTE_ENTRY_FILE}`)) throw new Error(`[backend-federation-build] Node backend federation containerEntry must end with "/${backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_REMOTE_ENTRY_FILE}"; received "${containerEntry}" for ${id}.`);
     const remoteType = 'commonjs-module';
-    const packageName = stringValue(compactApp.package);
-    const uiManifestUrl = stringValue(compactApp.backendFederation?.versionBoundary?.ui?.manifestUrl) ?? stringValue(compactApp.moduleFederation?.manifestUrl);
-    const compactDeliveryUnit = isRecord(compactApp.deliveryUnit) ? {
-        unitId: stringValue(compactApp.deliveryUnit.unitId),
-        buildMarker: stringValue(compactApp.deliveryUnit.buildMarker),
-        sourceRevision: stringValue(compactApp.deliveryUnit.sourceRevision),
-        packageName: stringValue(compactApp.deliveryUnit.packageName),
-        version: stringValue(compactApp.deliveryUnit.version)
+    const packageName = stringValue(packageManifest.name);
+    const version = stringValue(packageManifest.version);
+    if (stringValue(topologyApp.package) !== packageName || !version) throw new Error(`[backend-federation-build] Topology package identity must match package.json for ${id}.`);
+    const declaredUiManifestUrl = stringValue(overlay.manifests?.[id]);
+    const uiManifestUrl = declaredUiManifestUrl ? rebaseDefaultLocalUrl(declaredUiManifestUrl, defaultPort, publicOrigin) : void 0;
+    const topologyDeliveryUnit = isRecord(topologyApp.deliveryUnit) ? {
+        unitId: stringValue(topologyApp.deliveryUnit.unitId),
+        buildMarker: stringValue(topologyApp.deliveryUnit.buildMarker),
+        sourceRevision: stringValue(topologyApp.deliveryUnit.sourceRevision),
+        packageName: stringValue(topologyApp.deliveryUnit.packageName),
+        version: stringValue(topologyApp.deliveryUnit.version)
     } : void 0;
     return {
         id,
         directory,
         packageName,
+        version,
         port,
         apiPrefix,
+        apiProtocol,
+        rpcPath,
         apiStem,
         backendName,
         manifestUrl,
         containerEntry,
         remoteType,
         uiManifestUrl,
-        compactDeliveryUnit
+        topologyDeliveryUnit
     };
 };
 const findBackendFederationApp = async (workspaceRoot, appDirectory)=>{
-    const compactConfigPath = external_node_path_default().join(workspaceRoot, COMPACT_CONFIG_PATH);
-    const compactConfig = await readJsonFile(compactConfigPath);
-    const apps = Array.isArray(compactConfig.topology?.apps) ? compactConfig.topology.apps : [];
-    for (const app of apps){
-        const resolved = createAppFromCompactMetadata(workspaceRoot, appDirectory, app);
+    const topologyPath = external_node_path_default().join(workspaceRoot, external_workspace_topology_js_namespaceObject.REFERENCE_TOPOLOGY_PATH);
+    const topology = await readJsonFile(topologyPath);
+    if (!isRecord(topology) || !Array.isArray(topology.verticals)) throw new Error(`[backend-federation-build] Invalid declared topology at ${topologyPath}.`);
+    const overlayPath = external_node_path_default().join(workspaceRoot, external_workspace_topology_js_namespaceObject.DEVELOPMENT_OVERLAY_PATH);
+    const overlay = await readJsonFile(overlayPath);
+    if (!isRecord(overlay) || !isRecord(overlay.ports)) throw new Error(`[backend-federation-build] Invalid development overlay at ${overlayPath}.`);
+    const packageManifest = await readJsonFile(external_node_path_default().join(appDirectory, 'package.json'));
+    for (const app of topology.verticals){
+        const resolved = createAppFromTopology(workspaceRoot, appDirectory, app, overlay, packageManifest);
         if (resolved) return resolved;
     }
+    throw new Error(`[backend-federation-build] ${appDirectory} is missing from the declared reference topology.`);
 };
-exports.COMPACT_CONFIG_PATH = __webpack_exports__.COMPACT_CONFIG_PATH;
+exports.DEVELOPMENT_OVERLAY_PATH = __webpack_exports__.DEVELOPMENT_OVERLAY_PATH;
+exports.REFERENCE_TOPOLOGY_PATH = __webpack_exports__.REFERENCE_TOPOLOGY_PATH;
 exports.buildArtifactPathFor = __webpack_exports__.buildArtifactPathFor;
-exports.createAppFromCompactMetadata = __webpack_exports__.createAppFromCompactMetadata;
+exports.createAppFromTopology = __webpack_exports__.createAppFromTopology;
 exports.createStampedDeliveryUnit = __webpack_exports__.createStampedDeliveryUnit;
 exports.findBackendFederationApp = __webpack_exports__.findBackendFederationApp;
 exports.findWorkspaceRoot = __webpack_exports__.findWorkspaceRoot;
@@ -174,9 +212,10 @@ exports.normalizeRelativePath = __webpack_exports__.normalizeRelativePath;
 exports.readBuildIdentity = __webpack_exports__.readBuildIdentity;
 exports.resolveWorkspaceSourceRevision = __webpack_exports__.resolveWorkspaceSourceRevision;
 for(var __rspack_i in __webpack_exports__)if (-1 === [
-    "COMPACT_CONFIG_PATH",
+    "DEVELOPMENT_OVERLAY_PATH",
+    "REFERENCE_TOPOLOGY_PATH",
     "buildArtifactPathFor",
-    "createAppFromCompactMetadata",
+    "createAppFromTopology",
     "createStampedDeliveryUnit",
     "findBackendFederationApp",
     "findWorkspaceRoot",

package/dist/cjs/backend-federation-build/emit.js

@@ -48,9 +48,10 @@ var external_node_path_default = /*#__PURE__*/ __webpack_require__.n(external_no
 const release_identity_namespaceObject = require("@modern-js/app-tools-extensions/release-identity");
 const backend_federation_contracts_namespaceObject = require("@modern-js/backend-federation-contracts");
 const node_namespaceObject = require("@modern-js/server-runtime-extensions/backend-federation-security/node");
+const renderer_output_stamp_js_namespaceObject = require("../release-envelope/renderer-output-stamp.js");
 const external_codegen_js_namespaceObject = require("./codegen.js");
 const external_config_js_namespaceObject = require("./config.js");
-const emitBackendFederationArtifacts = async (appDirectory, distDirectory)=>{
+const emitBackendFederationArtifacts = async (appDirectory, distDirectory, options = {})=>{
     const workspaceRoot = (0, external_config_js_namespaceObject.findWorkspaceRoot)(appDirectory);
     if (!workspaceRoot) return;
     const effectApiPath = external_node_path_default().join(appDirectory, 'api/effect-api.ts');
@@ -59,35 +60,50 @@ const emitBackendFederationArtifacts = async (appDirectory, distDirectory)=>{
     const app = await (0, external_config_js_namespaceObject.findBackendFederationApp)(workspaceRoot, appDirectory);
     if (!app) return;
     const buildIdentity = await (0, external_config_js_namespaceObject.readBuildIdentity)(appDirectory);
-    const compactDeliveryUnit = app.compactDeliveryUnit;
-    const hasCompactDeliveryUnit = void 0 !== compactDeliveryUnit && (void 0 !== compactDeliveryUnit.unitId || void 0 !== compactDeliveryUnit.buildMarker || void 0 !== compactDeliveryUnit.packageName || void 0 !== compactDeliveryUnit.version);
+    const topologyDeliveryUnit = app.topologyDeliveryUnit;
+    const hasTopologyDeliveryUnit = void 0 !== topologyDeliveryUnit && (void 0 !== topologyDeliveryUnit.unitId || void 0 !== topologyDeliveryUnit.buildMarker || void 0 !== topologyDeliveryUnit.packageName || void 0 !== topologyDeliveryUnit.version);
     const hasBuildIdentity = void 0 !== buildIdentity.unitId || void 0 !== buildIdentity.buildVersion || void 0 !== buildIdentity.packageName || void 0 !== buildIdentity.version;
     if (hasBuildIdentity) {
-        const compactConfigPath = external_node_path_default().join(workspaceRoot, external_config_js_namespaceObject.COMPACT_CONFIG_PATH);
+        const topologyPath = external_node_path_default().join(workspaceRoot, external_config_js_namespaceObject.REFERENCE_TOPOLOGY_PATH);
         const buildIdentityPath = (0, external_config_js_namespaceObject.buildArtifactPathFor)(appDirectory);
         const mismatches = [];
         const compare = (label, a, b, leftLabel = 'deliveryUnit')=>{
             if (void 0 !== a && void 0 !== b && a !== b) mismatches.push(`${label}: ${leftLabel}=${a} vs ultramodern-build=${b}`);
         };
         compare('appId', app.id, buildIdentity.appId, 'topology');
-        if (hasCompactDeliveryUnit) {
-            compare('unitId', compactDeliveryUnit?.unitId, buildIdentity.unitId);
-            compare('buildMarker/build', compactDeliveryUnit?.buildMarker, buildIdentity.buildVersion);
-            compare('packageName', compactDeliveryUnit?.packageName, buildIdentity.packageName);
-            compare('version', compactDeliveryUnit?.version, buildIdentity.version);
+        if (hasTopologyDeliveryUnit) {
+            compare('unitId', topologyDeliveryUnit?.unitId, buildIdentity.unitId);
+            compare('buildMarker/build', topologyDeliveryUnit?.buildMarker, buildIdentity.buildVersion);
+            compare('packageName', topologyDeliveryUnit?.packageName, buildIdentity.packageName);
+            compare('version', topologyDeliveryUnit?.version, buildIdentity.version);
         }
-        if (mismatches.length > 0) throw new Error(`[backend-federation-build] Delivery-unit identity drift between ${compactConfigPath} (topology) and ${buildIdentityPath}: ${mismatches.join('; ')}`);
+        compare('packageName', app.packageName, buildIdentity.packageName, 'package.json');
+        compare('packageName', topologyDeliveryUnit?.packageName, app.packageName, 'topology');
+        compare('version', app.version, buildIdentity.version, 'package.json');
+        compare('version', topologyDeliveryUnit?.version, app.version, 'topology');
+        if (mismatches.length > 0) throw new Error(`[backend-federation-build] Delivery-unit identity drift between ${topologyPath}, package.json and ${buildIdentityPath}: ${mismatches.join('; ')}`);
     }
-    const unitId = compactDeliveryUnit?.unitId ?? buildIdentity.unitId;
-    const generationBuildMarker = compactDeliveryUnit?.buildMarker ?? buildIdentity.buildVersion;
-    const sourceRevision = await (0, external_config_js_namespaceObject.resolveWorkspaceSourceRevision)(workspaceRoot);
-    const buildVersion = generationBuildMarker && unitId ? (0, release_identity_namespaceObject.resolveUltramodernReleaseIdentity)({
+    const unitId = topologyDeliveryUnit?.unitId ?? buildIdentity.unitId;
+    const generationBuildMarker = topologyDeliveryUnit?.buildMarker ?? buildIdentity.buildVersion;
+    let finalizedRendererBuild;
+    if (options.resolveRendererBuild && buildIdentity.artifact?.surfaces.ui) {
+        if (!options.entrypoints?.length) throw new Error('[backend-federation-build] Renderer output stamping requires the actual finalized application entries.');
+        const context = {
+            appDirectory,
+            distDirectory,
+            entrypoints: options.entrypoints
+        };
+        finalizedRendererBuild = await options.resolveRendererBuild(context);
+        (0, renderer_output_stamp_js_namespaceObject.validateFinalizedRendererBuild)(finalizedRendererBuild, context, app.id);
+    }
+    const sourceRevision = finalizedRendererBuild?.sourceRevision ?? await (0, external_config_js_namespaceObject.resolveWorkspaceSourceRevision)(workspaceRoot);
+    const buildVersion = finalizedRendererBuild?.buildMarker ?? (generationBuildMarker && unitId ? (0, release_identity_namespaceObject.resolveUltramodernReleaseIdentity)({
         generationBuildMarker,
         unitId,
         workspaceRoot
-    }).buildMarker : void 0;
-    const packageName = compactDeliveryUnit?.packageName ?? buildIdentity.packageName ?? app.packageName;
-    const version = compactDeliveryUnit?.version ?? buildIdentity.version;
+    }).buildMarker : void 0);
+    const packageName = app.packageName;
+    const version = app.version;
     const deliveryUnit = (0, external_config_js_namespaceObject.createStampedDeliveryUnit)({
         appId: app.id,
         unitId,
@@ -96,10 +112,15 @@ const emitBackendFederationArtifacts = async (appDirectory, distDirectory)=>{
         version,
         sourceRevision
     });
-    const stampedBuildArtifact = buildIdentity.artifact ? (0, backend_federation_contracts_namespaceObject.stampUltramodernBuildArtifactIdentity)(buildIdentity.artifact, {
+    let stampedBuildArtifact = buildIdentity.artifact ? (0, backend_federation_contracts_namespaceObject.stampUltramodernBuildArtifactIdentity)(buildIdentity.artifact, {
         buildMarker: buildVersion ?? buildIdentity.artifact.deliveryUnit.buildMarker,
         sourceRevision
     }) : void 0;
+    if (finalizedRendererBuild && stampedBuildArtifact?.surfaces.ui) stampedBuildArtifact = (0, renderer_output_stamp_js_namespaceObject.stampFinalizedRendererBuildArtifact)(stampedBuildArtifact, finalizedRendererBuild, {
+        appDirectory,
+        distDirectory,
+        entrypoints: options.entrypoints
+    });
     const resolvedApp = {
         ...app,
         packageName,
@@ -130,15 +151,35 @@ const emitBackendFederationArtifacts = async (appDirectory, distDirectory)=>{
         remoteType: resolvedApp.remoteType
     };
 };
-const emit = ()=>({
+const emit = (options = {})=>{
+    if (options.resolveRendererBuild && !options.rendererBuildPlugin) throw new Error('[backend-federation-build] A finalized renderer resolver requires its owning metadata producer plugin.');
+    return {
         name: '@modern-js/backend-federation-build',
+        pre: options.resolveRendererBuild ? [
+            options.rendererBuildPlugin
+        ] : [],
+        required: options.resolveRendererBuild ? [
+            options.rendererBuildPlugin
+        ] : [],
         setup (api) {
             api.onAfterBuild(async ()=>{
-                const { appDirectory, distDirectory } = api.getAppContext();
-                await emitBackendFederationArtifacts(appDirectory, distDirectory);
+                const { appDirectory, distDirectory, entrypoints, apiOnly } = api.getAppContext();
+                if (options.resolveRendererBuild && !apiOnly) await (0, renderer_output_stamp_js_namespaceObject.emitRendererBuildArtifact)({
+                    appDirectory,
+                    distDirectory,
+                    entrypoints: entrypoints ?? []
+                }, {
+                    resolveRendererBuild: options.resolveRendererBuild,
+                    rendererBuildPlugin: options.rendererBuildPlugin
+                });
+                await emitBackendFederationArtifacts(appDirectory, distDirectory, {
+                    ...options,
+                    entrypoints
+                });
             });
         }
-    });
+    };
+};
 exports["default"] = __webpack_exports__["default"];
 exports.emitBackendFederationArtifacts = __webpack_exports__.emitBackendFederationArtifacts;
 for(var __rspack_i in __webpack_exports__)if (-1 === [