@hoox-sh/hoox-shared 1.2.1 → 1.4.0

package/dist/index.js

@@ -269,6 +269,7 @@ var KV_BOT_ENABLED = "bot:enabled";
 var KV_BOT_DEFAULT_CHAT_ID = "bot:default_chat_id";
 var KV_BOT_NOTIFY_ON_EXECUTION = "bot:notify_on_execution";
 var KV_BOT_NOTIFY_ON_ERROR = "bot:notify_on_error";
+var KV_TELEGRAM_ALLOWED_CHAT_IDS = "telegram:allowed_chat_ids";
 var KV_WEBHOOK_IP_CHECK_ENABLED = "webhook:tradingview:ip_check_enabled";
 var KV_WEBHOOK_ALLOWED_IPS = "webhook:tradingview:allowed_ips";
 var KV_WEBHOOK_QUEUE_MODE = "webhook:queue_mode";
@@ -299,6 +300,7 @@ var KVKeys = {
   KV_BOT_DEFAULT_CHAT_ID,
   KV_BOT_NOTIFY_ON_EXECUTION,
   KV_BOT_NOTIFY_ON_ERROR,
+  KV_TELEGRAM_ALLOWED_CHAT_IDS,
   KV_WEBHOOK_IP_CHECK_ENABLED,
   KV_WEBHOOK_ALLOWED_IPS,
   KV_WEBHOOK_QUEUE_MODE,
@@ -686,8 +688,10 @@ function toError(err, fallback = "Unknown error") {
     return err.message;
   if (typeof err === "string")
     return err;
-  if (err && typeof err === "object" && "message" in err && typeof err.message === "string") {
-    return err.message;
+  if (err && typeof err === "object" && "message" in err) {
+    const message = err.message;
+    if (typeof message === "string")
+      return message;
   }
   if (err === null || err === undefined)
     return fallback;
@@ -1773,14 +1777,16 @@ var TradeActionSchema = z2.enum([
   "CLOSE_LONG",
   "CLOSE_SHORT"
 ]);
+var MAX_WEBHOOK_LEVERAGE = 125;
+var MAX_WEBHOOK_QUANTITY = 1e6;
 var WebhookPayloadSchema = z2.object({
   exchange: z2.string().min(1),
   action: TradeActionSchema,
   symbol: z2.string().min(1).max(20),
-  quantity: z2.number().positive().finite(),
+  quantity: z2.number().positive().finite().max(MAX_WEBHOOK_QUANTITY),
   price: z2.number().positive().finite().optional(),
   orderType: z2.string().optional(),
-  leverage: z2.number().int().positive().optional(),
+  leverage: z2.number().int().positive().max(MAX_WEBHOOK_LEVERAGE).optional(),
   test: z2.boolean().optional()
 }).strict();
 var TradeQueueMessageSchema = z2.object({
@@ -1788,9 +1794,9 @@ var TradeQueueMessageSchema = z2.object({
   exchange: z2.string().min(1).max(64),
   action: TradeActionSchema,
   symbol: z2.string().min(1).max(32),
-  quantity: z2.number().positive().finite(),
+  quantity: z2.number().positive().finite().max(MAX_WEBHOOK_QUANTITY),
   price: z2.number().positive().finite().optional(),
-  leverage: z2.number().int().positive().max(125).optional(),
+  leverage: z2.number().int().positive().max(MAX_WEBHOOK_LEVERAGE).optional(),
   test: z2.boolean().optional(),
   idempotencyKey: z2.string().min(1).max(512).optional(),
   queuedAt: z2.string().min(1).max(64)
@@ -1880,6 +1886,53 @@ async function logKvTimestamp(env, prefix = "timestamp") {
     console.error(`Failed to log timestamp to KV: ${toError(error, "Unknown error")}`);
   }
 }
+var KV_BULK_GET_MAX_KEYS = 100;
+async function tryBulkGetChunk(kv, chunk) {
+  try {
+    const result = await kv.get([...chunk]);
+    if (!(result instanceof Map)) {
+      return null;
+    }
+    return chunk.map((key) => result.get(key) ?? null);
+  } catch {
+    return null;
+  }
+}
+async function kvGetMany(kv, keys) {
+  if (keys.length === 0)
+    return [];
+  const out = new Array(keys.length);
+  let offset = 0;
+  while (offset < keys.length) {
+    const chunk = keys.slice(offset, offset + KV_BULK_GET_MAX_KEYS);
+    const bulk = await tryBulkGetChunk(kv, chunk);
+    if (bulk === null) {
+      const rest = await Promise.all(keys.slice(offset).map((key) => kv.get(key)));
+      for (let i = 0;i < rest.length; i++) {
+        out[offset + i] = rest[i] ?? null;
+      }
+      return out;
+    }
+    for (let i = 0;i < bulk.length; i++) {
+      out[offset + i] = bulk[i] ?? null;
+    }
+    offset += chunk.length;
+  }
+  return out;
+}
+async function kvGetManyAsRecord(kv, keys) {
+  const values = await kvGetMany(kv, keys);
+  const out = {};
+  for (let i = 0;i < keys.length; i++) {
+    out[keys[i]] = values[i] ?? null;
+  }
+  return out;
+}
+async function kvPutMany(kv, entries) {
+  if (entries.length === 0)
+    return;
+  await Promise.all(entries.map((entry) => kv.put(entry.key, entry.value, entry.options)));
+}
 function headersToObject(headers) {
   const result = {};
   if (!headers)
@@ -1895,29 +1948,60 @@ function headersToObject(headers) {
 }
 
 // src/queue-handler.ts
+async function mapPool(items, concurrency, fn) {
+  if (items.length === 0)
+    return;
+  const limit = Math.min(Math.max(1, concurrency), items.length);
+  if (limit === 1) {
+    for (const item of items) {
+      await fn(item);
+    }
+    return;
+  }
+  let nextIndex = 0;
+  async function worker() {
+    while (true) {
+      const i = nextIndex++;
+      if (i >= items.length)
+        return;
+      await fn(items[i]);
+    }
+  }
+  await Promise.all(Array.from({ length: limit }, () => worker()));
+}
 function createQueueHandler(options) {
-  const { maxRetries, backoffDelays, onMessage, onRetry, onDLQ, logger } = options;
-  return async (batch) => {
-    for (const msg of batch.messages) {
-      const attemptNumber = msg.attempts || 0;
-      const logId = `[${msg.id}]`;
-      try {
-        logger?.info(`${logId} Processing message (attempt ${attemptNumber + 1})`);
-        await onMessage(msg.body, attemptNumber);
-        logger?.info(`${logId} Message processed successfully`);
-      } catch (error) {
-        const errorMsg = error instanceof Error ? error.message : String(error);
-        if (attemptNumber < maxRetries) {
-          const delaySeconds = backoffDelays[attemptNumber] ?? backoffDelays[backoffDelays.length - 1];
-          logger?.info(`${logId} Retrying in ${delaySeconds}s (attempt ${attemptNumber + 2}/${maxRetries + 1})`);
-          await onRetry?.(msg.body, attemptNumber, errorMsg, delaySeconds);
-          msg.retry({ delaySeconds });
-        } else {
-          logger?.error(`${logId} Max retries exceeded (${maxRetries + 1} attempts), moving to DLQ`);
-          await onDLQ?.(msg.body, attemptNumber, errorMsg);
-        }
+  const {
+    maxRetries,
+    backoffDelays,
+    onMessage,
+    onRetry,
+    onDLQ,
+    logger,
+    concurrency: concurrencyOpt
+  } = options;
+  const concurrency = typeof concurrencyOpt === "number" && Number.isFinite(concurrencyOpt) && concurrencyOpt >= 1 ? Math.floor(concurrencyOpt) : 1;
+  async function processMessage(msg) {
+    const attemptNumber = msg.attempts || 0;
+    const logId = `[${msg.id}]`;
+    try {
+      logger?.info(`${logId} Processing message (attempt ${attemptNumber + 1})`);
+      await onMessage(msg.body, attemptNumber);
+      logger?.info(`${logId} Message processed successfully`);
+    } catch (error) {
+      const errorMsg = error instanceof Error ? error.message : String(error);
+      if (attemptNumber < maxRetries) {
+        const delaySeconds = backoffDelays[attemptNumber] ?? backoffDelays[backoffDelays.length - 1] ?? 0;
+        logger?.info(`${logId} Retrying in ${delaySeconds}s (attempt ${attemptNumber + 2}/${maxRetries + 1})`);
+        await onRetry?.(msg.body, attemptNumber, errorMsg, delaySeconds);
+        msg.retry({ delaySeconds });
+      } else {
+        logger?.error(`${logId} Max retries exceeded (${maxRetries + 1} attempts), moving to DLQ`);
+        await onDLQ?.(msg.body, attemptNumber, errorMsg);
       }
     }
+  }
+  return async (batch) => {
+    await mapPool(batch.messages, concurrency, processMessage);
   };
 }
 
@@ -1929,12 +2013,24 @@ function timingSafeEqual(a, b) {
   const len = Math.max(aBuf.length, bBuf.length);
   let result = aBuf.length === bBuf.length ? 0 : 1;
   for (let i = 0;i < len; i++) {
-    const av = i < aBuf.length ? aBuf[i] : 0;
-    const bv = i < bBuf.length ? bBuf[i] : 0;
+    const av = aBuf[i] ?? 0;
+    const bv = bBuf[i] ?? 0;
     result |= av ^ bv;
   }
   return result === 0;
 }
+async function timingSafeEqualAsync(a, b) {
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle || typeof subtle.digest !== "function" || typeof subtle.timingSafeEqual !== "function") {
+    return timingSafeEqual(a, b);
+  }
+  const encoder = new TextEncoder;
+  const [providedHash, expectedHash] = await Promise.all([
+    subtle.digest("SHA-256", encoder.encode(a)),
+    subtle.digest("SHA-256", encoder.encode(b))
+  ]);
+  return subtle.timingSafeEqual(providedHash, expectedHash);
+}
 function resolveOperatorApiKey(env) {
   const preferred = env.OPERATOR_API_KEY;
   if (typeof preferred === "string" && preferred.length > 0) {
@@ -1959,7 +2055,7 @@ async function requireOperatorAuth(request, env) {
   }
   const authHeader = request.headers.get("Authorization");
   const expectedHeader = `Bearer ${apiKey}`;
-  if (!authHeader || !timingSafeEqual(authHeader, expectedHeader)) {
+  if (!authHeader || !await timingSafeEqualAsync(authHeader, expectedHeader)) {
     return new Response(JSON.stringify({ error: "Unauthorized" }), {
       status: 401,
       headers: { "Content-Type": "application/json" }
@@ -1992,12 +2088,13 @@ function collectInternalAuthKeys(env, keyNames) {
   return keys;
 }
 function matchesAnyInternalAuthKey(providedKey, expectedKeys) {
+  let matched = false;
   for (const expected of expectedKeys) {
     if (timingSafeEqual(providedKey, expected)) {
-      return true;
+      matched = true;
     }
   }
-  return false;
+  return matched;
 }
 function internalAuthNotConfiguredResponse(keyNames) {
   const label = normalizeKeyNames(keyNames).join(" | ");
@@ -2236,7 +2333,13 @@ function createMockEnv(overrides) {
 }
 
 // src/path-utils.ts
-import { existsSync as existsSync3 } from "fs";
+import {
+  existsSync as existsSync3,
+  mkdirSync as mkdirSync2,
+  readFileSync as readFileSync3,
+  writeFileSync as writeFileSync2,
+  chmodSync as chmodSync2
+} from "fs";
 import { homedir as homedir2 } from "os";
 import { dirname, join as join3, resolve } from "path";
 function createHooxPath(path) {
@@ -2262,7 +2365,55 @@ function isHooxSetupRoot(dir) {
     return false;
   try {
     const root = resolve(dir);
-    return existsSync3(join3(root, "wrangler.jsonc")) && existsSync3(join3(root, "packages", "cli", "package.json"));
+    if (!existsSync3(join3(root, "packages", "cli", "package.json"))) {
+      return false;
+    }
+    return existsSync3(join3(root, "wrangler.jsonc")) || existsSync3(join3(root, "wrangler.jsonc.example")) || existsSync3(join3(root, "workers")) || existsSync3(join3(root, ".gitmodules"));
+  } catch {
+    return false;
+  }
+}
+function getRememberedMonorepoPath() {
+  return resolveHooxPath("config/monorepo.json");
+}
+function getRememberedMonorepoRoot() {
+  try {
+    const path = getRememberedMonorepoPath();
+    if (!existsSync3(path))
+      return null;
+    const raw = readFileSync3(path, "utf-8");
+    const data = JSON.parse(raw);
+    if (!data.root || typeof data.root !== "string")
+      return null;
+    const resolved = resolve(data.root);
+    return isHooxSetupRoot(resolved) ? resolved : null;
+  } catch {
+    return null;
+  }
+}
+function rememberMonorepoRoot(root) {
+  try {
+    const resolved = resolve(root);
+    if (!isHooxSetupRoot(resolved))
+      return false;
+    const configDir = getHooxConfigDir();
+    mkdirSync2(configDir, { recursive: true, mode: 448 });
+    try {
+      chmodSync2(configDir, 448);
+    } catch {}
+    const payload = {
+      root: resolved,
+      updatedAt: new Date().toISOString()
+    };
+    const path = getRememberedMonorepoPath();
+    writeFileSync2(path, JSON.stringify(payload, null, 2) + `
+`, {
+      mode: 384
+    });
+    try {
+      chmodSync2(path, 384);
+    } catch {}
+    return true;
   } catch {
     return false;
   }
@@ -2282,6 +2433,7 @@ function resolveHooxRuntimeRoot(options) {
   const env = options?.env ?? process.env;
   const cwd = resolve(options?.cwd ?? process.cwd());
   const globalRepo = getHooxRepoPath();
+  const remembered = options?.skipRemembered ? null : getRememberedMonorepoRoot();
   const envRepo = env.HOOX_REPO?.trim();
   if (envRepo) {
     const resolved = resolve(envRepo);
@@ -2292,6 +2444,7 @@ function resolveHooxRuntimeRoot(options) {
         checked: {
           env: resolved,
           cwd: findHooxSetupRoot(cwd),
+          remembered,
           global: globalRepo
         }
       };
@@ -2302,6 +2455,7 @@ function resolveHooxRuntimeRoot(options) {
       checked: {
         env: resolved,
         cwd: findHooxSetupRoot(cwd),
+        remembered,
         global: globalRepo
       }
     };
@@ -2311,20 +2465,27 @@ function resolveHooxRuntimeRoot(options) {
     return {
       root: local,
       source: "cwd",
-      checked: { cwd: local, global: globalRepo }
+      checked: { cwd: local, remembered, global: globalRepo }
+    };
+  }
+  if (remembered) {
+    return {
+      root: remembered,
+      source: "remembered",
+      checked: { cwd: null, remembered, global: globalRepo }
     };
   }
   if (isHooxSetupRoot(globalRepo)) {
     return {
       root: globalRepo,
       source: "global",
-      checked: { cwd: null, global: globalRepo }
+      checked: { cwd: null, remembered: null, global: globalRepo }
     };
   }
   return {
     root: null,
     source: "none",
-    checked: { cwd: null, global: globalRepo }
+    checked: { cwd: null, remembered: null, global: globalRepo }
   };
 }
 function getTuiEntryCandidates(runtimeRoot) {
@@ -2496,7 +2657,7 @@ var PRESETS = [
       "analytics-worker",
       "telegram-worker"
     ],
-    integrations: ["binance", "telegram"]
+    integrations: ["exchange", "telegram"]
   },
   {
     name: "full",
@@ -2513,15 +2674,7 @@ var PRESETS = [
       "web3-wallet-worker",
       "pyne-worker"
     ],
-    integrations: [
-      "binance",
-      "bybit",
-      "mexc",
-      "telegram",
-      "openai",
-      "wallet",
-      "pyne"
-    ]
+    integrations: ["exchange", "telegram", "openai", "wallet", "pyne"]
   }
 ];
 var WORKER_DEPENDENCIES = {
@@ -2553,30 +2706,12 @@ function resolveDependencies(selected) {
 }
 var INTEGRATIONS = [
   {
-    key: "binance",
-    label: "Binance Exchange",
-    workerName: "trade-worker",
-    secrets: {
-      BINANCE_KEY_BINDING: "Binance API Key",
-      BINANCE_SECRET_BINDING: "Binance API Secret"
-    }
-  },
-  {
-    key: "mexc",
-    label: "MEXC Exchange",
+    key: "exchange",
+    label: "Exchange API (Binance / Bybit / MEXC)",
     workerName: "trade-worker",
     secrets: {
-      MEXC_KEY_BINDING: "MEXC API Key",
-      MEXC_SECRET_BINDING: "MEXC API Secret"
-    }
-  },
-  {
-    key: "bybit",
-    label: "Bybit Exchange",
-    workerName: "trade-worker",
-    secrets: {
-      BYBIT_KEY_BINDING: "Bybit API Key",
-      BYBIT_SECRET_BINDING: "Bybit API Secret"
+      EXCHANGE_KEY_BINDING: "Exchange API Key",
+      EXCHANGE_SECRET_BINDING: "Exchange API Secret"
     }
   },
   {
@@ -2806,7 +2941,11 @@ class WizardEngine {
     return { ...this.state };
   }
   getCurrentStep() {
-    return STEPS.find((s) => s.id === this.state.step) ?? STEPS[0];
+    const step = STEPS.find((s) => s.id === this.state.step) ?? STEPS[0];
+    if (!step) {
+      throw new Error("Wizard has no steps defined");
+    }
+    return step;
   }
   getCompletedSteps() {
     return [...this.state.completedSteps];
@@ -2829,8 +2968,11 @@ class WizardEngine {
       this.state.completedSteps.push(this.state.step);
     }
     const currentIdx = STEP_ORDER.indexOf(this.state.step);
-    if (currentIdx < STEP_ORDER.length - 1) {
-      this.state.step = STEP_ORDER[currentIdx + 1];
+    if (currentIdx >= 0 && currentIdx < STEP_ORDER.length - 1) {
+      const nextStep = STEP_ORDER[currentIdx + 1];
+      if (nextStep !== undefined) {
+        this.state.step = nextStep;
+      }
     }
     this.state.updatedAt = Date.now();
     return [];
@@ -2841,6 +2983,8 @@ class WizardEngine {
     const currentIdx = STEP_ORDER.indexOf(this.state.step);
     if (currentIdx > 0) {
       const previousStep = STEP_ORDER[currentIdx - 1];
+      if (previousStep === undefined)
+        return;
       this.state.step = previousStep;
       this.state.completedSteps = this.state.completedSteps.filter((s) => s !== this.state.step || STEP_ORDER.indexOf(s) <= STEP_ORDER.indexOf(previousStep));
     }
@@ -2998,9 +3142,12 @@ function deriveCalledBy(manifests) {
     if (!calledBy[workerName])
       calledBy[workerName] = new Set;
     for (const svc of manifest.services) {
-      if (!calledBy[svc.service])
-        calledBy[svc.service] = new Set;
-      calledBy[svc.service].add(workerName);
+      let callers = calledBy[svc.service];
+      if (!callers) {
+        callers = new Set;
+        calledBy[svc.service] = callers;
+      }
+      callers.add(workerName);
     }
   }
   const result = {};
@@ -3013,6 +3160,7 @@ var manifests = {
   hoox: {
     name: "hoox",
     path: "workers/hoox-worker",
+    defaultEnabled: true,
     vars: {
       WEBHOOK_API_KEY_BINDING: {
         type: "secret",
@@ -3022,7 +3170,11 @@ var manifests = {
         type: "secret",
         description: "Inter-worker auth key"
       },
-      HA_TOKEN_BINDING: { type: "secret", description: "Home Assistant token" }
+      HA_TOKEN_BINDING: { type: "secret", description: "Home Assistant token" },
+      TELEGRAM_ALLOWED_CHAT_IDS: {
+        type: "secret",
+        description: "Comma-separated chat IDs for webhook notify (fail-closed when unset); alias AUTHORIZED_CHAT_IDS"
+      }
     },
     services: [
       {
@@ -3048,7 +3200,8 @@ var manifests = {
       ai: true,
       queues: { producer: ["trade-execution"] },
       durableObjects: [
-        { name: "IDEMPOTENCY_STORE", className: "IdempotencyStore" }
+        { name: "IDEMPOTENCY_STORE", className: "IdempotencyStore" },
+        { name: "RATE_LIMITER", className: "RateLimiterStore" }
       ]
     },
     middleware: [
@@ -3063,6 +3216,7 @@ var manifests = {
   "trade-worker": {
     name: "trade-worker",
     path: "workers/trade-worker",
+    defaultEnabled: true,
     vars: {
       INTERNAL_KEY_BINDING: {
         type: "secret",
@@ -3072,15 +3226,22 @@ var manifests = {
         type: "secret",
         description: "Telegram outbound auth"
       },
-      BINANCE_KEY_BINDING: { type: "secret", description: "Binance API key" },
-      BINANCE_SECRET_BINDING: {
+      EXCHANGE_KEY_BINDING: {
+        type: "secret",
+        description: "Unified exchange API key (Binance / Bybit / MEXC)"
+      },
+      EXCHANGE_SECRET_BINDING: {
+        type: "secret",
+        description: "Unified exchange API secret"
+      },
+      EXCHANGE_TESTNET_KEY_BINDING: {
         type: "secret",
-        description: "Binance API secret"
+        description: "Optional unified testnet API key"
       },
-      MEXC_KEY_BINDING: { type: "secret", description: "MEXC API key" },
-      MEXC_SECRET_BINDING: { type: "secret", description: "MEXC API secret" },
-      BYBIT_KEY_BINDING: { type: "secret", description: "Bybit API key" },
-      BYBIT_SECRET_BINDING: { type: "secret", description: "Bybit API secret" }
+      EXCHANGE_TESTNET_SECRET_BINDING: {
+        type: "secret",
+        description: "Optional unified testnet API secret"
+      }
     },
     services: [
       {
@@ -3122,6 +3283,7 @@ var manifests = {
   "telegram-worker": {
     name: "telegram-worker",
     path: "workers/telegram-worker",
+    defaultEnabled: true,
     vars: {
       INTERNAL_KEY_BINDING: {
         type: "secret",
@@ -3135,6 +3297,10 @@ var manifests = {
       TELEGRAM_SECRET_TOKEN: {
         type: "secret",
         description: "Webhook verification token"
+      },
+      AUTHORIZED_CHAT_IDS: {
+        type: "secret",
+        description: "Comma-separated chat IDs; inbound webhook fail-closed when unset; outbound /alert allowlist"
       }
     },
     services: [],
@@ -3155,6 +3321,7 @@ var manifests = {
   "d1-worker": {
     name: "d1-worker",
     path: "workers/d1-worker",
+    defaultEnabled: true,
     vars: {
       INTERNAL_KEY_BINDING: {
         type: "secret",
@@ -3177,6 +3344,7 @@ var manifests = {
   "web3-wallet-worker": {
     name: "web3-wallet-worker",
     path: "workers/web3-wallet-worker",
+    defaultEnabled: false,
     vars: {
       WALLET_PK_SECRET: { type: "secret", description: "Wallet private key" },
       WALLET_MNEMONIC_SECRET: {
@@ -3197,6 +3365,7 @@ var manifests = {
   "agent-worker": {
     name: "agent-worker",
     path: "workers/agent-worker",
+    defaultEnabled: true,
     vars: {
       AGENT_INTERNAL_KEY: { type: "secret", description: "Agent worker auth" },
       INTERNAL_KEY_BINDING: {
@@ -3233,6 +3402,7 @@ var manifests = {
   "email-worker": {
     name: "email-worker",
     path: "workers/email-worker",
+    defaultEnabled: false,
     vars: {
       INTERNAL_KEY_BINDING: {
         type: "secret",
@@ -3270,6 +3440,7 @@ var manifests = {
   "analytics-worker": {
     name: "analytics-worker",
     path: "workers/analytics-worker",
+    defaultEnabled: true,
     vars: {
       CLOUDFLARE_API_TOKEN: {
         type: "secret",
@@ -3289,6 +3460,7 @@ var manifests = {
   "report-worker": {
     name: "report-worker",
     path: "workers/report-worker",
+    defaultEnabled: false,
     vars: {
       CF_API_TOKEN_BINDING: {
         type: "secret",
@@ -3323,6 +3495,7 @@ var manifests = {
   "pyne-worker": {
     name: "pyne-worker",
     path: "workers/pyne-worker",
+    defaultEnabled: true,
     vars: {
       API_KEY: {
         type: "secret",
@@ -3360,6 +3533,7 @@ var manifests = {
   dashboard: {
     name: "dashboard",
     path: "workers/dashboard",
+    defaultEnabled: true,
     vars: {
       DASHBOARD_USER: {
         type: "secret",
@@ -3402,6 +3576,17 @@ var manifests = {
 var CALLED_BY = deriveCalledBy(manifests);
 var WORKER_MANIFESTS = manifests;
 var WORKER_NAMES = Object.keys(manifests).sort();
+var WORKER_CATALOG = WORKER_NAMES.map((name) => {
+  const m = manifests[name];
+  return {
+    name: m.name,
+    path: m.path,
+    defaultEnabled: m.defaultEnabled
+  };
+});
+function getWorkerDefaultEnabled(name) {
+  return manifests[name]?.defaultEnabled;
+}
 
 // src/schemas/validators.ts
 import { parse } from "jsonc-parser";
@@ -3441,7 +3626,7 @@ function validateWranglerJsonc(workerName, manifest, jsoncContent) {
     }
   }
   for (const [name, def] of Object.entries(manifest.vars)) {
-    if (def.type === "secret" && !name.endsWith("_BINDING") && !name.endsWith("_SECRET") && !name.startsWith("CLOUDFLARE_") && name !== "TELEGRAM_SECRET_TOKEN" && name !== "MAILGUN_API_KEY" && name !== "EMAIL_SCAN_SUBJECT" && name !== "DASHBOARD_USER" && name !== "DASHBOARD_PASS" && name !== "SESSION_SECRET" && name !== "AGENT_INTERNAL_KEY") {
+    if (def.type === "secret" && !name.endsWith("_BINDING") && !name.endsWith("_SECRET") && !name.startsWith("CLOUDFLARE_") && name !== "TELEGRAM_SECRET_TOKEN" && name !== "TELEGRAM_ALLOWED_CHAT_IDS" && name !== "AUTHORIZED_CHAT_IDS" && name !== "MAILGUN_API_KEY" && name !== "EMAIL_SCAN_SUBJECT" && name !== "DASHBOARD_USER" && name !== "DASHBOARD_PASS" && name !== "SESSION_SECRET" && name !== "AGENT_INTERNAL_KEY") {
       errors.push({
         worker: workerName,
         severity: "warning",
@@ -3558,6 +3743,8 @@ function generateWranglerJsonc(manifest) {
     parts.push(`  "vars": {`);
     for (const [i, name] of varKeys.entries()) {
       const def = manifest.vars[name];
+      if (!def)
+        continue;
       const comma = i < varKeys.length - 1 ? "," : "";
       const val = def.type === "secret" ? "__SECRET__" : JSON.stringify(def.default ?? "");
       parts.push(`    "${name}": ${val}${comma}`);
@@ -3677,7 +3864,8 @@ var initialState = {
   sidebarExpanded: true,
   modal: null,
   commandPaletteOpen: false,
-  previousView: null
+  previousView: null,
+  statusErrorExpanded: false
 };
 var useUIStore = create()(immer((set) => ({
   ...initialState,
@@ -3708,6 +3896,12 @@ var useUIStore = create()(immer((set) => ({
       state.activeView = state.previousView;
       state.previousView = null;
     }
+  }),
+  toggleStatusErrorExpanded: () => set((state) => {
+    state.statusErrorExpanded = !state.statusErrorExpanded;
+  }),
+  setStatusErrorExpanded: (expanded) => set((state) => {
+    state.statusErrorExpanded = expanded;
   })
 })));
 
@@ -3730,6 +3924,23 @@ function ringPush(arr, item, max) {
 var tradeStreamAbort = null;
 var logStreamAbort = null;
 var fetchWorkersGeneration = 0;
+var reconnectTimer = null;
+function clearReconnectTimer() {
+  if (reconnectTimer !== null) {
+    clearTimeout(reconnectTimer);
+    reconnectTimer = null;
+  }
+}
+function scheduleReconnect(delayMs) {
+  clearReconnectTimer();
+  if (delayMs < 0)
+    return;
+  reconnectTimer = setTimeout(() => {
+    reconnectTimer = null;
+    scheduledReconnectTick();
+  }, delayMs);
+}
+var scheduledReconnectTick = async () => {};
 var MAX_TRADES = 500;
 var MAX_ALERTS = 100;
 var MAX_LOGS = 1000;
@@ -3753,7 +3964,7 @@ function getBackoffDelay(retryCount) {
   if (retryCount <= 0)
     return 0;
   const index = Math.min(retryCount - 1, BACKOFF_SEQUENCE.length - 1);
-  return BACKOFF_SEQUENCE[index];
+  return BACKOFF_SEQUENCE[index] ?? 0;
 }
 var useServiceStore = create2()(immer2((set, get) => ({
   ...initialState2,
@@ -3764,6 +3975,7 @@ var useServiceStore = create2()(immer2((set, get) => ({
       const data = await hooxFetch2("/v1/workers");
       if (gen !== fetchWorkersGeneration)
         return;
+      clearReconnectTimer();
       set((state) => {
         state.workers = data;
         state.lastUpdated = Date.now();
@@ -3789,6 +4001,7 @@ var useServiceStore = create2()(immer2((set, get) => ({
         timestamp: Date.now(),
         acknowledged: false
       });
+      let nextDelay = 0;
       set((state) => {
         state.lastError = msg;
         state.disconnectedAt = state.disconnectedAt ?? Date.now();
@@ -3797,21 +4010,26 @@ var useServiceStore = create2()(immer2((set, get) => ({
           state.retryCount = state.retryCount + 1;
           if (state.retryCount >= MAX_RETRIES2) {
             state.connectionStatus = "offline";
-            state.lastError = `Connection lost after ${MAX_RETRIES2} retries`;
+            state.lastError = `${msg} (gave up after ${MAX_RETRIES2} retries)`;
+            state.reconnectDelay = 0;
           } else {
             state.reconnectDelay = getBackoffDelay(state.retryCount);
+            nextDelay = state.reconnectDelay;
           }
         } else if (state.connectionStatus === "reconnecting") {
           state.retryCount = state.retryCount + 1;
           if (state.retryCount >= MAX_RETRIES2) {
             state.connectionStatus = "offline";
-            state.lastError = `Connection lost after ${MAX_RETRIES2} retries`;
+            state.lastError = `${msg} (gave up after ${MAX_RETRIES2} retries)`;
             state.reconnectDelay = 0;
           } else {
             state.reconnectDelay = getBackoffDelay(state.retryCount);
+            nextDelay = state.reconnectDelay;
           }
         }
       });
+      if (nextDelay > 0)
+        scheduleReconnect(nextDelay);
     }
   },
   streamTrades: async () => {
@@ -3873,6 +4091,17 @@ var useServiceStore = create2()(immer2((set, get) => ({
     const merged = [...state.alerts, ...alerts];
     state.alerts = merged.length > MAX_ALERTS ? merged.slice(merged.length - MAX_ALERTS) : merged;
   }),
+  acknowledgeAlert: (id) => set((state) => {
+    const hit = state.alerts.find((a) => a.id === id);
+    if (hit)
+      hit.acknowledged = true;
+  }),
+  dismissAlert: (id) => set((state) => {
+    state.alerts = state.alerts.filter((a) => a.id !== id);
+  }),
+  clearLogs: () => set((state) => {
+    state.logs = [];
+  }),
   setConnectionStatus: (status) => set((state) => {
     if (status === "connected") {
       state.retryCount = 0;
@@ -3903,49 +4132,69 @@ var useServiceStore = create2()(immer2((set, get) => ({
     state.metrics = metrics;
     state.lastUpdated = metrics.lastUpdated;
   }),
-  handleConnectionSuccess: () => set((state) => {
-    state.lastSuccessfulFetch = Date.now();
-    state.retryCount = 0;
-    state.lastError = null;
-    state.lastErrorDetails = null;
-    state.reconnectDelay = 0;
-    state.disconnectedAt = null;
-    state.connectionStatus = "connected";
-  }),
-  handleConnectionFailure: (errorMessage) => set((state) => {
-    state.lastError = errorMessage;
-    state.disconnectedAt = state.disconnectedAt ?? Date.now();
-    if (state.connectionStatus === "connected" || state.connectionStatus === "polling") {
-      state.connectionStatus = "reconnecting";
-      state.retryCount = 1;
-      state.reconnectDelay = getBackoffDelay(1);
-    } else if (state.connectionStatus === "reconnecting") {
-      state.retryCount = state.retryCount + 1;
-      if (state.retryCount >= MAX_RETRIES2) {
-        state.connectionStatus = "offline";
-        state.lastError = `Connection lost after ${MAX_RETRIES2} retries`;
-        state.reconnectDelay = 0;
-      } else {
-        state.reconnectDelay = getBackoffDelay(state.retryCount);
+  handleConnectionSuccess: () => {
+    clearReconnectTimer();
+    set((state) => {
+      state.lastSuccessfulFetch = Date.now();
+      state.retryCount = 0;
+      state.lastError = null;
+      state.lastErrorDetails = null;
+      state.reconnectDelay = 0;
+      state.disconnectedAt = null;
+      state.connectionStatus = "connected";
+    });
+  },
+  handleConnectionFailure: (errorMessage) => {
+    let nextDelay = 0;
+    set((state) => {
+      state.lastError = errorMessage;
+      state.disconnectedAt = state.disconnectedAt ?? Date.now();
+      if (state.connectionStatus === "connected" || state.connectionStatus === "polling") {
+        state.connectionStatus = "reconnecting";
+        state.retryCount = 1;
+        state.reconnectDelay = getBackoffDelay(1);
+        nextDelay = state.reconnectDelay;
+      } else if (state.connectionStatus === "reconnecting") {
+        state.retryCount = state.retryCount + 1;
+        if (state.retryCount >= MAX_RETRIES2) {
+          state.connectionStatus = "offline";
+          state.lastError = `${errorMessage} (gave up after ${MAX_RETRIES2} retries)`;
+          state.reconnectDelay = 0;
+        } else {
+          state.reconnectDelay = getBackoffDelay(state.retryCount);
+          nextDelay = state.reconnectDelay;
+        }
       }
-    }
-  }),
-  resetRetries: () => set((state) => {
-    state.retryCount = 0;
-    state.lastError = null;
-    state.lastErrorDetails = null;
-    state.reconnectDelay = 0;
-    state.disconnectedAt = null;
-  }),
-  forceRetry: () => set((state) => {
-    if (state.connectionStatus === "offline") {
-      state.connectionStatus = "polling";
+    });
+    if (nextDelay > 0)
+      scheduleReconnect(nextDelay);
+  },
+  resetRetries: () => {
+    clearReconnectTimer();
+    set((state) => {
       state.retryCount = 0;
       state.lastError = null;
       state.lastErrorDetails = null;
       state.reconnectDelay = 0;
+      state.disconnectedAt = null;
+    });
+  },
+  forceRetry: () => {
+    clearReconnectTimer();
+    const wasOffline = get().connectionStatus === "offline";
+    set((state) => {
+      if (state.connectionStatus === "offline") {
+        state.connectionStatus = "polling";
+        state.retryCount = 0;
+        state.lastError = null;
+        state.lastErrorDetails = null;
+        state.reconnectDelay = 0;
+      }
+    });
+    if (wasOffline) {
+      scheduleReconnect(0);
     }
-  }),
+  },
   setLastErrorDetails: (details) => set((state) => {
     state.lastErrorDetails = details;
     state.lastError = details === null ? null : summarizeCliError(details);
@@ -3968,38 +4217,73 @@ var useServiceStore = create2()(immer2((set, get) => ({
     }, MAX_ALERTS);
   })
 })));
+scheduledReconnectTick = async () => {
+  const status = useServiceStore.getState().connectionStatus;
+  if (status === "reconnecting" || status === "polling") {
+    await useServiceStore.getState().fetchWorkers();
+  }
+};
 
 // src/stores/config-store.ts
 import { create as create3 } from "zustand";
 import { immer as immer3 } from "zustand/middleware/immer";
 import { persist, createJSONStorage } from "zustand/middleware";
-import { chmodSync as chmodSync2, mkdirSync as mkdirSync2, existsSync as existsSync4 } from "fs";
-import { homedir as homedir3 } from "os";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync3, existsSync as existsSync4, readFileSync as readFileSync4 } from "fs";
 import { join as join4 } from "path";
+function getTuiPreferencesPath() {
+  return join4(getHooxHome(), ".tui-state", "preferences.json");
+}
+function getLegacyConfigJsonPath() {
+  return join4(getHooxHome(), "config.json");
+}
+function extractZustandPrefsPayload(raw) {
+  try {
+    const parsed = JSON.parse(raw);
+    if (parsed && typeof parsed === "object" && parsed.state && typeof parsed.state === "object" && !Array.isArray(parsed.state) && (("theme" in parsed.state) || ("refreshIntervalMs" in parsed.state)) && !("apiToken" in parsed)) {
+      return raw;
+    }
+  } catch {}
+  return null;
+}
 var bunConfigStorage = {
   getItem: async (_name) => {
     try {
-      const file = Bun.file(join4(homedir3(), ".hoox", "config.json"));
-      const exists = await file.exists();
-      if (!exists)
-        return null;
-      return await file.text();
+      const prefsPath = getTuiPreferencesPath();
+      const prefsFile = Bun.file(prefsPath);
+      if (await prefsFile.exists()) {
+        return await prefsFile.text();
+      }
+      const legacyPath = getLegacyConfigJsonPath();
+      if (existsSync4(legacyPath)) {
+        const legacyRaw = readFileSync4(legacyPath, "utf-8");
+        const envelope = extractZustandPrefsPayload(legacyRaw);
+        if (envelope) {
+          await bunConfigStorage.setItem(_name, envelope);
+          return envelope;
+        }
+      }
+      return null;
     } catch {
       return null;
     }
   },
   setItem: async (_name, value) => {
-    const dir = join4(homedir3(), ".hoox");
-    if (!existsSync4(dir)) {
-      mkdirSync2(dir, { recursive: true, mode: HOOX_DIR_MODE });
+    const home = getHooxHome();
+    const stateDir = join4(home, ".tui-state");
+    if (!existsSync4(home)) {
+      mkdirSync3(home, { recursive: true, mode: HOOX_DIR_MODE });
+    }
+    if (!existsSync4(stateDir)) {
+      mkdirSync3(stateDir, { recursive: true, mode: HOOX_DIR_MODE });
     }
     try {
-      chmodSync2(dir, HOOX_DIR_MODE);
+      chmodSync3(home, HOOX_DIR_MODE);
+      chmodSync3(stateDir, HOOX_DIR_MODE);
     } catch {}
-    const filePath = join4(dir, "config.json");
+    const filePath = getTuiPreferencesPath();
     await Bun.write(filePath, value);
     try {
-      chmodSync2(filePath, HOOX_CONFIG_FILE_MODE);
+      chmodSync3(filePath, HOOX_CONFIG_FILE_MODE);
     } catch {}
   },
   removeItem: async (_name) => {}
@@ -4071,7 +4355,7 @@ var useConfigStore = create3()(persist(immer3((set) => ({
     state.notifications[channel] = !state.notifications[channel];
   })
 })), {
-  name: "hoox-config",
+  name: "hoox-tui-prefs",
   storage: createJSONStorage(() => bunConfigStorage),
   partialize: (state) => ({
     theme: state.theme,
@@ -4120,6 +4404,7 @@ export {
   resolveHooxRuntimeRoot,
   resolveHooxPath,
   resolveDependencies,
+  rememberMonorepoRoot,
   readConfigSync,
   readConfig,
   parseDashboardManifest,
@@ -4128,7 +4413,10 @@ export {
   logKvTimestamp,
   loadDashboardManifestsFromRoot,
   loadDashboardKvManifestFromRoot,
+  kvPutMany,
   kvManifestFromDashboardManifests,
+  kvGetManyAsRecord,
+  kvGetMany,
   isWithinHooxHome,
   isUnixModeGroupOrWorldAccessible,
   isTruthyKillSwitchFlag,
@@ -4143,7 +4431,10 @@ export {
   healthCheck,
   headersToObject,
   hasOperatorClientCredentials,
+  getWorkerDefaultEnabled,
   getTuiEntryCandidates,
+  getRememberedMonorepoRoot,
+  getRememberedMonorepoPath,
   getRelativeHooxPath,
   getHooxWranglerPath,
   getHooxStatePath,
@@ -4203,6 +4494,7 @@ export {
   WORKER_NAMES,
   WORKER_MANIFESTS,
   WORKER_DEPENDENCIES,
+  WORKER_CATALOG,
   WIZARD_STATE_PATH,
   WALLET_EXECUTE_AUTH_KEY_FIELDS,
   TradeSignalSchema,
@@ -4217,6 +4509,7 @@ export {
   PositionSchema,
   PRESETS,
   LogLevelColor,
+  KV_BULK_GET_MAX_KEYS,
   KVKeys,
   KILL_SWITCH_KEYS,
   KILL_SWITCH_ACTIVE_PREFIX,