@bleedingdev/modern-js-plugin-bff-extensions 3.9.0-ultramodern.2 → 3.9.0-ultramodern.21

package/dist/esm-node/backend-federation/node.mjs

@@ -1,13 +1,15 @@
 import "node:module";
 import { evaluateNodeBackendFederationCommonJs } from "@modern-js/server-runtime-extensions/backend-federation-security/node";
 import { loadBackendFederatedEffectApi } from "./load.mjs";
-function node_loadBackendFederatedEffectApi(options) {
+import { effectBffHostShared, withEffectBffHostShared } from "./node-shared.mjs";
+async function node_loadBackendFederatedEffectApi(options) {
     return loadBackendFederatedEffectApi({
         ...options,
+        shared: withEffectBffHostShared(options.shared),
         entryPolicy: {
             ...options.entryPolicy,
             evaluateCommonJs: options.entryPolicy?.evaluateCommonJs ?? evaluateNodeBackendFederationCommonJs
         }
     });
 }
-export { node_loadBackendFederatedEffectApi as loadBackendFederatedEffectApi };
+export { effectBffHostShared, node_loadBackendFederatedEffectApi as loadBackendFederatedEffectApi };

package/dist/esm-node/backend-federation/plugin.mjs

@@ -1,25 +1,44 @@
 import "node:module";
+import { PROVIDED_ENTRY_SCHEME, registerRemoteContainer } from "./integrity-plugin.mjs";
+function toContainer(entry) {
+    return {
+        get (id) {
+            return ()=>Promise.resolve(entry.get(id)).then((factory)=>factory());
+        },
+        init (...args) {
+            return entry.init?.(...args);
+        }
+    };
+}
 function createBackendFederationLoadEntryPlugin(options) {
+    const provided = new WeakMap();
     return {
         name: 'modernjs-backend-federation-load-entry',
-        loadEntry ({ remoteInfo }) {
-            return Promise.resolve(options.resolveEntry({
-                name: remoteInfo.name,
-                entry: remoteInfo.entry,
-                type: remoteInfo.type,
-                entryGlobalName: remoteInfo.entryGlobalName,
-                shareScope: remoteInfo.shareScope
-            })).then((entry)=>{
-                if (void 0 === entry) return;
-                return {
-                    get (id) {
-                        return ()=>Promise.resolve(entry.get(id)).then((factory)=>factory());
-                    },
-                    init (...args) {
-                        return entry.init?.(...args);
-                    }
-                };
-            });
+        afterMatchRemote ({ origin, remoteInfo }) {
+            if (void 0 === remoteInfo || !PROVIDED_ENTRY_SCHEME.test(remoteInfo.entry)) return;
+            let entries = provided.get(origin);
+            if (entries?.has(remoteInfo.name) !== true && origin.moduleCache.get(remoteInfo.name)?.remoteEntryExports !== void 0) return;
+            if (void 0 === entries) {
+                entries = new Map();
+                provided.set(origin, entries);
+            }
+            const runtimeEntries = entries;
+            let pending = runtimeEntries.get(remoteInfo.name);
+            if (void 0 === pending) {
+                pending = Promise.resolve(options.resolveEntry({
+                    name: remoteInfo.name,
+                    entry: remoteInfo.entry,
+                    type: remoteInfo.type
+                })).then((entry)=>{
+                    if (void 0 !== entry) registerRemoteContainer(origin, remoteInfo, toContainer(entry));
+                });
+                const settled = pending;
+                runtimeEntries.set(remoteInfo.name, settled);
+                settled.catch(()=>{
+                    if (runtimeEntries.get(remoteInfo.name) === settled) runtimeEntries.delete(remoteInfo.name);
+                });
+            }
+            return pending;
         }
     };
 }

package/dist/esm-node/backend-federation/runtime.mjs

@@ -1,91 +1,23 @@
 import "node:module";
 import { ModuleFederation } from "@module-federation/runtime";
-import { loadBackendFederationExpose } from "./entry.mjs";
-import { createBackendFederationLoadEntryPlugin } from "./plugin.mjs";
+import { createBackendFederationIntegrityPlugin } from "./integrity-plugin.mjs";
 import { collectRemotes } from "./remotes.mjs";
-function _check_private_redeclaration(obj, privateCollection) {
-    if (privateCollection.has(obj)) throw new TypeError("Cannot initialize the same private elements twice on an object");
-}
-function _class_apply_descriptor_get(receiver, descriptor) {
-    if (descriptor.get) return descriptor.get.call(receiver);
-    return descriptor.value;
-}
-function _class_apply_descriptor_set(receiver, descriptor, value) {
-    if (descriptor.set) descriptor.set.call(receiver, value);
-    else {
-        if (!descriptor.writable) throw new TypeError("attempted to set read only private field");
-        descriptor.value = value;
-    }
-}
-function _class_extract_field_descriptor(receiver, privateMap, action) {
-    if (!privateMap.has(receiver)) throw new TypeError("attempted to " + action + " private field on non-instance");
-    return privateMap.get(receiver);
-}
-function _class_private_field_get(receiver, privateMap) {
-    var descriptor = _class_extract_field_descriptor(receiver, privateMap, "get");
-    return _class_apply_descriptor_get(receiver, descriptor);
-}
-function _class_private_field_init(obj, privateMap, value) {
-    _check_private_redeclaration(obj, privateMap);
-    privateMap.set(obj, value);
-}
-function _class_private_field_set(receiver, privateMap, value) {
-    var descriptor = _class_extract_field_descriptor(receiver, privateMap, "set");
-    _class_apply_descriptor_set(receiver, descriptor, value);
-    return value;
-}
-let nextRuntimeId = 0;
-function parseRemoteRequest(request) {
-    const [remoteName, ...exposeParts] = request.split('/');
-    if (void 0 === remoteName || 0 === remoteName.length || 0 === exposeParts.length) return;
-    return remoteName;
-}
-function createLocalEntryPlugin(options, remotes) {
-    return createBackendFederationLoadEntryPlugin({
-        resolveEntry (resolvedRemote) {
-            const remote = remotes.find((candidate)=>candidate.name === resolvedRemote.name);
-            if (void 0 === remote) return;
-            return {
-                get (expose) {
-                    return ()=>loadBackendFederationExpose(remote, expose, options);
-                }
-            };
-        }
-    });
-}
-function isolateRegisteredRemoteEntries(remotes) {
-    const runtimeId = nextRuntimeId;
-    nextRuntimeId += 1;
-    return remotes.map((remote)=>({
-            ...remote,
-            entry: `${remote.entry}#modernjs-backend-runtime-${runtimeId}`
-        }));
-}
-var _remoteNames = /*#__PURE__*/ new WeakMap();
-class BackendFederationRuntime extends ModuleFederation {
-    loadRemote(request, loadOptions) {
-        const remoteName = parseRemoteRequest(request);
-        if (void 0 === remoteName) return Promise.reject(new Error(`[BFF][Effect] Invalid backend federation request ${request}.`));
-        if (!_class_private_field_get(this, _remoteNames).has(remoteName)) return Promise.reject(new Error(`[BFF][Effect] Missing backend federation remote ${remoteName}.`));
-        return super.loadRemote(request, loadOptions);
-    }
-    constructor(options, remotes){
-        super({
-            name: options.hostName,
-            remotes: isolateRegisteredRemoteEntries(remotes),
-            shared: {},
-            plugins: [
-                createLocalEntryPlugin(options, remotes)
-            ]
-        }), _class_private_field_init(this, _remoteNames, {
-            writable: true,
-            value: void 0
-        });
-        _class_private_field_set(this, _remoteNames, new Set(remotes.map((remote)=>remote.name)));
-    }
-}
 function createBackendFederationRuntime(options) {
     const remotes = collectRemotes(options);
-    return new BackendFederationRuntime(options, remotes);
+    return new ModuleFederation({
+        name: options.hostName,
+        remotes: remotes.map(({ name, entry, type })=>({
+                name,
+                entry,
+                ...type ? {
+                    type
+                } : {}
+            })),
+        shared: options.shared ?? {},
+        plugins: [
+            ...options.plugins ?? [],
+            createBackendFederationIntegrityPlugin(options, remotes)
+        ]
+    });
 }
 export { createBackendFederationRuntime };

package/dist/esm-node/backend-federation/validate-loaded.mjs

@@ -8,10 +8,8 @@ function validateLoadedBackendFederatedEffectApi(loaded, options) {
     if ('effect' !== backendContract.runtimeFramework) throw new Error(`[BFF][Effect] Backend federation expose ${options.remoteRequest} must expose strict Effect metadata (runtimeFramework: "effect").`);
     if ('string' == typeof backendContract.name && backendContract.name !== options.remoteName) throw new Error(`[BFF][Effect] Backend federation expose ${options.remoteRequest} metadata name mismatch: expected ${options.remoteName}, received ${backendContract.name}.`);
     if (!('runtime' in loaded)) throw new Error(`[BFF][Effect] Backend federation expose ${options.remoteRequest} must expose runtime.`);
-    if (void 0 !== options.expected) {
-        const issues = validateExpectedBackendFederationIdentity(loaded, options.expected, {
-            allowMissingIdentityMetadata: true === options.allowMissingIdentityMetadata
-        });
+    {
+        const issues = validateExpectedBackendFederationIdentity(loaded, options.expected);
         if (issues.length > 0) throw new Error(`[BFF][Effect] Backend federation expose ${options.remoteRequest} delivery-unit identity mismatch: ${formatBackendFederationIdentityIssues(issues)}.`);
     }
     return loaded;

package/dist/esm-node/backend-federation-manifest/load.mjs

@@ -2,9 +2,11 @@ import "node:module";
 import { BACKEND_FEDERATION_EFFECT_EXPOSE } from "../backend-federation/index.mjs";
 import { loadBackendFederatedEffectApi } from "../backend-federation/load.mjs";
 import { BackendFederationManifestAdapterError } from "./errors.mjs";
+import { backendFederationMetadata, manifestDeliveryUnit, stringValue, versionBoundaryMetadata } from "./metadata.mjs";
 import { loadBackendFederationManifest } from "./reference.mjs";
 import { resolveBackendFederationRemoteFromManifest } from "./remote.mjs";
 import { classifyLoadError, validateBackendFederationManifest, validateLoadedBackendFederationContract } from "./validation.mjs";
+const DEFAULT_SHARED_MANIFEST_LOAD_TIMEOUT_MS = 10000;
 function createManifestLoadScope(options) {
     const controller = new AbortController();
     const policyTimeouts = [
@@ -16,7 +18,8 @@ function createManifestLoadScope(options) {
         ...policyTimeouts
     ].filter((timeout)=>void 0 !== timeout);
     for (const timeout of configuredTimeouts)if (!Number.isSafeInteger(timeout) || timeout < 0) throw new BackendFederationManifestAdapterError('manifest_invalid', '[BFF][Effect] Backend federation timeoutMs must be a non-negative safe integer.');
-    const timeoutMs = options.timeoutMs ?? (policyTimeouts.length > 0 ? Math.min(...policyTimeouts) : 0);
+    const positivePolicyTimeouts = policyTimeouts.filter((timeout)=>timeout > 0);
+    const timeoutMs = options.timeoutMs ?? (0 === policyTimeouts.length ? DEFAULT_SHARED_MANIFEST_LOAD_TIMEOUT_MS : positivePolicyTimeouts.length > 0 ? Math.min(...positivePolicyTimeouts) : 0);
     const inputSignals = [
         options.signal,
         options.manifestPolicy?.signal,
@@ -70,6 +73,27 @@ function isCallerPinnedStaticRemote(options, remote) {
 function throwIfManifestLoadAborted(signal) {
     if (signal.aborted) throw new BackendFederationManifestAdapterError('remote_unavailable', '[BFF][Effect] Backend federation load was aborted before remote execution.', signal.reason);
 }
+function settleOnSharedAbort(promise, signal) {
+    if (signal.aborted) {
+        promise.catch(()=>{});
+        throwIfManifestLoadAborted(signal);
+    }
+    let onAbort;
+    const aborted = new Promise((_resolve, reject)=>{
+        onAbort = ()=>{
+            reject(new BackendFederationManifestAdapterError('remote_unavailable', '[BFF][Effect] Backend federation load was aborted before remote execution.', signal.reason));
+        };
+        signal.addEventListener('abort', onAbort, {
+            once: true
+        });
+    });
+    return Promise.race([
+        promise,
+        aborted
+    ]).finally(()=>{
+        if (onAbort) signal.removeEventListener('abort', onAbort);
+    });
+}
 async function loadBackendFederatedEffectApiFromManifest(options) {
     let manifest;
     let remote;
@@ -77,7 +101,7 @@ async function loadBackendFederatedEffectApiFromManifest(options) {
     try {
         scope = createManifestLoadScope(options);
         throwIfManifestLoadAborted(scope.signal);
-        manifest = await loadBackendFederationManifest({
+        manifest = await settleOnSharedAbort(loadBackendFederationManifest({
             ...options,
             manifestPolicy: {
                 ...options.manifestPolicy,
@@ -86,7 +110,7 @@ async function loadBackendFederatedEffectApiFromManifest(options) {
             },
             signal: scope.signal,
             timeoutMs: 0
-        });
+        }), scope.signal);
         validateBackendFederationManifest(manifest, options.expected);
         remote = resolveBackendFederationRemoteFromManifest(manifest, options.remote);
         throwIfManifestLoadAborted(scope.signal);
@@ -96,12 +120,19 @@ async function loadBackendFederatedEffectApiFromManifest(options) {
         if (remoteManifest && /^https?:\/\//iu.test(remote.entry) && !hasPinnedRemoteEntryExpectation(options)) throw new BackendFederationManifestAdapterError('manifest_invalid', `[BFF][Effect] Backend federation remote ${remote.name} from a network manifest requires caller-pinned entryUrl, remoteName, sha256, and byteLength values.`);
         if (/^https?:\/\//iu.test(remote.entry) && void 0 === remote.verification && options.entryPolicy?.expected === void 0) throw new BackendFederationManifestAdapterError('manifest_invalid', `[BFF][Effect] Backend federation remote ${remote.name} requires entry.sha256 and entry.byteLength before network execution.`);
         if (/^https?:\/\//iu.test(remote.entry) && void 0 !== options.runtime) throw new BackendFederationManifestAdapterError('manifest_invalid', `[BFF][Effect] Backend federation remote ${remote.name} cannot use a custom runtime for network entry execution.`);
-        const loaded = await loadBackendFederatedEffectApi({
+        const deliveryUnit = manifestDeliveryUnit(backendFederationMetadata(manifest), versionBoundaryMetadata(manifest));
+        const unitId = stringValue(deliveryUnit.boundary?.unitId) ?? stringValue(deliveryUnit.top?.unitId);
+        const buildMarker = stringValue(deliveryUnit.boundary?.buildMarker);
+        if (!unitId || !buildMarker) throw new BackendFederationManifestAdapterError('manifest_invalid', 'Backend federation manifest requires delivery-unit identity.');
+        const loaded = await settleOnSharedAbort(loadBackendFederatedEffectApi({
             hostName: options.hostName,
             remote,
             ...options.plugins ? {
                 plugins: options.plugins
             } : {},
+            ...options.shared ? {
+                shared: options.shared
+            } : {},
             entryPolicy: {
                 ...options.entryPolicy,
                 signal: scope.signal,
@@ -110,16 +141,13 @@ async function loadBackendFederatedEffectApiFromManifest(options) {
             ...options.runtime ? {
                 runtime: options.runtime
             } : {},
-            ...options.expected?.unitId && options.expected.buildMarker ? {
-                expected: {
-                    unitId: options.expected.unitId,
-                    buildMarker: options.expected.buildMarker
-                },
-                allowMissingIdentityMetadata: true
-            } : {}
+            expected: {
+                unitId,
+                buildMarker
+            }
         }).catch((error)=>{
             throw new BackendFederationManifestAdapterError(scope?.timedOut() === true ? 'timeout' : classifyLoadError(error), `[BFF][Effect] Backend federation remote ${remote?.name ?? 'unknown'} could not load ${remote?.expose ?? BACKEND_FEDERATION_EFFECT_EXPOSE}.`, error);
-        });
+        }), scope.signal);
         validateLoadedBackendFederationContract(loaded, manifest, remote);
         return loaded;
     } catch (error) {

package/dist/esm-node/backend-federation-manifest/metadata.mjs

@@ -1,5 +1,5 @@
 import "node:module";
-import { backendFederationMetadata, backendFederationVersionBoundary } from "@modern-js/utils/universal";
+import { backendFederationMetadata, backendFederationVersionBoundary } from "@modern-js/backend-federation-contracts";
 function stringValue(value) {
     return 'string' == typeof value && value.length > 0 ? value : void 0;
 }

package/dist/esm-node/backend-federation-manifest/node.mjs

@@ -1,9 +1,11 @@
 import "node:module";
 import { evaluateNodeBackendFederationCommonJs } from "@modern-js/server-runtime-extensions/backend-federation-security/node";
+import { withEffectBffHostShared } from "../backend-federation/node-shared.mjs";
 import { loadBackendFederatedEffectApiFromManifest } from "./load.mjs";
-function node_loadBackendFederatedEffectApiFromManifest(options) {
+async function node_loadBackendFederatedEffectApiFromManifest(options) {
     return loadBackendFederatedEffectApiFromManifest({
         ...options,
+        shared: withEffectBffHostShared(options.shared),
         entryPolicy: {
             ...options.entryPolicy,
             evaluateCommonJs: options.entryPolicy?.evaluateCommonJs ?? evaluateNodeBackendFederationCommonJs

package/dist/esm-node/backend-federation-manifest/remote.mjs

@@ -1,6 +1,6 @@
 import "node:module";
+import { backendFederationExposeNames } from "@modern-js/backend-federation-contracts";
 import { BackendFederationRemoteEntryError, resolveBackendFederationRemoteEntryVerification } from "@modern-js/server-runtime-extensions/backend-federation-security";
-import { backendFederationExposeNames } from "@modern-js/utils/universal";
 import { BACKEND_FEDERATION_EFFECT_EXPOSE } from "../backend-federation/index.mjs";
 import { BackendFederationManifestAdapterError, assertManifestAdapter } from "./errors.mjs";
 import { backendFederationMetadata, recordField, resolveRemoteEntryFromMetadata, stringValue } from "./metadata.mjs";
@@ -32,13 +32,7 @@ function resolveBackendFederationRemoteFromManifest(manifest, remoteOverride = {
         ...verification ? {
             verification
         } : {},
-        ...remoteOverride.entryGlobalName ? {
-            entryGlobalName: remoteOverride.entryGlobalName
-        } : {},
-        expose,
-        ...remoteOverride.shareScope ? {
-            shareScope: remoteOverride.shareScope
-        } : {}
+        expose
     };
 }
 export { resolveBackendFederationRemoteFromManifest };

package/dist/esm-node/backend-federation-manifest/validation.mjs

@@ -1,8 +1,9 @@
 import "node:module";
-import { formatBackendFederationValidationErrors, validateBackendFederationManifest } from "@modern-js/utils/universal";
+import { formatBackendFederationValidationErrors, validateBackendFederationManifest } from "@modern-js/backend-federation-contracts";
 import { BACKEND_FEDERATION_CONTRACT_VERSION, BACKEND_FEDERATION_NODE_ADAPTER_VERSION } from "../backend-federation/index.mjs";
+import { backendFederationCompatibility, formatBackendFederationIdentityIssues, validateBackendFederationCompatibility } from "../backend-federation/identity.mjs";
 import { BackendFederationManifestAdapterError, assertConsistentValue, assertManifestAdapter, assertVersionValue } from "./errors.mjs";
-import { backendFederationMetadata, manifestDeliveryUnit, recordField, stringValue, versionBoundaryMetadata } from "./metadata.mjs";
+import { backendFederationMetadata, manifestDeliveryUnit, stringValue, versionBoundaryMetadata } from "./metadata.mjs";
 function resolveExpectedBuildMarker(expected) {
     if (void 0 !== expected.buildVersion && void 0 !== expected.buildMarker && expected.buildVersion !== expected.buildMarker) throw new BackendFederationManifestAdapterError('version_mismatch', `[BFF][Effect] Backend federation expected buildVersion/buildMarker mismatch: buildVersion ${expected.buildVersion}, buildMarker ${expected.buildMarker}.`, void 0, {
         label: 'expected.buildVersion/buildMarker',
@@ -17,8 +18,7 @@ function validation_validateBackendFederationManifest(manifest, expected = {}) {
     assertManifestAdapter(backendFederation, 'manifest_invalid', '[BFF][Effect] Backend federation manifest must declare backendFederation metadata.');
     const manifestShape = validateBackendFederationManifest(manifest, {
         expectedContractVersion: false,
-        expectedNodeAdapterVersion: false,
-        validateDeliveryUnit: false
+        expectedNodeAdapterVersion: false
     });
     assertManifestAdapter(manifestShape.ok, 'manifest_invalid', `[BFF][Effect] Backend federation manifest schema invalid: ${formatBackendFederationValidationErrors(manifestShape.errors)}.`);
     assertManifestAdapter('effect' === backendFederation.runtimeFramework, 'strict_effect_required', '[BFF][Effect] Backend federation manifest must declare runtimeFramework: "effect".');
@@ -36,6 +36,7 @@ function validation_validateBackendFederationManifest(manifest, expected = {}) {
     assertConsistentValue(stringValue(deliveryUnit.boundary?.buildMarker), stringValue(boundary?.buildVersion), 'versionBoundary.deliveryUnit.buildMarker vs versionBoundary.buildVersion');
     assertConsistentValue(stringValue(deliveryUnit.top?.unitId), stringValue(deliveryUnit.boundary?.unitId), 'backendFederation.deliveryUnit.unitId vs versionBoundary.deliveryUnit.unitId');
     const manifestUnitId = stringValue(deliveryUnit.boundary?.unitId) ?? stringValue(deliveryUnit.top?.unitId);
+    assertManifestAdapter(manifestUnitId && stringValue(deliveryUnit.boundary?.buildMarker), 'manifest_invalid', 'Backend federation manifest requires delivery-unit unitId and buildMarker.');
     assertVersionValue(manifestUnitId, expected.unitId, 'deliveryUnit.unitId');
     assertVersionValue(stringValue(deliveryUnit.boundary?.buildMarker), expectedBuildMarker, 'deliveryUnit.buildMarker');
 }
@@ -43,19 +44,22 @@ function validateLoadedBackendFederationContract(loaded, manifest, remote) {
     const loadedContract = loaded.backendFederationContract;
     const backendFederation = backendFederationMetadata(manifest);
     const boundary = versionBoundaryMetadata(manifest);
-    const compatibility = recordField(loadedContract, 'compatibility');
+    const compatibility = backendFederationCompatibility(loaded);
     assertManifestAdapter(compatibility, 'version_mismatch', `[BFF][Effect] Backend federation expose ${remote.name}/${remote.expose?.replace(/^\.\//u, '')} must declare compatibility metadata.`);
     assertVersionValue(stringValue(loadedContract?.role), 'microvertical-server', 'expose role');
     assertVersionValue(stringValue(loadedContract?.name), remote.name, 'expose name');
-    assertVersionValue(stringValue(compatibility.contractVersion), stringValue(backendFederation?.contractVersion), 'expose contractVersion');
-    assertVersionValue(stringValue(compatibility.nodeAdapterVersion), stringValue(backendFederation?.nodeAdapterVersion), 'expose nodeAdapterVersion');
-    assertVersionValue(stringValue(compatibility.packageName), stringValue(boundary?.packageName), 'expose packageName');
-    assertVersionValue(stringValue(compatibility.build), stringValue(boundary?.buildVersion), 'expose buildVersion');
     const deliveryUnit = manifestDeliveryUnit(backendFederation, boundary);
     const manifestUnitId = stringValue(deliveryUnit.boundary?.unitId) ?? stringValue(deliveryUnit.top?.unitId);
     const manifestBuildMarker = stringValue(deliveryUnit.boundary?.buildMarker);
-    assertConsistentValue(manifestUnitId, stringValue(compatibility.unitId), 'deliveryUnit.unitId vs expose compatibility.unitId');
-    assertConsistentValue(manifestBuildMarker, stringValue(compatibility.build), 'deliveryUnit.buildMarker vs expose compatibility.build');
+    const issues = validateBackendFederationCompatibility(compatibility, {
+        contractVersion: stringValue(backendFederation?.contractVersion),
+        nodeAdapterVersion: stringValue(backendFederation?.nodeAdapterVersion),
+        packageName: stringValue(boundary?.packageName),
+        unitId: manifestUnitId,
+        build: manifestBuildMarker ?? stringValue(boundary?.buildVersion)
+    });
+    assertVersionValue(stringValue(compatibility.build), stringValue(boundary?.buildVersion), 'expose buildVersion');
+    assertManifestAdapter(0 === issues.length, 'version_mismatch', `[BFF][Effect] ${formatBackendFederationIdentityIssues(issues)}.`);
 }
 function classifyLoadError(error) {
     const message = error instanceof Error ? error.message : String(error);

package/dist/esm-node/cross-project-policy/evaluation.mjs

@@ -1,5 +1,5 @@
 import "node:module";
-import { evaluateCrossProjectPolicy, resolveCrossProjectRequestObservation } from "@modern-js/bff-core/security/cross-project-policy";
+import { evaluateCrossProjectPolicy, resolveCrossProjectRequestObservation } from "@modern-js/server-runtime-extensions/bff-policy";
 const DENIAL_HEADERS = {
     'content-type': 'application/json; charset=utf-8'
 };

package/dist/esm-node/cross-project-policy/node.mjs

@@ -1,29 +1,20 @@
 import "node:module";
-import { readFileSync } from "node:fs";
-import node_path from "node:path";
-import { deriveOperationVersion, resolveCrossProjectPolicy } from "@modern-js/bff-core";
-const readNearestPackageVersion = (startDir)=>{
-    if (!startDir) return;
-    let current = node_path.resolve(startDir);
-    for(let depth = 0; depth < 10; depth += 1){
-        try {
-            const packageJson = JSON.parse(readFileSync(node_path.join(current, 'package.json'), 'utf8'));
-            if ('string' == typeof packageJson.version) return packageJson.version;
-        } catch  {}
-        const parent = node_path.dirname(current);
-        if (parent === current) break;
-        current = parent;
-    }
-};
-const resolveAdapterCrossProjectPolicy = (api, handlers)=>{
+import "@modern-js/server-runtime-extensions/server-config";
+import { resolveCrossProjectPolicy, resolveOperationProducer } from "@modern-js/server-runtime-extensions/bff-policy/node";
+const resolveAdapterCrossProjectPolicy = (api, handlers, producer)=>{
     const bff = api.getServerConfig()?.bff;
     const { apiDirectory, appDirectory } = api.getServerContext();
     return resolveCrossProjectPolicy({
         crossProjectPolicy: bff?.crossProjectPolicy,
         handlers,
-        requestId: bff?.requestId,
         isCrossProjectServer: bff?.isCrossProjectServer,
-        operationVersion: deriveOperationVersion(readNearestPackageVersion(apiDirectory) ?? readNearestPackageVersion(appDirectory))
+        ...producer ?? resolveOperationProducer({
+            directories: [
+                apiDirectory,
+                appDirectory
+            ],
+            requestId: bff?.requestId || 'default'
+        })
     });
 };
 export { resolveAdapterCrossProjectPolicy };

package/dist/esm-node/cross-project-policy/producer-runtime.mjs

@@ -0,0 +1,21 @@
+import "node:module";
+function createProducerClient(configure, { requestId }) {
+    return (options)=>configure({
+            requestId,
+            requireEnvelope: true,
+            ...options,
+            identityBinding: {
+                enabled: true,
+                strict: true,
+                ...options?.identityBinding
+            },
+            operationContract: {
+                enabled: true,
+                strict: true,
+                requireSchemaHash: true,
+                requireOperationVersion: true,
+                ...options?.operationContract
+            }
+        });
+}
+export { createProducerClient };

package/dist/esm-node/{effect-adapter → effect-server}/cross-project-policy.mjs

@@ -3,7 +3,7 @@ import { collectEffectEndpoints, extractHttpApiFromModule, toOperationContractSo
 import { logger } from "@modern-js/utils";
 import { HttpApi } from "effect/unstable/httpapi";
 import { resolveAdapterCrossProjectPolicy } from "../cross-project-policy/index.mjs";
-function resolveEffectAdapterCrossProjectPolicy(api, prefix, mod) {
+function resolveEffectServerCrossProjectPolicy(api, prefix, mod, producer) {
     const contractSourcesPromise = null === mod ? Promise.resolve([]) : Promise.resolve().then(()=>extractHttpApiFromModule(mod, HttpApi.isHttpApi)).then((effectApi)=>{
         if (null === effectApi) return [];
         const reflect = (apiValue, handlers)=>{
@@ -19,9 +19,9 @@ function resolveEffectAdapterCrossProjectPolicy(api, prefix, mod) {
         return [];
     });
     return contractSourcesPromise.then((contractSources)=>{
-        const policy = resolveAdapterCrossProjectPolicy(api, contractSources);
+        const policy = resolveAdapterCrossProjectPolicy(api, contractSources, producer);
         if (policy?.enabled === true && 0 === contractSources.length) logger.warn('[BFF][Effect] Cross-project policy enabled but no HttpApi endpoints could be reflected; requests fail operation-contract matching unless allowUnknownOperations is enabled.');
         return policy;
     });
 }
-export { resolveEffectAdapterCrossProjectPolicy };
+export { resolveEffectServerCrossProjectPolicy };

package/dist/esm-node/effect-server/entry.mjs

@@ -0,0 +1,16 @@
+import "node:module";
+import node_path from "node:path";
+import "@modern-js/server-runtime-extensions/server-config";
+import { API_DIR, isProd } from "@modern-js/utils";
+import { resolveEffectEntry } from "../effect-source-loader/paths.mjs";
+function resolveEffectServerEntryFile(api) {
+    const { appDirectory, apiDirectory, distDirectory } = api.getServerContext();
+    const appDir = node_path.resolve(appDirectory || process.cwd());
+    return resolveEffectEntry({
+        appDir,
+        apiDir: node_path.resolve(appDir, apiDirectory || API_DIR),
+        effectEntry: api.getServerConfig()?.bff?.effect?.entry,
+        distDir: isProd() && distDirectory ? node_path.resolve(distDirectory) : void 0
+    }).path;
+}
+export { resolveEffectServerEntryFile };

package/dist/esm-node/{effect-adapter → effect-server}/error-response.mjs

@@ -1,7 +1,7 @@
 import "node:module";
 import { createSafeFailureResponse } from "@modern-js/runtime-extensions/safe-failure";
 import { logger } from "@modern-js/utils";
-function createEffectAdapterRuntimeErrorResponse(api, error, context) {
+function createEffectServerRuntimeErrorResponse(api, error, context) {
     try {
         const onError = api.getServerConfig()?.onError;
         if (void 0 !== onError) return Promise.resolve(onError(error instanceof Error ? error : new Error(String(error)), ensureJsonContext(context))).then((result)=>result instanceof Response ? result : createSafeFailureResponse(error)).catch((configError)=>{
@@ -35,4 +35,4 @@ function ensureJsonContext(context) {
         }
     });
 }
-export { createEffectAdapterRuntimeErrorResponse };
+export { createEffectServerRuntimeErrorResponse };