@bleedingdev/modern-js-bff-core 3.5.0-ultramodern.4 → 3.5.0-ultramodern.41

package/dist/types/adapter-kit/index.d.ts

@@ -3,7 +3,7 @@ import type { ResponseMeta } from '../operators/http';
 import type { APIHandlerInfo, ApiHandler } from '../router';
 import { type CrossProjectPolicyConfig, type CrossProjectPolicyViolation } from '../security/crossProjectPolicy';
 import { HttpMethod } from '../types';
-/** Lowercase route-registration method shared by express/koa/hono routers. */
+/** Lowercase route-registration method shared by supported adapter routers. */
 export type ApiRouteMethod = Lowercase<`${HttpMethod}`>;
 /**
  * Maps an `APIHandlerInfo.httpMethod` onto the lowercase router method.
@@ -74,7 +74,7 @@ export type ApiHandlerInput = {
  * Positional invocation convention for plain function handlers: route params
  * in declaration order followed by the full input object.
  */
-export declare const buildPositionalHandlerArgs: (input: ApiHandlerInput) => unknown[];
+export declare const buildPositionalHandlerArgs: (input: ApiHandlerInput, routePath?: string) => unknown[];
 export type CrossProjectPolicyDenial = {
     status: number;
     body: {

package/dist/types/adapter-kit/parity-scenarios/cross-project-denial.d.ts

@@ -0,0 +1,2 @@
+import type { AdapterParityScenario } from './shared';
+export declare const createCrossProjectDenialScenarios: () => AdapterParityScenario[];

package/dist/types/adapter-kit/parity-scenarios/envelope.d.ts

@@ -0,0 +1,2 @@
+import type { AdapterParityScenario } from './shared';
+export declare const createEnvelopeParityScenarios: () => AdapterParityScenario[];

package/dist/types/adapter-kit/parity-scenarios/operation-context.d.ts

@@ -0,0 +1,3 @@
+import type { AdapterParityScenario, AdapterParityScenarioContext } from './shared';
+export declare const createOperationContextSuccessScenarios: ({ helloContract, validEnvelope, validOperationId, }: AdapterParityScenarioContext) => AdapterParityScenario[];
+export declare const createOperationContextDenialScenarios: ({ helloContract, validEnvelope, validOperationId, }: AdapterParityScenarioContext) => AdapterParityScenario[];

package/dist/types/adapter-kit/parity-scenarios/schema.d.ts

@@ -0,0 +1,2 @@
+import type { AdapterParityScenario } from './shared';
+export declare const createSchemaParityScenarios: () => AdapterParityScenario[];

package/dist/types/adapter-kit/parity-scenarios/shared.d.ts

@@ -0,0 +1,32 @@
+import type { CrossProjectOperationContract, CrossProjectPolicyViolationReason } from '../../security/crossProjectPolicy';
+export declare const PARITY_REQUEST_ID = "crm";
+export declare const PARITY_PRODUCER_REQUEST_ID = "crm.producer-a";
+export type ParityExpectation = {
+    kind: 'payload';
+    status: number;
+    payload: unknown;
+} | {
+    kind: 'denied';
+    status: number;
+    reason: CrossProjectPolicyViolationReason;
+};
+export type AdapterParityScenario = {
+    name: string;
+    /** Run against policy-enabled server instead of the open one. */
+    policy: boolean;
+    request: {
+        method: 'get' | 'post' | 'patch';
+        path: string;
+        headers?: Record<string, string>;
+        body?: unknown;
+    };
+    expected: ParityExpectation;
+};
+export type AdapterParityScenarioContext = {
+    helloContract: CrossProjectOperationContract;
+    validEnvelope: string;
+    validOperationId: string;
+};
+export declare const envelopeHeader: (requestId: unknown) => string;
+export declare const detailHeader: (details: Record<string, unknown>) => string;
+export declare const deniedScenario: (name: string, reason: CrossProjectPolicyViolationReason, headers: Record<string, string>) => AdapterParityScenario;

package/dist/types/adapter-kit/parity.d.ts

@@ -1,84 +1,25 @@
 import type { APIHandlerInfo } from '../router';
-import type { CrossProjectPolicyViolationReason } from '../security/crossProjectPolicy';
-/**
- * Adapter parity (conformance) kit.
- *
- * One shared table of scenarios executed against every BFF server adapter
- * in its own test harness. Each scenario asserts the adapters produce
- * identical observable results: HTTP status, payload value and
- * policy-rejection reason.
- *
- * The express/koa adapters were removed from the fork, and this is internal
- * test support rather than a package subpath. Their expectations are retained
- * in the per-adapter drift pins as documentation of the historical behavior.
- * The live executable consumer of this table is the hono lane test
- * (`@modern-js/plugin-bff` runs it against `createHonoRoutes` plus the
- * cross-project policy middleware), while bff-core tests validate the table
- * shape and assertion helpers.
- *
- * Transport details intentionally NOT asserted: express serialized scalar
- * bodies as JSON while koa sent `text/plain`; {@link toParityResult}
- * normalizes both to the decoded payload value before comparison.
- *
- * Intentionally OUT OF SCOPE (known, accepted adapter drift — do not add
- * scenarios without deciding the drift first):
- * - operator route-middlewares: express applied them, koa ignored them;
- * - multipart/form-data: payload shapes differ per body parser;
- * - undefined-returning plain handlers are pinned via a per-adapter
- *   scenario below: express ended the response 200/empty, koa served its
- *   stock 404 ("Not Found"), hono serves its stock "404 Not Found";
- * - farrow schema-mode handlers are pinned per-adapter below: express/koa
- *   unwrapped the result envelope (200/400/500), the hono lane has no
- *   schema-mode unwrapping and passes the raw envelope through.
- */
-export declare const PARITY_REQUEST_ID = "crm";
-export declare const PARITY_PRODUCER_REQUEST_ID = "crm.producer-a";
+import type { AdapterParityScenario } from './parity-scenarios/shared';
+export type { AdapterParityScenario, ParityExpectation, } from './parity-scenarios/shared';
+export { PARITY_PRODUCER_REQUEST_ID, PARITY_REQUEST_ID, } from './parity-scenarios/shared';
 /**
  * Handler fixtures registered in both adapters before running the table.
  */
 export declare const createParityApiHandlerInfos: () => APIHandlerInfo[];
 /**
- * `bff` config slice for the policy-enabled parity server. All `require*`
- * switches stay at their strict defaults.
+ * `bff` config slice for policy-enabled parity server. All `require*`
+ * switches stay at strict defaults.
  */
 export declare const createParityBffConfig: () => {
     requestId: string;
     crossProjectPolicy: {
         enabled: boolean;
         allowedNamespaces: string[];
+        allowClientAssertedNamespace: boolean;
     };
 };
-export type ParityAdapterId = 'express' | 'koa' | 'hono';
-export type ParityExpectation = {
-    kind: 'payload';
-    status: number;
-    payload: unknown;
-} | {
-    kind: 'denied';
-    status: number;
-    reason: CrossProjectPolicyViolationReason;
-} | {
-    /** Pinned, intentional adapter drift: each adapter has its own expectation. */
-    kind: 'perAdapter';
-    expectations: Record<ParityAdapterId, {
-        status: number;
-        payload: unknown;
-    }>;
-};
-export type AdapterParityScenario = {
-    name: string;
-    /** Run against the policy-enabled server instead of the open one. */
-    policy: boolean;
-    request: {
-        method: 'get' | 'post' | 'patch';
-        path: string;
-        headers?: Record<string, string>;
-        body?: unknown;
-    };
-    expected: ParityExpectation;
-};
 export declare const createAdapterParityScenarios: () => AdapterParityScenario[];
-/** Structural slice of a supertest response used for normalization. */
+/** Structural slice of supertest response used for normalization. */
 export type ParityHttpResponse = {
     status: number;
     /** Content-type mime, e.g. `application/json`. */
@@ -86,17 +27,17 @@ export type ParityHttpResponse = {
     body: unknown;
     text: string;
 };
-export type AdapterParityResult = {
+type AdapterParityResult = {
     status: number;
     payload: unknown;
 };
 /**
- * Normalizes a raw HTTP response to the observable payload value so JSON
- * (express) and text (koa) encodings of the same scalar compare equal.
+ * Normalizes raw HTTP response into an observable payload value so JSON and
+ * text encodings of the same scalar compare equal.
  */
 export declare const toParityResult: (res: ParityHttpResponse) => AdapterParityResult;
 /**
- * Framework-agnostic assertion: throws a descriptive error when the adapter
+ * Framework-agnostic assertion: throws a descriptive error when adapter
  * response deviates from the scenario expectation.
  */
-export declare const assertParityResult: (scenario: AdapterParityScenario, res: ParityHttpResponse, adapter?: ParityAdapterId) => void;
+export declare const assertParityResult: (scenario: AdapterParityScenario, res: ParityHttpResponse) => void;

package/dist/types/index.d.ts

@@ -2,7 +2,6 @@ export * from './adapter-kit';
 export { Api } from './api';
 export * from './client';
 export type * from './compatible';
-export * from './contracts/eventContracts';
 export { HttpError, ValidationError } from './errors/http';
 export * from './operators/http';
 export * from './router';

package/dist/types/operators/http.d.ts

@@ -38,7 +38,7 @@ export declare const HttpCode: (statusCode: number) => Operator<void>;
 export declare const SetHeaders: (headers: Record<string, string>) => Operator<void>;
 export declare const Redirect: (url: string) => Operator<void>;
 export declare const Upload: <Schema extends z.ZodType>(urlPath: string, schema?: Schema) => Operator<{
-    files: z.input<Schema>;
+    formData: z.input<Schema>;
 }, {
     formData: z.output<Schema>;
 }>;

package/dist/types/security/crossProjectPolicy.d.ts

@@ -10,14 +10,16 @@
  * authorization boundary: any caller can echo an allowed `requestId` and a
  * matching operation context.
  *
- * To turn `allowedNamespaces` into a real control, supply
+ * To use `allowedNamespaces`, supply
  * {@link CrossProjectPolicyConfig.verifyProducerIdentity}: a server-side
  * hook that derives the producer namespace from a VERIFIED channel (mTLS
  * peer identity, gateway-authenticated JWT claims, service-mesh headers
- * stripped at the edge, ...). When the hook is present, the client-asserted
- * namespace must match the verified namespace and the allowlist is checked
- * against the verified value — the envelope is no longer trusted for the
- * authorization decision.
+ * stripped at the edge, ...). Requests fail closed when a namespace allowlist
+ * is configured without this hook unless `allowClientAssertedNamespace` is
+ * explicitly enabled. That escape hatch keeps legacy local/demo ergonomics:
+ * the client-asserted namespace must match the allowlist. When the hook is
+ * present, the client-asserted namespace must match the verified namespace
+ * and the allowlist is checked against the verified value.
  *
  * Client-side counterparts in `@modern-js/create-request` (identity binding,
  * operation contract validation) are developer-experience aids that fail
@@ -46,6 +48,12 @@ export interface CrossProjectPolicyConfig {
     requireOperationSchemaHash?: boolean;
     requireOperationVersion?: boolean;
     allowedNamespaces?: string[];
+    /**
+     * Explicit local/demo escape hatch for legacy clients that only provide
+     * client-built requestId namespaces. Defaults to false. Enabling this keeps
+     * `allowedNamespaces` advisory and must not be used as authorization.
+     */
+    allowClientAssertedNamespace?: boolean;
     envelopeHeader?: string;
     operationContextHeader?: string;
     operationContextDetailHeader?: string;
@@ -53,7 +61,7 @@ export interface CrossProjectPolicyConfig {
     allowUnknownOperations?: boolean;
     denyStatus?: number;
     /**
-     * Server-side hook binding the producer namespace to a VERIFIED identity
+     * Server-side hook binding producer namespace to VERIFIED identity
      * channel (mTLS peer, gateway-authenticated JWT, mesh identity headers).
      *
      * When provided, the namespace asserted by the client envelope must match
@@ -61,8 +69,9 @@ export interface CrossProjectPolicyConfig {
      * against the verified value instead of the client-asserted one. Returning
      * `undefined` (identity could not be verified) denies the request.
      *
-     * Without this hook the namespace checks are advisory only — see the
-     * module-level threat model.
+     * By default, `allowedNamespaces` requires this hook and fails closed
+     * without it. Set `allowClientAssertedNamespace` only for local/demo
+     * ergonomics where advisory client-asserted namespace checks are acceptable.
      */
     verifyProducerIdentity?: (headers: Record<string, unknown>) => string | undefined;
 }

package/package.json

@@ -17,7 +17,7 @@
     "modern",
     "modern.js"
   ],
-  "version": "3.5.0-ultramodern.4",
+  "version": "3.5.0-ultramodern.41",
   "types": "./dist/types/index.d.ts",
   "main": "./dist/cjs/index.js",
   "exports": {
@@ -35,19 +35,19 @@
     "@swc/helpers": "^0.5.23",
     "koa-compose": "^4.1.0",
     "reflect-metadata": "^0.2.2",
-    "type-fest": "5.7.0",
-    "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.5.0-ultramodern.4"
+    "type-fest": "5.8.0",
+    "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.5.0-ultramodern.41"
   },
   "devDependencies": {
-    "@rslib/core": "0.23.1",
+    "@rslib/core": "0.23.2",
     "@types/koa-compose": "^3.2.9",
-    "@types/node": "^26.0.1",
-    "@typescript/native-preview": "7.0.0-dev.20260628.1",
+    "@types/node": "^26.1.1",
+    "@typescript/native-preview": "7.0.0-dev.20260707.2",
     "tsconfig-paths": "^4.2.0",
     "zod": "^4.4.3",
-    "@modern-js/bff-runtime": "npm:@bleedingdev/modern-js-bff-runtime@3.5.0-ultramodern.4",
-    "@modern-js/types": "npm:@bleedingdev/modern-js-types@3.5.0-ultramodern.4",
-    "@scripts/rstest-config": "2.66.0"
+    "@modern-js/bff-runtime": "npm:@bleedingdev/modern-js-bff-runtime@3.5.0-ultramodern.41",
+    "@scripts/rstest-config": "2.66.0",
+    "@modern-js/types": "npm:@bleedingdev/modern-js-types@3.5.0-ultramodern.41"
   },
   "peerDependencies": {
     "tsconfig-paths": "^4.2.0",

package/dist/cjs/contracts/eventContracts.js

@@ -1,72 +0,0 @@
-"use strict";
-var __webpack_require__ = {};
-(()=>{
-    __webpack_require__.d = (exports1, getters, values)=>{
-        var define = (defs, kind)=>{
-            for(var key in defs)if (__webpack_require__.o(defs, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
-                enumerable: true,
-                [kind]: defs[key]
-            });
-        };
-        define(getters, "get");
-        define(values, "value");
-    };
-})();
-(()=>{
-    __webpack_require__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
-})();
-(()=>{
-    __webpack_require__.r = (exports1)=>{
-        if ("u" > typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
-            value: 'Module'
-        });
-        Object.defineProperty(exports1, '__esModule', {
-            value: true
-        });
-    };
-})();
-var __webpack_exports__ = {};
-__webpack_require__.r(__webpack_exports__);
-const defineEventContract = (input)=>{
-    const normalizedName = input.name.trim();
-    if (!normalizedName) throw new Error('Event contract name must be non-empty');
-    if (!Number.isFinite(input.version) || input.version <= 0) throw new Error('Event contract version must be a positive number');
-    if (!input.schemaHash || !input.schemaHash.trim()) throw new Error('Event contract schemaHash must be non-empty');
-    return {
-        name: normalizedName,
-        version: Math.floor(input.version),
-        schemaHash: input.schemaHash.trim(),
-        description: input.description
-    };
-};
-const createEventEnvelope = (contract, payload, meta)=>({
-        name: contract.name,
-        version: contract.version,
-        schemaHash: contract.schemaHash,
-        timestamp: Date.now(),
-        payload,
-        ...meta ? {
-            meta
-        } : {}
-    });
-const isEventEnvelope = (value)=>{
-    if (!value || 'object' != typeof value || Array.isArray(value)) return false;
-    const candidate = value;
-    return 'string' == typeof candidate.name && candidate.name.length > 0 && 'number' == typeof candidate.version && candidate.version > 0 && 'string' == typeof candidate.schemaHash && candidate.schemaHash.length > 0 && 'number' == typeof candidate.timestamp && Number.isFinite(candidate.timestamp) && 'payload' in candidate;
-};
-__webpack_require__.d(__webpack_exports__, {}, {
-    createEventEnvelope: createEventEnvelope,
-    defineEventContract: defineEventContract,
-    isEventEnvelope: isEventEnvelope
-});
-exports.createEventEnvelope = __webpack_exports__.createEventEnvelope;
-exports.defineEventContract = __webpack_exports__.defineEventContract;
-exports.isEventEnvelope = __webpack_exports__.isEventEnvelope;
-for(var __rspack_i in __webpack_exports__)if (-1 === [
-    "createEventEnvelope",
-    "defineEventContract",
-    "isEventEnvelope"
-].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
-Object.defineProperty(exports, '__esModule', {
-    value: true
-});

package/dist/esm/contracts/eventContracts.mjs

@@ -1,28 +0,0 @@
-const defineEventContract = (input)=>{
-    const normalizedName = input.name.trim();
-    if (!normalizedName) throw new Error('Event contract name must be non-empty');
-    if (!Number.isFinite(input.version) || input.version <= 0) throw new Error('Event contract version must be a positive number');
-    if (!input.schemaHash || !input.schemaHash.trim()) throw new Error('Event contract schemaHash must be non-empty');
-    return {
-        name: normalizedName,
-        version: Math.floor(input.version),
-        schemaHash: input.schemaHash.trim(),
-        description: input.description
-    };
-};
-const createEventEnvelope = (contract, payload, meta)=>({
-        name: contract.name,
-        version: contract.version,
-        schemaHash: contract.schemaHash,
-        timestamp: Date.now(),
-        payload,
-        ...meta ? {
-            meta
-        } : {}
-    });
-const isEventEnvelope = (value)=>{
-    if (!value || 'object' != typeof value || Array.isArray(value)) return false;
-    const candidate = value;
-    return 'string' == typeof candidate.name && candidate.name.length > 0 && 'number' == typeof candidate.version && candidate.version > 0 && 'string' == typeof candidate.schemaHash && candidate.schemaHash.length > 0 && 'number' == typeof candidate.timestamp && Number.isFinite(candidate.timestamp) && 'payload' in candidate;
-};
-export { createEventEnvelope, defineEventContract, isEventEnvelope };

package/dist/esm-node/contracts/eventContracts.mjs

@@ -1,29 +0,0 @@
-import "node:module";
-const defineEventContract = (input)=>{
-    const normalizedName = input.name.trim();
-    if (!normalizedName) throw new Error('Event contract name must be non-empty');
-    if (!Number.isFinite(input.version) || input.version <= 0) throw new Error('Event contract version must be a positive number');
-    if (!input.schemaHash || !input.schemaHash.trim()) throw new Error('Event contract schemaHash must be non-empty');
-    return {
-        name: normalizedName,
-        version: Math.floor(input.version),
-        schemaHash: input.schemaHash.trim(),
-        description: input.description
-    };
-};
-const createEventEnvelope = (contract, payload, meta)=>({
-        name: contract.name,
-        version: contract.version,
-        schemaHash: contract.schemaHash,
-        timestamp: Date.now(),
-        payload,
-        ...meta ? {
-            meta
-        } : {}
-    });
-const isEventEnvelope = (value)=>{
-    if (!value || 'object' != typeof value || Array.isArray(value)) return false;
-    const candidate = value;
-    return 'string' == typeof candidate.name && candidate.name.length > 0 && 'number' == typeof candidate.version && candidate.version > 0 && 'string' == typeof candidate.schemaHash && candidate.schemaHash.length > 0 && 'number' == typeof candidate.timestamp && Number.isFinite(candidate.timestamp) && 'payload' in candidate;
-};
-export { createEventEnvelope, defineEventContract, isEventEnvelope };

package/dist/types/contracts/eventContracts.d.ts

@@ -1,22 +0,0 @@
-export type EventContract<Name extends string = string, Payload = unknown> = {
-    name: Name;
-    version: number;
-    schemaHash: string;
-    description?: string;
-};
-export type EventEnvelope<TContract extends EventContract = EventContract, TMeta extends Record<string, unknown> = Record<string, unknown>> = {
-    name: TContract['name'];
-    version: TContract['version'];
-    schemaHash: TContract['schemaHash'];
-    timestamp: number;
-    payload: TContract extends EventContract<string, infer TPayload> ? TPayload : unknown;
-    meta?: TMeta;
-};
-export declare const defineEventContract: <Name extends string, Payload = unknown>(input: {
-    name: Name;
-    version: number;
-    schemaHash: string;
-    description?: string;
-}) => EventContract<Name, Payload>;
-export declare const createEventEnvelope: <TContract extends EventContract, TMeta extends Record<string, unknown> = Record<string, unknown>>(contract: TContract, payload: TContract extends EventContract<string, infer TPayload> ? TPayload : unknown, meta?: TMeta) => EventEnvelope<TContract, TMeta>;
-export declare const isEventEnvelope: (value: unknown) => value is EventEnvelope<EventContract, Record<string, unknown>>;