@bleedingdev/modern-js-code-tools 3.9.0-ultramodern.11 → 3.9.0-ultramodern.13

package/dist/esm/microvertical-api-boundary.js

@@ -1,8 +1,9 @@
 import node_fs from "node:fs";
 import node_path from "node:path";
 import { parse } from "@babel/parser";
-import { configuredMicroVerticalApiStem, consumerParserPlugins, microVerticalApiBaselineViolation } from "./microvertical-api-baseline.js";
+import { configuredMicroVerticalApiStem, microVerticalApiBaselineViolation } from "./microvertical-api-baseline.js";
 import { baselinePackage, resolveBaselinePackageDirectory } from "./microvertical-api-owner.js";
+import { consumerParserPlugins } from "./source-analysis.js";
 import { createEffectApiImportResolver, strictEffectRuntimeTopologyViolation } from "./strict-effect-runtime.js";
 import * as __rspack_external__babel_types_6e8337dd from "@babel/types";
 const ignored = new Set([
@@ -19,13 +20,42 @@ const normalize = (file)=>file.split(node_path.sep).join('/').replace(/^\.\//u,
 const errorMessage = (error)=>error instanceof Error ? error.message : String(error);
 const apiApp = (app)=>'vertical' === app.kind && 'ui-only' !== app.surfaceProfile && 'horizontal-remote' !== app.deliveryUnitKind;
 function configuredApps(root, supplied) {
-    const source = supplied ?? JSON.parse(node_fs.readFileSync(node_path.join(root, '.modernjs/ultramodern.json'), 'utf8')).topology?.apps;
-    if (!Array.isArray(source)) throw new Error('.modernjs/ultramodern.json: topology.apps must be an array');
+    const topology = supplied ? void 0 : JSON.parse(node_fs.readFileSync(node_path.join(root, 'topology/reference-topology.json'), 'utf8'));
+    if (topology && (!topology.shell || !Array.isArray(topology.verticals) || void 0 !== topology.shells && !Array.isArray(topology.shells))) throw new Error('topology/reference-topology.json: shell and verticals must be present');
+    const entries = topology?.shell ? [
+        topology.shell,
+        ...topology.shells ?? [],
+        ...topology.verticals ?? []
+    ] : void 0;
+    const source = supplied ?? entries?.map((entry)=>{
+        if (!entry || 'string' != typeof entry.path || !entry.path || node_path.isAbsolute(entry.path) || entry.path.split(/[\\/]/u).includes('..')) throw new Error('topology/reference-topology.json: each app must have an explicit workspace path');
+        const packageFile = node_path.join(root, entry.path, 'package.json');
+        const manifest = JSON.parse(node_fs.readFileSync(packageFile, 'utf8'));
+        if ('string' != typeof manifest.name || !manifest.name || void 0 !== entry.package && entry.package !== manifest.name) throw new Error(`${entry.path}/package.json: package name must match topology`);
+        const api = entry.api;
+        const stem = api?.stem ?? api?.readiness?.endpoint?.match(/^\/([a-z0-9]+(?:-[a-z0-9]+)*)\/readiness$/u)?.[1];
+        return {
+            id: entry.id,
+            kind: entry.kind,
+            path: entry.path,
+            package: manifest.name,
+            surfaceProfile: entry.surfaceProfile,
+            deliveryUnitKind: entry.deliveryUnitKind,
+            ...void 0 === api ? {} : {
+                api: {
+                    stem,
+                    prefix: api.bff?.prefix,
+                    protocol: api.protocol
+                }
+            }
+        };
+    });
+    if (!Array.isArray(source)) throw new Error('topology/reference-topology.json: shell and verticals must describe apps');
     const paths = new Set();
     for (const app of source){
-        if (!app || 'object' != typeof app || 'string' != typeof app.path || !app.path || node_path.isAbsolute(app.path) || app.path.split(/[\\/]/u).includes('..')) throw new Error('.modernjs/ultramodern.json: each app must have a relative workspace path');
+        if (!app || 'object' != typeof app || 'string' != typeof app.path || !app.path || node_path.isAbsolute(app.path) || app.path.split(/[\\/]/u).includes('..')) throw new Error('topology/reference-topology.json: each app must have a relative workspace path');
         const key = normalize(app.path);
-        if (paths.has(key)) throw new Error(`.modernjs/ultramodern.json: duplicate app path ${key}`);
+        if (paths.has(key)) throw new Error(`topology/reference-topology.json: duplicate app path ${key}`);
         paths.add(key);
         for (const name of [
             'id',
@@ -34,7 +64,7 @@ function configuredApps(root, supplied) {
             'surfaceProfile',
             'deliveryUnitKind'
         ])if (void 0 !== app[name] && 'string' != typeof app[name]) throw new Error(`${key}: ${name} must be a string`);
-        for (const [field, allowed] of Object.entries({
+        const allowedFields = {
             kind: [
                 'shell',
                 'vertical'
@@ -48,7 +78,11 @@ function configuredApps(root, supplied) {
                 'microvertical',
                 'horizontal-remote'
             ]
-        }))if (void 0 !== app[field] && !allowed.includes(app[field])) throw new Error(`${key}: invalid ${field}`);
+        };
+        for (const field of Object.keys(allowedFields)){
+            const value = app[field];
+            if (void 0 !== value && !allowedFields[field].includes(value)) throw new Error(`${key}: invalid ${field}`);
+        }
         if (void 0 !== app.api) {
             if (!app.api || 'object' != typeof app.api || Array.isArray(app.api)) throw new Error(`${key}: api must be an object`);
             if (void 0 !== app.api.protocol && ![
@@ -136,12 +170,27 @@ function check(options, topology) {
                 `${base}/index.tsx`
             ].find((candidate)=>exists(candidate));
         };
-        const composedModules = (file)=>{
+        const clientExportFile = (appPath, exported)=>{
+            if ('string' != typeof exported || !exported.startsWith('./') || exported.split(/[\\/]/u).includes('..') || !/\.[cm]?[jt]sx?$/u.test(exported)) return;
+            const appDirectory = absolute(appPath);
+            const candidate = node_path.resolve(appDirectory, exported);
+            try {
+                const workspace = node_fs.realpathSync(root);
+                const owner = node_fs.realpathSync(appDirectory);
+                const real = node_fs.realpathSync(candidate);
+                if (!owner.startsWith(`${workspace}${node_path.sep}`) || !real.startsWith(`${owner}${node_path.sep}`) || !node_fs.statSync(real).isFile()) return;
+            } catch  {
+                return;
+            }
+            return normalize(node_path.relative(root, candidate));
+        };
+        const composedModules = (file, appPath)=>{
             const order = [];
             const seen = new Set();
             const queue = [
                 file
             ];
+            const owner = node_fs.realpathSync(absolute(appPath));
             while(queue.length > 0 && order.length < 128){
                 const current = queue.shift();
                 if (seen.has(current)) continue;
@@ -152,16 +201,19 @@ function check(options, topology) {
                 for (const statement of ast.program.body){
                     const source = (__rspack_external__babel_types_6e8337dd.isImportDeclaration(statement) || __rspack_external__babel_types_6e8337dd.isExportNamedDeclaration(statement) || __rspack_external__babel_types_6e8337dd.isExportAllDeclaration(statement)) && statement.source ? statement.source.value : void 0;
                     const resolved = void 0 === source ? void 0 : resolveRelative(current, source);
-                    if (void 0 !== resolved && !seen.has(resolved)) queue.push(resolved);
+                    if (void 0 !== resolved && !seen.has(resolved)) {
+                        const real = node_fs.realpathSync(absolute(resolved));
+                        if (real.startsWith(`${owner}${node_path.sep}`)) queue.push(resolved);
+                    }
                 }
             }
             return order;
         };
-        const moduleShape = (file, imports, calls, patterns = [], defaultExport, composed = false)=>{
+        const moduleShape = (file, imports, calls, patterns = [], defaultExport, composedAppPath)=>{
             if (!exists(file)) return;
             const ast = parseFile(file);
             if (!ast) return;
-            const shapeFiles = composed ? composedModules(file) : [
+            const shapeFiles = composedAppPath ? composedModules(file, composedAppPath) : [
                 file
             ];
             const body = shapeFiles.flatMap((shapeFile)=>parseFile(shapeFile)?.program.body ?? []);
@@ -271,19 +323,25 @@ function check(options, topology) {
                 }
                 return;
             }
-            if (app?.kind === 'vertical') assert(void 0 !== app.api, `${appPath}: vertical must declare its Effect API in .modernjs/ultramodern.json`);
+            if (app?.kind === 'vertical') assert(void 0 !== app.api, `${appPath}: vertical must declare its Effect API in topology/reference-topology.json`);
             const stem = app?.api?.stem ?? node_path.posix.basename(appPath);
             const rpc = app?.api?.protocol === 'rpc';
             const contract = `${appPath}/shared/${rpc ? 'rpc' : 'api'}.ts`;
-            const client = `${appPath}/src/api/${stem}-${rpc ? 'rpc-client' : 'client'}.ts`;
             const entry = `${appPath}/api/index.ts`;
             for (const file of [
                 entry,
-                contract,
-                client
+                contract
             ])assert(exists(file), `${file}: required API surface is missing`);
+            const packageFile = `${appPath}/package.json`;
+            assert(exists(packageFile), `${packageFile}: required API package is missing`);
+            if (!exists(packageFile)) return;
+            const manifest = JSON.parse(read(packageFile));
+            assert(manifest.exports?.['./api'] === `./shared/${rpc ? 'rpc' : 'api'}.ts`, `${packageFile}: invalid ./api export`);
+            const clientKey = `./api/${rpc ? 'rpc-client' : 'client'}`;
+            const client = clientExportFile(appPath, manifest.exports?.[clientKey]);
+            assert(void 0 !== client, `${packageFile}: invalid API client export`);
+            assert(manifest.exports?.[`./api/${rpc ? 'client' : 'rpc-client'}`] === void 0, `${packageFile}: forbidden opposite protocol client export`);
             noPath(`${appPath}/shared/${rpc ? 'api' : 'rpc'}.ts`, `must not emit a ${rpc ? 'REST' : 'RPC'} contract`);
-            noPath(`${appPath}/src/api/${stem}-${rpc ? 'client' : 'rpc-client'}.ts`, `must not emit a ${rpc ? 'REST' : 'RPC'} client`);
             if (rpc) {
                 moduleShape(entry, [
                     [
@@ -349,21 +407,24 @@ function check(options, topology) {
                 const violation = microVerticalApiBaselineViolation(stem, absolute(contract), expectation);
                 if (violation) diagnostics.push(`${contract}: ${violation}`);
             }
-            moduleShape(client, [
-                [
-                    effect,
+            if (client) {
+                const relativeContract = node_path.posix.relative(node_path.posix.dirname(client), contract);
+                moduleShape(client, [
+                    [
+                        effect,
+                        [
+                            'Effect',
+                            rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient'
+                        ]
+                    ],
                     [
-                        'Effect',
-                        rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient'
+                        relativeContract.startsWith('.') ? relativeContract : `./${relativeContract}`,
+                        []
                     ]
-                ],
-                [
-                    rpc ? '../../shared/rpc.ts' : '../../shared/api',
-                    []
-                ]
-            ], [
-                rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient'
-            ], [], void 0, true);
+                ], [
+                    rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient'
+                ], [], void 0, appPath);
+            }
             moduleShape(`${appPath}/api/effect-api.ts`, [], [], [
                 [
                     /\bbackendFederationContract\b/u,
@@ -404,13 +465,6 @@ function check(options, topology) {
                     'must enable strictEffectApproach'
                 ]
             ]);
-            const packageFile = `${appPath}/package.json`;
-            if (exists(packageFile)) {
-                const manifest = JSON.parse(read(packageFile));
-                assert(manifest.exports?.['./api'] === `./shared/${rpc ? 'rpc' : 'api'}.ts`, `${packageFile}: invalid ./api export`);
-                assert(manifest.exports?.[`./api/${rpc ? 'rpc-client' : 'client'}`] === `./src/api/${stem}-${rpc ? 'rpc-client' : 'client'}.ts`, `${packageFile}: invalid API client export`);
-                assert(manifest.exports?.[`./api/${rpc ? 'client' : 'rpc-client'}`] === void 0, `${packageFile}: forbidden opposite protocol client export`);
-            }
         });
         const shell = 'apps/shell-super-app';
         const verticals = apps.filter((app)=>app.path.startsWith('verticals/') && apiApp(app));

package/dist/esm/oxlint-plugin/rules/strict-effect-api-boundaries.js

@@ -20,7 +20,7 @@ const createStrictEffectApiBoundariesRule = ()=>({
                     });
                     reportProgramPattern(context, node, source, /@modern-js\/plugin-bff\/(?:server|hono-server)(?![\w-])/u, 'UltraModern API workspaces must not import Hono server helpers; use @modern-js/bff-effect/effect-edge and HttpApi.');
                     reportProgramPattern(context, node, source, /\bruntimeFramework\s*(?::|=)\s*['"]hono['"]/u, 'UltraModern API apps must use bff.runtimeFramework: "effect".');
-                    reportProgramPattern(context, node, source, /(?:from|import)\s*['"][^'"]*(?:api\/effect|shared\/effect)[^'"]*['"]|shared-effect-api/u, 'Import API code from direct api/index.ts, shared/api.ts or src/api/* paths, not api/effect, shared/effect or shared Effect API packages.');
+                    reportProgramPattern(context, node, source, /(?:from|import)\s*['"][^'"]*(?:api\/effect|shared\/effect)(?=\/|\.[cm]?[jt]sx?['"]|['"])[^'"]*['"]|shared-effect-api/u, 'Import API code from direct api/index.ts, shared/api.ts or src/api/* paths, not api/effect, shared/effect or shared Effect API packages.');
                     reportProgramPattern(context, node, source, /\bstrictEffectApproach\s*(?::|=)\s*false\b/u, 'UltraModern API apps must keep strictEffectApproach enabled.');
                     if (isApiEntryFile(filename)) {
                         const violation = strictEffectRuntimeTopologyViolation(source, createEffectApiImportResolver(filename));

package/dist/esm/source-analysis.js

@@ -0,0 +1,44 @@
+import { parse } from "@babel/parser";
+import traverse, { Hub, NodePath } from "@babel/traverse";
+import * as __rspack_external__babel_types_6e8337dd from "@babel/types";
+const consumerParserPlugins = (filePath)=>/\.[jt]sx$/u.test(filePath) ? [
+        "typescript",
+        'jsx'
+    ] : [
+        "typescript"
+    ];
+class SourceSyntaxError extends Error {
+}
+class SourceValidationHub extends Hub {
+    buildError(_node, message) {
+        return new SourceSyntaxError(message);
+    }
+}
+function parseSource(source, filename, syntaxMessage) {
+    try {
+        return parse(source, {
+            sourceType: 'module',
+            sourceFilename: filename,
+            plugins: consumerParserPlugins(filename)
+        });
+    } catch (cause) {
+        if ('object' == typeof cause && null !== cause && 'code' in cause && 'BABEL_PARSER_SYNTAX_ERROR' === cause.code && 'reasonCode' in cause && 'string' == typeof cause.reasonCode) throw new SourceSyntaxError(syntaxMessage ?? (cause instanceof Error ? cause.message : String(cause)));
+        throw cause;
+    }
+}
+function traverseSource(file, visitor) {
+    const program = NodePath.get({
+        hub: new SourceValidationHub(),
+        parentPath: void 0,
+        parent: file,
+        container: file,
+        key: 'program'
+    });
+    program.setContext();
+    traverse(file, visitor, program.scope, void 0, program);
+}
+function unwrapExpression(node, includeAssertions = false) {
+    while(__rspack_external__babel_types_6e8337dd.isTSAsExpression(node) || __rspack_external__babel_types_6e8337dd.isParenthesizedExpression(node) || __rspack_external__babel_types_6e8337dd.isTSSatisfiesExpression(node) || includeAssertions && (__rspack_external__babel_types_6e8337dd.isTSTypeAssertion(node) || __rspack_external__babel_types_6e8337dd.isTSNonNullExpression(node)))node = node.expression;
+    return node;
+}
+export { SourceSyntaxError, consumerParserPlugins, parseSource, traverseSource, unwrapExpression };

package/dist/esm/strict-effect-runtime.js

@@ -1,23 +1,12 @@
 import node_fs from "node:fs";
 import node_path from "node:path";
-import { parse } from "@babel/parser";
-import traverse, { Hub, NodePath } from "@babel/traverse";
+import { SourceSyntaxError, parseSource, traverseSource, unwrapExpression } from "./source-analysis.js";
 import * as __rspack_external__babel_types_6e8337dd from "@babel/types";
 const edge = '@modern-js/bff-effect/effect-edge';
 const nodeRuntime = '@modern-js/bff-effect/effect';
-const sharedRuntime = /^@[^/]+\/shared-contracts\/server\/effect-bff-runtime$/u;
-const failure = 'Generated API entries must export defineEffectBff(...) or the server-only shared Effect BFF assembly helper with an explicitly composed handler Layer and an unshadowed executable root; entries must implement handlers through HttpApiBuilder.group.';
-const invalidSources = new WeakSet();
-function invalidSource(message) {
-    const error = new Error(message);
-    invalidSources.add(error);
-    return error;
-}
-class SourceValidationHub extends Hub {
-    buildError(_node, message) {
-        return invalidSource(message);
-    }
-}
+const assembly = '@modern-js/bff-effect/assembly';
+const failure = 'Generated API entries must export defineEffectBff(...) or the native Effect BFF assembly helper with an explicitly composed handler Layer and an unshadowed executable root; entries must implement handlers through HttpApiBuilder.group.';
+const MAX_API_SOURCE_MODULES = 256;
 function createEffectApiImportResolver(filename) {
     const directory = node_fs.realpathSync(node_path.dirname(filename));
     const owner = node_fs.realpathSync(node_path.resolve(directory, '..'));
@@ -49,34 +38,14 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
     const load = (input)=>{
         const existing = modules.get(input.id);
         if (existing) return existing;
-        if (modules.size >= 64 || input.source.length > 1000000) throw invalidSource('API source budget exceeded');
-        let file;
-        try {
-            file = parse(input.source, {
-                sourceType: 'module',
-                sourceFilename: input.id,
-                plugins: [
-                    "typescript"
-                ]
-            });
-        } catch (cause) {
-            if ('object' == typeof cause && null !== cause && 'code' in cause && 'BABEL_PARSER_SYNTAX_ERROR' === cause.code && 'reasonCode' in cause && 'string' == typeof cause.reasonCode) throw invalidSource('Invalid API syntax');
-            throw cause;
-        }
+        if (modules.size >= MAX_API_SOURCE_MODULES || input.source.length > 1000000) throw new SourceSyntaxError('API source budget exceeded');
+        const file = parseSource(input.source, input.id, 'Invalid API syntax');
         const module = {
             ...input,
             file
         };
         modules.set(input.id, module);
-        const program = NodePath.get({
-            hub: new SourceValidationHub(),
-            parentPath: void 0,
-            parent: file,
-            container: file,
-            key: 'program'
-        });
-        program.setContext();
-        traverse(file, {
+        traverseSource(file, {
             enter (nodePath) {
                 paths.set(nodePath.node, nodePath);
                 owners.set(nodePath.node, module);
@@ -95,7 +64,7 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
                     if (binding) mutated.add(binding);
                 }
             }
-        }, program.scope, void 0, program);
+        });
         return module;
     };
     try {
@@ -104,10 +73,7 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
             source,
             resolveImport
         });
-        const unwrap = (node)=>{
-            while(__rspack_external__babel_types_6e8337dd.isParenthesizedExpression(node) || __rspack_external__babel_types_6e8337dd.isTSSatisfiesExpression(node) || __rspack_external__babel_types_6e8337dd.isTSAsExpression(node) || __rspack_external__babel_types_6e8337dd.isTSTypeAssertion(node) || __rspack_external__babel_types_6e8337dd.isTSNonNullExpression(node))node = node.expression;
-            return node;
-        };
+        const unwrap = (node)=>unwrapExpression(node, true);
         const binding = (node)=>{
             node = unwrap(node);
             if (!__rspack_external__babel_types_6e8337dd.isIdentifier(node)) return;
@@ -236,7 +202,7 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
             if (!__rspack_external__babel_types_6e8337dd.isBlockStatement(body)) return body;
             const statements = body.body;
             const last = statements.at(-1);
-            return statements.slice(0, -1).every((statement)=>__rspack_external__babel_types_6e8337dd.isVariableDeclaration(statement)) && __rspack_external__babel_types_6e8337dd.isReturnStatement(last) ? last.argument : void 0;
+            return statements.slice(0, -1).every((statement)=>__rspack_external__babel_types_6e8337dd.isVariableDeclaration(statement) || __rspack_external__babel_types_6e8337dd.isTSTypeAliasDeclaration(statement) || __rspack_external__babel_types_6e8337dd.isTSInterfaceDeclaration(statement)) && __rspack_external__babel_types_6e8337dd.isReturnStatement(last) ? last.argument : void 0;
         };
         const pipe = (node, check)=>__rspack_external__babel_types_6e8337dd.isMemberExpression(node.callee) && !node.callee.computed && __rspack_external__babel_types_6e8337dd.isIdentifier(node.callee.property, {
                 name: 'pipe'
@@ -325,7 +291,7 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
                 if (value?.name === 'defineEffectBff' && [
                     edge,
                     nodeRuntime
-                ].includes(value.specifier) || value?.name === 'assembleEffectBffRuntime' && sharedRuntime.test(value.specifier)) {
+                ].includes(value.specifier) || value?.name === 'assembleEffectBffRuntime' && value.specifier === assembly) {
                     if (1 !== node.arguments.length) return false;
                     const values = properties(node.arguments[0]);
                     if (!values) return false;
@@ -348,7 +314,7 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
         const root = entry.file.program.body.find((statement)=>__rspack_external__babel_types_6e8337dd.isExportDefaultDeclaration(statement));
         return root && runtime(root.declaration) ? void 0 : failure;
     } catch (cause) {
-        if ('object' == typeof cause && null !== cause && invalidSources.has(cause)) return failure;
+        if (cause instanceof SourceSyntaxError) return failure;
         const message = 'object' == typeof cause && null !== cause && 'message' in cause && 'string' == typeof cause.message ? cause.message : String(cause);
         throw new Error(`Strict Effect API analysis failed: ${message}`, {
             cause

package/dist/esm-node/microvertical-api-baseline.js

@@ -1,55 +1,25 @@
 import "node:module";
 import node_fs from "node:fs";
+import { createRequire } from "node:module";
 import node_path from "node:path";
-import { parse } from "@babel/parser";
-import traverse, { Hub, NodePath } from "@babel/traverse";
+import { exports as external_resolve_exports_exports } from "resolve.exports";
 import { baselinePublicIdentityIsExact } from "./microvertical-api-owner.js";
+import { SourceSyntaxError, parseSource, traverseSource, unwrapExpression } from "./source-analysis.js";
 import * as __rspack_external__babel_types_6e8337dd from "@babel/types";
-const consumerParserPlugins = (filePath)=>filePath.endsWith('.tsx') || filePath.endsWith('.jsx') ? [
-        "typescript",
-        'jsx'
-    ] : [
-        "typescript"
-    ];
-class ConsumerSyntaxError extends Error {
-}
-class ConsumerValidationHub extends Hub {
-    buildError(_node, message) {
-        return new ConsumerSyntaxError(message);
-    }
-}
 function parseConsumer(filePath) {
     if (node_fs.statSync(filePath).size > 1000000) throw new Error(`${filePath}: consumer source exceeds 1 MB analysis budget`);
-    let file;
-    try {
-        file = parse(node_fs.readFileSync(filePath, 'utf8'), {
-            sourceType: 'module',
-            sourceFilename: filePath,
-            plugins: consumerParserPlugins(filePath)
-        });
-    } catch (error) {
-        if ('object' == typeof error && null !== error && 'code' in error && 'BABEL_PARSER_SYNTAX_ERROR' === error.code) throw new ConsumerSyntaxError(error instanceof Error ? error.message : String(error));
-        throw error;
-    }
-    const program = NodePath.get({
-        hub: new ConsumerValidationHub(),
-        parentPath: void 0,
-        parent: file,
-        container: file,
-        key: 'program'
-    });
-    program.setContext();
-    traverse(file, {
+    const file = parseSource(node_fs.readFileSync(filePath, 'utf8'), filePath);
+    traverseSource(file, {
         AssignmentExpression (p) {
-            throw new ConsumerSyntaxError(`contract bindings must be immutable at ${p.node.start}`);
+            throw new SourceSyntaxError(`contract bindings must be immutable at ${p.node.start}`);
         },
         UpdateExpression (p) {
-            throw new ConsumerSyntaxError(`contract bindings must be immutable at ${p.node.start}`);
+            throw new SourceSyntaxError(`contract bindings must be immutable at ${p.node.start}`);
         },
         TSModuleDeclaration () {
-            throw new ConsumerSyntaxError('contract bindings must not be merged with namespaces');
+            throw new SourceSyntaxError('contract bindings must not be merged with namespaces');
         }
-    }, program.scope, void 0, program);
+    });
     return file;
 }
 const camelCaseStem = (stem)=>stem.replaceAll(/-([a-z0-9])/gu, (_match, letter)=>letter.toUpperCase());
@@ -74,11 +44,6 @@ const accessPath = (node)=>{
     }
 };
 const isAccessPath = (node, expected)=>accessPath(node)?.join('.') === expected.join('.');
-const unwrapExpression = (expression)=>{
-    let current = expression;
-    while(__rspack_external__babel_types_6e8337dd.isTSAsExpression(current) || __rspack_external__babel_types_6e8337dd.isParenthesizedExpression(current) || __rspack_external__babel_types_6e8337dd.isTSSatisfiesExpression(current))current = current.expression;
-    return current;
-};
 const stringLiteral = (expression)=>{
     if (null == expression) return;
     const unwrapped = unwrapExpression(expression);
@@ -119,16 +84,81 @@ const exportedConst = (sourceFile, name)=>{
             }))) return localConst(sourceFile, name);
     }
 };
-const resolveRelativeModulePath = (fromPath, specifier)=>{
-    if (!/^\.\.?\//u.test(specifier)) return;
-    const resolved = node_path.resolve(node_path.dirname(fromPath), specifier);
-    const stem = resolved.replace(/\.(?:[cm]?[jt]sx?)$/u, '');
+const inside = (file, boundary)=>file === boundary || file.startsWith(`${boundary}${node_path.sep}`);
+const containingWorkspace = (file)=>{
+    for(let directory = node_path.dirname(file);; directory = node_path.dirname(directory)){
+        if (node_fs.existsSync(node_path.join(directory, 'pnpm-workspace.yaml'))) return node_fs.realpathSync(directory);
+        if (directory === node_path.dirname(directory)) return;
+    }
+};
+const sourceBoundary = (file, workspace)=>{
+    for(let directory = node_path.dirname(file);; directory = node_path.dirname(directory)){
+        if (node_fs.existsSync(node_path.join(directory, 'package.json')) && directory !== workspace) return node_fs.realpathSync(directory);
+        if (directory === workspace || directory === node_path.dirname(directory)) return node_fs.realpathSync(node_path.dirname(file));
+    }
+};
+const sourceFileAt = (target, boundary)=>{
+    const stem = target.replace(/\.(?:[cm]?[jt]sx?)$/u, '');
     for (const candidate of [
         `${stem}.ts`,
         `${stem}.tsx`,
-        node_path.join(stem, 'index.ts'),
-        node_path.join(stem, 'index.tsx')
-    ])if (node_fs.existsSync(candidate) && node_fs.statSync(candidate).isFile()) return candidate;
+        `${stem}.mts`,
+        `${stem}.cts`,
+        target,
+        node_path.join(target, 'index.ts'),
+        node_path.join(target, 'index.tsx')
+    ])try {
+        const real = node_fs.realpathSync(candidate);
+        if (inside(real, boundary) && node_fs.statSync(real).isFile()) return real;
+    } catch  {}
+};
+const packageEntry = (specifier)=>{
+    if (specifier.startsWith('.') || specifier.startsWith('/') || specifier.startsWith('#')) return;
+    const parts = specifier.split('/');
+    const count = specifier.startsWith('@') ? 2 : 1;
+    if (parts.length < count || parts.slice(0, count).some((part)=>!part)) return;
+    return {
+        name: parts.slice(0, count).join('/'),
+        exportKey: parts.length === count ? '.' : `./${parts.slice(count).join('/')}`
+    };
+};
+const resolveModulePath = (module, specifier, workspace)=>{
+    if (/^\.\.?\//u.test(specifier)) {
+        const file = sourceFileAt(node_path.resolve(node_path.dirname(module.path), specifier), module.boundary);
+        return void 0 === file ? void 0 : {
+            path: file,
+            boundary: module.boundary
+        };
+    }
+    const entry = packageEntry(specifier);
+    if (!entry || !workspace) return;
+    const paths = createRequire(module.path).resolve.paths(entry.name) ?? [];
+    for (const lookup of paths){
+        const directory = node_path.join(lookup, entry.name);
+        const manifest = node_path.join(directory, 'package.json');
+        if (!node_fs.existsSync(manifest)) continue;
+        const boundary = node_fs.realpathSync(directory);
+        if (!inside(boundary, workspace) || boundary.split(node_path.sep).includes('node_modules')) break;
+        const pkg = JSON.parse(node_fs.readFileSync(manifest, 'utf8'));
+        if (pkg.name !== entry.name || void 0 === pkg.exports) break;
+        let target;
+        try {
+            const targets = external_resolve_exports_exports(pkg, entry.exportKey, {
+                conditions: [
+                    'modern:source'
+                ]
+            });
+            target = Array.isArray(targets) ? targets[0] : void 0;
+        } catch  {
+            break;
+        }
+        if (!target || !target.startsWith('./')) break;
+        const file = sourceFileAt(node_path.resolve(boundary, target), boundary);
+        return void 0 === file ? void 0 : {
+            path: file,
+            boundary
+        };
+    }
 };
 const createModuleReader = (root)=>{
     const modules = new Map([
@@ -137,14 +167,15 @@ const createModuleReader = (root)=>{
             root
         ]
     ]);
-    return (filePath)=>{
+    return (filePath, boundary)=>{
         if (modules.has(filePath)) return modules.get(filePath);
         if (modules.size >= 256) return;
         let module;
         try {
             module = {
                 file: parseConsumer(filePath),
-                path: filePath
+                path: filePath,
+                boundary
             };
         } catch  {
             module = void 0;
@@ -174,7 +205,7 @@ const reexportedBinding = (module, name)=>{
         if (!__rspack_external__babel_types_6e8337dd.isExportNamedDeclaration(statement) || 'type' === statement.exportKind) continue;
         const specifier = statement.specifiers.find((value)=>__rspack_external__babel_types_6e8337dd.isExportSpecifier(value) && 'type' !== value.exportKind && propertyName(value.exported) === name);
         if (void 0 !== specifier && __rspack_external__babel_types_6e8337dd.isExportSpecifier(specifier)) return {
-            local: specifier.local.name,
+            local: __rspack_external__babel_types_6e8337dd.isIdentifier(specifier.local) ? specifier.local.name : specifier.local.value,
             ...statement.source ? {
                 specifier: statement.source.value
             } : {}
@@ -189,7 +220,7 @@ const defaultExport = (module)=>{
         return __rspack_external__babel_types_6e8337dd.isExpression(declaration) ? declaration : void 0;
     }
 };
-const resolveBinding = (module, name, scope, readModule, seen)=>{
+const resolveBinding = (module, name, scope, readModule, workspace, seen)=>{
     const key = `${scope}:${module.path}#${name}`;
     if (seen.has(key) || seen.size >= 512) return;
     seen.add(key);
@@ -199,9 +230,9 @@ const resolveBinding = (module, name, scope, readModule, seen)=>{
         module
     };
     const throughModule = (specifier, imported)=>{
-        const resolvedPath = resolveRelativeModulePath(module.path, specifier);
-        const target = void 0 === resolvedPath ? void 0 : readModule(resolvedPath);
-        return void 0 === target ? void 0 : resolveBinding(target, imported, 'export', readModule, seen);
+        const resolved = resolveModulePath(module, specifier, workspace);
+        const target = resolved && readModule(resolved.path, resolved.boundary);
+        return void 0 === target ? void 0 : resolveBinding(target, imported, 'export', readModule, workspace, seen);
     };
     if ('local' === scope) {
         const imported = importedBinding(module, name);
@@ -209,14 +240,14 @@ const resolveBinding = (module, name, scope, readModule, seen)=>{
     }
     if ('default' === name) {
         const exported = defaultExport(module);
-        if ('string' == typeof exported) return resolveBinding(module, exported, 'local', readModule, seen);
+        if ('string' == typeof exported) return resolveBinding(module, exported, 'local', readModule, workspace, seen);
         return void 0 === exported ? void 0 : {
             expression: exported,
             module
         };
     }
     const reexported = reexportedBinding(module, name);
-    if (void 0 !== reexported) return void 0 === reexported.specifier ? resolveBinding(module, reexported.local, 'local', readModule, seen) : throughModule(reexported.specifier, reexported.local);
+    if (void 0 !== reexported) return void 0 === reexported.specifier ? resolveBinding(module, reexported.local, 'local', readModule, workspace, seen) : throughModule(reexported.specifier, reexported.local);
     for (const statement of module.file.program.body){
         if (!__rspack_external__babel_types_6e8337dd.isExportAllDeclaration(statement) || 'type' === statement.exportKind) continue;
         const resolved = throughModule(statement.source.value, name);
@@ -370,6 +401,7 @@ const nonEndpointCombinators = {
 };
 const reachableEndpoints = (rootModule, declaration)=>{
     const readModule = createModuleReader(rootModule);
+    const workspace = containingWorkspace(rootModule.path);
     const active = new Set();
     const endpoints = [];
     const identities = new Set();
@@ -391,7 +423,7 @@ const reachableEndpoints = (rootModule, declaration)=>{
         active.add(node);
         try {
             if (__rspack_external__babel_types_6e8337dd.isIdentifier(node)) {
-                const resolved = resolveBinding(module, node.name, 'local', readModule, new Set());
+                const resolved = resolveBinding(module, node.name, 'local', readModule, workspace, new Set());
                 return void 0 !== resolved && visit(resolved.expression, resolved.module, kind, group);
             }
             if ('endpoint' === kind) {
@@ -608,15 +640,17 @@ const configuredMicroVerticalApiStem = (verticalPath, verticals)=>{
 };
 const microVerticalApiBaselineViolation = (stem, filePath, expectation)=>{
     try {
-        const sourceFile = parseConsumer(filePath);
+        const realPath = node_fs.realpathSync(filePath);
+        const sourceFile = parseConsumer(realPath);
         if (!baselinePublicIdentityIsExact(filePath, expectation)) return 'MicroVertical baseline imports must resolve the exact framework owner public export and schema identity';
         return validateParsedContract({
             file: sourceFile,
-            path: filePath
+            path: realPath,
+            boundary: sourceBoundary(realPath, containingWorkspace(realPath))
         }, stem, expectation);
     } catch (error) {
-        if (error instanceof ConsumerSyntaxError) return `MicroVertical root contract must be valid TypeScript syntax (${error.message})`;
+        if (error instanceof SourceSyntaxError) return `MicroVertical root contract must be valid TypeScript syntax (${error.message})`;
         throw error;
     }
 };
-export { configuredMicroVerticalApiStem, consumerParserPlugins, microVerticalApiBaselineViolation };
+export { configuredMicroVerticalApiStem, microVerticalApiBaselineViolation };