@bleedingdev/modern-js-ultramodern-create 3.9.0-ultramodern.26 → 3.9.0-ultramodern.28

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/dist/cjs/ultramodern-workspace/versions.cjs +2 -2
  2. package/dist/esm/ultramodern-workspace/versions.js +2 -2
  3. package/dist/esm-node/ultramodern-workspace/versions.js +2 -2
  4. package/dist/types/ultramodern-workspace/policy.d.ts +3 -3
  5. package/dist/types/ultramodern-workspace/versions.d.ts +5 -5
  6. package/package.json +10 -10
  7. package/release-cohort.json +48 -48
  8. package/templates/workspace-scripts/ultramodern-cloudflare-proof.mjs +76 -14
package/dist/cjs/ultramodern-workspace/versions.cjs CHANGED
@@ -49,8 +49,8 @@ const ULTRACITE_VERSION = '7.12.0';
49
49
  const LEFTHOOK_VERSION = '^2.1.14';
50
50
  const I18NEXT_VERSION = '26.4.2';
51
51
  const MODULE_FEDERATION_NODE_VERSION = '2.7.52';
52
- const MINIFLARE_VERSION = '5.20260921.0-alpha';
53
- const WORKERD_VERSION = '1.20260921.1';
52
+ const MINIFLARE_VERSION = '5.20260926.1-alpha';
53
+ const WORKERD_VERSION = '1.20260926.1';
54
54
  const CLOUDFLARE_WORKERS_TYPES_VERSION = '5.20260923.1';
55
55
  const NODE_FETCH_VERSION = '^3.3.2';
56
56
  const REACT_VERSION = '19.3.0';
package/dist/esm/ultramodern-workspace/versions.js CHANGED
@@ -20,8 +20,8 @@ const ULTRACITE_VERSION = '7.12.0';
20
20
  const LEFTHOOK_VERSION = '^2.1.14';
21
21
  const I18NEXT_VERSION = '26.4.2';
22
22
  const MODULE_FEDERATION_NODE_VERSION = '2.7.52';
23
- const MINIFLARE_VERSION = '5.20260921.0-alpha';
24
- const WORKERD_VERSION = '1.20260921.1';
23
+ const MINIFLARE_VERSION = '5.20260926.1-alpha';
24
+ const WORKERD_VERSION = '1.20260926.1';
25
25
  const CLOUDFLARE_WORKERS_TYPES_VERSION = '5.20260923.1';
26
26
  const NODE_FETCH_VERSION = '^3.3.2';
27
27
  const REACT_VERSION = '19.3.0';
package/dist/esm-node/ultramodern-workspace/versions.js CHANGED
@@ -21,8 +21,8 @@ const ULTRACITE_VERSION = '7.12.0';
21
21
  const LEFTHOOK_VERSION = '^2.1.14';
22
22
  const I18NEXT_VERSION = '26.4.2';
23
23
  const MODULE_FEDERATION_NODE_VERSION = '2.7.52';
24
- const MINIFLARE_VERSION = '5.20260921.0-alpha';
25
- const WORKERD_VERSION = '1.20260921.1';
24
+ const MINIFLARE_VERSION = '5.20260926.1-alpha';
25
+ const WORKERD_VERSION = '1.20260926.1';
26
26
  const CLOUDFLARE_WORKERS_TYPES_VERSION = '5.20260923.1';
27
27
  const NODE_FETCH_VERSION = '^3.3.2';
28
28
  const REACT_VERSION = '19.3.0';
package/dist/types/ultramodern-workspace/policy.d.ts CHANGED
@@ -45,7 +45,7 @@ export declare const ULTRAMODERN_WORKSPACE_POLICY: {
45
45
  readonly '@typescript/native': "npm:typescript@7.0.2";
46
46
  readonly '@types/node': "^26.6.2";
47
47
  readonly lefthook: "^2.1.14";
48
- readonly miniflare: "5.20260921.0-alpha";
48
+ readonly miniflare: "5.20260926.1-alpha";
49
49
  readonly oxlint: "1.85.0";
50
50
  readonly oxfmt: "0.70.0";
51
51
  readonly ultracite: "7.12.0";
@@ -58,8 +58,8 @@ export declare const ULTRAMODERN_WORKSPACE_POLICY: {
58
58
  readonly '@tanstack/history': "1.162.4";
59
59
  readonly '@tanstack/router-core': "1.171.32";
60
60
  readonly '@typescript/native-preview': "7.0.0-dev.20260707.2";
61
- readonly miniflare: "5.20260921.0-alpha";
62
- readonly workerd: "1.20260921.1";
61
+ readonly miniflare: "5.20260926.1-alpha";
62
+ readonly workerd: "1.20260926.1";
63
63
  };
64
64
  };
65
65
  readonly toolchain: {
package/dist/types/ultramodern-workspace/versions.d.ts CHANGED
@@ -25,8 +25,8 @@ export declare const ULTRACITE_VERSION = "7.12.0";
25
25
  export declare const LEFTHOOK_VERSION = "^2.1.14";
26
26
  export declare const I18NEXT_VERSION = "26.4.2";
27
27
  export declare const MODULE_FEDERATION_NODE_VERSION = "2.7.52";
28
- export declare const MINIFLARE_VERSION = "5.20260921.0-alpha";
29
- export declare const WORKERD_VERSION = "1.20260921.1";
28
+ export declare const MINIFLARE_VERSION = "5.20260926.1-alpha";
29
+ export declare const WORKERD_VERSION = "1.20260926.1";
30
30
  export declare const CLOUDFLARE_WORKERS_TYPES_VERSION = "5.20260923.1";
31
31
  export declare const NODE_FETCH_VERSION = "^3.3.2";
32
32
  export declare const REACT_VERSION = "19.3.0";
@@ -68,7 +68,7 @@ export declare const ULTRAMODERN_PACKAGE_PINS: {
68
68
  readonly '@typescript/native': "npm:typescript@7.0.2";
69
69
  readonly '@types/node': "^26.6.2";
70
70
  readonly lefthook: "^2.1.14";
71
- readonly miniflare: "5.20260921.0-alpha";
71
+ readonly miniflare: "5.20260926.1-alpha";
72
72
  readonly oxlint: "1.85.0";
73
73
  readonly oxfmt: "0.70.0";
74
74
  readonly ultracite: "7.12.0";
@@ -81,7 +81,7 @@ export declare const ULTRAMODERN_PACKAGE_PINS: {
81
81
  readonly '@tanstack/history': "1.162.4";
82
82
  readonly '@tanstack/router-core': "1.171.32";
83
83
  readonly '@typescript/native-preview': "7.0.0-dev.20260707.2";
84
- readonly miniflare: "5.20260921.0-alpha";
85
- readonly workerd: "1.20260921.1";
84
+ readonly miniflare: "5.20260926.1-alpha";
85
+ readonly workerd: "1.20260926.1";
86
86
  };
87
87
  };
package/package.json CHANGED
@@ -26,7 +26,7 @@
26
26
  "engines": {
27
27
  "node": ">=26.7.0"
28
28
  },
29
- "version": "3.9.0-ultramodern.26",
29
+ "version": "3.9.0-ultramodern.28",
30
30
  "types": "./dist/types/index.d.ts",
31
31
  "main": "./dist/esm-node/index.js",
32
32
  "bin": {
@@ -83,21 +83,21 @@
83
83
  ],
84
84
  "dependencies": {
85
85
  "@babel/parser": "^8.0.6",
86
- "@modern-js/app-tools-extensions": "npm:@bleedingdev/modern-js-app-tools-extensions@3.9.0-ultramodern.26",
87
- "@modern-js/backend-federation-contracts": "npm:@bleedingdev/modern-js-backend-federation-contracts@3.9.0-ultramodern.26",
86
+ "@modern-js/app-tools-extensions": "npm:@bleedingdev/modern-js-app-tools-extensions@3.9.0-ultramodern.28",
87
+ "@modern-js/backend-federation-contracts": "npm:@bleedingdev/modern-js-backend-federation-contracts@3.9.0-ultramodern.28",
88
88
  "@modern-js/codesmith": "2.6.9",
89
- "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.9.0-ultramodern.26",
90
- "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.9.0-ultramodern.26",
89
+ "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.9.0-ultramodern.28",
90
+ "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.9.0-ultramodern.28",
91
91
  "esbuild": "^0.28.2",
92
- "miniflare": "5.20260921.0-alpha",
92
+ "miniflare": "5.20260926.1-alpha",
93
93
  "oxfmt": "0.66.0",
94
94
  "tsx": "^4.23.15",
95
95
  "ultracite": "7.12.0"
96
96
  },
97
97
  "devDependencies": {
98
- "@modern-js/i18n-integration": "npm:@bleedingdev/modern-js-i18n-integration@3.9.0-ultramodern.26",
99
- "@modern-js/i18n-runtime-extensions": "npm:@bleedingdev/modern-js-i18n-runtime-extensions@3.9.0-ultramodern.26",
100
- "@modern-js/plugin-bff-build-extensions": "npm:@bleedingdev/modern-js-plugin-bff-build-extensions@3.9.0-ultramodern.26",
98
+ "@modern-js/i18n-integration": "npm:@bleedingdev/modern-js-i18n-integration@3.9.0-ultramodern.28",
99
+ "@modern-js/i18n-runtime-extensions": "npm:@bleedingdev/modern-js-i18n-runtime-extensions@3.9.0-ultramodern.28",
100
+ "@modern-js/plugin-bff-build-extensions": "npm:@bleedingdev/modern-js-plugin-bff-build-extensions@3.9.0-ultramodern.28",
101
101
  "@rslib/core": "1.0.2",
102
102
  "@scripts/rstest-config": "2.66.0",
103
103
  "@types/node": "^26.6.2",
@@ -117,6 +117,6 @@
117
117
  "type-check": "tsgo --noEmit -p tsconfig.json"
118
118
  },
119
119
  "ultramodern": {
120
- "frameworkVersion": "3.9.0-ultramodern.26"
120
+ "frameworkVersion": "3.9.0-ultramodern.28"
121
121
  }
122
122
  }
package/release-cohort.json CHANGED
@@ -51,242 +51,242 @@
51
51
  {
52
52
  "sourceName": "@modern-js/adapter-rstest",
53
53
  "targetName": "@bleedingdev/modern-js-adapter-rstest",
54
- "version": "3.9.0-ultramodern.26"
54
+ "version": "3.9.0-ultramodern.28"
55
55
  },
56
56
  {
57
57
  "sourceName": "@modern-js/app-tools",
58
58
  "targetName": "@bleedingdev/modern-js-app-tools",
59
- "version": "3.9.0-ultramodern.26"
59
+ "version": "3.9.0-ultramodern.28"
60
60
  },
61
61
  {
62
62
  "sourceName": "@modern-js/app-tools-extensions",
63
63
  "targetName": "@bleedingdev/modern-js-app-tools-extensions",
64
- "version": "3.9.0-ultramodern.26"
64
+ "version": "3.9.0-ultramodern.28"
65
65
  },
66
66
  {
67
67
  "sourceName": "@modern-js/backend-federation-contracts",
68
68
  "targetName": "@bleedingdev/modern-js-backend-federation-contracts",
69
- "version": "3.9.0-ultramodern.26"
69
+ "version": "3.9.0-ultramodern.28"
70
70
  },
71
71
  {
72
72
  "sourceName": "@modern-js/bff-core",
73
73
  "targetName": "@bleedingdev/modern-js-bff-core",
74
- "version": "3.9.0-ultramodern.26"
74
+ "version": "3.9.0-ultramodern.28"
75
75
  },
76
76
  {
77
77
  "sourceName": "@modern-js/bff-effect",
78
78
  "targetName": "@bleedingdev/modern-js-bff-effect",
79
- "version": "3.9.0-ultramodern.26"
79
+ "version": "3.9.0-ultramodern.28"
80
80
  },
81
81
  {
82
82
  "sourceName": "@modern-js/bff-runtime",
83
83
  "targetName": "@bleedingdev/modern-js-bff-runtime",
84
- "version": "3.9.0-ultramodern.26"
84
+ "version": "3.9.0-ultramodern.28"
85
85
  },
86
86
  {
87
87
  "sourceName": "@modern-js/boundary-debugger",
88
88
  "targetName": "@bleedingdev/modern-js-boundary-debugger",
89
- "version": "3.9.0-ultramodern.26"
89
+ "version": "3.9.0-ultramodern.28"
90
90
  },
91
91
  {
92
92
  "sourceName": "@modern-js/builder",
93
93
  "targetName": "@bleedingdev/modern-js-builder",
94
- "version": "3.9.0-ultramodern.26"
94
+ "version": "3.9.0-ultramodern.28"
95
95
  },
96
96
  {
97
97
  "sourceName": "@modern-js/code-tools",
98
98
  "targetName": "@bleedingdev/modern-js-code-tools",
99
- "version": "3.9.0-ultramodern.26"
99
+ "version": "3.9.0-ultramodern.28"
100
100
  },
101
101
  {
102
102
  "sourceName": "@modern-js/create-request",
103
103
  "targetName": "@bleedingdev/modern-js-create-request",
104
- "version": "3.9.0-ultramodern.26"
104
+ "version": "3.9.0-ultramodern.28"
105
105
  },
106
106
  {
107
107
  "sourceName": "@modern-js/federation-runtime",
108
108
  "targetName": "@bleedingdev/modern-js-federation-runtime",
109
- "version": "3.9.0-ultramodern.26"
109
+ "version": "3.9.0-ultramodern.28"
110
110
  },
111
111
  {
112
112
  "sourceName": "@modern-js/i18n-integration",
113
113
  "targetName": "@bleedingdev/modern-js-i18n-integration",
114
- "version": "3.9.0-ultramodern.26"
114
+ "version": "3.9.0-ultramodern.28"
115
115
  },
116
116
  {
117
117
  "sourceName": "@modern-js/i18n-runtime-extensions",
118
118
  "targetName": "@bleedingdev/modern-js-i18n-runtime-extensions",
119
- "version": "3.9.0-ultramodern.26"
119
+ "version": "3.9.0-ultramodern.28"
120
120
  },
121
121
  {
122
122
  "sourceName": "@modern-js/i18n-utils",
123
123
  "targetName": "@bleedingdev/modern-js-i18n-utils",
124
- "version": "3.9.0-ultramodern.26"
124
+ "version": "3.9.0-ultramodern.28"
125
125
  },
126
126
  {
127
127
  "sourceName": "@modern-js/image",
128
128
  "targetName": "@bleedingdev/modern-js-image",
129
- "version": "3.9.0-ultramodern.26"
129
+ "version": "3.9.0-ultramodern.28"
130
130
  },
131
131
  {
132
132
  "sourceName": "@modern-js/main-doc",
133
133
  "targetName": "@bleedingdev/modern-js-main-doc",
134
- "version": "3.9.0-ultramodern.26"
134
+ "version": "3.9.0-ultramodern.28"
135
135
  },
136
136
  {
137
137
  "sourceName": "@modern-js/plugin",
138
138
  "targetName": "@bleedingdev/modern-js-plugin",
139
- "version": "3.9.0-ultramodern.26"
139
+ "version": "3.9.0-ultramodern.28"
140
140
  },
141
141
  {
142
142
  "sourceName": "@modern-js/plugin-bff",
143
143
  "targetName": "@bleedingdev/modern-js-plugin-bff",
144
- "version": "3.9.0-ultramodern.26"
144
+ "version": "3.9.0-ultramodern.28"
145
145
  },
146
146
  {
147
147
  "sourceName": "@modern-js/plugin-bff-build-extensions",
148
148
  "targetName": "@bleedingdev/modern-js-plugin-bff-build-extensions",
149
- "version": "3.9.0-ultramodern.26"
149
+ "version": "3.9.0-ultramodern.28"
150
150
  },
151
151
  {
152
152
  "sourceName": "@modern-js/plugin-bff-extensions",
153
153
  "targetName": "@bleedingdev/modern-js-plugin-bff-extensions",
154
- "version": "3.9.0-ultramodern.26"
154
+ "version": "3.9.0-ultramodern.28"
155
155
  },
156
156
  {
157
157
  "sourceName": "@modern-js/plugin-data-loader",
158
158
  "targetName": "@bleedingdev/modern-js-plugin-data-loader",
159
- "version": "3.9.0-ultramodern.26"
159
+ "version": "3.9.0-ultramodern.28"
160
160
  },
161
161
  {
162
162
  "sourceName": "@modern-js/plugin-i18n",
163
163
  "targetName": "@bleedingdev/modern-js-plugin-i18n",
164
- "version": "3.9.0-ultramodern.26"
164
+ "version": "3.9.0-ultramodern.28"
165
165
  },
166
166
  {
167
167
  "sourceName": "@modern-js/plugin-polyfill",
168
168
  "targetName": "@bleedingdev/modern-js-plugin-polyfill",
169
- "version": "3.9.0-ultramodern.26"
169
+ "version": "3.9.0-ultramodern.28"
170
170
  },
171
171
  {
172
172
  "sourceName": "@modern-js/plugin-ssg",
173
173
  "targetName": "@bleedingdev/modern-js-plugin-ssg",
174
- "version": "3.9.0-ultramodern.26"
174
+ "version": "3.9.0-ultramodern.28"
175
175
  },
176
176
  {
177
177
  "sourceName": "@modern-js/plugin-styled-components",
178
178
  "targetName": "@bleedingdev/modern-js-plugin-styled-components",
179
- "version": "3.9.0-ultramodern.26"
179
+ "version": "3.9.0-ultramodern.28"
180
180
  },
181
181
  {
182
182
  "sourceName": "@modern-js/plugin-tanstack",
183
183
  "targetName": "@bleedingdev/modern-js-plugin-tanstack",
184
- "version": "3.9.0-ultramodern.26"
184
+ "version": "3.9.0-ultramodern.28"
185
185
  },
186
186
  {
187
187
  "sourceName": "@modern-js/prod-server",
188
188
  "targetName": "@bleedingdev/modern-js-prod-server",
189
- "version": "3.9.0-ultramodern.26"
189
+ "version": "3.9.0-ultramodern.28"
190
190
  },
191
191
  {
192
192
  "sourceName": "@modern-js/render",
193
193
  "targetName": "@bleedingdev/modern-js-render",
194
- "version": "3.9.0-ultramodern.26"
194
+ "version": "3.9.0-ultramodern.28"
195
195
  },
196
196
  {
197
197
  "sourceName": "@modern-js/runtime",
198
198
  "targetName": "@bleedingdev/modern-js-runtime",
199
- "version": "3.9.0-ultramodern.26"
199
+ "version": "3.9.0-ultramodern.28"
200
200
  },
201
201
  {
202
202
  "sourceName": "@modern-js/runtime-extensions",
203
203
  "targetName": "@bleedingdev/modern-js-runtime-extensions",
204
- "version": "3.9.0-ultramodern.26"
204
+ "version": "3.9.0-ultramodern.28"
205
205
  },
206
206
  {
207
207
  "sourceName": "@modern-js/runtime-renderer-extensions",
208
208
  "targetName": "@bleedingdev/modern-js-runtime-renderer-extensions",
209
- "version": "3.9.0-ultramodern.26"
209
+ "version": "3.9.0-ultramodern.28"
210
210
  },
211
211
  {
212
212
  "sourceName": "@modern-js/runtime-utils",
213
213
  "targetName": "@bleedingdev/modern-js-runtime-utils",
214
- "version": "3.9.0-ultramodern.26"
214
+ "version": "3.9.0-ultramodern.28"
215
215
  },
216
216
  {
217
217
  "sourceName": "@modern-js/sandpack-react",
218
218
  "targetName": "@bleedingdev/modern-js-sandpack-react",
219
- "version": "3.9.0-ultramodern.26"
219
+ "version": "3.9.0-ultramodern.28"
220
220
  },
221
221
  {
222
222
  "sourceName": "@modern-js/server",
223
223
  "targetName": "@bleedingdev/modern-js-server",
224
- "version": "3.9.0-ultramodern.26"
224
+ "version": "3.9.0-ultramodern.28"
225
225
  },
226
226
  {
227
227
  "sourceName": "@modern-js/server-core",
228
228
  "targetName": "@bleedingdev/modern-js-server-core",
229
- "version": "3.9.0-ultramodern.26"
229
+ "version": "3.9.0-ultramodern.28"
230
230
  },
231
231
  {
232
232
  "sourceName": "@modern-js/server-runtime",
233
233
  "targetName": "@bleedingdev/modern-js-server-runtime",
234
- "version": "3.9.0-ultramodern.26"
234
+ "version": "3.9.0-ultramodern.28"
235
235
  },
236
236
  {
237
237
  "sourceName": "@modern-js/server-runtime-extensions",
238
238
  "targetName": "@bleedingdev/modern-js-server-runtime-extensions",
239
- "version": "3.9.0-ultramodern.26"
239
+ "version": "3.9.0-ultramodern.28"
240
240
  },
241
241
  {
242
242
  "sourceName": "@modern-js/server-utils",
243
243
  "targetName": "@bleedingdev/modern-js-server-utils",
244
- "version": "3.9.0-ultramodern.26"
244
+ "version": "3.9.0-ultramodern.28"
245
245
  },
246
246
  {
247
247
  "sourceName": "@modern-js/surface-resolution",
248
248
  "targetName": "@bleedingdev/modern-js-surface-resolution",
249
- "version": "3.9.0-ultramodern.26"
249
+ "version": "3.9.0-ultramodern.28"
250
250
  },
251
251
  {
252
252
  "sourceName": "@modern-js/tsconfig",
253
253
  "targetName": "@bleedingdev/modern-js-tsconfig",
254
- "version": "3.9.0-ultramodern.26"
254
+ "version": "3.9.0-ultramodern.28"
255
255
  },
256
256
  {
257
257
  "sourceName": "@modern-js/types",
258
258
  "targetName": "@bleedingdev/modern-js-types",
259
- "version": "3.9.0-ultramodern.26"
259
+ "version": "3.9.0-ultramodern.28"
260
260
  },
261
261
  {
262
262
  "sourceName": "@modern-js/ultramodern-app-tools",
263
263
  "targetName": "@bleedingdev/modern-js-ultramodern-app-tools",
264
- "version": "3.9.0-ultramodern.26"
264
+ "version": "3.9.0-ultramodern.28"
265
265
  },
266
266
  {
267
267
  "sourceName": "@modern-js/ultramodern-create",
268
268
  "targetName": "@bleedingdev/modern-js-ultramodern-create",
269
- "version": "3.9.0-ultramodern.26"
269
+ "version": "3.9.0-ultramodern.28"
270
270
  },
271
271
  {
272
272
  "sourceName": "@modern-js/ultramodern-sandpack-profile",
273
273
  "targetName": "@bleedingdev/modern-js-ultramodern-sandpack-profile",
274
- "version": "3.9.0-ultramodern.26"
274
+ "version": "3.9.0-ultramodern.28"
275
275
  },
276
276
  {
277
277
  "sourceName": "@modern-js/utils",
278
278
  "targetName": "@bleedingdev/modern-js-utils",
279
- "version": "3.9.0-ultramodern.26"
279
+ "version": "3.9.0-ultramodern.28"
280
280
  }
281
281
  ],
282
282
  "release": {
283
283
  "tag": "latest",
284
- "version": "3.9.0-ultramodern.26"
284
+ "version": "3.9.0-ultramodern.28"
285
285
  },
286
286
  "schema": "bleedingdev.ultramodern.release-cohort",
287
287
  "schemaVersion": 1,
288
288
  "source": {
289
- "commit": "428503a57019eb41c02373541897fd129a22016b",
289
+ "commit": "0063a3df64f1553f92c4afe9afade0b3615e943a",
290
290
  "repository": "BleedingDev/ultramodern.js"
291
291
  }
292
292
  }
package/templates/workspace-scripts/ultramodern-cloudflare-proof.mjs CHANGED
@@ -20,8 +20,70 @@ function resolveModuleFederationPublicPath(publicPath, manifestUrl) {
20
20
  }
21
21
  }
22
22
 
23
- async function fetchText(url, init) {
24
- const response = await fetch(url, init);
23
+ // A deployment behind Cloudflare Access admits the proof through an Access service token. Cloudflare
24
+ // reads its id and secret from these request headers on every probe, so set both or neither.
25
+ function cloudflareAccessHeaders() {
26
+ const clientId = process.env.CF_ACCESS_CLIENT_ID?.trim() ?? '';
27
+ const clientSecret = process.env.CF_ACCESS_CLIENT_SECRET?.trim() ?? '';
28
+ if (!clientId && !clientSecret) {
29
+ return {};
30
+ }
31
+ if (!clientId || !clientSecret) {
32
+ throw new Error(
33
+ 'Set both CF_ACCESS_CLIENT_ID and CF_ACCESS_CLIENT_SECRET to prove a deployment behind Cloudflare Access, or neither',
34
+ );
35
+ }
36
+ return {
37
+ 'cf-access-client-id': clientId,
38
+ 'cf-access-client-secret': clientSecret,
39
+ };
40
+ }
41
+
42
+ const MAX_REDIRECTS = 20;
43
+
44
+ // The same rewrite fetch applies: 303 turns anything but HEAD into GET, 301 and 302 turn POST into GET.
45
+ function redirectBecomesGet(status, method = 'GET') {
46
+ const upper = String(method).toUpperCase();
47
+ if (status === 303) {
48
+ return upper !== 'HEAD';
49
+ }
50
+ return (status === 301 || status === 302) && upper === 'POST';
51
+ }
52
+
53
+ // The service token only ever goes to the origin of the deployment under proof. fetch would carry
54
+ // custom headers across a cross-origin redirect, so redirects are followed here, dropping the token
55
+ // on any other origin, the way fetch drops Authorization.
56
+ async function fetchWithAccessToken(publicUrl, url, init, accessHeaders) {
57
+ const trustedOrigin = new URL(publicUrl).origin;
58
+ let current = new URL(url);
59
+ let request = init;
60
+ for (let redirects = 0; redirects <= MAX_REDIRECTS; redirects += 1) {
61
+ const credentials = current.origin === trustedOrigin ? accessHeaders : {};
62
+ const response = await fetch(current, {
63
+ ...request,
64
+ headers: { ...request.headers, ...credentials },
65
+ redirect: 'manual',
66
+ });
67
+ const location = response.headers.get('location');
68
+ if (response.status < 300 || response.status > 399 || !location) {
69
+ return response;
70
+ }
71
+ current = new URL(location, current);
72
+ if (redirectBecomesGet(response.status, request.method)) {
73
+ const { body: _body, ...rest } = request;
74
+ const { 'content-type': _contentType, ...headers } = request.headers ?? {};
75
+ request = { ...rest, method: 'GET', headers };
76
+ }
77
+ }
78
+ throw new Error(`${url} redirected more than ${MAX_REDIRECTS} times`);
79
+ }
80
+
81
+ async function fetchText(publicUrl, url, init = {}) {
82
+ const accessHeaders = cloudflareAccessHeaders();
83
+ const response =
84
+ Object.keys(accessHeaders).length === 0
85
+ ? await fetch(url, init)
86
+ : await fetchWithAccessToken(publicUrl, url, init, accessHeaders);
25
87
  return {
26
88
  ok: response.ok,
27
89
  status: response.status,
@@ -436,7 +498,7 @@ async function validateSsrHead(evidence, app, publicUrl, ssrRoute, ssr) {
436
498
  const publicRoute = routeEntry.localeUrlPaths?.en ?? publicSurface.concreteUrlPaths?.[0];
437
499
  const headRoute = publicRoute || ssrRoute;
438
500
  const headResponse =
439
- headRoute === ssrRoute ? ssr : await fetchText(joinUrl(publicUrl, headRoute));
501
+ headRoute === ssrRoute ? ssr : await fetchText(publicUrl, joinUrl(publicUrl, headRoute));
440
502
  if (headRoute !== ssrRoute) {
441
503
  evidence.assertions.push({
442
504
  type: 'ssr-head-route',
@@ -527,7 +589,7 @@ async function validateNotFound(evidence, app, publicUrl) {
527
589
  qualityGates.statusCodes?.notFoundRoute ??
528
590
  '/__ultramodern-smoke-missing/nope';
529
591
  const expectedStatus = qualityGates.statusCodes?.unknownRouteStatus ?? 404;
530
- const response = await fetchText(joinUrl(publicUrl, notFoundRoute));
592
+ const response = await fetchText(publicUrl, joinUrl(publicUrl, notFoundRoute));
531
593
  evidence.assertions.push({
532
594
  type: 'status-code',
533
595
  route: notFoundRoute,
@@ -557,7 +619,7 @@ async function validateCssAsset(evidence, app, publicUrl, ssr) {
557
619
 
558
620
  const styleUrl = styleUrls[0];
559
621
  const route = new URL(styleUrl).pathname;
560
- const css = await fetchText(styleUrl);
622
+ const css = await fetchText(publicUrl, styleUrl);
561
623
  evidence.assertions.push({
562
624
  type: 'css-asset',
563
625
  route,
@@ -591,7 +653,7 @@ async function validatePublicSurface(evidence, app, publicUrl) {
591
653
  (publicSurface.contentSources ?? []).length > 0;
592
654
 
593
655
  const robotsRoute = '/robots.txt';
594
- const robots = await fetchText(joinUrl(publicUrl, robotsRoute));
656
+ const robots = await fetchText(publicUrl, joinUrl(publicUrl, robotsRoute));
595
657
  evidence.assertions.push({
596
658
  type: 'public-surface-robots',
597
659
  route: robotsRoute,
@@ -621,7 +683,7 @@ async function validatePublicSurface(evidence, app, publicUrl) {
621
683
  }
622
684
 
623
685
  const sitemapRoute = '/sitemap.xml';
624
- const sitemap = await fetchText(joinUrl(publicUrl, sitemapRoute));
686
+ const sitemap = await fetchText(publicUrl, joinUrl(publicUrl, sitemapRoute));
625
687
  evidence.assertions.push({
626
688
  type: 'public-surface-sitemap',
627
689
  route: sitemapRoute,
@@ -663,7 +725,7 @@ async function validatePublicSurface(evidence, app, publicUrl) {
663
725
  }
664
726
 
665
727
  const manifestRoute = '/site.webmanifest';
666
- const webManifest = await fetchText(joinUrl(publicUrl, manifestRoute));
728
+ const webManifest = await fetchText(publicUrl, joinUrl(publicUrl, manifestRoute));
667
729
  const webManifestJson = parseMaybeJson(webManifest.body);
668
730
  evidence.assertions.push({
669
731
  type: 'public-surface-webmanifest',
@@ -697,7 +759,7 @@ async function validateSsrEvidence(evidence, app, publicUrl, routes) {
697
759
  const budgets = qualityGates.budgets ?? {};
698
760
 
699
761
  const ssrRoute = routes.ssr ?? '/en';
700
- const ssr = await fetchText(joinUrl(publicUrl, ssrRoute));
762
+ const ssr = await fetchText(publicUrl, joinUrl(publicUrl, ssrRoute));
701
763
  evidence.assertions.push({
702
764
  type: 'ssr',
703
765
  route: ssrRoute,
@@ -803,7 +865,7 @@ async function validateModuleFederationManifestEvidence(evidence, app, publicUrl
803
865
 
804
866
  const manifestRoute = routes.mfManifest ?? '/mf-manifest.json';
805
867
  const manifestUrl = joinUrl(publicUrl, manifestRoute);
806
- const manifest = await fetchText(manifestUrl);
868
+ const manifest = await fetchText(publicUrl, manifestUrl);
807
869
  const manifestJson = parseMaybeJson(manifest.body);
808
870
  evidence.assertions.push({
809
871
  type: 'mf-manifest',
@@ -864,7 +926,7 @@ async function validateI18nEvidence(evidence, app, publicUrl, routes) {
864
926
  const budgets = qualityGates.budgets ?? {};
865
927
 
866
928
  const localeRoute = routes.locale ?? `/locales/en/${app.i18n?.namespace}.json`;
867
- const locale = await fetchText(joinUrl(publicUrl, localeRoute));
929
+ const locale = await fetchText(publicUrl, joinUrl(publicUrl, localeRoute));
868
930
  const localeJson = parseMaybeJson(locale.body);
869
931
  evidence.assertions.push({
870
932
  type: 'i18n-marker',
@@ -907,7 +969,7 @@ async function validateI18nEvidence(evidence, app, publicUrl, routes) {
907
969
 
908
970
  async function validateReadinessEvidence(evidence, app, publicUrl, routes) {
909
971
  if (routes.apiReadiness) {
910
- const readiness = await fetchText(joinUrl(publicUrl, routes.apiReadiness));
972
+ const readiness = await fetchText(publicUrl, joinUrl(publicUrl, routes.apiReadiness));
911
973
  const readinessJson = parseMaybeJson(readiness.body);
912
974
  const apiMarker = markerFromJson(readinessJson);
913
975
  evidence.assertions.push({
@@ -953,7 +1015,7 @@ async function validateServiceBindingEvidence(evidence, app, publicUrl) {
953
1015
 
954
1016
  for (const binding of serviceBindings) {
955
1017
  const method = String(binding.method ?? 'GET').toUpperCase();
956
- const response = await fetchText(joinUrl(publicUrl, binding.route), {
1018
+ const response = await fetchText(publicUrl, joinUrl(publicUrl, binding.route), {
957
1019
  method,
958
1020
  headers: {
959
1021
  accept: 'application/json',
@@ -1015,7 +1077,7 @@ async function validateJsonSmokeEvidence(evidence, app, publicUrl) {
1015
1077
  const method = String(check.method ?? 'GET').toUpperCase();
1016
1078
  const requestBody =
1017
1079
  check.body ?? check.payload ?? check.requestBody ?? undefined;
1018
- const response = await fetchText(joinUrl(publicUrl, route), {
1080
+ const response = await fetchText(publicUrl, joinUrl(publicUrl, route), {
1019
1081
  method,
1020
1082
  headers: {
1021
1083
  accept: 'application/json',