mir-backend-bun-honolisted

Make It Right (Hono module). Hono 4 reliability augmentation for backends on the Web-standard Request/Response model - Bun, Cloudflare Workers, Deno, and Node via @hono/node-server. Footguns the runtime tiers omit: the request body is a stream read once, so c.req.raw throws after a validator ran; use cloneRawRequest; `await next()` never throws, so try/catch cleanup middleware sees nothing and the error lands in c.error instead; validator() parses but does not authorize, and yields an empty object when Content-Type is missing; the hono/bun vs hono/cloudflare-workers adapter split, where Node built-ins, the filesystem, and module-scope state work on Bun and fail on Workers. Plus 2026 advisories: CORS credentials-with-wildcard origin reflection (CVE-2026-54290, HIGH). Chains: mir-backend -> mir-backend-bun (or mir-backend-node when served through @hono/node-server) -> this. TRIGGER only when the web framework is Hono - a Hono route, middleware, validator, RPC client, adapter, or stream handler, on any runtime.
anantbhandarkar/make-it-right · ★ 15 · API & Backend · score 81

Install: claude install-skill anantbhandarkar/make-it-right

# /mir-backend-bun-hono · Make It Right (Hono) Bottom tier of the chain: `mir-backend` (generic gates) → `mir-backend-bun` (Bun runtime model) → **this** (Hono library mechanics). Run the gates first; load the runtime tier for the process, scheduler, and install-time concerns; reach for *this* at Gate 5 (design mechanics), Gate 6 (implementation), and Gate 7 review. **Runtime-level concerns (Bun's event loop and worker model, Bun-native APIs, the test runner and bundler, install scripts and lockfile trust) live in `mir-backend-bun` — not here.** If the deploy target is Node through `@hono/node-server`, load `mir-backend-node` as the runtime tier instead. **Stack assumed (npm registry + GitHub advisory DB, 13 Aug 2026):** `hono@4.13.1` is `latest`, published 2026-08-07. Hono 4 is the only current major; there is no v5. The package has **zero runtime dependencies** and declares `engines.node >= 16.9.0`, but target the runtime tier's floor, not Hono's. Bun `1.3.14`. Companions: `@hono/node-server@2.1.0`, `@hono/zod-validator@0.9.0` (peer `hono >= 4.11.2`, `zod ^3.25 || ^4`), `@hono/standard-validator@0.4.0`, `@hono/zod-openapi@1.5.2`. Rate limiting is **not** built in — `hono-rate-limiter@0.5.3` is third-party. **Minimum patched version is 4.12.34**, not just "4.x" — see the advisory table in Security. 4.13.0 also reworked the core request path for speed and added HTTP `QUERY` method support; treat a 4.12→4.13 bump as a real upgrade and re-run route tests. ## The Hono footgu