@hoox-sh/hoox-shared 1.4.0 → 1.6.0

package/dist/schemas/validators.js

@@ -1,28 +1,15 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/schemas/validators.ts
 import { parse } from "jsonc-parser";
+function parseJsoncDocument(content) {
+  const errors = [];
+  const value = parse(content, errors, { allowTrailingComma: true });
+  return { value, errors };
+}
 function validateWranglerJsonc(workerName, manifest, jsoncContent) {
   const errors = [];
-  let parsed;
-  try {
-    parsed = parse(jsoncContent);
-  } catch {
+  const { value: parsed, errors: parseErrors } = parseJsoncDocument(jsoncContent);
+  if (parseErrors.length > 0) {
     errors.push({
       worker: workerName,
       severity: "error",
@@ -53,7 +40,7 @@ function validateWranglerJsonc(workerName, manifest, jsoncContent) {
     }
   }
   for (const [name, def] of Object.entries(manifest.vars)) {
-    if (def.type === "secret" && !name.endsWith("_BINDING") && !name.endsWith("_SECRET") && !name.startsWith("CLOUDFLARE_") && name !== "TELEGRAM_SECRET_TOKEN" && name !== "TELEGRAM_ALLOWED_CHAT_IDS" && name !== "AUTHORIZED_CHAT_IDS" && name !== "MAILGUN_API_KEY" && name !== "EMAIL_SCAN_SUBJECT" && name !== "DASHBOARD_USER" && name !== "DASHBOARD_PASS" && name !== "SESSION_SECRET" && name !== "AGENT_INTERNAL_KEY") {
+    if (def.type === "secret" && !name.endsWith("_BINDING") && !name.endsWith("_SECRET") && !name.startsWith("CLOUDFLARE_") && name !== "TELEGRAM_SECRET_TOKEN" && name !== "TELEGRAM_ALLOWED_CHAT_IDS" && name !== "AUTHORIZED_CHAT_IDS" && name !== "MAILGUN_API_KEY" && name !== "EMAIL_SCAN_SUBJECT" && name !== "DASHBOARD_USER" && name !== "DASHBOARD_PASS" && name !== "SESSION_SECRET" && name !== "AGENT_INTERNAL_KEY" && name !== "OPENAI_API_KEY" && name !== "ANTHROPIC_API_KEY" && name !== "GOOGLE_API_KEY") {
       errors.push({
         worker: workerName,
         severity: "warning",
@@ -99,10 +86,8 @@ function validateWranglerJsonc(workerName, manifest, jsoncContent) {
 }
 function validateRootSecrets(workerName, manifest, rootJsoncContent) {
   const errors = [];
-  let parsed;
-  try {
-    parsed = parse(rootJsoncContent);
-  } catch {
+  const { value: parsed, errors: parseErrors } = parseJsoncDocument(rootJsoncContent);
+  if (parseErrors.length > 0) {
     errors.push({
       worker: workerName,
       severity: "error",
@@ -160,6 +145,11 @@ function validateDevVars(workerName, manifest, devVarsContent) {
   }
   return errors;
 }
+function queueProducerBinding(queue) {
+  if (queue === "trade-execution")
+    return "TRADE_QUEUE";
+  return queue.replace(/[^A-Za-z0-9]+/g, "_").toUpperCase();
+}
 function generateWranglerJsonc(manifest) {
   const parts = [];
   parts.push(`{`);
@@ -226,21 +216,29 @@ function generateWranglerJsonc(manifest) {
     parts.push(`  ],`);
   }
   if (infra.queues) {
-    if (infra.queues.producer && infra.queues.producer.length > 0) {
-      parts.push(`  "queues": { "producers": [`);
-      for (const [i, q] of infra.queues.producer.entries()) {
-        const comma = i < infra.queues.producer.length - 1 ? "," : "";
-        parts.push(`    { "queue": "${q}", "binding": "" }${comma}`);
+    const producers = infra.queues.producer ?? [];
+    const consumers = infra.queues.consumer ?? [];
+    if (producers.length > 0 || consumers.length > 0) {
+      const queueParts = [];
+      if (producers.length > 0) {
+        queueParts.push(`    "producers": [`);
+        for (const [i, q] of producers.entries()) {
+          const comma = i < producers.length - 1 ? "," : "";
+          queueParts.push(`      { "queue": "${q}", "binding": "${queueProducerBinding(q)}" }${comma}`);
+        }
+        queueParts.push(consumers.length > 0 ? `    ],` : `    ]`);
       }
-      parts.push(`  ] },`);
-    }
-    if (infra.queues.consumer && infra.queues.consumer.length > 0) {
-      parts.push(`  "queues": { "consumers": [`);
-      for (const [i, q] of infra.queues.consumer.entries()) {
-        const comma = i < infra.queues.consumer.length - 1 ? "," : "";
-        parts.push(`    { "queue": "${q}" }${comma}`);
+      if (consumers.length > 0) {
+        queueParts.push(`    "consumers": [`);
+        for (const [i, q] of consumers.entries()) {
+          const comma = i < consumers.length - 1 ? "," : "";
+          queueParts.push(`      { "queue": "${q}" }${comma}`);
+        }
+        queueParts.push(`    ]`);
       }
-      parts.push(`  ] },`);
+      parts.push(`  "queues": {`);
+      parts.push(...queueParts);
+      parts.push(`  },`);
     }
   }
   if (infra.durableObjects && infra.durableObjects.length > 0) {
@@ -283,10 +281,10 @@ function validateAll(workerName, manifest, files) {
   };
 }
 export {
-  validateWranglerJsonc,
-  validateRootSecrets,
-  validateDevVars,
-  validateAll,
+  generateDevVars,
   generateWranglerJsonc,
-  generateDevVars
+  validateAll,
+  validateDevVars,
+  validateRootSecrets,
+  validateWranglerJsonc
 };

package/dist/service-bindings.d.ts

@@ -70,6 +70,10 @@ export declare function authenticatedServiceFetch<E extends AuthenticatedService
     /** Ordered env fields to try when internalKey is not set */
     internalKeyFields?: InternalAuthKeyName;
 }): Promise<Response>;
+/**
+ * Unauthenticated service-binding fetch. Callers that need mesh auth must
+ * use {@link authenticatedServiceFetch}, which injects `X-Internal-Auth-Key`.
+ */
 export declare function serviceFetch(binding: ServiceBinding, path: string, body?: unknown, options?: {
     method?: string;
     headers?: Record<string, string>;

package/dist/service-bindings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service-bindings.d.ts","sourceRoot":"","sources":["../src/service-bindings.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAmB,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE9E,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACzE;AAED,uDAAuD;AACvD,eAAO,MAAM,qBAAqB;;;;;;;;;IAShC,sDAAsD;;;;CAI9C,CAAC;AAEX,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,0DAG1B,CAAC;AAEX,kFAAkF;AAClF,eAAO,MAAM,wBAAwB,2DAG3B,CAAC;AAEX,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,sFAIhC,CAAC;AAEX,sFAAsF;AACtF,eAAO,MAAM,0BAA0B,6DAG7B,CAAC;AAEX,oDAAoD;AACpD,eAAO,MAAM,8BAA8B,oEAGjC,CAAC;AAEX,4CAA4C;AAC5C,eAAO,MAAM,8BAA8B,iEAGjC,CAAC;AAEX,wEAAwE;AACxE,eAAO,MAAM,iCAAiC,6EAIpC,CAAC;AAEX,8CAA8C;AAC9C,eAAO,MAAM,uCAAuC,sFAI1C,CAAC;AAEX,gDAAgD;AAChD,eAAO,MAAM,wCAAwC,6FAI3C,CAAC;AAEX,0DAA0D;AAC1D,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,mBAAmB,GAC7B,MAAM,GAAG,SAAS,CAEpB;AAED,MAAM,WAAW,uBAAuB;IACtC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,uBAAuB,EACzE,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,CAAC,EACN,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,OAAO,EACd,OAAO,CAAC,EAAE;IACR,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;CACzC,GACA,OAAO,CAAC,QAAQ,CAAC,CAsBnB;AAED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,OAAO,EACd,OAAO,CAAC,EAAE;IACR,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACA,OAAO,CAAC,QAAQ,CAAC,CAWnB"}
+{"version":3,"file":"service-bindings.d.ts","sourceRoot":"","sources":["../src/service-bindings.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAmB,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE9E,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACzE;AAED,uDAAuD;AACvD,eAAO,MAAM,qBAAqB;;;;;;;;;IAShC,sDAAsD;;;;CAI9C,CAAC;AAEX,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,0DAG1B,CAAC;AAEX,kFAAkF;AAClF,eAAO,MAAM,wBAAwB,2DAG3B,CAAC;AAEX,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,sFAIhC,CAAC;AAEX,sFAAsF;AACtF,eAAO,MAAM,0BAA0B,6DAG7B,CAAC;AAEX,oDAAoD;AACpD,eAAO,MAAM,8BAA8B,oEAGjC,CAAC;AAEX,4CAA4C;AAC5C,eAAO,MAAM,8BAA8B,iEAGjC,CAAC;AAEX,wEAAwE;AACxE,eAAO,MAAM,iCAAiC,6EAIpC,CAAC;AAEX,8CAA8C;AAC9C,eAAO,MAAM,uCAAuC,sFAI1C,CAAC;AAEX,gDAAgD;AAChD,eAAO,MAAM,wCAAwC,6FAI3C,CAAC;AAEX,0DAA0D;AAC1D,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,mBAAmB,GAC7B,MAAM,GAAG,SAAS,CAEpB;AAED,MAAM,WAAW,uBAAuB;IACtC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,uBAAuB,EACzE,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,CAAC,EACN,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,OAAO,EACd,OAAO,CAAC,EAAE;IACR,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;CACzC,GACA,OAAO,CAAC,QAAQ,CAAC,CAsBnB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,OAAO,EACd,OAAO,CAAC,EAAE;IACR,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACA,OAAO,CAAC,QAAQ,CAAC,CAWnB"}

package/dist/service-bindings.js

@@ -1,20 +1,4 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/middleware/auth.ts
 function timingSafeEqual(a, b) {
   const encoder = new TextEncoder;
@@ -244,18 +228,18 @@ function serviceFetch(binding, path, body, options) {
   });
 }
 export {
-  serviceFetch,
-  resolveInternalAuthKey,
-  authenticatedServiceFetch,
-  WALLET_EXECUTE_AUTH_KEY_FIELDS,
-  TRADE_READ_AUTH_KEY_FIELDS,
-  TRADE_EXECUTE_AUTH_KEY_FIELDS,
-  TELEGRAM_ALERT_AUTH_KEY_FIELDS,
-  ServiceAuthError,
-  InternalAuthKeyFields,
-  DASHBOARD_TRADE_EXECUTE_AUTH_KEY_FIELDS,
-  DASHBOARD_TELEGRAM_ALERT_AUTH_KEY_FIELDS,
-  DASHBOARD_D1_READ_AUTH_KEY_FIELDS,
+  D1_READ_AUTH_KEY_FIELDS,
   D1_WRITE_AUTH_KEY_FIELDS,
-  D1_READ_AUTH_KEY_FIELDS
+  DASHBOARD_D1_READ_AUTH_KEY_FIELDS,
+  DASHBOARD_TELEGRAM_ALERT_AUTH_KEY_FIELDS,
+  DASHBOARD_TRADE_EXECUTE_AUTH_KEY_FIELDS,
+  InternalAuthKeyFields,
+  ServiceAuthError,
+  TELEGRAM_ALERT_AUTH_KEY_FIELDS,
+  TRADE_EXECUTE_AUTH_KEY_FIELDS,
+  TRADE_READ_AUTH_KEY_FIELDS,
+  WALLET_EXECUTE_AUTH_KEY_FIELDS,
+  authenticatedServiceFetch,
+  resolveInternalAuthKey,
+  serviceFetch
 };

package/dist/session.d.ts

@@ -2,7 +2,7 @@
  * Copyright (c) 2026 HOOX · HOOX · jango-blockchained (hoox-sh)
  * SPDX-License-Identifier: Apache-2.0
  */
-import type { ViewId } from "./types";
+import { type ViewId } from "./types";
 export interface SessionState {
     /** Last active view ID (e.g. "dashboard", "workers") */
     activeView: ViewId;
@@ -18,6 +18,11 @@ export interface SessionState {
     /** ISO timestamp of when the session was saved */
     savedAt: string;
 }
+/** Restore result: on-disk session plus whether a file was actually read. */
+export type RestoredSession = SessionState & {
+    /** True when session.json existed and was parsed (even if fields fell back). */
+    fromDisk: boolean;
+};
 /**
  * Persist the current UI state to $HOME/.hoox/.tui-state/session.json.
  * Call this on app destroy / clean shutdown.
@@ -33,7 +38,9 @@ export declare function saveSession(activeView: ViewId, sidebarExpanded: boolean
  * Restore the previous session state from $HOME/.hoox/.tui-state/session.json.
  * Returns defaults if the file doesn't exist or can't be parsed.
  *
- * @returns The saved session state, or defaults
+ * @returns The saved session state, or defaults. `fromDisk` is false when
+ * no file existed or JSON was unreadable — callers may then apply
+ * `defaultView` from TUI preferences.
  */
-export declare function restoreSession(): Promise<SessionState>;
+export declare function restoreSession(): Promise<RestoredSession>;
 //# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAmBH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAKtC,MAAM,WAAW,YAAY;IAC3B,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,eAAe,EAAE,OAAO,CAAC;IACzB,+CAA+C;IAC/C,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,OAAO,EAAE,MAAM,CAAC;CACjB;AAoDD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,OAAO,EACxB,UAAU,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAC1C,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAkBf;AAID;;;;;GAKG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,YAAY,CAAC,CA8B5D"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAmBH,OAAO,EAAY,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAKhD,MAAM,WAAW,YAAY;IAC3B,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,eAAe,EAAE,OAAO,CAAC;IACzB,+CAA+C;IAC/C,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,6EAA6E;AAC7E,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG;IAC3C,gFAAgF;IAChF,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAoDF;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,OAAO,EACxB,UAAU,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAC1C,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAkBf;AAID;;;;;;;GAOG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,eAAe,CAAC,CA+B/D"}

package/dist/session.js

@@ -1,20 +1,4 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/path-utils.ts
 import {
   existsSync,
@@ -24,10 +8,20 @@ import {
   chmodSync
 } from "fs";
 import { homedir } from "os";
-import { dirname, join, resolve } from "path";
+import { dirname, join, resolve, sep } from "path";
 function createHooxPath(path) {
   return path;
 }
+function isInsideDir(child, parent) {
+  const resolvedChild = resolve(child);
+  const resolvedParent = resolve(parent);
+  const cmpChild = process.platform === "win32" ? resolvedChild.toLowerCase() : resolvedChild;
+  const cmpParent = process.platform === "win32" ? resolvedParent.toLowerCase() : resolvedParent;
+  if (cmpChild === cmpParent)
+    return true;
+  const prefix = cmpParent.endsWith(sep) ? cmpParent : cmpParent + sep;
+  return cmpChild.startsWith(prefix);
+}
 function getHooxHome() {
   try {
     const override = process.env.HOOX_HOME?.trim();
@@ -191,7 +185,7 @@ function resolveHooxPath(relativePath) {
   const fullPath = join(hooxHome, normalizedPath);
   const resolvedPath = resolve(fullPath);
   const resolvedHome = resolve(hooxHome);
-  if (!resolvedPath.startsWith(resolvedHome)) {
+  if (!isInsideDir(resolvedPath, resolvedHome)) {
     throw new Error(`Resolved path "${resolvedPath}" is outside Hoox home directory`);
   }
   return createHooxPath(resolvedPath);
@@ -201,7 +195,7 @@ function isWithinHooxHome(path) {
     const hooxHome = getHooxHome();
     const resolvedPath = resolve(path);
     const resolvedHome = resolve(hooxHome);
-    return resolvedPath.startsWith(resolvedHome);
+    return isInsideDir(resolvedPath, resolvedHome);
   } catch {
     return false;
   }
@@ -236,17 +230,99 @@ function getHooxStatePath() {
   return resolveHooxPath("data/state.json");
 }
 
-// src/session.ts
+// src/types.ts
 import { z } from "zod";
-var SessionStateFileSchema = z.object({
-  activeView: z.string().optional(),
-  sidebarExpanded: z.boolean().optional(),
-  windowSize: z.object({
-    cols: z.number().int().positive(),
-    rows: z.number().int().positive()
+var TradeActionSchema = z.enum([
+  "LONG",
+  "SHORT",
+  "CLOSE_LONG",
+  "CLOSE_SHORT"
+]);
+var MAX_WEBHOOK_LEVERAGE = 125;
+var MAX_WEBHOOK_QUANTITY = 1e6;
+var WebhookPayloadSchema = z.object({
+  exchange: z.string().min(1),
+  action: TradeActionSchema,
+  symbol: z.string().min(1).max(20),
+  quantity: z.number().positive().finite().max(MAX_WEBHOOK_QUANTITY),
+  price: z.number().positive().finite().optional(),
+  orderType: z.string().optional(),
+  leverage: z.number().int().positive().max(MAX_WEBHOOK_LEVERAGE).optional(),
+  test: z.boolean().optional(),
+  tenantId: z.string().min(1).max(64).optional()
+}).strict();
+var TradeQueueMessageSchema = z.object({
+  requestId: z.string().min(1).max(128),
+  exchange: z.string().min(1).max(64),
+  action: TradeActionSchema,
+  symbol: z.string().min(1).max(32),
+  quantity: z.number().positive().finite().max(MAX_WEBHOOK_QUANTITY),
+  price: z.number().positive().finite().optional(),
+  leverage: z.number().int().positive().max(MAX_WEBHOOK_LEVERAGE).optional(),
+  test: z.boolean().optional(),
+  idempotencyKey: z.string().min(1).max(512).optional(),
+  tenantId: z.string().min(1).max(64).optional(),
+  queuedAt: z.string().min(1).max(64)
+}).strict();
+var TradeSignalSchema = z.object({
+  id: z.number().int().positive().optional(),
+  source: z.string().min(1),
+  symbol: z.string().min(1),
+  action: TradeActionSchema,
+  price: z.number().positive().finite().optional(),
+  quantity: z.number().positive().finite(),
+  leverage: z.number().int().positive().optional(),
+  status: z.enum(["pending", "executed", "failed", "skipped"]).optional(),
+  createdAt: z.string().optional(),
+  executedAt: z.string().optional(),
+  error: z.string().optional()
+}).strict();
+var PositionSchema = z.object({
+  id: z.string(),
+  symbol: z.string().min(1),
+  side: TradeActionSchema,
+  quantity: z.number().positive(),
+  entry_price: z.number().positive(),
+  current_price: z.number().positive(),
+  unrealized_pnl: z.number(),
+  timestamp: z.number().int().positive()
+}).strict();
+var BalanceSchema = z.object({
+  asset: z.string().min(1),
+  free: z.number().min(0),
+  locked: z.number().min(0),
+  timestamp: z.number().int().positive()
+}).strict();
+var VIEW_IDS = [
+  "dashboard",
+  "workers",
+  "worker-detail",
+  "trade-monitor",
+  "logs-viewer",
+  "service-manager",
+  "config-editor",
+  "setup-wizard",
+  "settings",
+  "queue-depth",
+  "kv-viewer",
+  "secrets-viewer",
+  "db-query",
+  "ai-chat",
+  "edge-topology",
+  "worker-settings"
+];
+
+// src/session.ts
+import { z as z2 } from "zod";
+var SessionStateFileSchema = z2.object({
+  activeView: z2.string().optional(),
+  sidebarExpanded: z2.boolean().optional(),
+  windowSize: z2.object({
+    cols: z2.number().int().positive(),
+    rows: z2.number().int().positive()
   }).optional(),
-  lastData: z.number().nonnegative().optional(),
-  savedAt: z.string().optional()
+  lastData: z2.number().nonnegative().optional(),
+  savedAt: z2.string().optional()
 }).strict();
 var TUI_STATE_DIR = ".tui-state";
 function getSessionFilePath() {
@@ -283,7 +359,7 @@ async function restoreSession() {
     const file = Bun.file(getSessionFilePath());
     const exists = await file.exists();
     if (!exists)
-      return { ...DEFAULT_SESSION };
+      return { ...DEFAULT_SESSION, fromDisk: false };
     const raw = await file.text();
     const result = SessionStateFileSchema.safeParse(JSON.parse(raw));
     const parsed = result.success ? result.data : {};
@@ -292,34 +368,18 @@ async function restoreSession() {
       sidebarExpanded: typeof parsed.sidebarExpanded === "boolean" ? parsed.sidebarExpanded : DEFAULT_SESSION.sidebarExpanded,
       windowSize: parsed.windowSize ?? DEFAULT_SESSION.windowSize,
       lastData: typeof parsed.lastData === "number" ? parsed.lastData : DEFAULT_SESSION.lastData,
-      savedAt: parsed.savedAt ?? DEFAULT_SESSION.savedAt
+      savedAt: parsed.savedAt ?? DEFAULT_SESSION.savedAt,
+      fromDisk: true
     };
   } catch {
-    return { ...DEFAULT_SESSION };
+    return { ...DEFAULT_SESSION, fromDisk: false };
   }
 }
-var VALID_VIEW_IDS = new Set([
-  "dashboard",
-  "workers",
-  "worker-detail",
-  "trade-monitor",
-  "logs-viewer",
-  "service-manager",
-  "config-editor",
-  "setup-wizard",
-  "settings",
-  "queue-depth",
-  "kv-viewer",
-  "secrets-viewer",
-  "db-query",
-  "ai-chat",
-  "edge-topology",
-  "worker-settings"
-]);
+var VALID_VIEW_IDS = new Set(VIEW_IDS);
 function validateViewId(id) {
   return typeof id === "string" && VALID_VIEW_IDS.has(id);
 }
 export {
-  saveSession,
-  restoreSession
+  restoreSession,
+  saveSession
 };

package/dist/sse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;GASG;AAEH,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC9B,MAAM,sBAAsB,CAAC;AAS9B,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC;AAChD,MAAM,MAAM,iBAAiB,GAAG,CAC9B,MAAM,EAAE,WAAW,GAAG,cAAc,GAAG,cAAc,KAClD,IAAI,CAAC;AAEV,UAAU,eAAe;IACvB,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,YAAY,CAAC,EAAE,oBAAoB,CAAC;CACrC;AAID;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAC5B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,EACxB,QAAQ,CAAC,EAAE,iBAAiB,EAC5B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,eAAe,CAsFjB"}
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;GASG;AAEH,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC9B,MAAM,sBAAsB,CAAC;AAS9B,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC;AAChD,MAAM,MAAM,iBAAiB,GAAG,CAC9B,MAAM,EAAE,WAAW,GAAG,cAAc,GAAG,cAAc,KAClD,IAAI,CAAC;AAEV,UAAU,eAAe;IACvB,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,YAAY,CAAC,EAAE,oBAAoB,CAAC;CACrC;AAID;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAC5B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,EACxB,QAAQ,CAAC,EAAE,iBAAiB,EAC5B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,eAAe,CAwGjB"}

package/dist/sse.js

@@ -1,19 +1,15 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
 };
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 
 // src/operator-transport.ts
 function stripTrailingSlashes(url) {
@@ -83,12 +79,9 @@ var init_operator_transport = __esm(() => {
 });
 
 // src/sse.ts
-var exports_sse = {};
-__export(exports_sse, {
-  subscribeSSE: () => subscribeSSE
-});
 function subscribeSSE(path, callback, onStatus, options) {
   let aborted = false;
+  const ac = new AbortController;
   const profile = options?.transport ?? (options?.transportEnv ? resolveOperatorTransportProfile(options.transportEnv) : resolveOperatorTransportProfile());
   const run = async () => {
     let attempt = 0;
@@ -99,7 +92,8 @@ function subscribeSSE(path, callback, onStatus, options) {
           headers: {
             Accept: "text/event-stream",
             ...buildOperatorAuthHeaders(profile)
-          }
+          },
+          signal: ac.signal
         });
         if (!response.ok || !response.body) {
           throw new Error(`SSE connection failed: HTTP ${response.status}`);
@@ -111,17 +105,21 @@ function subscribeSSE(path, callback, onStatus, options) {
         let buffer = "";
         while (!aborted) {
           const { done, value } = await reader.read();
-          if (done)
-            break;
+          if (done) {
+            throw new Error("SSE stream ended");
+          }
           buffer += decoder.decode(value, { stream: true });
           const lines = buffer.split(`
 `);
           buffer = lines.pop() || "";
           for (const line of lines) {
             const trimmed = line.trim();
-            if (trimmed.startsWith("data: ")) {
+            if (trimmed.startsWith("data:")) {
+              const jsonText = trimmed.slice(5).replace(/^\s/, "");
+              if (!jsonText)
+                continue;
               try {
-                const parsed = JSON.parse(trimmed.slice(6));
+                const parsed = JSON.parse(jsonText);
                 callback(parsed);
               } catch {}
             }
@@ -133,7 +131,18 @@ function subscribeSSE(path, callback, onStatus, options) {
         onStatus?.("reconnecting");
         const delay = Math.min(RECONNECT_BASE_MS * Math.pow(2, attempt), RECONNECT_MAX_MS);
         attempt++;
-        await new Promise((resolve) => setTimeout(resolve, delay));
+        await new Promise((resolve) => {
+          const timer = setTimeout(resolve, delay);
+          const onAbort = () => {
+            clearTimeout(timer);
+            resolve();
+          };
+          if (ac.signal.aborted) {
+            onAbort();
+            return;
+          }
+          ac.signal.addEventListener("abort", onAbort, { once: true });
+        });
       }
     }
     if (!aborted) {
@@ -144,6 +153,7 @@ function subscribeSSE(path, callback, onStatus, options) {
   return {
     abort: () => {
       aborted = true;
+      ac.abort();
     }
   };
 }

package/dist/stores/config-store.d.ts

@@ -38,56 +38,8 @@ export declare const useConfigStore: import("zustand").UseBoundStore<Omit<Omit<i
         getOptions: () => Partial<import("zustand/middleware").PersistOptions<ConfigState & ConfigActions, unknown, unknown>>;
     };
 }, "setState"> & {
-    setState(nextStateOrUpdater: (ConfigState & ConfigActions) | Partial<ConfigState & ConfigActions> | ((state: {
-        theme: "dark" | "light";
-        refreshIntervalMs: number;
-        defaultView: ViewId;
-        activeExchanges: string[];
-        keyboardShortcuts: {
-            [x: string]: string;
-        };
-        logFilters: {
-            levels: import("..").LogLevel[];
-            workers: string[];
-            searchText: string;
-        };
-        notifications: {
-            alerts: boolean;
-            trades: boolean;
-            debug: boolean;
-            system: boolean;
-        };
-        soundEnabled: boolean;
-        updateConfig: (partial: Partial<ConfigState>) => void;
-        resetDefaults: () => void;
-        setShortcut: (action: string, key: string) => void;
-        toggleNotification: (channel: keyof NotificationPreferences) => void;
-    }) => void), shouldReplace?: false): unknown;
-    setState(nextStateOrUpdater: (ConfigState & ConfigActions) | ((state: {
-        theme: "dark" | "light";
-        refreshIntervalMs: number;
-        defaultView: ViewId;
-        activeExchanges: string[];
-        keyboardShortcuts: {
-            [x: string]: string;
-        };
-        logFilters: {
-            levels: import("..").LogLevel[];
-            workers: string[];
-            searchText: string;
-        };
-        notifications: {
-            alerts: boolean;
-            trades: boolean;
-            debug: boolean;
-            system: boolean;
-        };
-        soundEnabled: boolean;
-        updateConfig: (partial: Partial<ConfigState>) => void;
-        resetDefaults: () => void;
-        setShortcut: (action: string, key: string) => void;
-        toggleNotification: (channel: keyof NotificationPreferences) => void;
-    }) => void), shouldReplace: true): unknown;
+    setState(nextStateOrUpdater: (ConfigState & ConfigActions) | Partial<ConfigState & ConfigActions> | ((state: import("immer").WritableNonArrayDraft<ConfigState & ConfigActions>) => void), shouldReplace?: false): unknown;
+    setState(nextStateOrUpdater: (ConfigState & ConfigActions) | ((state: import("immer").WritableNonArrayDraft<ConfigState & ConfigActions>) => void), shouldReplace: true): unknown;
 }>;
 export {};
 //# sourceMappingURL=config-store.d.ts.map

package/dist/stores/config-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-store.d.ts","sourceRoot":"","sources":["../../src/stores/config-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAmBH,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAM3E,qFAAqF;AACrF,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AA0ID,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,UAAU,EAAE,SAAS,CAAC;IACtB,aAAa,EAAE,uBAAuB,CAAC;IACvC,YAAY,EAAE,OAAO,CAAC;CACvB;AAID,UAAU,aAAa;IACrB,+DAA+D;IAC/D,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;IACtD,8CAA8C;IAC9C,aAAa,EAAE,MAAM,IAAI,CAAC;IAC1B,yCAAyC;IACzC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACnD,8CAA8C;IAC9C,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,uBAAuB,KAAK,IAAI,CAAC;CACtE;AAiBD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;eAtClB,MAAM,GAAG,OAAO;2BACJ,MAAM;qBACZ,MAAM;;;;;;;;;;;;;;;;sBAKL,OAAO;sBAOP,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI;uBAEtC,MAAM,IAAI;qBAEZ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI;4BAE9B,CAAC,OAAO,EAAE,MAAM,uBAAuB,KAAK,IAAI;;;eApB7D,MAAM,GAAG,OAAO;2BACJ,MAAM;qBACZ,MAAM;;;;;;;;;;;;;;;;sBAKL,OAAO;sBAOP,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI;uBAEtC,MAAM,IAAI;qBAEZ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI;4BAE9B,CAAC,OAAO,EAAE,MAAM,uBAAuB,KAAK,IAAI;;EA+ErE,CAAC"}
+{"version":3,"file":"config-store.d.ts","sourceRoot":"","sources":["../../src/stores/config-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAmBH,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAM3E,qFAAqF;AACrF,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AA0ID,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,UAAU,EAAE,SAAS,CAAC;IACtB,aAAa,EAAE,uBAAuB,CAAC;IACvC,YAAY,EAAE,OAAO,CAAC;CACvB;AAID,UAAU,aAAa;IACrB,+DAA+D;IAC/D,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;IACtD,8CAA8C;IAC9C,aAAa,EAAE,MAAM,IAAI,CAAC;IAC1B,yCAAyC;IACzC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACnD,8CAA8C;IAC9C,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,uBAAuB,KAAK,IAAI,CAAC;CACtE;AAiBD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;EA6D1B,CAAC"}