@hoox-sh/hoox-shared 1.5.0 → 1.6.0

package/dist/index.js

@@ -182,6 +182,7 @@ var init_api_client = __esm(() => {
 // src/sse.ts
 function subscribeSSE(path, callback, onStatus, options) {
   let aborted = false;
+  const ac = new AbortController;
   const profile = options?.transport ?? (options?.transportEnv ? resolveOperatorTransportProfile(options.transportEnv) : resolveOperatorTransportProfile());
   const run = async () => {
     let attempt = 0;
@@ -192,7 +193,8 @@ function subscribeSSE(path, callback, onStatus, options) {
           headers: {
             Accept: "text/event-stream",
             ...buildOperatorAuthHeaders(profile)
-          }
+          },
+          signal: ac.signal
         });
         if (!response.ok || !response.body) {
           throw new Error(`SSE connection failed: HTTP ${response.status}`);
@@ -204,17 +206,21 @@ function subscribeSSE(path, callback, onStatus, options) {
         let buffer = "";
         while (!aborted) {
           const { done, value } = await reader.read();
-          if (done)
-            break;
+          if (done) {
+            throw new Error("SSE stream ended");
+          }
           buffer += decoder.decode(value, { stream: true });
           const lines = buffer.split(`
 `);
           buffer = lines.pop() || "";
           for (const line of lines) {
             const trimmed = line.trim();
-            if (trimmed.startsWith("data: ")) {
+            if (trimmed.startsWith("data:")) {
+              const jsonText = trimmed.slice(5).replace(/^\s/, "");
+              if (!jsonText)
+                continue;
               try {
-                const parsed = JSON.parse(trimmed.slice(6));
+                const parsed = JSON.parse(jsonText);
                 callback(parsed);
               } catch {}
             }
@@ -226,7 +232,18 @@ function subscribeSSE(path, callback, onStatus, options) {
         onStatus?.("reconnecting");
         const delay = Math.min(RECONNECT_BASE_MS * Math.pow(2, attempt), RECONNECT_MAX_MS);
         attempt++;
-        await new Promise((resolve) => setTimeout(resolve, delay));
+        await new Promise((resolve) => {
+          const timer = setTimeout(resolve, delay);
+          const onAbort = () => {
+            clearTimeout(timer);
+            resolve();
+          };
+          if (ac.signal.aborted) {
+            onAbort();
+            return;
+          }
+          ac.signal.addEventListener("abort", onAbort, { once: true });
+        });
       }
     }
     if (!aborted) {
@@ -237,6 +254,7 @@ function subscribeSSE(path, callback, onStatus, options) {
   return {
     abort: () => {
       aborted = true;
+      ac.abort();
     }
   };
 }
@@ -323,6 +341,24 @@ var BalanceSchema = z.object({
   locked: z.number().min(0),
   timestamp: z.number().int().positive()
 }).strict();
+var VIEW_IDS = [
+  "dashboard",
+  "workers",
+  "worker-detail",
+  "trade-monitor",
+  "logs-viewer",
+  "service-manager",
+  "config-editor",
+  "setup-wizard",
+  "settings",
+  "queue-depth",
+  "kv-viewer",
+  "secrets-viewer",
+  "db-query",
+  "ai-chat",
+  "edge-topology",
+  "worker-settings"
+];
 // src/kvKeys.ts
 var KV_TRADE_DEFAULT_LEVERAGE = "trade:default_leverage";
 var KV_TRADE_MAX_POSITION_SIZE = "trade:max_position_size";
@@ -631,73 +667,8 @@ class ExchangeRouter {
     return { exchange: key, client: provider.createClient(env, options) };
   }
 }
-
-class BaseExchangeClient {
-  apiKey;
-  apiSecret;
-  baseUrl;
-  isTestnet;
-  constructor(config) {
-    if (!config.apiKey || !config.apiSecret) {
-      throw new Error("API key and secret are required.");
-    }
-    this.apiKey = config.apiKey;
-    this.apiSecret = config.apiSecret;
-    this.baseUrl = config.baseUrl || this.getDefaultBaseUrl();
-    this.isTestnet = config.testnet || false;
-  }
-  async fetch(method, path, params) {
-    const url = `${this.baseUrl}${path}`;
-    const headers = this.buildHeaders(method, path, params);
-    const body = params ? new URLSearchParams(params).toString() : undefined;
-    const response = await fetch(url, {
-      method,
-      headers,
-      body: method !== "GET" ? body : undefined
-    });
-    if (!response.ok) {
-      const error = await response.text();
-      throw new Error(`Exchange API error: ${response.status} - ${error}`);
-    }
-    return response.json();
-  }
-  async openLong(symbol, quantity, price, orderType = "MARKET") {
-    return this.executeTrade({
-      symbol,
-      side: "long",
-      orderType,
-      quantity,
-      price
-    });
-  }
-  async openShort(symbol, quantity, price, orderType = "MARKET") {
-    return this.executeTrade({
-      symbol,
-      side: "short",
-      orderType,
-      quantity,
-      price
-    });
-  }
-  async closeLong(symbol, quantity) {
-    return this.executeTrade({
-      symbol,
-      side: "long",
-      quantity,
-      reduceOnly: true
-    });
-  }
-  async closeShort(symbol, quantity) {
-    return this.executeTrade({
-      symbol,
-      side: "short",
-      quantity,
-      reduceOnly: true
-    });
-  }
-}
 // src/exchanges/base-exchange-client.ts
-class BaseExchangeClient2 {
+class BaseExchangeClient {
   apiKey;
   apiSecret;
   baseUrl;
@@ -736,13 +707,14 @@ class BaseExchangeClient2 {
     return Array.from(new Uint8Array(signature)).map((b) => b.toString(16).padStart(2, "0")).join("");
   }
   async fetch(method, path, params) {
-    const url = `${this.baseUrl}${path}`;
+    const encoded = params ? new URLSearchParams(Object.fromEntries(Object.entries(params).map(([k, v]) => [k, String(v)]))).toString() : "";
+    const isGet = method === "GET" || method === "HEAD";
+    const url = isGet && encoded ? `${this.baseUrl}${path}${path.includes("?") ? "&" : "?"}${encoded}` : `${this.baseUrl}${path}`;
     const headers = this.buildHeaders(method, path, params);
-    const body = params ? new URLSearchParams(params).toString() : undefined;
     const response = await fetch(url, {
       method,
       headers,
-      body: method !== "GET" ? body : undefined
+      body: isGet || !encoded ? undefined : encoded
     });
     if (!response.ok) {
       const error = await response.text();
@@ -892,14 +864,19 @@ async function trackAnalytics(env, endpoint, body, options) {
       "Content-Type": "application/json"
     };
     const internalKey = env.INTERNAL_KEY_BINDING;
-    if (internalKey) {
-      headers["X-Internal-Auth-Key"] = internalKey;
+    if (!internalKey) {
+      console.error("Analytics tracking skipped: INTERNAL_KEY_BINDING missing");
+      return;
     }
-    await env.ANALYTICS_SERVICE.fetch(new Request(`http://localhost${endpoint}`, {
+    headers["X-Internal-Auth-Key"] = internalKey;
+    const response = await env.ANALYTICS_SERVICE.fetch(new Request(`http://localhost${endpoint}`, {
       method: "POST",
       headers,
       body: JSON.stringify(payload)
     }));
+    if (!response.ok) {
+      console.error(`Analytics tracking failed: HTTP ${response.status} ${response.statusText}`);
+    }
   } catch (e) {
     console.error("Analytics tracking failed:", e);
   }
@@ -952,22 +929,33 @@ function createQueueHandler(options) {
   } = options;
   const concurrency = typeof concurrencyOpt === "number" && Number.isFinite(concurrencyOpt) && concurrencyOpt >= 1 ? Math.floor(concurrencyOpt) : 1;
   async function processMessage(msg) {
-    const attemptNumber = msg.attempts || 0;
+    const delivery = Math.max(1, typeof msg.attempts === "number" && Number.isFinite(msg.attempts) ? msg.attempts : 1);
+    const retryIndex = delivery - 1;
     const logId = `[${msg.id}]`;
     try {
-      logger?.info(`${logId} Processing message (attempt ${attemptNumber + 1})`);
-      await onMessage(msg.body, attemptNumber);
+      logger?.info(`${logId} Processing message (attempt ${delivery})`);
+      await onMessage(msg.body, retryIndex);
       logger?.info(`${logId} Message processed successfully`);
+      msg.ack();
     } catch (error) {
       const errorMsg = error instanceof Error ? error.message : String(error);
-      if (attemptNumber < maxRetries) {
-        const delaySeconds = backoffDelays[attemptNumber] ?? backoffDelays[backoffDelays.length - 1] ?? 0;
-        logger?.info(`${logId} Retrying in ${delaySeconds}s (attempt ${attemptNumber + 2}/${maxRetries + 1})`);
-        await onRetry?.(msg.body, attemptNumber, errorMsg, delaySeconds);
+      if (retryIndex < maxRetries) {
+        const delaySeconds = backoffDelays[retryIndex] ?? backoffDelays[backoffDelays.length - 1] ?? 0;
+        logger?.info(`${logId} Retrying in ${delaySeconds}s (attempt ${delivery + 1}/${maxRetries + 1})`);
+        try {
+          await onRetry?.(msg.body, retryIndex, errorMsg, delaySeconds);
+        } catch (hookError) {
+          logger?.error(`${logId} onRetry failed: ${hookError instanceof Error ? hookError.message : String(hookError)}`);
+        }
         msg.retry({ delaySeconds });
       } else {
         logger?.error(`${logId} Max retries exceeded (${maxRetries + 1} attempts), moving to DLQ`);
-        await onDLQ?.(msg.body, attemptNumber, errorMsg);
+        try {
+          await onDLQ?.(msg.body, retryIndex, errorMsg);
+        } catch (hookError) {
+          logger?.error(`${logId} onDLQ failed: ${hookError instanceof Error ? hookError.message : String(hookError)}`);
+        }
+        msg.ack();
       }
     }
   }
@@ -1003,214 +991,6 @@ function createCronHandler(options) {
     }
   };
 }
-// src/d1/repository.ts
-class D1Repository {
-  db;
-  constructor(db) {
-    this.db = db;
-  }
-  async query(sql, params = []) {
-    try {
-      const stmt = this.db.prepare(sql).bind(...params);
-      const result = await stmt.all();
-      return {
-        success: result.success,
-        results: result.results,
-        error: result.error
-      };
-    } catch (error) {
-      return {
-        success: false,
-        error: toError(error)
-      };
-    }
-  }
-  async execute(sql, params = []) {
-    try {
-      const stmt = this.db.prepare(sql).bind(...params);
-      const result = await stmt.run();
-      return {
-        success: result.success,
-        meta: {
-          last_row_id: result.meta?.last_row_id,
-          changes: result.meta?.changes,
-          duration: result.meta?.duration
-        },
-        error: result.error
-      };
-    } catch (error) {
-      return {
-        success: false,
-        error: toError(error)
-      };
-    }
-  }
-  async batch(statements) {
-    try {
-      const prepared = statements.map((s) => s.params && s.params.length > 0 ? this.db.prepare(s.query).bind(...s.params) : this.db.prepare(s.query));
-      const results = await this.db.batch(prepared);
-      return results.map((r) => ({
-        success: r.success,
-        meta: r.meta ? { last_row_id: r.meta.last_row_id, changes: r.meta.changes } : undefined,
-        error: r.error
-      }));
-    } catch (error) {
-      return statements.map(() => ({
-        success: false,
-        error: toError(error)
-      }));
-    }
-  }
-  prepare(sql) {
-    return this.db.prepare(sql);
-  }
-  async getTrades(limit = 50, offset = 0) {
-    return this.query("SELECT * FROM trades ORDER BY timestamp DESC LIMIT ? OFFSET ?", [limit, offset]);
-  }
-  async insertTrade(trade) {
-    return this.execute(`INSERT INTO trades (id, timestamp, exchange, symbol, action, quantity, price, leverage, status, raw_response) 
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
-      trade.id || crypto.randomUUID(),
-      trade.timestamp,
-      trade.exchange,
-      trade.symbol,
-      trade.action,
-      trade.quantity ?? null,
-      trade.price ?? null,
-      trade.leverage ?? null,
-      trade.status,
-      trade.raw_response ?? null
-    ]);
-  }
-  async getPositions(status) {
-    if (status) {
-      return this.query("SELECT * FROM positions WHERE status = ? ORDER BY updated_at DESC", [status]);
-    }
-    return this.query("SELECT * FROM positions ORDER BY updated_at DESC");
-  }
-  async upsertPosition(position) {
-    return this.execute(`REPLACE INTO positions (id, exchange, symbol, side, entry_price, mark_price, liquidation_price, leverage, size, unrealized_pnl, status, updated_at) 
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
-      position.id,
-      position.exchange,
-      position.symbol,
-      position.side,
-      position.entry_price ?? null,
-      position.mark_price ?? null,
-      position.liquidation_price ?? null,
-      position.leverage ?? null,
-      position.size,
-      position.unrealized_pnl ?? null,
-      position.status,
-      position.updated_at
-    ]);
-  }
-  async getTradeSignals(limit = 10) {
-    return this.query(`SELECT signal_id, timestamp, symbol, signal_type, source, processed_at 
-       FROM trade_signals 
-       ORDER BY processed_at DESC 
-       LIMIT ?`, [limit]);
-  }
-  async insertTradeSignal(signal) {
-    return this.execute(`INSERT INTO trade_signals (signal_id, timestamp, symbol, signal_type, source, raw_data) 
-       VALUES (?, ?, ?, ?, ?, ?)`, [
-      signal.signal_id,
-      signal.timestamp,
-      signal.symbol,
-      signal.signal_type,
-      signal.source ?? null,
-      signal.raw_data ?? null
-    ]);
-  }
-  async getSystemLogs(limit = 50) {
-    return this.query("SELECT * FROM system_logs ORDER BY timestamp DESC LIMIT ?", [limit]);
-  }
-  async insertSystemLog(log) {
-    return this.execute(`INSERT INTO system_logs (id, level, service, message, details) VALUES (?, ?, ?, ?, ?)`, [
-      log.id || crypto.randomUUID(),
-      log.level,
-      log.service,
-      log.message,
-      log.details ?? null
-    ]);
-  }
-  async getLatestBalances() {
-    return this.query(`
-      SELECT b.id, b.exchange, b.asset, b.total, b.free, b.used, b.timestamp
-      FROM balances b
-      INNER JOIN (
-        SELECT exchange, asset, MAX(timestamp) as max_time
-        FROM balances
-        GROUP BY exchange, asset
-      ) latest ON b.exchange = latest.exchange AND b.asset = latest.asset AND b.timestamp = latest.max_time
-    `);
-  }
-  async healthCheck() {
-    try {
-      await this.db.prepare("SELECT 1").first();
-      return true;
-    } catch {
-      return false;
-    }
-  }
-}
-// src/d1/schemas.ts
-import { z as z2 } from "zod";
-var TradeRecordSchema = z2.object({
-  id: z2.string(),
-  signal_id: z2.string().nullable().optional(),
-  timestamp: z2.number().int().positive(),
-  exchange: z2.string().min(1),
-  symbol: z2.string().min(1),
-  action: z2.string().min(1),
-  quantity: z2.number().nullable(),
-  price: z2.number().nullable(),
-  leverage: z2.number().nullable(),
-  status: z2.string().min(1),
-  error_message: z2.string().nullable().optional(),
-  raw_response: z2.string().nullable().optional(),
-  created_at: z2.number().int().optional()
-}).strict();
-var PositionRecordSchema = z2.object({
-  id: z2.string(),
-  exchange: z2.string().min(1),
-  symbol: z2.string().min(1),
-  side: z2.enum(["LONG", "SHORT"]),
-  entry_price: z2.number().nullable().optional(),
-  mark_price: z2.number().nullable().optional(),
-  liquidation_price: z2.number().nullable().optional(),
-  leverage: z2.number().nullable().optional(),
-  size: z2.number().nullable(),
-  unrealized_pnl: z2.number().nullable().optional(),
-  status: z2.enum(["OPEN", "CLOSED"]),
-  updated_at: z2.number().int()
-}).strict();
-var BalanceRecordSchema = z2.object({
-  id: z2.string(),
-  exchange: z2.string().min(1),
-  asset: z2.string().min(1),
-  free: z2.number().nullable(),
-  used: z2.number().nullable(),
-  total: z2.number().nullable(),
-  timestamp: z2.number().int().positive()
-}).strict();
-var SystemLogRecordSchema = z2.object({
-  id: z2.string(),
-  timestamp: z2.number().int().optional(),
-  level: z2.string().min(1),
-  service: z2.string().min(1),
-  message: z2.string().min(1),
-  details: z2.string().nullable().optional()
-}).strict();
-var TradeSignalRecordSchema = z2.object({
-  signal_id: z2.string(),
-  timestamp: z2.number().int().positive(),
-  symbol: z2.string().min(1),
-  signal_type: z2.string().min(1),
-  source: z2.string().nullable().optional(),
-  raw_data: z2.string().nullable().optional(),
-  processed_at: z2.number().int().optional()
-}).strict();
 // src/middleware/auth.ts
 function timingSafeEqual(a, b) {
   const encoder = new TextEncoder;
@@ -1439,103 +1219,6 @@ function serviceFetch(binding, path, body, options) {
     signal: AbortSignal.timeout(timeout)
   });
 }
-// src/test-utils.ts
-function createMockKV(overrides) {
-  return {
-    get: async (_key) => null,
-    put: async (_key, _value, _options) => {},
-    delete: async (_key) => {},
-    list: async (_options) => ({
-      keys: []
-    }),
-    ...overrides
-  };
-}
-function createMockR2(overrides) {
-  return {
-    put: async (key, _value, _options) => ({
-      key
-    }),
-    get: async (_key) => null,
-    delete: async (_key) => {},
-    list: async (_options) => ({
-      objects: []
-    }),
-    ...overrides
-  };
-}
-function createMockPreparedStatement() {
-  return {
-    bind: (..._params) => createMockPreparedStatement(),
-    run: async () => ({ success: true }),
-    all: async () => ({ success: true, results: [] }),
-    first: async () => null
-  };
-}
-function createMockD1(overrides) {
-  return {
-    prepare: (_sql) => createMockPreparedStatement(),
-    dump: async () => new ArrayBuffer(0),
-    batch: async (_statements) => [],
-    exec: async (_sql) => ({ success: true }),
-    ...overrides
-  };
-}
-function createMockFetcher(response) {
-  const defaultResponse = response ?? new Response("OK", { status: 200 });
-  return {
-    fetch: async (_request, _init) => defaultResponse
-  };
-}
-function createMockAnalyticsEngine() {
-  return {
-    writeDataPoint: (_data) => {}
-  };
-}
-function createMockAnalyticsEngineDataset() {
-  return createMockAnalyticsEngine();
-}
-function createMockQueue() {
-  return {
-    send: async (_body, _options) => {},
-    sendBatch: async (_messages) => {}
-  };
-}
-function createMockVectorizeIndex(overrides) {
-  return {
-    query: async (_vector, _options) => ({
-      matches: []
-    }),
-    upsert: async (_vectors) => {},
-    deleteByIds: async (_ids) => {},
-    describe: async () => ({ dimension: 384, totalVectors: 0 }),
-    ...overrides
-  };
-}
-function createMockAi(overrides) {
-  return {
-    run: async (_model, _input) => ({}),
-    ...overrides
-  };
-}
-function createMockExecutionContext(overrides) {
-  return {
-    waitUntil: (_promise) => {},
-    passThroughOnException: () => {},
-    ...overrides
-  };
-}
-function createMockSecretsStore(overrides) {
-  return {
-    get: async (_key) => null,
-    put: async (_key, _value) => {},
-    delete: async (_key) => {},
-    ...overrides
-  };
-}
-function createMockEnv(overrides) {
-  return overrides;
-}
 // src/colors.ts
 var Colors = {
   background: "#050508",
@@ -1718,149 +1401,49 @@ function formatCpu(ms) {
 }
 // src/config.ts
 import {
-  readFileSync,
-  writeFileSync,
-  existsSync,
-  mkdirSync,
-  chmodSync,
+  readFileSync as readFileSync2,
+  writeFileSync as writeFileSync2,
+  existsSync as existsSync2,
+  mkdirSync as mkdirSync2,
+  chmodSync as chmodSync2,
   statSync
 } from "fs";
-import { join } from "path";
-import { homedir } from "os";
-var HOX_DIR = join(homedir(), ".hoox");
-var CONFIG_PATH = join(HOX_DIR, "config.json");
-var HOOX_DIR_MODE = 448;
-var HOOX_CONFIG_FILE_MODE = 384;
-var DEFAULT_CONFIG = {
-  apiUrl: "http://localhost:8787",
-  apiToken: "",
-  transport: "public",
-  refreshIntervalMs: 500,
-  theme: "dark",
-  activeExchanges: ["binance", "bybit", "mexc"],
-  notifications: {
-    alerts: true,
-    trades: true,
-    debug: false,
-    system: true
-  },
-  soundEnabled: true,
-  defaultView: "dashboard"
-};
-function readConfigSync() {
-  const envConfig = {
-    apiUrl: process.env.HOOX_API_URL,
-    apiToken: process.env.HOOX_API_TOKEN
-  };
-  let fileConfig = {};
-  try {
-    if (existsSync(CONFIG_PATH)) {
-      fileConfig = JSON.parse(readFileSync(CONFIG_PATH, "utf-8"));
-    }
-  } catch {}
-  return {
-    ...DEFAULT_CONFIG,
-    ...fileConfig,
-    ...Object.fromEntries(Object.entries(envConfig).filter(([_, v]) => v !== undefined))
-  };
-}
-async function readConfig() {
-  return readConfigSync();
-}
-function ensureHooxDirSecure(dir = HOX_DIR) {
-  if (!existsSync(dir)) {
-    mkdirSync(dir, { recursive: true, mode: HOOX_DIR_MODE });
-  }
-  try {
-    chmodSync(dir, HOOX_DIR_MODE);
-  } catch {}
-}
-function writeSecureFileSync(filePath, contents, mode = HOOX_CONFIG_FILE_MODE) {
-  writeFileSync(filePath, contents, { encoding: "utf-8", mode });
-  try {
-    chmodSync(filePath, mode);
-  } catch {}
-}
-function isUnixModeGroupOrWorldAccessible(mode) {
-  return (mode & 63) !== 0;
-}
-function isConfigWorldOrGroupReadable(filePath = CONFIG_PATH) {
-  try {
-    if (!existsSync(filePath))
-      return false;
-    return isUnixModeGroupOrWorldAccessible(statSync(filePath).mode & 511);
-  } catch {
-    return false;
-  }
-}
-function formatConfigPermissionWarning(filePath = CONFIG_PATH) {
-  if (!isConfigWorldOrGroupReadable(filePath))
-    return null;
-  return `Warning: ${filePath} is group/world-accessible. ` + `Run: chmod 600 ${filePath}  (and chmod 700 on the parent dir). ` + `This file may contain apiToken / operator secrets.`;
-}
-function writeConfigSync(config) {
-  try {
-    ensureHooxDirSecure(HOX_DIR);
-    writeSecureFileSync(CONFIG_PATH, JSON.stringify(config, null, 2), HOOX_CONFIG_FILE_MODE);
-  } catch (err) {
-    console.error("Failed to write config:", err);
-  }
-}
-async function writeConfig(config) {
-  writeConfigSync(config);
-}
-var VALID_TRANSPORTS = new Set([
-  "public",
-  "access",
-  "mtls",
-  "tunnel"
-]);
-function validateConfig(config) {
-  const errors = [];
-  if (config.apiUrl && !config.apiUrl.startsWith("http")) {
-    errors.push("apiUrl must start with http:// or https://");
-  }
-  if (config.refreshIntervalMs !== undefined && config.refreshIntervalMs < 100) {
-    errors.push("refreshIntervalMs must be >= 100ms");
-  }
-  if (config.theme && !["dark", "light"].includes(config.theme)) {
-    errors.push('theme must be "dark" or "light"');
-  }
-  if (config.transport !== undefined && !VALID_TRANSPORTS.has(config.transport)) {
-    errors.push('transport must be "public" | "access" | "mtls" | "tunnel"');
-  }
-  return errors;
-}
-
-// src/index.ts
-init_api_client();
-init_sse();
-init_operator_transport();
+import { join as join2 } from "path";
 
 // src/path-utils.ts
 import {
-  existsSync as existsSync2,
-  mkdirSync as mkdirSync2,
-  readFileSync as readFileSync2,
-  writeFileSync as writeFileSync2,
-  chmodSync as chmodSync2
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  writeFileSync,
+  chmodSync
 } from "fs";
-import { homedir as homedir2 } from "os";
-import { dirname, join as join2, resolve } from "path";
+import { homedir } from "os";
+import { dirname, join, resolve, sep } from "path";
 function createHooxPath(path) {
   return path;
 }
+function isInsideDir(child, parent) {
+  const resolvedChild = resolve(child);
+  const resolvedParent = resolve(parent);
+  const cmpChild = process.platform === "win32" ? resolvedChild.toLowerCase() : resolvedChild;
+  const cmpParent = process.platform === "win32" ? resolvedParent.toLowerCase() : resolvedParent;
+  if (cmpChild === cmpParent)
+    return true;
+  const prefix = cmpParent.endsWith(sep) ? cmpParent : cmpParent + sep;
+  return cmpChild.startsWith(prefix);
+}
 function getHooxHome() {
   try {
     const override = process.env.HOOX_HOME?.trim();
     if (override) {
       return createHooxPath(resolve(override));
     }
-    const home = homedir2();
+    const home = homedir();
     if (!home || home.length === 0) {
       return createHooxPath(resolve(process.cwd(), ".hoox"));
     }
-    return createHooxPath(join2(home, ".hoox"));
+    return createHooxPath(join(home, ".hoox"));
   } catch {
     return createHooxPath(resolve(process.cwd(), ".hoox"));
   }
@@ -1870,10 +1453,10 @@ function isHooxSetupRoot(dir) {
     return false;
   try {
     const root = resolve(dir);
-    if (!existsSync2(join2(root, "packages", "cli", "package.json"))) {
+    if (!existsSync(join(root, "packages", "cli", "package.json"))) {
       return false;
     }
-    return existsSync2(join2(root, "wrangler.jsonc")) || existsSync2(join2(root, "wrangler.jsonc.example")) || existsSync2(join2(root, "workers")) || existsSync2(join2(root, ".gitmodules"));
+    return existsSync(join(root, "wrangler.jsonc")) || existsSync(join(root, "wrangler.jsonc.example")) || existsSync(join(root, "workers")) || existsSync(join(root, ".gitmodules"));
   } catch {
     return false;
   }
@@ -1884,9 +1467,9 @@ function getRememberedMonorepoPath() {
 function getRememberedMonorepoRoot() {
   try {
     const path = getRememberedMonorepoPath();
-    if (!existsSync2(path))
+    if (!existsSync(path))
       return null;
-    const raw = readFileSync2(path, "utf-8");
+    const raw = readFileSync(path, "utf-8");
     const data = JSON.parse(raw);
     if (!data.root || typeof data.root !== "string")
       return null;
@@ -1902,21 +1485,21 @@ function rememberMonorepoRoot(root) {
     if (!isHooxSetupRoot(resolved))
       return false;
     const configDir = getHooxConfigDir();
-    mkdirSync2(configDir, { recursive: true, mode: 448 });
+    mkdirSync(configDir, { recursive: true, mode: 448 });
     try {
-      chmodSync2(configDir, 448);
+      chmodSync(configDir, 448);
     } catch {}
     const payload = {
       root: resolved,
       updatedAt: new Date().toISOString()
     };
     const path = getRememberedMonorepoPath();
-    writeFileSync2(path, JSON.stringify(payload, null, 2) + `
+    writeFileSync(path, JSON.stringify(payload, null, 2) + `
 `, {
       mode: 384
     });
     try {
-      chmodSync2(path, 384);
+      chmodSync(path, 384);
     } catch {}
     return true;
   } catch {
@@ -1996,9 +1579,9 @@ function resolveHooxRuntimeRoot(options) {
 function getTuiEntryCandidates(runtimeRoot) {
   const root = resolve(runtimeRoot);
   return [
-    join2(root, "packages", "tui", "src", "main.tsx"),
-    join2(root, "packages", "tui", "dist", "main.js"),
-    join2(root, "packages", "tui", "src", "main.ts")
+    join(root, "packages", "tui", "src", "main.tsx"),
+    join(root, "packages", "tui", "dist", "main.js"),
+    join(root, "packages", "tui", "src", "main.ts")
   ];
 }
 function resolveHooxPath(relativePath) {
@@ -2010,10 +1593,10 @@ function resolveHooxPath(relativePath) {
   }
   const normalizedPath = relativePath.replace(/\\/g, "/");
   const hooxHome = getHooxHome();
-  const fullPath = join2(hooxHome, normalizedPath);
+  const fullPath = join(hooxHome, normalizedPath);
   const resolvedPath = resolve(fullPath);
   const resolvedHome = resolve(hooxHome);
-  if (!resolvedPath.startsWith(resolvedHome)) {
+  if (!isInsideDir(resolvedPath, resolvedHome)) {
     throw new Error(`Resolved path "${resolvedPath}" is outside Hoox home directory`);
   }
   return createHooxPath(resolvedPath);
@@ -2023,7 +1606,7 @@ function isWithinHooxHome(path) {
     const hooxHome = getHooxHome();
     const resolvedPath = resolve(path);
     const resolvedHome = resolve(hooxHome);
-    return resolvedPath.startsWith(resolvedHome);
+    return isInsideDir(resolvedPath, resolvedHome);
   } catch {
     return false;
   }
@@ -2058,17 +1641,128 @@ function getHooxStatePath() {
   return resolveHooxPath("data/state.json");
 }
 
+// src/config.ts
+function hooxDir() {
+  return getHooxHome();
+}
+function configPath() {
+  return join2(hooxDir(), "config.json");
+}
+var HOOX_DIR_MODE = 448;
+var HOOX_CONFIG_FILE_MODE = 384;
+var DEFAULT_CONFIG = {
+  apiUrl: "http://localhost:8787",
+  apiToken: "",
+  transport: "public",
+  refreshIntervalMs: 500,
+  theme: "dark",
+  activeExchanges: ["binance", "bybit", "mexc"],
+  notifications: {
+    alerts: true,
+    trades: true,
+    debug: false,
+    system: true
+  },
+  soundEnabled: true,
+  defaultView: "dashboard"
+};
+function readConfigSync() {
+  const envConfig = {
+    apiUrl: process.env.HOOX_API_URL,
+    apiToken: process.env.HOOX_API_TOKEN
+  };
+  let fileConfig = {};
+  try {
+    if (existsSync2(configPath())) {
+      fileConfig = JSON.parse(readFileSync2(configPath(), "utf-8"));
+    }
+  } catch {}
+  return {
+    ...DEFAULT_CONFIG,
+    ...fileConfig,
+    ...Object.fromEntries(Object.entries(envConfig).filter(([_, v]) => v !== undefined))
+  };
+}
+async function readConfig() {
+  return readConfigSync();
+}
+function ensureHooxDirSecure(dir = hooxDir()) {
+  if (!existsSync2(dir)) {
+    mkdirSync2(dir, { recursive: true, mode: HOOX_DIR_MODE });
+  }
+  try {
+    chmodSync2(dir, HOOX_DIR_MODE);
+  } catch {}
+}
+function writeSecureFileSync(filePath, contents, mode = HOOX_CONFIG_FILE_MODE) {
+  writeFileSync2(filePath, contents, { encoding: "utf-8", mode });
+  try {
+    chmodSync2(filePath, mode);
+  } catch {}
+}
+function isUnixModeGroupOrWorldAccessible(mode) {
+  return (mode & 63) !== 0;
+}
+function isConfigWorldOrGroupReadable(filePath = configPath()) {
+  try {
+    if (!existsSync2(filePath))
+      return false;
+    return isUnixModeGroupOrWorldAccessible(statSync(filePath).mode & 511);
+  } catch {
+    return false;
+  }
+}
+function formatConfigPermissionWarning(filePath = configPath()) {
+  if (!isConfigWorldOrGroupReadable(filePath))
+    return null;
+  return `Warning: ${filePath} is group/world-accessible. ` + `Run: chmod 600 ${filePath}  (and chmod 700 on the parent dir). ` + `This file may contain apiToken / operator secrets.`;
+}
+function writeConfigSync(config) {
+  ensureHooxDirSecure(hooxDir());
+  writeSecureFileSync(configPath(), JSON.stringify(config, null, 2), HOOX_CONFIG_FILE_MODE);
+}
+async function writeConfig(config) {
+  writeConfigSync(config);
+}
+var VALID_TRANSPORTS = new Set([
+  "public",
+  "access",
+  "mtls",
+  "tunnel"
+]);
+function validateConfig(config) {
+  const errors = [];
+  if (config.apiUrl && !config.apiUrl.startsWith("http")) {
+    errors.push("apiUrl must start with http:// or https://");
+  }
+  if (config.refreshIntervalMs !== undefined && config.refreshIntervalMs < 100) {
+    errors.push("refreshIntervalMs must be >= 100ms");
+  }
+  if (config.theme && !["dark", "light"].includes(config.theme)) {
+    errors.push('theme must be "dark" or "light"');
+  }
+  if (config.transport !== undefined && !VALID_TRANSPORTS.has(config.transport)) {
+    errors.push('transport must be "public" | "access" | "mtls" | "tunnel"');
+  }
+  return errors;
+}
+
+// src/index.ts
+init_api_client();
+init_sse();
+init_operator_transport();
+
 // src/session.ts
-import { z as z3 } from "zod";
-var SessionStateFileSchema = z3.object({
-  activeView: z3.string().optional(),
-  sidebarExpanded: z3.boolean().optional(),
-  windowSize: z3.object({
-    cols: z3.number().int().positive(),
-    rows: z3.number().int().positive()
+import { z as z2 } from "zod";
+var SessionStateFileSchema = z2.object({
+  activeView: z2.string().optional(),
+  sidebarExpanded: z2.boolean().optional(),
+  windowSize: z2.object({
+    cols: z2.number().int().positive(),
+    rows: z2.number().int().positive()
   }).optional(),
-  lastData: z3.number().nonnegative().optional(),
-  savedAt: z3.string().optional()
+  lastData: z2.number().nonnegative().optional(),
+  savedAt: z2.string().optional()
 }).strict();
 var TUI_STATE_DIR = ".tui-state";
 function getSessionFilePath() {
@@ -2105,7 +1799,7 @@ async function restoreSession() {
     const file = Bun.file(getSessionFilePath());
     const exists = await file.exists();
     if (!exists)
-      return { ...DEFAULT_SESSION };
+      return { ...DEFAULT_SESSION, fromDisk: false };
     const raw = await file.text();
     const result = SessionStateFileSchema.safeParse(JSON.parse(raw));
     const parsed = result.success ? result.data : {};
@@ -2114,30 +1808,14 @@ async function restoreSession() {
       sidebarExpanded: typeof parsed.sidebarExpanded === "boolean" ? parsed.sidebarExpanded : DEFAULT_SESSION.sidebarExpanded,
       windowSize: parsed.windowSize ?? DEFAULT_SESSION.windowSize,
       lastData: typeof parsed.lastData === "number" ? parsed.lastData : DEFAULT_SESSION.lastData,
-      savedAt: parsed.savedAt ?? DEFAULT_SESSION.savedAt
+      savedAt: parsed.savedAt ?? DEFAULT_SESSION.savedAt,
+      fromDisk: true
     };
   } catch {
-    return { ...DEFAULT_SESSION };
+    return { ...DEFAULT_SESSION, fromDisk: false };
   }
 }
-var VALID_VIEW_IDS = new Set([
-  "dashboard",
-  "workers",
-  "worker-detail",
-  "trade-monitor",
-  "logs-viewer",
-  "service-manager",
-  "config-editor",
-  "setup-wizard",
-  "settings",
-  "queue-depth",
-  "kv-viewer",
-  "secrets-viewer",
-  "db-query",
-  "ai-chat",
-  "edge-topology",
-  "worker-settings"
-]);
+var VALID_VIEW_IDS = new Set(VIEW_IDS);
 function validateViewId(id) {
   return typeof id === "string" && VALID_VIEW_IDS.has(id);
 }
@@ -2821,7 +2499,7 @@ var INTEGRATIONS = [
     label: "OpenAI (AI Agent)",
     workerName: "agent-worker",
     secrets: {
-      AGENT_INTERNAL_KEY: "OpenAI API Key"
+      OPENAI_API_KEY: "OpenAI API Key"
     }
   },
   {
@@ -2829,7 +2507,7 @@ var INTEGRATIONS = [
     label: "Anthropic (AI Agent)",
     workerName: "agent-worker",
     secrets: {
-      AGENT_INTERNAL_KEY: "Anthropic API Key"
+      ANTHROPIC_API_KEY: "Anthropic API Key"
     }
   },
   {
@@ -2837,7 +2515,7 @@ var INTEGRATIONS = [
     label: "Google AI (AI Agent)",
     workerName: "agent-worker",
     secrets: {
-      AGENT_INTERNAL_KEY: "Google AI API Key"
+      GOOGLE_API_KEY: "Google AI API Key"
     }
   },
   {
@@ -3058,8 +2736,9 @@ class WizardEngine {
       const previousStep = STEP_ORDER[currentIdx - 1];
       if (previousStep === undefined)
         return;
+      const leaving = this.state.step;
       this.state.step = previousStep;
-      this.state.completedSteps = this.state.completedSteps.filter((s) => s !== this.state.step || STEP_ORDER.indexOf(s) <= STEP_ORDER.indexOf(previousStep));
+      this.state.completedSteps = this.state.completedSteps.filter((s) => s !== leaving && STEP_ORDER.indexOf(s) < STEP_ORDER.indexOf(previousStep));
     }
     this.state.updatedAt = Date.now();
   }
@@ -3069,9 +2748,15 @@ class WizardEngine {
   buildConfig() {
     const cf = this.state.cloudflareConfig;
     const workers = {};
+    const enabled = new Set(this.state.selectedWorkers);
+    for (const key of this.state.selectedIntegrations) {
+      const integration = INTEGRATIONS.find((i) => i.key === key);
+      if (integration?.workerName)
+        enabled.add(integration.workerName);
+    }
     for (const [name, baseCfg] of Object.entries(BASE_WORKERS)) {
       workers[name] = {
-        enabled: true,
+        enabled: enabled.has(name),
         path: baseCfg.path,
         vars: { ...baseCfg.vars },
         secrets: [...BASE_SECRETS[name] ?? []]
@@ -3131,7 +2816,6 @@ class WizardEngine {
       vectorizeIndexes: []
     };
     const allWorkers = [
-      ...Object.keys(BASE_WORKERS),
       ...this.state.selectedWorkers,
       ...this.state.selectedIntegrations.map((k) => {
         const i = INTEGRATIONS.find((i) => i.key === k);
@@ -3150,7 +2834,7 @@ class WizardEngine {
     }
     if (workerSet.has("hoox") || workerSet.has("telegram-worker")) {
       plan.vectorizeIndexes = plan.vectorizeIndexes ?? [];
-      plan.vectorizeIndexes.push("hoox-rag-index");
+      plan.vectorizeIndexes.push("my-rag-index");
     }
     plan.d1Databases = [...new Set(plan.d1Databases)];
     plan.kvNamespaces = [...new Set(plan.kvNamespaces)];
@@ -3481,7 +3165,10 @@ var manifests = {
       INTERNAL_KEY_BINDING: {
         type: "secret",
         description: "Inter-worker auth key"
-      }
+      },
+      OPENAI_API_KEY: { type: "secret", description: "OpenAI API key" },
+      ANTHROPIC_API_KEY: { type: "secret", description: "Anthropic API key" },
+      GOOGLE_API_KEY: { type: "secret", description: "Google AI API key" }
     },
     services: [
       {
@@ -3699,12 +3386,15 @@ function getWorkerDefaultEnabled(name) {
 }
 // src/schemas/validators.ts
 import { parse } from "jsonc-parser";
+function parseJsoncDocument(content) {
+  const errors = [];
+  const value = parse(content, errors, { allowTrailingComma: true });
+  return { value, errors };
+}
 function validateWranglerJsonc(workerName, manifest, jsoncContent) {
   const errors = [];
-  let parsed;
-  try {
-    parsed = parse(jsoncContent);
-  } catch {
+  const { value: parsed, errors: parseErrors } = parseJsoncDocument(jsoncContent);
+  if (parseErrors.length > 0) {
     errors.push({
       worker: workerName,
       severity: "error",
@@ -3735,7 +3425,7 @@ function validateWranglerJsonc(workerName, manifest, jsoncContent) {
     }
   }
   for (const [name, def] of Object.entries(manifest.vars)) {
-    if (def.type === "secret" && !name.endsWith("_BINDING") && !name.endsWith("_SECRET") && !name.startsWith("CLOUDFLARE_") && name !== "TELEGRAM_SECRET_TOKEN" && name !== "TELEGRAM_ALLOWED_CHAT_IDS" && name !== "AUTHORIZED_CHAT_IDS" && name !== "MAILGUN_API_KEY" && name !== "EMAIL_SCAN_SUBJECT" && name !== "DASHBOARD_USER" && name !== "DASHBOARD_PASS" && name !== "SESSION_SECRET" && name !== "AGENT_INTERNAL_KEY") {
+    if (def.type === "secret" && !name.endsWith("_BINDING") && !name.endsWith("_SECRET") && !name.startsWith("CLOUDFLARE_") && name !== "TELEGRAM_SECRET_TOKEN" && name !== "TELEGRAM_ALLOWED_CHAT_IDS" && name !== "AUTHORIZED_CHAT_IDS" && name !== "MAILGUN_API_KEY" && name !== "EMAIL_SCAN_SUBJECT" && name !== "DASHBOARD_USER" && name !== "DASHBOARD_PASS" && name !== "SESSION_SECRET" && name !== "AGENT_INTERNAL_KEY" && name !== "OPENAI_API_KEY" && name !== "ANTHROPIC_API_KEY" && name !== "GOOGLE_API_KEY") {
       errors.push({
         worker: workerName,
         severity: "warning",
@@ -3781,10 +3471,8 @@ function validateWranglerJsonc(workerName, manifest, jsoncContent) {
 }
 function validateRootSecrets(workerName, manifest, rootJsoncContent) {
   const errors = [];
-  let parsed;
-  try {
-    parsed = parse(rootJsoncContent);
-  } catch {
+  const { value: parsed, errors: parseErrors } = parseJsoncDocument(rootJsoncContent);
+  if (parseErrors.length > 0) {
     errors.push({
       worker: workerName,
       severity: "error",
@@ -3842,6 +3530,11 @@ function validateDevVars(workerName, manifest, devVarsContent) {
   }
   return errors;
 }
+function queueProducerBinding(queue) {
+  if (queue === "trade-execution")
+    return "TRADE_QUEUE";
+  return queue.replace(/[^A-Za-z0-9]+/g, "_").toUpperCase();
+}
 function generateWranglerJsonc(manifest) {
   const parts = [];
   parts.push(`{`);
@@ -3908,21 +3601,29 @@ function generateWranglerJsonc(manifest) {
     parts.push(`  ],`);
   }
   if (infra.queues) {
-    if (infra.queues.producer && infra.queues.producer.length > 0) {
-      parts.push(`  "queues": { "producers": [`);
-      for (const [i, q] of infra.queues.producer.entries()) {
-        const comma = i < infra.queues.producer.length - 1 ? "," : "";
-        parts.push(`    { "queue": "${q}", "binding": "" }${comma}`);
+    const producers = infra.queues.producer ?? [];
+    const consumers = infra.queues.consumer ?? [];
+    if (producers.length > 0 || consumers.length > 0) {
+      const queueParts = [];
+      if (producers.length > 0) {
+        queueParts.push(`    "producers": [`);
+        for (const [i, q] of producers.entries()) {
+          const comma = i < producers.length - 1 ? "," : "";
+          queueParts.push(`      { "queue": "${q}", "binding": "${queueProducerBinding(q)}" }${comma}`);
+        }
+        queueParts.push(consumers.length > 0 ? `    ],` : `    ]`);
       }
-      parts.push(`  ] },`);
-    }
-    if (infra.queues.consumer && infra.queues.consumer.length > 0) {
-      parts.push(`  "queues": { "consumers": [`);
-      for (const [i, q] of infra.queues.consumer.entries()) {
-        const comma = i < infra.queues.consumer.length - 1 ? "," : "";
-        parts.push(`    { "queue": "${q}" }${comma}`);
+      if (consumers.length > 0) {
+        queueParts.push(`    "consumers": [`);
+        for (const [i, q] of consumers.entries()) {
+          const comma = i < consumers.length - 1 ? "," : "";
+          queueParts.push(`      { "queue": "${q}" }${comma}`);
+        }
+        queueParts.push(`    ]`);
       }
-      parts.push(`  ] },`);
+      parts.push(`  "queues": {`);
+      parts.push(...queueParts);
+      parts.push(`  },`);
     }
   }
   if (infra.durableObjects && infra.durableObjects.length > 0) {
@@ -4484,14 +4185,13 @@ export {
   AGENT_CONFIG_KV_KEY,
   AlertSeverityColor,
   BalanceSchema,
-  BaseExchangeClient2 as BaseExchangeClient,
+  BaseExchangeClient,
   CALLED_BY,
   CLOUDFLARE_API_TOKEN_PLACEHOLDER,
   COPYRIGHT,
   Colors,
   ConnectionStatusColor,
   CoolBracketPalette,
-  D1Repository,
   D1_READ_AUTH_KEY_FIELDS,
   D1_WRITE_AUTH_KEY_FIELDS,
   DASHBOARD_D1_READ_AUTH_KEY_FIELDS,
@@ -4529,6 +4229,7 @@ export {
   TradeActionSchema,
   TradeQueueMessageSchema,
   TradeSignalSchema,
+  VIEW_IDS,
   WALLET_EXECUTE_AUTH_KEY_FIELDS,
   WIZARD_STATE_PATH,
   WORKER_CATALOG,
@@ -4547,18 +4248,6 @@ export {
   createCronHandler,
   createErrorResponse,
   createJsonResponse,
-  createMockAi,
-  createMockAnalyticsEngine,
-  createMockAnalyticsEngineDataset,
-  createMockD1,
-  createMockEnv,
-  createMockExecutionContext,
-  createMockFetcher,
-  createMockKV,
-  createMockQueue,
-  createMockR2,
-  createMockSecretsStore,
-  createMockVectorizeIndex,
   createQueueHandler,
   createSuccessResponse,
   dashboardWorkerDir,