@hoox-sh/hoox-cli 0.12.0 → 0.13.0

package/dist/index.js

@@ -14691,7 +14691,7 @@ var init_zod = __esm(() => {
 });
 
 // ../shared/src/types.ts
-var TradeActionSchema, WebhookPayloadSchema, TradeQueueMessageSchema, TradeSignalSchema, PositionSchema, BalanceSchema;
+var TradeActionSchema, MAX_WEBHOOK_LEVERAGE = 125, MAX_WEBHOOK_QUANTITY = 1e6, WebhookPayloadSchema, TradeQueueMessageSchema, TradeSignalSchema, PositionSchema, BalanceSchema;
 var init_types = __esm(() => {
   init_zod();
   TradeActionSchema = exports_external.enum([
@@ -14704,10 +14704,10 @@ var init_types = __esm(() => {
     exchange: exports_external.string().min(1),
     action: TradeActionSchema,
     symbol: exports_external.string().min(1).max(20),
-    quantity: exports_external.number().positive().finite(),
+    quantity: exports_external.number().positive().finite().max(MAX_WEBHOOK_QUANTITY),
     price: exports_external.number().positive().finite().optional(),
     orderType: exports_external.string().optional(),
-    leverage: exports_external.number().int().positive().optional(),
+    leverage: exports_external.number().int().positive().max(MAX_WEBHOOK_LEVERAGE).optional(),
     test: exports_external.boolean().optional()
   }).strict();
   TradeQueueMessageSchema = exports_external.object({
@@ -14715,9 +14715,9 @@ var init_types = __esm(() => {
     exchange: exports_external.string().min(1).max(64),
     action: TradeActionSchema,
     symbol: exports_external.string().min(1).max(32),
-    quantity: exports_external.number().positive().finite(),
+    quantity: exports_external.number().positive().finite().max(MAX_WEBHOOK_QUANTITY),
     price: exports_external.number().positive().finite().optional(),
-    leverage: exports_external.number().int().positive().max(125).optional(),
+    leverage: exports_external.number().int().positive().max(MAX_WEBHOOK_LEVERAGE).optional(),
     test: exports_external.boolean().optional(),
     idempotencyKey: exports_external.string().min(1).max(512).optional(),
     queuedAt: exports_external.string().min(1).max(64)
@@ -14754,7 +14754,7 @@ var init_types = __esm(() => {
 });
 
 // ../shared/src/kvKeys.ts
-var KV_TRADE_DEFAULT_LEVERAGE = "trade:default_leverage", KV_TRADE_MAX_POSITION_SIZE = "trade:max_position_size", KV_TRADE_MAX_DAILY_DRAWDOWN_PERCENT = "trade:max_daily_drawdown_percent", KV_TRADE_TRAILING_STOP_PERCENT = "trade:trailing_stop_percent", KV_TRADE_KILL_SWITCH = "trade:kill_switch", KV_TRADE_ROUTING = "trade:routing", KV_BOT_ENABLED = "bot:enabled", KV_BOT_DEFAULT_CHAT_ID = "bot:default_chat_id", KV_BOT_NOTIFY_ON_EXECUTION = "bot:notify_on_execution", KV_BOT_NOTIFY_ON_ERROR = "bot:notify_on_error", KV_WEBHOOK_IP_CHECK_ENABLED = "webhook:tradingview:ip_check_enabled", KV_WEBHOOK_ALLOWED_IPS = "webhook:tradingview:allowed_ips", KV_WEBHOOK_QUEUE_MODE = "webhook:queue_mode", KV_EMAIL_SCAN_SUBJECT = "email:scan_subject", KV_EMAIL_USE_IMAP = "email:use_imap", KV_EMAIL_COIN_PATTERN = "email:coin_pattern", KV_EMAIL_ACTION_PATTERN = "email:action_pattern", KV_EMAIL_QUANTITY_MULTIPLIER = "email:quantity_multiplier", KV_AGENT_CONFIG = "agent:config", KV_AGENT_OPENAI_KEY = "agent:openai_key", KV_AGENT_ANTHROPIC_KEY = "agent:anthropic_key", KV_AGENT_GOOGLE_KEY = "agent:google_key", KV_DASHBOARD_AI_HEALTH_SUMMARY = "dashboard:ai_health_summary", KV_GLOBAL_KILL_SWITCH = "global:kill_switch", KV_HEALTH_CHECK = "health_check", KV_HOUSEKEEPING_LAST_CHECK = "housekeeping:last_check", QUEUE_MODE_FAILOVER = "queue_failover", QUEUE_MODE_EVERYWHERE = "queue_everywhere", QUEUE_MODE_DISABLED = "queue_disabled", KVKeys;
+var KV_TRADE_DEFAULT_LEVERAGE = "trade:default_leverage", KV_TRADE_MAX_POSITION_SIZE = "trade:max_position_size", KV_TRADE_MAX_DAILY_DRAWDOWN_PERCENT = "trade:max_daily_drawdown_percent", KV_TRADE_TRAILING_STOP_PERCENT = "trade:trailing_stop_percent", KV_TRADE_KILL_SWITCH = "trade:kill_switch", KV_TRADE_ROUTING = "trade:routing", KV_BOT_ENABLED = "bot:enabled", KV_BOT_DEFAULT_CHAT_ID = "bot:default_chat_id", KV_BOT_NOTIFY_ON_EXECUTION = "bot:notify_on_execution", KV_BOT_NOTIFY_ON_ERROR = "bot:notify_on_error", KV_TELEGRAM_ALLOWED_CHAT_IDS = "telegram:allowed_chat_ids", KV_WEBHOOK_IP_CHECK_ENABLED = "webhook:tradingview:ip_check_enabled", KV_WEBHOOK_ALLOWED_IPS = "webhook:tradingview:allowed_ips", KV_WEBHOOK_QUEUE_MODE = "webhook:queue_mode", KV_EMAIL_SCAN_SUBJECT = "email:scan_subject", KV_EMAIL_USE_IMAP = "email:use_imap", KV_EMAIL_COIN_PATTERN = "email:coin_pattern", KV_EMAIL_ACTION_PATTERN = "email:action_pattern", KV_EMAIL_QUANTITY_MULTIPLIER = "email:quantity_multiplier", KV_AGENT_CONFIG = "agent:config", KV_AGENT_OPENAI_KEY = "agent:openai_key", KV_AGENT_ANTHROPIC_KEY = "agent:anthropic_key", KV_AGENT_GOOGLE_KEY = "agent:google_key", KV_DASHBOARD_AI_HEALTH_SUMMARY = "dashboard:ai_health_summary", KV_GLOBAL_KILL_SWITCH = "global:kill_switch", KV_HEALTH_CHECK = "health_check", KV_HOUSEKEEPING_LAST_CHECK = "housekeeping:last_check", QUEUE_MODE_FAILOVER = "queue_failover", QUEUE_MODE_EVERYWHERE = "queue_everywhere", QUEUE_MODE_DISABLED = "queue_disabled", KVKeys;
 var init_kvKeys = __esm(() => {
   KVKeys = {
     KV_TRADE_DEFAULT_LEVERAGE,
@@ -14767,6 +14767,7 @@ var init_kvKeys = __esm(() => {
     KV_BOT_DEFAULT_CHAT_ID,
     KV_BOT_NOTIFY_ON_EXECUTION,
     KV_BOT_NOTIFY_ON_ERROR,
+    KV_TELEGRAM_ALLOWED_CHAT_IDS,
     KV_WEBHOOK_IP_CHECK_ENABLED,
     KV_WEBHOOK_ALLOWED_IPS,
     KV_WEBHOOK_QUEUE_MODE,
@@ -15107,10 +15108,38 @@ async function logKvTimestamp(env, prefix = "timestamp") {
     console.error(`Failed to log timestamp to KV: ${toError(error51, "Unknown error")}`);
   }
 }
+async function tryBulkGetChunk(kv, chunk) {
+  try {
+    const result = await kv.get([...chunk]);
+    if (!(result instanceof Map)) {
+      return null;
+    }
+    return chunk.map((key) => result.get(key) ?? null);
+  } catch {
+    return null;
+  }
+}
 async function kvGetMany(kv, keys) {
   if (keys.length === 0)
     return [];
-  return Promise.all(keys.map((key) => kv.get(key)));
+  const out = new Array(keys.length);
+  let offset = 0;
+  while (offset < keys.length) {
+    const chunk = keys.slice(offset, offset + KV_BULK_GET_MAX_KEYS);
+    const bulk = await tryBulkGetChunk(kv, chunk);
+    if (bulk === null) {
+      const rest = await Promise.all(keys.slice(offset).map((key) => kv.get(key)));
+      for (let i = 0;i < rest.length; i++) {
+        out[offset + i] = rest[i] ?? null;
+      }
+      return out;
+    }
+    for (let i = 0;i < bulk.length; i++) {
+      out[offset + i] = bulk[i] ?? null;
+    }
+    offset += chunk.length;
+  }
+  return out;
 }
 async function kvGetManyAsRecord(kv, keys) {
   const values = await kvGetMany(kv, keys);
@@ -15138,6 +15167,7 @@ function headersToObject(headers) {
   }
   return result;
 }
+var KV_BULK_GET_MAX_KEYS = 100;
 var init_kvUtils = __esm(() => {
   init_errors3();
 });
@@ -15187,29 +15217,60 @@ var init_health = __esm(() => {
 });
 
 // ../shared/src/queue-handler.ts
+async function mapPool(items, concurrency, fn) {
+  if (items.length === 0)
+    return;
+  const limit = Math.min(Math.max(1, concurrency), items.length);
+  if (limit === 1) {
+    for (const item of items) {
+      await fn(item);
+    }
+    return;
+  }
+  let nextIndex = 0;
+  async function worker() {
+    while (true) {
+      const i = nextIndex++;
+      if (i >= items.length)
+        return;
+      await fn(items[i]);
+    }
+  }
+  await Promise.all(Array.from({ length: limit }, () => worker()));
+}
 function createQueueHandler(options) {
-  const { maxRetries, backoffDelays, onMessage, onRetry, onDLQ, logger } = options;
-  return async (batch) => {
-    for (const msg of batch.messages) {
-      const attemptNumber = msg.attempts || 0;
-      const logId = `[${msg.id}]`;
-      try {
-        logger?.info(`${logId} Processing message (attempt ${attemptNumber + 1})`);
-        await onMessage(msg.body, attemptNumber);
-        logger?.info(`${logId} Message processed successfully`);
-      } catch (error51) {
-        const errorMsg = error51 instanceof Error ? error51.message : String(error51);
-        if (attemptNumber < maxRetries) {
-          const delaySeconds = backoffDelays[attemptNumber] ?? backoffDelays[backoffDelays.length - 1] ?? 0;
-          logger?.info(`${logId} Retrying in ${delaySeconds}s (attempt ${attemptNumber + 2}/${maxRetries + 1})`);
-          await onRetry?.(msg.body, attemptNumber, errorMsg, delaySeconds);
-          msg.retry({ delaySeconds });
-        } else {
-          logger?.error(`${logId} Max retries exceeded (${maxRetries + 1} attempts), moving to DLQ`);
-          await onDLQ?.(msg.body, attemptNumber, errorMsg);
-        }
+  const {
+    maxRetries,
+    backoffDelays,
+    onMessage,
+    onRetry,
+    onDLQ,
+    logger,
+    concurrency: concurrencyOpt
+  } = options;
+  const concurrency = typeof concurrencyOpt === "number" && Number.isFinite(concurrencyOpt) && concurrencyOpt >= 1 ? Math.floor(concurrencyOpt) : 1;
+  async function processMessage(msg) {
+    const attemptNumber = msg.attempts || 0;
+    const logId = `[${msg.id}]`;
+    try {
+      logger?.info(`${logId} Processing message (attempt ${attemptNumber + 1})`);
+      await onMessage(msg.body, attemptNumber);
+      logger?.info(`${logId} Message processed successfully`);
+    } catch (error51) {
+      const errorMsg = error51 instanceof Error ? error51.message : String(error51);
+      if (attemptNumber < maxRetries) {
+        const delaySeconds = backoffDelays[attemptNumber] ?? backoffDelays[backoffDelays.length - 1] ?? 0;
+        logger?.info(`${logId} Retrying in ${delaySeconds}s (attempt ${attemptNumber + 2}/${maxRetries + 1})`);
+        await onRetry?.(msg.body, attemptNumber, errorMsg, delaySeconds);
+        msg.retry({ delaySeconds });
+      } else {
+        logger?.error(`${logId} Max retries exceeded (${maxRetries + 1} attempts), moving to DLQ`);
+        await onDLQ?.(msg.body, attemptNumber, errorMsg);
       }
     }
+  }
+  return async (batch) => {
+    await mapPool(batch.messages, concurrency, processMessage);
   };
 }
 
@@ -17609,7 +17670,11 @@ var init_registry = __esm(() => {
           type: "secret",
           description: "Inter-worker auth key"
         },
-        HA_TOKEN_BINDING: { type: "secret", description: "Home Assistant token" }
+        HA_TOKEN_BINDING: { type: "secret", description: "Home Assistant token" },
+        TELEGRAM_ALLOWED_CHAT_IDS: {
+          type: "secret",
+          description: "Comma-separated chat IDs for webhook notify (fail-closed when unset); alias AUTHORIZED_CHAT_IDS"
+        }
       },
       services: [
         {
@@ -17635,7 +17700,8 @@ var init_registry = __esm(() => {
         ai: true,
         queues: { producer: ["trade-execution"] },
         durableObjects: [
-          { name: "IDEMPOTENCY_STORE", className: "IdempotencyStore" }
+          { name: "IDEMPOTENCY_STORE", className: "IdempotencyStore" },
+          { name: "RATE_LIMITER", className: "RateLimiterStore" }
         ]
       },
       middleware: [
@@ -17731,6 +17797,10 @@ var init_registry = __esm(() => {
         TELEGRAM_SECRET_TOKEN: {
           type: "secret",
           description: "Webhook verification token"
+        },
+        AUTHORIZED_CHAT_IDS: {
+          type: "secret",
+          description: "Comma-separated chat IDs; inbound webhook fail-closed when unset; outbound /alert allowlist"
         }
       },
       services: [],
@@ -19653,7 +19723,7 @@ function validateWranglerJsonc(workerName, manifest, jsoncContent) {
     }
   }
   for (const [name, def] of Object.entries(manifest.vars)) {
-    if (def.type === "secret" && !name.endsWith("_BINDING") && !name.endsWith("_SECRET") && !name.startsWith("CLOUDFLARE_") && name !== "TELEGRAM_SECRET_TOKEN" && name !== "MAILGUN_API_KEY" && name !== "EMAIL_SCAN_SUBJECT" && name !== "DASHBOARD_USER" && name !== "DASHBOARD_PASS" && name !== "SESSION_SECRET" && name !== "AGENT_INTERNAL_KEY") {
+    if (def.type === "secret" && !name.endsWith("_BINDING") && !name.endsWith("_SECRET") && !name.startsWith("CLOUDFLARE_") && name !== "TELEGRAM_SECRET_TOKEN" && name !== "TELEGRAM_ALLOWED_CHAT_IDS" && name !== "AUTHORIZED_CHAT_IDS" && name !== "MAILGUN_API_KEY" && name !== "EMAIL_SCAN_SUBJECT" && name !== "DASHBOARD_USER" && name !== "DASHBOARD_PASS" && name !== "SESSION_SECRET" && name !== "AGENT_INTERNAL_KEY") {
       errors3.push({
         worker: workerName,
         severity: "warning",
@@ -22351,6 +22421,7 @@ __export(exports_src, {
   PositionSchema: () => PositionSchema,
   PRESETS: () => PRESETS,
   LogLevelColor: () => LogLevelColor,
+  KV_BULK_GET_MAX_KEYS: () => KV_BULK_GET_MAX_KEYS,
   KVKeys: () => KVKeys,
   KILL_SWITCH_KEYS: () => KILL_SWITCH_KEYS,
   KILL_SWITCH_ACTIVE_PREFIX: () => KILL_SWITCH_ACTIVE_PREFIX,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hoox-sh/hoox-cli",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "description": "Hoox CLI — manage Cloudflare Workers, infrastructure, secrets, and deployments (@hoox-sh/hoox-cli)",
   "type": "module",
   "bin": {