This repository implements a Cloudflare Worker that proxies HTTP requests to a Durable Object-backed Container running a DuckDB API. The Worker forwards environment variables to enable optional features: API token authentication, R2 Data Catalog for Iceberg support, and Postgres+R2 for DuckLake integration. The Container initializes DuckDB lazily on first request, loads extensions (httpfs, avro, iceberg, ducklake, postgres_scanner, spatial, nanoarrow), and conditionally attaches remote catalogs based on available secrets. The API provides endpoints for schema inspection and SQL querying, with query filtering to block dangerous operations. The architecture separates concerns: Worker handles routing and secret forwarding, Container manages the Hono server and DuckDB lifecycle, and lib modules encapsulate database utilities, logging, and query safety.