@voyant-travel/hono 0.118.1 → 0.118.3

package/dist/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAQhC,OAAO,EAAE,KAAK,gBAAgB,EAA0C,MAAM,kBAAkB,CAAA;AA8BhG,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAY,eAAe,EAAE,MAAM,YAAY,CAAA;AAI5F,4EAA4E;AAC5E,KAAK,QAAQ,CAAC,SAAS,SAAS,cAAc,IAAI;IAChD,QAAQ,EAAE,SAAS,CAAA;IACnB,SAAS,EAAE,eAAe,CAAA;CAC3B,CAAA;AAuBD;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,gBAAgB,CAAA;CACvB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,mBAAmB,CAAC,SAAS,GAAG,OAAO;IACtD;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C;;;;;;;;OAQG;IACH,QAAQ,EAAE,OAAO,qBAAqB,EAAE,QAAQ,CAAA;IAChD;;;;;OAKG;IACH,UAAU,EAAE,SAAS,EAAE,CAAA;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,SAAS,SAAS,cAAc,EACvD,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,GACjC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CA2e5D"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAQhC,OAAO,EAAE,KAAK,gBAAgB,EAA0C,MAAM,kBAAkB,CAAA;AA+BhG,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAY,eAAe,EAAE,MAAM,YAAY,CAAA;AAI5F,4EAA4E;AAC5E,KAAK,QAAQ,CAAC,SAAS,SAAS,cAAc,IAAI;IAChD,QAAQ,EAAE,SAAS,CAAA;IACnB,SAAS,EAAE,eAAe,CAAA;CAC3B,CAAA;AAuBD;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,gBAAgB,CAAA;CACvB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,mBAAmB,CAAC,SAAS,GAAG,OAAO;IACtD;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C;;;;;;;;OAQG;IACH,QAAQ,EAAE,OAAO,qBAAqB,EAAE,QAAQ,CAAA;IAChD;;;;;OAKG;IACH,UAAU,EAAE,SAAS,EAAE,CAAA;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,SAAS,SAAS,cAAc,EACvD,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,GACjC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAue5D"}

package/dist/app.js

@@ -2,7 +2,6 @@
 // splitting it is intentional follow-up work, not part of voyant#2114.
 import { OpenAPIHono } from "@hono/zod-openapi";
 import { createContainer, createEventBus, createQueryRunner, } from "@voyant-travel/core";
-import { createOutboxEventStore } from "@voyant-travel/db/outbox";
 import { assembleAnonymousPaths } from "./anonymous-paths.js";
 import { containerToServiceResolver, makeFrameworkLogger, wireWorkflowRuntime, } from "./app-workflows.js";
 import { mountLazyRoutePaths, mountLazyRoutesAt } from "./lazy-routes.js";
@@ -11,6 +10,7 @@ import { createPathDbSelector } from "./lib/db-selector.js";
 import { tryGetExecutionCtx } from "./lib/execution-ctx.js";
 import { matchesPublicPath, normalizePathname } from "./lib/public-paths.js";
 import { requestScopedEventBus } from "./lib/request-event-bus.js";
+import { createRequestOutboxStore } from "./lib/request-outbox-store.js";
 import { requireAuth } from "./middleware/auth.js";
 import { DEFAULT_REQUEST_BODY_LIMIT_BYTES, MAX_GLOBAL_REQUEST_BODY_BYTES, requestBodyLimit, } from "./middleware/body-size.js";
 import { cors } from "./middleware/cors.js";
@@ -272,12 +272,10 @@ export function mountApp(config) {
     // lazily at capture time. Outbox writes are single statements — the
     // cheap http client on non-transactional surfaces handles them fine.
     const buildOutboxStore = config.outbox
-        ? (c) => createOutboxEventStore(() => {
-            const requestDb = c.get("db");
-            if (!requestDb) {
-                throw new Error("[voyant] outbox capture needs the per-request db — emit ran before the db middleware");
-            }
-            return requestDb;
+        ? (c) => createRequestOutboxStore({
+            env: c.env,
+            operationDbFactory: config.db,
+            requestDb: () => c.get("db"),
         })
         : undefined;
     app.use("*", async (c, next) => {

package/dist/lib/request-outbox-store.d.ts

@@ -0,0 +1,17 @@
+import type { OutboxEventStore } from "@voyant-travel/core";
+import { type DbFactory, type VoyantBindings, type VoyantDb } from "../types.js";
+export interface RequestOutboxStoreOptions<TBindings extends VoyantBindings> {
+    env: TBindings;
+    requestDb: () => VoyantDb | undefined;
+    operationDbFactory: DbFactory<TBindings>;
+}
+/**
+ * Outbox store for request-scoped emits.
+ *
+ * Capture uses the current request DB so the outbox row is written before
+ * subscriber delivery starts. Settlement uses a fresh default DB client because
+ * scheduled subscribers may finish after the request-owned client has been
+ * disposed by middleware cleanup.
+ */
+export declare function createRequestOutboxStore<TBindings extends VoyantBindings>(options: RequestOutboxStoreOptions<TBindings>): OutboxEventStore;
+//# sourceMappingURL=request-outbox-store.d.ts.map

package/dist/lib/request-outbox-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-outbox-store.d.ts","sourceRoot":"","sources":["../../src/lib/request-outbox-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAG1E,OAAO,EACL,KAAK,SAAS,EAEd,KAAK,cAAc,EACnB,KAAK,QAAQ,EACd,MAAM,aAAa,CAAA;AAEpB,MAAM,WAAW,yBAAyB,CAAC,SAAS,SAAS,cAAc;IACzE,GAAG,EAAE,SAAS,CAAA;IACd,SAAS,EAAE,MAAM,QAAQ,GAAG,SAAS,CAAA;IACrC,kBAAkB,EAAE,SAAS,CAAC,SAAS,CAAC,CAAA;CACzC;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,SAAS,cAAc,EACvE,OAAO,EAAE,yBAAyB,CAAC,SAAS,CAAC,GAC5C,gBAAgB,CA6BlB"}

package/dist/lib/request-outbox-store.js

@@ -0,0 +1,39 @@
+import { completeOutboxEvent, failOutboxEvent, insertOutboxEvents } from "@voyant-travel/db/outbox";
+import { resolveDbFactoryResult, } from "../types.js";
+/**
+ * Outbox store for request-scoped emits.
+ *
+ * Capture uses the current request DB so the outbox row is written before
+ * subscriber delivery starts. Settlement uses a fresh default DB client because
+ * scheduled subscribers may finish after the request-owned client has been
+ * disposed by middleware cleanup.
+ */
+export function createRequestOutboxStore(options) {
+    async function withOperationDb(fn) {
+        const { db, dispose } = resolveDbFactoryResult(options.operationDbFactory(options.env));
+        try {
+            return await fn(db);
+        }
+        finally {
+            if (dispose)
+                await dispose();
+        }
+    }
+    return {
+        async insert(envelope) {
+            const requestDb = options.requestDb();
+            if (!requestDb) {
+                throw new Error("[voyant] outbox capture needs the per-request db — emit ran before the db middleware");
+            }
+            const rows = await insertOutboxEvents(requestDb, [envelope]);
+            const row = rows[0];
+            return row ? { id: row.id } : null;
+        },
+        async complete(id) {
+            await withOperationDb((db) => completeOutboxEvent(db, id));
+        },
+        async fail(id, error) {
+            await withOperationDb((db) => failOutboxEvent(db, id, error));
+        },
+    };
+}

package/dist/middleware/require-actor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"require-actor.d.ts","sourceRoot":"","sources":["../../src/middleware/require-actor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAEhD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAG7C,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAuClE;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAIzD;AAED,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAMD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc,EAC5E,GAAG,OAAO,EAAE,KAAK,EAAE,GAClB,iBAAiB,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAA;IACnB,SAAS,EAAE,eAAe,CAAA;CAC3B,CAAC,CAAA;AACF,wBAAgB,YAAY,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc,EAC5E,OAAO,EAAE,mBAAmB,EAC5B,GAAG,OAAO,EAAE,KAAK,EAAE,GAClB,iBAAiB,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAA;IACnB,SAAS,EAAE,eAAe,CAAA;CAC3B,CAAC,CAAA"}
+{"version":3,"file":"require-actor.d.ts","sourceRoot":"","sources":["../../src/middleware/require-actor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAEhD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAG7C,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AA8DlE;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAIzD;AAED,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAMD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc,EAC5E,GAAG,OAAO,EAAE,KAAK,EAAE,GAClB,iBAAiB,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAA;IACnB,SAAS,EAAE,eAAe,CAAA;CAC3B,CAAC,CAAA;AACF,wBAAgB,YAAY,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc,EAC5E,OAAO,EAAE,mBAAmB,EAC5B,GAAG,OAAO,EAAE,KAAK,EAAE,GAClB,iBAAiB,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAA;IACnB,SAAS,EAAE,eAAe,CAAA;CAC3B,CAAC,CAAA"}

package/dist/middleware/require-actor.js

@@ -10,7 +10,7 @@ function apiKeyResourceFromPath(pathname) {
     }
     return null;
 }
-function apiKeyPermissionActionsForMethod(method) {
+function baseApiKeyPermissionActionsForMethod(method) {
     switch (method.toUpperCase()) {
         case "GET":
         case "HEAD":
@@ -26,6 +26,27 @@ function apiKeyPermissionActionsForMethod(method) {
             return [];
     }
 }
+/**
+ * Search endpoints accept complex request bodies, so they're exposed as `POST`
+ * even though they're read-family operations. Without this, `POST
+ * /v1/<surface>/catalog/search` would only accept `write`/`trigger`/`relay`,
+ * and a `catalog:search`/`catalog:read`-scoped token would be rejected
+ * (voyant#2649). Matching a `search` / `*-search` path segment (e.g.
+ * `/catalog/search`, `/catalog/package-search`) keeps every other POST route
+ * (product writes, bookings, pricing, …) gated on its normal write actions.
+ */
+function isSearchPath(pathname) {
+    // A segment that is `search` or ends in `-search` (e.g. `package-search`),
+    // bounded so `/searchable` or `/researcher` don't count.
+    return /(?:\/|-)search(?:\/|$)/.test(pathname);
+}
+function apiKeyPermissionActionsForMethod(method, pathname) {
+    const actions = baseApiKeyPermissionActionsForMethod(method);
+    if (isSearchPath(pathname)) {
+        return Array.from(new Set([...actions, "search", "read"]));
+    }
+    return actions;
+}
 function hasAnyApiKeyPermission(scopes, resource, actions) {
     if (!scopes || scopes.length === 0)
         return false;
@@ -69,7 +90,7 @@ export function requireActor(...args) {
             // is a reserved namespace (no module is named `_meta`).
             if (resource === "_meta")
                 return next();
-            const actions = apiKeyPermissionActionsForMethod(c.req.method);
+            const actions = apiKeyPermissionActionsForMethod(c.req.method, pathname);
             if (resource && hasAnyApiKeyPermission(c.get("scopes"), resource, actions)) {
                 return next();
             }
@@ -99,7 +120,7 @@ export function requireActor(...args) {
             });
             const resource = apiKeyResourceFromPath(pathname);
             if (resource && resource !== "_meta") {
-                const actions = apiKeyPermissionActionsForMethod(c.req.method);
+                const actions = apiKeyPermissionActionsForMethod(c.req.method, pathname);
                 if (!hasAnyApiKeyPermission(scopes, resource, actions)) {
                     return c.json({ error: "Forbidden: missing required permission" }, 403);
                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voyant-travel/hono",
-  "version": "0.118.1",
+  "version": "0.118.3",
   "license": "Apache-2.0",
   "type": "module",
   "exports": {
@@ -138,16 +138,16 @@
     "@voyant-travel/core": "^0.111.0",
     "@voyant-travel/db": "^0.109.4",
     "@voyant-travel/storage": "^0.106.0",
-    "@voyant-travel/types": "^0.106.0",
-    "@voyant-travel/utils": "^0.105.4",
-    "@voyant-travel/workflows": "^0.111.10"
+    "@voyant-travel/types": "^0.106.1",
+    "@voyant-travel/utils": "^0.105.5",
+    "@voyant-travel/workflows": "^0.111.12"
   },
   "devDependencies": {
     "@cloudflare/workers-types": "^4.20260628.1",
     "typescript": "^6.0.3",
     "vitest": "^4.1.9",
     "@voyant-travel/voyant-typescript-config": "^0.1.0",
-    "@voyant-travel/workflows-orchestrator": "^0.111.10"
+    "@voyant-travel/workflows-orchestrator": "^0.111.12"
   },
   "files": [
     "dist"