@jango-blockchained/hoox-shared 1.0.8

package/dist/kvKeys.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Centralized KV key registry for Hoox workers.
+ * Use these constants instead of string literals to prevent typos.
+ *
+ * Key naming convention: <namespace>:<key>
+ * - trade:* - Trade execution settings
+ * - bot:* - Telegram bot settings
+ * - webhook:* - Webhook configuration
+ * - email:* - Email worker settings
+ * - agent:* - Agent worker settings
+ * - dashboard:* - Dashboard settings
+ * - global:* - Global settings
+ */
+export declare const KV_TRADE_DEFAULT_LEVERAGE = "trade:default_leverage";
+export declare const KV_TRADE_MAX_POSITION_SIZE = "trade:max_position_size";
+export declare const KV_TRADE_MAX_DAILY_DRAWDOWN_PERCENT = "trade:max_daily_drawdown_percent";
+export declare const KV_TRADE_TRAILING_STOP_PERCENT = "trade:trailing_stop_percent";
+export declare const KV_TRADE_KILL_SWITCH = "trade:kill_switch";
+export declare const KV_TRADE_ROUTING = "trade:routing";
+export declare const KV_BOT_ENABLED = "bot:enabled";
+export declare const KV_BOT_DEFAULT_CHAT_ID = "bot:default_chat_id";
+export declare const KV_BOT_NOTIFY_ON_EXECUTION = "bot:notify_on_execution";
+export declare const KV_BOT_NOTIFY_ON_ERROR = "bot:notify_on_error";
+export declare const KV_WEBHOOK_IP_CHECK_ENABLED = "webhook:tradingview:ip_check_enabled";
+export declare const KV_WEBHOOK_ALLOWED_IPS = "webhook:tradingview:allowed_ips";
+export declare const KV_WEBHOOK_QUEUE_MODE = "webhook:queue_mode";
+export declare const KV_EMAIL_SCAN_SUBJECT = "email:scan_subject";
+export declare const KV_EMAIL_USE_IMAP = "email:use_imap";
+export declare const KV_EMAIL_COIN_PATTERN = "email:coin_pattern";
+export declare const KV_EMAIL_ACTION_PATTERN = "email:action_pattern";
+export declare const KV_EMAIL_QUANTITY_MULTIPLIER = "email:quantity_multiplier";
+export declare const KV_AGENT_CONFIG = "agent:config";
+export declare const KV_AGENT_OPENAI_KEY = "agent:openai_key";
+export declare const KV_AGENT_ANTHROPIC_KEY = "agent:anthropic_key";
+export declare const KV_AGENT_GOOGLE_KEY = "agent:google_key";
+export declare const KV_DASHBOARD_AI_HEALTH_SUMMARY = "dashboard:ai_health_summary";
+export declare const KV_HEALTH_CHECK = "health_check";
+export declare const KV_HOUSEKEEPING_LAST_CHECK = "housekeeping:last_check";
+export declare const QUEUE_MODE_FAILOVER = "queue_failover";
+export declare const QUEUE_MODE_EVERYWHERE = "queue_everywhere";
+export declare const QUEUE_MODE_DISABLED = "queue_disabled";
+export declare const KVKeys: {
+    KV_TRADE_DEFAULT_LEVERAGE: string;
+    KV_TRADE_MAX_POSITION_SIZE: string;
+    KV_TRADE_MAX_DAILY_DRAWDOWN_PERCENT: string;
+    KV_TRADE_TRAILING_STOP_PERCENT: string;
+    KV_TRADE_KILL_SWITCH: string;
+    KV_TRADE_ROUTING: string;
+    KV_BOT_ENABLED: string;
+    KV_BOT_DEFAULT_CHAT_ID: string;
+    KV_BOT_NOTIFY_ON_EXECUTION: string;
+    KV_BOT_NOTIFY_ON_ERROR: string;
+    KV_WEBHOOK_IP_CHECK_ENABLED: string;
+    KV_WEBHOOK_ALLOWED_IPS: string;
+    KV_WEBHOOK_QUEUE_MODE: string;
+    KV_EMAIL_SCAN_SUBJECT: string;
+    KV_EMAIL_USE_IMAP: string;
+    KV_EMAIL_COIN_PATTERN: string;
+    KV_EMAIL_ACTION_PATTERN: string;
+    KV_EMAIL_QUANTITY_MULTIPLIER: string;
+    KV_AGENT_CONFIG: string;
+    KV_AGENT_OPENAI_KEY: string;
+    KV_AGENT_ANTHROPIC_KEY: string;
+    KV_AGENT_GOOGLE_KEY: string;
+    KV_DASHBOARD_AI_HEALTH_SUMMARY: string;
+    KV_HEALTH_CHECK: string;
+    KV_HOUSEKEEPING_LAST_CHECK: string;
+    QUEUE_MODE_FAILOVER: string;
+    QUEUE_MODE_EVERYWHERE: string;
+    QUEUE_MODE_DISABLED: string;
+};
+//# sourceMappingURL=kvKeys.d.ts.map

package/dist/kvKeys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kvKeys.d.ts","sourceRoot":"","sources":["../src/kvKeys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,eAAO,MAAM,yBAAyB,2BAA2B,CAAC;AAClE,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AACpE,eAAO,MAAM,mCAAmC,qCACZ,CAAC;AACrC,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAC5E,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAGhD,eAAO,MAAM,cAAc,gBAAgB,CAAC;AAC5C,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAC5D,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AACpE,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAG5D,eAAO,MAAM,2BAA2B,yCACA,CAAC;AACzC,eAAO,MAAM,sBAAsB,oCAAoC,CAAC;AACxE,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAG1D,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAC1D,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAClD,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAC1D,eAAO,MAAM,uBAAuB,yBAAyB,CAAC;AAC9D,eAAO,MAAM,4BAA4B,8BAA8B,CAAC;AAGxE,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAC9C,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AACtD,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAC5D,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AAGtD,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAG5E,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAC9C,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AAGpE,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AACpD,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AACxD,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAKpD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BlB,CAAC"}

package/dist/kvKeys.js

@@ -0,0 +1,107 @@
+// @bun
+var __defProp = Object.defineProperty;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+
+// src/kvKeys.ts
+var KV_TRADE_DEFAULT_LEVERAGE = "trade:default_leverage";
+var KV_TRADE_MAX_POSITION_SIZE = "trade:max_position_size";
+var KV_TRADE_MAX_DAILY_DRAWDOWN_PERCENT = "trade:max_daily_drawdown_percent";
+var KV_TRADE_TRAILING_STOP_PERCENT = "trade:trailing_stop_percent";
+var KV_TRADE_KILL_SWITCH = "trade:kill_switch";
+var KV_TRADE_ROUTING = "trade:routing";
+var KV_BOT_ENABLED = "bot:enabled";
+var KV_BOT_DEFAULT_CHAT_ID = "bot:default_chat_id";
+var KV_BOT_NOTIFY_ON_EXECUTION = "bot:notify_on_execution";
+var KV_BOT_NOTIFY_ON_ERROR = "bot:notify_on_error";
+var KV_WEBHOOK_IP_CHECK_ENABLED = "webhook:tradingview:ip_check_enabled";
+var KV_WEBHOOK_ALLOWED_IPS = "webhook:tradingview:allowed_ips";
+var KV_WEBHOOK_QUEUE_MODE = "webhook:queue_mode";
+var KV_EMAIL_SCAN_SUBJECT = "email:scan_subject";
+var KV_EMAIL_USE_IMAP = "email:use_imap";
+var KV_EMAIL_COIN_PATTERN = "email:coin_pattern";
+var KV_EMAIL_ACTION_PATTERN = "email:action_pattern";
+var KV_EMAIL_QUANTITY_MULTIPLIER = "email:quantity_multiplier";
+var KV_AGENT_CONFIG = "agent:config";
+var KV_AGENT_OPENAI_KEY = "agent:openai_key";
+var KV_AGENT_ANTHROPIC_KEY = "agent:anthropic_key";
+var KV_AGENT_GOOGLE_KEY = "agent:google_key";
+var KV_DASHBOARD_AI_HEALTH_SUMMARY = "dashboard:ai_health_summary";
+var KV_HEALTH_CHECK = "health_check";
+var KV_HOUSEKEEPING_LAST_CHECK = "housekeeping:last_check";
+var QUEUE_MODE_FAILOVER = "queue_failover";
+var QUEUE_MODE_EVERYWHERE = "queue_everywhere";
+var QUEUE_MODE_DISABLED = "queue_disabled";
+var KVKeys = {
+  KV_TRADE_DEFAULT_LEVERAGE,
+  KV_TRADE_MAX_POSITION_SIZE,
+  KV_TRADE_MAX_DAILY_DRAWDOWN_PERCENT,
+  KV_TRADE_TRAILING_STOP_PERCENT,
+  KV_TRADE_KILL_SWITCH,
+  KV_TRADE_ROUTING,
+  KV_BOT_ENABLED,
+  KV_BOT_DEFAULT_CHAT_ID,
+  KV_BOT_NOTIFY_ON_EXECUTION,
+  KV_BOT_NOTIFY_ON_ERROR,
+  KV_WEBHOOK_IP_CHECK_ENABLED,
+  KV_WEBHOOK_ALLOWED_IPS,
+  KV_WEBHOOK_QUEUE_MODE,
+  KV_EMAIL_SCAN_SUBJECT,
+  KV_EMAIL_USE_IMAP,
+  KV_EMAIL_COIN_PATTERN,
+  KV_EMAIL_ACTION_PATTERN,
+  KV_EMAIL_QUANTITY_MULTIPLIER,
+  KV_AGENT_CONFIG,
+  KV_AGENT_OPENAI_KEY,
+  KV_AGENT_ANTHROPIC_KEY,
+  KV_AGENT_GOOGLE_KEY,
+  KV_DASHBOARD_AI_HEALTH_SUMMARY,
+  KV_HEALTH_CHECK,
+  KV_HOUSEKEEPING_LAST_CHECK,
+  QUEUE_MODE_FAILOVER,
+  QUEUE_MODE_EVERYWHERE,
+  QUEUE_MODE_DISABLED
+};
+export {
+  QUEUE_MODE_FAILOVER,
+  QUEUE_MODE_EVERYWHERE,
+  QUEUE_MODE_DISABLED,
+  KV_WEBHOOK_QUEUE_MODE,
+  KV_WEBHOOK_IP_CHECK_ENABLED,
+  KV_WEBHOOK_ALLOWED_IPS,
+  KV_TRADE_TRAILING_STOP_PERCENT,
+  KV_TRADE_ROUTING,
+  KV_TRADE_MAX_POSITION_SIZE,
+  KV_TRADE_MAX_DAILY_DRAWDOWN_PERCENT,
+  KV_TRADE_KILL_SWITCH,
+  KV_TRADE_DEFAULT_LEVERAGE,
+  KV_HOUSEKEEPING_LAST_CHECK,
+  KV_HEALTH_CHECK,
+  KV_EMAIL_USE_IMAP,
+  KV_EMAIL_SCAN_SUBJECT,
+  KV_EMAIL_QUANTITY_MULTIPLIER,
+  KV_EMAIL_COIN_PATTERN,
+  KV_EMAIL_ACTION_PATTERN,
+  KV_DASHBOARD_AI_HEALTH_SUMMARY,
+  KV_BOT_NOTIFY_ON_EXECUTION,
+  KV_BOT_NOTIFY_ON_ERROR,
+  KV_BOT_ENABLED,
+  KV_BOT_DEFAULT_CHAT_ID,
+  KV_AGENT_OPENAI_KEY,
+  KV_AGENT_GOOGLE_KEY,
+  KV_AGENT_CONFIG,
+  KV_AGENT_ANTHROPIC_KEY,
+  KVKeys
+};

package/dist/kvUtils.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Utility functions for KV operations
+ * Shared across workers that need KV timestamp logging
+ */
+import type { KVNamespace } from "@cloudflare/workers-types";
+/**
+ * Interface for environments with a KVNamespace binding
+ */
+export interface EnvWithKV {
+    REPORT_KV: KVNamespace;
+    [key: string]: unknown;
+}
+/**
+ * Logs a timestamp to KV
+ * @param env - Environment with KV binding
+ * @param prefix - Optional prefix for the key
+ * @returns Promise that resolves when the operation completes
+ */
+export declare function logKvTimestamp(env: EnvWithKV, prefix?: string): Promise<void>;
+/**
+ * Helper function to convert Headers to a plain object
+ * @param headers - The Headers object to convert
+ * @returns Plain object representation of headers
+ */
+export declare function headersToObject(headers: Headers | null | undefined): Record<string, string>;
+//# sourceMappingURL=kvUtils.d.ts.map

package/dist/kvUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kvUtils.d.ts","sourceRoot":"","sources":["../src/kvUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAG7D;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,WAAW,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,SAAS,EACd,MAAM,GAAE,MAAoB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,GAClC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAgBxB"}

package/dist/kvUtils.js

@@ -0,0 +1,127 @@
+// @bun
+var __defProp = Object.defineProperty;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+
+// src/errors.ts
+function toError(err, fallback = "Unknown error") {
+  if (err instanceof Error)
+    return err.message;
+  if (typeof err === "string")
+    return err;
+  if (err && typeof err === "object" && "message" in err && typeof err.message === "string") {
+    return err.message;
+  }
+  if (err === null || err === undefined)
+    return fallback;
+  try {
+    return JSON.stringify(err) || fallback;
+  } catch {
+    return fallback;
+  }
+}
+function sanitizeOutput(data) {
+  if (data instanceof Error) {
+    return { name: data.name, message: data.message };
+  }
+  if (data && typeof data === "object" && !Array.isArray(data)) {
+    const sanitized = {};
+    for (const [k, v] of Object.entries(data)) {
+      if (k === "stack" || k === "cause")
+        continue;
+      sanitized[k] = v instanceof Error ? { name: v.name, message: v.message } : sanitizeOutput(v);
+    }
+    return sanitized;
+  }
+  if (Array.isArray(data)) {
+    return data.map(sanitizeOutput);
+  }
+  return data;
+}
+function createJsonResponse(data, status = 200) {
+  return new Response(JSON.stringify(sanitizeOutput(data)), {
+    status,
+    headers: { "Content-Type": "application/json" }
+  });
+}
+function createSuccessResponse(result) {
+  return createJsonResponse({ success: true, result }, 200);
+}
+function createErrorResponse(error, status) {
+  const message = typeof error === "string" ? error : error.message;
+  const statusCode = typeof error === "string" ? status ?? 500 : error.status ?? 500;
+  const body = { success: false, error: message };
+  if (typeof error !== "string" && error.code)
+    body.code = error.code;
+  if (typeof error !== "string" && error.details !== undefined)
+    body.details = error.details;
+  return new Response(JSON.stringify(body), {
+    status: statusCode,
+    headers: { "Content-Type": "application/json" }
+  });
+}
+var Errors = {
+  badRequest: (message) => createErrorResponse({ message, status: 400, code: "BAD_REQUEST" }),
+  unauthorized: (message = "Unauthorized") => createErrorResponse({ message, status: 401, code: "UNAUTHORIZED" }),
+  forbidden: (message = "Forbidden") => createErrorResponse({ message, status: 403, code: "FORBIDDEN" }),
+  notFound: (message = "Not found") => createErrorResponse({ message, status: 404, code: "NOT_FOUND" }),
+  methodNotAllowed: (message = "Method not allowed") => createErrorResponse({ message, status: 405, code: "METHOD_NOT_ALLOWED" }),
+  rateLimited: (retryAfter) => {
+    const res = createErrorResponse({
+      message: "Rate limit exceeded",
+      status: 429,
+      code: "RATE_LIMITED"
+    });
+    if (retryAfter)
+      res.headers.set("Retry-After", String(retryAfter));
+    return res;
+  },
+  internal: (err) => {
+    const message = err ? toError(err, "Internal server error") : "Internal server error";
+    return createErrorResponse({
+      message,
+      status: 500,
+      code: "INTERNAL_ERROR"
+    });
+  }
+};
+
+// src/kvUtils.ts
+async function logKvTimestamp(env, prefix = "timestamp") {
+  const timestamp = new Date().toISOString();
+  const key = `${prefix}_${timestamp}`;
+  try {
+    await env.REPORT_KV.put(key, timestamp);
+  } catch (error) {
+    console.error(`Failed to log timestamp to KV: ${toError(error, "Unknown error")}`);
+  }
+}
+function headersToObject(headers) {
+  const result = {};
+  if (!headers)
+    return result;
+  try {
+    headers.forEach((value, key) => {
+      result[key] = value;
+    });
+  } catch (error) {
+    console.error(`Error converting headers to object: ${toError(error, "Unknown error")}`);
+  }
+  return result;
+}
+export {
+  logKvTimestamp,
+  headersToObject
+};

package/dist/legal.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Legal notices, trademarks, and disclaimers for Hoox.
+ * Centralized here so all surfaces (CLI, HTTP, Dashboard) use consistent text.
+ */
+export declare const COPYRIGHT: string;
+export declare const TRADEMARKS: readonly ["TradingView® is a registered trademark of TradingView, Inc.", "Cloudflare® is a registered trademark of Cloudflare, Inc."];
+export declare const TRADEMARK_NOTICE: string;
+export declare const DISCLAIMER: string;
+export declare const FULL_LEGAL_NOTICE: string;
+export declare const DISCLAIMER_HEADER = "X-Disclaimer";
+//# sourceMappingURL=legal.d.ts.map

package/dist/legal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legal.d.ts","sourceRoot":"","sources":["../src/legal.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,SAAS,QAA8E,CAAC;AAErG,eAAO,MAAM,UAAU,uIAGb,CAAC;AAEX,eAAO,MAAM,gBAAgB,QAAwB,CAAC;AAEtD,eAAO,MAAM,UAAU,QAIqD,CAAC;AAE7E,eAAO,MAAM,iBAAiB,QAAyD,CAAC;AAExF,eAAO,MAAM,iBAAiB,iBAAiB,CAAC"}

package/dist/legal.js

@@ -0,0 +1,40 @@
+// @bun
+var __defProp = Object.defineProperty;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+
+// src/legal.ts
+var COPYRIGHT = `Copyright (C) ${new Date().getFullYear()} Hoox Team. All rights reserved.`;
+var TRADEMARKS = [
+  "TradingView\xAE is a registered trademark of TradingView, Inc.",
+  "Cloudflare\xAE is a registered trademark of Cloudflare, Inc."
+];
+var TRADEMARK_NOTICE = TRADEMARKS.join(`
+`);
+var DISCLAIMER = "DISCLAIMER: This software is provided for educational and informational purposes only. " + "Trading cryptocurrencies and other financial instruments involves substantial risk of loss. " + "No guarantee of profits or protection against losses is made or implied. " + "Past performance does not indicate future results. Use at your own risk.";
+var FULL_LEGAL_NOTICE = `${COPYRIGHT}
+
+${TRADEMARK_NOTICE}
+
+${DISCLAIMER}`;
+var DISCLAIMER_HEADER = "X-Disclaimer";
+export {
+  TRADEMARK_NOTICE,
+  TRADEMARKS,
+  FULL_LEGAL_NOTICE,
+  DISCLAIMER_HEADER,
+  DISCLAIMER,
+  COPYRIGHT
+};

package/dist/middleware/auth.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Authentication middleware for Cloudflare Workers
+ * Provides both Bearer token auth and internal service-to-service auth
+ */
+import type { Env } from "../types";
+import type { Handler } from "../types/router";
+/**
+ * Constant-time string comparison to prevent timing attacks.
+ * Manually performs byte-wise XOR comparison to avoid early returns.
+ */
+export declare function timingSafeEqual(a: string, b: string): boolean;
+/**
+ * Require Bearer token authentication via Authorization header.
+ * Use for external API endpoints that need token-based auth.
+ */
+export declare function requireAuth(request: Request, env: Env): Promise<Response | null>;
+/**
+ * Environment with an internal auth key binding.
+ * Workers that accept internal service-to-service requests should extend this.
+ */
+export interface InternalAuthEnv {
+    [key: string]: unknown;
+}
+/**
+ * Require internal service-to-service authentication via X-Internal-Auth-Key header.
+ * Use for endpoints called by other workers via Service Bindings.
+ *
+ * Fails closed: if the expected key is not configured in env, the request is rejected.
+ * This prevents accidental exposure of unprotected internal endpoints.
+ *
+ * @param request - The incoming request
+ * @param env - Worker environment containing the expected key
+ * @param keyName - The env binding name for the internal key (default: 'INTERNAL_KEY_BINDING')
+ * @returns Response if unauthorized, null if authorized
+ */
+export declare function requireInternalAuth(request: Request, env: InternalAuthEnv, keyName?: string): Response | null;
+/**
+ * Create a middleware function for the router that enforces internal auth.
+ * Returns a Response (401) when unauthorized, or void when authorized.
+ *
+ * Usage: router.get("/path", handler, [createInternalAuthMiddleware()])
+ *
+ * @param keyName - The env binding name for the internal key (default: 'INTERNAL_KEY_BINDING')
+ */
+export declare function createInternalAuthMiddleware<TEnv extends InternalAuthEnv>(keyName?: string): Handler<TEnv>;
+/**
+ * Check internal auth and return a result object (non-throwing pattern).
+ * Useful when you need to check auth without immediately returning a response.
+ *
+ * @param request - The incoming request
+ * @param env - Worker environment containing the expected key
+ * @param keyName - The env binding name for the internal key (default: 'INTERNAL_KEY_BINDING')
+ * @returns Object with authorized flag and optional error message
+ */
+export declare function checkInternalAuth(request: Request, env: InternalAuthEnv, keyName?: string): {
+    authorized: boolean;
+    error?: string;
+};
+//# sourceMappingURL=auth.d.ts.map

package/dist/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE/C;;;GAGG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAU7D;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAmB1B;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE,MAA+B,GACvC,QAAQ,GAAG,IAAI,CAsBjB;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,SAAS,eAAe,EACvE,OAAO,GAAE,MAA+B,GACvC,OAAO,CAAC,IAAI,CAAC,CAKf;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE,MAA+B,GACvC;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAYzC"}

package/dist/middleware/cors.d.ts

@@ -0,0 +1,28 @@
+/**
+ * CORS middleware for Cloudflare Workers
+ * Provides standardized CORS headers and preflight handling
+ *
+ * @available — Available for consumer use. Import from "@jango-blockchained/hoox-shared/middleware".
+ */
+export interface CorsOptions {
+    /** Allowed origins (default: "*") */
+    allowOrigin?: string;
+    /** Allowed methods (default: "GET, POST, OPTIONS, PUT, DELETE") */
+    allowMethods?: string;
+    /** Allowed headers (default: "Content-Type, Authorization, X-Request-ID, X-Internal-Auth-Key") */
+    allowHeaders?: string;
+    /** Whether to include credentials (default: false) */
+    allowCredentials?: boolean;
+    /** Max age for preflight cache (default: 86400 = 24h) */
+    maxAge?: number;
+}
+/**
+ * Create CORS headers object for use in responses.
+ */
+export declare function corsHeaders(options?: CorsOptions): Record<string, string>;
+/**
+ * Handle CORS preflight (OPTIONS) requests.
+ * Returns a Response for OPTIONS, or null for non-OPTIONS requests.
+ */
+export declare function handleCorsPreflightRequest(request: Request, options?: CorsOptions): Response | null;
+//# sourceMappingURL=cors.d.ts.map

package/dist/middleware/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../src/middleware/cors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,WAAW;IAC1B,qCAAqC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kGAAkG;IAClG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sDAAsD;IACtD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAWD;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYzE;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,WAAW,GACpB,QAAQ,GAAG,IAAI,CAOjB"}

package/dist/middleware/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Barrel exports for shared middleware
+ */
+export { createLogger, withRequestLog, type Logger, type LogContext, } from "./logger";
+export { requireAuth, requireInternalAuth, createInternalAuthMiddleware, checkInternalAuth, timingSafeEqual, type InternalAuthEnv, } from "./auth";
+export { createRateLimiter, type RateLimiter, type RateLimitConfig, } from "./rate-limit";
+export { validateJson, validateJsonLegacy, requireField, optionalField, } from "./validate";
+export { corsHeaders, handleCorsPreflightRequest, type CorsOptions, } from "./cors";
+export { secureHeaders, wrapWithSecurityHeaders, type SecurityHeadersOptions, SECURITY_HEADERS_DEFAULTS, } from "./security-headers";
+//# sourceMappingURL=index.d.ts.map

package/dist/middleware/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,YAAY,EACZ,cAAc,EACd,KAAK,MAAM,EACX,KAAK,UAAU,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,4BAA4B,EAC5B,iBAAiB,EACjB,eAAe,EACf,KAAK,eAAe,GACrB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,eAAe,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,WAAW,EACX,0BAA0B,EAC1B,KAAK,WAAW,GACjB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC"}