@hoox-sh/hoox-shared 1.2.0

package/dist/schemas/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/schemas/registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AA2ajD,qEAAqE;AACrE,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAA6B,CAAC;AAE7E,sDAAsD;AACtD,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAa,CAAC;AAE1E,gDAAgD;AAChD,eAAO,MAAM,YAAY,EAAE,MAAM,EAAkC,CAAC"}

package/dist/schemas/registry.js

@@ -0,0 +1,433 @@
+// @bun
+var __defProp = Object.defineProperty;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+
+// src/schemas/registry.ts
+function deriveCalledBy(manifests) {
+  const calledBy = {};
+  for (const [workerName, manifest] of Object.entries(manifests)) {
+    if (!calledBy[workerName])
+      calledBy[workerName] = new Set;
+    for (const svc of manifest.services) {
+      if (!calledBy[svc.service])
+        calledBy[svc.service] = new Set;
+      calledBy[svc.service].add(workerName);
+    }
+  }
+  const result = {};
+  for (const [worker, callers] of Object.entries(calledBy)) {
+    result[worker] = [...callers].sort();
+  }
+  return result;
+}
+var manifests = {
+  hoox: {
+    name: "hoox",
+    path: "workers/hoox-worker",
+    vars: {
+      WEBHOOK_API_KEY_BINDING: {
+        type: "secret",
+        description: "External webhook auth key"
+      },
+      INTERNAL_KEY_BINDING: {
+        type: "secret",
+        description: "Inter-worker auth key"
+      },
+      HA_TOKEN_BINDING: { type: "secret", description: "Home Assistant token" }
+    },
+    services: [
+      {
+        binding: "TRADE_SERVICE",
+        service: "trade-worker",
+        description: "Trading functionality"
+      },
+      {
+        binding: "TELEGRAM_SERVICE",
+        service: "telegram-worker",
+        description: "Notifications"
+      }
+    ],
+    infrastructure: {
+      kv: [
+        { binding: "SESSIONS_KV", description: "Webhook session storage" },
+        {
+          binding: "CONFIG_KV",
+          description: "Configuration + rate limiter state"
+        }
+      ],
+      vectorize: [{ binding: "VECTORIZE_INDEX", index: "my-rag-index" }],
+      ai: true,
+      queues: { producer: ["trade-execution"] },
+      durableObjects: [
+        { name: "IDEMPOTENCY_STORE", className: "IdempotencyStore" }
+      ]
+    },
+    middleware: [
+      "requireAuth",
+      "requireInternalAuth",
+      "cors",
+      "rateLimit",
+      "logger",
+      "validate"
+    ]
+  },
+  "trade-worker": {
+    name: "trade-worker",
+    path: "workers/trade-worker",
+    vars: {
+      INTERNAL_KEY_BINDING: {
+        type: "secret",
+        description: "Inter-worker auth key"
+      },
+      TELEGRAM_INTERNAL_KEY_BINDING: {
+        type: "secret",
+        description: "Telegram outbound auth"
+      },
+      BINANCE_KEY_BINDING: { type: "secret", description: "Binance API key" },
+      BINANCE_SECRET_BINDING: {
+        type: "secret",
+        description: "Binance API secret"
+      },
+      MEXC_KEY_BINDING: { type: "secret", description: "MEXC API key" },
+      MEXC_SECRET_BINDING: { type: "secret", description: "MEXC API secret" },
+      BYBIT_KEY_BINDING: { type: "secret", description: "Bybit API key" },
+      BYBIT_SECRET_BINDING: { type: "secret", description: "Bybit API secret" }
+    },
+    services: [
+      {
+        binding: "D1_SERVICE",
+        service: "d1-worker",
+        description: "Database operations"
+      },
+      {
+        binding: "TELEGRAM_SERVICE",
+        service: "telegram-worker",
+        description: "Notifications"
+      }
+    ],
+    infrastructure: {
+      kv: [{ binding: "CONFIG_KV", description: "Configuration" }],
+      d1: [
+        {
+          binding: "DB",
+          database: "trade-data-db",
+          description: "Trade operations"
+        }
+      ],
+      r2: [
+        {
+          binding: "REPORTS_BUCKET",
+          bucket: "trade-reports",
+          description: "Trade reports"
+        },
+        {
+          binding: "SYSTEM_LOGS_BUCKET",
+          bucket: "hoox-system-logs",
+          description: "Verbose exchange logs"
+        }
+      ],
+      queues: { consumer: ["trade-execution"] }
+    },
+    middleware: ["requireInternalAuth"]
+  },
+  "telegram-worker": {
+    name: "telegram-worker",
+    path: "workers/telegram-worker",
+    vars: {
+      INTERNAL_KEY_BINDING: {
+        type: "secret",
+        description: "Inter-worker auth key"
+      },
+      TG_BOT_TOKEN_BINDING: {
+        type: "secret",
+        description: "Telegram bot token"
+      },
+      TG_CHAT_ID_BINDING: { type: "secret", description: "Default chat ID" },
+      TELEGRAM_SECRET_TOKEN: {
+        type: "secret",
+        description: "Webhook verification token"
+      }
+    },
+    services: [],
+    infrastructure: {
+      kv: [{ binding: "CONFIG_KV", description: "Configuration" }],
+      r2: [
+        {
+          binding: "UPLOADS_BUCKET",
+          bucket: "user-uploads",
+          description: "User uploaded files"
+        }
+      ],
+      vectorize: [{ binding: "VECTORIZE_INDEX", index: "my-rag-index" }],
+      ai: true
+    },
+    middleware: ["requireInternalAuth"]
+  },
+  "d1-worker": {
+    name: "d1-worker",
+    path: "workers/d1-worker",
+    vars: {
+      INTERNAL_KEY_BINDING: {
+        type: "secret",
+        description: "Inter-worker auth key"
+      }
+    },
+    services: [],
+    infrastructure: {
+      kv: [{ binding: "CONFIG_KV", description: "Configuration" }],
+      d1: [
+        {
+          binding: "DB",
+          database: "trade-data-db",
+          description: "Main database"
+        }
+      ]
+    },
+    middleware: ["requireInternalAuth"]
+  },
+  "web3-wallet-worker": {
+    name: "web3-wallet-worker",
+    path: "workers/web3-wallet-worker",
+    vars: {
+      WALLET_PK_SECRET: { type: "secret", description: "Wallet private key" },
+      WALLET_MNEMONIC_SECRET: {
+        type: "secret",
+        description: "Wallet mnemonic phrase"
+      }
+    },
+    services: [
+      {
+        binding: "TELEGRAM_SERVICE",
+        service: "telegram-worker",
+        description: "Notifications"
+      }
+    ],
+    infrastructure: {},
+    middleware: ["requireInternalAuth"]
+  },
+  "agent-worker": {
+    name: "agent-worker",
+    path: "workers/agent-worker",
+    vars: {
+      AGENT_INTERNAL_KEY: { type: "secret", description: "Agent worker auth" },
+      INTERNAL_KEY_BINDING: {
+        type: "secret",
+        description: "Inter-worker auth key"
+      }
+    },
+    services: [
+      {
+        binding: "TRADE_SERVICE",
+        service: "trade-worker",
+        description: "Trading functionality"
+      },
+      {
+        binding: "TELEGRAM_SERVICE",
+        service: "telegram-worker",
+        description: "Notifications"
+      }
+    ],
+    infrastructure: {
+      kv: [{ binding: "CONFIG_KV", description: "Configuration" }],
+      d1: [
+        {
+          binding: "DB",
+          database: "trade-data-db",
+          description: "Portfolio queries"
+        }
+      ],
+      ai: true
+    },
+    middleware: ["requireInternalAuth"],
+    cron: ["*/15 * * * *"]
+  },
+  "email-worker": {
+    name: "email-worker",
+    path: "workers/email-worker",
+    vars: {
+      INTERNAL_KEY_BINDING: {
+        type: "secret",
+        description: "Inter-worker auth key"
+      },
+      EMAIL_HOST_BINDING: { type: "secret", description: "Email IMAP host" },
+      EMAIL_USER_BINDING: { type: "secret", description: "Email username" },
+      EMAIL_PASS_BINDING: { type: "secret", description: "Email password" },
+      TRADE_WORKER_NAME: {
+        type: "plaintext",
+        description: "Trade worker service name",
+        default: "trade-worker"
+      },
+      USE_IMAP: {
+        type: "plaintext",
+        description: "Use IMAP for email",
+        default: "false"
+      },
+      MAILGUN_API_KEY: { type: "secret", description: "Mailgun API key" },
+      EMAIL_SCAN_SUBJECT: { type: "secret", description: "Email scan subject" }
+    },
+    services: [
+      {
+        binding: "TRADE_SERVICE",
+        service: "trade-worker",
+        description: "Trading functionality"
+      }
+    ],
+    infrastructure: {
+      kv: [{ binding: "CONFIG_KV", description: "Configuration" }]
+    },
+    middleware: ["requireInternalAuth"],
+    cron: ["*/5 * * * *"]
+  },
+  "analytics-worker": {
+    name: "analytics-worker",
+    path: "workers/analytics-worker",
+    vars: {
+      CLOUDFLARE_API_TOKEN: {
+        type: "secret",
+        description: "CF API token for Analytics SQL"
+      },
+      CLOUDFLARE_ACCOUNT_ID: {
+        type: "plaintext",
+        description: "CF Account ID"
+      }
+    },
+    services: [],
+    infrastructure: {
+      analyticsEngine: true
+    },
+    middleware: []
+  },
+  "report-worker": {
+    name: "report-worker",
+    path: "workers/report-worker",
+    vars: {
+      CF_API_TOKEN_BINDING: {
+        type: "secret",
+        description: "CF API token for Browser Rendering"
+      },
+      ACCOUNT_ID: { type: "plaintext", description: "CF Account ID" }
+    },
+    services: [
+      {
+        binding: "D1_SERVICE",
+        service: "d1-worker",
+        description: "Database queries"
+      },
+      {
+        binding: "TELEGRAM_SERVICE",
+        service: "telegram-worker",
+        description: "Notifications"
+      }
+    ],
+    infrastructure: {
+      r2: [
+        {
+          binding: "REPORTS_BUCKET",
+          bucket: "trade-reports",
+          description: "PDF reports"
+        }
+      ]
+    },
+    middleware: ["requireInternalAuth"],
+    cron: ["0 8 * * *", "0 18 * * *"]
+  },
+  "pyne-worker": {
+    name: "pyne-worker",
+    path: "workers/pyne-worker",
+    vars: {
+      API_KEY: {
+        type: "secret",
+        description: "X-API-Key for /run and management endpoints"
+      },
+      ALERT_WEBHOOK_URL: {
+        type: "secret",
+        description: "Default HTTPS webhook for alert()/alertcondition()"
+      },
+      TRADE_WORKER_NAME: {
+        type: "plaintext",
+        description: "Trade worker service name",
+        default: "trade-worker"
+      }
+    },
+    services: [
+      {
+        binding: "TRADE_SERVICE",
+        service: "trade-worker",
+        description: "Forward strategy trade events"
+      }
+    ],
+    infrastructure: {
+      r2: [
+        {
+          binding: "OHLCV_DATA",
+          bucket: "pyne-worker-ohlcv",
+          description: "OHLCV klines + script registry"
+        }
+      ]
+    },
+    middleware: [],
+    cron: ["* * * * *"]
+  },
+  dashboard: {
+    name: "dashboard",
+    path: "workers/dashboard",
+    vars: {
+      DASHBOARD_USER: {
+        type: "secret",
+        description: "Dashboard admin username"
+      },
+      DASHBOARD_PASS: {
+        type: "secret",
+        description: "Dashboard admin password"
+      },
+      SESSION_SECRET: { type: "secret", description: "Session encryption key" },
+      PYNE_API_KEY: {
+        type: "secret",
+        description: "Dashboard \u2192 pyne-worker X-API-Key (match API_KEY)"
+      }
+    },
+    services: [
+      {
+        binding: "D1_SERVICE",
+        service: "d1-worker",
+        description: "Database queries"
+      },
+      {
+        binding: "AGENT_SERVICE",
+        service: "agent-worker",
+        description: "AI risk data"
+      },
+      {
+        binding: "PYNE_SERVICE",
+        service: "pyne-worker",
+        description: "PYNE edge evaluate"
+      }
+    ],
+    infrastructure: {
+      kv: [{ binding: "CONFIG_KV", description: "Configuration" }],
+      ai: true
+    },
+    middleware: []
+  }
+};
+var CALLED_BY = deriveCalledBy(manifests);
+var WORKER_MANIFESTS = manifests;
+var WORKER_NAMES = Object.keys(manifests).sort();
+export {
+  WORKER_NAMES,
+  WORKER_MANIFESTS,
+  CALLED_BY
+};

package/dist/schemas/types.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Copyright (c) 2026 HOOX · HOOX · jango-blockchained (hoox-sh)
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Worker Manifest Schema — canonical definition of what each worker expects.
+ */
+export interface WorkerManifest {
+    /** Worker name (e.g. "trade-worker") */
+    name: string;
+    /** Path relative to project root (e.g. "workers/trade-worker") */
+    path: string;
+    /** Vars the worker declares in its wrangler.jsonc `vars` section */
+    vars: Record<string, VarDef>;
+    /** Service bindings this worker calls */
+    services: ServiceBindingDef[];
+    /** Infrastructure bindings this worker needs */
+    infrastructure: InfraBindings;
+    /** Middleware this worker imports from @hoox-sh/hoox-shared */
+    middleware: string[];
+    /** Cron triggers (empty array = none) */
+    cron?: string[];
+}
+export interface VarDef {
+    type: "secret" | "plaintext";
+    description: string;
+    /** Default value for plaintext vars (optional) */
+    default?: string;
+}
+export interface ServiceBindingDef {
+    binding: string;
+    service: string;
+    description: string;
+}
+export interface InfraBindings {
+    kv?: KVBindingDef[];
+    d1?: D1BindingDef[];
+    r2?: R2BindingDef[];
+    queues?: QueueBindingDef;
+    ai?: boolean;
+    vectorize?: VectorizeBindingDef[];
+    analyticsEngine?: boolean;
+    durableObjects?: DOBindingDef[];
+    browser?: boolean;
+}
+export interface KVBindingDef {
+    binding: string;
+    description: string;
+}
+export interface D1BindingDef {
+    binding: string;
+    database: string;
+    description?: string;
+}
+export interface R2BindingDef {
+    binding: string;
+    bucket: string;
+    description?: string;
+}
+export interface QueueBindingDef {
+    producer?: string[];
+    consumer?: string[];
+}
+export interface VectorizeBindingDef {
+    binding: string;
+    index: string;
+}
+export interface DOBindingDef {
+    name: string;
+    className: string;
+}
+export interface ValidationError {
+    worker: string;
+    severity: "error" | "warning";
+    message: string;
+    file?: string;
+}
+export interface ValidationReport {
+    worker: string;
+    passed: boolean;
+    errors: ValidationError[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/schemas/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/schemas/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AAEH,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,yCAAyC;IACzC,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,gDAAgD;IAChD,cAAc,EAAE,aAAa,CAAC;IAC9B,+DAA+D;IAC/D,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;IACpB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;IACpB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,SAAS,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAClC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B"}

package/dist/schemas/types.js

@@ -0,0 +1 @@
+// @bun

package/dist/schemas/validators.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Copyright (c) 2026 HOOX · HOOX · jango-blockchained (hoox-sh)
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { WorkerManifest, ValidationError } from "./types.js";
+/**
+ * Validate a per-worker wrangler.jsonc against its manifest.
+ * Returns an array of errors (empty = perfect match).
+ */
+export declare function validateWranglerJsonc(workerName: string, manifest: WorkerManifest, jsoncContent: string): ValidationError[];
+/**
+ * Validate root wrangler.jsonc secrets list against manifest.
+ */
+export declare function validateRootSecrets(workerName: string, manifest: WorkerManifest, rootJsoncContent: string): ValidationError[];
+/**
+ * Validate .dev.vars content against manifest.
+ */
+export declare function validateDevVars(workerName: string, manifest: WorkerManifest, devVarsContent: string): ValidationError[];
+/**
+ * Generate a complete per-worker wrangler.jsonc from a manifest.
+ */
+export declare function generateWranglerJsonc(manifest: WorkerManifest): string;
+/**
+ * Generate a .dev.vars template from a manifest.
+ */
+export declare function generateDevVars(manifest: WorkerManifest): string;
+/**
+ * Run all validators for a worker.
+ */
+export declare function validateAll(workerName: string, manifest: WorkerManifest, files: {
+    wranglerJsonc: string;
+    rootWranglerJsonc: string;
+    devVars: string;
+}): {
+    worker: string;
+    passed: boolean;
+    errors: ValidationError[];
+};
+//# sourceMappingURL=validators.d.ts.map

package/dist/schemas/validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../src/schemas/validators.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAalE;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,cAAc,EACxB,YAAY,EAAE,MAAM,GACnB,eAAe,EAAE,CA4GnB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,cAAc,EACxB,gBAAgB,EAAE,MAAM,GACvB,eAAe,EAAE,CA2CnB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,cAAc,EACxB,cAAc,EAAE,MAAM,GACrB,eAAe,EAAE,CA6BnB;AAID;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAmItE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAYhE;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE;IACL,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB,GACA;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,eAAe,EAAE,CAAA;CAAE,CAWhE"}