@bleedingdev/modern-js-ultramodern-create 3.9.3-ultramodern.1 → 3.9.3-ultramodern.10

package/README.md

@@ -96,7 +96,7 @@ workspaces declare an engine baseline of Node `>=26` with pnpm `12+`.
 `packageManager`, `.mise.toml`, generated validation, and CI should all agree
 on those values; do not reintroduce Corepack or older pnpm aliases.
 
-The current React dependency cohort also pins `@effect/tsgo@0.45.0`,
+The current React dependency cohort also pins `@effect/tsgo@0.59.0`,
 `@tanstack/react-router@1.170.41`, `@tanstack/router-core@1.171.34`,
 `@tanstack/history@1.162.4`, and the Module Federation integration `2.9.2`
 cohort, `@module-federation/node@2.7.52`. Move these only through the
@@ -120,15 +120,32 @@ pnpm --filter @modern-js/ultramodern-create build
 ```
 
 That command lets Rslib emit runtime modules and declarations together through
-the installed stable TypeScript 7 backend. The same declaration configuration
+the repository's compiler integration. The same declaration configuration
 stays active during `rslib build --watch`. Run
 `pnpm --filter @modern-js/ultramodern-create test` when changing generator behavior; it
 includes a boundary test that scans generator sources, templates, and generated
 workspace output for compiler API imports.
 
-All renderer profiles use exact stable `typescript@7.0.2`. React and Solid apps
-use the generated TS-Go check; Octane apps use `octane-tsc` with their native
-TS7 checker. Modern/Rspack and `@effect/tsgo` also use TS-Go by default.
+Generated workspaces and apps pin `tsrs@0.20.0-ts7.1.0-beta` and
+`@effect/tsgo@0.59.0`. Root postinstall runs
+`ultramodern-create ultramodern compiler-prepare` before skills install.
+The installed tsrs platform metadata selects the official
+`effect-tsgo tsrs --version` readiness check on supported hosts.
+Hosts without a declared native tsrs package use `effect-tsgo tsc --version`
+and print an explicit Effect-Go notice. Missing supported artifacts remain
+fatal. These official proxy commands run the provider's Effect-enabled
+binaries without changing the package store.
+The shared compiler resolver selects the provider's tsrs for generated React and
+Solid checks and Modern/Rspack builds, or Effect-Go on unsupported tsrs hosts.
+The installed typecheck command sets
+`TSRS_CHECKER_ASSIGNMENT` to the caller's explicit value or `go` by default,
+and does not add `--checkers` or `--builders` in build mode. Octane apps retain
+`octane-tsc` for their native TS7 checker.
+All renderer profiles retain exact stable `typescript@7.0.2` for metadata and
+tool dependencies. This is separate from tsrs's embedded TypeScript
+`7.1.0-beta`. Only these exact compiler releases and their declared native
+platform packages receive a release-age exception; the strict 24-hour gate
+still applies to other packages apart from the authenticated release cohort.
 Generated app/package source must not
 depend on compiler API internals. If a future AST utility is needed, keep it
 behind a dedicated TypeScript adapter and test it against stable `typescript`.
@@ -365,6 +382,30 @@ Cloudflare Worker output. The shell consumes vertical UI through Module
 Federation manifests and vertical APIs through generated Effect clients
 exported by the vertical packages.
 
+Shell routes load federated modules through `createLazyComponent` or the
+generated loaders. A route that drives the runtime itself calls
+`loadRemote()` or `loadShare()` on the instance from `getInstance()`
+(`@module-federation/modern-js-v3/runtime`), and only inside the true branch
+of `import.meta.env.MODERN_TARGET === 'browser'`:
+
+```tsx
+import { getInstance } from '@module-federation/modern-js-v3/runtime';
+
+export const loadWidget = () => {
+  if (import.meta.env.MODERN_TARGET === 'browser') {
+    const host = getInstance();
+    if (host !== null) return host.loadRemote('inventory/Widget');
+  }
+  return undefined;
+};
+```
+
+The React composition defines `import.meta.env.MODERN_TARGET` per bundle as
+`'browser'` or `'node'`, the same value as `process.env.MODERN_TARGET`, so the
+server bundle drops the branch. Shell routes must not read `process.env`:
+`pnpm typecheck` rejects it through Effect's `processEnv` rule and
+`pnpm contract:check` rejects it too.
+
 Route metadata is route-owned and colocated in
 `src/routes/**/route.meta.ts`; each file exports `routeMeta`.
 `ultramodern-create ultramodern routes-generate` (run before every app `dev`

package/dist/cjs/ultramodern-tooling/config/normalize.cjs

@@ -165,7 +165,7 @@ function normalizeWorkspaceInputs(workspaceRoot, inputs) {
                     rendererProfile: app.rendererProfile,
                     routerBindings: app.routerBindings,
                     rendererCapabilities: app.rendererCapabilities,
-                    ...'api-only' === app.surfaceProfile || void 0 !== app.renderer && !(0, renderer_profile_cjs_namespaceObject.appSupportsFederation)(app) ? {} : {
+                    ...'api-only' === app.surfaceProfile || void 0 !== app.renderer && ('none' === app.renderer || !(0, renderer_profile_cjs_namespaceObject.getRendererGenerationProfile)(app.renderer).capabilities.federation) ? {} : {
                         moduleFederation: {
                             role: 'shell' === app.kind ? 'host' : 'remote',
                             name: app.mfName,

package/dist/cjs/ultramodern-workspace/add-vertical/shell-files.cjs

@@ -45,7 +45,6 @@ const external_node_fs_namespaceObject = require("node:fs");
 var external_node_fs_default = /*#__PURE__*/ __webpack_require__.n(external_node_fs_namespaceObject);
 const external_node_path_namespaceObject = require("node:path");
 var external_node_path_default = /*#__PURE__*/ __webpack_require__.n(external_node_path_namespaceObject);
-const external_api_cjs_namespaceObject = require("../api.cjs");
 const external_app_files_cjs_namespaceObject = require("../app-files.cjs");
 const external_demo_components_cjs_namespaceObject = require("../demo-components.cjs");
 const external_descriptors_cjs_namespaceObject = require("../descriptors.cjs");
@@ -85,10 +84,7 @@ function shellAppArtifacts(scope, packageSource, enableTailwind, remotes, bridge
             ...Object.fromEntries((0, external_native_federation_cjs_namespaceObject.createNativeFederationArtifacts)(scope, shellHost, remotes).map((artifact)=>[
                     `${shellHost.directory}/${artifact.path}`,
                     artifact.content
-                ])),
-            ...remotes.some(external_descriptors_cjs_namespaceObject.appHasApi) ? {
-                [`${shellHost.directory}/src/api/vertical-clients.ts`]: (0, external_api_cjs_namespaceObject.createShellApiClient)(scope, remotes)
-            } : {}
+                ]))
         };
         return {
             shellHost,
@@ -128,8 +124,7 @@ function shellAppArtifacts(scope, packageSource, enableTailwind, remotes, bridge
         [`${shellHost.directory}/src/routes/[lang]/page.tsx`]: (0, external_demo_components_cjs_namespaceObject.createShellPage)(shellHost, uiRemotes),
         [`${shellHost.directory}/src/routes/vertical-components.tsx`]: (0, external_demo_components_cjs_namespaceObject.createShellRemoteComponents)(shellHost, uiRemotes),
         [`${shellHost.directory}/src/routes/vertical-components.worker.tsx`]: (0, external_demo_components_cjs_namespaceObject.createShellWorkerRemoteComponents)(shellHost, uiRemotes),
-        [`${shellHost.directory}/src/routes/shell-frame.tsx`]: (0, external_app_files_cjs_namespaceObject.createShellFrameComponent)(shellHost),
-        [`${shellHost.directory}/src/api/vertical-clients.ts`]: (0, external_api_cjs_namespaceObject.createShellApiClient)(scope, remotes)
+        [`${shellHost.directory}/src/routes/shell-frame.tsx`]: (0, external_app_files_cjs_namespaceObject.createShellFrameComponent)(shellHost)
     };
     return {
         shellHost,

package/dist/cjs/ultramodern-workspace/api/client.cjs

@@ -28,8 +28,7 @@ var __webpack_require__ = {};
 var __webpack_exports__ = {};
 __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
-    createApiClient: ()=>createApiClient,
-    createShellApiClient: ()=>createShellApiClient
+    createApiClient: ()=>createApiClient
 });
 const external_descriptors_cjs_namespaceObject = require("../descriptors.cjs");
 const external_naming_cjs_namespaceObject = require("../naming.cjs");
@@ -181,43 +180,9 @@ export const ${createName} = (
   );${checkoutCartClientExports}
 `;
 }
-function createShellApiClient(scope, remotes = []) {
-    const exports1 = (0, external_descriptors_cjs_namespaceObject.verticalApiApps)(remotes).map((remote)=>{
-        const stem = (0, external_descriptors_cjs_namespaceObject.resolveApiStem)(remote);
-        const pascalStem = (0, external_naming_cjs_namespaceObject.toPascalCase)(stem);
-        const rpc = 'rpc' === (0, external_descriptors_cjs_namespaceObject.resolveApiProtocol)(remote);
-        const pascalSingular = (0, external_naming_cjs_namespaceObject.toPascalCase)((0, external_names_cjs_namespaceObject.verticalApiErrorStem)(remote));
-        const checkoutCartExports = !rpc && (0, external_checkout_cart_cjs_namespaceObject.serviceHasCheckoutCartState)(remote) ? `  addCheckoutCartItem,
-  clearCheckoutCart,
-  getCheckoutCart,
-  removeCheckoutCartItem,
-  type CheckoutAddCartItemInput,
-  type CheckoutCart,
-  type CheckoutCartLine,
-` : '';
-        if (rpc) return `export {
-  get${pascalStem}Rpc,
-  list${pascalStem}Rpc,
-  make${pascalStem}RpcClient,
-  type ${pascalStem}RpcClientOptions,
-} from '${(0, external_naming_cjs_namespaceObject.packageName)(scope, remote.packageSuffix)}/api/rpc-client';`;
-        return `export {
-${checkoutCartExports}  create${pascalSingular},
-  create${pascalStem}Client,
-  get${pascalSingular},
-  get${pascalStem}Readiness,
-  list${pascalStem},
-  type ${pascalStem}ClientOptions,
-} from '${(0, external_naming_cjs_namespaceObject.packageName)(scope, remote.packageSuffix)}/api/client';`;
-    }).join('\n\n');
-    return exports1 ? `${exports1}\n` : `export const ultramodernVerticalClients = [] as const;
-`;
-}
 exports.createApiClient = __webpack_exports__.createApiClient;
-exports.createShellApiClient = __webpack_exports__.createShellApiClient;
 for(var __rspack_i in __webpack_exports__)if (-1 === [
-    "createApiClient",
-    "createShellApiClient"
+    "createApiClient"
 ].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
 Object.defineProperty(exports, '__esModule', {
     value: true

package/dist/cjs/ultramodern-workspace/api.cjs

@@ -36,7 +36,6 @@ __webpack_require__.d(__webpack_exports__, {
     createRpcClientFile: ()=>rpc_cjs_namespaceObject.createRpcClientFile,
     createRpcContractFile: ()=>rpc_cjs_namespaceObject.createRpcContractFile,
     createSharedApi: ()=>shared_cjs_namespaceObject.createSharedApi,
-    createShellApiClient: ()=>client_cjs_namespaceObject.createShellApiClient,
     rpcPath: ()=>rpc_cjs_namespaceObject.rpcPath,
     verticalApiCreatePayloadSchemaExport: ()=>names_cjs_namespaceObject.verticalApiCreatePayloadSchemaExport,
     verticalApiErrorStem: ()=>names_cjs_namespaceObject.verticalApiErrorStem,
@@ -65,7 +64,6 @@ exports.createRpcApiServiceEntry = __webpack_exports__.createRpcApiServiceEntry;
 exports.createRpcClientFile = __webpack_exports__.createRpcClientFile;
 exports.createRpcContractFile = __webpack_exports__.createRpcContractFile;
 exports.createSharedApi = __webpack_exports__.createSharedApi;
-exports.createShellApiClient = __webpack_exports__.createShellApiClient;
 exports.rpcPath = __webpack_exports__.rpcPath;
 exports.verticalApiCreatePayloadSchemaExport = __webpack_exports__.verticalApiCreatePayloadSchemaExport;
 exports.verticalApiErrorStem = __webpack_exports__.verticalApiErrorStem;
@@ -88,7 +86,6 @@ for(var __rspack_i in __webpack_exports__)if (-1 === [
     "createRpcClientFile",
     "createRpcContractFile",
     "createSharedApi",
-    "createShellApiClient",
     "rpcPath",
     "verticalApiCreatePayloadSchemaExport",
     "verticalApiErrorStem",

package/dist/cjs/ultramodern-workspace/module-federation/config.cjs

@@ -44,12 +44,12 @@ function createAppModernConfig(app, enableTailwind = true) {
     const renderer = (0, external_renderer_profile_cjs_namespaceObject.resolveWorkspaceRenderer)(app);
     if ((0, external_renderer_generations_cjs_namespaceObject.hasNativeAppGeneration)(renderer)) {
         const generation = (0, external_renderer_profile_cjs_namespaceObject.resolveAppGenerationProfile)(app);
-        const exposes = Object.keys(app.exposes ?? {}).length > 0;
-        return `import { defineConfig } from '@modern-js/ultramodern-app-tools';
-${exposes ? "import { createRemoteManifestUrl } from '@modern-js/app-tools-extensions/config';\n" : ''}
+        const authoredAssetPrefix = !generation.capabilities.workers && Object.keys(app.exposes ?? {}).length > 0;
+        return `import { defineConfig${generation.capabilities.workers ? ', presetUltramodernWorkspace' : ''} } from '@modern-js/ultramodern-app-tools';
+${authoredAssetPrefix ? "import { createRemoteManifestUrl } from '@modern-js/app-tools-extensions/config';\n" : ''}
 ${(0, external_descriptors_cjs_namespaceObject.appHasApi)(app) ? "import { bffPlugin } from '@modern-js/plugin-bff-build-extensions';\n" : ''}
 ${enableTailwind ? "import { pluginTailwindcss } from '@rsbuild/plugin-tailwindcss';\n" : ''}
-${exposes ? `// Set ${(0, external_descriptors_cjs_namespaceObject.createCloudflarePublicUrlEnv)(app)} to this remote's public origin when deploying.
+${authoredAssetPrefix ? `// Set ${(0, external_descriptors_cjs_namespaceObject.createCloudflarePublicUrlEnv)(app)} to this remote's public origin when deploying.
 const remoteAddress = createRemoteManifestUrl({
   manifestEnv: ${JSON.stringify((0, external_descriptors_cjs_namespaceObject.createRemoteManifestEnv)(app))},
   publicUrlEnv: ${JSON.stringify((0, external_descriptors_cjs_namespaceObject.createCloudflarePublicUrlEnv)(app))},
@@ -59,10 +59,10 @@ const remoteAddress = createRemoteManifestUrl({
 const assetPrefix = new URL('.', remoteAddress.replace(/^[^@]+@(?=https?:\\/\\/)/u, '')).href;
 
 ` : ''}
-export default defineConfig({
+export default defineConfig(${generation.capabilities.workers ? 'presetUltramodernWorkspace(' : ''}{
 ${enableTailwind ? '  builderPlugins: [pluginTailwindcss()],\n' : ''}  renderer: ${JSON.stringify(renderer)},
 ${(0, external_descriptors_cjs_namespaceObject.appHasApi)(app) ? '  plugins: [bffPlugin()],\n' : ''}
-${exposes ? '  output: { assetPrefix },\n' : ''}
+${authoredAssetPrefix ? '  output: { assetPrefix },\n' : ''}
   server: { port: ${app.port}, ssr: ${generation.capabilities.ssr}${(0, external_descriptors_cjs_namespaceObject.appHasApi)(app) ? `,
     bff: {
       effect: {
@@ -73,7 +73,7 @@ ${'rest' === (0, external_descriptors_cjs_namespaceObject.resolveApiProtocol)(ap
       runtimeFramework: 'effect',
     }` : ''} },
   source: { mainEntryName: 'main' },
-});
+}${generation.capabilities.workers ? `, { appId: ${JSON.stringify(app.id)}, from: import.meta.url })` : ''});
 `;
     }
     const emitsUi = (0, external_descriptors_cjs_namespaceObject.appEmitsBrowserUi)(app);
@@ -104,7 +104,8 @@ ${'rest' === (0, external_descriptors_cjs_namespaceObject.resolveApiProtocol)(ap
             localisedUrls: '            localisedUrls: ultramodernLocalisedUrls as Record<string, Record<string, string>>,\n'
         }) : '',
         bffPlugin: (0, external_descriptors_cjs_namespaceObject.appHasApi)(app) ? '        bffPlugin(),\n' : '',
-        federationPlugin: emitsUi ? '        moduleFederationPlugin(),\n' : ''
+        federationPlugin: emitsUi ? '        moduleFederationPlugin(),\n' : '',
+        renderer: emitsUi ? `      renderer: '${renderer}',\n` : ''
     });
 }
 function createModuleFederationBridgeConfig(enableBridgeRouter) {

package/dist/cjs/ultramodern-workspace/native-app.cjs

@@ -30,7 +30,6 @@ __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
     writeNativeApp: ()=>writeNativeApp
 });
-const external_api_cjs_namespaceObject = require("./api.cjs");
 const write_app_api_cjs_namespaceObject = require("./api/write-app-api.cjs");
 const external_app_files_cjs_namespaceObject = require("./app-files.cjs");
 const external_descriptors_cjs_namespaceObject = require("./descriptors.cjs");
@@ -93,7 +92,6 @@ function writeNativeApp(targetDir, scope, app, packageSource, enableTailwind, re
         resolvedApp: app,
         emitsUi: true
     });
-    if ('shell' === app.kind && remotes.some(external_descriptors_cjs_namespaceObject.appHasApi)) write('src/api/vertical-clients.ts', (0, external_api_cjs_namespaceObject.createShellApiClient)(scope, remotes));
 }
 exports.writeNativeApp = __webpack_exports__.writeNativeApp;
 for(var __rspack_i in __webpack_exports__)if (-1 === [

package/dist/cjs/ultramodern-workspace/native-federation.cjs

@@ -71,7 +71,7 @@ function createNativeFederationArtifacts(scope, app, remotes = []) {
         const relativePath = source.slice(2);
         if (exposedSources.has(relativePath)) continue;
         exposedSources.add(relativePath);
-        const counterPath = external_node_path_default().posix.relative(external_node_path_default().posix.dirname(relativePath), 'src/components/Counter').replace(/^(?!\.)/u, './');
+        const counterPath = external_node_path_default().posix.relative(external_node_path_default().posix.dirname(relativePath), 'octane' === generation.renderer ? 'src/components/counter' : 'src/components/Counter').replace(/^(?!\.)/u, './');
         artifacts.push({
             path: relativePath,
             content: `import { Link } from ${JSON.stringify(adapter.runtime.router)};

package/dist/cjs/ultramodern-workspace/package-json.cjs

@@ -102,7 +102,7 @@ function appDevDependencies(packageSource, enableTailwind, app) {
     const { '@rsbuild/plugin-tailwindcss': tailwindPluginVersion, tailwindcss: tailwindVersion, ...always } = external_versions_cjs_namespaceObject.ULTRAMODERN_PACKAGE_PINS.appDevDependencies;
     const renderer = (0, external_renderer_profile_cjs_namespaceObject.resolveWorkspaceRenderer)(app);
     const generationProfile = (0, external_renderer_profile_cjs_namespaceObject.resolveAppGenerationProfile)(app);
-    const selectedAlways = 'react' === renderer ? always : Object.fromEntries(Object.entries(always).filter(([name])=>'@types/react' !== name && '@types/react-dom' !== name && 'zephyr-rspack-plugin' !== name && 'wrangler' !== name));
+    const selectedAlways = 'react' === renderer ? always : Object.fromEntries(Object.entries(always).filter(([name])=>'@types/react' !== name && '@types/react-dom' !== name && 'zephyr-rspack-plugin' !== name && ('wrangler' !== name || generationProfile?.capabilities.workers === true)));
     return {
         ...(0, external_descriptors_cjs_namespaceObject.appHasApi)(app) || 'shell' === app.kind && 'react' === renderer ? {
             '@modern-js/plugin-bff-build-extensions': frameworkRequest(packageSource)
@@ -128,8 +128,10 @@ function createRootPackageJson(scope, packageSource, remotes = [], bridge, addit
             ...additionalShells,
             ...remotes
         ];
+        const workerApps = apps.filter((app)=>(0, external_renderer_profile_cjs_namespaceObject.resolveAppGenerationProfile)(app)?.capabilities.workers);
+        const workerFilters = workerApps.map((app)=>`--filter ${(0, external_naming_cjs_namespaceObject.packageName)(scope, app.packageSuffix)}`).join(' ');
         if (bridge) throw new Error(`Renderer ${renderer} does not support React bridge configuration.`);
-        const rootDevDependencies = Object.fromEntries(Object.entries(external_versions_cjs_namespaceObject.ULTRAMODERN_PACKAGE_PINS.rootDevDependencies).filter(([name])=>'wrangler' !== name && 'zephyr-agent' !== name && 'miniflare' !== name));
+        const rootDevDependencies = Object.fromEntries(Object.entries(external_versions_cjs_namespaceObject.ULTRAMODERN_PACKAGE_PINS.rootDevDependencies).filter(([name])=>('wrangler' !== name || workerApps.length > 0) && 'zephyr-agent' !== name && 'miniflare' !== name));
         return {
             private: true,
             name: scope,
@@ -144,6 +146,11 @@ function createRootPackageJson(scope, packageSource, remotes = [], bridge, addit
                 dev: `pnpm --parallel ${apps.map((app)=>`--filter ${(0, external_naming_cjs_namespaceObject.packageName)(scope, app.packageSuffix)}`).join(' ')} dev`,
                 'dev:shell': `pnpm --filter ${(0, external_naming_cjs_namespaceObject.packageName)(scope, primaryShell.packageSuffix)} dev`,
                 build: 'pnpm -r --filter "./apps/*" --filter "./verticals/*" run build',
+                ...workerApps.length > 0 ? {
+                    'cloudflare:build': `pnpm -r ${workerFilters} run cloudflare:build`,
+                    'cloudflare:deploy': `pnpm -r ${workerFilters} run cloudflare:deploy`,
+                    'cloudflare:preview': `pnpm --parallel ${workerFilters} run cloudflare:preview`
+                } : {},
                 typecheck: 'pnpm -r --filter "./packages/*" run typecheck && pnpm -r --filter "./apps/*" --filter "./verticals/*" run typecheck',
                 'contract:check': 'ultramodern-create ultramodern validate',
                 check: 'pnpm format:check && pnpm lint && pnpm typecheck && pnpm contract:check',
@@ -312,9 +319,7 @@ function createAppPackage(scope, app, packageSource, enableTailwind, remotes = [
             './api': './shared/api.ts',
             './api/client': `./${clientDirectory}/${app.api.stem}-client.ts`
         });
-    } else if ('shell' === app.kind && ('react' === (0, external_renderer_profile_cjs_namespaceObject.resolveWorkspaceRenderer)(app) || (0, external_descriptors_cjs_namespaceObject.verticalApiApps)(remotes).length > 0)) Object.assign(packageExports, {
-        './api/clients': './src/api/vertical-clients.ts'
-    });
+    }
     if (Object.keys(packageExports).length > 0) packageJson.exports = packageExports;
     return packageJson;
 }

package/dist/cjs/ultramodern-workspace/patch-inventory.cjs

@@ -28,10 +28,28 @@ var __webpack_require__ = {};
 var __webpack_exports__ = {};
 __webpack_require__.r(__webpack_exports__);
 const __rspack_default_export = [
+    {
+        packageName: '@tanstack/router-core',
+        version: '1.171.34',
+        path: 'patches/@tanstack__router-core@1.171.34.patch',
+        sha256: '0e526bc0a1fd038c459fbf45b2b62da81f7f2516176b585f41fed7098ac4abbb',
+        repository: true,
+        workspace: null,
+        reason: 'Let native localized masks inherit the canonical resolved search without rerunning middleware or validation, including public types and emitted CJS/ESM source maps. Applies only to the accepted Octane router-core 1.171.34 closure during local qualification. Generated workspaces remain patch-free; retire when their mature accepted router sidecar or upstream release supplies the same runtime and declaration contract.'
+    },
+    {
+        packageName: '@tanstack/router-core',
+        version: '1.171.37',
+        path: 'patches/@tanstack__router-core@1.171.37.patch',
+        sha256: '6ffa70914ed338f3cb56d3cd1f526e35286e09f287ecf48ee6dbc1aa18305458',
+        repository: true,
+        workspace: null,
+        reason: 'Let native localized masks inherit the canonical resolved search without rerunning middleware or validation, preserving current location caching and SSR rewrite behavior, public types and emitted CJS/ESM source maps. Applies only to Modern router-core 1.171.37 during local qualification. Generated workspaces remain patch-free; retire when their mature accepted router sidecar or upstream release supplies the same runtime and declaration contract.'
+    },
     {
         packageName: 'ultracite',
-        version: '7.12.2',
-        path: 'patches/ultracite@7.12.2.patch',
+        version: '8.0.1',
+        path: 'patches/ultracite@8.0.1.patch',
         sha256: 'a18b2c7be68a6823a793f0def8ce13d7655c67c56c2200978a2be600cb29ba74',
         repository: false,
         workspace: null,

package/dist/cjs/ultramodern-workspace/policy.cjs

@@ -264,9 +264,14 @@ const ULTRAMODERN_WORKSPACE_POLICY = {
     pnpm: {
         overrides: {
             'braces@>=3.0.0 <3.0.4': `npm:@bleedingdev/braces@${external_versions_cjs_namespaceObject.BRACES_FORK_VERSION}`,
-            'sharp@>=0.35.0 <0.35.5': external_versions_cjs_namespaceObject.SHARP_VERSION
+            'sharp@>=0.35.0 <0.35.5': external_versions_cjs_namespaceObject.SHARP_VERSION,
+            'undici@>=7.0.0 <7.30.1': '7.30.1',
+            'undici@>=8.0.0 <8.12.2': '8.12.2',
+            'body-parser@>=2.0.0 <2.4.0': '2.4.0',
+            'dompurify@>=3.0.0 <3.4.17': '3.4.17'
         },
         minimumReleaseAge: 1440,
+        minimumReleaseAgeExclude: external_versions_cjs_namespaceObject.COMPILER_RELEASE_AGE_EXCEPTIONS,
         minimumReleaseAgeStrict: true,
         minimumReleaseAgeIgnoreMissingTime: false,
         trustPolicy: 'no-downgrade',

package/dist/cjs/ultramodern-workspace/tooling-command-catalog.cjs

@@ -41,6 +41,11 @@ const generatedToolingCommands = [
         templatePath: "templates/workspace-scripts/ultramodern-typecheck.mjs",
         cwd: 'invocation'
     }),
+    defineToolingCommand({
+        id: 'compilerPrepare',
+        command: 'compiler-prepare',
+        templatePath: "templates/workspace-scripts/ultramodern-compiler-prepare.mjs"
+    }),
     defineToolingCommand({
         id: 'mfTypes',
         command: 'mf-types',

package/dist/cjs/ultramodern-workspace/validation/architecture.cjs

@@ -47,6 +47,7 @@ var external_node_path_default = /*#__PURE__*/ __webpack_require__.n(external_no
 const external_renderer_generations_cjs_namespaceObject = require("../renderer-generations.cjs");
 const external_renderer_profile_cjs_namespaceObject = require("../renderer-profile.cjs");
 const external_assertions_cjs_namespaceObject = require("./assertions.cjs");
+const external_native_shell_runtime_cjs_namespaceObject = require("./native-shell-runtime.cjs");
 const external_renderer_cjs_namespaceObject = require("./renderer.cjs");
 function assertCompilerArchitecture(root, workspaceValidationContract) {
     const fullStackVerticals = workspaceValidationContract.apps.filter((app)=>'shell' !== app.kind);
@@ -105,12 +106,16 @@ function assertCompilerArchitecture(root, workspaceValidationContract) {
                 ]
             });
         };
-        const parseCompilerInput = (absolutePath)=>{
+        const compilerInput = (absolutePath)=>{
             const project = compilerSnapshot?.getDefaultProjectForFile(absolutePath);
             const sourceFile = project?.program.getSourceFile(absolutePath);
-            (0, external_assertions_cjs_namespaceObject.assert)(void 0 !== sourceFile, `Native TypeScript compiler could not parse ${external_node_path_default().relative(root, absolutePath)}`);
-            return sourceFile;
+            (0, external_assertions_cjs_namespaceObject.assert)(void 0 !== project && void 0 !== sourceFile, `Native TypeScript compiler could not parse ${external_node_path_default().relative(root, absolutePath)}`);
+            return {
+                checker: project.checker,
+                sourceFile
+            };
         };
+        const parseCompilerInput = (absolutePath)=>compilerInput(absolutePath).sourceFile;
         const nodeName = (node)=>{
             if (!node) return;
             if (typescript.isIdentifier(node) || typescript.isPrivateIdentifier(node) || typescript.isStringLiteralLikeNode(node) || typescript.isNumericLiteral(node)) return node.text;
@@ -198,6 +203,12 @@ function assertCompilerArchitecture(root, workspaceValidationContract) {
             const accessPath = propertyAccessPath(node.expression);
             return void 0 !== accessPath && names.has(accessPath.at(-1));
         };
+        const calleeName = (node)=>{
+            let callee = node.expression;
+            while(typescript.isParenthesizedExpression(callee) || typescript.isNonNullExpression(callee) || typescript.isAsExpression(callee))callee = callee.expression;
+            if (typescript.isIdentifier(callee)) return callee.text;
+            if (typescript.isPropertyAccessExpression(callee)) return callee.name.text;
+        };
         const objectLiteralProperty = (objectLiteral, name)=>objectLiteral.properties.find((property)=>typescript.isPropertyAssignment(property) && nodeName(property.name) === name);
         const moduleFederationConfigArgument = (sourceFile)=>{
             let argument;
@@ -345,11 +356,12 @@ function assertCompilerArchitecture(root, workspaceValidationContract) {
                 ...configFiles.map((relativePath)=>external_node_path_default().join(root, relativePath)).filter((absolutePath)=>external_node_fs_default().existsSync(absolutePath))
             ]);
             for (const absolutePath of checkedFiles){
-                const sourceFile = parseCompilerInput(absolutePath);
+                const { checker, sourceFile } = compilerInput(absolutePath);
                 const isShellRoute = shellRouteDirectories.some((relativeDirectory)=>{
                     const absoluteDirectory = external_node_path_default().join(root, relativeDirectory);
                     return absolutePath.startsWith(absoluteDirectory + external_node_path_default().sep);
                 });
+                const shellRuntime = isShellRoute ? (0, external_native_shell_runtime_cjs_namespaceObject.createNativeShellRuntimeEvidence)(typescript, typescriptApi, checker, sourceFile) : void 0;
                 const moduleFederationAppPath = moduleFederationConfigAppPaths.get(absolutePath);
                 const nativeFederation = void 0 === moduleFederationAppPath ? void 0 : nativeModuleFederationApps.get(moduleFederationAppPath);
                 const tailwindFactories = new Set();
@@ -372,6 +384,12 @@ function assertCompilerArchitecture(root, workspaceValidationContract) {
                         ].includes(imported)) presetFactories.add(binding.name.text);
                     }
                 }
+                const manualLoadingCallees = new Set([
+                    'hydrateRoot',
+                    'loadRemote',
+                    'loadShare',
+                    ...nativeRemoteLoaders
+                ]);
                 const modernConfigApp = workspaceValidationContract.apps.find((app)=>absolutePath === external_node_path_default().join(root, app.path, 'modern.config.ts'));
                 let insideDefaultExport = false;
                 const visit = (node)=>{
@@ -399,7 +417,8 @@ function assertCompilerArchitecture(root, workspaceValidationContract) {
                     if ((0, external_assertions_cjs_namespaceObject.sameJson)(accessPath, [
                         'process',
                         'env'
-                    ])) compilerFailure(sourceFile, node, 'framework config API direct-process-env-access', 'Generated config must use the framework config environment API instead of process.env.', 'use getBuildConfigEnvironment');
+                    ])) compilerFailure(sourceFile, node, 'framework config API direct-process-env-access', isShellRoute ? 'Shell routes must not read process.env.' : 'Generated config must use the framework config environment API instead of process.env.', isShellRoute ? 'branch on import.meta.env.MODERN_TARGET for the build target' : 'use getBuildConfigEnvironment');
+                    if (!isShellRoute && (0, external_native_shell_runtime_cjs_namespaceObject.isBuildTargetAccess)(typescript, node)) compilerFailure(sourceFile, node, 'framework config API build-target-outside-bundle', 'Config runs in Node, where the framework defines no import.meta.env.MODERN_TARGET.', 'use getBuildConfigEnvironment');
                     if (typescript.isIdentifier(node) && 'ULTRAMODERN_ZEPHYR' === node.text) compilerFailure(sourceFile, node, 'zephyr gating ultramodern-zephyr-environment-gate', 'Generated Zephyr integration must not be gated through ULTRAMODERN_ZEPHYR.', 'use Zephyr native deploy-token behavior');
                     if (typescript.isPropertyAssignment(node) || typescript.isShorthandPropertyAssignment(node)) {
                         const property = nodeName(node.name);
@@ -407,12 +426,7 @@ function assertCompilerArchitecture(root, workspaceValidationContract) {
                     }
                     if (isShellRoute) {
                         if (typescript.isJsxOpeningElement(node) && 'a' === jsxTagName(node.tagName) && void 0 !== jsxAttribute(node.attributes, 'onClick')) compilerFailure(sourceFile, node, 'shell routing synthetic-anchor-click-interception', 'Shell routing must not intercept anchor clicks synthetically.', 'use the router Link primitive');
-                        if (isCallNamed(node, new Set([
-                            'hydrateRoot',
-                            'loadRemote',
-                            'loadShare',
-                            ...nativeRemoteLoaders
-                        ])) && !nativeLoaderCalls.has(node)) compilerFailure(sourceFile, node, 'module federation native loading', 'Shell routing must use framework Module Federation loading primitives.', 'remove manual hydration or remote-loading wrappers');
+                        if (typescript.isCallExpression(node) && manualLoadingCallees.has(calleeName(node) ?? '') && !nativeLoaderCalls.has(node) && !shellRuntime?.isBrowserFederationMemberLoad(node)) compilerFailure(sourceFile, node, 'module federation native loading', 'Shell routing must use framework Module Federation loading primitives.', 'remove manual hydration or remote-loading wrappers');
                         if (typescript.isBinaryExpression(node) && node.operatorToken.kind === typescript.SyntaxKind.EqualsToken && propertyAccessPath(node.left)?.slice(0, 2).join('.') === 'window.location' || typescript.isCallExpression(node) && propertyAccessPath(node.expression)?.slice(0, 2).join('.') === 'window.location') compilerFailure(sourceFile, node, 'shell routing window-location-navigation', 'Shell routing must use router navigation instead of window.location.', 'use the router navigation primitive');
                     }
                     node.forEachChild(visit);

package/dist/cjs/ultramodern-workspace/validation/native-shell-runtime.cjs

@@ -0,0 +1,117 @@
+"use strict";
+var __webpack_require__ = {};
+(()=>{
+    __webpack_require__.d = (exports1, getters, values)=>{
+        var define = (defs, kind)=>{
+            for(var key in defs)if (__webpack_require__.o(defs, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+                enumerable: true,
+                [kind]: defs[key]
+            });
+        };
+        define(getters, "get");
+        define(values, "value");
+    };
+})();
+(()=>{
+    __webpack_require__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+})();
+(()=>{
+    __webpack_require__.r = (exports1)=>{
+        if ("u" > typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
+            value: 'Module'
+        });
+        Object.defineProperty(exports1, '__esModule', {
+            value: true
+        });
+    };
+})();
+var __webpack_exports__ = {};
+__webpack_require__.r(__webpack_exports__);
+const FEDERATION_RUNTIME = '@module-federation/modern-js-v3/runtime';
+const FEDERATION_MEMBER_LOADERS = new Set([
+    'loadRemote',
+    'loadShare'
+]);
+function isBuildTargetAccess(typescript, node) {
+    if (!typescript.isPropertyAccessExpression(node) || void 0 !== node.questionDotToken || 'MODERN_TARGET' !== node.name.text) return false;
+    const env = node.expression;
+    return typescript.isPropertyAccessExpression(env) && void 0 === env.questionDotToken && 'env' === env.name.text && typescript.isMetaProperty(env.expression) && env.expression.keywordToken === typescript.SyntaxKind.ImportKeyword && 'meta' === env.expression.name.text;
+}
+function createNativeShellRuntimeEvidence(typescript, typescriptApi, checker, sourceFile) {
+    const unwrapParentheses = (node)=>{
+        while(typescript.isParenthesizedExpression(node))node = node.expression;
+        return node;
+    };
+    const isBuildTargetLiteral = (node)=>typescript.isStringLiteral(node) && ('browser' === node.text || 'node' === node.text);
+    const buildTargetComparison = (node)=>{
+        node = unwrapParentheses(node);
+        if (!typescript.isBinaryExpression(node) || node.operatorToken.kind !== typescript.SyntaxKind.EqualsEqualsEqualsToken) return;
+        const literal = isBuildTargetAccess(typescript, node.left) ? node.right : isBuildTargetAccess(typescript, node.right) ? node.left : void 0;
+        return void 0 !== literal && isBuildTargetLiteral(literal) ? literal.text : void 0;
+    };
+    const conjuncts = (node)=>{
+        node = unwrapParentheses(node);
+        return typescript.isBinaryExpression(node) && node.operatorToken.kind === typescript.SyntaxKind.AmpersandAmpersandToken ? [
+            ...conjuncts(node.left),
+            ...conjuncts(node.right)
+        ] : [
+            node
+        ];
+    };
+    const requiresBrowserTarget = (condition)=>conjuncts(condition).some((conjunct)=>'browser' === buildTargetComparison(conjunct));
+    const isBrowserGuarded = (node)=>{
+        for(let child = node; void 0 !== child.parent; child = child.parent){
+            const parent = child.parent;
+            if (typescript.isIfStatement(parent) && parent.thenStatement === child && requiresBrowserTarget(parent.expression)) return true;
+            if (typescript.isConditionalExpression(parent) && parent.whenTrue === child && requiresBrowserTarget(parent.condition)) return true;
+        }
+        return false;
+    };
+    let federationInstanceTypeIds;
+    const federationInstanceTypes = ()=>{
+        if (void 0 !== federationInstanceTypeIds) return federationInstanceTypeIds;
+        const typeIds = new Set();
+        const recordRuntime = (specifier)=>{
+            const runtime = checker.getSymbolAtLocation(specifier);
+            const getInstance = void 0 === runtime ? void 0 : checker.getMemberInModuleExports(runtime, 'getInstance');
+            const getInstanceType = void 0 === getInstance ? void 0 : checker.getTypeOfSymbol(getInstance);
+            if (void 0 === getInstanceType) return;
+            for (const signature of checker.getSignaturesOfType(getInstanceType, typescriptApi.SignatureKind.Call)){
+                const returnType = checker.getReturnTypeOfSignature(signature);
+                const instanceType = void 0 === returnType ? void 0 : checker.getNonNullableType(returnType);
+                if (void 0 !== instanceType && instanceType.getSymbol()?.name === 'ModuleFederation') typeIds.add(instanceType.id);
+            }
+        };
+        const visit = (node)=>{
+            if (typescript.isImportDeclaration(node) && typescript.isStringLiteralLikeNode(node.moduleSpecifier) && node.moduleSpecifier.text === FEDERATION_RUNTIME && node.importClause?.phaseModifier !== typescript.SyntaxKind.TypeKeyword) recordRuntime(node.moduleSpecifier);
+            else if (typescript.isCallExpression(node) && node.expression.kind === typescript.SyntaxKind.ImportKeyword && 1 === node.arguments.length && typescript.isStringLiteralLikeNode(node.arguments[0]) && node.arguments[0].text === FEDERATION_RUNTIME) recordRuntime(node.arguments[0]);
+            node.forEachChild(visit);
+        };
+        visit(sourceFile);
+        federationInstanceTypeIds = typeIds;
+        return typeIds;
+    };
+    const isBrowserFederationMemberLoad = (node)=>{
+        if (!typescript.isCallExpression(node)) return false;
+        const callee = unwrapParentheses(node.expression);
+        if (!typescript.isPropertyAccessExpression(callee) || !FEDERATION_MEMBER_LOADERS.has(callee.name.text)) return false;
+        const receiverType = checker.getTypeAtLocation(callee.expression);
+        return void 0 !== receiverType && federationInstanceTypes().has(receiverType.id) && isBrowserGuarded(node);
+    };
+    return {
+        isBrowserFederationMemberLoad
+    };
+}
+__webpack_require__.d(__webpack_exports__, {
+    createNativeShellRuntimeEvidence: ()=>createNativeShellRuntimeEvidence,
+    isBuildTargetAccess: ()=>isBuildTargetAccess
+});
+exports.createNativeShellRuntimeEvidence = __webpack_exports__.createNativeShellRuntimeEvidence;
+exports.isBuildTargetAccess = __webpack_exports__.isBuildTargetAccess;
+for(var __rspack_i in __webpack_exports__)if (-1 === [
+    "createNativeShellRuntimeEvidence",
+    "isBuildTargetAccess"
+].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
+Object.defineProperty(exports, '__esModule', {
+    value: true
+});