@hoox-sh/hoox-shared 1.3.0 → 1.5.0

package/dist/kill-switch.js

@@ -1,20 +1,4 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/kvKeys.ts
 var KV_TRADE_DEFAULT_LEVERAGE = "trade:default_leverage";
 var KV_TRADE_MAX_POSITION_SIZE = "trade:max_position_size";
@@ -26,6 +10,11 @@ var KV_BOT_ENABLED = "bot:enabled";
 var KV_BOT_DEFAULT_CHAT_ID = "bot:default_chat_id";
 var KV_BOT_NOTIFY_ON_EXECUTION = "bot:notify_on_execution";
 var KV_BOT_NOTIFY_ON_ERROR = "bot:notify_on_error";
+var KV_BOT_NOTIFY_ON_STARTUP = "bot:notify_on_startup";
+var KV_BOT_AI_SUMMARIES_ENABLED = "bot:ai_summaries_enabled";
+var KV_BOT_SUMMARY_STYLE = "bot:summary_style";
+var KV_BOT_INCLUDE_PNL = "bot:include_pnl";
+var KV_TELEGRAM_ALLOWED_CHAT_IDS = "telegram:allowed_chat_ids";
 var KV_WEBHOOK_IP_CHECK_ENABLED = "webhook:tradingview:ip_check_enabled";
 var KV_WEBHOOK_ALLOWED_IPS = "webhook:tradingview:allowed_ips";
 var KV_WEBHOOK_QUEUE_MODE = "webhook:queue_mode";
@@ -56,6 +45,11 @@ var KVKeys = {
   KV_BOT_DEFAULT_CHAT_ID,
   KV_BOT_NOTIFY_ON_EXECUTION,
   KV_BOT_NOTIFY_ON_ERROR,
+  KV_BOT_NOTIFY_ON_STARTUP,
+  KV_BOT_AI_SUMMARIES_ENABLED,
+  KV_BOT_SUMMARY_STYLE,
+  KV_BOT_INCLUDE_PNL,
+  KV_TELEGRAM_ALLOWED_CHAT_IDS,
   KV_WEBHOOK_IP_CHECK_ENABLED,
   KV_WEBHOOK_ALLOWED_IPS,
   KV_WEBHOOK_QUEUE_MODE,
@@ -122,9 +116,9 @@ async function isTradingPaused(kv, options) {
   return result.enabled;
 }
 export {
-  isTruthyKillSwitchFlag,
-  isTradingPaused,
-  checkKillSwitch,
+  KILL_SWITCH_ACTIVE_PREFIX,
   KILL_SWITCH_KEYS,
-  KILL_SWITCH_ACTIVE_PREFIX
+  checkKillSwitch,
+  isTradingPaused,
+  isTruthyKillSwitchFlag
 };

package/dist/kvKeys.d.ts

@@ -25,6 +25,12 @@ export declare const KV_BOT_ENABLED = "bot:enabled";
 export declare const KV_BOT_DEFAULT_CHAT_ID = "bot:default_chat_id";
 export declare const KV_BOT_NOTIFY_ON_EXECUTION = "bot:notify_on_execution";
 export declare const KV_BOT_NOTIFY_ON_ERROR = "bot:notify_on_error";
+export declare const KV_BOT_NOTIFY_ON_STARTUP = "bot:notify_on_startup";
+export declare const KV_BOT_AI_SUMMARIES_ENABLED = "bot:ai_summaries_enabled";
+export declare const KV_BOT_SUMMARY_STYLE = "bot:summary_style";
+export declare const KV_BOT_INCLUDE_PNL = "bot:include_pnl";
+/** JSON array of string|number — gateway notify chatId allowlist (fail-closed). */
+export declare const KV_TELEGRAM_ALLOWED_CHAT_IDS = "telegram:allowed_chat_ids";
 export declare const KV_WEBHOOK_IP_CHECK_ENABLED = "webhook:tradingview:ip_check_enabled";
 export declare const KV_WEBHOOK_ALLOWED_IPS = "webhook:tradingview:allowed_ips";
 export declare const KV_WEBHOOK_QUEUE_MODE = "webhook:queue_mode";
@@ -55,6 +61,11 @@ export declare const KVKeys: {
     KV_BOT_DEFAULT_CHAT_ID: string;
     KV_BOT_NOTIFY_ON_EXECUTION: string;
     KV_BOT_NOTIFY_ON_ERROR: string;
+    KV_BOT_NOTIFY_ON_STARTUP: string;
+    KV_BOT_AI_SUMMARIES_ENABLED: string;
+    KV_BOT_SUMMARY_STYLE: string;
+    KV_BOT_INCLUDE_PNL: string;
+    KV_TELEGRAM_ALLOWED_CHAT_IDS: string;
     KV_WEBHOOK_IP_CHECK_ENABLED: string;
     KV_WEBHOOK_ALLOWED_IPS: string;
     KV_WEBHOOK_QUEUE_MODE: string;

package/dist/kvKeys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kvKeys.d.ts","sourceRoot":"","sources":["../src/kvKeys.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;GAYG;AAGH,eAAO,MAAM,yBAAyB,2BAA2B,CAAC;AAClE,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AACpE,eAAO,MAAM,mCAAmC,qCACZ,CAAC;AACrC,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAC5E,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAGhD,eAAO,MAAM,cAAc,gBAAgB,CAAC;AAC5C,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAC5D,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AACpE,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAG5D,eAAO,MAAM,2BAA2B,yCACA,CAAC;AACzC,eAAO,MAAM,sBAAsB,oCAAoC,CAAC;AACxE,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAG1D,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAC1D,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAClD,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAC1D,eAAO,MAAM,uBAAuB,yBAAyB,CAAC;AAC9D,eAAO,MAAM,4BAA4B,8BAA8B,CAAC;AAGxE,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAC9C,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AACtD,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAC5D,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AAGtD,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAG5E,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAC1D,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAC9C,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AAGpE,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AACpD,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AACxD,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAKpD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BlB,CAAC"}
+{"version":3,"file":"kvKeys.d.ts","sourceRoot":"","sources":["../src/kvKeys.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;GAYG;AAGH,eAAO,MAAM,yBAAyB,2BAA2B,CAAC;AAClE,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AACpE,eAAO,MAAM,mCAAmC,qCACZ,CAAC;AACrC,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAC5E,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAGhD,eAAO,MAAM,cAAc,gBAAgB,CAAC;AAC5C,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAC5D,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AACpE,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAC5D,eAAO,MAAM,wBAAwB,0BAA0B,CAAC;AAChE,eAAO,MAAM,2BAA2B,6BAA6B,CAAC;AACtE,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD,eAAO,MAAM,kBAAkB,oBAAoB,CAAC;AACpD,mFAAmF;AACnF,eAAO,MAAM,4BAA4B,8BAA8B,CAAC;AAGxE,eAAO,MAAM,2BAA2B,yCACA,CAAC;AACzC,eAAO,MAAM,sBAAsB,oCAAoC,CAAC;AACxE,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAG1D,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAC1D,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAClD,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAC1D,eAAO,MAAM,uBAAuB,yBAAyB,CAAC;AAC9D,eAAO,MAAM,4BAA4B,8BAA8B,CAAC;AAGxE,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAC9C,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AACtD,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAC5D,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AAGtD,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAG5E,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAC1D,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAC9C,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AAGpE,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AACpD,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AACxD,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAKpD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmClB,CAAC"}

package/dist/kvKeys.js

@@ -1,20 +1,4 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/kvKeys.ts
 var KV_TRADE_DEFAULT_LEVERAGE = "trade:default_leverage";
 var KV_TRADE_MAX_POSITION_SIZE = "trade:max_position_size";
@@ -26,6 +10,11 @@ var KV_BOT_ENABLED = "bot:enabled";
 var KV_BOT_DEFAULT_CHAT_ID = "bot:default_chat_id";
 var KV_BOT_NOTIFY_ON_EXECUTION = "bot:notify_on_execution";
 var KV_BOT_NOTIFY_ON_ERROR = "bot:notify_on_error";
+var KV_BOT_NOTIFY_ON_STARTUP = "bot:notify_on_startup";
+var KV_BOT_AI_SUMMARIES_ENABLED = "bot:ai_summaries_enabled";
+var KV_BOT_SUMMARY_STYLE = "bot:summary_style";
+var KV_BOT_INCLUDE_PNL = "bot:include_pnl";
+var KV_TELEGRAM_ALLOWED_CHAT_IDS = "telegram:allowed_chat_ids";
 var KV_WEBHOOK_IP_CHECK_ENABLED = "webhook:tradingview:ip_check_enabled";
 var KV_WEBHOOK_ALLOWED_IPS = "webhook:tradingview:allowed_ips";
 var KV_WEBHOOK_QUEUE_MODE = "webhook:queue_mode";
@@ -56,6 +45,11 @@ var KVKeys = {
   KV_BOT_DEFAULT_CHAT_ID,
   KV_BOT_NOTIFY_ON_EXECUTION,
   KV_BOT_NOTIFY_ON_ERROR,
+  KV_BOT_NOTIFY_ON_STARTUP,
+  KV_BOT_AI_SUMMARIES_ENABLED,
+  KV_BOT_SUMMARY_STYLE,
+  KV_BOT_INCLUDE_PNL,
+  KV_TELEGRAM_ALLOWED_CHAT_IDS,
   KV_WEBHOOK_IP_CHECK_ENABLED,
   KV_WEBHOOK_ALLOWED_IPS,
   KV_WEBHOOK_QUEUE_MODE,
@@ -77,34 +71,39 @@ var KVKeys = {
   QUEUE_MODE_DISABLED
 };
 export {
-  QUEUE_MODE_FAILOVER,
-  QUEUE_MODE_EVERYWHERE,
-  QUEUE_MODE_DISABLED,
-  KV_WEBHOOK_QUEUE_MODE,
-  KV_WEBHOOK_IP_CHECK_ENABLED,
-  KV_WEBHOOK_ALLOWED_IPS,
-  KV_TRADE_TRAILING_STOP_PERCENT,
-  KV_TRADE_ROUTING,
-  KV_TRADE_MAX_POSITION_SIZE,
-  KV_TRADE_MAX_DAILY_DRAWDOWN_PERCENT,
-  KV_TRADE_KILL_SWITCH,
-  KV_TRADE_DEFAULT_LEVERAGE,
-  KV_HOUSEKEEPING_LAST_CHECK,
-  KV_HEALTH_CHECK,
-  KV_GLOBAL_KILL_SWITCH,
-  KV_EMAIL_USE_IMAP,
-  KV_EMAIL_SCAN_SUBJECT,
-  KV_EMAIL_QUANTITY_MULTIPLIER,
-  KV_EMAIL_COIN_PATTERN,
-  KV_EMAIL_ACTION_PATTERN,
-  KV_DASHBOARD_AI_HEALTH_SUMMARY,
-  KV_BOT_NOTIFY_ON_EXECUTION,
-  KV_BOT_NOTIFY_ON_ERROR,
-  KV_BOT_ENABLED,
-  KV_BOT_DEFAULT_CHAT_ID,
-  KV_AGENT_OPENAI_KEY,
-  KV_AGENT_GOOGLE_KEY,
-  KV_AGENT_CONFIG,
+  KVKeys,
   KV_AGENT_ANTHROPIC_KEY,
-  KVKeys
+  KV_AGENT_CONFIG,
+  KV_AGENT_GOOGLE_KEY,
+  KV_AGENT_OPENAI_KEY,
+  KV_BOT_AI_SUMMARIES_ENABLED,
+  KV_BOT_DEFAULT_CHAT_ID,
+  KV_BOT_ENABLED,
+  KV_BOT_INCLUDE_PNL,
+  KV_BOT_NOTIFY_ON_ERROR,
+  KV_BOT_NOTIFY_ON_EXECUTION,
+  KV_BOT_NOTIFY_ON_STARTUP,
+  KV_BOT_SUMMARY_STYLE,
+  KV_DASHBOARD_AI_HEALTH_SUMMARY,
+  KV_EMAIL_ACTION_PATTERN,
+  KV_EMAIL_COIN_PATTERN,
+  KV_EMAIL_QUANTITY_MULTIPLIER,
+  KV_EMAIL_SCAN_SUBJECT,
+  KV_EMAIL_USE_IMAP,
+  KV_GLOBAL_KILL_SWITCH,
+  KV_HEALTH_CHECK,
+  KV_HOUSEKEEPING_LAST_CHECK,
+  KV_TELEGRAM_ALLOWED_CHAT_IDS,
+  KV_TRADE_DEFAULT_LEVERAGE,
+  KV_TRADE_KILL_SWITCH,
+  KV_TRADE_MAX_DAILY_DRAWDOWN_PERCENT,
+  KV_TRADE_MAX_POSITION_SIZE,
+  KV_TRADE_ROUTING,
+  KV_TRADE_TRAILING_STOP_PERCENT,
+  KV_WEBHOOK_ALLOWED_IPS,
+  KV_WEBHOOK_IP_CHECK_ENABLED,
+  KV_WEBHOOK_QUEUE_MODE,
+  QUEUE_MODE_DISABLED,
+  QUEUE_MODE_EVERYWHERE,
+  QUEUE_MODE_FAILOVER
 };

package/dist/kvUtils.d.ts

@@ -4,7 +4,7 @@
  */
 /**
  * Utility functions for KV operations
- * Shared across workers that need KV timestamp logging
+ * Shared across workers that need KV timestamp logging and parallel I/O
  */
 import type { KVNamespace } from "@cloudflare/workers-types";
 /**
@@ -21,6 +21,39 @@ export interface EnvWithKV {
  * @returns Promise that resolves when the operation completes
  */
 export declare function logKvTimestamp(env: EnvWithKV, prefix?: string): Promise<void>;
+/**
+ * Max keys per Workers KV bulk read (platform limit).
+ * @see https://developers.cloudflare.com/kv/api/read-key-value-pairs/
+ */
+export declare const KV_BULK_GET_MAX_KEYS = 100;
+/**
+ * Parallel / bulk KV gets — prefer over sequential `await kv.get` loops.
+ * Order of returned values matches `keys`.
+ *
+ * Uses native `kv.get(string[])` bulk reads (up to 100 keys per call) when
+ * available. Bulk reads count as a single operation against the Workers
+ * subrequest limit and avoid simultaneous-connection pressure.
+ * Falls back to `Promise.all` of individual gets for mocks / older runtimes.
+ */
+export declare function kvGetMany(kv: KVNamespace, keys: readonly string[]): Promise<Array<string | null>>;
+/**
+ * Parallel KV gets as a record keyed by the original key names.
+ */
+export declare function kvGetManyAsRecord(kv: KVNamespace, keys: readonly string[]): Promise<Record<string, string | null>>;
+export interface KvPutEntry {
+    key: string;
+    value: string;
+    options?: {
+        expirationTtl?: number;
+        expiration?: number;
+        metadata?: Record<string, unknown>;
+    };
+}
+/**
+ * Parallel KV puts — prefer over sequential `await kv.put` loops
+ * when writes are independent (no read-modify-write races).
+ */
+export declare function kvPutMany(kv: KVNamespace, entries: readonly KvPutEntry[]): Promise<void>;
 /**
  * Helper function to convert Headers to a plain object
  * @param headers - The Headers object to convert

package/dist/kvUtils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kvUtils.d.ts","sourceRoot":"","sources":["../src/kvUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAG7D;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,WAAW,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,SAAS,EACd,MAAM,GAAE,MAAoB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,GAClC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAgBxB"}
+{"version":3,"file":"kvUtils.d.ts","sourceRoot":"","sources":["../src/kvUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAG7D;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,WAAW,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,SAAS,EACd,MAAM,GAAE,MAAoB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAyBxC;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAC7B,EAAE,EAAE,WAAW,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CA0B/B;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,WAAW,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAOxC;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE;QACR,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,CAAC;CACH;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAC7B,EAAE,EAAE,WAAW,EACf,OAAO,EAAE,SAAS,UAAU,EAAE,GAC7B,OAAO,CAAC,IAAI,CAAC,CAKf;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,GAClC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAgBxB"}

package/dist/kvUtils.js

@@ -1,28 +1,14 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/errors.ts
 function toError(err, fallback = "Unknown error") {
   if (err instanceof Error)
     return err.message;
   if (typeof err === "string")
     return err;
-  if (err && typeof err === "object" && "message" in err && typeof err.message === "string") {
-    return err.message;
+  if (err && typeof err === "object" && "message" in err) {
+    const message = err.message;
+    if (typeof message === "string")
+      return message;
   }
   if (err === null || err === undefined)
     return fallback;
@@ -70,14 +56,14 @@ function sanitizeOutput(data) {
     const obj = data;
     const keys = Object.keys(obj);
     if (keys.length < 10) {
-      const sanitized2 = {};
+      const sanitized = {};
       for (const k of keys) {
         if (k === "stack" || k === "cause")
           continue;
         const v = obj[k];
-        sanitized2[k] = v instanceof Error ? { name: v.name, message: v.message } : sanitizeOutput(v);
+        sanitized[k] = v instanceof Error ? { name: v.name, message: v.message } : sanitizeOutput(v);
       }
-      return sanitized2;
+      return sanitized;
     }
     if (!hasSensitiveFields(obj) && !hasErrorValues(obj)) {
       return obj;
@@ -151,6 +137,53 @@ async function logKvTimestamp(env, prefix = "timestamp") {
     console.error(`Failed to log timestamp to KV: ${toError(error, "Unknown error")}`);
   }
 }
+var KV_BULK_GET_MAX_KEYS = 100;
+async function tryBulkGetChunk(kv, chunk) {
+  try {
+    const result = await kv.get([...chunk]);
+    if (!(result instanceof Map)) {
+      return null;
+    }
+    return chunk.map((key) => result.get(key) ?? null);
+  } catch {
+    return null;
+  }
+}
+async function kvGetMany(kv, keys) {
+  if (keys.length === 0)
+    return [];
+  const out = new Array(keys.length);
+  let offset = 0;
+  while (offset < keys.length) {
+    const chunk = keys.slice(offset, offset + KV_BULK_GET_MAX_KEYS);
+    const bulk = await tryBulkGetChunk(kv, chunk);
+    if (bulk === null) {
+      const rest = await Promise.all(keys.slice(offset).map((key) => kv.get(key)));
+      for (let i = 0;i < rest.length; i++) {
+        out[offset + i] = rest[i] ?? null;
+      }
+      return out;
+    }
+    for (let i = 0;i < bulk.length; i++) {
+      out[offset + i] = bulk[i] ?? null;
+    }
+    offset += chunk.length;
+  }
+  return out;
+}
+async function kvGetManyAsRecord(kv, keys) {
+  const values = await kvGetMany(kv, keys);
+  const out = {};
+  for (let i = 0;i < keys.length; i++) {
+    out[keys[i]] = values[i] ?? null;
+  }
+  return out;
+}
+async function kvPutMany(kv, entries) {
+  if (entries.length === 0)
+    return;
+  await Promise.all(entries.map((entry) => kv.put(entry.key, entry.value, entry.options)));
+}
 function headersToObject(headers) {
   const result = {};
   if (!headers)
@@ -165,6 +198,10 @@ function headersToObject(headers) {
   return result;
 }
 export {
-  logKvTimestamp,
-  headersToObject
+  KV_BULK_GET_MAX_KEYS,
+  headersToObject,
+  kvGetMany,
+  kvGetManyAsRecord,
+  kvPutMany,
+  logKvTimestamp
 };

package/dist/legal.js

@@ -1,20 +1,4 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/legal.ts
 var COPYRIGHT = `Copyright (C) ${new Date().getFullYear()} Hoox Team. All rights reserved.`;
 var TRADEMARKS = [
@@ -31,10 +15,10 @@ ${TRADEMARK_NOTICE}
 ${DISCLAIMER}`;
 var DISCLAIMER_HEADER = "X-Disclaimer";
 export {
-  TRADEMARK_NOTICE,
-  TRADEMARKS,
-  FULL_LEGAL_NOTICE,
-  DISCLAIMER_HEADER,
+  COPYRIGHT,
   DISCLAIMER,
-  COPYRIGHT
+  DISCLAIMER_HEADER,
+  FULL_LEGAL_NOTICE,
+  TRADEMARKS,
+  TRADEMARK_NOTICE
 };

package/dist/middleware/auth.d.ts

@@ -11,14 +11,17 @@ import type { MiddlewareHandler } from "../types/router";
 /**
  * Constant-time string comparison to prevent timing attacks.
  *
- * Length is NOT short-circuited: both strings are hashed to fixed-size
- * digests via a simple XOR-fold into equal-length buffers so that
- * unequal lengths do not leak via early return (length oracle).
+ * Length is NOT short-circuited: both strings are padded to equal length
+ * and XOR-folded so unequal lengths do not leak via early return
+ * (length oracle). Prefer {@link timingSafeEqualAsync} when Web Crypto
+ * is available — it hashes both sides to fixed-size digests first
+ * (Cloudflare Workers best practice).
  *
  * Note: true crypto.subtle.timingSafeEqual needs equal-length ArrayBuffers;
  * we pad both encodings to the same max length before XOR comparison.
  */
 export declare function timingSafeEqual(a: string, b: string): boolean;
+export declare function timingSafeEqualAsync(a: string, b: string): Promise<boolean>;
 /**
  * Environment bindings accepted for operator Bearer auth.
  * Prefer OPERATOR_API_KEY; INTERNAL_API_KEY remains a legacy alias.

package/dist/middleware/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAe7D;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,eAAe,GAAG,GAAG,GACzB,MAAM,GAAG,SAAS,CAUpB;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,GAAG,eAAe,GACzB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAE1B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,eAAe,GAAG,GAAG,GACzB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAqB1B;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAUjF;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;AAS7D,6FAA6F;AAC7F,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,mBAAmB,GAC5B,MAAM,EAAE,CASV;AA2BD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE,mBAA4C,GACpD,QAAQ,GAAG,IAAI,CAcjB;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,mBAA4C,GACpD,iBAAiB,CAAC,eAAe,CAAC,CAoBpC;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE,mBAA4C,GACpD;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAezC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAe7D;AAmBD,wBAAsB,oBAAoB,CACxC,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,GACR,OAAO,CAAC,OAAO,CAAC,CAelB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,eAAe,GAAG,GAAG,GACzB,MAAM,GAAG,SAAS,CAUpB;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,GAAG,eAAe,GACzB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAE1B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,eAAe,GAAG,GAAG,GACzB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAyB1B;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAUjF;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;AAS7D,6FAA6F;AAC7F,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,mBAAmB,GAC5B,MAAM,EAAE,CASV;AAiCD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE,mBAA4C,GACpD,QAAQ,GAAG,IAAI,CAcjB;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,mBAA4C,GACpD,iBAAiB,CAAC,eAAe,CAAC,CAoBpC;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE,mBAA4C,GACpD;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAezC"}

package/dist/middleware/auth.js

@@ -1,20 +1,4 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/middleware/auth.ts
 function timingSafeEqual(a, b) {
   const encoder = new TextEncoder;
@@ -23,12 +7,24 @@ function timingSafeEqual(a, b) {
   const len = Math.max(aBuf.length, bBuf.length);
   let result = aBuf.length === bBuf.length ? 0 : 1;
   for (let i = 0;i < len; i++) {
-    const av = i < aBuf.length ? aBuf[i] : 0;
-    const bv = i < bBuf.length ? bBuf[i] : 0;
+    const av = aBuf[i] ?? 0;
+    const bv = bBuf[i] ?? 0;
     result |= av ^ bv;
   }
   return result === 0;
 }
+async function timingSafeEqualAsync(a, b) {
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle || typeof subtle.digest !== "function" || typeof subtle.timingSafeEqual !== "function") {
+    return timingSafeEqual(a, b);
+  }
+  const encoder = new TextEncoder;
+  const [providedHash, expectedHash] = await Promise.all([
+    subtle.digest("SHA-256", encoder.encode(a)),
+    subtle.digest("SHA-256", encoder.encode(b))
+  ]);
+  return subtle.timingSafeEqual(providedHash, expectedHash);
+}
 function resolveOperatorApiKey(env) {
   const preferred = env.OPERATOR_API_KEY;
   if (typeof preferred === "string" && preferred.length > 0) {
@@ -53,7 +49,7 @@ async function requireOperatorAuth(request, env) {
   }
   const authHeader = request.headers.get("Authorization");
   const expectedHeader = `Bearer ${apiKey}`;
-  if (!authHeader || !timingSafeEqual(authHeader, expectedHeader)) {
+  if (!authHeader || !await timingSafeEqualAsync(authHeader, expectedHeader)) {
     return new Response(JSON.stringify({ error: "Unauthorized" }), {
       status: 401,
       headers: { "Content-Type": "application/json" }
@@ -86,12 +82,13 @@ function collectInternalAuthKeys(env, keyNames) {
   return keys;
 }
 function matchesAnyInternalAuthKey(providedKey, expectedKeys) {
+  let matched = false;
   for (const expected of expectedKeys) {
     if (timingSafeEqual(providedKey, expected)) {
-      return true;
+      matched = true;
     }
   }
-  return false;
+  return matched;
 }
 function internalAuthNotConfiguredResponse(keyNames) {
   const label = normalizeKeyNames(keyNames).join(" | ");
@@ -139,13 +136,14 @@ function checkInternalAuth(request, env, keyName = "INTERNAL_KEY_BINDING") {
   return { authorized: true };
 }
 export {
-  timingSafeEqual,
-  resolveOperatorApiKey,
-  requireOperatorAuth,
-  requireInternalAuth,
-  requireAuth,
-  createOperatorAuthMiddleware,
-  createInternalAuthMiddleware,
+  checkInternalAuth,
   collectInternalAuthKeys,
-  checkInternalAuth
+  createInternalAuthMiddleware,
+  createOperatorAuthMiddleware,
+  requireAuth,
+  requireInternalAuth,
+  requireOperatorAuth,
+  resolveOperatorApiKey,
+  timingSafeEqual,
+  timingSafeEqualAsync
 };

package/dist/middleware/cors.js

@@ -1,20 +1,4 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/middleware/cors.ts
 var DEFAULT_OPTIONS = {
   allowOrigin: "",
@@ -69,9 +53,9 @@ function handleCorsPreflightRequest(request, options) {
   });
 }
 export {
-  resolveCorsOptions,
-  publicCorsHeaders,
-  internalCorsHeaders,
+  corsHeaders,
   handleCorsPreflightRequest,
-  corsHeaders
+  internalCorsHeaders,
+  publicCorsHeaders,
+  resolveCorsOptions
 };

package/dist/middleware/index.d.ts

@@ -6,9 +6,10 @@
  * Barrel exports for shared middleware
  */
 export { createLogger, withRequestLog, type Logger, type LogContext, } from "./logger";
-export { requireAuth, requireOperatorAuth, createOperatorAuthMiddleware, resolveOperatorApiKey, requireInternalAuth, createInternalAuthMiddleware, checkInternalAuth, timingSafeEqual, collectInternalAuthKeys, type InternalAuthEnv, type InternalAuthKeyName, type OperatorAuthEnv, } from "./auth";
+export { requireAuth, requireOperatorAuth, createOperatorAuthMiddleware, resolveOperatorApiKey, requireInternalAuth, createInternalAuthMiddleware, checkInternalAuth, timingSafeEqual, timingSafeEqualAsync, collectInternalAuthKeys, type InternalAuthEnv, type InternalAuthKeyName, type OperatorAuthEnv, } from "./auth";
 export { createRateLimiter, type RateLimiter, type RateLimitConfig, } from "./rate-limit";
-export { validateJson, validateJsonLegacy, requireField, optionalField, } from "./validate";
+export { validateJson, validateJsonLegacy, parseJsonBody, requireField, optionalField, DEFAULT_MAX_JSON_BODY_BYTES, type ParseJsonBodyOptions, } from "./validate";
+export { safeWaitUntil, waitUntilAll, type WaitUntilHost } from "./wait-until";
 export { corsHeaders, resolveCorsOptions, type CorsEnv, publicCorsHeaders, internalCorsHeaders, handleCorsPreflightRequest, type CorsOptions, } from "./cors";
 export { secureHeaders, wrapWithSecurityHeaders, type SecurityHeadersOptions, SECURITY_HEADERS_DEFAULTS, } from "./security-headers";
 //# sourceMappingURL=index.d.ts.map

package/dist/middleware/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AAEH,OAAO,EACL,YAAY,EACZ,cAAc,EACd,KAAK,MAAM,EACX,KAAK,UAAU,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,4BAA4B,EAC5B,qBAAqB,EACrB,mBAAmB,EACnB,4BAA4B,EAC5B,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,eAAe,GACrB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,eAAe,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,KAAK,OAAO,EACZ,iBAAiB,EACjB,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,WAAW,GACjB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AAEH,OAAO,EACL,YAAY,EACZ,cAAc,EACd,KAAK,MAAM,EACX,KAAK,UAAU,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,4BAA4B,EAC5B,qBAAqB,EACrB,mBAAmB,EACnB,4BAA4B,EAC5B,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,uBAAuB,EACvB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,eAAe,GACrB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,eAAe,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,2BAA2B,EAC3B,KAAK,oBAAoB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,KAAK,OAAO,EACZ,iBAAiB,EACjB,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,WAAW,GACjB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC"}