everything-dev 1.53.2 → 2.0.0-rc.0

package/dist/merge.cjs

@@ -10,9 +10,11 @@ const BOS_CONFIG_ORDER = [
 	"testnet",
 	"staging",
 	"repository",
+	"publish",
 	"ci",
 	"app",
-	"plugins"
+	"plugins",
+	"rolledBackFrom"
 ];
 const ARRAY_UNION_KEYS = /* @__PURE__ */ new Set(["secrets", "connectSrc"]);
 function isPlainObject(value) {
@@ -45,6 +47,10 @@ function cleanNullSentinels(obj) {
 	return out;
 }
 const bosConfigMerger = (0, defu.createDefu)((obj, key, value) => {
+	if (key === "pin") {
+		obj[key] = value;
+		return true;
+	}
 	if (obj[key] === null) return true;
 	if (value === null) {
 		obj[key] = null;
@@ -94,11 +100,23 @@ function rebuildOrderedConfig(config) {
 	for (const key of Object.keys(config)) if (!BOS_CONFIG_ORDER.includes(key)) ordered[key] = config[key];
 	return ordered;
 }
+/**
+* Deep child-wins merge used to overlay a freshly authored config on top of
+* the currently published one — authored keys win, published-only pipeline
+* state (bundle URLs, integrity) is preserved. Unlike the extends merge,
+* plugin entries merge per-key so published URLs survive authored edits;
+* removing a slot from the authored config therefore requires a deploy,
+* which regenerates the payload from scratch.
+*/
+function mergeAuthoredOverPublished(published, authored) {
+	return rebuildOrderedConfig(mergeJsonValuesPreservingLocalOrder(authored, published));
+}
 
 //#endregion
 exports.BOS_CONFIG_ORDER = BOS_CONFIG_ORDER;
 exports.bosConfigMerger = bosConfigMerger;
 exports.isPlainObject = isPlainObject;
+exports.mergeAuthoredOverPublished = mergeAuthoredOverPublished;
 exports.mergeBosConfigWithExtends = mergeBosConfigWithExtends;
 exports.mergeBosConfigWithTemplate = mergeBosConfigWithTemplate;
 exports.rebuildOrderedConfig = rebuildOrderedConfig;

package/dist/merge.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"merge.cjs","names":[],"sources":["../src/merge.ts"],"sourcesContent":["import { createDefu } from \"defu\";\nimport type { BosConfigInput, ExtendsConfig } from \"./types\";\n\nexport const BOS_CONFIG_ORDER = [\n  \"extends\",\n  \"account\",\n  \"domain\",\n  \"title\",\n  \"description\",\n  \"testnet\",\n  \"staging\",\n  \"repository\",\n  \"ci\",\n  \"app\",\n  \"plugins\",\n] as const;\n\nexport type BosConfigFieldName = (typeof BOS_CONFIG_ORDER)[number];\n\nexport type BosEnv = \"development\" | \"production\" | \"staging\";\n\nexport interface ResolvedConfigMeta {\n  env: BosEnv;\n  resolvedAt: string;\n  extendsChain: string[];\n  source?: string;\n}\n\nconst ARRAY_UNION_KEYS = new Set([\"secrets\", \"connectSrc\"]);\n\nexport function isPlainObject(value: unknown): value is Record<string, unknown> {\n  return Boolean(value) && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction unionArrays(a: unknown, b: unknown): unknown[] | undefined {\n  const aArr = Array.isArray(a) ? a : [];\n  const bArr = Array.isArray(b) ? b : [];\n  if (aArr.length === 0 && bArr.length === 0) return undefined;\n  const seen = new Set<string>();\n  const result: unknown[] = [];\n  for (const item of [...aArr, ...bArr]) {\n    if (typeof item === \"string\") {\n      if (seen.has(item)) continue;\n      seen.add(item);\n    }\n    result.push(item);\n  }\n  return result;\n}\n\nfunction cleanNullSentinels(obj: Record<string, unknown>): Record<string, unknown> {\n  const out: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(obj)) {\n    if (value === null || value === undefined) continue;\n    if (isPlainObject(value)) {\n      const cleaned = cleanNullSentinels(value);\n      if (Object.keys(cleaned).length > 0) {\n        out[key] = cleaned;\n      }\n    } else {\n      out[key] = value;\n    }\n  }\n  return out;\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nconst bosConfigMerger = createDefu((obj: any, key: any, value: any): boolean | undefined => {\n  if (obj[key] === null) return true;\n  if (value === null) {\n    obj[key] = null;\n    return true;\n  }\n  if (Array.isArray(obj[key]) && Array.isArray(value)) {\n    if (ARRAY_UNION_KEYS.has(key)) {\n      obj[key] = unionArrays(obj[key], value);\n    } else {\n      obj[key] = value;\n    }\n    return true;\n  }\n  return false;\n});\n\nexport function resolveExtendsRef(\n  extendsField: string | ExtendsConfig | undefined,\n  env: BosEnv,\n): string | undefined {\n  if (!extendsField) return undefined;\n  if (typeof extendsField === \"string\") return extendsField;\n  return extendsField[env] ?? extendsField.production ?? Object.values(extendsField).find(Boolean);\n}\n\nexport function mergeBosConfigWithExtends(\n  parent: BosConfigInput,\n  child: BosConfigInput,\n): BosConfigInput {\n  const merged = bosConfigMerger(child, parent) as BosConfigInput;\n\n  if (child.plugins !== undefined && isPlainObject(child.plugins)) {\n    (merged as Record<string, unknown>).plugins = cleanNullSentinels(\n      child.plugins as Record<string, unknown>,\n    );\n  }\n\n  const mergedRecord = merged as Record<string, unknown>;\n\n  if (isPlainObject(mergedRecord.app)) {\n    for (const entryVal of Object.values(mergedRecord.app as Record<string, unknown>)) {\n      if (!isPlainObject(entryVal)) continue;\n      for (const secretKey of ARRAY_UNION_KEYS) {\n        if (Array.isArray(entryVal[secretKey])) {\n          entryVal[secretKey] =\n            (unionArrays(entryVal[secretKey] as unknown[], []) as string[] | undefined)?.filter(\n              Boolean,\n            ) ?? entryVal[secretKey];\n        }\n      }\n    }\n  }\n\n  if (isPlainObject(mergedRecord.plugins)) {\n    for (const pluginVal of Object.values(mergedRecord.plugins as Record<string, unknown>)) {\n      if (!isPlainObject(pluginVal)) continue;\n      for (const secretKey of ARRAY_UNION_KEYS) {\n        if (Array.isArray(pluginVal[secretKey])) {\n          pluginVal[secretKey] =\n            (unionArrays(pluginVal[secretKey] as unknown[], []) as string[] | undefined)?.filter(\n              Boolean,\n            ) ?? pluginVal[secretKey];\n        }\n      }\n    }\n  }\n\n  return rebuildOrderedConfig(mergedRecord) as BosConfigInput;\n}\n\nexport function mergeBosConfigWithTemplate(\n  local: BosConfigInput,\n  template: BosConfigInput,\n): BosConfigInput {\n  const merged = mergeJsonValuesPreservingLocalOrder(local, template) as BosConfigInput;\n  return rebuildOrderedConfig(merged as Record<string, unknown>) as BosConfigInput;\n}\n\nfunction mergeJsonValuesPreservingLocalOrder(local: unknown, template: unknown): unknown {\n  if (isPlainObject(local) && isPlainObject(template)) {\n    const merged: Record<string, unknown> = {};\n    for (const key of Object.keys(local)) {\n      merged[key] = mergeJsonValuesPreservingLocalOrder(\n        local[key],\n        (template as Record<string, unknown>)[key],\n      );\n    }\n    for (const key of Object.keys(template as Record<string, unknown>)) {\n      if (!(key in merged)) {\n        merged[key] = (template as Record<string, unknown>)[key];\n      }\n    }\n    return merged;\n  }\n  return local ?? template;\n}\n\nexport function rebuildOrderedConfig<T extends Record<string, unknown>>(config: T): T {\n  const ordered: Record<string, unknown> = {};\n\n  for (const key of BOS_CONFIG_ORDER) {\n    if (key in config) {\n      ordered[key] = config[key];\n    }\n  }\n\n  for (const key of Object.keys(config)) {\n    if (!BOS_CONFIG_ORDER.includes(key as BosConfigFieldName)) {\n      ordered[key] = config[key];\n    }\n  }\n\n  return ordered as T;\n}\n\nexport { bosConfigMerger };\n"],"mappings":";;;AAGA,MAAa,mBAAmB;CAC9B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAaA,MAAM,mCAAmB,IAAI,IAAI,CAAC,WAAW,YAAY,CAAC;AAE1D,SAAgB,cAAc,OAAkD;CAC9E,OAAO,QAAQ,KAAK,KAAK,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,GAAY,GAAmC;CAClE,MAAM,OAAO,MAAM,QAAQ,CAAC,IAAI,IAAI,CAAC;CACrC,MAAM,OAAO,MAAM,QAAQ,CAAC,IAAI,IAAI,CAAC;CACrC,IAAI,KAAK,WAAW,KAAK,KAAK,WAAW,GAAG,OAAO;CACnD,MAAM,uBAAO,IAAI,IAAY;CAC7B,MAAM,SAAoB,CAAC;CAC3B,KAAK,MAAM,QAAQ,CAAC,GAAG,MAAM,GAAG,IAAI,GAAG;EACrC,IAAI,OAAO,SAAS,UAAU;GAC5B,IAAI,KAAK,IAAI,IAAI,GAAG;GACpB,KAAK,IAAI,IAAI;EACf;EACA,OAAO,KAAK,IAAI;CAClB;CACA,OAAO;AACT;AAEA,SAAS,mBAAmB,KAAuD;CACjF,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,GAAG,GAAG;EAC9C,IAAI,UAAU,QAAQ,UAAU,QAAW;EAC3C,IAAI,cAAc,KAAK,GAAG;GACxB,MAAM,UAAU,mBAAmB,KAAK;GACxC,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,GAChC,IAAI,OAAO;EAEf,OACE,IAAI,OAAO;CAEf;CACA,OAAO;AACT;AAGA,MAAM,wCAA8B,KAAU,KAAU,UAAoC;CAC1F,IAAI,IAAI,SAAS,MAAM,OAAO;CAC9B,IAAI,UAAU,MAAM;EAClB,IAAI,OAAO;EACX,OAAO;CACT;CACA,IAAI,MAAM,QAAQ,IAAI,IAAI,KAAK,MAAM,QAAQ,KAAK,GAAG;EACnD,IAAI,iBAAiB,IAAI,GAAG,GAC1B,IAAI,OAAO,YAAY,IAAI,MAAM,KAAK;OAEtC,IAAI,OAAO;EAEb,OAAO;CACT;CACA,OAAO;AACT,CAAC;AAED,SAAgB,kBACd,cACA,KACoB;CACpB,IAAI,CAAC,cAAc,OAAO;CAC1B,IAAI,OAAO,iBAAiB,UAAU,OAAO;CAC7C,OAAO,aAAa,QAAQ,aAAa,cAAc,OAAO,OAAO,YAAY,CAAC,CAAC,KAAK,OAAO;AACjG;AAEA,SAAgB,0BACd,QACA,OACgB;CAChB,MAAM,SAAS,gBAAgB,OAAO,MAAM;CAE5C,IAAI,MAAM,YAAY,UAAa,cAAc,MAAM,OAAO,GAC5D,AAAC,OAAmC,UAAU,mBAC5C,MAAM,OACR;CAGF,MAAM,eAAe;CAErB,IAAI,cAAc,aAAa,GAAG,GAChC,KAAK,MAAM,YAAY,OAAO,OAAO,aAAa,GAA8B,GAAG;EACjF,IAAI,CAAC,cAAc,QAAQ,GAAG;EAC9B,KAAK,MAAM,aAAa,kBACtB,IAAI,MAAM,QAAQ,SAAS,UAAU,GACnC,SAAS,aACN,YAAY,SAAS,YAAyB,CAAC,CAAC,CAAC,EAA2B,OAC3E,OACF,KAAK,SAAS;CAGtB;CAGF,IAAI,cAAc,aAAa,OAAO,GACpC,KAAK,MAAM,aAAa,OAAO,OAAO,aAAa,OAAkC,GAAG;EACtF,IAAI,CAAC,cAAc,SAAS,GAAG;EAC/B,KAAK,MAAM,aAAa,kBACtB,IAAI,MAAM,QAAQ,UAAU,UAAU,GACpC,UAAU,aACP,YAAY,UAAU,YAAyB,CAAC,CAAC,CAAC,EAA2B,OAC5E,OACF,KAAK,UAAU;CAGvB;CAGF,OAAO,qBAAqB,YAAY;AAC1C;AAEA,SAAgB,2BACd,OACA,UACgB;CAEhB,OAAO,qBADQ,oCAAoC,OAAO,QACzB,CAA4B;AAC/D;AAEA,SAAS,oCAAoC,OAAgB,UAA4B;CACvF,IAAI,cAAc,KAAK,KAAK,cAAc,QAAQ,GAAG;EACnD,MAAM,SAAkC,CAAC;EACzC,KAAK,MAAM,OAAO,OAAO,KAAK,KAAK,GACjC,OAAO,OAAO,oCACZ,MAAM,MACL,SAAqC,IACxC;EAEF,KAAK,MAAM,OAAO,OAAO,KAAK,QAAmC,GAC/D,IAAI,EAAE,OAAO,SACX,OAAO,OAAQ,SAAqC;EAGxD,OAAO;CACT;CACA,OAAO,SAAS;AAClB;AAEA,SAAgB,qBAAwD,QAAc;CACpF,MAAM,UAAmC,CAAC;CAE1C,KAAK,MAAM,OAAO,kBAChB,IAAI,OAAO,QACT,QAAQ,OAAO,OAAO;CAI1B,KAAK,MAAM,OAAO,OAAO,KAAK,MAAM,GAClC,IAAI,CAAC,iBAAiB,SAAS,GAAyB,GACtD,QAAQ,OAAO,OAAO;CAI1B,OAAO;AACT"}
+{"version":3,"file":"merge.cjs","names":["createDefu"],"sources":["../src/merge.ts"],"sourcesContent":["import { createDefu } from \"defu\";\nimport type { BosConfigInput, ExtendsConfig } from \"./types\";\n\nexport const BOS_CONFIG_ORDER = [\n  \"extends\",\n  \"account\",\n  \"domain\",\n  \"title\",\n  \"description\",\n  \"testnet\",\n  \"staging\",\n  \"repository\",\n  \"publish\",\n  \"ci\",\n  \"app\",\n  \"plugins\",\n  \"rolledBackFrom\",\n] as const;\n\nexport type BosConfigFieldName = (typeof BOS_CONFIG_ORDER)[number];\n\nexport type BosEnv = \"development\" | \"production\" | \"staging\";\n\nexport interface ResolvedConfigMeta {\n  env: BosEnv;\n  resolvedAt: string;\n  extendsChain: string[];\n  source?: string;\n}\n\nconst ARRAY_UNION_KEYS = new Set([\"secrets\", \"connectSrc\"]);\n\nexport function isPlainObject(value: unknown): value is Record<string, unknown> {\n  return Boolean(value) && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction unionArrays(a: unknown, b: unknown): unknown[] | undefined {\n  const aArr = Array.isArray(a) ? a : [];\n  const bArr = Array.isArray(b) ? b : [];\n  if (aArr.length === 0 && bArr.length === 0) return undefined;\n  const seen = new Set<string>();\n  const result: unknown[] = [];\n  for (const item of [...aArr, ...bArr]) {\n    if (typeof item === \"string\") {\n      if (seen.has(item)) continue;\n      seen.add(item);\n    }\n    result.push(item);\n  }\n  return result;\n}\n\nfunction cleanNullSentinels(obj: Record<string, unknown>): Record<string, unknown> {\n  const out: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(obj)) {\n    if (value === null || value === undefined) continue;\n    if (isPlainObject(value)) {\n      const cleaned = cleanNullSentinels(value);\n      if (Object.keys(cleaned).length > 0) {\n        out[key] = cleaned;\n      }\n    } else {\n      out[key] = value;\n    }\n  }\n  return out;\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nconst bosConfigMerger = createDefu((obj: any, key: any, value: any): boolean | undefined => {\n  if (key === \"pin\") {\n    // the pin is an atomic unit — a child pin replaces the parent's whole\n    // (per-key defu merging would half-mix manifest/integrity across runtimes)\n    obj[key] = value;\n    return true;\n  }\n  if (obj[key] === null) return true;\n  if (value === null) {\n    obj[key] = null;\n    return true;\n  }\n  if (Array.isArray(obj[key]) && Array.isArray(value)) {\n    if (ARRAY_UNION_KEYS.has(key)) {\n      obj[key] = unionArrays(obj[key], value);\n    } else {\n      obj[key] = value;\n    }\n    return true;\n  }\n  return false;\n});\n\nexport function resolveExtendsRef(\n  extendsField: string | ExtendsConfig | undefined,\n  env: BosEnv,\n): string | undefined {\n  if (!extendsField) return undefined;\n  if (typeof extendsField === \"string\") return extendsField;\n  return extendsField[env] ?? extendsField.production ?? Object.values(extendsField).find(Boolean);\n}\n\nexport function mergeBosConfigWithExtends(\n  parent: BosConfigInput,\n  child: BosConfigInput,\n): BosConfigInput {\n  const merged = bosConfigMerger(child, parent) as BosConfigInput;\n\n  if (child.plugins !== undefined && isPlainObject(child.plugins)) {\n    (merged as Record<string, unknown>).plugins = cleanNullSentinels(\n      child.plugins as Record<string, unknown>,\n    );\n  }\n\n  const mergedRecord = merged as Record<string, unknown>;\n\n  if (isPlainObject(mergedRecord.app)) {\n    for (const entryVal of Object.values(mergedRecord.app as Record<string, unknown>)) {\n      if (!isPlainObject(entryVal)) continue;\n      for (const secretKey of ARRAY_UNION_KEYS) {\n        if (Array.isArray(entryVal[secretKey])) {\n          entryVal[secretKey] =\n            (unionArrays(entryVal[secretKey] as unknown[], []) as string[] | undefined)?.filter(\n              Boolean,\n            ) ?? entryVal[secretKey];\n        }\n      }\n    }\n  }\n\n  if (isPlainObject(mergedRecord.plugins)) {\n    for (const pluginVal of Object.values(mergedRecord.plugins as Record<string, unknown>)) {\n      if (!isPlainObject(pluginVal)) continue;\n      for (const secretKey of ARRAY_UNION_KEYS) {\n        if (Array.isArray(pluginVal[secretKey])) {\n          pluginVal[secretKey] =\n            (unionArrays(pluginVal[secretKey] as unknown[], []) as string[] | undefined)?.filter(\n              Boolean,\n            ) ?? pluginVal[secretKey];\n        }\n      }\n    }\n  }\n\n  return rebuildOrderedConfig(mergedRecord) as BosConfigInput;\n}\n\nexport function mergeBosConfigWithTemplate(\n  local: BosConfigInput,\n  template: BosConfigInput,\n): BosConfigInput {\n  const merged = mergeJsonValuesPreservingLocalOrder(local, template) as BosConfigInput;\n  return rebuildOrderedConfig(merged as Record<string, unknown>) as BosConfigInput;\n}\n\nfunction mergeJsonValuesPreservingLocalOrder(local: unknown, template: unknown): unknown {\n  if (isPlainObject(local) && isPlainObject(template)) {\n    const merged: Record<string, unknown> = {};\n    for (const key of Object.keys(local)) {\n      merged[key] = mergeJsonValuesPreservingLocalOrder(\n        local[key],\n        (template as Record<string, unknown>)[key],\n      );\n    }\n    for (const key of Object.keys(template as Record<string, unknown>)) {\n      if (!(key in merged)) {\n        merged[key] = (template as Record<string, unknown>)[key];\n      }\n    }\n    return merged;\n  }\n  return local ?? template;\n}\n\nexport function rebuildOrderedConfig<T extends Record<string, unknown>>(config: T): T {\n  const ordered: Record<string, unknown> = {};\n\n  for (const key of BOS_CONFIG_ORDER) {\n    if (key in config) {\n      ordered[key] = config[key];\n    }\n  }\n\n  for (const key of Object.keys(config)) {\n    if (!BOS_CONFIG_ORDER.includes(key as BosConfigFieldName)) {\n      ordered[key] = config[key];\n    }\n  }\n\n  return ordered as T;\n}\n\n/**\n * Deep child-wins merge used to overlay a freshly authored config on top of\n * the currently published one — authored keys win, published-only pipeline\n * state (bundle URLs, integrity) is preserved. Unlike the extends merge,\n * plugin entries merge per-key so published URLs survive authored edits;\n * removing a slot from the authored config therefore requires a deploy,\n * which regenerates the payload from scratch.\n */\nexport function mergeAuthoredOverPublished(\n  published: BosConfigInput,\n  authored: BosConfigInput,\n): BosConfigInput {\n  const merged = mergeJsonValuesPreservingLocalOrder(authored, published) as Record<\n    string,\n    unknown\n  >;\n  return rebuildOrderedConfig(merged) as BosConfigInput;\n}\n\nexport { bosConfigMerger };\n"],"mappings":";;;AAGA,MAAa,mBAAmB;CAC9B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAaA,MAAM,mCAAmB,IAAI,IAAI,CAAC,WAAW,YAAY,CAAC;AAE1D,SAAgB,cAAc,OAAkD;CAC9E,OAAO,QAAQ,KAAK,KAAK,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,GAAY,GAAmC;CAClE,MAAM,OAAO,MAAM,QAAQ,CAAC,IAAI,IAAI,CAAC;CACrC,MAAM,OAAO,MAAM,QAAQ,CAAC,IAAI,IAAI,CAAC;CACrC,IAAI,KAAK,WAAW,KAAK,KAAK,WAAW,GAAG,OAAO;CACnD,MAAM,uBAAO,IAAI,IAAY;CAC7B,MAAM,SAAoB,CAAC;CAC3B,KAAK,MAAM,QAAQ,CAAC,GAAG,MAAM,GAAG,IAAI,GAAG;EACrC,IAAI,OAAO,SAAS,UAAU;GAC5B,IAAI,KAAK,IAAI,IAAI,GAAG;GACpB,KAAK,IAAI,IAAI;EACf;EACA,OAAO,KAAK,IAAI;CAClB;CACA,OAAO;AACT;AAEA,SAAS,mBAAmB,KAAuD;CACjF,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,GAAG,GAAG;EAC9C,IAAI,UAAU,QAAQ,UAAU,QAAW;EAC3C,IAAI,cAAc,KAAK,GAAG;GACxB,MAAM,UAAU,mBAAmB,KAAK;GACxC,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,GAChC,IAAI,OAAO;EAEf,OACE,IAAI,OAAO;CAEf;CACA,OAAO;AACT;AAGA,MAAM,sBAAkBA,kBAAY,KAAU,KAAU,UAAoC;CAC1F,IAAI,QAAQ,OAAO;EAGjB,IAAI,OAAO;EACX,OAAO;CACT;CACA,IAAI,IAAI,SAAS,MAAM,OAAO;CAC9B,IAAI,UAAU,MAAM;EAClB,IAAI,OAAO;EACX,OAAO;CACT;CACA,IAAI,MAAM,QAAQ,IAAI,IAAI,KAAK,MAAM,QAAQ,KAAK,GAAG;EACnD,IAAI,iBAAiB,IAAI,GAAG,GAC1B,IAAI,OAAO,YAAY,IAAI,MAAM,KAAK;OAEtC,IAAI,OAAO;EAEb,OAAO;CACT;CACA,OAAO;AACT,CAAC;AAED,SAAgB,kBACd,cACA,KACoB;CACpB,IAAI,CAAC,cAAc,OAAO;CAC1B,IAAI,OAAO,iBAAiB,UAAU,OAAO;CAC7C,OAAO,aAAa,QAAQ,aAAa,cAAc,OAAO,OAAO,YAAY,CAAC,CAAC,KAAK,OAAO;AACjG;AAEA,SAAgB,0BACd,QACA,OACgB;CAChB,MAAM,SAAS,gBAAgB,OAAO,MAAM;CAE5C,IAAI,MAAM,YAAY,UAAa,cAAc,MAAM,OAAO,GAC5D,AAAC,OAAmC,UAAU,mBAC5C,MAAM,OACR;CAGF,MAAM,eAAe;CAErB,IAAI,cAAc,aAAa,GAAG,GAChC,KAAK,MAAM,YAAY,OAAO,OAAO,aAAa,GAA8B,GAAG;EACjF,IAAI,CAAC,cAAc,QAAQ,GAAG;EAC9B,KAAK,MAAM,aAAa,kBACtB,IAAI,MAAM,QAAQ,SAAS,UAAU,GACnC,SAAS,aACN,YAAY,SAAS,YAAyB,CAAC,CAAC,CAAC,EAA2B,OAC3E,OACF,KAAK,SAAS;CAGtB;CAGF,IAAI,cAAc,aAAa,OAAO,GACpC,KAAK,MAAM,aAAa,OAAO,OAAO,aAAa,OAAkC,GAAG;EACtF,IAAI,CAAC,cAAc,SAAS,GAAG;EAC/B,KAAK,MAAM,aAAa,kBACtB,IAAI,MAAM,QAAQ,UAAU,UAAU,GACpC,UAAU,aACP,YAAY,UAAU,YAAyB,CAAC,CAAC,CAAC,EAA2B,OAC5E,OACF,KAAK,UAAU;CAGvB;CAGF,OAAO,qBAAqB,YAAY;AAC1C;AAEA,SAAgB,2BACd,OACA,UACgB;CAEhB,OAAO,qBADQ,oCAAoC,OAAO,QACzB,CAA4B;AAC/D;AAEA,SAAS,oCAAoC,OAAgB,UAA4B;CACvF,IAAI,cAAc,KAAK,KAAK,cAAc,QAAQ,GAAG;EACnD,MAAM,SAAkC,CAAC;EACzC,KAAK,MAAM,OAAO,OAAO,KAAK,KAAK,GACjC,OAAO,OAAO,oCACZ,MAAM,MACL,SAAqC,IACxC;EAEF,KAAK,MAAM,OAAO,OAAO,KAAK,QAAmC,GAC/D,IAAI,EAAE,OAAO,SACX,OAAO,OAAQ,SAAqC;EAGxD,OAAO;CACT;CACA,OAAO,SAAS;AAClB;AAEA,SAAgB,qBAAwD,QAAc;CACpF,MAAM,UAAmC,CAAC;CAE1C,KAAK,MAAM,OAAO,kBAChB,IAAI,OAAO,QACT,QAAQ,OAAO,OAAO;CAI1B,KAAK,MAAM,OAAO,OAAO,KAAK,MAAM,GAClC,IAAI,CAAC,iBAAiB,SAAS,GAAyB,GACtD,QAAQ,OAAO,OAAO;CAI1B,OAAO;AACT;;;;;;;;;AAUA,SAAgB,2BACd,WACA,UACgB;CAKhB,OAAO,qBAJQ,oCAAoC,UAAU,SAI5B,CAAC;AACpC"}

package/dist/merge.d.cts

@@ -1,6 +1,6 @@
 import { BosConfigInput, ExtendsConfig } from "./types.cjs";
 //#region src/merge.d.ts
-declare const BOS_CONFIG_ORDER: readonly ["extends", "account", "domain", "title", "description", "testnet", "staging", "repository", "ci", "app", "plugins"];
+declare const BOS_CONFIG_ORDER: readonly ["extends", "account", "domain", "title", "description", "testnet", "staging", "repository", "publish", "ci", "app", "plugins", "rolledBackFrom"];
 type BosEnv = "development" | "production" | "staging";
 declare function resolveExtendsRef(extendsField: string | ExtendsConfig | undefined, env: BosEnv): string | undefined;
 declare function mergeBosConfigWithExtends(parent: BosConfigInput, child: BosConfigInput): BosConfigInput;

package/dist/merge.d.mts

@@ -1,6 +1,6 @@
 import { BosConfigInput, ExtendsConfig } from "./types.mjs";
 //#region src/merge.d.ts
-declare const BOS_CONFIG_ORDER: readonly ["extends", "account", "domain", "title", "description", "testnet", "staging", "repository", "ci", "app", "plugins"];
+declare const BOS_CONFIG_ORDER: readonly ["extends", "account", "domain", "title", "description", "testnet", "staging", "repository", "publish", "ci", "app", "plugins", "rolledBackFrom"];
 type BosEnv = "development" | "production" | "staging";
 declare function resolveExtendsRef(extendsField: string | ExtendsConfig | undefined, env: BosEnv): string | undefined;
 declare function mergeBosConfigWithExtends(parent: BosConfigInput, child: BosConfigInput): BosConfigInput;

package/dist/merge.mjs

@@ -10,9 +10,11 @@ const BOS_CONFIG_ORDER = [
 	"testnet",
 	"staging",
 	"repository",
+	"publish",
 	"ci",
 	"app",
-	"plugins"
+	"plugins",
+	"rolledBackFrom"
 ];
 const ARRAY_UNION_KEYS = /* @__PURE__ */ new Set(["secrets", "connectSrc"]);
 function isPlainObject(value) {
@@ -45,6 +47,10 @@ function cleanNullSentinels(obj) {
 	return out;
 }
 const bosConfigMerger = createDefu((obj, key, value) => {
+	if (key === "pin") {
+		obj[key] = value;
+		return true;
+	}
 	if (obj[key] === null) return true;
 	if (value === null) {
 		obj[key] = null;
@@ -94,7 +100,18 @@ function rebuildOrderedConfig(config) {
 	for (const key of Object.keys(config)) if (!BOS_CONFIG_ORDER.includes(key)) ordered[key] = config[key];
 	return ordered;
 }
+/**
+* Deep child-wins merge used to overlay a freshly authored config on top of
+* the currently published one — authored keys win, published-only pipeline
+* state (bundle URLs, integrity) is preserved. Unlike the extends merge,
+* plugin entries merge per-key so published URLs survive authored edits;
+* removing a slot from the authored config therefore requires a deploy,
+* which regenerates the payload from scratch.
+*/
+function mergeAuthoredOverPublished(published, authored) {
+	return rebuildOrderedConfig(mergeJsonValuesPreservingLocalOrder(authored, published));
+}
 
 //#endregion
-export { BOS_CONFIG_ORDER, bosConfigMerger, isPlainObject, mergeBosConfigWithExtends, mergeBosConfigWithTemplate, rebuildOrderedConfig, resolveExtendsRef };
+export { BOS_CONFIG_ORDER, bosConfigMerger, isPlainObject, mergeAuthoredOverPublished, mergeBosConfigWithExtends, mergeBosConfigWithTemplate, rebuildOrderedConfig, resolveExtendsRef };
 //# sourceMappingURL=merge.mjs.map

package/dist/merge.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"merge.mjs","names":[],"sources":["../src/merge.ts"],"sourcesContent":["import { createDefu } from \"defu\";\nimport type { BosConfigInput, ExtendsConfig } from \"./types\";\n\nexport const BOS_CONFIG_ORDER = [\n  \"extends\",\n  \"account\",\n  \"domain\",\n  \"title\",\n  \"description\",\n  \"testnet\",\n  \"staging\",\n  \"repository\",\n  \"ci\",\n  \"app\",\n  \"plugins\",\n] as const;\n\nexport type BosConfigFieldName = (typeof BOS_CONFIG_ORDER)[number];\n\nexport type BosEnv = \"development\" | \"production\" | \"staging\";\n\nexport interface ResolvedConfigMeta {\n  env: BosEnv;\n  resolvedAt: string;\n  extendsChain: string[];\n  source?: string;\n}\n\nconst ARRAY_UNION_KEYS = new Set([\"secrets\", \"connectSrc\"]);\n\nexport function isPlainObject(value: unknown): value is Record<string, unknown> {\n  return Boolean(value) && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction unionArrays(a: unknown, b: unknown): unknown[] | undefined {\n  const aArr = Array.isArray(a) ? a : [];\n  const bArr = Array.isArray(b) ? b : [];\n  if (aArr.length === 0 && bArr.length === 0) return undefined;\n  const seen = new Set<string>();\n  const result: unknown[] = [];\n  for (const item of [...aArr, ...bArr]) {\n    if (typeof item === \"string\") {\n      if (seen.has(item)) continue;\n      seen.add(item);\n    }\n    result.push(item);\n  }\n  return result;\n}\n\nfunction cleanNullSentinels(obj: Record<string, unknown>): Record<string, unknown> {\n  const out: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(obj)) {\n    if (value === null || value === undefined) continue;\n    if (isPlainObject(value)) {\n      const cleaned = cleanNullSentinels(value);\n      if (Object.keys(cleaned).length > 0) {\n        out[key] = cleaned;\n      }\n    } else {\n      out[key] = value;\n    }\n  }\n  return out;\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nconst bosConfigMerger = createDefu((obj: any, key: any, value: any): boolean | undefined => {\n  if (obj[key] === null) return true;\n  if (value === null) {\n    obj[key] = null;\n    return true;\n  }\n  if (Array.isArray(obj[key]) && Array.isArray(value)) {\n    if (ARRAY_UNION_KEYS.has(key)) {\n      obj[key] = unionArrays(obj[key], value);\n    } else {\n      obj[key] = value;\n    }\n    return true;\n  }\n  return false;\n});\n\nexport function resolveExtendsRef(\n  extendsField: string | ExtendsConfig | undefined,\n  env: BosEnv,\n): string | undefined {\n  if (!extendsField) return undefined;\n  if (typeof extendsField === \"string\") return extendsField;\n  return extendsField[env] ?? extendsField.production ?? Object.values(extendsField).find(Boolean);\n}\n\nexport function mergeBosConfigWithExtends(\n  parent: BosConfigInput,\n  child: BosConfigInput,\n): BosConfigInput {\n  const merged = bosConfigMerger(child, parent) as BosConfigInput;\n\n  if (child.plugins !== undefined && isPlainObject(child.plugins)) {\n    (merged as Record<string, unknown>).plugins = cleanNullSentinels(\n      child.plugins as Record<string, unknown>,\n    );\n  }\n\n  const mergedRecord = merged as Record<string, unknown>;\n\n  if (isPlainObject(mergedRecord.app)) {\n    for (const entryVal of Object.values(mergedRecord.app as Record<string, unknown>)) {\n      if (!isPlainObject(entryVal)) continue;\n      for (const secretKey of ARRAY_UNION_KEYS) {\n        if (Array.isArray(entryVal[secretKey])) {\n          entryVal[secretKey] =\n            (unionArrays(entryVal[secretKey] as unknown[], []) as string[] | undefined)?.filter(\n              Boolean,\n            ) ?? entryVal[secretKey];\n        }\n      }\n    }\n  }\n\n  if (isPlainObject(mergedRecord.plugins)) {\n    for (const pluginVal of Object.values(mergedRecord.plugins as Record<string, unknown>)) {\n      if (!isPlainObject(pluginVal)) continue;\n      for (const secretKey of ARRAY_UNION_KEYS) {\n        if (Array.isArray(pluginVal[secretKey])) {\n          pluginVal[secretKey] =\n            (unionArrays(pluginVal[secretKey] as unknown[], []) as string[] | undefined)?.filter(\n              Boolean,\n            ) ?? pluginVal[secretKey];\n        }\n      }\n    }\n  }\n\n  return rebuildOrderedConfig(mergedRecord) as BosConfigInput;\n}\n\nexport function mergeBosConfigWithTemplate(\n  local: BosConfigInput,\n  template: BosConfigInput,\n): BosConfigInput {\n  const merged = mergeJsonValuesPreservingLocalOrder(local, template) as BosConfigInput;\n  return rebuildOrderedConfig(merged as Record<string, unknown>) as BosConfigInput;\n}\n\nfunction mergeJsonValuesPreservingLocalOrder(local: unknown, template: unknown): unknown {\n  if (isPlainObject(local) && isPlainObject(template)) {\n    const merged: Record<string, unknown> = {};\n    for (const key of Object.keys(local)) {\n      merged[key] = mergeJsonValuesPreservingLocalOrder(\n        local[key],\n        (template as Record<string, unknown>)[key],\n      );\n    }\n    for (const key of Object.keys(template as Record<string, unknown>)) {\n      if (!(key in merged)) {\n        merged[key] = (template as Record<string, unknown>)[key];\n      }\n    }\n    return merged;\n  }\n  return local ?? template;\n}\n\nexport function rebuildOrderedConfig<T extends Record<string, unknown>>(config: T): T {\n  const ordered: Record<string, unknown> = {};\n\n  for (const key of BOS_CONFIG_ORDER) {\n    if (key in config) {\n      ordered[key] = config[key];\n    }\n  }\n\n  for (const key of Object.keys(config)) {\n    if (!BOS_CONFIG_ORDER.includes(key as BosConfigFieldName)) {\n      ordered[key] = config[key];\n    }\n  }\n\n  return ordered as T;\n}\n\nexport { bosConfigMerger };\n"],"mappings":";;;AAGA,MAAa,mBAAmB;CAC9B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAaA,MAAM,mCAAmB,IAAI,IAAI,CAAC,WAAW,YAAY,CAAC;AAE1D,SAAgB,cAAc,OAAkD;CAC9E,OAAO,QAAQ,KAAK,KAAK,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,GAAY,GAAmC;CAClE,MAAM,OAAO,MAAM,QAAQ,CAAC,IAAI,IAAI,CAAC;CACrC,MAAM,OAAO,MAAM,QAAQ,CAAC,IAAI,IAAI,CAAC;CACrC,IAAI,KAAK,WAAW,KAAK,KAAK,WAAW,GAAG,OAAO;CACnD,MAAM,uBAAO,IAAI,IAAY;CAC7B,MAAM,SAAoB,CAAC;CAC3B,KAAK,MAAM,QAAQ,CAAC,GAAG,MAAM,GAAG,IAAI,GAAG;EACrC,IAAI,OAAO,SAAS,UAAU;GAC5B,IAAI,KAAK,IAAI,IAAI,GAAG;GACpB,KAAK,IAAI,IAAI;EACf;EACA,OAAO,KAAK,IAAI;CAClB;CACA,OAAO;AACT;AAEA,SAAS,mBAAmB,KAAuD;CACjF,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,GAAG,GAAG;EAC9C,IAAI,UAAU,QAAQ,UAAU,QAAW;EAC3C,IAAI,cAAc,KAAK,GAAG;GACxB,MAAM,UAAU,mBAAmB,KAAK;GACxC,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,GAChC,IAAI,OAAO;EAEf,OACE,IAAI,OAAO;CAEf;CACA,OAAO;AACT;AAGA,MAAM,kBAAkB,YAAY,KAAU,KAAU,UAAoC;CAC1F,IAAI,IAAI,SAAS,MAAM,OAAO;CAC9B,IAAI,UAAU,MAAM;EAClB,IAAI,OAAO;EACX,OAAO;CACT;CACA,IAAI,MAAM,QAAQ,IAAI,IAAI,KAAK,MAAM,QAAQ,KAAK,GAAG;EACnD,IAAI,iBAAiB,IAAI,GAAG,GAC1B,IAAI,OAAO,YAAY,IAAI,MAAM,KAAK;OAEtC,IAAI,OAAO;EAEb,OAAO;CACT;CACA,OAAO;AACT,CAAC;AAED,SAAgB,kBACd,cACA,KACoB;CACpB,IAAI,CAAC,cAAc,OAAO;CAC1B,IAAI,OAAO,iBAAiB,UAAU,OAAO;CAC7C,OAAO,aAAa,QAAQ,aAAa,cAAc,OAAO,OAAO,YAAY,CAAC,CAAC,KAAK,OAAO;AACjG;AAEA,SAAgB,0BACd,QACA,OACgB;CAChB,MAAM,SAAS,gBAAgB,OAAO,MAAM;CAE5C,IAAI,MAAM,YAAY,UAAa,cAAc,MAAM,OAAO,GAC5D,AAAC,OAAmC,UAAU,mBAC5C,MAAM,OACR;CAGF,MAAM,eAAe;CAErB,IAAI,cAAc,aAAa,GAAG,GAChC,KAAK,MAAM,YAAY,OAAO,OAAO,aAAa,GAA8B,GAAG;EACjF,IAAI,CAAC,cAAc,QAAQ,GAAG;EAC9B,KAAK,MAAM,aAAa,kBACtB,IAAI,MAAM,QAAQ,SAAS,UAAU,GACnC,SAAS,aACN,YAAY,SAAS,YAAyB,CAAC,CAAC,CAAC,EAA2B,OAC3E,OACF,KAAK,SAAS;CAGtB;CAGF,IAAI,cAAc,aAAa,OAAO,GACpC,KAAK,MAAM,aAAa,OAAO,OAAO,aAAa,OAAkC,GAAG;EACtF,IAAI,CAAC,cAAc,SAAS,GAAG;EAC/B,KAAK,MAAM,aAAa,kBACtB,IAAI,MAAM,QAAQ,UAAU,UAAU,GACpC,UAAU,aACP,YAAY,UAAU,YAAyB,CAAC,CAAC,CAAC,EAA2B,OAC5E,OACF,KAAK,UAAU;CAGvB;CAGF,OAAO,qBAAqB,YAAY;AAC1C;AAEA,SAAgB,2BACd,OACA,UACgB;CAEhB,OAAO,qBADQ,oCAAoC,OAAO,QACzB,CAA4B;AAC/D;AAEA,SAAS,oCAAoC,OAAgB,UAA4B;CACvF,IAAI,cAAc,KAAK,KAAK,cAAc,QAAQ,GAAG;EACnD,MAAM,SAAkC,CAAC;EACzC,KAAK,MAAM,OAAO,OAAO,KAAK,KAAK,GACjC,OAAO,OAAO,oCACZ,MAAM,MACL,SAAqC,IACxC;EAEF,KAAK,MAAM,OAAO,OAAO,KAAK,QAAmC,GAC/D,IAAI,EAAE,OAAO,SACX,OAAO,OAAQ,SAAqC;EAGxD,OAAO;CACT;CACA,OAAO,SAAS;AAClB;AAEA,SAAgB,qBAAwD,QAAc;CACpF,MAAM,UAAmC,CAAC;CAE1C,KAAK,MAAM,OAAO,kBAChB,IAAI,OAAO,QACT,QAAQ,OAAO,OAAO;CAI1B,KAAK,MAAM,OAAO,OAAO,KAAK,MAAM,GAClC,IAAI,CAAC,iBAAiB,SAAS,GAAyB,GACtD,QAAQ,OAAO,OAAO;CAI1B,OAAO;AACT"}
+{"version":3,"file":"merge.mjs","names":[],"sources":["../src/merge.ts"],"sourcesContent":["import { createDefu } from \"defu\";\nimport type { BosConfigInput, ExtendsConfig } from \"./types\";\n\nexport const BOS_CONFIG_ORDER = [\n  \"extends\",\n  \"account\",\n  \"domain\",\n  \"title\",\n  \"description\",\n  \"testnet\",\n  \"staging\",\n  \"repository\",\n  \"publish\",\n  \"ci\",\n  \"app\",\n  \"plugins\",\n  \"rolledBackFrom\",\n] as const;\n\nexport type BosConfigFieldName = (typeof BOS_CONFIG_ORDER)[number];\n\nexport type BosEnv = \"development\" | \"production\" | \"staging\";\n\nexport interface ResolvedConfigMeta {\n  env: BosEnv;\n  resolvedAt: string;\n  extendsChain: string[];\n  source?: string;\n}\n\nconst ARRAY_UNION_KEYS = new Set([\"secrets\", \"connectSrc\"]);\n\nexport function isPlainObject(value: unknown): value is Record<string, unknown> {\n  return Boolean(value) && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction unionArrays(a: unknown, b: unknown): unknown[] | undefined {\n  const aArr = Array.isArray(a) ? a : [];\n  const bArr = Array.isArray(b) ? b : [];\n  if (aArr.length === 0 && bArr.length === 0) return undefined;\n  const seen = new Set<string>();\n  const result: unknown[] = [];\n  for (const item of [...aArr, ...bArr]) {\n    if (typeof item === \"string\") {\n      if (seen.has(item)) continue;\n      seen.add(item);\n    }\n    result.push(item);\n  }\n  return result;\n}\n\nfunction cleanNullSentinels(obj: Record<string, unknown>): Record<string, unknown> {\n  const out: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(obj)) {\n    if (value === null || value === undefined) continue;\n    if (isPlainObject(value)) {\n      const cleaned = cleanNullSentinels(value);\n      if (Object.keys(cleaned).length > 0) {\n        out[key] = cleaned;\n      }\n    } else {\n      out[key] = value;\n    }\n  }\n  return out;\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nconst bosConfigMerger = createDefu((obj: any, key: any, value: any): boolean | undefined => {\n  if (key === \"pin\") {\n    // the pin is an atomic unit — a child pin replaces the parent's whole\n    // (per-key defu merging would half-mix manifest/integrity across runtimes)\n    obj[key] = value;\n    return true;\n  }\n  if (obj[key] === null) return true;\n  if (value === null) {\n    obj[key] = null;\n    return true;\n  }\n  if (Array.isArray(obj[key]) && Array.isArray(value)) {\n    if (ARRAY_UNION_KEYS.has(key)) {\n      obj[key] = unionArrays(obj[key], value);\n    } else {\n      obj[key] = value;\n    }\n    return true;\n  }\n  return false;\n});\n\nexport function resolveExtendsRef(\n  extendsField: string | ExtendsConfig | undefined,\n  env: BosEnv,\n): string | undefined {\n  if (!extendsField) return undefined;\n  if (typeof extendsField === \"string\") return extendsField;\n  return extendsField[env] ?? extendsField.production ?? Object.values(extendsField).find(Boolean);\n}\n\nexport function mergeBosConfigWithExtends(\n  parent: BosConfigInput,\n  child: BosConfigInput,\n): BosConfigInput {\n  const merged = bosConfigMerger(child, parent) as BosConfigInput;\n\n  if (child.plugins !== undefined && isPlainObject(child.plugins)) {\n    (merged as Record<string, unknown>).plugins = cleanNullSentinels(\n      child.plugins as Record<string, unknown>,\n    );\n  }\n\n  const mergedRecord = merged as Record<string, unknown>;\n\n  if (isPlainObject(mergedRecord.app)) {\n    for (const entryVal of Object.values(mergedRecord.app as Record<string, unknown>)) {\n      if (!isPlainObject(entryVal)) continue;\n      for (const secretKey of ARRAY_UNION_KEYS) {\n        if (Array.isArray(entryVal[secretKey])) {\n          entryVal[secretKey] =\n            (unionArrays(entryVal[secretKey] as unknown[], []) as string[] | undefined)?.filter(\n              Boolean,\n            ) ?? entryVal[secretKey];\n        }\n      }\n    }\n  }\n\n  if (isPlainObject(mergedRecord.plugins)) {\n    for (const pluginVal of Object.values(mergedRecord.plugins as Record<string, unknown>)) {\n      if (!isPlainObject(pluginVal)) continue;\n      for (const secretKey of ARRAY_UNION_KEYS) {\n        if (Array.isArray(pluginVal[secretKey])) {\n          pluginVal[secretKey] =\n            (unionArrays(pluginVal[secretKey] as unknown[], []) as string[] | undefined)?.filter(\n              Boolean,\n            ) ?? pluginVal[secretKey];\n        }\n      }\n    }\n  }\n\n  return rebuildOrderedConfig(mergedRecord) as BosConfigInput;\n}\n\nexport function mergeBosConfigWithTemplate(\n  local: BosConfigInput,\n  template: BosConfigInput,\n): BosConfigInput {\n  const merged = mergeJsonValuesPreservingLocalOrder(local, template) as BosConfigInput;\n  return rebuildOrderedConfig(merged as Record<string, unknown>) as BosConfigInput;\n}\n\nfunction mergeJsonValuesPreservingLocalOrder(local: unknown, template: unknown): unknown {\n  if (isPlainObject(local) && isPlainObject(template)) {\n    const merged: Record<string, unknown> = {};\n    for (const key of Object.keys(local)) {\n      merged[key] = mergeJsonValuesPreservingLocalOrder(\n        local[key],\n        (template as Record<string, unknown>)[key],\n      );\n    }\n    for (const key of Object.keys(template as Record<string, unknown>)) {\n      if (!(key in merged)) {\n        merged[key] = (template as Record<string, unknown>)[key];\n      }\n    }\n    return merged;\n  }\n  return local ?? template;\n}\n\nexport function rebuildOrderedConfig<T extends Record<string, unknown>>(config: T): T {\n  const ordered: Record<string, unknown> = {};\n\n  for (const key of BOS_CONFIG_ORDER) {\n    if (key in config) {\n      ordered[key] = config[key];\n    }\n  }\n\n  for (const key of Object.keys(config)) {\n    if (!BOS_CONFIG_ORDER.includes(key as BosConfigFieldName)) {\n      ordered[key] = config[key];\n    }\n  }\n\n  return ordered as T;\n}\n\n/**\n * Deep child-wins merge used to overlay a freshly authored config on top of\n * the currently published one — authored keys win, published-only pipeline\n * state (bundle URLs, integrity) is preserved. Unlike the extends merge,\n * plugin entries merge per-key so published URLs survive authored edits;\n * removing a slot from the authored config therefore requires a deploy,\n * which regenerates the payload from scratch.\n */\nexport function mergeAuthoredOverPublished(\n  published: BosConfigInput,\n  authored: BosConfigInput,\n): BosConfigInput {\n  const merged = mergeJsonValuesPreservingLocalOrder(authored, published) as Record<\n    string,\n    unknown\n  >;\n  return rebuildOrderedConfig(merged) as BosConfigInput;\n}\n\nexport { bosConfigMerger };\n"],"mappings":";;;AAGA,MAAa,mBAAmB;CAC9B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAaA,MAAM,mCAAmB,IAAI,IAAI,CAAC,WAAW,YAAY,CAAC;AAE1D,SAAgB,cAAc,OAAkD;CAC9E,OAAO,QAAQ,KAAK,KAAK,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,GAAY,GAAmC;CAClE,MAAM,OAAO,MAAM,QAAQ,CAAC,IAAI,IAAI,CAAC;CACrC,MAAM,OAAO,MAAM,QAAQ,CAAC,IAAI,IAAI,CAAC;CACrC,IAAI,KAAK,WAAW,KAAK,KAAK,WAAW,GAAG,OAAO;CACnD,MAAM,uBAAO,IAAI,IAAY;CAC7B,MAAM,SAAoB,CAAC;CAC3B,KAAK,MAAM,QAAQ,CAAC,GAAG,MAAM,GAAG,IAAI,GAAG;EACrC,IAAI,OAAO,SAAS,UAAU;GAC5B,IAAI,KAAK,IAAI,IAAI,GAAG;GACpB,KAAK,IAAI,IAAI;EACf;EACA,OAAO,KAAK,IAAI;CAClB;CACA,OAAO;AACT;AAEA,SAAS,mBAAmB,KAAuD;CACjF,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,GAAG,GAAG;EAC9C,IAAI,UAAU,QAAQ,UAAU,QAAW;EAC3C,IAAI,cAAc,KAAK,GAAG;GACxB,MAAM,UAAU,mBAAmB,KAAK;GACxC,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,GAChC,IAAI,OAAO;EAEf,OACE,IAAI,OAAO;CAEf;CACA,OAAO;AACT;AAGA,MAAM,kBAAkB,YAAY,KAAU,KAAU,UAAoC;CAC1F,IAAI,QAAQ,OAAO;EAGjB,IAAI,OAAO;EACX,OAAO;CACT;CACA,IAAI,IAAI,SAAS,MAAM,OAAO;CAC9B,IAAI,UAAU,MAAM;EAClB,IAAI,OAAO;EACX,OAAO;CACT;CACA,IAAI,MAAM,QAAQ,IAAI,IAAI,KAAK,MAAM,QAAQ,KAAK,GAAG;EACnD,IAAI,iBAAiB,IAAI,GAAG,GAC1B,IAAI,OAAO,YAAY,IAAI,MAAM,KAAK;OAEtC,IAAI,OAAO;EAEb,OAAO;CACT;CACA,OAAO;AACT,CAAC;AAED,SAAgB,kBACd,cACA,KACoB;CACpB,IAAI,CAAC,cAAc,OAAO;CAC1B,IAAI,OAAO,iBAAiB,UAAU,OAAO;CAC7C,OAAO,aAAa,QAAQ,aAAa,cAAc,OAAO,OAAO,YAAY,CAAC,CAAC,KAAK,OAAO;AACjG;AAEA,SAAgB,0BACd,QACA,OACgB;CAChB,MAAM,SAAS,gBAAgB,OAAO,MAAM;CAE5C,IAAI,MAAM,YAAY,UAAa,cAAc,MAAM,OAAO,GAC5D,AAAC,OAAmC,UAAU,mBAC5C,MAAM,OACR;CAGF,MAAM,eAAe;CAErB,IAAI,cAAc,aAAa,GAAG,GAChC,KAAK,MAAM,YAAY,OAAO,OAAO,aAAa,GAA8B,GAAG;EACjF,IAAI,CAAC,cAAc,QAAQ,GAAG;EAC9B,KAAK,MAAM,aAAa,kBACtB,IAAI,MAAM,QAAQ,SAAS,UAAU,GACnC,SAAS,aACN,YAAY,SAAS,YAAyB,CAAC,CAAC,CAAC,EAA2B,OAC3E,OACF,KAAK,SAAS;CAGtB;CAGF,IAAI,cAAc,aAAa,OAAO,GACpC,KAAK,MAAM,aAAa,OAAO,OAAO,aAAa,OAAkC,GAAG;EACtF,IAAI,CAAC,cAAc,SAAS,GAAG;EAC/B,KAAK,MAAM,aAAa,kBACtB,IAAI,MAAM,QAAQ,UAAU,UAAU,GACpC,UAAU,aACP,YAAY,UAAU,YAAyB,CAAC,CAAC,CAAC,EAA2B,OAC5E,OACF,KAAK,UAAU;CAGvB;CAGF,OAAO,qBAAqB,YAAY;AAC1C;AAEA,SAAgB,2BACd,OACA,UACgB;CAEhB,OAAO,qBADQ,oCAAoC,OAAO,QACzB,CAA4B;AAC/D;AAEA,SAAS,oCAAoC,OAAgB,UAA4B;CACvF,IAAI,cAAc,KAAK,KAAK,cAAc,QAAQ,GAAG;EACnD,MAAM,SAAkC,CAAC;EACzC,KAAK,MAAM,OAAO,OAAO,KAAK,KAAK,GACjC,OAAO,OAAO,oCACZ,MAAM,MACL,SAAqC,IACxC;EAEF,KAAK,MAAM,OAAO,OAAO,KAAK,QAAmC,GAC/D,IAAI,EAAE,OAAO,SACX,OAAO,OAAQ,SAAqC;EAGxD,OAAO;CACT;CACA,OAAO,SAAS;AAClB;AAEA,SAAgB,qBAAwD,QAAc;CACpF,MAAM,UAAmC,CAAC;CAE1C,KAAK,MAAM,OAAO,kBAChB,IAAI,OAAO,QACT,QAAQ,OAAO,OAAO;CAI1B,KAAK,MAAM,OAAO,OAAO,KAAK,MAAM,GAClC,IAAI,CAAC,iBAAiB,SAAS,GAAyB,GACtD,QAAQ,OAAO,OAAO;CAI1B,OAAO;AACT;;;;;;;;;AAUA,SAAgB,2BACd,WACA,UACgB;CAKhB,OAAO,qBAJQ,oCAAoC,UAAU,SAI5B,CAAC;AACpC"}

package/dist/mf.cjs

@@ -1,7 +1,10 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_bundle_cache = require('./bundle-cache.cjs');
 const require_integrity = require('./integrity.cjs');
+let node_fs = require("node:fs");
 let _module_federation_enhanced_runtime = require("@module-federation/enhanced/runtime");
 let _module_federation_runtime_core = require("@module-federation/runtime-core");
+let every_plugin_build_rspack = require("every-plugin/build/rspack");
 
 //#region src/mf.ts
 let mfInstance = null;
@@ -27,7 +30,7 @@ function patchManifestFetchForSsrPublicPath(mf) {
 		});
 	});
 }
-function installIntegrityFetchHook(mf, registry) {
+function installIntegrityFetchHook(mf, registry, options) {
 	if (!mf || !mf.loaderHook?.lifecycle?.fetch?.on) {
 		console.warn("[SRI] MF lifecycle fetch hook not available, skipping integrity-in-pipeline");
 		return;
@@ -42,13 +45,21 @@ function installIntegrityFetchHook(mf, registry) {
 			const buffer = Buffer.from(await res.arrayBuffer());
 			const computed = require_integrity.computeSriHash(buffer);
 			if (computed !== expectedHash) {
+				const cached = await require_bundle_cache.readBundleCache(url, { cacheDir: options?.cacheDir });
+				if (cached && require_integrity.computeSriHash(Buffer.from(cached)) === expectedHash) {
+					console.warn(`[SRI] Origin bytes failed verification for ${url} — serving last-known-good from the bundle cache`);
+					return new Response(cached.slice().buffer, {
+						status: 200,
+						headers: { "x-bundle-cache": "stale" }
+					});
+				}
 				console.error(`[SRI] Integrity check failed in MF fetch pipeline for ${url}\n  Expected: ${expectedHash}\n  Computed: ${computed}`);
 				return new Response(`Integrity check failed for ${url}`, {
 					status: 500,
 					statusText: "Integrity Check Failed"
 				});
 			}
-			console.log(`[SRI] Integrity verified in pipeline for ${url}`);
+			await require_bundle_cache.writeBundleCache(url, new Uint8Array(buffer), { cacheDir: options?.cacheDir }).catch(() => {});
 			return new Response(buffer, {
 				status: res.status,
 				statusText: res.statusText,
@@ -79,7 +90,7 @@ async function registerRemote(opts) {
 	const inferType = () => {
 		if (opts.type) return opts.type;
 		if (opts.entry.endsWith("/mf-manifest.json")) return "manifest";
-		if (opts.entry.endsWith("/remoteEntry.js")) return "script";
+		if (/\/remoteEntry(\.[a-f0-9]{8,})?\.js$/.test(opts.entry)) return "script";
 		return typeof window === "undefined" ? "script" : "manifest";
 	};
 	const remoteType = inferType();
@@ -106,11 +117,187 @@ async function ensureNodeRuntimePlugin() {
 	if (plugin) instance.registerPlugins([plugin]);
 	instance.__nodeRuntimePluginLoaded = true;
 }
+function parseSemver(v) {
+	const m = typeof v === "string" ? /^(\d+)\.(\d+)\.(\d+)/.exec(v) : null;
+	return m ? {
+		major: +m[1],
+		minor: +m[2],
+		patch: +m[3]
+	} : null;
+}
+function satisfiesConstraint(version, constraint) {
+	const trimmed = constraint.trim();
+	if (!trimmed) return true;
+	if (![
+		"^",
+		"~",
+		">",
+		"<",
+		"=",
+		"x"
+	].some((c) => trimmed.startsWith(c))) return version === trimmed;
+	const m = /^\s*\^\s*(\d+)\.(\d+)\.(\d+)/.exec(trimmed);
+	if (!m) return true;
+	const v = parseSemver(version);
+	if (!v) return false;
+	if (v.major !== +m[1]) return false;
+	if (v.minor < +m[2] || v.minor === +m[2] && v.patch < +m[3]) return false;
+	const constraintPrerelease = trimmed.match(/-([0-9A-Za-z.-]+)/);
+	const versionPrerelease = /-([0-9A-Za-z.-]+)\s*$/.exec(version);
+	if (constraintPrerelease) {
+		if (!versionPrerelease) return false;
+		const cPre = constraintPrerelease[1].split(".");
+		const vPre = versionPrerelease[1].split(".");
+		for (let i = 0; i < Math.max(cPre.length, vPre.length); i += 1) {
+			const c = cPre[i] ?? "0";
+			const p = vPre[i] ?? "0";
+			if (c === p) continue;
+			const cNum = /^\d+$/.test(c) ? +c : null;
+			const pNum = /^\d+$/.test(p) ? +p : null;
+			if (cNum !== null && pNum !== null) return cNum < pNum;
+			return cNum === null ? c.localeCompare(p) < 0 : false;
+		}
+		return true;
+	}
+	if (versionPrerelease) return false;
+	return true;
+}
+function manifestUrl(remoteUrl) {
+	return remoteUrl.endsWith("/") ? `${remoteUrl}mf-manifest.json` : `${remoteUrl}/mf-manifest.json`;
+}
+async function fetchManifest(url, timeoutMs) {
+	const res = await fetch(manifestUrl(url), { signal: AbortSignal.timeout(timeoutMs) });
+	if (!res.ok) throw new Error(`HTTP ${res.status} ${res.statusText}`);
+	return res.json();
+}
+function listFederationRemotes(bosConfig) {
+	const out = [];
+	for (const role of ["api", "auth"]) {
+		const url = readProductionUrl((bosConfig?.app)?.[role]);
+		if (url) out.push({
+			role,
+			url
+		});
+	}
+	for (const [id, slot] of Object.entries(bosConfig?.plugins ?? {})) {
+		const url = readProductionUrl(slot);
+		if (url) out.push({
+			role: id,
+			url
+		});
+	}
+	return out;
+}
+function readProductionUrl(entry) {
+	if (typeof entry === "string") return entry.length > 0 ? entry : null;
+	if (entry && typeof entry.production === "string") {
+		const url = entry.production;
+		return url.length > 0 ? url : null;
+	}
+	return null;
+}
+async function checkFederationCompat(bosConfig, opts = {}) {
+	const timeoutMs = opts.timeoutMs ?? 15e3;
+	if (!bosConfig?.app?.host?.production) return {
+		ok: true,
+		hostVersion: null,
+		hostReachable: false,
+		remotes: []
+	};
+	const hostUrl = bosConfig.app.host.production;
+	let hostManifest = null;
+	let hostReason;
+	try {
+		hostManifest = await fetchManifest(hostUrl, timeoutMs);
+	} catch (e) {
+		hostReason = e instanceof Error ? e.message : String(e);
+	}
+	const hostVersion = hostManifest?.metaData?.pluginVersion ?? null;
+	const hostShared = (hostManifest?.shared ?? []).filter((s) => typeof s.requiredVersion === "string");
+	const remotes = listFederationRemotes(bosConfig);
+	const remoteReports = (await Promise.allSettled(remotes.map(async ({ role, url }) => {
+		let manifest = null;
+		let reason;
+		try {
+			manifest = await fetchManifest(url, timeoutMs);
+		} catch (e) {
+			reason = e instanceof Error ? e.message : String(e);
+		}
+		const version = manifest?.metaData?.pluginVersion ?? null;
+		const versionOk = version !== null && version === hostVersion;
+		if (!manifest) return {
+			role,
+			url,
+			reachable: false,
+			pluginVersion: null,
+			ok: false,
+			reason: reason ?? "unreachable"
+		};
+		if (!versionOk) return {
+			role,
+			url,
+			reachable: true,
+			pluginVersion: version,
+			ok: false,
+			reason: hostVersion ? `expected pluginVersion=${hostVersion} (host), got ${version ?? "missing"} — redeploy this plugin` : `host manifest missing pluginVersion`
+		};
+		const missingShared = [];
+		const mismatchedShared = [];
+		for (const hostDep of hostShared) {
+			const remDep = manifest.shared?.find((s) => s.name === hostDep.name);
+			if (!remDep) {
+				missingShared.push(`${hostDep.name}@${hostDep.requiredVersion}`);
+				continue;
+			}
+			if (!satisfiesConstraint(remDep.version ?? "", hostDep.requiredVersion)) mismatchedShared.push(`${hostDep.name}: remote=${remDep.version ?? "?"} hostReq=${hostDep.requiredVersion}`);
+			if ((0, every_plugin_build_rspack.isEffectCriticalSharedDep)(hostDep.name)) {
+				const hostVersion = hostDep.version ?? "";
+				const remoteVersion = remDep.version ?? "";
+				if (remoteVersion && remoteVersion !== hostVersion) mismatchedShared.push(`${hostDep.name}: exact-version skew — remote=${remoteVersion} host=${hostVersion} — bundle was built against a different prerelease build; redeploy host and plugin together`);
+				const remoteRequired = typeof remDep.requiredVersion === "string" ? remDep.requiredVersion.trim() : "";
+				if (remoteRequired.length > 0 && remoteRequired[0] !== "^" && !satisfiesConstraint(hostVersion, remoteRequired)) mismatchedShared.push(`${hostDep.name}: train skew — host=${hostVersion} vs remote requiredVersion=${remoteRequired}`);
+			}
+		}
+		const reasons = [...missingShared.map((d) => `missing shared "${d}" required by host`), ...mismatchedShared];
+		return {
+			role,
+			url,
+			reachable: true,
+			pluginVersion: version,
+			ok: reasons.length === 0,
+			reason: reasons[0]
+		};
+	}))).map((s, i) => {
+		const placeholder = {
+			role: remotes[i].role,
+			url: remotes[i].url,
+			reachable: false,
+			pluginVersion: null,
+			ok: false
+		};
+		return s.status === "fulfilled" ? s.value : {
+			...placeholder,
+			reason: String(s.reason)
+		};
+	});
+	return {
+		ok: hostManifest !== null && remoteReports.every((r) => r.ok && r.reachable && r.pluginVersion !== null),
+		hostVersion,
+		hostReachable: hostManifest !== null,
+		hostReason,
+		remotes: remoteReports
+	};
+}
+function loadBosConfigForMfCheck(configPath) {
+	return JSON.parse((0, node_fs.readFileSync)(configPath, "utf8"));
+}
 
 //#endregion
+exports.checkFederationCompat = checkFederationCompat;
 exports.ensureNodeRuntimePlugin = ensureNodeRuntimePlugin;
 exports.getFederationInstance = getFederationInstance;
 exports.installIntegrityFetchHook = installIntegrityFetchHook;
+exports.loadBosConfigForMfCheck = loadBosConfigForMfCheck;
 exports.loadRemoteModule = loadRemoteModule;
 exports.patchManifestFetchForSsrPublicPath = patchManifestFetchForSsrPublicPath;
 exports.registerRemote = registerRemote;

package/dist/mf.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"mf.cjs","names":["computeSriHash"],"sources":["../src/mf.ts"],"sourcesContent":["import { createInstance, getInstance } from \"@module-federation/enhanced/runtime\";\nimport { setGlobalFederationInstance } from \"@module-federation/runtime-core\";\nimport { computeSriHash, type IntegrityRegistry } from \"./integrity\";\n\ntype FederationInstance = ReturnType<typeof createInstance>;\n\nlet mfInstance: FederationInstance | null = null;\n\nfunction fetchWithTimeout(url: string, init: RequestInit, timeoutMs: number): Promise<Response> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), timeoutMs);\n  return fetch(url, { ...init, signal: controller.signal }).finally(() => clearTimeout(timer));\n}\n\nexport function patchManifestFetchForSsrPublicPath(mf: FederationInstance): void {\n  if (!mf || !(mf as any).loaderHook?.lifecycle?.fetch?.on) return;\n  if ((mf as any).__everythingDevPatchedManifestFetch === true) return;\n  (mf as any).__everythingDevPatchedManifestFetch = true;\n\n  (mf as any).loaderHook.lifecycle.fetch.on((url: unknown, init: unknown) => {\n    if (typeof url !== \"string\" || !url.endsWith(\"/mf-manifest.json\")) {\n      return;\n    }\n    return fetchWithTimeout(url as string, init as RequestInit, 15_000)\n      .then((res) => res.json())\n      .then((json: any) => {\n        json.metaData = json.metaData ?? {};\n        json.metaData.ssrPublicPath =\n          json.metaData.ssrPublicPath ?? url.replace(/\\/mf-manifest\\.json$/, \"/\");\n        if (json.metaData.publicPath === \"auto\" || json.metaData.publicPath === \"\") {\n          json.metaData.publicPath = \"/\";\n        }\n        return new Response(JSON.stringify(json), {\n          headers: { \"content-type\": \"application/json\" },\n        });\n      });\n  });\n}\n\nexport function installIntegrityFetchHook(\n  mf: FederationInstance,\n  registry: IntegrityRegistry,\n): void {\n  if (!mf || !(mf as any).loaderHook?.lifecycle?.fetch?.on) {\n    console.warn(\"[SRI] MF lifecycle fetch hook not available, skipping integrity-in-pipeline\");\n    return;\n  }\n  if ((mf as any).__everythingDevIntegrityHook === true) return;\n  (mf as any).__everythingDevIntegrityHook = true;\n\n  (mf as any).loaderHook.lifecycle.fetch.on((url: unknown, init: unknown) => {\n    if (typeof url !== \"string\") return;\n\n    const expectedHash = registry.get(url);\n    if (!expectedHash) return;\n\n    return fetchWithTimeout(url as string, init as RequestInit, 15_000).then(async (res) => {\n      const buffer = Buffer.from(await res.arrayBuffer());\n      const computed = computeSriHash(buffer);\n\n      if (computed !== expectedHash) {\n        console.error(\n          `[SRI] Integrity check failed in MF fetch pipeline for ${url}\\n  Expected: ${expectedHash}\\n  Computed: ${computed}`,\n        );\n        return new Response(`Integrity check failed for ${url}`, {\n          status: 500,\n          statusText: \"Integrity Check Failed\",\n        });\n      }\n\n      console.log(`[SRI] Integrity verified in pipeline for ${url}`);\n      return new Response(buffer, {\n        status: res.status,\n        statusText: res.statusText,\n        headers: res.headers,\n      });\n    });\n  });\n}\n\nexport function getFederationInstance(): FederationInstance {\n  if (mfInstance) return mfInstance;\n\n  const existing = getInstance();\n  if (existing) {\n    mfInstance = existing as FederationInstance;\n    setGlobalFederationInstance(mfInstance as any);\n    patchManifestFetchForSsrPublicPath(mfInstance);\n    return mfInstance;\n  }\n\n  mfInstance = createInstance({\n    name: \"host\",\n    remotes: [],\n  }) as FederationInstance;\n  setGlobalFederationInstance(mfInstance as any);\n  patchManifestFetchForSsrPublicPath(mfInstance);\n  return mfInstance;\n}\n\nexport async function registerRemote(opts: {\n  name: string;\n  entry: string;\n  type?: \"manifest\" | \"script\";\n}): Promise<void> {\n  const instance = getFederationInstance();\n\n  const inferType = (): \"manifest\" | \"script\" => {\n    if (opts.type) return opts.type;\n    if (opts.entry.endsWith(\"/mf-manifest.json\")) return \"manifest\";\n    if (opts.entry.endsWith(\"/remoteEntry.js\")) return \"script\";\n    return typeof window === \"undefined\" ? \"script\" : \"manifest\";\n  };\n\n  const remoteType = inferType();\n\n  instance.registerRemotes([\n    {\n      name: opts.name,\n      entry: opts.entry,\n      type: remoteType,\n    },\n  ]);\n}\n\nexport async function loadRemoteModule<T>(\n  specifier: string,\n  options?: { loadFactory?: boolean; from?: \"build\" | \"runtime\" },\n): Promise<T> {\n  const instance = getFederationInstance();\n\n  const isServer = typeof window === \"undefined\";\n  if (isServer) {\n    await (instance as any).initializeSharing?.(\"default\");\n  }\n\n  const mod = await instance.loadRemote<T>(specifier, options as any);\n  if (!mod) {\n    throw new Error(`Failed to load remote module: ${specifier}`);\n  }\n  return mod;\n}\n\nexport async function ensureNodeRuntimePlugin(): Promise<void> {\n  const instance = getFederationInstance();\n  if (typeof window !== \"undefined\") return;\n  if ((instance as any).__nodeRuntimePluginLoaded) return;\n\n  const mod: any = await import(\"@module-federation/node/runtimePlugin\");\n  const factory = mod?.default ?? mod;\n  const plugin = typeof factory === \"function\" ? factory() : null;\n  if (plugin) {\n    instance.registerPlugins([plugin]);\n  }\n  (instance as any).__nodeRuntimePluginLoaded = true;\n}\n"],"mappings":";;;;;;AAMA,IAAI,aAAwC;AAE5C,SAAS,iBAAiB,KAAa,MAAmB,WAAsC;CAC9F,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,QAAQ,iBAAiB,WAAW,MAAM,GAAG,SAAS;CAC5D,OAAO,MAAM,KAAK;EAAE,GAAG;EAAM,QAAQ,WAAW;CAAO,CAAC,CAAC,CAAC,cAAc,aAAa,KAAK,CAAC;AAC7F;AAEA,SAAgB,mCAAmC,IAA8B;CAC/E,IAAI,CAAC,MAAM,CAAE,GAAW,YAAY,WAAW,OAAO,IAAI;CAC1D,IAAK,GAAW,wCAAwC,MAAM;CAC9D,AAAC,GAAW,sCAAsC;CAElD,AAAC,GAAW,WAAW,UAAU,MAAM,IAAI,KAAc,SAAkB;EACzE,IAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,SAAS,mBAAmB,GAC9D;EAEF,OAAO,iBAAiB,KAAe,MAAqB,IAAM,CAAC,CAChE,MAAM,QAAQ,IAAI,KAAK,CAAC,CAAC,CACzB,MAAM,SAAc;GACnB,KAAK,WAAW,KAAK,YAAY,CAAC;GAClC,KAAK,SAAS,gBACZ,KAAK,SAAS,iBAAiB,IAAI,QAAQ,wBAAwB,GAAG;GACxE,IAAI,KAAK,SAAS,eAAe,UAAU,KAAK,SAAS,eAAe,IACtE,KAAK,SAAS,aAAa;GAE7B,OAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG,EACxC,SAAS,EAAE,gBAAgB,mBAAmB,EAChD,CAAC;EACH,CAAC;CACL,CAAC;AACH;AAEA,SAAgB,0BACd,IACA,UACM;CACN,IAAI,CAAC,MAAM,CAAE,GAAW,YAAY,WAAW,OAAO,IAAI;EACxD,QAAQ,KAAK,6EAA6E;EAC1F;CACF;CACA,IAAK,GAAW,iCAAiC,MAAM;CACvD,AAAC,GAAW,+BAA+B;CAE3C,AAAC,GAAW,WAAW,UAAU,MAAM,IAAI,KAAc,SAAkB;EACzE,IAAI,OAAO,QAAQ,UAAU;EAE7B,MAAM,eAAe,SAAS,IAAI,GAAG;EACrC,IAAI,CAAC,cAAc;EAEnB,OAAO,iBAAiB,KAAe,MAAqB,IAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;GACtF,MAAM,SAAS,OAAO,KAAK,MAAM,IAAI,YAAY,CAAC;GAClD,MAAM,WAAWA,iCAAe,MAAM;GAEtC,IAAI,aAAa,cAAc;IAC7B,QAAQ,MACN,yDAAyD,IAAI,gBAAgB,aAAa,gBAAgB,UAC5G;IACA,OAAO,IAAI,SAAS,8BAA8B,OAAO;KACvD,QAAQ;KACR,YAAY;IACd,CAAC;GACH;GAEA,QAAQ,IAAI,4CAA4C,KAAK;GAC7D,OAAO,IAAI,SAAS,QAAQ;IAC1B,QAAQ,IAAI;IACZ,YAAY,IAAI;IAChB,SAAS,IAAI;GACf,CAAC;EACH,CAAC;CACH,CAAC;AACH;AAEA,SAAgB,wBAA4C;CAC1D,IAAI,YAAY,OAAO;CAEvB,MAAM,gEAAuB;CAC7B,IAAI,UAAU;EACZ,aAAa;EACb,iEAA4B,UAAiB;EAC7C,mCAAmC,UAAU;EAC7C,OAAO;CACT;CAEA,qEAA4B;EAC1B,MAAM;EACN,SAAS,CAAC;CACZ,CAAC;CACD,iEAA4B,UAAiB;CAC7C,mCAAmC,UAAU;CAC7C,OAAO;AACT;AAEA,eAAsB,eAAe,MAInB;CAChB,MAAM,WAAW,sBAAsB;CAEvC,MAAM,kBAAyC;EAC7C,IAAI,KAAK,MAAM,OAAO,KAAK;EAC3B,IAAI,KAAK,MAAM,SAAS,mBAAmB,GAAG,OAAO;EACrD,IAAI,KAAK,MAAM,SAAS,iBAAiB,GAAG,OAAO;EACnD,OAAO,OAAO,WAAW,cAAc,WAAW;CACpD;CAEA,MAAM,aAAa,UAAU;CAE7B,SAAS,gBAAgB,CACvB;EACE,MAAM,KAAK;EACX,OAAO,KAAK;EACZ,MAAM;CACR,CACF,CAAC;AACH;AAEA,eAAsB,iBACpB,WACA,SACY;CACZ,MAAM,WAAW,sBAAsB;CAGvC,IADiB,OAAO,WAAW,aAEjC,MAAO,SAAiB,oBAAoB,SAAS;CAGvD,MAAM,MAAM,MAAM,SAAS,WAAc,WAAW,OAAc;CAClE,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,iCAAiC,WAAW;CAE9D,OAAO;AACT;AAEA,eAAsB,0BAAyC;CAC7D,MAAM,WAAW,sBAAsB;CACvC,IAAI,OAAO,WAAW,aAAa;CACnC,IAAK,SAAiB,2BAA2B;CAEjD,MAAM,MAAW,MAAM,OAAO;CAC9B,MAAM,UAAU,KAAK,WAAW;CAChC,MAAM,SAAS,OAAO,YAAY,aAAa,QAAQ,IAAI;CAC3D,IAAI,QACF,SAAS,gBAAgB,CAAC,MAAM,CAAC;CAEnC,AAAC,SAAiB,4BAA4B;AAChD"}
+{"version":3,"file":"mf.cjs","names":["computeSriHash","readBundleCache","writeBundleCache","getInstance","createInstance","isEffectCriticalSharedDep","readFileSync"],"sources":["../src/mf.ts"],"sourcesContent":["import { readFileSync } from \"node:fs\";\nimport { createInstance, getInstance } from \"@module-federation/enhanced/runtime\";\nimport { setGlobalFederationInstance } from \"@module-federation/runtime-core\";\nimport { isEffectCriticalSharedDep } from \"every-plugin/build/rspack\";\nimport { readBundleCache, writeBundleCache } from \"./bundle-cache\";\nimport { computeSriHash, type IntegrityRegistry } from \"./integrity\";\nimport type { BosConfig, BosPluginRef } from \"./types\";\n\ntype FederationInstance = ReturnType<typeof createInstance>;\n\nlet mfInstance: FederationInstance | null = null;\n\nfunction fetchWithTimeout(url: string, init: RequestInit, timeoutMs: number): Promise<Response> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), timeoutMs);\n  return fetch(url, { ...init, signal: controller.signal }).finally(() => clearTimeout(timer));\n}\n\nexport function patchManifestFetchForSsrPublicPath(mf: FederationInstance): void {\n  if (!mf || !(mf as any).loaderHook?.lifecycle?.fetch?.on) return;\n  if ((mf as any).__everythingDevPatchedManifestFetch === true) return;\n  (mf as any).__everythingDevPatchedManifestFetch = true;\n\n  (mf as any).loaderHook.lifecycle.fetch.on((url: unknown, init: unknown) => {\n    if (typeof url !== \"string\" || !url.endsWith(\"/mf-manifest.json\")) {\n      return;\n    }\n    return fetchWithTimeout(url as string, init as RequestInit, 15_000)\n      .then((res) => res.json())\n      .then((json: any) => {\n        json.metaData = json.metaData ?? {};\n        json.metaData.ssrPublicPath =\n          json.metaData.ssrPublicPath ?? url.replace(/\\/mf-manifest\\.json$/, \"/\");\n        if (json.metaData.publicPath === \"auto\" || json.metaData.publicPath === \"\") {\n          json.metaData.publicPath = \"/\";\n        }\n        return new Response(JSON.stringify(json), {\n          headers: { \"content-type\": \"application/json\" },\n        });\n      });\n  });\n}\n\nexport function installIntegrityFetchHook(\n  mf: FederationInstance,\n  registry: IntegrityRegistry,\n  options?: { cacheDir?: string },\n): void {\n  if (!mf || !(mf as any).loaderHook?.lifecycle?.fetch?.on) {\n    console.warn(\"[SRI] MF lifecycle fetch hook not available, skipping integrity-in-pipeline\");\n    return;\n  }\n  if ((mf as any).__everythingDevIntegrityHook === true) return;\n  (mf as any).__everythingDevIntegrityHook = true;\n\n  (mf as any).loaderHook.lifecycle.fetch.on((url: unknown, init: unknown) => {\n    if (typeof url !== \"string\") return;\n\n    const expectedHash = registry.get(url);\n    if (!expectedHash) return;\n\n    return fetchWithTimeout(url as string, init as RequestInit, 15_000).then(async (res) => {\n      const buffer = Buffer.from(await res.arrayBuffer());\n      const computed = computeSriHash(buffer);\n\n      if (computed !== expectedHash) {\n        // ticket 09 (atomic-deploys): an SRI mismatch is treated like an\n        // origin failure — the last-known-good bytes (which satisfied the\n        // same pin when cached) serve instead, and the corrupted bytes are\n        // never written into the cache.\n        const cached = await readBundleCache(url as string, { cacheDir: options?.cacheDir });\n        if (cached && computeSriHash(Buffer.from(cached)) === expectedHash) {\n          console.warn(\n            `[SRI] Origin bytes failed verification for ${url} — serving last-known-good from the bundle cache`,\n          );\n          return new Response(cached.slice().buffer, {\n            status: 200,\n            headers: { \"x-bundle-cache\": \"stale\" },\n          });\n        }\n        console.error(\n          `[SRI] Integrity check failed in MF fetch pipeline for ${url}\\n  Expected: ${expectedHash}\\n  Computed: ${computed}`,\n        );\n        return new Response(`Integrity check failed for ${url}`, {\n          status: 500,\n          statusText: \"Integrity Check Failed\",\n        });\n      }\n\n      // verified: pin-checked write-through\n      await writeBundleCache(url as string, new Uint8Array(buffer), {\n        cacheDir: options?.cacheDir,\n      }).catch(() => {\n        // write-through is best-effort\n      });\n\n      return new Response(buffer, {\n        status: res.status,\n        statusText: res.statusText,\n        headers: res.headers,\n      });\n    });\n  });\n}\n\nexport function getFederationInstance(): FederationInstance {\n  if (mfInstance) return mfInstance;\n\n  const existing = getInstance();\n  if (existing) {\n    mfInstance = existing as FederationInstance;\n    setGlobalFederationInstance(mfInstance as any);\n    patchManifestFetchForSsrPublicPath(mfInstance);\n    return mfInstance;\n  }\n\n  mfInstance = createInstance({\n    name: \"host\",\n    remotes: [],\n  }) as FederationInstance;\n  setGlobalFederationInstance(mfInstance as any);\n  patchManifestFetchForSsrPublicPath(mfInstance);\n  return mfInstance;\n}\n\nexport async function registerRemote(opts: {\n  name: string;\n  entry: string;\n  type?: \"manifest\" | \"script\";\n}): Promise<void> {\n  const instance = getFederationInstance();\n\n  const inferType = (): \"manifest\" | \"script\" => {\n    if (opts.type) return opts.type;\n    if (opts.entry.endsWith(\"/mf-manifest.json\")) return \"manifest\";\n    if (/\\/remoteEntry(\\.[a-f0-9]{8,})?\\.js$/.test(opts.entry)) return \"script\";\n    return typeof window === \"undefined\" ? \"script\" : \"manifest\";\n  };\n\n  const remoteType = inferType();\n\n  instance.registerRemotes([\n    {\n      name: opts.name,\n      entry: opts.entry,\n      type: remoteType,\n    },\n  ]);\n}\n\nexport async function loadRemoteModule<T>(\n  specifier: string,\n  options?: { loadFactory?: boolean; from?: \"build\" | \"runtime\" },\n): Promise<T> {\n  const instance = getFederationInstance();\n\n  const isServer = typeof window === \"undefined\";\n  if (isServer) {\n    await (instance as any).initializeSharing?.(\"default\");\n  }\n\n  const mod = await instance.loadRemote<T>(specifier, options as any);\n  if (!mod) {\n    throw new Error(`Failed to load remote module: ${specifier}`);\n  }\n  return mod;\n}\n\nexport async function ensureNodeRuntimePlugin(): Promise<void> {\n  const instance = getFederationInstance();\n  if (typeof window !== \"undefined\") return;\n  if ((instance as any).__nodeRuntimePluginLoaded) return;\n\n  const mod: any = await import(\"@module-federation/node/runtimePlugin\");\n  const factory = mod?.default ?? mod;\n  const plugin = typeof factory === \"function\" ? factory() : null;\n  if (plugin) {\n    instance.registerPlugins([plugin]);\n  }\n  (instance as any).__nodeRuntimePluginLoaded = true;\n}\n\nexport interface FederationCompatRemote {\n  role: string;\n  url: string;\n  reachable: boolean;\n  pluginVersion: string | null;\n  ok: boolean;\n  reason?: string;\n}\n\nexport interface FederationCompatReport {\n  ok: boolean;\n  hostVersion: string | null;\n  hostReachable: boolean;\n  hostReason?: string;\n  remotes: FederationCompatRemote[];\n}\n\nfunction parseSemver(v: unknown): { major: number; minor: number; patch: number } | null {\n  const m = typeof v === \"string\" ? /^(\\d+)\\.(\\d+)\\.(\\d+)/.exec(v) : null;\n  return m ? { major: +m[1]!, minor: +m[2]!, patch: +m[3]! } : null;\n}\n\nfunction satisfiesConstraint(version: string, constraint: string): boolean {\n  const trimmed = constraint.trim();\n  if (!trimmed) return true;\n  if (![\"^\", \"~\", \">\", \"<\", \"=\", \"x\"].some((c) => trimmed.startsWith(c))) {\n    return version === trimmed;\n  }\n  const m = /^\\s*\\^\\s*(\\d+)\\.(\\d+)\\.(\\d+)/.exec(trimmed);\n  if (!m) return true;\n  const v = parseSemver(version);\n  if (!v) return false;\n  if (v.major !== +m[1]!) return false;\n  if (v.minor < +m[2]! || (v.minor === +m[2]! && v.patch < +m[3]!)) return false;\n  const constraintPrerelease = trimmed.match(/-([0-9A-Za-z.-]+)/);\n  const versionPrerelease = /-([0-9A-Za-z.-]+)\\s*$/.exec(version);\n  if (constraintPrerelease) {\n    if (!versionPrerelease) return false;\n    const cPre = constraintPrerelease[1]!.split(\".\");\n    const vPre = versionPrerelease[1]!.split(\".\");\n    for (let i = 0; i < Math.max(cPre.length, vPre.length); i += 1) {\n      const c = cPre[i] ?? \"0\";\n      const p = vPre[i] ?? \"0\";\n      if (c === p) continue;\n      const cNum = /^\\d+$/.test(c) ? +c : null;\n      const pNum = /^\\d+$/.test(p) ? +p : null;\n      if (cNum !== null && pNum !== null) return cNum < pNum;\n      return cNum === null ? c.localeCompare(p) < 0 : false;\n    }\n    return true;\n  }\n  if (versionPrerelease) return false;\n  return true;\n}\n\nfunction manifestUrl(remoteUrl: string): string {\n  return remoteUrl.endsWith(\"/\") ? `${remoteUrl}mf-manifest.json` : `${remoteUrl}/mf-manifest.json`;\n}\n\nasync function fetchManifest(url: string, timeoutMs: number): Promise<unknown> {\n  const res = await fetch(manifestUrl(url), { signal: AbortSignal.timeout(timeoutMs) });\n  if (!res.ok) throw new Error(`HTTP ${res.status} ${res.statusText}`);\n  return res.json();\n}\n\nfunction listFederationRemotes(bosConfig: BosConfig): Array<{ role: string; url: string }> {\n  const out: Array<{ role: string; url: string }> = [];\n  for (const role of [\"api\", \"auth\"] as const) {\n    const url = readProductionUrl((bosConfig?.app as Record<string, unknown> | undefined)?.[role]);\n    if (url) out.push({ role, url });\n  }\n  for (const [id, slot] of Object.entries(bosConfig?.plugins ?? {})) {\n    const url = readProductionUrl(slot);\n    if (url) out.push({ role: id, url });\n  }\n  return out;\n}\n\nfunction readProductionUrl(entry: unknown): string | null {\n  if (typeof entry === \"string\") return entry.length > 0 ? entry : null;\n  if (entry && typeof (entry as BosPluginRef).production === \"string\") {\n    const url = (entry as BosPluginRef).production!;\n    return url.length > 0 ? url : null;\n  }\n  return null;\n}\n\ninterface RemoteManifest {\n  metaData?: { pluginVersion?: string };\n  shared?: Array<{ name: string; version?: string; requiredVersion?: string | null }>;\n}\n\nexport async function checkFederationCompat(\n  bosConfig: BosConfig | null,\n  opts: { timeoutMs?: number } = {},\n): Promise<FederationCompatReport> {\n  const timeoutMs = opts.timeoutMs ?? 15_000;\n\n  if (!bosConfig?.app?.host?.production) {\n    return { ok: true, hostVersion: null, hostReachable: false, remotes: [] };\n  }\n\n  const hostUrl = bosConfig.app.host.production;\n  let hostManifest: RemoteManifest | null = null;\n  let hostReason: string | undefined;\n  try {\n    hostManifest = (await fetchManifest(hostUrl, timeoutMs)) as RemoteManifest;\n  } catch (e) {\n    hostReason = e instanceof Error ? e.message : String(e);\n  }\n\n  const hostVersion = hostManifest?.metaData?.pluginVersion ?? null;\n  const hostShared = (hostManifest?.shared ?? []).filter(\n    (s) => typeof s.requiredVersion === \"string\",\n  );\n\n  const remotes = listFederationRemotes(bosConfig);\n  const settled = await Promise.allSettled(\n    remotes.map(async ({ role, url }) => {\n      let manifest: RemoteManifest | null = null;\n      let reason: string | undefined;\n      try {\n        manifest = (await fetchManifest(url, timeoutMs)) as RemoteManifest;\n      } catch (e) {\n        reason = e instanceof Error ? e.message : String(e);\n      }\n\n      const version = manifest?.metaData?.pluginVersion ?? null;\n      const versionOk = version !== null && version === hostVersion;\n\n      if (!manifest) {\n        return {\n          role,\n          url,\n          reachable: false,\n          pluginVersion: null,\n          ok: false,\n          reason: reason ?? \"unreachable\",\n        } satisfies FederationCompatRemote;\n      }\n\n      if (!versionOk) {\n        return {\n          role,\n          url,\n          reachable: true,\n          pluginVersion: version,\n          ok: false,\n          reason: hostVersion\n            ? `expected pluginVersion=${hostVersion} (host), got ${version ?? \"missing\"} — redeploy this plugin`\n            : `host manifest missing pluginVersion`,\n        } satisfies FederationCompatRemote;\n      }\n\n      const missingShared: string[] = [];\n      const mismatchedShared: string[] = [];\n      for (const hostDep of hostShared) {\n        const remDep = manifest.shared?.find((s) => s.name === hostDep.name);\n        if (!remDep) {\n          missingShared.push(`${hostDep.name}@${hostDep.requiredVersion}`);\n          continue;\n        }\n        if (!satisfiesConstraint(remDep.version ?? \"\", hostDep.requiredVersion!)) {\n          mismatchedShared.push(\n            `${hostDep.name}: remote=${remDep.version ?? \"?\"} hostReq=${hostDep.requiredVersion}`,\n          );\n        }\n        if (isEffectCriticalSharedDep(hostDep.name)) {\n          const hostVersion = hostDep.version ?? \"\";\n          const remoteVersion = remDep.version ?? \"\";\n          if (remoteVersion && remoteVersion !== hostVersion) {\n            mismatchedShared.push(\n              `${hostDep.name}: exact-version skew — remote=${remoteVersion} host=${hostVersion} — bundle was built against a different prerelease build; redeploy host and plugin together`,\n            );\n          }\n          const remoteRequired =\n            typeof remDep.requiredVersion === \"string\" ? remDep.requiredVersion.trim() : \"\";\n          if (\n            remoteRequired.length > 0 &&\n            remoteRequired[0] !== \"^\" &&\n            !satisfiesConstraint(hostVersion, remoteRequired)\n          ) {\n            mismatchedShared.push(\n              `${hostDep.name}: train skew — host=${hostVersion} vs remote requiredVersion=${remoteRequired}`,\n            );\n          }\n        }\n      }\n\n      const reasons = [\n        ...missingShared.map((d) => `missing shared \"${d}\" required by host`),\n        ...mismatchedShared,\n      ];\n      return {\n        role,\n        url,\n        reachable: true,\n        pluginVersion: version,\n        ok: reasons.length === 0,\n        reason: reasons[0],\n      } satisfies FederationCompatRemote;\n    }),\n  );\n\n  const remoteReports = settled.map((s, i) => {\n    const placeholder = {\n      role: remotes[i]!.role,\n      url: remotes[i]!.url,\n      reachable: false,\n      pluginVersion: null,\n      ok: false,\n    };\n    return s.status === \"fulfilled\" ? s.value : { ...placeholder, reason: String(s.reason) };\n  });\n\n  const ok =\n    hostManifest !== null &&\n    remoteReports.every((r) => r.ok && r.reachable && r.pluginVersion !== null);\n\n  return {\n    ok,\n    hostVersion,\n    hostReachable: hostManifest !== null,\n    hostReason,\n    remotes: remoteReports,\n  };\n}\n\nexport function loadBosConfigForMfCheck(configPath: string): BosConfig {\n  return JSON.parse(readFileSync(configPath, \"utf8\")) as BosConfig;\n}\n"],"mappings":";;;;;;;;;AAUA,IAAI,aAAwC;AAE5C,SAAS,iBAAiB,KAAa,MAAmB,WAAsC;CAC9F,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,QAAQ,iBAAiB,WAAW,MAAM,GAAG,SAAS;CAC5D,OAAO,MAAM,KAAK;EAAE,GAAG;EAAM,QAAQ,WAAW;CAAO,CAAC,CAAC,CAAC,cAAc,aAAa,KAAK,CAAC;AAC7F;AAEA,SAAgB,mCAAmC,IAA8B;CAC/E,IAAI,CAAC,MAAM,CAAE,GAAW,YAAY,WAAW,OAAO,IAAI;CAC1D,IAAK,GAAW,wCAAwC,MAAM;CAC9D,AAAC,GAAW,sCAAsC;CAElD,AAAC,GAAW,WAAW,UAAU,MAAM,IAAI,KAAc,SAAkB;EACzE,IAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,SAAS,mBAAmB,GAC9D;EAEF,OAAO,iBAAiB,KAAe,MAAqB,IAAM,CAAC,CAChE,MAAM,QAAQ,IAAI,KAAK,CAAC,CAAC,CACzB,MAAM,SAAc;GACnB,KAAK,WAAW,KAAK,YAAY,CAAC;GAClC,KAAK,SAAS,gBACZ,KAAK,SAAS,iBAAiB,IAAI,QAAQ,wBAAwB,GAAG;GACxE,IAAI,KAAK,SAAS,eAAe,UAAU,KAAK,SAAS,eAAe,IACtE,KAAK,SAAS,aAAa;GAE7B,OAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG,EACxC,SAAS,EAAE,gBAAgB,mBAAmB,EAChD,CAAC;EACH,CAAC;CACL,CAAC;AACH;AAEA,SAAgB,0BACd,IACA,UACA,SACM;CACN,IAAI,CAAC,MAAM,CAAE,GAAW,YAAY,WAAW,OAAO,IAAI;EACxD,QAAQ,KAAK,6EAA6E;EAC1F;CACF;CACA,IAAK,GAAW,iCAAiC,MAAM;CACvD,AAAC,GAAW,+BAA+B;CAE3C,AAAC,GAAW,WAAW,UAAU,MAAM,IAAI,KAAc,SAAkB;EACzE,IAAI,OAAO,QAAQ,UAAU;EAE7B,MAAM,eAAe,SAAS,IAAI,GAAG;EACrC,IAAI,CAAC,cAAc;EAEnB,OAAO,iBAAiB,KAAe,MAAqB,IAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;GACtF,MAAM,SAAS,OAAO,KAAK,MAAM,IAAI,YAAY,CAAC;GAClD,MAAM,WAAWA,iCAAe,MAAM;GAEtC,IAAI,aAAa,cAAc;IAK7B,MAAM,SAAS,MAAMC,qCAAgB,KAAe,EAAE,UAAU,SAAS,SAAS,CAAC;IACnF,IAAI,UAAUD,iCAAe,OAAO,KAAK,MAAM,CAAC,MAAM,cAAc;KAClE,QAAQ,KACN,8CAA8C,IAAI,iDACpD;KACA,OAAO,IAAI,SAAS,OAAO,MAAM,CAAC,CAAC,QAAQ;MACzC,QAAQ;MACR,SAAS,EAAE,kBAAkB,QAAQ;KACvC,CAAC;IACH;IACA,QAAQ,MACN,yDAAyD,IAAI,gBAAgB,aAAa,gBAAgB,UAC5G;IACA,OAAO,IAAI,SAAS,8BAA8B,OAAO;KACvD,QAAQ;KACR,YAAY;IACd,CAAC;GACH;GAGA,MAAME,sCAAiB,KAAe,IAAI,WAAW,MAAM,GAAG,EAC5D,UAAU,SAAS,SACrB,CAAC,CAAC,CAAC,YAAY,CAEf,CAAC;GAED,OAAO,IAAI,SAAS,QAAQ;IAC1B,QAAQ,IAAI;IACZ,YAAY,IAAI;IAChB,SAAS,IAAI;GACf,CAAC;EACH,CAAC;CACH,CAAC;AACH;AAEA,SAAgB,wBAA4C;CAC1D,IAAI,YAAY,OAAO;CAEvB,MAAM,eAAWC,iDAAY;CAC7B,IAAI,UAAU;EACZ,aAAa;EACb,iEAA4B,UAAiB;EAC7C,mCAAmC,UAAU;EAC7C,OAAO;CACT;CAEA,iBAAaC,oDAAe;EAC1B,MAAM;EACN,SAAS,CAAC;CACZ,CAAC;CACD,iEAA4B,UAAiB;CAC7C,mCAAmC,UAAU;CAC7C,OAAO;AACT;AAEA,eAAsB,eAAe,MAInB;CAChB,MAAM,WAAW,sBAAsB;CAEvC,MAAM,kBAAyC;EAC7C,IAAI,KAAK,MAAM,OAAO,KAAK;EAC3B,IAAI,KAAK,MAAM,SAAS,mBAAmB,GAAG,OAAO;EACrD,IAAI,sCAAsC,KAAK,KAAK,KAAK,GAAG,OAAO;EACnE,OAAO,OAAO,WAAW,cAAc,WAAW;CACpD;CAEA,MAAM,aAAa,UAAU;CAE7B,SAAS,gBAAgB,CACvB;EACE,MAAM,KAAK;EACX,OAAO,KAAK;EACZ,MAAM;CACR,CACF,CAAC;AACH;AAEA,eAAsB,iBACpB,WACA,SACY;CACZ,MAAM,WAAW,sBAAsB;CAGvC,IADiB,OAAO,WAAW,aAEjC,MAAO,SAAiB,oBAAoB,SAAS;CAGvD,MAAM,MAAM,MAAM,SAAS,WAAc,WAAW,OAAc;CAClE,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,iCAAiC,WAAW;CAE9D,OAAO;AACT;AAEA,eAAsB,0BAAyC;CAC7D,MAAM,WAAW,sBAAsB;CACvC,IAAI,OAAO,WAAW,aAAa;CACnC,IAAK,SAAiB,2BAA2B;CAEjD,MAAM,MAAW,MAAM,OAAO;CAC9B,MAAM,UAAU,KAAK,WAAW;CAChC,MAAM,SAAS,OAAO,YAAY,aAAa,QAAQ,IAAI;CAC3D,IAAI,QACF,SAAS,gBAAgB,CAAC,MAAM,CAAC;CAEnC,AAAC,SAAiB,4BAA4B;AAChD;AAmBA,SAAS,YAAY,GAAoE;CACvF,MAAM,IAAI,OAAO,MAAM,WAAW,uBAAuB,KAAK,CAAC,IAAI;CACnE,OAAO,IAAI;EAAE,OAAO,CAAC,EAAE;EAAK,OAAO,CAAC,EAAE;EAAK,OAAO,CAAC,EAAE;CAAI,IAAI;AAC/D;AAEA,SAAS,oBAAoB,SAAiB,YAA6B;CACzE,MAAM,UAAU,WAAW,KAAK;CAChC,IAAI,CAAC,SAAS,OAAO;CACrB,IAAI,CAAC;EAAC;EAAK;EAAK;EAAK;EAAK;EAAK;CAAG,CAAC,CAAC,MAAM,MAAM,QAAQ,WAAW,CAAC,CAAC,GACnE,OAAO,YAAY;CAErB,MAAM,IAAI,+BAA+B,KAAK,OAAO;CACrD,IAAI,CAAC,GAAG,OAAO;CACf,MAAM,IAAI,YAAY,OAAO;CAC7B,IAAI,CAAC,GAAG,OAAO;CACf,IAAI,EAAE,UAAU,CAAC,EAAE,IAAK,OAAO;CAC/B,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAQ,EAAE,UAAU,CAAC,EAAE,MAAO,EAAE,QAAQ,CAAC,EAAE,IAAM,OAAO;CACzE,MAAM,uBAAuB,QAAQ,MAAM,mBAAmB;CAC9D,MAAM,oBAAoB,wBAAwB,KAAK,OAAO;CAC9D,IAAI,sBAAsB;EACxB,IAAI,CAAC,mBAAmB,OAAO;EAC/B,MAAM,OAAO,qBAAqB,EAAE,CAAE,MAAM,GAAG;EAC/C,MAAM,OAAO,kBAAkB,EAAE,CAAE,MAAM,GAAG;EAC5C,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,IAAI,KAAK,QAAQ,KAAK,MAAM,GAAG,KAAK,GAAG;GAC9D,MAAM,IAAI,KAAK,MAAM;GACrB,MAAM,IAAI,KAAK,MAAM;GACrB,IAAI,MAAM,GAAG;GACb,MAAM,OAAO,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI;GACpC,MAAM,OAAO,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI;GACpC,IAAI,SAAS,QAAQ,SAAS,MAAM,OAAO,OAAO;GAClD,OAAO,SAAS,OAAO,EAAE,cAAc,CAAC,IAAI,IAAI;EAClD;EACA,OAAO;CACT;CACA,IAAI,mBAAmB,OAAO;CAC9B,OAAO;AACT;AAEA,SAAS,YAAY,WAA2B;CAC9C,OAAO,UAAU,SAAS,GAAG,IAAI,GAAG,UAAU,oBAAoB,GAAG,UAAU;AACjF;AAEA,eAAe,cAAc,KAAa,WAAqC;CAC7E,MAAM,MAAM,MAAM,MAAM,YAAY,GAAG,GAAG,EAAE,QAAQ,YAAY,QAAQ,SAAS,EAAE,CAAC;CACpF,IAAI,CAAC,IAAI,IAAI,MAAM,IAAI,MAAM,QAAQ,IAAI,OAAO,GAAG,IAAI,YAAY;CACnE,OAAO,IAAI,KAAK;AAClB;AAEA,SAAS,sBAAsB,WAA4D;CACzF,MAAM,MAA4C,CAAC;CACnD,KAAK,MAAM,QAAQ,CAAC,OAAO,MAAM,GAAY;EAC3C,MAAM,MAAM,mBAAmB,WAAW,IAAG,GAA2C,KAAK;EAC7F,IAAI,KAAK,IAAI,KAAK;GAAE;GAAM;EAAI,CAAC;CACjC;CACA,KAAK,MAAM,CAAC,IAAI,SAAS,OAAO,QAAQ,WAAW,WAAW,CAAC,CAAC,GAAG;EACjE,MAAM,MAAM,kBAAkB,IAAI;EAClC,IAAI,KAAK,IAAI,KAAK;GAAE,MAAM;GAAI;EAAI,CAAC;CACrC;CACA,OAAO;AACT;AAEA,SAAS,kBAAkB,OAA+B;CACxD,IAAI,OAAO,UAAU,UAAU,OAAO,MAAM,SAAS,IAAI,QAAQ;CACjE,IAAI,SAAS,OAAQ,MAAuB,eAAe,UAAU;EACnE,MAAM,MAAO,MAAuB;EACpC,OAAO,IAAI,SAAS,IAAI,MAAM;CAChC;CACA,OAAO;AACT;AAOA,eAAsB,sBACpB,WACA,OAA+B,CAAC,GACC;CACjC,MAAM,YAAY,KAAK,aAAa;CAEpC,IAAI,CAAC,WAAW,KAAK,MAAM,YACzB,OAAO;EAAE,IAAI;EAAM,aAAa;EAAM,eAAe;EAAO,SAAS,CAAC;CAAE;CAG1E,MAAM,UAAU,UAAU,IAAI,KAAK;CACnC,IAAI,eAAsC;CAC1C,IAAI;CACJ,IAAI;EACF,eAAgB,MAAM,cAAc,SAAS,SAAS;CACxD,SAAS,GAAG;EACV,aAAa,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;CACxD;CAEA,MAAM,cAAc,cAAc,UAAU,iBAAiB;CAC7D,MAAM,cAAc,cAAc,UAAU,CAAC,EAAC,CAAE,QAC7C,MAAM,OAAO,EAAE,oBAAoB,QACtC;CAEA,MAAM,UAAU,sBAAsB,SAAS;CAwF/C,MAAM,iBAAgB,MAvFA,QAAQ,WAC5B,QAAQ,IAAI,OAAO,EAAE,MAAM,UAAU;EACnC,IAAI,WAAkC;EACtC,IAAI;EACJ,IAAI;GACF,WAAY,MAAM,cAAc,KAAK,SAAS;EAChD,SAAS,GAAG;GACV,SAAS,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;EACpD;EAEA,MAAM,UAAU,UAAU,UAAU,iBAAiB;EACrD,MAAM,YAAY,YAAY,QAAQ,YAAY;EAElD,IAAI,CAAC,UACH,OAAO;GACL;GACA;GACA,WAAW;GACX,eAAe;GACf,IAAI;GACJ,QAAQ,UAAU;EACpB;EAGF,IAAI,CAAC,WACH,OAAO;GACL;GACA;GACA,WAAW;GACX,eAAe;GACf,IAAI;GACJ,QAAQ,cACJ,0BAA0B,YAAY,eAAe,WAAW,UAAU,2BAC1E;EACN;EAGF,MAAM,gBAA0B,CAAC;EACjC,MAAM,mBAA6B,CAAC;EACpC,KAAK,MAAM,WAAW,YAAY;GAChC,MAAM,SAAS,SAAS,QAAQ,MAAM,MAAM,EAAE,SAAS,QAAQ,IAAI;GACnE,IAAI,CAAC,QAAQ;IACX,cAAc,KAAK,GAAG,QAAQ,KAAK,GAAG,QAAQ,iBAAiB;IAC/D;GACF;GACA,IAAI,CAAC,oBAAoB,OAAO,WAAW,IAAI,QAAQ,eAAgB,GACrE,iBAAiB,KACf,GAAG,QAAQ,KAAK,WAAW,OAAO,WAAW,IAAI,WAAW,QAAQ,iBACtE;GAEF,QAAIC,qDAA0B,QAAQ,IAAI,GAAG;IAC3C,MAAM,cAAc,QAAQ,WAAW;IACvC,MAAM,gBAAgB,OAAO,WAAW;IACxC,IAAI,iBAAiB,kBAAkB,aACrC,iBAAiB,KACf,GAAG,QAAQ,KAAK,gCAAgC,cAAc,QAAQ,YAAY,4FACpF;IAEF,MAAM,iBACJ,OAAO,OAAO,oBAAoB,WAAW,OAAO,gBAAgB,KAAK,IAAI;IAC/E,IACE,eAAe,SAAS,KACxB,eAAe,OAAO,OACtB,CAAC,oBAAoB,aAAa,cAAc,GAEhD,iBAAiB,KACf,GAAG,QAAQ,KAAK,sBAAsB,YAAY,6BAA6B,gBACjF;GAEJ;EACF;EAEA,MAAM,UAAU,CACd,GAAG,cAAc,KAAK,MAAM,mBAAmB,EAAE,mBAAmB,GACpE,GAAG,gBACL;EACA,OAAO;GACL;GACA;GACA,WAAW;GACX,eAAe;GACf,IAAI,QAAQ,WAAW;GACvB,QAAQ,QAAQ;EAClB;CACF,CAAC,CACH,EAE6B,CAAC,KAAK,GAAG,MAAM;EAC1C,MAAM,cAAc;GAClB,MAAM,QAAQ,EAAE,CAAE;GAClB,KAAK,QAAQ,EAAE,CAAE;GACjB,WAAW;GACX,eAAe;GACf,IAAI;EACN;EACA,OAAO,EAAE,WAAW,cAAc,EAAE,QAAQ;GAAE,GAAG;GAAa,QAAQ,OAAO,EAAE,MAAM;EAAE;CACzF,CAAC;CAMD,OAAO;EACL,IAJA,iBAAiB,QACjB,cAAc,OAAO,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,kBAAkB,IAAI;EAI1E;EACA,eAAe,iBAAiB;EAChC;EACA,SAAS;CACX;AACF;AAEA,SAAgB,wBAAwB,YAA+B;CACrE,OAAO,KAAK,UAAMC,sBAAa,YAAY,MAAM,CAAC;AACpD"}

package/dist/mf.d.cts

@@ -1,9 +1,12 @@
+import { BosConfig } from "./types.cjs";
 import { IntegrityRegistry } from "./integrity.cjs";
 import { createInstance } from "@module-federation/enhanced/runtime";
 //#region src/mf.d.ts
 type FederationInstance = ReturnType<typeof createInstance>;
 declare function patchManifestFetchForSsrPublicPath(mf: FederationInstance): void;
-declare function installIntegrityFetchHook(mf: FederationInstance, registry: IntegrityRegistry): void;
+declare function installIntegrityFetchHook(mf: FederationInstance, registry: IntegrityRegistry, options?: {
+  cacheDir?: string;
+}): void;
 declare function getFederationInstance(): FederationInstance;
 declare function registerRemote(opts: {
   name: string;
@@ -15,6 +18,25 @@ declare function loadRemoteModule<T>(specifier: string, options?: {
   from?: "build" | "runtime";
 }): Promise<T>;
 declare function ensureNodeRuntimePlugin(): Promise<void>;
+interface FederationCompatRemote {
+  role: string;
+  url: string;
+  reachable: boolean;
+  pluginVersion: string | null;
+  ok: boolean;
+  reason?: string;
+}
+interface FederationCompatReport {
+  ok: boolean;
+  hostVersion: string | null;
+  hostReachable: boolean;
+  hostReason?: string;
+  remotes: FederationCompatRemote[];
+}
+declare function checkFederationCompat(bosConfig: BosConfig | null, opts?: {
+  timeoutMs?: number;
+}): Promise<FederationCompatReport>;
+declare function loadBosConfigForMfCheck(configPath: string): BosConfig;
 //#endregion
-export { ensureNodeRuntimePlugin, getFederationInstance, installIntegrityFetchHook, loadRemoteModule, patchManifestFetchForSsrPublicPath, registerRemote };
+export { FederationCompatRemote, FederationCompatReport, checkFederationCompat, ensureNodeRuntimePlugin, getFederationInstance, installIntegrityFetchHook, loadBosConfigForMfCheck, loadRemoteModule, patchManifestFetchForSsrPublicPath, registerRemote };
 //# sourceMappingURL=mf.d.cts.map

package/dist/mf.d.mts

@@ -1,9 +1,12 @@
+import { BosConfig } from "./types.mjs";
 import { IntegrityRegistry } from "./integrity.mjs";
 import { createInstance } from "@module-federation/enhanced/runtime";
 //#region src/mf.d.ts
 type FederationInstance = ReturnType<typeof createInstance>;
 declare function patchManifestFetchForSsrPublicPath(mf: FederationInstance): void;
-declare function installIntegrityFetchHook(mf: FederationInstance, registry: IntegrityRegistry): void;
+declare function installIntegrityFetchHook(mf: FederationInstance, registry: IntegrityRegistry, options?: {
+  cacheDir?: string;
+}): void;
 declare function getFederationInstance(): FederationInstance;
 declare function registerRemote(opts: {
   name: string;
@@ -15,6 +18,25 @@ declare function loadRemoteModule<T>(specifier: string, options?: {
   from?: "build" | "runtime";
 }): Promise<T>;
 declare function ensureNodeRuntimePlugin(): Promise<void>;
+interface FederationCompatRemote {
+  role: string;
+  url: string;
+  reachable: boolean;
+  pluginVersion: string | null;
+  ok: boolean;
+  reason?: string;
+}
+interface FederationCompatReport {
+  ok: boolean;
+  hostVersion: string | null;
+  hostReachable: boolean;
+  hostReason?: string;
+  remotes: FederationCompatRemote[];
+}
+declare function checkFederationCompat(bosConfig: BosConfig | null, opts?: {
+  timeoutMs?: number;
+}): Promise<FederationCompatReport>;
+declare function loadBosConfigForMfCheck(configPath: string): BosConfig;
 //#endregion
-export { ensureNodeRuntimePlugin, getFederationInstance, installIntegrityFetchHook, loadRemoteModule, patchManifestFetchForSsrPublicPath, registerRemote };
+export { FederationCompatRemote, FederationCompatReport, checkFederationCompat, ensureNodeRuntimePlugin, getFederationInstance, installIntegrityFetchHook, loadBosConfigForMfCheck, loadRemoteModule, patchManifestFetchForSsrPublicPath, registerRemote };
 //# sourceMappingURL=mf.d.mts.map