@bleedingdev/modern-js-plugin-bff-extensions 3.9.0-ultramodern.17 → 3.9.0-ultramodern.18

package/dist/esm/backend-federation/node.mjs

@@ -1,12 +1,14 @@
+import { evaluateNodeBackendFederationCommonJs } from "@modern-js/server-runtime-extensions/backend-federation-security/node";
 import { loadBackendFederatedEffectApi } from "./load.mjs";
-import { evaluateEffectBackendFederationCommonJs } from "./node-evaluator.mjs";
-function node_loadBackendFederatedEffectApi(options) {
+import { effectBffHostShared, withEffectBffHostShared } from "./node-shared.mjs";
+async function node_loadBackendFederatedEffectApi(options) {
     return loadBackendFederatedEffectApi({
         ...options,
+        shared: withEffectBffHostShared(options.shared),
         entryPolicy: {
             ...options.entryPolicy,
-            evaluateCommonJs: options.entryPolicy?.evaluateCommonJs ?? evaluateEffectBackendFederationCommonJs
+            evaluateCommonJs: options.entryPolicy?.evaluateCommonJs ?? evaluateNodeBackendFederationCommonJs
         }
     });
 }
-export { node_loadBackendFederatedEffectApi as loadBackendFederatedEffectApi };
+export { effectBffHostShared, node_loadBackendFederatedEffectApi as loadBackendFederatedEffectApi };

package/dist/esm/backend-federation/plugin.mjs

@@ -1,24 +1,43 @@
+import { PROVIDED_ENTRY_SCHEME, registerRemoteContainer } from "./integrity-plugin.mjs";
+function toContainer(entry) {
+    return {
+        get (id) {
+            return ()=>Promise.resolve(entry.get(id)).then((factory)=>factory());
+        },
+        init (...args) {
+            return entry.init?.(...args);
+        }
+    };
+}
 function createBackendFederationLoadEntryPlugin(options) {
+    const provided = new WeakMap();
     return {
         name: 'modernjs-backend-federation-load-entry',
-        loadEntry ({ remoteInfo }) {
-            return Promise.resolve(options.resolveEntry({
-                name: remoteInfo.name,
-                entry: remoteInfo.entry,
-                type: remoteInfo.type,
-                entryGlobalName: remoteInfo.entryGlobalName,
-                shareScope: remoteInfo.shareScope
-            })).then((entry)=>{
-                if (void 0 === entry) return;
-                return {
-                    get (id) {
-                        return ()=>Promise.resolve(entry.get(id)).then((factory)=>factory());
-                    },
-                    init (...args) {
-                        return entry.init?.(...args);
-                    }
-                };
-            });
+        afterMatchRemote ({ origin, remoteInfo }) {
+            if (void 0 === remoteInfo || !PROVIDED_ENTRY_SCHEME.test(remoteInfo.entry)) return;
+            let entries = provided.get(origin);
+            if (entries?.has(remoteInfo.name) !== true && origin.moduleCache.get(remoteInfo.name)?.remoteEntryExports !== void 0) return;
+            if (void 0 === entries) {
+                entries = new Map();
+                provided.set(origin, entries);
+            }
+            const runtimeEntries = entries;
+            let pending = runtimeEntries.get(remoteInfo.name);
+            if (void 0 === pending) {
+                pending = Promise.resolve(options.resolveEntry({
+                    name: remoteInfo.name,
+                    entry: remoteInfo.entry,
+                    type: remoteInfo.type
+                })).then((entry)=>{
+                    if (void 0 !== entry) registerRemoteContainer(origin, remoteInfo, toContainer(entry));
+                });
+                const settled = pending;
+                runtimeEntries.set(remoteInfo.name, settled);
+                settled.catch(()=>{
+                    if (runtimeEntries.get(remoteInfo.name) === settled) runtimeEntries.delete(remoteInfo.name);
+                });
+            }
+            return pending;
         }
     };
 }

package/dist/esm/backend-federation/runtime.mjs

@@ -1,90 +1,22 @@
 import { ModuleFederation } from "@module-federation/runtime";
-import { loadBackendFederationExpose } from "./entry.mjs";
-import { createBackendFederationLoadEntryPlugin } from "./plugin.mjs";
+import { createBackendFederationIntegrityPlugin } from "./integrity-plugin.mjs";
 import { collectRemotes } from "./remotes.mjs";
-function _check_private_redeclaration(obj, privateCollection) {
-    if (privateCollection.has(obj)) throw new TypeError("Cannot initialize the same private elements twice on an object");
-}
-function _class_apply_descriptor_get(receiver, descriptor) {
-    if (descriptor.get) return descriptor.get.call(receiver);
-    return descriptor.value;
-}
-function _class_apply_descriptor_set(receiver, descriptor, value) {
-    if (descriptor.set) descriptor.set.call(receiver, value);
-    else {
-        if (!descriptor.writable) throw new TypeError("attempted to set read only private field");
-        descriptor.value = value;
-    }
-}
-function _class_extract_field_descriptor(receiver, privateMap, action) {
-    if (!privateMap.has(receiver)) throw new TypeError("attempted to " + action + " private field on non-instance");
-    return privateMap.get(receiver);
-}
-function _class_private_field_get(receiver, privateMap) {
-    var descriptor = _class_extract_field_descriptor(receiver, privateMap, "get");
-    return _class_apply_descriptor_get(receiver, descriptor);
-}
-function _class_private_field_init(obj, privateMap, value) {
-    _check_private_redeclaration(obj, privateMap);
-    privateMap.set(obj, value);
-}
-function _class_private_field_set(receiver, privateMap, value) {
-    var descriptor = _class_extract_field_descriptor(receiver, privateMap, "set");
-    _class_apply_descriptor_set(receiver, descriptor, value);
-    return value;
-}
-let nextRuntimeId = 0;
-function parseRemoteRequest(request) {
-    const [remoteName, ...exposeParts] = request.split('/');
-    if (void 0 === remoteName || 0 === remoteName.length || 0 === exposeParts.length) return;
-    return remoteName;
-}
-function createLocalEntryPlugin(options, remotes) {
-    return createBackendFederationLoadEntryPlugin({
-        resolveEntry (resolvedRemote) {
-            const remote = remotes.find((candidate)=>candidate.name === resolvedRemote.name);
-            if (void 0 === remote) return;
-            return {
-                get (expose) {
-                    return ()=>loadBackendFederationExpose(remote, expose, options);
-                }
-            };
-        }
-    });
-}
-function isolateRegisteredRemoteEntries(remotes) {
-    const runtimeId = nextRuntimeId;
-    nextRuntimeId += 1;
-    return remotes.map((remote)=>({
-            ...remote,
-            entry: `${remote.entry}#modernjs-backend-runtime-${runtimeId}`
-        }));
-}
-var _remoteNames = /*#__PURE__*/ new WeakMap();
-class BackendFederationRuntime extends ModuleFederation {
-    loadRemote(request, loadOptions) {
-        const remoteName = parseRemoteRequest(request);
-        if (void 0 === remoteName) return Promise.reject(new Error(`[BFF][Effect] Invalid backend federation request ${request}.`));
-        if (!_class_private_field_get(this, _remoteNames).has(remoteName)) return Promise.reject(new Error(`[BFF][Effect] Missing backend federation remote ${remoteName}.`));
-        return super.loadRemote(request, loadOptions);
-    }
-    constructor(options, remotes){
-        super({
-            name: options.hostName,
-            remotes: isolateRegisteredRemoteEntries(remotes),
-            shared: {},
-            plugins: [
-                createLocalEntryPlugin(options, remotes)
-            ]
-        }), _class_private_field_init(this, _remoteNames, {
-            writable: true,
-            value: void 0
-        });
-        _class_private_field_set(this, _remoteNames, new Set(remotes.map((remote)=>remote.name)));
-    }
-}
 function createBackendFederationRuntime(options) {
     const remotes = collectRemotes(options);
-    return new BackendFederationRuntime(options, remotes);
+    return new ModuleFederation({
+        name: options.hostName,
+        remotes: remotes.map(({ name, entry, type })=>({
+                name,
+                entry,
+                ...type ? {
+                    type
+                } : {}
+            })),
+        shared: options.shared ?? {},
+        plugins: [
+            ...options.plugins ?? [],
+            createBackendFederationIntegrityPlugin(options, remotes)
+        ]
+    });
 }
 export { createBackendFederationRuntime };

package/dist/esm/backend-federation-manifest/load.mjs

@@ -129,6 +129,9 @@ async function loadBackendFederatedEffectApiFromManifest(options) {
             ...options.plugins ? {
                 plugins: options.plugins
             } : {},
+            ...options.shared ? {
+                shared: options.shared
+            } : {},
             entryPolicy: {
                 ...options.entryPolicy,
                 signal: scope.signal,

package/dist/esm/backend-federation-manifest/node.mjs

@@ -1,11 +1,13 @@
-import { evaluateEffectBackendFederationCommonJs } from "../backend-federation/node-evaluator.mjs";
+import { evaluateNodeBackendFederationCommonJs } from "@modern-js/server-runtime-extensions/backend-federation-security/node";
+import { withEffectBffHostShared } from "../backend-federation/node-shared.mjs";
 import { loadBackendFederatedEffectApiFromManifest } from "./load.mjs";
-function node_loadBackendFederatedEffectApiFromManifest(options) {
+async function node_loadBackendFederatedEffectApiFromManifest(options) {
     return loadBackendFederatedEffectApiFromManifest({
         ...options,
+        shared: withEffectBffHostShared(options.shared),
         entryPolicy: {
             ...options.entryPolicy,
-            evaluateCommonJs: options.entryPolicy?.evaluateCommonJs ?? evaluateEffectBackendFederationCommonJs
+            evaluateCommonJs: options.entryPolicy?.evaluateCommonJs ?? evaluateNodeBackendFederationCommonJs
         }
     });
 }

package/dist/esm/backend-federation-manifest/remote.mjs

@@ -31,13 +31,7 @@ function resolveBackendFederationRemoteFromManifest(manifest, remoteOverride = {
         ...verification ? {
             verification
         } : {},
-        ...remoteOverride.entryGlobalName ? {
-            entryGlobalName: remoteOverride.entryGlobalName
-        } : {},
-        expose,
-        ...remoteOverride.shareScope ? {
-            shareScope: remoteOverride.shareScope
-        } : {}
+        expose
     };
 }
 export { resolveBackendFederationRemoteFromManifest };

package/dist/esm/effect-source-loader/loader.mjs

@@ -79,6 +79,7 @@ const nodeBuiltins = new Set([
     ...builtinModules.map((name)=>`node:${name}`)
 ]);
 const dependencyResolutionMarker = 'modern-js-effect-dependency-resolution';
+const BFF_RUNTIME_PACKAGE = /^@modern-js\/(?:bff-effect|plugin-bff)(?:\/|$)/;
 async function isEsmOnlyFile(filename) {
     const extension = node_path.extname(filename).toLowerCase();
     if ('.mjs' === extension || '.mts' === extension) return true;
@@ -107,6 +108,10 @@ function externalizeInstalledDependencies(options) {
             buildApi.onResolve({
                 filter: /.*/
             }, async (args)=>{
+                if (BFF_RUNTIME_PACKAGE.test(args.path)) return {
+                    external: true,
+                    path: args.path
+                };
                 if (!isBareSpecifier(args.path) || nodeBuiltins.has(args.path) || args.pluginData?.[dependencyResolutionMarker] === true) return nodeBuiltins.has(args.path) ? {
                     external: true,
                     path: args.path

package/dist/esm-node/backend-federation/edge.mjs

@@ -3,7 +3,7 @@ import { BACKEND_FEDERATION_CONTRACT_VERSION, BACKEND_FEDERATION_EFFECT_EXPOSE,
 import { createBackendFederationLoadEntryPlugin, createBackendFederationRuntime } from "./edge-runtime.mjs";
 import { normalizeExpose } from "./utils.mjs";
 function loadBackendFederatedEffectApi(options) {
-    if (void 0 !== options.runtime || void 0 !== options.entryPolicy) return Promise.reject(new Error('[BFF][Effect] Edge backend federation does not execute custom runtimes or entry evaluators. Register a static or service-binding entry provider.'));
+    if (void 0 !== options.runtime || void 0 !== options.entryPolicy || void 0 !== options.shared) return Promise.reject(new Error('[BFF][Effect] Edge backend federation does not execute custom runtimes, entry evaluators or host shares. Register a static or service-binding entry provider.'));
     const remoteName = options.remote?.name ?? options.remoteName;
     if (void 0 === remoteName || 0 === remoteName.length) return Promise.reject(new Error('[BFF][Effect] Missing backend federation remote name.'));
     if (!options.expected?.unitId || !options.expected.buildMarker) return Promise.reject(new Error('[BFF][Effect] Backend federation requires expected.unitId and expected.buildMarker.'));

package/dist/esm-node/backend-federation/integrity-plugin.mjs

@@ -0,0 +1,69 @@
+import "node:module";
+import { evaluateBackendFederationCommonJsEntry, loadVerifiedBackendFederationEntry } from "@modern-js/server-runtime-extensions/backend-federation-security";
+import { Module } from "@module-federation/runtime";
+const PROVIDED_ENTRY_SCHEME = /^(?:binding|service|static):/u;
+function decodeDataUrl(remote) {
+    const commaIndex = remote.entry.indexOf(',');
+    if (commaIndex < 0) throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} has an invalid data URL entry.`);
+    return new TextEncoder().encode(decodeURIComponent(remote.entry.slice(commaIndex + 1)));
+}
+async function importContainer(remote) {
+    const namespace = await import(remote.entry);
+    return namespace.default ?? namespace;
+}
+function loadContainer(remote, options) {
+    const verified = Boolean(remote.verification || options.entryPolicy?.expected);
+    const scheme = /^[a-z][a-z0-9+.-]*:/iu.exec(remote.entry)?.[0].toLowerCase();
+    if ('https:' === scheme || 'http:' === scheme) {
+        if (!verified) throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} requires verified entry bytes before network execution.`);
+        return loadVerifiedBackendFederationEntry({
+            ...options.entryPolicy,
+            remote,
+            ...remote.verification ? {
+                verification: remote.verification
+            } : {}
+        });
+    }
+    if (verified) throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} declares entry verification, but only http(s) entries are fetched and verified.`);
+    if ('data:' === scheme && 'module' !== remote.type) return Promise.resolve(evaluateBackendFederationCommonJsEntry(remote, decodeDataUrl(remote), options.entryPolicy?.evaluateCommonJs));
+    if ('data:' === scheme || 'file:' === scheme) return importContainer(remote);
+    throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} uses unsupported entry ${remote.entry}. Use a verified http(s) entry, a data: or file: entry, or a binding:, service: or static: entry served by createBackendFederationLoadEntryPlugin().`);
+}
+function registerRemoteContainer(origin, remoteInfo, container) {
+    const module = new Module({
+        host: origin,
+        remoteInfo
+    });
+    module.remoteEntryExports = container;
+    origin.moduleCache.set(remoteInfo.name, module);
+}
+function createBackendFederationIntegrityPlugin(options, remotes) {
+    const loading = new Map();
+    const register = async (origin, remoteInfo)=>{
+        const remote = remotes.find((candidate)=>candidate.name === remoteInfo.name);
+        if (void 0 === remote) throw new Error(`[BFF][Effect] Missing backend federation remote ${remoteInfo.name}.`);
+        if (PROVIDED_ENTRY_SCHEME.test(remote.entry)) {
+            if (origin.moduleCache.get(remote.name)?.remoteEntryExports === void 0) throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} has no entry provider for ${remote.entry}. Pass createBackendFederationLoadEntryPlugin() in plugins.`);
+            return;
+        }
+        const container = await loadContainer(remote, options);
+        if ('function' != typeof container?.get) throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} entry must expose get().`);
+        registerRemoteContainer(origin, remoteInfo, container);
+    };
+    return {
+        name: 'modernjs-backend-federation-integrity',
+        afterMatchRemote ({ origin, remoteInfo }) {
+            if (void 0 === remoteInfo) return;
+            let pending = loading.get(remoteInfo.name);
+            if (void 0 === pending) {
+                pending = register(origin, remoteInfo);
+                loading.set(remoteInfo.name, pending);
+                pending.catch(()=>{
+                    if (loading.get(remoteInfo.name) === pending) loading.delete(remoteInfo.name);
+                });
+            }
+            return pending;
+        }
+    };
+}
+export { PROVIDED_ENTRY_SCHEME, createBackendFederationIntegrityPlugin, registerRemoteContainer };

package/dist/esm-node/backend-federation/node-shared.mjs

@@ -0,0 +1,42 @@
+import "node:module";
+import { createRequire } from "node:module";
+const fromAdapter = createRequire(import.meta.url);
+const effectPackageJson = fromAdapter.resolve('@modern-js/bff-effect/package.json');
+const fromEffectPackage = createRequire(effectPackageJson);
+let hostShared;
+function effectBffHostShared() {
+    if (void 0 !== hostShared) return hostShared;
+    const { EFFECT_BFF_CONTEXT_STORAGE_SHARE, EFFECT_BFF_HANDLER_FACTORY_REGISTRY_SHARE } = fromEffectPackage('@modern-js/bff-effect/effect-edge');
+    const { getEffectContextStorage } = fromEffectPackage('@modern-js/bff-effect/context');
+    const handlerFactoryRegistry = fromEffectPackage("#effect-entry-shape-registry");
+    const version = fromAdapter(effectPackageJson).version;
+    hostShared = {
+        [EFFECT_BFF_HANDLER_FACTORY_REGISTRY_SHARE]: {
+            version,
+            lib: ()=>handlerFactoryRegistry,
+            shareConfig: {
+                singleton: true,
+                requiredVersion: false
+            }
+        },
+        [EFFECT_BFF_CONTEXT_STORAGE_SHARE]: {
+            version,
+            lib: getEffectContextStorage,
+            shareConfig: {
+                singleton: true,
+                requiredVersion: false
+            }
+        }
+    };
+    return hostShared;
+}
+function withEffectBffHostShared(shared) {
+    const host = effectBffHostShared();
+    const reserved = Object.keys(host).find((name)=>shared && name in shared);
+    if (void 0 !== reserved) throw new Error(`[BFF][Effect] Share ${reserved} is reserved for the Node host. Remove it from options.shared.`);
+    return {
+        ...shared,
+        ...host
+    };
+}
+export { effectBffHostShared, withEffectBffHostShared };

package/dist/esm-node/backend-federation/node.mjs

@@ -1,13 +1,15 @@
 import "node:module";
+import { evaluateNodeBackendFederationCommonJs } from "@modern-js/server-runtime-extensions/backend-federation-security/node";
 import { loadBackendFederatedEffectApi } from "./load.mjs";
-import { evaluateEffectBackendFederationCommonJs } from "./node-evaluator.mjs";
-function node_loadBackendFederatedEffectApi(options) {
+import { effectBffHostShared, withEffectBffHostShared } from "./node-shared.mjs";
+async function node_loadBackendFederatedEffectApi(options) {
     return loadBackendFederatedEffectApi({
         ...options,
+        shared: withEffectBffHostShared(options.shared),
         entryPolicy: {
             ...options.entryPolicy,
-            evaluateCommonJs: options.entryPolicy?.evaluateCommonJs ?? evaluateEffectBackendFederationCommonJs
+            evaluateCommonJs: options.entryPolicy?.evaluateCommonJs ?? evaluateNodeBackendFederationCommonJs
         }
     });
 }
-export { node_loadBackendFederatedEffectApi as loadBackendFederatedEffectApi };
+export { effectBffHostShared, node_loadBackendFederatedEffectApi as loadBackendFederatedEffectApi };

package/dist/esm-node/backend-federation/plugin.mjs

@@ -1,25 +1,44 @@
 import "node:module";
+import { PROVIDED_ENTRY_SCHEME, registerRemoteContainer } from "./integrity-plugin.mjs";
+function toContainer(entry) {
+    return {
+        get (id) {
+            return ()=>Promise.resolve(entry.get(id)).then((factory)=>factory());
+        },
+        init (...args) {
+            return entry.init?.(...args);
+        }
+    };
+}
 function createBackendFederationLoadEntryPlugin(options) {
+    const provided = new WeakMap();
     return {
         name: 'modernjs-backend-federation-load-entry',
-        loadEntry ({ remoteInfo }) {
-            return Promise.resolve(options.resolveEntry({
-                name: remoteInfo.name,
-                entry: remoteInfo.entry,
-                type: remoteInfo.type,
-                entryGlobalName: remoteInfo.entryGlobalName,
-                shareScope: remoteInfo.shareScope
-            })).then((entry)=>{
-                if (void 0 === entry) return;
-                return {
-                    get (id) {
-                        return ()=>Promise.resolve(entry.get(id)).then((factory)=>factory());
-                    },
-                    init (...args) {
-                        return entry.init?.(...args);
-                    }
-                };
-            });
+        afterMatchRemote ({ origin, remoteInfo }) {
+            if (void 0 === remoteInfo || !PROVIDED_ENTRY_SCHEME.test(remoteInfo.entry)) return;
+            let entries = provided.get(origin);
+            if (entries?.has(remoteInfo.name) !== true && origin.moduleCache.get(remoteInfo.name)?.remoteEntryExports !== void 0) return;
+            if (void 0 === entries) {
+                entries = new Map();
+                provided.set(origin, entries);
+            }
+            const runtimeEntries = entries;
+            let pending = runtimeEntries.get(remoteInfo.name);
+            if (void 0 === pending) {
+                pending = Promise.resolve(options.resolveEntry({
+                    name: remoteInfo.name,
+                    entry: remoteInfo.entry,
+                    type: remoteInfo.type
+                })).then((entry)=>{
+                    if (void 0 !== entry) registerRemoteContainer(origin, remoteInfo, toContainer(entry));
+                });
+                const settled = pending;
+                runtimeEntries.set(remoteInfo.name, settled);
+                settled.catch(()=>{
+                    if (runtimeEntries.get(remoteInfo.name) === settled) runtimeEntries.delete(remoteInfo.name);
+                });
+            }
+            return pending;
         }
     };
 }

package/dist/esm-node/backend-federation/runtime.mjs

@@ -1,91 +1,23 @@
 import "node:module";
 import { ModuleFederation } from "@module-federation/runtime";
-import { loadBackendFederationExpose } from "./entry.mjs";
-import { createBackendFederationLoadEntryPlugin } from "./plugin.mjs";
+import { createBackendFederationIntegrityPlugin } from "./integrity-plugin.mjs";
 import { collectRemotes } from "./remotes.mjs";
-function _check_private_redeclaration(obj, privateCollection) {
-    if (privateCollection.has(obj)) throw new TypeError("Cannot initialize the same private elements twice on an object");
-}
-function _class_apply_descriptor_get(receiver, descriptor) {
-    if (descriptor.get) return descriptor.get.call(receiver);
-    return descriptor.value;
-}
-function _class_apply_descriptor_set(receiver, descriptor, value) {
-    if (descriptor.set) descriptor.set.call(receiver, value);
-    else {
-        if (!descriptor.writable) throw new TypeError("attempted to set read only private field");
-        descriptor.value = value;
-    }
-}
-function _class_extract_field_descriptor(receiver, privateMap, action) {
-    if (!privateMap.has(receiver)) throw new TypeError("attempted to " + action + " private field on non-instance");
-    return privateMap.get(receiver);
-}
-function _class_private_field_get(receiver, privateMap) {
-    var descriptor = _class_extract_field_descriptor(receiver, privateMap, "get");
-    return _class_apply_descriptor_get(receiver, descriptor);
-}
-function _class_private_field_init(obj, privateMap, value) {
-    _check_private_redeclaration(obj, privateMap);
-    privateMap.set(obj, value);
-}
-function _class_private_field_set(receiver, privateMap, value) {
-    var descriptor = _class_extract_field_descriptor(receiver, privateMap, "set");
-    _class_apply_descriptor_set(receiver, descriptor, value);
-    return value;
-}
-let nextRuntimeId = 0;
-function parseRemoteRequest(request) {
-    const [remoteName, ...exposeParts] = request.split('/');
-    if (void 0 === remoteName || 0 === remoteName.length || 0 === exposeParts.length) return;
-    return remoteName;
-}
-function createLocalEntryPlugin(options, remotes) {
-    return createBackendFederationLoadEntryPlugin({
-        resolveEntry (resolvedRemote) {
-            const remote = remotes.find((candidate)=>candidate.name === resolvedRemote.name);
-            if (void 0 === remote) return;
-            return {
-                get (expose) {
-                    return ()=>loadBackendFederationExpose(remote, expose, options);
-                }
-            };
-        }
-    });
-}
-function isolateRegisteredRemoteEntries(remotes) {
-    const runtimeId = nextRuntimeId;
-    nextRuntimeId += 1;
-    return remotes.map((remote)=>({
-            ...remote,
-            entry: `${remote.entry}#modernjs-backend-runtime-${runtimeId}`
-        }));
-}
-var _remoteNames = /*#__PURE__*/ new WeakMap();
-class BackendFederationRuntime extends ModuleFederation {
-    loadRemote(request, loadOptions) {
-        const remoteName = parseRemoteRequest(request);
-        if (void 0 === remoteName) return Promise.reject(new Error(`[BFF][Effect] Invalid backend federation request ${request}.`));
-        if (!_class_private_field_get(this, _remoteNames).has(remoteName)) return Promise.reject(new Error(`[BFF][Effect] Missing backend federation remote ${remoteName}.`));
-        return super.loadRemote(request, loadOptions);
-    }
-    constructor(options, remotes){
-        super({
-            name: options.hostName,
-            remotes: isolateRegisteredRemoteEntries(remotes),
-            shared: {},
-            plugins: [
-                createLocalEntryPlugin(options, remotes)
-            ]
-        }), _class_private_field_init(this, _remoteNames, {
-            writable: true,
-            value: void 0
-        });
-        _class_private_field_set(this, _remoteNames, new Set(remotes.map((remote)=>remote.name)));
-    }
-}
 function createBackendFederationRuntime(options) {
     const remotes = collectRemotes(options);
-    return new BackendFederationRuntime(options, remotes);
+    return new ModuleFederation({
+        name: options.hostName,
+        remotes: remotes.map(({ name, entry, type })=>({
+                name,
+                entry,
+                ...type ? {
+                    type
+                } : {}
+            })),
+        shared: options.shared ?? {},
+        plugins: [
+            ...options.plugins ?? [],
+            createBackendFederationIntegrityPlugin(options, remotes)
+        ]
+    });
 }
 export { createBackendFederationRuntime };

package/dist/esm-node/backend-federation-manifest/load.mjs

@@ -130,6 +130,9 @@ async function loadBackendFederatedEffectApiFromManifest(options) {
             ...options.plugins ? {
                 plugins: options.plugins
             } : {},
+            ...options.shared ? {
+                shared: options.shared
+            } : {},
             entryPolicy: {
                 ...options.entryPolicy,
                 signal: scope.signal,

package/dist/esm-node/backend-federation-manifest/node.mjs

@@ -1,12 +1,14 @@
 import "node:module";
-import { evaluateEffectBackendFederationCommonJs } from "../backend-federation/node-evaluator.mjs";
+import { evaluateNodeBackendFederationCommonJs } from "@modern-js/server-runtime-extensions/backend-federation-security/node";
+import { withEffectBffHostShared } from "../backend-federation/node-shared.mjs";
 import { loadBackendFederatedEffectApiFromManifest } from "./load.mjs";
-function node_loadBackendFederatedEffectApiFromManifest(options) {
+async function node_loadBackendFederatedEffectApiFromManifest(options) {
     return loadBackendFederatedEffectApiFromManifest({
         ...options,
+        shared: withEffectBffHostShared(options.shared),
         entryPolicy: {
             ...options.entryPolicy,
-            evaluateCommonJs: options.entryPolicy?.evaluateCommonJs ?? evaluateEffectBackendFederationCommonJs
+            evaluateCommonJs: options.entryPolicy?.evaluateCommonJs ?? evaluateNodeBackendFederationCommonJs
         }
     });
 }

package/dist/esm-node/backend-federation-manifest/remote.mjs

@@ -32,13 +32,7 @@ function resolveBackendFederationRemoteFromManifest(manifest, remoteOverride = {
         ...verification ? {
             verification
         } : {},
-        ...remoteOverride.entryGlobalName ? {
-            entryGlobalName: remoteOverride.entryGlobalName
-        } : {},
-        expose,
-        ...remoteOverride.shareScope ? {
-            shareScope: remoteOverride.shareScope
-        } : {}
+        expose
     };
 }
 export { resolveBackendFederationRemoteFromManifest };

package/dist/esm-node/effect-source-loader/loader.mjs

@@ -80,6 +80,7 @@ const nodeBuiltins = new Set([
     ...builtinModules.map((name)=>`node:${name}`)
 ]);
 const dependencyResolutionMarker = 'modern-js-effect-dependency-resolution';
+const BFF_RUNTIME_PACKAGE = /^@modern-js\/(?:bff-effect|plugin-bff)(?:\/|$)/;
 async function isEsmOnlyFile(filename) {
     const extension = node_path.extname(filename).toLowerCase();
     if ('.mjs' === extension || '.mts' === extension) return true;
@@ -108,6 +109,10 @@ function externalizeInstalledDependencies(options) {
             buildApi.onResolve({
                 filter: /.*/
             }, async (args)=>{
+                if (BFF_RUNTIME_PACKAGE.test(args.path)) return {
+                    external: true,
+                    path: args.path
+                };
                 if (!isBareSpecifier(args.path) || nodeBuiltins.has(args.path) || args.pluginData?.[dependencyResolutionMarker] === true) return nodeBuiltins.has(args.path) ? {
                     external: true,
                     path: args.path