@bleedingdev/modern-js-code-tools 3.9.0-ultramodern.9 → 3.9.3-ultramodern.1

package/dist/esm/microvertical-api-baseline.js

@@ -1,65 +1,13 @@
-import node_fs from "node:fs";
-import node_path from "node:path";
-import { parse } from "@babel/parser";
-import traverse, { Hub, NodePath } from "@babel/traverse";
 import { baselinePublicIdentityIsExact } from "./microvertical-api-owner.js";
+import { createModuleGraph, exportedConst, localConst, propertyName } from "./module-graph.js";
+import { SourceSyntaxError, unwrapExpression } from "./source-analysis.js";
 import * as __rspack_external__babel_types_6e8337dd from "@babel/types";
-const consumerParserPlugins = (filePath)=>filePath.endsWith('.tsx') || filePath.endsWith('.jsx') ? [
-        "typescript",
-        'jsx'
-    ] : [
-        "typescript"
-    ];
-class ConsumerSyntaxError extends Error {
-}
-class ConsumerValidationHub extends Hub {
-    buildError(_node, message) {
-        return new ConsumerSyntaxError(message);
-    }
-}
-function parseConsumer(filePath) {
-    if (node_fs.statSync(filePath).size > 1000000) throw new Error(`${filePath}: consumer source exceeds 1 MB analysis budget`);
-    let file;
-    try {
-        file = parse(node_fs.readFileSync(filePath, 'utf8'), {
-            sourceType: 'module',
-            sourceFilename: filePath,
-            plugins: consumerParserPlugins(filePath)
-        });
-    } catch (error) {
-        if ('object' == typeof error && null !== error && 'code' in error && 'BABEL_PARSER_SYNTAX_ERROR' === error.code) throw new ConsumerSyntaxError(error instanceof Error ? error.message : String(error));
-        throw error;
-    }
-    const program = NodePath.get({
-        hub: new ConsumerValidationHub(),
-        parentPath: void 0,
-        parent: file,
-        container: file,
-        key: 'program'
-    });
-    program.setContext();
-    traverse(file, {
-        AssignmentExpression (p) {
-            throw new ConsumerSyntaxError(`contract bindings must be immutable at ${p.node.start}`);
-        },
-        UpdateExpression (p) {
-            throw new ConsumerSyntaxError(`contract bindings must be immutable at ${p.node.start}`);
-        },
-        TSModuleDeclaration () {
-            throw new ConsumerSyntaxError('contract bindings must not be merged with namespaces');
-        }
-    }, program.scope, void 0, program);
-    return file;
-}
 const camelCaseStem = (stem)=>stem.replaceAll(/-([a-z0-9])/gu, (_match, letter)=>letter.toUpperCase());
 const pascalCaseStem = (stem)=>{
     const camelStem = camelCaseStem(stem);
     return `${camelStem.slice(0, 1).toUpperCase()}${camelStem.slice(1)}`;
 };
 const identifierName = (node)=>void 0 !== node && __rspack_external__babel_types_6e8337dd.isIdentifier(node) ? node.name : void 0;
-const propertyName = (node)=>{
-    if (void 0 !== node && (__rspack_external__babel_types_6e8337dd.isIdentifier(node) || __rspack_external__babel_types_6e8337dd.isStringLiteral(node) || __rspack_external__babel_types_6e8337dd.isNumericLiteral(node))) return __rspack_external__babel_types_6e8337dd.isIdentifier(node) ? node.name : String(node.value);
-};
 const accessPath = (node)=>{
     if (__rspack_external__babel_types_6e8337dd.isIdentifier(node)) return [
         node.name
@@ -73,11 +21,6 @@ const accessPath = (node)=>{
     }
 };
 const isAccessPath = (node, expected)=>accessPath(node)?.join('.') === expected.join('.');
-const unwrapExpression = (expression)=>{
-    let current = expression;
-    while(__rspack_external__babel_types_6e8337dd.isTSAsExpression(current) || __rspack_external__babel_types_6e8337dd.isParenthesizedExpression(current) || __rspack_external__babel_types_6e8337dd.isTSSatisfiesExpression(current))current = current.expression;
-    return current;
-};
 const stringLiteral = (expression)=>{
     if (null == expression) return;
     const unwrapped = unwrapExpression(expression);
@@ -93,135 +36,6 @@ const callExpression = (expression, callee)=>{
     const unwrapped = unwrapExpression(expression);
     return __rspack_external__babel_types_6e8337dd.isCallExpression(unwrapped) && isAccessPath(unwrapped.callee, callee) ? unwrapped : void 0;
 };
-const localConst = (sourceFile, name)=>{
-    for (const item of sourceFile.program.body){
-        const statement = __rspack_external__babel_types_6e8337dd.isExportNamedDeclaration(item) ? item.declaration : item;
-        if (!__rspack_external__babel_types_6e8337dd.isVariableDeclaration(statement) || 'const' !== statement.kind) continue;
-        const matches = statement.declarations.filter((declaration)=>__rspack_external__babel_types_6e8337dd.isIdentifier(declaration.id, {
-                name
-            }));
-        if (1 === matches.length) return matches[0];
-    }
-};
-const exportedConst = (sourceFile, name)=>{
-    for (const statement of sourceFile.program.body)if (__rspack_external__babel_types_6e8337dd.isExportNamedDeclaration(statement) && 'type' !== statement.exportKind) {
-        if (__rspack_external__babel_types_6e8337dd.isVariableDeclaration(statement.declaration) && 'const' === statement.declaration.kind) {
-            const declaration = statement.declaration.declarations.find((value)=>__rspack_external__babel_types_6e8337dd.isIdentifier(value.id, {
-                    name
-                }));
-            if (declaration) return declaration;
-        }
-        if (!statement.source && statement.specifiers.some((value)=>__rspack_external__babel_types_6e8337dd.isExportSpecifier(value) && 'type' !== value.exportKind && __rspack_external__babel_types_6e8337dd.isIdentifier(value.local, {
-                name
-            }) && __rspack_external__babel_types_6e8337dd.isIdentifier(value.exported, {
-                name
-            }))) return localConst(sourceFile, name);
-    }
-};
-const resolveRelativeModulePath = (fromPath, specifier)=>{
-    if (!/^\.\.?\//u.test(specifier)) return;
-    const resolved = node_path.resolve(node_path.dirname(fromPath), specifier);
-    const stem = resolved.replace(/\.(?:[cm]?[jt]sx?)$/u, '');
-    for (const candidate of [
-        `${stem}.ts`,
-        `${stem}.tsx`,
-        node_path.join(stem, 'index.ts'),
-        node_path.join(stem, 'index.tsx')
-    ])if (node_fs.existsSync(candidate) && node_fs.statSync(candidate).isFile()) return candidate;
-};
-const createModuleReader = (root)=>{
-    const modules = new Map([
-        [
-            root.path,
-            root
-        ]
-    ]);
-    return (filePath)=>{
-        if (modules.has(filePath)) return modules.get(filePath);
-        if (modules.size >= 256) return;
-        let module;
-        try {
-            module = {
-                file: parseConsumer(filePath),
-                path: filePath
-            };
-        } catch  {
-            module = void 0;
-        }
-        modules.set(filePath, module);
-        return module;
-    };
-};
-const importedBinding = (module, name)=>{
-    for (const statement of module.file.program.body)if (__rspack_external__babel_types_6e8337dd.isImportDeclaration(statement) && 'type' !== statement.importKind) {
-        for (const specifier of statement.specifiers)if (__rspack_external__babel_types_6e8337dd.isIdentifier(specifier.local, {
-            name
-        })) {
-            if (__rspack_external__babel_types_6e8337dd.isImportSpecifier(specifier) && 'type' !== specifier.importKind) return {
-                imported: propertyName(specifier.imported) ?? name,
-                specifier: statement.source.value
-            };
-            if (__rspack_external__babel_types_6e8337dd.isImportDefaultSpecifier(specifier)) return {
-                imported: 'default',
-                specifier: statement.source.value
-            };
-        }
-    }
-};
-const reexportedBinding = (module, name)=>{
-    for (const statement of module.file.program.body){
-        if (!__rspack_external__babel_types_6e8337dd.isExportNamedDeclaration(statement) || 'type' === statement.exportKind) continue;
-        const specifier = statement.specifiers.find((value)=>__rspack_external__babel_types_6e8337dd.isExportSpecifier(value) && 'type' !== value.exportKind && propertyName(value.exported) === name);
-        if (void 0 !== specifier && __rspack_external__babel_types_6e8337dd.isExportSpecifier(specifier)) return {
-            local: specifier.local.name,
-            ...statement.source ? {
-                specifier: statement.source.value
-            } : {}
-        };
-    }
-};
-const defaultExport = (module)=>{
-    for (const statement of module.file.program.body){
-        if (!__rspack_external__babel_types_6e8337dd.isExportDefaultDeclaration(statement)) continue;
-        const declaration = statement.declaration;
-        if (__rspack_external__babel_types_6e8337dd.isIdentifier(declaration)) return declaration.name;
-        return __rspack_external__babel_types_6e8337dd.isExpression(declaration) ? declaration : void 0;
-    }
-};
-const resolveBinding = (module, name, scope, readModule, seen)=>{
-    const key = `${scope}:${module.path}#${name}`;
-    if (seen.has(key) || seen.size >= 512) return;
-    seen.add(key);
-    const declaration = 'export' === scope ? exportedConst(module.file, name) : localConst(module.file, name);
-    if (declaration?.init) return {
-        expression: declaration.init,
-        module
-    };
-    const throughModule = (specifier, imported)=>{
-        const resolvedPath = resolveRelativeModulePath(module.path, specifier);
-        const target = void 0 === resolvedPath ? void 0 : readModule(resolvedPath);
-        return void 0 === target ? void 0 : resolveBinding(target, imported, 'export', readModule, seen);
-    };
-    if ('local' === scope) {
-        const imported = importedBinding(module, name);
-        return void 0 === imported ? void 0 : throughModule(imported.specifier, imported.imported);
-    }
-    if ('default' === name) {
-        const exported = defaultExport(module);
-        if ('string' == typeof exported) return resolveBinding(module, exported, 'local', readModule, seen);
-        return void 0 === exported ? void 0 : {
-            expression: exported,
-            module
-        };
-    }
-    const reexported = reexportedBinding(module, name);
-    if (void 0 !== reexported) return void 0 === reexported.specifier ? resolveBinding(module, reexported.local, 'local', readModule, seen) : throughModule(reexported.specifier, reexported.local);
-    for (const statement of module.file.program.body){
-        if (!__rspack_external__babel_types_6e8337dd.isExportAllDeclaration(statement) || 'type' === statement.exportKind) continue;
-        const resolved = throughModule(statement.source.value, name);
-        if (void 0 !== resolved) return resolved;
-    }
-};
 const objectLiteral = (expression)=>{
     if (null == expression) return;
     const unwrapped = unwrapExpression(expression);
@@ -321,14 +135,21 @@ const singleAddedArgument = (expression, factory, names)=>{
     if (1 !== chain.base.arguments.length || !names.includes(stringLiteral(chain.base.arguments[0]) ?? '') || 1 !== chain.methods.length || method?.name !== 'add' || 1 !== method.arguments.length) return;
     return method.arguments[0];
 };
-const foundationIsExact = (declaration, stem, readinessSchemaName)=>{
-    const group = singleAddedArgument(declaration?.init, [
+const rootGroupExpression = (graph, expression)=>{
+    if (void 0 === expression) return;
+    const node = unwrapExpression(expression);
+    if (!__rspack_external__babel_types_6e8337dd.isIdentifier(node)) return node;
+    const resolved = graph.resolve(graph.root, node.name, 'local');
+    return resolved?.kind === 'declaration' && resolved.module === graph.root ? unwrapExpression(resolved.expression) : void 0;
+};
+const foundationGroup = (graph, declaration, stem, readinessSchemaName)=>{
+    const group = rootGroupExpression(graph, singleAddedArgument(declaration?.init, [
         'HttpApi',
         'make'
     ], [
         `${pascalCaseStem(stem)}FoundationApi`,
         `${pascalCaseStem(stem)}ApiFoundation`
-    ]);
+    ]));
     const endpointExpression = singleAddedArgument(group, [
         'HttpApiGroup',
         'make'
@@ -341,17 +162,24 @@ const foundationIsExact = (declaration, stem, readinessSchemaName)=>{
     ], 3);
     const endpointOptions = objectLiteral(endpoint?.arguments[2]);
     const endpointProperties = void 0 === endpointOptions ? void 0 : propertyAssignments(endpointOptions.properties);
-    return void 0 !== endpoint && 'readiness' === stringLiteral(endpoint.arguments[0]) && stringLiteral(endpoint.arguments[1]) === `/${stem}/readiness` && endpointProperties?.size === 1 && identifierName(endpointProperties.get('success')?.value) === readinessSchemaName;
+    return void 0 !== endpoint && 'readiness' === stringLiteral(endpoint.arguments[0]) && stringLiteral(endpoint.arguments[1]) === `/${stem}/readiness` && endpointProperties?.size === 1 && identifierName(endpointProperties.get('success')?.value) === readinessSchemaName ? group : void 0;
 };
-const rootComposesFoundation = (sourceFile, declaration, stem, foundationName)=>{
+const rootComposesFoundation = (graph, declaration, stem, foundationName, foundation)=>{
+    const sourceFile = graph.root.file;
     const chain = directCallChain(declaration?.init);
     const first = chain?.methods[0];
+    const firstArgument = first?.arguments[0];
     return void 0 !== chain && isAccessPath(chain.base.callee, [
         'HttpApi',
         'make'
-    ]) && 1 === chain.base.arguments.length && stringLiteral(chain.base.arguments[0]) === `${pascalCaseStem(stem)}Api` && chain.methods.length > 0 && chain.methods.every((method, index)=>1 === method.arguments.length && ('add' === method.name || 'addHttpApi' === method.name || index === chain.methods.length - 1 && 'pipe' === method.name && 'identity' === identifierName(method.arguments[0]) && importsExactBindings(sourceFile, 'effect', [
+    ]) && 1 === chain.base.arguments.length && stringLiteral(chain.base.arguments[0]) === `${pascalCaseStem(stem)}Api` && chain.methods.length > 0 && chain.methods.every((method, index)=>{
+        const combinatorArity = nonEndpointCombinators.api[method.name];
+        if (void 0 !== combinatorArity) return method.arguments.length === combinatorArity;
+        if ('add' === method.name) return method.arguments.length > 0;
+        return 1 === method.arguments.length && ('addHttpApi' === method.name || index === chain.methods.length - 1 && 'pipe' === method.name && 'identity' === identifierName(method.arguments[0]) && importsExactBindings(sourceFile, 'effect', [
             'identity'
-        ]))) && first?.name === 'addHttpApi' && identifierName(first.arguments[0]) === foundationName;
+        ]));
+    }) && void 0 !== firstArgument && (first?.name === 'addHttpApi' && identifierName(firstArgument) === foundationName || first?.name === 'add' && __rspack_external__babel_types_6e8337dd.isIdentifier(firstArgument) && rootGroupExpression(graph, firstArgument) === foundation);
 };
 const nonEndpointCombinators = {
     api: {
@@ -367,8 +195,7 @@ const nonEndpointCombinators = {
         middleware: 1
     }
 };
-const reachableEndpoints = (rootModule, declaration)=>{
-    const readModule = createModuleReader(rootModule);
+const reachableEndpoints = (graph, declaration)=>{
     const active = new Set();
     const endpoints = [];
     const identities = new Set();
@@ -390,8 +217,8 @@ const reachableEndpoints = (rootModule, declaration)=>{
         active.add(node);
         try {
             if (__rspack_external__babel_types_6e8337dd.isIdentifier(node)) {
-                const resolved = resolveBinding(module, node.name, 'local', readModule, new Set());
-                return void 0 !== resolved && visit(resolved.expression, resolved.module, kind, group);
+                const resolved = graph.resolve(module, node.name, 'local');
+                return resolved?.kind === 'declaration' && visit(resolved.expression, resolved.module, kind, group);
             }
             if ('endpoint' === kind) {
                 if (!__rspack_external__babel_types_6e8337dd.isCallExpression(node) || node.arguments.length < 2 || node.arguments.length > 3) return false;
@@ -435,18 +262,36 @@ const reachableEndpoints = (rootModule, declaration)=>{
                 }
                 const combinatorArity = combinators[method.name];
                 if (void 0 !== combinatorArity) return method.arguments.length === combinatorArity;
+                if ('add' === method.name) return method.arguments.length > 0 && method.arguments.every((argument)=>visitAdded(argument, module, 'api' === kind ? 'group' : 'endpoint', 'group' === kind ? name : ''));
                 if (1 !== method.arguments.length) return false;
                 if ('pipe' === method.name) return 'identity' === identifierName(method.arguments[0]) && importsExactBindings(module.file, 'effect', [
                     'identity'
                 ]);
-                if ('add' === method.name) return visit(method.arguments[0], module, 'api' === kind ? 'group' : 'endpoint', 'group' === kind ? name : '');
                 return 'api' === kind && 'addHttpApi' === method.name && visit(method.arguments[0], module, 'api');
             });
         } finally{
             active.delete(node);
         }
     };
-    return visit(declaration?.init, rootModule, 'api') ? endpoints : void 0;
+    const visitAdded = (argument, module, kind, group)=>{
+        if (!__rspack_external__babel_types_6e8337dd.isSpreadElement(argument)) return visit(argument, module, kind, group);
+        let node = unwrapExpression(argument.argument);
+        let owner = module;
+        if (__rspack_external__babel_types_6e8337dd.isIdentifier(node)) {
+            const resolved = graph.resolve(module, node.name, 'local');
+            if (resolved?.kind !== 'declaration') return false;
+            node = unwrapExpression(resolved.expression);
+            owner = resolved.module;
+        }
+        if (!__rspack_external__babel_types_6e8337dd.isArrayExpression(node) || active.has(node) || ++visits > 2048) return false;
+        active.add(node);
+        try {
+            return node.elements.every((element)=>null !== element && visitAdded(element, owner, kind, group));
+        } finally{
+            active.delete(node);
+        }
+    };
+    return visit(declaration?.init, graph.root, 'api') ? endpoints : void 0;
 };
 const operationContextFields = (property)=>{
     const constructorCall = exactCall(property.value, [
@@ -577,8 +422,8 @@ const readinessSchemaIsShared = (declaration, markerSchemaName, ownerMarkerIsIde
     return void 0 !== schema && (schema.identity && ownerMarkerIsIdentity || 1 === schema.assignments.size && identifierName(schema.assignments.get('marker')?.value) === markerSchemaName);
 };
 const declarationIsIdentifier = (declaration, identifier)=>declaration?.init != null && identifierName(unwrapExpression(declaration.init)) === identifier;
-const validateParsedContract = (module, stem, expectation)=>{
-    const sourceFile = module.file;
+const validateParsedContract = (graph, stem, expectation)=>{
+    const sourceFile = graph.root.file;
     const exportStem = camelCaseStem(stem);
     const foundationName = `${exportStem}FoundationApi`;
     const markerSchemaName = `${exportStem}MarkerSchema`;
@@ -593,9 +438,10 @@ const validateParsedContract = (module, stem, expectation)=>{
     if (!importsSharedBaselinePrimitives(sourceFile, expectation.baselinePackage)) return 'MicroVertical root contract must import exact baseline primitives from the framework baseline package';
     if (!markerSchemaIsShared(sourceFile, markerDeclaration)) return 'MicroVertical root contract must consume the shared build marker schema without overriding shared fields';
     if (!readinessSchemaIsShared(exportedConst(sourceFile, readinessSchemaName), markerSchemaName, declarationIsIdentifier(markerDeclaration, 'MicroVerticalBuildMarkerSchema'))) return 'MicroVertical readiness schema must consume the shared readiness schema without overriding shared fields';
-    if (!foundationIsExact(exportedConst(sourceFile, foundationName), stem, readinessSchemaName)) return 'MicroVertical readiness foundation API must directly compose its exact readiness endpoint and foundation identity';
-    if (!rootComposesFoundation(sourceFile, exportedConst(sourceFile, `${exportStem}Api`), stem, foundationName)) return 'MicroVertical root API must explicitly compose its readiness foundation API';
-    const endpoints = reachableEndpoints(module, exportedConst(sourceFile, `${exportStem}Api`));
+    const foundation = foundationGroup(graph, exportedConst(sourceFile, foundationName), stem, readinessSchemaName);
+    if (void 0 === foundation) return 'MicroVertical readiness foundation API must directly compose its exact readiness endpoint and foundation identity';
+    if (!rootComposesFoundation(graph, exportedConst(sourceFile, `${exportStem}Api`), stem, foundationName, foundation)) return 'MicroVertical root API must explicitly compose its readiness foundation API';
+    const endpoints = reachableEndpoints(graph, exportedConst(sourceFile, `${exportStem}Api`));
     if (!endpoints) return 'MicroVertical root API must compose bounded native endpoint declarations without ambiguous identities';
     if (!operationMapIsConnected(exportedConst(sourceFile, `${exportStem}OperationContexts`), stem, expectation.operationPaths ?? {}, endpoints)) return 'MicroVertical operation map must construct every operation with the shared context constructor';
     if (!metadataIsExact(exportedConst(sourceFile, `${exportStem}ApiContract`), expectation, endpoints)) return 'MicroVertical root contract must keep exact owner and API path metadata without forbidden fields';
@@ -607,15 +453,21 @@ const configuredMicroVerticalApiStem = (verticalPath, verticals)=>{
 };
 const microVerticalApiBaselineViolation = (stem, filePath, expectation)=>{
     try {
-        const sourceFile = parseConsumer(filePath);
-        if (!baselinePublicIdentityIsExact(filePath, expectation)) return 'MicroVertical baseline imports must resolve the exact framework owner public export and schema identity';
-        return validateParsedContract({
-            file: sourceFile,
-            path: filePath
-        }, stem, expectation);
+        const modules = createModuleGraph();
+        const graph = {
+            ...modules,
+            root: modules.module(filePath)
+        };
+        const [mutation] = graph.root.mutations;
+        if (mutation) return `MicroVertical root contract must be valid TypeScript syntax (contract bindings must be immutable at ${mutation.start})`;
+        let identityMismatch;
+        if (!baselinePublicIdentityIsExact(filePath, expectation, (message)=>{
+            identityMismatch = message;
+        })) return `MicroVertical baseline imports must resolve the exact framework owner public export and schema identity${identityMismatch ? ` (${identityMismatch})` : ''}`;
+        return validateParsedContract(graph, stem, expectation);
     } catch (error) {
-        if (error instanceof ConsumerSyntaxError) return `MicroVertical root contract must be valid TypeScript syntax (${error.message})`;
+        if (error instanceof SourceSyntaxError) return `MicroVertical root contract must be valid TypeScript syntax (${error.message})`;
         throw error;
     }
 };
-export { configuredMicroVerticalApiStem, consumerParserPlugins, microVerticalApiBaselineViolation };
+export { configuredMicroVerticalApiStem, microVerticalApiBaselineViolation };

package/dist/esm/microvertical-api-boundary.js

@@ -1,8 +1,10 @@
 import node_fs from "node:fs";
 import node_path from "node:path";
 import { parse } from "@babel/parser";
-import { configuredMicroVerticalApiStem, consumerParserPlugins, microVerticalApiBaselineViolation } from "./microvertical-api-baseline.js";
+import { configuredMicroVerticalApiStem, microVerticalApiBaselineViolation } from "./microvertical-api-baseline.js";
 import { baselinePackage, resolveBaselinePackageDirectory } from "./microvertical-api-owner.js";
+import { createModuleGraph } from "./module-graph.js";
+import { SourceSyntaxError, consumerParserPlugins } from "./source-analysis.js";
 import { createEffectApiImportResolver, strictEffectRuntimeTopologyViolation } from "./strict-effect-runtime.js";
 import * as __rspack_external__babel_types_6e8337dd from "@babel/types";
 const ignored = new Set([
@@ -19,13 +21,42 @@ const normalize = (file)=>file.split(node_path.sep).join('/').replace(/^\.\//u,
 const errorMessage = (error)=>error instanceof Error ? error.message : String(error);
 const apiApp = (app)=>'vertical' === app.kind && 'ui-only' !== app.surfaceProfile && 'horizontal-remote' !== app.deliveryUnitKind;
 function configuredApps(root, supplied) {
-    const source = supplied ?? JSON.parse(node_fs.readFileSync(node_path.join(root, '.modernjs/ultramodern.json'), 'utf8')).topology?.apps;
-    if (!Array.isArray(source)) throw new Error('.modernjs/ultramodern.json: topology.apps must be an array');
+    const topology = supplied ? void 0 : JSON.parse(node_fs.readFileSync(node_path.join(root, 'topology/reference-topology.json'), 'utf8'));
+    if (topology && (!topology.shell || !Array.isArray(topology.verticals) || void 0 !== topology.shells && !Array.isArray(topology.shells))) throw new Error('topology/reference-topology.json: shell and verticals must be present');
+    const entries = topology?.shell ? [
+        topology.shell,
+        ...topology.shells ?? [],
+        ...topology.verticals ?? []
+    ] : void 0;
+    const source = supplied ?? entries?.map((entry)=>{
+        if (!entry || 'string' != typeof entry.path || !entry.path || node_path.isAbsolute(entry.path) || entry.path.split(/[\\/]/u).includes('..')) throw new Error('topology/reference-topology.json: each app must have an explicit workspace path');
+        const packageFile = node_path.join(root, entry.path, 'package.json');
+        const manifest = JSON.parse(node_fs.readFileSync(packageFile, 'utf8'));
+        if ('string' != typeof manifest.name || !manifest.name || void 0 !== entry.package && entry.package !== manifest.name) throw new Error(`${entry.path}/package.json: package name must match topology`);
+        const api = entry.api;
+        const stem = api?.stem ?? api?.readiness?.endpoint?.match(/^\/([a-z0-9]+(?:-[a-z0-9]+)*)\/readiness$/u)?.[1];
+        return {
+            id: entry.id,
+            kind: entry.kind,
+            path: entry.path,
+            package: manifest.name,
+            surfaceProfile: entry.surfaceProfile,
+            deliveryUnitKind: entry.deliveryUnitKind,
+            ...void 0 === api ? {} : {
+                api: {
+                    stem,
+                    prefix: api.bff?.prefix,
+                    protocol: api.protocol
+                }
+            }
+        };
+    });
+    if (!Array.isArray(source)) throw new Error('topology/reference-topology.json: shell and verticals must describe apps');
     const paths = new Set();
     for (const app of source){
-        if (!app || 'object' != typeof app || 'string' != typeof app.path || !app.path || node_path.isAbsolute(app.path) || app.path.split(/[\\/]/u).includes('..')) throw new Error('.modernjs/ultramodern.json: each app must have a relative workspace path');
+        if (!app || 'object' != typeof app || 'string' != typeof app.path || !app.path || node_path.isAbsolute(app.path) || app.path.split(/[\\/]/u).includes('..')) throw new Error('topology/reference-topology.json: each app must have a relative workspace path');
         const key = normalize(app.path);
-        if (paths.has(key)) throw new Error(`.modernjs/ultramodern.json: duplicate app path ${key}`);
+        if (paths.has(key)) throw new Error(`topology/reference-topology.json: duplicate app path ${key}`);
         paths.add(key);
         for (const name of [
             'id',
@@ -34,7 +65,7 @@ function configuredApps(root, supplied) {
             'surfaceProfile',
             'deliveryUnitKind'
         ])if (void 0 !== app[name] && 'string' != typeof app[name]) throw new Error(`${key}: ${name} must be a string`);
-        for (const [field, allowed] of Object.entries({
+        const allowedFields = {
             kind: [
                 'shell',
                 'vertical'
@@ -48,7 +79,11 @@ function configuredApps(root, supplied) {
                 'microvertical',
                 'horizontal-remote'
             ]
-        }))if (void 0 !== app[field] && !allowed.includes(app[field])) throw new Error(`${key}: invalid ${field}`);
+        };
+        for (const field of Object.keys(allowedFields)){
+            const value = app[field];
+            if (void 0 !== value && !allowedFields[field].includes(value)) throw new Error(`${key}: invalid ${field}`);
+        }
         if (void 0 !== app.api) {
             if (!app.api || 'object' != typeof app.api || Array.isArray(app.api)) throw new Error(`${key}: api must be an object`);
             if (void 0 !== app.api.protocol && ![
@@ -136,12 +171,27 @@ function check(options, topology) {
                 `${base}/index.tsx`
             ].find((candidate)=>exists(candidate));
         };
-        const composedModules = (file)=>{
+        const clientExportFile = (appPath, exported)=>{
+            if ('string' != typeof exported || !exported.startsWith('./') || exported.split(/[\\/]/u).includes('..') || !/\.[cm]?[jt]sx?$/u.test(exported)) return;
+            const appDirectory = absolute(appPath);
+            const candidate = node_path.resolve(appDirectory, exported);
+            try {
+                const workspace = node_fs.realpathSync(root);
+                const owner = node_fs.realpathSync(appDirectory);
+                const real = node_fs.realpathSync(candidate);
+                if (!owner.startsWith(`${workspace}${node_path.sep}`) || !real.startsWith(`${owner}${node_path.sep}`) || !node_fs.statSync(real).isFile()) return;
+            } catch  {
+                return;
+            }
+            return normalize(node_path.relative(root, candidate));
+        };
+        const composedModules = (file, appPath)=>{
             const order = [];
             const seen = new Set();
             const queue = [
                 file
             ];
+            const owner = node_fs.realpathSync(absolute(appPath));
             while(queue.length > 0 && order.length < 128){
                 const current = queue.shift();
                 if (seen.has(current)) continue;
@@ -152,16 +202,19 @@ function check(options, topology) {
                 for (const statement of ast.program.body){
                     const source = (__rspack_external__babel_types_6e8337dd.isImportDeclaration(statement) || __rspack_external__babel_types_6e8337dd.isExportNamedDeclaration(statement) || __rspack_external__babel_types_6e8337dd.isExportAllDeclaration(statement)) && statement.source ? statement.source.value : void 0;
                     const resolved = void 0 === source ? void 0 : resolveRelative(current, source);
-                    if (void 0 !== resolved && !seen.has(resolved)) queue.push(resolved);
+                    if (void 0 !== resolved && !seen.has(resolved)) {
+                        const real = node_fs.realpathSync(absolute(resolved));
+                        if (real.startsWith(`${owner}${node_path.sep}`)) queue.push(resolved);
+                    }
                 }
             }
             return order;
         };
-        const moduleShape = (file, imports, calls, patterns = [], defaultExport, composed = false)=>{
+        const moduleShape = (file, imports, calls, patterns = [], defaultExport, composedAppPath)=>{
             if (!exists(file)) return;
             const ast = parseFile(file);
             if (!ast) return;
-            const shapeFiles = composed ? composedModules(file) : [
+            const shapeFiles = composedAppPath ? composedModules(file, composedAppPath) : [
                 file
             ];
             const body = shapeFiles.flatMap((shapeFile)=>parseFile(shapeFile)?.program.body ?? []);
@@ -254,7 +307,6 @@ function check(options, topology) {
                 if (violation) diagnostics.push(`${file}: ${violation}`);
             }
         });
-        let owner;
         for (const appPath of appDirectories)guarded(appPath, ()=>{
             const app = byPath.get(appPath);
             const emits = app ? apiApp(app) || 'vertical' !== app.kind && void 0 !== app.api : appPath.startsWith('verticals/') || exists(`${appPath}/api/index.ts`) || exists(`${appPath}/shared/api.ts`);
@@ -271,19 +323,25 @@ function check(options, topology) {
                 }
                 return;
             }
-            if (app?.kind === 'vertical') assert(void 0 !== app.api, `${appPath}: vertical must declare its Effect API in .modernjs/ultramodern.json`);
+            if (app?.kind === 'vertical') assert(void 0 !== app.api, `${appPath}: vertical must declare its Effect API in topology/reference-topology.json`);
             const stem = app?.api?.stem ?? node_path.posix.basename(appPath);
             const rpc = app?.api?.protocol === 'rpc';
             const contract = `${appPath}/shared/${rpc ? 'rpc' : 'api'}.ts`;
-            const client = `${appPath}/src/api/${stem}-${rpc ? 'rpc-client' : 'client'}.ts`;
             const entry = `${appPath}/api/index.ts`;
             for (const file of [
                 entry,
-                contract,
-                client
+                contract
             ])assert(exists(file), `${file}: required API surface is missing`);
+            const packageFile = `${appPath}/package.json`;
+            assert(exists(packageFile), `${packageFile}: required API package is missing`);
+            if (!exists(packageFile)) return;
+            const manifest = JSON.parse(read(packageFile));
+            assert(manifest.exports?.['./api'] === `./shared/${rpc ? 'rpc' : 'api'}.ts`, `${packageFile}: invalid ./api export`);
+            const clientKey = `./api/${rpc ? 'rpc-client' : 'client'}`;
+            const client = clientExportFile(appPath, manifest.exports?.[clientKey]);
+            assert(void 0 !== client, `${packageFile}: invalid API client export`);
+            assert(manifest.exports?.[`./api/${rpc ? 'client' : 'rpc-client'}`] === void 0, `${packageFile}: forbidden opposite protocol client export`);
             noPath(`${appPath}/shared/${rpc ? 'api' : 'rpc'}.ts`, `must not emit a ${rpc ? 'REST' : 'RPC'} contract`);
-            noPath(`${appPath}/src/api/${stem}-${rpc ? 'client' : 'rpc-client'}.ts`, `must not emit a ${rpc ? 'REST' : 'RPC'} client`);
             if (rpc) {
                 moduleShape(entry, [
                     [
@@ -314,7 +372,7 @@ function check(options, topology) {
                 ], 'apiRuntime');
                 moduleShape(contract, [
                     [
-                        'effect/unstable/rpc',
+                        'effect/rpc',
                         [
                             'Rpc',
                             'RpcGroup'
@@ -332,7 +390,7 @@ function check(options, topology) {
                     'Schema.Struct'
                 ]);
             } else if (exists(contract)) {
-                owner ??= options.baselinePackageDirectory ?? resolveBaselinePackageDirectory(node_path.join(root, 'package.json'));
+                const owner = options.baselinePackageDirectory ?? resolveBaselinePackageDirectory(absolute(contract));
                 const apiPrefix = app?.api?.prefix ?? `/${stem}-api`;
                 const basePath = `${apiPrefix}/${stem}`;
                 const expectation = {
@@ -349,21 +407,24 @@ function check(options, topology) {
                 const violation = microVerticalApiBaselineViolation(stem, absolute(contract), expectation);
                 if (violation) diagnostics.push(`${contract}: ${violation}`);
             }
-            moduleShape(client, [
-                [
-                    effect,
+            if (client) {
+                const relativeContract = node_path.posix.relative(node_path.posix.dirname(client), contract);
+                moduleShape(client, [
                     [
-                        'Effect',
-                        rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient'
+                        effect,
+                        [
+                            'Effect',
+                            rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient'
+                        ]
+                    ],
+                    [
+                        relativeContract.startsWith('.') ? relativeContract : `./${relativeContract}`,
+                        []
                     ]
-                ],
-                [
-                    rpc ? '../../shared/rpc.ts' : '../../shared/api',
-                    []
-                ]
-            ], [
-                rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient'
-            ], [], void 0, true);
+                ], [
+                    rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient'
+                ], [], void 0, appPath);
+            }
             moduleShape(`${appPath}/api/effect-api.ts`, [], [], [
                 [
                     /\bbackendFederationContract\b/u,
@@ -404,12 +465,26 @@ function check(options, topology) {
                     'must enable strictEffectApproach'
                 ]
             ]);
-            const packageFile = `${appPath}/package.json`;
-            if (exists(packageFile)) {
-                const manifest = JSON.parse(read(packageFile));
-                assert(manifest.exports?.['./api'] === `./shared/${rpc ? 'rpc' : 'api'}.ts`, `${packageFile}: invalid ./api export`);
-                assert(manifest.exports?.[`./api/${rpc ? 'rpc-client' : 'client'}`] === `./src/api/${stem}-${rpc ? 'rpc-client' : 'client'}.ts`, `${packageFile}: invalid API client export`);
-                assert(manifest.exports?.[`./api/${rpc ? 'client' : 'rpc-client'}`] === void 0, `${packageFile}: forbidden opposite protocol client export`);
+        });
+        const sourceRules = options.sourceRules ?? [];
+        const graph = createModuleGraph();
+        for (const file of sourceRules.length ? sourceFiles : [])if (/\.[cm]?[jt]sx?$/u.test(file)) guarded(file, ()=>{
+            let module;
+            try {
+                module = graph.module(absolute(file));
+            } catch (error) {
+                if (!(error instanceof SourceSyntaxError)) throw error;
+                diagnostics.push(`${file}: source rules need parseable source (${error.message})`);
+                return;
+            }
+            for (const rule of sourceRules){
+                const messages = rule({
+                    file,
+                    module,
+                    graph
+                });
+                if (!Array.isArray(messages) || !messages.every((message)=>'string' == typeof message)) throw new Error(`rule ${rule.name || 'anonymous'} must return an array of violation messages (return [] when the file passes)`);
+                for (const message of messages)diagnostics.push(`${file}: ${message}`);
             }
         });
         const shell = 'apps/shell-super-app';
@@ -446,4 +521,4 @@ function check(options, topology) {
 }
 const checkMicroVerticalApiBoundaries = (options)=>check(options, true);
 const checkMicroVerticalApiConsumerFiles = (options)=>check(options, false);
-export { checkMicroVerticalApiBoundaries, checkMicroVerticalApiConsumerFiles, configuredMicroVerticalApiStem, microVerticalApiBaselineViolation };
+export { checkMicroVerticalApiBoundaries, checkMicroVerticalApiConsumerFiles, configuredMicroVerticalApiStem, createModuleGraph, microVerticalApiBaselineViolation };