@canmi/web 2026.1005.4 → 2026.1005.5

package/dist/disclose/src/build.js

@@ -8,7 +8,10 @@ import { join } from "node:path";
 const VERSIONED = [
 	"@codemirror/view",
 	"@videojs/core",
-	"d3-hierarchy"
+	"d3-array",
+	"d3-hierarchy",
+	"d3-scale",
+	"d3-shape"
 ];
 /** The globals a package used on every page is disclosed as, given its installed version. */
 const GLOBALS = {

package/dist/disclose/src/hono.d.ts

@@ -0,0 +1,10 @@
+import { MiddlewareHandler } from "hono";
+//#region disclose/src/hono.d.ts
+/**
+ * `X-Powered-By: Hono` on every answer, which is all Wappalyzer's Hono fingerprint reads -- and on
+ * a page's own response alone, so an API answered in a browser is named too. Hono's own
+ * `poweredBy` sets the header in place, which throws on an answer passed through from a `fetch`,
+ * whose headers are immutable; that one is copied first. See spec/web/disclose.md.
+ */
+export declare function poweredBy(): MiddlewareHandler;
+//#endregion

package/dist/disclose/src/hono.js

@@ -0,0 +1,25 @@
+//#region disclose/src/hono.ts
+/**
+* `X-Powered-By: Hono` on every answer, which is all Wappalyzer's Hono fingerprint reads -- and on
+* a page's own response alone, so an API answered in a browser is named too. Hono's own
+* `poweredBy` sets the header in place, which throws on an answer passed through from a `fetch`,
+* whose headers are immutable; that one is copied first. See spec/web/disclose.md.
+*/
+function poweredBy() {
+	return async (c, next) => {
+		await next();
+		try {
+			c.res.headers.set("X-Powered-By", "Hono");
+		} catch {
+			const headers = new Headers(c.res.headers);
+			headers.set("X-Powered-By", "Hono");
+			c.res = new Response(c.res.body, {
+				status: c.res.status,
+				statusText: c.res.statusText,
+				headers
+			});
+		}
+	};
+}
+//#endregion
+export { poweredBy };

package/dist/disclose/src/index.d.ts

@@ -19,6 +19,12 @@ export interface Disclosure {
  * is nothing to say. See spec/web/disclose.md.
  */
 export declare function disclosureHead(disclosure: Disclosure | undefined): string;
+/**
+ * D3, from the component that draws with it: `d3.version`, which no D3 module sets. The value names
+ * the module, which Wappalyzer's version check refuses, so D3 shows without the module's own major
+ * read as D3's. Nothing when the app's build found no D3 module. See spec/web/disclose.md.
+ */
+export declare function discloseD3(disclosure: Disclosure | undefined): void;
 /** Sets `globals` on `window`, from an app's root layout; nothing on the server. */
 export declare function discloseGlobals(disclosure: Disclosure | undefined): void;
 /**

package/dist/disclose/src/index.js

@@ -14,6 +14,23 @@ function disclosureHead(disclosure) {
 	}
 	return parts.join("");
 }
+/** The D3 modules an app may draw with, any one of which is D3 to a fingerprint. */
+const D3_MODULES = [
+	"d3-hierarchy",
+	"d3-scale",
+	"d3-shape",
+	"d3-array"
+];
+/**
+* D3, from the component that draws with it: `d3.version`, which no D3 module sets. The value names
+* the module, which Wappalyzer's version check refuses, so D3 shows without the module's own major
+* read as D3's. Nothing when the app's build found no D3 module. See spec/web/disclose.md.
+*/
+function discloseD3(disclosure) {
+	const versions = disclosure?.versions ?? {};
+	const name = D3_MODULES.find((module) => versions[module]);
+	if (name) disclose({ "d3.version": `${name}@${versions[name]}` });
+}
 /** Sets `globals` on `window`, from an app's root layout; nothing on the server. */
 function discloseGlobals(disclosure) {
 	if (disclosure) disclose(disclosure.globals);
@@ -41,4 +58,4 @@ function disclose(entries) {
 	}
 }
 //#endregion
-export { disclose, discloseGlobals, disclosureHead };
+export { disclose, discloseD3, discloseGlobals, disclosureHead };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canmi/web",
-  "version": "2026.1005.4",
+  "version": "2026.1005.5",
   "description": "SvelteKit compat, referer and Sentry.",
   "keywords": [
     "browserslist",
@@ -48,6 +48,10 @@
       "types": "./dist/disclose/src/build.d.ts",
       "default": "./dist/disclose/src/build.js"
     },
+    "./disclose/hono": {
+      "types": "./dist/disclose/src/hono.d.ts",
+      "default": "./dist/disclose/src/hono.js"
+    },
     "./disclose": {
       "types": "./dist/disclose/src/index.d.ts",
       "default": "./dist/disclose/src/index.js"
@@ -59,11 +63,13 @@
   },
   "devDependencies": {
     "@sentry/sveltekit": "^11.4.0",
-    "@sveltejs/kit": "^3.0.0"
+    "@sveltejs/kit": "^3.0.0",
+    "hono": "^4.13.12"
   },
   "peerDependencies": {
     "@sentry/sveltekit": "^11.4.0",
-    "@sveltejs/kit": "^3.0.0"
+    "@sveltejs/kit": "^3.0.0",
+    "hono": "^4.13.12"
   },
   "peerDependenciesMeta": {
     "@sentry/sveltekit": {
@@ -71,6 +77,9 @@
     },
     "@sveltejs/kit": {
       "optional": true
+    },
+    "hono": {
+      "optional": true
     }
   },
   "scripts": {