@bleedingdev/modern-js-plugin-bff 3.8.1-ultramodern.1 → 3.8.1-ultramodern.3

package/dist/cjs/runtime/data-platform/index.js

@@ -45,6 +45,9 @@ __webpack_require__.d(__webpack_exports__, {
     emitDataBatchTransportEvent: ()=>external_batch_transport_js_namespaceObject.emitDataBatchTransportEvent,
     encodeRequestEnvelopeHeader: ()=>external_codec_js_namespaceObject.encodeRequestEnvelopeHeader,
     formatTraceparentHeader: ()=>external_trace_js_namespaceObject.formatTraceparentHeader,
+    isPlainObject: ()=>external_codec_js_namespaceObject.isPlainObject,
+    measureTextBytes: ()=>request_js_namespaceObject.measureTextBytes,
+    normalizeMethod: ()=>request_js_namespaceObject.normalizeMethod,
     normalizeOrigin: ()=>external_codec_js_namespaceObject.normalizeOrigin,
     parseTraceparentHeader: ()=>external_trace_js_namespaceObject.parseTraceparentHeader,
     shouldApplyInvalidation: ()=>external_invalidation_js_namespaceObject.shouldApplyInvalidation,
@@ -53,6 +56,7 @@ __webpack_require__.d(__webpack_exports__, {
     validateRequestEnvelope: ()=>external_validation_js_namespaceObject.validateRequestEnvelope,
     validateSelectionPlan: ()=>external_validation_js_namespaceObject.validateSelectionPlan
 });
+const request_js_namespaceObject = require("./batch/request.js");
 const external_batch_transport_js_namespaceObject = require("./batch-transport.js");
 const external_codec_js_namespaceObject = require("./codec.js");
 const external_invalidation_js_namespaceObject = require("./invalidation.js");
@@ -76,6 +80,9 @@ exports.deriveChildTraceContext = __webpack_exports__.deriveChildTraceContext;
 exports.emitDataBatchTransportEvent = __webpack_exports__.emitDataBatchTransportEvent;
 exports.encodeRequestEnvelopeHeader = __webpack_exports__.encodeRequestEnvelopeHeader;
 exports.formatTraceparentHeader = __webpack_exports__.formatTraceparentHeader;
+exports.isPlainObject = __webpack_exports__.isPlainObject;
+exports.measureTextBytes = __webpack_exports__.measureTextBytes;
+exports.normalizeMethod = __webpack_exports__.normalizeMethod;
 exports.normalizeOrigin = __webpack_exports__.normalizeOrigin;
 exports.parseTraceparentHeader = __webpack_exports__.parseTraceparentHeader;
 exports.shouldApplyInvalidation = __webpack_exports__.shouldApplyInvalidation;
@@ -101,6 +108,9 @@ for(var __rspack_i in __webpack_exports__)if (-1 === [
     "emitDataBatchTransportEvent",
     "encodeRequestEnvelopeHeader",
     "formatTraceparentHeader",
+    "isPlainObject",
+    "measureTextBytes",
+    "normalizeMethod",
     "normalizeOrigin",
     "parseTraceparentHeader",
     "shouldApplyInvalidation",

package/dist/cjs/runtime/effect/handler/batch-handler.js

@@ -46,12 +46,12 @@ function createDataPlatformBatchRequestHandler(options) {
     const normalizedEnvelopeHeader = envelopeHeader.toLowerCase();
     const handle = async (request, context)=>{
         const mountedPrefix = (0, external_routing_js_namespaceObject.getMountedPrefixFromContext)(request, context);
-        const method = (0, external_batch_js_namespaceObject.normalizeItemMethod)(request.method);
+        const method = (0, index_js_namespaceObject.normalizeMethod)(request.method);
         if ('POST' !== method) return (0, external_batch_js_namespaceObject.createBatchValidationResponse)('Batch endpoint only supports POST requests', 405);
         const contentType = request.headers.get('content-type') || '';
         if (!contentType.includes('application/json')) return (0, external_batch_js_namespaceObject.createBatchValidationResponse)('Batch endpoint requires application/json content-type', 415);
         const payloadText = await request.text();
-        if ((0, external_batch_js_namespaceObject.toTextLength)(payloadText) > batchMaxBytes) return (0, external_batch_js_namespaceObject.createBatchValidationResponse)(`Batch payload exceeds max size (${String(batchMaxBytes)} bytes)`, 413);
+        if ((0, index_js_namespaceObject.measureTextBytes)(payloadText) > batchMaxBytes) return (0, external_batch_js_namespaceObject.createBatchValidationResponse)(`Batch payload exceeds max size (${String(batchMaxBytes)} bytes)`, 413);
         let payload;
         try {
             payload = JSON.parse(payloadText);
@@ -63,20 +63,20 @@ function createDataPlatformBatchRequestHandler(options) {
         if (payload.items.length > batchMaxSize) return (0, external_batch_js_namespaceObject.createBatchValidationResponse)(`Batch item count exceeds max size (${String(batchMaxSize)})`, 413);
         const responseItems = await (0, external_batch_js_namespaceObject.mapWithConcurrency)(payload.items, batchConcurrency, async (rawItem, index)=>{
             const fallbackId = `item_${String(index)}`;
-            const itemId = (0, external_batch_js_namespaceObject.isPlainObject)(rawItem) && 'string' == typeof rawItem.id ? rawItem.id : fallbackId;
-            if (!(0, external_batch_js_namespaceObject.isPlainObject)(rawItem)) return (0, external_batch_js_namespaceObject.toBatchItemError)(itemId, 400, 'Invalid batch item; expected object');
+            const itemId = (0, index_js_namespaceObject.isPlainObject)(rawItem) && 'string' == typeof rawItem.id ? rawItem.id : fallbackId;
+            if (!(0, index_js_namespaceObject.isPlainObject)(rawItem)) return (0, external_batch_js_namespaceObject.toBatchItemError)(itemId, 400, 'Invalid batch item; expected object');
             if ('string' != typeof rawItem.path || 0 === rawItem.path.length) return (0, external_batch_js_namespaceObject.toBatchItemError)(itemId, 400, 'Invalid batch item path');
             if (!rawItem.path.startsWith('/')) return (0, external_batch_js_namespaceObject.toBatchItemError)(itemId, 400, 'Batch item path must start with "/"');
             const normalizedItemPath = (0, external_routing_js_namespaceObject.removeMountedPrefixFromBatchPath)(rawItem.path, mountedPrefix);
             const itemPathname = normalizedItemPath.split('?')[0] || normalizedItemPath;
             if (itemPathname === batchPath || itemPathname.startsWith(`${batchPath}/`)) return (0, external_batch_js_namespaceObject.toBatchItemError)(itemId, 400, 'Batch item path cannot target batch endpoint');
-            const itemMethod = (0, external_batch_js_namespaceObject.normalizeItemMethod)('string' == typeof rawItem.method ? rawItem.method : void 0);
+            const itemMethod = (0, index_js_namespaceObject.normalizeMethod)('string' == typeof rawItem.method ? rawItem.method : void 0);
             if (!batchAllowedMethods.has(itemMethod)) return (0, external_batch_js_namespaceObject.toBatchItemError)(itemId, 405, `Batch item method ${itemMethod} is not allowed`);
             if (void 0 !== rawItem.body && null !== rawItem.body && 'string' != typeof rawItem.body) return (0, external_batch_js_namespaceObject.toBatchItemError)(itemId, 400, 'Batch item body must be a string when provided');
             if (('GET' === itemMethod || 'HEAD' === itemMethod) && 'string' == typeof rawItem.body) return (0, external_batch_js_namespaceObject.toBatchItemError)(itemId, 400, `${itemMethod} batch item cannot include body`);
             const normalizedHeaders = {};
             if (void 0 !== rawItem.headers) {
-                if (!(0, external_batch_js_namespaceObject.isPlainObject)(rawItem.headers)) return (0, external_batch_js_namespaceObject.toBatchItemError)(itemId, 400, 'Batch item headers must be an object');
+                if (!(0, index_js_namespaceObject.isPlainObject)(rawItem.headers)) return (0, external_batch_js_namespaceObject.toBatchItemError)(itemId, 400, 'Batch item headers must be an object');
                 for (const [key, value] of Object.entries(rawItem.headers)){
                     if ('string' != typeof value) return (0, external_batch_js_namespaceObject.toBatchItemError)(itemId, 400, `Invalid header "${key}" for batch item`);
                     normalizedHeaders[key.toLowerCase()] = value;

package/dist/cjs/runtime/effect/handler/batch.js

@@ -30,41 +30,21 @@ __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
     createBatchValidationResponse: ()=>createBatchValidationResponse,
     isBatchRequestPayload: ()=>isBatchRequestPayload,
-    isPlainObject: ()=>isPlainObject,
     mapWithConcurrency: ()=>mapWithConcurrency,
     normalizeBatchAllowedMethods: ()=>normalizeBatchAllowedMethods,
     normalizeBatchPath: ()=>normalizeBatchPath,
-    normalizeItemMethod: ()=>normalizeItemMethod,
     prepareJsonRequestBody: ()=>prepareJsonRequestBody,
     promiseWithTimeout: ()=>promiseWithTimeout,
     toBatchItemError: ()=>toBatchItemError,
-    toHeaderRecord: ()=>toHeaderRecord,
-    toTextLength: ()=>toTextLength
+    toHeaderRecord: ()=>headers_js_namespaceObject.toHeaderRecord
 });
 const index_js_namespaceObject = require("../../data-platform/index.js");
+const headers_js_namespaceObject = require("../../../utils/headers.js");
 function normalizeBatchPath(pathname) {
     if (!pathname || '/' === pathname) return index_js_namespaceObject.DEFAULT_DATA_BATCH_ENDPOINT;
     if (!pathname.startsWith('/')) return `/${pathname}`;
     return pathname;
 }
-function isPlainObject(value) {
-    return 'object' == typeof value && null !== value && !Array.isArray(value);
-}
-function toTextLength(value) {
-    if ("u" > typeof TextEncoder) return new TextEncoder().encode(value).length;
-    if ("u" > typeof Buffer) return Buffer.byteLength(value);
-    return value.length;
-}
-function toHeaderRecord(headers) {
-    const record = {};
-    headers.forEach((value, key)=>{
-        record[key] = value;
-    });
-    return record;
-}
-function normalizeItemMethod(method) {
-    return (method || 'GET').toUpperCase();
-}
 function normalizeBatchAllowedMethods(allowedMethods) {
     const source = Array.isArray(allowedMethods) && allowedMethods.length > 0 ? allowedMethods : [
         'GET'
@@ -72,7 +52,7 @@ function normalizeBatchAllowedMethods(allowedMethods) {
     return new Set(source.map((method)=>method.toUpperCase()));
 }
 function isBatchRequestPayload(value) {
-    return isPlainObject(value) && 1 === value.protocolVersion && 'string' == typeof value.batchId && 'number' == typeof value.sentAt && Array.isArray(value.items);
+    return (0, index_js_namespaceObject.isPlainObject)(value) && 1 === value.protocolVersion && 'string' == typeof value.batchId && 'number' == typeof value.sentAt && Array.isArray(value.items);
 }
 function createBatchValidationResponse(message, status = 400) {
     return new Response(JSON.stringify({
@@ -84,16 +64,6 @@ function createBatchValidationResponse(message, status = 400) {
         }
     });
 }
-function createJsonValidationResponse(message, status = 400) {
-    return new Response(JSON.stringify({
-        message
-    }), {
-        status,
-        headers: {
-            'content-type': 'application/json; charset=utf-8'
-        }
-    });
-}
 function cloneWithoutJsonBodyHeaders(request) {
     const headers = new Headers(request.headers);
     headers.delete('content-type');
@@ -105,7 +75,7 @@ function cloneWithoutJsonBodyHeaders(request) {
     });
 }
 async function prepareJsonRequestBody(request) {
-    const method = normalizeItemMethod(request.method);
+    const method = (0, index_js_namespaceObject.normalizeMethod)(request.method);
     if ('GET' === method || 'HEAD' === method) return request;
     const contentType = (request.headers.get('content-type') || '').toLowerCase();
     if (!contentType.includes('application/json')) return request;
@@ -115,7 +85,7 @@ async function prepareJsonRequestBody(request) {
         if ('' === bodyText) return cloneWithoutJsonBodyHeaders(request);
         JSON.parse(bodyText);
     } catch  {
-        return createJsonValidationResponse('Invalid JSON request body');
+        return createBatchValidationResponse('Invalid JSON request body');
     }
     return request;
 }
@@ -166,29 +136,23 @@ async function mapWithConcurrency(items, concurrency, mapper) {
 }
 exports.createBatchValidationResponse = __webpack_exports__.createBatchValidationResponse;
 exports.isBatchRequestPayload = __webpack_exports__.isBatchRequestPayload;
-exports.isPlainObject = __webpack_exports__.isPlainObject;
 exports.mapWithConcurrency = __webpack_exports__.mapWithConcurrency;
 exports.normalizeBatchAllowedMethods = __webpack_exports__.normalizeBatchAllowedMethods;
 exports.normalizeBatchPath = __webpack_exports__.normalizeBatchPath;
-exports.normalizeItemMethod = __webpack_exports__.normalizeItemMethod;
 exports.prepareJsonRequestBody = __webpack_exports__.prepareJsonRequestBody;
 exports.promiseWithTimeout = __webpack_exports__.promiseWithTimeout;
 exports.toBatchItemError = __webpack_exports__.toBatchItemError;
 exports.toHeaderRecord = __webpack_exports__.toHeaderRecord;
-exports.toTextLength = __webpack_exports__.toTextLength;
 for(var __rspack_i in __webpack_exports__)if (-1 === [
     "createBatchValidationResponse",
     "isBatchRequestPayload",
-    "isPlainObject",
     "mapWithConcurrency",
     "normalizeBatchAllowedMethods",
     "normalizeBatchPath",
-    "normalizeItemMethod",
     "prepareJsonRequestBody",
     "promiseWithTimeout",
     "toBatchItemError",
-    "toHeaderRecord",
-    "toTextLength"
+    "toHeaderRecord"
 ].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
 Object.defineProperty(exports, '__esModule', {
     value: true

package/dist/cjs/runtime/effect/handler/routing.js

@@ -34,7 +34,7 @@ __webpack_require__.d(__webpack_exports__, {
     isRpcRequest: ()=>isRpcRequest,
     removeMountedPrefixFromBatchPath: ()=>removeMountedPrefixFromBatchPath
 });
-const external_batch_js_namespaceObject = require("./batch.js");
+const index_js_namespaceObject = require("../../data-platform/index.js");
 function getRequestPathname(request) {
     try {
         return new URL(request.url).pathname;
@@ -47,7 +47,7 @@ function normalizeMountPrefix(prefix) {
     return prefix.endsWith('/') ? prefix.slice(0, -1) : prefix;
 }
 function getMountedPrefixFromContext(request, context) {
-    if (!(0, external_batch_js_namespaceObject.isPlainObject)(context) || 'string' != typeof context.path) return '';
+    if (!(0, index_js_namespaceObject.isPlainObject)(context) || 'string' != typeof context.path) return '';
     const contextPath = normalizeMountPrefix(context.path);
     const requestPath = normalizeMountPrefix(getRequestPathname(request));
     if (!contextPath || !requestPath || contextPath === requestPath || !contextPath.endsWith(requestPath)) return '';

package/dist/cjs/utils/crossProjectServerPolicy.js

@@ -44,6 +44,7 @@ __webpack_require__.d(__webpack_exports__, {
 const bff_core_namespaceObject = require("@modern-js/bff-core");
 const external_path_namespaceObject = require("path");
 var external_path_default = /*#__PURE__*/ __webpack_require__.n(external_path_namespaceObject);
+const external_headers_js_namespaceObject = require("./headers.js");
 const readNearestPackageVersion = (startDir)=>{
     if (!startDir) return;
     let current = external_path_default().resolve(startDir);
@@ -80,16 +81,9 @@ const checkCrossProjectPolicyResponse = (headers, policy)=>{
         headers: DENIAL_HEADERS
     });
 };
-const toHeaderRecord = (headers)=>{
-    const record = {};
-    headers.forEach((value, key)=>{
-        record[key] = value;
-    });
-    return record;
-};
 const checkCrossProjectPolicyForRequest = (request, policy)=>{
     if (!policy?.enabled) return null;
-    return checkCrossProjectPolicyResponse(toHeaderRecord(request.headers), policy);
+    return checkCrossProjectPolicyResponse((0, external_headers_js_namespaceObject.toHeaderRecord)(request.headers), policy);
 };
 exports.checkCrossProjectPolicyForRequest = __webpack_exports__.checkCrossProjectPolicyForRequest;
 exports.checkCrossProjectPolicyResponse = __webpack_exports__.checkCrossProjectPolicyResponse;

package/dist/cjs/utils/headers.js

@@ -0,0 +1,46 @@
+"use strict";
+var __webpack_require__ = {};
+(()=>{
+    __webpack_require__.d = (exports1, getters, values)=>{
+        var define = (defs, kind)=>{
+            for(var key in defs)if (__webpack_require__.o(defs, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+                enumerable: true,
+                [kind]: defs[key]
+            });
+        };
+        define(getters, "get");
+        define(values, "value");
+    };
+})();
+(()=>{
+    __webpack_require__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+})();
+(()=>{
+    __webpack_require__.r = (exports1)=>{
+        if ("u" > typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
+            value: 'Module'
+        });
+        Object.defineProperty(exports1, '__esModule', {
+            value: true
+        });
+    };
+})();
+var __webpack_exports__ = {};
+__webpack_require__.r(__webpack_exports__);
+function toHeaderRecord(headers) {
+    const record = {};
+    headers.forEach((value, key)=>{
+        record[key] = value;
+    });
+    return record;
+}
+__webpack_require__.d(__webpack_exports__, {
+    toHeaderRecord: ()=>toHeaderRecord
+});
+exports.toHeaderRecord = __webpack_exports__.toHeaderRecord;
+for(var __rspack_i in __webpack_exports__)if (-1 === [
+    "toHeaderRecord"
+].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
+Object.defineProperty(exports, '__esModule', {
+    value: true
+});

package/dist/esm/runtime/data-platform/index.mjs

@@ -1,5 +1,6 @@
+export { measureTextBytes, normalizeMethod } from "./batch/request.mjs";
 export { DATA_BATCH_TRANSPORT_OTEL_EVENT, createDataBatchTransport, createDataBatchTransportTelemetryAttributes, emitDataBatchTransportEvent } from "./batch-transport.mjs";
-export { buildQueryKey, buildScopeKey, createOperationId, decodeRequestEnvelopeHeader, encodeRequestEnvelopeHeader, normalizeOrigin, stableStringify } from "./codec.mjs";
+export { buildQueryKey, buildScopeKey, createOperationId, decodeRequestEnvelopeHeader, encodeRequestEnvelopeHeader, isPlainObject, normalizeOrigin, stableStringify } from "./codec.mjs";
 export { createInvalidationEvent, shouldApplyInvalidation } from "./invalidation.mjs";
 export { deriveChildTraceContext, formatTraceparentHeader, parseTraceparentHeader } from "./trace.mjs";
 export { DEFAULT_DATA_BATCH_ENDPOINT, DEFAULT_DATA_BATCH_HEADER, DEFAULT_DATA_ENVELOPE_HEADER } from "./types.mjs";

package/dist/esm/runtime/effect/handler/batch-handler.mjs

@@ -1,5 +1,5 @@
-import { DEFAULT_DATA_BATCH_HEADER, DEFAULT_DATA_ENVELOPE_HEADER, decodeRequestEnvelopeHeader } from "../../data-platform/index.mjs";
-import { createBatchValidationResponse, isBatchRequestPayload, isPlainObject, mapWithConcurrency, normalizeBatchAllowedMethods, normalizeBatchPath, normalizeItemMethod, promiseWithTimeout, toBatchItemError, toHeaderRecord, toTextLength } from "./batch.mjs";
+import { DEFAULT_DATA_BATCH_HEADER, DEFAULT_DATA_ENVELOPE_HEADER, decodeRequestEnvelopeHeader, isPlainObject, measureTextBytes, normalizeMethod } from "../../data-platform/index.mjs";
+import { createBatchValidationResponse, isBatchRequestPayload, mapWithConcurrency, normalizeBatchAllowedMethods, normalizeBatchPath, promiseWithTimeout, toBatchItemError, toHeaderRecord } from "./batch.mjs";
 import { getMountedPrefixFromContext, removeMountedPrefixFromBatchPath } from "./routing.mjs";
 function createDataPlatformBatchRequestHandler(options) {
     const dataPlatformBatchOptions = options.dataPlatform?.batch;
@@ -14,12 +14,12 @@ function createDataPlatformBatchRequestHandler(options) {
     const normalizedEnvelopeHeader = envelopeHeader.toLowerCase();
     const handle = async (request, context)=>{
         const mountedPrefix = getMountedPrefixFromContext(request, context);
-        const method = normalizeItemMethod(request.method);
+        const method = normalizeMethod(request.method);
         if ('POST' !== method) return createBatchValidationResponse('Batch endpoint only supports POST requests', 405);
         const contentType = request.headers.get('content-type') || '';
         if (!contentType.includes('application/json')) return createBatchValidationResponse('Batch endpoint requires application/json content-type', 415);
         const payloadText = await request.text();
-        if (toTextLength(payloadText) > batchMaxBytes) return createBatchValidationResponse(`Batch payload exceeds max size (${String(batchMaxBytes)} bytes)`, 413);
+        if (measureTextBytes(payloadText) > batchMaxBytes) return createBatchValidationResponse(`Batch payload exceeds max size (${String(batchMaxBytes)} bytes)`, 413);
         let payload;
         try {
             payload = JSON.parse(payloadText);
@@ -38,7 +38,7 @@ function createDataPlatformBatchRequestHandler(options) {
             const normalizedItemPath = removeMountedPrefixFromBatchPath(rawItem.path, mountedPrefix);
             const itemPathname = normalizedItemPath.split('?')[0] || normalizedItemPath;
             if (itemPathname === batchPath || itemPathname.startsWith(`${batchPath}/`)) return toBatchItemError(itemId, 400, 'Batch item path cannot target batch endpoint');
-            const itemMethod = normalizeItemMethod('string' == typeof rawItem.method ? rawItem.method : void 0);
+            const itemMethod = normalizeMethod('string' == typeof rawItem.method ? rawItem.method : void 0);
             if (!batchAllowedMethods.has(itemMethod)) return toBatchItemError(itemId, 405, `Batch item method ${itemMethod} is not allowed`);
             if (void 0 !== rawItem.body && null !== rawItem.body && 'string' != typeof rawItem.body) return toBatchItemError(itemId, 400, 'Batch item body must be a string when provided');
             if (('GET' === itemMethod || 'HEAD' === itemMethod) && 'string' == typeof rawItem.body) return toBatchItemError(itemId, 400, `${itemMethod} batch item cannot include body`);

package/dist/esm/runtime/effect/handler/batch.mjs

@@ -1,27 +1,9 @@
-import { DEFAULT_DATA_BATCH_ENDPOINT } from "../../data-platform/index.mjs";
+import { DEFAULT_DATA_BATCH_ENDPOINT, isPlainObject, normalizeMethod } from "../../data-platform/index.mjs";
 function normalizeBatchPath(pathname) {
     if (!pathname || '/' === pathname) return DEFAULT_DATA_BATCH_ENDPOINT;
     if (!pathname.startsWith('/')) return `/${pathname}`;
     return pathname;
 }
-function isPlainObject(value) {
-    return 'object' == typeof value && null !== value && !Array.isArray(value);
-}
-function toTextLength(value) {
-    if ("u" > typeof TextEncoder) return new TextEncoder().encode(value).length;
-    if ("u" > typeof Buffer) return Buffer.byteLength(value);
-    return value.length;
-}
-function toHeaderRecord(headers) {
-    const record = {};
-    headers.forEach((value, key)=>{
-        record[key] = value;
-    });
-    return record;
-}
-function normalizeItemMethod(method) {
-    return (method || 'GET').toUpperCase();
-}
 function normalizeBatchAllowedMethods(allowedMethods) {
     const source = Array.isArray(allowedMethods) && allowedMethods.length > 0 ? allowedMethods : [
         'GET'
@@ -41,16 +23,6 @@ function createBatchValidationResponse(message, status = 400) {
         }
     });
 }
-function createJsonValidationResponse(message, status = 400) {
-    return new Response(JSON.stringify({
-        message
-    }), {
-        status,
-        headers: {
-            'content-type': 'application/json; charset=utf-8'
-        }
-    });
-}
 function cloneWithoutJsonBodyHeaders(request) {
     const headers = new Headers(request.headers);
     headers.delete('content-type');
@@ -62,7 +34,7 @@ function cloneWithoutJsonBodyHeaders(request) {
     });
 }
 async function prepareJsonRequestBody(request) {
-    const method = normalizeItemMethod(request.method);
+    const method = normalizeMethod(request.method);
     if ('GET' === method || 'HEAD' === method) return request;
     const contentType = (request.headers.get('content-type') || '').toLowerCase();
     if (!contentType.includes('application/json')) return request;
@@ -72,7 +44,7 @@ async function prepareJsonRequestBody(request) {
         if ('' === bodyText) return cloneWithoutJsonBodyHeaders(request);
         JSON.parse(bodyText);
     } catch  {
-        return createJsonValidationResponse('Invalid JSON request body');
+        return createBatchValidationResponse('Invalid JSON request body');
     }
     return request;
 }
@@ -121,4 +93,5 @@ async function mapWithConcurrency(items, concurrency, mapper) {
     await Promise.all(workers);
     return output;
 }
-export { createBatchValidationResponse, isBatchRequestPayload, isPlainObject, mapWithConcurrency, normalizeBatchAllowedMethods, normalizeBatchPath, normalizeItemMethod, prepareJsonRequestBody, promiseWithTimeout, toBatchItemError, toHeaderRecord, toTextLength };
+export { toHeaderRecord } from "../../../utils/headers.mjs";
+export { createBatchValidationResponse, isBatchRequestPayload, mapWithConcurrency, normalizeBatchAllowedMethods, normalizeBatchPath, prepareJsonRequestBody, promiseWithTimeout, toBatchItemError };

package/dist/esm/runtime/effect/handler/routing.mjs

@@ -1,4 +1,4 @@
-import { isPlainObject } from "./batch.mjs";
+import { isPlainObject } from "../../data-platform/index.mjs";
 function getRequestPathname(request) {
     try {
         return new URL(request.url).pathname;

package/dist/esm/utils/crossProjectServerPolicy.mjs

@@ -1,5 +1,6 @@
 import { checkCrossProjectPolicy, deriveOperationVersion, resolveCrossProjectPolicy } from "@modern-js/bff-core";
 import path from "path";
+import { toHeaderRecord } from "./headers.mjs";
 const readNearestPackageVersion = (startDir)=>{
     if (!startDir) return;
     let current = path.resolve(startDir);
@@ -36,13 +37,6 @@ const checkCrossProjectPolicyResponse = (headers, policy)=>{
         headers: DENIAL_HEADERS
     });
 };
-const toHeaderRecord = (headers)=>{
-    const record = {};
-    headers.forEach((value, key)=>{
-        record[key] = value;
-    });
-    return record;
-};
 const checkCrossProjectPolicyForRequest = (request, policy)=>{
     if (!policy?.enabled) return null;
     return checkCrossProjectPolicyResponse(toHeaderRecord(request.headers), policy);

package/dist/esm/utils/headers.mjs

@@ -0,0 +1,8 @@
+function toHeaderRecord(headers) {
+    const record = {};
+    headers.forEach((value, key)=>{
+        record[key] = value;
+    });
+    return record;
+}
+export { toHeaderRecord };

package/dist/esm-node/runtime/data-platform/index.mjs

@@ -1,6 +1,7 @@
 import "node:module";
+export { measureTextBytes, normalizeMethod } from "./batch/request.mjs";
 export { DATA_BATCH_TRANSPORT_OTEL_EVENT, createDataBatchTransport, createDataBatchTransportTelemetryAttributes, emitDataBatchTransportEvent } from "./batch-transport.mjs";
-export { buildQueryKey, buildScopeKey, createOperationId, decodeRequestEnvelopeHeader, encodeRequestEnvelopeHeader, normalizeOrigin, stableStringify } from "./codec.mjs";
+export { buildQueryKey, buildScopeKey, createOperationId, decodeRequestEnvelopeHeader, encodeRequestEnvelopeHeader, isPlainObject, normalizeOrigin, stableStringify } from "./codec.mjs";
 export { createInvalidationEvent, shouldApplyInvalidation } from "./invalidation.mjs";
 export { deriveChildTraceContext, formatTraceparentHeader, parseTraceparentHeader } from "./trace.mjs";
 export { DEFAULT_DATA_BATCH_ENDPOINT, DEFAULT_DATA_BATCH_HEADER, DEFAULT_DATA_ENVELOPE_HEADER } from "./types.mjs";

package/dist/esm-node/runtime/effect/handler/batch-handler.mjs

@@ -1,6 +1,6 @@
 import "node:module";
-import { DEFAULT_DATA_BATCH_HEADER, DEFAULT_DATA_ENVELOPE_HEADER, decodeRequestEnvelopeHeader } from "../../data-platform/index.mjs";
-import { createBatchValidationResponse, isBatchRequestPayload, isPlainObject, mapWithConcurrency, normalizeBatchAllowedMethods, normalizeBatchPath, normalizeItemMethod, promiseWithTimeout, toBatchItemError, toHeaderRecord, toTextLength } from "./batch.mjs";
+import { DEFAULT_DATA_BATCH_HEADER, DEFAULT_DATA_ENVELOPE_HEADER, decodeRequestEnvelopeHeader, isPlainObject, measureTextBytes, normalizeMethod } from "../../data-platform/index.mjs";
+import { createBatchValidationResponse, isBatchRequestPayload, mapWithConcurrency, normalizeBatchAllowedMethods, normalizeBatchPath, promiseWithTimeout, toBatchItemError, toHeaderRecord } from "./batch.mjs";
 import { getMountedPrefixFromContext, removeMountedPrefixFromBatchPath } from "./routing.mjs";
 function createDataPlatformBatchRequestHandler(options) {
     const dataPlatformBatchOptions = options.dataPlatform?.batch;
@@ -15,12 +15,12 @@ function createDataPlatformBatchRequestHandler(options) {
     const normalizedEnvelopeHeader = envelopeHeader.toLowerCase();
     const handle = async (request, context)=>{
         const mountedPrefix = getMountedPrefixFromContext(request, context);
-        const method = normalizeItemMethod(request.method);
+        const method = normalizeMethod(request.method);
         if ('POST' !== method) return createBatchValidationResponse('Batch endpoint only supports POST requests', 405);
         const contentType = request.headers.get('content-type') || '';
         if (!contentType.includes('application/json')) return createBatchValidationResponse('Batch endpoint requires application/json content-type', 415);
         const payloadText = await request.text();
-        if (toTextLength(payloadText) > batchMaxBytes) return createBatchValidationResponse(`Batch payload exceeds max size (${String(batchMaxBytes)} bytes)`, 413);
+        if (measureTextBytes(payloadText) > batchMaxBytes) return createBatchValidationResponse(`Batch payload exceeds max size (${String(batchMaxBytes)} bytes)`, 413);
         let payload;
         try {
             payload = JSON.parse(payloadText);
@@ -39,7 +39,7 @@ function createDataPlatformBatchRequestHandler(options) {
             const normalizedItemPath = removeMountedPrefixFromBatchPath(rawItem.path, mountedPrefix);
             const itemPathname = normalizedItemPath.split('?')[0] || normalizedItemPath;
             if (itemPathname === batchPath || itemPathname.startsWith(`${batchPath}/`)) return toBatchItemError(itemId, 400, 'Batch item path cannot target batch endpoint');
-            const itemMethod = normalizeItemMethod('string' == typeof rawItem.method ? rawItem.method : void 0);
+            const itemMethod = normalizeMethod('string' == typeof rawItem.method ? rawItem.method : void 0);
             if (!batchAllowedMethods.has(itemMethod)) return toBatchItemError(itemId, 405, `Batch item method ${itemMethod} is not allowed`);
             if (void 0 !== rawItem.body && null !== rawItem.body && 'string' != typeof rawItem.body) return toBatchItemError(itemId, 400, 'Batch item body must be a string when provided');
             if (('GET' === itemMethod || 'HEAD' === itemMethod) && 'string' == typeof rawItem.body) return toBatchItemError(itemId, 400, `${itemMethod} batch item cannot include body`);

package/dist/esm-node/runtime/effect/handler/batch.mjs

@@ -1,28 +1,10 @@
 import "node:module";
-import { DEFAULT_DATA_BATCH_ENDPOINT } from "../../data-platform/index.mjs";
+import { DEFAULT_DATA_BATCH_ENDPOINT, isPlainObject, normalizeMethod } from "../../data-platform/index.mjs";
 function normalizeBatchPath(pathname) {
     if (!pathname || '/' === pathname) return DEFAULT_DATA_BATCH_ENDPOINT;
     if (!pathname.startsWith('/')) return `/${pathname}`;
     return pathname;
 }
-function isPlainObject(value) {
-    return 'object' == typeof value && null !== value && !Array.isArray(value);
-}
-function toTextLength(value) {
-    if ("u" > typeof TextEncoder) return new TextEncoder().encode(value).length;
-    if ("u" > typeof Buffer) return Buffer.byteLength(value);
-    return value.length;
-}
-function toHeaderRecord(headers) {
-    const record = {};
-    headers.forEach((value, key)=>{
-        record[key] = value;
-    });
-    return record;
-}
-function normalizeItemMethod(method) {
-    return (method || 'GET').toUpperCase();
-}
 function normalizeBatchAllowedMethods(allowedMethods) {
     const source = Array.isArray(allowedMethods) && allowedMethods.length > 0 ? allowedMethods : [
         'GET'
@@ -42,16 +24,6 @@ function createBatchValidationResponse(message, status = 400) {
         }
     });
 }
-function createJsonValidationResponse(message, status = 400) {
-    return new Response(JSON.stringify({
-        message
-    }), {
-        status,
-        headers: {
-            'content-type': 'application/json; charset=utf-8'
-        }
-    });
-}
 function cloneWithoutJsonBodyHeaders(request) {
     const headers = new Headers(request.headers);
     headers.delete('content-type');
@@ -63,7 +35,7 @@ function cloneWithoutJsonBodyHeaders(request) {
     });
 }
 async function prepareJsonRequestBody(request) {
-    const method = normalizeItemMethod(request.method);
+    const method = normalizeMethod(request.method);
     if ('GET' === method || 'HEAD' === method) return request;
     const contentType = (request.headers.get('content-type') || '').toLowerCase();
     if (!contentType.includes('application/json')) return request;
@@ -73,7 +45,7 @@ async function prepareJsonRequestBody(request) {
         if ('' === bodyText) return cloneWithoutJsonBodyHeaders(request);
         JSON.parse(bodyText);
     } catch  {
-        return createJsonValidationResponse('Invalid JSON request body');
+        return createBatchValidationResponse('Invalid JSON request body');
     }
     return request;
 }
@@ -122,4 +94,5 @@ async function mapWithConcurrency(items, concurrency, mapper) {
     await Promise.all(workers);
     return output;
 }
-export { createBatchValidationResponse, isBatchRequestPayload, isPlainObject, mapWithConcurrency, normalizeBatchAllowedMethods, normalizeBatchPath, normalizeItemMethod, prepareJsonRequestBody, promiseWithTimeout, toBatchItemError, toHeaderRecord, toTextLength };
+export { toHeaderRecord } from "../../../utils/headers.mjs";
+export { createBatchValidationResponse, isBatchRequestPayload, mapWithConcurrency, normalizeBatchAllowedMethods, normalizeBatchPath, prepareJsonRequestBody, promiseWithTimeout, toBatchItemError };

package/dist/esm-node/runtime/effect/handler/routing.mjs

@@ -1,5 +1,5 @@
 import "node:module";
-import { isPlainObject } from "./batch.mjs";
+import { isPlainObject } from "../../data-platform/index.mjs";
 function getRequestPathname(request) {
     try {
         return new URL(request.url).pathname;

package/dist/esm-node/utils/crossProjectServerPolicy.mjs

@@ -2,6 +2,7 @@ import __rslib_shim_module__ from "node:module";
 const require = /*#__PURE__*/ __rslib_shim_module__.createRequire(/*#__PURE__*/ (()=>import.meta.url)());
 import { checkCrossProjectPolicy, deriveOperationVersion, resolveCrossProjectPolicy } from "@modern-js/bff-core";
 import path from "path";
+import { toHeaderRecord } from "./headers.mjs";
 const readNearestPackageVersion = (startDir)=>{
     if (!startDir) return;
     let current = path.resolve(startDir);
@@ -38,13 +39,6 @@ const checkCrossProjectPolicyResponse = (headers, policy)=>{
         headers: DENIAL_HEADERS
     });
 };
-const toHeaderRecord = (headers)=>{
-    const record = {};
-    headers.forEach((value, key)=>{
-        record[key] = value;
-    });
-    return record;
-};
 const checkCrossProjectPolicyForRequest = (request, policy)=>{
     if (!policy?.enabled) return null;
     return checkCrossProjectPolicyResponse(toHeaderRecord(request.headers), policy);

package/dist/esm-node/utils/headers.mjs

@@ -0,0 +1,9 @@
+import "node:module";
+function toHeaderRecord(headers) {
+    const record = {};
+    headers.forEach((value, key)=>{
+        record[key] = value;
+    });
+    return record;
+}
+export { toHeaderRecord };

package/dist/types/runtime/data-platform/index.d.ts

@@ -1,5 +1,6 @@
+export { measureTextBytes, normalizeMethod } from './batch/request';
 export { createDataBatchTransport, createDataBatchTransportTelemetryAttributes, DATA_BATCH_TRANSPORT_OTEL_EVENT, emitDataBatchTransportEvent, } from './batch-transport';
-export { buildQueryKey, buildScopeKey, createOperationId, decodeRequestEnvelopeHeader, encodeRequestEnvelopeHeader, normalizeOrigin, stableStringify, } from './codec';
+export { buildQueryKey, buildScopeKey, createOperationId, decodeRequestEnvelopeHeader, encodeRequestEnvelopeHeader, isPlainObject, normalizeOrigin, stableStringify, } from './codec';
 export { createInvalidationEvent, shouldApplyInvalidation, } from './invalidation';
 export { deriveChildTraceContext, formatTraceparentHeader, parseTraceparentHeader, } from './trace';
 export type { CacheScope, DataBatchRequestItem, DataBatchRequestPayload, DataBatchResponseItem, DataBatchResponsePayload, DataBatchTransportEvent, DataBatchTransportOptions, DataBatchTransportTelemetryAttributes, DataMutationMode, DataRequestMode, HydrationEnvelope, HydrationEnvelopeValidationOptions, InvalidationEvent, InvalidationSubscriber, OperationDescriptor, RequestEnvelope, RequestEnvelopeValidationOptions, SelectionPlan, SelectionPlanValidationOptions, SelectionPlanValidationResult, TraceContext, } from './types';

package/dist/types/runtime/effect/handler/batch.d.ts

@@ -1,9 +1,6 @@
 import { type DataBatchRequestPayload, type DataBatchResponseItem } from '../../data-platform';
+export { toHeaderRecord } from '../../../utils/headers';
 export declare function normalizeBatchPath(pathname: string | undefined): `/${string}`;
-export declare function isPlainObject(value: unknown): value is Record<string, unknown>;
-export declare function toTextLength(value: string): number;
-export declare function toHeaderRecord(headers: Headers): Record<string, string>;
-export declare function normalizeItemMethod(method: string | undefined): string;
 export declare function normalizeBatchAllowedMethods(allowedMethods: string[] | undefined): Set<string>;
 type ParsedBatchRequestPayload = Omit<DataBatchRequestPayload, 'items'> & {
     items: unknown[];
@@ -14,4 +11,3 @@ export declare function prepareJsonRequestBody(request: Request): Promise<Reques
 export declare function toBatchItemError(id: string, status: number, message: string): DataBatchResponseItem;
 export declare function promiseWithTimeout<T>(effect: Promise<T>, timeoutMs: number): Promise<T>;
 export declare function mapWithConcurrency<TItem, TResult>(items: readonly TItem[], concurrency: number, mapper: (item: TItem, index: number) => Promise<TResult>): Promise<TResult[]>;
-export {};

package/dist/types/utils/headers.d.ts

@@ -0,0 +1 @@
+export declare function toHeaderRecord(headers: Headers): Record<string, string>;

package/package.json

@@ -17,7 +17,7 @@
     "modern",
     "modern.js"
   ],
-  "version": "3.8.1-ultramodern.1",
+  "version": "3.8.1-ultramodern.3",
   "types": "./dist/types/cli.d.ts",
   "main": "./dist/cjs/cli.js",
   "exports": {
@@ -169,12 +169,12 @@
     }
   },
   "dependencies": {
-    "@modern-js/bff-core": "npm:@bleedingdev/modern-js-bff-core@3.8.1-ultramodern.1",
-    "@modern-js/builder": "npm:@bleedingdev/modern-js-builder@3.8.1-ultramodern.1",
-    "@modern-js/create-request": "npm:@bleedingdev/modern-js-create-request@3.8.1-ultramodern.1",
-    "@modern-js/server-core": "npm:@bleedingdev/modern-js-server-core@3.8.1-ultramodern.1",
-    "@modern-js/server-utils": "npm:@bleedingdev/modern-js-server-utils@3.8.1-ultramodern.1",
-    "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.8.1-ultramodern.1",
+    "@modern-js/bff-core": "npm:@bleedingdev/modern-js-bff-core@3.8.1-ultramodern.3",
+    "@modern-js/builder": "npm:@bleedingdev/modern-js-builder@3.8.1-ultramodern.3",
+    "@modern-js/create-request": "npm:@bleedingdev/modern-js-create-request@3.8.1-ultramodern.3",
+    "@modern-js/server-core": "npm:@bleedingdev/modern-js-server-core@3.8.1-ultramodern.3",
+    "@modern-js/server-utils": "npm:@bleedingdev/modern-js-server-utils@3.8.1-ultramodern.3",
+    "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.8.1-ultramodern.3",
     "@module-federation/runtime": "2.8.2",
     "@opentelemetry/api": "1.9.1",
     "@opentelemetry/api-logs": "0.220.0",
@@ -205,11 +205,11 @@
   },
   "devDependencies": {
     "@effect/opentelemetry": "4.0.0-beta.107",
-    "@modern-js/app-tools": "npm:@bleedingdev/modern-js-app-tools@3.8.1-ultramodern.1",
-    "@modern-js/bff-runtime": "npm:@bleedingdev/modern-js-bff-runtime@3.8.1-ultramodern.1",
-    "@modern-js/plugin": "npm:@bleedingdev/modern-js-plugin@3.8.1-ultramodern.1",
-    "@modern-js/runtime": "npm:@bleedingdev/modern-js-runtime@3.8.1-ultramodern.1",
-    "@modern-js/types": "npm:@bleedingdev/modern-js-types@3.8.1-ultramodern.1",
+    "@modern-js/app-tools": "npm:@bleedingdev/modern-js-app-tools@3.8.1-ultramodern.3",
+    "@modern-js/bff-runtime": "npm:@bleedingdev/modern-js-bff-runtime@3.8.1-ultramodern.3",
+    "@modern-js/plugin": "npm:@bleedingdev/modern-js-plugin@3.8.1-ultramodern.3",
+    "@modern-js/runtime": "npm:@bleedingdev/modern-js-runtime@3.8.1-ultramodern.3",
+    "@modern-js/types": "npm:@bleedingdev/modern-js-types@3.8.1-ultramodern.3",
     "@rsbuild/core": "2.1.5",
     "@rslib/core": "0.23.2",
     "@scripts/rstest-config": "2.66.0",

package/docs/data-platform-architecture.md

@@ -1,61 +0,0 @@
-# UltraModern Data Platform Architecture (MF-safe)
-
-This document defines a clean, greenfield data architecture for Fate-style orchestration while preserving Module Federation and micro-frontend interoperability.
-
-## Goals
-
-- One canonical data contract for requests, views, actions, hydration, and invalidation.
-- Deterministic behavior across SSR/CSR and host/remote applications.
-- Strong tenant/app isolation by default, explicit cross-app communication only.
-- Protocol-level observability and integrity checks.
-
-## Core Contracts
-
-Implemented in `src/runtime/data-platform/index.ts`:
-
-- Operation identity: `createOperationId`
-- Cache/request scoping: `buildScopeKey`, `buildQueryKey`
-- Selection safety: `validateSelectionPlan`
-- Distributed tracing: `parseTraceparentHeader`, `formatTraceparentHeader`, `deriveChildTraceContext`
-- Request envelope: `createRequestEnvelope`, `validateRequestEnvelope`
-- Hydration integrity: `createHydrationEnvelope`, `validateHydrationEnvelope`
-- Invalidation routing: `createInvalidationEvent`, `shouldApplyInvalidation`
-
-## Mitigations Applied
-
-1. Operation ID collisions
-- IDs include namespace + api/group/endpoint + version + schema hash contribution.
-- IDs are deterministic and hashed from canonical payloads.
-
-2. Cross-app cache contamination
-- Scope key includes normalized origin + app namespace + identity dimensions.
-- Query keys include scope key and selection/input fingerprints.
-
-3. Invalid selection pushdown
-- Selection plans are depth-limited, field-limited, and optional allow-list validated.
-
-4. Trace discontinuity across host/remotes
-- Trace context is first-class and validated through W3C traceparent format.
-- Child spans preserve trace id and parent linkage.
-
-5. Hydration poisoning/staleness
-- Hydration payloads include checksum over canonical serialized payload + metadata.
-- Runtime/namespace/origin/protocol checks are validated.
-
-6. Unintended cross-namespace invalidation
-- Default: no cross-namespace invalidation.
-- Cross-app invalidation requires explicit target namespace + opt-in subscriber.
-
-## Test Strategy
-
-Contract and scenario coverage is in `tests/data-platform-contract.test.ts`:
-
-- Deterministic and collision-resistant operation IDs.
-- Scope/query key isolation across namespaces and normalized origins.
-- Selection validation guardrails (depth, count, allow-list, shape).
-- Request envelope integrity and required trace context checks.
-- Hydration checksum tamper detection.
-- Invalidation routing policy enforcement.
-- Simulated host/remote mutation and trace propagation scenarios.
-
-This suite is intended to be the non-negotiable compatibility gate for future data-runtime changes.