@bleedingdev/modern-js-create 3.2.0-ultramodern.21 → 3.2.0-ultramodern.23

package/dist/types/locale/en.d.ts

@@ -35,6 +35,7 @@ export declare const EN_LOCALE: {
         optionUltramodernPackageSource: string;
         optionUltramodernPackageScope: string;
         optionUltramodernPackageNamePrefix: string;
+        optionMicroVertical: string;
         optionSub: string;
         examples: string;
         example1: string;
@@ -47,6 +48,7 @@ export declare const EN_LOCALE: {
         example8: string;
         example9: string;
         example10: string;
+        example11: string;
         moreInfo: string;
     };
     version: {

package/dist/types/locale/zh.d.ts

@@ -35,6 +35,7 @@ export declare const ZH_LOCALE: {
         optionUltramodernPackageSource: string;
         optionUltramodernPackageScope: string;
         optionUltramodernPackageNamePrefix: string;
+        optionMicroVertical: string;
         optionSub: string;
         examples: string;
         example1: string;
@@ -47,6 +48,7 @@ export declare const ZH_LOCALE: {
         example8: string;
         example9: string;
         example10: string;
+        example11: string;
         moreInfo: string;
     };
     version: {

package/dist/types/ultramodern-workspace.d.ts

@@ -1,8 +1,10 @@
+export type MicroVerticalKind = 'remote' | 'horizontal-remote' | 'service' | 'shared';
 type UltramodernPackageSourceStrategy = 'workspace' | 'install';
 export type UltramodernWorkspaceOptions = {
     targetDir: string;
     packageName: string;
     modernVersion: string;
+    enableTailwind?: boolean;
     packageSource?: {
         strategy?: UltramodernPackageSourceStrategy;
         modernPackageVersion?: string;
@@ -11,10 +13,21 @@ export type UltramodernWorkspaceOptions = {
         aliasPackageNamePrefix?: string;
     };
 };
+export type AddUltramodernMicroVerticalOptions = {
+    workspaceRoot: string;
+    name: string;
+    kind: MicroVerticalKind;
+    modernVersion: string;
+    enableTailwind?: boolean;
+    packageSource?: UltramodernWorkspaceOptions['packageSource'];
+};
 export declare const ULTRAMODERN_WORKSPACE_FLAG = "--ultramodern-workspace";
+export declare function addUltramodernMicroVertical(options: AddUltramodernMicroVerticalOptions): void;
 export declare function generateUltramodernWorkspace(options: UltramodernWorkspaceOptions): void;
 export declare const ultramodernWorkspaceVersions: {
     tanstackRouter: string;
     moduleFederation: string;
+    tailwind: string;
+    tailwindPostcss: string;
 };
 export {};

package/package.json

@@ -21,7 +21,7 @@
   "engines": {
     "node": ">=20"
   },
-  "version": "3.2.0-ultramodern.21",
+  "version": "3.2.0-ultramodern.23",
   "types": "./dist/types/index.d.ts",
   "main": "./dist/index.js",
   "bin": {
@@ -38,10 +38,10 @@
   ],
   "devDependencies": {
     "@rslib/core": "0.21.5",
-    "@types/node": "^25.8.0",
-    "@typescript/native-preview": "7.0.0-dev.20260516.1",
-    "tsx": "^4.22.0",
-    "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.2.0-ultramodern.17"
+    "@types/node": "^25.9.1",
+    "@typescript/native-preview": "7.0.0-dev.20260526.1",
+    "tsx": "^4.22.3",
+    "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.2.0-ultramodern.23"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -54,6 +54,6 @@
     "start": "node ./dist/index.js"
   },
   "ultramodern": {
-    "frameworkVersion": "3.2.0-ultramodern.17"
+    "frameworkVersion": "3.2.0-ultramodern.23"
   }
 }

package/template/.mise.toml

@@ -0,0 +1,2 @@
+[tools]
+pnpm = "11.3.0"

package/template/README.md

@@ -46,14 +46,15 @@ major upgrades.
 
 ## Micro Vertical Workspaces
 
-Inside a Micro Vertical workspace, generate shell, remote, and service packages
-with `--sub` so the workspace root owns package-manager and CI policy:
+Inside a Micro Vertical workspace, add packages from the workspace root with
+the UltraModern add flow. It derives paths, package names, ports, Module
+Federation names, topology entries, overlays, ownership, and root dev scripts:
 
 ```bash
-npx @modern-js/create apps/shell --router tanstack --tailwind --workspace --sub
-npx @modern-js/create apps/remotes/catalog --router tanstack --tailwind --workspace --sub
-npx @modern-js/create apps/remotes/design-system --router tanstack --tailwind --workspace --sub
-npx @modern-js/create services/catalog-api --bff-runtime effect --workspace --sub
+npx @modern-js/create catalog --microvertical remote
+npx @modern-js/create design-system --microvertical horizontal-remote
+npx @modern-js/create catalog-api --microvertical service
+npx @modern-js/create catalog-contracts --microvertical shared
 ```
 
 The canonical topology is documented in

package/template/package.json.handlebars

@@ -3,7 +3,7 @@
   "version": "0.1.0",
   "private": true,
   "type": "module",
-  "packageManager": "pnpm@11.1.2",
+  "packageManager": "pnpm@11.3.0",
   "scripts": {
     "reset": "npx rimraf node_modules ./**/node_modules",
     "dev": "modern dev",
@@ -28,36 +28,36 @@
 {{#if isTanstackRouter}}    "@modern-js/plugin-tanstack": "{{pluginTanstackVersion}}",
 {{/if}}
     "@modern-js/runtime": "{{runtimeVersion}}",
-{{#if isTanstackRouter}}    "@tanstack/react-router": "1.170.1",
+{{#if isTanstackRouter}}    "@tanstack/react-router": "{{tanstackRouterVersion}}",
 {{/if}}
     "i18next": "26.2.0",
-    "react": "^19.2.3",
-    "react-dom": "^19.2.0",
+    "react": "^19.2.6",
+    "react-dom": "^19.2.6",
     "react-i18next": "17.0.8"
   },
   "devDependencies": {
-    "@effect/tsgo": "0.7.3",
+    "@effect/tsgo": "0.11.0",
     "@modern-js/adapter-rstest": "{{adapterRstestVersion}}",
     "@modern-js/app-tools": "{{appToolsVersion}}",
 {{#if enableBff}}    "@modern-js/plugin-bff": "{{pluginBffVersion}}",
 {{/if}}    "@modern-js/tsconfig": "{{tsconfigVersion}}",
-    "@rstest/core": "0.10.0",
+    "@rstest/core": "0.10.2",
 {{#if enableTailwind}}
-    "@tailwindcss/postcss": "^4.1.18",
+    "@tailwindcss/postcss": "^{{tailwindPostcssVersion}}",
 {{/if}}
     "@types/node": "^20",
     "@types/react": "^19.1.8",
     "@types/react-dom": "^19.1.6",
-    "@typescript/native-preview": "7.0.0-dev.20260518.1",
-    "happy-dom": "^20.8.9",
+    "@typescript/native-preview": "7.0.0-dev.20260526.1",
+    "happy-dom": "^20.9.0",
 {{#unless isSubproject}}
-    "lint-staged": "~15.4.0",
-    "oxfmt": "0.50.0",
-    "oxlint": "1.65.0",
+    "lint-staged": "~17.0.5",
+    "oxfmt": "0.51.0",
+    "oxlint": "1.66.0",
 {{/unless}}{{#if enableTailwind}}    "postcss": "^8.5.6",
-{{/if}}    "rimraf": "^6.0.1"{{#unless isSubproject}},
-    "simple-git-hooks": "^2.11.1"{{/unless}}{{#if enableTailwind}},
-    "tailwindcss": "^4.1.18"{{/if}}{{#unless isSubproject}},
+{{/if}}    "rimraf": "^6.1.3"{{#unless isSubproject}},
+    "simple-git-hooks": "^2.13.1"{{/unless}}{{#if enableTailwind}},
+    "tailwindcss": "^{{tailwindVersion}}"{{/if}}{{#unless isSubproject}},
     "ultracite": "7.7.0"{{/unless}}
   }{{#unless isSubproject}},
   "simple-git-hooks": {
@@ -71,6 +71,6 @@
   }{{/unless}},
   "engines": {
     "node": ">=20",
-    "pnpm": ">=11.0.0"
+    "pnpm": ">=11.3.0 <11.4.0"
   }
 }

package/template/pnpm-workspace.yaml

@@ -21,4 +21,6 @@ allowBuilds:
   core-js: true
   esbuild: true
   msgpackr-extract: true
+  sharp: true
   simple-git-hooks: true
+  workerd: true

package/template/scripts/validate-ultramodern.mjs.handlebars

@@ -1,3 +1,4 @@
+import { execFileSync } from 'node:child_process';
 import fs from 'node:fs';
 import path from 'node:path';
 
@@ -7,7 +8,23 @@ const packageSourcePath = path.resolve(
   process.cwd(),
   '.modernjs/ultramodern-package-source.json',
 );
+const readPnpmConfig = (key) => {
+  const env = { ...process.env };
+  for (const envKey of Object.keys(env)) {
+    if (/^(?:npm|pnpm)_config_/i.test(envKey)) {
+      delete env[envKey];
+    }
+  }
+  const output = execFileSync('pnpm', ['config', 'get', key, '--json'], {
+    cwd: process.cwd(),
+    env,
+    encoding: 'utf-8',
+    stdio: ['ignore', 'pipe', 'pipe'],
+  }).trim();
+  return output ? JSON.parse(output) : undefined;
+};
 const isSubproject = {{isSubproject}};
+const enableTailwind = {{enableTailwind}};
 
 if (!fs.existsSync(configPath)) {
   console.error('modern.config.ts not found');
@@ -68,13 +85,19 @@ const requiredPaths = [
   'oxfmt.config.ts',
   'scripts/bootstrap-agent-skills.mjs',
 {{/unless}}
+  '.mise.toml',
   '.modernjs/ultramodern-package-source.json',
   'pnpm-workspace.yaml',
   'rstest.config.mts',
   'scripts/check-i18n-strings.mjs',
+{{#if enableTailwind}}
+  'postcss.config.mjs',
+  'tailwind.config.ts',
+{{/if}}
   'config/public/locales/en/translation.json',
   'config/public/locales/cs/translation.json',
   'src/modern-app-env.d.ts',
+  'src/routes/index.css',
   'src/routes/[lang]/page.tsx',
   'tests/ultramodern.contract.test.ts',
 ];
@@ -92,6 +115,36 @@ if (fs.existsSync(path.resolve(process.cwd(), 'src/routes/page.tsx'))) {
   process.exit(1);
 }
 
+const routeCss = fs.readFileSync(path.resolve(process.cwd(), 'src/routes/index.css'), 'utf-8');
+if (enableTailwind) {
+  if (!routeCss.includes("@import 'tailwindcss';")) {
+    console.error('src/routes/index.css must import Tailwind CSS by default');
+    process.exit(1);
+  }
+  const postcssConfig = fs.readFileSync(path.resolve(process.cwd(), 'postcss.config.mjs'), 'utf-8');
+  if (!postcssConfig.includes("'@tailwindcss/postcss'")) {
+    console.error('postcss.config.mjs must configure @tailwindcss/postcss');
+    process.exit(1);
+  }
+  const tailwindConfig = fs.readFileSync(path.resolve(process.cwd(), 'tailwind.config.ts'), 'utf-8');
+  if (!tailwindConfig.includes("content: ['./src/**/*.{js,ts,jsx,tsx}']")) {
+    console.error('tailwind.config.ts must scan generated source files');
+    process.exit(1);
+  }
+} else {
+  if (routeCss.includes("@import 'tailwindcss';")) {
+    console.error('src/routes/index.css must omit Tailwind CSS when disabled');
+    process.exit(1);
+  }
+  if (
+    fs.existsSync(path.resolve(process.cwd(), 'postcss.config.mjs')) ||
+    fs.existsSync(path.resolve(process.cwd(), 'tailwind.config.ts'))
+  ) {
+    console.error('Tailwind config files must not be written when Tailwind is disabled');
+    process.exit(1);
+  }
+}
+
 {{#unless isSubproject}}
 const workflowContent = fs.readFileSync(
   path.resolve(process.cwd(), '.github/workflows/ultramodern-gates.yml'),
@@ -212,10 +265,6 @@ if (manifestErrors.length > 0) {
 const packageJson = JSON.parse(
   fs.readFileSync(path.resolve(process.cwd(), 'package.json'), 'utf-8'),
 );
-const pnpmWorkspace = fs.readFileSync(
-  path.resolve(process.cwd(), 'pnpm-workspace.yaml'),
-  'utf-8',
-);
 const packageSource = JSON.parse(fs.readFileSync(packageSourcePath, 'utf-8'));
 const unresolvedTemplateMarker = String.fromCodePoint(123, 123);
 if (JSON.stringify(packageJson).includes(unresolvedTemplateMarker)) {
@@ -269,13 +318,13 @@ if (packageJson.private !== true) {
   process.exit(1);
 }
 
-if (packageJson.packageManager !== 'pnpm@11.1.2') {
-  console.error('Generated app package must pin pnpm@11.1.2');
+if (packageJson.packageManager !== 'pnpm@11.3.0') {
+  console.error('Generated app package must pin pnpm@11.3.0');
   process.exit(1);
 }
 
-if (packageJson.engines?.pnpm !== '>=11.0.0') {
-  console.error('Generated app package must require pnpm >=11.0.0');
+if (packageJson.engines?.pnpm !== '>=11.3.0 <11.4.0') {
+  console.error('Generated app package must require pnpm >=11.3.0 <11.4.0');
   process.exit(1);
 }
 
@@ -284,28 +333,66 @@ if (packageJson.pnpm !== undefined) {
   process.exit(1);
 }
 
-for (const requiredSnippet of [
-  'minimumReleaseAge: 1440',
-  'minimumReleaseAgeStrict: true',
-  'minimumReleaseAgeIgnoreMissingTime: false',
-  "minimumReleaseAgeExclude:\n  - '@modern-js/*'\n  - '@bleedingdev/*'\n  - '@effect/tsgo'\n  - '@effect/tsgo-*'\n  - '@typescript/native-preview'\n  - '@typescript/native-preview-*'",
-  'trustPolicy: no-downgrade',
-  'trustPolicyIgnoreAfter: 1440',
-  'blockExoticSubdeps: true',
-  'engineStrict: true',
-  'pmOnFail: error',
-  'verifyDepsBeforeRun: error',
-  'strictDepBuilds: true',
-  "allowBuilds:\n  '@swc/core': true\n  core-js: true\n  esbuild: true\n  msgpackr-extract: true\n  simple-git-hooks: true",
+if (readPnpmConfig('minimumReleaseAge') !== 1440) {
+  console.error('pnpm minimumReleaseAge must be 1440');
+  process.exit(1);
+}
+if (readPnpmConfig('minimumReleaseAgeStrict') !== true) {
+  console.error('pnpm minimumReleaseAgeStrict must be true');
+  process.exit(1);
+}
+if (readPnpmConfig('minimumReleaseAgeIgnoreMissingTime') !== false) {
+  console.error('pnpm minimumReleaseAgeIgnoreMissingTime must be false');
+  process.exit(1);
+}
+if (
+  JSON.stringify(readPnpmConfig('minimumReleaseAgeExclude')) !==
+  JSON.stringify([
+    '@modern-js/*',
+    '@bleedingdev/*',
+    '@effect/tsgo',
+    '@effect/tsgo-*',
+    '@typescript/native-preview',
+    '@typescript/native-preview-*',
+  ])
+) {
+  console.error('pnpm minimumReleaseAgeExclude must retain framework exceptions');
+  process.exit(1);
+}
+if (readPnpmConfig('trustPolicy') !== 'no-downgrade') {
+  console.error('pnpm trustPolicy must be no-downgrade');
+  process.exit(1);
+}
+for (const [key, expected] of [
+  ['trustPolicyIgnoreAfter', 1440],
+  ['blockExoticSubdeps', true],
+  ['engineStrict', true],
+  ['pmOnFail', 'error'],
+  ['verifyDepsBeforeRun', 'error'],
+  ['strictDepBuilds', true],
 ]) {
-  if (!pnpmWorkspace.includes(requiredSnippet)) {
-    console.error(`pnpm-workspace.yaml must retain ${requiredSnippet.split('\n')[0]}`);
+  if (readPnpmConfig(key) !== expected) {
+    console.error(`pnpm ${key} must be ${String(expected)}`);
     process.exit(1);
   }
 }
-
-if (pnpmWorkspace.includes('onlyBuiltDependencies')) {
-  console.error('pnpm-workspace.yaml must use pnpm 11 allowBuilds instead of onlyBuiltDependencies');
+if (
+  JSON.stringify(readPnpmConfig('allowBuilds')) !==
+  JSON.stringify({
+    '@swc/core': true,
+    'core-js': true,
+    esbuild: true,
+    'msgpackr-extract': true,
+    sharp: true,
+    'simple-git-hooks': true,
+    workerd: true,
+  })
+) {
+  console.error('pnpm allowBuilds must approve only the generated app build dependencies');
+  process.exit(1);
+}
+if (readPnpmConfig('onlyBuiltDependencies') !== undefined) {
+  console.error('pnpm onlyBuiltDependencies must not be set');
   process.exit(1);
 }
 
@@ -408,6 +495,11 @@ for (const dependency of [
   '@rstest/core',
   '@typescript/native-preview',
   'happy-dom',
+{{#if enableTailwind}}
+  '@tailwindcss/postcss',
+  'postcss',
+  'tailwindcss',
+{{/if}}
 {{#unless isSubproject}}
   'oxlint',
   'oxfmt',
@@ -420,6 +512,26 @@ for (const dependency of [
   }
 }
 
+{{#if enableTailwind}}
+if (
+  packageJson.devDependencies?.tailwindcss !== '^4.3.0' ||
+  packageJson.devDependencies?.['@tailwindcss/postcss'] !== '^4.3.0'
+) {
+  console.error('Tailwind CSS dependencies must use the UltraModern default baseline');
+  process.exit(1);
+}
+{{/if}}
+{{#unless enableTailwind}}
+if (
+  packageJson.devDependencies?.tailwindcss ||
+  packageJson.devDependencies?.['@tailwindcss/postcss'] ||
+  packageJson.devDependencies?.postcss
+) {
+  console.error('Tailwind CSS dependencies must be absent when Tailwind is disabled');
+  process.exit(1);
+}
+{{/unless}}
+
 {{#unless isSubproject}}
 const privateSource = skillsLock.sources?.find(
   (source) => source.repository === 'https://github.com/TechsioCZ/skills',

package/template/tests/{ultramodern.contract.test.ts → ultramodern.contract.test.ts.handlebars}

@@ -20,6 +20,22 @@ describe('generated UltraModern contract', () => {
     expect(page).toContain('rel="alternate"');
     expect(page).toContain('hrefLang="x-default"');
     expect(page).toContain('localizedPath(');
+{{#if enableTailwind}}
+    expect(readText('src/routes/index.css')).toContain(
+      "@import 'tailwindcss';",
+    );
+    expect(readText('postcss.config.mjs')).toContain('@tailwindcss/postcss');
+    expect(readText('tailwind.config.ts')).toContain(
+      "content: ['./src/**/*.{js,ts,jsx,tsx}']",
+    );
+{{/if}}
+{{#unless enableTailwind}}
+    expect(readText('src/routes/index.css')).not.toContain(
+      "@import 'tailwindcss';",
+    );
+    expect(fs.existsSync(path.join(root, 'postcss.config.mjs'))).toBe(false);
+    expect(fs.existsSync(path.join(root, 'tailwind.config.ts'))).toBe(false);
+{{/unless}}
 
     const config = readText('rstest.config.mts');
     expect(config).toContain("withModernConfig()");
@@ -63,5 +79,17 @@ describe('generated UltraModern contract', () => {
     expect(
       packageJson.devDependencies?.['@modern-js/adapter-rstest'],
     ).toBeTruthy();
+{{#if enableTailwind}}
+    expect(packageJson.devDependencies?.tailwindcss).toBe('^4.3.0');
+    expect(packageJson.devDependencies?.['@tailwindcss/postcss']).toBe(
+      '^4.3.0',
+    );
+{{/if}}
+{{#unless enableTailwind}}
+    expect(packageJson.devDependencies?.tailwindcss).toBeUndefined();
+    expect(
+      packageJson.devDependencies?.['@tailwindcss/postcss'],
+    ).toBeUndefined();
+{{/unless}}
   });
 });

package/template-workspace/.agents/skills-lock.json

@@ -17,6 +17,20 @@
       "licensePath": ".agents/rstackjs-agent-skills-LICENSE",
       "install": "vendored"
     },
+    {
+      "id": "module-federation-agent-skills",
+      "visibility": "public",
+      "repository": "https://github.com/module-federation/agent-skills",
+      "commit": "07bb5b6c43ad457609e00c081b72d4c42508ec76",
+      "install": "clone",
+      "baseline": [
+        {
+          "name": "mf",
+          "path": ".agents/skills/mf",
+          "reason": "Module Federation docs, config inspection, type checking, shared dependency checks, and observability troubleshooting"
+        }
+      ]
+    },
     {
       "id": "techsiocz-private",
       "visibility": "private",
@@ -81,6 +95,11 @@
       "name": "rstest-best-practices",
       "path": ".agents/skills/rstest-best-practices",
       "reason": "Rstest configuration, test writing, mocking, snapshots, coverage, and CI behavior"
+    },
+    {
+      "name": "mf",
+      "path": ".agents/skills/mf",
+      "reason": "Module Federation docs, config inspection, type checking, shared dependency checks, and observability troubleshooting"
     }
   ],
   "excludedByDefault": [

package/template-workspace/.github/workflows/ultramodern-workspace-gates.yml.handlebars

@@ -49,4 +49,4 @@ jobs:
       - name: Build Workspace Apps
         env:
           MODERN_PUBLIC_SITE_URL: http://localhost:8080
-        run: pnpm -r --filter "./apps/**" run build
+        run: pnpm build

package/template-workspace/.mise.toml

@@ -0,0 +1,2 @@
+[tools]
+pnpm = "11.3.0"

package/template-workspace/AGENTS.md

@@ -7,14 +7,11 @@ This workspace is generated as an agent-ready UltraModern.js SuperApp. Agents sh
 - `pnpm lint` runs Oxlint with the Ultracite preset.
 - `pnpm format` runs oxfmt.
 - `pnpm typecheck` runs effect-tsgo as the TypeScript checker.
-- `pnpm i18n:check` rejects hardcoded user-visible JSX text in generated apps.
-- `pnpm check` runs formatting, linting, effect-tsgo, i18n checks, private-skill availability checks, and the generated workspace contract.
+- `pnpm check` runs formatting, linting, effect-tsgo, private-skill availability checks, and the generated workspace contract.
 
-## Internationalization
+## Localized Routes
 
-Runtime i18n is enabled by default for generated apps. Agents must put user-visible UI copy in each app's `config/public/locales/<lang>/translation.json` and render it through `react-i18next` or `@modern-js/plugin-i18n/runtime`. Do not add hardcoded JSX text, `aria-label`, `title`, `alt`, or `placeholder` strings unless the value is a non-translatable technical token.
-
-Routes are locale-prefixed by default through `localePathRedirect: true`. Keep localized app pages under `src/routes/[lang]`, use links for language switching, and preserve canonical plus `hreflang` metadata. Production builds fail unless `MODERN_PUBLIC_SITE_URL` is set per deployed app, so canonical URLs always use the production origin.
+Generated apps keep locale-prefixed entry routes under `src/routes/[lang]`, static language links, and canonical plus `hreflang` metadata. Runtime i18n is not enabled in the starter because the current React 19 + Module Federation streaming SSR stack must render predictably first. Production builds fail unless `MODERN_PUBLIC_SITE_URL` is set per deployed app, so canonical URLs always use the production origin.
 
 ## Required Skill Baseline
 
@@ -27,6 +24,9 @@ Use these skills when the task touches the matching subsystem:
 - `rslib-best-practices`: Shared packages, generated libraries, declaration output, and Rslib configuration.
 - `rslib-modern-package`: Package contracts for shared libraries, exports, side effects, dependency placement, README, and release readiness.
 - `rstest-best-practices`: Rstest configuration, test writing, mocking, snapshots, coverage, and CI test behavior.
+- `mf`: Module Federation docs, Modern.js integration, DTS/type checks, shared dependency checks, runtime errors, and observability troubleshooting.
+
+The public `module-federation/agent-skills` repository is installed during `pnpm install` and `pnpm skills:install`. `pnpm skills:check` fails when the required public `mf` skill is missing.
 
 ## Private Skills
 
@@ -58,4 +58,4 @@ Agents may read files under `repos/` to understand upstream patterns, APIs, and
 
 ## Skill Provenance
 
-The vendored Rstack skills and private TechsioCZ skill allowlist are pinned in `.agents/skills-lock.json`. Do not update, remove, or replace them casually. If a skill needs updating, update the lock file and run `pnpm check`.
+The vendored Rstack skills, public Module Federation skill, and private TechsioCZ skill allowlist are pinned in `.agents/skills-lock.json`. Do not update, remove, or replace them casually. If a skill needs updating, update the lock file and run `pnpm check`.

package/template-workspace/README.md.handlebars

@@ -7,12 +7,21 @@ UltraModern.js 3.0 SuperApp surface and scaffolds the canonical Micro Vertical
 starter topology:
 
 - `apps/shell-super-app` owns shell route assembly and remote manifest wiring.
-- `apps/remotes/remote-commerce` owns the commerce vertical remote.
-- `apps/remotes/remote-identity` owns the identity vertical remote.
+- `apps/remotes/remote-commerce` owns the commerce vertical remote, its
+  browser-safe Module Federation exposes, and its Effect BFF/API surface.
+- `apps/remotes/remote-identity` owns the identity vertical remote, its
+  browser-safe Module Federation exposes, and its Effect BFF/API surface.
 - `apps/remotes/remote-design-system` owns the horizontal design-system remote.
-- `services/service-recommendations-effect` owns the Effect BFF service.
 - `packages/shared-*` provide placeholders for cross-workspace contracts.
 
+Default vertical APIs are owned by the vertical package, not by `services/*`.
+Each full-stack vertical keeps its `api/effect/index.ts` handlers next to its
+`shared/effect/api.ts` contract and `src/effect/*-client.ts` typed client
+surface. The Module Federation config exposes only browser-safe Route and
+Widget modules; server handlers and Effect client/contract modules stay out of
+browser remotes. `services/*` is reserved for explicit external service
+packages.
+
 Run the scaffold validator before adding business code:
 
 ```bash

package/template-workspace/pnpm-workspace.yaml

@@ -14,6 +14,10 @@ minimumReleaseAgeExclude:
   - '@effect/tsgo-*'
   - '@typescript/native-preview'
   - '@typescript/native-preview-*'
+  - '@cloudflare/*'
+  - miniflare
+  - workerd
+  - wrangler
 trustPolicy: no-downgrade
 trustPolicyIgnoreAfter: 1440
 blockExoticSubdeps: true
@@ -22,9 +26,20 @@ pmOnFail: error
 verifyDepsBeforeRun: error
 strictDepBuilds: true
 
+peerDependencyRules:
+  allowedVersions:
+    react: '>=19.0.0'
+    typescript: '>=6.0.0'
+
+overrides:
+  '@tanstack/react-router': 1.170.8
+  node-fetch: '^3.3.2'
+
 allowBuilds:
   '@swc/core': true
   core-js: true
   esbuild: true
   msgpackr-extract: true
+  sharp: true
   simple-git-hooks: true
+  workerd: true

package/template-workspace/scripts/assert-mf-types.mjs

@@ -0,0 +1,44 @@
+import fs from 'node:fs';
+import path from 'node:path';
+
+const root = process.cwd();
+const defaultAppDirs = [
+  'apps/remotes/remote-commerce',
+  'apps/remotes/remote-identity',
+  'apps/remotes/remote-design-system',
+];
+
+const candidateDirs = process.argv.slice(2);
+const appDirs = candidateDirs.length
+  ? candidateDirs
+  : fs.existsSync(path.join(root, 'module-federation.config.ts'))
+    ? ['.']
+    : defaultAppDirs;
+
+for (const appDir of appDirs) {
+  const configPath = path.join(root, appDir, 'module-federation.config.ts');
+  if (!fs.existsSync(configPath)) {
+    throw new Error(
+      `Missing Module Federation config: ${path.relative(root, configPath)}`,
+    );
+  }
+
+  const config = fs.readFileSync(configPath, 'utf-8');
+  if (!config.includes('exposes:') || config.includes('dts: false')) {
+    continue;
+  }
+
+  const typesArchivePath = path.join(root, appDir, 'dist/@mf-types.zip');
+  if (!fs.existsSync(typesArchivePath)) {
+    throw new Error(
+      `Missing Module Federation DTS archive: ${path.relative(root, typesArchivePath)}`,
+    );
+  }
+
+  const stats = fs.statSync(typesArchivePath);
+  if (stats.size === 0) {
+    throw new Error(
+      `Empty Module Federation DTS archive: ${path.relative(root, typesArchivePath)}`,
+    );
+  }
+}