@voyant-travel/hono 0.121.2 → 0.122.0

package/dist/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAQhC,OAAO,EAAE,KAAK,gBAAgB,EAA0C,MAAM,kBAAkB,CAAA;AA+BhG,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAY,eAAe,EAAE,MAAM,YAAY,CAAA;AAI5F,4EAA4E;AAC5E,KAAK,QAAQ,CAAC,SAAS,SAAS,cAAc,IAAI;IAChD,QAAQ,EAAE,SAAS,CAAA;IACnB,SAAS,EAAE,eAAe,CAAA;CAC3B,CAAA;AAuBD;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,gBAAgB,CAAA;CACvB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAA;IAEd,IAAI,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;CAC/D;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,mBAAmB,CAAC,SAAS,GAAG,OAAO;IACtD;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C;;;;;;;;OAQG;IACH,QAAQ,EAAE,OAAO,qBAAqB,EAAE,QAAQ,CAAA;IAChD;;;;;OAKG;IACH,UAAU,EAAE,SAAS,EAAE,CAAA;IACvB;;;;;;OAMG;IACH,YAAY,EAAE,WAAW,EAAE,CAAA;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,SAAS,SAAS,cAAc,EACvD,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,GACjC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CA4gB5D"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAQhC,OAAO,EAAE,KAAK,gBAAgB,EAA0C,MAAM,kBAAkB,CAAA;AAqChG,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAY,eAAe,EAAE,MAAM,YAAY,CAAA;AAI5F,4EAA4E;AAC5E,KAAK,QAAQ,CAAC,SAAS,SAAS,cAAc,IAAI;IAChD,QAAQ,EAAE,SAAS,CAAA;IACnB,SAAS,EAAE,eAAe,CAAA;CAC3B,CAAA;AA0BD;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,gBAAgB,CAAA;CACvB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAA;IAEd,IAAI,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;CAC/D;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,mBAAmB,CAAC,SAAS,GAAG,OAAO;IACtD;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C;;;;;;;;OAQG;IACH,QAAQ,EAAE,OAAO,qBAAqB,EAAE,QAAQ,CAAA;IAChD;;;;;OAKG;IACH,UAAU,EAAE,SAAS,EAAE,CAAA;IACvB;;;;;;OAMG;IACH,YAAY,EAAE,WAAW,EAAE,CAAA;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,SAAS,SAAS,cAAc,EACvD,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,GACjC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAqrB5D"}

package/dist/app.js

@@ -25,7 +25,7 @@ import { securityHeaders } from "./middleware/security-headers.js";
 import { resolveSurfaceMountPath } from "./mount-paths.js";
 import { noopReporter, safeCaptureException } from "./observability/reporter.js";
 import { getRequestId } from "./observability/request-context.js";
-import { expandHonoPlugins } from "./plugin.js";
+import { expandHonoBundles, isLazyHonoBundle, } from "./plugin.js";
 const WRITE_METHODS = new Set(["POST", "PUT", "PATCH", "DELETE"]);
 function resolveConfiguredRateLimitStore(config, env) {
     if (!config?.store)
@@ -59,8 +59,23 @@ export function mountApp(config) {
     const reporter = config.reporter ?? noopReporter;
     const appName = config.appName ?? "voyant";
     app.onError((err, c) => handleApiError(err, c, { reporter, appName }));
-    // Expand plugins into their constituent modules/extensions before mounting
-    const expanded = config.plugins ? expandHonoPlugins(config.plugins) : null;
+    const pluginInputs = config.plugins ?? [];
+    const eagerPlugins = [];
+    const lazyPlugins = [];
+    const pluginNames = new Set();
+    for (const plugin of pluginInputs) {
+        if (pluginNames.has(plugin.name)) {
+            throw new Error(`Duplicate bundle name: "${plugin.name}"`);
+        }
+        pluginNames.add(plugin.name);
+        if (isLazyHonoBundle(plugin))
+            lazyPlugins.push(plugin);
+        else
+            eagerPlugins.push(plugin);
+    }
+    // Expand eager plugins into their constituent modules/extensions before
+    // mounting. Lazy plugins keep only their static metadata in the eager closure.
+    const expanded = eagerPlugins.length > 0 ? expandHonoBundles(eagerPlugins) : null;
     const allModules = [...(config.modules ?? []), ...(expanded?.modules ?? [])];
     const allExtensions = [...(config.extensions ?? []), ...(expanded?.extensions ?? [])];
     // Anonymous-access allow-list (ADR-0008): assembled from module/extension
@@ -71,6 +86,7 @@ export function mountApp(config) {
     const anonymousPaths = assembleAnonymousPaths(allModules, allExtensions, [
         ...(config.publicPaths ?? []),
         ...(expanded?.anonymousPaths ?? []),
+        ...lazyPlugins.flatMap((plugin) => plugin.anonymous ?? []),
     ]);
     // When the framework owns the bus, route subscriber-dispatch failures
     // (including the workflow forwarder) to the reporter — they're otherwise
@@ -109,22 +125,25 @@ export function mountApp(config) {
     // runtime is fail-closed).
     const collectedWorkflows = [];
     const collectedFilters = [];
-    for (const mod of allModules) {
-        if (mod.module.workflows)
-            collectedWorkflows.push(...mod.module.workflows);
-        if (mod.module.eventFilters)
-            collectedFilters.push(...mod.module.eventFilters);
+    function collectModuleRuntimeDescriptors(modules) {
+        for (const mod of modules) {
+            if (mod.module.workflows)
+                collectedWorkflows.push(...mod.module.workflows);
+            if (mod.module.eventFilters)
+                collectedFilters.push(...mod.module.eventFilters);
+        }
     }
-    for (const plugin of config.plugins ?? []) {
-        if (plugin.workflows)
-            collectedWorkflows.push(...plugin.workflows);
-        if (plugin.eventFilters)
-            collectedFilters.push(...plugin.eventFilters);
+    function collectPluginRuntimeDescriptors(plugins) {
+        for (const plugin of plugins) {
+            if (plugin.workflows)
+                collectedWorkflows.push(...plugin.workflows);
+            if (plugin.eventFilters)
+                collectedFilters.push(...plugin.eventFilters);
+        }
     }
-    // Validate duplicate workflow ids across modules + plugins. Same id from
-    // re-imports (HMR / shared bundles) is fine because identity is by id —
-    // we only flag genuinely-different definitions sharing an id.
-    if (config.workflows && collectedWorkflows.length > 0) {
+    function assertUniqueWorkflowIds() {
+        if (!config.workflows || collectedWorkflows.length === 0)
+            return;
         const seen = new Map();
         for (const wf of collectedWorkflows) {
             const existing = seen.get(wf.id);
@@ -136,6 +155,122 @@ export function mountApp(config) {
             seen.set(wf.id, wf);
         }
     }
+    collectModuleRuntimeDescriptors(allModules);
+    collectPluginRuntimeDescriptors(eagerPlugins);
+    assertUniqueWorkflowIds();
+    const txModuleNames = new Set();
+    const txRequiringModules = [];
+    const txPrefixes = [...(config.dbTransactionalPaths ?? [])];
+    function addTransactionalModuleName(name) {
+        if (txModuleNames.has(name))
+            return;
+        txModuleNames.add(name);
+        txRequiringModules.push(name);
+        // `/v1/public/<name>` is added unconditionally (not only when the module
+        // mounts publicRoutes): other modules mounted at the public root can serve
+        // paths under a flagged module's segment.
+        txPrefixes.push(`/v1/admin/${name}`, `/v1/${name}`, `/v1/public/${name}`);
+    }
+    function addTransactionalSurfaces(modules, extensions) {
+        for (const mod of modules) {
+            if (mod.module.requiresTransactionalDb)
+                addTransactionalModuleName(mod.module.name);
+        }
+        for (const ext of extensions) {
+            if (ext.extension.requiresTransactionalDb)
+                addTransactionalModuleName(ext.extension.module);
+        }
+        for (const mod of modules) {
+            if (txModuleNames.has(mod.module.name) && mod.publicRoutes) {
+                txPrefixes.push(resolveSurfaceMountPath("/v1/public", mod.publicPath, mod.module.name));
+            }
+            if (mod.transactionalPaths)
+                txPrefixes.push(...mod.transactionalPaths);
+        }
+        for (const ext of extensions) {
+            if (txModuleNames.has(ext.extension.module) && ext.publicRoutes) {
+                txPrefixes.push(resolveSurfaceMountPath("/v1/public", ext.publicPath, ext.extension.module));
+            }
+            if (ext.transactionalPaths)
+                txPrefixes.push(...ext.transactionalPaths);
+        }
+    }
+    addTransactionalSurfaces(allModules, allExtensions);
+    for (const plugin of lazyPlugins) {
+        for (const moduleName of plugin.transactionalModules ?? []) {
+            addTransactionalModuleName(moduleName);
+        }
+        if (plugin.transactionalPaths)
+            txPrefixes.push(...plugin.transactionalPaths);
+    }
+    const loadedLazyBundles = new Map();
+    const lazyBundlePromises = new Map();
+    let lazyPluginExpansionPromise;
+    const expandedLazyBundleNames = new Set();
+    function loadLazyBundle(plugin) {
+        const cached = loadedLazyBundles.get(plugin.name);
+        if (cached)
+            return Promise.resolve(cached);
+        const pending = lazyBundlePromises.get(plugin.name);
+        if (pending)
+            return pending;
+        const promise = plugin
+            .load()
+            .then((bundle) => {
+            if (bundle.name !== plugin.name) {
+                throw new Error(`Lazy bundle "${plugin.name}" loaded bundle "${bundle.name}". ` +
+                    "The metadata name must match the loaded bundle name.");
+            }
+            loadedLazyBundles.set(plugin.name, bundle);
+            return bundle;
+        })
+            .catch((error) => {
+            lazyBundlePromises.delete(plugin.name);
+            throw error;
+        });
+        lazyBundlePromises.set(plugin.name, promise);
+        return promise;
+    }
+    function applyLazyBundleContributions(bundles) {
+        const pending = bundles.filter((bundle) => !expandedLazyBundleNames.has(bundle.name));
+        if (pending.length === 0)
+            return;
+        const lazyExpanded = expandHonoBundles(pending);
+        for (const bundle of pending)
+            expandedLazyBundleNames.add(bundle.name);
+        allModules.push(...lazyExpanded.modules);
+        allExtensions.push(...lazyExpanded.extensions);
+        anonymousPaths.push(...assembleAnonymousPaths(lazyExpanded.modules, lazyExpanded.extensions, [
+            ...lazyExpanded.anonymousPaths,
+        ]));
+        for (const mod of lazyExpanded.modules) {
+            if (mod.module.service !== undefined) {
+                container.register(mod.module.name, mod.module.service);
+            }
+        }
+        for (const sub of lazyExpanded.subscribers) {
+            eventBus.subscribe(sub.event, sub.handler, { inline: sub.inline ?? false });
+        }
+        collectModuleRuntimeDescriptors(lazyExpanded.modules);
+        collectPluginRuntimeDescriptors(pending);
+        addTransactionalSurfaces(lazyExpanded.modules, lazyExpanded.extensions);
+    }
+    async function ensureBootstrapLazyPluginsExpanded() {
+        const bootstrapLazyPlugins = lazyPlugins.filter((plugin) => plugin.loadOnBootstrap);
+        if (bootstrapLazyPlugins.length === 0)
+            return;
+        if (!lazyPluginExpansionPromise) {
+            lazyPluginExpansionPromise = Promise.all(bootstrapLazyPlugins.map(loadLazyBundle))
+                .then((bundles) => {
+                applyLazyBundleContributions(bundles);
+            })
+                .catch((error) => {
+                lazyPluginExpansionPromise = undefined;
+                throw error;
+            });
+        }
+        await lazyPluginExpansionPromise;
+    }
     // Workflow driver construction is **deferred** to the lazy bootstrap
     // path so callers whose driver options come from `env.*` bindings can
     // pass a function-of-bindings shape. Node / InMemory users usually
@@ -146,6 +281,8 @@ export function mountApp(config) {
         if (!bootstrapPromise) {
             bootstrapPromise = (async () => {
                 const ctx = { bindings, container, eventBus };
+                await ensureBootstrapLazyPluginsExpanded();
+                assertUniqueWorkflowIds();
                 // ---- Workflow runtime FIRST — fail-closed manifest registration
                 //      and EventBus forwarder must be in place before any module
                 //      bootstrap can emit. Otherwise a `module.bootstrap` that
@@ -196,7 +333,12 @@ export function mountApp(config) {
                         });
                     }
                 };
-                for (const plugin of config.plugins ?? []) {
+                for (const plugin of [
+                    ...eagerPlugins,
+                    ...lazyPlugins
+                        .filter((p) => p.loadOnBootstrap)
+                        .map((p) => loadedLazyBundles.get(p.name)),
+                ]) {
                     await runIsolated(`plugin:${plugin.name}`, plugin.bootstrap);
                 }
                 for (const mod of allModules) {
@@ -322,48 +464,6 @@ export function mountApp(config) {
     if (authHandler) {
         mountAuthForwarding(app, authHandler, { reporter, appName });
     }
-    // Transactional surface map: a request must be served by a
-    // transaction-capable db client when its path belongs to (a) a module
-    // declaring `requiresTransactionalDb`, (b) a module targeted by an
-    // extension that declares it (extensions mount under the target
-    // module's prefix — e.g. catalog-authoring's compose routes live under
-    // /v1/admin/products), or (c) a template-supplied extra path
-    // (`dbTransactionalPaths` — for additionalRoutes / adapter-wired flows
-    // like the catalog booking engine whose transactionality depends on
-    // starter wiring).
-    const txModuleNames = new Set(allModules.filter((m) => m.module.requiresTransactionalDb).map((m) => m.module.name));
-    for (const ext of allExtensions) {
-        if (ext.extension.requiresTransactionalDb)
-            txModuleNames.add(ext.extension.module);
-    }
-    const txRequiringModules = [...txModuleNames];
-    const txPrefixes = [...(config.dbTransactionalPaths ?? [])];
-    for (const name of txModuleNames) {
-        // `/v1/public/<name>` is added unconditionally (not only when the
-        // module mounts publicRoutes): other modules mounted at the public
-        // root can serve paths under a flagged module's segment — e.g.
-        // storefront (publicPath "/") handles
-        // /v1/public/bookings/sessions/bootstrap, which reaches
-        // bookings' transactional reserve flow.
-        txPrefixes.push(`/v1/admin/${name}`, `/v1/${name}`, `/v1/public/${name}`);
-    }
-    for (const mod of allModules) {
-        if (txModuleNames.has(mod.module.name) && mod.publicRoutes) {
-            txPrefixes.push(resolveSurfaceMountPath("/v1/public", mod.publicPath, mod.module.name));
-        }
-        // Absolute transactional prefixes for routes mounted outside the name-based
-        // surface (e.g. a lazy family at `/v1/admin/catalog/quote`), so the
-        // deployment doesn't hand-maintain them in `dbTransactionalPaths` (ADR-0008).
-        if (mod.transactionalPaths)
-            txPrefixes.push(...mod.transactionalPaths);
-    }
-    for (const ext of allExtensions) {
-        if (txModuleNames.has(ext.extension.module) && ext.publicRoutes) {
-            txPrefixes.push(resolveSurfaceMountPath("/v1/public", ext.publicPath, ext.extension.module));
-        }
-        if (ext.transactionalPaths)
-            txPrefixes.push(...ext.transactionalPaths);
-    }
     // With a `dbTransactional` factory, requests are routed per surface:
     // transactional prefixes get it, everything else gets the cheap
     // default (typically neon-http — no per-request connection handshake).
@@ -432,6 +532,61 @@ export function mountApp(config) {
             mountLazyRoutePaths(app, paths, load);
         });
     }
+    function mountModuleRoutesInto(target, mod) {
+        const moduleName = mod.module.name;
+        const adminPrefix = `/v1/admin/${moduleName}`;
+        const publicPrefix = resolveSurfaceMountPath("/v1/public", mod.publicPath, moduleName);
+        if (mod.adminRoutes) {
+            target.route(adminPrefix, mod.adminRoutes);
+        }
+        if (mod.publicRoutes) {
+            target.route(publicPrefix, mod.publicRoutes);
+        }
+        if (mod.lazyAdminRoutes) {
+            mountLazyRoutesAt(target, adminPrefix, mod.lazyAdminRoutes);
+        }
+        if (mod.lazyPublicRoutes) {
+            mountLazyRoutesAt(target, publicPrefix, mod.lazyPublicRoutes);
+        }
+        if (mod.lazyRoutes) {
+            mountLazyRoutePaths(target, mod.lazyRoutes.paths, mod.lazyRoutes.load);
+        }
+        if (mod.webhookRoutes) {
+            target.route(`/v1/${moduleName}`, mod.webhookRoutes);
+        }
+    }
+    function mountExtensionRoutesInto(target, ext) {
+        const moduleName = ext.extension.module;
+        const adminPrefix = `/v1/admin/${moduleName}`;
+        const publicPrefix = resolveSurfaceMountPath("/v1/public", ext.publicPath, moduleName);
+        if (ext.adminRoutes) {
+            target.route(adminPrefix, ext.adminRoutes);
+        }
+        if (ext.publicRoutes) {
+            target.route(publicPrefix, ext.publicRoutes);
+        }
+        if (ext.lazyAdminRoutes) {
+            mountLazyRoutesAt(target, adminPrefix, ext.lazyAdminRoutes);
+        }
+        if (ext.lazyPublicRoutes) {
+            mountLazyRoutesAt(target, publicPrefix, ext.lazyPublicRoutes);
+        }
+        if (ext.lazyRoutes) {
+            mountLazyRoutePaths(target, ext.lazyRoutes.paths, ext.lazyRoutes.load);
+        }
+        if (ext.webhookRoutes) {
+            target.route(`/v1/${moduleName}`, ext.webhookRoutes);
+        }
+    }
+    function buildBundleRouteApp(bundle) {
+        const pluginRoutes = new OpenAPIHono();
+        const bundleExpanded = expandHonoBundles([bundle]);
+        for (const mod of bundleExpanded.modules)
+            mountModuleRoutesInto(pluginRoutes, mod);
+        for (const ext of bundleExpanded.extensions)
+            mountExtensionRoutesInto(pluginRoutes, ext);
+        return pluginRoutes;
+    }
     // Mount module routes
     for (const mod of allModules) {
         const moduleName = mod.module.name;
@@ -488,6 +643,15 @@ export function mountApp(config) {
             app.route(`/v1/${moduleName}`, ext.webhookRoutes);
         }
     }
+    for (const plugin of lazyPlugins) {
+        if (!plugin.routes || plugin.routes.length === 0)
+            continue;
+        deferLazyRoutePaths(`plugin:${plugin.name}`, plugin.routes, async () => {
+            const bundle = await loadLazyBundle(plugin);
+            applyLazyBundleContributions([bundle]);
+            return buildBundleRouteApp(bundle);
+        });
+    }
     for (const mountLazyRoutes of deferredLazyRouteMounts) {
         mountLazyRoutes();
     }

package/dist/index.d.ts

@@ -6,15 +6,17 @@ export { constantTimeEqual, extractBearerToken, generateNumericCode, randomBytes
 export { type CreateAppConfig, createApp } from "./create-app.js";
 export type { AuthenticatedR2DocumentDownloadResolver, AuthenticatedR2DocumentDownloadResolverOptions, DocumentDownloadEnvelope, DocumentDownloadResolution, DocumentDownloadResolver, DocumentDownloadResolverResult, StoredDocumentReference, } from "./document-download.js";
 export { createAuthenticatedR2DocumentDownloadResolver, encodeStorageKeyPath, resolveStoredDocumentDownload, } from "./document-download.js";
+export { type AsyncMethodProvider, lazyProvider } from "./lazy-provider.js";
 export { createLazyRouteHandler, type LazyHonoRoutes, type LazyRoutesLoader, mountLazyRoutePaths, mountLazyRoutesAt, } from "./lazy-routes.js";
 export { createPathDbSelector, type PathDbSelectorOptions } from "./lib/db-selector.js";
-export { clientIpKey, consoleLoggerProvider, cors, DEFAULT_IDEMPOTENCY_TTL_MS, db, enforceRateLimit, errorBoundary, handleApiError, type IdempotencyKeyOptions, idempotencyKey, isStaffRbacEnforced, LIVE_LIMITS, logger, purgeExpiredIdempotencyKeys, rateLimit, requestId, requireActor, requireAuth, requirePermission, } from "./middleware/index.js";
+export type { RateLimitStore } from "./middleware/index.js";
+export { clientIpKey, consoleLoggerProvider, cors, createMemoryRateLimitStore, createRedisRateLimitStore, DEFAULT_IDEMPOTENCY_TTL_MS, db, enforceRateLimit, errorBoundary, handleApiError, type IdempotencyKeyOptions, idempotencyKey, isStaffRbacEnforced, LIVE_LIMITS, logger, purgeExpiredIdempotencyKeys, rateLimit, requestId, requireActor, requireAuth, requirePermission, } from "./middleware/index.js";
 export type { HonoExtension, HonoModule } from "./module.js";
 export type { ErrorEvent, Reporter } from "./observability/index.js";
 export { consoleReporter, getRequestId, noopReporter, runWithRequestId, safeCaptureException, } from "./observability/index.js";
 export { openApiValidationHook } from "./openapi-validation.js";
-export type { ExpandedHonoBundles, ExpandedHonoPlugins, HonoBundle, HonoPlugin, } from "./plugin.js";
-export { defineHonoBundle, defineHonoPlugin, expandHonoBundles, expandHonoPlugins, } from "./plugin.js";
+export type { ExpandedHonoBundles, ExpandedHonoPlugins, HonoBundle, HonoBundleInput, HonoPlugin, LazyHonoBundle, } from "./plugin.js";
+export { defineHonoBundle, defineHonoPlugin, defineLazyHonoBundle, expandHonoBundles, expandHonoPlugins, isLazyHonoBundle, } from "./plugin.js";
 export type { CreatePublicCapabilityOptions, PublicCapabilityCookieOptions, PublicCapabilityPayload, VerifyPublicCapabilityOptions, } from "./public-capability.js";
 export { createPublicCapabilityToken, extractPublicCapabilityToken, serializePublicCapabilityCookie, verifyPublicCapabilityToken, } from "./public-capability.js";
 export { type CreatePublicDocumentDeliveryInput, createDrizzlePublicDocumentDeliveryGrantStore, createPublicDocumentDeliveryGrant, createPublicDocumentDeliveryHonoModule, createPublicDocumentDeliveryRoutes, type PublicDocumentDeliveryAccessContext, type PublicDocumentDeliveryEnvelope, type PublicDocumentDeliveryGrant, type PublicDocumentDeliveryGrantStore, type PublicDocumentDeliveryResolution, type PublicDocumentDeliveryRouteOptions, type PublicDocumentDeliverySource, type RevokePublicDocumentDeliveryGrantInput, resolvePublicDocumentDeliveryGrant, revokePublicDocumentDeliveryGrant, } from "./public-document-delivery.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AACnC,YAAY,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,eAAe,EACf,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AACjE,YAAY,EACV,uCAAuC,EACvC,8CAA8C,EAC9C,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,EACxB,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,6CAA6C,EAC7C,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,sBAAsB,EACtB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,oBAAoB,EAAE,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AACvF,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,IAAI,EACJ,0BAA0B,EAC1B,EAAE,EACF,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,KAAK,qBAAqB,EAC1B,cAAc,EACd,mBAAmB,EACnB,WAAW,EACX,MAAM,EACN,2BAA2B,EAC3B,SAAS,EACT,SAAS,EACT,YAAY,EACZ,WAAW,EACX,iBAAiB,GAClB,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC5D,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACpE,OAAO,EACL,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,UAAU,EACV,UAAU,GACX,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,6BAA6B,EAC7B,6BAA6B,EAC7B,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,+BAA+B,EAC/B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,KAAK,iCAAiC,EACtC,6CAA6C,EAC7C,iCAAiC,EACjC,sCAAsC,EACtC,kCAAkC,EAClC,KAAK,mCAAmC,EACxC,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,EACrC,KAAK,gCAAgC,EACrC,KAAK,kCAAkC,EACvC,KAAK,4BAA4B,EACjC,KAAK,sCAAsC,EAC3C,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,+BAA+B,CAAA;AACtC,YAAY,EACV,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,kBAAkB,EAClB,QAAQ,EACR,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,EACd,QAAQ,EACR,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,GAChB,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,wBAAwB,EACxB,aAAa,EACb,qBAAqB,EACrB,UAAU,EACV,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,iBAAiB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AACnC,YAAY,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,eAAe,EACf,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AACjE,YAAY,EACV,uCAAuC,EACvC,8CAA8C,EAC9C,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,EACxB,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,6CAA6C,EAC7C,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,KAAK,mBAAmB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAC3E,OAAO,EACL,sBAAsB,EACtB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,oBAAoB,EAAE,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AACvF,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,IAAI,EACJ,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,EAAE,EACF,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,KAAK,qBAAqB,EAC1B,cAAc,EACd,mBAAmB,EACnB,WAAW,EACX,MAAM,EACN,2BAA2B,EAC3B,SAAS,EACT,SAAS,EACT,YAAY,EACZ,WAAW,EACX,iBAAiB,GAClB,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC5D,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACpE,OAAO,EACL,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,UAAU,EACV,eAAe,EACf,UAAU,EACV,cAAc,GACf,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,6BAA6B,EAC7B,6BAA6B,EAC7B,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,+BAA+B,EAC/B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,KAAK,iCAAiC,EACtC,6CAA6C,EAC7C,iCAAiC,EACjC,sCAAsC,EACtC,kCAAkC,EAClC,KAAK,mCAAmC,EACxC,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,EACrC,KAAK,gCAAgC,EACrC,KAAK,kCAAkC,EACvC,KAAK,4BAA4B,EACjC,KAAK,sCAAsC,EAC3C,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,+BAA+B,CAAA;AACtC,YAAY,EACV,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,kBAAkB,EAClB,QAAQ,EACR,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,EACd,QAAQ,EACR,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,GAChB,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,wBAAwB,EACxB,aAAa,EACb,qBAAqB,EACrB,UAAU,EACV,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,iBAAiB,CAAA"}

package/dist/index.js

@@ -3,12 +3,13 @@ export { mountApp } from "./app.js";
 export { constantTimeEqual, extractBearerToken, generateNumericCode, randomBytesHex, requireUserId, sha256Base64Url, sha256Hex, unsignCookie, verifySession, } from "./auth/index.js";
 export { createApp } from "./create-app.js";
 export { createAuthenticatedR2DocumentDownloadResolver, encodeStorageKeyPath, resolveStoredDocumentDownload, } from "./document-download.js";
+export { lazyProvider } from "./lazy-provider.js";
 export { createLazyRouteHandler, mountLazyRoutePaths, mountLazyRoutesAt, } from "./lazy-routes.js";
 export { createPathDbSelector } from "./lib/db-selector.js";
-export { clientIpKey, consoleLoggerProvider, cors, DEFAULT_IDEMPOTENCY_TTL_MS, db, enforceRateLimit, errorBoundary, handleApiError, idempotencyKey, isStaffRbacEnforced, LIVE_LIMITS, logger, purgeExpiredIdempotencyKeys, rateLimit, requestId, requireActor, requireAuth, requirePermission, } from "./middleware/index.js";
+export { clientIpKey, consoleLoggerProvider, cors, createMemoryRateLimitStore, createRedisRateLimitStore, DEFAULT_IDEMPOTENCY_TTL_MS, db, enforceRateLimit, errorBoundary, handleApiError, idempotencyKey, isStaffRbacEnforced, LIVE_LIMITS, logger, purgeExpiredIdempotencyKeys, rateLimit, requestId, requireActor, requireAuth, requirePermission, } from "./middleware/index.js";
 export { consoleReporter, getRequestId, noopReporter, runWithRequestId, safeCaptureException, } from "./observability/index.js";
 export { openApiValidationHook } from "./openapi-validation.js";
-export { defineHonoBundle, defineHonoPlugin, expandHonoBundles, expandHonoPlugins, } from "./plugin.js";
+export { defineHonoBundle, defineHonoPlugin, defineLazyHonoBundle, expandHonoBundles, expandHonoPlugins, isLazyHonoBundle, } from "./plugin.js";
 export { createPublicCapabilityToken, extractPublicCapabilityToken, serializePublicCapabilityCookie, verifyPublicCapabilityToken, } from "./public-capability.js";
 export { createDrizzlePublicDocumentDeliveryGrantStore, createPublicDocumentDeliveryGrant, createPublicDocumentDeliveryHonoModule, createPublicDocumentDeliveryRoutes, resolvePublicDocumentDeliveryGrant, revokePublicDocumentDeliveryGrant, } from "./public-document-delivery.js";
 export { ApiHttpError, ForbiddenApiError, normalizeValidationError, parseJsonBody, parseOptionalJsonBody, parseQuery, RequestValidationError, UnauthorizedApiError, } from "./validation.js";

package/dist/lazy-provider.d.ts

@@ -0,0 +1,18 @@
+type AnyAsyncFunction = (...args: any[]) => Promise<unknown>;
+export type AsyncMethodProvider<T extends object> = {
+    [K in keyof T]: T[K] extends (...args: infer Args) => infer Result ? (...args: Args) => Promise<Awaited<Result>> : never;
+};
+/**
+ * Build a memoized proxy for a provider/service value that is expensive to
+ * import eagerly. Method calls and direct function calls resolve the target on
+ * first use, cache it for the isolate/process, and retry after a failed load.
+ *
+ * This helper is only for async provider seams. Object providers must expose
+ * async methods only; plain properties and sync-returning methods are outside
+ * the contract because a proxy cannot distinguish `service.flag` from
+ * `service.method` until call time.
+ */
+export declare function lazyProvider<T extends AnyAsyncFunction>(load: () => Promise<T>): T;
+export declare function lazyProvider<T extends object>(load: () => Promise<AsyncMethodProvider<T>>): AsyncMethodProvider<T>;
+export {};
+//# sourceMappingURL=lazy-provider.d.ts.map

package/dist/lazy-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lazy-provider.d.ts","sourceRoot":"","sources":["../src/lazy-provider.ts"],"names":[],"mappings":"AACA,KAAK,gBAAgB,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAE5D,MAAM,MAAM,mBAAmB,CAAC,CAAC,SAAS,MAAM,IAAI;KACjD,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,MAAM,IAAI,KAAK,MAAM,MAAM,GAC9D,CAAC,GAAG,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAC3C,KAAK;CACV,CAAA;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,gBAAgB,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;AACnF,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAC3C,IAAI,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,GAC1C,mBAAmB,CAAC,CAAC,CAAC,CAAA"}

package/dist/lazy-provider.js

@@ -0,0 +1,45 @@
+export function lazyProvider(load) {
+    let targetPromise;
+    function resolveTarget() {
+        if (!targetPromise) {
+            targetPromise = load().catch((error) => {
+                targetPromise = undefined;
+                throw error;
+            });
+        }
+        return targetPromise;
+    }
+    const callable = async (...args) => {
+        const target = await resolveTarget();
+        if (typeof target !== "function") {
+            throw new TypeError("Lazy provider target is not callable");
+        }
+        return target(...args);
+    };
+    return new Proxy(callable, {
+        apply: (_target, thisArg, args) => resolveTarget().then((target) => {
+            if (typeof target !== "function") {
+                throw new TypeError("Lazy provider target is not callable");
+            }
+            return Reflect.apply(target, thisArg, args);
+        }),
+        get: (_target, prop) => {
+            if (prop === "then")
+                return undefined;
+            if (prop === "toString")
+                return () => "[lazy provider]";
+            if (prop === Symbol.toStringTag)
+                return "LazyProvider";
+            return async (...args) => {
+                const target = await resolveTarget();
+                const value = Reflect.get(target, prop, target);
+                if (typeof value !== "function") {
+                    if (args.length === 0)
+                        return value;
+                    throw new TypeError(`Lazy provider property "${String(prop)}" is not callable`);
+                }
+                return Reflect.apply(value, target, args);
+            };
+        },
+    });
+}

package/dist/lib/db-selector.js

@@ -7,7 +7,6 @@
  * (`acquireRequestDb`) works across middlewares.
  */
 export function createPathDbSelector(options) {
-    const prefixes = [...new Set(options.transactionalPrefixes)];
     const transactional = {
         factory: options.transactionalFactory,
         mustSupportTransactions: true,
@@ -18,6 +17,7 @@ export function createPathDbSelector(options) {
     };
     return {
         select(path) {
+            const prefixes = [...new Set(options.transactionalPrefixes)];
             for (const prefix of prefixes) {
                 if (path === prefix || path.startsWith(`${prefix}/`))
                     return transactional;

package/dist/middleware/index.d.ts

@@ -7,7 +7,7 @@ export { DEFAULT_IDEMPOTENCY_TTL_MS, type IdempotencyKeyOptions, idempotencyKey,
 export { consoleLoggerProvider, logger } from "./logger.js";
 export { type AnalyticsEngineDatasetLike, DB_METRICS_CONTEXT_KEY, type MetricsMiddlewareOptions, metrics, type RequestDbMetrics, withQueryCounting, } from "./metrics.js";
 export { type PublicCacheOptions, publicResponseCache, resetPublicCacheStateForTests, } from "./public-cache.js";
-export { type CloudflareRateLimiterBinding, clientIpKey, createCloudflareRateLimitStore, createKvRateLimitStore, createMemoryRateLimitStore, enforceRateLimit, LIVE_LIMITS, type RateLimitConfig, type RateLimitPolicy, type RateLimitRequestContext, type RateLimitResult, type RateLimitRule, type RateLimitStore, rateLimit, resolveRateLimitStore, } from "./rate-limit.js";
+export { type CloudflareRateLimiterBinding, clientIpKey, createCloudflareRateLimitStore, createKvRateLimitStore, createMemoryRateLimitStore, createRedisRateLimitStore, enforceRateLimit, LIVE_LIMITS, type RateLimitConfig, type RateLimitPolicy, type RateLimitRequestContext, type RateLimitResult, type RateLimitRule, type RateLimitStore, type RedisRateLimitStoreOptions, rateLimit, resolveRateLimitStore, } from "./rate-limit.js";
 export { isStaffRbacEnforced, requireActor } from "./require-actor.js";
 export { requirePermission } from "./require-permission.js";
 export { type SecurityHeadersOptions, securityHeaders } from "./security-headers.js";

package/dist/middleware/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EACL,gCAAgC,EAChC,KAAK,uBAAuB,EAC5B,gBAAgB,GACjB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAA;AAC5B,OAAO,EACL,aAAa,EACb,KAAK,qBAAqB,EAC1B,cAAc,EACd,SAAS,GACV,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,0BAA0B,EAC1B,KAAK,qBAAqB,EAC1B,cAAc,EACd,2BAA2B,GAC5B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,EACL,KAAK,0BAA0B,EAC/B,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,OAAO,EACP,KAAK,gBAAgB,EACrB,iBAAiB,GAClB,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,KAAK,kBAAkB,EACvB,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,KAAK,4BAA4B,EACjC,WAAW,EACX,8BAA8B,EAC9B,sBAAsB,EACtB,0BAA0B,EAC1B,gBAAgB,EAChB,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,SAAS,EACT,qBAAqB,GACtB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,KAAK,sBAAsB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EACL,gCAAgC,EAChC,KAAK,uBAAuB,EAC5B,gBAAgB,GACjB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAA;AAC5B,OAAO,EACL,aAAa,EACb,KAAK,qBAAqB,EAC1B,cAAc,EACd,SAAS,GACV,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,0BAA0B,EAC1B,KAAK,qBAAqB,EAC1B,cAAc,EACd,2BAA2B,GAC5B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,EACL,KAAK,0BAA0B,EAC/B,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,OAAO,EACP,KAAK,gBAAgB,EACrB,iBAAiB,GAClB,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,KAAK,kBAAkB,EACvB,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,KAAK,4BAA4B,EACjC,WAAW,EACX,8BAA8B,EAC9B,sBAAsB,EACtB,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,EAChB,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAC/B,SAAS,EACT,qBAAqB,GACtB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,KAAK,sBAAsB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA"}

package/dist/middleware/index.js

@@ -7,7 +7,7 @@ export { DEFAULT_IDEMPOTENCY_TTL_MS, idempotencyKey, purgeExpiredIdempotencyKeys
 export { consoleLoggerProvider, logger } from "./logger.js";
 export { DB_METRICS_CONTEXT_KEY, metrics, withQueryCounting, } from "./metrics.js";
 export { publicResponseCache, resetPublicCacheStateForTests, } from "./public-cache.js";
-export { clientIpKey, createCloudflareRateLimitStore, createKvRateLimitStore, createMemoryRateLimitStore, enforceRateLimit, LIVE_LIMITS, rateLimit, resolveRateLimitStore, } from "./rate-limit.js";
+export { clientIpKey, createCloudflareRateLimitStore, createKvRateLimitStore, createMemoryRateLimitStore, createRedisRateLimitStore, enforceRateLimit, LIVE_LIMITS, rateLimit, resolveRateLimitStore, } from "./rate-limit.js";
 export { isStaffRbacEnforced, requireActor } from "./require-actor.js";
 export { requirePermission } from "./require-permission.js";
 export { securityHeaders } from "./security-headers.js";

package/dist/middleware/public-cache.d.ts

@@ -34,9 +34,9 @@ export declare function resetPublicCacheStateForTests(): void;
  * and no module-graph instantiation, which is the entire point under
  * storefront load (#1686).
  *
- * Backend selection: Cache API (`caches.default`) where the runtime
- * provides it; otherwise the `env.CACHE` KV binding when present;
- * otherwise the middleware is a transparent no-op.
+ * Backend selection: the injected `env.CACHE` {@link KVStore}. Node
+ * composition decides whether that is memory, Postgres, Redis, or a tiered
+ * store; this middleware never probes a global runtime cache.
  */
 export declare function publicResponseCache<TBindings extends VoyantBindings>(options?: PublicCacheOptions): MiddlewareHandler<{
     Bindings: TBindings;

package/dist/middleware/public-cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-cache.d.ts","sourceRoot":"","sources":["../../src/middleware/public-cache.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAG7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AA6ED,6DAA6D;AAC7D,wBAAgB,6BAA6B,IAAI,IAAI,CAEpD;AA0DD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,SAAS,cAAc,EAClE,OAAO,GAAE,kBAAuB,GAC/B,iBAAiB,CAAC;IAAE,QAAQ,EAAE,SAAS,CAAA;CAAE,CAAC,CAsE5C"}
+{"version":3,"file":"public-cache.d.ts","sourceRoot":"","sources":["../../src/middleware/public-cache.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAG7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAwCD,6DAA6D;AAC7D,wBAAgB,6BAA6B,IAAI,IAAI,CAEpD;AAiDD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,SAAS,cAAc,EAClE,OAAO,GAAE,kBAAuB,GAC/B,iBAAiB,CAAC;IAAE,QAAQ,EAAE,SAAS,CAAA;CAAE,CAAC,CA4C5C"}

package/dist/middleware/public-cache.js

@@ -33,45 +33,9 @@ function parseCacheControl(value) {
     }
     return { isPublic, sMaxage };
 }
-/**
- * `caches.default` is available on regular Cloudflare Workers but
- * DISABLED inside Workers-for-Platforms namespaced scripts (access or
- * use throws). Probe once, and demote to "unavailable" on any runtime
- * failure so namespaced deployments settle on the KV fallback after a
- * single failed attempt.
- */
-let cacheApiState = "unknown";
-function getCacheApi() {
-    if (cacheApiState === "unavailable")
-        return undefined;
-    try {
-        const candidate = globalThis.caches?.default;
-        if (candidate && typeof candidate.match === "function") {
-            cacheApiState = "available";
-            return candidate;
-        }
-    }
-    catch {
-        // fall through to unavailable
-    }
-    cacheApiState = "unavailable";
-    return undefined;
-}
-function markCacheApiUnavailable() {
-    cacheApiState = "unavailable";
-}
 /** Test hook — resets the memoized Cache API probe state. */
 export function resetPublicCacheStateForTests() {
-    cacheApiState = "unknown";
-}
-function sanitizedResponseCopy(res) {
-    const headers = new Headers();
-    res.headers.forEach((value, name) => {
-        if (!isUncacheableHeader(name))
-            headers.set(name, value);
-    });
-    headers.set("x-voyant-cache", "hit");
-    return new Response(res.body, { status: res.status, headers });
+    // Retained for test/import compatibility after removing the global Cache API path.
 }
 function kvKeyFor(url) {
     return `${KV_KEY_PREFIX}${url}`;
@@ -123,9 +87,9 @@ async function kvStore(kv, url, res, ttlSeconds, maxBodyBytes) {
  * and no module-graph instantiation, which is the entire point under
  * storefront load (#1686).
  *
- * Backend selection: Cache API (`caches.default`) where the runtime
- * provides it; otherwise the `env.CACHE` KV binding when present;
- * otherwise the middleware is a transparent no-op.
+ * Backend selection: the injected `env.CACHE` {@link KVStore}. Node
+ * composition decides whether that is memory, Postgres, Redis, or a tiered
+ * store; this middleware never probes a global runtime cache.
  */
 export function publicResponseCache(options = {}) {
     const prefixes = options.pathPrefixes ?? DEFAULT_PREFIXES;
@@ -141,58 +105,27 @@ export function publicResponseCache(options = {}) {
         const requestDirective = c.req.header("cache-control")?.toLowerCase() ?? "";
         const bypass = requestDirective.includes("no-cache") || requestDirective.includes("no-store");
         const url = c.req.url;
-        const cacheApi = getCacheApi();
-        const kv = !cacheApi ? c.env.CACHE : undefined;
-        if (!bypass) {
-            if (cacheApi) {
-                try {
-                    const hit = await cacheApi.match(url);
-                    if (hit)
-                        return sanitizedResponseCopy(hit);
-                }
-                catch {
-                    markCacheApiUnavailable();
-                }
-            }
-            else if (kv) {
-                const hit = await kvMatch(kv, url);
-                if (hit)
-                    return hit;
-            }
+        const kv = c.env.CACHE;
+        if (!bypass && kv) {
+            const hit = await kvMatch(kv, url);
+            if (hit)
+                return hit;
         }
         await next();
         const res = c.res;
-        if (!res || res.status !== 200)
+        if (res?.status !== 200)
             return;
         if (res.headers.has("set-cookie"))
             return;
         const { isPublic, sMaxage } = parseCacheControl(res.headers.get("cache-control"));
         if (!isPublic || !sMaxage)
             return;
-        const backendCacheApi = getCacheApi();
-        const backendKv = !backendCacheApi ? c.env.CACHE : undefined;
-        if (!backendCacheApi && !backendKv)
+        const backendKv = c.env.CACHE;
+        if (!backendKv)
             return;
         const copy = res.clone();
         const store = (async () => {
-            if (backendCacheApi) {
-                try {
-                    const headers = new Headers();
-                    copy.headers.forEach((value, name) => {
-                        if (!isUncacheableHeader(name))
-                            headers.set(name, value);
-                    });
-                    await backendCacheApi.put(url, new Response(copy.body, { status: copy.status, headers }));
-                    return;
-                }
-                catch {
-                    markCacheApiUnavailable();
-                }
-            }
-            const fallbackKv = backendKv ?? c.env.CACHE;
-            if (fallbackKv) {
-                await kvStore(fallbackKv, url, copy, sMaxage, maxKvBodyBytes);
-            }
+            await kvStore(backendKv, url, copy, sMaxage, maxKvBodyBytes);
         })();
         const executionCtx = tryGetExecutionCtx(c);
         if (executionCtx) {

package/dist/middleware/rate-limit.d.ts

@@ -1,4 +1,5 @@
 import type { KVStore } from "@voyant-travel/utils/cache";
+import { type LazyRedisClient } from "@voyant-travel/utils/redis-client";
 import type { MiddlewareHandler } from "hono";
 /**
  * Distributed-capable rate limiting (security finding C2).
@@ -165,6 +166,10 @@ export declare function createKvRateLimitStore(kv: KVStore): RateLimitStore;
  * not expose it).
  */
 export declare function createCloudflareRateLimitStore(binding: CloudflareRateLimiterBinding): RateLimitStore;
+export interface RedisRateLimitStoreOptions {
+    client?: LazyRedisClient;
+}
+export declare function createRedisRateLimitStore(redisUrl: string, options?: RedisRateLimitStoreOptions): RateLimitStore;
 /** Test-only: re-arm the once-per-isolate missing-store warning. */
 export declare function resetRateLimitWarningsForTests(): void;
 /**

package/dist/middleware/rate-limit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/middleware/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAE7C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CAC3F;AAED,0DAA0D;AAC1D,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAA;IACd,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAA;IACX,gCAAgC;IAChC,aAAa,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,KAAK,CAAC,EAAE,cAAc,CAAA;IACtB,uEAAuE;IACvE,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,uBAAuB,KAAK,MAAM,CAAA;CACnD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,cAAc,GAAG,SAAS,CAAC,CAAA;IACvE,oEAAoE;IACpE,IAAI,CAAC,EAAE,KAAK,GAAG,aAAa,CAAA;IAC5B;;;OAGG;IACH,WAAW,CAAC,EAAE,KAAK,GAAG,aAAa,CAAA;CACpC;AAED,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,KAAK,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;CAC5D;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;KAAE,CAAA;IAC9E,GAAG,EAAE,OAAO,CAAA;IACZ,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1C;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE;IAAE,GAAG,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;KAAE,CAAA;CAAE,GAAG,MAAM,CAM5F;AAID;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,cAAc,CAyC5F;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,OAAO,GAAG,cAAc,CAmBlE;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,4BAA4B,GACpC,cAAc,CAShB;AAeD,oEAAoE;AACpE,wBAAgB,8BAA8B,IAAI,IAAI,CAErD;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,CAAC,EAAE;IAAE,GAAG,EAAE,OAAO,CAAA;CAAE,EACnB,cAAc,GAAE,cAAkC,GACjD,cAAc,CAoChB;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,gBAAgB,CACpC,CAAC,EAAE,uBAAuB,EAC1B,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CA+B1B;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,iBAAiB,CAOpE;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW;;;CAGd,CAAA"}
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/middleware/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AACzD,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,mCAAmC,CAAA;AAC/F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAE7C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CAC3F;AAED,0DAA0D;AAC1D,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAA;IACd,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAA;IACX,gCAAgC;IAChC,aAAa,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,KAAK,CAAC,EAAE,cAAc,CAAA;IACtB,uEAAuE;IACvE,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,uBAAuB,KAAK,MAAM,CAAA;CACnD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,cAAc,GAAG,SAAS,CAAC,CAAA;IACvE,oEAAoE;IACpE,IAAI,CAAC,EAAE,KAAK,GAAG,aAAa,CAAA;IAC5B;;;OAGG;IACH,WAAW,CAAC,EAAE,KAAK,GAAG,aAAa,CAAA;CACpC;AAED,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,KAAK,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;CAC5D;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;KAAE,CAAA;IAC9E,GAAG,EAAE,OAAO,CAAA;IACZ,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1C;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE;IAAE,GAAG,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;KAAE,CAAA;CAAE,GAAG,MAAM,CAM5F;AAID;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,cAAc,CAyC5F;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,OAAO,GAAG,cAAc,CAmBlE;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,4BAA4B,GACpC,cAAc,CAShB;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,eAAe,CAAA;CACzB;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,0BAA+B,GACvC,cAAc,CAoBhB;AAgBD,oEAAoE;AACpE,wBAAgB,8BAA8B,IAAI,IAAI,CAErD;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,CAAC,EAAE;IAAE,GAAG,EAAE,OAAO,CAAA;CAAE,EACnB,cAAc,GAAE,cAAkC,GACjD,cAAc,CA+ChB;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,gBAAgB,CACpC,CAAC,EAAE,uBAAuB,EAC1B,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CA+B1B;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,iBAAiB,CAOpE;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW;;;CAGd,CAAA"}

package/dist/middleware/rate-limit.js

@@ -1,3 +1,4 @@
+import { createLazyRedisClient } from "@voyant-travel/utils/redis-client";
 /**
  * Derive the client dimension for rate-limit keys: `cf-connecting-ip`
  * (set by Cloudflare, not spoofable through the edge), else the first
@@ -115,8 +116,29 @@ export function createCloudflareRateLimitStore(binding) {
         },
     };
 }
+export function createRedisRateLimitStore(redisUrl, options = {}) {
+    const lazyClient = options.client ?? createLazyRedisClient(redisUrl);
+    return {
+        async limit(key, { max, windowSeconds }) {
+            const client = await lazyClient.get();
+            const nowSeconds = Math.floor(Date.now() / 1000);
+            const windowKey = Math.floor(nowSeconds / windowSeconds);
+            const storageKey = `${key}:${windowKey}`;
+            const count = await client.incr(storageKey);
+            if (count === 1) {
+                await client.expire(storageKey, Math.max(1, windowSeconds * 2));
+            }
+            return {
+                allowed: count <= max,
+                remaining: Math.max(0, max - count),
+                retryAfterSeconds: Math.max(1, windowSeconds - (nowSeconds % windowSeconds)),
+            };
+        },
+    };
+}
 // ---- Store resolution ----
 const bindingStoreCache = new WeakMap();
+const explicitStoreCache = new WeakMap();
 const kvStoreCache = new WeakMap();
 const sharedMemoryStore = createMemoryRateLimitStore();
 let warnedNoDistributedStore = false;
@@ -148,6 +170,15 @@ export function resolveRateLimitStore(c, memoryFallback = sharedMemoryStore) {
         }
         return store;
     }
+    const explicit = env.RATE_LIMIT_STORE;
+    if (explicit && typeof explicit.limit === "function") {
+        let store = explicitStoreCache.get(explicit);
+        if (!store) {
+            store = explicit;
+            explicitStoreCache.set(explicit, store);
+        }
+        return store;
+    }
     const kv = env.RATE_LIMIT;
     if (kv && typeof kv.get === "function" && typeof kv.put === "function") {
         let store = kvStoreCache.get(kv);
@@ -159,8 +190,8 @@ export function resolveRateLimitStore(c, memoryFallback = sharedMemoryStore) {
     }
     if (!warnedNoDistributedStore && !isDevLikeEnv()) {
         warnedNoDistributedStore = true;
-        console.warn("[voyant] rate-limit: no distributed store available (bind a Cloudflare " +
-            "ratelimiter as RATE_LIMITER or a KV namespace as RATE_LIMIT). " +
+        console.warn("[voyant] rate-limit: no distributed store available (inject RATE_LIMIT_STORE " +
+            "or a KV-compatible RATE_LIMIT fallback). " +
             "Falling back to a per-isolate in-memory limiter — limits apply " +
             "per instance, not fleet-wide.");
     }

package/dist/plugin.d.ts

@@ -52,10 +52,60 @@ export interface HonoBundle {
 }
 /** @deprecated Prefer {@link HonoBundle}. */
 export type HonoPlugin = HonoBundle;
+declare const LAZY_HONO_BUNDLE: unique symbol;
+/**
+ * Lazy bundle declaration. The bundle's heavy runtime graph is imported only
+ * when a declared route matcher is hit, unless `loadOnBootstrap` asks the app
+ * to load it during request/headless bootstrap. `name` and `anonymous` remain
+ * eager metadata so duplicate checks and auth allow-lists stay fail-closed.
+ */
+export interface LazyHonoBundle {
+    readonly [LAZY_HONO_BUNDLE]: true;
+    /** Unique bundle identifier matching the loaded bundle's `name`. */
+    name: string;
+    /** Optional version tag for diagnostics. */
+    version?: string;
+    /**
+     * Absolute unauthenticated paths contributed by the eventual bundle. Declare
+     * webhook/callback paths here so the first matching request can pass auth
+     * before the bundle has been imported.
+     */
+    anonymous?: string[];
+    /**
+     * Absolute route matchers the eventual bundle may serve. Required for lazy
+     * bundles that contribute HTTP routes because Hono routes must be registered
+     * before the first request builds the matcher.
+     */
+    routes?: readonly string[];
+    /**
+     * Module names whose lazy-loaded routes must receive a transaction-capable DB
+     * client. This is eager metadata so the first matching request is routed to
+     * `dbTransactional` before the bundle implementation is imported.
+     */
+    transactionalModules?: readonly string[];
+    /**
+     * Absolute API path prefixes whose lazy-loaded routes must receive the
+     * transaction-capable DB client. Use this when only a subset of the lazy
+     * bundle's explicit `routes` require transactions.
+     */
+    transactionalPaths?: readonly string[];
+    /**
+     * Load this bundle during app bootstrap instead of waiting for a declared
+     * route matcher. Set this for lazy bundles that contribute subscribers,
+     * workflow metadata, container services, or bootstraps needed before a
+     * bundle-owned route is hit.
+     */
+    loadOnBootstrap?: boolean;
+    /** Loads and constructs the real bundle. Memoized by `mountApp`. */
+    load: () => Promise<HonoBundle>;
+}
+export type HonoBundleInput = HonoBundle | LazyHonoBundle;
 /**
  * Identity helper — returns the bundle unchanged, purely for IDE inference.
  */
 export declare function defineHonoBundle<P extends HonoBundle>(bundle: P): P;
+export declare function defineLazyHonoBundle<P extends Omit<LazyHonoBundle, typeof LAZY_HONO_BUNDLE>>(bundle: P): P & LazyHonoBundle;
+export declare function isLazyHonoBundle(bundle: HonoBundleInput): bundle is LazyHonoBundle;
 /** @deprecated Prefer {@link defineHonoBundle}. */
 export declare const defineHonoPlugin: typeof defineHonoBundle;
 export interface ExpandedHonoBundles {
@@ -76,4 +126,5 @@ export type ExpandedHonoPlugins = ExpandedHonoBundles;
 export declare function expandHonoBundles(bundles: ReadonlyArray<HonoBundle>): ExpandedHonoBundles;
 /** @deprecated Prefer {@link expandHonoBundles}. */
 export declare const expandHonoPlugins: typeof expandHonoBundles;
+export {};
 //# sourceMappingURL=plugin.d.ts.map

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,UAAU,EACV,kBAAkB,EACnB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE5D;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,UAAU;IACzB,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAA;IACZ,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,qEAAqE;IACrE,SAAS,CAAC,EAAE,gBAAgB,CAAA;IAC5B,gEAAgE;IAChE,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;IACtB,sEAAsE;IACtE,UAAU,CAAC,EAAE,aAAa,EAAE,CAAA;IAC5B,wEAAwE;IACxE,WAAW,CAAC,EAAE,UAAU,EAAE,CAAA;IAC1B,kDAAkD;IAClD,KAAK,CAAC,EAAE,cAAc,EAAE,CAAA;IACxB;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAA;IACzC;;;OAGG;IACH,YAAY,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAA;CAChD;AAED,6CAA6C;AAC7C,MAAM,MAAM,UAAU,GAAG,UAAU,CAAA;AAEnC;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,UAAU,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAEnE;AAED,mDAAmD;AACnD,eAAO,MAAM,gBAAgB,yBAAmB,CAAA;AAEhD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,UAAU,EAAE,CAAA;IACrB,UAAU,EAAE,aAAa,EAAE,CAAA;IAC3B,WAAW,EAAE,UAAU,EAAE,CAAA;IACzB,KAAK,EAAE,cAAc,EAAE,CAAA;IACvB,sEAAsE;IACtE,cAAc,EAAE,MAAM,EAAE,CAAA;CACzB;AAED,sDAAsD;AACtD,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,CAAA;AAErD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,UAAU,CAAC,GAAG,mBAAmB,CAsBzF;AAED,oDAAoD;AACpD,eAAO,MAAM,iBAAiB,0BAAoB,CAAA"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,UAAU,EACV,kBAAkB,EACnB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE5D;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,UAAU;IACzB,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAA;IACZ,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,qEAAqE;IACrE,SAAS,CAAC,EAAE,gBAAgB,CAAA;IAC5B,gEAAgE;IAChE,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;IACtB,sEAAsE;IACtE,UAAU,CAAC,EAAE,aAAa,EAAE,CAAA;IAC5B,wEAAwE;IACxE,WAAW,CAAC,EAAE,UAAU,EAAE,CAAA;IAC1B,kDAAkD;IAClD,KAAK,CAAC,EAAE,cAAc,EAAE,CAAA;IACxB;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAA;IACzC;;;OAGG;IACH,YAAY,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAA;CAChD;AAED,6CAA6C;AAC7C,MAAM,MAAM,UAAU,GAAG,UAAU,CAAA;AAEnC,QAAA,MAAM,gBAAgB,eAAuC,CAAA;AAE7D;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAA;IACjC,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAA;IACZ,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,oEAAoE;IACpE,IAAI,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAA;CAChC;AAED,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,cAAc,CAAA;AAEzD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,UAAU,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAEnE;AAED,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,IAAI,CAAC,cAAc,EAAE,OAAO,gBAAgB,CAAC,EAC1F,MAAM,EAAE,CAAC,GACR,CAAC,GAAG,cAAc,CAEpB;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,IAAI,cAAc,CAElF;AAED,mDAAmD;AACnD,eAAO,MAAM,gBAAgB,yBAAmB,CAAA;AAEhD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,UAAU,EAAE,CAAA;IACrB,UAAU,EAAE,aAAa,EAAE,CAAA;IAC3B,WAAW,EAAE,UAAU,EAAE,CAAA;IACzB,KAAK,EAAE,cAAc,EAAE,CAAA;IACvB,sEAAsE;IACtE,cAAc,EAAE,MAAM,EAAE,CAAA;CACzB;AAED,sDAAsD;AACtD,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,CAAA;AAErD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,UAAU,CAAC,GAAG,mBAAmB,CAsBzF;AAED,oDAAoD;AACpD,eAAO,MAAM,iBAAiB,0BAAoB,CAAA"}

package/dist/plugin.js

@@ -1,9 +1,16 @@
+const LAZY_HONO_BUNDLE = Symbol.for("voyant.hono.lazyBundle");
 /**
  * Identity helper — returns the bundle unchanged, purely for IDE inference.
  */
 export function defineHonoBundle(bundle) {
     return bundle;
 }
+export function defineLazyHonoBundle(bundle) {
+    return { ...bundle, [LAZY_HONO_BUNDLE]: true };
+}
+export function isLazyHonoBundle(bundle) {
+    return bundle[LAZY_HONO_BUNDLE] === true;
+}
 /** @deprecated Prefer {@link defineHonoBundle}. */
 export const defineHonoPlugin = defineHonoBundle;
 /**

package/dist/types.d.ts

@@ -8,7 +8,7 @@ import type { PostgresJsDatabase } from "drizzle-orm/postgres-js";
 import type { Hono } from "hono";
 import type { HonoExtension, HonoModule } from "./module.js";
 import type { Reporter } from "./observability/reporter.js";
-import type { HonoBundle } from "./plugin.js";
+import type { HonoBundleInput } from "./plugin.js";
 export interface VoyantExecutionContext {
     waitUntil?: (promise: Promise<unknown>) => void;
     passThroughOnException?: () => void;
@@ -24,6 +24,7 @@ export interface VoyantBindings {
     DASH_BASE_URL?: string;
     API_BASE_URL?: string;
     RATE_LIMIT?: KVStore;
+    RATE_LIMIT_STORE?: import("./middleware/rate-limit.js").RateLimitStore;
     CACHE?: KVStore;
     RATE_LIMITER?: import("./middleware/rate-limit.js").CloudflareRateLimiterBinding;
     /**
@@ -182,7 +183,7 @@ export interface VoyantAppConfig<TBindings extends VoyantBindings = VoyantBindin
     dbTransactionalPaths?: string[];
     modules?: HonoModule[];
     extensions?: HonoExtension[];
-    plugins?: HonoBundle[];
+    plugins?: HonoBundleInput[];
     eventBus?: EventBus;
     link?: LinkService;
     query?: QueryGraphContext | VoyantQueryRuntime;
@@ -217,9 +218,8 @@ export interface VoyantAppConfig<TBindings extends VoyantBindings = VoyantBindin
      * default). Enabled by default but inert until a route marks its
      * response `Cache-Control: public, s-maxage=…` — personalized routes
      * are never cached. Set `false` to disable, or pass options to tune
-     * prefixes/limits. Uses the Cache API where the runtime provides it
-     * and falls back to the `env.CACHE` KV binding (Voyant Cloud
-     * namespaced workers have no `caches.default`).
+     * prefixes/limits. Uses the injected `env.CACHE` KVStore when one is
+     * available.
      */
     publicCache?: false | import("./middleware/public-cache.js").PublicCacheOptions;
     /**

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,eAAe,IAAI,mBAAmB,EACtC,QAAQ,EACR,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAA;AAEhE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,YAAY,IAAI,cAAc,EAAE,MAAM,6BAA6B,CAAA;AACjF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAEhC,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC5D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;IAC/C,sBAAsB,CAAC,EAAE,MAAM,IAAI,CAAA;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,YAAY,CAAC,EAAE,OAAO,4BAA4B,EAAE,4BAA4B,CAAA;IAChF;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,yBAAyB,EAAE,0BAA0B,CAAA;CACvE;AAED,MAAM,MAAM,QAAQ,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,cAAc,CAAA;AAC7E,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAA;AAE5C,MAAM,MAAM,eAAe,GAAG,mBAAmB,GAAG;IAClD;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,EAAE,EAAE,QAAQ,CAAA;IACZ,oEAAoE;IACpE,SAAS,EAAE,eAAe,CAAA;IAC1B,QAAQ,EAAE,QAAQ,CAAA;IAClB,mEAAmE;IACnE,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,oEAAoE;IACpE,KAAK,CAAC,EAAE,kBAAkB,CAAA;IAC1B,iFAAiF;IACjF,cAAc,CAAC,EAAE,OAAO,iCAAiC,EAAE,cAAc,CAAA;IACzE,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,OAAO,yBAAyB,EAAE,gBAAgB,CAAA;CACvE,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,QAAQ,CAAA;IACZ,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B;AAED,MAAM,MAAM,SAAS,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc,IAAI,CACzE,GAAG,EAAE,SAAS,KACX,QAAQ,GAAG,YAAY,CAAA;AAE5B;;;GAGG;AACH,MAAM,WAAW,kBAAkB,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc;IACnF,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,CAAA;IAC7B;;;;;OAKG;IACH,uBAAuB,EAAE,OAAO,CAAA;CACjC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc;IAClF,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAA;CACpD;AAED,wEAAwE;AACxE,MAAM,MAAM,QAAQ,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc,IAClE,SAAS,CAAC,SAAS,CAAC,GACpB,iBAAiB,CAAC,SAAS,CAAC,CAAA;AAEhC,wBAAgB,mBAAmB,CAAC,SAAS,SAAS,cAAc,EAClE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,GAC1B,MAAM,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAExC;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAAC,SAAS,SAAS,cAAc,EAC9D,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,EAC3B,IAAI,EAAE,MAAM,GACX,SAAS,CAAC,SAAS,CAAC,CAEtB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,QAAQ,GAAG,YAAY,GAAG,KAAK,IAAI,YAAY,CAKpF;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,QAAQ,GAAG,YAAY,GAAG;IACtE,EAAE,EAAE,QAAQ,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9B,CAOA;AAED;;;;;GAKG;AACH,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,GAAG;IACxE,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,KAAK,CAAA;CACb,CAAA;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,qBAAqB,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc;IACtF,OAAO,EAAE,OAAO,CAAA;IAChB,GAAG,EAAE,SAAS,CAAA;IACd,EAAE,EAAE,QAAQ,CAAA;IACZ,GAAG,CAAC,EAAE,sBAAsB,CAAA;CAC7B;AAED,MAAM,WAAW,wBAAwB,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc,CACzF,SAAQ,qBAAqB,CAAC,SAAS,CAAC;IACxC,UAAU,EAAE,gBAAgB,CAAA;IAC5B,IAAI,EAAE,wBAAwB,CAAA;CAC/B;AAED,MAAM,WAAW,8BAA8B,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc,CAC/F,SAAQ,qBAAqB,CAAC,SAAS,CAAC;IACxC,MAAM,EAAE,YAAY,CAAA;CACrB;AAED,MAAM,WAAW,qBAAqB,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc;IACtF,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK;QAC5B,KAAK,EAAE,CACL,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,SAAS,EACd,GAAG,CAAC,EAAE,sBAAsB,KACzB,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;KAClC,CAAA;IACD;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,CACR,IAAI,EAAE,qBAAqB,CAAC,SAAS,CAAC,KACnC,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,GAAG,wBAAwB,GAAG,IAAI,CAAA;IAC/E,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,wBAAwB,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;IACzF,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,8BAA8B,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;CACjG;AAED,MAAM,WAAW,eAAe,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc;IAChF,EAAE,EAAE,SAAS,CAAC,SAAS,CAAC,CAAA;IACxB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAA;IACtC;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;IACtB,UAAU,CAAC,EAAE,aAAa,EAAE,CAAA;IAC5B,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;IACtB,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,KAAK,CAAC,EAAE,iBAAiB,GAAG,kBAAkB,CAAA;IAC9C,IAAI,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAA;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,MAAM,CAAC,EAAE,cAAc,CAAA;IACvB;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,KAAK,GAAG,OAAO,8BAA8B,EAAE,kBAAkB,CAAA;IAC/E;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,KAAK,GAAG;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACvE;;;OAGG;IACH,eAAe,CAAC,EAAE,KAAK,GAAG,OAAO,kCAAkC,EAAE,sBAAsB,CAAA;IAC3F;;;;OAIG;IACH,SAAS,CAAC,EAAE,KAAK,GAAG,OAAO,4BAA4B,EAAE,eAAe,CAAA;IACxE;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,qBAAqB,CAAA;IACjC;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE;QACV,eAAe,EAAE,MAAM,CAAA;QACvB,iBAAiB,CAAC,EAAE,MAAM,CAAA;QAC1B,UAAU,EAAE,aAAa,CAAC;YACxB,EAAE,EAAE,MAAM,CAAA;YACV,MAAM,EAAE,MAAM,CAAA;YACd,YAAY,EAAE,MAAM,CAAA;YACpB,cAAc,EAAE,MAAM,CAAA;YACtB,MAAM,EAAE,MAAM,EAAE,CAAA;YAChB,aAAa,CAAC,EAAE,MAAM,CAAA;SACvB,CAAC,CAAA;KACH,CAAA;IAED,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAA;CAC5C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,WAAW,qBAAqB,CAAC,SAAS,GAAG,OAAO;IACxD;;;;OAIG;IACH,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,KAAK,aAAa,CAAA;IAC9C;;;;OAIG;IACH,WAAW,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,aAAa,CAAA;IACtD;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;GAIG"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,eAAe,IAAI,mBAAmB,EACtC,QAAQ,EACR,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAA;AAEhE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,YAAY,IAAI,cAAc,EAAE,MAAM,6BAA6B,CAAA;AACjF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAEhC,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC5D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;IAC/C,sBAAsB,CAAC,EAAE,MAAM,IAAI,CAAA;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,gBAAgB,CAAC,EAAE,OAAO,4BAA4B,EAAE,cAAc,CAAA;IACtE,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,YAAY,CAAC,EAAE,OAAO,4BAA4B,EAAE,4BAA4B,CAAA;IAChF;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,yBAAyB,EAAE,0BAA0B,CAAA;CACvE;AAED,MAAM,MAAM,QAAQ,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,cAAc,CAAA;AAC7E,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAA;AAE5C,MAAM,MAAM,eAAe,GAAG,mBAAmB,GAAG;IAClD;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,EAAE,EAAE,QAAQ,CAAA;IACZ,oEAAoE;IACpE,SAAS,EAAE,eAAe,CAAA;IAC1B,QAAQ,EAAE,QAAQ,CAAA;IAClB,mEAAmE;IACnE,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,oEAAoE;IACpE,KAAK,CAAC,EAAE,kBAAkB,CAAA;IAC1B,iFAAiF;IACjF,cAAc,CAAC,EAAE,OAAO,iCAAiC,EAAE,cAAc,CAAA;IACzE,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,OAAO,yBAAyB,EAAE,gBAAgB,CAAA;CACvE,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,QAAQ,CAAA;IACZ,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B;AAED,MAAM,MAAM,SAAS,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc,IAAI,CACzE,GAAG,EAAE,SAAS,KACX,QAAQ,GAAG,YAAY,CAAA;AAE5B;;;GAGG;AACH,MAAM,WAAW,kBAAkB,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc;IACnF,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,CAAA;IAC7B;;;;;OAKG;IACH,uBAAuB,EAAE,OAAO,CAAA;CACjC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc;IAClF,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAA;CACpD;AAED,wEAAwE;AACxE,MAAM,MAAM,QAAQ,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc,IAClE,SAAS,CAAC,SAAS,CAAC,GACpB,iBAAiB,CAAC,SAAS,CAAC,CAAA;AAEhC,wBAAgB,mBAAmB,CAAC,SAAS,SAAS,cAAc,EAClE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,GAC1B,MAAM,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAExC;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAAC,SAAS,SAAS,cAAc,EAC9D,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,EAC3B,IAAI,EAAE,MAAM,GACX,SAAS,CAAC,SAAS,CAAC,CAEtB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,QAAQ,GAAG,YAAY,GAAG,KAAK,IAAI,YAAY,CAKpF;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,QAAQ,GAAG,YAAY,GAAG;IACtE,EAAE,EAAE,QAAQ,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9B,CAOA;AAED;;;;;GAKG;AACH,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,GAAG;IACxE,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,KAAK,CAAA;CACb,CAAA;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,qBAAqB,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc;IACtF,OAAO,EAAE,OAAO,CAAA;IAChB,GAAG,EAAE,SAAS,CAAA;IACd,EAAE,EAAE,QAAQ,CAAA;IACZ,GAAG,CAAC,EAAE,sBAAsB,CAAA;CAC7B;AAED,MAAM,WAAW,wBAAwB,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc,CACzF,SAAQ,qBAAqB,CAAC,SAAS,CAAC;IACxC,UAAU,EAAE,gBAAgB,CAAA;IAC5B,IAAI,EAAE,wBAAwB,CAAA;CAC/B;AAED,MAAM,WAAW,8BAA8B,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc,CAC/F,SAAQ,qBAAqB,CAAC,SAAS,CAAC;IACxC,MAAM,EAAE,YAAY,CAAA;CACrB;AAED,MAAM,WAAW,qBAAqB,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc;IACtF,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK;QAC5B,KAAK,EAAE,CACL,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,SAAS,EACd,GAAG,CAAC,EAAE,sBAAsB,KACzB,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;KAClC,CAAA;IACD;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,CACR,IAAI,EAAE,qBAAqB,CAAC,SAAS,CAAC,KACnC,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,GAAG,wBAAwB,GAAG,IAAI,CAAA;IAC/E,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,wBAAwB,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;IACzF,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,8BAA8B,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;CACjG;AAED,MAAM,WAAW,eAAe,CAAC,SAAS,SAAS,cAAc,GAAG,cAAc;IAChF,EAAE,EAAE,SAAS,CAAC,SAAS,CAAC,CAAA;IACxB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAA;IACtC;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;IACtB,UAAU,CAAC,EAAE,aAAa,EAAE,CAAA;IAC5B,OAAO,CAAC,EAAE,eAAe,EAAE,CAAA;IAC3B,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,KAAK,CAAC,EAAE,iBAAiB,GAAG,kBAAkB,CAAA;IAC9C,IAAI,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAA;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,MAAM,CAAC,EAAE,cAAc,CAAA;IACvB;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,KAAK,GAAG,OAAO,8BAA8B,EAAE,kBAAkB,CAAA;IAC/E;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,KAAK,GAAG;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACvE;;;OAGG;IACH,eAAe,CAAC,EAAE,KAAK,GAAG,OAAO,kCAAkC,EAAE,sBAAsB,CAAA;IAC3F;;;;OAIG;IACH,SAAS,CAAC,EAAE,KAAK,GAAG,OAAO,4BAA4B,EAAE,eAAe,CAAA;IACxE;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,qBAAqB,CAAA;IACjC;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE;QACV,eAAe,EAAE,MAAM,CAAA;QACvB,iBAAiB,CAAC,EAAE,MAAM,CAAA;QAC1B,UAAU,EAAE,aAAa,CAAC;YACxB,EAAE,EAAE,MAAM,CAAA;YACV,MAAM,EAAE,MAAM,CAAA;YACd,YAAY,EAAE,MAAM,CAAA;YACpB,cAAc,EAAE,MAAM,CAAA;YACtB,MAAM,EAAE,MAAM,EAAE,CAAA;YAChB,aAAa,CAAC,EAAE,MAAM,CAAA;SACvB,CAAC,CAAA;KACH,CAAA;IAED,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAA;CAC5C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,WAAW,qBAAqB,CAAC,SAAS,GAAG,OAAO;IACxD;;;;OAIG;IACH,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,KAAK,aAAa,CAAA;IAC9C;;;;OAIG;IACH,WAAW,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,aAAa,CAAA;IACtD;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;GAIG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voyant-travel/hono",
-  "version": "0.121.2",
+  "version": "0.122.0",
   "license": "Apache-2.0",
   "type": "module",
   "exports": {
@@ -135,19 +135,19 @@
     "drizzle-orm": "^0.45.2",
     "hono": "^4.12.27",
     "zod": "^4.4.3",
-    "@voyant-travel/core": "^0.112.2",
-    "@voyant-travel/db": "^0.109.5",
+    "@voyant-travel/core": "^0.112.3",
+    "@voyant-travel/db": "^0.110.0",
     "@voyant-travel/storage": "^0.106.0",
-    "@voyant-travel/types": "^0.107.0",
-    "@voyant-travel/utils": "^0.105.6",
-    "@voyant-travel/workflows": "^0.111.17"
+    "@voyant-travel/types": "^0.107.1",
+    "@voyant-travel/utils": "^0.106.0",
+    "@voyant-travel/workflows": "^0.111.18"
   },
   "devDependencies": {
     "@cloudflare/workers-types": "^4.20260702.1",
     "typescript": "^6.0.3",
     "vitest": "^4.1.9",
     "@voyant-travel/voyant-typescript-config": "^0.1.0",
-    "@voyant-travel/workflows-orchestrator": "^0.111.17"
+    "@voyant-travel/workflows-orchestrator": "^0.111.18"
   },
   "files": [
     "dist"