Switch to Fullstack

import app from "@repo/api";

const handler = (req: Request) => app.fetch(req);

export const GET = handler;
export const POST = handler;
export const PUT = handler;
export const PATCH = handler;
export const DELETE = handler;
export const OPTIONS = handler;

Promote @repo/api - move "@repo/api": "workspace:*" from devDependencies to dependencies in apps/web/package.json, then pnpm install. The Hono runtime now ships with the frontend.

Repoint the client - set NEXT_PUBLIC_API_URL to the frontend's own origin plus /api (http://localhost:3000/api in dev). Remove TRUSTED_ORIGINS and AUTH_COOKIE_DOMAIN - same-origin cookies return to lax.

Re-check the client IP - the remounted route hands the backend a web Request with no connection address, so the peer your standalone server read is gone and only platform detection can identify a caller. On a detected platform that is automatic; anywhere else every caller shares one rate-limit bucket and the 10/min sign-in limit applies to your whole app rather than per person. See Client IP.

Move DB ownership back - move the schema step (pnpm -F @repo/database run deploy) and DATABASE_URL onto the frontend's start / buildCommand.

Silence double-logging - set performanceMonitor.enabled: false in packages/config/src/index.ts. The framework already logs requests for the in-process mount.

Stand down the backend - stop deploying apps/backend and add --filter=!backend to the root dev script so pnpm dev no longer starts it. Leave it in the repo, dormant, so you can switch back.

Deploy as one unit; Vercel is now allowed. See Vercel.