@voyant-travel/hono 0.117.2 → 0.118.0

package/dist/anonymous-paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anonymous-paths.d.ts","sourceRoot":"","sources":["../src/anonymous-paths.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG5D;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,SAAS,UAAU,EAAE,EAC9B,UAAU,EAAE,SAAS,aAAa,EAAE,EACpC,QAAQ,GAAE,SAAS,MAAM,EAAO,GAC/B,MAAM,EAAE,CAuBV"}
+{"version":3,"file":"anonymous-paths.d.ts","sourceRoot":"","sources":["../src/anonymous-paths.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG5D;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,SAAS,UAAU,EAAE,EAC9B,UAAU,EAAE,SAAS,aAAa,EAAE,EACpC,QAAQ,GAAE,SAAS,MAAM,EAAO,GAC/B,MAAM,EAAE,CA0CV"}

package/dist/anonymous-paths.js

@@ -25,11 +25,31 @@ export function assembleAnonymousPaths(modules, extensions, explicit = []) {
             paths.add(trimmed ? `${mount}/${trimmed}` : mount);
         }
     };
+    // Inbound webhook routes are unauthenticated by construction (the handler
+    // verifies the provider signature), so their concrete absolute paths are
+    // auto-added to the allow-list — no per-deployment `publicPaths` entry. Mounted
+    // at `/v1/{name}`, matching the mount in `app.ts`. Parameterized/wildcard paths
+    // are skipped (the literal `matchesPublicPath` matcher can't match them) and
+    // must be declared via `anonymous` if ever needed.
+    // biome-ignore lint/suspicious/noExplicitAny: Hono sub-apps have varied env generics -- owner: hono; mirrors the HonoModule.webhookRoutes suppression.
+    const addWebhooks = (name, routes) => {
+        if (!routes)
+            return;
+        for (const route of routes.routes) {
+            const path = route.path;
+            if (path.includes(":") || path.includes("*"))
+                continue;
+            const trimmed = path.replace(/\/+$/g, "");
+            paths.add(`/v1/${name}${trimmed === "/" ? "" : trimmed}`);
+        }
+    };
     for (const m of modules) {
         add(resolveSurfaceMountPath("/v1/public", m.publicPath, m.module.name), m.anonymous);
+        addWebhooks(m.module.name, m.webhookRoutes);
     }
     for (const e of extensions) {
         add(resolveSurfaceMountPath("/v1/public", e.publicPath, e.extension.module), e.anonymous);
+        addWebhooks(e.extension.module, e.webhookRoutes);
     }
     return [...paths].sort();
 }

package/dist/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAQhC,OAAO,EAAE,KAAK,gBAAgB,EAA0C,MAAM,kBAAkB,CAAA;AA8BhG,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAY,eAAe,EAAE,MAAM,YAAY,CAAA;AAI5F,4EAA4E;AAC5E,KAAK,QAAQ,CAAC,SAAS,SAAS,cAAc,IAAI;IAChD,QAAQ,EAAE,SAAS,CAAA;IACnB,SAAS,EAAE,eAAe,CAAA;CAC3B,CAAA;AAuBD;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,gBAAgB,CAAA;CACvB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,mBAAmB,CAAC,SAAS,GAAG,OAAO;IACtD;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C;;;;;;;;OAQG;IACH,QAAQ,EAAE,OAAO,qBAAqB,EAAE,QAAQ,CAAA;IAChD;;;;;OAKG;IACH,UAAU,EAAE,SAAS,EAAE,CAAA;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,SAAS,SAAS,cAAc,EACvD,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,GACjC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CA2f5D"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAQhC,OAAO,EAAE,KAAK,gBAAgB,EAA0C,MAAM,kBAAkB,CAAA;AA8BhG,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAY,eAAe,EAAE,MAAM,YAAY,CAAA;AAI5F,4EAA4E;AAC5E,KAAK,QAAQ,CAAC,SAAS,SAAS,cAAc,IAAI;IAChD,QAAQ,EAAE,SAAS,CAAA;IACnB,SAAS,EAAE,eAAe,CAAA;CAC3B,CAAA;AAuBD;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,gBAAgB,CAAA;CACvB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,mBAAmB,CAAC,SAAS,GAAG,OAAO;IACtD;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C;;;;;;;;OAQG;IACH,QAAQ,EAAE,OAAO,qBAAqB,EAAE,QAAQ,CAAA;IAChD;;;;;OAKG;IACH,UAAU,EAAE,SAAS,EAAE,CAAA;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,SAAS,SAAS,cAAc,EACvD,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,GACjC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CA2e5D"}

package/dist/app.js

@@ -389,22 +389,6 @@ export function mountApp(config) {
     const actorOptions = { basePath: config.basePath };
     app.use("/v1/admin/*", requireActor(actorOptions, "staff"));
     app.use("/v1/public/*", requireActor(actorOptions, "customer", "partner", "supplier"));
-    const requireLegacyActor = requireActor(actorOptions, "staff");
-    app.use("/v1/*", (c, next) => {
-        const pathname = normalizePathname(new URL(c.req.url).pathname, { basePath: config.basePath });
-        if (pathname.startsWith("/v1/admin/") || pathname.startsWith("/v1/public/")) {
-            return next();
-        }
-        // Anonymous legacy/webhook routes (ADR-0008) — e.g. a bundle-declared
-        // payment-processor callback at `/v1/finance/...`. `requireAuth` already
-        // skipped credential resolution for these, but it only stamps an actor on
-        // `/v1/public/*`, so without this skip the fail-closed staff guard would 401
-        // a route that is meant to be reachable without a session.
-        if (matchesPublicPath(pathname, anonymousPaths)) {
-            return next();
-        }
-        return requireLegacyActor(c, next);
-    });
     // Admin capability discovery — GET /v1/admin/_meta/capabilities. A built-in
     // framework route (like /health), mounted only when the deployment supplies
     // the operation catalogue via `config.adminMeta` (from
@@ -450,8 +434,8 @@ export function mountApp(config) {
             mountLazyRoutePaths(app, mod.lazyRoutes.paths, mod.lazyRoutes.load);
             lazyMounts.push({ prefix: "/", load: mod.lazyRoutes.load });
         }
-        if (mod.routes) {
-            app.route(`/v1/${mod.module.name}`, mod.routes);
+        if (mod.webhookRoutes) {
+            app.route(`/v1/${mod.module.name}`, mod.webhookRoutes);
         }
     }
     // Mount extension routes
@@ -476,8 +460,8 @@ export function mountApp(config) {
             mountLazyRoutePaths(app, ext.lazyRoutes.paths, ext.lazyRoutes.load);
             lazyMounts.push({ prefix: "/", load: ext.lazyRoutes.load });
         }
-        if (ext.routes) {
-            app.route(`/v1/${ext.extension.module}`, ext.routes);
+        if (ext.webhookRoutes) {
+            app.route(`/v1/${ext.extension.module}`, ext.webhookRoutes);
         }
     }
     // Additional routes

package/dist/lazy-routes.d.ts

@@ -8,7 +8,7 @@
  * route families don't inflate the main bundle or the Worker cold start.
  *
  * For deployment-local families that span MULTIPLE absolute path prefixes (e.g.
- * an operator bundle exposing `/v1/uploads`, `/v1/admin/uploads`, `/v1/media/*`),
+ * an operator bundle exposing `/v1/admin/uploads` and `/v1/admin/media/*`),
  * the single-surface loaders don't fit. Such families declare `lazyRoutes`:
  * `{ paths, load }` where `load` returns a sub-app whose routes are ABSOLUTE and
  * `paths` are the explicit matchers the framework installs up front. This is the

package/dist/module.d.ts

@@ -3,18 +3,23 @@ import type { Hono } from "hono";
 import type { LazyHonoRoutes, LazyRoutesLoader } from "./lazy-routes.js";
 export interface HonoModule {
     module: Module;
-    /**
-     * Legacy routes — mounted at `/v1/{module.name}`. Gated by the caller's
-     * `requireAuth` configuration. Use `adminRoutes` / `publicRoutes` for new
-     * modules that participate in the admin/public API split.
-     *
-     * @deprecated Prefer `adminRoutes` or `publicRoutes`.
-     */
-    routes?: Hono<any>;
     /** Staff-facing routes — mounted at `/v1/admin/{module.name}`. */
     adminRoutes?: Hono<any>;
     /** Customer/partner/supplier-facing routes — mounted at `/v1/public/{module.name}`. */
     publicRoutes?: Hono<any>;
+    /**
+     * Inbound webhook routes — e.g. a payment-processor callback POSTed by an
+     * external system with no session. Mounted at `/v1/{module.name}` (so existing
+     * processor-registered callback URLs are preserved), and their concrete paths
+     * are AUTOMATICALLY added to the anonymous allow-list (ADR-0008) — no
+     * `anonymous` declaration or `publicPaths` entry needed. The handler is
+     * responsible for verifying the provider signature. Distinct from `routes`
+     * (deprecated catch-all) and from `publicRoutes` (session-bearing customer
+     * surface): a webhook is unauthenticated by construction and verified in-band.
+     * Only concrete paths are auto-allow-listed; parameterized/wildcard webhook
+     * paths must additionally be declared via `anonymous`.
+     */
+    webhookRoutes?: Hono<any>;
     /**
      * Lazy variant of `adminRoutes` — the route bundle is dynamically imported on
      * first request and cached per isolate. Mounted at `/v1/admin/{module.name}`
@@ -66,12 +71,15 @@ export interface HonoModule {
 }
 export interface HonoExtension {
     extension: Extension;
-    /** @deprecated Prefer `adminRoutes` or `publicRoutes`. */
-    routes?: Hono<any>;
     /** Staff-facing routes — mounted at `/v1/admin/{extension.module}`. */
     adminRoutes?: Hono<any>;
     /** Customer/partner/supplier-facing routes — mounted at `/v1/public/{extension.module}`. */
     publicRoutes?: Hono<any>;
+    /**
+     * Inbound webhook routes — mounted at `/v1/{extension.module}`, concrete paths
+     * auto-added to the anonymous allow-list (ADR-0008). See `HonoModule.webhookRoutes`.
+     */
+    webhookRoutes?: Hono<any>;
     /** Lazy variant of `adminRoutes` — mounted at `/v1/admin/{extension.module}` (see HonoModule). */
     lazyAdminRoutes?: LazyRoutesLoader;
     /** Lazy variant of `publicRoutes` — mounted at `/v1/public/{publicPath ?? extension.module}`. */

package/dist/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../src/module.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAEhC,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAExE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAA;IACd;;;;;;OAMG;IAEH,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAClB,kEAAkE;IAElE,WAAW,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACvB,uFAAuF;IAEvF,YAAY,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACxB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,gBAAgB,CAAA;IAClC,4FAA4F;IAC5F,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC;;;;;OAKG;IACH,UAAU,CAAC,EAAE,cAAc,CAAA;IAC3B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CAAA;IACvC;;;;;;;;;;OAUG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACvC;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,SAAS,CAAA;IACpB,0DAA0D;IAE1D,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAClB,uEAAuE;IAEvE,WAAW,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACvB,4FAA4F;IAE5F,YAAY,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACxB,kGAAkG;IAClG,eAAe,CAAC,EAAE,gBAAgB,CAAA;IAClC,iGAAiG;IACjG,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,gFAAgF;IAChF,UAAU,CAAC,EAAE,cAAc,CAAA;IAC3B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CAAA;IACvC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACvC"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../src/module.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAEhC,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAExE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,kEAAkE;IAElE,WAAW,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACvB,uFAAuF;IAEvF,YAAY,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACxB;;;;;;;;;;;OAWG;IAEH,aAAa,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACzB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,gBAAgB,CAAA;IAClC,4FAA4F;IAC5F,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC;;;;;OAKG;IACH,UAAU,CAAC,EAAE,cAAc,CAAA;IAC3B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CAAA;IACvC;;;;;;;;;;OAUG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACvC;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,SAAS,CAAA;IACpB,uEAAuE;IAEvE,WAAW,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACvB,4FAA4F;IAE5F,YAAY,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACxB;;;OAGG;IAEH,aAAa,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACzB,kGAAkG;IAClG,eAAe,CAAC,EAAE,gBAAgB,CAAA;IAClC,iGAAiG;IACjG,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,gFAAgF;IAChF,UAAU,CAAC,EAAE,cAAc,CAAA;IAC3B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CAAA;IACvC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACvC"}

package/dist/public-document-delivery.d.ts

@@ -71,25 +71,25 @@ export declare function createDrizzlePublicDocumentDeliveryGrantStore(db: Postgr
 export declare function createPublicDocumentDeliveryGrant(store: PublicDocumentDeliveryGrantStore, input: CreatePublicDocumentDeliveryInput): Promise<PublicDocumentDeliveryEnvelope>;
 export declare function resolvePublicDocumentDeliveryGrant(store: PublicDocumentDeliveryGrantStore, token: string, now?: Date): Promise<PublicDocumentDeliveryResolution>;
 export declare function revokePublicDocumentDeliveryGrant(store: PublicDocumentDeliveryGrantStore, input: RevokePublicDocumentDeliveryGrantInput): Promise<{
-    metadata: unknown;
     id: string;
     createdAt: Date;
     expiresAt: Date;
-    revokedAt: Date | null;
-    tokenHash: string;
-    createdBy: string | null;
+    metadata: unknown;
     filename: string | null;
+    tokenHash: string;
     storageKey: string;
     storageProvider: string | null;
     contentType: string;
     sourceModule: string | null;
     sourceEntity: string | null;
     sourceId: string | null;
+    createdBy: string | null;
     createdByType: string | null;
     accessCount: number;
     lastAccessedAt: Date | null;
     lastAccessedIp: string | null;
     lastAccessedUserAgent: string | null;
+    revokedAt: Date | null;
     revokedBy: string | null;
 } | null>;
 export declare function createPublicDocumentDeliveryRoutes<TBindings extends object = Record<string, unknown>>(options?: PublicDocumentDeliveryRouteOptions<TBindings>): import("hono/hono-base").HonoBase<Env<TBindings>, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voyant-travel/hono",
-  "version": "0.117.2",
+  "version": "0.118.0",
   "license": "Apache-2.0",
   "type": "module",
   "exports": {
@@ -137,17 +137,17 @@
     "zod": "^4.3.6",
     "@voyant-travel/core": "^0.111.0",
     "@voyant-travel/db": "^0.109.4",
-    "@voyant-travel/storage": "^0.105.0",
+    "@voyant-travel/storage": "^0.106.0",
     "@voyant-travel/types": "^0.106.0",
-    "@voyant-travel/workflows": "^0.111.9",
-    "@voyant-travel/utils": "^0.105.4"
+    "@voyant-travel/utils": "^0.105.4",
+    "@voyant-travel/workflows": "^0.111.10"
   },
   "devDependencies": {
     "@cloudflare/workers-types": "^4.20260426.1",
     "typescript": "^6.0.2",
     "vitest": "^4.1.2",
     "@voyant-travel/voyant-typescript-config": "^0.1.0",
-    "@voyant-travel/workflows-orchestrator": "^0.111.9"
+    "@voyant-travel/workflows-orchestrator": "^0.111.10"
   },
   "files": [
     "dist"
@@ -161,10 +161,10 @@
     "directory": "packages/hono"
   },
   "scripts": {
-    "typecheck": "tsc --noEmit",
+    "typecheck": "tsc -p tsconfig.typecheck.json",
     "lint": "biome check src/",
     "test": "vitest run",
-    "build": "tsc -p tsconfig.json",
+    "build": "tsc -p tsconfig.build.json",
     "clean": "rm -rf dist tsconfig.tsbuildinfo"
   },
   "main": "./dist/index.js",