@bleedingdev/modern-js-plugin-bff 3.2.0-ultramodern.12 → 3.2.0-ultramodern.121

package/dist/cjs/cli.js

@@ -10,11 +10,15 @@ var __webpack_require__ = {};
     };
 })();
 (()=>{
-    __webpack_require__.d = (exports1, definition)=>{
-        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
-            enumerable: true,
-            get: definition[key]
-        });
+    __webpack_require__.d = (exports1, getters, values)=>{
+        var define = (defs, kind)=>{
+            for(var key in defs)if (__webpack_require__.o(defs, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+                enumerable: true,
+                [kind]: defs[key]
+            });
+        };
+        define(getters, "get");
+        define(values, "value");
     };
 })();
 (()=>{

package/dist/cjs/constants.js

@@ -1,11 +1,15 @@
 "use strict";
 var __webpack_require__ = {};
 (()=>{
-    __webpack_require__.d = (exports1, definition)=>{
-        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
-            enumerable: true,
-            get: definition[key]
-        });
+    __webpack_require__.d = (exports1, getters, values)=>{
+        var define = (defs, kind)=>{
+            for(var key in defs)if (__webpack_require__.o(defs, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+                enumerable: true,
+                [kind]: defs[key]
+            });
+        };
+        define(getters, "get");
+        define(values, "value");
     };
 })();
 (()=>{
@@ -23,10 +27,6 @@ var __webpack_require__ = {};
 })();
 var __webpack_exports__ = {};
 __webpack_require__.r(__webpack_exports__);
-__webpack_require__.d(__webpack_exports__, {
-    API_APP_NAME: ()=>API_APP_NAME,
-    BUILD_FILES: ()=>BUILD_FILES
-});
 const API_APP_NAME = '_app';
 const BUILD_FILES = [
     '**/*.[tj]sx?',
@@ -37,6 +37,10 @@ const BUILD_FILES = [
     '!__tests__/*.tsx?',
     '!__tests__/*.jsx?'
 ];
+__webpack_require__.d(__webpack_exports__, {}, {
+    API_APP_NAME: API_APP_NAME,
+    BUILD_FILES: BUILD_FILES
+});
 exports.API_APP_NAME = __webpack_exports__.API_APP_NAME;
 exports.BUILD_FILES = __webpack_exports__.BUILD_FILES;
 for(var __rspack_i in __webpack_exports__)if (-1 === [

package/dist/cjs/index.js

@@ -24,11 +24,15 @@ function __webpack_require__(moduleId) {
     };
 })();
 (()=>{
-    __webpack_require__.d = (exports1, definition)=>{
-        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
-            enumerable: true,
-            get: definition[key]
-        });
+    __webpack_require__.d = (exports1, getters, values)=>{
+        var define = (defs, kind)=>{
+            for(var key in defs)if (__webpack_require__.o(defs, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+                enumerable: true,
+                [kind]: defs[key]
+            });
+        };
+        define(getters, "get");
+        define(values, "value");
     };
 })();
 (()=>{

package/dist/cjs/loader.js

@@ -10,11 +10,15 @@ var __webpack_require__ = {};
     };
 })();
 (()=>{
-    __webpack_require__.d = (exports1, definition)=>{
-        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
-            enumerable: true,
-            get: definition[key]
-        });
+    __webpack_require__.d = (exports1, getters, values)=>{
+        var define = (defs, kind)=>{
+            for(var key in defs)if (__webpack_require__.o(defs, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+                enumerable: true,
+                [kind]: defs[key]
+            });
+        };
+        define(getters, "get");
+        define(values, "value");
     };
 })();
 (()=>{
@@ -40,6 +44,24 @@ const utils_namespaceObject = require("@modern-js/utils");
 const external_path_namespaceObject = require("path");
 var external_path_default = /*#__PURE__*/ __webpack_require__.n(external_path_namespaceObject);
 const effectClientGenerator_js_namespaceObject = require("./utils/effectClientGenerator.js");
+async function transformEffectRuntimeSource(source, filename) {
+    const swc = await import("@swc/core");
+    const result = await swc.transform(source, {
+        filename,
+        sourceMaps: false,
+        jsc: {
+            parser: {
+                syntax: "typescript",
+                tsx: filename.endsWith('.tsx') || filename.endsWith('.jsx')
+            },
+            target: 'es2022'
+        },
+        module: {
+            type: 'es6'
+        }
+    });
+    return result.code;
+}
 async function loader(source) {
     this.cacheable();
     const { resourcePath } = this;
@@ -51,6 +73,11 @@ async function loader(source) {
         apiDir: draftOptions.apiDir,
         effectEntry: draftOptions.effectEntry
     });
+    if ('effect' === draftOptions.bffRuntimeFramework && effectEntryFile && external_path_default().resolve(effectEntryFile) === external_path_default().resolve(resourcePath) && this.resourceQuery.includes('modern-bff-runtime')) {
+        const code = await transformEffectRuntimeSource(source, resourcePath);
+        callback(void 0, code);
+        return;
+    }
     if ('effect' === draftOptions.bffRuntimeFramework && effectEntryFile && external_path_default().resolve(effectEntryFile) === external_path_default().resolve(resourcePath)) {
         const code = await (0, effectClientGenerator_js_namespaceObject.generateEffectClientCode)({
             appDir: draftOptions.appDir,

package/dist/cjs/runtime/create-request/index.js

@@ -1,11 +1,15 @@
 "use strict";
 var __webpack_require__ = {};
 (()=>{
-    __webpack_require__.d = (exports1, definition)=>{
-        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
-            enumerable: true,
-            get: definition[key]
-        });
+    __webpack_require__.d = (exports1, getters, values)=>{
+        var define = (defs, kind)=>{
+            for(var key in defs)if (__webpack_require__.o(defs, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+                enumerable: true,
+                [kind]: defs[key]
+            });
+        };
+        define(getters, "get");
+        define(values, "value");
     };
 })();
 (()=>{

package/dist/cjs/runtime/data-platform/index.js

@@ -1,11 +1,15 @@
 "use strict";
 var __webpack_require__ = {};
 (()=>{
-    __webpack_require__.d = (exports1, definition)=>{
-        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
-            enumerable: true,
-            get: definition[key]
-        });
+    __webpack_require__.d = (exports1, getters, values)=>{
+        var define = (defs, kind)=>{
+            for(var key in defs)if (__webpack_require__.o(defs, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+                enumerable: true,
+                [kind]: defs[key]
+            });
+        };
+        define(getters, "get");
+        define(values, "value");
     };
 })();
 (()=>{
@@ -24,18 +28,21 @@ var __webpack_require__ = {};
 var __webpack_exports__ = {};
 __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
+    DATA_BATCH_TRANSPORT_OTEL_EVENT: ()=>DATA_BATCH_TRANSPORT_OTEL_EVENT,
     DEFAULT_DATA_BATCH_ENDPOINT: ()=>DEFAULT_DATA_BATCH_ENDPOINT,
     DEFAULT_DATA_BATCH_HEADER: ()=>DEFAULT_DATA_BATCH_HEADER,
     DEFAULT_DATA_ENVELOPE_HEADER: ()=>DEFAULT_DATA_ENVELOPE_HEADER,
     buildQueryKey: ()=>buildQueryKey,
     buildScopeKey: ()=>buildScopeKey,
     createDataBatchTransport: ()=>createDataBatchTransport,
+    createDataBatchTransportTelemetryAttributes: ()=>createDataBatchTransportTelemetryAttributes,
     createHydrationEnvelope: ()=>createHydrationEnvelope,
     createInvalidationEvent: ()=>createInvalidationEvent,
     createOperationId: ()=>createOperationId,
     createRequestEnvelope: ()=>createRequestEnvelope,
     decodeRequestEnvelopeHeader: ()=>decodeRequestEnvelopeHeader,
     deriveChildTraceContext: ()=>deriveChildTraceContext,
+    emitDataBatchTransportEvent: ()=>emitDataBatchTransportEvent,
     encodeRequestEnvelopeHeader: ()=>encodeRequestEnvelopeHeader,
     formatTraceparentHeader: ()=>formatTraceparentHeader,
     normalizeOrigin: ()=>normalizeOrigin,
@@ -46,10 +53,32 @@ __webpack_require__.d(__webpack_exports__, {
     validateRequestEnvelope: ()=>validateRequestEnvelope,
     validateSelectionPlan: ()=>validateSelectionPlan
 });
+const create_request_namespaceObject = require("@modern-js/create-request");
+const api_namespaceObject = require("@opentelemetry/api");
+const DATA_BATCH_TRANSPORT_OTEL_EVENT = 'modernjs.data.batch';
+function createDataBatchTransportTelemetryAttributes(event) {
+    return {
+        'modernjs.data.batch.type': event.type,
+        'modernjs.data.batch.endpoint': event.endpoint,
+        'modernjs.data.batch.degraded': 'fallback' === event.type || 'disable' === event.type,
+        ...event.batchId ? {
+            'modernjs.data.batch.id': event.batchId
+        } : {},
+        ...'number' == typeof event.size ? {
+            'modernjs.data.batch.size': event.size
+        } : {},
+        ...event.reason ? {
+            'modernjs.data.batch.reason': event.reason
+        } : {}
+    };
+}
+function emitDataBatchTransportEvent(onEvent, event) {
+    onEvent?.(event);
+    api_namespaceObject.trace.getActiveSpan()?.addEvent(DATA_BATCH_TRANSPORT_OTEL_EVENT, createDataBatchTransportTelemetryAttributes(event));
+}
 const DEFAULT_DATA_ENVELOPE_HEADER = 'x-modernjs-data-envelope';
 const DEFAULT_DATA_BATCH_ENDPOINT = '/_data/batch';
 const DEFAULT_DATA_BATCH_HEADER = 'x-modernjs-data-batch';
-const TRACEPARENT_REGEX = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/i;
 function isPlainObject(value) {
     if ('object' != typeof value || null === value || Array.isArray(value)) return false;
     const proto = Object.getPrototypeOf(value);
@@ -146,18 +175,7 @@ function isValidHex(value, length) {
     return value.length === length && /^[0-9a-f]+$/.test(value);
 }
 function parseTraceparentHeader(header) {
-    const match = header.trim().match(TRACEPARENT_REGEX);
-    if (!match) return null;
-    const traceId = match[1].toLowerCase();
-    const spanId = match[2].toLowerCase();
-    const flags = match[3].toLowerCase();
-    if (isAllZeroHex(traceId) || isAllZeroHex(spanId)) return null;
-    const sampled = (0x1 & Number.parseInt(flags, 16)) === 1;
-    return {
-        traceId,
-        spanId,
-        sampled
-    };
+    return (0, create_request_namespaceObject.parseTraceparent)(header) ?? null;
 }
 function formatTraceparentHeader(trace) {
     const traceId = trace.traceId.toLowerCase();
@@ -463,7 +481,7 @@ function createDataBatchTransport(options = {}) {
         bucket.items = [];
         bucket.bytes = 0;
         if (1 === items.length || disabledEndpoints.has(endpoint)) {
-            onEvent?.({
+            emitDataBatchTransportEvent(onEvent, {
                 type: disabledEndpoints.has(endpoint) ? 'fallback' : 'flush',
                 endpoint,
                 size: items.length,
@@ -480,7 +498,7 @@ function createDataBatchTransport(options = {}) {
             sentAt: Date.now(),
             items: items.map((item)=>item.item)
         };
-        onEvent?.({
+        emitDataBatchTransportEvent(onEvent, {
             type: 'flush',
             endpoint,
             batchId,
@@ -507,7 +525,7 @@ function createDataBatchTransport(options = {}) {
                 requestInit.signal = controller.signal;
                 timeoutHandle = setTimeout(()=>{
                     controller.abort();
-                    onEvent?.({
+                    emitDataBatchTransportEvent(onEvent, {
                         type: 'fallback',
                         endpoint,
                         batchId,
@@ -520,13 +538,13 @@ function createDataBatchTransport(options = {}) {
             if (!response.ok) {
                 if (404 === response.status || 405 === response.status) {
                     disabledEndpoints.add(endpoint);
-                    onEvent?.({
+                    emitDataBatchTransportEvent(onEvent, {
                         type: 'disable',
                         endpoint,
                         batchId,
                         reason: `batch-endpoint-unavailable-${String(response.status)}`
                     });
-                } else onEvent?.({
+                } else emitDataBatchTransportEvent(onEvent, {
                     type: 'fallback',
                     endpoint,
                     batchId,
@@ -539,7 +557,7 @@ function createDataBatchTransport(options = {}) {
             }
             const result = await response.json();
             if (!isBatchResponsePayload(result)) {
-                onEvent?.({
+                emitDataBatchTransportEvent(onEvent, {
                     type: 'fallback',
                     endpoint,
                     batchId,
@@ -562,7 +580,7 @@ function createDataBatchTransport(options = {}) {
                 return parseResponseLikeCreateRequest(reconstructedResponse);
             });
         } catch (error) {
-            onEvent?.({
+            emitDataBatchTransportEvent(onEvent, {
                 type: 'fallback',
                 endpoint,
                 batchId,
@@ -629,7 +647,7 @@ function createDataBatchTransport(options = {}) {
             };
             bucket.items.push(queued);
             bucket.bytes += size;
-            onEvent?.({
+            emitDataBatchTransportEvent(onEvent, {
                 type: 'enqueue',
                 endpoint,
                 size: bucket.items.length
@@ -644,18 +662,21 @@ function createDataBatchTransport(options = {}) {
         return promise;
     };
 }
+exports.DATA_BATCH_TRANSPORT_OTEL_EVENT = __webpack_exports__.DATA_BATCH_TRANSPORT_OTEL_EVENT;
 exports.DEFAULT_DATA_BATCH_ENDPOINT = __webpack_exports__.DEFAULT_DATA_BATCH_ENDPOINT;
 exports.DEFAULT_DATA_BATCH_HEADER = __webpack_exports__.DEFAULT_DATA_BATCH_HEADER;
 exports.DEFAULT_DATA_ENVELOPE_HEADER = __webpack_exports__.DEFAULT_DATA_ENVELOPE_HEADER;
 exports.buildQueryKey = __webpack_exports__.buildQueryKey;
 exports.buildScopeKey = __webpack_exports__.buildScopeKey;
 exports.createDataBatchTransport = __webpack_exports__.createDataBatchTransport;
+exports.createDataBatchTransportTelemetryAttributes = __webpack_exports__.createDataBatchTransportTelemetryAttributes;
 exports.createHydrationEnvelope = __webpack_exports__.createHydrationEnvelope;
 exports.createInvalidationEvent = __webpack_exports__.createInvalidationEvent;
 exports.createOperationId = __webpack_exports__.createOperationId;
 exports.createRequestEnvelope = __webpack_exports__.createRequestEnvelope;
 exports.decodeRequestEnvelopeHeader = __webpack_exports__.decodeRequestEnvelopeHeader;
 exports.deriveChildTraceContext = __webpack_exports__.deriveChildTraceContext;
+exports.emitDataBatchTransportEvent = __webpack_exports__.emitDataBatchTransportEvent;
 exports.encodeRequestEnvelopeHeader = __webpack_exports__.encodeRequestEnvelopeHeader;
 exports.formatTraceparentHeader = __webpack_exports__.formatTraceparentHeader;
 exports.normalizeOrigin = __webpack_exports__.normalizeOrigin;
@@ -666,18 +687,21 @@ exports.validateHydrationEnvelope = __webpack_exports__.validateHydrationEnvelop
 exports.validateRequestEnvelope = __webpack_exports__.validateRequestEnvelope;
 exports.validateSelectionPlan = __webpack_exports__.validateSelectionPlan;
 for(var __rspack_i in __webpack_exports__)if (-1 === [
+    "DATA_BATCH_TRANSPORT_OTEL_EVENT",
     "DEFAULT_DATA_BATCH_ENDPOINT",
     "DEFAULT_DATA_BATCH_HEADER",
     "DEFAULT_DATA_ENVELOPE_HEADER",
     "buildQueryKey",
     "buildScopeKey",
     "createDataBatchTransport",
+    "createDataBatchTransportTelemetryAttributes",
     "createHydrationEnvelope",
     "createInvalidationEvent",
     "createOperationId",
     "createRequestEnvelope",
     "decodeRequestEnvelopeHeader",
     "deriveChildTraceContext",
+    "emitDataBatchTransportEvent",
     "encodeRequestEnvelopeHeader",
     "formatTraceparentHeader",
     "normalizeOrigin",

package/dist/cjs/runtime/effect/adapter.js

@@ -10,11 +10,15 @@ var __webpack_require__ = {};
     };
 })();
 (()=>{
-    __webpack_require__.d = (exports1, definition)=>{
-        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
-            enumerable: true,
-            get: definition[key]
-        });
+    __webpack_require__.d = (exports1, getters, values)=>{
+        var define = (defs, kind)=>{
+            for(var key in defs)if (__webpack_require__.o(defs, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+                enumerable: true,
+                [kind]: defs[key]
+            });
+        };
+        define(getters, "get");
+        define(values, "value");
     };
 })();
 (()=>{
@@ -35,12 +39,16 @@ __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
     EffectAdapter: ()=>EffectAdapter
 });
+const bff_core_namespaceObject = require("@modern-js/bff-core");
 const utils_namespaceObject = require("@modern-js/utils");
 const httpapi_namespaceObject = require("effect/unstable/httpapi");
 const external_path_namespaceObject = require("path");
 var external_path_default = /*#__PURE__*/ __webpack_require__.n(external_path_namespaceObject);
+const crossProjectServerPolicy_js_namespaceObject = require("../../utils/crossProjectServerPolicy.js");
+const external_safe_failure_js_namespaceObject = require("../safe-failure.js");
 const external_context_js_namespaceObject = require("./context.js");
-const external_index_js_namespaceObject = require("./index.js");
+const external_endpoint_contracts_js_namespaceObject = require("./endpoint-contracts.js");
+const external_module_js_namespaceObject = require("./module.js");
 const before = [
     'custom-server-hook',
     'custom-server-middleware',
@@ -73,24 +81,9 @@ function createRequestForMountedPrefix(req, prefix) {
     url.pathname = nextPath;
     return new Request(url, req);
 }
-function isRequestHandler(value) {
-    return 'function' == typeof value;
-}
 function maybeResponse(value) {
     return value instanceof Response;
 }
-function isRecord(value) {
-    return 'object' == typeof value && null !== value;
-}
-function includesRuntimeExports(value) {
-    return 'api' in value || 'layer' in value || 'createHandler' in value || 'handler' in value;
-}
-function isHttpApiWithProps(value) {
-    return httpapi_namespaceObject.HttpApi.isHttpApi(value) && isRecord(value) && 'string' == typeof value.identifier && isRecord(value.groups);
-}
-function isEffectApiDefinition(module) {
-    return isHttpApiWithProps(module.api) && void 0 !== module.layer;
-}
 class EffectAdapter {
     resolveEntryFile() {
         const { appDirectory, apiDirectory } = this.api.getServerContext();
@@ -100,71 +93,77 @@ class EffectAdapter {
         const entryWithoutExt = configuredEntry ? external_path_default().isAbsolute(configuredEntry) ? configuredEntry : external_path_default().resolve(appDirectory || process.cwd(), configuredEntry) : defaultEntry;
         return (0, utils_namespaceObject.findExists)(JS_OR_TS_EXTS.map((ext)=>`${entryWithoutExt}${ext}`));
     }
-    async loadEffectHandlerFromModule(mod) {
-        let normalizedModule = mod;
-        const mergeRuntimeExports = (value)=>{
-            if (!isRecord(value) || !includesRuntimeExports(value)) return;
-            normalizedModule = {
-                ...normalizedModule,
-                ...value
-            };
-        };
-        if (isRequestHandler(normalizedModule.handler)) return {
-            handler: normalizedModule.handler
-        };
-        const entry = normalizedModule.default;
-        if (isRequestHandler(entry)) return {
-            handler: entry
-        };
-        if ('function' == typeof entry && 0 === entry.length) {
-            const out = await entry();
-            if (isRequestHandler(out)) return {
-                handler: out
-            };
-            mergeRuntimeExports(out);
-        }
-        if (isRecord(entry)) normalizedModule = {
-            ...normalizedModule,
-            ...entry
-        };
-        if (isRecord(entry) && 'handler' in entry) {
-            const maybeHandler = entry.handler;
-            if (isRequestHandler(maybeHandler)) normalizedModule = {
-                ...normalizedModule,
-                handler: maybeHandler
-            };
-        }
-        if (isRequestHandler(normalizedModule.handler)) return {
-            handler: normalizedModule.handler
-        };
-        if ('function' == typeof normalizedModule.createHandler) {
-            const webHandler = normalizedModule.createHandler({
-                openapi: this.api.getServerConfig()?.bff?.effect?.openapi,
-                dataPlatform: this.api.getServerConfig()?.bff?.effect?.dataPlatform
+    isApiRequestPath(requestPath, prefix, enableHandleWeb) {
+        if (!enableHandleWeb) return true;
+        const normalized = normalizePrefix(prefix);
+        if (!normalized) return true;
+        return requestPath === normalized || requestPath.startsWith(`${normalized}/`);
+    }
+    async collectLambdaContractSources() {
+        try {
+            const serverContext = this.api.getServerContext();
+            const appDir = serverContext.distDirectory || serverContext.appDirectory;
+            if (!appDir) return [];
+            const apiDir = 'string' == typeof serverContext.apiDirectory ? serverContext.apiDirectory : external_path_default().resolve(appDir, utils_namespaceObject.API_DIR);
+            const lambdaDir = 'string' == typeof serverContext.lambdaDirectory ? serverContext.lambdaDirectory : external_path_default().join(apiDir, 'lambda');
+            if (!await utils_namespaceObject.fs.pathExists(lambdaDir)) return [];
+            const apiRouter = new bff_core_namespaceObject.ApiRouter({
+                appDir,
+                apiDir,
+                lambdaDir,
+                prefix: this.prefix,
+                httpMethodDecider: this.api.getServerConfig()?.bff?.httpMethodDecider
             });
-            return {
-                handler: async (request)=>webHandler.handler(request),
-                dispose: async ()=>{
-                    await webHandler.dispose();
-                }
-            };
+            const handlerInfos = await apiRouter.getApiHandlers();
+            return handlerInfos.map((info)=>({
+                    name: info.name,
+                    httpMethod: info.httpMethod,
+                    routePath: info.routePath,
+                    filename: info.filename,
+                    handler: info.handler
+                }));
+        } catch (error) {
+            utils_namespaceObject.logger.warn(`[BFF][Effect] Failed to derive lambda operation contracts for the cross-project policy: ${String(error)}`);
+            return [];
         }
-        if (isEffectApiDefinition(normalizedModule)) {
-            utils_namespaceObject.logger.warn('[BFF][Effect] Detected { api, layer } export without createHandler. Prefer `defineEffectBff(...)` from @modern-js/plugin-bff/server to avoid module instance mismatch.');
-            const webHandler = (0, external_index_js_namespaceObject.createHttpApiHandler)({
-                api: normalizedModule.api,
-                layer: normalizedModule.layer,
-                openapi: this.api.getServerConfig()?.bff?.effect?.openapi,
-                dataPlatform: this.api.getServerConfig()?.bff?.effect?.dataPlatform
-            });
-            return {
-                handler: async (request)=>webHandler.handler(request),
-                dispose: async ()=>{
-                    await webHandler.dispose();
-                }
-            };
+    }
+    async refreshCrossProjectPolicy(mod) {
+        let contractSources = [];
+        if (mod) try {
+            const api = await (0, external_endpoint_contracts_js_namespaceObject.extractHttpApiFromModule)(mod, httpapi_namespaceObject.HttpApi.isHttpApi);
+            if (api) {
+                const reflect = (apiValue, handlers)=>httpapi_namespaceObject.HttpApi.reflect(apiValue, {
+                        onGroup: handlers.onGroup ?? (()=>{}),
+                        onEndpoint: handlers.onEndpoint
+                    });
+                contractSources = (0, external_endpoint_contracts_js_namespaceObject.toOperationContractSources)((0, external_endpoint_contracts_js_namespaceObject.collectEffectEndpoints)(reflect, api, this.prefix));
+            }
+        } catch (error) {
+            utils_namespaceObject.logger.warn(`[BFF][Effect] Failed to reflect HttpApi endpoints for the cross-project policy: ${String(error)}`);
         }
-        return null;
+        let policy = (0, crossProjectServerPolicy_js_namespaceObject.resolveAdapterCrossProjectPolicy)(this.api, contractSources);
+        if (policy?.enabled) {
+            const lambdaSources = await this.collectLambdaContractSources();
+            if (lambdaSources.length > 0) {
+                contractSources = [
+                    ...contractSources,
+                    ...lambdaSources
+                ];
+                policy = (0, crossProjectServerPolicy_js_namespaceObject.resolveAdapterCrossProjectPolicy)(this.api, contractSources);
+            }
+        }
+        this.crossProjectPolicy = policy;
+        if (this.crossProjectPolicy?.enabled && 0 === contractSources.length) utils_namespaceObject.logger.warn('[BFF][Effect] Cross-project policy is enabled but no HttpApi endpoints could be reflected; operation-contract matching is disabled for this server (envelope and operation-context checks still apply).');
+    }
+    async loadEffectHandlerFromModule(mod) {
+        return (0, external_module_js_namespaceObject.resolveEffectBffModuleHandler)(mod, {
+            openapi: this.api.getServerConfig()?.bff?.effect?.openapi,
+            dataPlatform: this.api.getServerConfig()?.bff?.effect?.dataPlatform,
+            validateRequest: (request)=>(0, crossProjectServerPolicy_js_namespaceObject.checkCrossProjectPolicyForRequest)(request, this.crossProjectPolicy),
+            onWarning: (message)=>{
+                utils_namespaceObject.logger.warn(message);
+            }
+        });
     }
     async reloadHandler() {
         if (!this.isEffect) return;
@@ -190,6 +189,7 @@ class EffectAdapter {
             this.handler = null;
             return;
         }
+        await this.refreshCrossProjectPolicy(mod);
         const loaded = await this.loadEffectHandlerFromModule(mod);
         if (!loaded) {
             utils_namespaceObject.logger.warn(`[BFF][Effect] Invalid Effect entry module: ${entryFile}. Export { api, layer } or handler.`);
@@ -198,6 +198,7 @@ class EffectAdapter {
         }
         this.handler = loaded.handler;
         this.dispose = loaded.dispose || null;
+        this.policyEnforcedInMiddleware = !loaded.appliesRequestValidator;
     }
     async disposeCurrentHandler() {
         if (!this.dispose) return;
@@ -221,15 +222,7 @@ class EffectAdapter {
         } catch (configError) {
             utils_namespaceObject.logger.error(`Error in serverConfig.onError handler: ${configError}`);
         }
-        const status = 'object' == typeof error && null !== error && 'status' in error && 'number' == typeof error.status ? error.status : 500;
-        return new Response(JSON.stringify({
-            message: error instanceof Error ? error.message : '[BFF] Internal Server Error'
-        }), {
-            status,
-            headers: {
-                'content-type': 'application/json; charset=utf-8'
-            }
-        });
+        return (0, external_safe_failure_js_namespaceObject.createSafeFailureResponse)(error);
     }
     ensureJsonContext(c) {
         const maybeJsonContext = c;
@@ -256,6 +249,8 @@ class EffectAdapter {
         this.effectMiddleware = null;
         this.handler = null;
         this.dispose = null;
+        this.prefix = '/api';
+        this.policyEnforcedInMiddleware = false;
         this.registerMiddleware = async (options)=>{
             const { prefix, enableHandleWeb } = options;
             const { bffRuntimeFramework, middlewares: globalMiddlewares } = this.api.getServerContext();
@@ -263,6 +258,7 @@ class EffectAdapter {
                 this.isEffect = false;
                 return;
             }
+            this.prefix = prefix || this.prefix;
             await this.reloadHandler();
             this.effectMiddleware = {
                 name: 'effect-bff-handler',
@@ -275,6 +271,10 @@ class EffectAdapter {
                         if (enableHandleWeb) return void await next();
                         return this.handleRuntimeError(new Error('[BFF][Effect] Missing Effect entry. Define api/effect/index or configure bff.effect.entry.'), c);
                     }
+                    if (this.crossProjectPolicy?.enabled && this.policyEnforcedInMiddleware && this.isApiRequestPath(c.req.path, prefix, enableHandleWeb)) {
+                        const denial = (0, crossProjectServerPolicy_js_namespaceObject.checkCrossProjectPolicyForRequest)(c.req.raw, this.crossProjectPolicy);
+                        if (denial) return denial;
+                    }
                     let response;
                     try {
                         const effectRequest = createRequestForMountedPrefix(c.req.raw, prefix);
@@ -282,7 +282,13 @@ class EffectAdapter {
                             request: effectRequest,
                             env: c.env,
                             path: c.req.path,
-                            method: c.req.method
+                            method: c.req.method,
+                            operationContext: (0, external_context_js_namespaceObject.createEffectOperationContext)({
+                                request: effectRequest,
+                                env: c.env,
+                                path: c.req.path,
+                                method: c.req.method
+                            })
                         };
                         response = await (0, external_context_js_namespaceObject.runWithEffectContext)(effectContext, ()=>this.handler.length > 1 ? this.handler(effectRequest, effectContext) : this.handler(effectRequest));
                     } catch (error) {