@bleedingdev/modern-js-code-tools 3.9.0-ultramodern.12 → 3.9.0-ultramodern.14

package/dist/cjs/microvertical-api-baseline.cjs

@@ -42,9 +42,11 @@ __webpack_require__.d(__webpack_exports__, {
 });
 const external_node_fs_namespaceObject = require("node:fs");
 var external_node_fs_default = /*#__PURE__*/ __webpack_require__.n(external_node_fs_namespaceObject);
+const external_node_module_namespaceObject = require("node:module");
 const external_node_path_namespaceObject = require("node:path");
 var external_node_path_default = /*#__PURE__*/ __webpack_require__.n(external_node_path_namespaceObject);
 const types_namespaceObject = require("@babel/types");
+const external_resolve_exports_namespaceObject = require("resolve.exports");
 const external_microvertical_api_owner_cjs_namespaceObject = require("./microvertical-api-owner.cjs");
 const external_source_analysis_cjs_namespaceObject = require("./source-analysis.cjs");
 function parseConsumer(filePath) {
@@ -125,16 +127,81 @@ const exportedConst = (sourceFile, name)=>{
             }))) return localConst(sourceFile, name);
     }
 };
-const resolveRelativeModulePath = (fromPath, specifier)=>{
-    if (!/^\.\.?\//u.test(specifier)) return;
-    const resolved = external_node_path_default().resolve(external_node_path_default().dirname(fromPath), specifier);
-    const stem = resolved.replace(/\.(?:[cm]?[jt]sx?)$/u, '');
+const inside = (file, boundary)=>file === boundary || file.startsWith(`${boundary}${external_node_path_default().sep}`);
+const containingWorkspace = (file)=>{
+    for(let directory = external_node_path_default().dirname(file);; directory = external_node_path_default().dirname(directory)){
+        if (external_node_fs_default().existsSync(external_node_path_default().join(directory, 'pnpm-workspace.yaml'))) return external_node_fs_default().realpathSync(directory);
+        if (directory === external_node_path_default().dirname(directory)) return;
+    }
+};
+const sourceBoundary = (file, workspace)=>{
+    for(let directory = external_node_path_default().dirname(file);; directory = external_node_path_default().dirname(directory)){
+        if (external_node_fs_default().existsSync(external_node_path_default().join(directory, 'package.json')) && directory !== workspace) return external_node_fs_default().realpathSync(directory);
+        if (directory === workspace || directory === external_node_path_default().dirname(directory)) return external_node_fs_default().realpathSync(external_node_path_default().dirname(file));
+    }
+};
+const sourceFileAt = (target, boundary)=>{
+    const stem = target.replace(/\.(?:[cm]?[jt]sx?)$/u, '');
     for (const candidate of [
         `${stem}.ts`,
         `${stem}.tsx`,
-        external_node_path_default().join(stem, 'index.ts'),
-        external_node_path_default().join(stem, 'index.tsx')
-    ])if (external_node_fs_default().existsSync(candidate) && external_node_fs_default().statSync(candidate).isFile()) return candidate;
+        `${stem}.mts`,
+        `${stem}.cts`,
+        target,
+        external_node_path_default().join(target, 'index.ts'),
+        external_node_path_default().join(target, 'index.tsx')
+    ])try {
+        const real = external_node_fs_default().realpathSync(candidate);
+        if (inside(real, boundary) && external_node_fs_default().statSync(real).isFile()) return real;
+    } catch  {}
+};
+const packageEntry = (specifier)=>{
+    if (specifier.startsWith('.') || specifier.startsWith('/') || specifier.startsWith('#')) return;
+    const parts = specifier.split('/');
+    const count = specifier.startsWith('@') ? 2 : 1;
+    if (parts.length < count || parts.slice(0, count).some((part)=>!part)) return;
+    return {
+        name: parts.slice(0, count).join('/'),
+        exportKey: parts.length === count ? '.' : `./${parts.slice(count).join('/')}`
+    };
+};
+const resolveModulePath = (module, specifier, workspace)=>{
+    if (/^\.\.?\//u.test(specifier)) {
+        const file = sourceFileAt(external_node_path_default().resolve(external_node_path_default().dirname(module.path), specifier), module.boundary);
+        return void 0 === file ? void 0 : {
+            path: file,
+            boundary: module.boundary
+        };
+    }
+    const entry = packageEntry(specifier);
+    if (!entry || !workspace) return;
+    const paths = (0, external_node_module_namespaceObject.createRequire)(module.path).resolve.paths(entry.name) ?? [];
+    for (const lookup of paths){
+        const directory = external_node_path_default().join(lookup, entry.name);
+        const manifest = external_node_path_default().join(directory, 'package.json');
+        if (!external_node_fs_default().existsSync(manifest)) continue;
+        const boundary = external_node_fs_default().realpathSync(directory);
+        if (!inside(boundary, workspace) || boundary.split(external_node_path_default().sep).includes('node_modules')) break;
+        const pkg = JSON.parse(external_node_fs_default().readFileSync(manifest, 'utf8'));
+        if (pkg.name !== entry.name || void 0 === pkg.exports) break;
+        let target;
+        try {
+            const targets = (0, external_resolve_exports_namespaceObject.exports)(pkg, entry.exportKey, {
+                conditions: [
+                    'modern:source'
+                ]
+            });
+            target = Array.isArray(targets) ? targets[0] : void 0;
+        } catch  {
+            break;
+        }
+        if (!target || !target.startsWith('./')) break;
+        const file = sourceFileAt(external_node_path_default().resolve(boundary, target), boundary);
+        return void 0 === file ? void 0 : {
+            path: file,
+            boundary
+        };
+    }
 };
 const createModuleReader = (root)=>{
     const modules = new Map([
@@ -143,14 +210,15 @@ const createModuleReader = (root)=>{
             root
         ]
     ]);
-    return (filePath)=>{
+    return (filePath, boundary)=>{
         if (modules.has(filePath)) return modules.get(filePath);
         if (modules.size >= 256) return;
         let module;
         try {
             module = {
                 file: parseConsumer(filePath),
-                path: filePath
+                path: filePath,
+                boundary
             };
         } catch  {
             module = void 0;
@@ -180,7 +248,7 @@ const reexportedBinding = (module, name)=>{
         if (!types_namespaceObject.isExportNamedDeclaration(statement) || 'type' === statement.exportKind) continue;
         const specifier = statement.specifiers.find((value)=>types_namespaceObject.isExportSpecifier(value) && 'type' !== value.exportKind && propertyName(value.exported) === name);
         if (void 0 !== specifier && types_namespaceObject.isExportSpecifier(specifier)) return {
-            local: specifier.local.name,
+            local: types_namespaceObject.isIdentifier(specifier.local) ? specifier.local.name : specifier.local.value,
             ...statement.source ? {
                 specifier: statement.source.value
             } : {}
@@ -195,7 +263,7 @@ const defaultExport = (module)=>{
         return types_namespaceObject.isExpression(declaration) ? declaration : void 0;
     }
 };
-const resolveBinding = (module, name, scope, readModule, seen)=>{
+const resolveBinding = (module, name, scope, readModule, workspace, seen)=>{
     const key = `${scope}:${module.path}#${name}`;
     if (seen.has(key) || seen.size >= 512) return;
     seen.add(key);
@@ -205,9 +273,9 @@ const resolveBinding = (module, name, scope, readModule, seen)=>{
         module
     };
     const throughModule = (specifier, imported)=>{
-        const resolvedPath = resolveRelativeModulePath(module.path, specifier);
-        const target = void 0 === resolvedPath ? void 0 : readModule(resolvedPath);
-        return void 0 === target ? void 0 : resolveBinding(target, imported, 'export', readModule, seen);
+        const resolved = resolveModulePath(module, specifier, workspace);
+        const target = resolved && readModule(resolved.path, resolved.boundary);
+        return void 0 === target ? void 0 : resolveBinding(target, imported, 'export', readModule, workspace, seen);
     };
     if ('local' === scope) {
         const imported = importedBinding(module, name);
@@ -215,14 +283,14 @@ const resolveBinding = (module, name, scope, readModule, seen)=>{
     }
     if ('default' === name) {
         const exported = defaultExport(module);
-        if ('string' == typeof exported) return resolveBinding(module, exported, 'local', readModule, seen);
+        if ('string' == typeof exported) return resolveBinding(module, exported, 'local', readModule, workspace, seen);
         return void 0 === exported ? void 0 : {
             expression: exported,
             module
         };
     }
     const reexported = reexportedBinding(module, name);
-    if (void 0 !== reexported) return void 0 === reexported.specifier ? resolveBinding(module, reexported.local, 'local', readModule, seen) : throughModule(reexported.specifier, reexported.local);
+    if (void 0 !== reexported) return void 0 === reexported.specifier ? resolveBinding(module, reexported.local, 'local', readModule, workspace, seen) : throughModule(reexported.specifier, reexported.local);
     for (const statement of module.file.program.body){
         if (!types_namespaceObject.isExportAllDeclaration(statement) || 'type' === statement.exportKind) continue;
         const resolved = throughModule(statement.source.value, name);
@@ -376,6 +444,7 @@ const nonEndpointCombinators = {
 };
 const reachableEndpoints = (rootModule, declaration)=>{
     const readModule = createModuleReader(rootModule);
+    const workspace = containingWorkspace(rootModule.path);
     const active = new Set();
     const endpoints = [];
     const identities = new Set();
@@ -397,7 +466,7 @@ const reachableEndpoints = (rootModule, declaration)=>{
         active.add(node);
         try {
             if (types_namespaceObject.isIdentifier(node)) {
-                const resolved = resolveBinding(module, node.name, 'local', readModule, new Set());
+                const resolved = resolveBinding(module, node.name, 'local', readModule, workspace, new Set());
                 return void 0 !== resolved && visit(resolved.expression, resolved.module, kind, group);
             }
             if ('endpoint' === kind) {
@@ -614,11 +683,13 @@ const configuredMicroVerticalApiStem = (verticalPath, verticals)=>{
 };
 const microVerticalApiBaselineViolation = (stem, filePath, expectation)=>{
     try {
-        const sourceFile = parseConsumer(filePath);
+        const realPath = external_node_fs_default().realpathSync(filePath);
+        const sourceFile = parseConsumer(realPath);
         if (!(0, external_microvertical_api_owner_cjs_namespaceObject.baselinePublicIdentityIsExact)(filePath, expectation)) return 'MicroVertical baseline imports must resolve the exact framework owner public export and schema identity';
         return validateParsedContract({
             file: sourceFile,
-            path: filePath
+            path: realPath,
+            boundary: sourceBoundary(realPath, containingWorkspace(realPath))
         }, stem, expectation);
     } catch (error) {
         if (error instanceof external_source_analysis_cjs_namespaceObject.SourceSyntaxError) return `MicroVertical root contract must be valid TypeScript syntax (${error.message})`;

package/dist/cjs/microvertical-api-boundary.cjs

@@ -66,13 +66,42 @@ const normalize = (file)=>file.split(external_node_path_default().sep).join('/')
 const errorMessage = (error)=>error instanceof Error ? error.message : String(error);
 const apiApp = (app)=>'vertical' === app.kind && 'ui-only' !== app.surfaceProfile && 'horizontal-remote' !== app.deliveryUnitKind;
 function configuredApps(root, supplied) {
-    const source = supplied ?? JSON.parse(external_node_fs_default().readFileSync(external_node_path_default().join(root, '.modernjs/ultramodern.json'), 'utf8')).topology?.apps;
-    if (!Array.isArray(source)) throw new Error('.modernjs/ultramodern.json: topology.apps must be an array');
+    const topology = supplied ? void 0 : JSON.parse(external_node_fs_default().readFileSync(external_node_path_default().join(root, 'topology/reference-topology.json'), 'utf8'));
+    if (topology && (!topology.shell || !Array.isArray(topology.verticals) || void 0 !== topology.shells && !Array.isArray(topology.shells))) throw new Error('topology/reference-topology.json: shell and verticals must be present');
+    const entries = topology?.shell ? [
+        topology.shell,
+        ...topology.shells ?? [],
+        ...topology.verticals ?? []
+    ] : void 0;
+    const source = supplied ?? entries?.map((entry)=>{
+        if (!entry || 'string' != typeof entry.path || !entry.path || external_node_path_default().isAbsolute(entry.path) || entry.path.split(/[\\/]/u).includes('..')) throw new Error('topology/reference-topology.json: each app must have an explicit workspace path');
+        const packageFile = external_node_path_default().join(root, entry.path, 'package.json');
+        const manifest = JSON.parse(external_node_fs_default().readFileSync(packageFile, 'utf8'));
+        if ('string' != typeof manifest.name || !manifest.name || void 0 !== entry.package && entry.package !== manifest.name) throw new Error(`${entry.path}/package.json: package name must match topology`);
+        const api = entry.api;
+        const stem = api?.stem ?? api?.readiness?.endpoint?.match(/^\/([a-z0-9]+(?:-[a-z0-9]+)*)\/readiness$/u)?.[1];
+        return {
+            id: entry.id,
+            kind: entry.kind,
+            path: entry.path,
+            package: manifest.name,
+            surfaceProfile: entry.surfaceProfile,
+            deliveryUnitKind: entry.deliveryUnitKind,
+            ...void 0 === api ? {} : {
+                api: {
+                    stem,
+                    prefix: api.bff?.prefix,
+                    protocol: api.protocol
+                }
+            }
+        };
+    });
+    if (!Array.isArray(source)) throw new Error('topology/reference-topology.json: shell and verticals must describe apps');
     const paths = new Set();
     for (const app of source){
-        if (!app || 'object' != typeof app || 'string' != typeof app.path || !app.path || external_node_path_default().isAbsolute(app.path) || app.path.split(/[\\/]/u).includes('..')) throw new Error('.modernjs/ultramodern.json: each app must have a relative workspace path');
+        if (!app || 'object' != typeof app || 'string' != typeof app.path || !app.path || external_node_path_default().isAbsolute(app.path) || app.path.split(/[\\/]/u).includes('..')) throw new Error('topology/reference-topology.json: each app must have a relative workspace path');
         const key = normalize(app.path);
-        if (paths.has(key)) throw new Error(`.modernjs/ultramodern.json: duplicate app path ${key}`);
+        if (paths.has(key)) throw new Error(`topology/reference-topology.json: duplicate app path ${key}`);
         paths.add(key);
         for (const name of [
             'id',
@@ -81,7 +110,7 @@ function configuredApps(root, supplied) {
             'surfaceProfile',
             'deliveryUnitKind'
         ])if (void 0 !== app[name] && 'string' != typeof app[name]) throw new Error(`${key}: ${name} must be a string`);
-        for (const [field, allowed] of Object.entries({
+        const allowedFields = {
             kind: [
                 'shell',
                 'vertical'
@@ -95,7 +124,11 @@ function configuredApps(root, supplied) {
                 'microvertical',
                 'horizontal-remote'
             ]
-        }))if (void 0 !== app[field] && !allowed.includes(app[field])) throw new Error(`${key}: invalid ${field}`);
+        };
+        for (const field of Object.keys(allowedFields)){
+            const value = app[field];
+            if (void 0 !== value && !allowedFields[field].includes(value)) throw new Error(`${key}: invalid ${field}`);
+        }
         if (void 0 !== app.api) {
             if (!app.api || 'object' != typeof app.api || Array.isArray(app.api)) throw new Error(`${key}: api must be an object`);
             if (void 0 !== app.api.protocol && ![
@@ -183,12 +216,27 @@ function check(options, topology) {
                 `${base}/index.tsx`
             ].find((candidate)=>exists(candidate));
         };
-        const composedModules = (file)=>{
+        const clientExportFile = (appPath, exported)=>{
+            if ('string' != typeof exported || !exported.startsWith('./') || exported.split(/[\\/]/u).includes('..') || !/\.[cm]?[jt]sx?$/u.test(exported)) return;
+            const appDirectory = absolute(appPath);
+            const candidate = external_node_path_default().resolve(appDirectory, exported);
+            try {
+                const workspace = external_node_fs_default().realpathSync(root);
+                const owner = external_node_fs_default().realpathSync(appDirectory);
+                const real = external_node_fs_default().realpathSync(candidate);
+                if (!owner.startsWith(`${workspace}${external_node_path_default().sep}`) || !real.startsWith(`${owner}${external_node_path_default().sep}`) || !external_node_fs_default().statSync(real).isFile()) return;
+            } catch  {
+                return;
+            }
+            return normalize(external_node_path_default().relative(root, candidate));
+        };
+        const composedModules = (file, appPath)=>{
             const order = [];
             const seen = new Set();
             const queue = [
                 file
             ];
+            const owner = external_node_fs_default().realpathSync(absolute(appPath));
             while(queue.length > 0 && order.length < 128){
                 const current = queue.shift();
                 if (seen.has(current)) continue;
@@ -199,16 +247,19 @@ function check(options, topology) {
                 for (const statement of ast.program.body){
                     const source = (types_namespaceObject.isImportDeclaration(statement) || types_namespaceObject.isExportNamedDeclaration(statement) || types_namespaceObject.isExportAllDeclaration(statement)) && statement.source ? statement.source.value : void 0;
                     const resolved = void 0 === source ? void 0 : resolveRelative(current, source);
-                    if (void 0 !== resolved && !seen.has(resolved)) queue.push(resolved);
+                    if (void 0 !== resolved && !seen.has(resolved)) {
+                        const real = external_node_fs_default().realpathSync(absolute(resolved));
+                        if (real.startsWith(`${owner}${external_node_path_default().sep}`)) queue.push(resolved);
+                    }
                 }
             }
             return order;
         };
-        const moduleShape = (file, imports, calls, patterns = [], defaultExport, composed = false)=>{
+        const moduleShape = (file, imports, calls, patterns = [], defaultExport, composedAppPath)=>{
             if (!exists(file)) return;
             const ast = parseFile(file);
             if (!ast) return;
-            const shapeFiles = composed ? composedModules(file) : [
+            const shapeFiles = composedAppPath ? composedModules(file, composedAppPath) : [
                 file
             ];
             const body = shapeFiles.flatMap((shapeFile)=>parseFile(shapeFile)?.program.body ?? []);
@@ -318,19 +369,25 @@ function check(options, topology) {
                 }
                 return;
             }
-            if (app?.kind === 'vertical') assert(void 0 !== app.api, `${appPath}: vertical must declare its Effect API in .modernjs/ultramodern.json`);
+            if (app?.kind === 'vertical') assert(void 0 !== app.api, `${appPath}: vertical must declare its Effect API in topology/reference-topology.json`);
             const stem = app?.api?.stem ?? external_node_path_default().posix.basename(appPath);
             const rpc = app?.api?.protocol === 'rpc';
             const contract = `${appPath}/shared/${rpc ? 'rpc' : 'api'}.ts`;
-            const client = `${appPath}/src/api/${stem}-${rpc ? 'rpc-client' : 'client'}.ts`;
             const entry = `${appPath}/api/index.ts`;
             for (const file of [
                 entry,
-                contract,
-                client
+                contract
             ])assert(exists(file), `${file}: required API surface is missing`);
+            const packageFile = `${appPath}/package.json`;
+            assert(exists(packageFile), `${packageFile}: required API package is missing`);
+            if (!exists(packageFile)) return;
+            const manifest = JSON.parse(read(packageFile));
+            assert(manifest.exports?.['./api'] === `./shared/${rpc ? 'rpc' : 'api'}.ts`, `${packageFile}: invalid ./api export`);
+            const clientKey = `./api/${rpc ? 'rpc-client' : 'client'}`;
+            const client = clientExportFile(appPath, manifest.exports?.[clientKey]);
+            assert(void 0 !== client, `${packageFile}: invalid API client export`);
+            assert(manifest.exports?.[`./api/${rpc ? 'client' : 'rpc-client'}`] === void 0, `${packageFile}: forbidden opposite protocol client export`);
             noPath(`${appPath}/shared/${rpc ? 'api' : 'rpc'}.ts`, `must not emit a ${rpc ? 'REST' : 'RPC'} contract`);
-            noPath(`${appPath}/src/api/${stem}-${rpc ? 'client' : 'rpc-client'}.ts`, `must not emit a ${rpc ? 'REST' : 'RPC'} client`);
             if (rpc) {
                 moduleShape(entry, [
                     [
@@ -396,21 +453,24 @@ function check(options, topology) {
                 const violation = (0, external_microvertical_api_baseline_cjs_namespaceObject.microVerticalApiBaselineViolation)(stem, absolute(contract), expectation);
                 if (violation) diagnostics.push(`${contract}: ${violation}`);
             }
-            moduleShape(client, [
-                [
-                    effect,
+            if (client) {
+                const relativeContract = external_node_path_default().posix.relative(external_node_path_default().posix.dirname(client), contract);
+                moduleShape(client, [
+                    [
+                        effect,
+                        [
+                            'Effect',
+                            rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient'
+                        ]
+                    ],
                     [
-                        'Effect',
-                        rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient'
+                        relativeContract.startsWith('.') ? relativeContract : `./${relativeContract}`,
+                        []
                     ]
-                ],
-                [
-                    rpc ? '../../shared/rpc.ts' : '../../shared/api',
-                    []
-                ]
-            ], [
-                rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient'
-            ], [], void 0, true);
+                ], [
+                    rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient'
+                ], [], void 0, appPath);
+            }
             moduleShape(`${appPath}/api/effect-api.ts`, [], [], [
                 [
                     /\bbackendFederationContract\b/u,
@@ -451,13 +511,6 @@ function check(options, topology) {
                     'must enable strictEffectApproach'
                 ]
             ]);
-            const packageFile = `${appPath}/package.json`;
-            if (exists(packageFile)) {
-                const manifest = JSON.parse(read(packageFile));
-                assert(manifest.exports?.['./api'] === `./shared/${rpc ? 'rpc' : 'api'}.ts`, `${packageFile}: invalid ./api export`);
-                assert(manifest.exports?.[`./api/${rpc ? 'rpc-client' : 'client'}`] === `./src/api/${stem}-${rpc ? 'rpc-client' : 'client'}.ts`, `${packageFile}: invalid API client export`);
-                assert(manifest.exports?.[`./api/${rpc ? 'client' : 'rpc-client'}`] === void 0, `${packageFile}: forbidden opposite protocol client export`);
-            }
         });
         const shell = 'apps/shell-super-app';
         const verticals = apps.filter((app)=>app.path.startsWith('verticals/') && apiApp(app));

package/dist/cjs/oxlint-plugin/rules/strict-effect-api-boundaries.cjs

@@ -52,7 +52,7 @@ const createStrictEffectApiBoundariesRule = ()=>({
                     });
                     (0, external_ast_cjs_namespaceObject.reportProgramPattern)(context, node, source, /@modern-js\/plugin-bff\/(?:server|hono-server)(?![\w-])/u, 'UltraModern API workspaces must not import Hono server helpers; use @modern-js/bff-effect/effect-edge and HttpApi.');
                     (0, external_ast_cjs_namespaceObject.reportProgramPattern)(context, node, source, /\bruntimeFramework\s*(?::|=)\s*['"]hono['"]/u, 'UltraModern API apps must use bff.runtimeFramework: "effect".');
-                    (0, external_ast_cjs_namespaceObject.reportProgramPattern)(context, node, source, /(?:from|import)\s*['"][^'"]*(?:api\/effect|shared\/effect)[^'"]*['"]|shared-effect-api/u, 'Import API code from direct api/index.ts, shared/api.ts or src/api/* paths, not api/effect, shared/effect or shared Effect API packages.');
+                    (0, external_ast_cjs_namespaceObject.reportProgramPattern)(context, node, source, /(?:from|import)\s*['"][^'"]*(?:api\/effect|shared\/effect)(?=\/|\.[cm]?[jt]sx?['"]|['"])[^'"]*['"]|shared-effect-api/u, 'Import API code from direct api/index.ts, shared/api.ts or src/api/* paths, not api/effect, shared/effect or shared Effect API packages.');
                     (0, external_ast_cjs_namespaceObject.reportProgramPattern)(context, node, source, /\bstrictEffectApproach\s*(?::|=)\s*false\b/u, 'UltraModern API apps must keep strictEffectApproach enabled.');
                     if ((0, external_ast_cjs_namespaceObject.isApiEntryFile)(filename)) {
                         const violation = (0, external_strict_effect_runtime_cjs_namespaceObject.strictEffectRuntimeTopologyViolation)(source, (0, external_strict_effect_runtime_cjs_namespaceObject.createEffectApiImportResolver)(filename));

package/dist/cjs/strict-effect-runtime.cjs

@@ -48,8 +48,9 @@ const types_namespaceObject = require("@babel/types");
 const external_source_analysis_cjs_namespaceObject = require("./source-analysis.cjs");
 const edge = '@modern-js/bff-effect/effect-edge';
 const nodeRuntime = '@modern-js/bff-effect/effect';
-const sharedRuntime = /^@[^/]+\/shared-contracts\/server\/effect-bff-runtime$/u;
-const failure = 'Generated API entries must export defineEffectBff(...) or the server-only shared Effect BFF assembly helper with an explicitly composed handler Layer and an unshadowed executable root; entries must implement handlers through HttpApiBuilder.group.';
+const assembly = '@modern-js/bff-effect/assembly';
+const failure = 'Generated API entries must export defineEffectBff(...) or the native Effect BFF assembly helper with an explicitly composed handler Layer and an unshadowed executable root; entries must implement handlers through HttpApiBuilder.group.';
+const MAX_API_SOURCE_MODULES = 256;
 function createEffectApiImportResolver(filename) {
     const directory = external_node_fs_default().realpathSync(external_node_path_default().dirname(filename));
     const owner = external_node_fs_default().realpathSync(external_node_path_default().resolve(directory, '..'));
@@ -81,7 +82,7 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
     const load = (input)=>{
         const existing = modules.get(input.id);
         if (existing) return existing;
-        if (modules.size >= 64 || input.source.length > 1000000) throw new external_source_analysis_cjs_namespaceObject.SourceSyntaxError('API source budget exceeded');
+        if (modules.size >= MAX_API_SOURCE_MODULES || input.source.length > 1000000) throw new external_source_analysis_cjs_namespaceObject.SourceSyntaxError('API source budget exceeded');
         const file = (0, external_source_analysis_cjs_namespaceObject.parseSource)(input.source, input.id, 'Invalid API syntax');
         const module = {
             ...input,
@@ -245,7 +246,7 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
             if (!types_namespaceObject.isBlockStatement(body)) return body;
             const statements = body.body;
             const last = statements.at(-1);
-            return statements.slice(0, -1).every((statement)=>types_namespaceObject.isVariableDeclaration(statement)) && types_namespaceObject.isReturnStatement(last) ? last.argument : void 0;
+            return statements.slice(0, -1).every((statement)=>types_namespaceObject.isVariableDeclaration(statement) || types_namespaceObject.isTSTypeAliasDeclaration(statement) || types_namespaceObject.isTSInterfaceDeclaration(statement)) && types_namespaceObject.isReturnStatement(last) ? last.argument : void 0;
         };
         const pipe = (node, check)=>types_namespaceObject.isMemberExpression(node.callee) && !node.callee.computed && types_namespaceObject.isIdentifier(node.callee.property, {
                 name: 'pipe'
@@ -334,7 +335,7 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
                 if (value?.name === 'defineEffectBff' && [
                     edge,
                     nodeRuntime
-                ].includes(value.specifier) || value?.name === 'assembleEffectBffRuntime' && sharedRuntime.test(value.specifier)) {
+                ].includes(value.specifier) || value?.name === 'assembleEffectBffRuntime' && value.specifier === assembly) {
                     if (1 !== node.arguments.length) return false;
                     const values = properties(node.arguments[0]);
                     if (!values) return false;

package/dist/esm/microvertical-api-baseline.js

@@ -1,5 +1,7 @@
 import node_fs from "node:fs";
+import { createRequire } from "node:module";
 import node_path from "node:path";
+import { exports as external_resolve_exports_exports } from "resolve.exports";
 import { baselinePublicIdentityIsExact } from "./microvertical-api-owner.js";
 import { SourceSyntaxError, parseSource, traverseSource, unwrapExpression } from "./source-analysis.js";
 import * as __rspack_external__babel_types_6e8337dd from "@babel/types";
@@ -81,16 +83,81 @@ const exportedConst = (sourceFile, name)=>{
             }))) return localConst(sourceFile, name);
     }
 };
-const resolveRelativeModulePath = (fromPath, specifier)=>{
-    if (!/^\.\.?\//u.test(specifier)) return;
-    const resolved = node_path.resolve(node_path.dirname(fromPath), specifier);
-    const stem = resolved.replace(/\.(?:[cm]?[jt]sx?)$/u, '');
+const inside = (file, boundary)=>file === boundary || file.startsWith(`${boundary}${node_path.sep}`);
+const containingWorkspace = (file)=>{
+    for(let directory = node_path.dirname(file);; directory = node_path.dirname(directory)){
+        if (node_fs.existsSync(node_path.join(directory, 'pnpm-workspace.yaml'))) return node_fs.realpathSync(directory);
+        if (directory === node_path.dirname(directory)) return;
+    }
+};
+const sourceBoundary = (file, workspace)=>{
+    for(let directory = node_path.dirname(file);; directory = node_path.dirname(directory)){
+        if (node_fs.existsSync(node_path.join(directory, 'package.json')) && directory !== workspace) return node_fs.realpathSync(directory);
+        if (directory === workspace || directory === node_path.dirname(directory)) return node_fs.realpathSync(node_path.dirname(file));
+    }
+};
+const sourceFileAt = (target, boundary)=>{
+    const stem = target.replace(/\.(?:[cm]?[jt]sx?)$/u, '');
     for (const candidate of [
         `${stem}.ts`,
         `${stem}.tsx`,
-        node_path.join(stem, 'index.ts'),
-        node_path.join(stem, 'index.tsx')
-    ])if (node_fs.existsSync(candidate) && node_fs.statSync(candidate).isFile()) return candidate;
+        `${stem}.mts`,
+        `${stem}.cts`,
+        target,
+        node_path.join(target, 'index.ts'),
+        node_path.join(target, 'index.tsx')
+    ])try {
+        const real = node_fs.realpathSync(candidate);
+        if (inside(real, boundary) && node_fs.statSync(real).isFile()) return real;
+    } catch  {}
+};
+const packageEntry = (specifier)=>{
+    if (specifier.startsWith('.') || specifier.startsWith('/') || specifier.startsWith('#')) return;
+    const parts = specifier.split('/');
+    const count = specifier.startsWith('@') ? 2 : 1;
+    if (parts.length < count || parts.slice(0, count).some((part)=>!part)) return;
+    return {
+        name: parts.slice(0, count).join('/'),
+        exportKey: parts.length === count ? '.' : `./${parts.slice(count).join('/')}`
+    };
+};
+const resolveModulePath = (module, specifier, workspace)=>{
+    if (/^\.\.?\//u.test(specifier)) {
+        const file = sourceFileAt(node_path.resolve(node_path.dirname(module.path), specifier), module.boundary);
+        return void 0 === file ? void 0 : {
+            path: file,
+            boundary: module.boundary
+        };
+    }
+    const entry = packageEntry(specifier);
+    if (!entry || !workspace) return;
+    const paths = createRequire(module.path).resolve.paths(entry.name) ?? [];
+    for (const lookup of paths){
+        const directory = node_path.join(lookup, entry.name);
+        const manifest = node_path.join(directory, 'package.json');
+        if (!node_fs.existsSync(manifest)) continue;
+        const boundary = node_fs.realpathSync(directory);
+        if (!inside(boundary, workspace) || boundary.split(node_path.sep).includes('node_modules')) break;
+        const pkg = JSON.parse(node_fs.readFileSync(manifest, 'utf8'));
+        if (pkg.name !== entry.name || void 0 === pkg.exports) break;
+        let target;
+        try {
+            const targets = external_resolve_exports_exports(pkg, entry.exportKey, {
+                conditions: [
+                    'modern:source'
+                ]
+            });
+            target = Array.isArray(targets) ? targets[0] : void 0;
+        } catch  {
+            break;
+        }
+        if (!target || !target.startsWith('./')) break;
+        const file = sourceFileAt(node_path.resolve(boundary, target), boundary);
+        return void 0 === file ? void 0 : {
+            path: file,
+            boundary
+        };
+    }
 };
 const createModuleReader = (root)=>{
     const modules = new Map([
@@ -99,14 +166,15 @@ const createModuleReader = (root)=>{
             root
         ]
     ]);
-    return (filePath)=>{
+    return (filePath, boundary)=>{
         if (modules.has(filePath)) return modules.get(filePath);
         if (modules.size >= 256) return;
         let module;
         try {
             module = {
                 file: parseConsumer(filePath),
-                path: filePath
+                path: filePath,
+                boundary
             };
         } catch  {
             module = void 0;
@@ -136,7 +204,7 @@ const reexportedBinding = (module, name)=>{
         if (!__rspack_external__babel_types_6e8337dd.isExportNamedDeclaration(statement) || 'type' === statement.exportKind) continue;
         const specifier = statement.specifiers.find((value)=>__rspack_external__babel_types_6e8337dd.isExportSpecifier(value) && 'type' !== value.exportKind && propertyName(value.exported) === name);
         if (void 0 !== specifier && __rspack_external__babel_types_6e8337dd.isExportSpecifier(specifier)) return {
-            local: specifier.local.name,
+            local: __rspack_external__babel_types_6e8337dd.isIdentifier(specifier.local) ? specifier.local.name : specifier.local.value,
             ...statement.source ? {
                 specifier: statement.source.value
             } : {}
@@ -151,7 +219,7 @@ const defaultExport = (module)=>{
         return __rspack_external__babel_types_6e8337dd.isExpression(declaration) ? declaration : void 0;
     }
 };
-const resolveBinding = (module, name, scope, readModule, seen)=>{
+const resolveBinding = (module, name, scope, readModule, workspace, seen)=>{
     const key = `${scope}:${module.path}#${name}`;
     if (seen.has(key) || seen.size >= 512) return;
     seen.add(key);
@@ -161,9 +229,9 @@ const resolveBinding = (module, name, scope, readModule, seen)=>{
         module
     };
     const throughModule = (specifier, imported)=>{
-        const resolvedPath = resolveRelativeModulePath(module.path, specifier);
-        const target = void 0 === resolvedPath ? void 0 : readModule(resolvedPath);
-        return void 0 === target ? void 0 : resolveBinding(target, imported, 'export', readModule, seen);
+        const resolved = resolveModulePath(module, specifier, workspace);
+        const target = resolved && readModule(resolved.path, resolved.boundary);
+        return void 0 === target ? void 0 : resolveBinding(target, imported, 'export', readModule, workspace, seen);
     };
     if ('local' === scope) {
         const imported = importedBinding(module, name);
@@ -171,14 +239,14 @@ const resolveBinding = (module, name, scope, readModule, seen)=>{
     }
     if ('default' === name) {
         const exported = defaultExport(module);
-        if ('string' == typeof exported) return resolveBinding(module, exported, 'local', readModule, seen);
+        if ('string' == typeof exported) return resolveBinding(module, exported, 'local', readModule, workspace, seen);
         return void 0 === exported ? void 0 : {
             expression: exported,
             module
         };
     }
     const reexported = reexportedBinding(module, name);
-    if (void 0 !== reexported) return void 0 === reexported.specifier ? resolveBinding(module, reexported.local, 'local', readModule, seen) : throughModule(reexported.specifier, reexported.local);
+    if (void 0 !== reexported) return void 0 === reexported.specifier ? resolveBinding(module, reexported.local, 'local', readModule, workspace, seen) : throughModule(reexported.specifier, reexported.local);
     for (const statement of module.file.program.body){
         if (!__rspack_external__babel_types_6e8337dd.isExportAllDeclaration(statement) || 'type' === statement.exportKind) continue;
         const resolved = throughModule(statement.source.value, name);
@@ -332,6 +400,7 @@ const nonEndpointCombinators = {
 };
 const reachableEndpoints = (rootModule, declaration)=>{
     const readModule = createModuleReader(rootModule);
+    const workspace = containingWorkspace(rootModule.path);
     const active = new Set();
     const endpoints = [];
     const identities = new Set();
@@ -353,7 +422,7 @@ const reachableEndpoints = (rootModule, declaration)=>{
         active.add(node);
         try {
             if (__rspack_external__babel_types_6e8337dd.isIdentifier(node)) {
-                const resolved = resolveBinding(module, node.name, 'local', readModule, new Set());
+                const resolved = resolveBinding(module, node.name, 'local', readModule, workspace, new Set());
                 return void 0 !== resolved && visit(resolved.expression, resolved.module, kind, group);
             }
             if ('endpoint' === kind) {
@@ -570,11 +639,13 @@ const configuredMicroVerticalApiStem = (verticalPath, verticals)=>{
 };
 const microVerticalApiBaselineViolation = (stem, filePath, expectation)=>{
     try {
-        const sourceFile = parseConsumer(filePath);
+        const realPath = node_fs.realpathSync(filePath);
+        const sourceFile = parseConsumer(realPath);
         if (!baselinePublicIdentityIsExact(filePath, expectation)) return 'MicroVertical baseline imports must resolve the exact framework owner public export and schema identity';
         return validateParsedContract({
             file: sourceFile,
-            path: filePath
+            path: realPath,
+            boundary: sourceBoundary(realPath, containingWorkspace(realPath))
         }, stem, expectation);
     } catch (error) {
         if (error instanceof SourceSyntaxError) return `MicroVertical root contract must be valid TypeScript syntax (${error.message})`;