@bleedingdev/modern-js-plugin-bff 3.4.0-ultramodern.2 → 3.4.0-ultramodern.20

package/dist/esm/runtime/effect/module.mjs

@@ -17,16 +17,18 @@ function isEffectServiceContext(context) {
     return 'object' == typeof context && null !== context && 'mapUnsafe' in context;
 }
 const emptyEffectServiceContext = __rspack_external_effect_Context_f1289ca3.empty();
+const strictEffectApproachMessage = '[BFF][Effect] strictEffectApproach is enforced: Effect API entries must export defineEffectBff(...) or a { api, layer } HttpApi module. Raw handler exports, default request handlers, and unbranded custom createHandler factories are not valid Effect API entries.';
+function rejectLegacyEffectModuleShape(options, shape) {
+    options.onWarning?.(`${strictEffectApproachMessage} Rejected ${shape}.`);
+    return true;
+}
 function callEffectBffRequestHandler(handler, request, context) {
     return void 0 === context ? handler(request) : handler(request, context);
 }
-function createLoadedHandler(webHandler, appliesRequestValidator) {
+function createLoadedHandler(webHandler) {
     return {
         handler: (request, context)=>callEffectBffRequestHandler(webHandler.handler, request, context),
-        dispose: webHandler.dispose,
-        ...appliesRequestValidator ? {
-            appliesRequestValidator: true
-        } : {}
+        dispose: webHandler.dispose
     };
 }
 function createLoadedHttpApiHandler(webHandler) {
@@ -35,18 +37,23 @@ function createLoadedHttpApiHandler(webHandler) {
             const effectContext = isEffectServiceContext(context) ? context : emptyEffectServiceContext;
             return webHandler.handler(request, effectContext);
         },
-        dispose: webHandler.dispose,
-        appliesRequestValidator: true
+        dispose: webHandler.dispose
     };
 }
 function resolveNormalizedEffectBffModuleHandler(normalizedModule, options = {}) {
-    if (isRequestHandler(normalizedModule.handler)) return {
-        handler: normalizedModule.handler
-    };
+    if (isRequestHandler(normalizedModule.handler)) {
+        if (rejectLegacyEffectModuleShape(options, '`handler` export')) return null;
+        return {
+            handler: normalizedModule.handler
+        };
+    }
     const entry = normalizedModule.default;
-    if (isRequestHandler(entry)) return {
-        handler: entry
-    };
+    if (isRequestHandler(entry)) {
+        if (rejectLegacyEffectModuleShape(options, 'default request handler')) return null;
+        return {
+            handler: entry
+        };
+    }
     if (isRecord(entry)) normalizedModule = {
         ...normalizedModule,
         ...entry
@@ -58,19 +65,22 @@ function resolveNormalizedEffectBffModuleHandler(normalizedModule, options = {})
             handler: maybeHandler
         };
     }
-    if (isRequestHandler(normalizedModule.handler)) return {
-        handler: normalizedModule.handler
-    };
+    if (isRequestHandler(normalizedModule.handler)) {
+        if (rejectLegacyEffectModuleShape(options, '`handler` export')) return null;
+        return {
+            handler: normalizedModule.handler
+        };
+    }
     if ('function' == typeof normalizedModule.createHandler) {
         const factory = normalizedModule.createHandler;
         const validatorAware = isValidatorAwareHandlerFactory(factory);
-        if (!validatorAware && void 0 !== options.validateRequest) options.onWarning?.('[BFF][Effect] Custom createHandler export detected: it cannot be verified to apply validateRequest (cross-project policy), so the policy is enforced by the adapter middleware on the outer request. Batched calls will be denied at the batch POST (it carries no per-operation contract); export defineEffectBff(...) to get per-batch-item enforcement.');
+        if (!validatorAware && rejectLegacyEffectModuleShape(options, 'unbranded `createHandler` export')) return null;
         const webHandler = factory({
             openapi: options.openapi,
             dataPlatform: options.dataPlatform,
             validateRequest: options.validateRequest
         });
-        return createLoadedHandler(webHandler, validatorAware);
+        return createLoadedHandler(webHandler);
     }
     if (isEffectApiDefinition(normalizedModule)) {
         options.onWarning?.('[BFF][Effect] Detected { api, layer } export without createHandler. Prefer `defineEffectBff(...)` from @modern-js/plugin-bff/server to avoid module instance mismatch.');
@@ -94,17 +104,26 @@ function resolveEffectBffModuleHandler(mod, options = {}) {
             ...value
         };
     };
-    if (isRequestHandler(normalizedModule.handler)) return Promise.resolve({
-        handler: normalizedModule.handler
-    });
+    if (isRequestHandler(normalizedModule.handler)) {
+        if (rejectLegacyEffectModuleShape(options, '`handler` export')) return Promise.resolve(null);
+        return Promise.resolve({
+            handler: normalizedModule.handler
+        });
+    }
     const entry = normalizedModule.default;
-    if (isRequestHandler(entry)) return Promise.resolve({
-        handler: entry
-    });
+    if (isRequestHandler(entry)) {
+        if (rejectLegacyEffectModuleShape(options, 'default request handler')) return Promise.resolve(null);
+        return Promise.resolve({
+            handler: entry
+        });
+    }
     if ('function' == typeof entry && 0 === entry.length) return Promise.resolve(entry()).then((out)=>{
-        if (isRequestHandler(out)) return {
-            handler: out
-        };
+        if (isRequestHandler(out)) {
+            if (rejectLegacyEffectModuleShape(options, 'default factory returning a request handler')) return null;
+            return {
+                handler: out
+            };
+        }
         mergeRuntimeExports(out);
         return resolveNormalizedEffectBffModuleHandler(normalizedModule, options);
     });

package/dist/esm/runtime/effect-client/index.mjs

@@ -5,6 +5,7 @@ import { FetchHttpClient, HttpClient, HttpClientRequest } from "effect/unstable/
 import { HttpApi, HttpApiClient, HttpApiEndpoint, HttpApiGroup, HttpApiSchema } from "effect/unstable/httpapi";
 import { Rpc, RpcClient, RpcGroup, RpcSchema, RpcSerialization } from "effect/unstable/rpc";
 import * as __rspack_external_effect_Schema_f8472650 from "effect/Schema";
+import * as __rspack_external_effect_unstable_http_HttpClientError_b9ead235 from "effect/unstable/http/HttpClientError";
 import * as __rspack_external_effect_Data_7c33fca9 from "effect/Data";
 import * as __rspack_external_effect_Exit_a10cfb96 from "effect/Exit";
 import * as __rspack_external_effect_ManagedRuntime_94dd2709 from "effect/ManagedRuntime";
@@ -104,4 +105,4 @@ function makeEffectRpcClient(group, options) {
     });
 }
 const runEffectRequest = __rspack_external_effect_Effect_194ac36c.runPromise;
-export { EffectRpcClientError, HttpApi, HttpApiClient, HttpApiEndpoint, HttpApiGroup, HttpApiSchema, Rpc, RpcClient, RpcGroup, RpcSchema, RpcSerialization, __rspack_external_effect_Effect_194ac36c as Effect, __rspack_external_effect_Layer_16f7a8fc as Layer, __rspack_external_effect_Schema_f8472650 as Schema, makeEffectHttpApiClient, makeEffectRpcClient, mask, runEffectRequest, runEffectView, view };
+export { EffectRpcClientError, HttpApi, HttpApiClient, HttpApiEndpoint, HttpApiGroup, HttpApiSchema, Rpc, RpcClient, RpcGroup, RpcSchema, RpcSerialization, __rspack_external_effect_Effect_194ac36c as Effect, __rspack_external_effect_Layer_16f7a8fc as Layer, __rspack_external_effect_Schema_f8472650 as Schema, __rspack_external_effect_unstable_http_HttpClientError_b9ead235 as HttpClientError, makeEffectHttpApiClient, makeEffectRpcClient, mask, runEffectRequest, runEffectView, view };

package/dist/esm/utils/effectClientGenerator.mjs

@@ -127,14 +127,14 @@ const __generated = createGeneratedEffectClient(__manifest, __config, __requestR
 const client = __generated.client;
 const operationManifest = __generated.operationManifest;
 const createEffectRequestContext = __generated.createEffectRequestContext;
-const effectBffModule = {
+const apiModule = {
   client,
   operationManifest,
   createEffectRequestContext,
 };
 
 export { client, createEffectRequestContext, operationManifest };
-export default effectBffModule;
+export default apiModule;
 `;
 }
 function renderClientShape(endpoints, valueType) {
@@ -207,13 +207,13 @@ export declare const createEffectRequestContext: (
   requestContext: Record<string, unknown>,
 ) => EffectRequestContext;
 export declare const operationManifest: GeneratedEffectOperationManifest;
-declare const effectBffModule: {
+declare const apiModule: {
   client: GeneratedEffectClient;
   createEffectRequestContext: typeof createEffectRequestContext;
   operationManifest: GeneratedEffectOperationManifest;
 };
 
-export default effectBffModule;
+export default apiModule;
 `;
 }
 async function generateEffectClient(options) {
@@ -236,9 +236,14 @@ async function generateEffectClientCode(options) {
 }
 function resolveEffectEntryFile(options) {
     const { appDir, apiDir, effectEntry } = options;
-    const defaultEntry = path.resolve(apiDir, 'effect', 'index');
-    const entryWithoutExt = effectEntry ? path.isAbsolute(effectEntry) ? effectEntry : path.resolve(appDir, effectEntry) : defaultEntry;
-    if (path.extname(entryWithoutExt)) return fs.existsSync(entryWithoutExt) ? entryWithoutExt : void 0;
-    return findExists(JS_OR_TS_EXTS.map((ext)=>`${entryWithoutExt}${ext}`));
+    const resolveEntry = (entryWithoutExt)=>{
+        if (path.extname(entryWithoutExt)) return fs.existsSync(entryWithoutExt) ? entryWithoutExt : void 0;
+        return findExists(JS_OR_TS_EXTS.map((ext)=>`${entryWithoutExt}${ext}`));
+    };
+    if (effectEntry) {
+        const entryWithoutExt = path.isAbsolute(effectEntry) ? effectEntry : path.resolve(appDir, effectEntry);
+        return resolveEntry(entryWithoutExt);
+    }
+    return resolveEntry(path.resolve(apiDir, 'index'));
 }
 export { generateEffectClient, generateEffectClientCode, renderEffectClientDeclaration, resolveEffectEntryFile };

package/dist/esm-node/runtime/effect/adapter.mjs

@@ -1,6 +1,5 @@
 import __rslib_shim_module__ from "node:module";
 const require = /*#__PURE__*/ __rslib_shim_module__.createRequire(/*#__PURE__*/ (()=>import.meta.url)());
-import { ApiRouter } from "@modern-js/bff-core";
 import { API_DIR, compatibleRequire, findExists, fs, isProd, logger } from "@modern-js/utils";
 import { HttpApi } from "effect/unstable/httpapi";
 import path from "path";
@@ -54,43 +53,12 @@ class EffectAdapter {
         const { appDirectory, apiDirectory } = this.api.getServerContext();
         const bffConfig = this.api.getServerConfig()?.bff;
         const configuredEntry = bffConfig?.effect?.entry;
-        const defaultEntry = path.resolve(appDirectory || process.cwd(), apiDirectory || API_DIR, 'effect', 'index');
-        const entryWithoutExt = configuredEntry ? path.isAbsolute(configuredEntry) ? configuredEntry : path.resolve(appDirectory || process.cwd(), configuredEntry) : defaultEntry;
-        return resolveJsOrTsEntry(entryWithoutExt);
-    }
-    isApiRequestPath(requestPath, prefix, enableHandleWeb) {
-        if (!enableHandleWeb) return true;
-        const normalized = normalizePrefix(prefix);
-        if (!normalized) return true;
-        return requestPath === normalized || requestPath.startsWith(`${normalized}/`);
-    }
-    async collectLambdaContractSources() {
-        try {
-            const serverContext = this.api.getServerContext();
-            const appDir = serverContext.distDirectory || serverContext.appDirectory;
-            if (!appDir) return [];
-            const apiDir = 'string' == typeof serverContext.apiDirectory ? serverContext.apiDirectory : path.resolve(appDir, API_DIR);
-            const lambdaDir = 'string' == typeof serverContext.lambdaDirectory ? serverContext.lambdaDirectory : path.join(apiDir, 'lambda');
-            if (!await fs.pathExists(lambdaDir)) return [];
-            const apiRouter = new ApiRouter({
-                appDir,
-                apiDir,
-                lambdaDir,
-                prefix: this.prefix,
-                httpMethodDecider: this.api.getServerConfig()?.bff?.httpMethodDecider
-            });
-            const handlerInfos = await apiRouter.getApiHandlers();
-            return handlerInfos.map((info)=>({
-                    name: info.name,
-                    httpMethod: info.httpMethod,
-                    routePath: info.routePath,
-                    filename: info.filename,
-                    handler: info.handler
-                }));
-        } catch (error) {
-            logger.warn(`[BFF][Effect] Failed to derive lambda operation contracts for the cross-project policy: ${String(error)}`);
-            return [];
+        if (configuredEntry) {
+            const entryWithoutExt = path.isAbsolute(configuredEntry) ? configuredEntry : path.resolve(appDirectory || process.cwd(), configuredEntry);
+            return resolveJsOrTsEntry(entryWithoutExt);
         }
+        const apiRoot = path.resolve(appDirectory || process.cwd(), apiDirectory || API_DIR);
+        return resolveJsOrTsEntry(path.resolve(apiRoot, 'index'));
     }
     async refreshCrossProjectPolicy(mod) {
         let contractSources = [];
@@ -106,24 +74,15 @@ class EffectAdapter {
         } catch (error) {
             logger.warn(`[BFF][Effect] Failed to reflect HttpApi endpoints for the cross-project policy: ${String(error)}`);
         }
-        let policy = resolveAdapterCrossProjectPolicy(this.api, contractSources);
-        if (policy?.enabled) {
-            const lambdaSources = await this.collectLambdaContractSources();
-            if (lambdaSources.length > 0) {
-                contractSources = [
-                    ...contractSources,
-                    ...lambdaSources
-                ];
-                policy = resolveAdapterCrossProjectPolicy(this.api, contractSources);
-            }
-        }
+        const policy = resolveAdapterCrossProjectPolicy(this.api, contractSources);
         this.crossProjectPolicy = policy;
         if (this.crossProjectPolicy?.enabled && 0 === contractSources.length) logger.warn('[BFF][Effect] Cross-project policy is enabled but no HttpApi endpoints could be reflected; operation-contract matching is disabled for this server (envelope and operation-context checks still apply).');
     }
     async loadEffectHandlerFromModule(mod) {
+        const effectConfig = this.api.getServerConfig()?.bff?.effect;
         return resolveEffectBffModuleHandler(mod, {
-            openapi: this.api.getServerConfig()?.bff?.effect?.openapi,
-            dataPlatform: this.api.getServerConfig()?.bff?.effect?.dataPlatform,
+            openapi: effectConfig?.openapi,
+            dataPlatform: effectConfig?.dataPlatform,
             validateRequest: (request)=>checkCrossProjectPolicyForRequest(request, this.crossProjectPolicy),
             onWarning: (message)=>{
                 logger.warn(message);
@@ -157,13 +116,12 @@ class EffectAdapter {
         await this.refreshCrossProjectPolicy(mod);
         const loaded = await this.loadEffectHandlerFromModule(mod);
         if (!loaded) {
-            logger.warn(`[BFF][Effect] Invalid Effect entry module: ${entryFile}. Export { api, layer } or handler.`);
+            logger.warn(`[BFF][Effect] Invalid Effect entry module: ${entryFile}. Export defineEffectBff(...) or a { api, layer } HttpApi module.`);
             this.handler = null;
             return;
         }
         this.handler = loaded.handler;
         this.dispose = loaded.dispose || null;
-        this.policyEnforcedInMiddleware = !loaded.appliesRequestValidator;
     }
     async disposeCurrentHandler() {
         if (!this.dispose) return;
@@ -215,7 +173,6 @@ class EffectAdapter {
         this.handler = null;
         this.dispose = null;
         this.prefix = '/api';
-        this.policyEnforcedInMiddleware = false;
         this.registerMiddleware = async (options)=>{
             const { prefix, enableHandleWeb } = options;
             const { bffRuntimeFramework, middlewares: globalMiddlewares } = this.api.getServerContext();
@@ -226,7 +183,7 @@ class EffectAdapter {
             this.prefix = prefix || this.prefix;
             await this.reloadHandler();
             this.effectMiddleware = {
-                name: 'effect-bff-handler',
+                name: 'effect-api-handler',
                 path: enableHandleWeb ? '*' : `${prefix}/*`,
                 method: 'all',
                 order: 'post',
@@ -234,11 +191,7 @@ class EffectAdapter {
                 handler: async (c, next)=>{
                     if (!this.handler) {
                         if (enableHandleWeb) return void await next();
-                        return this.handleRuntimeError(new Error('[BFF][Effect] Missing Effect entry. Define api/effect/index or configure bff.effect.entry.'), c);
-                    }
-                    if (this.crossProjectPolicy?.enabled && this.policyEnforcedInMiddleware && this.isApiRequestPath(c.req.path, prefix, enableHandleWeb)) {
-                        const denial = checkCrossProjectPolicyForRequest(c.req.raw, this.crossProjectPolicy);
-                        if (denial) return denial;
+                        return this.handleRuntimeError(new Error('[BFF][Effect] Missing Effect entry. Define api/index or configure bff.effect.entry.'), c);
                     }
                     let response;
                     try {

package/dist/esm-node/runtime/effect/edge.mjs

@@ -69,7 +69,7 @@ async function createEffectBffEdgeHandler(options) {
         dataPlatform: options.dataPlatform,
         onWarning: options.onWarning
     });
-    if (!loaded) throw new Error('[BFF][Effect] Invalid Effect edge module. Export { api, layer }, createHandler, or handler.');
+    if (!loaded) throw new Error('[BFF][Effect] Invalid Effect edge module. Export defineEffectBff(...) or a { api, layer } HttpApi module.');
     return {
         handler: (request, dispatchOptions = {})=>dispatchEffectBffRequest(loaded.handler, request, {
                 ...dispatchOptions,

package/dist/esm-node/runtime/effect/handler.mjs

@@ -75,6 +75,41 @@ function createBatchValidationResponse(message, status = 400) {
         }
     });
 }
+function createJsonValidationResponse(message, status = 400) {
+    return new Response(JSON.stringify({
+        message
+    }), {
+        status,
+        headers: {
+            'content-type': 'application/json; charset=utf-8'
+        }
+    });
+}
+function cloneWithoutJsonBodyHeaders(request) {
+    const headers = new Headers(request.headers);
+    headers.delete('content-type');
+    headers.delete('content-length');
+    return new Request(request.url, {
+        method: request.method,
+        headers,
+        signal: request.signal
+    });
+}
+async function prepareJsonRequestBody(request) {
+    const method = normalizeItemMethod(request.method);
+    if ('GET' === method || 'HEAD' === method) return request;
+    const contentType = (request.headers.get('content-type') || '').toLowerCase();
+    if (!contentType.includes('application/json')) return request;
+    if (null === request.body) return cloneWithoutJsonBodyHeaders(request);
+    try {
+        const bodyText = await request.clone().text();
+        if ('' === bodyText) return cloneWithoutJsonBodyHeaders(request);
+        JSON.parse(bodyText);
+    } catch  {
+        return createJsonValidationResponse('Invalid JSON request body');
+    }
+    return request;
+}
 function toBatchItemError(id, status, message) {
     return {
         id,
@@ -295,7 +330,7 @@ const LOADER_CLIENT_IGNORED_KEYS = new Set([
 ]);
 function createLoaderMaterializedClientPlaceholder() {
     const explain = (property)=>{
-        throw new Error(`[BFF][Effect] effectBff.client.${String(property)} is not available here: the typed client only exists when this module is imported through the "@api/effect/*" transformed path (the BFF loader replaces it with generated client code). On the server, use HttpApiClient or call the Effect layer directly.`);
+        throw new Error(`[BFF][Effect] client.${String(property)} is not available here: the typed client only exists when the API entry is imported through the "@api/index" transformed path (the BFF loader replaces it with generated client code). On the server, use HttpApiClient or call the Effect layer directly.`);
     };
     return new Proxy(Object.create(null), {
         get (_target, property) {
@@ -332,9 +367,11 @@ function createHttpApiHandler(options) {
     const withDataPlatformValidation = async (request, context)=>{
         const policyDenial = options.validateRequest?.(request);
         if (policyDenial) return policyDenial;
-        const validationError = validateDataPlatformRequestEnvelope(request, options.dataPlatform);
+        const preparedRequest = await prepareJsonRequestBody(request);
+        if (preparedRequest instanceof Response) return preparedRequest;
+        const validationError = validateDataPlatformRequestEnvelope(preparedRequest, options.dataPlatform);
         if (validationError) return validationError;
-        return httpApiHandler.handler(request, context ?? emptyEffectServiceContext);
+        return httpApiHandler.handler(preparedRequest, context ?? emptyEffectServiceContext);
     };
     const handleBatchRequest = async (request, context)=>{
         const mountedPrefix = getMountedPrefixFromContext(request, context);

package/dist/esm-node/runtime/effect/module.mjs

@@ -18,16 +18,18 @@ function isEffectServiceContext(context) {
     return 'object' == typeof context && null !== context && 'mapUnsafe' in context;
 }
 const emptyEffectServiceContext = __rspack_external_effect_Context_f1289ca3.empty();
+const strictEffectApproachMessage = '[BFF][Effect] strictEffectApproach is enforced: Effect API entries must export defineEffectBff(...) or a { api, layer } HttpApi module. Raw handler exports, default request handlers, and unbranded custom createHandler factories are not valid Effect API entries.';
+function rejectLegacyEffectModuleShape(options, shape) {
+    options.onWarning?.(`${strictEffectApproachMessage} Rejected ${shape}.`);
+    return true;
+}
 function callEffectBffRequestHandler(handler, request, context) {
     return void 0 === context ? handler(request) : handler(request, context);
 }
-function createLoadedHandler(webHandler, appliesRequestValidator) {
+function createLoadedHandler(webHandler) {
     return {
         handler: (request, context)=>callEffectBffRequestHandler(webHandler.handler, request, context),
-        dispose: webHandler.dispose,
-        ...appliesRequestValidator ? {
-            appliesRequestValidator: true
-        } : {}
+        dispose: webHandler.dispose
     };
 }
 function createLoadedHttpApiHandler(webHandler) {
@@ -36,18 +38,23 @@ function createLoadedHttpApiHandler(webHandler) {
             const effectContext = isEffectServiceContext(context) ? context : emptyEffectServiceContext;
             return webHandler.handler(request, effectContext);
         },
-        dispose: webHandler.dispose,
-        appliesRequestValidator: true
+        dispose: webHandler.dispose
     };
 }
 function resolveNormalizedEffectBffModuleHandler(normalizedModule, options = {}) {
-    if (isRequestHandler(normalizedModule.handler)) return {
-        handler: normalizedModule.handler
-    };
+    if (isRequestHandler(normalizedModule.handler)) {
+        if (rejectLegacyEffectModuleShape(options, '`handler` export')) return null;
+        return {
+            handler: normalizedModule.handler
+        };
+    }
     const entry = normalizedModule.default;
-    if (isRequestHandler(entry)) return {
-        handler: entry
-    };
+    if (isRequestHandler(entry)) {
+        if (rejectLegacyEffectModuleShape(options, 'default request handler')) return null;
+        return {
+            handler: entry
+        };
+    }
     if (isRecord(entry)) normalizedModule = {
         ...normalizedModule,
         ...entry
@@ -59,19 +66,22 @@ function resolveNormalizedEffectBffModuleHandler(normalizedModule, options = {})
             handler: maybeHandler
         };
     }
-    if (isRequestHandler(normalizedModule.handler)) return {
-        handler: normalizedModule.handler
-    };
+    if (isRequestHandler(normalizedModule.handler)) {
+        if (rejectLegacyEffectModuleShape(options, '`handler` export')) return null;
+        return {
+            handler: normalizedModule.handler
+        };
+    }
     if ('function' == typeof normalizedModule.createHandler) {
         const factory = normalizedModule.createHandler;
         const validatorAware = isValidatorAwareHandlerFactory(factory);
-        if (!validatorAware && void 0 !== options.validateRequest) options.onWarning?.('[BFF][Effect] Custom createHandler export detected: it cannot be verified to apply validateRequest (cross-project policy), so the policy is enforced by the adapter middleware on the outer request. Batched calls will be denied at the batch POST (it carries no per-operation contract); export defineEffectBff(...) to get per-batch-item enforcement.');
+        if (!validatorAware && rejectLegacyEffectModuleShape(options, 'unbranded `createHandler` export')) return null;
         const webHandler = factory({
             openapi: options.openapi,
             dataPlatform: options.dataPlatform,
             validateRequest: options.validateRequest
         });
-        return createLoadedHandler(webHandler, validatorAware);
+        return createLoadedHandler(webHandler);
     }
     if (isEffectApiDefinition(normalizedModule)) {
         options.onWarning?.('[BFF][Effect] Detected { api, layer } export without createHandler. Prefer `defineEffectBff(...)` from @modern-js/plugin-bff/server to avoid module instance mismatch.');
@@ -95,17 +105,26 @@ function resolveEffectBffModuleHandler(mod, options = {}) {
             ...value
         };
     };
-    if (isRequestHandler(normalizedModule.handler)) return Promise.resolve({
-        handler: normalizedModule.handler
-    });
+    if (isRequestHandler(normalizedModule.handler)) {
+        if (rejectLegacyEffectModuleShape(options, '`handler` export')) return Promise.resolve(null);
+        return Promise.resolve({
+            handler: normalizedModule.handler
+        });
+    }
     const entry = normalizedModule.default;
-    if (isRequestHandler(entry)) return Promise.resolve({
-        handler: entry
-    });
+    if (isRequestHandler(entry)) {
+        if (rejectLegacyEffectModuleShape(options, 'default request handler')) return Promise.resolve(null);
+        return Promise.resolve({
+            handler: entry
+        });
+    }
     if ('function' == typeof entry && 0 === entry.length) return Promise.resolve(entry()).then((out)=>{
-        if (isRequestHandler(out)) return {
-            handler: out
-        };
+        if (isRequestHandler(out)) {
+            if (rejectLegacyEffectModuleShape(options, 'default factory returning a request handler')) return null;
+            return {
+                handler: out
+            };
+        }
         mergeRuntimeExports(out);
         return resolveNormalizedEffectBffModuleHandler(normalizedModule, options);
     });

package/dist/esm-node/runtime/effect-client/index.mjs

@@ -6,6 +6,7 @@ import { FetchHttpClient, HttpClient, HttpClientRequest } from "effect/unstable/
 import { HttpApi, HttpApiClient, HttpApiEndpoint, HttpApiGroup, HttpApiSchema } from "effect/unstable/httpapi";
 import { Rpc, RpcClient, RpcGroup, RpcSchema, RpcSerialization } from "effect/unstable/rpc";
 import * as __rspack_external_effect_Schema_f8472650 from "effect/Schema";
+import * as __rspack_external_effect_unstable_http_HttpClientError_b9ead235 from "effect/unstable/http/HttpClientError";
 import * as __rspack_external_effect_Data_7c33fca9 from "effect/Data";
 import * as __rspack_external_effect_Exit_a10cfb96 from "effect/Exit";
 import * as __rspack_external_effect_ManagedRuntime_94dd2709 from "effect/ManagedRuntime";
@@ -105,4 +106,4 @@ function makeEffectRpcClient(group, options) {
     });
 }
 const runEffectRequest = __rspack_external_effect_Effect_194ac36c.runPromise;
-export { EffectRpcClientError, HttpApi, HttpApiClient, HttpApiEndpoint, HttpApiGroup, HttpApiSchema, Rpc, RpcClient, RpcGroup, RpcSchema, RpcSerialization, __rspack_external_effect_Effect_194ac36c as Effect, __rspack_external_effect_Layer_16f7a8fc as Layer, __rspack_external_effect_Schema_f8472650 as Schema, makeEffectHttpApiClient, makeEffectRpcClient, mask, runEffectRequest, runEffectView, view };
+export { EffectRpcClientError, HttpApi, HttpApiClient, HttpApiEndpoint, HttpApiGroup, HttpApiSchema, Rpc, RpcClient, RpcGroup, RpcSchema, RpcSerialization, __rspack_external_effect_Effect_194ac36c as Effect, __rspack_external_effect_Layer_16f7a8fc as Layer, __rspack_external_effect_Schema_f8472650 as Schema, __rspack_external_effect_unstable_http_HttpClientError_b9ead235 as HttpClientError, makeEffectHttpApiClient, makeEffectRpcClient, mask, runEffectRequest, runEffectView, view };

package/dist/esm-node/utils/effectClientGenerator.mjs

@@ -129,14 +129,14 @@ const __generated = createGeneratedEffectClient(__manifest, __config, __requestR
 const client = __generated.client;
 const operationManifest = __generated.operationManifest;
 const createEffectRequestContext = __generated.createEffectRequestContext;
-const effectBffModule = {
+const apiModule = {
   client,
   operationManifest,
   createEffectRequestContext,
 };
 
 export { client, createEffectRequestContext, operationManifest };
-export default effectBffModule;
+export default apiModule;
 `;
 }
 function renderClientShape(endpoints, valueType) {
@@ -209,13 +209,13 @@ export declare const createEffectRequestContext: (
   requestContext: Record<string, unknown>,
 ) => EffectRequestContext;
 export declare const operationManifest: GeneratedEffectOperationManifest;
-declare const effectBffModule: {
+declare const apiModule: {
   client: GeneratedEffectClient;
   createEffectRequestContext: typeof createEffectRequestContext;
   operationManifest: GeneratedEffectOperationManifest;
 };
 
-export default effectBffModule;
+export default apiModule;
 `;
 }
 async function generateEffectClient(options) {
@@ -238,9 +238,14 @@ async function generateEffectClientCode(options) {
 }
 function resolveEffectEntryFile(options) {
     const { appDir, apiDir, effectEntry } = options;
-    const defaultEntry = path.resolve(apiDir, 'effect', 'index');
-    const entryWithoutExt = effectEntry ? path.isAbsolute(effectEntry) ? effectEntry : path.resolve(appDir, effectEntry) : defaultEntry;
-    if (path.extname(entryWithoutExt)) return fs.existsSync(entryWithoutExt) ? entryWithoutExt : void 0;
-    return findExists(JS_OR_TS_EXTS.map((ext)=>`${entryWithoutExt}${ext}`));
+    const resolveEntry = (entryWithoutExt)=>{
+        if (path.extname(entryWithoutExt)) return fs.existsSync(entryWithoutExt) ? entryWithoutExt : void 0;
+        return findExists(JS_OR_TS_EXTS.map((ext)=>`${entryWithoutExt}${ext}`));
+    };
+    if (effectEntry) {
+        const entryWithoutExt = path.isAbsolute(effectEntry) ? effectEntry : path.resolve(appDir, effectEntry);
+        return resolveEntry(entryWithoutExt);
+    }
+    return resolveEntry(path.resolve(apiDir, 'index'));
 }
 export { generateEffectClient, generateEffectClientCode, renderEffectClientDeclaration, resolveEffectEntryFile };

package/dist/types/runtime/effect/adapter.d.ts

@@ -12,30 +12,14 @@ export declare class EffectAdapter {
     private handler;
     private dispose;
     private prefix;
-    /**
-     * True when the loaded handler does NOT run the policy seam internally
-     * (plain `handler` exports); the adapter middleware enforces it instead.
-     */
-    private policyEnforcedInMiddleware;
     constructor(api: ServerPluginAPI);
     registerMiddleware: (options: MiddlewareOptions) => Promise<void>;
     onApiHandlersUpdated: () => Promise<void>;
     private resolveEntryFile;
-    private isApiRequestPath;
-    /**
-     * Contract sources for the lambda-lane handlers hosted alongside the
-     * effect entry. Cross-project SDKs generate per-operation contracts for
-     * `api/lambda` handlers with the exact same `ApiRouter` derivation used
-     * here, so the server-side expected-contract map must include them —
-     * otherwise every lambda-lane operation of a hosted producer SDK would be
-     * denied as `unknown_operation_contract`.
-     */
-    private collectLambdaContractSources;
     /**
-     * Resolves the cross-project policy from the reflected HttpApi endpoints
-     * (plus any hosted lambda-lane handlers) so the expected operation
-     * contracts match the hashes the client generators stamp into generated
-     * SDKs.
+     * Resolves the cross-project policy from the reflected HttpApi endpoints so
+     * the expected operation contracts match the hashes the client generators
+     * stamp into generated SDKs.
      */
     private refreshCrossProjectPolicy;
     private loadEffectHandlerFromModule;

package/dist/types/runtime/effect/handler.d.ts

@@ -144,11 +144,8 @@ export type EffectRequestValidator = (request: Request) => Response | null | und
  * seam runs inside the produced handler, including per batched item.
  *
  * `defineEffectBff` brands its factory automatically. Hand-written factories
- * are NOT assumed to honor `validateRequest` (the option is newer than the
- * factory shape), so the effect adapter falls back to middleware enforcement
- * for unbranded factories instead of silently skipping the policy. Custom
- * factories that do forward `validateRequest` into `createHttpApiHandler`
- * may opt in by setting this symbol property to `true`.
+ * are NOT assumed to honor `validateRequest`, so strict module resolution
+ * rejects unbranded factories instead of silently skipping the policy.
  *
  * Registered via `Symbol.for` so independently loaded runtime copies agree.
  */