@bleedingdev/modern-js-code-tools 3.9.3-ultramodern.2 → 3.9.3-ultramodern.3

package/dist/cjs/microvertical-api-baseline.cjs

@@ -28,8 +28,10 @@ var __webpack_require__ = {};
 var __webpack_exports__ = {};
 __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
+    camelCaseStem: ()=>camelCaseStem,
     configuredMicroVerticalApiStem: ()=>configuredMicroVerticalApiStem,
-    microVerticalApiBaselineViolation: ()=>microVerticalApiBaselineViolation
+    microVerticalApiBaselineViolation: ()=>microVerticalApiBaselineViolation,
+    pascalCaseStem: ()=>pascalCaseStem
 });
 const types_namespaceObject = require("@babel/types");
 const external_microvertical_api_owner_cjs_namespaceObject = require("./microvertical-api-owner.cjs");
@@ -503,11 +505,15 @@ const microVerticalApiBaselineViolation = (stem, filePath, expectation)=>{
         throw error;
     }
 };
+exports.camelCaseStem = __webpack_exports__.camelCaseStem;
 exports.configuredMicroVerticalApiStem = __webpack_exports__.configuredMicroVerticalApiStem;
 exports.microVerticalApiBaselineViolation = __webpack_exports__.microVerticalApiBaselineViolation;
+exports.pascalCaseStem = __webpack_exports__.pascalCaseStem;
 for(var __rspack_i in __webpack_exports__)if (-1 === [
+    "camelCaseStem",
     "configuredMicroVerticalApiStem",
-    "microVerticalApiBaselineViolation"
+    "microVerticalApiBaselineViolation",
+    "pascalCaseStem"
 ].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
 Object.defineProperty(exports, '__esModule', {
     value: true

package/dist/cjs/microvertical-api-boundary.cjs

@@ -66,6 +66,12 @@ const ignored = new Set([
 ]);
 const MAX_CLOSURE_DEPTH = 128;
 const MAX_CLOSURE_MODULES = 2048;
+const MAX_API_HOPS = 128;
+const MAX_API_VISITS = 2048;
+const identitySources = [
+    'effect',
+    'effect/Function'
+];
 const normalize = (file)=>file.split(external_node_path_default().sep).join('/').replace(/^\.\//u, '');
 const errorMessage = (error)=>error instanceof Error ? error.message : String(error);
 const apiApp = (app)=>'vertical' === app.kind && 'ui-only' !== app.surfaceProfile && 'horizontal-remote' !== app.deliveryUnitKind;
@@ -305,6 +311,150 @@ function check(options, topology) {
             }
             return queue.map((item)=>item.file);
         };
+        const foreignClientConstructions = (client, appPath, contract, stem, rpc)=>{
+            const graph = (0, external_module_graph_cjs_namespaceObject.createModuleGraph)();
+            const contractModule = graph.module(absolute(contract));
+            const factory = rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient';
+            const ownExport = graph.resolve(contractModule, rpc ? `${(0, external_microvertical_api_baseline_cjs_namespaceObject.pascalCaseStem)(stem)}RpcGroup` : `${(0, external_microvertical_api_baseline_cjs_namespaceObject.camelCaseStem)(stem)}Api`, 'export');
+            const isIdentity = (value)=>'external' === value.kind && identitySources.includes(value.specifier) && 'identity' === value.name && 0 === value.members.length;
+            const identityPipe = (module, node)=>{
+                if (!types_namespaceObject.isCallExpression(node) || !types_namespaceObject.isMemberExpression(node.callee) || node.callee.computed || !types_namespaceObject.isIdentifier(node.callee.property, {
+                    name: 'pipe'
+                }) || 1 !== node.arguments.length) return false;
+                const values = graph.evaluate(module, node.arguments[0]);
+                return values.length > 0 && values.every(isIdentity);
+            };
+            const withoutIdentity = (module, value)=>{
+                let node = (0, external_source_analysis_cjs_namespaceObject.unwrapExpression)(value, true);
+                for(let pipes = 0; identityPipe(module, node); pipes += 1){
+                    if (pipes >= MAX_API_HOPS) return value;
+                    node = (0, external_source_analysis_cjs_namespaceObject.unwrapExpression)(node.callee.object, true);
+                }
+                return node;
+            };
+            const normalizedApi = (initial)=>{
+                let binding = initial;
+                const seen = new Set();
+                for(let hops = 0; hops < MAX_API_HOPS; hops += 1){
+                    const expression = withoutIdentity(binding.module, binding.expression);
+                    if (seen.has(expression)) break;
+                    seen.add(expression);
+                    if (!types_namespaceObject.isIdentifier(expression) && !types_namespaceObject.isMemberExpression(expression)) return {
+                        ...binding,
+                        expression: expression
+                    };
+                    const next = graphBinding(graph, binding.module, expression);
+                    if (next?.kind !== 'declaration') break;
+                    binding = next;
+                }
+            };
+            const apiBinding = (module, value)=>{
+                const binding = graphBinding(graph, module, withoutIdentity(module, value));
+                return binding?.kind === 'declaration' ? normalizedApi(binding) : void 0;
+            };
+            const ownedApis = new Map();
+            const own = (binding)=>{
+                const identities = ownedApis.get(binding.module.path) ?? new Set();
+                identities.add(binding.expression);
+                ownedApis.set(binding.module.path, identities);
+            };
+            const proven = new Set();
+            const active = new Set();
+            let visits = 0;
+            const builtApi = (module, expression)=>{
+                const initial = withoutIdentity(module, expression);
+                if (active.has(initial) || active.size >= MAX_API_HOPS) return false;
+                active.add(initial);
+                try {
+                    const children = [];
+                    for(let node = initial;;){
+                        if (++visits > MAX_API_VISITS) return false;
+                        if (types_namespaceObject.isIdentifier(node) || types_namespaceObject.isMemberExpression(node)) {
+                            const receiver = apiBinding(module, node);
+                            if (!receiver || !builtApi(receiver.module, receiver.expression)) return false;
+                            break;
+                        }
+                        if (!types_namespaceObject.isCallExpression(node)) return false;
+                        const callee = graph.evaluate(module, node.callee);
+                        if (callee.length > 0 && callee.every((value)=>'external' === value.kind && httpApiSources.includes(value.specifier) && 'HttpApi' === value.name && 1 === value.members.length && 'make' === value.members[0])) {
+                            if (1 !== node.arguments.length || !types_namespaceObject.isStringLiteral(node.arguments[0])) return false;
+                            break;
+                        }
+                        if (!types_namespaceObject.isMemberExpression(node.callee) || node.callee.computed || !types_namespaceObject.isIdentifier(node.callee.property)) return false;
+                        const method = node.callee.property.name;
+                        const count = node.arguments.length;
+                        const [first] = node.arguments;
+                        if ('addHttpApi' === method && 1 === count) children.push(first);
+                        else if (!('add' === method && count > 0 || 'annotate' === method && 2 === count || [
+                            'annotateMerge',
+                            'middleware'
+                        ].includes(method) && 1 === count || 'prefix' === method && 1 === count && types_namespaceObject.isStringLiteral(first) && first.value.startsWith('/'))) return false;
+                        node = withoutIdentity(module, node.callee.object);
+                    }
+                    return children.every((child)=>{
+                        const binding = apiBinding(module, child);
+                        return void 0 !== binding && collectApi(binding);
+                    });
+                } finally{
+                    active.delete(initial);
+                }
+            };
+            const collectApi = (binding)=>{
+                if (proven.has(binding.expression)) return true;
+                if (!builtApi(binding.module, binding.expression)) return false;
+                proven.add(binding.expression);
+                if (binding.module.boundary === contractModule.boundary) own(binding);
+                return true;
+            };
+            if (!rpc && ownExport?.kind === 'declaration') {
+                const root = normalizedApi(ownExport);
+                if (root && collectApi(root)) own(root);
+                else ownedApis.clear();
+            }
+            const immutablePipeAliases = (module, target)=>{
+                if (0 === module.mutations.length) return true;
+                let valid = true;
+                types_namespaceObject.traverseFast(module.file, (node)=>{
+                    if (!types_namespaceObject.isVariableDeclarator(node) || !types_namespaceObject.isIdentifier(node.id) || !node.init) return;
+                    let initializer = (0, external_source_analysis_cjs_namespaceObject.unwrapExpression)(node.init, true);
+                    let identityOnly = true;
+                    let piped = false;
+                    while(types_namespaceObject.isCallExpression(initializer) && types_namespaceObject.isMemberExpression(initializer.callee) && !initializer.callee.computed && types_namespaceObject.isIdentifier(initializer.callee.property, {
+                        name: 'pipe'
+                    })){
+                        piped = true;
+                        identityOnly &&= identityPipe(module, initializer);
+                        initializer = (0, external_source_analysis_cjs_namespaceObject.unwrapExpression)(initializer.callee.object, true);
+                    }
+                    if (!piped) return;
+                    const receiver = apiBinding(module, initializer);
+                    if (receiver?.module.path !== target.module.path || receiver.expression !== target.expression) return;
+                    if (!identityOnly || graph.resolveReference(module, node.id)?.kind !== 'declaration') valid = false;
+                });
+                return valid;
+            };
+            const ownedBy = (module, argument)=>{
+                if (!argument) return false;
+                if (rpc) {
+                    const binding = graphBinding(graph, module, argument);
+                    return binding?.kind === 'declaration' && ownExport?.kind === 'declaration' && binding.module.path === ownExport.module.path && binding.expression === ownExport.expression;
+                }
+                const binding = apiBinding(module, argument);
+                return void 0 !== binding && !!ownedApis.get(binding.module.path)?.has(binding.expression) && immutablePipeAliases(module, binding);
+            };
+            const violations = new Set();
+            for (const source of composedModules(client, appPath)){
+                const module = graph.module(absolute(source));
+                types_namespaceObject.traverseFast(module.file, (node)=>{
+                    if (!types_namespaceObject.isCallExpression(node) && !types_namespaceObject.isOptionalCallExpression(node)) return;
+                    const native = graph.evaluate(module, node.callee).some((value)=>'external' === value.kind && value.specifier === effect && value.name === factory);
+                    if (native && !ownedBy(module, node.arguments[0])) violations.add(`${source}: must construct the client from its own API contract`);
+                });
+            }
+            return [
+                ...violations
+            ];
+        };
         const moduleShape = (file, imports, calls, patterns = [], defaultExport, composedAppPath)=>{
             if (!exists(file)) return;
             const ast = parseFile(file);
@@ -342,6 +492,10 @@ function check(options, topology) {
                 })), `${file}: must default-export ${defaultExport}`);
         };
         const effect = '@modern-js/bff-effect/effect-client';
+        const httpApiSources = [
+            effect,
+            'effect/http-api'
+        ];
         const clientFactories = new Set([
             'makeEffectHttpApiClient',
             'makeEffectRpcClient'
@@ -523,6 +677,7 @@ function check(options, topology) {
                 ], [
                     rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient'
                 ], [], void 0, appPath);
+                if (exists(contract)) diagnostics.push(...foreignClientConstructions(client, appPath, contract, stem, rpc));
             }
             moduleShape(`${appPath}/api/effect-api.ts`, [], [], [
                 [

package/dist/esm/microvertical-api-baseline.js

@@ -470,4 +470,4 @@ const microVerticalApiBaselineViolation = (stem, filePath, expectation)=>{
         throw error;
     }
 };
-export { configuredMicroVerticalApiStem, microVerticalApiBaselineViolation };
+export { camelCaseStem, configuredMicroVerticalApiStem, microVerticalApiBaselineViolation, pascalCaseStem };

package/dist/esm/microvertical-api-boundary.js

@@ -1,7 +1,7 @@
 import node_fs from "node:fs";
 import node_path from "node:path";
 import { parse } from "@babel/parser";
-import { configuredMicroVerticalApiStem, microVerticalApiBaselineViolation } from "./microvertical-api-baseline.js";
+import { camelCaseStem, configuredMicroVerticalApiStem, microVerticalApiBaselineViolation, pascalCaseStem } from "./microvertical-api-baseline.js";
 import { baselinePackage, resolveBaselinePackageDirectory } from "./microvertical-api-owner.js";
 import { createModuleGraph } from "./module-graph.js";
 import { SourceSyntaxError, consumerParserPlugins, unwrapExpression } from "./source-analysis.js";
@@ -19,6 +19,12 @@ const ignored = new Set([
 ]);
 const MAX_CLOSURE_DEPTH = 128;
 const MAX_CLOSURE_MODULES = 2048;
+const MAX_API_HOPS = 128;
+const MAX_API_VISITS = 2048;
+const identitySources = [
+    'effect',
+    'effect/Function'
+];
 const normalize = (file)=>file.split(node_path.sep).join('/').replace(/^\.\//u, '');
 const errorMessage = (error)=>error instanceof Error ? error.message : String(error);
 const apiApp = (app)=>'vertical' === app.kind && 'ui-only' !== app.surfaceProfile && 'horizontal-remote' !== app.deliveryUnitKind;
@@ -258,6 +264,150 @@ function check(options, topology) {
             }
             return queue.map((item)=>item.file);
         };
+        const foreignClientConstructions = (client, appPath, contract, stem, rpc)=>{
+            const graph = createModuleGraph();
+            const contractModule = graph.module(absolute(contract));
+            const factory = rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient';
+            const ownExport = graph.resolve(contractModule, rpc ? `${pascalCaseStem(stem)}RpcGroup` : `${camelCaseStem(stem)}Api`, 'export');
+            const isIdentity = (value)=>'external' === value.kind && identitySources.includes(value.specifier) && 'identity' === value.name && 0 === value.members.length;
+            const identityPipe = (module, node)=>{
+                if (!__rspack_external__babel_types_6e8337dd.isCallExpression(node) || !__rspack_external__babel_types_6e8337dd.isMemberExpression(node.callee) || node.callee.computed || !__rspack_external__babel_types_6e8337dd.isIdentifier(node.callee.property, {
+                    name: 'pipe'
+                }) || 1 !== node.arguments.length) return false;
+                const values = graph.evaluate(module, node.arguments[0]);
+                return values.length > 0 && values.every(isIdentity);
+            };
+            const withoutIdentity = (module, value)=>{
+                let node = unwrapExpression(value, true);
+                for(let pipes = 0; identityPipe(module, node); pipes += 1){
+                    if (pipes >= MAX_API_HOPS) return value;
+                    node = unwrapExpression(node.callee.object, true);
+                }
+                return node;
+            };
+            const normalizedApi = (initial)=>{
+                let binding = initial;
+                const seen = new Set();
+                for(let hops = 0; hops < MAX_API_HOPS; hops += 1){
+                    const expression = withoutIdentity(binding.module, binding.expression);
+                    if (seen.has(expression)) break;
+                    seen.add(expression);
+                    if (!__rspack_external__babel_types_6e8337dd.isIdentifier(expression) && !__rspack_external__babel_types_6e8337dd.isMemberExpression(expression)) return {
+                        ...binding,
+                        expression: expression
+                    };
+                    const next = graphBinding(graph, binding.module, expression);
+                    if (next?.kind !== 'declaration') break;
+                    binding = next;
+                }
+            };
+            const apiBinding = (module, value)=>{
+                const binding = graphBinding(graph, module, withoutIdentity(module, value));
+                return binding?.kind === 'declaration' ? normalizedApi(binding) : void 0;
+            };
+            const ownedApis = new Map();
+            const own = (binding)=>{
+                const identities = ownedApis.get(binding.module.path) ?? new Set();
+                identities.add(binding.expression);
+                ownedApis.set(binding.module.path, identities);
+            };
+            const proven = new Set();
+            const active = new Set();
+            let visits = 0;
+            const builtApi = (module, expression)=>{
+                const initial = withoutIdentity(module, expression);
+                if (active.has(initial) || active.size >= MAX_API_HOPS) return false;
+                active.add(initial);
+                try {
+                    const children = [];
+                    for(let node = initial;;){
+                        if (++visits > MAX_API_VISITS) return false;
+                        if (__rspack_external__babel_types_6e8337dd.isIdentifier(node) || __rspack_external__babel_types_6e8337dd.isMemberExpression(node)) {
+                            const receiver = apiBinding(module, node);
+                            if (!receiver || !builtApi(receiver.module, receiver.expression)) return false;
+                            break;
+                        }
+                        if (!__rspack_external__babel_types_6e8337dd.isCallExpression(node)) return false;
+                        const callee = graph.evaluate(module, node.callee);
+                        if (callee.length > 0 && callee.every((value)=>'external' === value.kind && httpApiSources.includes(value.specifier) && 'HttpApi' === value.name && 1 === value.members.length && 'make' === value.members[0])) {
+                            if (1 !== node.arguments.length || !__rspack_external__babel_types_6e8337dd.isStringLiteral(node.arguments[0])) return false;
+                            break;
+                        }
+                        if (!__rspack_external__babel_types_6e8337dd.isMemberExpression(node.callee) || node.callee.computed || !__rspack_external__babel_types_6e8337dd.isIdentifier(node.callee.property)) return false;
+                        const method = node.callee.property.name;
+                        const count = node.arguments.length;
+                        const [first] = node.arguments;
+                        if ('addHttpApi' === method && 1 === count) children.push(first);
+                        else if (!('add' === method && count > 0 || 'annotate' === method && 2 === count || [
+                            'annotateMerge',
+                            'middleware'
+                        ].includes(method) && 1 === count || 'prefix' === method && 1 === count && __rspack_external__babel_types_6e8337dd.isStringLiteral(first) && first.value.startsWith('/'))) return false;
+                        node = withoutIdentity(module, node.callee.object);
+                    }
+                    return children.every((child)=>{
+                        const binding = apiBinding(module, child);
+                        return void 0 !== binding && collectApi(binding);
+                    });
+                } finally{
+                    active.delete(initial);
+                }
+            };
+            const collectApi = (binding)=>{
+                if (proven.has(binding.expression)) return true;
+                if (!builtApi(binding.module, binding.expression)) return false;
+                proven.add(binding.expression);
+                if (binding.module.boundary === contractModule.boundary) own(binding);
+                return true;
+            };
+            if (!rpc && ownExport?.kind === 'declaration') {
+                const root = normalizedApi(ownExport);
+                if (root && collectApi(root)) own(root);
+                else ownedApis.clear();
+            }
+            const immutablePipeAliases = (module, target)=>{
+                if (0 === module.mutations.length) return true;
+                let valid = true;
+                __rspack_external__babel_types_6e8337dd.traverseFast(module.file, (node)=>{
+                    if (!__rspack_external__babel_types_6e8337dd.isVariableDeclarator(node) || !__rspack_external__babel_types_6e8337dd.isIdentifier(node.id) || !node.init) return;
+                    let initializer = unwrapExpression(node.init, true);
+                    let identityOnly = true;
+                    let piped = false;
+                    while(__rspack_external__babel_types_6e8337dd.isCallExpression(initializer) && __rspack_external__babel_types_6e8337dd.isMemberExpression(initializer.callee) && !initializer.callee.computed && __rspack_external__babel_types_6e8337dd.isIdentifier(initializer.callee.property, {
+                        name: 'pipe'
+                    })){
+                        piped = true;
+                        identityOnly &&= identityPipe(module, initializer);
+                        initializer = unwrapExpression(initializer.callee.object, true);
+                    }
+                    if (!piped) return;
+                    const receiver = apiBinding(module, initializer);
+                    if (receiver?.module.path !== target.module.path || receiver.expression !== target.expression) return;
+                    if (!identityOnly || graph.resolveReference(module, node.id)?.kind !== 'declaration') valid = false;
+                });
+                return valid;
+            };
+            const ownedBy = (module, argument)=>{
+                if (!argument) return false;
+                if (rpc) {
+                    const binding = graphBinding(graph, module, argument);
+                    return binding?.kind === 'declaration' && ownExport?.kind === 'declaration' && binding.module.path === ownExport.module.path && binding.expression === ownExport.expression;
+                }
+                const binding = apiBinding(module, argument);
+                return void 0 !== binding && !!ownedApis.get(binding.module.path)?.has(binding.expression) && immutablePipeAliases(module, binding);
+            };
+            const violations = new Set();
+            for (const source of composedModules(client, appPath)){
+                const module = graph.module(absolute(source));
+                __rspack_external__babel_types_6e8337dd.traverseFast(module.file, (node)=>{
+                    if (!__rspack_external__babel_types_6e8337dd.isCallExpression(node) && !__rspack_external__babel_types_6e8337dd.isOptionalCallExpression(node)) return;
+                    const native = graph.evaluate(module, node.callee).some((value)=>'external' === value.kind && value.specifier === effect && value.name === factory);
+                    if (native && !ownedBy(module, node.arguments[0])) violations.add(`${source}: must construct the client from its own API contract`);
+                });
+            }
+            return [
+                ...violations
+            ];
+        };
         const moduleShape = (file, imports, calls, patterns = [], defaultExport, composedAppPath)=>{
             if (!exists(file)) return;
             const ast = parseFile(file);
@@ -295,6 +445,10 @@ function check(options, topology) {
                 })), `${file}: must default-export ${defaultExport}`);
         };
         const effect = '@modern-js/bff-effect/effect-client';
+        const httpApiSources = [
+            effect,
+            'effect/http-api'
+        ];
         const clientFactories = new Set([
             'makeEffectHttpApiClient',
             'makeEffectRpcClient'
@@ -476,6 +630,7 @@ function check(options, topology) {
                 ], [
                     rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient'
                 ], [], void 0, appPath);
+                if (exists(contract)) diagnostics.push(...foreignClientConstructions(client, appPath, contract, stem, rpc));
             }
             moduleShape(`${appPath}/api/effect-api.ts`, [], [], [
                 [

package/dist/esm-node/microvertical-api-baseline.js

@@ -471,4 +471,4 @@ const microVerticalApiBaselineViolation = (stem, filePath, expectation)=>{
         throw error;
     }
 };
-export { configuredMicroVerticalApiStem, microVerticalApiBaselineViolation };
+export { camelCaseStem, configuredMicroVerticalApiStem, microVerticalApiBaselineViolation, pascalCaseStem };

package/dist/esm-node/microvertical-api-boundary.js

@@ -2,7 +2,7 @@ import "node:module";
 import node_fs from "node:fs";
 import node_path from "node:path";
 import { parse } from "@babel/parser";
-import { configuredMicroVerticalApiStem, microVerticalApiBaselineViolation } from "./microvertical-api-baseline.js";
+import { camelCaseStem, configuredMicroVerticalApiStem, microVerticalApiBaselineViolation, pascalCaseStem } from "./microvertical-api-baseline.js";
 import { baselinePackage, resolveBaselinePackageDirectory } from "./microvertical-api-owner.js";
 import { createModuleGraph } from "./module-graph.js";
 import { SourceSyntaxError, consumerParserPlugins, unwrapExpression } from "./source-analysis.js";
@@ -20,6 +20,12 @@ const ignored = new Set([
 ]);
 const MAX_CLOSURE_DEPTH = 128;
 const MAX_CLOSURE_MODULES = 2048;
+const MAX_API_HOPS = 128;
+const MAX_API_VISITS = 2048;
+const identitySources = [
+    'effect',
+    'effect/Function'
+];
 const normalize = (file)=>file.split(node_path.sep).join('/').replace(/^\.\//u, '');
 const errorMessage = (error)=>error instanceof Error ? error.message : String(error);
 const apiApp = (app)=>'vertical' === app.kind && 'ui-only' !== app.surfaceProfile && 'horizontal-remote' !== app.deliveryUnitKind;
@@ -259,6 +265,150 @@ function check(options, topology) {
             }
             return queue.map((item)=>item.file);
         };
+        const foreignClientConstructions = (client, appPath, contract, stem, rpc)=>{
+            const graph = createModuleGraph();
+            const contractModule = graph.module(absolute(contract));
+            const factory = rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient';
+            const ownExport = graph.resolve(contractModule, rpc ? `${pascalCaseStem(stem)}RpcGroup` : `${camelCaseStem(stem)}Api`, 'export');
+            const isIdentity = (value)=>'external' === value.kind && identitySources.includes(value.specifier) && 'identity' === value.name && 0 === value.members.length;
+            const identityPipe = (module, node)=>{
+                if (!__rspack_external__babel_types_6e8337dd.isCallExpression(node) || !__rspack_external__babel_types_6e8337dd.isMemberExpression(node.callee) || node.callee.computed || !__rspack_external__babel_types_6e8337dd.isIdentifier(node.callee.property, {
+                    name: 'pipe'
+                }) || 1 !== node.arguments.length) return false;
+                const values = graph.evaluate(module, node.arguments[0]);
+                return values.length > 0 && values.every(isIdentity);
+            };
+            const withoutIdentity = (module, value)=>{
+                let node = unwrapExpression(value, true);
+                for(let pipes = 0; identityPipe(module, node); pipes += 1){
+                    if (pipes >= MAX_API_HOPS) return value;
+                    node = unwrapExpression(node.callee.object, true);
+                }
+                return node;
+            };
+            const normalizedApi = (initial)=>{
+                let binding = initial;
+                const seen = new Set();
+                for(let hops = 0; hops < MAX_API_HOPS; hops += 1){
+                    const expression = withoutIdentity(binding.module, binding.expression);
+                    if (seen.has(expression)) break;
+                    seen.add(expression);
+                    if (!__rspack_external__babel_types_6e8337dd.isIdentifier(expression) && !__rspack_external__babel_types_6e8337dd.isMemberExpression(expression)) return {
+                        ...binding,
+                        expression: expression
+                    };
+                    const next = graphBinding(graph, binding.module, expression);
+                    if (next?.kind !== 'declaration') break;
+                    binding = next;
+                }
+            };
+            const apiBinding = (module, value)=>{
+                const binding = graphBinding(graph, module, withoutIdentity(module, value));
+                return binding?.kind === 'declaration' ? normalizedApi(binding) : void 0;
+            };
+            const ownedApis = new Map();
+            const own = (binding)=>{
+                const identities = ownedApis.get(binding.module.path) ?? new Set();
+                identities.add(binding.expression);
+                ownedApis.set(binding.module.path, identities);
+            };
+            const proven = new Set();
+            const active = new Set();
+            let visits = 0;
+            const builtApi = (module, expression)=>{
+                const initial = withoutIdentity(module, expression);
+                if (active.has(initial) || active.size >= MAX_API_HOPS) return false;
+                active.add(initial);
+                try {
+                    const children = [];
+                    for(let node = initial;;){
+                        if (++visits > MAX_API_VISITS) return false;
+                        if (__rspack_external__babel_types_6e8337dd.isIdentifier(node) || __rspack_external__babel_types_6e8337dd.isMemberExpression(node)) {
+                            const receiver = apiBinding(module, node);
+                            if (!receiver || !builtApi(receiver.module, receiver.expression)) return false;
+                            break;
+                        }
+                        if (!__rspack_external__babel_types_6e8337dd.isCallExpression(node)) return false;
+                        const callee = graph.evaluate(module, node.callee);
+                        if (callee.length > 0 && callee.every((value)=>'external' === value.kind && httpApiSources.includes(value.specifier) && 'HttpApi' === value.name && 1 === value.members.length && 'make' === value.members[0])) {
+                            if (1 !== node.arguments.length || !__rspack_external__babel_types_6e8337dd.isStringLiteral(node.arguments[0])) return false;
+                            break;
+                        }
+                        if (!__rspack_external__babel_types_6e8337dd.isMemberExpression(node.callee) || node.callee.computed || !__rspack_external__babel_types_6e8337dd.isIdentifier(node.callee.property)) return false;
+                        const method = node.callee.property.name;
+                        const count = node.arguments.length;
+                        const [first] = node.arguments;
+                        if ('addHttpApi' === method && 1 === count) children.push(first);
+                        else if (!('add' === method && count > 0 || 'annotate' === method && 2 === count || [
+                            'annotateMerge',
+                            'middleware'
+                        ].includes(method) && 1 === count || 'prefix' === method && 1 === count && __rspack_external__babel_types_6e8337dd.isStringLiteral(first) && first.value.startsWith('/'))) return false;
+                        node = withoutIdentity(module, node.callee.object);
+                    }
+                    return children.every((child)=>{
+                        const binding = apiBinding(module, child);
+                        return void 0 !== binding && collectApi(binding);
+                    });
+                } finally{
+                    active.delete(initial);
+                }
+            };
+            const collectApi = (binding)=>{
+                if (proven.has(binding.expression)) return true;
+                if (!builtApi(binding.module, binding.expression)) return false;
+                proven.add(binding.expression);
+                if (binding.module.boundary === contractModule.boundary) own(binding);
+                return true;
+            };
+            if (!rpc && ownExport?.kind === 'declaration') {
+                const root = normalizedApi(ownExport);
+                if (root && collectApi(root)) own(root);
+                else ownedApis.clear();
+            }
+            const immutablePipeAliases = (module, target)=>{
+                if (0 === module.mutations.length) return true;
+                let valid = true;
+                __rspack_external__babel_types_6e8337dd.traverseFast(module.file, (node)=>{
+                    if (!__rspack_external__babel_types_6e8337dd.isVariableDeclarator(node) || !__rspack_external__babel_types_6e8337dd.isIdentifier(node.id) || !node.init) return;
+                    let initializer = unwrapExpression(node.init, true);
+                    let identityOnly = true;
+                    let piped = false;
+                    while(__rspack_external__babel_types_6e8337dd.isCallExpression(initializer) && __rspack_external__babel_types_6e8337dd.isMemberExpression(initializer.callee) && !initializer.callee.computed && __rspack_external__babel_types_6e8337dd.isIdentifier(initializer.callee.property, {
+                        name: 'pipe'
+                    })){
+                        piped = true;
+                        identityOnly &&= identityPipe(module, initializer);
+                        initializer = unwrapExpression(initializer.callee.object, true);
+                    }
+                    if (!piped) return;
+                    const receiver = apiBinding(module, initializer);
+                    if (receiver?.module.path !== target.module.path || receiver.expression !== target.expression) return;
+                    if (!identityOnly || graph.resolveReference(module, node.id)?.kind !== 'declaration') valid = false;
+                });
+                return valid;
+            };
+            const ownedBy = (module, argument)=>{
+                if (!argument) return false;
+                if (rpc) {
+                    const binding = graphBinding(graph, module, argument);
+                    return binding?.kind === 'declaration' && ownExport?.kind === 'declaration' && binding.module.path === ownExport.module.path && binding.expression === ownExport.expression;
+                }
+                const binding = apiBinding(module, argument);
+                return void 0 !== binding && !!ownedApis.get(binding.module.path)?.has(binding.expression) && immutablePipeAliases(module, binding);
+            };
+            const violations = new Set();
+            for (const source of composedModules(client, appPath)){
+                const module = graph.module(absolute(source));
+                __rspack_external__babel_types_6e8337dd.traverseFast(module.file, (node)=>{
+                    if (!__rspack_external__babel_types_6e8337dd.isCallExpression(node) && !__rspack_external__babel_types_6e8337dd.isOptionalCallExpression(node)) return;
+                    const native = graph.evaluate(module, node.callee).some((value)=>'external' === value.kind && value.specifier === effect && value.name === factory);
+                    if (native && !ownedBy(module, node.arguments[0])) violations.add(`${source}: must construct the client from its own API contract`);
+                });
+            }
+            return [
+                ...violations
+            ];
+        };
         const moduleShape = (file, imports, calls, patterns = [], defaultExport, composedAppPath)=>{
             if (!exists(file)) return;
             const ast = parseFile(file);
@@ -296,6 +446,10 @@ function check(options, topology) {
                 })), `${file}: must default-export ${defaultExport}`);
         };
         const effect = '@modern-js/bff-effect/effect-client';
+        const httpApiSources = [
+            effect,
+            'effect/http-api'
+        ];
         const clientFactories = new Set([
             'makeEffectHttpApiClient',
             'makeEffectRpcClient'
@@ -477,6 +631,7 @@ function check(options, topology) {
                 ], [
                     rpc ? 'makeEffectRpcClient' : 'makeEffectHttpApiClient'
                 ], [], void 0, appPath);
+                if (exists(contract)) diagnostics.push(...foreignClientConstructions(client, appPath, contract, stem, rpc));
             }
             moduleShape(`${appPath}/api/effect-api.ts`, [], [], [
                 [

package/dist/types/microvertical-api-baseline.d.ts

@@ -1,3 +1,7 @@
+/** `order-items` -> `orderItems`: the stem as contract export names spell it. */
+export declare const camelCaseStem: (stem: string) => string;
+/** `order-items` -> `OrderItems`. */
+export declare const pascalCaseStem: (stem: string) => string;
 export interface MicroVerticalApiBaselineExpectation {
     /** Optional override for operation IDs outside reachable endpoint naming conventions. */
     readonly operationPaths?: Readonly<Record<string, string>>;

package/package.json

@@ -23,7 +23,7 @@
   "engines": {
     "node": ">=20"
   },
-  "version": "3.9.3-ultramodern.2",
+  "version": "3.9.3-ultramodern.3",
   "types": "./dist/types/index.d.ts",
   "main": "./dist/esm-node/index.js",
   "typesVersions": {