@bleedingdev/modern-js-server-core 3.2.0-ultramodern.12 → 3.2.0-ultramodern.121

package/dist/types/types/config/serverTelemetry.d.ts

@@ -0,0 +1,319 @@
+export interface ServerTelemetryExporterOptions {
+    enabled?: boolean;
+    endpoint?: string;
+    headers?: Record<string, string>;
+    timeoutMs?: number;
+}
+export interface ServerTelemetryVictoriaMetricsOptions extends ServerTelemetryExporterOptions {
+    metricPrefix?: string;
+}
+export interface ServerTelemetrySloUserConfig {
+    /**
+     * Queue utilization ratio threshold that emits SLO degradation alerts.
+     *
+     * @default 0.8
+     */
+    queueUtilizationWarnThreshold?: number;
+    /**
+     * Total dropped-envelope threshold that emits SLO degradation alerts.
+     *
+     * @default 1
+     */
+    queueDroppedWarnThreshold?: number;
+    /**
+     * Cooldown between SLO alert emissions for the same alert type.
+     *
+     * @default 60000
+     */
+    alertCooldownMs?: number;
+}
+export interface ServerTelemetryCanaryContractGateUserConfig {
+    /**
+     * Whether this contract gate currently passes.
+     */
+    passed: boolean;
+    /**
+     * Optional failure reason used for rollback diagnostics.
+     */
+    reason?: string;
+}
+export interface ServerTelemetryCanaryAutopilotUserConfig {
+    /**
+     * Enable automatic contract gate synchronization from a gate snapshot file.
+     *
+     * @default true
+     */
+    enabled?: boolean;
+    /**
+     * Path to contract gate snapshot JSON file.
+     *
+     * @default ".modern/contract-gates.json"
+     */
+    gateSnapshotPath?: string;
+    /**
+     * Poll interval for reading gate snapshot changes.
+     *
+     * @default 15000
+     */
+    pollIntervalMs?: number;
+    /**
+     * Marks gate entries as failed when they are older than this threshold.
+     *
+     * @default 600000
+     */
+    gateStaleAfterMs?: number;
+    /**
+     * Runtime MF fallback signal ingestion.
+     */
+    runtimeFallbackSignal?: ServerTelemetryCanaryRuntimeFallbackSignalUserConfig;
+    /**
+     * Optional pluggable state store backend for contract gate snapshots.
+     * When omitted, snapshots are read/written from gateSnapshotPath on local disk.
+     */
+    stateStore?: ServerTelemetryCanaryAutopilotStateStoreUserConfig;
+}
+export interface ServerTelemetryCanaryAutopilotStateStoreUserConfig {
+    /**
+     * Path or package name of a module that exports
+     * `createContractGateSnapshotStore(context)`.
+     */
+    module: string;
+    /**
+     * Optional adapter-specific configuration.
+     */
+    options?: Record<string, unknown>;
+}
+export interface ServerTelemetryCanaryRuntimeFallbackSignalUserConfig {
+    /**
+     * Enable runtime MF fallback signal ingestion endpoint.
+     *
+     * Opt-in: when enabled, `auth` must be configured with a token
+     * (`expectedValue` or `expectedValueEnv`) or server setup throws.
+     *
+     * @default false
+     */
+    enabled?: boolean;
+    /**
+     * HTTP endpoint path for runtime fallback events.
+     *
+     * @default "/_modern/contract-gates/runtime-fallback"
+     */
+    endpoint?: string;
+    /**
+     * Contract gate name updated by runtime fallback events.
+     *
+     * @default "runtime-mf-fallback-health"
+     */
+    gateName?: string;
+    /**
+     * How long a runtime fallback signal should hold gate failure status.
+     *
+     * @default 300000
+     */
+    failureHoldMs?: number;
+    /**
+     * Maximum accepted request body size in bytes.
+     *
+     * @default 16384
+     */
+    maxBodyBytes?: number;
+    /**
+     * Optional runtime trust policy for fallback signal ingestion.
+     * Use this to restrict who can mutate canary contract gates.
+     */
+    trustPolicy?: ServerTelemetryCanaryRuntimeFallbackSignalTrustPolicyUserConfig;
+    /**
+     * Optional request authentication for runtime fallback signal endpoint.
+     */
+    auth?: ServerTelemetryCanaryRuntimeFallbackSignalAuthUserConfig;
+}
+export interface ServerTelemetryCanaryRuntimeFallbackSignalAuthUserConfig {
+    /**
+     * Enable auth guard for runtime fallback signal endpoint.
+     *
+     * @default false
+     */
+    enabled?: boolean;
+    /**
+     * Header name carrying runtime fallback auth token.
+     *
+     * @default "x-modernjs-runtime-signal-token"
+     */
+    headerName?: string;
+    /**
+     * Expected token value. Prefer using expectedValueEnv in production.
+     */
+    expectedValue?: string;
+    /**
+     * Name of environment variable that stores expected token value.
+     */
+    expectedValueEnv?: string;
+}
+export interface ServerTelemetryCanaryRuntimeFallbackSignalTrustPolicyUserConfig {
+    /**
+     * Allowlist of app names accepted by runtime fallback signal endpoint.
+     * Empty means no app-name allowlist check.
+     */
+    allowedApps?: string[];
+    /**
+     * Allowlist of entry origins accepted by runtime fallback signal endpoint.
+     * Values should be URL origins (for example https://erp.example.com).
+     * Empty means no entry-origin allowlist check.
+     */
+    allowedEntryOrigins?: string[];
+    /**
+     * Expected runtime digest per appName.
+     */
+    expectedRuntimeDigests?: Record<string, string>;
+    /**
+     * Require runtimeDigest to be present in signal payload metadata.
+     *
+     * @default false
+     */
+    enforceRuntimeDigest?: boolean;
+    /**
+     * Maximum accepted signals per app+origin window.
+     *
+     * @default 30
+     */
+    maxSignalsPerWindow?: number;
+    /**
+     * Sliding window size in milliseconds for maxSignalsPerWindow.
+     *
+     * @default 60000
+     */
+    windowMs?: number;
+    /**
+     * Drop duplicate fallback events with the same fingerprint during this window.
+     *
+     * @default 10000
+     */
+    dedupeWindowMs?: number;
+}
+export interface ServerTelemetryCanaryUserConfig {
+    /**
+     * Enable canary rollout/rollback orchestration.
+     *
+     * @default false
+     */
+    enabled?: boolean;
+    /**
+     * Periodic canary evaluation interval in milliseconds.
+     *
+     * @default 15000
+     */
+    evaluationIntervalMs?: number;
+    /**
+     * Required consecutive healthy evaluations before promotion.
+     *
+     * @default 3
+     */
+    minConsecutiveHealthyEvaluations?: number;
+    /**
+     * Consecutive failing evaluations before automated rollback.
+     *
+     * @default 2
+     */
+    rollbackConsecutiveFailures?: number;
+    /**
+     * Maximum queue utilization ratio allowed during canary.
+     *
+     * @default 0.8
+     */
+    maxQueueUtilization?: number;
+    /**
+     * Maximum allowed total dropped envelopes during canary.
+     *
+     * @default 0
+     */
+    maxTotalDropped?: number;
+    /**
+     * Maximum allowed unhealthy exporters during canary.
+     *
+     * @default 0
+     */
+    maxUnhealthyExporters?: number;
+    /**
+     * Contract gate map used in rollout decisions.
+     * `true` means passing, `false` means failing.
+     */
+    contractGates?: Record<string, boolean | ServerTelemetryCanaryContractGateUserConfig>;
+    /**
+     * Contract-gate autopilot settings.
+     */
+    autopilot?: ServerTelemetryCanaryAutopilotUserConfig;
+}
+export interface ServerTelemetryUserConfig {
+    /**
+     * Enable framework telemetry envelope emission.
+     * @default false
+     */
+    enabled?: boolean;
+    /**
+     * Logical service name attached to every telemetry envelope.
+     * @default server.metaName
+     */
+    service?: string;
+    /**
+     * Logical module name attached to every telemetry envelope.
+     * @default "server"
+     */
+    module?: string;
+    /**
+     * Environment attached to every telemetry envelope.
+     * @default process.env.NODE_ENV || "development"
+     */
+    environment?: string;
+    /**
+     * Sampling rate for monitor events.
+     * @default 1
+     */
+    samplingRate?: number;
+    /**
+     * Flush window in milliseconds for exporter batches.
+     * @default 1000
+     */
+    flushIntervalMs?: number;
+    /**
+     * Maximum envelopes in one emitted batch.
+     * @default 50
+     */
+    maxBatchSize?: number;
+    /**
+     * Maximum envelopes buffered before backpressure drops oldest.
+     * @default 1000
+     */
+    maxQueueSize?: number;
+    /**
+     * Envelope attribute keys that should be redacted.
+     */
+    redactionKeys?: string[];
+    /**
+     * Control startup exporter health probe behavior.
+     * When enabled (default), server initialization emits a startup probe and
+     * marks exporters healthy/unhealthy before serving traffic.
+     * When fail-loud mode is enabled (default), initialization throws if at
+     * least one configured exporter is unhealthy.
+     *
+     * @default true
+     */
+    failLoudStartup?: boolean;
+    /**
+     * Queue backpressure/degradation SLO alert thresholds.
+     */
+    slo?: ServerTelemetrySloUserConfig;
+    /**
+     * Canary rollout and automated rollback orchestration policy.
+     */
+    canary?: ServerTelemetryCanaryUserConfig;
+    exporters?: {
+        /**
+         * OpenTelemetry HTTP exporter.
+         */
+        otlp?: ServerTelemetryExporterOptions;
+        /**
+         * VictoriaMetrics Prometheus import exporter.
+         */
+        victoriaMetrics?: ServerTelemetryVictoriaMetricsOptions;
+    };
+}

package/dist/types/types/requestHandler.d.ts

@@ -7,6 +7,7 @@ export type Resource = {
     route: ServerRoute;
     htmlTemplate: string;
     entryName: string;
+    moduleFederationCssAssets?: string[];
 };
 export type Params = Record<string, any>;
 export type RequestHandlerConfig = {

package/dist/types/types/server.d.ts

@@ -32,6 +32,7 @@ export type ServerManifest = {
     loadableStats?: Record<string, any>;
     routeManifest?: Record<string, any>;
     nestedRoutesJson?: Record<string, any>;
+    moduleFederationCssAssets?: string[];
 };
 type ServerVariables = {
     /** @deprecated */

package/dist/types/utils/error.d.ts

@@ -1,4 +1,20 @@
 import type { Monitors } from '@modern-js/types';
+export type SafeFailureEnvelope = {
+    success: false;
+    error: {
+        code: string;
+        message: string;
+        status: number;
+    };
+};
+export type SafeFailureHttpResult = {
+    status: number;
+    body: SafeFailureEnvelope;
+    headers: Record<string, string>;
+};
+export declare const getSafeFailureStatus: (error: unknown) => number;
+export declare const createSafeFailureHttpResult: (error: unknown) => SafeFailureHttpResult;
+export declare const createSafeJsonFailureResponse: (error: unknown) => Response;
 export declare const createErrorHtml: (status: number) => string;
 export declare enum ErrorDigest {
     ENOTF = "Page could not be found",

package/package.json

@@ -17,7 +17,7 @@
     "modern",
     "modern.js"
   ],
-  "version": "3.2.0-ultramodern.12",
+  "version": "3.2.0-ultramodern.121",
   "types": "./dist/types/index.d.ts",
   "main": "./dist/cjs/index.js",
   "exports": {
@@ -68,27 +68,27 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@swc/helpers": "^0.5.21",
+    "@swc/helpers": "^0.5.23",
     "@web-std/fetch": "^4.2.1",
     "@web-std/file": "^3.0.3",
     "@web-std/stream": "^1.0.3",
     "cloneable-readable": "^3.0.0",
     "flatted": "^3.4.2",
-    "hono": "^4.12.19",
-    "ts-deepmerge": "7.0.3",
-    "@modern-js/runtime-utils": "npm:@bleedingdev/modern-js-runtime-utils@3.2.0-ultramodern.12",
-    "@modern-js/plugin": "npm:@bleedingdev/modern-js-plugin@3.2.0-ultramodern.12",
-    "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.2.0-ultramodern.12"
+    "hono": "^4.12.25",
+    "ts-deepmerge": "8.0.0",
+    "@modern-js/plugin": "npm:@bleedingdev/modern-js-plugin@3.2.0-ultramodern.121",
+    "@modern-js/runtime-utils": "npm:@bleedingdev/modern-js-runtime-utils@3.2.0-ultramodern.121",
+    "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.2.0-ultramodern.121"
   },
   "devDependencies": {
-    "@rslib/core": "0.21.5",
+    "@rslib/core": "0.22.0",
     "@types/cloneable-readable": "^2.0.3",
     "@types/merge-deep": "^3.0.3",
-    "@types/node": "^25.8.0",
-    "@typescript/native-preview": "7.0.0-dev.20260516.1",
-    "http-proxy-middleware": "^4.0.0",
-    "@scripts/rstest-config": "2.66.0",
-    "@modern-js/types": "npm:@bleedingdev/modern-js-types@3.2.0-ultramodern.12"
+    "@types/node": "^25.9.3",
+    "@typescript/native-preview": "7.0.0-dev.20260610.1",
+    "http-proxy-middleware": "^4.1.0",
+    "@modern-js/types": "npm:@bleedingdev/modern-js-types@3.2.0-ultramodern.121",
+    "@scripts/rstest-config": "2.66.0"
   },
   "sideEffects": false,
   "publishConfig": {
@@ -97,7 +97,7 @@
   },
   "scripts": {
     "dev": "rslib build --watch",
-    "build": "rslib build",
+    "build": "rslib build && pnpm -w tsgo:dts \"$PWD\"",
     "test": "rstest --passWithNoTests"
   }
 }

package/dist/cjs/plugins/contractGateAutopilot.js

@@ -1,158 +0,0 @@
-"use strict";
-var __webpack_require__ = {};
-(()=>{
-    __webpack_require__.d = (exports1, definition)=>{
-        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
-            enumerable: true,
-            get: definition[key]
-        });
-    };
-})();
-(()=>{
-    __webpack_require__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
-})();
-(()=>{
-    __webpack_require__.r = (exports1)=>{
-        if ("u" > typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
-            value: 'Module'
-        });
-        Object.defineProperty(exports1, '__esModule', {
-            value: true
-        });
-    };
-})();
-var __webpack_exports__ = {};
-__webpack_require__.r(__webpack_exports__);
-__webpack_require__.d(__webpack_exports__, {
-    ContractGateAutopilot: ()=>ContractGateAutopilot
-});
-const external_contractGateSnapshotStore_js_namespaceObject = require("./contractGateSnapshotStore.js");
-const DEFAULT_POLL_INTERVAL_MS = 15000;
-const DEFAULT_GATE_STALE_AFTER_MS = 600000;
-class ContractGateAutopilot {
-    async start() {
-        await this.syncOnce();
-        if (this.poller) return;
-        this.poller = setInterval(()=>{
-            this.syncOnce();
-        }, this.pollIntervalMs);
-        if ('function' == typeof this.poller.unref) this.poller.unref();
-    }
-    stop() {
-        if (this.poller) {
-            clearInterval(this.poller);
-            this.poller = void 0;
-        }
-    }
-    async syncOnce() {
-        const snapshot = await this.loadSnapshot();
-        if (!snapshot) return 0;
-        const gates = this.normalizeSnapshot(snapshot);
-        let updatedCount = 0;
-        for (const gate of gates){
-            this.orchestrator.addRequiredContractGate(gate.name);
-            const fingerprint = `${gate.passed ? '1' : '0'}:${gate.reason || ''}`;
-            if (this.appliedGateFingerprints.get(gate.name) !== fingerprint) {
-                this.orchestrator.setContractGate(gate.name, gate.passed, gate.reason);
-                this.appliedGateFingerprints.set(gate.name, fingerprint);
-                updatedCount += 1;
-                this.logger?.info?.(`[telemetry.canary.autopilot] gate=${gate.name} passed=${String(gate.passed)} reason=${gate.reason || 'none'}`);
-            }
-        }
-        return updatedCount;
-    }
-    async loadSnapshot() {
-        try {
-            const snapshot = await this.gateSnapshotStore.readSnapshot();
-            if (!snapshot) return;
-            const fingerprint = JSON.stringify(snapshot);
-            if (fingerprint === this.lastSnapshotFingerprint) return;
-            this.lastSnapshotFingerprint = fingerprint;
-            return snapshot;
-        } catch (error) {
-            const source = this.gateSnapshotPath || this.gateSnapshotStore.name || 'stateStore';
-            this.logger?.warn?.(`[telemetry.canary.autopilot] failed to load gate snapshot ${source}: ${error instanceof Error ? error.message : String(error)}`);
-            return;
-        }
-    }
-    normalizeSnapshot(snapshot) {
-        const now = Date.now();
-        const output = [];
-        const gates = snapshot.gates;
-        if (!gates || 'object' != typeof gates) return output;
-        for (const [name, value] of Object.entries(gates)){
-            const normalizedName = name.trim();
-            if (!normalizedName) continue;
-            const gate = this.normalizeGateValue(value, snapshot.updatedAt, now);
-            if (!gate) continue;
-            if ('number' == typeof gate.expiresAt && Number.isFinite(gate.expiresAt) && gate.expiresAt > 0 && now >= gate.expiresAt) {
-                output.push({
-                    name: normalizedName,
-                    passed: true,
-                    reason: void 0,
-                    updatedAt: gate.updatedAt,
-                    expiresAt: gate.expiresAt
-                });
-                continue;
-            }
-            const isStale = this.gateStaleAfterMs > 0 && now - gate.updatedAt > this.gateStaleAfterMs;
-            if (isStale) {
-                output.push({
-                    name: normalizedName,
-                    passed: false,
-                    reason: gate.reason || 'Gate snapshot is stale',
-                    updatedAt: gate.updatedAt
-                });
-                continue;
-            }
-            output.push({
-                name: normalizedName,
-                passed: gate.passed,
-                reason: gate.reason,
-                updatedAt: gate.updatedAt
-            });
-        }
-        return output;
-    }
-    normalizeGateValue(value, snapshotUpdatedAt, now) {
-        if ('boolean' == typeof value) return {
-            passed: value,
-            updatedAt: this.normalizeUpdatedAt(snapshotUpdatedAt, now)
-        };
-        if (!value || 'object' != typeof value) return;
-        const hasPassed = 'boolean' == typeof value.passed;
-        const passed = true === value.passed;
-        let reason = 'string' == typeof value.reason && value.reason.trim().length > 0 ? value.reason : void 0;
-        if (!hasPassed) reason = reason || 'Gate snapshot record is missing "passed" boolean';
-        return {
-            passed,
-            reason,
-            updatedAt: this.normalizeUpdatedAt(value.updatedAt ?? snapshotUpdatedAt, now),
-            expiresAt: this.normalizeExpiresAt(value.expiresAt)
-        };
-    }
-    normalizeUpdatedAt(value, fallback) {
-        if ('number' == typeof value && Number.isFinite(value) && value > 0) return value;
-        return fallback;
-    }
-    normalizeExpiresAt(value) {
-        if ('number' == typeof value && Number.isFinite(value) && value > 0) return value;
-    }
-    constructor(options){
-        this.appliedGateFingerprints = new Map();
-        this.orchestrator = options.orchestrator;
-        if (!options.gateSnapshotStore && !options.gateSnapshotPath) throw new Error('ContractGateAutopilot requires gateSnapshotPath or gateSnapshotStore');
-        this.gateSnapshotPath = options.gateSnapshotPath;
-        this.gateSnapshotStore = options.gateSnapshotStore || (0, external_contractGateSnapshotStore_js_namespaceObject.createFileContractGateSnapshotStore)(options.gateSnapshotPath);
-        this.pollIntervalMs = Math.max(250, options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS);
-        this.gateStaleAfterMs = Math.max(0, options.gateStaleAfterMs ?? DEFAULT_GATE_STALE_AFTER_MS);
-        this.logger = options.logger;
-    }
-}
-exports.ContractGateAutopilot = __webpack_exports__.ContractGateAutopilot;
-for(var __rspack_i in __webpack_exports__)if (-1 === [
-    "ContractGateAutopilot"
-].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
-Object.defineProperty(exports, '__esModule', {
-    value: true
-});