Official support for Bun

[davidmytton]

Either confirm the Node package works on Bun or provide a separate package with Bun support.

[davidmytton]

Some initial research suggests that connectrpc/connect-es#877 was previously a blocker but should be resolved now oven-sh/bun#5122 was closed in oven-sh/bun#9092 in Feb. Bun also has HTTP2 client support as of https://bun.sh/blog/bun-v1.0.13#http2-client-support

We've had a user report of API timeouts when using the latest Hono + Bun. Confirmed the API is reachable so the next step is to create a simple example app to reproduce.

[davidmytton]

When using our standard quick-start for Hono + Bun, the remote calls to our API error with a timeout. I was able to workaround this with a custom transport.

Either of these options work:

import { createConnectTransport } from "@connectrpc/connect-web";
const transport = createConnectTransport({
  baseUrl: defaultBaseUrl(),
  fetch,
});

import { createConnectTransport } from "@connectrpc/connect-node";

const transport = createConnectTransport({
  baseUrl: defaultBaseUrl(),
  httpVersion: "1.1",
});

So it looks like this is an issue with HTTP2. Bun has support for node:http2 so there's an issue with how Connect is using it. We should try to debug it and log a bug upstream (Connect or Bun).

Here is a full working example where it gets the IP from the header on Fly.io

import arcjet, {
  ArcjetHeaders,
  createRemoteClient,
  defaultBaseUrl,
  tokenBucket,
} from "@arcjet/node";
import { createConnectTransport } from "@connectrpc/connect-web";
import { Hono } from "hono";

const transport = createConnectTransport({
  baseUrl: defaultBaseUrl(),
  fetch,
});

const client = createRemoteClient({
  transport,
  // baseUrl defaults to https://decide.arcjet.com and should only be changed if
  // directed by Arcjet. It can also be set via the ARCJET_BASE_URL environment
  // variable.
  baseUrl: defaultBaseUrl(),
  // timeout is the maximum time to wait for a response from the server. It
  // defaults to 500ms when NODE_ENV is "production" and 1000ms otherwise. This
  // is a conservative limit to fail open by default. In most cases, the
  // response time will be <20-30ms.
  timeout: 500,
});

const aj = arcjet({
  key: process.env.ARCJET_KEY,
  rules: [
    // Create a token bucket rate limit. Other algorithms are supported.
    tokenBucket({
      mode: "LIVE", // will block requests. Use "DRY_RUN" to log only
      characteristics: ["userId"], // track requests by a custom user ID
      refillRate: 5, // refill 5 tokens per interval
      interval: 10, // refill every 10 seconds
      capacity: 10, // bucket maximum capacity of 10 tokens
    }),
  ],
  client,
});

const app = new Hono();

app.get("/", async (c) => {
  const userId = "user123"; // Replace with your authenticated user ID

  const ajHeaders = new ArcjetHeaders(c.req.raw.headers);
  const ip = ajHeaders.get("Fly-Client-IP") || "";

  // Convert ajHeaders to Record<string, string | string[] | undefined>
  const headers: Record<string, string | string[] | undefined> = {};
  ajHeaders.forEach((value, key) => {
    headers[key] = value;
  });

  const details = {
    ip,
    method: c.req.method,
    host: headers.host,
    url: c.req.url,
    headers,
  };

  console.log("Details: ", details);

  const decision = await aj.protect(details, { userId, requested: 5 }); // Deduct 5 tokens from the bucket
  console.log("Arcjet decision", decision);

  return c.text("Hello Hono!");
});

export default app;