@bleedingdev/modern-js-code-tools 3.9.3-ultramodern.1 → 3.9.3-ultramodern.2

package/dist/esm-node/microvertical-api-boundary.js

@@ -5,7 +5,7 @@ import { parse } from "@babel/parser";
 import { configuredMicroVerticalApiStem, microVerticalApiBaselineViolation } from "./microvertical-api-baseline.js";
 import { baselinePackage, resolveBaselinePackageDirectory } from "./microvertical-api-owner.js";
 import { createModuleGraph } from "./module-graph.js";
-import { SourceSyntaxError, consumerParserPlugins } from "./source-analysis.js";
+import { SourceSyntaxError, consumerParserPlugins, unwrapExpression } from "./source-analysis.js";
 import { createEffectApiImportResolver, strictEffectRuntimeTopologyViolation } from "./strict-effect-runtime.js";
 import * as __rspack_external__babel_types_6e8337dd from "@babel/types";
 const ignored = new Set([
@@ -18,6 +18,8 @@ const ignored = new Set([
     'node_modules',
     'repos'
 ]);
+const MAX_CLOSURE_DEPTH = 128;
+const MAX_CLOSURE_MODULES = 2048;
 const normalize = (file)=>file.split(node_path.sep).join('/').replace(/^\.\//u, '');
 const errorMessage = (error)=>error instanceof Error ? error.message : String(error);
 const apiApp = (app)=>'vertical' === app.kind && 'ui-only' !== app.surfaceProfile && 'horizontal-remote' !== app.deliveryUnitKind;
@@ -83,7 +85,7 @@ function configuredApps(root, supplied) {
         };
         for (const field of Object.keys(allowedFields)){
             const value = app[field];
-            if (void 0 !== value && !allowedFields[field].includes(value)) throw new Error(`${key}: invalid ${field}`);
+            if ((void 0 !== value || 'kind' === field) && ('string' != typeof value || !allowedFields[field].includes(value))) throw new Error(`${key}: invalid ${field}`);
         }
         if (void 0 !== app.api) {
             if (!app.api || 'object' != typeof app.api || Array.isArray(app.api)) throw new Error(`${key}: api must be an object`);
@@ -125,6 +127,9 @@ function check(options, topology) {
     };
     try {
         const apps = configuredApps(root, options.configuredApps);
+        const workspace = node_fs.realpathSync(root);
+        const realRelative = (file)=>normalize(node_path.relative(workspace, node_fs.realpathSync(absolute(file))));
+        const inside = (directory, real)=>real.startsWith(`${directory}${node_path.sep}`);
         const byPath = new Map(apps.map((app)=>[
                 normalize(app.path),
                 app
@@ -165,12 +170,19 @@ function check(options, topology) {
         const resolveRelative = (fromFile, specifier)=>{
             if (!/^\.\.?\//u.test(specifier)) return;
             const base = node_path.posix.join(node_path.posix.dirname(fromFile), specifier).replace(/\.(?:[cm]?[jt]sx?)$/u, '');
-            return [
+            const candidate = [
                 `${base}.ts`,
                 `${base}.tsx`,
                 `${base}/index.ts`,
                 `${base}/index.tsx`
-            ].find((candidate)=>exists(candidate));
+            ].find((file)=>exists(file));
+            return void 0 === candidate ? void 0 : realRelative(candidate);
+        };
+        const graphBinding = (graph, module, expression, seen = new Set())=>{
+            if (seen.has(expression) || seen.size >= 128) return;
+            seen.add(expression);
+            const binding = __rspack_external__babel_types_6e8337dd.isIdentifier(expression) || __rspack_external__babel_types_6e8337dd.isMemberExpression(expression) ? graph.resolveReference(module, expression) : void 0;
+            return binding?.kind === 'declaration' && (__rspack_external__babel_types_6e8337dd.isIdentifier(binding.expression) || __rspack_external__babel_types_6e8337dd.isMemberExpression(binding.expression)) ? graphBinding(graph, binding.module, binding.expression, seen) : binding;
         };
         const clientExportFile = (appPath, exported)=>{
             if ('string' != typeof exported || !exported.startsWith('./') || exported.split(/[\\/]/u).includes('..') || !/\.[cm]?[jt]sx?$/u.test(exported)) return;
@@ -187,29 +199,65 @@ function check(options, topology) {
             return normalize(node_path.relative(root, candidate));
         };
         const composedModules = (file, appPath)=>{
-            const order = [];
-            const seen = new Set();
+            const owner = node_fs.realpathSync(absolute(appPath));
+            if (!inside(owner, node_fs.realpathSync(absolute(file)))) throw new Error(`consumer module closure escapes its owner: ${file}`);
+            const entry = realRelative(file);
+            const discovered = new Set([
+                entry
+            ]);
             const queue = [
-                file
+                {
+                    file: entry,
+                    depth: 0
+                }
             ];
-            const owner = node_fs.realpathSync(absolute(appPath));
-            while(queue.length > 0 && order.length < 128){
-                const current = queue.shift();
-                if (seen.has(current)) continue;
-                seen.add(current);
-                order.push(current);
+            let graph;
+            for (const { file: current, depth } of queue){
                 const ast = parseFile(current);
                 if (!ast) continue;
-                for (const statement of ast.program.body){
-                    const source = (__rspack_external__babel_types_6e8337dd.isImportDeclaration(statement) || __rspack_external__babel_types_6e8337dd.isExportNamedDeclaration(statement) || __rspack_external__babel_types_6e8337dd.isExportAllDeclaration(statement)) && statement.source ? statement.source.value : void 0;
-                    const resolved = void 0 === source ? void 0 : resolveRelative(current, source);
-                    if (void 0 !== resolved && !seen.has(resolved)) {
-                        const real = node_fs.realpathSync(absolute(resolved));
-                        if (real.startsWith(`${owner}${node_path.sep}`)) queue.push(resolved);
+                const sources = [];
+                let callsRequire = false;
+                for (const statement of ast.program.body)if (__rspack_external__babel_types_6e8337dd.isImportDeclaration(statement) && 'type' !== statement.importKind && 'typeof' !== statement.importKind || (__rspack_external__babel_types_6e8337dd.isExportNamedDeclaration(statement) || __rspack_external__babel_types_6e8337dd.isExportAllDeclaration(statement)) && 'type' !== statement.exportKind && statement.source) sources.push(statement.source.value);
+                __rspack_external__babel_types_6e8337dd.traverseFast(ast, (node)=>{
+                    if (__rspack_external__babel_types_6e8337dd.isImportExpression(node)) {
+                        if (!__rspack_external__babel_types_6e8337dd.isStringLiteral(node.source)) throw new Error(`consumer module closure has nonliteral runtime dependency: ${current}`);
+                        sources.push(node.source.value);
+                    }
+                    if ((__rspack_external__babel_types_6e8337dd.isCallExpression(node) || __rspack_external__babel_types_6e8337dd.isOptionalCallExpression(node)) && __rspack_external__babel_types_6e8337dd.isIdentifier(unwrapExpression(node.callee, true), {
+                        name: 'require'
+                    })) callsRequire = true;
+                });
+                if (callsRequire) {
+                    graph ??= createModuleGraph();
+                    const module = graph.module(absolute(current));
+                    __rspack_external__babel_types_6e8337dd.traverseFast(module.file, (node)=>{
+                        if (!__rspack_external__babel_types_6e8337dd.isCallExpression(node) && !__rspack_external__babel_types_6e8337dd.isOptionalCallExpression(node)) return;
+                        const callee = unwrapExpression(node.callee, true);
+                        if (!__rspack_external__babel_types_6e8337dd.isIdentifier(callee, {
+                            name: 'require'
+                        }) || !graph.isUnboundReference(module, callee)) return;
+                        const [argument] = node.arguments;
+                        if (1 !== node.arguments.length || !__rspack_external__babel_types_6e8337dd.isStringLiteral(argument)) throw new Error(`consumer module closure has nonliteral runtime dependency: ${current}`);
+                        sources.push(argument.value);
+                    });
+                }
+                for (const source of sources){
+                    if (!/^\.\.?\//u.test(source)) continue;
+                    const resolved = resolveRelative(current, source);
+                    if (void 0 === resolved) throw new Error(`consumer module closure has unresolved relative dependency: ${current} -> ${source}`);
+                    if (!inside(owner, node_path.join(workspace, resolved))) throw new Error(`consumer module closure escapes its owner: ${current} -> ${source}`);
+                    if (!discovered.has(resolved)) {
+                        if (depth + 1 >= MAX_CLOSURE_DEPTH) throw new Error(`consumer module closure exceeds ${MAX_CLOSURE_DEPTH} import-depth analysis budget`);
+                        if (discovered.size >= MAX_CLOSURE_MODULES) throw new Error(`consumer module closure exceeds ${MAX_CLOSURE_MODULES}-module analysis budget`);
+                        discovered.add(resolved);
+                        queue.push({
+                            file: resolved,
+                            depth: depth + 1
+                        });
                     }
                 }
             }
-            return order;
+            return queue.map((item)=>item.file);
         };
         const moduleShape = (file, imports, calls, patterns = [], defaultExport, composedAppPath)=>{
             if (!exists(file)) return;
@@ -248,6 +296,10 @@ function check(options, topology) {
                 })), `${file}: must default-export ${defaultExport}`);
         };
         const effect = '@modern-js/bff-effect/effect-client';
+        const clientFactories = new Set([
+            'makeEffectHttpApiClient',
+            'makeEffectRpcClient'
+        ]);
         const appDirectories = [
             ...new Set([
                 ...directories('apps'),
@@ -468,8 +520,8 @@ function check(options, topology) {
             ]);
         });
         const sourceRules = options.sourceRules ?? [];
-        const graph = createModuleGraph();
         for (const file of sourceRules.length ? sourceFiles : [])if (/\.[cm]?[jt]sx?$/u.test(file)) guarded(file, ()=>{
+            const graph = createModuleGraph();
             let module;
             try {
                 module = graph.module(absolute(file));
@@ -488,20 +540,178 @@ function check(options, topology) {
                 for (const message of messages)diagnostics.push(`${file}: ${message}`);
             }
         });
-        const shell = 'apps/shell-super-app';
-        const verticals = apps.filter((app)=>app.path.startsWith('verticals/') && apiApp(app));
-        if (exists(shell) && verticals.length) {
-            const file = `${shell}/src/api/vertical-clients.ts`;
-            assert(exists(file), `${file}: must aggregate vertical API clients`);
-            if (exists(file)) guarded(file, ()=>{
-                const ast = parseFile(file);
-                for (const app of verticals){
-                    const specifier = `${app.package}/api/${app.api?.protocol === 'rpc' ? 'rpc-client' : 'client'}`;
-                    assert(ast?.program.body.some((item)=>__rspack_external__babel_types_6e8337dd.isExportNamedDeclaration(item) && item.source?.value === specifier), `${file}: must re-export ${specifier}`);
+        const checkShellExports = (shellPath)=>{
+            const packageFile = `${shellPath}/package.json`;
+            const manifest = JSON.parse(read(packageFile));
+            noPath(`${shellPath}/src/api/vertical-clients.ts`, 'Shell client registries are forbidden; import each owner client directly');
+            assert(!Object.hasOwn(manifest.exports ?? {}, './api/clients'), `${packageFile}: Shell ./api/clients exports are forbidden`);
+            const owner = node_fs.realpathSync(absolute(shellPath));
+            const invalidExport = ()=>assert(false, `${packageFile}: invalid Shell public source export`);
+            const targets = (exported)=>'string' == typeof exported ? [
+                    exported
+                ] : exported && 'object' == typeof exported ? Object.values(exported).flatMap(targets) : [];
+            const filesUnder = (directory, seen = new Set())=>{
+                const real = node_fs.realpathSync(absolute(directory));
+                if (real !== owner && !inside(owner, real)) {
+                    invalidExport();
+                    return [];
+                }
+                if (seen.has(real)) return [];
+                seen.add(real);
+                return node_fs.readdirSync(absolute(directory), {
+                    withFileTypes: true
+                }).flatMap((entry)=>{
+                    if (ignored.has(entry.name)) return [];
+                    const file = `${directory}/${entry.name}`;
+                    const stat = node_fs.statSync(absolute(file));
+                    return stat.isDirectory() ? filesUnder(file, seen) : stat.isFile() ? [
+                        file
+                    ] : [];
+                });
+            };
+            const exportedFiles = (target)=>{
+                if (!target.includes('*')) return [
+                    `${shellPath}/${target.slice(2)}`
+                ];
+                const prefix = target.slice(0, target.indexOf('*'));
+                const pattern = new RegExp(`^${target.split('*').map((part)=>part.replaceAll(/[.*+?^${}()|[\]\\]/gu, '\\$&')).join('.*')}$`, 'u');
+                return filesUnder(`${shellPath}/${prefix.slice(2, prefix.lastIndexOf('/'))}`).filter((file)=>pattern.test(`./${node_path.posix.relative(shellPath, file)}`));
+            };
+            const ownClientPrefix = `${manifest.name}/api/`;
+            const foreignSpecifier = (specifier)=>/\/api\/(?:rpc-)?client$/u.test(specifier) && !specifier.startsWith(ownClientPrefix);
+            for (const target of targets(manifest.exports))if (/\.[cm]?[jt]sx?$/u.test(target)) {
+                if (!target.startsWith('./') || target.split(/[\\/]/u).includes('..')) {
+                    invalidExport();
+                    continue;
                 }
-            });
+                for (const candidate of exportedFiles(target)){
+                    const file = clientExportFile(shellPath, `./${node_path.posix.relative(shellPath, candidate)}`);
+                    if (!file) {
+                        invalidExport();
+                        continue;
+                    }
+                    assert(!exposesForeignClient(file, owner, foreignSpecifier), `${file}: Shell public exports must not expose another owner's API client`);
+                }
+            }
+        };
+        const exposesForeignClient = (entry, owner, foreignSpecifier)=>{
+            const graph = createModuleGraph();
+            const seenValues = new Set();
+            const seenExports = new Map();
+            const workspacePath = (module)=>normalize(node_path.relative(workspace, module.path));
+            const resolveSource = (from, specifier)=>resolveRelative(from, specifier) ?? ownerClients.get(specifier);
+            const returnExpressions = (node)=>{
+                if (__rspack_external__babel_types_6e8337dd.isReturnStatement(node)) return node.argument ? [
+                    node.argument
+                ] : [];
+                if (__rspack_external__babel_types_6e8337dd.isFunction(node)) return [];
+                return (__rspack_external__babel_types_6e8337dd.VISITOR_KEYS[node.type] ?? []).flatMap((key)=>{
+                    const value = Reflect.get(node, key);
+                    return (Array.isArray(value) ? value : [
+                        value
+                    ]).flatMap((child)=>__rspack_external__babel_types_6e8337dd.isNode(child) ? returnExpressions(child) : []);
+                });
+            };
+            const nestedValues = (node)=>{
+                if (__rspack_external__babel_types_6e8337dd.isObjectExpression(node)) return node.properties.flatMap((property)=>__rspack_external__babel_types_6e8337dd.isObjectProperty(property) ? [
+                        property.value
+                    ] : __rspack_external__babel_types_6e8337dd.isObjectMethod(property) ? returnExpressions(property.body) : __rspack_external__babel_types_6e8337dd.isSpreadElement(property) ? [
+                        property.argument
+                    ] : []);
+                if (__rspack_external__babel_types_6e8337dd.isArrayExpression(node)) return node.elements.filter((element)=>null !== element);
+                if (__rspack_external__babel_types_6e8337dd.isFunction(node)) return __rspack_external__babel_types_6e8337dd.isBlockStatement(node.body) ? returnExpressions(node.body) : [
+                    node.body
+                ];
+                return [];
+            };
+            const foreignValue = (value, from)=>{
+                if ('external' === value.kind) {
+                    const source = resolveSource(workspacePath(from), value.specifier);
+                    if (!source) return foreignSpecifier(value.specifier);
+                    return '*' === value.name ? inspect(source) : exportedValue(source, value.name);
+                }
+                if ('unresolved' === value.kind && __rspack_external__babel_types_6e8337dd.isImportDeclaration(value.node) && value.node.specifiers.some((specifier)=>__rspack_external__babel_types_6e8337dd.isImportNamespaceSpecifier(specifier))) {
+                    const specifier = value.node.source.value;
+                    const source = resolveSource(workspacePath(value.module), specifier);
+                    return source ? inspect(source) : foreignSpecifier(specifier);
+                }
+                if ('node' !== value.kind || seenValues.has(value.node)) return false;
+                seenValues.add(value.node);
+                const { node, module } = value;
+                if ((__rspack_external__babel_types_6e8337dd.isCallExpression(node) || __rspack_external__babel_types_6e8337dd.isOptionalCallExpression(node)) && graph.evaluate(module, node.callee).some((callee)=>'external' === callee.kind && callee.specifier === effect && clientFactories.has(callee.name))) {
+                    const [argument] = node.arguments;
+                    const binding = argument ? graphBinding(graph, module, argument) : void 0;
+                    if (module.boundary !== owner || binding?.kind !== 'declaration' || binding.module.boundary !== owner) return true;
+                }
+                return nestedValues(node).some((expression)=>graph.evaluate(module, expression).some((nested)=>foreignValue(nested, module)));
+            };
+            const exportName = (node)=>__rspack_external__babel_types_6e8337dd.isIdentifier(node) ? node.name : node.value;
+            const names = (source, visited = new Set())=>{
+                if (visited.has(source)) return [];
+                visited.add(source);
+                return graph.module(absolute(source)).file.program.body.flatMap((statement)=>{
+                    if (__rspack_external__babel_types_6e8337dd.isExportDefaultDeclaration(statement)) return [
+                        'default'
+                    ];
+                    if (!__rspack_external__babel_types_6e8337dd.isExportNamedDeclaration(statement) && !__rspack_external__babel_types_6e8337dd.isExportAllDeclaration(statement) || 'type' === statement.exportKind) return [];
+                    if (__rspack_external__babel_types_6e8337dd.isExportAllDeclaration(statement)) {
+                        const target = resolveSource(source, statement.source.value);
+                        return target ? names(target, visited).filter((name)=>'default' !== name) : [];
+                    }
+                    return statement.declaration ? Object.keys(__rspack_external__babel_types_6e8337dd.getOuterBindingIdentifiers(statement.declaration)) : statement.specifiers.flatMap((specifier)=>__rspack_external__babel_types_6e8337dd.isExportSpecifier(specifier) && 'type' === specifier.exportKind ? [] : [
+                            exportName(specifier.exported)
+                        ]);
+                });
+            };
+            const exportedValue = (source, name)=>{
+                const visited = seenExports.get(source) ?? new Set();
+                if (visited.has(name)) return false;
+                visited.add(name);
+                seenExports.set(source, visited);
+                const module = graph.module(absolute(source));
+                const evaluates = (from, node)=>graph.evaluate(from, node).some((value)=>foreignValue(value, from));
+                const binding = graph.resolve(module, name, 'export');
+                if (binding?.kind === 'external') return foreignValue({
+                    ...binding,
+                    members: []
+                }, module);
+                if (binding?.kind === 'declaration') return evaluates(binding.module, binding.expression);
+                for (const statement of module.file.program.body){
+                    if (__rspack_external__babel_types_6e8337dd.isExportDefaultDeclaration(statement) && 'default' === name) return evaluates(module, statement.declaration);
+                    if (!__rspack_external__babel_types_6e8337dd.isExportNamedDeclaration(statement) || 'type' === statement.exportKind) continue;
+                    if (__rspack_external__babel_types_6e8337dd.isFunctionDeclaration(statement.declaration) && statement.declaration.id?.name === name) return evaluates(module, statement.declaration);
+                    const specifier = statement.specifiers.find((item)=>exportName(item.exported) === name);
+                    if (!specifier) continue;
+                    if (__rspack_external__babel_types_6e8337dd.isExportSpecifier(specifier) && 'type' === specifier.exportKind) return false;
+                    if (!statement.source) return __rspack_external__babel_types_6e8337dd.isExportSpecifier(specifier) ? evaluates(module, specifier.local) : false;
+                    const target = resolveSource(source, statement.source.value);
+                    if (!target) return foreignSpecifier(statement.source.value);
+                    if (__rspack_external__babel_types_6e8337dd.isExportNamespaceSpecifier(specifier)) return inspect(target);
+                    if (__rspack_external__babel_types_6e8337dd.isExportSpecifier(specifier)) return exportedValue(target, exportName(specifier.local));
+                }
+                return module.file.program.body.some((statement)=>{
+                    if (!__rspack_external__babel_types_6e8337dd.isExportAllDeclaration(statement) || 'type' === statement.exportKind) return false;
+                    const target = resolveSource(source, statement.source.value);
+                    return !!target && names(target).includes(name) && exportedValue(target, name);
+                });
+            };
+            const inspect = (source)=>[
+                    ...new Set(names(source))
+                ].some((name)=>exportedValue(source, name));
+            return inspect(entry);
+        };
+        const ownerClients = new Map();
+        for (const app of apps)if (exists(`${app.path}/package.json`)) {
+            const manifest = JSON.parse(read(`${app.path}/package.json`));
+            for (const key of [
+                './api/client',
+                './api/rpc-client'
+            ]){
+                const file = clientExportFile(app.path, manifest.exports?.[key]);
+                if (file) ownerClients.set(`${manifest.name}${key.slice(1)}`, file);
+            }
         }
-        if (exists(`${shell}/package.json`)) guarded(`${shell}/package.json`, ()=>assert(JSON.parse(read(`${shell}/package.json`)).exports?.['./api/clients'] === './src/api/vertical-clients.ts', `${shell}/package.json: must export ./api/clients`));
+        for (const shell of apps.filter((app)=>'shell' === app.kind))guarded(shell.path, ()=>checkShellExports(normalize(shell.path)));
         if (exists('topology/reference-topology.json')) guarded('topology/reference-topology.json', ()=>{
             for (const vertical of JSON.parse(read('topology/reference-topology.json')).verticals ?? []){
                 if (vertical.api?.runtime === 'effect') {

package/dist/esm-node/module-graph.js

@@ -187,6 +187,7 @@ function parseModule(filePath, workspace) {
     const file = parseSource(node_fs.readFileSync(filePath, 'utf8'), filePath);
     let scope;
     const references = new Map();
+    const declarations = new Map();
     const returns = new Map();
     const bareReturns = new Set();
     const functionScopes = new Map();
@@ -297,6 +298,11 @@ function parseModule(filePath, workspace) {
         ReferencedIdentifier (p) {
             references.set(p.node, p.scope.getBinding(p.node.name));
         },
+        BindingIdentifier (p) {
+            if (!__rspack_external__babel_types_6e8337dd.isIdentifier(p.node)) return;
+            const binding = p.scope.getBinding(p.node.name);
+            if (binding?.identifier === p.node) declarations.set(p.node, binding);
+        },
         Function (p) {
             functionScopes.set(p.node, p.scope);
         },
@@ -362,6 +368,7 @@ function parseModule(filePath, workspace) {
         scope,
         workspace,
         references,
+        declarations,
         returns,
         bareReturns,
         functionScopes,
@@ -1097,7 +1104,7 @@ function createModuleGraph() {
         }
     };
     const mutated = (module, binding)=>binding.constantViolations.length > 0 || factsOf(module).merged.has(binding.identifier.name) || (aliasesOf(binding, factsOf(module).writes)?.some((alias)=>factsOf(module).writes.has(alias.binding)) ?? true);
-    const resolveBinding = (module, name, scope, chain, seen)=>{
+    const resolveBinding = (module, name, scope, chain, seen, lexical)=>{
         const key = `${scope}:${module.path}#${name}`;
         if (seen.has(key) || seen.size >= MAX_LOOKUPS) return;
         seen.add(key);
@@ -1120,7 +1127,7 @@ function createModuleGraph() {
             return void 0 === next ? void 0 : resolveBinding(next, imported, 'export', hops, seen);
         };
         if ('local' === scope) {
-            const binding = factsOf(module).scope.getBinding(name);
+            const binding = lexical ?? factsOf(module).scope.getBinding(name);
             if (!binding || mutated(module, binding)) return;
             if ('module' === binding.kind) {
                 const imported = importOf(binding);
@@ -1149,6 +1156,39 @@ function createModuleGraph() {
             if (void 0 !== resolved) return resolved;
         }
     };
+    const resolveReference = (module, reference)=>{
+        const node = unwrapExpression(reference, true);
+        const moduleFacts = factsOf(module);
+        const bindingAt = (identifier)=>moduleFacts.references.get(identifier) ?? moduleFacts.declarations.get(identifier);
+        if (__rspack_external__babel_types_6e8337dd.isIdentifier(node)) {
+            const binding = bindingAt(node);
+            return binding ? resolveBinding(module, node.name, 'local', [], new Set(), binding) : void 0;
+        }
+        if (!__rspack_external__babel_types_6e8337dd.isMemberExpression(node) || node.computed || !__rspack_external__babel_types_6e8337dd.isIdentifier(node.object) || !__rspack_external__babel_types_6e8337dd.isIdentifier(node.property)) return;
+        const binding = bindingAt(node.object);
+        if (!binding || 'module' !== binding.kind || mutated(module, binding)) return;
+        const imported = importOf(binding);
+        if (imported?.name !== '*') return;
+        const target = follow(module, imported.specifier);
+        const chain = [
+            {
+                path: module.path,
+                name: node.object.name
+            }
+        ];
+        if ('external' === target) return {
+            kind: 'external',
+            specifier: imported.specifier,
+            name: node.property.name,
+            chain
+        };
+        return void 0 === target ? void 0 : resolveBinding(target, node.property.name, 'export', chain, new Set());
+    };
+    const isUnboundReference = (module, reference)=>{
+        const node = unwrapExpression(reference, true);
+        const { references } = factsOf(module);
+        return __rspack_external__babel_types_6e8337dd.isIdentifier(node) && references.has(node) && void 0 === references.get(node);
+    };
     const evaluation = (walking)=>{
         const active = new Set();
         let frames = 0;
@@ -1756,6 +1796,8 @@ function createModuleGraph() {
     return {
         module: (filePath)=>load(filePath),
         resolve: (module, name, scope)=>resolveBinding(module, name, scope, [], new Set()),
+        resolveReference,
+        isUnboundReference,
         evaluate: (module, expression)=>evaluation(false).values(module, expression, []),
         reachable: (module, expression)=>evaluation(true).reachable(module, expression)
     };

package/dist/esm-node/strict-effect-runtime.js

@@ -8,6 +8,19 @@ const nodeRuntime = '@modern-js/bff-effect/effect';
 const assembly = '@modern-js/bff-effect/assembly';
 const failure = 'Generated API entries must export defineEffectBff(...) or the native Effect BFF assembly helper with an explicitly composed handler Layer and an unshadowed executable root; entries must implement handlers through HttpApiBuilder.group.';
 const MAX_API_SOURCE_MODULES = 256;
+const httpRouteMethods = new Set([
+    '*',
+    'GET',
+    'POST',
+    'PUT',
+    'PATCH',
+    'DELETE',
+    'HEAD',
+    'OPTIONS',
+    'TRACE',
+    'CONNECT',
+    'QUERY'
+]);
 function createEffectApiImportResolver(filename) {
     const directory = node_fs.realpathSync(node_path.dirname(filename));
     const owner = node_fs.realpathSync(node_path.resolve(directory, '..'));
@@ -55,9 +68,12 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
                 })) {
                     let target = nodePath.isAssignmentExpression() ? nodePath.node.left : nodePath.node.argument;
                     while(__rspack_external__babel_types_6e8337dd.isMemberExpression(target))target = target.object;
-                    if (__rspack_external__babel_types_6e8337dd.isIdentifier(target)) {
-                        const binding = nodePath.scope.getBinding(target.name);
-                        if (binding) mutated.add(binding);
+                    let binding = __rspack_external__babel_types_6e8337dd.isIdentifier(target) ? nodePath.scope.getBinding(target.name) : void 0;
+                    while(binding && !mutated.has(binding)){
+                        mutated.add(binding);
+                        const declarator = binding.path.node;
+                        const alias = 'const' === binding.kind && __rspack_external__babel_types_6e8337dd.isVariableDeclarator(declarator) && declarator.init ? unwrapExpression(declarator.init, true) : void 0;
+                        binding = __rspack_external__babel_types_6e8337dd.isIdentifier(alias) ? binding.path.scope.getBinding(alias.name) : void 0;
                     }
                 }
                 if (nodePath.isTSModuleDeclaration() && __rspack_external__babel_types_6e8337dd.isIdentifier(nodePath.node.id)) {
@@ -232,11 +248,48 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
                 if (method(node.callee, 'Layer', 'mergeAll', layerSources)) return node.arguments.length > 0 && node.arguments.every((argument)=>handlers(argument, api));
                 return method(node.callee, 'HttpApiBuilder', 'group') && 3 === node.arguments.length && apiIdentity(node.arguments[0]) === api && handled(node.arguments[2]);
             });
-        const transport = (node)=>guarded(node, (node)=>{
+        const effectSources = [
+            edge,
+            'effect',
+            'effect/Effect'
+        ];
+        const routeHandler = (node)=>{
+            node = unwrap(node);
+            if (!__rspack_external__babel_types_6e8337dd.isCallExpression(node) || !method(node.callee, 'HttpRouter', 'add') || 3 !== node.arguments.length) return;
+            const [verb, route, handler] = node.arguments;
+            return __rspack_external__babel_types_6e8337dd.isStringLiteral(verb) && httpRouteMethods.has(verb.value) && __rspack_external__babel_types_6e8337dd.isStringLiteral(route) && (route.value.startsWith('/') || '*' === route.value) && (__rspack_external__babel_types_6e8337dd.isArrowFunctionExpression(handler) || __rspack_external__babel_types_6e8337dd.isFunctionExpression(handler)) ? handler : void 0;
+        };
+        const effectReference = (node)=>guarded(node, (node)=>{
                 const init = initialized(node);
-                if (init) return transport(init);
+                if (init) return __rspack_external__babel_types_6e8337dd.isIdentifier(unwrap(init)) && effectReference(init);
+                const value = imported(node);
+                return !!value && !value.namespace;
+            });
+        const capturedRouteFactory = (node)=>guarded(node, (node)=>{
+                const init = initialized(node) ?? externalValue(node);
+                if (init) return capturedRouteFactory(init);
+                if (!__rspack_external__babel_types_6e8337dd.isArrowFunctionExpression(node) || node.async || 1 !== node.params.length || !__rspack_external__babel_types_6e8337dd.isIdentifier(node.params[0]) || __rspack_external__babel_types_6e8337dd.isBlockStatement(node.body)) return false;
+                const handler = routeHandler(node.body);
+                const parameter = binding(node.params[0]);
+                return !!handler && !!parameter && parameter.referencePaths.some((reference)=>!!reference.findParent((path)=>path.node === handler));
+            });
+        const capturedTransport = (node)=>guarded(node, (node)=>{
+                const init = initialized(node);
+                if (init) return capturedTransport(init);
+                if (!__rspack_external__babel_types_6e8337dd.isCallExpression(node)) return false;
+                if (method(node.callee, 'Effect', 'map', effectSources)) return 2 === node.arguments.length && effectReference(node.arguments[0]) && capturedRouteFactory(node.arguments[1]);
+                if (!__rspack_external__babel_types_6e8337dd.isMemberExpression(node.callee) || node.callee.computed || !__rspack_external__babel_types_6e8337dd.isIdentifier(node.callee.property, {
+                    name: 'pipe'
+                }) || 1 !== node.arguments.length || !effectReference(node.callee.object)) return false;
+                const map = unwrap(node.arguments[0]);
+                return __rspack_external__babel_types_6e8337dd.isCallExpression(map) && method(map.callee, 'Effect', 'map', effectSources) && 1 === map.arguments.length && capturedRouteFactory(map.arguments[0]);
+            });
+        const transport = (node, provided = false)=>guarded(node, (node)=>{
+                const init = initialized(node) ?? externalValue(node);
+                if (init) return transport(init, provided);
                 if (!__rspack_external__babel_types_6e8337dd.isCallExpression(node)) return method(node, 'Layer', 'empty', layerSources);
-                return pipe(node, transport) || method(node.callee, 'HttpRouter', 'cors') || method(node.callee, 'Layer', 'mergeAll', layerSources) && node.arguments.length > 0 && node.arguments.every(transport);
+                const providedHere = provided || node.arguments.some((argument)=>__rspack_external__babel_types_6e8337dd.isCallExpression(argument) && method(argument.callee, 'Layer', 'provide', layerSources) && 1 === argument.arguments.length);
+                return pipe(node, (value)=>transport(value, providedHere)) || void 0 !== routeHandler(node) || provided && method(node.callee, 'Layer', 'unwrap', layerSources) && 1 === node.arguments.length && capturedTransport(node.arguments[0]) || method(node.callee, 'HttpRouter', 'cors') || method(node.callee, 'Layer', 'mergeAll', layerSources) && node.arguments.length > 0 && node.arguments.every((argument)=>transport(argument, provided));
             });
         const directLayer = (node, api)=>guarded(node, (node)=>{
                 const init = initialized(node);

package/dist/types/microvertical-api-boundary.d.ts

@@ -6,7 +6,8 @@ export { createModuleGraph } from './module-graph.js';
 export interface MicroVerticalConfiguredApp {
     readonly path: string;
     readonly id?: string;
-    readonly kind?: string;
+    /** `shell` or `vertical`; selects the rules the app is checked against. */
+    readonly kind: string;
     readonly package?: string;
     readonly surfaceProfile?: string;
     readonly deliveryUnitKind?: string;
@@ -22,7 +23,7 @@ export interface MicroVerticalApiSourceRuleContext {
     /** Workspace-relative path of `module`. */
     readonly file: string;
     readonly module: SourceModule;
-    /** One graph per check, shared by every rule and source file. */
+    /** One graph per source file, shared by every rule for that file. */
     readonly graph: ModuleGraph;
 }
 /** A consumer-owned source rule; each returned message is a violation. */

package/dist/types/module-graph.d.ts

@@ -67,6 +67,14 @@ export interface ModuleGraph {
      * over-budget bindings return undefined so callers fail closed.
      */
     resolve(module: SourceModule, name: string, scope: 'export' | 'local'): ResolvedBinding | undefined;
+    /**
+     * `resolve` for one lexical occurrence: an identifier `module` references
+     * or declares, or `namespace.member` on a namespace import. The binding is
+     * the one in scope at that node, not the module-scope name.
+     */
+    resolveReference(module: SourceModule, reference: t.Node): ResolvedBinding | undefined;
+    /** True only for an identifier `module` references that has no binding (a global). */
+    isUnboundReference(module: SourceModule, reference: t.Node): boolean;
     /**
      * Every value `expression` (a node of `module`) can evaluate to, following
      * any binding kind, destructuring, member access into object literals,

package/package.json

@@ -23,7 +23,7 @@
   "engines": {
     "node": ">=20"
   },
-  "version": "3.9.3-ultramodern.1",
+  "version": "3.9.3-ultramodern.2",
   "types": "./dist/types/index.d.ts",
   "main": "./dist/esm-node/index.js",
   "typesVersions": {