@bleedingdev/modern-js-plugin-bff-extensions 3.9.0-ultramodern.1 → 3.9.0-ultramodern.10

package/dist/types/cross-project-policy/evaluation.d.ts

@@ -1,4 +1,4 @@
-import { type CrossProjectRequestObservation, type NormalizedCrossProjectPolicy } from '@modern-js/bff-core/security/cross-project-policy';
+import { type CrossProjectRequestObservation, type NormalizedCrossProjectPolicy } from '@modern-js/server-runtime-extensions/bff-policy';
 export type ResolvedCrossProjectPolicy = NormalizedCrossProjectPolicy;
 export declare const checkCrossProjectPolicyResponse: (headers: Record<string, unknown>, policy: ResolvedCrossProjectPolicy | undefined, observedRequest?: CrossProjectRequestObservation) => Response | null;
 export declare const checkCrossProjectPolicyForRequest: (request: Request, policy: ResolvedCrossProjectPolicy | undefined) => Response | null;

package/dist/types/cross-project-policy/node.d.ts

@@ -1,4 +1,5 @@
-import { type OperationContractSource } from '@modern-js/bff-core';
+import '@modern-js/server-runtime-extensions/server-config';
 import type { ServerPluginAPI } from '@modern-js/server-core';
+import { type OperationContractSource } from '@modern-js/server-runtime-extensions/bff-policy/node';
 import type { ResolvedCrossProjectPolicy } from './evaluation.js';
 export declare const resolveAdapterCrossProjectPolicy: (api: ServerPluginAPI, handlers: OperationContractSource[]) => ResolvedCrossProjectPolicy | undefined;

package/dist/types/cross-project-policy/producer-runtime.d.ts

@@ -0,0 +1,20 @@
+interface ProducerClientOptions {
+    requestId?: string;
+    requireEnvelope?: boolean;
+    identityBinding?: {
+        enabled?: boolean;
+        strict?: boolean;
+        protectedHeaders?: string[];
+    };
+    operationContract?: {
+        enabled?: boolean;
+        strict?: boolean;
+        requireSchemaHash?: boolean;
+        requireOperationVersion?: boolean;
+    };
+}
+/** Bind producer defaults once while preserving every per-call nested override. */
+export declare function createProducerClient<Options extends ProducerClientOptions, Result>(configure: (options: Options) => Result, { requestId }: {
+    requestId: string;
+}): (options?: Options) => Result;
+export {};

package/dist/types/effect-adapter/entry.d.ts

@@ -1,2 +1,3 @@
+import '@modern-js/server-runtime-extensions/server-config';
 import type { ServerPluginAPI } from '@modern-js/server-core';
 export declare function resolveEffectAdapterEntryFile(api: ServerPluginAPI): string | undefined;

package/dist/types/effect-adapter/index.d.ts

@@ -1,3 +1,4 @@
+import '@modern-js/server-runtime-extensions/server-config';
 import type { ServerPluginAPI } from '@modern-js/server-core';
 interface EffectAdapterMiddlewareOptions {
     prefix: string | readonly string[];
@@ -16,4 +17,5 @@ export declare class EffectAdapter {
     dispose: () => Promise<void>;
     private loadHandler;
 }
+export declare const createRuntimeAdapters: (api: ServerPluginAPI) => EffectAdapter[];
 export {};

package/dist/types/effect-source-loader/index.d.ts

@@ -1,3 +1,6 @@
-export { resolveEffectEntryFile } from '../client-generator/paths.js';
+export { bundleBuiltEffectEntryForNode, resolveEffectEntryPaths, } from './built-entry.js';
 export { bundleEffectEntryForNode } from './loader.js';
-export { generateEffectClientCode, generateEffectWorkerRuntimeWrapper, } from './worker-runtime-wrapper.js';
+export { resolveEffectOperationContracts } from './operation-contracts.js';
+export { resolveEffectEntryFile } from './paths.js';
+export { bundleEffectWorkerRuntimeSource } from './worker-runtime-source.js';
+export { generateEffectWorkerRuntimeWrapper } from './worker-runtime-wrapper.js';

package/dist/types/effect-source-loader/operation-contracts.d.ts

@@ -0,0 +1,8 @@
+/** Derives server policy metadata without emitting or typing a client. */
+export declare function resolveEffectOperationContracts(options: {
+    appDir: string;
+    resourcePath: string;
+    prefix: string;
+    requestId?: string;
+    onDependency?: (dependency: string) => void;
+}): Promise<import("@modern-js/server-runtime-extensions/bff-policy/node").OperationContractMap | null>;

package/dist/types/effect-source-loader/rspack-loader.d.ts

@@ -0,0 +1,9 @@
+import type { Rspack } from '@rsbuild/core';
+export interface EffectBffLoaderOptions {
+    prefix: string;
+    appDir: string;
+    apiDir: string;
+    effectEntry: string;
+    requestId?: string;
+}
+export default function loader(this: Rspack.LoaderContext<EffectBffLoaderOptions>, source: string): Promise<void>;

package/dist/types/effect-source-loader/worker-runtime-source.d.ts

@@ -0,0 +1,4 @@
+/** Keep the worker implementation graph out of the API-to-client loader. */
+export declare function bundleEffectWorkerRuntimeSource(source: string, resourcePath: string, loader: {
+    addDependency: (dependency: string) => void;
+}): Promise<string>;

package/dist/types/effect-source-loader/worker-runtime-wrapper.d.ts

@@ -1,25 +1,7 @@
-import type { HttpMethodDecider } from '@modern-js/types';
-import type { EffectClientCodegenOptions } from '../client-generator/types.js';
-type EffectWorkerRuntimeGenerationOptions = {
-    apiDir: string;
+export declare function generateEffectWorkerRuntimeWrapper(loader: {
+    addDependency: (dependency: string) => void;
+}, options: {
     appDir: string;
-    effectDataPlatformBatch?: {
-        allowedMethods?: string[];
-        enabled?: boolean;
-        endpoint?: string;
-        flushIntervalMs?: number;
-        maxBatchBytes?: number;
-        maxBatchSize?: number;
-        requestTimeoutMs?: number;
-    };
-    httpMethodDecider?: HttpMethodDecider;
-    port: number;
     prefix: string;
-    requestCreator?: string;
     requestId?: string;
-};
-export declare function generateEffectWorkerRuntimeWrapper(loader: {
-    addDependency: (dependency: string) => void;
-}, options: EffectWorkerRuntimeGenerationOptions, resourcePath: string): Promise<string>;
-export declare function generateEffectClientCode(options: EffectClientCodegenOptions): Promise<string | null>;
-export {};
+}, resourcePath: string): Promise<string>;

package/dist/types/hono/node.d.ts

@@ -0,0 +1,4 @@
+import type { ServerPluginAPI } from '@modern-js/server-core';
+import type { OperationContractSource } from '@modern-js/server-runtime-extensions/bff-policy/node';
+import { type BindHonoRouteHandlersOptions } from './bind-route-handlers.js';
+export declare const createHonoRouteBinder: (api: ServerPluginAPI, handlers: OperationContractSource[]) => (options: Pick<BindHonoRouteHandlersOptions, 'handler' | 'routePath'>) => import("hono").MiddlewareHandler[] | import("hono").MiddlewareHandler;

package/package.json

@@ -18,7 +18,7 @@
     "modern.js",
     "ultramodern.js"
   ],
-  "version": "3.9.0-ultramodern.1",
+  "version": "3.9.0-ultramodern.10",
   "files": [
     "dist",
     "src"
@@ -66,14 +66,6 @@
       },
       "default": "./dist/cjs/effect-source-loader/index.js"
     },
-    "./client-generator": {
-      "types": "./dist/types/client-generator/index.d.ts",
-      "node": {
-        "import": "./dist/esm-node/client-generator/index.mjs",
-        "require": "./dist/cjs/client-generator/index.js"
-      },
-      "default": "./dist/cjs/client-generator/index.js"
-    },
     "./backend-federation": {
       "types": "./dist/types/backend-federation/index.d.ts",
       "node": {
@@ -115,6 +107,30 @@
         "require": "./dist/cjs/backend-federation-manifest/node.js"
       },
       "default": "./dist/cjs/backend-federation-manifest/node.js"
+    },
+    "./effect-source-loader/rspack-loader": {
+      "types": "./dist/types/effect-source-loader/rspack-loader.d.ts",
+      "node": {
+        "import": "./dist/esm-node/effect-source-loader/rspack-loader.mjs",
+        "require": "./dist/cjs/effect-source-loader/rspack-loader.js"
+      },
+      "default": "./dist/cjs/effect-source-loader/rspack-loader.js"
+    },
+    "./producer-runtime": {
+      "types": "./dist/types/cross-project-policy/producer-runtime.d.ts",
+      "node": {
+        "import": "./dist/esm-node/cross-project-policy/producer-runtime.mjs",
+        "require": "./dist/cjs/cross-project-policy/producer-runtime.js"
+      },
+      "import": "./dist/esm/cross-project-policy/producer-runtime.mjs",
+      "default": "./dist/esm/cross-project-policy/producer-runtime.mjs"
+    },
+    "./hono/node": {
+      "types": "./dist/types/hono/node.d.ts",
+      "node": {
+        "import": "./dist/esm-node/hono/node.mjs",
+        "require": "./dist/cjs/hono/node.js"
+      }
     }
   },
   "typesVersions": {
@@ -139,10 +155,6 @@
         "./dist/types/effect-source-loader/index.d.ts",
         "./src/effect-source-loader/index.ts"
       ],
-      "client-generator": [
-        "./dist/types/client-generator/index.d.ts",
-        "./src/client-generator/index.ts"
-      ],
       "backend-federation": [
         "./dist/types/backend-federation/index.d.ts",
         "./src/backend-federation/index.ts"
@@ -162,6 +174,18 @@
       "backend-federation-manifest/node": [
         "./dist/types/backend-federation-manifest/node.d.ts",
         "./src/backend-federation-manifest/node.ts"
+      ],
+      "effect-source-loader/rspack-loader": [
+        "./dist/types/effect-source-loader/rspack-loader.d.ts",
+        "./src/effect-source-loader/rspack-loader.ts"
+      ],
+      "producer-runtime": [
+        "./dist/types/cross-project-policy/producer-runtime.d.ts",
+        "./src/cross-project-policy/producer-runtime.ts"
+      ],
+      "hono/node": [
+        "./dist/types/hono/node.d.ts",
+        "./src/hono/node.ts"
       ]
     }
   },
@@ -169,15 +193,17 @@
     "node": ">=26.7.0"
   },
   "dependencies": {
-    "@modern-js/bff-core": "npm:@bleedingdev/modern-js-bff-core@3.9.0-ultramodern.1",
-    "@modern-js/bff-effect": "npm:@bleedingdev/modern-js-bff-effect@3.9.0-ultramodern.1",
-    "@modern-js/runtime-extensions": "npm:@bleedingdev/modern-js-runtime-extensions@3.9.0-ultramodern.1",
-    "@modern-js/server-core": "npm:@bleedingdev/modern-js-server-core@3.9.0-ultramodern.1",
-    "@modern-js/server-runtime-extensions": "npm:@bleedingdev/modern-js-server-runtime-extensions@3.9.0-ultramodern.1",
-    "@modern-js/types": "npm:@bleedingdev/modern-js-types@3.9.0-ultramodern.1",
-    "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.9.0-ultramodern.1",
+    "@modern-js/backend-federation-contracts": "npm:@bleedingdev/modern-js-backend-federation-contracts@3.9.0-ultramodern.10",
+    "@modern-js/bff-core": "npm:@bleedingdev/modern-js-bff-core@3.9.0-ultramodern.10",
+    "@modern-js/bff-effect": "npm:@bleedingdev/modern-js-bff-effect@3.9.0-ultramodern.10",
+    "@modern-js/runtime-extensions": "npm:@bleedingdev/modern-js-runtime-extensions@3.9.0-ultramodern.10",
+    "@modern-js/server-core": "npm:@bleedingdev/modern-js-server-core@3.9.0-ultramodern.10",
+    "@modern-js/server-runtime-extensions": "npm:@bleedingdev/modern-js-server-runtime-extensions@3.9.0-ultramodern.10",
+    "@modern-js/types": "npm:@bleedingdev/modern-js-types@3.9.0-ultramodern.10",
+    "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.9.0-ultramodern.10",
     "@module-federation/runtime": "2.9.0",
-    "esbuild": "^0.28.1"
+    "@swc/core": "1.16.2",
+    "esbuild": "^0.28.2"
   },
   "peerDependencies": {
     "@effect/opentelemetry": "4.0.0-rc.112",
@@ -193,9 +219,11 @@
   },
   "devDependencies": {
     "@effect/opentelemetry": "4.0.0-rc.112",
+    "@modern-js/plugin": "npm:@bleedingdev/modern-js-plugin@3.9.0-ultramodern.10",
+    "@rsbuild/core": "2.2.3",
     "@rslib/core": "1.0.0",
     "@scripts/rstest-config": "2.66.0",
-    "@types/node": "^26.2.0",
+    "@types/node": "^26.4.1",
     "@types/react": "^19.2.18",
     "@typescript/native-preview": "7.0.0-dev.20260707.2",
     "effect": "4.0.0-rc.112"

package/src/backend-federation/edge-runtime.ts

@@ -50,8 +50,7 @@ export type BackendFederationEdgeRuntimeOptions =
   };
 
 type EdgeRuntimeLoadOptions = BackendFederationEdgeRuntimeBaseOptions & {
-  allowMissingIdentityMetadata?: boolean;
-  expected?: BackendFederationExpectedIdentity;
+  expected: BackendFederationExpectedIdentity;
 };
 
 function parseRemoteRequest(request: string) {
@@ -113,9 +112,8 @@ async function resolveEdgeEntry(
 
 class EdgeBackendFederationRuntime {
   readonly #entries = new Map<string, Promise<BackendFederationEntryExports>>();
-  readonly #expected: BackendFederationExpectedIdentity | undefined;
+  readonly #expected: BackendFederationExpectedIdentity;
   readonly #hostName: string;
-  readonly #allowMissingIdentityMetadata: boolean;
   readonly #modules = new Map<string, Promise<unknown>>();
   readonly #plugins: readonly BackendFederationEdgeLoadEntryPlugin[];
   readonly #remotes: BackendFederationEdgeRemote[];
@@ -126,8 +124,6 @@ class EdgeBackendFederationRuntime {
         '[BFF][Effect] Edge backend federation does not execute entry evaluators. Register a static or service-binding entry provider.',
       );
     }
-    this.#allowMissingIdentityMetadata =
-      options.allowMissingIdentityMetadata === true;
     this.#expected = options.expected;
     this.#hostName = options.hostName;
     this.#plugins = options.plugins ?? [];
@@ -182,7 +178,6 @@ class EdgeBackendFederationRuntime {
       }
       const loaded = await factory();
       return validateLoadedBackendFederatedEffectApi(loaded, {
-        allowMissingIdentityMetadata: this.#allowMissingIdentityMetadata,
         expected: this.#expected,
         remoteName,
         remoteRequest: request,
@@ -250,9 +245,3 @@ export function createBackendFederationRuntime(
   }
   return new EdgeBackendFederationRuntime(options);
 }
-
-export function createBackendFederationRuntimeForLoad(
-  options: EdgeRuntimeLoadOptions,
-): BackendFederationEdgeRuntime {
-  return new EdgeBackendFederationRuntime(options);
-}

package/src/backend-federation/edge.ts

@@ -3,16 +3,14 @@ import {
   BACKEND_FEDERATION_EFFECT_EXPOSE,
   BACKEND_FEDERATION_MANIFEST_FILE,
   BACKEND_FEDERATION_NODE_ADAPTER_VERSION,
-} from '@modern-js/utils/universal';
+} from '@modern-js/backend-federation-contracts';
 import {
   type BackendFederationEdgeLoadEntryPlugin,
   type BackendFederationEdgeLoadEntryPluginOptions,
   type BackendFederationEdgeRemote,
   type BackendFederationEdgeRuntimeOptions,
-  createBackendFederationRuntimeForLoad,
+  createBackendFederationRuntime,
 } from './edge-runtime';
-import type { BackendFederationExpectedIdentity } from './identity';
-import { LEGACY_LOAD_WARNING } from './legacy-warning';
 import type {
   BackendFederatedEffectApiModule,
   BackendFederationLoadOptions,
@@ -79,16 +77,6 @@ export type BackendFederationIdentityLoadOptions =
 
 export function loadBackendFederatedEffectApi(
   options: EdgeBackendFederationIdentityLoadOptions,
-): Promise<BackendFederatedEffectApiModule>;
-/** @deprecated Pass `expected` delivery-unit identity. */
-export function loadBackendFederatedEffectApi(
-  options: EdgeBackendFederationLoadOptions,
-): Promise<BackendFederatedEffectApiModule>;
-export function loadBackendFederatedEffectApi(
-  options: EdgeBackendFederationLoadOptions & {
-    expected?: BackendFederationExpectedIdentity;
-    allowMissingIdentityMetadata?: boolean;
-  },
 ): Promise<BackendFederatedEffectApiModule> {
   if (
     (options as BackendFederationLoadOptions).runtime !== undefined ||
@@ -108,8 +96,12 @@ export function loadBackendFederatedEffectApi(
     );
   }
 
-  if (options.expected === undefined) {
-    console.warn(LEGACY_LOAD_WARNING);
+  if (!options.expected?.unitId || !options.expected.buildMarker) {
+    return Promise.reject(
+      new Error(
+        '[BFF][Effect] Backend federation requires expected.unitId and expected.buildMarker.',
+      ),
+    );
   }
 
   const expose =
@@ -120,7 +112,7 @@ export function loadBackendFederatedEffectApi(
 
   let runtime;
   try {
-    runtime = createBackendFederationRuntimeForLoad(options);
+    runtime = createBackendFederationRuntime(options);
   } catch (error) {
     return Promise.reject(error);
   }

package/src/backend-federation/identity.ts

@@ -21,23 +21,12 @@ export type BackendFederationIdentityIssue = {
  * Shared expected-identity validation for loaded backend federation modules.
  * Compares the expose's `backendFederationContract.compatibility` identity
  * (`unitId`, `build`) against the consumer's expected delivery-unit identity.
- * Missing identity metadata is an error: with an expectation present there is
- * no legacy escape hatch.
+ * Missing identity metadata is an error.
  */
 export function validateExpectedBackendFederationIdentity(
   loaded: unknown,
   expected: BackendFederationExpectedIdentity,
-  options: {
-    /**
-     * Tolerate exposes that declare no identity metadata (legacy modules).
-     * Mismatching declared values still fail. Used by the manifest adapter,
-     * whose manifest-side identity is already validated against `expected`;
-     * the raw identity-aware loader is strict.
-     */
-    allowMissingIdentityMetadata?: boolean;
-  } = {},
 ): BackendFederationIdentityIssue[] {
-  const allowMissing = options.allowMissingIdentityMetadata === true;
   const issues: BackendFederationIdentityIssue[] = [];
   const contract = isRecord(loaded)
     ? loaded.backendFederationContract
@@ -45,9 +34,6 @@ export function validateExpectedBackendFederationIdentity(
   const compatibility = isRecord(contract) ? contract.compatibility : undefined;
 
   if (!isRecord(compatibility)) {
-    if (allowMissing) {
-      return [];
-    }
     return [
       {
         path: 'backendFederationContract.compatibility',
@@ -59,12 +45,10 @@ export function validateExpectedBackendFederationIdentity(
 
   const unitId = compatibility.unitId;
   if (typeof unitId !== 'string' || unitId.length === 0) {
-    if (!allowMissing) {
-      issues.push({
-        path: 'backendFederationContract.compatibility.unitId',
-        message: `missing delivery-unit id; expected ${expected.unitId}`,
-      });
-    }
+    issues.push({
+      path: 'backendFederationContract.compatibility.unitId',
+      message: `missing delivery-unit id; expected ${expected.unitId}`,
+    });
   } else if (unitId !== expected.unitId) {
     issues.push({
       path: 'backendFederationContract.compatibility.unitId',
@@ -74,12 +58,10 @@ export function validateExpectedBackendFederationIdentity(
 
   const build = compatibility.build;
   if (typeof build !== 'string' || build.length === 0) {
-    if (!allowMissing) {
-      issues.push({
-        path: 'backendFederationContract.compatibility.build',
-        message: `missing build marker; expected ${expected.buildMarker}`,
-      });
-    }
+    issues.push({
+      path: 'backendFederationContract.compatibility.build',
+      message: `missing build marker; expected ${expected.buildMarker}`,
+    });
   } else if (build !== expected.buildMarker) {
     issues.push({
       path: 'backendFederationContract.compatibility.build',

package/src/backend-federation/index.ts

@@ -5,7 +5,7 @@ import {
   BACKEND_FEDERATION_EFFECT_EXPOSE,
   BACKEND_FEDERATION_MANIFEST_FILE,
   BACKEND_FEDERATION_NODE_ADAPTER_VERSION,
-} from '@modern-js/utils/universal';
+} from '@modern-js/backend-federation-contracts';
 
 export {
   type BackendFederationExpectedIdentity,

package/src/backend-federation/load.ts

@@ -1,9 +1,5 @@
-import { BACKEND_FEDERATION_EFFECT_EXPOSE } from '@modern-js/utils/universal';
-import * as Effect from 'effect/Effect';
-import * as Logger from 'effect/Logger';
+import { BACKEND_FEDERATION_EFFECT_EXPOSE } from '@modern-js/backend-federation-contracts';
 
-import { type BackendFederationExpectedIdentity } from './identity';
-import { LEGACY_LOAD_WARNING } from './legacy-warning';
 import { collectRemotes } from './remotes';
 import { createBackendFederationRuntime } from './runtime';
 import type {
@@ -14,18 +10,6 @@ import type {
 import { normalizeExpose } from './utils';
 import { validateLoadedBackendFederatedEffectApi } from './validate-loaded';
 
-const legacyWarningLogger = Logger.withLeveledConsole(Logger.formatLogFmt);
-
-function warnLegacyLoad() {
-  Effect.runSync(
-    Effect.provideService(
-      Effect.logWarning(LEGACY_LOAD_WARNING),
-      Logger.CurrentLoggers,
-      new Set([legacyWarningLogger]),
-    ),
-  );
-}
-
 /**
  * Load a federated Effect API with mandatory delivery-unit identity
  * validation (MV-G23): the loaded expose's compatibility metadata must match
@@ -33,20 +17,6 @@ function warnLegacyLoad() {
  */
 export function loadBackendFederatedEffectApi(
   options: BackendFederationIdentityLoadOptions,
-): Promise<BackendFederatedEffectApiModule>;
-/**
- * @deprecated Pass `expected` (delivery-unit `unitId` + `buildMarker`).
- * Loads without an expected identity cannot be validated against a resolved
- * delivery-unit record and emit a runtime warning.
- */
-export function loadBackendFederatedEffectApi(
-  options: BackendFederationLoadOptions,
-): Promise<BackendFederatedEffectApiModule>;
-export function loadBackendFederatedEffectApi(
-  options: BackendFederationLoadOptions & {
-    expected?: BackendFederationExpectedIdentity;
-    allowMissingIdentityMetadata?: boolean;
-  },
 ): Promise<BackendFederatedEffectApiModule> {
   const remoteName = options.remote?.name ?? options.remoteName;
   if (remoteName === undefined || remoteName.length === 0) {
@@ -55,8 +25,12 @@ export function loadBackendFederatedEffectApi(
     );
   }
 
-  if (options.expected === undefined) {
-    warnLegacyLoad();
+  if (!options.expected?.unitId || !options.expected.buildMarker) {
+    return Promise.reject(
+      new Error(
+        '[BFF][Effect] Backend federation requires expected.unitId and expected.buildMarker.',
+      ),
+    );
   }
 
   if (options.runtime !== undefined) {
@@ -93,7 +67,6 @@ export function loadBackendFederatedEffectApi(
   const remoteRequest = `${remoteName}/${normalizeExpose(expose)}`;
   return runtime.loadRemote(remoteRequest).then(loaded =>
     validateLoadedBackendFederatedEffectApi(loaded, {
-      allowMissingIdentityMetadata: options.allowMissingIdentityMetadata,
       expected: options.expected,
       remoteName,
       remoteRequest,

package/src/backend-federation/node.ts

@@ -1,6 +1,5 @@
 import { evaluateNodeBackendFederationCommonJs } from '@modern-js/server-runtime-extensions/backend-federation-security/node';
 
-import type { BackendFederationExpectedIdentity } from './identity';
 import { loadBackendFederatedEffectApi as loadUniversalBackendFederatedEffectApi } from './load';
 import type {
   BackendFederatedEffectApiModule,
@@ -10,16 +9,6 @@ import type {
 
 export function loadBackendFederatedEffectApi(
   options: BackendFederationIdentityLoadOptions,
-): Promise<BackendFederatedEffectApiModule>;
-/** @deprecated Pass `expected` delivery-unit identity. */
-export function loadBackendFederatedEffectApi(
-  options: BackendFederationLoadOptions,
-): Promise<BackendFederatedEffectApiModule>;
-export function loadBackendFederatedEffectApi(
-  options: BackendFederationLoadOptions & {
-    expected?: BackendFederationExpectedIdentity;
-    allowMissingIdentityMetadata?: boolean;
-  },
 ): Promise<BackendFederatedEffectApiModule> {
   return loadUniversalBackendFederatedEffectApi({
     ...options,

package/src/backend-federation/types.ts

@@ -1,9 +1,9 @@
+import type { BACKEND_FEDERATION_EFFECT_EXPOSE } from '@modern-js/backend-federation-contracts';
 import type { EffectApiModule } from '@modern-js/bff-effect/effect';
 import type {
   BackendFederationRemoteEntryPolicy,
   BackendFederationRemoteEntryVerification,
 } from '@modern-js/server-runtime-extensions/backend-federation-security';
-import type { BACKEND_FEDERATION_EFFECT_EXPOSE } from '@modern-js/utils/universal';
 import type {
   ModuleFederation,
   ModuleFederationRuntimePlugin,
@@ -85,12 +85,6 @@ export type BackendFederationLoadOptions = BackendFederationRuntimeOptions & {
 export type BackendFederationIdentityLoadOptions =
   BackendFederationLoadOptions & {
     expected: BackendFederationExpectedIdentity;
-    /**
-     * Tolerate legacy exposes without identity metadata (mismatching declared
-     * values still fail). Prefer leaving this unset: identity-less exposes
-     * cannot be validated against a resolved delivery-unit record.
-     */
-    allowMissingIdentityMetadata?: boolean;
   };
 
 export type BackendFederationLoadEntryPlugin = ModuleFederationRuntimePlugin & {

package/src/backend-federation/validate-loaded.ts

@@ -9,8 +9,7 @@ import { isRecord } from './utils';
 export function validateLoadedBackendFederatedEffectApi(
   loaded: unknown,
   options: {
-    allowMissingIdentityMetadata?: boolean;
-    expected?: BackendFederationExpectedIdentity;
+    expected: BackendFederationExpectedIdentity;
     remoteName: string;
     remoteRequest: string;
   },
@@ -52,14 +51,10 @@ export function validateLoadedBackendFederatedEffectApi(
     );
   }
 
-  if (options.expected !== undefined) {
+  {
     const issues = validateExpectedBackendFederationIdentity(
       loaded,
       options.expected,
-      {
-        allowMissingIdentityMetadata:
-          options.allowMissingIdentityMetadata === true,
-      },
     );
     if (issues.length > 0) {
       throw new Error(

package/src/backend-federation-manifest/load.ts

@@ -7,6 +7,12 @@ import {
 } from '../backend-federation';
 import { loadBackendFederatedEffectApi } from '../backend-federation/load';
 import { BackendFederationManifestAdapterError } from './errors';
+import {
+  backendFederationMetadata,
+  manifestDeliveryUnit,
+  stringValue,
+  versionBoundaryMetadata,
+} from './metadata';
 import { loadBackendFederationManifest } from './reference';
 import { resolveBackendFederationRemoteFromManifest } from './remote';
 import type {
@@ -204,6 +210,19 @@ export async function loadBackendFederatedEffectApiFromManifest(
       );
     }
 
+    const deliveryUnit = manifestDeliveryUnit(
+      backendFederationMetadata(manifest),
+      versionBoundaryMetadata(manifest),
+    );
+    const unitId =
+      stringValue(deliveryUnit.boundary?.unitId) ??
+      stringValue(deliveryUnit.top?.unitId);
+    const buildMarker = stringValue(deliveryUnit.boundary?.buildMarker);
+    if (!unitId || !buildMarker)
+      throw new BackendFederationManifestAdapterError(
+        'manifest_invalid',
+        'Backend federation manifest requires delivery-unit identity.',
+      );
     const loaded = await loadBackendFederatedEffectApi({
       hostName: options.hostName,
       remote,
@@ -214,20 +233,7 @@ export async function loadBackendFederatedEffectApiFromManifest(
         timeoutMs: 0,
       },
       ...(options.runtime ? { runtime: options.runtime } : {}),
-      // MV-G23: route the manifest adapter through the raw loader's shared
-      // delivery-unit identity validation when an identity is expected.
-      ...(options.expected?.unitId && options.expected.buildMarker
-        ? {
-            expected: {
-              unitId: options.expected.unitId,
-              buildMarker: options.expected.buildMarker,
-            },
-            // The manifest's identity is already validated against
-            // `expected`; legacy exposes without identity metadata stay
-            // loadable (mismatching declared values still fail).
-            allowMissingIdentityMetadata: true,
-          }
-        : {}),
+      expected: { unitId, buildMarker },
     }).catch((error: unknown) => {
       throw new BackendFederationManifestAdapterError(
         scope?.timedOut() === true ? 'timeout' : classifyLoadError(error),