@bleedingdev/modern-js-plugin-bff-extensions 3.9.0-ultramodern.2 → 3.9.0-ultramodern.20

package/README.md

@@ -1,7 +1,7 @@
 # @modern-js/plugin-bff-extensions
 
 Fork-owned integration extensions for UltraModern.js BFFs. This package keeps
-Effect adapter lifecycle integration, source and client generation,
+Effect server lifecycle integration, server source loading,
 cross-project policy, Hono middleware, and backend federation out of the
 upstream-owned `@modern-js/plugin-bff` implementation.
 
@@ -12,18 +12,38 @@ upstream Modern.js project.
 ## Entry points
 
 - `/hono` exposes the peer-independent Hono route binder.
-- `/cross-project-policy`, `/effect-adapter`, `/effect-source-loader`, and
-  `/client-generator` expose Node tooling and server integration.
+- `/cross-project-policy`, `/effect-server`, and `/effect-source-loader` expose Node tooling and server integration.
 - `/cross-project-generation` renders the generated producer client runtime
   consumed by `@modern-js/plugin-bff`.
 - `/backend-federation` exposes the portable federation runtime, while
   `/backend-federation/edge` rejects Node evaluators and non-binding remotes.
-- `/backend-federation/node` enables the hardened Node entry evaluator.
+  The runtime is a real Module Federation instance: caller `plugins` see its
+  lifecycle hooks, and a last integrity plugin loads each remote once per
+  runtime. `http(s):` entries must be SHA-256 and length verified, `data:` and
+  `file:` entries are evaluated or imported, and `binding:`, `service:` and
+  `static:` entries come from `createBackendFederationLoadEntryPlugin()`. Any
+  other entry fails with an error that names the remote. CommonJS containers are
+  evaluated per runtime; ES module containers are cached by Node per URL and
+  therefore shared between runtimes.
+- `/backend-federation/node` enables the hardened Node entry evaluator and
+  shares the Effect handler factory registry with remote containers through
+  their `init()` share scope.
 - `/backend-federation-manifest` exposes manifest contracts and resolution,
   while
   `/backend-federation-manifest/node` enables its hardened Node evaluator.
+  `loadBackendFederatedEffectApiFromManifest` enforces one shared
+  manifest-plus-entry load deadline (default 10s, override via `timeoutMs`,
+  0 to opt out) instead of resetting a fresh timeout per network hop. The
+  load settles on that shared deadline/abort even when a caller-pinned
+  entry provider plugin, its `init`/`get`, or a custom runtime's `loadRemote`
+  never settles; it cannot stop that uncooperative work from still running,
+  only stop waiting on it.
 
 Effect and its OpenTelemetry integration are exact-cohort optional peers. A
 Hono-only consumer can import `/hono` without installing Effect.
 
-There is deliberately no adapter-kit or re-export-only compatibility layer.
+There is deliberately no adapter registry or re-export-only compatibility layer.
+
+Effect server tooling derives operation-contract metadata without generating
+client code. Import shared `HttpApi` contracts in clients and use native
+`HttpApiClient.make`; the former `/client-generator` entry point is removed.

package/dist/cjs/backend-federation/edge-runtime.js

@@ -29,8 +29,7 @@ var __webpack_exports__ = {};
 __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
     createBackendFederationLoadEntryPlugin: ()=>createBackendFederationLoadEntryPlugin,
-    createBackendFederationRuntime: ()=>createBackendFederationRuntime,
-    createBackendFederationRuntimeForLoad: ()=>createBackendFederationRuntimeForLoad
+    createBackendFederationRuntime: ()=>createBackendFederationRuntime
 });
 const external_validate_loaded_js_namespaceObject = require("./validate-loaded.js");
 function _check_private_redeclaration(obj, privateCollection) {
@@ -100,7 +99,7 @@ async function resolveEdgeEntry(plugins, remote) {
     }
     throw new Error(`[BFF][Effect] Missing static or service-binding entry provider for backend federation remote ${remote.name}.`);
 }
-var _entries = /*#__PURE__*/ new WeakMap(), _expected = /*#__PURE__*/ new WeakMap(), _hostName = /*#__PURE__*/ new WeakMap(), _allowMissingIdentityMetadata = /*#__PURE__*/ new WeakMap(), _modules = /*#__PURE__*/ new WeakMap(), _plugins = /*#__PURE__*/ new WeakMap(), _remotes = /*#__PURE__*/ new WeakMap(), _loadEntry = /*#__PURE__*/ new WeakSet(), _loadModule = /*#__PURE__*/ new WeakSet();
+var _entries = /*#__PURE__*/ new WeakMap(), _expected = /*#__PURE__*/ new WeakMap(), _hostName = /*#__PURE__*/ new WeakMap(), _modules = /*#__PURE__*/ new WeakMap(), _plugins = /*#__PURE__*/ new WeakMap(), _remotes = /*#__PURE__*/ new WeakMap(), _loadEntry = /*#__PURE__*/ new WeakSet(), _loadModule = /*#__PURE__*/ new WeakSet();
 class EdgeBackendFederationRuntime {
     async loadRemote(request) {
         const existing = _class_private_field_get(this, _modules).get(request);
@@ -127,10 +126,6 @@ class EdgeBackendFederationRuntime {
             writable: true,
             value: void 0
         });
-        _class_private_field_init(this, _allowMissingIdentityMetadata, {
-            writable: true,
-            value: void 0
-        });
         _class_private_field_init(this, _modules, {
             writable: true,
             value: void 0
@@ -146,7 +141,6 @@ class EdgeBackendFederationRuntime {
         _class_private_field_set(this, _entries, new Map());
         _class_private_field_set(this, _modules, new Map());
         if (void 0 !== options.entryPolicy) throw new Error('[BFF][Effect] Edge backend federation does not execute entry evaluators. Register a static or service-binding entry provider.');
-        _class_private_field_set(this, _allowMissingIdentityMetadata, true === options.allowMissingIdentityMetadata);
         _class_private_field_set(this, _expected, options.expected);
         _class_private_field_set(this, _hostName, options.hostName);
         _class_private_field_set(this, _plugins, options.plugins ?? []);
@@ -185,7 +179,6 @@ function loadModule(request) {
         if ('function' != typeof factory) throw new Error(`[BFF][Effect] Backend federation expose ${remote.name}/${expose.replace(/^\.\//u, '')} must load factory function.`);
         const loaded = await factory();
         return (0, external_validate_loaded_js_namespaceObject.validateLoadedBackendFederatedEffectApi)(loaded, {
-            allowMissingIdentityMetadata: _class_private_field_get(this, _allowMissingIdentityMetadata),
             expected: _class_private_field_get(this, _expected),
             remoteName,
             remoteRequest: request
@@ -214,16 +207,11 @@ function createBackendFederationRuntime(options) {
     if (void 0 === options.expected || 'string' != typeof options.expected.unitId || 0 === options.expected.unitId.length || 'string' != typeof options.expected.buildMarker || 0 === options.expected.buildMarker.length) throw new Error('[BFF][Effect] Edge backend federation runtime requires expected.unitId and expected.buildMarker.');
     return new EdgeBackendFederationRuntime(options);
 }
-function createBackendFederationRuntimeForLoad(options) {
-    return new EdgeBackendFederationRuntime(options);
-}
 exports.createBackendFederationLoadEntryPlugin = __webpack_exports__.createBackendFederationLoadEntryPlugin;
 exports.createBackendFederationRuntime = __webpack_exports__.createBackendFederationRuntime;
-exports.createBackendFederationRuntimeForLoad = __webpack_exports__.createBackendFederationRuntimeForLoad;
 for(var __rspack_i in __webpack_exports__)if (-1 === [
     "createBackendFederationLoadEntryPlugin",
-    "createBackendFederationRuntime",
-    "createBackendFederationRuntimeForLoad"
+    "createBackendFederationRuntime"
 ].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
 Object.defineProperty(exports, '__esModule', {
     value: true

package/dist/cjs/backend-federation/edge.js

@@ -28,30 +28,29 @@ var __webpack_require__ = {};
 var __webpack_exports__ = {};
 __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
-    BACKEND_FEDERATION_CONTRACT_VERSION: ()=>universal_namespaceObject.BACKEND_FEDERATION_CONTRACT_VERSION,
-    BACKEND_FEDERATION_EFFECT_EXPOSE: ()=>universal_namespaceObject.BACKEND_FEDERATION_EFFECT_EXPOSE,
-    BACKEND_FEDERATION_MANIFEST_FILE: ()=>universal_namespaceObject.BACKEND_FEDERATION_MANIFEST_FILE,
-    BACKEND_FEDERATION_NODE_ADAPTER_VERSION: ()=>universal_namespaceObject.BACKEND_FEDERATION_NODE_ADAPTER_VERSION,
+    BACKEND_FEDERATION_CONTRACT_VERSION: ()=>backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_CONTRACT_VERSION,
+    BACKEND_FEDERATION_EFFECT_EXPOSE: ()=>backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_EFFECT_EXPOSE,
+    BACKEND_FEDERATION_MANIFEST_FILE: ()=>backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_MANIFEST_FILE,
+    BACKEND_FEDERATION_NODE_ADAPTER_VERSION: ()=>backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_NODE_ADAPTER_VERSION,
     createBackendFederationLoadEntryPlugin: ()=>external_edge_runtime_js_namespaceObject.createBackendFederationLoadEntryPlugin,
     createBackendFederationRuntime: ()=>external_edge_runtime_js_namespaceObject.createBackendFederationRuntime,
     loadBackendFederatedEffectApi: ()=>loadBackendFederatedEffectApi,
     validateExpectedBackendFederationIdentity: ()=>external_identity_js_namespaceObject.validateExpectedBackendFederationIdentity
 });
-const universal_namespaceObject = require("@modern-js/utils/universal");
+const backend_federation_contracts_namespaceObject = require("@modern-js/backend-federation-contracts");
 const external_edge_runtime_js_namespaceObject = require("./edge-runtime.js");
-const external_legacy_warning_js_namespaceObject = require("./legacy-warning.js");
 const external_utils_js_namespaceObject = require("./utils.js");
 const external_identity_js_namespaceObject = require("./identity.js");
 function loadBackendFederatedEffectApi(options) {
-    if (void 0 !== options.runtime || void 0 !== options.entryPolicy) return Promise.reject(new Error('[BFF][Effect] Edge backend federation does not execute custom runtimes or entry evaluators. Register a static or service-binding entry provider.'));
+    if (void 0 !== options.runtime || void 0 !== options.entryPolicy || void 0 !== options.shared) return Promise.reject(new Error('[BFF][Effect] Edge backend federation does not execute custom runtimes, entry evaluators or host shares. Register a static or service-binding entry provider.'));
     const remoteName = options.remote?.name ?? options.remoteName;
     if (void 0 === remoteName || 0 === remoteName.length) return Promise.reject(new Error('[BFF][Effect] Missing backend federation remote name.'));
-    if (void 0 === options.expected) console.warn(external_legacy_warning_js_namespaceObject.LEGACY_LOAD_WARNING);
-    const expose = options.expose ?? options.remote?.expose ?? universal_namespaceObject.BACKEND_FEDERATION_EFFECT_EXPOSE;
+    if (!options.expected?.unitId || !options.expected.buildMarker) return Promise.reject(new Error('[BFF][Effect] Backend federation requires expected.unitId and expected.buildMarker.'));
+    const expose = options.expose ?? options.remote?.expose ?? backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_EFFECT_EXPOSE;
     const remoteRequest = `${remoteName}/${(0, external_utils_js_namespaceObject.normalizeExpose)(expose)}`;
     let runtime;
     try {
-        runtime = (0, external_edge_runtime_js_namespaceObject.createBackendFederationRuntimeForLoad)(options);
+        runtime = (0, external_edge_runtime_js_namespaceObject.createBackendFederationRuntime)(options);
     } catch (error) {
         return Promise.reject(error);
     }

package/dist/cjs/backend-federation/identity.js

@@ -28,53 +28,48 @@ var __webpack_require__ = {};
 var __webpack_exports__ = {};
 __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
+    backendFederationCompatibility: ()=>backendFederationCompatibility,
     formatBackendFederationIdentityIssues: ()=>formatBackendFederationIdentityIssues,
+    validateBackendFederationCompatibility: ()=>validateBackendFederationCompatibility,
     validateExpectedBackendFederationIdentity: ()=>validateExpectedBackendFederationIdentity
 });
 const external_utils_js_namespaceObject = require("./utils.js");
-function validateExpectedBackendFederationIdentity(loaded, expected, options = {}) {
-    const allowMissing = true === options.allowMissingIdentityMetadata;
-    const issues = [];
+function backendFederationCompatibility(loaded) {
     const contract = (0, external_utils_js_namespaceObject.isRecord)(loaded) ? loaded.backendFederationContract : void 0;
     const compatibility = (0, external_utils_js_namespaceObject.isRecord)(contract) ? contract.compatibility : void 0;
-    if (!(0, external_utils_js_namespaceObject.isRecord)(compatibility)) {
-        if (allowMissing) return [];
-        return [
+    return (0, external_utils_js_namespaceObject.isRecord)(compatibility) ? compatibility : void 0;
+}
+function validateBackendFederationCompatibility(compatibility, expected) {
+    return Object.entries(expected).flatMap(([field, value])=>void 0 === value || 'string' == typeof compatibility[field] && compatibility[field].length > 0 && compatibility[field] === value ? [] : [
             {
-                path: 'backendFederationContract.compatibility',
-                message: 'loaded module declares no compatibility metadata; delivery-unit identity cannot be validated'
+                path: `backendFederationContract.compatibility.${field}`,
+                message: `expected ${value}, received ${'string' == typeof compatibility[field] ? compatibility[field] : typeof compatibility[field]}`
             }
-        ];
-    }
-    const unitId = compatibility.unitId;
-    if ('string' != typeof unitId || 0 === unitId.length) {
-        if (!allowMissing) issues.push({
-            path: 'backendFederationContract.compatibility.unitId',
-            message: `missing delivery-unit id; expected ${expected.unitId}`
-        });
-    } else if (unitId !== expected.unitId) issues.push({
-        path: 'backendFederationContract.compatibility.unitId',
-        message: `expected ${expected.unitId}, received ${unitId}`
-    });
-    const build = compatibility.build;
-    if ('string' != typeof build || 0 === build.length) {
-        if (!allowMissing) issues.push({
-            path: 'backendFederationContract.compatibility.build',
-            message: `missing build marker; expected ${expected.buildMarker}`
-        });
-    } else if (build !== expected.buildMarker) issues.push({
-        path: 'backendFederationContract.compatibility.build',
-        message: `expected ${expected.buildMarker}, received ${build}`
-    });
-    return issues;
+        ]);
+}
+function validateExpectedBackendFederationIdentity(loaded, expected) {
+    const compatibility = backendFederationCompatibility(loaded);
+    return compatibility ? validateBackendFederationCompatibility(compatibility, {
+        unitId: expected.unitId,
+        build: expected.buildMarker
+    }) : [
+        {
+            path: 'backendFederationContract.compatibility',
+            message: 'loaded module declares no compatibility metadata; delivery-unit identity cannot be validated'
+        }
+    ];
 }
 function formatBackendFederationIdentityIssues(issues) {
     return issues.map((issue)=>`${issue.path}: ${issue.message}`).join('; ');
 }
+exports.backendFederationCompatibility = __webpack_exports__.backendFederationCompatibility;
 exports.formatBackendFederationIdentityIssues = __webpack_exports__.formatBackendFederationIdentityIssues;
+exports.validateBackendFederationCompatibility = __webpack_exports__.validateBackendFederationCompatibility;
 exports.validateExpectedBackendFederationIdentity = __webpack_exports__.validateExpectedBackendFederationIdentity;
 for(var __rspack_i in __webpack_exports__)if (-1 === [
+    "backendFederationCompatibility",
     "formatBackendFederationIdentityIssues",
+    "validateBackendFederationCompatibility",
     "validateExpectedBackendFederationIdentity"
 ].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
 Object.defineProperty(exports, '__esModule', {

package/dist/cjs/backend-federation/index.js

@@ -28,15 +28,15 @@ var __webpack_require__ = {};
 var __webpack_exports__ = {};
 __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
-    BACKEND_FEDERATION_CONTRACT_VERSION: ()=>universal_namespaceObject.BACKEND_FEDERATION_CONTRACT_VERSION,
-    BACKEND_FEDERATION_EFFECT_EXPOSE: ()=>universal_namespaceObject.BACKEND_FEDERATION_EFFECT_EXPOSE,
-    BACKEND_FEDERATION_MANIFEST_FILE: ()=>universal_namespaceObject.BACKEND_FEDERATION_MANIFEST_FILE,
-    BACKEND_FEDERATION_NODE_ADAPTER_VERSION: ()=>universal_namespaceObject.BACKEND_FEDERATION_NODE_ADAPTER_VERSION,
+    BACKEND_FEDERATION_CONTRACT_VERSION: ()=>backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_CONTRACT_VERSION,
+    BACKEND_FEDERATION_EFFECT_EXPOSE: ()=>backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_EFFECT_EXPOSE,
+    BACKEND_FEDERATION_MANIFEST_FILE: ()=>backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_MANIFEST_FILE,
+    BACKEND_FEDERATION_NODE_ADAPTER_VERSION: ()=>backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_NODE_ADAPTER_VERSION,
     createBackendFederationLoadEntryPlugin: ()=>external_plugin_js_namespaceObject.createBackendFederationLoadEntryPlugin,
     createBackendFederationRuntime: ()=>external_runtime_js_namespaceObject.createBackendFederationRuntime,
     validateExpectedBackendFederationIdentity: ()=>external_identity_js_namespaceObject.validateExpectedBackendFederationIdentity
 });
-const universal_namespaceObject = require("@modern-js/utils/universal");
+const backend_federation_contracts_namespaceObject = require("@modern-js/backend-federation-contracts");
 const external_identity_js_namespaceObject = require("./identity.js");
 const external_plugin_js_namespaceObject = require("./plugin.js");
 const external_runtime_js_namespaceObject = require("./runtime.js");

package/dist/cjs/backend-federation/integrity-plugin.js

@@ -0,0 +1,112 @@
+"use strict";
+var __webpack_require__ = {};
+(()=>{
+    __webpack_require__.d = (exports1, getters, values)=>{
+        var define = (defs, kind)=>{
+            for(var key in defs)if (__webpack_require__.o(defs, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+                enumerable: true,
+                [kind]: defs[key]
+            });
+        };
+        define(getters, "get");
+        define(values, "value");
+    };
+})();
+(()=>{
+    __webpack_require__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+})();
+(()=>{
+    __webpack_require__.r = (exports1)=>{
+        if ("u" > typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
+            value: 'Module'
+        });
+        Object.defineProperty(exports1, '__esModule', {
+            value: true
+        });
+    };
+})();
+var __webpack_exports__ = {};
+__webpack_require__.r(__webpack_exports__);
+__webpack_require__.d(__webpack_exports__, {
+    PROVIDED_ENTRY_SCHEME: ()=>PROVIDED_ENTRY_SCHEME,
+    createBackendFederationIntegrityPlugin: ()=>createBackendFederationIntegrityPlugin,
+    registerRemoteContainer: ()=>registerRemoteContainer
+});
+const backend_federation_security_namespaceObject = require("@modern-js/server-runtime-extensions/backend-federation-security");
+const runtime_namespaceObject = require("@module-federation/runtime");
+const PROVIDED_ENTRY_SCHEME = /^(?:binding|service|static):/u;
+function decodeDataUrl(remote) {
+    const commaIndex = remote.entry.indexOf(',');
+    if (commaIndex < 0) throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} has an invalid data URL entry.`);
+    return new TextEncoder().encode(decodeURIComponent(remote.entry.slice(commaIndex + 1)));
+}
+async function importContainer(remote) {
+    const namespace = await import(remote.entry);
+    return namespace.default ?? namespace;
+}
+function loadContainer(remote, options) {
+    const verified = Boolean(remote.verification || options.entryPolicy?.expected);
+    const scheme = /^[a-z][a-z0-9+.-]*:/iu.exec(remote.entry)?.[0].toLowerCase();
+    if ('https:' === scheme || 'http:' === scheme) {
+        if (!verified) throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} requires verified entry bytes before network execution.`);
+        return (0, backend_federation_security_namespaceObject.loadVerifiedBackendFederationEntry)({
+            ...options.entryPolicy,
+            remote,
+            ...remote.verification ? {
+                verification: remote.verification
+            } : {}
+        });
+    }
+    if (verified) throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} declares entry verification, but only http(s) entries are fetched and verified.`);
+    if ('data:' === scheme && 'module' !== remote.type) return Promise.resolve((0, backend_federation_security_namespaceObject.evaluateBackendFederationCommonJsEntry)(remote, decodeDataUrl(remote), options.entryPolicy?.evaluateCommonJs));
+    if ('data:' === scheme || 'file:' === scheme) return importContainer(remote);
+    throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} uses unsupported entry ${remote.entry}. Use a verified http(s) entry, a data: or file: entry, or a binding:, service: or static: entry served by createBackendFederationLoadEntryPlugin().`);
+}
+function registerRemoteContainer(origin, remoteInfo, container) {
+    const module = new runtime_namespaceObject.Module({
+        host: origin,
+        remoteInfo
+    });
+    module.remoteEntryExports = container;
+    origin.moduleCache.set(remoteInfo.name, module);
+}
+function createBackendFederationIntegrityPlugin(options, remotes) {
+    const loading = new Map();
+    const register = async (origin, remoteInfo)=>{
+        const remote = remotes.find((candidate)=>candidate.name === remoteInfo.name);
+        if (void 0 === remote) throw new Error(`[BFF][Effect] Missing backend federation remote ${remoteInfo.name}.`);
+        if (PROVIDED_ENTRY_SCHEME.test(remote.entry)) {
+            if (origin.moduleCache.get(remote.name)?.remoteEntryExports === void 0) throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} has no entry provider for ${remote.entry}. Pass createBackendFederationLoadEntryPlugin() in plugins.`);
+            return;
+        }
+        const container = await loadContainer(remote, options);
+        if ('function' != typeof container?.get) throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} entry must expose get().`);
+        registerRemoteContainer(origin, remoteInfo, container);
+    };
+    return {
+        name: 'modernjs-backend-federation-integrity',
+        afterMatchRemote ({ origin, remoteInfo }) {
+            if (void 0 === remoteInfo) return;
+            let pending = loading.get(remoteInfo.name);
+            if (void 0 === pending) {
+                pending = register(origin, remoteInfo);
+                loading.set(remoteInfo.name, pending);
+                pending.catch(()=>{
+                    if (loading.get(remoteInfo.name) === pending) loading.delete(remoteInfo.name);
+                });
+            }
+            return pending;
+        }
+    };
+}
+exports.PROVIDED_ENTRY_SCHEME = __webpack_exports__.PROVIDED_ENTRY_SCHEME;
+exports.createBackendFederationIntegrityPlugin = __webpack_exports__.createBackendFederationIntegrityPlugin;
+exports.registerRemoteContainer = __webpack_exports__.registerRemoteContainer;
+for(var __rspack_i in __webpack_exports__)if (-1 === [
+    "PROVIDED_ENTRY_SCHEME",
+    "createBackendFederationIntegrityPlugin",
+    "registerRemoteContainer"
+].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
+Object.defineProperty(exports, '__esModule', {
+    value: true
+});

package/dist/cjs/backend-federation/load.js

@@ -30,34 +30,24 @@ __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
     loadBackendFederatedEffectApi: ()=>loadBackendFederatedEffectApi
 });
-const universal_namespaceObject = require("@modern-js/utils/universal");
-const Effect_namespaceObject = require("effect/Effect");
-const Logger_namespaceObject = require("effect/Logger");
-const external_legacy_warning_js_namespaceObject = require("./legacy-warning.js");
+const backend_federation_contracts_namespaceObject = require("@modern-js/backend-federation-contracts");
 const external_remotes_js_namespaceObject = require("./remotes.js");
 const external_runtime_js_namespaceObject = require("./runtime.js");
 const external_utils_js_namespaceObject = require("./utils.js");
 const external_validate_loaded_js_namespaceObject = require("./validate-loaded.js");
-const legacyWarningLogger = Logger_namespaceObject.withLeveledConsole(Logger_namespaceObject.formatLogFmt);
-function warnLegacyLoad() {
-    Effect_namespaceObject.runSync(Effect_namespaceObject.provideService(Effect_namespaceObject.logWarning(external_legacy_warning_js_namespaceObject.LEGACY_LOAD_WARNING), Logger_namespaceObject.CurrentLoggers, new Set([
-        legacyWarningLogger
-    ])));
-}
 function loadBackendFederatedEffectApi(options) {
     const remoteName = options.remote?.name ?? options.remoteName;
     if (void 0 === remoteName || 0 === remoteName.length) return Promise.reject(new Error('[BFF][Effect] Missing backend federation remote name.'));
-    if (void 0 === options.expected) warnLegacyLoad();
+    if (!options.expected?.unitId || !options.expected.buildMarker) return Promise.reject(new Error('[BFF][Effect] Backend federation requires expected.unitId and expected.buildMarker.'));
     if (void 0 !== options.runtime) {
         const configuredRemote = (0, external_remotes_js_namespaceObject.collectRemotes)(options).find((remote)=>remote.name === remoteName);
         if (void 0 === configuredRemote || !/^(?:binding|service|static):/u.test(configuredRemote.entry)) return Promise.reject(new Error('[BFF][Effect] A custom Module Federation runtime requires a caller-pinned static or service-binding remote and cannot execute network backend federation entries.'));
         if (void 0 !== configuredRemote.verification || options.entryPolicy?.expected !== void 0) return Promise.reject(new Error('[BFF][Effect] A custom Module Federation runtime cannot bypass verified backend entry loading.'));
     }
     const runtime = options.runtime ?? (0, external_runtime_js_namespaceObject.createBackendFederationRuntime)(options);
-    const expose = options.expose ?? options.remote?.expose ?? universal_namespaceObject.BACKEND_FEDERATION_EFFECT_EXPOSE;
+    const expose = options.expose ?? options.remote?.expose ?? backend_federation_contracts_namespaceObject.BACKEND_FEDERATION_EFFECT_EXPOSE;
     const remoteRequest = `${remoteName}/${(0, external_utils_js_namespaceObject.normalizeExpose)(expose)}`;
     return runtime.loadRemote(remoteRequest).then((loaded)=>(0, external_validate_loaded_js_namespaceObject.validateLoadedBackendFederatedEffectApi)(loaded, {
-            allowMissingIdentityMetadata: options.allowMissingIdentityMetadata,
             expected: options.expected,
             remoteName,
             remoteRequest

package/dist/cjs/backend-federation/node-shared.js

@@ -0,0 +1,85 @@
+"use strict";
+const __rslib_import_meta_url__ = /*#__PURE__*/ function() {
+    return "u" < typeof document ? new (require('url'.replace('', ''))).URL('file:' + __filename).href : document.currentScript && document.currentScript.src || new URL('main.js', document.baseURI).href;
+}();
+var __webpack_require__ = {};
+(()=>{
+    __webpack_require__.d = (exports1, getters, values)=>{
+        var define = (defs, kind)=>{
+            for(var key in defs)if (__webpack_require__.o(defs, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+                enumerable: true,
+                [kind]: defs[key]
+            });
+        };
+        define(getters, "get");
+        define(values, "value");
+    };
+})();
+(()=>{
+    __webpack_require__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+})();
+(()=>{
+    __webpack_require__.r = (exports1)=>{
+        if ("u" > typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
+            value: 'Module'
+        });
+        Object.defineProperty(exports1, '__esModule', {
+            value: true
+        });
+    };
+})();
+var __webpack_exports__ = {};
+__webpack_require__.r(__webpack_exports__);
+__webpack_require__.d(__webpack_exports__, {
+    effectBffHostShared: ()=>effectBffHostShared,
+    withEffectBffHostShared: ()=>withEffectBffHostShared
+});
+const external_node_module_namespaceObject = require("node:module");
+const fromAdapter = (0, external_node_module_namespaceObject.createRequire)(__rslib_import_meta_url__);
+const effectPackageJson = fromAdapter.resolve('@modern-js/bff-effect/package.json');
+const fromEffectPackage = (0, external_node_module_namespaceObject.createRequire)(effectPackageJson);
+let hostShared;
+function effectBffHostShared() {
+    if (void 0 !== hostShared) return hostShared;
+    const { EFFECT_BFF_CONTEXT_STORAGE_SHARE, EFFECT_BFF_HANDLER_FACTORY_REGISTRY_SHARE } = fromEffectPackage('@modern-js/bff-effect/effect-edge');
+    const { getEffectContextStorage } = fromEffectPackage('@modern-js/bff-effect/context');
+    const handlerFactoryRegistry = fromEffectPackage("#effect-entry-shape-registry");
+    const version = fromAdapter(effectPackageJson).version;
+    hostShared = {
+        [EFFECT_BFF_HANDLER_FACTORY_REGISTRY_SHARE]: {
+            version,
+            lib: ()=>handlerFactoryRegistry,
+            shareConfig: {
+                singleton: true,
+                requiredVersion: false
+            }
+        },
+        [EFFECT_BFF_CONTEXT_STORAGE_SHARE]: {
+            version,
+            lib: getEffectContextStorage,
+            shareConfig: {
+                singleton: true,
+                requiredVersion: false
+            }
+        }
+    };
+    return hostShared;
+}
+function withEffectBffHostShared(shared) {
+    const host = effectBffHostShared();
+    const reserved = Object.keys(host).find((name)=>shared && name in shared);
+    if (void 0 !== reserved) throw new Error(`[BFF][Effect] Share ${reserved} is reserved for the Node host. Remove it from options.shared.`);
+    return {
+        ...shared,
+        ...host
+    };
+}
+exports.effectBffHostShared = __webpack_exports__.effectBffHostShared;
+exports.withEffectBffHostShared = __webpack_exports__.withEffectBffHostShared;
+for(var __rspack_i in __webpack_exports__)if (-1 === [
+    "effectBffHostShared",
+    "withEffectBffHostShared"
+].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
+Object.defineProperty(exports, '__esModule', {
+    value: true
+});

package/dist/cjs/backend-federation/node.js

@@ -28,21 +28,26 @@ var __webpack_require__ = {};
 var __webpack_exports__ = {};
 __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
+    effectBffHostShared: ()=>external_node_shared_js_namespaceObject.effectBffHostShared,
     loadBackendFederatedEffectApi: ()=>loadBackendFederatedEffectApi
 });
 const node_namespaceObject = require("@modern-js/server-runtime-extensions/backend-federation-security/node");
 const external_load_js_namespaceObject = require("./load.js");
-function loadBackendFederatedEffectApi(options) {
+const external_node_shared_js_namespaceObject = require("./node-shared.js");
+async function loadBackendFederatedEffectApi(options) {
     return (0, external_load_js_namespaceObject.loadBackendFederatedEffectApi)({
         ...options,
+        shared: (0, external_node_shared_js_namespaceObject.withEffectBffHostShared)(options.shared),
         entryPolicy: {
             ...options.entryPolicy,
             evaluateCommonJs: options.entryPolicy?.evaluateCommonJs ?? node_namespaceObject.evaluateNodeBackendFederationCommonJs
         }
     });
 }
+exports.effectBffHostShared = __webpack_exports__.effectBffHostShared;
 exports.loadBackendFederatedEffectApi = __webpack_exports__.loadBackendFederatedEffectApi;
 for(var __rspack_i in __webpack_exports__)if (-1 === [
+    "effectBffHostShared",
     "loadBackendFederatedEffectApi"
 ].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
 Object.defineProperty(exports, '__esModule', {

package/dist/cjs/backend-federation/plugin.js

@@ -27,33 +27,52 @@ var __webpack_require__ = {};
 })();
 var __webpack_exports__ = {};
 __webpack_require__.r(__webpack_exports__);
+__webpack_require__.d(__webpack_exports__, {
+    createBackendFederationLoadEntryPlugin: ()=>createBackendFederationLoadEntryPlugin
+});
+const external_integrity_plugin_js_namespaceObject = require("./integrity-plugin.js");
+function toContainer(entry) {
+    return {
+        get (id) {
+            return ()=>Promise.resolve(entry.get(id)).then((factory)=>factory());
+        },
+        init (...args) {
+            return entry.init?.(...args);
+        }
+    };
+}
 function createBackendFederationLoadEntryPlugin(options) {
+    const provided = new WeakMap();
     return {
         name: 'modernjs-backend-federation-load-entry',
-        loadEntry ({ remoteInfo }) {
-            return Promise.resolve(options.resolveEntry({
-                name: remoteInfo.name,
-                entry: remoteInfo.entry,
-                type: remoteInfo.type,
-                entryGlobalName: remoteInfo.entryGlobalName,
-                shareScope: remoteInfo.shareScope
-            })).then((entry)=>{
-                if (void 0 === entry) return;
-                return {
-                    get (id) {
-                        return ()=>Promise.resolve(entry.get(id)).then((factory)=>factory());
-                    },
-                    init (...args) {
-                        return entry.init?.(...args);
-                    }
-                };
-            });
+        afterMatchRemote ({ origin, remoteInfo }) {
+            if (void 0 === remoteInfo || !external_integrity_plugin_js_namespaceObject.PROVIDED_ENTRY_SCHEME.test(remoteInfo.entry)) return;
+            let entries = provided.get(origin);
+            if (entries?.has(remoteInfo.name) !== true && origin.moduleCache.get(remoteInfo.name)?.remoteEntryExports !== void 0) return;
+            if (void 0 === entries) {
+                entries = new Map();
+                provided.set(origin, entries);
+            }
+            const runtimeEntries = entries;
+            let pending = runtimeEntries.get(remoteInfo.name);
+            if (void 0 === pending) {
+                pending = Promise.resolve(options.resolveEntry({
+                    name: remoteInfo.name,
+                    entry: remoteInfo.entry,
+                    type: remoteInfo.type
+                })).then((entry)=>{
+                    if (void 0 !== entry) (0, external_integrity_plugin_js_namespaceObject.registerRemoteContainer)(origin, remoteInfo, toContainer(entry));
+                });
+                const settled = pending;
+                runtimeEntries.set(remoteInfo.name, settled);
+                settled.catch(()=>{
+                    if (runtimeEntries.get(remoteInfo.name) === settled) runtimeEntries.delete(remoteInfo.name);
+                });
+            }
+            return pending;
         }
     };
 }
-__webpack_require__.d(__webpack_exports__, {
-    createBackendFederationLoadEntryPlugin: ()=>createBackendFederationLoadEntryPlugin
-});
 exports.createBackendFederationLoadEntryPlugin = __webpack_exports__.createBackendFederationLoadEntryPlugin;
 for(var __rspack_i in __webpack_exports__)if (-1 === [
     "createBackendFederationLoadEntryPlugin"