@bleedingdev/modern-js-plugin-bff-extensions 3.9.0-ultramodern.9 → 3.9.3-ultramodern.1

package/dist/esm/{effect-adapter → effect-server}/cross-project-policy.mjs

@@ -1,8 +1,8 @@
 import { collectEffectEndpoints, extractHttpApiFromModule, toOperationContractSources } from "@modern-js/bff-effect/effect";
 import { logger } from "@modern-js/utils";
-import { HttpApi } from "effect/unstable/httpapi";
+import { HttpApi } from "effect/http-api";
 import { resolveAdapterCrossProjectPolicy } from "../cross-project-policy/index.mjs";
-function resolveEffectAdapterCrossProjectPolicy(api, prefix, mod) {
+function resolveEffectServerCrossProjectPolicy(api, prefix, mod, producer) {
     const contractSourcesPromise = null === mod ? Promise.resolve([]) : Promise.resolve().then(()=>extractHttpApiFromModule(mod, HttpApi.isHttpApi)).then((effectApi)=>{
         if (null === effectApi) return [];
         const reflect = (apiValue, handlers)=>{
@@ -18,9 +18,9 @@ function resolveEffectAdapterCrossProjectPolicy(api, prefix, mod) {
         return [];
     });
     return contractSourcesPromise.then((contractSources)=>{
-        const policy = resolveAdapterCrossProjectPolicy(api, contractSources);
+        const policy = resolveAdapterCrossProjectPolicy(api, contractSources, producer);
         if (policy?.enabled === true && 0 === contractSources.length) logger.warn('[BFF][Effect] Cross-project policy enabled but no HttpApi endpoints could be reflected; requests fail operation-contract matching unless allowUnknownOperations is enabled.');
         return policy;
     });
 }
-export { resolveEffectAdapterCrossProjectPolicy };
+export { resolveEffectServerCrossProjectPolicy };

package/dist/esm/effect-server/entry.mjs

@@ -0,0 +1,15 @@
+import node_path from "node:path";
+import "@modern-js/server-runtime-extensions/server-config";
+import { API_DIR, isProd } from "@modern-js/utils";
+import { resolveEffectEntry } from "../effect-source-loader/paths.mjs";
+function resolveEffectServerEntryFile(api) {
+    const { appDirectory, apiDirectory, distDirectory } = api.getServerContext();
+    const appDir = node_path.resolve(appDirectory || process.cwd());
+    return resolveEffectEntry({
+        appDir,
+        apiDir: node_path.resolve(appDir, apiDirectory || API_DIR),
+        effectEntry: api.getServerConfig()?.bff?.effect?.entry,
+        distDir: isProd() && distDirectory ? node_path.resolve(distDirectory) : void 0
+    }).path;
+}
+export { resolveEffectServerEntryFile };

package/dist/esm/{effect-adapter → effect-server}/error-response.mjs

@@ -1,6 +1,6 @@
 import { createSafeFailureResponse } from "@modern-js/runtime-extensions/safe-failure";
 import { logger } from "@modern-js/utils";
-function createEffectAdapterRuntimeErrorResponse(api, error, context) {
+function createEffectServerRuntimeErrorResponse(api, error, context) {
     try {
         const onError = api.getServerConfig()?.onError;
         if (void 0 !== onError) return Promise.resolve(onError(error instanceof Error ? error : new Error(String(error)), ensureJsonContext(context))).then((result)=>result instanceof Response ? result : createSafeFailureResponse(error)).catch((configError)=>{
@@ -34,4 +34,4 @@ function ensureJsonContext(context) {
         }
     });
 }
-export { createEffectAdapterRuntimeErrorResponse };
+export { createEffectServerRuntimeErrorResponse };

package/dist/esm/effect-server/index.mjs

@@ -0,0 +1,151 @@
+import node_path from "node:path";
+import "@modern-js/server-runtime-extensions/server-config";
+import { dispatchEffectBffRequest, resolveEffectBffModuleHandler, useEffectContext } from "@modern-js/bff-effect/effect";
+import { resolveOperationProducer } from "@modern-js/server-runtime-extensions/bff-policy/node";
+import { createDisposableServerRuntimeHandle, registerServerRuntimeDisposer } from "@modern-js/server-runtime-extensions/runtime-lifecycle";
+import { fs, isProd, logger } from "@modern-js/utils";
+import { checkCrossProjectPolicyForRequest } from "../cross-project-policy/evaluation.mjs";
+import { loadEffectBuiltModule, loadEffectSourceModule } from "../effect-source-loader/loader.mjs";
+import { resolveEffectServerCrossProjectPolicy } from "./cross-project-policy.mjs";
+import { resolveEffectServerEntryFile } from "./entry.mjs";
+import { createEffectServerRuntimeErrorResponse } from "./error-response.mjs";
+const EFFECT_MIDDLEWARE_BEFORE = [
+    'custom-server-hook',
+    'custom-server-middleware',
+    'render'
+];
+const effect_server = ()=>({
+        name: '@modern-js/plugin-bff-extensions/effect-server',
+        setup (api) {
+            const runtimeFramework = api.getServerContext().bffRuntimeFramework;
+            if ('effect' !== runtimeFramework) throw new Error(`Effect BFF server plugin requires Effect; received "${runtimeFramework}".`);
+            let handler = null;
+            let unregisterRuntimeDisposer;
+            let prefix = '/api';
+            let prefixes = [
+                '/api'
+            ];
+            let matchingPrefixes = [
+                '/api'
+            ];
+            let retired = false;
+            const dispose = async ()=>{
+                retired = true;
+                unregisterRuntimeDisposer?.();
+                unregisterRuntimeDisposer = void 0;
+                const previous = handler;
+                handler = null;
+                await previous?.dispose();
+            };
+            const loadHandler = async ()=>{
+                const entryFile = resolveEffectServerEntryFile(api);
+                if (!entryFile || !await fs.pathExists(entryFile)) {
+                    handler = null;
+                    return;
+                }
+                const { appDirectory } = api.getServerContext();
+                let mod;
+                try {
+                    mod = await (isProd() ? loadEffectBuiltModule(entryFile) : loadEffectSourceModule({
+                        resourcePath: entryFile,
+                        appDir: appDirectory || node_path.dirname(entryFile)
+                    }));
+                } catch (error) {
+                    logger.error(`[BFF][Effect] Failed to load Effect entry: ${entryFile}\n${String(error)}`);
+                    throw error;
+                }
+                const producer = resolveOperationProducer({
+                    directories: [
+                        node_path.dirname(entryFile),
+                        appDirectory
+                    ],
+                    requestId: api.getServerConfig()?.bff?.requestId
+                });
+                const crossProjectPolicies = new Map(await Promise.all(prefixes.map(async (prefix)=>[
+                        prefix,
+                        await resolveEffectServerCrossProjectPolicy(api, prefix, mod, producer)
+                    ])));
+                const effectConfig = api.getServerConfig()?.bff?.effect;
+                const loaded = await resolveEffectBffModuleHandler(mod, {
+                    openapi: effectConfig?.openapi,
+                    dataPlatform: effectConfig?.dataPlatform,
+                    validateRequest: (request)=>{
+                        const { path: mountedPathname } = useEffectContext();
+                        const prefix = matchingPrefixes.find((item)=>'/' === item || mountedPathname === item || mountedPathname.startsWith(`${item}/`));
+                        if (!prefix) return null;
+                        const requestUrl = new URL(request.url);
+                        if ('/' !== prefix) requestUrl.pathname = '/' === requestUrl.pathname ? prefix : `${prefix}${requestUrl.pathname}`;
+                        return checkCrossProjectPolicyForRequest(new Request(requestUrl, request), crossProjectPolicies.get(prefix));
+                    },
+                    onWarning: (message)=>logger.warn(message)
+                });
+                if (!loaded) {
+                    const error = new Error(`[BFF][Effect] Invalid Effect entry module: ${entryFile}. Export defineEffectBff(...) or a { api, layer } HttpApi module.`);
+                    logger.warn(error.message);
+                    throw error;
+                }
+                const candidateOwner = {};
+                if (loaded.dispose) registerServerRuntimeDisposer(candidateOwner, loaded.dispose);
+                const candidate = createDisposableServerRuntimeHandle(candidateOwner, loaded.handler);
+                if (retired) {
+                    await candidate.dispose();
+                    throw new Error('Cannot initialize a retired Effect server.');
+                }
+                handler = candidate;
+            };
+            api.onPrepare(async ()=>{
+                const { middlewares: globalMiddlewares } = api.getServerContext();
+                const configuredPrefix = api.getServerConfig()?.bff?.prefix;
+                const enableHandleWeb = api.getServerConfig()?.bff?.enableHandleWeb;
+                const configuredPrefixes = Array.isArray(configuredPrefix) ? configuredPrefix.filter(Boolean) : [
+                    configuredPrefix || '/api'
+                ];
+                prefixes = [
+                    ...new Set(configuredPrefixes.length > 0 ? configuredPrefixes : [
+                        '/api'
+                    ])
+                ];
+                matchingPrefixes = [
+                    ...prefixes
+                ].sort((left, right)=>right.length - left.length);
+                prefix = prefixes[0] || '/api';
+                const { serverBase } = api.getServerContext();
+                if (serverBase) unregisterRuntimeDisposer = registerServerRuntimeDisposer(serverBase, dispose);
+                try {
+                    await loadHandler();
+                } catch (error) {
+                    await dispose();
+                    throw error;
+                }
+                const middlewarePrefixes = enableHandleWeb ? [
+                    prefix
+                ] : matchingPrefixes;
+                const middlewares = middlewarePrefixes.map((middlewarePrefix)=>({
+                        name: 'effect-api-handler',
+                        path: enableHandleWeb ? '*' : `${middlewarePrefix}/*`,
+                        method: 'all',
+                        order: 'post',
+                        before: EFFECT_MIDDLEWARE_BEFORE,
+                        handler: async (context, next)=>{
+                            const activeHandler = handler;
+                            if (!activeHandler) {
+                                if (enableHandleWeb) return void await next();
+                                return createEffectServerRuntimeErrorResponse(api, new Error('[BFF][Effect] Missing Effect entry. Define api/index or configure bff.effect.entry.'), context);
+                            }
+                            const mountedPrefix = enableHandleWeb ? matchingPrefixes.find((item)=>'/' === item || context.req.path === item || context.req.path.startsWith(`${item}/`)) || prefix : middlewarePrefix;
+                            const response = await dispatchEffectBffRequest(activeHandler, context.req.raw, {
+                                prefix: mountedPrefix,
+                                env: context.env,
+                                path: context.req.path,
+                                method: context.req.method,
+                                onError: (error)=>createEffectServerRuntimeErrorResponse(api, error, context)
+                            });
+                            if (404 === response.status && enableHandleWeb) return void await next();
+                            return new Response(response.body, response);
+                        }
+                    }));
+                globalMiddlewares.push(...middlewares);
+            });
+        }
+    });
+export default effect_server;

package/dist/esm/effect-source-loader/built-entry.mjs

@@ -1,11 +1,10 @@
 import { fs, upath } from "@modern-js/utils";
-import { resolveEffectEntryFile } from "./paths.mjs";
-const BUILT_ENTRY_EXT = /\.(?:[cm]?ts|tsx|jsx)$/u;
+import { emittedEffectEntry, relativeEffectAppPath, resolveEffectEntryFile } from "./paths.mjs";
 function resolveBuiltEffectEntry(appDirectory, distDirectory, sourceEntry) {
     if (void 0 === sourceEntry || 0 === sourceEntry.length) return;
-    const relativeEntry = upath.relative(appDirectory, sourceEntry);
-    if ('..' === relativeEntry || relativeEntry.startsWith(`..${upath.sep}`)) throw new Error(`Effect BFF entry must be inside the application directory: ${sourceEntry}`);
-    const builtEntry = upath.resolve(distDirectory, relativeEntry).replace(BUILT_ENTRY_EXT, '.js');
+    const relativeEntry = relativeEffectAppPath(appDirectory, sourceEntry);
+    if (void 0 === relativeEntry) throw new Error(`Effect BFF entry must be inside the application directory: ${sourceEntry}`);
+    const builtEntry = emittedEffectEntry(upath.resolve(distDirectory, relativeEntry));
     return fs.existsSync(builtEntry) ? builtEntry : void 0;
 }
 async function bundleBuiltEffectEntryForNode(options) {
@@ -31,7 +30,7 @@ function resolveEffectEntryPaths(options) {
         apiDir,
         effectEntry
     });
-    const relativeEffectEntry = void 0 !== sourceEffectEntry && sourceEffectEntry.length > 0 ? upath.relative(appDir, sourceEffectEntry).replace(BUILT_ENTRY_EXT, '.js') : '';
+    const relativeEffectEntry = void 0 !== sourceEffectEntry && sourceEffectEntry.length > 0 ? emittedEffectEntry(upath.relative(appDir, sourceEffectEntry)) : '';
     return {
         sourceEffectEntry,
         relativeEffectEntry

package/dist/esm/effect-source-loader/http-api-runtime.mjs

@@ -1,5 +1,5 @@
 import { extractHttpApiFromModule } from "@modern-js/bff-effect/effect";
-import { HttpApi } from "effect/unstable/httpapi";
+import { HttpApi } from "effect/http-api";
 import { loadEffectSourceModule } from "./loader.mjs";
 function getHttpApiRuntime() {
     return Promise.resolve({

package/dist/esm/effect-source-loader/loader.mjs

@@ -4,7 +4,7 @@ import { builtinModules, createRequire } from "node:module";
 import node_path from "node:path";
 import { pathToFileURL } from "node:url";
 import { build, transform } from "esbuild";
-const NODE_TARGET = 'node26.7';
+const NODE_TARGET = 'node26.10';
 const SOURCE_LOADERS = new Map([
     [
         '.js',
@@ -79,6 +79,7 @@ const nodeBuiltins = new Set([
     ...builtinModules.map((name)=>`node:${name}`)
 ]);
 const dependencyResolutionMarker = 'modern-js-effect-dependency-resolution';
+const BFF_RUNTIME_PACKAGE = /^@modern-js\/(?:bff-effect|plugin-bff)(?:\/|$)/;
 async function isEsmOnlyFile(filename) {
     const extension = node_path.extname(filename).toLowerCase();
     if ('.mjs' === extension || '.mts' === extension) return true;
@@ -107,6 +108,10 @@ function externalizeInstalledDependencies(options) {
             buildApi.onResolve({
                 filter: /.*/
             }, async (args)=>{
+                if (BFF_RUNTIME_PACKAGE.test(args.path)) return {
+                    external: true,
+                    path: args.path
+                };
                 if (!isBareSpecifier(args.path) || nodeBuiltins.has(args.path) || args.pluginData?.[dependencyResolutionMarker] === true) return nodeBuiltins.has(args.path) ? {
                     external: true,
                     path: args.path
@@ -130,7 +135,8 @@ function externalizeInstalledDependencies(options) {
                     path: args.path
                 };
                 const realPath = await node_fs.promises.realpath(resolution.path).catch(()=>resolution.path);
-                if (realPath.includes(`${node_path.sep}node_modules${node_path.sep}`)) {
+                const loader = SOURCE_LOADERS.get(node_path.extname(realPath).toLowerCase());
+                if (realPath.includes(`${node_path.sep}node_modules${node_path.sep}`) && 'ts' !== loader && 'tsx' !== loader && 'jsx' !== loader) {
                     const runtimeResolution = await buildApi.resolve(args.path, {
                         importer: '',
                         kind: args.kind,

package/dist/esm/effect-source-loader/operation-contracts.mjs

@@ -1,45 +1,22 @@
 import { collectEffectEndpoints, toOperationContractSources } from "@modern-js/bff-effect/effect";
-import { buildOperationContractMap, deriveOperationVersion } from "@modern-js/server-runtime-extensions/bff-policy/node";
-import { fs, upath } from "@modern-js/utils";
+import { buildOperationContractMap, resolveOperationProducer } from "@modern-js/server-runtime-extensions/bff-policy/node";
+import { upath } from "@modern-js/utils";
 import { getHttpApiRuntime, loadEffectApi } from "./http-api-runtime.mjs";
-function getPackageInfo(resourcePath, appDir, onDependency) {
-    for (const startDir of [
-        upath.dirname(resourcePath),
-        appDir
-    ]){
-        let current = upath.resolve(startDir);
-        for(let depth = 0; depth < 32; depth += 1){
-            const packageJsonPath = upath.join(current, 'package.json');
-            if (fs.existsSync(packageJsonPath)) {
-                onDependency?.(packageJsonPath);
-                try {
-                    const packageJson = fs.readJSONSync(packageJsonPath);
-                    return {
-                        name: packageJson.name,
-                        version: packageJson.version
-                    };
-                } catch  {
-                    return {};
-                }
-            }
-            const parent = upath.dirname(current);
-            if (parent === current) break;
-            current = parent;
-        }
-    }
-    return {};
-}
 async function resolveEffectOperationContracts(options) {
     const api = await loadEffectApi(options);
     if (null === api) return null;
     const runtime = await getHttpApiRuntime();
     const endpoints = collectEffectEndpoints(runtime.reflect, api, options.prefix);
-    const packageInfo = getPackageInfo(options.resourcePath, options.appDir, options.onDependency);
-    const requestId = options.requestId?.trim() || packageInfo.name || 'default';
     return buildOperationContractMap({
         handlers: toOperationContractSources(endpoints),
-        requestId,
-        operationVersion: deriveOperationVersion(packageInfo.version)
+        ...resolveOperationProducer({
+            directories: [
+                upath.dirname(options.resourcePath),
+                options.appDir
+            ],
+            requestId: options.requestId,
+            onDependency: options.onDependency
+        })
     });
 }
 export { resolveEffectOperationContracts };

package/dist/esm/effect-source-loader/paths.mjs

@@ -9,16 +9,35 @@ const JS_OR_TS_EXTS = [
     '.cjs',
     '.cts'
 ];
-function resolveEffectEntryFile(options) {
-    const { appDir, apiDir, effectEntry } = options;
-    const resolveEntry = (entryWithoutExt)=>{
-        if ('' !== upath.extname(entryWithoutExt)) return fs.existsSync(entryWithoutExt) ? entryWithoutExt : void 0;
-        return findExists(JS_OR_TS_EXTS.map((ext)=>`${entryWithoutExt}${ext}`)) || void 0;
+const emittedEffectEntry = (entry)=>entry.replace(/\.(?:[cm]?ts|tsx|jsx)$/u, '.js');
+function relativeEffectAppPath(appDir, entry) {
+    const relative = upath.relative(appDir, entry);
+    return '..' === relative || relative.startsWith('../') || relative.split('/').includes('node_modules') ? void 0 : relative;
+}
+function existingEntry(entry) {
+    return upath.extname(entry) ? fs.existsSync(entry) ? entry : void 0 : findExists(JS_OR_TS_EXTS.map((ext)=>`${entry}${ext}`)) || void 0;
+}
+function resolveEffectEntry(options) {
+    const { appDir, apiDir, effectEntry, distDir } = options;
+    const entry = upath.resolve(appDir, effectEntry || upath.join(apiDir, 'index'));
+    if (distDir && void 0 !== relativeEffectAppPath(distDir, entry)) return {
+        kind: 'built-output',
+        path: existingEntry(emittedEffectEntry(entry))
+    };
+    const relative = relativeEffectAppPath(appDir, entry);
+    if (void 0 === relative) return {
+        kind: 'external-sdk',
+        path: existingEntry(entry)
     };
-    if (void 0 !== effectEntry && '' !== effectEntry) {
-        const entryWithoutExt = upath.isAbsolute(effectEntry) ? effectEntry : upath.resolve(appDir, effectEntry);
-        return resolveEntry(entryWithoutExt);
-    }
-    return resolveEntry(upath.resolve(apiDir, 'index'));
+    return distDir ? {
+        kind: 'built-output',
+        path: existingEntry(emittedEffectEntry(upath.resolve(distDir, relative)))
+    } : {
+        kind: 'app-source',
+        path: existingEntry(entry)
+    };
+}
+function resolveEffectEntryFile(options) {
+    return resolveEffectEntry(options).path;
 }
-export { resolveEffectEntryFile };
+export { emittedEffectEntry, relativeEffectAppPath, resolveEffectEntry, resolveEffectEntryFile };

package/dist/esm-node/backend-federation/edge.mjs

@@ -3,7 +3,7 @@ import { BACKEND_FEDERATION_CONTRACT_VERSION, BACKEND_FEDERATION_EFFECT_EXPOSE,
 import { createBackendFederationLoadEntryPlugin, createBackendFederationRuntime } from "./edge-runtime.mjs";
 import { normalizeExpose } from "./utils.mjs";
 function loadBackendFederatedEffectApi(options) {
-    if (void 0 !== options.runtime || void 0 !== options.entryPolicy) return Promise.reject(new Error('[BFF][Effect] Edge backend federation does not execute custom runtimes or entry evaluators. Register a static or service-binding entry provider.'));
+    if (void 0 !== options.runtime || void 0 !== options.entryPolicy || void 0 !== options.shared) return Promise.reject(new Error('[BFF][Effect] Edge backend federation does not execute custom runtimes, entry evaluators or host shares. Register a static or service-binding entry provider.'));
     const remoteName = options.remote?.name ?? options.remoteName;
     if (void 0 === remoteName || 0 === remoteName.length) return Promise.reject(new Error('[BFF][Effect] Missing backend federation remote name.'));
     if (!options.expected?.unitId || !options.expected.buildMarker) return Promise.reject(new Error('[BFF][Effect] Backend federation requires expected.unitId and expected.buildMarker.'));

package/dist/esm-node/backend-federation/identity.mjs

@@ -1,36 +1,31 @@
 import "node:module";
 import { isRecord } from "./utils.mjs";
-function validateExpectedBackendFederationIdentity(loaded, expected) {
-    const issues = [];
+function backendFederationCompatibility(loaded) {
     const contract = isRecord(loaded) ? loaded.backendFederationContract : void 0;
     const compatibility = isRecord(contract) ? contract.compatibility : void 0;
-    if (!isRecord(compatibility)) return [
+    return isRecord(compatibility) ? compatibility : void 0;
+}
+function validateBackendFederationCompatibility(compatibility, expected) {
+    return Object.entries(expected).flatMap(([field, value])=>void 0 === value || 'string' == typeof compatibility[field] && compatibility[field].length > 0 && compatibility[field] === value ? [] : [
+            {
+                path: `backendFederationContract.compatibility.${field}`,
+                message: `expected ${value}, received ${'string' == typeof compatibility[field] ? compatibility[field] : typeof compatibility[field]}`
+            }
+        ]);
+}
+function validateExpectedBackendFederationIdentity(loaded, expected) {
+    const compatibility = backendFederationCompatibility(loaded);
+    return compatibility ? validateBackendFederationCompatibility(compatibility, {
+        unitId: expected.unitId,
+        build: expected.buildMarker
+    }) : [
         {
             path: 'backendFederationContract.compatibility',
             message: 'loaded module declares no compatibility metadata; delivery-unit identity cannot be validated'
         }
     ];
-    const unitId = compatibility.unitId;
-    if ('string' != typeof unitId || 0 === unitId.length) issues.push({
-        path: 'backendFederationContract.compatibility.unitId',
-        message: `missing delivery-unit id; expected ${expected.unitId}`
-    });
-    else if (unitId !== expected.unitId) issues.push({
-        path: 'backendFederationContract.compatibility.unitId',
-        message: `expected ${expected.unitId}, received ${unitId}`
-    });
-    const build = compatibility.build;
-    if ('string' != typeof build || 0 === build.length) issues.push({
-        path: 'backendFederationContract.compatibility.build',
-        message: `missing build marker; expected ${expected.buildMarker}`
-    });
-    else if (build !== expected.buildMarker) issues.push({
-        path: 'backendFederationContract.compatibility.build',
-        message: `expected ${expected.buildMarker}, received ${build}`
-    });
-    return issues;
 }
 function formatBackendFederationIdentityIssues(issues) {
     return issues.map((issue)=>`${issue.path}: ${issue.message}`).join('; ');
 }
-export { formatBackendFederationIdentityIssues, validateExpectedBackendFederationIdentity };
+export { backendFederationCompatibility, formatBackendFederationIdentityIssues, validateBackendFederationCompatibility, validateExpectedBackendFederationIdentity };

package/dist/esm-node/backend-federation/integrity-plugin.mjs

@@ -0,0 +1,69 @@
+import "node:module";
+import { evaluateBackendFederationCommonJsEntry, loadVerifiedBackendFederationEntry } from "@modern-js/server-runtime-extensions/backend-federation-security";
+import { Module } from "@module-federation/runtime";
+const PROVIDED_ENTRY_SCHEME = /^(?:binding|service|static):/u;
+function decodeDataUrl(remote) {
+    const commaIndex = remote.entry.indexOf(',');
+    if (commaIndex < 0) throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} has an invalid data URL entry.`);
+    return new TextEncoder().encode(decodeURIComponent(remote.entry.slice(commaIndex + 1)));
+}
+async function importContainer(remote) {
+    const namespace = await import(remote.entry);
+    return namespace.default ?? namespace;
+}
+function loadContainer(remote, options) {
+    const verified = Boolean(remote.verification || options.entryPolicy?.expected);
+    const scheme = /^[a-z][a-z0-9+.-]*:/iu.exec(remote.entry)?.[0].toLowerCase();
+    if ('https:' === scheme || 'http:' === scheme) {
+        if (!verified) throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} requires verified entry bytes before network execution.`);
+        return loadVerifiedBackendFederationEntry({
+            ...options.entryPolicy,
+            remote,
+            ...remote.verification ? {
+                verification: remote.verification
+            } : {}
+        });
+    }
+    if (verified) throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} declares entry verification, but only http(s) entries are fetched and verified.`);
+    if ('data:' === scheme && 'module' !== remote.type) return Promise.resolve(evaluateBackendFederationCommonJsEntry(remote, decodeDataUrl(remote), options.entryPolicy?.evaluateCommonJs));
+    if ('data:' === scheme || 'file:' === scheme) return importContainer(remote);
+    throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} uses unsupported entry ${remote.entry}. Use a verified http(s) entry, a data: or file: entry, or a binding:, service: or static: entry served by createBackendFederationLoadEntryPlugin().`);
+}
+function registerRemoteContainer(origin, remoteInfo, container) {
+    const module = new Module({
+        host: origin,
+        remoteInfo
+    });
+    module.remoteEntryExports = container;
+    origin.moduleCache.set(remoteInfo.name, module);
+}
+function createBackendFederationIntegrityPlugin(options, remotes) {
+    const loading = new Map();
+    const register = async (origin, remoteInfo)=>{
+        const remote = remotes.find((candidate)=>candidate.name === remoteInfo.name);
+        if (void 0 === remote) throw new Error(`[BFF][Effect] Missing backend federation remote ${remoteInfo.name}.`);
+        if (PROVIDED_ENTRY_SCHEME.test(remote.entry)) {
+            if (origin.moduleCache.get(remote.name)?.remoteEntryExports === void 0) throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} has no entry provider for ${remote.entry}. Pass createBackendFederationLoadEntryPlugin() in plugins.`);
+            return;
+        }
+        const container = await loadContainer(remote, options);
+        if ('function' != typeof container?.get) throw new Error(`[BFF][Effect] Backend federation remote ${remote.name} entry must expose get().`);
+        registerRemoteContainer(origin, remoteInfo, container);
+    };
+    return {
+        name: 'modernjs-backend-federation-integrity',
+        afterMatchRemote ({ origin, remoteInfo }) {
+            if (void 0 === remoteInfo) return;
+            let pending = loading.get(remoteInfo.name);
+            if (void 0 === pending) {
+                pending = register(origin, remoteInfo);
+                loading.set(remoteInfo.name, pending);
+                pending.catch(()=>{
+                    if (loading.get(remoteInfo.name) === pending) loading.delete(remoteInfo.name);
+                });
+            }
+            return pending;
+        }
+    };
+}
+export { PROVIDED_ENTRY_SCHEME, createBackendFederationIntegrityPlugin, registerRemoteContainer };

package/dist/esm-node/backend-federation/node-shared.mjs

@@ -0,0 +1,42 @@
+import "node:module";
+import { createRequire } from "node:module";
+const fromAdapter = createRequire(import.meta.url);
+const effectPackageJson = fromAdapter.resolve('@modern-js/bff-effect/package.json');
+const fromEffectPackage = createRequire(effectPackageJson);
+let hostShared;
+function effectBffHostShared() {
+    if (void 0 !== hostShared) return hostShared;
+    const { EFFECT_BFF_CONTEXT_STORAGE_SHARE, EFFECT_BFF_HANDLER_FACTORY_REGISTRY_SHARE } = fromEffectPackage('@modern-js/bff-effect/effect-edge');
+    const { getEffectContextStorage } = fromEffectPackage('@modern-js/bff-effect/context');
+    const handlerFactoryRegistry = fromEffectPackage("#effect-entry-shape-registry");
+    const version = fromAdapter(effectPackageJson).version;
+    hostShared = {
+        [EFFECT_BFF_HANDLER_FACTORY_REGISTRY_SHARE]: {
+            version,
+            lib: ()=>handlerFactoryRegistry,
+            shareConfig: {
+                singleton: true,
+                requiredVersion: false
+            }
+        },
+        [EFFECT_BFF_CONTEXT_STORAGE_SHARE]: {
+            version,
+            lib: getEffectContextStorage,
+            shareConfig: {
+                singleton: true,
+                requiredVersion: false
+            }
+        }
+    };
+    return hostShared;
+}
+function withEffectBffHostShared(shared) {
+    const host = effectBffHostShared();
+    const reserved = Object.keys(host).find((name)=>shared && name in shared);
+    if (void 0 !== reserved) throw new Error(`[BFF][Effect] Share ${reserved} is reserved for the Node host. Remove it from options.shared.`);
+    return {
+        ...shared,
+        ...host
+    };
+}
+export { effectBffHostShared, withEffectBffHostShared };

package/dist/esm-node/backend-federation/node.mjs

@@ -1,13 +1,15 @@
 import "node:module";
 import { evaluateNodeBackendFederationCommonJs } from "@modern-js/server-runtime-extensions/backend-federation-security/node";
 import { loadBackendFederatedEffectApi } from "./load.mjs";
-function node_loadBackendFederatedEffectApi(options) {
+import { effectBffHostShared, withEffectBffHostShared } from "./node-shared.mjs";
+async function node_loadBackendFederatedEffectApi(options) {
     return loadBackendFederatedEffectApi({
         ...options,
+        shared: withEffectBffHostShared(options.shared),
         entryPolicy: {
             ...options.entryPolicy,
             evaluateCommonJs: options.entryPolicy?.evaluateCommonJs ?? evaluateNodeBackendFederationCommonJs
         }
     });
 }
-export { node_loadBackendFederatedEffectApi as loadBackendFederatedEffectApi };
+export { effectBffHostShared, node_loadBackendFederatedEffectApi as loadBackendFederatedEffectApi };

package/dist/esm-node/backend-federation/plugin.mjs

@@ -1,25 +1,44 @@
 import "node:module";
+import { PROVIDED_ENTRY_SCHEME, registerRemoteContainer } from "./integrity-plugin.mjs";
+function toContainer(entry) {
+    return {
+        get (id) {
+            return ()=>Promise.resolve(entry.get(id)).then((factory)=>factory());
+        },
+        init (...args) {
+            return entry.init?.(...args);
+        }
+    };
+}
 function createBackendFederationLoadEntryPlugin(options) {
+    const provided = new WeakMap();
     return {
         name: 'modernjs-backend-federation-load-entry',
-        loadEntry ({ remoteInfo }) {
-            return Promise.resolve(options.resolveEntry({
-                name: remoteInfo.name,
-                entry: remoteInfo.entry,
-                type: remoteInfo.type,
-                entryGlobalName: remoteInfo.entryGlobalName,
-                shareScope: remoteInfo.shareScope
-            })).then((entry)=>{
-                if (void 0 === entry) return;
-                return {
-                    get (id) {
-                        return ()=>Promise.resolve(entry.get(id)).then((factory)=>factory());
-                    },
-                    init (...args) {
-                        return entry.init?.(...args);
-                    }
-                };
-            });
+        afterMatchRemote ({ origin, remoteInfo }) {
+            if (void 0 === remoteInfo || !PROVIDED_ENTRY_SCHEME.test(remoteInfo.entry)) return;
+            let entries = provided.get(origin);
+            if (entries?.has(remoteInfo.name) !== true && origin.moduleCache.get(remoteInfo.name)?.remoteEntryExports !== void 0) return;
+            if (void 0 === entries) {
+                entries = new Map();
+                provided.set(origin, entries);
+            }
+            const runtimeEntries = entries;
+            let pending = runtimeEntries.get(remoteInfo.name);
+            if (void 0 === pending) {
+                pending = Promise.resolve(options.resolveEntry({
+                    name: remoteInfo.name,
+                    entry: remoteInfo.entry,
+                    type: remoteInfo.type
+                })).then((entry)=>{
+                    if (void 0 !== entry) registerRemoteContainer(origin, remoteInfo, toContainer(entry));
+                });
+                const settled = pending;
+                runtimeEntries.set(remoteInfo.name, settled);
+                settled.catch(()=>{
+                    if (runtimeEntries.get(remoteInfo.name) === settled) runtimeEntries.delete(remoteInfo.name);
+                });
+            }
+            return pending;
         }
     };
 }