@hoox-sh/hoox-shared 1.3.0 → 1.5.0

package/dist/types.js

@@ -1,20 +1,4 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/types.ts
 import { z } from "zod";
 var TradeActionSchema = z.enum([
@@ -23,26 +7,30 @@ var TradeActionSchema = z.enum([
   "CLOSE_LONG",
   "CLOSE_SHORT"
 ]);
+var MAX_WEBHOOK_LEVERAGE = 125;
+var MAX_WEBHOOK_QUANTITY = 1e6;
 var WebhookPayloadSchema = z.object({
   exchange: z.string().min(1),
   action: TradeActionSchema,
   symbol: z.string().min(1).max(20),
-  quantity: z.number().positive().finite(),
+  quantity: z.number().positive().finite().max(MAX_WEBHOOK_QUANTITY),
   price: z.number().positive().finite().optional(),
   orderType: z.string().optional(),
-  leverage: z.number().int().positive().optional(),
-  test: z.boolean().optional()
+  leverage: z.number().int().positive().max(MAX_WEBHOOK_LEVERAGE).optional(),
+  test: z.boolean().optional(),
+  tenantId: z.string().min(1).max(64).optional()
 }).strict();
 var TradeQueueMessageSchema = z.object({
   requestId: z.string().min(1).max(128),
   exchange: z.string().min(1).max(64),
   action: TradeActionSchema,
   symbol: z.string().min(1).max(32),
-  quantity: z.number().positive().finite(),
+  quantity: z.number().positive().finite().max(MAX_WEBHOOK_QUANTITY),
   price: z.number().positive().finite().optional(),
-  leverage: z.number().int().positive().max(125).optional(),
+  leverage: z.number().int().positive().max(MAX_WEBHOOK_LEVERAGE).optional(),
   test: z.boolean().optional(),
   idempotencyKey: z.string().min(1).max(512).optional(),
+  tenantId: z.string().min(1).max(64).optional(),
   queuedAt: z.string().min(1).max(64)
 }).strict();
 var TradeSignalSchema = z.object({
@@ -75,10 +63,12 @@ var BalanceSchema = z.object({
   timestamp: z.number().int().positive()
 }).strict();
 export {
-  WebhookPayloadSchema,
-  TradeSignalSchema,
-  TradeQueueMessageSchema,
-  TradeActionSchema,
+  BalanceSchema,
+  MAX_WEBHOOK_LEVERAGE,
+  MAX_WEBHOOK_QUANTITY,
   PositionSchema,
-  BalanceSchema
+  TradeActionSchema,
+  TradeQueueMessageSchema,
+  TradeSignalSchema,
+  WebhookPayloadSchema
 };

package/dist/wizard/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/wizard/engine.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;GAKG;AACH,OAAO,KAAK,EACV,MAAM,EACN,cAAc,EACd,WAAW,EACX,iBAAiB,EAEjB,gBAAgB,EAGjB,MAAM,SAAS,CAAC;AAiKjB,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAc;gBAEf,YAAY,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;IAI/C,uCAAuC;IACvC,QAAQ,IAAI,WAAW;IAIvB,uCAAuC;IACvC,cAAc,IAAI,cAAc;IAIhC,sCAAsC;IACtC,iBAAiB,IAAI,MAAM,EAAE;IAI7B,iFAAiF;IACjF,UAAU,IAAI,OAAO;IAKrB,gEAAgE;IAChE,SAAS,IAAI,OAAO;IAIpB;;;OAGG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE;IA0BjD,0CAA0C;IAC1C,MAAM,IAAI,IAAI;IAgBd,qCAAqC;IACrC,KAAK,IAAI,IAAI;IAIb;;;OAGG;IACH,WAAW,IAAI,iBAAiB;IA+DhC;;;OAGG;IACH,mBAAmB,IAAI,gBAAgB;IAwCvC,OAAO,CAAC,UAAU;CA4DnB"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/wizard/engine.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;GAKG;AACH,OAAO,KAAK,EACV,MAAM,EACN,cAAc,EACd,WAAW,EACX,iBAAiB,EAEjB,gBAAgB,EAGjB,MAAM,SAAS,CAAC;AAkKjB,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAc;gBAEf,YAAY,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;IAI/C,uCAAuC;IACvC,QAAQ,IAAI,WAAW;IAIvB,uCAAuC;IACvC,cAAc,IAAI,cAAc;IAQhC,sCAAsC;IACtC,iBAAiB,IAAI,MAAM,EAAE;IAI7B,iFAAiF;IACjF,UAAU,IAAI,OAAO;IAKrB,gEAAgE;IAChE,SAAS,IAAI,OAAO;IAIpB;;;OAGG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE;IA6BjD,0CAA0C;IAC1C,MAAM,IAAI,IAAI;IAiBd,qCAAqC;IACrC,KAAK,IAAI,IAAI;IAIb;;;OAGG;IACH,WAAW,IAAI,iBAAiB;IAoEhC;;;OAGG;IACH,mBAAmB,IAAI,gBAAgB;IA8CvC,OAAO,CAAC,UAAU;CA4DnB"}

package/dist/wizard/engine.js

@@ -1,19 +1,6 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+// src/wizard/types.ts
+var CLOUDFLARE_API_TOKEN_PLACEHOLDER = "<USE_CLOUDFLARE_API_TOKEN_ENV_OR_WRANGLER_AUTH>";
 
 // src/wizard/presets.ts
 var PRESETS = [
@@ -35,7 +22,7 @@ var PRESETS = [
       "analytics-worker",
       "telegram-worker"
     ],
-    integrations: ["binance", "telegram"]
+    integrations: ["exchange", "telegram"]
   },
   {
     name: "full",
@@ -52,15 +39,7 @@ var PRESETS = [
       "web3-wallet-worker",
       "pyne-worker"
     ],
-    integrations: [
-      "binance",
-      "bybit",
-      "mexc",
-      "telegram",
-      "openai",
-      "wallet",
-      "pyne"
-    ]
+    integrations: ["exchange", "telegram", "openai", "wallet", "pyne"]
   }
 ];
 var WORKER_DEPENDENCIES = {
@@ -92,30 +71,12 @@ function resolveDependencies(selected) {
 }
 var INTEGRATIONS = [
   {
-    key: "binance",
-    label: "Binance Exchange",
+    key: "exchange",
+    label: "Exchange API (Binance / Bybit / MEXC)",
     workerName: "trade-worker",
     secrets: {
-      BINANCE_KEY_BINDING: "Binance API Key",
-      BINANCE_SECRET_BINDING: "Binance API Secret"
-    }
-  },
-  {
-    key: "mexc",
-    label: "MEXC Exchange",
-    workerName: "trade-worker",
-    secrets: {
-      MEXC_KEY_BINDING: "MEXC API Key",
-      MEXC_SECRET_BINDING: "MEXC API Secret"
-    }
-  },
-  {
-    key: "bybit",
-    label: "Bybit Exchange",
-    workerName: "trade-worker",
-    secrets: {
-      BYBIT_KEY_BINDING: "Bybit API Key",
-      BYBIT_SECRET_BINDING: "Bybit API Secret"
+      EXCHANGE_KEY_BINDING: "Exchange API Key",
+      EXCHANGE_SECRET_BINDING: "Exchange API Secret"
     }
   },
   {
@@ -125,6 +86,10 @@ var INTEGRATIONS = [
     secrets: {
       WALLET_MNEMONIC_SECRET: "Wallet Mnemonic Phrase",
       WALLET_PK_SECRET: "Wallet Private Key"
+    },
+    optionalSecrets: {
+      SOLANA_PRIVATE_KEY: "Solana private key (base58; leave empty to auto-generate)",
+      JUPITER_API_KEY: "Jupiter Swap API key (portal.jup.ag; Solana DEX)"
     }
   },
   {
@@ -193,7 +158,7 @@ var BASE_WORKERS = {
   "d1-worker": {
     enabled: true,
     path: "workers/d1-worker",
-    vars: { database_name: "hoox-db" }
+    vars: { database_name: "trade-data-db" }
   },
   hoox: { enabled: true, path: "workers/hoox-worker", vars: {} },
   "agent-worker": { enabled: true, path: "workers/agent-worker", vars: {} },
@@ -345,7 +310,11 @@ class WizardEngine {
     return { ...this.state };
   }
   getCurrentStep() {
-    return STEPS.find((s) => s.id === this.state.step) ?? STEPS[0];
+    const step = STEPS.find((s) => s.id === this.state.step) ?? STEPS[0];
+    if (!step) {
+      throw new Error("Wizard has no steps defined");
+    }
+    return step;
   }
   getCompletedSteps() {
     return [...this.state.completedSteps];
@@ -368,8 +337,11 @@ class WizardEngine {
       this.state.completedSteps.push(this.state.step);
     }
     const currentIdx = STEP_ORDER.indexOf(this.state.step);
-    if (currentIdx < STEP_ORDER.length - 1) {
-      this.state.step = STEP_ORDER[currentIdx + 1];
+    if (currentIdx >= 0 && currentIdx < STEP_ORDER.length - 1) {
+      const nextStep = STEP_ORDER[currentIdx + 1];
+      if (nextStep !== undefined) {
+        this.state.step = nextStep;
+      }
     }
     this.state.updatedAt = Date.now();
     return [];
@@ -380,6 +352,8 @@ class WizardEngine {
     const currentIdx = STEP_ORDER.indexOf(this.state.step);
     if (currentIdx > 0) {
       const previousStep = STEP_ORDER[currentIdx - 1];
+      if (previousStep === undefined)
+        return;
       this.state.step = previousStep;
       this.state.completedSteps = this.state.completedSteps.filter((s) => s !== this.state.step || STEP_ORDER.indexOf(s) <= STEP_ORDER.indexOf(previousStep));
     }
@@ -415,7 +389,10 @@ class WizardEngine {
       if (integration.vars) {
         Object.assign(workers[workerName].vars, integration.vars);
       }
-      for (const secretName of Object.keys(integration.secrets)) {
+      for (const secretName of [
+        ...Object.keys(integration.secrets),
+        ...Object.keys(integration.optionalSecrets ?? {})
+      ]) {
         if (!workers[workerName].secrets.includes(secretName)) {
           workers[workerName].secrets.push(secretName);
         }
@@ -433,7 +410,7 @@ class WizardEngine {
     }
     return {
       global: {
-        cloudflare_api_token: cf?.apiToken ?? "",
+        cloudflare_api_token: CLOUDFLARE_API_TOKEN_PLACEHOLDER,
         cloudflare_account_id: cf?.accountId ?? "",
         cloudflare_secret_store_id: cf?.secretStoreId ?? "",
         subdomain_prefix: cf?.subdomain ?? ""
@@ -446,19 +423,20 @@ class WizardEngine {
       d1Databases: [],
       kvNamespaces: [],
       r2Buckets: [],
-      queues: []
+      queues: [],
+      vectorizeIndexes: []
     };
     const allWorkers = [
       ...Object.keys(BASE_WORKERS),
       ...this.state.selectedWorkers,
       ...this.state.selectedIntegrations.map((k) => {
-        const i = INTEGRATIONS.find((i2) => i2.key === k);
+        const i = INTEGRATIONS.find((i) => i.key === k);
         return i?.workerName ?? "";
       }).filter(Boolean)
     ];
     const workerSet = new Set(allWorkers);
     if (workerSet.has("d1-worker")) {
-      plan.d1Databases.push("hoox-db");
+      plan.d1Databases.push("trade-data-db");
     }
     if (workerSet.has("hoox") || workerSet.has("analytics-worker")) {
       plan.kvNamespaces.push("CONFIG_KV");
@@ -466,8 +444,13 @@ class WizardEngine {
     if (workerSet.has("web3-wallet-worker")) {
       plan.kvNamespaces.push("WEB3_CACHE_KV");
     }
+    if (workerSet.has("hoox") || workerSet.has("telegram-worker")) {
+      plan.vectorizeIndexes = plan.vectorizeIndexes ?? [];
+      plan.vectorizeIndexes.push("hoox-rag-index");
+    }
     plan.d1Databases = [...new Set(plan.d1Databases)];
     plan.kvNamespaces = [...new Set(plan.kvNamespaces)];
+    plan.vectorizeIndexes = [...new Set(plan.vectorizeIndexes ?? [])];
     return plan;
   }
   applyInput(input) {

package/dist/wizard/index.d.ts

@@ -4,6 +4,7 @@
  */
 export type { StepId, WorkerPresetName, WorkerPreset } from "./types";
 export type { WorkerConfig, WorkersJsonConfig, IntegratedService, ProvisioningPlan, ProvisionResult, WizardCloudflareConfig, WizardState, StepDefinition, } from "./types";
+export { CLOUDFLARE_API_TOKEN_PLACEHOLDER } from "./types";
 export type { Provisioner } from "./provisioner";
 export { WizardEngine } from "./engine";
 export { PRESETS, WORKER_DEPENDENCIES, INTEGRATIONS, BASE_WORKERS, BASE_SECRETS, resolveDependencies, } from "./presets";

package/dist/wizard/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/wizard/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACtE,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,WAAW,EACX,cAAc,GACf,MAAM,SAAS,CAAC;AACjB,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,OAAO,EACL,OAAO,EACP,mBAAmB,EACnB,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,mBAAmB,GACpB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/wizard/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACtE,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,WAAW,EACX,cAAc,GACf,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,gCAAgC,EAAE,MAAM,SAAS,CAAC;AAC3D,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,OAAO,EACL,OAAO,EACP,mBAAmB,EACnB,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,mBAAmB,GACpB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,eAAe,CAAC"}

package/dist/wizard/index.js

@@ -1,20 +1,6 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
+// src/wizard/types.ts
+var CLOUDFLARE_API_TOKEN_PLACEHOLDER = "<USE_CLOUDFLARE_API_TOKEN_ENV_OR_WRANGLER_AUTH>";
 // src/wizard/presets.ts
 var PRESETS = [
   {
@@ -35,7 +21,7 @@ var PRESETS = [
       "analytics-worker",
       "telegram-worker"
     ],
-    integrations: ["binance", "telegram"]
+    integrations: ["exchange", "telegram"]
   },
   {
     name: "full",
@@ -52,15 +38,7 @@ var PRESETS = [
       "web3-wallet-worker",
       "pyne-worker"
     ],
-    integrations: [
-      "binance",
-      "bybit",
-      "mexc",
-      "telegram",
-      "openai",
-      "wallet",
-      "pyne"
-    ]
+    integrations: ["exchange", "telegram", "openai", "wallet", "pyne"]
   }
 ];
 var WORKER_DEPENDENCIES = {
@@ -92,30 +70,12 @@ function resolveDependencies(selected) {
 }
 var INTEGRATIONS = [
   {
-    key: "binance",
-    label: "Binance Exchange",
+    key: "exchange",
+    label: "Exchange API (Binance / Bybit / MEXC)",
     workerName: "trade-worker",
     secrets: {
-      BINANCE_KEY_BINDING: "Binance API Key",
-      BINANCE_SECRET_BINDING: "Binance API Secret"
-    }
-  },
-  {
-    key: "mexc",
-    label: "MEXC Exchange",
-    workerName: "trade-worker",
-    secrets: {
-      MEXC_KEY_BINDING: "MEXC API Key",
-      MEXC_SECRET_BINDING: "MEXC API Secret"
-    }
-  },
-  {
-    key: "bybit",
-    label: "Bybit Exchange",
-    workerName: "trade-worker",
-    secrets: {
-      BYBIT_KEY_BINDING: "Bybit API Key",
-      BYBIT_SECRET_BINDING: "Bybit API Secret"
+      EXCHANGE_KEY_BINDING: "Exchange API Key",
+      EXCHANGE_SECRET_BINDING: "Exchange API Secret"
     }
   },
   {
@@ -125,6 +85,10 @@ var INTEGRATIONS = [
     secrets: {
       WALLET_MNEMONIC_SECRET: "Wallet Mnemonic Phrase",
       WALLET_PK_SECRET: "Wallet Private Key"
+    },
+    optionalSecrets: {
+      SOLANA_PRIVATE_KEY: "Solana private key (base58; leave empty to auto-generate)",
+      JUPITER_API_KEY: "Jupiter Swap API key (portal.jup.ag; Solana DEX)"
     }
   },
   {
@@ -193,7 +157,7 @@ var BASE_WORKERS = {
   "d1-worker": {
     enabled: true,
     path: "workers/d1-worker",
-    vars: { database_name: "hoox-db" }
+    vars: { database_name: "trade-data-db" }
   },
   hoox: { enabled: true, path: "workers/hoox-worker", vars: {} },
   "agent-worker": { enabled: true, path: "workers/agent-worker", vars: {} },
@@ -345,7 +309,11 @@ class WizardEngine {
     return { ...this.state };
   }
   getCurrentStep() {
-    return STEPS.find((s) => s.id === this.state.step) ?? STEPS[0];
+    const step = STEPS.find((s) => s.id === this.state.step) ?? STEPS[0];
+    if (!step) {
+      throw new Error("Wizard has no steps defined");
+    }
+    return step;
   }
   getCompletedSteps() {
     return [...this.state.completedSteps];
@@ -368,8 +336,11 @@ class WizardEngine {
       this.state.completedSteps.push(this.state.step);
     }
     const currentIdx = STEP_ORDER.indexOf(this.state.step);
-    if (currentIdx < STEP_ORDER.length - 1) {
-      this.state.step = STEP_ORDER[currentIdx + 1];
+    if (currentIdx >= 0 && currentIdx < STEP_ORDER.length - 1) {
+      const nextStep = STEP_ORDER[currentIdx + 1];
+      if (nextStep !== undefined) {
+        this.state.step = nextStep;
+      }
     }
     this.state.updatedAt = Date.now();
     return [];
@@ -380,6 +351,8 @@ class WizardEngine {
     const currentIdx = STEP_ORDER.indexOf(this.state.step);
     if (currentIdx > 0) {
       const previousStep = STEP_ORDER[currentIdx - 1];
+      if (previousStep === undefined)
+        return;
       this.state.step = previousStep;
       this.state.completedSteps = this.state.completedSteps.filter((s) => s !== this.state.step || STEP_ORDER.indexOf(s) <= STEP_ORDER.indexOf(previousStep));
     }
@@ -415,7 +388,10 @@ class WizardEngine {
       if (integration.vars) {
         Object.assign(workers[workerName].vars, integration.vars);
       }
-      for (const secretName of Object.keys(integration.secrets)) {
+      for (const secretName of [
+        ...Object.keys(integration.secrets),
+        ...Object.keys(integration.optionalSecrets ?? {})
+      ]) {
         if (!workers[workerName].secrets.includes(secretName)) {
           workers[workerName].secrets.push(secretName);
         }
@@ -433,7 +409,7 @@ class WizardEngine {
     }
     return {
       global: {
-        cloudflare_api_token: cf?.apiToken ?? "",
+        cloudflare_api_token: CLOUDFLARE_API_TOKEN_PLACEHOLDER,
         cloudflare_account_id: cf?.accountId ?? "",
         cloudflare_secret_store_id: cf?.secretStoreId ?? "",
         subdomain_prefix: cf?.subdomain ?? ""
@@ -446,19 +422,20 @@ class WizardEngine {
       d1Databases: [],
       kvNamespaces: [],
       r2Buckets: [],
-      queues: []
+      queues: [],
+      vectorizeIndexes: []
     };
     const allWorkers = [
       ...Object.keys(BASE_WORKERS),
       ...this.state.selectedWorkers,
       ...this.state.selectedIntegrations.map((k) => {
-        const i = INTEGRATIONS.find((i2) => i2.key === k);
+        const i = INTEGRATIONS.find((i) => i.key === k);
         return i?.workerName ?? "";
       }).filter(Boolean)
     ];
     const workerSet = new Set(allWorkers);
     if (workerSet.has("d1-worker")) {
-      plan.d1Databases.push("hoox-db");
+      plan.d1Databases.push("trade-data-db");
     }
     if (workerSet.has("hoox") || workerSet.has("analytics-worker")) {
       plan.kvNamespaces.push("CONFIG_KV");
@@ -466,8 +443,13 @@ class WizardEngine {
     if (workerSet.has("web3-wallet-worker")) {
       plan.kvNamespaces.push("WEB3_CACHE_KV");
     }
+    if (workerSet.has("hoox") || workerSet.has("telegram-worker")) {
+      plan.vectorizeIndexes = plan.vectorizeIndexes ?? [];
+      plan.vectorizeIndexes.push("hoox-rag-index");
+    }
     plan.d1Databases = [...new Set(plan.d1Databases)];
     plan.kvNamespaces = [...new Set(plan.kvNamespaces)];
+    plan.vectorizeIndexes = [...new Set(plan.vectorizeIndexes ?? [])];
     return plan;
   }
   applyInput(input) {
@@ -520,10 +502,13 @@ class WizardEngine {
     }
   }
 }
-
 // src/wizard/persistence.ts
 function serializeState(state) {
-  return JSON.stringify(state, null, 2);
+  const copy = {
+    ...state,
+    cloudflareConfig: state.cloudflareConfig ? { ...state.cloudflareConfig, apiToken: "" } : undefined
+  };
+  return JSON.stringify(copy, null, 2);
 }
 function deserializeState(json) {
   const parsed = JSON.parse(json);
@@ -531,14 +516,15 @@ function deserializeState(json) {
 }
 var WIZARD_STATE_PATH = ".wizard-state.json";
 export {
-  serializeState,
-  resolveDependencies,
-  deserializeState,
-  WizardEngine,
-  WORKER_DEPENDENCIES,
-  WIZARD_STATE_PATH,
-  PRESETS,
-  INTEGRATIONS,
+  BASE_SECRETS,
   BASE_WORKERS,
-  BASE_SECRETS
+  CLOUDFLARE_API_TOKEN_PLACEHOLDER,
+  INTEGRATIONS,
+  PRESETS,
+  WIZARD_STATE_PATH,
+  WORKER_DEPENDENCIES,
+  WizardEngine,
+  deserializeState,
+  resolveDependencies,
+  serializeState
 };

package/dist/wizard/persistence.d.ts

@@ -5,6 +5,10 @@
 import type { WizardState } from "./types";
 /**
  * Serialize wizard state to JSON string.
+ *
+ * The Cloudflare API token is stripped — `.wizard-state.json` must not
+ * hold live credentials. Resume re-reads `CLOUDFLARE_API_TOKEN` from the
+ * environment (or re-prompts).
  */
 export declare function serializeState(state: WizardState): string;
 /**

package/dist/wizard/persistence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"persistence.d.ts","sourceRoot":"","sources":["../../src/wizard/persistence.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAEzD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAG1D;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,uBAAuB,CAAC"}
+{"version":3,"file":"persistence.d.ts","sourceRoot":"","sources":["../../src/wizard/persistence.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAQzD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAG1D;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,uBAAuB,CAAC"}

package/dist/wizard/persistence.js

@@ -1,23 +1,11 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/wizard/persistence.ts
 function serializeState(state) {
-  return JSON.stringify(state, null, 2);
+  const copy = {
+    ...state,
+    cloudflareConfig: state.cloudflareConfig ? { ...state.cloudflareConfig, apiToken: "" } : undefined
+  };
+  return JSON.stringify(copy, null, 2);
 }
 function deserializeState(json) {
   const parsed = JSON.parse(json);
@@ -25,7 +13,7 @@ function deserializeState(json) {
 }
 var WIZARD_STATE_PATH = ".wizard-state.json";
 export {
-  serializeState,
+  WIZARD_STATE_PATH,
   deserializeState,
-  WIZARD_STATE_PATH
+  serializeState
 };

package/dist/wizard/presets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../src/wizard/presets.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAI/D,eAAO,MAAM,OAAO,EAAE,YAAY,EA8CjC,CAAC;AAIF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAOxD,CAAC;AAEF;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAkBhE;AAID;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,iBAAiB,EAkG3C,CAAC;AAIF,eAAO,MAAM,YAAY,EAAE,MAAM,CAC/B,MAAM,EACN;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAmBjE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAIjD,CAAC"}
+{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../src/wizard/presets.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAI/D,eAAO,MAAM,OAAO,EAAE,YAAY,EAsCjC,CAAC;AAIF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAOxD,CAAC;AAEF;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAkBhE;AAID;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,iBAAiB,EAqF3C,CAAC;AAIF,eAAO,MAAM,YAAY,EAAE,MAAM,CAC/B,MAAM,EACN;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAmBjE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAIjD,CAAC"}