@fulgurjs/federation 2.0.3 → 3.0.0

package/dist/index.js

@@ -1,15 +1,43 @@
 import {
   RUNTIME_VERSION
-} from "./chunk-RQPLFDDT.js";
+} from "./chunk-YBS2PO34.js";
 
 // src/index.ts
-import path5 from "path";
+import path6 from "path";
 import { createRequire as createRequire2 } from "module";
 
 // src/options.ts
 import { createRequire } from "module";
 import fs from "fs";
 import path from "path";
+
+// src/dev-cors.ts
+function normalizeDevCorsOrigins(input) {
+  if (input === void 0 || input === "*") return { ok: true, value: input };
+  if (!Array.isArray(input) || input.length === 0) {
+    return { ok: false, reason: '\u5FC5\u987B\u662F "*" \u6216\u975E\u7A7A\u6570\u7EC4' };
+  }
+  for (const item of input) {
+    if (typeof item !== "string" || !/^https?:\/\/[^/]+$/i.test(item)) {
+      return { ok: false, reason: `\u6765\u6E90\u5FC5\u987B\u662F http(s)://host[:port] \u5F62\u6001\uFF08\u65E0\u8DEF\u5F84\uFF09\uFF0Cgot: ${JSON.stringify(item)}` };
+    }
+  }
+  return { ok: true, value: input };
+}
+function corsHeadersFor(origin, allowed) {
+  if (allowed === void 0 || allowed === "*") {
+    return { "Access-Control-Allow-Origin": "*" };
+  }
+  if (!origin || !allowed.includes(origin)) return {};
+  return { "Access-Control-Allow-Origin": origin, Vary: "Origin" };
+}
+function isNonLoopbackHost(host) {
+  if (host === void 0 || host === false) return false;
+  const h = host === true ? "0.0.0.0" : String(host);
+  return !["localhost", "127.0.0.1", "::1", "[::1]"].includes(h.toLowerCase());
+}
+
+// src/options.ts
 var DEFAULT_FILENAME = "fulgurjs-remoteEntry.js";
 var RUNTIME_VIRTUAL_ID = "virtual:fulgurjs-runtime";
 var RUNTIME_PROXY_VIRTUAL_ID = "virtual:fulgurjs-runtime-proxy";
@@ -264,6 +292,41 @@ function validateOptions(options) {
   // or split: { '${key}': { dev: 'http://localhost:5101', prod: '/${key}' } }`
       );
     }
+    if (cfg.timeout !== void 0 && (typeof cfg.timeout !== "number" || !Number.isFinite(cfg.timeout) || cfg.timeout <= 0)) {
+      configError(
+        `CFG-009: remotes["${key}"].timeout must be a finite positive number (ms)`,
+        cfg.timeout,
+        "e.g. 15000\uFF08\u7701\u7565\u7528\u9ED8\u8BA4 15s\uFF09",
+        `remotes: { '${key}': { external: '\u2026', timeout: 15000 } }`
+      );
+    }
+    if (cfg.retries !== void 0 && (typeof cfg.retries !== "number" || !Number.isInteger(cfg.retries) || cfg.retries < 0 || cfg.retries > 10)) {
+      configError(
+        `CFG-009: remotes["${key}"].retries must be an integer in 0..10`,
+        cfg.retries,
+        "e.g. 2\uFF08\u7701\u7565\u7528\u9ED8\u8BA4 2\uFF1B\u4E0A\u9650 10 \u9632\u9000\u907F\u98CE\u66B4\uFF09",
+        `remotes: { '${key}': { external: '\u2026', retries: 2 } }`
+      );
+    }
+    const brk = cfg.breaker;
+    if (brk) {
+      if (brk.threshold !== void 0 && (typeof brk.threshold !== "number" || !Number.isFinite(brk.threshold) || brk.threshold <= 0)) {
+        configError(
+          `CFG-009: remotes["${key}"].breaker.threshold must be a finite positive number`,
+          brk.threshold,
+          "e.g. 5\uFF08\u8FDE\u7EED\u5931\u8D25 5 \u6B21\u540E\u7194\u65AD\uFF09",
+          `remotes: { '${key}': { external: '\u2026', breaker: { threshold: 5, resetMs: 30000 } } }`
+        );
+      }
+      if (brk.resetMs !== void 0 && (typeof brk.resetMs !== "number" || !Number.isFinite(brk.resetMs) || brk.resetMs <= 0)) {
+        configError(
+          `CFG-009: remotes["${key}"].breaker.resetMs must be a finite positive number (ms)`,
+          brk.resetMs,
+          "e.g. 30000\uFF08\u7194\u65AD 30s \u540E\u534A\u5F00\uFF09",
+          `remotes: { '${key}': { external: '\u2026', breaker: { threshold: 5, resetMs: 30000 } } }`
+        );
+      }
+    }
     for (const slot of ["dev", "prod", "external"]) {
       const v = cfg[slot];
       if (v !== void 0 && typeof v !== "string") {
@@ -282,6 +345,23 @@ function validateOptions(options) {
       }
     }
   }
+  const corsCheck = normalizeDevCorsOrigins(options.devCorsOrigins);
+  if (!corsCheck.ok) {
+    configError(
+      `CFG-010: devCorsOrigins ${corsCheck.reason}`,
+      options.devCorsOrigins,
+      `'*'\uFF08\u5168\u653E\u5F00\uFF09\u6216\u6765\u6E90 allowlist \u6570\u7EC4`,
+      `devCorsOrigins: ['http://localhost:5100', 'http://127.0.0.1:5100']`
+    );
+  }
+  if (options.devFsRoot !== void 0 && typeof options.devFsRoot !== "boolean") {
+    configError(
+      "`devFsRoot` must be a boolean",
+      options.devFsRoot,
+      "true\uFF08dev manifest \u643A\u5E26 fsRoot\uFF0C\u73B0\u72B6\u9ED8\u8BA4\uFF09\u6216 false\uFF08\u4E0D\u66B4\u9732\u672C\u673A\u8DEF\u5F84\uFF09",
+      `devFsRoot: false`
+    );
+  }
 }
 function normalizeOptions(options, root, command) {
   const warnings = [];
@@ -353,7 +433,9 @@ function normalizeOptions(options, root, command) {
     pkgDependencies,
     warnings,
     // dev 改写开关：默认纯 remote 参与 shared 协商，宿主（有 remotes）不参与；可显式覆盖
-    devSharedSelf: options.devSharedSelf ?? remotes.length === 0
+    devSharedSelf: options.devSharedSelf ?? remotes.length === 0,
+    devCorsOrigins: options.devCorsOrigins,
+    devFsRoot: options.devFsRoot ?? true
   };
 }
 
@@ -362,6 +444,145 @@ import { init as initLexer, parse } from "es-module-lexer";
 import MagicString from "magic-string";
 import path2 from "path";
 
+// src/manifest.ts
+var MANIFEST_SCHEMA_VERSION = 1;
+var isPlainObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+function validAssetRef(v) {
+  if (typeof v !== "string" || v.length === 0) return false;
+  if (/[\s\u0000-\u001f]/.test(v)) return false;
+  if (/^https?:\/\/[^/@\s]+:[^/@\s]+@/.test(v)) return false;
+  return true;
+}
+function validExposeName(v) {
+  return typeof v === "string" && /^\.[\w./-]+$/.test(v);
+}
+function parseManifest(input) {
+  const issues = [];
+  if (!isPlainObject(input)) {
+    return { issues: [{ field: "$", message: "manifest \u5FC5\u987B\u662F JSON \u5BF9\u8C61", got: typeof input }] };
+  }
+  const m = input;
+  let schemaVersion = MANIFEST_SCHEMA_VERSION;
+  if (m.schemaVersion !== void 0) {
+    if (typeof m.schemaVersion !== "number" || !Number.isInteger(m.schemaVersion)) {
+      issues.push({ field: "schemaVersion", message: "\u5FC5\u987B\u662F\u6574\u6570", got: m.schemaVersion });
+    } else if (m.schemaVersion !== MANIFEST_SCHEMA_VERSION) {
+      return {
+        issues: [
+          {
+            field: "schemaVersion",
+            message: `\u4E0D\u652F\u6301\u7684 manifest \u4E3B\u7248\u672C\uFF08\u5F53\u524D\u6D88\u8D39\u7AEF\u652F\u6301 ${MANIFEST_SCHEMA_VERSION}\uFF09`,
+            got: m.schemaVersion
+          }
+        ],
+        unsupportedVersion: m.schemaVersion
+      };
+    }
+  }
+  if (typeof m.name !== "string" || m.name.length === 0) {
+    issues.push({ field: "name", message: "\u5FC5\u987B\u662F\u975E\u7A7A\u5B57\u7B26\u4E32", got: m.name });
+  }
+  const exposes = m.exposes;
+  const shared = m.shared;
+  const sharedIssues = validateShared(shared);
+  issues.push(...sharedIssues);
+  if (Array.isArray(exposes)) {
+    if (m.devServer !== true) {
+      issues.push({ field: "devServer", message: "dev \u6570\u7EC4\u5F62\u6001 exposes \u5FC5\u987B\u4F34\u968F devServer: true", got: m.devServer });
+    }
+    if (typeof m.base !== "string" || !/^\/(?:.*\/)?$/.test(m.base)) {
+      issues.push({ field: "base", message: "\u5FC5\u987B\u662F\u4EE5 / \u5F00\u5934\u4E14 / \u7ED3\u5C3E\u7684\u8DEF\u5F84", got: m.base });
+    }
+    if (!validAssetRef(m.entry)) {
+      issues.push({ field: "entry", message: "\u5FC5\u987B\u662F\u5408\u6CD5\u8D44\u6E90\u5730\u5740", got: m.entry });
+    }
+    for (const [i, e] of exposes.entries()) {
+      if (!isPlainObject(e)) {
+        issues.push({ field: `exposes[${i}]`, message: "\u5FC5\u987B\u662F\u5BF9\u8C61", got: typeof e });
+        continue;
+      }
+      if (!validExposeName(e.name)) {
+        issues.push({ field: `exposes[${i}].name`, message: '\u5FC5\u987B\u662F "./xxx" \u5F62\u6001\u7684 expose \u540D', got: e.name });
+      }
+      if (typeof e.src !== "string" || e.src.length === 0) {
+        issues.push({ field: `exposes[${i}].src`, message: "dev \u5F62\u6001\u5FC5\u987B\u63D0\u4F9B\u6E90\u7801\u76F8\u5BF9\u8DEF\u5F84", got: e.src });
+      }
+      if (!validAssetRef(e.file)) {
+        issues.push({ field: `exposes[${i}].file`, message: "\u5FC5\u987B\u662F\u53EF\u8BF7\u6C42\u7684\u6A21\u5757\u5730\u5740", got: e.file });
+      }
+    }
+  } else if (isPlainObject(exposes)) {
+    if (!validAssetRef(m.entry)) {
+      issues.push({ field: "entry", message: "\u5FC5\u987B\u662F\u5408\u6CD5\u8D44\u6E90\u5730\u5740\uFF08\u76F8\u5BF9\u57FA\u51C6 = \u6240\u5728\u76EE\u5F55\uFF09", got: m.entry });
+    }
+    for (const [key, v] of Object.entries(exposes)) {
+      if (!validExposeName(key)) {
+        issues.push({ field: `exposes["${key}"]`, message: '\u952E\u5FC5\u987B\u662F "./xxx" \u5F62\u6001\u7684 expose \u540D' });
+      }
+      if (!isPlainObject(v)) {
+        issues.push({ field: `exposes["${key}"]`, message: "\u503C\u5FC5\u987B\u662F\u5BF9\u8C61", got: typeof v });
+        continue;
+      }
+      if (!validAssetRef(v.file)) {
+        issues.push({ field: `exposes["${key}"].file`, message: "\u5FC5\u987B\u662F\u8D44\u6E90\u8DEF\u5F84\uFF08\u76F8\u5BF9 entry \u76EE\u5F55\uFF09", got: v.file });
+      }
+      if (v.css !== void 0) {
+        if (!Array.isArray(v.css)) {
+          issues.push({ field: `exposes["${key}"].css`, message: "\u5FC5\u987B\u662F\u5B57\u7B26\u4E32\u6570\u7EC4", got: typeof v.css });
+        } else {
+          v.css.forEach((css, i) => {
+            if (!validAssetRef(css)) {
+              issues.push({ field: `exposes["${key}"].css[${i}]`, message: "\u5FC5\u987B\u662F\u8D44\u6E90\u8DEF\u5F84", got: css });
+            }
+          });
+        }
+      }
+    }
+  } else {
+    issues.push({ field: "exposes", message: "\u5FC5\u987B\u662F\u6570\u7EC4\uFF08dev\uFF09\u6216\u5BF9\u8C61\uFF08prod\uFF09", got: typeof exposes });
+  }
+  if (issues.length > 0) return { issues };
+  return { manifest: input, issues };
+}
+function validateShared(shared) {
+  if (shared === void 0) return [];
+  const issues = [];
+  if (!Array.isArray(shared)) {
+    return [{ field: "shared", message: "\u5FC5\u987B\u662F\u6570\u7EC4", got: typeof shared }];
+  }
+  for (const [i, s] of shared.entries()) {
+    if (!isPlainObject(s)) {
+      issues.push({ field: `shared[${i}]`, message: "\u5FC5\u987B\u662F\u5BF9\u8C61", got: typeof s });
+      continue;
+    }
+    if (typeof s.name !== "string" || s.name.length === 0) {
+      issues.push({ field: `shared[${i}].name`, message: "\u5FC5\u987B\u662F\u975E\u7A7A\u5B57\u7B26\u4E32", got: s.name });
+    }
+    if (typeof s.version !== "string" || s.version.length === 0) {
+      issues.push({ field: `shared[${i}].version`, message: "\u5FC5\u987B\u662F\u975E\u7A7A\u5B57\u7B26\u4E32", got: s.version });
+    }
+  }
+  return issues;
+}
+function isDevManifest(m) {
+  return Array.isArray(m.exposes);
+}
+function normalizeExposes(manifest) {
+  const out = /* @__PURE__ */ new Map();
+  if (isDevManifest(manifest)) {
+    for (const e of manifest.exposes) {
+      if (!validExposeName(e.name)) continue;
+      out.set(e.name, { name: e.name, file: e.file, css: [], src: e.src });
+    }
+  } else {
+    for (const [key, v] of Object.entries(manifest.exposes)) {
+      if (!validExposeName(key)) continue;
+      out.set(key, { name: key, file: v.file, css: Array.isArray(v.css) ? v.css.filter((c) => typeof c === "string") : [] });
+    }
+  }
+  return out;
+}
+
 // src/virtual.ts
 function jsonReplacer(_k, v) {
   return v;
@@ -557,6 +778,9 @@ function genRuntimeProxyModule() {
     `  return await __fulgurjs_mod_p;`,
     `};`,
     ...promiseApis.map((m) => `export const ${m} = (...a) => __fulgurjs_rt().then((m2) => m2.${m}(...a));`),
+    // shareScopeMap：本模块只会在应用代码 import 链里被求值——页面运行期单例必已由 init 建立
+    // （时序契约：宿主/远程 init 先于一切联邦模块），故求值期直读 globalThis 安全
+    `export const shareScopeMap = (globalThis).__FULGURJS_RUNTIME__?.shareScopeMap;`,
     `export const getRuntime = () => (globalThis).__FULGURJS_RUNTIME__;`,
     `export const unwrapDefault = (ns) =>`,
     `  ns && typeof ns === 'object' && 'default' in ns ? (ns.default !== undefined ? ns.default : ns) : ns;`,
@@ -660,17 +884,50 @@ function genBuildRemoteEntry(options, exposeAbsPaths) {
     ""
   ].join("\n");
 }
+function genApiFacade(mode) {
+  if (mode === "build") {
+    return [
+      "export {",
+      "  initSharing, registerShare, registerRemotes, registerRemote, registerPlugins,",
+      "  loadShare, loadRemote, getContainer, preloadRemote, parseSpec,",
+      "  getRuntime, shareScopeMap, unwrapDefault, version,",
+      '} from "virtual:fulgurjs-runtime";',
+      "export { provideAppContext, getAppContext, requireAppContext } from '@fulgurjs/federation/internal/context.js';",
+      "export { definePages, validatePages } from '@fulgurjs/federation/internal/pages.js';",
+      "export { remoteComponent } from '@fulgurjs/federation/internal/vue.js';",
+      "export { default as remoteSchema } from 'virtual:fulgurjs-remote-schema';",
+      ""
+    ].join("\n");
+  }
+  return [
+    "export {",
+    "  loadRemote, loadShare, preloadRemote, getContainer,",
+    "  registerRemote, registerRemotes, registerShare, initSharing, registerPlugins,",
+    "  parseSpec, getRuntime, shareScopeMap, unwrapDefault, version,",
+    '} from "virtual:fulgurjs-runtime-proxy";',
+    "export { provideAppContext, getAppContext, requireAppContext } from '@fulgurjs/federation/internal/context.js';",
+    "export { definePages, validatePages } from '@fulgurjs/federation/internal/pages.js';",
+    `let __fulgurjs_vue_p;`,
+    `export const remoteComponent = (...a) => (__fulgurjs_vue_p ??= import('@fulgurjs/federation/internal/vue.js')).then((m) => m.remoteComponent(...a));`,
+    "export { default as remoteSchema } from 'virtual:fulgurjs-remote-schema';",
+    ""
+  ].join("\n");
+}
 function genDevManifest(options, base) {
   const b = base.endsWith("/") ? base : `${base}/`;
   return {
+    schemaVersion: MANIFEST_SCHEMA_VERSION,
     id: options.name,
     name: options.name,
     version: options.pkgDependencies?.["fulgurjs"] ?? "0.0.0",
     devServer: true,
     base: b,
     entry: `${b}@fulgurjs-entry.js`,
-    /** 本地联调时供宿主端 dts 类型直连（见 dts.ts）；远程不在本机时宿主回退 any 桩 */
-    fsRoot: options.root,
+    /**
+     * 本地联调时供宿主端 dts 类型直连（见 dts.ts）；远程不在本机时宿主回退 any 桩。
+     * WP5：devFsRoot: false 时不写入（本机路径不外发）；该字段永不进入 prod manifest。
+     */
+    ...options.devFsRoot === false ? {} : { fsRoot: options.root },
     exposes: options.exposes.map((e) => ({
       name: e.name,
       src: e.import,
@@ -692,6 +949,7 @@ function genDevManifest(options, base) {
 }
 function genProdManifest(options, exposeFiles, entryFile) {
   return {
+    schemaVersion: MANIFEST_SCHEMA_VERSION,
     id: options.name,
     name: options.name,
     entry: entryFile,
@@ -873,6 +1131,7 @@ async function transformModule(code, id, ctx) {
       cjsEdited = true;
     }
     if (!cjsEdited) return null;
+    ctx.onRewrite?.();
     return { code, map: null };
   }
   await ensureLexer();
@@ -995,6 +1254,7 @@ export { ${nsAs[1]} };`);
     }
   }
   if (!edited) return null;
+  ctx.onRewrite?.();
   if (usesRuntimeHelpers) {
     const runtimeSpec = JSON.stringify(ctx.devUrls?.runtime ?? "virtual:fulgurjs-runtime");
     s.prepend(
@@ -1020,7 +1280,22 @@ async function fetchManifest(devEntry, attempts = 30, delayMs = 2e3) {
   for (let i = 0; i < attempts; i++) {
     try {
       const res = await fetch(manifestUrl, { signal: AbortSignal.timeout(3e3) });
-      if (res.ok) return await res.json();
+      if (res.ok) {
+        const parsed = parseManifest(await res.json());
+        if (parsed.unsupportedVersion) {
+          console.warn(
+            `[fulgurjs] dts: remote manifest schemaVersion=${parsed.unsupportedVersion} \u4E0D\u88AB\u5F53\u524D\u63D2\u4EF6\u652F\u6301\uFF08\u672C\u673A\u652F\u6301 1\uFF09\uFF1B\u7C7B\u578B\u6620\u5C04\u8DF3\u8FC7\u3002\u8BF7\u5BF9\u9F50\u5BBF\u4E3B\u4E0E\u8FDC\u7A0B\u7684 @fulgurjs/federation \u7248\u672C\u3002`
+          );
+          return null;
+        }
+        if (parsed.issues.length > 0) {
+          console.warn(
+            `[fulgurjs] dts: remote manifest \u5951\u7EA6\u6821\u9A8C\u5931\u8D25\uFF08${manifestUrl.href}\uFF09\uFF1A` + parsed.issues.map((x) => `${x.field}: ${x.message}`).join("\uFF1B") + `\u3002\u7C7B\u578B\u6620\u5C04\u8DF3\u8FC7\u3002`
+          );
+          return null;
+        }
+        return parsed.manifest;
+      }
     } catch {
     }
     await new Promise((r) => setTimeout(r, delayMs));
@@ -1068,7 +1343,7 @@ function extractTsExportNames(text) {
 }
 function genRuntimeTypesShim() {
   return [
-    "// \u81EA\u52A8\u751F\u6210\uFF1Afulgurjs-federation \u8FD0\u884C\u65F6\u7C7B\u578B\uFF08virtual:fulgurjs-runtime\uFF09",
+    "// \u81EA\u52A8\u751F\u6210\uFF1Afulgurjs-federation \u8FD0\u884C\u65F6\u7C7B\u578B\uFF08virtual:fulgurjs-api\uFF09",
     "import '@fulgurjs/federation/client'",
     "export {}",
     ""
@@ -1083,7 +1358,7 @@ function resolveDtsMode(dtsOpt) {
   return (typeof dtsOpt === "object" ? dtsOpt.mode : void 0) ?? "source";
 }
 function buildShimModule(abs, moduleSpecifier) {
-  const lines = [`declare module '${moduleSpecifier}' {`];
+  const lines = [`declare module ${JSON.stringify(moduleSpecifier)} {`];
   if (abs.endsWith(".vue")) {
     lines.push(`  import type { DefineComponent } from 'vue'`);
     lines.push(`  const component: DefineComponent<Record<string, unknown>, Record<string, unknown>, any>`);
@@ -1120,9 +1395,18 @@ async function generateDevTypes(options, _server) {
       continue;
     }
     const remoteRoot = manifest.fsRoot;
-    if (!remoteRoot || !fs2.existsSync(remoteRoot)) {
+    if (!remoteRoot) {
       console.warn(
-        `[fulgurjs] dts: remote "${remote.key}" is not on this machine; type mapping skipped (module types fall back to any).`
+        `[fulgurjs] dts: remote "${remote.key}" \u7684 manifest \u672A\u643A\u5E26 fsRoot\uFF08devFsRoot: false \u6216\u8FDC\u7A0B\u63D2\u4EF6\u7248\u672C\u8FC7\u65E7\uFF09\uFF1B\u7C7B\u578B\u6620\u5C04\u964D\u7EA7\u4E3A any \u6869\u3002\u540C\u673A\u8054\u8C03\u9700\u8FDC\u7A0B devFsRoot: true\uFF08\u9ED8\u8BA4\uFF09\u5E76\u91CD\u542F\u5176 dev server\u3002`
+      );
+      continue;
+    }
+    let realRoot;
+    try {
+      realRoot = fs2.realpathSync(remoteRoot);
+    } catch {
+      console.warn(
+        `[fulgurjs] dts: remote "${remote.key}" is not on this machine (fsRoot unreachable); type mapping skipped (module types fall back to any).`
       );
       continue;
     }
@@ -1130,45 +1414,78 @@ async function generateDevTypes(options, _server) {
       `// \u81EA\u52A8\u751F\u6210\uFF1Afulgurjs-federation dev \u7C7B\u578B\u76F4\u8FDE\uFF08remote: ${remote.name}\uFF0Cmode: ${mode}\uFF09`,
       `// \u91CD\u65B0\u751F\u6210\uFF1A\u91CD\u542F host dev server`
     ];
+    let accepted = 0;
     for (const expose of manifest.exposes ?? []) {
-      const abs = path3.join(remoteRoot, expose.src.replace(/^\//, ""));
-      if (!fs2.existsSync(abs)) continue;
-      const rel = path3.relative(outDir, abs).split(path3.sep).join("/");
-      const importPath = abs.endsWith(".vue") ? sourceImportPath(rel) : stripTsExtension(sourceImportPath(rel));
+      const skipped = (reason) => console.warn(`[fulgurjs] dts: remote "${remote.key}" expose ${JSON.stringify(expose.name)} \u8DF3\u8FC7\uFF1A${reason}`);
+      const src = expose.src;
+      if (!src || typeof src !== "string") {
+        skipped("src \u7F3A\u5931");
+        continue;
+      }
+      if (src.startsWith("/") || /^[a-z]+:/i.test(src)) {
+        skipped(`src \u5FC5\u987B\u662F\u76F8\u5BF9\u8DEF\u5F84\uFF0Cgot ${JSON.stringify(src)}`);
+        continue;
+      }
+      if (src.split("/").includes("..")) {
+        skipped(`src \u4E0D\u5F97\u5305\u542B ..\uFF0Cgot ${JSON.stringify(src)}`);
+        continue;
+      }
+      const abs = path3.join(realRoot, src);
+      let realAbs;
+      try {
+        realAbs = fs2.realpathSync(abs);
+      } catch {
+        skipped(`\u6E90\u6587\u4EF6\u4E0D\u5B58\u5728\uFF08${src}\uFF09`);
+        continue;
+      }
+      if (path3.relative(realRoot, realAbs).startsWith("..")) {
+        skipped(`\u89E3\u6790\u7ED3\u679C\u8D8A\u51FA fsRoot\uFF08${src} \u2192 ${realAbs}\uFF09`);
+        continue;
+      }
+      if (!fs2.existsSync(realAbs)) continue;
+      const rel = path3.relative(outDir, realAbs).split(path3.sep).join("/");
+      const importPath = realAbs.endsWith(".vue") ? sourceImportPath(rel) : stripTsExtension(sourceImportPath(rel));
       const moduleSpecifier = `${remote.key}/${expose.name.replace(/^\.\//, "")}`;
+      const moduleLiteral = JSON.stringify(moduleSpecifier);
+      const importLiteral = JSON.stringify(importPath);
       lines.push("");
       if (mode === "shim") {
-        lines.push(buildShimModule(abs, moduleSpecifier));
+        lines.push(buildShimModule(realAbs, moduleSpecifier));
+        accepted++;
         continue;
       }
-      if (abs.endsWith(".vue")) {
-        lines.push(`declare module '${moduleSpecifier}' {`);
+      if (realAbs.endsWith(".vue")) {
+        lines.push(`declare module ${moduleLiteral} {`);
         lines.push(`  import type { DefineComponent } from 'vue'`);
         lines.push(`  const component: DefineComponent<Record<string, unknown>, Record<string, unknown>, unknown>`);
         lines.push(`  export default component`);
-        lines.push(`  export * from '${importPath}'`);
+        lines.push(`  export * from ${importLiteral}`);
         lines.push(`}`);
       } else {
-        lines.push(`declare module '${moduleSpecifier}' {`);
-        const names = extractTsExportNames(fs2.readFileSync(abs, "utf8"));
+        lines.push(`declare module ${moduleLiteral} {`);
+        const names = extractTsExportNames(fs2.readFileSync(realAbs, "utf8"));
         if (names.length > 0) {
-          lines.push(`  export { ${names.join(", ")} } from '${importPath}'`);
+          lines.push(`  export { ${names.join(", ")} } from ${importLiteral}`);
         } else {
-          lines.push(`  export * from '${importPath}'`);
+          lines.push(`  export * from ${importLiteral}`);
         }
-        if (sourceHasDefaultExport(abs)) lines.push(`  export { default } from '${importPath}'`);
+        if (sourceHasDefaultExport(realAbs)) lines.push(`  export { default } from ${importLiteral}`);
         lines.push(`}`);
       }
+      accepted++;
     }
-    fs2.writeFileSync(path3.join(outDir, `${remote.key}.d.ts`), `${lines.join("\n")}
+    if (accepted > 0) {
+      fs2.writeFileSync(path3.join(outDir, `${remote.key}.d.ts`), `${lines.join("\n")}
 `);
+    }
     console.log(
-      `[fulgurjs] dts: generated ${dir}/${remote.key}.d.ts (${manifest.exposes?.length ?? 0} exposes, mode=${mode}). \u786E\u4FDD tsconfig include \u5305\u542B "${dir}" \u4EE5\u83B7\u5F97\u7C7B\u578B\u8865\u5168\u3002`
+      `[fulgurjs] dts: generated ${dir}/${remote.key}.d.ts (${accepted}/${manifest.exposes?.length ?? 0} exposes, mode=${mode}). \u786E\u4FDD tsconfig include \u5305\u542B "${dir}" \u4EE5\u83B7\u5F97\u7C7B\u578B\u8865\u5168\u3002`
     );
   }
 }
 
 // src/diagnostics.ts
+import path4 from "path";
 function formatFulgurjsDiagnostic(input) {
   const ctx = input.details ? `
 \u4E0A\u4E0B\u6587\uFF1A${JSON.stringify(input.details)}` : "";
@@ -1191,6 +1508,33 @@ async function isPortReachable(host, port, timeoutMs = 800) {
     socket.connect(port, host);
   });
 }
+var __debugEnvCache = "";
+var __debugEnabledCache = {};
+function debugEnabled(category) {
+  const spec = process.env.FULGURJS_DEBUG ?? process.env.DEBUG ?? "";
+  if (spec !== __debugEnvCache) {
+    __debugEnvCache = spec;
+    __debugEnabledCache = {};
+  }
+  if (category in __debugEnabledCache) return __debugEnabledCache[category];
+  const patterns = spec.split(",").map((x) => x.trim()).filter(Boolean);
+  const enabled = patterns.some((p) => p === "fulgurjs" || p === "fulgurjs:*" || p === `fulgurjs:${category}`);
+  __debugEnabledCache[category] = enabled;
+  return enabled;
+}
+function debugLog(category, data) {
+  if (!debugEnabled(category)) return;
+  console.error(`[fulgurjs:debug:${category}] ${JSON.stringify(data)}`);
+}
+function redactModulePath(id, root) {
+  const clean = id.split("?")[0];
+  try {
+    const rel = path4.relative(root, clean);
+    if (rel && !rel.startsWith("..") && !path4.isAbsolute(rel)) return rel;
+  } catch {
+  }
+  return clean.split("/").pop() ?? clean;
+}
 
 // src/remote-schema.ts
 function manifestUrlOf(devEntry) {
@@ -1217,8 +1561,35 @@ async function probeRemotesAndBuildSchema(options) {
     try {
       const res = await fetch(u, { signal: AbortSignal.timeout(3e3) });
       if (!res.ok) throw new Error(`HTTP ${res.status}`);
-      const manifest = await res.json();
-      const exposes = (manifest?.exposes ?? []).map((e) => e.name);
+      const parsed = parseManifest(await res.json());
+      if (parsed.unsupportedVersion) {
+        schema[remote.key] = { exposes: [], exists: false };
+        console.warn(
+          formatFulgurjsDiagnostic({
+            code: "DEV-002",
+            symptom: `remote "${remote.key}" \u7684 manifest schemaVersion=${parsed.unsupportedVersion} \u4E0D\u53D7\u652F\u6301\uFF08\u672C\u673A\u652F\u6301 1\uFF09`,
+            cause: "\u5BBF\u4E3B\u4E0E\u8FDC\u7A0B\u7684 @fulgurjs/federation \u5927\u7248\u672C\u4E0D\u4E00\u81F4",
+            fix: "\u5BF9\u9F50\u5BBF\u4E3B\u4E0E\u8FDC\u7A0B\u7684 @fulgurjs/federation \u7248\u672C\u540E\u91CD\u542F dev server",
+            details: { remote: remote.key, url: u.href }
+          })
+        );
+        continue;
+      }
+      if (parsed.issues.length > 0 || !parsed.manifest) {
+        schema[remote.key] = { exposes: [], exists: false };
+        console.warn(
+          formatFulgurjsDiagnostic({
+            code: "DEV-002",
+            symptom: `remote "${remote.key}" \u7684 dev manifest \u5951\u7EA6\u6821\u9A8C\u5931\u8D25\uFF08${u.href}\uFF09`,
+            cause: parsed.issues.map((x) => `${x.field}: ${x.message}`).join("\uFF1B"),
+            fix: "\u6838\u5BF9 remote \u7684 federation \u914D\u7F6E exposes\uFF0C\u5E76\u786E\u8BA4 @fulgurjs/federation \u7248\u672C\u4E0E\u5BBF\u4E3B\u4E00\u81F4",
+            details: { remote: remote.key, url: u.href, issues: parsed.issues.slice(0, 5) }
+          })
+        );
+        continue;
+      }
+      const manifest = parsed.manifest;
+      const exposes = [...normalizeExposes(manifest).keys()];
       schema[remote.key] = { exposes, exists: true };
       if (exposes.length === 0) {
         console.warn(
@@ -1227,11 +1598,11 @@ async function probeRemotesAndBuildSchema(options) {
             symptom: `remote "${remote.key}" \u7684 dev manifest \u53EF\u8FBE\u4F46 exposes \u4E3A\u7A7A\uFF08${u.href}\uFF09`,
             cause: "remote \u4FA7 federation({ exposes }) \u4E3A\u7A7A\uFF0C\u6216\u5176\u63D2\u4EF6\u7248\u672C\u8FC7\u65E7\u5BFC\u81F4 manifest \u7F3A\u5B57\u6BB5",
             fix: "\u6838\u5BF9 remote \u7684 federation \u914D\u7F6E exposes\uFF0C\u5E76\u786E\u8BA4 @fulgurjs/federation \u7248\u672C\u4E0E\u5BBF\u4E3B\u4E00\u81F4",
-            details: { remote: remote.key, url: u.href, pluginVersion: manifest?.buildInfo?.version }
+            details: { remote: remote.key, url: u.href, pluginVersion: manifest.version }
           })
         );
       }
-      const remoteVersion = manifest?.buildInfo?.version;
+      const remoteVersion = manifest.version;
       if (remoteVersion && remoteVersion !== options.pluginVersion) {
         console.warn(
           formatFulgurjsDiagnostic({
@@ -1267,17 +1638,17 @@ function genEmptyRemoteSchemaModule() {
 
 // src/vite-cache.ts
 import fs3 from "fs";
-import path4 from "path";
+import path5 from "path";
 function syncViteCacheMarker(root, pluginVersion, log) {
-  const viteDir = path4.join(root, "node_modules", ".vite");
-  const marker = path4.join(viteDir, "fulgurjs-version.txt");
+  const viteDir = path5.join(root, "node_modules", ".vite");
+  const marker = path5.join(viteDir, "fulgurjs-version.txt");
   try {
     if (fs3.existsSync(viteDir)) {
       const prev = fs3.existsSync(marker) ? fs3.readFileSync(marker, "utf8").trim() : "";
       if (prev === pluginVersion) return;
       fs3.rmSync(viteDir, { recursive: true, force: true });
       log(
-        `[fulgurjs] \u63D2\u4EF6\u7248\u672C\u53D8\u5316\uFF08${prev || "\u65E0\u8BB0\u5F55"} \u2192 ${pluginVersion}\uFF09\uFF0C\u5DF2\u81EA\u52A8\u6E05\u9664 ${path4.relative(root, viteDir)} \u9884\u6784\u5EFA\u7F13\u5B58\uFF08\u907F\u514D\u65E7\u95E8\u9762\u7B7E\u540D 404 / DEV-009\uFF09\u3002\u672C\u6B21\u542F\u52A8\u5C06\u91CD\u65B0\u9884\u6784\u5EFA\uFF0C\u9996\u8F6E 30~60s \u5C5E\u6682\u6001\uFF08DEV-010\uFF09\u3002`
+        `[fulgurjs] \u63D2\u4EF6\u7248\u672C\u53D8\u5316\uFF08${prev || "\u65E0\u8BB0\u5F55"} \u2192 ${pluginVersion}\uFF09\uFF0C\u5DF2\u81EA\u52A8\u6E05\u9664 ${path5.relative(root, viteDir)} \u9884\u6784\u5EFA\u7F13\u5B58\uFF08\u907F\u514D\u65E7\u95E8\u9762\u7B7E\u540D 404 / DEV-009\uFF09\u3002\u672C\u6B21\u542F\u52A8\u5C06\u91CD\u65B0\u9884\u6784\u5EFA\uFF0C\u9996\u8F6E 30~60s \u5C5E\u6682\u6001\uFF08DEV-010\uFF09\u3002`
       );
     }
     fs3.mkdirSync(viteDir, { recursive: true });
@@ -1290,7 +1661,7 @@ function syncViteCacheMarker(root, pluginVersion, log) {
 }
 
 // src/runtime-code.gen.ts
-var runtime_code_gen_default = 'var re=/^v?(\\d+)(?:\\.(\\d+))?(?:\\.(\\d+))?(?:-((?:[0-9A-Za-z-]+)(?:\\.[0-9A-Za-z-]+)*))?(?:\\+[0-9A-Za-z.-]+)?$/;function P(t){let n=re.exec(String(t).trim());return n?{major:Number(n[1]),minor:Number(n[2]??0),patch:Number(n[3]??0),pre:n[4]?n[4].split("."):[]}:null}function te(t,n){if(t.length===0&&n.length===0)return 0;if(t.length===0)return 1;if(n.length===0)return-1;let o=Math.max(t.length,n.length);for(let r=0;r<o;r++){let m=t[r],d=n[r];if(m===void 0)return-1;if(d===void 0)return 1;let S=/^\\d+$/.test(m),w=/^\\d+$/.test(d);if(S&&w){let L=Number(m)-Number(d);if(L!==0)return L}else{if(S!==w)return S?-1:1;if(m!==d)return m<d?-1:1}}return 0}function T(t,n){let o=P(t),r=P(n);return!o||!r?t<n?-1:t>n?1:0:o.major!==r.major?o.major-r.major:o.minor!==r.minor?o.minor-r.minor:o.patch!==r.patch?o.patch-r.patch:te(o.pre,r.pre)}var ne=/^[a-z]+[+:-]/i;function N(t,n){if(n===!1||n==null||n==="")return!0;let o=String(n).trim();return!o||o==="*"||o==="latest"||ne.test(o)?!0:o.split("||").some(r=>oe(t,r.trim()))}function oe(t,n){if(!n||n==="*")return!P(t)?.pre.length;let o=n.split(/\\s+-\\s+/);if(o.length===2){let d=o[0].trim(),S=o[1].trim();return!(!N(t,`>=${d}`)||!N(t,`<=${S}`))}let r=P(t);if(!r)return!1;let m=ie(n);if(m===null)return!0;for(let d of m)if(!ue(r,t,d))return!1;return!(r.pre.length>0&&!m.some(d=>d.ver.pre.length>0)&&!m.some(S=>S.ver.major===r.major&&S.ver.minor===r.minor&&S.ver.patch===r.patch))}function ie(t){let n=[],o=t.trim().split(/\\s+/).filter(Boolean);if(o.length===0)return null;for(let r of o){let m=/^(>=|<=|>|<|=|\\^|~)?(.*)$/.exec(r);if(!m)return null;let d=m[1],S=m[2],w=se(d,S);if(w===null)return null;n.push(...w)}return n}function se(t,n){let o=ce(n);if(!o)return null;let{ver:r,partial:m}=o;switch(t){case"^":{let d=ae(r);return d?[{op:">=",ver:r},{op:"<",ver:d}]:null}case"~":{let d=m>=2?{major:r.major,minor:r.minor+1,patch:0,pre:[]}:{major:r.major+1,minor:0,patch:0,pre:[]};return[{op:">=",ver:r},{op:"<",ver:d}]}case">=":return[{op:">=",ver:r}];case">":return m===1?[{op:">=",ver:{major:r.major+1,minor:0,patch:0,pre:[]}}]:m===2?[{op:">=",ver:{major:r.major,minor:r.minor+1,patch:0,pre:[]}}]:[{op:">",ver:r}];case"<":return m===1?[{op:"<",ver:{major:r.major,minor:0,patch:0,pre:[]}}]:m===2?[{op:"<",ver:{major:r.major,minor:r.minor,patch:0,pre:[]}}]:[{op:"<",ver:r}];case"<=":return[{op:"<=",ver:r}];case"=":case void 0:return m===1?[{op:">=",ver:r},{op:"<",ver:{major:r.major+1,minor:0,patch:0,pre:[]}}]:m===2?[{op:">=",ver:r},{op:"<",ver:{major:r.major,minor:r.minor+1,patch:0,pre:[]}}]:[{op:"=",ver:r}];default:return null}}function ae(t){return t.major>0?{major:t.major+1,minor:0,patch:0,pre:[]}:t.minor>0?{major:0,minor:t.minor+1,patch:0,pre:[]}:{major:0,minor:0,patch:t.patch+1,pre:[]}}function ce(t){let n=t.replace(/^v/,"").trim();if(!n||n==="*"||n==="x"||n==="X")return{ver:{major:0,minor:0,patch:0,pre:[]},partial:0};let o=n.split("."),r=[],m=0;for(let w of o.slice(0,3))if(/^\\d+$/.test(w))r.push(Number(w)),m++;else{if(w==="x"||w==="X"||w==="*")break;break}let d=n.split("-"),S=d.length>1?d.slice(1).join("-").split("+")[0].split("."):[];return m===0&&S.length===0?{ver:{major:0,minor:0,patch:0,pre:[]},partial:0}:{ver:{major:r[0]??0,minor:r[1]??0,patch:r[2]??0,pre:S},partial:m}}function le(t,n){switch(n){case">=":return t>=0;case">":return t>0;case"<":return t<0;case"<=":return t<=0;case"=":return t===0}}function ue(t,n,o){let r=`${t.major}.${t.minor}.${t.patch}`+(t.pre.length?`-${t.pre.join(".")}`:"");if(o.upper)return!(!(T(r,`${o.ver.major}.${o.ver.minor}.${o.ver.patch}`+(o.ver.pre.length?`-${o.ver.pre.join(".")}`:""))>=0)||!(T(r,`${o.upper.major}.${o.upper.minor}.${o.upper.patch}`)<0));let m=T(r,`${o.ver.major}.${o.ver.minor}.${o.ver.patch}`+(o.ver.pre.length?`-${o.ver.pre.join(".")}`:"")),d=le(m,o.op);return o.ver.pre.length>0&&t.pre.length===0&&(o.op===">"||o.op==="<")?!1:d}var R=class extends Error{code;details;constructor(n,o,r){super(`[fulgurjs:${n}] ${o}`),this.name="FgError",this.code=n,this.details=r}},b={REMOTE_LOAD_FAILED:"MFU-001",REMOTE_NAME_MISMATCH:"MFU-002",SHARE_STRICT_VERSION:"MFU-003",SHARE_NOT_AVAILABLE:"MFU-004",CONTAINER_REINIT_CONFLICT:"MFU-005",MODULE_NOT_EXPOSED:"MFU-006",PRELOAD_FAILED:"MFU-007",REMOTE_UNKNOWN:"MFU-008",EMPTY_EXPORTS:"MFU-009",SINGLETON_SKEW:"MFU-010"};var V="2.0.3";var H=15e3,K=2,me=5,fe=3e4;function pe(){let t={},n=new Map,o=[],r=new Map,m=new Map,d=new WeakMap,S=new WeakMap,w={},L=()=>{for(let e of o)try{e.init?.(w)}catch(i){console.warn("[fulgurjs] runtimePlugin init failed:",e.name,i)}},I=e=>t[e]??={};function $(e){try{w.onRemoteError?.(e)}catch{}typeof window<"u"&&window.dispatchEvent(new CustomEvent("fulgurjs:error",{detail:e}))}function z(e="default"){return I(e),t}function W(e,i,s,l,h={}){let c=I(e||"default"),f=c[i]??={};f[s]||(f[s]={version:s,get:l,from:h.from??"unknown",eager:!!h.eager,loaded:!!h.loaded})}function A(e){for(let i of e){let s=n.get(i.name);n.set(i.name,{timeout:H,retries:K,...s,...i,state:s?.state??"idle",breakerState:s?.breakerState??{fails:0,openUntil:0},debug:s?.debug??{entry:i.entry,status:"idle"}})}}function G(e){A([e])}function J(e){o.push(...e),L()}async function B(e,i={}){let s=i.shareScope||"default",l=i.shareKey||e,c=I(s)[l]||{},f=Object.keys(c),y=i.requiredVersion,g=f.filter(a=>y===void 0||y===!1||N(a,y)),u;if(i.singleton&&f.length>0){let a=f.filter(p=>c[p].loaded);if(u=[...a.length?a:f].sort(T).pop(),f.length>1||!g.includes(u)){let p=c[u],j=`singleton skew "${l}": req "${y??"any"}" use ${u} from ${p.from}`;if(i.strictVersion){let _=new R(b.SHARE_STRICT_VERSION,j,{shareKey:l,requiredVersion:y});throw $({remote:p.from,error:_}),_}console.warn(`[fulgurjs:MFU-010] ${j}`)}}else if(u=[...g].sort(T).pop(),!u){if(i.strictVersion){let p=new R(b.SHARE_STRICT_VERSION,`no satisfying version for "${l}" (required "${y}") in share scope "${s}"`);throw $({remote:l,error:p}),p}if(i.fallback)return i.fallback();let a=new R(b.SHARE_NOT_AVAILABLE,`shared "${l}" (${y??"any"}) unavailable in scope "${s}" (no local fallback)`,{shareKey:l,requiredVersion:y});throw $({remote:l,error:a}),a}let E=c[u];if(w.resolveShare){let a=await w.resolveShare({shareKey:l,shareScope:s,requiredVersion:y,picked:E,available:Object.values(c)});a&&(E=a)}return E.loaded=!0,E.get()}function X(e,i,s){return new Promise((l,h)=>{let c=setTimeout(()=>h(new Error(`timeout after ${i}ms: ${s}`)),i);e.then(f=>{clearTimeout(c),l(f)},f=>{clearTimeout(c),h(f)})})}let Y=e=>new Promise(i=>setTimeout(i,e));function k(e,i){if(!e||typeof e.get!="function")throw new Error(`remoteEntry of "${i.name}" does not export a container interface (get/init)`);if(e.name&&i.name&&e.name!==i.name){let s=`remoteEntry self-reported name "${e.name}" mismatches configured name "${i.name}"`;if(i.promise)console.warn(`[fulgurjs] ${s} (promise-based remote, continuing)`);else throw Object.assign(new Error(s),{code:b.REMOTE_NAME_MISMATCH})}}async function x(e,i){return X(import(e),i.timeout??H,`load remoteEntry ${e}`)}async function C(e,i){let s=e.shareScope||"default";if(e.container){let c=S.get(e.container);if(c&&c!==s)throw new R(b.CONTAINER_REINIT_CONFLICT,`container "${e.name}" already initialized with share scope "${c}", cannot re-init with "${s}"`);return e.container}if(e.containerPromise)return e.containerPromise;let l=e.breakerState;if(l.openUntil>Date.now()){let c=new R(b.REMOTE_LOAD_FAILED,`circuit breaker open for remote "${e.name}" until ${new Date(l.openUntil).toISOString()}`,{remote:e.name});throw $({remote:e.name,error:c}),c}e.state="loading",e.debug.status="loading";let h=(async()=>{let c=[];if(e.promise)c.push(async()=>{let a=await e.promise(),p=typeof a=="string"?await x(a,e):a;return k(p,e),p});else for(let a of[e.entry,...e.fallback??[]])c.push(async()=>{let p=await x(a,e);return k(p,e),p});let f,y,g=!1,u=i?.retries??e.retries??K;for(let a of c){for(let p=0;p<=u;p++){let j=performance.now();try{f=await a(),e.lastLoadMs=Math.round(performance.now()-j),e.debug.lastLoadMs=e.lastLoadMs,g=!0;break}catch(_){if(y=_,_?.code)throw _;p<u&&await Y(200*2**p)}}if(g)break}if(!g||!f){let a=[];throw/^https?:\\/\\//.test(e.entry)&&typeof location<"u"?(a.push(`1. is the remote dev server running?  try opening ${e.entry} in the browser \\u2014 it must return JS, not HTML/an error`),a.push("2. is the URL correct in federation({ remotes })?  dev and prod entries can differ"),a.push("3. CORS: the remote dev server must allow cross-origin requests (fulgurjs-federation enables server.cors automatically; a custom server config may have disabled it)")):(a.push(`1. is the remote deployed and reachable?  try opening ${e.entry} in the browser \\u2014 it must return JS`),a.push("2. NGINX/CDN routing: the entry path must serve the remoteEntry JS file (check try_files / fallback rules)")),new R(b.REMOTE_LOAD_FAILED,`failed to load remote "${e.name}" from ${e.entry}: ${String(y?.message??y)}\n`+a.join(`\n`),{remote:e.name})}k(f,e);let E=S.get(f);if(E&&E!==s)throw new R(b.CONTAINER_REINIT_CONFLICT,`container "${e.name}" already initialized with share scope "${E}", cannot re-init with "${s}"`);return typeof f.init=="function"&&await f.init(t),S.set(f,s),e.container=f,e.state="loaded",e.debug.status="loaded",l.fails=0,f})();e.containerPromise=h;try{return await h}catch(c){if(e.containerPromise=void 0,e.state="failed",e.debug.status="failed",e.debug.error=String(c?.message??c),l.fails+=1,l.fails>=me&&(l.openUntil=Date.now()+fe,l.fails=0),c instanceof R)throw $({remote:e.name,error:c}),c;if(c?.code)throw $({remote:e.name,error:c}),c;let f=new R(b.REMOTE_LOAD_FAILED,String(c?.message??c),{remote:e.name});throw $({remote:e.name,error:f}),f}}function U(e){let i=e.indexOf("/");return i===-1?{remote:e,module:""}:{remote:e.slice(0,i),module:F(e.slice(i+1))}}function F(e){return e?e.startsWith(".")?e:`./${e}`:""}async function Z(e,i){let{remote:s,module:l}=U(e);w.beforeLoadRemote?.({remote:s,module:l});let h=n.get(s);if(!h)throw new R(b.REMOTE_UNKNOWN,`unknown remote "${s}". Register it via federation({ remotes }) or registerRemote().`,{remote:s});let c;try{let g=l&&h.manifestUrl?D(e):Promise.resolve();[c]=await Promise.all([C(h,{retries:i?.retries}),g])}catch(g){if(i?.fallbackModule)return console.error(`[fulgurjs] loadRemote("${e}") failed; returning fallbackModule (\\u663E\\u5F0F\\u964D\\u7EA7\\uFF0C\\u9519\\u8BEF\\u5DF2\\u900F\\u51FA)`,g),$({remote:s,error:g}),await i.fallbackModule();throw g}if(!l)return c;let f=`${s}@${h.shareScope||"default"}#${l}`;r.has(f)||r.set(f,c.get(l).catch(g=>{throw r.delete(f),g instanceof R||g?.code?g:new R(b.REMOTE_LOAD_FAILED,`failed to load module "${l}" from remote "${s}": ${String(g?.message??g)}`,{remote:s,module:l})}));let y;try{y=await r.get(f)}catch(g){if(i?.fallbackModule)return console.error(`[fulgurjs] loadRemote("${e}") failed; returning fallbackModule (\\u663E\\u5F0F\\u964D\\u7EA7\\uFF0C\\u9519\\u8BEF\\u5DF2\\u900F\\u51FA)`,g),$({remote:s,error:g}),await i.fallbackModule();throw g}if(w.afterLoadRemote?.({remote:s,module:l,module_ns:y}),y&&typeof y=="object"&&Object.keys(y).length===0){let g=new R(b.EMPTY_EXPORTS,`no exports: ${l} @ ${s}`,{remote:s,module:l});$({remote:s,error:g}),console.error(`[fulgurjs:MFU-009] ${g.message}`)}return y}function Q(e){let i=n.get(e);if(!i)throw new R(b.REMOTE_UNKNOWN,`unknown remote "${e}"`,{remote:e});return C(i)}async function D(e,i={}){let{remote:s,module:l}=U(e),h=n.get(s);if(!h)throw new R(b.REMOTE_UNKNOWN,`unknown remote "${s}"`,{remote:s});let c=i.mode??"preload",f=(u,E)=>{if(u.sheet)return Promise.resolve();let a=d.get(u);if(a)return a;let p=new Promise(j=>{let _=()=>{u.removeEventListener("load",_),u.removeEventListener("error",v),j()},v=()=>{$({remote:s,error:new R(b.PRELOAD_FAILED,`failed to load remote stylesheet ${E}`,{remote:s})}),_()};u.addEventListener("load",_,{once:!0}),u.addEventListener("error",v,{once:!0}),u.sheet&&_()});return d.set(u,p),p},y=(u,E)=>{if(typeof document>"u")return Promise.resolve();let a=document.querySelector(`link[href="${u}"]`);if(a)return E==="style"&&c==="preload"?d.get(a)??Promise.resolve():Promise.resolve();let p=document.createElement("link");p.rel=E==="style"?"stylesheet":"modulepreload",p.href=u,c==="prefetch"&&(p.fetchPriority="low");let j=E==="style"?f(p,u):Promise.resolve();return document.head.appendChild(p),E==="style"&&c==="preload"?j:Promise.resolve()},g=u=>{let E=typeof document<"u"?document.baseURI:void 0,a=new URL(h.entry,E||"http://fulgurjs.invalid/");return new URL(u,a).href};try{if(h.manifestUrl){let u=m.get(h.manifestUrl);u||(u=fetch(h.manifestUrl,{cache:"no-cache"}).then(a=>a.ok?a.json():void 0),m.set(h.manifestUrl,u),u.then(a=>{a||m.delete(h.manifestUrl)},()=>m.delete(h.manifestUrl)));let E=await u;if(E){await y(h.entry,"modulepreload");let a=E.exposes,p=Array.isArray(a)?a.filter(v=>v&&typeof v=="object").map(v=>[String(v.name??""),v]):a&&typeof a=="object"?Object.entries(a):[],j=l?p.filter(([v,O])=>F(String(O?.name??v))===l):p,_=[];for(let[,v]of j)if(typeof v?.file=="string"&&await y(g(v.file),"modulepreload"),Array.isArray(v?.css))for(let O of v.css){if(typeof O!="string")continue;let ee=y(g(O),"style");c==="preload"&&_.push(ee)}await Promise.all(_);return}}await y(h.entry,"modulepreload")}catch(u){$({remote:s,error:new R(b.PRELOAD_FAILED,String(u?.message??u),{remote:s})})}}return typeof window>"u"||(window.__FULGURJS_SCOPE__=t,window.__FULGURJS_INFO__={get remotes(){let e={};for(let[i,s]of n)e[i]={...s.debug,entry:s.entry};return e},errors:[]}),{shareScopeMap:t,initSharing:z,registerShare:W,registerRemotes:A,registerRemote:G,registerPlugins:J,loadShare:B,loadRemote:Z,getContainer:Q,preloadRemote:D,parseSpec:U}}var q=globalThis,M=q.__FULGURJS_RUNTIME__??pe();q.__FULGURJS_RUNTIME__=M;try{Object.freeze(M)}catch{}var we=V;function be(){return M}var ve=M.initSharing,_e=M.registerShare,Me=M.registerRemotes,$e=M.registerRemote,je=M.registerPlugins,Te=M.loadShare,Le=M.loadRemote,Oe=M.getContainer,Pe=M.preloadRemote,Ne=M.shareScopeMap;function Ie(t){if(t&&typeof t=="object"&&"default"in t){let n=t.default;return n!==void 0?n:t}return t}var ke=M;export{ke as default,Oe as getContainer,be as getRuntime,ve as initSharing,Le as loadRemote,Te as loadShare,Pe as preloadRemote,je as registerPlugins,$e as registerRemote,Me as registerRemotes,_e as registerShare,M as runtime,Ne as shareScopeMap,Ie as unwrapDefault,we as version};\n';
+var runtime_code_gen_default = 'var oe=/^v?(\\d+)(?:\\.(\\d+))?(?:\\.(\\d+))?(?:-((?:[0-9A-Za-z-]+)(?:\\.[0-9A-Za-z-]+)*))?(?:\\+[0-9A-Za-z.-]+)?$/;function I(o){let i=oe.exec(String(o).trim());return i?{major:Number(i[1]),minor:Number(i[2]??0),patch:Number(i[3]??0),pre:i[4]?i[4].split("."):[]}:null}function ie(o,i){if(o.length===0&&i.length===0)return 0;if(o.length===0)return 1;if(i.length===0)return-1;let s=Math.max(o.length,i.length);for(let n=0;n<s;n++){let f=o[n],y=i[n];if(f===void 0)return-1;if(y===void 0)return 1;let R=/^\\d+$/.test(f),w=/^\\d+$/.test(y);if(R&&w){let T=Number(f)-Number(y);if(T!==0)return T}else{if(R!==w)return R?-1:1;if(f!==y)return f<y?-1:1}}return 0}function j(o,i){let s=I(o),n=I(i);return!s||!n?o<i?-1:o>i?1:0:s.major!==n.major?s.major-n.major:s.minor!==n.minor?s.minor-n.minor:s.patch!==n.patch?s.patch-n.patch:ie(s.pre,n.pre)}var se=/^[a-z]+[+:-]/i;function P(o,i){if(i===!1||i==null||i==="")return!0;let s=String(i).trim();return!s||s==="*"||s==="latest"||se.test(s)?!0:s.split("||").some(n=>ae(o,n.trim()))}function ae(o,i){if(!i||i==="*")return!I(o)?.pre.length;let s=i.split(/\\s+-\\s+/);if(s.length===2){let y=s[0].trim(),R=s[1].trim();return!(!P(o,`>=${y}`)||!P(o,`<=${R}`))}let n=I(o);if(!n)return!1;let f=ce(i);if(f===null)return!0;for(let y of f)if(!pe(n,o,y))return!1;return!(n.pre.length>0&&!f.some(y=>y.ver.pre.length>0)&&!f.some(R=>R.ver.major===n.major&&R.ver.minor===n.minor&&R.ver.patch===n.patch))}function ce(o){let i=[],s=o.trim().split(/\\s+/).filter(Boolean);if(s.length===0)return null;for(let n of s){let f=/^(>=|<=|>|<|=|\\^|~)?(.*)$/.exec(n);if(!f)return null;let y=f[1],R=f[2],w=le(y,R);if(w===null)return null;i.push(...w)}return i}function le(o,i){let s=me(i);if(!s)return null;let{ver:n,partial:f}=s;switch(o){case"^":{let y=ue(n);return y?[{op:">=",ver:n},{op:"<",ver:y}]:null}case"~":{let y=f>=2?{major:n.major,minor:n.minor+1,patch:0,pre:[]}:{major:n.major+1,minor:0,patch:0,pre:[]};return[{op:">=",ver:n},{op:"<",ver:y}]}case">=":return[{op:">=",ver:n}];case">":return f===1?[{op:">=",ver:{major:n.major+1,minor:0,patch:0,pre:[]}}]:f===2?[{op:">=",ver:{major:n.major,minor:n.minor+1,patch:0,pre:[]}}]:[{op:">",ver:n}];case"<":return f===1?[{op:"<",ver:{major:n.major,minor:0,patch:0,pre:[]}}]:f===2?[{op:"<",ver:{major:n.major,minor:n.minor,patch:0,pre:[]}}]:[{op:"<",ver:n}];case"<=":return[{op:"<=",ver:n}];case"=":case void 0:return f===1?[{op:">=",ver:n},{op:"<",ver:{major:n.major+1,minor:0,patch:0,pre:[]}}]:f===2?[{op:">=",ver:n},{op:"<",ver:{major:n.major,minor:n.minor+1,patch:0,pre:[]}}]:[{op:"=",ver:n}];default:return null}}function ue(o){return o.major>0?{major:o.major+1,minor:0,patch:0,pre:[]}:o.minor>0?{major:0,minor:o.minor+1,patch:0,pre:[]}:{major:0,minor:0,patch:o.patch+1,pre:[]}}function me(o){let i=o.replace(/^v/,"").trim();if(!i||i==="*"||i==="x"||i==="X")return{ver:{major:0,minor:0,patch:0,pre:[]},partial:0};let s=i.split("."),n=[],f=0;for(let w of s.slice(0,3))if(/^\\d+$/.test(w))n.push(Number(w)),f++;else{if(w==="x"||w==="X"||w==="*")break;break}let y=i.split("-"),R=y.length>1?y.slice(1).join("-").split("+")[0].split("."):[];return f===0&&R.length===0?{ver:{major:0,minor:0,patch:0,pre:[]},partial:0}:{ver:{major:n[0]??0,minor:n[1]??0,patch:n[2]??0,pre:R},partial:f}}function fe(o,i){switch(i){case">=":return o>=0;case">":return o>0;case"<":return o<0;case"<=":return o<=0;case"=":return o===0}}function pe(o,i,s){let n=`${o.major}.${o.minor}.${o.patch}`+(o.pre.length?`-${o.pre.join(".")}`:"");if(s.upper)return!(!(j(n,`${s.ver.major}.${s.ver.minor}.${s.ver.patch}`+(s.ver.pre.length?`-${s.ver.pre.join(".")}`:""))>=0)||!(j(n,`${s.upper.major}.${s.upper.minor}.${s.upper.patch}`)<0));let f=j(n,`${s.ver.major}.${s.ver.minor}.${s.ver.patch}`+(s.ver.pre.length?`-${s.ver.pre.join(".")}`:"")),y=fe(f,s.op);return s.ver.pre.length>0&&o.pre.length===0&&(s.op===">"||s.op==="<")?!1:y}var b=class extends Error{code;details;constructor(i,s,n){super(`[fulgurjs:${i}] ${s}`),this.name="FgError",this.code=i,this.details=n}},S={REMOTE_LOAD_FAILED:"MFU-001",REMOTE_NAME_MISMATCH:"MFU-002",SHARE_STRICT_VERSION:"MFU-003",SHARE_NOT_AVAILABLE:"MFU-004",CONTAINER_REINIT_CONFLICT:"MFU-005",MODULE_NOT_EXPOSED:"MFU-006",PRELOAD_FAILED:"MFU-007",REMOTE_UNKNOWN:"MFU-008",EMPTY_EXPORTS:"MFU-009",SINGLETON_SKEW:"MFU-010"};var q="3.0.0";var x=15e3,z=2,de=5,ge=3e4,he=4e3,ye=.2;function Ee(){let o=Object.create(null),i=new Map,s=[],n=new Map,f=new Map,y=new WeakMap,R=new WeakMap,w={},T=()=>{for(let e of s)try{e.init?.(w)}catch(t){console.warn("[fulgurjs] runtimePlugin init failed:",e.name,t)}},N=e=>o[e]??=Object.create(null);function $(e){try{w.onRemoteError?.(e)}catch{}typeof window<"u"&&window.dispatchEvent(new CustomEvent("fulgurjs:error",{detail:e}))}function B(e="default"){return N(e),o}function J(e,t,r,l,h={}){let a=N(e||"default"),p=Object.hasOwn(a,t)?a[t]:void 0,d=p&&typeof p=="object"?p:void 0;d||(d=Object.create(null),a[t]=d),!(Object.hasOwn(d,r)&&d[r])&&(d[r]={version:r,get:l,from:h.from??"unknown",eager:!!h.eager,loaded:!!h.loaded})}function G(e){let t=(r,l,h)=>{if(r===void 0)return;if(!(typeof r=="number"&&(h?Number.isInteger(r)&&r>=0&&r<=10:Number.isFinite(r)&&r>0)))throw new Error(`[fulgurjs] registerRemote("${e.name}"): ${l} must be a ${h?"integer 0..10":"finite positive number"}, got ${String(r)}`)};t(e.timeout,"timeout"),t(e.retries,"retries",!0),e.breaker&&(t(e.breaker.threshold,"breaker.threshold"),t(e.breaker.resetMs,"breaker.resetMs"))}function F(e){for(let t of e){G(t);let r=i.get(t.name);i.set(t.name,{timeout:x,retries:z,...r,...t,breakerThreshold:t.breaker?.threshold??r?.breakerThreshold??de,breakerResetMs:t.breaker?.resetMs??r?.breakerResetMs??ge,state:r?.state??"idle",breakerState:r?.breakerState??{fails:0,openUntil:0},entryInflight:r?.entryInflight??new Map,debug:r?.debug??{entry:t.entry,status:"idle"}})}}function X(e){F([e])}function Y(e){s.push(...e),T()}async function Z(e,t={}){let r=t.shareScope||"default",l=t.shareKey||e,a=N(r)[l]||{},p=Object.keys(a),d=t.requiredVersion,g=p.filter(c=>d===void 0||d===!1||P(c,d)),m;if(t.singleton&&p.length>0){let c=p.filter(u=>a[u].loaded);if(m=[...c.length?c:p].sort(j).pop(),p.length>1||!g.includes(m)){let u=a[m],k=`singleton skew "${l}": req "${d??"any"}" use ${m} from ${u.from}`;if(t.strictVersion){let v=new b(S.SHARE_STRICT_VERSION,k,{shareKey:l,requiredVersion:d});throw $({remote:u.from,error:v}),v}console.warn(`[fulgurjs:MFU-010] ${k}`)}}else if(m=[...g].sort(j).pop(),!m){if(t.strictVersion){let u=new b(S.SHARE_STRICT_VERSION,`no satisfying version for "${l}" (required "${d}") in share scope "${r}"`);throw $({remote:l,error:u}),u}if(t.fallback)return t.fallback();let c=new b(S.SHARE_NOT_AVAILABLE,`shared "${l}" (${d??"any"}) unavailable in scope "${r}" (no local fallback)`,{shareKey:l,requiredVersion:d});throw $({remote:l,error:c}),c}let E=a[m];if(w.resolveShare){let c=await w.resolveShare({shareKey:l,shareScope:r,requiredVersion:d,picked:E,available:Object.values(a)});c&&(E=c)}return E.loaded=!0,E.get()}function Q(e){try{let t=new URL(e,typeof location<"u"?location.href:"http://f.invalid");return t.protocol+"//"+t.host+t.pathname}catch{return String(e).replace(/[?#].*$/,"")}}function C(e,t,r){return new Promise((l,h)=>{let a=setTimeout(()=>h(new Error(`timeout after ${t}ms: ${r}`)),t);e.then(p=>{clearTimeout(a),l(p)},p=>{clearTimeout(a),h(p)})})}let ee=e=>new Promise(t=>setTimeout(t,e));function A(e,t){if(!e||typeof e.get!="function")throw new Error(`remoteEntry of "${t.name}" does not export a container interface (get/init)`);if(e.name&&t.name&&e.name!==t.name){let r=`remoteEntry self-reported name "${e.name}" mismatches configured name "${t.name}"`;if(t.promise)console.warn(`[fulgurjs] ${r} (promise-based remote, continuing)`);else throw Object.assign(new Error(r),{code:S.REMOTE_NAME_MISMATCH})}}async function D(e,t){let r=t.entryInflight.get(e),l=r??import(e);return r||(t.entryInflight.set(e,l),l.catch(()=>t.entryInflight.delete(e))),C(l,t.timeout??x,`load remoteEntry ${e}`)}async function V(e,t){let r=e.shareScope||"default";if(e.container){let a=R.get(e.container);if(a&&a!==r)throw new b(S.CONTAINER_REINIT_CONFLICT,`container "${e.name}" already initialized with share scope "${a}", cannot re-init with "${r}"`);return e.container}if(e.containerPromise)return e.containerPromise;let l=e.breakerState;if(l.openUntil>Date.now()){let a=new b(S.REMOTE_LOAD_FAILED,`circuit breaker open for remote "${e.name}" until ${new Date(l.openUntil).toISOString()}`,{remote:e.name});throw $({remote:e.name,error:a}),a}e.state="loading",e.debug.status="loading";let h=(async()=>{let a=[];if(e.promise)a.push(async()=>{let c=await C(e.promise(),e.timeout??x,`resolve promise remote "${e.name}"`),u=typeof c=="string"?await D(c,e):c;return A(u,e),u});else for(let c of[e.entry,...e.fallback??[]])a.push(async()=>{let u=await D(c,e);return A(u,e),u});let p,d,g=!1,m=t?.retries??e.retries??z;for(let c of a){for(let u=0;u<=m;u++){let k=performance.now();try{p=await c(),e.lastLoadMs=Math.round(performance.now()-k),e.debug.lastLoadMs=e.lastLoadMs,g=!0;break}catch(v){if(d=v,v?.code)throw v;u<m&&await ee(Math.min(he,200*2**u)*(1-ye*(1-2*Math.random())))}}if(g)break}if(!g||!p){let c=Q(e.entry),u=[];throw/^https?:\\/\\//.test(e.entry)&&typeof location<"u"?(u.push(`1. is the remote dev server running?  open ${c} in a browser \\u2014 it must return JS, not HTML`),u.push("2. is the URL correct in federation({ remotes })?  dev/prod entries can differ"),u.push("3. CORS: the remote dev server must allow cross-origin requests (check its server.cors)")):(u.push(`1. is the remote deployed?  open ${c} in a browser \\u2014 it must return JS`),u.push("2. NGINX/CDN routing: the entry path must serve the remoteEntry JS (check try_files)")),new b(S.REMOTE_LOAD_FAILED,`failed to load remote "${e.name}" from ${c}: ${String(d?.message??d)}\n`+u.join(`\n`),{remote:e.name})}A(p,e);let E=R.get(p);if(E&&E!==r)throw new b(S.CONTAINER_REINIT_CONFLICT,`container "${e.name}" already initialized with share scope "${E}", cannot re-init with "${r}"`);return typeof p.init=="function"&&await p.init(o),R.set(p,r),e.container=p,e.state="loaded",e.debug.status="loaded",l.fails=0,p})();e.containerPromise=h;try{return await h}catch(a){if(e.containerPromise=void 0,e.state="failed",e.debug.status="failed",e.debug.error=String(a?.message??a),l.fails+=1,l.fails>=e.breakerThreshold&&(l.openUntil=Date.now()+e.breakerResetMs,l.fails=0),a instanceof b)throw $({remote:e.name,error:a}),a;if(a?.code)throw $({remote:e.name,error:a}),a;let p=new b(S.REMOTE_LOAD_FAILED,String(a?.message??a),{remote:e.name});throw $({remote:e.name,error:p}),p}}function U(e){let t=e.indexOf("/");return t===-1?{remote:e,module:""}:{remote:e.slice(0,t),module:H(e.slice(t+1))}}function H(e){return e?e.startsWith(".")?e:`./${e}`:""}async function re(e,t){let{remote:r,module:l}=U(e);try{w.beforeLoadRemote?.({remote:r,module:l})}catch(g){console.warn("[fulgurjs] beforeLoadRemote hook error (ignored):",g)}let h=i.get(r);if(!h)throw new b(S.REMOTE_UNKNOWN,`unknown remote "${r}". Register it via federation({ remotes }) or registerRemote().`,{remote:r});let a;try{let g=l&&h.manifestUrl?K(e):Promise.resolve();[a]=await Promise.all([V(h,{retries:t?.retries}),g])}catch(g){if(t?.fallbackModule)return console.error(`[fulgurjs] loadRemote("${e}") failed; returning fallbackModule (\\u663E\\u5F0F\\u964D\\u7EA7\\uFF0C\\u9519\\u8BEF\\u5DF2\\u900F\\u51FA)`,g),$({remote:r,error:g}),await t.fallbackModule();throw g}if(!l)return a;let p=`${r}@${h.shareScope||"default"}#${l}`;n.has(p)||n.set(p,a.get(l).catch(g=>{throw n.delete(p),g instanceof b||g?.code?g:new b(S.REMOTE_LOAD_FAILED,`failed to load module "${l}" from remote "${r}": ${String(g?.message??g)}`,{remote:r,module:l})}));let d;try{d=await n.get(p)}catch(g){if(t?.fallbackModule)return console.error(`[fulgurjs] loadRemote("${e}") failed; returning fallbackModule (\\u663E\\u5F0F\\u964D\\u7EA7\\uFF0C\\u9519\\u8BEF\\u5DF2\\u900F\\u51FA)`,g),$({remote:r,error:g}),await t.fallbackModule();throw g}try{w.afterLoadRemote?.({remote:r,module:l,module_ns:d})}catch(g){console.warn("[fulgurjs] afterLoadRemote hook error (ignored):",g)}if(d&&typeof d=="object"&&Object.keys(d).length===0){let g=new b(S.EMPTY_EXPORTS,`no exports: ${l} @ ${r}`,{remote:r,module:l});$({remote:r,error:g}),console.error(`[fulgurjs:MFU-009] ${g.message}`)}return d}function te(e){let t=i.get(e);if(!t)throw new b(S.REMOTE_UNKNOWN,`unknown remote "${e}"`,{remote:e});return V(t)}async function K(e,t={}){let{remote:r,module:l}=U(e),h=i.get(r);if(!h)throw new b(S.REMOTE_UNKNOWN,`unknown remote "${r}"`,{remote:r});let a=t.mode??"preload",p=(m,E)=>{if(m.sheet)return Promise.resolve();let c=y.get(m);if(c)return c;let u=new Promise(k=>{let v=()=>{m.removeEventListener("load",v),m.removeEventListener("error",O),k()},O=()=>{$({remote:r,error:new b(S.PRELOAD_FAILED,`failed to load remote stylesheet ${E}`,{remote:r})}),v()};m.addEventListener("load",v,{once:!0}),m.addEventListener("error",O,{once:!0}),m.sheet&&v()});return y.set(m,u),u},d=(m,E)=>{if(typeof document>"u")return Promise.resolve();let c=document.querySelector(`link[href="${m}"]`);if(c)return E==="style"&&a==="preload"?y.get(c)??Promise.resolve():Promise.resolve();let u=document.createElement("link");u.rel=E==="style"?"stylesheet":"modulepreload",u.href=m,a==="prefetch"&&(u.fetchPriority="low");let k=E==="style"?p(u,m):Promise.resolve();return document.head.appendChild(u),E==="style"&&a==="preload"?k:Promise.resolve()},g=m=>{let E=typeof document<"u"?document.baseURI:void 0,c=new URL(h.entry,E||"http://fulgurjs.invalid/");return!c.pathname.endsWith("/")&&!c.pathname.split("/").pop().includes(".")&&(c.pathname+="/"),new URL(m,c).href};try{if(h.manifestUrl){let m=f.get(h.manifestUrl);m||(m=fetch(h.manifestUrl,{cache:"no-cache",signal:AbortSignal.timeout(8e3)}).then(c=>c.ok?c.json():void 0),f.set(h.manifestUrl,m),m.then(c=>{c||f.delete(h.manifestUrl)},()=>f.delete(h.manifestUrl)));let E=await m;if(E){let c=E.schemaVersion;if(typeof c=="number"&&(!Number.isInteger(c)||c>1)){$({remote:r,error:new b(S.PRELOAD_FAILED,`unsupported manifest schemaVersion ${String(c)} (expected 1)`,{remote:r})}),await d(h.entry,"modulepreload");return}await d(h.entry,"modulepreload");let u=E.exposes,k=Array.isArray(u)?u.filter(_=>_&&typeof _=="object").map(_=>[String(_.name??""),_]):u&&typeof u=="object"?Object.entries(u):[],v=l?k.filter(([_,L])=>H(String(L?.name??_))===l):k,O=[];for(let[,_]of v)if(typeof _?.file=="string"&&await d(g(_.file),"modulepreload"),Array.isArray(_?.css))for(let L of _.css){if(typeof L!="string")continue;let ne=d(g(L),"style");a==="preload"&&O.push(ne)}await Promise.all(O);return}}await d(h.entry,"modulepreload")}catch(m){$({remote:r,error:new b(S.PRELOAD_FAILED,String(m?.message??m),{remote:r})})}}return typeof window>"u"||(window.__FULGURJS_SCOPE__=o,window.__FULGURJS_INFO__={get remotes(){let e={};for(let[t,r]of i)e[t]={...r.debug,entry:r.entry};return e},errors:[]}),{shareScopeMap:o,initSharing:B,registerShare:J,registerRemotes:F,registerRemote:X,registerPlugins:Y,loadShare:Z,loadRemote:re,getContainer:te,preloadRemote:K,parseSpec:U}}var W=globalThis,M=W.__FULGURJS_RUNTIME__??Ee();W.__FULGURJS_RUNTIME__=M;try{Object.freeze(M)}catch{}var _e=q;function ke(){return M}var je=M.initSharing,Oe=M.registerShare,Te=M.registerRemotes,Le=M.registerRemote,Ie=M.registerPlugins,Pe=M.loadShare,Ne=M.loadRemote,Ae=M.getContainer,Ue=M.preloadRemote,xe=M.parseSpec,Fe=M.shareScopeMap;function Ce(o){if(o&&typeof o=="object"&&"default"in o){let i=o.default;return i!==void 0?i:o}return o}var De=M;export{De as default,Ae as getContainer,ke as getRuntime,je as initSharing,Ne as loadRemote,Pe as loadShare,xe as parseSpec,Ue as preloadRemote,Ie as registerPlugins,Le as registerRemote,Te as registerRemotes,Oe as registerShare,M as runtime,Fe as shareScopeMap,Ce as unwrapDefault,_e as version};\n';
 
 // src/index.ts
 function readRuntimeCode() {
@@ -1307,7 +1678,7 @@ function enumerateCjsExports(packageName, appRoot) {
   if (cached) return cached;
   let names = [];
   try {
-    const appRequire = createRequire2(path5.join(appRoot, "package.json"));
+    const appRequire = createRequire2(path6.join(appRoot, "package.json"));
     const mod = appRequire(packageName);
     names = Object.keys(mod);
   } catch {
@@ -1367,14 +1738,19 @@ function federation(options) {
     entryInitInjected: /* @__PURE__ */ new Set(),
     manualChunkGroups: /* @__PURE__ */ new Map(),
     sharedClosureRoots: [],
-    facadeDynamic: false
+    facadeDynamic: false,
+    transformedModules: /* @__PURE__ */ new Set()
+  };
+  const recordRewritten = (id) => {
+    state.transformedModules.add(id);
+    state.transformedModules.add(id.split("?")[0]);
   };
   const pre = {
     name: "fulgurjs:core",
     enforce: "pre",
     async config(userConfig, env) {
       state.command = env.command;
-      const root = path5.resolve(userConfig.root ?? process.cwd());
+      const root = path6.resolve(userConfig.root ?? process.cwd());
       const normalized = normalizeOptions(options, root, env.command);
       state.normalized = normalized;
       const extra = {};
@@ -1419,10 +1795,34 @@ export { default } from ${JSON.stringify(url)};
       }
       if (env.command === "serve") {
         syncViteCacheMarker(root, normalized.pluginVersion, (msg) => console.warn(msg));
+        const corsOption = normalized.devCorsOrigins && normalized.devCorsOrigins !== "*" ? { origin: normalized.devCorsOrigins } : true;
         extra.server = {
           ...userConfig.server ?? {},
-          cors: userConfig.server?.cors ?? true
+          cors: userConfig.server?.cors ?? corsOption
         };
+        const host = userConfig.server?.host;
+        if (isNonLoopbackHost(host)) {
+          if (!normalized.devCorsOrigins || normalized.devCorsOrigins === "*") {
+            console.warn(
+              formatFulgurjsDiagnostic({
+                code: "DEV-011",
+                symptom: `server.host=${String(host)} \u975E loopback \u4E14 dev \u8DE8\u6E90\u7B56\u7565\u4E3A\u901A\u914D\uFF08*\uFF09\uFF1A\u4EFB\u4F55\u80FD\u8BBF\u95EE\u8BE5\u673A\u7684\u6765\u6E90\u90FD\u53EF\u62C9\u53D6\u672C\u5E94\u7528\u8054\u90A6\u7AEF\u70B9\u4E0E\u6E90\u7801\u6A21\u5757`,
+                cause: "devCorsOrigins \u672A\u914D\u7F6E\u65F6\u4FDD\u6301\u73B0\u72B6\u517C\u5BB9\uFF08*\uFF09\uFF1B\u8DE8\u673A\u5F00\u53D1\u66B4\u9732\u9762\u968F\u4E4B\u6269\u5927",
+                fix: `\u6309\u5BBF\u4E3B\u6765\u6E90\u663E\u5F0F\u6536\u7D27\uFF1AdevCorsOrigins: ['http://<host>:<port>', ...]\uFF08\u6216\u786E\u8BA4\u8BE5\u673A\u5904\u4E8E\u53EF\u4FE1\u7F51\u7EDC\uFF09`
+              })
+            );
+          }
+          if (normalized.devFsRoot) {
+            console.warn(
+              formatFulgurjsDiagnostic({
+                code: "DEV-012",
+                symptom: `server.host=${String(host)} \u975E loopback \u4E14 dev manifest \u643A\u5E26 fsRoot\uFF08remote \u6839\u76EE\u5F55\u672C\u673A\u7EDD\u5BF9\u8DEF\u5F84\uFF09`,
+                cause: "fsRoot \u4F9B\u540C\u673A\u8054\u8C03\u7684\u5BBF\u4E3B dts \u7C7B\u578B\u76F4\u8FDE\uFF1B2.x \u9ED8\u8BA4 true \u4FDD\u6301\u73B0\u72B6\uFF0C\u4E0B\u4E2A\u4E3B\u7248\u672C\u62DF\u6539\u4E3A\u663E\u5F0F\u5F00\u542F",
+                fix: `\u540C\u673A\u8054\u8C03\u65E0\u9700\u52A8\u4F5C\uFF1B\u8DE8\u673A/\u4E0D\u53EF\u4FE1\u7F51\u7EDC\u53EF devFsRoot: false\uFF08\u5BBF\u4E3B dts \u5C06\u964D\u7EA7\u4E3A any \u6869\u5E76\u6709\u660E\u786E\u63D0\u793A\uFF09`
+              })
+            );
+          }
+        }
       } else {
         const userTarget = userConfig.build?.target;
         if (userTarget) {
@@ -1437,6 +1837,12 @@ export { default } from ${JSON.stringify(url)};
         }
         if (normalized.remotes.length > 0 && normalized.devSharedSelf) {
           state.facadeDynamic = true;
+          const userMc = userConfig.build?.rollupOptions?.output?.manualChunks;
+          debugLog("facade", {
+            stage: "config",
+            facadeDynamic: true,
+            manualChunks: Array.isArray(userConfig.build?.rollupOptions?.output) ? "array" : typeof userMc
+          });
           const userOutput = userConfig.build?.rollupOptions?.output;
           if (Array.isArray(userOutput)) {
             console.warn(
@@ -1504,7 +1910,7 @@ export { default } from ${JSON.stringify(url)};
         }
       }
     },
-    resolveId(source) {
+    resolveId(source, importer) {
       let s = source;
       if (s.startsWith("/@id/")) s = s.slice(5);
       if (s.startsWith("__x00__")) s = "\0" + s.slice(7);
@@ -1512,6 +1918,16 @@ export { default } from ${JSON.stringify(url)};
       const bare = q === -1 ? s : s.slice(0, q);
       const query = q === -1 ? "" : s.slice(q);
       const bareClean = bare.startsWith("\0") ? bare.slice(1) : bare;
+      if (state.normalized && importer) {
+        const impClean = importer.split("?")[0];
+        const isOurVirtual = impClean.startsWith("virtual:fulgurjs-") || impClean.startsWith("\0virtual:fulgurjs-");
+        if (!isOurVirtual && !impClean.includes("/node_modules/.vite/") && !state.sharedClosureRoots.some((r) => impClean.startsWith(r.root)) && (state.transformedModules.has(importer) || state.transformedModules.has(impClean))) {
+          const hit = state.normalized.shared.find((sh) => sh.aliases.includes(bareClean));
+          if (hit) {
+            return RESOLVED.sharedNsFacade(hit.shareKey) + query;
+          }
+        }
+      }
       const n = state.normalized;
       if (n && !bare.startsWith("\0") && !bareClean.startsWith(".") && !bareClean.startsWith("/") && !bareClean.startsWith("virtual:")) {
         const slash = bareClean.indexOf("/");
@@ -1530,6 +1946,7 @@ export { default } from ${JSON.stringify(url)};
       if (bareClean === RUNTIME_PROXY_VIRTUAL_ID) return RESOLVED.runtimeProxy;
       if (bareClean === INIT_VIRTUAL_ID) return RESOLVED.init;
       if (bareClean === "virtual:fulgurjs-remote-schema") return bareClean;
+      if (bareClean === "virtual:fulgurjs-api") return bareClean;
       if (bareClean === "virtual:fulgurjs-provides") return RESOLVED.provides;
       if (bareClean === "virtual:fulgurjs-remote-entry") return RESOLVED.remoteEntry;
       if (bareClean.startsWith(SHARED_NS_FACADE_PREFIX)) {
@@ -1556,6 +1973,9 @@ export { default } from ${JSON.stringify(url)};
       if (clean === "virtual:fulgurjs-provides" && state.normalized) {
         return genDevProvides(state.normalized);
       }
+      if (clean === "virtual:fulgurjs-api") {
+        return genApiFacade(state.command);
+      }
       if (clean === "virtual:fulgurjs-remote-schema" && state.normalized) {
         if (state.command === "build") return genEmptyRemoteSchemaModule();
         remoteSchemaPromise ??= probeRemotesAndBuildSchema(state.normalized).then(
@@ -1623,6 +2043,7 @@ ${code}`, map: null };
       if (/\.vue(\?|$)/.test(id)) {
         if (state.command === "build" && /type=script/.test(id)) {
           return transformModule(code, id, {
+            onRewrite: () => recordRewritten(id),
             options: state.normalized,
             rewriteShared: true,
             allowNodeModules,
@@ -1634,6 +2055,10 @@ ${code}`, map: null };
       }
       if (!isTransformableId(id, allowNodeModules)) return null;
       return transformModule(code, id, {
+        onRewrite: () => {
+          debugLog("transform", { stage: "pre", mode: state.command, module: redactModulePath(id, state.normalized.root) });
+          recordRewritten(id);
+        },
         options: state.normalized,
         // build：全量改写；dev：默认仅纯 remote 改写 shared（被宿主消费的组件需协商到宿主实例），
         // 双角色宿主可显式 devSharedSelf: true 参与协商
@@ -1656,7 +2081,7 @@ ${code}`, map: null };
         for (const tag of html.match(moduleScriptRe) ?? []) {
           const src = srcRe.exec(tag)?.[1];
           if (!src || src.startsWith("http") || src.startsWith("//")) continue;
-          const abs = path5.resolve(state.normalized.root, src.startsWith("/") ? src.slice(1) : src);
+          const abs = path6.resolve(state.normalized.root, src.startsWith("/") ? src.slice(1) : src);
           state.entryAbsPaths.add(abs);
         }
         return html;
@@ -1668,7 +2093,7 @@ ${code}`, map: null };
       if (state.manualChunkSpecsPending) {
         for (const [group, specifier] of state.manualChunkSpecsPending) {
           try {
-            const r = await this.resolve(specifier, path5.join(n.root, "index.html"));
+            const r = await this.resolve(specifier, path6.join(n.root, "index.html"));
             if (r?.id) {
               state.manualChunkGroups.set(r.id, group);
               state.manualChunkGroups.set(r.id.split("?")[0], group);
@@ -1698,7 +2123,7 @@ ${code}`, map: null };
         };
         for (const item of n.shared) {
           if (item.import === false) continue;
-          const selfFile = await this.resolve(item.import, path5.join(n.root, "index.html")).then(
+          const selfFile = await this.resolve(item.import, path6.join(n.root, "index.html")).then(
             (r) => r?.id?.split("?")[0] ?? null
           ).catch(() => null);
           for (const alias of item.aliases) {
@@ -1713,7 +2138,7 @@ ${code}`, map: null };
               }
             }
             if (!file) {
-              file = await this.resolve(alias, path5.join(n.root, "index.html")).then(
+              file = await this.resolve(alias, path6.join(n.root, "index.html")).then(
                 (r) => r?.id?.split("?")[0] ?? null
               ).catch(() => null);
             }
@@ -1726,10 +2151,17 @@ ${code}`, map: null };
           }
         }
         state.sharedClosureRoots = [...rootKeys.entries()].map(([root, keys]) => ({ root, keys }));
+        if (state.sharedClosureRoots.length > 0) {
+          debugLog("facade", {
+            stage: "buildStart",
+            sharedClosureRoots: state.sharedClosureRoots.length,
+            keys: [...new Set(state.sharedClosureRoots.flatMap((r) => [...r.keys]))]
+          });
+        }
       }
       if (n.exposes.length > 0) {
         for (const e of n.exposes) {
-          const resolved = await this.resolve(e.import, path5.join(n.root, "index.html"));
+          const resolved = await this.resolve(e.import, path6.join(n.root, "index.html"));
           if (resolved) {
             state.exposeAbsPaths[e.import] = resolved.id.split("?")[0];
           } else {
@@ -1782,6 +2214,11 @@ ${code}`, map: null };
         }
         const entryChunkName = Object.keys(bundle).find((k) => bundle[k].type === "chunk" && k === n.filename);
         const manifest = genProdManifest(n, state.exposeFiles, entryChunkName ?? n.filename);
+        debugLog("manifest", {
+          stage: "generateBundle",
+          exposes: Object.keys(state.exposeFiles).length,
+          exposesWithCss: Object.values(state.exposeFiles).filter((e) => e.css.length > 0).length
+        });
         this.emitFile({
           type: "asset",
           fileName: "fulgurjs-manifest.json",
@@ -1809,7 +2246,10 @@ ${code}`, map: null };
           const raw = (req.url ?? "").split("?")[0];
           const stripped = raw.startsWith(baseNorm) ? `/${raw.slice(baseNorm.length)}` : raw;
           if (stripped === "/@fulgurjs-entry.js" || stripped === "/@fulgurjs-manifest.json") {
-            res.setHeader("Access-Control-Allow-Origin", "*");
+            const origin = Array.isArray(req.headers.origin) ? req.headers.origin[0] : req.headers.origin;
+            for (const [k, v] of Object.entries(corsHeadersFor(origin, n.devCorsOrigins))) {
+              res.setHeader(k, v);
+            }
             res.setHeader("Access-Control-Allow-Methods", "GET,OPTIONS");
             res.setHeader("Access-Control-Allow-Headers", "*");
             if (req.method === "OPTIONS") {
@@ -1882,20 +2322,11 @@ ${code}`, map: null };
       if (state.command === "serve" && clean.includes("node_modules") && !id.includes(".vite/deps") && !devRewriteAll) {
         return null;
       }
-      if (state.command === "build" && !/\.vue(\?|$)/.test(id)) {
-        const quickCheck = /require\s*\(\s*["']|(?:from|import)\s*["']/.test(code);
-        if (!quickCheck) return null;
-        const allowNodeModules = isPureRemoteBuild;
-        return transformModule(code, id, {
-          options: state.normalized,
-          rewriteShared: true,
-          allowNodeModules,
-          sharedClosureRoots: state.sharedClosureRoots
-        });
+      if (state.command === "build") {
+        return buildFallbackTransform(code, id);
       }
-      const rewriteShared = state.command === "build" || state.normalized.devSharedSelf;
+      const rewriteShared = state.normalized.devSharedSelf;
       const remapSpecifier = (spec) => {
-        if (state.normalized.shared.some((s) => s.aliases.includes(spec))) return spec;
         const depMatch = spec.match(/\/node_modules\/\.vite\/deps\/([^/?]+)\.js/);
         if (depMatch) {
           const depName = depMatch[1];
@@ -1906,14 +2337,13 @@ ${code}`, map: null };
         if (!cleanPath.startsWith("/")) return null;
         return state.resolvedSharedPaths.get(cleanPath) ?? null;
       };
-      const __r = await transformModule(code, id, {
+      return transformModule(code, id, {
+        onRewrite: () => recordRewritten(id),
         options: state.normalized,
         remapSpecifier,
         rewriteShared,
-        allowNodeModules: state.command === "build" ? isPureRemoteBuild || state.normalized.devSharedSelf : void 0,
         sharedClosureRoots: state.sharedClosureRoots
       });
-      return __r;
     }
   };
   function warmResolvedSharedPaths(server) {
@@ -1921,12 +2351,32 @@ ${code}`, map: null };
     if (!n) return;
     for (const s of n.shared) {
       if (s.import === false) continue;
-      void server.pluginContainer.resolveId(s.import, path5.join(n.root, "index.html")).then((r) => {
+      void server.pluginContainer.resolveId(s.import, path6.join(n.root, "index.html")).then((r) => {
         if (r?.id) state.resolvedSharedPaths.set(r.id.split("?")[0], s.configKey);
       }).catch(() => {
       });
     }
   }
+  async function buildFallbackTransform(code, id) {
+    if (/type=(style|template)/.test(id)) return null;
+    const clean = id.split("?")[0];
+    const isJsLike = /\.(m|c)?[jt]sx?$/.test(clean) || clean.endsWith(".vue");
+    if (!isJsLike) return null;
+    const quickCheck = /require\s*\(\s*["']|(?:from|import)\s*["']/.test(code);
+    if (!quickCheck) return null;
+    const n = state.normalized;
+    const isPureRemoteBuild = n.exposes.length > 0 && n.remotes.length === 0;
+    return transformModule(code, id, {
+      onRewrite: () => {
+        debugLog("transform", { stage: "post-fallback", mode: "build", module: redactModulePath(id, n.root) });
+        recordRewritten(id);
+      },
+      options: n,
+      rewriteShared: true,
+      allowNodeModules: isPureRemoteBuild || n.devSharedSelf,
+      sharedClosureRoots: state.sharedClosureRoots
+    });
+  }
   return [pre, post];
 }
 var index_default = federation;