@fulgurjs/federation 2.0.3 → 2.1.0

package/dist/vue.js

@@ -2,7 +2,7 @@ import {
   ErrorCodes,
   FgError
 } from "./chunk-3VBYOVH4.js";
-import "./chunk-RQPLFDDT.js";
+import "./chunk-RP6HNIQT.js";
 
 // src/vue.ts
 import { defineAsyncComponent, defineComponent, h } from "vue";
@@ -210,8 +210,10 @@ var DEFAULT_TIMEOUT = 15e3;
 var DEFAULT_RETRIES = 2;
 var BREAKER_THRESHOLD = 5;
 var BREAKER_RESET_MS = 3e4;
+var BACKOFF_MAX_MS = 4e3;
+var BACKOFF_JITTER = 0.2;
 function createRuntime() {
-  const shareScopeMap2 = {};
+  const shareScopeMap2 = /* @__PURE__ */ Object.create(null);
   const remotes = /* @__PURE__ */ new Map();
   const plugins = [];
   const loadedModules = /* @__PURE__ */ new Map();
@@ -228,7 +230,7 @@ function createRuntime() {
       }
     }
   };
-  const getScope = (name) => shareScopeMap2[name] ??= {};
+  const getScope = (name) => shareScopeMap2[name] ??= /* @__PURE__ */ Object.create(null);
   function emitError(info) {
     try {
       hooks.onRemoteError?.(info);
@@ -244,22 +246,49 @@ function createRuntime() {
   }
   function registerShare2(scopeName, name, version, get, opts = {}) {
     const scope = getScope(scopeName || "default");
-    const byName = scope[name] ??= {};
-    if (byName[version]) {
+    const own = Object.hasOwn(scope, name) ? scope[name] : void 0;
+    let byName = own && typeof own === "object" ? own : void 0;
+    if (!byName) {
+      byName = /* @__PURE__ */ Object.create(null);
+      scope[name] = byName;
+    }
+    if (Object.hasOwn(byName, version) && byName[version]) {
       return;
     }
     byName[version] = { version, get, from: opts.from ?? "unknown", eager: !!opts.eager, loaded: !!opts.loaded };
   }
+  function assertRemoteParams(r) {
+    const check = (v, name, int10) => {
+      if (v === void 0) return;
+      const ok = typeof v === "number" && (int10 ? Number.isInteger(v) && v >= 0 && v <= 10 : Number.isFinite(v) && v > 0);
+      if (!ok) {
+        throw new Error(
+          `[fulgurjs] registerRemote("${r.name}"): ${name} must be a ${int10 ? "integer 0..10" : "finite positive number"}, got ${String(v)}`
+        );
+      }
+    };
+    check(r.timeout, "timeout");
+    check(r.retries, "retries", true);
+    if (r.breaker) {
+      check(r.breaker.threshold, "breaker.threshold");
+      check(r.breaker.resetMs, "breaker.resetMs");
+    }
+  }
   function registerRemotes2(list) {
     for (const r of list) {
+      assertRemoteParams(r);
       const prev = remotes.get(r.name);
       remotes.set(r.name, {
         timeout: DEFAULT_TIMEOUT,
         retries: DEFAULT_RETRIES,
         ...prev,
         ...r,
+        // 熔断参数随最新配置刷新；计数状态（fails/openUntil）跨注册保留——半开窗口不被重置
+        breakerThreshold: r.breaker?.threshold ?? prev?.breakerThreshold ?? BREAKER_THRESHOLD,
+        breakerResetMs: r.breaker?.resetMs ?? prev?.breakerResetMs ?? BREAKER_RESET_MS,
         state: prev?.state ?? "idle",
         breakerState: prev?.breakerState ?? { fails: 0, openUntil: 0 },
+        entryInflight: prev?.entryInflight ?? /* @__PURE__ */ new Map(),
         debug: prev?.debug ?? { entry: r.entry, status: "idle" }
       });
     }
@@ -333,6 +362,14 @@ function createRuntime() {
     entry.loaded = true;
     return entry.get();
   }
+  function sanitizeUrl(u) {
+    try {
+      const x = new URL(u, typeof location < "u" ? location.href : "http://f.invalid");
+      return x.protocol + "//" + x.host + x.pathname;
+    } catch {
+      return String(u).replace(/[?#].*$/, "");
+    }
+  }
   function withTimeout(p, ms, label) {
     return new Promise((resolve, reject) => {
       const t = setTimeout(() => reject(new Error(`timeout after ${ms}ms: ${label}`)), ms);
@@ -365,14 +402,16 @@ function createRuntime() {
     }
   }
   async function importEntry(url, remote) {
-    return withTimeout(
-      import(
-        /* @vite-ignore */
-        url
-      ),
-      remote.timeout ?? DEFAULT_TIMEOUT,
-      `load remoteEntry ${url}`
+    const cached = remote.entryInflight.get(url);
+    const inflight = cached ?? import(
+      /* @vite-ignore */
+      url
     );
+    if (!cached) {
+      remote.entryInflight.set(url, inflight);
+      inflight.catch(() => remote.entryInflight.delete(url));
+    }
+    return withTimeout(inflight, remote.timeout ?? DEFAULT_TIMEOUT, `load remoteEntry ${url}`);
   }
   async function acquireContainer(remote, overrides) {
     const scopeKey = remote.shareScope || "default";
@@ -403,7 +442,11 @@ function createRuntime() {
       const loaders = [];
       if (remote.promise) {
         loaders.push(async () => {
-          const resolved = await remote.promise();
+          const resolved = await withTimeout(
+            remote.promise(),
+            remote.timeout ?? DEFAULT_TIMEOUT,
+            `resolve promise remote "${remote.name}"`
+          );
           const container2 = typeof resolved === "string" ? await importEntry(resolved, remote) : resolved;
           validateContainerInterface(container2, remote);
           return container2;
@@ -434,25 +477,26 @@ function createRuntime() {
             lastErr = err;
             if (err?.code) throw err;
             if (attempt < maxRetries) {
-              await sleep(200 * 2 ** attempt);
+              await sleep(Math.min(BACKOFF_MAX_MS, 200 * 2 ** attempt) * (1 - BACKOFF_JITTER * (1 - 2 * Math.random())));
             }
           }
         }
         if (succeeded) break;
       }
       if (!succeeded || !container) {
+        const shown = sanitizeUrl(remote.entry);
         const hints = [];
         if (/^https?:\/\//.test(remote.entry) && typeof location !== "undefined") {
-          hints.push(`1. is the remote dev server running?  try opening ${remote.entry} in the browser \u2014 it must return JS, not HTML/an error`);
-          hints.push(`2. is the URL correct in federation({ remotes })?  dev and prod entries can differ`);
-          hints.push(`3. CORS: the remote dev server must allow cross-origin requests (fulgurjs-federation enables server.cors automatically; a custom server config may have disabled it)`);
+          hints.push(`1. is the remote dev server running?  open ${shown} in a browser \u2014 it must return JS, not HTML`);
+          hints.push(`2. is the URL correct in federation({ remotes })?  dev/prod entries can differ`);
+          hints.push(`3. CORS: the remote dev server must allow cross-origin requests (check its server.cors)`);
         } else {
-          hints.push(`1. is the remote deployed and reachable?  try opening ${remote.entry} in the browser \u2014 it must return JS`);
-          hints.push(`2. NGINX/CDN routing: the entry path must serve the remoteEntry JS file (check try_files / fallback rules)`);
+          hints.push(`1. is the remote deployed?  open ${shown} in a browser \u2014 it must return JS`);
+          hints.push(`2. NGINX/CDN routing: the entry path must serve the remoteEntry JS (check try_files)`);
         }
         throw new FgError(
           ErrorCodes.REMOTE_LOAD_FAILED,
-          `failed to load remote "${remote.name}" from ${remote.entry}: ${String(lastErr?.message ?? lastErr)}
+          `failed to load remote "${remote.name}" from ${shown}: ${String(lastErr?.message ?? lastErr)}
 ` + hints.join("\n"),
           { remote: remote.name }
         );
@@ -484,8 +528,8 @@ function createRuntime() {
       remote.debug.status = "failed";
       remote.debug.error = String(err?.message ?? err);
       b.fails += 1;
-      if (b.fails >= BREAKER_THRESHOLD) {
-        b.openUntil = Date.now() + BREAKER_RESET_MS;
+      if (b.fails >= remote.breakerThreshold) {
+        b.openUntil = Date.now() + remote.breakerResetMs;
         b.fails = 0;
       }
       if (err instanceof FgError) {
@@ -503,7 +547,7 @@ function createRuntime() {
       throw wrapped;
     }
   }
-  function parseSpec(spec) {
+  function parseSpec2(spec) {
     const idx = spec.indexOf("/");
     if (idx === -1) return { remote: spec, module: "" };
     return { remote: spec.slice(0, idx), module: normalizeModuleName(spec.slice(idx + 1)) };
@@ -513,8 +557,12 @@ function createRuntime() {
     return m.startsWith(".") ? m : `./${m}`;
   }
   async function loadRemote2(spec, opts) {
-    const { remote: name, module } = parseSpec(spec);
-    hooks.beforeLoadRemote?.({ remote: name, module });
+    const { remote: name, module } = parseSpec2(spec);
+    try {
+      hooks.beforeLoadRemote?.({ remote: name, module });
+    } catch (hookErr) {
+      console.warn("[fulgurjs] beforeLoadRemote hook error (ignored):", hookErr);
+    }
     const remote = remotes.get(name);
     if (!remote) {
       throw new FgError(
@@ -562,7 +610,11 @@ function createRuntime() {
       }
       throw err;
     }
-    hooks.afterLoadRemote?.({ remote: name, module, module_ns: ns });
+    try {
+      hooks.afterLoadRemote?.({ remote: name, module, module_ns: ns });
+    } catch (hookErr) {
+      console.warn("[fulgurjs] afterLoadRemote hook error (ignored):", hookErr);
+    }
     if (ns && typeof ns === "object" && Object.keys(ns).length === 0) {
       const err = new FgError(
         ErrorCodes.EMPTY_EXPORTS,
@@ -582,7 +634,7 @@ function createRuntime() {
     return acquireContainer(remote);
   }
   async function preloadRemote2(spec, opts = {}) {
-    const { remote: name, module } = parseSpec(spec);
+    const { remote: name, module } = parseSpec2(spec);
     const remote = remotes.get(name);
     if (!remote) {
       throw new FgError(ErrorCodes.REMOTE_UNKNOWN, `unknown remote "${name}"`, { remote: name });
@@ -634,15 +686,19 @@ function createRuntime() {
     const resolveAssetUrl = (asset) => {
       const pageUrl = typeof document !== "undefined" ? document.baseURI : void 0;
       const base = new URL(remote.entry, pageUrl || "http://fulgurjs.invalid/");
+      if (!base.pathname.endsWith("/") && !base.pathname.split("/").pop().includes(".")) {
+        base.pathname += "/";
+      }
       return new URL(asset, base).href;
     };
     try {
       if (remote.manifestUrl) {
         let manifestPromise = remoteManifests.get(remote.manifestUrl);
         if (!manifestPromise) {
-          manifestPromise = fetch(remote.manifestUrl, { cache: "no-cache" }).then(
-            (res) => res.ok ? res.json() : void 0
-          );
+          manifestPromise = fetch(remote.manifestUrl, {
+            cache: "no-cache",
+            signal: AbortSignal.timeout(8e3)
+          }).then((res) => res.ok ? res.json() : void 0);
           remoteManifests.set(remote.manifestUrl, manifestPromise);
           manifestPromise.then(
             (manifest2) => {
@@ -653,6 +709,17 @@ function createRuntime() {
         }
         const manifest = await manifestPromise;
         if (manifest) {
+          const sv = manifest.schemaVersion;
+          if (typeof sv === "number" && (!Number.isInteger(sv) || sv > 1)) {
+            emitError({
+              remote: name,
+              error: new FgError(ErrorCodes.PRELOAD_FAILED, `unsupported manifest schemaVersion ${String(sv)} (expected 1)`, {
+                remote: name
+              })
+            });
+            await inject(remote.entry, "modulepreload");
+            return;
+          }
           await inject(remote.entry, "modulepreload");
           const exposes = manifest.exposes;
           const entries = Array.isArray(exposes) ? exposes.filter((item) => item && typeof item === "object").map((item) => [String(item.name ?? ""), item]) : exposes && typeof exposes === "object" ? Object.entries(exposes) : [];
@@ -710,7 +777,7 @@ function createRuntime() {
     loadRemote: loadRemote2,
     getContainer: getContainer2,
     preloadRemote: preloadRemote2,
-    parseSpec
+    parseSpec: parseSpec2
   };
 }
 var g = globalThis;
@@ -729,6 +796,7 @@ var loadShare = runtime.loadShare;
 var loadRemote = runtime.loadRemote;
 var getContainer = runtime.getContainer;
 var preloadRemote = runtime.preloadRemote;
+var parseSpec = runtime.parseSpec;
 var shareScopeMap = runtime.shareScopeMap;
 
 // src/vue.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fulgurjs/federation",
-  "version": "2.0.3",
+  "version": "2.1.0",
   "type": "module",
   "description": "Vite Module Federation with full Webpack MF parity. Dev & production, no compromise.",
   "license": "MIT",
@@ -62,13 +62,13 @@
     "CHANGELOG.md",
     "DESIGN.md",
     "examples",
-    "docs/\u8fc1\u79fb\u6307\u5357.md",
-    "docs/webpack-mf-\u5bf9\u7167\u4e0e\u7f3a\u53e3.md",
-    "docs/\u6c99\u7bb1\u8fb9\u754c\u5ba1\u8ba1.md",
-    "docs/P5-vite7-8\u517c\u5bb9\u77e9\u9635.md"
+    "docs/迁移指南.md",
+    "docs/webpack-mf-对照与缺口.md",
+    "docs/沙箱边界审计.md",
+    "docs/P5-vite7-8兼容矩阵.md"
   ],
   "scripts": {
-    "build": "cp ../../README.md README.md && mkdir -p docs && cp ../../docs/\u8fc1\u79fb\u6307\u5357.md ../../docs/webpack-mf-\u5bf9\u7167\u4e0e\u7f3a\u53e3.md ../../docs/\u6c99\u7bb1\u8fb9\u754c\u5ba1\u8ba1.md ../../docs/P5-vite7-8\u517c\u5bb9\u77e9\u9635.md docs/ && cp ../../CHANGELOG.md CHANGELOG.md && cp ../../DESIGN.md DESIGN.md && rm -rf examples && cp -r ../../examples examples && esbuild src/runtime/index.ts --bundle --format=esm --target=es2022 --minify --outfile=dist/runtime.js && node scripts/gen-runtime.mjs && tsup src/index.ts src/pages.ts src/config.ts src/vue.ts src/context.ts --format esm,cjs --dts --external vite --target node18 --clean && esbuild src/cli.ts --bundle --format=esm --target=node18 --platform=node --outfile=dist/cli.js && esbuild src/runtime/index.ts --bundle --format=esm --target=es2022 --minify --outfile=dist/runtime.js && node scripts/check-gzip.mjs && node scripts/check-manual-codes.mjs",
+    "build": "cp ../../README.md README.md && mkdir -p docs && cp ../../docs/迁移指南.md ../../docs/webpack-mf-对照与缺口.md ../../docs/沙箱边界审计.md ../../docs/P5-vite7-8兼容矩阵.md docs/ && cp ../../CHANGELOG.md CHANGELOG.md && cp ../../DESIGN.md DESIGN.md && rm -rf examples && cp -r ../../examples examples && esbuild src/runtime/index.ts --bundle --format=esm --target=es2022 --minify --outfile=dist/runtime.js && node scripts/gen-runtime.mjs && tsup src/index.ts src/pages.ts src/config.ts src/vue.ts src/context.ts --format esm,cjs --dts --external vite --target node18 --clean && esbuild src/cli.ts --bundle --format=esm --target=node18 --platform=node --outfile=dist/cli.js && esbuild src/runtime/index.ts --bundle --format=esm --target=es2022 --minify --outfile=dist/runtime.js && node scripts/check-gzip.mjs && node scripts/check-manual-codes.mjs",
     "dev": "tsup --watch",
     "test": "vitest run",
     "typecheck": "tsc --noEmit",