@fulgurjs/federation 2.0.2 → 2.1.0

package/dist/index.js

@@ -1,15 +1,43 @@
 import {
   RUNTIME_VERSION
-} from "./chunk-UDLQALHC.js";
+} from "./chunk-RP6HNIQT.js";
 
 // src/index.ts
-import path5 from "path";
+import path6 from "path";
 import { createRequire as createRequire2 } from "module";
 
 // src/options.ts
 import { createRequire } from "module";
 import fs from "fs";
 import path from "path";
+
+// src/dev-cors.ts
+function normalizeDevCorsOrigins(input) {
+  if (input === void 0 || input === "*") return { ok: true, value: input };
+  if (!Array.isArray(input) || input.length === 0) {
+    return { ok: false, reason: '\u5FC5\u987B\u662F "*" \u6216\u975E\u7A7A\u6570\u7EC4' };
+  }
+  for (const item of input) {
+    if (typeof item !== "string" || !/^https?:\/\/[^/]+$/i.test(item)) {
+      return { ok: false, reason: `\u6765\u6E90\u5FC5\u987B\u662F http(s)://host[:port] \u5F62\u6001\uFF08\u65E0\u8DEF\u5F84\uFF09\uFF0Cgot: ${JSON.stringify(item)}` };
+    }
+  }
+  return { ok: true, value: input };
+}
+function corsHeadersFor(origin, allowed) {
+  if (allowed === void 0 || allowed === "*") {
+    return { "Access-Control-Allow-Origin": "*" };
+  }
+  if (!origin || !allowed.includes(origin)) return {};
+  return { "Access-Control-Allow-Origin": origin, Vary: "Origin" };
+}
+function isNonLoopbackHost(host) {
+  if (host === void 0 || host === false) return false;
+  const h = host === true ? "0.0.0.0" : String(host);
+  return !["localhost", "127.0.0.1", "::1", "[::1]"].includes(h.toLowerCase());
+}
+
+// src/options.ts
 var DEFAULT_FILENAME = "fulgurjs-remoteEntry.js";
 var RUNTIME_VIRTUAL_ID = "virtual:fulgurjs-runtime";
 var RUNTIME_PROXY_VIRTUAL_ID = "virtual:fulgurjs-runtime-proxy";
@@ -264,6 +292,41 @@ function validateOptions(options) {
   // or split: { '${key}': { dev: 'http://localhost:5101', prod: '/${key}' } }`
       );
     }
+    if (cfg.timeout !== void 0 && (typeof cfg.timeout !== "number" || !Number.isFinite(cfg.timeout) || cfg.timeout <= 0)) {
+      configError(
+        `CFG-009: remotes["${key}"].timeout must be a finite positive number (ms)`,
+        cfg.timeout,
+        "e.g. 15000\uFF08\u7701\u7565\u7528\u9ED8\u8BA4 15s\uFF09",
+        `remotes: { '${key}': { external: '\u2026', timeout: 15000 } }`
+      );
+    }
+    if (cfg.retries !== void 0 && (typeof cfg.retries !== "number" || !Number.isInteger(cfg.retries) || cfg.retries < 0 || cfg.retries > 10)) {
+      configError(
+        `CFG-009: remotes["${key}"].retries must be an integer in 0..10`,
+        cfg.retries,
+        "e.g. 2\uFF08\u7701\u7565\u7528\u9ED8\u8BA4 2\uFF1B\u4E0A\u9650 10 \u9632\u9000\u907F\u98CE\u66B4\uFF09",
+        `remotes: { '${key}': { external: '\u2026', retries: 2 } }`
+      );
+    }
+    const brk = cfg.breaker;
+    if (brk) {
+      if (brk.threshold !== void 0 && (typeof brk.threshold !== "number" || !Number.isFinite(brk.threshold) || brk.threshold <= 0)) {
+        configError(
+          `CFG-009: remotes["${key}"].breaker.threshold must be a finite positive number`,
+          brk.threshold,
+          "e.g. 5\uFF08\u8FDE\u7EED\u5931\u8D25 5 \u6B21\u540E\u7194\u65AD\uFF09",
+          `remotes: { '${key}': { external: '\u2026', breaker: { threshold: 5, resetMs: 30000 } } }`
+        );
+      }
+      if (brk.resetMs !== void 0 && (typeof brk.resetMs !== "number" || !Number.isFinite(brk.resetMs) || brk.resetMs <= 0)) {
+        configError(
+          `CFG-009: remotes["${key}"].breaker.resetMs must be a finite positive number (ms)`,
+          brk.resetMs,
+          "e.g. 30000\uFF08\u7194\u65AD 30s \u540E\u534A\u5F00\uFF09",
+          `remotes: { '${key}': { external: '\u2026', breaker: { threshold: 5, resetMs: 30000 } } }`
+        );
+      }
+    }
     for (const slot of ["dev", "prod", "external"]) {
       const v = cfg[slot];
       if (v !== void 0 && typeof v !== "string") {
@@ -282,6 +345,23 @@ function validateOptions(options) {
       }
     }
   }
+  const corsCheck = normalizeDevCorsOrigins(options.devCorsOrigins);
+  if (!corsCheck.ok) {
+    configError(
+      `CFG-010: devCorsOrigins ${corsCheck.reason}`,
+      options.devCorsOrigins,
+      `'*'\uFF08\u5168\u653E\u5F00\uFF09\u6216\u6765\u6E90 allowlist \u6570\u7EC4`,
+      `devCorsOrigins: ['http://localhost:5100', 'http://127.0.0.1:5100']`
+    );
+  }
+  if (options.devFsRoot !== void 0 && typeof options.devFsRoot !== "boolean") {
+    configError(
+      "`devFsRoot` must be a boolean",
+      options.devFsRoot,
+      "true\uFF08dev manifest \u643A\u5E26 fsRoot\uFF0C\u73B0\u72B6\u9ED8\u8BA4\uFF09\u6216 false\uFF08\u4E0D\u66B4\u9732\u672C\u673A\u8DEF\u5F84\uFF09",
+      `devFsRoot: false`
+    );
+  }
 }
 function normalizeOptions(options, root, command) {
   const warnings = [];
@@ -353,7 +433,9 @@ function normalizeOptions(options, root, command) {
     pkgDependencies,
     warnings,
     // dev 改写开关：默认纯 remote 参与 shared 协商，宿主（有 remotes）不参与；可显式覆盖
-    devSharedSelf: options.devSharedSelf ?? remotes.length === 0
+    devSharedSelf: options.devSharedSelf ?? remotes.length === 0,
+    devCorsOrigins: options.devCorsOrigins,
+    devFsRoot: options.devFsRoot ?? true
   };
 }
 
@@ -362,6 +444,145 @@ import { init as initLexer, parse } from "es-module-lexer";
 import MagicString from "magic-string";
 import path2 from "path";
 
+// src/manifest.ts
+var MANIFEST_SCHEMA_VERSION = 1;
+var isPlainObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+function validAssetRef(v) {
+  if (typeof v !== "string" || v.length === 0) return false;
+  if (/[\s\u0000-\u001f]/.test(v)) return false;
+  if (/^https?:\/\/[^/@\s]+:[^/@\s]+@/.test(v)) return false;
+  return true;
+}
+function validExposeName(v) {
+  return typeof v === "string" && /^\.[\w./-]+$/.test(v);
+}
+function parseManifest(input) {
+  const issues = [];
+  if (!isPlainObject(input)) {
+    return { issues: [{ field: "$", message: "manifest \u5FC5\u987B\u662F JSON \u5BF9\u8C61", got: typeof input }] };
+  }
+  const m = input;
+  let schemaVersion = MANIFEST_SCHEMA_VERSION;
+  if (m.schemaVersion !== void 0) {
+    if (typeof m.schemaVersion !== "number" || !Number.isInteger(m.schemaVersion)) {
+      issues.push({ field: "schemaVersion", message: "\u5FC5\u987B\u662F\u6574\u6570", got: m.schemaVersion });
+    } else if (m.schemaVersion !== MANIFEST_SCHEMA_VERSION) {
+      return {
+        issues: [
+          {
+            field: "schemaVersion",
+            message: `\u4E0D\u652F\u6301\u7684 manifest \u4E3B\u7248\u672C\uFF08\u5F53\u524D\u6D88\u8D39\u7AEF\u652F\u6301 ${MANIFEST_SCHEMA_VERSION}\uFF09`,
+            got: m.schemaVersion
+          }
+        ],
+        unsupportedVersion: m.schemaVersion
+      };
+    }
+  }
+  if (typeof m.name !== "string" || m.name.length === 0) {
+    issues.push({ field: "name", message: "\u5FC5\u987B\u662F\u975E\u7A7A\u5B57\u7B26\u4E32", got: m.name });
+  }
+  const exposes = m.exposes;
+  const shared = m.shared;
+  const sharedIssues = validateShared(shared);
+  issues.push(...sharedIssues);
+  if (Array.isArray(exposes)) {
+    if (m.devServer !== true) {
+      issues.push({ field: "devServer", message: "dev \u6570\u7EC4\u5F62\u6001 exposes \u5FC5\u987B\u4F34\u968F devServer: true", got: m.devServer });
+    }
+    if (typeof m.base !== "string" || !/^\/(?:.*\/)?$/.test(m.base)) {
+      issues.push({ field: "base", message: "\u5FC5\u987B\u662F\u4EE5 / \u5F00\u5934\u4E14 / \u7ED3\u5C3E\u7684\u8DEF\u5F84", got: m.base });
+    }
+    if (!validAssetRef(m.entry)) {
+      issues.push({ field: "entry", message: "\u5FC5\u987B\u662F\u5408\u6CD5\u8D44\u6E90\u5730\u5740", got: m.entry });
+    }
+    for (const [i, e] of exposes.entries()) {
+      if (!isPlainObject(e)) {
+        issues.push({ field: `exposes[${i}]`, message: "\u5FC5\u987B\u662F\u5BF9\u8C61", got: typeof e });
+        continue;
+      }
+      if (!validExposeName(e.name)) {
+        issues.push({ field: `exposes[${i}].name`, message: '\u5FC5\u987B\u662F "./xxx" \u5F62\u6001\u7684 expose \u540D', got: e.name });
+      }
+      if (typeof e.src !== "string" || e.src.length === 0) {
+        issues.push({ field: `exposes[${i}].src`, message: "dev \u5F62\u6001\u5FC5\u987B\u63D0\u4F9B\u6E90\u7801\u76F8\u5BF9\u8DEF\u5F84", got: e.src });
+      }
+      if (!validAssetRef(e.file)) {
+        issues.push({ field: `exposes[${i}].file`, message: "\u5FC5\u987B\u662F\u53EF\u8BF7\u6C42\u7684\u6A21\u5757\u5730\u5740", got: e.file });
+      }
+    }
+  } else if (isPlainObject(exposes)) {
+    if (!validAssetRef(m.entry)) {
+      issues.push({ field: "entry", message: "\u5FC5\u987B\u662F\u5408\u6CD5\u8D44\u6E90\u5730\u5740\uFF08\u76F8\u5BF9\u57FA\u51C6 = \u6240\u5728\u76EE\u5F55\uFF09", got: m.entry });
+    }
+    for (const [key, v] of Object.entries(exposes)) {
+      if (!validExposeName(key)) {
+        issues.push({ field: `exposes["${key}"]`, message: '\u952E\u5FC5\u987B\u662F "./xxx" \u5F62\u6001\u7684 expose \u540D' });
+      }
+      if (!isPlainObject(v)) {
+        issues.push({ field: `exposes["${key}"]`, message: "\u503C\u5FC5\u987B\u662F\u5BF9\u8C61", got: typeof v });
+        continue;
+      }
+      if (!validAssetRef(v.file)) {
+        issues.push({ field: `exposes["${key}"].file`, message: "\u5FC5\u987B\u662F\u8D44\u6E90\u8DEF\u5F84\uFF08\u76F8\u5BF9 entry \u76EE\u5F55\uFF09", got: v.file });
+      }
+      if (v.css !== void 0) {
+        if (!Array.isArray(v.css)) {
+          issues.push({ field: `exposes["${key}"].css`, message: "\u5FC5\u987B\u662F\u5B57\u7B26\u4E32\u6570\u7EC4", got: typeof v.css });
+        } else {
+          v.css.forEach((css, i) => {
+            if (!validAssetRef(css)) {
+              issues.push({ field: `exposes["${key}"].css[${i}]`, message: "\u5FC5\u987B\u662F\u8D44\u6E90\u8DEF\u5F84", got: css });
+            }
+          });
+        }
+      }
+    }
+  } else {
+    issues.push({ field: "exposes", message: "\u5FC5\u987B\u662F\u6570\u7EC4\uFF08dev\uFF09\u6216\u5BF9\u8C61\uFF08prod\uFF09", got: typeof exposes });
+  }
+  if (issues.length > 0) return { issues };
+  return { manifest: input, issues };
+}
+function validateShared(shared) {
+  if (shared === void 0) return [];
+  const issues = [];
+  if (!Array.isArray(shared)) {
+    return [{ field: "shared", message: "\u5FC5\u987B\u662F\u6570\u7EC4", got: typeof shared }];
+  }
+  for (const [i, s] of shared.entries()) {
+    if (!isPlainObject(s)) {
+      issues.push({ field: `shared[${i}]`, message: "\u5FC5\u987B\u662F\u5BF9\u8C61", got: typeof s });
+      continue;
+    }
+    if (typeof s.name !== "string" || s.name.length === 0) {
+      issues.push({ field: `shared[${i}].name`, message: "\u5FC5\u987B\u662F\u975E\u7A7A\u5B57\u7B26\u4E32", got: s.name });
+    }
+    if (typeof s.version !== "string" || s.version.length === 0) {
+      issues.push({ field: `shared[${i}].version`, message: "\u5FC5\u987B\u662F\u975E\u7A7A\u5B57\u7B26\u4E32", got: s.version });
+    }
+  }
+  return issues;
+}
+function isDevManifest(m) {
+  return Array.isArray(m.exposes);
+}
+function normalizeExposes(manifest) {
+  const out = /* @__PURE__ */ new Map();
+  if (isDevManifest(manifest)) {
+    for (const e of manifest.exposes) {
+      if (!validExposeName(e.name)) continue;
+      out.set(e.name, { name: e.name, file: e.file, css: [], src: e.src });
+    }
+  } else {
+    for (const [key, v] of Object.entries(manifest.exposes)) {
+      if (!validExposeName(key)) continue;
+      out.set(key, { name: key, file: v.file, css: Array.isArray(v.css) ? v.css.filter((c) => typeof c === "string") : [] });
+    }
+  }
+  return out;
+}
+
 // src/virtual.ts
 function jsonReplacer(_k, v) {
   return v;
@@ -505,13 +726,17 @@ function manifestUrlFor(r, command) {
   const entry = command === "serve" ? r.devEntry : r.prodEntry;
   if (!entry) return null;
   try {
-    const u = new URL(entry);
+    const hasScheme = /^[a-z][a-z\d+.-]*:/i.test(entry);
+    const isProtocolRelative = entry.startsWith("//");
+    const u = new URL(entry, hasScheme ? void 0 : "http://fulgurjs.invalid");
     if (u.pathname.includes("@fulgurjs-entry.js")) {
       u.pathname = u.pathname.replace("@fulgurjs-entry.js", "@fulgurjs-manifest.json");
     } else {
       u.pathname = u.pathname.replace(/[^/]*$/, "") + "fulgurjs-manifest.json";
     }
-    return u.href;
+    if (hasScheme) return u.href;
+    if (isProtocolRelative) return `//${u.host}${u.pathname}${u.search}${u.hash}`;
+    return `${u.pathname}${u.search}${u.hash}`;
   } catch {
     return null;
   }
@@ -656,17 +881,33 @@ function genBuildRemoteEntry(options, exposeAbsPaths) {
     ""
   ].join("\n");
 }
+function genApiFacade() {
+  return [
+    "export {",
+    "  initSharing, registerShare, registerRemotes, registerRemote, registerPlugins,",
+    "  loadShare, loadRemote, getContainer, preloadRemote, parseSpec,",
+    "  getRuntime, shareScopeMap, unwrapDefault, version,",
+    '} from "virtual:fulgurjs-runtime";',
+    'export { definePages, validatePages } from "@fulgurjs/federation/pages";',
+    'export { default as remoteSchema } from "virtual:fulgurjs-remote-schema";',
+    ""
+  ].join("\n");
+}
 function genDevManifest(options, base) {
   const b = base.endsWith("/") ? base : `${base}/`;
   return {
+    schemaVersion: MANIFEST_SCHEMA_VERSION,
     id: options.name,
     name: options.name,
     version: options.pkgDependencies?.["fulgurjs"] ?? "0.0.0",
     devServer: true,
     base: b,
     entry: `${b}@fulgurjs-entry.js`,
-    /** 本地联调时供宿主端 dts 类型直连（见 dts.ts）；远程不在本机时宿主回退 any 桩 */
-    fsRoot: options.root,
+    /**
+     * 本地联调时供宿主端 dts 类型直连（见 dts.ts）；远程不在本机时宿主回退 any 桩。
+     * WP5：devFsRoot: false 时不写入（本机路径不外发）；该字段永不进入 prod manifest。
+     */
+    ...options.devFsRoot === false ? {} : { fsRoot: options.root },
     exposes: options.exposes.map((e) => ({
       name: e.name,
       src: e.import,
@@ -688,6 +929,7 @@ function genDevManifest(options, base) {
 }
 function genProdManifest(options, exposeFiles, entryFile) {
   return {
+    schemaVersion: MANIFEST_SCHEMA_VERSION,
     id: options.name,
     name: options.name,
     entry: entryFile,
@@ -869,6 +1111,7 @@ async function transformModule(code, id, ctx) {
       cjsEdited = true;
     }
     if (!cjsEdited) return null;
+    ctx.onRewrite?.();
     return { code, map: null };
   }
   await ensureLexer();
@@ -991,6 +1234,7 @@ export { ${nsAs[1]} };`);
     }
   }
   if (!edited) return null;
+  ctx.onRewrite?.();
   if (usesRuntimeHelpers) {
     const runtimeSpec = JSON.stringify(ctx.devUrls?.runtime ?? "virtual:fulgurjs-runtime");
     s.prepend(
@@ -1016,7 +1260,22 @@ async function fetchManifest(devEntry, attempts = 30, delayMs = 2e3) {
   for (let i = 0; i < attempts; i++) {
     try {
       const res = await fetch(manifestUrl, { signal: AbortSignal.timeout(3e3) });
-      if (res.ok) return await res.json();
+      if (res.ok) {
+        const parsed = parseManifest(await res.json());
+        if (parsed.unsupportedVersion) {
+          console.warn(
+            `[fulgurjs] dts: remote manifest schemaVersion=${parsed.unsupportedVersion} \u4E0D\u88AB\u5F53\u524D\u63D2\u4EF6\u652F\u6301\uFF08\u672C\u673A\u652F\u6301 1\uFF09\uFF1B\u7C7B\u578B\u6620\u5C04\u8DF3\u8FC7\u3002\u8BF7\u5BF9\u9F50\u5BBF\u4E3B\u4E0E\u8FDC\u7A0B\u7684 @fulgurjs/federation \u7248\u672C\u3002`
+          );
+          return null;
+        }
+        if (parsed.issues.length > 0) {
+          console.warn(
+            `[fulgurjs] dts: remote manifest \u5951\u7EA6\u6821\u9A8C\u5931\u8D25\uFF08${manifestUrl.href}\uFF09\uFF1A` + parsed.issues.map((x) => `${x.field}: ${x.message}`).join("\uFF1B") + `\u3002\u7C7B\u578B\u6620\u5C04\u8DF3\u8FC7\u3002`
+          );
+          return null;
+        }
+        return parsed.manifest;
+      }
     } catch {
     }
     await new Promise((r) => setTimeout(r, delayMs));
@@ -1079,7 +1338,7 @@ function resolveDtsMode(dtsOpt) {
   return (typeof dtsOpt === "object" ? dtsOpt.mode : void 0) ?? "source";
 }
 function buildShimModule(abs, moduleSpecifier) {
-  const lines = [`declare module '${moduleSpecifier}' {`];
+  const lines = [`declare module ${JSON.stringify(moduleSpecifier)} {`];
   if (abs.endsWith(".vue")) {
     lines.push(`  import type { DefineComponent } from 'vue'`);
     lines.push(`  const component: DefineComponent<Record<string, unknown>, Record<string, unknown>, any>`);
@@ -1116,9 +1375,18 @@ async function generateDevTypes(options, _server) {
       continue;
     }
     const remoteRoot = manifest.fsRoot;
-    if (!remoteRoot || !fs2.existsSync(remoteRoot)) {
+    if (!remoteRoot) {
       console.warn(
-        `[fulgurjs] dts: remote "${remote.key}" is not on this machine; type mapping skipped (module types fall back to any).`
+        `[fulgurjs] dts: remote "${remote.key}" \u7684 manifest \u672A\u643A\u5E26 fsRoot\uFF08devFsRoot: false \u6216\u8FDC\u7A0B\u63D2\u4EF6\u7248\u672C\u8FC7\u65E7\uFF09\uFF1B\u7C7B\u578B\u6620\u5C04\u964D\u7EA7\u4E3A any \u6869\u3002\u540C\u673A\u8054\u8C03\u9700\u8FDC\u7A0B devFsRoot: true\uFF08\u9ED8\u8BA4\uFF09\u5E76\u91CD\u542F\u5176 dev server\u3002`
+      );
+      continue;
+    }
+    let realRoot;
+    try {
+      realRoot = fs2.realpathSync(remoteRoot);
+    } catch {
+      console.warn(
+        `[fulgurjs] dts: remote "${remote.key}" is not on this machine (fsRoot unreachable); type mapping skipped (module types fall back to any).`
       );
       continue;
     }
@@ -1126,45 +1394,78 @@ async function generateDevTypes(options, _server) {
       `// \u81EA\u52A8\u751F\u6210\uFF1Afulgurjs-federation dev \u7C7B\u578B\u76F4\u8FDE\uFF08remote: ${remote.name}\uFF0Cmode: ${mode}\uFF09`,
       `// \u91CD\u65B0\u751F\u6210\uFF1A\u91CD\u542F host dev server`
     ];
+    let accepted = 0;
     for (const expose of manifest.exposes ?? []) {
-      const abs = path3.join(remoteRoot, expose.src.replace(/^\//, ""));
-      if (!fs2.existsSync(abs)) continue;
-      const rel = path3.relative(outDir, abs).split(path3.sep).join("/");
-      const importPath = abs.endsWith(".vue") ? sourceImportPath(rel) : stripTsExtension(sourceImportPath(rel));
+      const skipped = (reason) => console.warn(`[fulgurjs] dts: remote "${remote.key}" expose ${JSON.stringify(expose.name)} \u8DF3\u8FC7\uFF1A${reason}`);
+      const src = expose.src;
+      if (!src || typeof src !== "string") {
+        skipped("src \u7F3A\u5931");
+        continue;
+      }
+      if (src.startsWith("/") || /^[a-z]+:/i.test(src)) {
+        skipped(`src \u5FC5\u987B\u662F\u76F8\u5BF9\u8DEF\u5F84\uFF0Cgot ${JSON.stringify(src)}`);
+        continue;
+      }
+      if (src.split("/").includes("..")) {
+        skipped(`src \u4E0D\u5F97\u5305\u542B ..\uFF0Cgot ${JSON.stringify(src)}`);
+        continue;
+      }
+      const abs = path3.join(realRoot, src);
+      let realAbs;
+      try {
+        realAbs = fs2.realpathSync(abs);
+      } catch {
+        skipped(`\u6E90\u6587\u4EF6\u4E0D\u5B58\u5728\uFF08${src}\uFF09`);
+        continue;
+      }
+      if (path3.relative(realRoot, realAbs).startsWith("..")) {
+        skipped(`\u89E3\u6790\u7ED3\u679C\u8D8A\u51FA fsRoot\uFF08${src} \u2192 ${realAbs}\uFF09`);
+        continue;
+      }
+      if (!fs2.existsSync(realAbs)) continue;
+      const rel = path3.relative(outDir, realAbs).split(path3.sep).join("/");
+      const importPath = realAbs.endsWith(".vue") ? sourceImportPath(rel) : stripTsExtension(sourceImportPath(rel));
       const moduleSpecifier = `${remote.key}/${expose.name.replace(/^\.\//, "")}`;
+      const moduleLiteral = JSON.stringify(moduleSpecifier);
+      const importLiteral = JSON.stringify(importPath);
       lines.push("");
       if (mode === "shim") {
-        lines.push(buildShimModule(abs, moduleSpecifier));
+        lines.push(buildShimModule(realAbs, moduleSpecifier));
+        accepted++;
         continue;
       }
-      if (abs.endsWith(".vue")) {
-        lines.push(`declare module '${moduleSpecifier}' {`);
+      if (realAbs.endsWith(".vue")) {
+        lines.push(`declare module ${moduleLiteral} {`);
         lines.push(`  import type { DefineComponent } from 'vue'`);
         lines.push(`  const component: DefineComponent<Record<string, unknown>, Record<string, unknown>, unknown>`);
         lines.push(`  export default component`);
-        lines.push(`  export * from '${importPath}'`);
+        lines.push(`  export * from ${importLiteral}`);
         lines.push(`}`);
       } else {
-        lines.push(`declare module '${moduleSpecifier}' {`);
-        const names = extractTsExportNames(fs2.readFileSync(abs, "utf8"));
+        lines.push(`declare module ${moduleLiteral} {`);
+        const names = extractTsExportNames(fs2.readFileSync(realAbs, "utf8"));
         if (names.length > 0) {
-          lines.push(`  export { ${names.join(", ")} } from '${importPath}'`);
+          lines.push(`  export { ${names.join(", ")} } from ${importLiteral}`);
         } else {
-          lines.push(`  export * from '${importPath}'`);
+          lines.push(`  export * from ${importLiteral}`);
         }
-        if (sourceHasDefaultExport(abs)) lines.push(`  export { default } from '${importPath}'`);
+        if (sourceHasDefaultExport(realAbs)) lines.push(`  export { default } from ${importLiteral}`);
         lines.push(`}`);
       }
+      accepted++;
     }
-    fs2.writeFileSync(path3.join(outDir, `${remote.key}.d.ts`), `${lines.join("\n")}
+    if (accepted > 0) {
+      fs2.writeFileSync(path3.join(outDir, `${remote.key}.d.ts`), `${lines.join("\n")}
 `);
+    }
     console.log(
-      `[fulgurjs] dts: generated ${dir}/${remote.key}.d.ts (${manifest.exposes?.length ?? 0} exposes, mode=${mode}). \u786E\u4FDD tsconfig include \u5305\u542B "${dir}" \u4EE5\u83B7\u5F97\u7C7B\u578B\u8865\u5168\u3002`
+      `[fulgurjs] dts: generated ${dir}/${remote.key}.d.ts (${accepted}/${manifest.exposes?.length ?? 0} exposes, mode=${mode}). \u786E\u4FDD tsconfig include \u5305\u542B "${dir}" \u4EE5\u83B7\u5F97\u7C7B\u578B\u8865\u5168\u3002`
     );
   }
 }
 
 // src/diagnostics.ts
+import path4 from "path";
 function formatFulgurjsDiagnostic(input) {
   const ctx = input.details ? `
 \u4E0A\u4E0B\u6587\uFF1A${JSON.stringify(input.details)}` : "";
@@ -1187,6 +1488,33 @@ async function isPortReachable(host, port, timeoutMs = 800) {
     socket.connect(port, host);
   });
 }
+var __debugEnvCache = "";
+var __debugEnabledCache = {};
+function debugEnabled(category) {
+  const spec = process.env.FULGURJS_DEBUG ?? process.env.DEBUG ?? "";
+  if (spec !== __debugEnvCache) {
+    __debugEnvCache = spec;
+    __debugEnabledCache = {};
+  }
+  if (category in __debugEnabledCache) return __debugEnabledCache[category];
+  const patterns = spec.split(",").map((x) => x.trim()).filter(Boolean);
+  const enabled = patterns.some((p) => p === "fulgurjs" || p === "fulgurjs:*" || p === `fulgurjs:${category}`);
+  __debugEnabledCache[category] = enabled;
+  return enabled;
+}
+function debugLog(category, data) {
+  if (!debugEnabled(category)) return;
+  console.error(`[fulgurjs:debug:${category}] ${JSON.stringify(data)}`);
+}
+function redactModulePath(id, root) {
+  const clean = id.split("?")[0];
+  try {
+    const rel = path4.relative(root, clean);
+    if (rel && !rel.startsWith("..") && !path4.isAbsolute(rel)) return rel;
+  } catch {
+  }
+  return clean.split("/").pop() ?? clean;
+}
 
 // src/remote-schema.ts
 function manifestUrlOf(devEntry) {
@@ -1213,8 +1541,35 @@ async function probeRemotesAndBuildSchema(options) {
     try {
       const res = await fetch(u, { signal: AbortSignal.timeout(3e3) });
       if (!res.ok) throw new Error(`HTTP ${res.status}`);
-      const manifest = await res.json();
-      const exposes = (manifest?.exposes ?? []).map((e) => e.name);
+      const parsed = parseManifest(await res.json());
+      if (parsed.unsupportedVersion) {
+        schema[remote.key] = { exposes: [], exists: false };
+        console.warn(
+          formatFulgurjsDiagnostic({
+            code: "DEV-002",
+            symptom: `remote "${remote.key}" \u7684 manifest schemaVersion=${parsed.unsupportedVersion} \u4E0D\u53D7\u652F\u6301\uFF08\u672C\u673A\u652F\u6301 1\uFF09`,
+            cause: "\u5BBF\u4E3B\u4E0E\u8FDC\u7A0B\u7684 @fulgurjs/federation \u5927\u7248\u672C\u4E0D\u4E00\u81F4",
+            fix: "\u5BF9\u9F50\u5BBF\u4E3B\u4E0E\u8FDC\u7A0B\u7684 @fulgurjs/federation \u7248\u672C\u540E\u91CD\u542F dev server",
+            details: { remote: remote.key, url: u.href }
+          })
+        );
+        continue;
+      }
+      if (parsed.issues.length > 0 || !parsed.manifest) {
+        schema[remote.key] = { exposes: [], exists: false };
+        console.warn(
+          formatFulgurjsDiagnostic({
+            code: "DEV-002",
+            symptom: `remote "${remote.key}" \u7684 dev manifest \u5951\u7EA6\u6821\u9A8C\u5931\u8D25\uFF08${u.href}\uFF09`,
+            cause: parsed.issues.map((x) => `${x.field}: ${x.message}`).join("\uFF1B"),
+            fix: "\u6838\u5BF9 remote \u7684 federation \u914D\u7F6E exposes\uFF0C\u5E76\u786E\u8BA4 @fulgurjs/federation \u7248\u672C\u4E0E\u5BBF\u4E3B\u4E00\u81F4",
+            details: { remote: remote.key, url: u.href, issues: parsed.issues.slice(0, 5) }
+          })
+        );
+        continue;
+      }
+      const manifest = parsed.manifest;
+      const exposes = [...normalizeExposes(manifest).keys()];
       schema[remote.key] = { exposes, exists: true };
       if (exposes.length === 0) {
         console.warn(
@@ -1223,11 +1578,11 @@ async function probeRemotesAndBuildSchema(options) {
             symptom: `remote "${remote.key}" \u7684 dev manifest \u53EF\u8FBE\u4F46 exposes \u4E3A\u7A7A\uFF08${u.href}\uFF09`,
             cause: "remote \u4FA7 federation({ exposes }) \u4E3A\u7A7A\uFF0C\u6216\u5176\u63D2\u4EF6\u7248\u672C\u8FC7\u65E7\u5BFC\u81F4 manifest \u7F3A\u5B57\u6BB5",
             fix: "\u6838\u5BF9 remote \u7684 federation \u914D\u7F6E exposes\uFF0C\u5E76\u786E\u8BA4 @fulgurjs/federation \u7248\u672C\u4E0E\u5BBF\u4E3B\u4E00\u81F4",
-            details: { remote: remote.key, url: u.href, pluginVersion: manifest?.buildInfo?.version }
+            details: { remote: remote.key, url: u.href, pluginVersion: manifest.version }
           })
         );
       }
-      const remoteVersion = manifest?.buildInfo?.version;
+      const remoteVersion = manifest.version;
       if (remoteVersion && remoteVersion !== options.pluginVersion) {
         console.warn(
           formatFulgurjsDiagnostic({
@@ -1263,17 +1618,17 @@ function genEmptyRemoteSchemaModule() {
 
 // src/vite-cache.ts
 import fs3 from "fs";
-import path4 from "path";
+import path5 from "path";
 function syncViteCacheMarker(root, pluginVersion, log) {
-  const viteDir = path4.join(root, "node_modules", ".vite");
-  const marker = path4.join(viteDir, "fulgurjs-version.txt");
+  const viteDir = path5.join(root, "node_modules", ".vite");
+  const marker = path5.join(viteDir, "fulgurjs-version.txt");
   try {
     if (fs3.existsSync(viteDir)) {
       const prev = fs3.existsSync(marker) ? fs3.readFileSync(marker, "utf8").trim() : "";
       if (prev === pluginVersion) return;
       fs3.rmSync(viteDir, { recursive: true, force: true });
       log(
-        `[fulgurjs] \u63D2\u4EF6\u7248\u672C\u53D8\u5316\uFF08${prev || "\u65E0\u8BB0\u5F55"} \u2192 ${pluginVersion}\uFF09\uFF0C\u5DF2\u81EA\u52A8\u6E05\u9664 ${path4.relative(root, viteDir)} \u9884\u6784\u5EFA\u7F13\u5B58\uFF08\u907F\u514D\u65E7\u95E8\u9762\u7B7E\u540D 404 / DEV-009\uFF09\u3002\u672C\u6B21\u542F\u52A8\u5C06\u91CD\u65B0\u9884\u6784\u5EFA\uFF0C\u9996\u8F6E 30~60s \u5C5E\u6682\u6001\uFF08DEV-010\uFF09\u3002`
+        `[fulgurjs] \u63D2\u4EF6\u7248\u672C\u53D8\u5316\uFF08${prev || "\u65E0\u8BB0\u5F55"} \u2192 ${pluginVersion}\uFF09\uFF0C\u5DF2\u81EA\u52A8\u6E05\u9664 ${path5.relative(root, viteDir)} \u9884\u6784\u5EFA\u7F13\u5B58\uFF08\u907F\u514D\u65E7\u95E8\u9762\u7B7E\u540D 404 / DEV-009\uFF09\u3002\u672C\u6B21\u542F\u52A8\u5C06\u91CD\u65B0\u9884\u6784\u5EFA\uFF0C\u9996\u8F6E 30~60s \u5C5E\u6682\u6001\uFF08DEV-010\uFF09\u3002`
       );
     }
     fs3.mkdirSync(viteDir, { recursive: true });
@@ -1286,7 +1641,7 @@ function syncViteCacheMarker(root, pluginVersion, log) {
 }
 
 // src/runtime-code.gen.ts
-var runtime_code_gen_default = 'var X=/^v?(\\d+)(?:\\.(\\d+))?(?:\\.(\\d+))?(?:-((?:[0-9A-Za-z-]+)(?:\\.[0-9A-Za-z-]+)*))?(?:\\+[0-9A-Za-z.-]+)?$/;function T(t){let n=X.exec(String(t).trim());return n?{major:Number(n[1]),minor:Number(n[2]??0),patch:Number(n[3]??0),pre:n[4]?n[4].split("."):[]}:null}function Y(t,n){if(t.length===0&&n.length===0)return 0;if(t.length===0)return 1;if(n.length===0)return-1;let o=Math.max(t.length,n.length);for(let r=0;r<o;r++){let l=t[r],m=n[r];if(l===void 0)return-1;if(m===void 0)return 1;let y=/^\\d+$/.test(l),E=/^\\d+$/.test(m);if(y&&E){let w=Number(l)-Number(m);if(w!==0)return w}else{if(y!==E)return y?-1:1;if(l!==m)return l<m?-1:1}}return 0}function v(t,n){let o=T(t),r=T(n);return!o||!r?t<n?-1:t>n?1:0:o.major!==r.major?o.major-r.major:o.minor!==r.minor?o.minor-r.minor:o.patch!==r.patch?o.patch-r.patch:Y(o.pre,r.pre)}var Z=/^[a-z]+[+:-]/i;function O(t,n){if(n===!1||n==null||n==="")return!0;let o=String(n).trim();return!o||o==="*"||o==="latest"||Z.test(o)?!0:o.split("||").some(r=>Q(t,r.trim()))}function Q(t,n){if(!n||n==="*")return!T(t)?.pre.length;let o=n.split(/\\s+-\\s+/);if(o.length===2){let m=o[0].trim(),y=o[1].trim();return!(!O(t,`>=${m}`)||!O(t,`<=${y}`))}let r=T(t);if(!r)return!1;let l=ee(n);if(l===null)return!0;for(let m of l)if(!ie(r,t,m))return!1;return!(r.pre.length>0&&!l.some(m=>m.ver.pre.length>0)&&!l.some(y=>y.ver.major===r.major&&y.ver.minor===r.minor&&y.ver.patch===r.patch))}function ee(t){let n=[],o=t.trim().split(/\\s+/).filter(Boolean);if(o.length===0)return null;for(let r of o){let l=/^(>=|<=|>|<|=|\\^|~)?(.*)$/.exec(r);if(!l)return null;let m=l[1],y=l[2],E=re(m,y);if(E===null)return null;n.push(...E)}return n}function re(t,n){let o=ne(n);if(!o)return null;let{ver:r,partial:l}=o;switch(t){case"^":{let m=te(r);return m?[{op:">=",ver:r},{op:"<",ver:m}]:null}case"~":{let m=l>=2?{major:r.major,minor:r.minor+1,patch:0,pre:[]}:{major:r.major+1,minor:0,patch:0,pre:[]};return[{op:">=",ver:r},{op:"<",ver:m}]}case">=":return[{op:">=",ver:r}];case">":return l===1?[{op:">=",ver:{major:r.major+1,minor:0,patch:0,pre:[]}}]:l===2?[{op:">=",ver:{major:r.major,minor:r.minor+1,patch:0,pre:[]}}]:[{op:">",ver:r}];case"<":return l===1?[{op:"<",ver:{major:r.major,minor:0,patch:0,pre:[]}}]:l===2?[{op:"<",ver:{major:r.major,minor:r.minor,patch:0,pre:[]}}]:[{op:"<",ver:r}];case"<=":return[{op:"<=",ver:r}];case"=":case void 0:return l===1?[{op:">=",ver:r},{op:"<",ver:{major:r.major+1,minor:0,patch:0,pre:[]}}]:l===2?[{op:">=",ver:r},{op:"<",ver:{major:r.major,minor:r.minor+1,patch:0,pre:[]}}]:[{op:"=",ver:r}];default:return null}}function te(t){return t.major>0?{major:t.major+1,minor:0,patch:0,pre:[]}:t.minor>0?{major:0,minor:t.minor+1,patch:0,pre:[]}:{major:0,minor:0,patch:t.patch+1,pre:[]}}function ne(t){let n=t.replace(/^v/,"").trim();if(!n||n==="*"||n==="x"||n==="X")return{ver:{major:0,minor:0,patch:0,pre:[]},partial:0};let o=n.split("."),r=[],l=0;for(let E of o.slice(0,3))if(/^\\d+$/.test(E))r.push(Number(E)),l++;else{if(E==="x"||E==="X"||E==="*")break;break}let m=n.split("-"),y=m.length>1?m.slice(1).join("-").split("+")[0].split("."):[];return l===0&&y.length===0?{ver:{major:0,minor:0,patch:0,pre:[]},partial:0}:{ver:{major:r[0]??0,minor:r[1]??0,patch:r[2]??0,pre:y},partial:l}}function oe(t,n){switch(n){case">=":return t>=0;case">":return t>0;case"<":return t<0;case"<=":return t<=0;case"=":return t===0}}function ie(t,n,o){let r=`${t.major}.${t.minor}.${t.patch}`+(t.pre.length?`-${t.pre.join(".")}`:"");if(o.upper)return!(!(v(r,`${o.ver.major}.${o.ver.minor}.${o.ver.patch}`+(o.ver.pre.length?`-${o.ver.pre.join(".")}`:""))>=0)||!(v(r,`${o.upper.major}.${o.upper.minor}.${o.upper.patch}`)<0));let l=v(r,`${o.ver.major}.${o.ver.minor}.${o.ver.patch}`+(o.ver.pre.length?`-${o.ver.pre.join(".")}`:"")),m=oe(l,o.op);return o.ver.pre.length>0&&t.pre.length===0&&(o.op===">"||o.op==="<")?!1:m}var g=class extends Error{code;details;constructor(n,o,r){super(`[fulgurjs:${n}] ${o}`),this.name="FgError",this.code=n,this.details=r}},S={REMOTE_LOAD_FAILED:"MFU-001",REMOTE_NAME_MISMATCH:"MFU-002",SHARE_STRICT_VERSION:"MFU-003",SHARE_NOT_AVAILABLE:"MFU-004",CONTAINER_REINIT_CONFLICT:"MFU-005",MODULE_NOT_EXPOSED:"MFU-006",PRELOAD_FAILED:"MFU-007",REMOTE_UNKNOWN:"MFU-008",EMPTY_EXPORTS:"MFU-009",SINGLETON_SKEW:"MFU-010"};var U="2.0.2";var A=15e3,P=2,ae=5,se=3e4;function ce(){let t={},n=new Map,o=[],r=new Map,l=new WeakMap,m={},y=()=>{for(let e of o)try{e.init?.(m)}catch(i){console.warn("[fulgurjs] runtimePlugin init failed:",e.name,i)}},E=e=>t[e]??={};function w(e){try{m.onRemoteError?.(e)}catch{}typeof window<"u"&&window.dispatchEvent(new CustomEvent("fulgurjs:error",{detail:e}))}function F(e="default"){return E(e),t}function V(e,i,a,c,R={}){let s=E(e||"default"),u=s[i]??={};u[a]||(u[a]={version:a,get:c,from:R.from??"unknown",eager:!!R.eager,loaded:!!R.loaded})}function I(e){for(let i of e){let a=n.get(i.name);n.set(i.name,{timeout:A,retries:P,...a,...i,state:a?.state??"idle",breakerState:a?.breakerState??{fails:0,openUntil:0},debug:a?.debug??{entry:i.entry,status:"idle"}})}}function D(e){I([e])}function H(e){o.push(...e),y()}async function K(e,i={}){let a=i.shareScope||"default",c=i.shareKey||e,s=E(a)[c]||{},u=Object.keys(s),d=i.requiredVersion,f=u.filter(p=>d===void 0||d===!1||O(p,d)),_;if(i.singleton&&u.length>0){let p=u.filter(h=>s[h].loaded);if(_=[...p.length?p:u].sort(v).pop(),u.length>1||!f.includes(_)){let h=s[_],j=`singleton skew "${c}": req "${d??"any"}" use ${_} from ${h.from}`;if(i.strictVersion){let M=new g(S.SHARE_STRICT_VERSION,j,{shareKey:c,requiredVersion:d});throw w({remote:h.from,error:M}),M}console.warn(`[fulgurjs:MFU-010] ${j}`)}}else if(_=[...f].sort(v).pop(),!_){if(i.strictVersion){let h=new g(S.SHARE_STRICT_VERSION,`no satisfying version for "${c}" (required "${d}") in share scope "${a}"`);throw w({remote:c,error:h}),h}if(i.fallback)return i.fallback();let p=new g(S.SHARE_NOT_AVAILABLE,`shared "${c}" (${d??"any"}) unavailable in scope "${a}" (no local fallback)`,{shareKey:c,requiredVersion:d});throw w({remote:c,error:p}),p}let $=s[_];if(m.resolveShare){let p=await m.resolveShare({shareKey:c,shareScope:a,requiredVersion:d,picked:$,available:Object.values(s)});p&&($=p)}return $.loaded=!0,$.get()}function q(e,i,a){return new Promise((c,R)=>{let s=setTimeout(()=>R(new Error(`timeout after ${i}ms: ${a}`)),i);e.then(u=>{clearTimeout(s),c(u)},u=>{clearTimeout(s),R(u)})})}let z=e=>new Promise(i=>setTimeout(i,e));function k(e,i){if(!e||typeof e.get!="function")throw new Error(`remoteEntry of "${i.name}" does not export a container interface (get/init)`);if(e.name&&i.name&&e.name!==i.name){let a=`remoteEntry self-reported name "${e.name}" mismatches configured name "${i.name}"`;if(i.promise)console.warn(`[fulgurjs] ${a} (promise-based remote, continuing)`);else throw Object.assign(new Error(a),{code:S.REMOTE_NAME_MISMATCH})}}async function L(e,i){return q(import(e),i.timeout??A,`load remoteEntry ${e}`)}async function x(e,i){let a=e.shareScope||"default";if(e.container){let s=l.get(e.container);if(s&&s!==a)throw new g(S.CONTAINER_REINIT_CONFLICT,`container "${e.name}" already initialized with share scope "${s}", cannot re-init with "${a}"`);return e.container}if(e.containerPromise)return e.containerPromise;let c=e.breakerState;if(c.openUntil>Date.now()){let s=new g(S.REMOTE_LOAD_FAILED,`circuit breaker open for remote "${e.name}" until ${new Date(c.openUntil).toISOString()}`,{remote:e.name});throw w({remote:e.name,error:s}),s}e.state="loading",e.debug.status="loading";let R=(async()=>{let s=[];if(e.promise)s.push(async()=>{let p=await e.promise(),h=typeof p=="string"?await L(p,e):p;return k(h,e),h});else for(let p of[e.entry,...e.fallback??[]])s.push(async()=>{let h=await L(p,e);return k(h,e),h});let u,d,f=!1,_=i?.retries??e.retries??P;for(let p of s){for(let h=0;h<=_;h++){let j=performance.now();try{u=await p(),e.lastLoadMs=Math.round(performance.now()-j),e.debug.lastLoadMs=e.lastLoadMs,f=!0;break}catch(M){if(d=M,M?.code)throw M;h<_&&await z(200*2**h)}}if(f)break}if(!f||!u){let p=[];throw/^https?:\\/\\//.test(e.entry)&&typeof location<"u"?(p.push(`1. is the remote dev server running?  try opening ${e.entry} in the browser \\u2014 it must return JS, not HTML/an error`),p.push("2. is the URL correct in federation({ remotes })?  dev and prod entries can differ"),p.push("3. CORS: the remote dev server must allow cross-origin requests (fulgurjs-federation enables server.cors automatically; a custom server config may have disabled it)")):(p.push(`1. is the remote deployed and reachable?  try opening ${e.entry} in the browser \\u2014 it must return JS`),p.push("2. NGINX/CDN routing: the entry path must serve the remoteEntry JS file (check try_files / fallback rules)")),new g(S.REMOTE_LOAD_FAILED,`failed to load remote "${e.name}" from ${e.entry}: ${String(d?.message??d)}\n`+p.join(`\n`),{remote:e.name})}k(u,e);let $=l.get(u);if($&&$!==a)throw new g(S.CONTAINER_REINIT_CONFLICT,`container "${e.name}" already initialized with share scope "${$}", cannot re-init with "${a}"`);return typeof u.init=="function"&&await u.init(t),l.set(u,a),e.container=u,e.state="loaded",e.debug.status="loaded",c.fails=0,u})();e.containerPromise=R;try{return await R}catch(s){if(e.containerPromise=void 0,e.state="failed",e.debug.status="failed",e.debug.error=String(s?.message??s),c.fails+=1,c.fails>=ae&&(c.openUntil=Date.now()+se,c.fails=0),s instanceof g)throw w({remote:e.name,error:s}),s;if(s?.code)throw w({remote:e.name,error:s}),s;let u=new g(S.REMOTE_LOAD_FAILED,String(s?.message??s),{remote:e.name});throw w({remote:e.name,error:u}),u}}function N(e){let i=e.indexOf("/");return i===-1?{remote:e,module:""}:{remote:e.slice(0,i),module:G(e.slice(i+1))}}function G(e){return e?e.startsWith(".")?e:`./${e}`:""}async function J(e,i){let{remote:a,module:c}=N(e);m.beforeLoadRemote?.({remote:a,module:c});let R=n.get(a);if(!R)throw new g(S.REMOTE_UNKNOWN,`unknown remote "${a}". Register it via federation({ remotes }) or registerRemote().`,{remote:a});let s;try{s=await x(R,{retries:i?.retries})}catch(f){if(i?.fallbackModule)return console.error(`[fulgurjs] loadRemote("${e}") failed; returning fallbackModule (\\u663E\\u5F0F\\u964D\\u7EA7\\uFF0C\\u9519\\u8BEF\\u5DF2\\u900F\\u51FA)`,f),w({remote:a,error:f}),await i.fallbackModule();throw f}if(!c)return s;let u=`${a}@${R.shareScope||"default"}#${c}`;r.has(u)||r.set(u,s.get(c).catch(f=>{throw r.delete(u),f instanceof g||f?.code?f:new g(S.REMOTE_LOAD_FAILED,`failed to load module "${c}" from remote "${a}": ${String(f?.message??f)}`,{remote:a,module:c})}));let d;try{d=await r.get(u)}catch(f){if(i?.fallbackModule)return console.error(`[fulgurjs] loadRemote("${e}") failed; returning fallbackModule (\\u663E\\u5F0F\\u964D\\u7EA7\\uFF0C\\u9519\\u8BEF\\u5DF2\\u900F\\u51FA)`,f),w({remote:a,error:f}),await i.fallbackModule();throw f}if(m.afterLoadRemote?.({remote:a,module:c,module_ns:d}),d&&typeof d=="object"&&Object.keys(d).length===0){let f=new g(S.EMPTY_EXPORTS,`no exports: ${c} @ ${a}`,{remote:a,module:c});w({remote:a,error:f}),console.error(`[fulgurjs:MFU-009] ${f.message}`)}return d}function W(e){let i=n.get(e);if(!i)throw new g(S.REMOTE_UNKNOWN,`unknown remote "${e}"`,{remote:e});return x(i)}async function B(e,i={}){let{remote:a}=N(e),c=n.get(a);if(!c)throw new g(S.REMOTE_UNKNOWN,`unknown remote "${a}"`,{remote:a});let R=i.mode??"preload",s=(u,d)=>{if(typeof document>"u"||document.querySelector(`link[href="${u}"]`))return;let f=document.createElement("link");f.rel=d==="style"?"stylesheet":"modulepreload",f.href=u,R==="prefetch"&&(f.fetchPriority="low"),document.head.appendChild(f)};try{if(c.manifestUrl){let u=await fetch(c.manifestUrl,{cache:"no-cache"});if(u.ok){let d=await u.json();s(c.entry,"modulepreload");let f=d.exposes??{};for(let _ of Object.keys(f)){let $=f[_];$?.file&&s(new URL($.file,c.entry).href,"modulepreload");for(let p of $?.css??[])s(new URL(p,c.entry).href,"style")}return}}s(c.entry,"modulepreload")}catch(u){w({remote:a,error:new g(S.PRELOAD_FAILED,String(u?.message??u),{remote:a})})}}return typeof window>"u"||(window.__FULGURJS_SCOPE__=t,window.__FULGURJS_INFO__={get remotes(){let e={};for(let[i,a]of n)e[i]={...a.debug,entry:a.entry};return e},errors:[]}),{shareScopeMap:t,initSharing:F,registerShare:V,registerRemotes:I,registerRemote:D,registerPlugins:H,loadShare:K,loadRemote:J,getContainer:W,preloadRemote:B,parseSpec:N}}var C=globalThis,b=C.__FULGURJS_RUNTIME__??ce();C.__FULGURJS_RUNTIME__=b;try{Object.freeze(b)}catch{}var he=U;function ye(){return b}var Ee=b.initSharing,Re=b.registerShare,Se=b.registerRemotes,we=b.registerRemote,be=b.registerPlugins,_e=b.loadShare,$e=b.loadRemote,Me=b.getContainer,ve=b.preloadRemote,je=b.shareScopeMap;function Te(t){if(t&&typeof t=="object"&&"default"in t){let n=t.default;return n!==void 0?n:t}return t}var Oe=b;export{Oe as default,Me as getContainer,ye as getRuntime,Ee as initSharing,$e as loadRemote,_e as loadShare,ve as preloadRemote,be as registerPlugins,we as registerRemote,Se as registerRemotes,Re as registerShare,b as runtime,je as shareScopeMap,Te as unwrapDefault,he as version};\n';
+var runtime_code_gen_default = 'var oe=/^v?(\\d+)(?:\\.(\\d+))?(?:\\.(\\d+))?(?:-((?:[0-9A-Za-z-]+)(?:\\.[0-9A-Za-z-]+)*))?(?:\\+[0-9A-Za-z.-]+)?$/;function I(o){let i=oe.exec(String(o).trim());return i?{major:Number(i[1]),minor:Number(i[2]??0),patch:Number(i[3]??0),pre:i[4]?i[4].split("."):[]}:null}function ie(o,i){if(o.length===0&&i.length===0)return 0;if(o.length===0)return 1;if(i.length===0)return-1;let s=Math.max(o.length,i.length);for(let n=0;n<s;n++){let f=o[n],y=i[n];if(f===void 0)return-1;if(y===void 0)return 1;let R=/^\\d+$/.test(f),w=/^\\d+$/.test(y);if(R&&w){let T=Number(f)-Number(y);if(T!==0)return T}else{if(R!==w)return R?-1:1;if(f!==y)return f<y?-1:1}}return 0}function j(o,i){let s=I(o),n=I(i);return!s||!n?o<i?-1:o>i?1:0:s.major!==n.major?s.major-n.major:s.minor!==n.minor?s.minor-n.minor:s.patch!==n.patch?s.patch-n.patch:ie(s.pre,n.pre)}var se=/^[a-z]+[+:-]/i;function P(o,i){if(i===!1||i==null||i==="")return!0;let s=String(i).trim();return!s||s==="*"||s==="latest"||se.test(s)?!0:s.split("||").some(n=>ae(o,n.trim()))}function ae(o,i){if(!i||i==="*")return!I(o)?.pre.length;let s=i.split(/\\s+-\\s+/);if(s.length===2){let y=s[0].trim(),R=s[1].trim();return!(!P(o,`>=${y}`)||!P(o,`<=${R}`))}let n=I(o);if(!n)return!1;let f=ce(i);if(f===null)return!0;for(let y of f)if(!pe(n,o,y))return!1;return!(n.pre.length>0&&!f.some(y=>y.ver.pre.length>0)&&!f.some(R=>R.ver.major===n.major&&R.ver.minor===n.minor&&R.ver.patch===n.patch))}function ce(o){let i=[],s=o.trim().split(/\\s+/).filter(Boolean);if(s.length===0)return null;for(let n of s){let f=/^(>=|<=|>|<|=|\\^|~)?(.*)$/.exec(n);if(!f)return null;let y=f[1],R=f[2],w=le(y,R);if(w===null)return null;i.push(...w)}return i}function le(o,i){let s=me(i);if(!s)return null;let{ver:n,partial:f}=s;switch(o){case"^":{let y=ue(n);return y?[{op:">=",ver:n},{op:"<",ver:y}]:null}case"~":{let y=f>=2?{major:n.major,minor:n.minor+1,patch:0,pre:[]}:{major:n.major+1,minor:0,patch:0,pre:[]};return[{op:">=",ver:n},{op:"<",ver:y}]}case">=":return[{op:">=",ver:n}];case">":return f===1?[{op:">=",ver:{major:n.major+1,minor:0,patch:0,pre:[]}}]:f===2?[{op:">=",ver:{major:n.major,minor:n.minor+1,patch:0,pre:[]}}]:[{op:">",ver:n}];case"<":return f===1?[{op:"<",ver:{major:n.major,minor:0,patch:0,pre:[]}}]:f===2?[{op:"<",ver:{major:n.major,minor:n.minor,patch:0,pre:[]}}]:[{op:"<",ver:n}];case"<=":return[{op:"<=",ver:n}];case"=":case void 0:return f===1?[{op:">=",ver:n},{op:"<",ver:{major:n.major+1,minor:0,patch:0,pre:[]}}]:f===2?[{op:">=",ver:n},{op:"<",ver:{major:n.major,minor:n.minor+1,patch:0,pre:[]}}]:[{op:"=",ver:n}];default:return null}}function ue(o){return o.major>0?{major:o.major+1,minor:0,patch:0,pre:[]}:o.minor>0?{major:0,minor:o.minor+1,patch:0,pre:[]}:{major:0,minor:0,patch:o.patch+1,pre:[]}}function me(o){let i=o.replace(/^v/,"").trim();if(!i||i==="*"||i==="x"||i==="X")return{ver:{major:0,minor:0,patch:0,pre:[]},partial:0};let s=i.split("."),n=[],f=0;for(let w of s.slice(0,3))if(/^\\d+$/.test(w))n.push(Number(w)),f++;else{if(w==="x"||w==="X"||w==="*")break;break}let y=i.split("-"),R=y.length>1?y.slice(1).join("-").split("+")[0].split("."):[];return f===0&&R.length===0?{ver:{major:0,minor:0,patch:0,pre:[]},partial:0}:{ver:{major:n[0]??0,minor:n[1]??0,patch:n[2]??0,pre:R},partial:f}}function fe(o,i){switch(i){case">=":return o>=0;case">":return o>0;case"<":return o<0;case"<=":return o<=0;case"=":return o===0}}function pe(o,i,s){let n=`${o.major}.${o.minor}.${o.patch}`+(o.pre.length?`-${o.pre.join(".")}`:"");if(s.upper)return!(!(j(n,`${s.ver.major}.${s.ver.minor}.${s.ver.patch}`+(s.ver.pre.length?`-${s.ver.pre.join(".")}`:""))>=0)||!(j(n,`${s.upper.major}.${s.upper.minor}.${s.upper.patch}`)<0));let f=j(n,`${s.ver.major}.${s.ver.minor}.${s.ver.patch}`+(s.ver.pre.length?`-${s.ver.pre.join(".")}`:"")),y=fe(f,s.op);return s.ver.pre.length>0&&o.pre.length===0&&(s.op===">"||s.op==="<")?!1:y}var b=class extends Error{code;details;constructor(i,s,n){super(`[fulgurjs:${i}] ${s}`),this.name="FgError",this.code=i,this.details=n}},S={REMOTE_LOAD_FAILED:"MFU-001",REMOTE_NAME_MISMATCH:"MFU-002",SHARE_STRICT_VERSION:"MFU-003",SHARE_NOT_AVAILABLE:"MFU-004",CONTAINER_REINIT_CONFLICT:"MFU-005",MODULE_NOT_EXPOSED:"MFU-006",PRELOAD_FAILED:"MFU-007",REMOTE_UNKNOWN:"MFU-008",EMPTY_EXPORTS:"MFU-009",SINGLETON_SKEW:"MFU-010"};var q="2.1.0";var x=15e3,z=2,de=5,ge=3e4,he=4e3,ye=.2;function Ee(){let o=Object.create(null),i=new Map,s=[],n=new Map,f=new Map,y=new WeakMap,R=new WeakMap,w={},T=()=>{for(let e of s)try{e.init?.(w)}catch(t){console.warn("[fulgurjs] runtimePlugin init failed:",e.name,t)}},N=e=>o[e]??=Object.create(null);function $(e){try{w.onRemoteError?.(e)}catch{}typeof window<"u"&&window.dispatchEvent(new CustomEvent("fulgurjs:error",{detail:e}))}function B(e="default"){return N(e),o}function J(e,t,r,l,h={}){let a=N(e||"default"),p=Object.hasOwn(a,t)?a[t]:void 0,d=p&&typeof p=="object"?p:void 0;d||(d=Object.create(null),a[t]=d),!(Object.hasOwn(d,r)&&d[r])&&(d[r]={version:r,get:l,from:h.from??"unknown",eager:!!h.eager,loaded:!!h.loaded})}function G(e){let t=(r,l,h)=>{if(r===void 0)return;if(!(typeof r=="number"&&(h?Number.isInteger(r)&&r>=0&&r<=10:Number.isFinite(r)&&r>0)))throw new Error(`[fulgurjs] registerRemote("${e.name}"): ${l} must be a ${h?"integer 0..10":"finite positive number"}, got ${String(r)}`)};t(e.timeout,"timeout"),t(e.retries,"retries",!0),e.breaker&&(t(e.breaker.threshold,"breaker.threshold"),t(e.breaker.resetMs,"breaker.resetMs"))}function F(e){for(let t of e){G(t);let r=i.get(t.name);i.set(t.name,{timeout:x,retries:z,...r,...t,breakerThreshold:t.breaker?.threshold??r?.breakerThreshold??de,breakerResetMs:t.breaker?.resetMs??r?.breakerResetMs??ge,state:r?.state??"idle",breakerState:r?.breakerState??{fails:0,openUntil:0},entryInflight:r?.entryInflight??new Map,debug:r?.debug??{entry:t.entry,status:"idle"}})}}function X(e){F([e])}function Y(e){s.push(...e),T()}async function Z(e,t={}){let r=t.shareScope||"default",l=t.shareKey||e,a=N(r)[l]||{},p=Object.keys(a),d=t.requiredVersion,g=p.filter(c=>d===void 0||d===!1||P(c,d)),m;if(t.singleton&&p.length>0){let c=p.filter(u=>a[u].loaded);if(m=[...c.length?c:p].sort(j).pop(),p.length>1||!g.includes(m)){let u=a[m],k=`singleton skew "${l}": req "${d??"any"}" use ${m} from ${u.from}`;if(t.strictVersion){let v=new b(S.SHARE_STRICT_VERSION,k,{shareKey:l,requiredVersion:d});throw $({remote:u.from,error:v}),v}console.warn(`[fulgurjs:MFU-010] ${k}`)}}else if(m=[...g].sort(j).pop(),!m){if(t.strictVersion){let u=new b(S.SHARE_STRICT_VERSION,`no satisfying version for "${l}" (required "${d}") in share scope "${r}"`);throw $({remote:l,error:u}),u}if(t.fallback)return t.fallback();let c=new b(S.SHARE_NOT_AVAILABLE,`shared "${l}" (${d??"any"}) unavailable in scope "${r}" (no local fallback)`,{shareKey:l,requiredVersion:d});throw $({remote:l,error:c}),c}let E=a[m];if(w.resolveShare){let c=await w.resolveShare({shareKey:l,shareScope:r,requiredVersion:d,picked:E,available:Object.values(a)});c&&(E=c)}return E.loaded=!0,E.get()}function Q(e){try{let t=new URL(e,typeof location<"u"?location.href:"http://f.invalid");return t.protocol+"//"+t.host+t.pathname}catch{return String(e).replace(/[?#].*$/,"")}}function C(e,t,r){return new Promise((l,h)=>{let a=setTimeout(()=>h(new Error(`timeout after ${t}ms: ${r}`)),t);e.then(p=>{clearTimeout(a),l(p)},p=>{clearTimeout(a),h(p)})})}let ee=e=>new Promise(t=>setTimeout(t,e));function A(e,t){if(!e||typeof e.get!="function")throw new Error(`remoteEntry of "${t.name}" does not export a container interface (get/init)`);if(e.name&&t.name&&e.name!==t.name){let r=`remoteEntry self-reported name "${e.name}" mismatches configured name "${t.name}"`;if(t.promise)console.warn(`[fulgurjs] ${r} (promise-based remote, continuing)`);else throw Object.assign(new Error(r),{code:S.REMOTE_NAME_MISMATCH})}}async function D(e,t){let r=t.entryInflight.get(e),l=r??import(e);return r||(t.entryInflight.set(e,l),l.catch(()=>t.entryInflight.delete(e))),C(l,t.timeout??x,`load remoteEntry ${e}`)}async function V(e,t){let r=e.shareScope||"default";if(e.container){let a=R.get(e.container);if(a&&a!==r)throw new b(S.CONTAINER_REINIT_CONFLICT,`container "${e.name}" already initialized with share scope "${a}", cannot re-init with "${r}"`);return e.container}if(e.containerPromise)return e.containerPromise;let l=e.breakerState;if(l.openUntil>Date.now()){let a=new b(S.REMOTE_LOAD_FAILED,`circuit breaker open for remote "${e.name}" until ${new Date(l.openUntil).toISOString()}`,{remote:e.name});throw $({remote:e.name,error:a}),a}e.state="loading",e.debug.status="loading";let h=(async()=>{let a=[];if(e.promise)a.push(async()=>{let c=await C(e.promise(),e.timeout??x,`resolve promise remote "${e.name}"`),u=typeof c=="string"?await D(c,e):c;return A(u,e),u});else for(let c of[e.entry,...e.fallback??[]])a.push(async()=>{let u=await D(c,e);return A(u,e),u});let p,d,g=!1,m=t?.retries??e.retries??z;for(let c of a){for(let u=0;u<=m;u++){let k=performance.now();try{p=await c(),e.lastLoadMs=Math.round(performance.now()-k),e.debug.lastLoadMs=e.lastLoadMs,g=!0;break}catch(v){if(d=v,v?.code)throw v;u<m&&await ee(Math.min(he,200*2**u)*(1-ye*(1-2*Math.random())))}}if(g)break}if(!g||!p){let c=Q(e.entry),u=[];throw/^https?:\\/\\//.test(e.entry)&&typeof location<"u"?(u.push(`1. is the remote dev server running?  open ${c} in a browser \\u2014 it must return JS, not HTML`),u.push("2. is the URL correct in federation({ remotes })?  dev/prod entries can differ"),u.push("3. CORS: the remote dev server must allow cross-origin requests (check its server.cors)")):(u.push(`1. is the remote deployed?  open ${c} in a browser \\u2014 it must return JS`),u.push("2. NGINX/CDN routing: the entry path must serve the remoteEntry JS (check try_files)")),new b(S.REMOTE_LOAD_FAILED,`failed to load remote "${e.name}" from ${c}: ${String(d?.message??d)}\n`+u.join(`\n`),{remote:e.name})}A(p,e);let E=R.get(p);if(E&&E!==r)throw new b(S.CONTAINER_REINIT_CONFLICT,`container "${e.name}" already initialized with share scope "${E}", cannot re-init with "${r}"`);return typeof p.init=="function"&&await p.init(o),R.set(p,r),e.container=p,e.state="loaded",e.debug.status="loaded",l.fails=0,p})();e.containerPromise=h;try{return await h}catch(a){if(e.containerPromise=void 0,e.state="failed",e.debug.status="failed",e.debug.error=String(a?.message??a),l.fails+=1,l.fails>=e.breakerThreshold&&(l.openUntil=Date.now()+e.breakerResetMs,l.fails=0),a instanceof b)throw $({remote:e.name,error:a}),a;if(a?.code)throw $({remote:e.name,error:a}),a;let p=new b(S.REMOTE_LOAD_FAILED,String(a?.message??a),{remote:e.name});throw $({remote:e.name,error:p}),p}}function U(e){let t=e.indexOf("/");return t===-1?{remote:e,module:""}:{remote:e.slice(0,t),module:H(e.slice(t+1))}}function H(e){return e?e.startsWith(".")?e:`./${e}`:""}async function re(e,t){let{remote:r,module:l}=U(e);try{w.beforeLoadRemote?.({remote:r,module:l})}catch(g){console.warn("[fulgurjs] beforeLoadRemote hook error (ignored):",g)}let h=i.get(r);if(!h)throw new b(S.REMOTE_UNKNOWN,`unknown remote "${r}". Register it via federation({ remotes }) or registerRemote().`,{remote:r});let a;try{let g=l&&h.manifestUrl?K(e):Promise.resolve();[a]=await Promise.all([V(h,{retries:t?.retries}),g])}catch(g){if(t?.fallbackModule)return console.error(`[fulgurjs] loadRemote("${e}") failed; returning fallbackModule (\\u663E\\u5F0F\\u964D\\u7EA7\\uFF0C\\u9519\\u8BEF\\u5DF2\\u900F\\u51FA)`,g),$({remote:r,error:g}),await t.fallbackModule();throw g}if(!l)return a;let p=`${r}@${h.shareScope||"default"}#${l}`;n.has(p)||n.set(p,a.get(l).catch(g=>{throw n.delete(p),g instanceof b||g?.code?g:new b(S.REMOTE_LOAD_FAILED,`failed to load module "${l}" from remote "${r}": ${String(g?.message??g)}`,{remote:r,module:l})}));let d;try{d=await n.get(p)}catch(g){if(t?.fallbackModule)return console.error(`[fulgurjs] loadRemote("${e}") failed; returning fallbackModule (\\u663E\\u5F0F\\u964D\\u7EA7\\uFF0C\\u9519\\u8BEF\\u5DF2\\u900F\\u51FA)`,g),$({remote:r,error:g}),await t.fallbackModule();throw g}try{w.afterLoadRemote?.({remote:r,module:l,module_ns:d})}catch(g){console.warn("[fulgurjs] afterLoadRemote hook error (ignored):",g)}if(d&&typeof d=="object"&&Object.keys(d).length===0){let g=new b(S.EMPTY_EXPORTS,`no exports: ${l} @ ${r}`,{remote:r,module:l});$({remote:r,error:g}),console.error(`[fulgurjs:MFU-009] ${g.message}`)}return d}function te(e){let t=i.get(e);if(!t)throw new b(S.REMOTE_UNKNOWN,`unknown remote "${e}"`,{remote:e});return V(t)}async function K(e,t={}){let{remote:r,module:l}=U(e),h=i.get(r);if(!h)throw new b(S.REMOTE_UNKNOWN,`unknown remote "${r}"`,{remote:r});let a=t.mode??"preload",p=(m,E)=>{if(m.sheet)return Promise.resolve();let c=y.get(m);if(c)return c;let u=new Promise(k=>{let v=()=>{m.removeEventListener("load",v),m.removeEventListener("error",O),k()},O=()=>{$({remote:r,error:new b(S.PRELOAD_FAILED,`failed to load remote stylesheet ${E}`,{remote:r})}),v()};m.addEventListener("load",v,{once:!0}),m.addEventListener("error",O,{once:!0}),m.sheet&&v()});return y.set(m,u),u},d=(m,E)=>{if(typeof document>"u")return Promise.resolve();let c=document.querySelector(`link[href="${m}"]`);if(c)return E==="style"&&a==="preload"?y.get(c)??Promise.resolve():Promise.resolve();let u=document.createElement("link");u.rel=E==="style"?"stylesheet":"modulepreload",u.href=m,a==="prefetch"&&(u.fetchPriority="low");let k=E==="style"?p(u,m):Promise.resolve();return document.head.appendChild(u),E==="style"&&a==="preload"?k:Promise.resolve()},g=m=>{let E=typeof document<"u"?document.baseURI:void 0,c=new URL(h.entry,E||"http://fulgurjs.invalid/");return!c.pathname.endsWith("/")&&!c.pathname.split("/").pop().includes(".")&&(c.pathname+="/"),new URL(m,c).href};try{if(h.manifestUrl){let m=f.get(h.manifestUrl);m||(m=fetch(h.manifestUrl,{cache:"no-cache",signal:AbortSignal.timeout(8e3)}).then(c=>c.ok?c.json():void 0),f.set(h.manifestUrl,m),m.then(c=>{c||f.delete(h.manifestUrl)},()=>f.delete(h.manifestUrl)));let E=await m;if(E){let c=E.schemaVersion;if(typeof c=="number"&&(!Number.isInteger(c)||c>1)){$({remote:r,error:new b(S.PRELOAD_FAILED,`unsupported manifest schemaVersion ${String(c)} (expected 1)`,{remote:r})}),await d(h.entry,"modulepreload");return}await d(h.entry,"modulepreload");let u=E.exposes,k=Array.isArray(u)?u.filter(_=>_&&typeof _=="object").map(_=>[String(_.name??""),_]):u&&typeof u=="object"?Object.entries(u):[],v=l?k.filter(([_,L])=>H(String(L?.name??_))===l):k,O=[];for(let[,_]of v)if(typeof _?.file=="string"&&await d(g(_.file),"modulepreload"),Array.isArray(_?.css))for(let L of _.css){if(typeof L!="string")continue;let ne=d(g(L),"style");a==="preload"&&O.push(ne)}await Promise.all(O);return}}await d(h.entry,"modulepreload")}catch(m){$({remote:r,error:new b(S.PRELOAD_FAILED,String(m?.message??m),{remote:r})})}}return typeof window>"u"||(window.__FULGURJS_SCOPE__=o,window.__FULGURJS_INFO__={get remotes(){let e={};for(let[t,r]of i)e[t]={...r.debug,entry:r.entry};return e},errors:[]}),{shareScopeMap:o,initSharing:B,registerShare:J,registerRemotes:F,registerRemote:X,registerPlugins:Y,loadShare:Z,loadRemote:re,getContainer:te,preloadRemote:K,parseSpec:U}}var W=globalThis,M=W.__FULGURJS_RUNTIME__??Ee();W.__FULGURJS_RUNTIME__=M;try{Object.freeze(M)}catch{}var _e=q;function ke(){return M}var je=M.initSharing,Oe=M.registerShare,Te=M.registerRemotes,Le=M.registerRemote,Ie=M.registerPlugins,Pe=M.loadShare,Ne=M.loadRemote,Ae=M.getContainer,Ue=M.preloadRemote,xe=M.parseSpec,Fe=M.shareScopeMap;function Ce(o){if(o&&typeof o=="object"&&"default"in o){let i=o.default;return i!==void 0?i:o}return o}var De=M;export{De as default,Ae as getContainer,ke as getRuntime,je as initSharing,Ne as loadRemote,Pe as loadShare,xe as parseSpec,Ue as preloadRemote,Ie as registerPlugins,Le as registerRemote,Te as registerRemotes,Oe as registerShare,M as runtime,Fe as shareScopeMap,Ce as unwrapDefault,_e as version};\n';
 
 // src/index.ts
 function readRuntimeCode() {
@@ -1303,7 +1658,7 @@ function enumerateCjsExports(packageName, appRoot) {
   if (cached) return cached;
   let names = [];
   try {
-    const appRequire = createRequire2(path5.join(appRoot, "package.json"));
+    const appRequire = createRequire2(path6.join(appRoot, "package.json"));
     const mod = appRequire(packageName);
     names = Object.keys(mod);
   } catch {
@@ -1363,14 +1718,19 @@ function federation(options) {
     entryInitInjected: /* @__PURE__ */ new Set(),
     manualChunkGroups: /* @__PURE__ */ new Map(),
     sharedClosureRoots: [],
-    facadeDynamic: false
+    facadeDynamic: false,
+    transformedModules: /* @__PURE__ */ new Set()
+  };
+  const recordRewritten = (id) => {
+    state.transformedModules.add(id);
+    state.transformedModules.add(id.split("?")[0]);
   };
   const pre = {
     name: "fulgurjs:core",
     enforce: "pre",
     async config(userConfig, env) {
       state.command = env.command;
-      const root = path5.resolve(userConfig.root ?? process.cwd());
+      const root = path6.resolve(userConfig.root ?? process.cwd());
       const normalized = normalizeOptions(options, root, env.command);
       state.normalized = normalized;
       const extra = {};
@@ -1415,10 +1775,34 @@ export { default } from ${JSON.stringify(url)};
       }
       if (env.command === "serve") {
         syncViteCacheMarker(root, normalized.pluginVersion, (msg) => console.warn(msg));
+        const corsOption = normalized.devCorsOrigins && normalized.devCorsOrigins !== "*" ? { origin: normalized.devCorsOrigins } : true;
         extra.server = {
           ...userConfig.server ?? {},
-          cors: userConfig.server?.cors ?? true
+          cors: userConfig.server?.cors ?? corsOption
         };
+        const host = userConfig.server?.host;
+        if (isNonLoopbackHost(host)) {
+          if (!normalized.devCorsOrigins || normalized.devCorsOrigins === "*") {
+            console.warn(
+              formatFulgurjsDiagnostic({
+                code: "DEV-011",
+                symptom: `server.host=${String(host)} \u975E loopback \u4E14 dev \u8DE8\u6E90\u7B56\u7565\u4E3A\u901A\u914D\uFF08*\uFF09\uFF1A\u4EFB\u4F55\u80FD\u8BBF\u95EE\u8BE5\u673A\u7684\u6765\u6E90\u90FD\u53EF\u62C9\u53D6\u672C\u5E94\u7528\u8054\u90A6\u7AEF\u70B9\u4E0E\u6E90\u7801\u6A21\u5757`,
+                cause: "devCorsOrigins \u672A\u914D\u7F6E\u65F6\u4FDD\u6301\u73B0\u72B6\u517C\u5BB9\uFF08*\uFF09\uFF1B\u8DE8\u673A\u5F00\u53D1\u66B4\u9732\u9762\u968F\u4E4B\u6269\u5927",
+                fix: `\u6309\u5BBF\u4E3B\u6765\u6E90\u663E\u5F0F\u6536\u7D27\uFF1AdevCorsOrigins: ['http://<host>:<port>', ...]\uFF08\u6216\u786E\u8BA4\u8BE5\u673A\u5904\u4E8E\u53EF\u4FE1\u7F51\u7EDC\uFF09`
+              })
+            );
+          }
+          if (normalized.devFsRoot) {
+            console.warn(
+              formatFulgurjsDiagnostic({
+                code: "DEV-012",
+                symptom: `server.host=${String(host)} \u975E loopback \u4E14 dev manifest \u643A\u5E26 fsRoot\uFF08remote \u6839\u76EE\u5F55\u672C\u673A\u7EDD\u5BF9\u8DEF\u5F84\uFF09`,
+                cause: "fsRoot \u4F9B\u540C\u673A\u8054\u8C03\u7684\u5BBF\u4E3B dts \u7C7B\u578B\u76F4\u8FDE\uFF1B2.x \u9ED8\u8BA4 true \u4FDD\u6301\u73B0\u72B6\uFF0C\u4E0B\u4E2A\u4E3B\u7248\u672C\u62DF\u6539\u4E3A\u663E\u5F0F\u5F00\u542F",
+                fix: `\u540C\u673A\u8054\u8C03\u65E0\u9700\u52A8\u4F5C\uFF1B\u8DE8\u673A/\u4E0D\u53EF\u4FE1\u7F51\u7EDC\u53EF devFsRoot: false\uFF08\u5BBF\u4E3B dts \u5C06\u964D\u7EA7\u4E3A any \u6869\u5E76\u6709\u660E\u786E\u63D0\u793A\uFF09`
+              })
+            );
+          }
+        }
       } else {
         const userTarget = userConfig.build?.target;
         if (userTarget) {
@@ -1433,6 +1817,12 @@ export { default } from ${JSON.stringify(url)};
         }
         if (normalized.remotes.length > 0 && normalized.devSharedSelf) {
           state.facadeDynamic = true;
+          const userMc = userConfig.build?.rollupOptions?.output?.manualChunks;
+          debugLog("facade", {
+            stage: "config",
+            facadeDynamic: true,
+            manualChunks: Array.isArray(userConfig.build?.rollupOptions?.output) ? "array" : typeof userMc
+          });
           const userOutput = userConfig.build?.rollupOptions?.output;
           if (Array.isArray(userOutput)) {
             console.warn(
@@ -1500,7 +1890,7 @@ export { default } from ${JSON.stringify(url)};
         }
       }
     },
-    resolveId(source) {
+    resolveId(source, importer) {
       let s = source;
       if (s.startsWith("/@id/")) s = s.slice(5);
       if (s.startsWith("__x00__")) s = "\0" + s.slice(7);
@@ -1508,8 +1898,18 @@ export { default } from ${JSON.stringify(url)};
       const bare = q === -1 ? s : s.slice(0, q);
       const query = q === -1 ? "" : s.slice(q);
       const bareClean = bare.startsWith("\0") ? bare.slice(1) : bare;
+      if (state.normalized && importer) {
+        const impClean = importer.split("?")[0];
+        const isOurVirtual = impClean.startsWith("virtual:fulgurjs-") || impClean.startsWith("\0virtual:fulgurjs-");
+        if (!isOurVirtual && !impClean.includes("/node_modules/.vite/") && !state.sharedClosureRoots.some((r) => impClean.startsWith(r.root)) && (state.transformedModules.has(importer) || state.transformedModules.has(impClean))) {
+          const hit = state.normalized.shared.find((sh) => sh.aliases.includes(bareClean));
+          if (hit) {
+            return RESOLVED.sharedNsFacade(hit.shareKey) + query;
+          }
+        }
+      }
       const n = state.normalized;
-      if (n && !bareClean.startsWith("\0") && !bareClean.startsWith(".") && !bareClean.startsWith("/") && !bareClean.startsWith("virtual:")) {
+      if (n && !bare.startsWith("\0") && !bareClean.startsWith(".") && !bareClean.startsWith("/") && !bareClean.startsWith("virtual:")) {
         const slash = bareClean.indexOf("/");
         if (slash > 0) {
           const prefix = bareClean.slice(0, slash);
@@ -1526,6 +1926,7 @@ export { default } from ${JSON.stringify(url)};
       if (bareClean === RUNTIME_PROXY_VIRTUAL_ID) return RESOLVED.runtimeProxy;
       if (bareClean === INIT_VIRTUAL_ID) return RESOLVED.init;
       if (bareClean === "virtual:fulgurjs-remote-schema") return bareClean;
+      if (bareClean === "virtual:fulgurjs-api") return bareClean;
       if (bareClean === "virtual:fulgurjs-provides") return RESOLVED.provides;
       if (bareClean === "virtual:fulgurjs-remote-entry") return RESOLVED.remoteEntry;
       if (bareClean.startsWith(SHARED_NS_FACADE_PREFIX)) {
@@ -1552,6 +1953,9 @@ export { default } from ${JSON.stringify(url)};
       if (clean === "virtual:fulgurjs-provides" && state.normalized) {
         return genDevProvides(state.normalized);
       }
+      if (clean === "virtual:fulgurjs-api") {
+        return genApiFacade();
+      }
       if (clean === "virtual:fulgurjs-remote-schema" && state.normalized) {
         if (state.command === "build") return genEmptyRemoteSchemaModule();
         remoteSchemaPromise ??= probeRemotesAndBuildSchema(state.normalized).then(
@@ -1619,6 +2023,7 @@ ${code}`, map: null };
       if (/\.vue(\?|$)/.test(id)) {
         if (state.command === "build" && /type=script/.test(id)) {
           return transformModule(code, id, {
+            onRewrite: () => recordRewritten(id),
             options: state.normalized,
             rewriteShared: true,
             allowNodeModules,
@@ -1630,6 +2035,10 @@ ${code}`, map: null };
       }
       if (!isTransformableId(id, allowNodeModules)) return null;
       return transformModule(code, id, {
+        onRewrite: () => {
+          debugLog("transform", { stage: "pre", mode: state.command, module: redactModulePath(id, state.normalized.root) });
+          recordRewritten(id);
+        },
         options: state.normalized,
         // build：全量改写；dev：默认仅纯 remote 改写 shared（被宿主消费的组件需协商到宿主实例），
         // 双角色宿主可显式 devSharedSelf: true 参与协商
@@ -1652,7 +2061,7 @@ ${code}`, map: null };
         for (const tag of html.match(moduleScriptRe) ?? []) {
           const src = srcRe.exec(tag)?.[1];
           if (!src || src.startsWith("http") || src.startsWith("//")) continue;
-          const abs = path5.resolve(state.normalized.root, src.startsWith("/") ? src.slice(1) : src);
+          const abs = path6.resolve(state.normalized.root, src.startsWith("/") ? src.slice(1) : src);
           state.entryAbsPaths.add(abs);
         }
         return html;
@@ -1664,7 +2073,7 @@ ${code}`, map: null };
       if (state.manualChunkSpecsPending) {
         for (const [group, specifier] of state.manualChunkSpecsPending) {
           try {
-            const r = await this.resolve(specifier, path5.join(n.root, "index.html"));
+            const r = await this.resolve(specifier, path6.join(n.root, "index.html"));
             if (r?.id) {
               state.manualChunkGroups.set(r.id, group);
               state.manualChunkGroups.set(r.id.split("?")[0], group);
@@ -1694,7 +2103,7 @@ ${code}`, map: null };
         };
         for (const item of n.shared) {
           if (item.import === false) continue;
-          const selfFile = await this.resolve(item.import, path5.join(n.root, "index.html")).then(
+          const selfFile = await this.resolve(item.import, path6.join(n.root, "index.html")).then(
             (r) => r?.id?.split("?")[0] ?? null
           ).catch(() => null);
           for (const alias of item.aliases) {
@@ -1709,7 +2118,7 @@ ${code}`, map: null };
               }
             }
             if (!file) {
-              file = await this.resolve(alias, path5.join(n.root, "index.html")).then(
+              file = await this.resolve(alias, path6.join(n.root, "index.html")).then(
                 (r) => r?.id?.split("?")[0] ?? null
               ).catch(() => null);
             }
@@ -1722,10 +2131,17 @@ ${code}`, map: null };
           }
         }
         state.sharedClosureRoots = [...rootKeys.entries()].map(([root, keys]) => ({ root, keys }));
+        if (state.sharedClosureRoots.length > 0) {
+          debugLog("facade", {
+            stage: "buildStart",
+            sharedClosureRoots: state.sharedClosureRoots.length,
+            keys: [...new Set(state.sharedClosureRoots.flatMap((r) => [...r.keys]))]
+          });
+        }
       }
       if (n.exposes.length > 0) {
         for (const e of n.exposes) {
-          const resolved = await this.resolve(e.import, path5.join(n.root, "index.html"));
+          const resolved = await this.resolve(e.import, path6.join(n.root, "index.html"));
           if (resolved) {
             state.exposeAbsPaths[e.import] = resolved.id.split("?")[0];
           } else {
@@ -1740,33 +2156,55 @@ ${code}`, map: null };
         });
       }
     },
-    async generateBundle(_opts, bundle) {
-      const n = state.normalized;
-      if (state.command !== "build" || !n || n.exposes.length === 0 || !n.manifest) return;
-      const facadeToChunk = {};
-      for (const [fileName, chunk] of Object.entries(bundle)) {
-        if (chunk.type !== "chunk") continue;
-        const facade = chunk.facadeModuleId?.split("?")[0];
-        if (facade) {
-          const viteMeta = chunk.viteMetadata;
-          facadeToChunk[facade] = {
-            file: fileName,
-            css: viteMeta ? [...viteMeta.importedCss ?? []] : []
+    generateBundle: {
+      order: "post",
+      handler(_opts, bundle) {
+        const n = state.normalized;
+        if (state.command !== "build" || !n || n.exposes.length === 0 || !n.manifest) return;
+        const collectStaticCss = (entryFile) => {
+          const visited = /* @__PURE__ */ new Set();
+          const cssFiles = /* @__PURE__ */ new Set();
+          const visit = (fileName) => {
+            if (visited.has(fileName)) return;
+            visited.add(fileName);
+            const chunk = bundle[fileName];
+            if (!chunk || chunk.type !== "chunk") return;
+            const viteMeta = chunk.viteMetadata;
+            for (const css of viteMeta?.importedCss ?? []) cssFiles.add(css);
+            for (const importedFile of chunk.imports) visit(importedFile);
           };
+          visit(entryFile);
+          return [...cssFiles];
+        };
+        const facadeToChunk = {};
+        for (const [fileName, chunk] of Object.entries(bundle)) {
+          if (chunk.type !== "chunk") continue;
+          const facade = chunk.facadeModuleId?.split("?")[0];
+          if (facade) {
+            facadeToChunk[facade] = {
+              file: fileName,
+              css: collectStaticCss(fileName)
+            };
+          }
         }
+        for (const e of n.exposes) {
+          const abs = state.exposeAbsPaths[e.import];
+          const hit = abs ? facadeToChunk[abs] : void 0;
+          if (hit) state.exposeFiles[e.name] = hit;
+        }
+        const entryChunkName = Object.keys(bundle).find((k) => bundle[k].type === "chunk" && k === n.filename);
+        const manifest = genProdManifest(n, state.exposeFiles, entryChunkName ?? n.filename);
+        debugLog("manifest", {
+          stage: "generateBundle",
+          exposes: Object.keys(state.exposeFiles).length,
+          exposesWithCss: Object.values(state.exposeFiles).filter((e) => e.css.length > 0).length
+        });
+        this.emitFile({
+          type: "asset",
+          fileName: "fulgurjs-manifest.json",
+          source: JSON.stringify(manifest, null, 2)
+        });
       }
-      for (const e of n.exposes) {
-        const abs = state.exposeAbsPaths[e.import];
-        const hit = abs ? facadeToChunk[abs] : void 0;
-        if (hit) state.exposeFiles[e.name] = hit;
-      }
-      const entryChunkName = Object.keys(bundle).find((k) => bundle[k].type === "chunk" && k === n.filename);
-      const manifest = genProdManifest(n, state.exposeFiles, entryChunkName ?? n.filename);
-      this.emitFile({
-        type: "asset",
-        fileName: "fulgurjs-manifest.json",
-        source: JSON.stringify(manifest, null, 2)
-      });
     },
     configureServer(server) {
       const n = state.normalized;
@@ -1788,7 +2226,10 @@ ${code}`, map: null };
           const raw = (req.url ?? "").split("?")[0];
           const stripped = raw.startsWith(baseNorm) ? `/${raw.slice(baseNorm.length)}` : raw;
           if (stripped === "/@fulgurjs-entry.js" || stripped === "/@fulgurjs-manifest.json") {
-            res.setHeader("Access-Control-Allow-Origin", "*");
+            const origin = Array.isArray(req.headers.origin) ? req.headers.origin[0] : req.headers.origin;
+            for (const [k, v] of Object.entries(corsHeadersFor(origin, n.devCorsOrigins))) {
+              res.setHeader(k, v);
+            }
             res.setHeader("Access-Control-Allow-Methods", "GET,OPTIONS");
             res.setHeader("Access-Control-Allow-Headers", "*");
             if (req.method === "OPTIONS") {
@@ -1852,7 +2293,7 @@ ${code}`, map: null };
       if (state.command === "serve" && code.includes("virtual:fulgurjs-runtime") && !code.includes("virtual:fulgurjs-runtime-proxy") && isExposeTargetFile(clean, state.normalized.root, state.normalized.exposes)) {
         return { code: code.split("virtual:fulgurjs-runtime").join("virtual:fulgurjs-runtime-proxy"), map: null };
       }
-      if (isPluginProcessedModule(code)) return null;
+      if (state.command === "serve" && isPluginProcessedModule(code)) return null;
       if (/type=(style|template)/.test(id)) return null;
       const isJsLike = /\.(m|c)?[jt]sx?$/.test(clean) || clean.endsWith(".vue");
       if (!isJsLike) return null;
@@ -1861,20 +2302,11 @@ ${code}`, map: null };
       if (state.command === "serve" && clean.includes("node_modules") && !id.includes(".vite/deps") && !devRewriteAll) {
         return null;
       }
-      if (state.command === "build" && !/\.vue(\?|$)/.test(id)) {
-        const quickCheck = /require\s*\(\s*["']|(?:from|import)\s*["']/.test(code);
-        if (!quickCheck) return null;
-        const allowNodeModules = isPureRemoteBuild;
-        return transformModule(code, id, {
-          options: state.normalized,
-          rewriteShared: true,
-          allowNodeModules,
-          sharedClosureRoots: state.sharedClosureRoots
-        });
+      if (state.command === "build") {
+        return buildFallbackTransform(code, id);
       }
-      const rewriteShared = state.command === "build" || state.normalized.devSharedSelf;
+      const rewriteShared = state.normalized.devSharedSelf;
       const remapSpecifier = (spec) => {
-        if (state.normalized.shared.some((s) => s.aliases.includes(spec))) return spec;
         const depMatch = spec.match(/\/node_modules\/\.vite\/deps\/([^/?]+)\.js/);
         if (depMatch) {
           const depName = depMatch[1];
@@ -1886,10 +2318,10 @@ ${code}`, map: null };
         return state.resolvedSharedPaths.get(cleanPath) ?? null;
       };
       return transformModule(code, id, {
+        onRewrite: () => recordRewritten(id),
         options: state.normalized,
         remapSpecifier,
         rewriteShared,
-        allowNodeModules: state.command === "build" ? isPureRemoteBuild || state.normalized.devSharedSelf : void 0,
         sharedClosureRoots: state.sharedClosureRoots
       });
     }
@@ -1899,12 +2331,32 @@ ${code}`, map: null };
     if (!n) return;
     for (const s of n.shared) {
       if (s.import === false) continue;
-      void server.pluginContainer.resolveId(s.import, path5.join(n.root, "index.html")).then((r) => {
+      void server.pluginContainer.resolveId(s.import, path6.join(n.root, "index.html")).then((r) => {
         if (r?.id) state.resolvedSharedPaths.set(r.id.split("?")[0], s.configKey);
       }).catch(() => {
       });
     }
   }
+  async function buildFallbackTransform(code, id) {
+    if (/type=(style|template)/.test(id)) return null;
+    const clean = id.split("?")[0];
+    const isJsLike = /\.(m|c)?[jt]sx?$/.test(clean) || clean.endsWith(".vue");
+    if (!isJsLike) return null;
+    const quickCheck = /require\s*\(\s*["']|(?:from|import)\s*["']/.test(code);
+    if (!quickCheck) return null;
+    const n = state.normalized;
+    const isPureRemoteBuild = n.exposes.length > 0 && n.remotes.length === 0;
+    return transformModule(code, id, {
+      onRewrite: () => {
+        debugLog("transform", { stage: "post-fallback", mode: "build", module: redactModulePath(id, n.root) });
+        recordRewritten(id);
+      },
+      options: n,
+      rewriteShared: true,
+      allowNodeModules: isPureRemoteBuild || n.devSharedSelf,
+      sharedClosureRoots: state.sharedClosureRoots
+    });
+  }
   return [pre, post];
 }
 var index_default = federation;