@bleedingdev/modern-js-ultramodern-create 3.9.0-ultramodern.3 → 3.9.0-ultramodern.4

package/dist/cjs/ultramodern-tooling/commands/migrate-strict-effect.cjs

@@ -44,11 +44,13 @@ var external_node_fs_default = /*#__PURE__*/ __webpack_require__.n(external_node
 const external_node_path_namespaceObject = require("node:path");
 var external_node_path_default = /*#__PURE__*/ __webpack_require__.n(external_node_path_namespaceObject);
 const external_ultramodern_release_cohort_cjs_namespaceObject = require("../../ultramodern-release-cohort.cjs");
+const app_files_cjs_namespaceObject = require("../../ultramodern-workspace/app-files.cjs");
 const contracts_cjs_namespaceObject = require("../../ultramodern-workspace/contracts.cjs");
 const delivery_unit_stamp_cjs_namespaceObject = require("../../ultramodern-workspace/delivery-unit-stamp.cjs");
 const policy_cjs_namespaceObject = require("../../ultramodern-workspace/policy.cjs");
 const shells_cjs_namespaceObject = require("../../ultramodern-workspace/shells.cjs");
 const workspace_scripts_cjs_namespaceObject = require("../../ultramodern-workspace/workspace-scripts.cjs");
+const zerops_cjs_namespaceObject = require("../../ultramodern-workspace/zerops.cjs");
 const external_config_cjs_namespaceObject = require("../config.cjs");
 const api_metadata_cjs_namespaceObject = require("./migrate-strict-effect/api-metadata.cjs");
 const declaration_patches_cjs_namespaceObject = require("./migrate-strict-effect/declaration-patches.cjs");
@@ -63,6 +65,7 @@ const pnpm_policy_cjs_namespaceObject = require("./migrate-strict-effect/pnpm-po
 const react_router_retirement_cjs_namespaceObject = require("./migrate-strict-effect/react-router-retirement.cjs");
 const shared_api_infrastructure_cjs_namespaceObject = require("./migrate-strict-effect/shared-api-infrastructure.cjs");
 const toolchain_pins_cjs_namespaceObject = require("./migrate-strict-effect/toolchain-pins.cjs");
+const workspace_artifact_ownership_cjs_namespaceObject = require("./migrate-strict-effect/workspace-artifact-ownership.cjs");
 const external_options_cjs_namespaceObject = require("./options.cjs");
 const retiredMetadataPaths = [
     '.modernjs/ultramodern-generated-contract.json',
@@ -118,10 +121,24 @@ function synchronizeMigrationDeliveryUnitMetadata(io, raw, packageSource) {
         'schemaVersion',
         'id',
         "description",
-        'preset',
-        'sharedPackages',
-        'validation'
-    ])topology[key] = canonicalTopology[key];
+        'preset'
+    ])if ('id' === key || "description" === key) topology[key] ??= canonicalTopology[key];
+    else topology[key] = canonicalTopology[key];
+    const existingSharedPackages = Array.isArray(topology.sharedPackages) ? topology.sharedPackages : [];
+    topology.sharedPackages = [
+        ...existingSharedPackages,
+        ...canonicalTopology.sharedPackages.filter((candidate)=>!existingSharedPackages.some((existing)=>existing.id === candidate.id))
+    ];
+    topology.validation = {
+        ...canonicalTopology.validation,
+        ...topology.validation,
+        commands: [
+            ...new Set([
+                ...topology.validation?.commands ?? [],
+                ...canonicalTopology.validation.commands
+            ])
+        ]
+    };
     const canonicalTopologyApps = new Map([
         canonicalTopology.shell,
         ...canonicalTopology.verticals ?? []
@@ -144,8 +161,21 @@ function synchronizeMigrationDeliveryUnitMetadata(io, raw, packageSource) {
                 'api',
                 'cloudflare',
                 'ownership'
-            ])if (Object.hasOwn(canonicalEntry, key)) entry[key] = canonicalEntry[key];
-            else delete entry[key];
+            ])if (Object.hasOwn(canonicalEntry, key)) {
+                const canonicalValue = canonicalEntry[key];
+                if ('api' === key && entry.api && canonicalValue && 'object' == typeof canonicalValue) {
+                    const nextApi = {
+                        ...entry.api,
+                        ...canonicalValue
+                    };
+                    if (!Object.hasOwn(entry.api, 'domainOperations')) delete nextApi.domainOperations;
+                    entry.api = nextApi;
+                } else if ('cloudflare' === key && entry.cloudflare && canonicalValue && 'object' == typeof canonicalValue) entry.cloudflare = {
+                    ...canonicalValue,
+                    ...entry.cloudflare
+                };
+                else entry[key] = canonicalValue;
+            } else delete entry[key];
         }
     }
     (0, io_cjs_namespaceObject.writeJsonFile)(io, topologyPath, topology);
@@ -166,7 +196,10 @@ function synchronizeMigrationCompactPolicy(io, raw, packageSource) {
     const apps = (0, external_config_cjs_namespaceObject.workspaceAppsFromToolingConfig)(migrated);
     apps.filter((app)=>'shell' !== app.kind);
     const canonical = requireRecord((0, contracts_cjs_namespaceObject.createUltramodernConfig)(migrated.workspace.packageScope, packageSource.modernPackageVersion, packageSource, apps, migrated.features.tailwind, migrated.bridge, (0, external_config_cjs_namespaceObject.additionalShellsFromToolingConfig)(migrated), apps.find((app)=>'shell' === app.kind)), 'Generated compact policy');
-    for (const key of compactPolicyKeys)raw[key] = canonical[key];
+    for (const key of compactPolicyKeys){
+        if ('workspace' === key) canonical.workspace.packageManager.version = raw.workspace.packageManager.version;
+        raw[key] = canonical[key];
+    }
     (0, io_cjs_namespaceObject.writeJsonFile)(io, external_node_path_default().join(io.workspaceRoot, '.modernjs/ultramodern.json'), raw);
 }
 function reconcileRootPackageSourceMetadata(packageJson, packageSource) {
@@ -306,6 +339,33 @@ function migrateStrictEffect(args, context, io, dryRun, skipInstall) {
             version: packageSource.modernPackageVersion
         });
     const releaseCohort = 'install' === packageSource.strategy ? (0, external_ultramodern_release_cohort_cjs_namespaceObject.readCreateReleaseCohort)() : void 0;
+    const currentApps = (0, external_config_cjs_namespaceObject.workspaceAppsFromToolingConfig)(current);
+    const allCurrentApps = (0, external_config_cjs_namespaceObject.allWorkspaceAppsFromToolingConfig)(current);
+    const artifactOwnership = (0, workspace_artifact_ownership_cjs_namespaceObject.preserveConsumerWorkspaceArtifacts)(io, [
+        ...allCurrentApps.map((app)=>({
+                relativePath: `${app.directory}/src/modern-app-env.d.ts`,
+                content: (0, app_files_cjs_namespaceObject.createAppEnvDts)(app, allCurrentApps.filter((remote)=>'shell' !== remote.kind), current.workspace.packageScope)
+            })),
+        ...(0, workspace_scripts_cjs_namespaceObject.migratedWorkspaceScriptArtifacts)({
+            shellOnly: false,
+            hasBackendSurface: true
+        }).filter((artifact)=>"scripts/validate-ultramodern-workspace.mts" !== artifact.relativePath),
+        {
+            relativePath: "scripts/validate-ultramodern-workspace.mts",
+            legacyPath: "scripts/validate-ultramodern-workspace.mjs",
+            generatedDataBinding: 'workspaceValidationContract',
+            content: (0, workspace_scripts_cjs_namespaceObject.createWorkspaceValidationScript)(current.workspace.packageScope, current.features.tailwind, currentApps.filter((app)=>'shell' !== app.kind), void 0, (0, external_config_cjs_namespaceObject.additionalShellsFromToolingConfig)(current), currentApps.find((app)=>'shell' === app.kind))
+        },
+        {
+            relativePath: 'zerops.yaml',
+            content: `${(0, zerops_cjs_namespaceObject.createZeropsYaml)(current.workspace.packageScope, (0, external_config_cjs_namespaceObject.allWorkspaceAppsFromToolingConfig)(current))}\n`
+        },
+        {
+            relativePath: "scripts/materialize-zerops-runtime.mjs",
+            content: (0, workspace_scripts_cjs_namespaceObject.createZeropsRuntimeMaterializationScript)()
+        }
+    ]);
+    io = artifactOwnership.io;
     (0, api_metadata_cjs_namespaceObject.reconcileCompactPackageSourceMetadata)(raw.packageSource, packageSource);
     reconcileRootPackageSourceMetadata((0, io_cjs_namespaceObject.readJsonFile)(external_node_path_default().join(io.workspaceRoot, 'package.json')), packageSource);
     (0, pnpm_policy_cjs_namespaceObject.updateGeneratedPnpmWorkspacePolicy)((0, io_cjs_namespaceObject.createMigrationIo)(io.workspaceRoot, true), packageSource, {
@@ -357,6 +417,7 @@ function migrateStrictEffect(args, context, io, dryRun, skipInstall) {
         io.writeGenerated(external_node_path_default().join(io.workspaceRoot, artifact.relativePath), artifact.content);
     }
     io.writeGenerated(external_node_path_default().join(io.workspaceRoot, "scripts/validate-ultramodern-workspace.mts"), (0, workspace_scripts_cjs_namespaceObject.createWorkspaceValidationScript)(validationContractInputs.scope, validationContractInputs.enableTailwind, validationContractInputs.remotes, releaseCohort, validationContractInputs.additionalShells, validationContractInputs.primaryShell, raw, external_node_fs_default().existsSync(external_node_path_default().join(io.workspaceRoot, 'topology/ownership.json')) ? requireRecord((0, io_cjs_namespaceObject.readJsonFile)(external_node_path_default().join(io.workspaceRoot, 'topology/ownership.json')), 'Ownership topology') : void 0, developmentOverlay));
+    artifactOwnership.refreshReleaseCohort(releaseCohort);
     for (const relativePath of retiredMetadataPaths)io.remove(external_node_path_default().join(io.workspaceRoot, relativePath));
     (0, generated_artifacts_cjs_namespaceObject.updateGeneratedBuildIdentityModules)(io, migrated);
     (0, generated_artifacts_cjs_namespaceObject.updateGeneratedTypeScriptSurfaces)(io, migrated);
@@ -371,7 +432,7 @@ function migrateStrictEffect(args, context, io, dryRun, skipInstall) {
             reconcileRootPackageSourceMetadata(packageJson, packageSource);
             (0, toolchain_pins_cjs_namespaceObject.updateRootPackageToolchain)(packageJson);
         }
-        (0, package_cohort_cjs_namespaceObject.updateModernDependencies)(packageJson, packageSource);
+        (0, package_cohort_cjs_namespaceObject.updateModernDependencies)(packageJson, packageSource, releaseCohort);
         const ownsGeneratedScripts = 'package.json' === relativePackageFile || allMigratedApps.some((app)=>`${app.directory}/package.json` === relativePackageFile);
         (0, package_cohort_cjs_namespaceObject.updateGeneratedToolingDependencies)(packageJson, {
             ownsGeneratedScripts
@@ -381,6 +442,7 @@ function migrateStrictEffect(args, context, io, dryRun, skipInstall) {
         if ('preserved' === retiredReactRouter) io.log(`${relativePackageFile} keeps its react-router dependency: authored source imports React Router directly, so its generated Module Federation config keeps bridge.enableBridgeRouter: true.`);
         else if ('removed' === retiredReactRouter) io.log(`${relativePackageFile} dropped its obsolete react-router dependency: no authored source imports React Router.`);
         (0, package_cohort_cjs_namespaceObject.updateGeneratedPackageScripts)(packageJson, {
+            preservedArtifacts: artifactOwnership.preservedPaths,
             relativePackageFile,
             apps: allMigratedApps,
             shellOnly,

package/dist/cjs/ultramodern-workspace/module-federation/reexport-module.cjs

@@ -34,6 +34,7 @@ __webpack_require__.d(__webpack_exports__, {
 });
 const universal_namespaceObject = require("@modern-js/utils/universal");
 const external_delivery_unit_cjs_namespaceObject = require("../delivery-unit.cjs");
+const external_descriptors_cjs_namespaceObject = require("../descriptors.cjs");
 function deliveryUnitRecordFor(scope, app) {
     return app.deliveryUnit ? app.deliveryUnit : (0, external_delivery_unit_cjs_namespaceObject.createDeliveryUnitRecord)(scope, app);
 }
@@ -41,57 +42,28 @@ function createUltramodernBuildArtifactJson(scope, app) {
     const record = deliveryUnitRecordFor(scope, app);
     return `${JSON.stringify((0, universal_namespaceObject.createUltramodernBuildArtifact)(record), null, 2)}\n`;
 }
-function createUltramodernBuildModule(scope, app) {
+function createUltramodernBuildModule(scope, app, includeUiMarker = (0, external_descriptors_cjs_namespaceObject.appEmitsBrowserUi)(app)) {
     const record = deliveryUnitRecordFor(scope, app);
-    return `declare const ULTRAMODERN_BUILD_MARKER: string;
+    return `import { resolveUltramodernBuildArtifact } from '@modern-js/runtime-extensions/build-identity';
+
+declare const ULTRAMODERN_BUILD_MARKER: string;
 declare const ULTRAMODERN_SOURCE_REVISION: string;
 
-const ultramodernGeneratedBuildArtifact = ${JSON.stringify((0, universal_namespaceObject.createUltramodernBuildArtifact)(record), null, 2)} as const;
-const ultramodernBuildMarker =
-  typeof ULTRAMODERN_BUILD_MARKER === 'string'
-    ? ULTRAMODERN_BUILD_MARKER
-    : ultramodernGeneratedBuildArtifact.deliveryUnit.buildMarker;
-const ultramodernSourceRevision =
-  typeof ULTRAMODERN_SOURCE_REVISION === 'string'
-    ? ULTRAMODERN_SOURCE_REVISION
-    : ultramodernGeneratedBuildArtifact.deliveryUnit.sourceRevision;
-const ultramodernBuildArtifact = {
-  ...ultramodernGeneratedBuildArtifact,
-  deliveryUnit: {
-    ...ultramodernGeneratedBuildArtifact.deliveryUnit,
-    build: ultramodernBuildMarker,
-    buildMarker: ultramodernBuildMarker,
-    sourceRevision: ultramodernSourceRevision,
-  },
-  surfaces: {
-    api: {
-      ...ultramodernGeneratedBuildArtifact.surfaces.api,
-      build: ultramodernBuildMarker,
-      buildMarker: ultramodernBuildMarker,
-      sourceRevision: ultramodernSourceRevision,
-    },
-    ui: {
-      ...ultramodernGeneratedBuildArtifact.surfaces.ui,
-      build: ultramodernBuildMarker,
-      buildMarker: ultramodernBuildMarker,
-      sourceRevision: ultramodernSourceRevision,
-    },
-  },
-} as const;
+const ultramodernBuildArtifact = resolveUltramodernBuildArtifact(${JSON.stringify((0, universal_namespaceObject.createUltramodernBuildArtifact)(record), null, 2)} as const, {
+  buildMarker: () => ULTRAMODERN_BUILD_MARKER,
+  sourceRevision: () => ULTRAMODERN_SOURCE_REVISION,
+});
 
-export const ultramodernDeliveryUnit =
-  ultramodernBuildArtifact.deliveryUnit;
-export const ultramodernUiMarker = ultramodernBuildArtifact.surfaces.ui;
-export const ultramodernApiMarker = ultramodernBuildArtifact.surfaces.api;
-`;
+export const ultramodernDeliveryUnit = ultramodernBuildArtifact.deliveryUnit;
+${includeUiMarker ? 'export const ultramodernUiMarker = ultramodernBuildArtifact.surfaces.ui;\n' : ''}${'shell' !== app.kind && (0, external_descriptors_cjs_namespaceObject.appHasApi)(app) ? 'export const ultramodernApiMarker = ultramodernBuildArtifact.surfaces.api;\n' : ''}`;
 }
-function createUltramodernBuildReexportModule() {
-    return `export {
-  ultramodernApiMarker,
-  ultramodernDeliveryUnit,
-  ultramodernUiMarker,
-} from '../shared/ultramodern-build';
-`;
+function createUltramodernBuildReexportModule(app, includeUiMarker = (0, external_descriptors_cjs_namespaceObject.appEmitsBrowserUi)(app)) {
+    const names = [
+        'ultramodernDeliveryUnit'
+    ];
+    if (includeUiMarker) names.push('ultramodernUiMarker');
+    if ('shell' !== app.kind && (0, external_descriptors_cjs_namespaceObject.appHasApi)(app)) names.push('ultramodernApiMarker');
+    return `export { ${names.join(', ')} } from '../shared/ultramodern-build';\n`;
 }
 exports.createUltramodernBuildArtifactJson = __webpack_exports__.createUltramodernBuildArtifactJson;
 exports.createUltramodernBuildModule = __webpack_exports__.createUltramodernBuildModule;

package/dist/cjs/ultramodern-workspace/package-json.cjs

@@ -51,6 +51,7 @@ function appDependencies(scope, packageSource, app, remotes = [], bridge) {
     const dependencies = {
         '@modern-js/plugin-tanstack': (0, external_ultramodern_package_source_cjs_namespaceObject.modernPackageSpecifier)('@modern-js/plugin-tanstack', packageSource),
         '@modern-js/plugin-i18n': (0, external_ultramodern_package_source_cjs_namespaceObject.modernPackageSpecifier)('@modern-js/plugin-i18n', packageSource),
+        '@modern-js/runtime-extensions': (0, external_ultramodern_package_source_cjs_namespaceObject.modernPackageSpecifier)('@modern-js/runtime-extensions', packageSource),
         '@modern-js/runtime': (0, external_ultramodern_package_source_cjs_namespaceObject.modernPackageSpecifier)('@modern-js/runtime', packageSource),
         ...external_policy_cjs_namespaceObject.ULTRAMODERN_PACKAGE_PINS.appDependencies,
         [(0, external_naming_cjs_namespaceObject.packageName)(scope, 'shared-contracts')]: external_ultramodern_package_source_cjs_namespaceObject.WORKSPACE_PACKAGE_VERSION,

package/dist/cjs/ultramodern-workspace/workspace-validation-contract.cjs

@@ -55,7 +55,8 @@ const modernPackageCohort = [
     '@modern-js/plugin-bff',
     '@modern-js/plugin-i18n',
     '@modern-js/plugin-tanstack',
-    '@modern-js/runtime'
+    '@modern-js/runtime',
+    '@modern-js/runtime-extensions'
 ];
 const asJsonRecord = (value)=>value;
 function projectModuleFederationMetadata(value) {

package/dist/cjs/ultramodern-workspace/write-app.cjs

@@ -78,7 +78,7 @@ function writeAppConfigFiles({ targetDir, scope, resolvedApp, packageSource, ena
     (0, external_fs_io_cjs_namespaceObject.writeJson)(targetDir, `${resolvedApp.directory}/tsconfig.json`, (0, external_package_json_cjs_namespaceObject.createAppTsConfig)(resolvedApp, remotes));
     (0, external_fs_io_cjs_namespaceObject.writeJson)(targetDir, `${resolvedApp.directory}/tsconfig.mf-types.json`, (0, external_package_json_cjs_namespaceObject.createAppMfTypesTsConfig)(resolvedApp));
     (0, external_fs_io_cjs_namespaceObject.writeFile)(targetDir, `${resolvedApp.directory}/src/modern-app-env.d.ts`, (0, external_app_files_cjs_namespaceObject.createAppEnvDts)(resolvedApp, remotes, scope));
-    (0, external_fs_io_cjs_namespaceObject.writeFile)(targetDir, `${resolvedApp.directory}/src/ultramodern-build.ts`, (0, external_module_federation_cjs_namespaceObject.createUltramodernBuildReexportModule)());
+    if ('api-only' !== resolvedApp.surfaceProfile) (0, external_fs_io_cjs_namespaceObject.writeFile)(targetDir, `${resolvedApp.directory}/src/ultramodern-build.ts`, (0, external_module_federation_cjs_namespaceObject.createUltramodernBuildReexportModule)(resolvedApp));
     (0, external_fs_io_cjs_namespaceObject.writeFile)(targetDir, `${resolvedApp.directory}/shared/ultramodern-build.ts`, (0, external_module_federation_cjs_namespaceObject.createUltramodernBuildModule)(scope, resolvedApp));
     (0, external_fs_io_cjs_namespaceObject.writeFile)(targetDir, `${resolvedApp.directory}/shared/ultramodern-build.json`, (0, external_module_federation_cjs_namespaceObject.createUltramodernBuildArtifactJson)(scope, resolvedApp));
     if (emitsUi) {

package/dist/esm/ultramodern-package-source.js

@@ -24,7 +24,8 @@ const ULTRAMODERN_WORKSPACE_MODERN_PACKAGES = [
     '@modern-js/plugin-bff',
     '@modern-js/plugin-i18n',
     '@modern-js/plugin-tanstack',
-    '@modern-js/runtime'
+    '@modern-js/runtime',
+    '@modern-js/runtime-extensions'
 ];
 function modernPackageVersion(packageSource) {
     return 'install' === packageSource.strategy ? packageSource.modernPackageVersion : WORKSPACE_PACKAGE_VERSION;

package/dist/esm/ultramodern-tooling/commands/migrate-strict-effect/generated-artifacts-build-identity.js

@@ -1,5 +1,6 @@
 import node_fs from "node:fs";
 import node_path from "node:path";
+import { appEmitsBrowserUi } from "../../../ultramodern-workspace/descriptors.js";
 import { createUltramodernBuildArtifactJson, createUltramodernBuildModule, createUltramodernBuildReexportModule } from "../../../ultramodern-workspace/module-federation.js";
 import { allWorkspaceAppsFromToolingConfig } from "../../config.js";
 const legacyApiMarkerPattern = /export const ultramodernApiMarker\s*=\s*\{[\s\S]*?\}\s+as const;\n?/u;
@@ -39,8 +40,10 @@ function updateGeneratedBuildIdentityModules(io, config) {
     for (const app of allWorkspaceAppsFromToolingConfig(config)){
         const sharedApiPath = node_path.join(io.workspaceRoot, app.directory, 'shared/api.ts');
         if (app.api && node_fs.existsSync(sharedApiPath)) io.write(sharedApiPath, rewriteApiMarkerIdentitySchema(rewriteLegacyApiMarkerBinding(node_fs.readFileSync(sharedApiPath, 'utf-8'))));
-        io.writeGenerated(node_path.join(io.workspaceRoot, app.directory, 'src/ultramodern-build.ts'), createUltramodernBuildReexportModule());
-        io.writeGenerated(node_path.join(io.workspaceRoot, app.directory, 'shared/ultramodern-build.ts'), createUltramodernBuildModule(config.workspace.packageScope, app));
+        const reexportPath = node_path.join(io.workspaceRoot, app.directory, 'src/ultramodern-build.ts');
+        const includeUiMarker = appEmitsBrowserUi(app) && ('shell' !== app.kind || node_fs.existsSync(reexportPath));
+        if (node_fs.existsSync(reexportPath)) io.writeGenerated(reexportPath, createUltramodernBuildReexportModule(app, includeUiMarker));
+        io.writeGenerated(node_path.join(io.workspaceRoot, app.directory, 'shared/ultramodern-build.ts'), createUltramodernBuildModule(config.workspace.packageScope, app, includeUiMarker));
         io.write(node_path.join(io.workspaceRoot, app.directory, 'shared/ultramodern-build.json'), createUltramodernBuildArtifactJson(config.workspace.packageScope, app));
     }
 }

package/dist/esm/ultramodern-tooling/commands/migrate-strict-effect/generated-artifacts-modern-configs.js

@@ -117,6 +117,7 @@ function updateGeneratedModernConfigs(io, config) {
             generatedModuleFederationConfig,
             createGeneratedModuleFederationConfig(!enableBridgeRouter)
         ];
+        const ownsUiComposition = !node_fs.existsSync(moduleFederationConfigPath) || recognizedModuleFederationConfigs.includes(node_fs.readFileSync(moduleFederationConfigPath, 'utf8'));
         if (appEmitsBrowserUi(app)) writeOwnedTypeScriptConfig(io, moduleFederationConfigPath, generatedModuleFederationConfig, recognizedModuleFederationConfigs);
         else removeOwnedTypeScriptConfig(io, moduleFederationConfigPath, recognizedModuleFederationConfigs);
         const backendFederationConfigPath = node_path.join(io.workspaceRoot, app.directory, 'backend-federation.config.ts');
@@ -127,6 +128,10 @@ function updateGeneratedModernConfigs(io, config) {
         else removeOwnedTypeScriptConfig(io, backendFederationConfigPath, [
             generatedBackendFederationConfig
         ]);
+        if (!ownsUiComposition) {
+            io.log(`${app.directory} preserves its consumer-owned federation composition instead of regenerating routes from unproven metadata.`);
+            continue;
+        }
         if ('shell' === app.kind) {
             const shellUiRemotes = resolveRemoteRefs(app, remotes).filter(appEmitsBrowserUi);
             const componentsPath = node_path.join(io.workspaceRoot, app.directory, 'src/routes/vertical-components.tsx');

package/dist/esm/ultramodern-tooling/commands/migrate-strict-effect/package-cohort.js

@@ -24,13 +24,20 @@ function updateDeclaredDependencies(packageJson, pins) {
     }
     return changed;
 }
-function updateModernDependencies(packageJson, packageSource) {
+function updateModernDependencies(packageJson, packageSource, releaseCohort) {
     let changed = false;
     for (const section of [
         'dependencies',
         'devDependencies'
     ]){
         const dependencies = packageJson[section];
+        if (dependencies && Object.hasOwn(dependencies, '@modern-js/runtime')) {
+            const runtimeExtensions = modernPackageSpecifier('@modern-js/runtime-extensions', packageSource);
+            if (dependencies['@modern-js/runtime-extensions'] !== runtimeExtensions) {
+                dependencies['@modern-js/runtime-extensions'] = runtimeExtensions;
+                changed = true;
+            }
+        }
         if (dependencies && Object.hasOwn(dependencies, '@modern-js/create')) {
             dependencies[ULTRAMODERN_CREATE_PACKAGE] = modernPackageSpecifier(ULTRAMODERN_CREATE_PACKAGE, packageSource);
             delete dependencies['@modern-js/create'];
@@ -38,11 +45,23 @@ function updateModernDependencies(packageJson, packageSource) {
         }
     }
     return updateDeclaredDependencies(packageJson, new Map([
-        ...modernPackageNames
-    ].map((packageName)=>[
-            packageName,
-            modernPackageSpecifier(packageName, packageSource)
-        ]))) || changed;
+        ...[
+            ...modernPackageNames
+        ].map((packageName)=>[
+                packageName,
+                modernPackageSpecifier(packageName, packageSource)
+            ]),
+        ...(releaseCohort?.packages ?? []).flatMap((item)=>[
+                [
+                    item.sourceName,
+                    modernPackageSpecifier(item.sourceName, packageSource)
+                ],
+                [
+                    item.targetName,
+                    item.version
+                ]
+            ])
+    ])) || changed;
 }
 const generatedToolingDependencyPins = new Map(Object.entries({
     ...ULTRAMODERN_PACKAGE_PINS.appDependencies,
@@ -189,12 +208,12 @@ function mergeGeneratedScript(consumer, framework, canRetireLegacyOxfmtCliExclus
         preservedConsumerSegments: consumerExtras.length > 0
     };
 }
-function rewriteMigratedScriptReferences(scripts) {
+function rewriteMigratedScriptReferences(scripts, preservedArtifacts) {
     let changed = false;
     const pattern = new RegExp(`(scripts/(?:${migratedWorkspaceScriptBasenames.join('|')}))\\.mjs`, 'gu');
     for (const [name, value] of Object.entries(scripts)){
         if ('string' != typeof value) continue;
-        const next = value.replace(pattern, '$1.mts');
+        const next = value.replace(pattern, (original, basename)=>preservedArtifacts?.has(`${basename}.mjs`) ? original : `${basename}.mts`);
         if (next !== value) {
             scripts[name] = next;
             changed = true;
@@ -209,7 +228,7 @@ function updateGeneratedPackageScripts(packageJson, options = {}) {
     const apps = options.apps ?? [];
     const app = apps.find((candidate)=>`${candidate.directory}/package.json` === options.relativePackageFile);
     const isRootPackage = 'package.json' === options.relativePackageFile;
-    if (rewriteMigratedScriptReferences(scripts)) changed = true;
+    if (rewriteMigratedScriptReferences(scripts, options.preservedArtifacts)) changed = true;
     if (isRootPackage) {
         for (const [name, [legacy, portable]] of legacyPortableRootScripts)if (true === options.canRetireLegacyOxfmtCliExclusion && scripts[name] === legacy) {
             scripts[name] = portable;

package/dist/esm/ultramodern-tooling/commands/migrate-strict-effect/pnpm-policy.js

@@ -199,11 +199,7 @@ function reconcilePatchedDependencies(document, includeDrizzleOrmPatch) {
             patchKey(patch),
             patch
         ]));
-    const ownedPackageNames = new Set([
-        ...policy.required,
-        ...policy.conditional,
-        ...policy.stale
-    ].map((patch)=>patch.packageName));
+    const ownedPackageNames = new Set(expectedPatches.map((patch)=>patch.packageName));
     const patchedDependencies = ensureMap(document, 'patchedDependencies');
     for (const [selector, patchPath] of Object.entries(patchedDependencies)){
         const stalePatch = stale.get(selector);
@@ -212,15 +208,13 @@ function reconcilePatchedDependencies(document, includeDrizzleOrmPatch) {
             delete patchedDependencies[selector];
             continue;
         }
-        const parts = packageVersionParts(selector);
-        if (parts && ownedPackageNames.has(parts.packageName) && !expected.has(selector)) {
-            const conditionalPatch = policy.conditional.find((patch)=>patchKey(patch) === selector);
-            if (conditionalPatch && !includeDrizzleOrmPatch && patchPath === conditionalPatch.path) {
-                delete patchedDependencies[selector];
-                continue;
-            }
-            throw new Error(`Framework-owned patch selector ${selector} has unknown provenance.`);
+        const conditionalPatch = policy.conditional.find((patch)=>patchKey(patch) === selector);
+        if (conditionalPatch && !includeDrizzleOrmPatch && patchPath === conditionalPatch.path) {
+            delete patchedDependencies[selector];
+            continue;
         }
+        const parts = packageVersionParts(selector);
+        if (parts && ownedPackageNames.has(parts.packageName) && !expected.has(selector)) throw new Error(`Framework-owned patch selector ${selector} has unknown provenance.`);
     }
     for (const [selector, patchPath] of expected)patchedDependencies[selector] = patchPath;
 }
@@ -511,6 +505,8 @@ async function validateGeneratedPnpmLockReleaseAgePolicy(workspaceRoot, packageS
     const firstPartyTargetNames = new Set(releaseCohort?.packages.map((item)=>item.targetName) ?? []);
     const { document: lockfile } = parsePnpmWorkspaceYaml(node_fs.readFileSync(lockfilePath, 'utf-8'), lockfilePath);
     const closure = discoverReachablePnpmLockReleaseAgeClosure(lockfile);
+    const firstPartySourceNames = new Set(releaseCohort?.packages.map((item)=>item.sourceName) ?? []);
+    for (const tarball of closure.tarballs)if (firstPartyTargetNames.has(tarball.packageName) || firstPartySourceNames.has(tarball.packageName)) throw new Error(`First-party lock candidate ${tarball.packageName} must resolve through the authenticated release cohort, not a tarball URL.`);
     if (closure.unresolved.length > 0) {
         const unresolved = closure.unresolved.slice(0, 20).map((candidate)=>{
             const packageName = candidate.package ?? 'unknown package';

package/dist/esm/ultramodern-tooling/commands/migrate-strict-effect/pnpm-yaml.js

@@ -9,6 +9,11 @@ const integrityPattern = /^sha512-[A-Za-z0-9+/]+={0,2}$/u;
 function isExactSemver(version) {
     return semver.valid(version) === version;
 }
+function isHttpsTarballLocator(value) {
+    if (!value.startsWith('https://') || /[\s()]/u.test(value) || !URL.canParse(value)) return false;
+    const url = new URL(value);
+    return url.href === value && '' === url.username && '' === url.password && '' === url.hash;
+}
 function isYamlRecord(value) {
     return Boolean(value) && 'object' == typeof value && !Array.isArray(value);
 }
@@ -62,7 +67,7 @@ function splitPeerContext(locator) {
     for (const segment of segments){
         if (/^patch_hash=[a-f0-9]{32,128}$/u.test(segment) || /^[a-f0-9]{32,128}$/u.test(segment)) continue;
         const peer = parsePackageKey(segment);
-        if (!peer) return {
+        if (!peer || isHttpsTarballLocator(peer.version)) return {
             unresolved: locator
         };
         peers.push(peer);
@@ -74,11 +79,12 @@ function splitPeerContext(locator) {
 }
 function parsePackageLocator(rawLocator) {
     const locator = rawLocator.replace(/^\//u, '');
-    const separator = locator.lastIndexOf('@');
+    const tarballSeparator = locator.indexOf('@https://');
+    const separator = tarballSeparator > 0 ? tarballSeparator : locator.lastIndexOf('@');
     if (separator <= 0) return;
     const packageName = locator.slice(0, separator);
     const version = locator.slice(separator + 1);
-    if (!exactPackageNamePattern.test(packageName) || !isExactSemver(version)) return;
+    if (!exactPackageNamePattern.test(packageName) || !isExactSemver(version) && !isHttpsTarballLocator(version)) return;
     return {
         packageName,
         version,
@@ -122,6 +128,11 @@ function dependencyIdentity(dependencyName, rawValue) {
     const peerContext = splitPeerContext(value.startsWith('npm:') ? value.slice(4) : value);
     if ('unresolved' in peerContext) return peerContext;
     const { base, peers } = peerContext;
+    if (isHttpsTarballLocator(base) && exactPackageNamePattern.test(dependencyName)) return {
+        packageName: dependencyName,
+        version: base,
+        peers
+    };
     const full = parsePackageLocator(base);
     if (full) return {
         ...full,
@@ -264,13 +275,11 @@ function discoverReachablePnpmLockReleaseAgeClosure(lockfile) {
         const currentPath = shortestIdentityPaths.get(key);
         if (!currentPath || nodePath.length < currentPath.length) shortestIdentityPaths.set(key, nodePath);
     }
+    const tarballs = [];
     const candidates = [
         ...shortestIdentityPaths.entries()
     ].map(([key, path])=>{
-        const [packageName, version] = [
-            key.slice(0, key.lastIndexOf('@')),
-            key.slice(key.lastIndexOf('@') + 1)
-        ];
+        const { packageName, version } = nodes.get(nodeIdsByIdentity.get(key)[0]).identity;
         const packageRecordsForIdentity = packageRecordsByIdentity.get(key);
         if (!packageRecordsForIdentity?.length) return void recordUnresolved({
             packageName,
@@ -278,12 +287,25 @@ function discoverReachablePnpmLockReleaseAgeClosure(lockfile) {
             peers: []
         }, path, 'missing exact SHA-512 lock integrity');
         let integrity;
+        let tarballVersion;
         for (const [packageKey, packageRecord] of packageRecordsForIdentity){
             const resolution = requiredYamlRecord(requiredYamlRecord(packageRecord, `pnpm lockfile package ${packageKey}`).resolution, `pnpm lockfile package ${packageKey} resolution`);
             if ('string' != typeof resolution.integrity || !integrityPattern.test(resolution.integrity)) throw new Error(`pnpm lockfile package ${packageKey} has uncertain registry integrity.`);
             if (integrity && integrity !== resolution.integrity) throw new Error(`pnpm lockfile has conflicting registry integrity for ${key}.`);
             integrity = resolution.integrity;
+            if (isHttpsTarballLocator(version)) {
+                const metadata = requiredYamlRecord(packageRecord, `pnpm lockfile package ${packageKey}`);
+                if (resolution.tarball !== version || 'string' != typeof metadata.version || !isExactSemver(metadata.version) || void 0 !== tarballVersion && tarballVersion !== metadata.version) throw new Error(`pnpm lockfile package ${packageKey} has uncertain tarball identity.`);
+                tarballVersion = metadata.version;
+            }
         }
+        if (void 0 !== tarballVersion) return void tarballs.push({
+            packageName,
+            version: tarballVersion,
+            url: version,
+            integrity: integrity,
+            path
+        });
         return {
             packageName,
             version,
@@ -298,6 +320,7 @@ function discoverReachablePnpmLockReleaseAgeClosure(lockfile) {
     unresolved.sort((left, right)=>JSON.stringify(left).localeCompare(JSON.stringify(right)));
     return {
         candidates,
+        tarballs,
         unresolved
     };
 }

package/dist/esm/ultramodern-tooling/commands/migrate-strict-effect/toolchain-pins.js

@@ -1,10 +1,15 @@
 import node_fs from "node:fs";
 import node_path from "node:path";
+import { semver } from "@modern-js/utils";
 import { ULTRAMODERN_PACKAGE_PINS, ULTRAMODERN_WORKSPACE_POLICY } from "../../../ultramodern-workspace/policy.js";
 const { toolchain: toolchain } = ULTRAMODERN_WORKSPACE_POLICY;
 const retiredRootToolingDependencies = [
     "@typescript/typescript6"
 ];
+function migrationPnpmVersion(value) {
+    const baseline = toolchain.packageManager.version;
+    return 'string' == typeof value && semver.valid(value) && semver.major(value) === semver.major(baseline) && semver.gte(value, baseline) ? value : baseline;
+}
 function isRecord(value) {
     return Boolean(value) && 'object' == typeof value && !Array.isArray(value);
 }
@@ -22,13 +27,14 @@ function updateUltramodernConfigToolchain(config) {
     const workspace = ensureRecord(config, 'workspace', 'workspace');
     const packageManager = ensureRecord(workspace, 'packageManager', 'workspace.packageManager');
     packageManager.name = toolchain.packageManager.name;
-    packageManager.version = toolchain.packageManager.version;
+    packageManager.version = migrationPnpmVersion(packageManager.version);
     const node = ensureRecord(workspace, 'node', 'workspace.node');
     node.version = toolchain.node.version;
     node.engineRange = toolchain.node.engineRange;
 }
 function updateRootPackageToolchain(packageJson) {
-    packageJson.packageManager = `${toolchain.packageManager.name}@${toolchain.packageManager.version}`;
+    const currentVersion = 'string' == typeof packageJson.packageManager ? packageJson.packageManager.match(/^pnpm@([^+]+)(?:\+.*)?$/u)?.[1] : void 0;
+    packageJson.packageManager = `${toolchain.packageManager.name}@${migrationPnpmVersion(currentVersion)}`;
     const engines = ensureRecord(packageJson, 'engines', 'package.json engines');
     engines.node = toolchain.node.engineRange;
     engines.pnpm = toolchain.packageManager.engineRange;
@@ -38,7 +44,7 @@ function updateRootPackageToolchain(packageJson) {
     devDependencies['@types/node'] = ULTRAMODERN_PACKAGE_PINS.rootDevDependencies["@types/node"];
     devDependencies.miniflare = ULTRAMODERN_PACKAGE_PINS.rootDevDependencies.miniflare;
 }
-function updateMiseTools(content) {
+function updateMiseTools(content, pnpmVersion) {
     const lines = content.replace(/\r\n/gu, '\n').split('\n');
     if ('' === lines.at(-1)) lines.pop();
     let toolsStart = lines.findIndex((line)=>/^\s*\[tools\]\s*(?:#.*)?$/u.test(line));
@@ -65,13 +71,15 @@ function updateMiseTools(content) {
         lines[index] = line;
     };
     upsertTool('node', toolchain.node.version);
-    upsertTool('pnpm', toolchain.packageManager.version);
+    upsertTool('pnpm', pnpmVersion);
     return `${lines.join('\n')}\n`;
 }
 function updateGeneratedToolchainFiles(io) {
     const misePath = node_path.join(io.workspaceRoot, '.mise.toml');
     const miseContent = node_fs.existsSync(misePath) ? node_fs.readFileSync(misePath, 'utf-8') : '';
-    io.write(misePath, updateMiseTools(miseContent));
+    const packageJson = JSON.parse(node_fs.readFileSync(node_path.join(io.workspaceRoot, 'package.json'), 'utf8'));
+    const pnpmVersion = migrationPnpmVersion(packageJson.packageManager?.match(/^pnpm@([^+]+)(?:\+.*)?$/u)?.[1]);
+    io.write(misePath, updateMiseTools(miseContent, pnpmVersion));
     const workflowPath = node_path.join(io.workspaceRoot, '.github/workflows/ultramodern-workspace-gates.yml');
     if (!node_fs.existsSync(workflowPath)) return;
     const workflow = node_fs.readFileSync(workflowPath, 'utf-8');