refactor(rsc-mf): validate expose keys and protect bootstrap module from exposure

Author: cursoragent

tests/integration/rsc-mf/remote/module-federation.config.ts

@@ -35,6 +35,14 @@ const remoteExposeImports: Record<string, string> = {
   './actionBundle': './src/components/actionBundle.ts',
   './infoBundle': './src/components/infoBundle.ts',
 };
+const invalidExposeKeys = Object.keys(remoteExposeImports).filter(
+  exposeKey => !exposeKey.startsWith('./'),
+);
+if (invalidExposeKeys.length > 0) {
+  throw new Error(
+    `Remote expose keys must be module-federation paths starting with "./". Invalid keys: ${invalidExposeKeys.join(', ')}`,
+  );
+}
 const COMPONENT_EXPOSE_PREFIX = './src/components/';
 const nonComponentExposeEntries = Object.entries(remoteExposeImports).filter(
   ([, importPath]) => !importPath.startsWith(COMPONENT_EXPOSE_PREFIX),
@@ -46,6 +54,16 @@ if (nonComponentExposeEntries.length > 0) {
       .join(', ')}`,
   );
 }
+const callbackExposeEntries = Object.entries(remoteExposeImports).filter(
+  ([, importPath]) => importPath === CALLBACK_BOOTSTRAP_IMPORT,
+);
+if (callbackExposeEntries.length > 0) {
+  throw new Error(
+    `Callback bootstrap module (${CALLBACK_BOOTSTRAP_IMPORT}) must remain internal-only and cannot be exposed. Invalid entries: ${callbackExposeEntries
+      .map(([exposeKey]) => exposeKey)
+      .join(', ')}`,
+  );
+}
 
 const sharedByScope = [
   {

tests/integration/rsc-mf/tests/index.test.ts

@@ -589,6 +589,8 @@ function runTests({ mode }: TestConfig) {
       expect(moduleFederationConfigSource).toContain(
         'nonComponentExposeEntries',
       );
+      expect(moduleFederationConfigSource).toContain('invalidExposeKeys');
+      expect(moduleFederationConfigSource).toContain('callbackExposeEntries');
       expect(moduleFederationConfigSource).toContain("shareScope: 'default'");
       expect(moduleFederationConfigSource).toContain("shareScope: 'ssr'");
       expect(moduleFederationConfigSource).toContain("shareScope: 'rsc'");