@hoox-sh/hoox-shared 1.3.0 → 1.4.0

package/dist/index.js

@@ -269,6 +269,7 @@ var KV_BOT_ENABLED = "bot:enabled";
 var KV_BOT_DEFAULT_CHAT_ID = "bot:default_chat_id";
 var KV_BOT_NOTIFY_ON_EXECUTION = "bot:notify_on_execution";
 var KV_BOT_NOTIFY_ON_ERROR = "bot:notify_on_error";
+var KV_TELEGRAM_ALLOWED_CHAT_IDS = "telegram:allowed_chat_ids";
 var KV_WEBHOOK_IP_CHECK_ENABLED = "webhook:tradingview:ip_check_enabled";
 var KV_WEBHOOK_ALLOWED_IPS = "webhook:tradingview:allowed_ips";
 var KV_WEBHOOK_QUEUE_MODE = "webhook:queue_mode";
@@ -299,6 +300,7 @@ var KVKeys = {
   KV_BOT_DEFAULT_CHAT_ID,
   KV_BOT_NOTIFY_ON_EXECUTION,
   KV_BOT_NOTIFY_ON_ERROR,
+  KV_TELEGRAM_ALLOWED_CHAT_IDS,
   KV_WEBHOOK_IP_CHECK_ENABLED,
   KV_WEBHOOK_ALLOWED_IPS,
   KV_WEBHOOK_QUEUE_MODE,
@@ -686,8 +688,10 @@ function toError(err, fallback = "Unknown error") {
     return err.message;
   if (typeof err === "string")
     return err;
-  if (err && typeof err === "object" && "message" in err && typeof err.message === "string") {
-    return err.message;
+  if (err && typeof err === "object" && "message" in err) {
+    const message = err.message;
+    if (typeof message === "string")
+      return message;
   }
   if (err === null || err === undefined)
     return fallback;
@@ -1773,14 +1777,16 @@ var TradeActionSchema = z2.enum([
   "CLOSE_LONG",
   "CLOSE_SHORT"
 ]);
+var MAX_WEBHOOK_LEVERAGE = 125;
+var MAX_WEBHOOK_QUANTITY = 1e6;
 var WebhookPayloadSchema = z2.object({
   exchange: z2.string().min(1),
   action: TradeActionSchema,
   symbol: z2.string().min(1).max(20),
-  quantity: z2.number().positive().finite(),
+  quantity: z2.number().positive().finite().max(MAX_WEBHOOK_QUANTITY),
   price: z2.number().positive().finite().optional(),
   orderType: z2.string().optional(),
-  leverage: z2.number().int().positive().optional(),
+  leverage: z2.number().int().positive().max(MAX_WEBHOOK_LEVERAGE).optional(),
   test: z2.boolean().optional()
 }).strict();
 var TradeQueueMessageSchema = z2.object({
@@ -1788,9 +1794,9 @@ var TradeQueueMessageSchema = z2.object({
   exchange: z2.string().min(1).max(64),
   action: TradeActionSchema,
   symbol: z2.string().min(1).max(32),
-  quantity: z2.number().positive().finite(),
+  quantity: z2.number().positive().finite().max(MAX_WEBHOOK_QUANTITY),
   price: z2.number().positive().finite().optional(),
-  leverage: z2.number().int().positive().max(125).optional(),
+  leverage: z2.number().int().positive().max(MAX_WEBHOOK_LEVERAGE).optional(),
   test: z2.boolean().optional(),
   idempotencyKey: z2.string().min(1).max(512).optional(),
   queuedAt: z2.string().min(1).max(64)
@@ -1880,6 +1886,53 @@ async function logKvTimestamp(env, prefix = "timestamp") {
     console.error(`Failed to log timestamp to KV: ${toError(error, "Unknown error")}`);
   }
 }
+var KV_BULK_GET_MAX_KEYS = 100;
+async function tryBulkGetChunk(kv, chunk) {
+  try {
+    const result = await kv.get([...chunk]);
+    if (!(result instanceof Map)) {
+      return null;
+    }
+    return chunk.map((key) => result.get(key) ?? null);
+  } catch {
+    return null;
+  }
+}
+async function kvGetMany(kv, keys) {
+  if (keys.length === 0)
+    return [];
+  const out = new Array(keys.length);
+  let offset = 0;
+  while (offset < keys.length) {
+    const chunk = keys.slice(offset, offset + KV_BULK_GET_MAX_KEYS);
+    const bulk = await tryBulkGetChunk(kv, chunk);
+    if (bulk === null) {
+      const rest = await Promise.all(keys.slice(offset).map((key) => kv.get(key)));
+      for (let i = 0;i < rest.length; i++) {
+        out[offset + i] = rest[i] ?? null;
+      }
+      return out;
+    }
+    for (let i = 0;i < bulk.length; i++) {
+      out[offset + i] = bulk[i] ?? null;
+    }
+    offset += chunk.length;
+  }
+  return out;
+}
+async function kvGetManyAsRecord(kv, keys) {
+  const values = await kvGetMany(kv, keys);
+  const out = {};
+  for (let i = 0;i < keys.length; i++) {
+    out[keys[i]] = values[i] ?? null;
+  }
+  return out;
+}
+async function kvPutMany(kv, entries) {
+  if (entries.length === 0)
+    return;
+  await Promise.all(entries.map((entry) => kv.put(entry.key, entry.value, entry.options)));
+}
 function headersToObject(headers) {
   const result = {};
   if (!headers)
@@ -1895,29 +1948,60 @@ function headersToObject(headers) {
 }
 
 // src/queue-handler.ts
+async function mapPool(items, concurrency, fn) {
+  if (items.length === 0)
+    return;
+  const limit = Math.min(Math.max(1, concurrency), items.length);
+  if (limit === 1) {
+    for (const item of items) {
+      await fn(item);
+    }
+    return;
+  }
+  let nextIndex = 0;
+  async function worker() {
+    while (true) {
+      const i = nextIndex++;
+      if (i >= items.length)
+        return;
+      await fn(items[i]);
+    }
+  }
+  await Promise.all(Array.from({ length: limit }, () => worker()));
+}
 function createQueueHandler(options) {
-  const { maxRetries, backoffDelays, onMessage, onRetry, onDLQ, logger } = options;
-  return async (batch) => {
-    for (const msg of batch.messages) {
-      const attemptNumber = msg.attempts || 0;
-      const logId = `[${msg.id}]`;
-      try {
-        logger?.info(`${logId} Processing message (attempt ${attemptNumber + 1})`);
-        await onMessage(msg.body, attemptNumber);
-        logger?.info(`${logId} Message processed successfully`);
-      } catch (error) {
-        const errorMsg = error instanceof Error ? error.message : String(error);
-        if (attemptNumber < maxRetries) {
-          const delaySeconds = backoffDelays[attemptNumber] ?? backoffDelays[backoffDelays.length - 1];
-          logger?.info(`${logId} Retrying in ${delaySeconds}s (attempt ${attemptNumber + 2}/${maxRetries + 1})`);
-          await onRetry?.(msg.body, attemptNumber, errorMsg, delaySeconds);
-          msg.retry({ delaySeconds });
-        } else {
-          logger?.error(`${logId} Max retries exceeded (${maxRetries + 1} attempts), moving to DLQ`);
-          await onDLQ?.(msg.body, attemptNumber, errorMsg);
-        }
+  const {
+    maxRetries,
+    backoffDelays,
+    onMessage,
+    onRetry,
+    onDLQ,
+    logger,
+    concurrency: concurrencyOpt
+  } = options;
+  const concurrency = typeof concurrencyOpt === "number" && Number.isFinite(concurrencyOpt) && concurrencyOpt >= 1 ? Math.floor(concurrencyOpt) : 1;
+  async function processMessage(msg) {
+    const attemptNumber = msg.attempts || 0;
+    const logId = `[${msg.id}]`;
+    try {
+      logger?.info(`${logId} Processing message (attempt ${attemptNumber + 1})`);
+      await onMessage(msg.body, attemptNumber);
+      logger?.info(`${logId} Message processed successfully`);
+    } catch (error) {
+      const errorMsg = error instanceof Error ? error.message : String(error);
+      if (attemptNumber < maxRetries) {
+        const delaySeconds = backoffDelays[attemptNumber] ?? backoffDelays[backoffDelays.length - 1] ?? 0;
+        logger?.info(`${logId} Retrying in ${delaySeconds}s (attempt ${attemptNumber + 2}/${maxRetries + 1})`);
+        await onRetry?.(msg.body, attemptNumber, errorMsg, delaySeconds);
+        msg.retry({ delaySeconds });
+      } else {
+        logger?.error(`${logId} Max retries exceeded (${maxRetries + 1} attempts), moving to DLQ`);
+        await onDLQ?.(msg.body, attemptNumber, errorMsg);
       }
     }
+  }
+  return async (batch) => {
+    await mapPool(batch.messages, concurrency, processMessage);
   };
 }
 
@@ -1929,12 +2013,24 @@ function timingSafeEqual(a, b) {
   const len = Math.max(aBuf.length, bBuf.length);
   let result = aBuf.length === bBuf.length ? 0 : 1;
   for (let i = 0;i < len; i++) {
-    const av = i < aBuf.length ? aBuf[i] : 0;
-    const bv = i < bBuf.length ? bBuf[i] : 0;
+    const av = aBuf[i] ?? 0;
+    const bv = bBuf[i] ?? 0;
     result |= av ^ bv;
   }
   return result === 0;
 }
+async function timingSafeEqualAsync(a, b) {
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle || typeof subtle.digest !== "function" || typeof subtle.timingSafeEqual !== "function") {
+    return timingSafeEqual(a, b);
+  }
+  const encoder = new TextEncoder;
+  const [providedHash, expectedHash] = await Promise.all([
+    subtle.digest("SHA-256", encoder.encode(a)),
+    subtle.digest("SHA-256", encoder.encode(b))
+  ]);
+  return subtle.timingSafeEqual(providedHash, expectedHash);
+}
 function resolveOperatorApiKey(env) {
   const preferred = env.OPERATOR_API_KEY;
   if (typeof preferred === "string" && preferred.length > 0) {
@@ -1959,7 +2055,7 @@ async function requireOperatorAuth(request, env) {
   }
   const authHeader = request.headers.get("Authorization");
   const expectedHeader = `Bearer ${apiKey}`;
-  if (!authHeader || !timingSafeEqual(authHeader, expectedHeader)) {
+  if (!authHeader || !await timingSafeEqualAsync(authHeader, expectedHeader)) {
     return new Response(JSON.stringify({ error: "Unauthorized" }), {
       status: 401,
       headers: { "Content-Type": "application/json" }
@@ -1992,12 +2088,13 @@ function collectInternalAuthKeys(env, keyNames) {
   return keys;
 }
 function matchesAnyInternalAuthKey(providedKey, expectedKeys) {
+  let matched = false;
   for (const expected of expectedKeys) {
     if (timingSafeEqual(providedKey, expected)) {
-      return true;
+      matched = true;
     }
   }
-  return false;
+  return matched;
 }
 function internalAuthNotConfiguredResponse(keyNames) {
   const label = normalizeKeyNames(keyNames).join(" | ");
@@ -2560,7 +2657,7 @@ var PRESETS = [
       "analytics-worker",
       "telegram-worker"
     ],
-    integrations: ["binance", "telegram"]
+    integrations: ["exchange", "telegram"]
   },
   {
     name: "full",
@@ -2577,15 +2674,7 @@ var PRESETS = [
       "web3-wallet-worker",
       "pyne-worker"
     ],
-    integrations: [
-      "binance",
-      "bybit",
-      "mexc",
-      "telegram",
-      "openai",
-      "wallet",
-      "pyne"
-    ]
+    integrations: ["exchange", "telegram", "openai", "wallet", "pyne"]
   }
 ];
 var WORKER_DEPENDENCIES = {
@@ -2617,30 +2706,12 @@ function resolveDependencies(selected) {
 }
 var INTEGRATIONS = [
   {
-    key: "binance",
-    label: "Binance Exchange",
-    workerName: "trade-worker",
-    secrets: {
-      BINANCE_KEY_BINDING: "Binance API Key",
-      BINANCE_SECRET_BINDING: "Binance API Secret"
-    }
-  },
-  {
-    key: "mexc",
-    label: "MEXC Exchange",
-    workerName: "trade-worker",
-    secrets: {
-      MEXC_KEY_BINDING: "MEXC API Key",
-      MEXC_SECRET_BINDING: "MEXC API Secret"
-    }
-  },
-  {
-    key: "bybit",
-    label: "Bybit Exchange",
+    key: "exchange",
+    label: "Exchange API (Binance / Bybit / MEXC)",
     workerName: "trade-worker",
     secrets: {
-      BYBIT_KEY_BINDING: "Bybit API Key",
-      BYBIT_SECRET_BINDING: "Bybit API Secret"
+      EXCHANGE_KEY_BINDING: "Exchange API Key",
+      EXCHANGE_SECRET_BINDING: "Exchange API Secret"
     }
   },
   {
@@ -2870,7 +2941,11 @@ class WizardEngine {
     return { ...this.state };
   }
   getCurrentStep() {
-    return STEPS.find((s) => s.id === this.state.step) ?? STEPS[0];
+    const step = STEPS.find((s) => s.id === this.state.step) ?? STEPS[0];
+    if (!step) {
+      throw new Error("Wizard has no steps defined");
+    }
+    return step;
   }
   getCompletedSteps() {
     return [...this.state.completedSteps];
@@ -2893,8 +2968,11 @@ class WizardEngine {
       this.state.completedSteps.push(this.state.step);
     }
     const currentIdx = STEP_ORDER.indexOf(this.state.step);
-    if (currentIdx < STEP_ORDER.length - 1) {
-      this.state.step = STEP_ORDER[currentIdx + 1];
+    if (currentIdx >= 0 && currentIdx < STEP_ORDER.length - 1) {
+      const nextStep = STEP_ORDER[currentIdx + 1];
+      if (nextStep !== undefined) {
+        this.state.step = nextStep;
+      }
     }
     this.state.updatedAt = Date.now();
     return [];
@@ -2905,6 +2983,8 @@ class WizardEngine {
     const currentIdx = STEP_ORDER.indexOf(this.state.step);
     if (currentIdx > 0) {
       const previousStep = STEP_ORDER[currentIdx - 1];
+      if (previousStep === undefined)
+        return;
       this.state.step = previousStep;
       this.state.completedSteps = this.state.completedSteps.filter((s) => s !== this.state.step || STEP_ORDER.indexOf(s) <= STEP_ORDER.indexOf(previousStep));
     }
@@ -3062,9 +3142,12 @@ function deriveCalledBy(manifests) {
     if (!calledBy[workerName])
       calledBy[workerName] = new Set;
     for (const svc of manifest.services) {
-      if (!calledBy[svc.service])
-        calledBy[svc.service] = new Set;
-      calledBy[svc.service].add(workerName);
+      let callers = calledBy[svc.service];
+      if (!callers) {
+        callers = new Set;
+        calledBy[svc.service] = callers;
+      }
+      callers.add(workerName);
     }
   }
   const result = {};
@@ -3077,6 +3160,7 @@ var manifests = {
   hoox: {
     name: "hoox",
     path: "workers/hoox-worker",
+    defaultEnabled: true,
     vars: {
       WEBHOOK_API_KEY_BINDING: {
         type: "secret",
@@ -3086,7 +3170,11 @@ var manifests = {
         type: "secret",
         description: "Inter-worker auth key"
       },
-      HA_TOKEN_BINDING: { type: "secret", description: "Home Assistant token" }
+      HA_TOKEN_BINDING: { type: "secret", description: "Home Assistant token" },
+      TELEGRAM_ALLOWED_CHAT_IDS: {
+        type: "secret",
+        description: "Comma-separated chat IDs for webhook notify (fail-closed when unset); alias AUTHORIZED_CHAT_IDS"
+      }
     },
     services: [
       {
@@ -3112,7 +3200,8 @@ var manifests = {
       ai: true,
       queues: { producer: ["trade-execution"] },
       durableObjects: [
-        { name: "IDEMPOTENCY_STORE", className: "IdempotencyStore" }
+        { name: "IDEMPOTENCY_STORE", className: "IdempotencyStore" },
+        { name: "RATE_LIMITER", className: "RateLimiterStore" }
       ]
     },
     middleware: [
@@ -3127,6 +3216,7 @@ var manifests = {
   "trade-worker": {
     name: "trade-worker",
     path: "workers/trade-worker",
+    defaultEnabled: true,
     vars: {
       INTERNAL_KEY_BINDING: {
         type: "secret",
@@ -3136,15 +3226,22 @@ var manifests = {
         type: "secret",
         description: "Telegram outbound auth"
       },
-      BINANCE_KEY_BINDING: { type: "secret", description: "Binance API key" },
-      BINANCE_SECRET_BINDING: {
+      EXCHANGE_KEY_BINDING: {
+        type: "secret",
+        description: "Unified exchange API key (Binance / Bybit / MEXC)"
+      },
+      EXCHANGE_SECRET_BINDING: {
+        type: "secret",
+        description: "Unified exchange API secret"
+      },
+      EXCHANGE_TESTNET_KEY_BINDING: {
         type: "secret",
-        description: "Binance API secret"
+        description: "Optional unified testnet API key"
       },
-      MEXC_KEY_BINDING: { type: "secret", description: "MEXC API key" },
-      MEXC_SECRET_BINDING: { type: "secret", description: "MEXC API secret" },
-      BYBIT_KEY_BINDING: { type: "secret", description: "Bybit API key" },
-      BYBIT_SECRET_BINDING: { type: "secret", description: "Bybit API secret" }
+      EXCHANGE_TESTNET_SECRET_BINDING: {
+        type: "secret",
+        description: "Optional unified testnet API secret"
+      }
     },
     services: [
       {
@@ -3186,6 +3283,7 @@ var manifests = {
   "telegram-worker": {
     name: "telegram-worker",
     path: "workers/telegram-worker",
+    defaultEnabled: true,
     vars: {
       INTERNAL_KEY_BINDING: {
         type: "secret",
@@ -3199,6 +3297,10 @@ var manifests = {
       TELEGRAM_SECRET_TOKEN: {
         type: "secret",
         description: "Webhook verification token"
+      },
+      AUTHORIZED_CHAT_IDS: {
+        type: "secret",
+        description: "Comma-separated chat IDs; inbound webhook fail-closed when unset; outbound /alert allowlist"
       }
     },
     services: [],
@@ -3219,6 +3321,7 @@ var manifests = {
   "d1-worker": {
     name: "d1-worker",
     path: "workers/d1-worker",
+    defaultEnabled: true,
     vars: {
       INTERNAL_KEY_BINDING: {
         type: "secret",
@@ -3241,6 +3344,7 @@ var manifests = {
   "web3-wallet-worker": {
     name: "web3-wallet-worker",
     path: "workers/web3-wallet-worker",
+    defaultEnabled: false,
     vars: {
       WALLET_PK_SECRET: { type: "secret", description: "Wallet private key" },
       WALLET_MNEMONIC_SECRET: {
@@ -3261,6 +3365,7 @@ var manifests = {
   "agent-worker": {
     name: "agent-worker",
     path: "workers/agent-worker",
+    defaultEnabled: true,
     vars: {
       AGENT_INTERNAL_KEY: { type: "secret", description: "Agent worker auth" },
       INTERNAL_KEY_BINDING: {
@@ -3297,6 +3402,7 @@ var manifests = {
   "email-worker": {
     name: "email-worker",
     path: "workers/email-worker",
+    defaultEnabled: false,
     vars: {
       INTERNAL_KEY_BINDING: {
         type: "secret",
@@ -3334,6 +3440,7 @@ var manifests = {
   "analytics-worker": {
     name: "analytics-worker",
     path: "workers/analytics-worker",
+    defaultEnabled: true,
     vars: {
       CLOUDFLARE_API_TOKEN: {
         type: "secret",
@@ -3353,6 +3460,7 @@ var manifests = {
   "report-worker": {
     name: "report-worker",
     path: "workers/report-worker",
+    defaultEnabled: false,
     vars: {
       CF_API_TOKEN_BINDING: {
         type: "secret",
@@ -3387,6 +3495,7 @@ var manifests = {
   "pyne-worker": {
     name: "pyne-worker",
     path: "workers/pyne-worker",
+    defaultEnabled: true,
     vars: {
       API_KEY: {
         type: "secret",
@@ -3424,6 +3533,7 @@ var manifests = {
   dashboard: {
     name: "dashboard",
     path: "workers/dashboard",
+    defaultEnabled: true,
     vars: {
       DASHBOARD_USER: {
         type: "secret",
@@ -3466,6 +3576,17 @@ var manifests = {
 var CALLED_BY = deriveCalledBy(manifests);
 var WORKER_MANIFESTS = manifests;
 var WORKER_NAMES = Object.keys(manifests).sort();
+var WORKER_CATALOG = WORKER_NAMES.map((name) => {
+  const m = manifests[name];
+  return {
+    name: m.name,
+    path: m.path,
+    defaultEnabled: m.defaultEnabled
+  };
+});
+function getWorkerDefaultEnabled(name) {
+  return manifests[name]?.defaultEnabled;
+}
 
 // src/schemas/validators.ts
 import { parse } from "jsonc-parser";
@@ -3505,7 +3626,7 @@ function validateWranglerJsonc(workerName, manifest, jsoncContent) {
     }
   }
   for (const [name, def] of Object.entries(manifest.vars)) {
-    if (def.type === "secret" && !name.endsWith("_BINDING") && !name.endsWith("_SECRET") && !name.startsWith("CLOUDFLARE_") && name !== "TELEGRAM_SECRET_TOKEN" && name !== "MAILGUN_API_KEY" && name !== "EMAIL_SCAN_SUBJECT" && name !== "DASHBOARD_USER" && name !== "DASHBOARD_PASS" && name !== "SESSION_SECRET" && name !== "AGENT_INTERNAL_KEY") {
+    if (def.type === "secret" && !name.endsWith("_BINDING") && !name.endsWith("_SECRET") && !name.startsWith("CLOUDFLARE_") && name !== "TELEGRAM_SECRET_TOKEN" && name !== "TELEGRAM_ALLOWED_CHAT_IDS" && name !== "AUTHORIZED_CHAT_IDS" && name !== "MAILGUN_API_KEY" && name !== "EMAIL_SCAN_SUBJECT" && name !== "DASHBOARD_USER" && name !== "DASHBOARD_PASS" && name !== "SESSION_SECRET" && name !== "AGENT_INTERNAL_KEY") {
       errors.push({
         worker: workerName,
         severity: "warning",
@@ -3622,6 +3743,8 @@ function generateWranglerJsonc(manifest) {
     parts.push(`  "vars": {`);
     for (const [i, name] of varKeys.entries()) {
       const def = manifest.vars[name];
+      if (!def)
+        continue;
       const comma = i < varKeys.length - 1 ? "," : "";
       const val = def.type === "secret" ? "__SECRET__" : JSON.stringify(def.default ?? "");
       parts.push(`    "${name}": ${val}${comma}`);
@@ -3841,7 +3964,7 @@ function getBackoffDelay(retryCount) {
   if (retryCount <= 0)
     return 0;
   const index = Math.min(retryCount - 1, BACKOFF_SEQUENCE.length - 1);
-  return BACKOFF_SEQUENCE[index];
+  return BACKOFF_SEQUENCE[index] ?? 0;
 }
 var useServiceStore = create2()(immer2((set, get) => ({
   ...initialState2,
@@ -4290,7 +4413,10 @@ export {
   logKvTimestamp,
   loadDashboardManifestsFromRoot,
   loadDashboardKvManifestFromRoot,
+  kvPutMany,
   kvManifestFromDashboardManifests,
+  kvGetManyAsRecord,
+  kvGetMany,
   isWithinHooxHome,
   isUnixModeGroupOrWorldAccessible,
   isTruthyKillSwitchFlag,
@@ -4305,6 +4431,7 @@ export {
   healthCheck,
   headersToObject,
   hasOperatorClientCredentials,
+  getWorkerDefaultEnabled,
   getTuiEntryCandidates,
   getRememberedMonorepoRoot,
   getRememberedMonorepoPath,
@@ -4367,6 +4494,7 @@ export {
   WORKER_NAMES,
   WORKER_MANIFESTS,
   WORKER_DEPENDENCIES,
+  WORKER_CATALOG,
   WIZARD_STATE_PATH,
   WALLET_EXECUTE_AUTH_KEY_FIELDS,
   TradeSignalSchema,
@@ -4381,6 +4509,7 @@ export {
   PositionSchema,
   PRESETS,
   LogLevelColor,
+  KV_BULK_GET_MAX_KEYS,
   KVKeys,
   KILL_SWITCH_KEYS,
   KILL_SWITCH_ACTIVE_PREFIX,

package/dist/kill-switch.js

@@ -26,6 +26,7 @@ var KV_BOT_ENABLED = "bot:enabled";
 var KV_BOT_DEFAULT_CHAT_ID = "bot:default_chat_id";
 var KV_BOT_NOTIFY_ON_EXECUTION = "bot:notify_on_execution";
 var KV_BOT_NOTIFY_ON_ERROR = "bot:notify_on_error";
+var KV_TELEGRAM_ALLOWED_CHAT_IDS = "telegram:allowed_chat_ids";
 var KV_WEBHOOK_IP_CHECK_ENABLED = "webhook:tradingview:ip_check_enabled";
 var KV_WEBHOOK_ALLOWED_IPS = "webhook:tradingview:allowed_ips";
 var KV_WEBHOOK_QUEUE_MODE = "webhook:queue_mode";
@@ -56,6 +57,7 @@ var KVKeys = {
   KV_BOT_DEFAULT_CHAT_ID,
   KV_BOT_NOTIFY_ON_EXECUTION,
   KV_BOT_NOTIFY_ON_ERROR,
+  KV_TELEGRAM_ALLOWED_CHAT_IDS,
   KV_WEBHOOK_IP_CHECK_ENABLED,
   KV_WEBHOOK_ALLOWED_IPS,
   KV_WEBHOOK_QUEUE_MODE,

package/dist/kvKeys.d.ts

@@ -25,6 +25,8 @@ export declare const KV_BOT_ENABLED = "bot:enabled";
 export declare const KV_BOT_DEFAULT_CHAT_ID = "bot:default_chat_id";
 export declare const KV_BOT_NOTIFY_ON_EXECUTION = "bot:notify_on_execution";
 export declare const KV_BOT_NOTIFY_ON_ERROR = "bot:notify_on_error";
+/** JSON array of string|number — gateway notify chatId allowlist (fail-closed). */
+export declare const KV_TELEGRAM_ALLOWED_CHAT_IDS = "telegram:allowed_chat_ids";
 export declare const KV_WEBHOOK_IP_CHECK_ENABLED = "webhook:tradingview:ip_check_enabled";
 export declare const KV_WEBHOOK_ALLOWED_IPS = "webhook:tradingview:allowed_ips";
 export declare const KV_WEBHOOK_QUEUE_MODE = "webhook:queue_mode";
@@ -55,6 +57,7 @@ export declare const KVKeys: {
     KV_BOT_DEFAULT_CHAT_ID: string;
     KV_BOT_NOTIFY_ON_EXECUTION: string;
     KV_BOT_NOTIFY_ON_ERROR: string;
+    KV_TELEGRAM_ALLOWED_CHAT_IDS: string;
     KV_WEBHOOK_IP_CHECK_ENABLED: string;
     KV_WEBHOOK_ALLOWED_IPS: string;
     KV_WEBHOOK_QUEUE_MODE: string;

package/dist/kvKeys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kvKeys.d.ts","sourceRoot":"","sources":["../src/kvKeys.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;GAYG;AAGH,eAAO,MAAM,yBAAyB,2BAA2B,CAAC;AAClE,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AACpE,eAAO,MAAM,mCAAmC,qCACZ,CAAC;AACrC,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAC5E,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAGhD,eAAO,MAAM,cAAc,gBAAgB,CAAC;AAC5C,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAC5D,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AACpE,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAG5D,eAAO,MAAM,2BAA2B,yCACA,CAAC;AACzC,eAAO,MAAM,sBAAsB,oCAAoC,CAAC;AACxE,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAG1D,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAC1D,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAClD,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAC1D,eAAO,MAAM,uBAAuB,yBAAyB,CAAC;AAC9D,eAAO,MAAM,4BAA4B,8BAA8B,CAAC;AAGxE,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAC9C,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AACtD,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAC5D,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AAGtD,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAG5E,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAC1D,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAC9C,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AAGpE,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AACpD,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AACxD,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAKpD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BlB,CAAC"}
+{"version":3,"file":"kvKeys.d.ts","sourceRoot":"","sources":["../src/kvKeys.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;GAYG;AAGH,eAAO,MAAM,yBAAyB,2BAA2B,CAAC;AAClE,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AACpE,eAAO,MAAM,mCAAmC,qCACZ,CAAC;AACrC,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAC5E,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAGhD,eAAO,MAAM,cAAc,gBAAgB,CAAC;AAC5C,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAC5D,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AACpE,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAC5D,mFAAmF;AACnF,eAAO,MAAM,4BAA4B,8BAA8B,CAAC;AAGxE,eAAO,MAAM,2BAA2B,yCACA,CAAC;AACzC,eAAO,MAAM,sBAAsB,oCAAoC,CAAC;AACxE,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAG1D,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAC1D,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAClD,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAC1D,eAAO,MAAM,uBAAuB,yBAAyB,CAAC;AAC9D,eAAO,MAAM,4BAA4B,8BAA8B,CAAC;AAGxE,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAC9C,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AACtD,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAC5D,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AAGtD,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAG5E,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAC1D,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAC9C,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AAGpE,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AACpD,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AACxD,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAKpD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BlB,CAAC"}

package/dist/kvKeys.js

@@ -26,6 +26,7 @@ var KV_BOT_ENABLED = "bot:enabled";
 var KV_BOT_DEFAULT_CHAT_ID = "bot:default_chat_id";
 var KV_BOT_NOTIFY_ON_EXECUTION = "bot:notify_on_execution";
 var KV_BOT_NOTIFY_ON_ERROR = "bot:notify_on_error";
+var KV_TELEGRAM_ALLOWED_CHAT_IDS = "telegram:allowed_chat_ids";
 var KV_WEBHOOK_IP_CHECK_ENABLED = "webhook:tradingview:ip_check_enabled";
 var KV_WEBHOOK_ALLOWED_IPS = "webhook:tradingview:allowed_ips";
 var KV_WEBHOOK_QUEUE_MODE = "webhook:queue_mode";
@@ -56,6 +57,7 @@ var KVKeys = {
   KV_BOT_DEFAULT_CHAT_ID,
   KV_BOT_NOTIFY_ON_EXECUTION,
   KV_BOT_NOTIFY_ON_ERROR,
+  KV_TELEGRAM_ALLOWED_CHAT_IDS,
   KV_WEBHOOK_IP_CHECK_ENABLED,
   KV_WEBHOOK_ALLOWED_IPS,
   KV_WEBHOOK_QUEUE_MODE,
@@ -89,6 +91,7 @@ export {
   KV_TRADE_MAX_DAILY_DRAWDOWN_PERCENT,
   KV_TRADE_KILL_SWITCH,
   KV_TRADE_DEFAULT_LEVERAGE,
+  KV_TELEGRAM_ALLOWED_CHAT_IDS,
   KV_HOUSEKEEPING_LAST_CHECK,
   KV_HEALTH_CHECK,
   KV_GLOBAL_KILL_SWITCH,