@bleedingdev/modern-js-plugin-bff-extensions 3.9.0-ultramodern.1 → 3.9.0-ultramodern.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (157) hide show
  1. package/README.md +13 -3
  2. package/dist/cjs/backend-federation/edge-runtime.js +3 -15
  3. package/dist/cjs/backend-federation/edge.js +8 -9
  4. package/dist/cjs/backend-federation/identity.js +17 -23
  5. package/dist/cjs/backend-federation/index.js +5 -5
  6. package/dist/cjs/backend-federation/load.js +3 -13
  7. package/dist/cjs/backend-federation/validate-loaded.js +2 -4
  8. package/dist/cjs/backend-federation-manifest/load.js +37 -12
  9. package/dist/cjs/backend-federation-manifest/metadata.js +3 -3
  10. package/dist/cjs/backend-federation-manifest/remote.js +2 -2
  11. package/dist/cjs/backend-federation-manifest/validation.js +7 -7
  12. package/dist/cjs/cross-project-policy/evaluation.js +3 -3
  13. package/dist/cjs/cross-project-policy/node.js +4 -3
  14. package/dist/cjs/{backend-federation/legacy-warning.js → cross-project-policy/producer-runtime.js} +23 -5
  15. package/dist/cjs/effect-adapter/entry.js +1 -0
  16. package/dist/cjs/effect-adapter/index.js +9 -2
  17. package/dist/cjs/{client-generator → effect-source-loader}/built-entry.js +1 -1
  18. package/dist/cjs/{client-generator/runtime.js → effect-source-loader/http-api-runtime.js} +12 -20
  19. package/dist/cjs/effect-source-loader/index.js +18 -6
  20. package/dist/cjs/effect-source-loader/loader.js +10 -29
  21. package/dist/cjs/effect-source-loader/operation-contracts.js +83 -0
  22. package/dist/cjs/effect-source-loader/rspack-loader.js +73 -0
  23. package/dist/cjs/effect-source-loader/worker-runtime-source.js +71 -0
  24. package/dist/cjs/effect-source-loader/worker-runtime-wrapper.js +7 -50
  25. package/dist/cjs/hono/cross-project-policy.js +2 -1
  26. package/dist/cjs/hono/node.js +51 -0
  27. package/dist/esm/backend-federation/edge-runtime.mjs +2 -11
  28. package/dist/esm/backend-federation/edge.mjs +4 -5
  29. package/dist/esm/backend-federation/identity.mjs +17 -23
  30. package/dist/esm/backend-federation/index.mjs +1 -1
  31. package/dist/esm/backend-federation/load.mjs +2 -12
  32. package/dist/esm/backend-federation/validate-loaded.mjs +2 -4
  33. package/dist/esm/backend-federation-manifest/load.mjs +37 -12
  34. package/dist/esm/backend-federation-manifest/metadata.mjs +1 -1
  35. package/dist/esm/backend-federation-manifest/remote.mjs +1 -1
  36. package/dist/esm/backend-federation-manifest/validation.mjs +5 -5
  37. package/dist/esm/cross-project-policy/evaluation.mjs +1 -1
  38. package/dist/esm/cross-project-policy/node.mjs +2 -1
  39. package/dist/esm/cross-project-policy/producer-runtime.mjs +20 -0
  40. package/dist/esm/effect-adapter/entry.mjs +1 -0
  41. package/dist/esm/effect-adapter/index.mjs +5 -1
  42. package/dist/esm/{client-generator → effect-source-loader}/built-entry.mjs +1 -1
  43. package/dist/esm/effect-source-loader/http-api-runtime.mjs +19 -0
  44. package/dist/esm/effect-source-loader/index.mjs +5 -2
  45. package/dist/esm/effect-source-loader/loader.mjs +10 -29
  46. package/dist/esm/effect-source-loader/operation-contracts.mjs +45 -0
  47. package/dist/esm/effect-source-loader/rspack-loader.mjs +35 -0
  48. package/dist/esm/effect-source-loader/worker-runtime-source.mjs +23 -0
  49. package/dist/esm/effect-source-loader/worker-runtime-wrapper.mjs +5 -45
  50. package/dist/esm/hono/cross-project-policy.mjs +2 -1
  51. package/dist/esm-node/backend-federation/edge-runtime.mjs +2 -11
  52. package/dist/esm-node/backend-federation/edge.mjs +4 -5
  53. package/dist/esm-node/backend-federation/identity.mjs +17 -23
  54. package/dist/esm-node/backend-federation/index.mjs +1 -1
  55. package/dist/esm-node/backend-federation/load.mjs +2 -12
  56. package/dist/esm-node/backend-federation/validate-loaded.mjs +2 -4
  57. package/dist/esm-node/backend-federation-manifest/load.mjs +37 -12
  58. package/dist/esm-node/backend-federation-manifest/metadata.mjs +1 -1
  59. package/dist/esm-node/backend-federation-manifest/remote.mjs +1 -1
  60. package/dist/esm-node/backend-federation-manifest/validation.mjs +5 -5
  61. package/dist/esm-node/cross-project-policy/evaluation.mjs +1 -1
  62. package/dist/esm-node/cross-project-policy/node.mjs +2 -1
  63. package/dist/esm-node/cross-project-policy/producer-runtime.mjs +21 -0
  64. package/dist/esm-node/effect-adapter/entry.mjs +1 -0
  65. package/dist/esm-node/effect-adapter/index.mjs +5 -1
  66. package/dist/esm-node/{client-generator → effect-source-loader}/built-entry.mjs +1 -1
  67. package/dist/esm-node/effect-source-loader/http-api-runtime.mjs +20 -0
  68. package/dist/esm-node/effect-source-loader/index.mjs +5 -2
  69. package/dist/esm-node/effect-source-loader/loader.mjs +10 -29
  70. package/dist/esm-node/effect-source-loader/operation-contracts.mjs +46 -0
  71. package/dist/esm-node/effect-source-loader/rspack-loader.mjs +37 -0
  72. package/dist/esm-node/effect-source-loader/worker-runtime-source.mjs +24 -0
  73. package/dist/esm-node/effect-source-loader/worker-runtime-wrapper.mjs +5 -45
  74. package/dist/esm-node/hono/cross-project-policy.mjs +2 -1
  75. package/dist/esm-node/hono/node.mjs +14 -0
  76. package/dist/types/backend-federation/edge-runtime.d.ts +0 -5
  77. package/dist/types/backend-federation/edge.d.ts +1 -3
  78. package/dist/types/backend-federation/identity.d.ts +2 -11
  79. package/dist/types/backend-federation/index.d.ts +1 -1
  80. package/dist/types/backend-federation/load.d.ts +1 -7
  81. package/dist/types/backend-federation/node.d.ts +1 -3
  82. package/dist/types/backend-federation/types.d.ts +1 -7
  83. package/dist/types/backend-federation/validate-loaded.d.ts +1 -2
  84. package/dist/types/backend-federation-manifest/metadata.d.ts +0 -6
  85. package/dist/types/cross-project-policy/evaluation.d.ts +1 -1
  86. package/dist/types/cross-project-policy/node.d.ts +2 -1
  87. package/dist/types/cross-project-policy/producer-runtime.d.ts +20 -0
  88. package/dist/types/effect-adapter/entry.d.ts +1 -0
  89. package/dist/types/effect-adapter/index.d.ts +2 -0
  90. package/dist/types/effect-source-loader/index.d.ts +5 -2
  91. package/dist/types/effect-source-loader/operation-contracts.d.ts +8 -0
  92. package/dist/types/effect-source-loader/rspack-loader.d.ts +9 -0
  93. package/dist/types/effect-source-loader/worker-runtime-source.d.ts +4 -0
  94. package/dist/types/effect-source-loader/worker-runtime-wrapper.d.ts +4 -22
  95. package/dist/types/hono/node.d.ts +4 -0
  96. package/package.json +50 -22
  97. package/src/backend-federation/edge-runtime.ts +2 -13
  98. package/src/backend-federation/edge.ts +9 -17
  99. package/src/backend-federation/identity.ts +9 -27
  100. package/src/backend-federation/index.ts +1 -1
  101. package/src/backend-federation/load.ts +7 -34
  102. package/src/backend-federation/node.ts +0 -11
  103. package/src/backend-federation/types.ts +1 -7
  104. package/src/backend-federation/validate-loaded.ts +2 -7
  105. package/src/backend-federation-manifest/load.ts +92 -38
  106. package/src/backend-federation-manifest/metadata.ts +1 -7
  107. package/src/backend-federation-manifest/remote.ts +1 -1
  108. package/src/backend-federation-manifest/validation.ts +10 -13
  109. package/src/cross-project-policy/evaluation.ts +1 -1
  110. package/src/cross-project-policy/node.ts +3 -3
  111. package/src/cross-project-policy/producer-runtime.ts +43 -0
  112. package/src/effect-adapter/entry.ts +1 -0
  113. package/src/effect-adapter/index.ts +5 -0
  114. package/src/{client-generator → effect-source-loader}/built-entry.ts +1 -3
  115. package/src/effect-source-loader/http-api-runtime.ts +39 -0
  116. package/src/effect-source-loader/index.ts +8 -5
  117. package/src/effect-source-loader/loader.ts +31 -47
  118. package/src/effect-source-loader/operation-contracts.ts +72 -0
  119. package/src/effect-source-loader/rspack-loader.ts +72 -0
  120. package/src/effect-source-loader/worker-runtime-source.ts +34 -0
  121. package/src/effect-source-loader/worker-runtime-wrapper.ts +5 -75
  122. package/src/hono/cross-project-policy.ts +2 -1
  123. package/src/hono/node.ts +24 -0
  124. package/dist/cjs/client-generator/generator.js +0 -73
  125. package/dist/cjs/client-generator/index.js +0 -54
  126. package/dist/cjs/client-generator/rendering.js +0 -253
  127. package/dist/cjs/client-generator/types.js +0 -18
  128. package/dist/esm/backend-federation/legacy-warning.mjs +0 -2
  129. package/dist/esm/client-generator/generator.mjs +0 -32
  130. package/dist/esm/client-generator/index.mjs +0 -3
  131. package/dist/esm/client-generator/rendering.mjs +0 -209
  132. package/dist/esm/client-generator/runtime.mjs +0 -27
  133. package/dist/esm/client-generator/types.mjs +0 -0
  134. package/dist/esm-node/backend-federation/legacy-warning.mjs +0 -3
  135. package/dist/esm-node/client-generator/generator.mjs +0 -33
  136. package/dist/esm-node/client-generator/index.mjs +0 -4
  137. package/dist/esm-node/client-generator/rendering.mjs +0 -210
  138. package/dist/esm-node/client-generator/runtime.mjs +0 -29
  139. package/dist/esm-node/client-generator/types.mjs +0 -1
  140. package/dist/types/backend-federation/legacy-warning.d.ts +0 -1
  141. package/dist/types/client-generator/generator.d.ts +0 -3
  142. package/dist/types/client-generator/index.d.ts +0 -4
  143. package/dist/types/client-generator/rendering.d.ts +0 -24
  144. package/dist/types/client-generator/types.d.ts +0 -33
  145. package/src/backend-federation/legacy-warning.ts +0 -2
  146. package/src/client-generator/generator.ts +0 -52
  147. package/src/client-generator/index.ts +0 -10
  148. package/src/client-generator/rendering.ts +0 -307
  149. package/src/client-generator/runtime.ts +0 -69
  150. package/src/client-generator/types.ts +0 -35
  151. /package/dist/cjs/{client-generator → effect-source-loader}/paths.js +0 -0
  152. /package/dist/esm/{client-generator → effect-source-loader}/paths.mjs +0 -0
  153. /package/dist/esm-node/{client-generator → effect-source-loader}/paths.mjs +0 -0
  154. /package/dist/types/{client-generator → effect-source-loader}/built-entry.d.ts +0 -0
  155. /package/dist/types/{client-generator/runtime.d.ts → effect-source-loader/http-api-runtime.d.ts} +0 -0
  156. /package/dist/types/{client-generator → effect-source-loader}/paths.d.ts +0 -0
  157. /package/src/{client-generator → effect-source-loader}/paths.ts +0 -0
@@ -21,23 +21,12 @@ export type BackendFederationIdentityIssue = {
21
21
  * Shared expected-identity validation for loaded backend federation modules.
22
22
  * Compares the expose's `backendFederationContract.compatibility` identity
23
23
  * (`unitId`, `build`) against the consumer's expected delivery-unit identity.
24
- * Missing identity metadata is an error: with an expectation present there is
25
- * no legacy escape hatch.
24
+ * Missing identity metadata is an error.
26
25
  */
27
26
  export function validateExpectedBackendFederationIdentity(
28
27
  loaded: unknown,
29
28
  expected: BackendFederationExpectedIdentity,
30
- options: {
31
- /**
32
- * Tolerate exposes that declare no identity metadata (legacy modules).
33
- * Mismatching declared values still fail. Used by the manifest adapter,
34
- * whose manifest-side identity is already validated against `expected`;
35
- * the raw identity-aware loader is strict.
36
- */
37
- allowMissingIdentityMetadata?: boolean;
38
- } = {},
39
29
  ): BackendFederationIdentityIssue[] {
40
- const allowMissing = options.allowMissingIdentityMetadata === true;
41
30
  const issues: BackendFederationIdentityIssue[] = [];
42
31
  const contract = isRecord(loaded)
43
32
  ? loaded.backendFederationContract
@@ -45,9 +34,6 @@ export function validateExpectedBackendFederationIdentity(
45
34
  const compatibility = isRecord(contract) ? contract.compatibility : undefined;
46
35
 
47
36
  if (!isRecord(compatibility)) {
48
- if (allowMissing) {
49
- return [];
50
- }
51
37
  return [
52
38
  {
53
39
  path: 'backendFederationContract.compatibility',
@@ -59,12 +45,10 @@ export function validateExpectedBackendFederationIdentity(
59
45
 
60
46
  const unitId = compatibility.unitId;
61
47
  if (typeof unitId !== 'string' || unitId.length === 0) {
62
- if (!allowMissing) {
63
- issues.push({
64
- path: 'backendFederationContract.compatibility.unitId',
65
- message: `missing delivery-unit id; expected ${expected.unitId}`,
66
- });
67
- }
48
+ issues.push({
49
+ path: 'backendFederationContract.compatibility.unitId',
50
+ message: `missing delivery-unit id; expected ${expected.unitId}`,
51
+ });
68
52
  } else if (unitId !== expected.unitId) {
69
53
  issues.push({
70
54
  path: 'backendFederationContract.compatibility.unitId',
@@ -74,12 +58,10 @@ export function validateExpectedBackendFederationIdentity(
74
58
 
75
59
  const build = compatibility.build;
76
60
  if (typeof build !== 'string' || build.length === 0) {
77
- if (!allowMissing) {
78
- issues.push({
79
- path: 'backendFederationContract.compatibility.build',
80
- message: `missing build marker; expected ${expected.buildMarker}`,
81
- });
82
- }
61
+ issues.push({
62
+ path: 'backendFederationContract.compatibility.build',
63
+ message: `missing build marker; expected ${expected.buildMarker}`,
64
+ });
83
65
  } else if (build !== expected.buildMarker) {
84
66
  issues.push({
85
67
  path: 'backendFederationContract.compatibility.build',
@@ -5,7 +5,7 @@ import {
5
5
  BACKEND_FEDERATION_EFFECT_EXPOSE,
6
6
  BACKEND_FEDERATION_MANIFEST_FILE,
7
7
  BACKEND_FEDERATION_NODE_ADAPTER_VERSION,
8
- } from '@modern-js/utils/universal';
8
+ } from '@modern-js/backend-federation-contracts';
9
9
 
10
10
  export {
11
11
  type BackendFederationExpectedIdentity,
@@ -1,9 +1,5 @@
1
- import { BACKEND_FEDERATION_EFFECT_EXPOSE } from '@modern-js/utils/universal';
2
- import * as Effect from 'effect/Effect';
3
- import * as Logger from 'effect/Logger';
1
+ import { BACKEND_FEDERATION_EFFECT_EXPOSE } from '@modern-js/backend-federation-contracts';
4
2
 
5
- import { type BackendFederationExpectedIdentity } from './identity';
6
- import { LEGACY_LOAD_WARNING } from './legacy-warning';
7
3
  import { collectRemotes } from './remotes';
8
4
  import { createBackendFederationRuntime } from './runtime';
9
5
  import type {
@@ -14,18 +10,6 @@ import type {
14
10
  import { normalizeExpose } from './utils';
15
11
  import { validateLoadedBackendFederatedEffectApi } from './validate-loaded';
16
12
 
17
- const legacyWarningLogger = Logger.withLeveledConsole(Logger.formatLogFmt);
18
-
19
- function warnLegacyLoad() {
20
- Effect.runSync(
21
- Effect.provideService(
22
- Effect.logWarning(LEGACY_LOAD_WARNING),
23
- Logger.CurrentLoggers,
24
- new Set([legacyWarningLogger]),
25
- ),
26
- );
27
- }
28
-
29
13
  /**
30
14
  * Load a federated Effect API with mandatory delivery-unit identity
31
15
  * validation (MV-G23): the loaded expose's compatibility metadata must match
@@ -33,20 +17,6 @@ function warnLegacyLoad() {
33
17
  */
34
18
  export function loadBackendFederatedEffectApi(
35
19
  options: BackendFederationIdentityLoadOptions,
36
- ): Promise<BackendFederatedEffectApiModule>;
37
- /**
38
- * @deprecated Pass `expected` (delivery-unit `unitId` + `buildMarker`).
39
- * Loads without an expected identity cannot be validated against a resolved
40
- * delivery-unit record and emit a runtime warning.
41
- */
42
- export function loadBackendFederatedEffectApi(
43
- options: BackendFederationLoadOptions,
44
- ): Promise<BackendFederatedEffectApiModule>;
45
- export function loadBackendFederatedEffectApi(
46
- options: BackendFederationLoadOptions & {
47
- expected?: BackendFederationExpectedIdentity;
48
- allowMissingIdentityMetadata?: boolean;
49
- },
50
20
  ): Promise<BackendFederatedEffectApiModule> {
51
21
  const remoteName = options.remote?.name ?? options.remoteName;
52
22
  if (remoteName === undefined || remoteName.length === 0) {
@@ -55,8 +25,12 @@ export function loadBackendFederatedEffectApi(
55
25
  );
56
26
  }
57
27
 
58
- if (options.expected === undefined) {
59
- warnLegacyLoad();
28
+ if (!options.expected?.unitId || !options.expected.buildMarker) {
29
+ return Promise.reject(
30
+ new Error(
31
+ '[BFF][Effect] Backend federation requires expected.unitId and expected.buildMarker.',
32
+ ),
33
+ );
60
34
  }
61
35
 
62
36
  if (options.runtime !== undefined) {
@@ -93,7 +67,6 @@ export function loadBackendFederatedEffectApi(
93
67
  const remoteRequest = `${remoteName}/${normalizeExpose(expose)}`;
94
68
  return runtime.loadRemote(remoteRequest).then(loaded =>
95
69
  validateLoadedBackendFederatedEffectApi(loaded, {
96
- allowMissingIdentityMetadata: options.allowMissingIdentityMetadata,
97
70
  expected: options.expected,
98
71
  remoteName,
99
72
  remoteRequest,
@@ -1,6 +1,5 @@
1
1
  import { evaluateNodeBackendFederationCommonJs } from '@modern-js/server-runtime-extensions/backend-federation-security/node';
2
2
 
3
- import type { BackendFederationExpectedIdentity } from './identity';
4
3
  import { loadBackendFederatedEffectApi as loadUniversalBackendFederatedEffectApi } from './load';
5
4
  import type {
6
5
  BackendFederatedEffectApiModule,
@@ -10,16 +9,6 @@ import type {
10
9
 
11
10
  export function loadBackendFederatedEffectApi(
12
11
  options: BackendFederationIdentityLoadOptions,
13
- ): Promise<BackendFederatedEffectApiModule>;
14
- /** @deprecated Pass `expected` delivery-unit identity. */
15
- export function loadBackendFederatedEffectApi(
16
- options: BackendFederationLoadOptions,
17
- ): Promise<BackendFederatedEffectApiModule>;
18
- export function loadBackendFederatedEffectApi(
19
- options: BackendFederationLoadOptions & {
20
- expected?: BackendFederationExpectedIdentity;
21
- allowMissingIdentityMetadata?: boolean;
22
- },
23
12
  ): Promise<BackendFederatedEffectApiModule> {
24
13
  return loadUniversalBackendFederatedEffectApi({
25
14
  ...options,
@@ -1,9 +1,9 @@
1
+ import type { BACKEND_FEDERATION_EFFECT_EXPOSE } from '@modern-js/backend-federation-contracts';
1
2
  import type { EffectApiModule } from '@modern-js/bff-effect/effect';
2
3
  import type {
3
4
  BackendFederationRemoteEntryPolicy,
4
5
  BackendFederationRemoteEntryVerification,
5
6
  } from '@modern-js/server-runtime-extensions/backend-federation-security';
6
- import type { BACKEND_FEDERATION_EFFECT_EXPOSE } from '@modern-js/utils/universal';
7
7
  import type {
8
8
  ModuleFederation,
9
9
  ModuleFederationRuntimePlugin,
@@ -85,12 +85,6 @@ export type BackendFederationLoadOptions = BackendFederationRuntimeOptions & {
85
85
  export type BackendFederationIdentityLoadOptions =
86
86
  BackendFederationLoadOptions & {
87
87
  expected: BackendFederationExpectedIdentity;
88
- /**
89
- * Tolerate legacy exposes without identity metadata (mismatching declared
90
- * values still fail). Prefer leaving this unset: identity-less exposes
91
- * cannot be validated against a resolved delivery-unit record.
92
- */
93
- allowMissingIdentityMetadata?: boolean;
94
88
  };
95
89
 
96
90
  export type BackendFederationLoadEntryPlugin = ModuleFederationRuntimePlugin & {
@@ -9,8 +9,7 @@ import { isRecord } from './utils';
9
9
  export function validateLoadedBackendFederatedEffectApi(
10
10
  loaded: unknown,
11
11
  options: {
12
- allowMissingIdentityMetadata?: boolean;
13
- expected?: BackendFederationExpectedIdentity;
12
+ expected: BackendFederationExpectedIdentity;
14
13
  remoteName: string;
15
14
  remoteRequest: string;
16
15
  },
@@ -52,14 +51,10 @@ export function validateLoadedBackendFederatedEffectApi(
52
51
  );
53
52
  }
54
53
 
55
- if (options.expected !== undefined) {
54
+ {
56
55
  const issues = validateExpectedBackendFederationIdentity(
57
56
  loaded,
58
57
  options.expected,
59
- {
60
- allowMissingIdentityMetadata:
61
- options.allowMissingIdentityMetadata === true,
62
- },
63
58
  );
64
59
  if (issues.length > 0) {
65
60
  throw new Error(
@@ -7,6 +7,12 @@ import {
7
7
  } from '../backend-federation';
8
8
  import { loadBackendFederatedEffectApi } from '../backend-federation/load';
9
9
  import { BackendFederationManifestAdapterError } from './errors';
10
+ import {
11
+ backendFederationMetadata,
12
+ manifestDeliveryUnit,
13
+ stringValue,
14
+ versionBoundaryMetadata,
15
+ } from './metadata';
10
16
  import { loadBackendFederationManifest } from './reference';
11
17
  import { resolveBackendFederationRemoteFromManifest } from './remote';
12
18
  import type {
@@ -19,6 +25,10 @@ import {
19
25
  validateLoadedBackendFederationContract,
20
26
  } from './validation';
21
27
 
28
+ // One manifest+entry budget. Explicit outer 0 opts out; nested 0 cannot
29
+ // disable a positive nested deadline.
30
+ const DEFAULT_SHARED_MANIFEST_LOAD_TIMEOUT_MS = 10_000;
31
+
22
32
  function createManifestLoadScope(
23
33
  options: BackendFederationManifestAdapterOptions,
24
34
  ) {
@@ -38,9 +48,14 @@ function createManifestLoadScope(
38
48
  );
39
49
  }
40
50
  }
51
+ const positivePolicyTimeouts = policyTimeouts.filter(timeout => timeout > 0);
41
52
  const timeoutMs =
42
53
  options.timeoutMs ??
43
- (policyTimeouts.length > 0 ? Math.min(...policyTimeouts) : 0);
54
+ (policyTimeouts.length === 0
55
+ ? DEFAULT_SHARED_MANIFEST_LOAD_TIMEOUT_MS
56
+ : positivePolicyTimeouts.length > 0
57
+ ? Math.min(...positivePolicyTimeouts)
58
+ : 0);
44
59
  const inputSignals = [
45
60
  options.signal,
46
61
  options.manifestPolicy?.signal,
@@ -134,6 +149,39 @@ function throwIfManifestLoadAborted(signal: AbortSignal) {
134
149
  }
135
150
  }
136
151
 
152
+ // Stop waiting even when trusted plugin work ignores cancellation. The race
153
+ // observes late rejections; it cannot stop that work from running.
154
+ function settleOnSharedAbort<T>(
155
+ promise: Promise<T>,
156
+ signal: AbortSignal,
157
+ ): Promise<T> {
158
+ if (signal.aborted) {
159
+ // Observe work even when the pre-aborted path never reaches Promise.race.
160
+ promise.catch(() => {});
161
+ throwIfManifestLoadAborted(signal);
162
+ }
163
+
164
+ let onAbort: (() => void) | undefined;
165
+ const aborted = new Promise<never>((_resolve, reject) => {
166
+ onAbort = () => {
167
+ reject(
168
+ new BackendFederationManifestAdapterError(
169
+ 'remote_unavailable',
170
+ '[BFF][Effect] Backend federation load was aborted before remote execution.',
171
+ signal.reason,
172
+ ),
173
+ );
174
+ };
175
+ signal.addEventListener('abort', onAbort, { once: true });
176
+ });
177
+
178
+ return Promise.race([promise, aborted]).finally(() => {
179
+ if (onAbort) {
180
+ signal.removeEventListener('abort', onAbort);
181
+ }
182
+ });
183
+ }
184
+
137
185
  export async function loadBackendFederatedEffectApiFromManifest(
138
186
  options: BackendFederationManifestAdapterOptions,
139
187
  ): Promise<BackendFederatedEffectApiModule> {
@@ -144,16 +192,19 @@ export async function loadBackendFederatedEffectApiFromManifest(
144
192
  try {
145
193
  scope = createManifestLoadScope(options);
146
194
  throwIfManifestLoadAborted(scope.signal);
147
- manifest = await loadBackendFederationManifest({
148
- ...options,
149
- manifestPolicy: {
150
- ...options.manifestPolicy,
195
+ manifest = await settleOnSharedAbort(
196
+ loadBackendFederationManifest({
197
+ ...options,
198
+ manifestPolicy: {
199
+ ...options.manifestPolicy,
200
+ signal: scope.signal,
201
+ timeoutMs: 0,
202
+ },
151
203
  signal: scope.signal,
152
204
  timeoutMs: 0,
153
- },
154
- signal: scope.signal,
155
- timeoutMs: 0,
156
- });
205
+ }),
206
+ scope.signal,
207
+ );
157
208
  validateBackendFederationManifest(manifest, options.expected);
158
209
  remote = resolveBackendFederationRemoteFromManifest(
159
210
  manifest,
@@ -204,37 +255,40 @@ export async function loadBackendFederatedEffectApiFromManifest(
204
255
  );
205
256
  }
206
257
 
207
- const loaded = await loadBackendFederatedEffectApi({
208
- hostName: options.hostName,
209
- remote,
210
- ...(options.plugins ? { plugins: options.plugins } : {}),
211
- entryPolicy: {
212
- ...options.entryPolicy,
213
- signal: scope.signal,
214
- timeoutMs: 0,
215
- },
216
- ...(options.runtime ? { runtime: options.runtime } : {}),
217
- // MV-G23: route the manifest adapter through the raw loader's shared
218
- // delivery-unit identity validation when an identity is expected.
219
- ...(options.expected?.unitId && options.expected.buildMarker
220
- ? {
221
- expected: {
222
- unitId: options.expected.unitId,
223
- buildMarker: options.expected.buildMarker,
224
- },
225
- // The manifest's identity is already validated against
226
- // `expected`; legacy exposes without identity metadata stay
227
- // loadable (mismatching declared values still fail).
228
- allowMissingIdentityMetadata: true,
229
- }
230
- : {}),
231
- }).catch((error: unknown) => {
258
+ const deliveryUnit = manifestDeliveryUnit(
259
+ backendFederationMetadata(manifest),
260
+ versionBoundaryMetadata(manifest),
261
+ );
262
+ const unitId =
263
+ stringValue(deliveryUnit.boundary?.unitId) ??
264
+ stringValue(deliveryUnit.top?.unitId);
265
+ const buildMarker = stringValue(deliveryUnit.boundary?.buildMarker);
266
+ if (!unitId || !buildMarker)
232
267
  throw new BackendFederationManifestAdapterError(
233
- scope?.timedOut() === true ? 'timeout' : classifyLoadError(error),
234
- `[BFF][Effect] Backend federation remote ${remote?.name ?? 'unknown'} could not load ${remote?.expose ?? BACKEND_FEDERATION_EFFECT_EXPOSE}.`,
235
- error,
268
+ 'manifest_invalid',
269
+ 'Backend federation manifest requires delivery-unit identity.',
236
270
  );
237
- });
271
+ const loaded = await settleOnSharedAbort(
272
+ loadBackendFederatedEffectApi({
273
+ hostName: options.hostName,
274
+ remote,
275
+ ...(options.plugins ? { plugins: options.plugins } : {}),
276
+ entryPolicy: {
277
+ ...options.entryPolicy,
278
+ signal: scope.signal,
279
+ timeoutMs: 0,
280
+ },
281
+ ...(options.runtime ? { runtime: options.runtime } : {}),
282
+ expected: { unitId, buildMarker },
283
+ }).catch((error: unknown) => {
284
+ throw new BackendFederationManifestAdapterError(
285
+ scope?.timedOut() === true ? 'timeout' : classifyLoadError(error),
286
+ `[BFF][Effect] Backend federation remote ${remote?.name ?? 'unknown'} could not load ${remote?.expose ?? BACKEND_FEDERATION_EFFECT_EXPOSE}.`,
287
+ error,
288
+ );
289
+ }),
290
+ scope.signal,
291
+ );
238
292
 
239
293
  validateLoadedBackendFederationContract(loaded, manifest, remote);
240
294
 
@@ -3,7 +3,7 @@
3
3
  import {
4
4
  backendFederationMetadata as sharedBackendFederationMetadata,
5
5
  backendFederationVersionBoundary as sharedBackendFederationVersionBoundary,
6
- } from '@modern-js/utils/universal';
6
+ } from '@modern-js/backend-federation-contracts';
7
7
  import type { BackendFederationManifest } from './types';
8
8
 
9
9
  export function stringValue(value: unknown) {
@@ -56,12 +56,6 @@ export function deliveryUnitMetadata(
56
56
  return recordField(record, 'deliveryUnit');
57
57
  }
58
58
 
59
- /**
60
- * Resolves the delivery-unit identity root for a manifest (ADR-0019 §3):
61
- * prefers `versionBoundary.deliveryUnit`, falls back to the top-level
62
- * `backendFederation.deliveryUnit` record. Both are additive/optional so
63
- * legacy manifests without delivery-unit metadata continue to validate.
64
- */
65
59
  export function manifestDeliveryUnit(
66
60
  backendFederation: Record<string, unknown> | undefined,
67
61
  boundary: Record<string, unknown> | undefined,
@@ -1,10 +1,10 @@
1
1
  // @effect-diagnostics asyncFunction:off extendsNativeError:off globalTimers:off newPromise:off strictBooleanExpressions:off
2
2
 
3
+ import { backendFederationExposeNames } from '@modern-js/backend-federation-contracts';
3
4
  import {
4
5
  BackendFederationRemoteEntryError,
5
6
  resolveBackendFederationRemoteEntryVerification,
6
7
  } from '@modern-js/server-runtime-extensions/backend-federation-security';
7
- import { backendFederationExposeNames } from '@modern-js/utils/universal';
8
8
  import {
9
9
  BACKEND_FEDERATION_EFFECT_EXPOSE,
10
10
  type BackendFederationRemote,
@@ -3,7 +3,7 @@
3
3
  import {
4
4
  formatBackendFederationValidationErrors,
5
5
  validateBackendFederationManifest as validateBackendFederationManifestContract,
6
- } from '@modern-js/utils/universal';
6
+ } from '@modern-js/backend-federation-contracts';
7
7
  import {
8
8
  BACKEND_FEDERATION_CONTRACT_VERSION,
9
9
  BACKEND_FEDERATION_NODE_ADAPTER_VERSION,
@@ -48,11 +48,6 @@ function resolveExpectedBuildMarker(
48
48
  );
49
49
  }
50
50
 
51
- // Intentionally no fallback to `buildVersion` here: this is only used to
52
- // compare against manifest `deliveryUnit.buildMarker`, which is a
53
- // separate, additive field. Callers that only pass `buildVersion` (the
54
- // pre-ADR-0019 expectation shape) must not be forced to also match a
55
- // delivery-unit build marker on the manifest.
56
51
  return expected.buildMarker;
57
52
  }
58
53
 
@@ -70,7 +65,6 @@ export function validateBackendFederationManifest(
70
65
  const manifestShape = validateBackendFederationManifestContract(manifest, {
71
66
  expectedContractVersion: false,
72
67
  expectedNodeAdapterVersion: false,
73
- validateDeliveryUnit: false,
74
68
  });
75
69
  assertManifestAdapter(
76
70
  manifestShape.ok,
@@ -151,6 +145,11 @@ export function validateBackendFederationManifest(
151
145
  const manifestUnitId =
152
146
  stringValue(deliveryUnit.boundary?.unitId) ??
153
147
  stringValue(deliveryUnit.top?.unitId);
148
+ assertManifestAdapter(
149
+ manifestUnitId && stringValue(deliveryUnit.boundary?.buildMarker),
150
+ 'manifest_invalid',
151
+ 'Backend federation manifest requires delivery-unit unitId and buildMarker.',
152
+ );
154
153
  assertVersionValue(manifestUnitId, expected.unitId, 'deliveryUnit.unitId');
155
154
  assertVersionValue(
156
155
  stringValue(deliveryUnit.boundary?.buildMarker),
@@ -214,16 +213,14 @@ export function validateLoadedBackendFederationContract(
214
213
  stringValue(deliveryUnit.top?.unitId);
215
214
  const manifestBuildMarker = stringValue(deliveryUnit.boundary?.buildMarker);
216
215
 
217
- // Only enforced when both sides declare the field: absence on either side
218
- // is a legacy manifest/expose and must stay backward compatible.
219
- assertConsistentValue(
220
- manifestUnitId,
216
+ assertVersionValue(
221
217
  stringValue(compatibility.unitId),
218
+ manifestUnitId,
222
219
  'deliveryUnit.unitId vs expose compatibility.unitId',
223
220
  );
224
- assertConsistentValue(
225
- manifestBuildMarker,
221
+ assertVersionValue(
226
222
  stringValue(compatibility.build),
223
+ manifestBuildMarker,
227
224
  'deliveryUnit.buildMarker vs expose compatibility.build',
228
225
  );
229
226
  }
@@ -3,7 +3,7 @@ import {
3
3
  evaluateCrossProjectPolicy,
4
4
  type NormalizedCrossProjectPolicy,
5
5
  resolveCrossProjectRequestObservation,
6
- } from '@modern-js/bff-core/security/cross-project-policy';
6
+ } from '@modern-js/server-runtime-extensions/bff-policy';
7
7
 
8
8
  export type ResolvedCrossProjectPolicy = NormalizedCrossProjectPolicy;
9
9
 
@@ -1,12 +1,12 @@
1
1
  import { readFileSync } from 'node:fs';
2
2
  import path from 'node:path';
3
-
3
+ import '@modern-js/server-runtime-extensions/server-config';
4
+ import type { ServerPluginAPI } from '@modern-js/server-core';
4
5
  import {
5
6
  deriveOperationVersion,
6
7
  type OperationContractSource,
7
8
  resolveCrossProjectPolicy,
8
- } from '@modern-js/bff-core';
9
- import type { ServerPluginAPI } from '@modern-js/server-core';
9
+ } from '@modern-js/server-runtime-extensions/bff-policy/node';
10
10
 
11
11
  import type { ResolvedCrossProjectPolicy } from './evaluation';
12
12
 
@@ -0,0 +1,43 @@
1
+ interface ProducerClientOptions {
2
+ requestId?: string;
3
+ requireEnvelope?: boolean;
4
+ identityBinding?: {
5
+ enabled?: boolean;
6
+ strict?: boolean;
7
+ protectedHeaders?: string[];
8
+ };
9
+ operationContract?: {
10
+ enabled?: boolean;
11
+ strict?: boolean;
12
+ requireSchemaHash?: boolean;
13
+ requireOperationVersion?: boolean;
14
+ };
15
+ }
16
+
17
+ /** Bind producer defaults once while preserving every per-call nested override. */
18
+ export function createProducerClient<
19
+ Options extends ProducerClientOptions,
20
+ Result,
21
+ >(
22
+ configure: (options: Options) => Result,
23
+ { requestId }: { requestId: string },
24
+ ) {
25
+ return (options?: Options): Result =>
26
+ configure({
27
+ requestId,
28
+ requireEnvelope: true,
29
+ ...options,
30
+ identityBinding: {
31
+ enabled: true,
32
+ strict: true,
33
+ ...options?.identityBinding,
34
+ },
35
+ operationContract: {
36
+ enabled: true,
37
+ strict: true,
38
+ requireSchemaHash: true,
39
+ requireOperationVersion: true,
40
+ ...options?.operationContract,
41
+ },
42
+ } as Options);
43
+ }
@@ -1,6 +1,7 @@
1
1
  // @effect-diagnostics nodeBuiltinImport:off strictBooleanExpressions:off
2
2
 
3
3
  import path from 'node:path';
4
+ import '@modern-js/server-runtime-extensions/server-config';
4
5
  import type { ServerPluginAPI } from '@modern-js/server-core';
5
6
  import { API_DIR, findExists, fs, isProd } from '@modern-js/utils';
6
7
 
@@ -1,6 +1,7 @@
1
1
  // @effect-diagnostics anyUnknownInErrorContext:off asyncFunction:off nodeBuiltinImport:off strictBooleanExpressions:off
2
2
 
3
3
  import path from 'node:path';
4
+ import '@modern-js/server-runtime-extensions/server-config';
4
5
  import {
5
6
  dispatchEffectBffRequest,
6
7
  type EffectApiModule,
@@ -244,3 +245,7 @@ export class EffectAdapter {
244
245
  this.handler = candidate;
245
246
  }
246
247
  }
248
+
249
+ export const createRuntimeAdapters = (api: ServerPluginAPI) => [
250
+ new EffectAdapter(api),
251
+ ];
@@ -41,9 +41,7 @@ export async function bundleBuiltEffectEntryForNode(options: {
41
41
  }`,
42
42
  );
43
43
  }
44
- const { bundleEffectEntryForNode } = await import(
45
- '../effect-source-loader/loader'
46
- );
44
+ const { bundleEffectEntryForNode } = await import('./loader');
47
45
  return bundleEffectEntryForNode({
48
46
  appDir,
49
47
  entryPath: builtEntry,
@@ -0,0 +1,39 @@
1
+ import {
2
+ extractHttpApiFromModule,
3
+ type HttpApiLike,
4
+ type HttpApiReflect,
5
+ } from '@modern-js/bff-effect/effect';
6
+ import { HttpApi } from 'effect/unstable/httpapi';
7
+ import { loadEffectSourceModule } from './loader';
8
+
9
+ type HttpApiRuntime = {
10
+ isHttpApi: (value: unknown) => boolean;
11
+ reflect: HttpApiReflect;
12
+ };
13
+
14
+ export function getHttpApiRuntime(): Promise<HttpApiRuntime> {
15
+ return Promise.resolve({
16
+ isHttpApi: HttpApi.isHttpApi,
17
+ reflect: (api, handlers) => {
18
+ if (!HttpApi.isHttpApi(api)) {
19
+ throw new TypeError('[BFF][Effect] Expected an HttpApi contract.');
20
+ }
21
+ HttpApi.reflect(api, {
22
+ onGroup: handlers.onGroup ?? (() => {}),
23
+ onEndpoint: handlers.onEndpoint,
24
+ });
25
+ },
26
+ });
27
+ }
28
+
29
+ export function loadEffectApi(options: {
30
+ appDir: string;
31
+ resourcePath: string;
32
+ onDependency?: (dependency: string) => void;
33
+ }): Promise<HttpApiLike | null> {
34
+ return getHttpApiRuntime().then(httpApiRuntime =>
35
+ loadEffectSourceModule(options).then(mod =>
36
+ extractHttpApiFromModule(mod, httpApiRuntime.isHttpApi),
37
+ ),
38
+ );
39
+ }
@@ -1,6 +1,9 @@
1
- export { resolveEffectEntryFile } from '../client-generator/paths';
2
- export { bundleEffectEntryForNode } from './loader';
3
1
  export {
4
- generateEffectClientCode,
5
- generateEffectWorkerRuntimeWrapper,
6
- } from './worker-runtime-wrapper';
2
+ bundleBuiltEffectEntryForNode,
3
+ resolveEffectEntryPaths,
4
+ } from './built-entry';
5
+ export { bundleEffectEntryForNode } from './loader';
6
+ export { resolveEffectOperationContracts } from './operation-contracts';
7
+ export { resolveEffectEntryFile } from './paths';
8
+ export { bundleEffectWorkerRuntimeSource } from './worker-runtime-source';
9
+ export { generateEffectWorkerRuntimeWrapper } from './worker-runtime-wrapper';