@bleedingdev/modern-js-plugin-bff 3.2.0-ultramodern.12 → 3.2.0-ultramodern.121

package/dist/types/runtime/effect-client/runtime.d.ts

@@ -0,0 +1,71 @@
+export type GeneratedEffectEndpoint = {
+    apiId: string;
+    group: string;
+    endpoint: string;
+    method: string;
+    routePath: string;
+    /** Per-endpoint operation contract hash (bff-core hash). */
+    schemaHash: string;
+    operationVersion: number;
+};
+export type GeneratedEffectBatchConfig = {
+    enabled: boolean;
+    endpoint: string;
+    flushIntervalMs: number;
+    maxBatchSize: number;
+    maxBatchBytes: number;
+    requestTimeoutMs: number;
+    allowedMethods: string[];
+};
+export type GeneratedEffectClientConfig = {
+    appNamespace: string;
+    /** Cross-project producer id; absent for same-project clients. */
+    requestId?: string;
+    port: number;
+    /** Resolve the port from process.env.PORT first (server bundles). */
+    useEnvPort?: boolean;
+    defaultOrigin: string;
+    httpMethodDecider?: string;
+    batch: GeneratedEffectBatchConfig;
+};
+export type EffectOperationDescriptor = {
+    appNamespace: string;
+    apiId: string;
+    group: string;
+    endpoint: string;
+    operationId: string;
+    routePath: string;
+    method: string;
+    operationVersion: number;
+    schemaHash: string;
+    version: number;
+};
+export type EffectClientOperation = (request?: unknown) => Promise<unknown>;
+export type EffectClientGroup = Record<string, EffectClientOperation>;
+export type EffectClient = Record<string, EffectClientGroup>;
+export type EffectOperationManifest = Record<string, Record<string, EffectOperationDescriptor>>;
+export type EffectRequestContextInput = Record<string, unknown>;
+export type EffectRequestContext = {
+    headers: Record<string, string>;
+} & Record<string, unknown>;
+/** Structural slice of `@modern-js/create-request` the runtime relies on. */
+export type EffectRequestRuntime = {
+    createRequest: (options: {
+        path: string;
+        method: string;
+        port: number | string;
+        operationContext: Record<string, unknown>;
+        httpMethodDecider: string;
+        requestId?: string;
+    }) => (...args: unknown[]) => Promise<unknown>;
+    configure?: (options: Record<string, unknown>) => void;
+    createRequestContextHeaders?: (input: EffectRequestContextInput) => Record<string, string>;
+};
+export type GeneratedEffectClientModule = {
+    client: EffectClient;
+    operationManifest: EffectOperationManifest;
+    createEffectRequestContext: (requestContext: EffectRequestContextInput) => EffectRequestContext;
+};
+export declare const createGeneratedEffectClient: (manifest: {
+    endpoints: GeneratedEffectEndpoint[];
+}, config: GeneratedEffectClientConfig, requestRuntime: EffectRequestRuntime) => GeneratedEffectClientModule;

package/dist/types/runtime/hono/adapter.d.ts

@@ -1,5 +1,6 @@
 import type { MiddlewareHandler, ServerMiddleware, ServerPluginAPI } from '@modern-js/server-core';
 import { Hono } from '@modern-js/server-core';
+import { type ResolvedCrossProjectPolicy } from '../../utils/crossProjectServerPolicy';
 interface MiddlewareOptions {
     prefix: string;
     enableHandleWeb?: boolean;
@@ -9,6 +10,8 @@ export declare class HonoAdapter {
     apiServer: Hono | null;
     api: ServerPluginAPI;
     isHono: boolean;
+    prefix: string;
+    crossProjectPolicy: ResolvedCrossProjectPolicy | undefined;
     constructor(api: ServerPluginAPI);
     setHandlers: () => Promise<void>;
     registerApiRoutes: () => Promise<void>;

package/dist/types/runtime/safe-failure.d.ts

@@ -0,0 +1 @@
+export declare const createSafeFailureResponse: (error: unknown) => Response;

package/dist/types/utils/createHonoRoutes.d.ts

@@ -3,8 +3,8 @@ import type { Context } from '@modern-js/server-core';
 type Handler = APIHandlerInfo['handler'];
 declare const createHonoRoutes: (handlerInfos?: APIHandlerInfo[]) => {
     method: any;
-    path: APIHandlerInfo;
-    handler: any[] | ((c: Context) => Promise<any>);
+    path: string;
+    handler: any[] | ((c: Context) => Promise<void | Response>);
 }[];
-export declare const createHonoHandler: (handler: Handler) => (c: Context) => Promise<any>;
+export declare const createHonoHandler: (handler: Handler) => (c: Context) => Promise<void | Response>;
 export default createHonoRoutes;

package/dist/types/utils/crossProjectServerPolicy.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Server-side cross-project policy wiring shared by the hono and effect BFF
+ * runtime adapters.
+ *
+ * The generated cross-project SDK force-enables `bff.crossProjectPolicy`
+ * (see `crossProjectApiPlugin`), so producer servers MUST actually evaluate
+ * it: this module resolves the policy once per adapter (deriving the
+ * operation-contract map and the producer operation version from the app's
+ * package.json major) and exposes a request check both adapters call before
+ * dispatching API handlers.
+ *
+ * The envelope/operation-context headers are client-asserted; see the threat
+ * model in `@modern-js/bff-core` `security/crossProjectPolicy.ts`. Operators
+ * who need a real trust boundary must additionally configure
+ * `verifyProducerIdentity` to bind the namespace to a verified channel.
+ */
+import { type OperationContractSource, type ResolvedCrossProjectPolicy } from '@modern-js/bff-core';
+import type { ServerPluginAPI } from '@modern-js/server-core';
+export type { ResolvedCrossProjectPolicy };
+/**
+ * Resolves the effective cross-project policy for a BFF runtime adapter.
+ * Returns `undefined` when no policy is configured and the server is not a
+ * generated cross-project producer (no middleware should be installed).
+ */
+export declare const resolveAdapterCrossProjectPolicy: (api: ServerPluginAPI, handlers: OperationContractSource[]) => ResolvedCrossProjectPolicy | undefined;
+/**
+ * Evaluates the policy against a header record and returns the denial
+ * Response every adapter must send, or `null` when the request passes.
+ */
+export declare const checkCrossProjectPolicyResponse: (headers: Record<string, unknown>, policy: ResolvedCrossProjectPolicy | undefined) => Response | null;
+/**
+ * Adapts the policy check to a WHATWG `Request` (effect lane seam): returns
+ * the denial Response or `null`.
+ */
+export declare const checkCrossProjectPolicyForRequest: (request: Request, policy: ResolvedCrossProjectPolicy | undefined) => Response | null;

package/dist/types/utils/effectClientGenerator.d.ts

@@ -1,4 +1,5 @@
 import type { HttpMethodDecider } from '@modern-js/types';
+import { type EffectEndpointMeta } from '../runtime/effect/endpoint-contracts';
 export type EffectClientCodegenOptions = {
     appDir: string;
     apiDir: string;
@@ -18,10 +19,23 @@ export type EffectClientCodegenOptions = {
         allowedMethods?: string[];
     };
 };
-export declare function renderEffectClientDeclaration(): string;
+export type GeneratedEffectClientArtifacts = {
+    code: string;
+    declaration: string;
+    endpoints: EffectEndpointMeta[];
+};
+export declare function renderEffectClientDeclaration(endpoints?: EffectEndpointMeta[]): string;
+/**
+ * Generates the Effect client module plus its type declaration. The module
+ * body is a thin manifest + one call into
+ * `@modern-js/plugin-bff/effect-client-runtime`; the declaration preserves
+ * the group/endpoint structure of the HttpApi instead of erasing it to
+ * `Record<string, ...>`.
+ */
+export declare function generateEffectClient(options: EffectClientCodegenOptions): Promise<GeneratedEffectClientArtifacts | null>;
 export declare function generateEffectClientCode(options: EffectClientCodegenOptions): Promise<string | null>;
 export declare function resolveEffectEntryFile(options: {
     appDir: string;
     apiDir: string;
     effectEntry?: string;
-}): any;
+}): string | false | undefined;

package/package.json

@@ -17,7 +17,7 @@
     "modern",
     "modern.js"
   ],
-  "version": "3.2.0-ultramodern.12",
+  "version": "3.2.0-ultramodern.121",
   "types": "./dist/types/cli.d.ts",
   "main": "./dist/cjs/cli.js",
   "exports": {
@@ -69,6 +69,11 @@
       },
       "default": "./dist/cjs/runtime/effect/index.js"
     },
+    "./effect-edge": {
+      "types": "./dist/types/runtime/effect/edge.d.ts",
+      "import": "./dist/esm/runtime/effect/edge.mjs",
+      "default": "./dist/esm/runtime/effect/edge.mjs"
+    },
     "./effect-client": {
       "types": "./dist/types/runtime/effect-client/index.d.ts",
       "node": {
@@ -77,6 +82,15 @@
       },
       "default": "./dist/cjs/runtime/effect-client/index.js"
     },
+    "./effect-client-runtime": {
+      "types": "./dist/types/runtime/effect-client/runtime.d.ts",
+      "modern:source": "./src/runtime/effect-client/runtime.ts",
+      "node": {
+        "import": "./dist/esm-node/runtime/effect-client/runtime.mjs",
+        "require": "./dist/cjs/runtime/effect-client/runtime.js"
+      },
+      "default": "./dist/esm/runtime/effect-client/runtime.mjs"
+    },
     "./data-platform": {
       "types": "./dist/types/runtime/data-platform/index.d.ts",
       "node": {
@@ -110,9 +124,15 @@
       "effect-server": [
         "./dist/types/runtime/effect/index.d.ts"
       ],
+      "effect-edge": [
+        "./dist/types/runtime/effect/edge.d.ts"
+      ],
       "effect-client": [
         "./dist/types/runtime/effect-client/index.d.ts"
       ],
+      "effect-client-runtime": [
+        "./dist/types/runtime/effect-client/runtime.d.ts"
+      ],
       "data-platform": [
         "./dist/types/runtime/data-platform/index.d.ts"
       ],
@@ -132,32 +152,33 @@
     "@opentelemetry/sdk-trace-node": "2.7.1",
     "@opentelemetry/sdk-trace-web": "2.7.1",
     "@opentelemetry/semantic-conventions": "1.41.1",
-    "@swc/helpers": "^0.5.21",
+    "@swc/core": "1.15.41",
+    "@swc/helpers": "^0.5.23",
     "effect": "4.0.0-beta.66",
-    "qs": "^6.15.1",
+    "qs": "^6.15.2",
     "type-is": "^2.1.0",
-    "@modern-js/bff-core": "npm:@bleedingdev/modern-js-bff-core@3.2.0-ultramodern.12",
-    "@modern-js/builder": "npm:@bleedingdev/modern-js-builder@3.2.0-ultramodern.12",
-    "@modern-js/server-core": "npm:@bleedingdev/modern-js-server-core@3.2.0-ultramodern.12",
-    "@modern-js/create-request": "npm:@bleedingdev/modern-js-create-request@3.2.0-ultramodern.12",
-    "@modern-js/server-utils": "npm:@bleedingdev/modern-js-server-utils@3.2.0-ultramodern.12",
-    "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.2.0-ultramodern.12"
+    "@modern-js/bff-core": "npm:@bleedingdev/modern-js-bff-core@3.2.0-ultramodern.121",
+    "@modern-js/create-request": "npm:@bleedingdev/modern-js-create-request@3.2.0-ultramodern.121",
+    "@modern-js/server-core": "npm:@bleedingdev/modern-js-server-core@3.2.0-ultramodern.121",
+    "@modern-js/builder": "npm:@bleedingdev/modern-js-builder@3.2.0-ultramodern.121",
+    "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.2.0-ultramodern.121",
+    "@modern-js/server-utils": "npm:@bleedingdev/modern-js-server-utils@3.2.0-ultramodern.121"
   },
   "devDependencies": {
-    "@rsbuild/core": "2.0.6",
-    "@rslib/core": "0.21.5",
-    "@types/node": "^25.8.0",
+    "@rsbuild/core": "2.0.11",
+    "@rslib/core": "0.22.0",
+    "@types/node": "^25.9.3",
     "@types/qs": "^6.15.1",
     "@types/type-is": "^1.6.7",
-    "@typescript/native-preview": "7.0.0-dev.20260516.1",
-    "memfs": "^4.57.2",
+    "@typescript/native-preview": "7.0.0-dev.20260610.1",
+    "memfs": "^4.57.7",
     "zod": "^4.4.3",
-    "@modern-js/bff-runtime": "npm:@bleedingdev/modern-js-bff-runtime@3.2.0-ultramodern.12",
-    "@modern-js/app-tools": "npm:@bleedingdev/modern-js-app-tools@3.2.0-ultramodern.12",
-    "@modern-js/plugin": "npm:@bleedingdev/modern-js-plugin@3.2.0-ultramodern.12",
-    "@modern-js/runtime": "npm:@bleedingdev/modern-js-runtime@3.2.0-ultramodern.12",
-    "@modern-js/types": "npm:@bleedingdev/modern-js-types@3.2.0-ultramodern.12",
-    "@scripts/rstest-config": "2.66.0"
+    "@modern-js/bff-runtime": "npm:@bleedingdev/modern-js-bff-runtime@3.2.0-ultramodern.121",
+    "@modern-js/plugin": "npm:@bleedingdev/modern-js-plugin@3.2.0-ultramodern.121",
+    "@modern-js/types": "npm:@bleedingdev/modern-js-types@3.2.0-ultramodern.121",
+    "@scripts/rstest-config": "2.66.0",
+    "@modern-js/runtime": "npm:@bleedingdev/modern-js-runtime@3.2.0-ultramodern.121",
+    "@modern-js/app-tools": "npm:@bleedingdev/modern-js-app-tools@3.2.0-ultramodern.121"
   },
   "sideEffects": false,
   "publishConfig": {