@lunora/cli 1.0.0-alpha.8 → 1.0.0-alpha.9

package/dist/bin.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { runCli } from './packem_shared/COMMANDS-Bn8luojF.mjs';
+import { runCli } from './packem_shared/COMMANDS-Dh0bSERi.mjs';
 
 try {
   const code = await runCli();

package/dist/index.d.mts

@@ -508,16 +508,123 @@ type PackageManagerProbe = (manager: PackageManager) => boolean;
 /** A registry item a feature can install. */
 type FeatureItem = "auth" | "auth-auth0" | "auth-clerk" | "mail";
 /** The auth-provider choices offered for `add auth` / the init auth prompt. Each value is a registry item name. */
-
+/** A single file the item scaffolds into the project. */
+interface RegistryFile {
+  /** Source path inside the item dir (e.g. `schema.ts`). */
+  from: string;
+  /** Merge strategy. `create-or-skip` writes whole files; `schema-extension` AST-merges schema.ts. */
+  merge: "create-or-skip" | "schema-extension";
+  /** Destination relative to the project root (e.g. `lunora/ratelimit/index.ts`). */
+  to: string;
+}
+/** A wrangler.jsonc binding addition. `path` is the jsonc key path; `value` the value to set. */
+interface RegistryBinding {
+  path: ReadonlyArray<string>;
+  value: unknown;
+}
+/**
+* An environment variable an item needs. Scaffolded into `.dev.vars` (Workers'
+* local-secrets file) on add — non-secrets get their `value`; secrets get an
+* empty placeholder and a reminder to run `wrangler secret put` for production.
+*/
+interface RegistryEnvVariable {
+  /** Human note on what the variable is for. */
+  description?: string;
+  /** The variable name (e.g. `RESEND_API_KEY`). */
+  name: string;
+  /** Mark as a secret: never write a value, only a placeholder, and remind about prod. Defaults to `true` when no `value` is given. */
+  secret?: boolean;
+  /** A default/example value for non-secret vars. */
+  value?: string;
+}
+/** The `registry.json` manifest shape. */
+interface RegistryManifest {
+  /** wrangler.jsonc additions (best-effort structural edits). */
+  bindings?: ReadonlyArray<RegistryBinding>;
+  /** npm deps to add to the project package.json (name → version range). */
+  deps?: Readonly<Record<string, string>>;
+  description?: string;
+  /** npm devDependencies to add to the project package.json. */
+  devDependencies?: Readonly<Record<string, string>>;
+  /** Post-install guidance printed after the item is added (per-item next steps). */
+  docs?: string;
+  /** Environment variables the item needs; scaffolded into `.dev.vars`. */
+  envVars?: ReadonlyArray<RegistryEnvVariable>;
+  files: ReadonlyArray<RegistryFile>;
+  name: string;
+  /** Other registry items this one depends on (resolved transitively, deps first). */
+  requires?: ReadonlyArray<string>;
+  /** Short human-readable label (distinct from the longer `description`). */
+  title?: string;
+}
+interface AddCommandOptions {
+  /** Bypass the `--source` safety gate (matches init). */
+  allowUnsafeSource?: boolean;
+  /** `registry build --check`: verify the index is current instead of rewriting it. */
+  check?: boolean;
+  /** Inject a confirmer for non-interactive callers / tests. */
+  confirm?: (prompt: string) => Promise<boolean>;
+  cwd?: string;
+  /** Preview the file-level changes (a content diff) and write nothing. */
+  diff?: boolean;
+  /** Print the plan and stop without writing anything. */
+  dryRun?: boolean;
+  /** Local registry root (offline / tests). Expects per-item subdirs, each with a `registry.json`. */
+  from?: string;
+  /** Emit a JSON snapshot of the plan/result. */
+  json?: boolean;
+  /** `--list`: enumerate available items instead of adding. */
+  list?: boolean;
+  logger: Logger;
+  /** Item names to add (positional args). */
+  names: ReadonlyArray<string>;
+  /** `registry build` output path for the generated catalog (defaults to the root's `index.json`). */
+  out?: string;
+  /** Force-overwrite existing files (take the incoming copy) instead of skipping/conflicting. */
+  overwrite?: boolean;
+  /** Override the git ref (branch, tag, or commit) items are fetched from (default: version-derived); appended to the `source` base when that is set. Ignored when `from` is set. */
+  ref?: string;
+  /** Override the remote registry source base (default gh:anolilab/lunora/registry). */
+  source?: string;
+  /**
+  * Customize each resolved manifest after it is loaded but before the plan is
+  * printed / reconciled — used to inject user-chosen values into otherwise
+  * static manifests (e.g. the R2 `bucket_name` the init storage prompt asks
+  * for). Applied to every item; return the manifest unchanged to leave it as-is.
+  */
+  transformManifest?: (manifest: RegistryManifest) => RegistryManifest;
+  /** Skip the package.json mutation confirmation prompt. */
+  yes?: boolean;
+}
+interface AddCommandResult {
+  /** Bindings written to wrangler.jsonc. */
+  bindings: ReadonlyArray<string>;
+  code: number;
+  /** Deps added to package.json. */
+  deps: ReadonlyArray<string>;
+  /** Files skipped because they already existed. */
+  skipped: ReadonlyArray<string>;
+  /** Files written (absolute paths). */
+  written: ReadonlyArray<string>;
+}
+/** One resolved item: its parsed manifest plus the (possibly staged) directory it lives in. */
 /**
 * A feature offered in the post-scaffold multi-select. `auth`/`email` carry a
 * sub-prompt or alias; every other value IS the registry item name applied
 * directly (`storage` → the `storage` registry item, etc.).
 */
 type StackFeature = "auth" | "backup" | "crons" | "email" | "presence" | "ratelimit" | "storage";
+/** Customize a resolved manifest before it is written (e.g. inject the chosen R2 bucket name). */
+type OfferTransformManifest = (manifest: RegistryManifest) => RegistryManifest;
 interface OfferDeps {
-  /** Apply one or more registry items into the new project; resolves `true` on success. */
-  apply: (names: ReadonlyArray<string>) => Promise<boolean>;
+  /**
+  * Apply one or more registry items into the new project; resolves `true` on
+  * success. `options.transformManifest` customizes each item's manifest before
+  * it is written (used to inject the user-chosen R2 bucket name for storage).
+  */
+  apply: (names: ReadonlyArray<string>, options?: {
+    transformManifest?: OfferTransformManifest;
+  }) => Promise<boolean>;
   /** When `false`, skip all prompts and print the later-setup hint. */
   interactive: boolean;
   logger: Logger;
@@ -529,6 +636,8 @@ interface OfferDeps {
   }>, settings?: {
     defaults?: ReadonlyArray<StackFeature>;
   }) => Promise<StackFeature[]>;
+  /** The new project's name — seeds smart defaults like the `project-uploads` bucket name. */
+  projectName: string;
   /** Single-select among the auth providers (TTY-backed in production). */
   select: (message: string, options: ReadonlyArray<{
     description?: string;
@@ -537,14 +646,19 @@ interface OfferDeps {
   }>, settings?: {
     default?: FeatureItem;
   }) => Promise<FeatureItem | undefined>;
+  /** Single-line text input (TTY-backed in production) — used for the storage bucket-name prompt. */
+  text: (message: string, settings?: {
+    default?: string;
+    placeholder?: string;
+  }) => Promise<string>;
 }
 /**
 * Offer the stack features (auth, email, storage, rate limiting, crons,
-* presence, backups) in ONE multi-select after a successful scaffold. When auth
-* is picked, a follow-up single-select chooses the provider (email+password /
-* Clerk / Auth0); email maps to the `mail` item; every other feature value is
-* applied as its registry item directly. Picked items are applied in selection
-* order. Non-interactive: prints how to add them later and changes nothing.
+* presence, backups) in ONE multi-select after a successful scaffold. Auth,
+* email, and storage run a follow-up prompt (provider / destination / bucket
+* name); every other feature value is applied as its registry item directly.
+* Picked items are applied in selection order. Non-interactive: prints how to
+* add them later and changes nothing.
 */
 type Template = "analog" | "astro" | "next" | "nuxt" | "react-router" | "standalone" | "sveltekit" | "tanstack-start-react" | "tanstack-start-solid";
 interface InitCommandOptions {
@@ -599,10 +713,10 @@ interface InitCommandOptions {
   packageManagerProbe?: PackageManagerProbe;
   /**
   * Inject the offer's prompts (tests). When set, the offer is treated as
-  * interactive regardless of TTY, and these drive the feature multi-select
-  * and the auth-provider sub-select.
+  * interactive regardless of TTY, and these drive the feature multi-select,
+  * the auth-provider sub-select, and the storage bucket-name text input.
   */
-  prompt?: Pick<OfferDeps, "multiSelect" | "select">;
+  prompt?: Pick<OfferDeps, "multiSelect" | "select" | "text">;
   /**
   * Override the git ref (branch, tag, or commit) the default template source
   * is fetched from. Takes precedence over the version-derived ref. Ignored
@@ -681,99 +795,6 @@ interface IndexItem extends CatalogItem {
 declare const buildRegistryIndex: (root: string) => {
   items: IndexItem[];
 };
-/** A single file the item scaffolds into the project. */
-interface RegistryFile {
-  /** Source path inside the item dir (e.g. `schema.ts`). */
-  from: string;
-  /** Merge strategy. `create-or-skip` writes whole files; `schema-extension` AST-merges schema.ts. */
-  merge: "create-or-skip" | "schema-extension";
-  /** Destination relative to the project root (e.g. `lunora/ratelimit/index.ts`). */
-  to: string;
-}
-/** A wrangler.jsonc binding addition. `path` is the jsonc key path; `value` the value to set. */
-interface RegistryBinding {
-  path: ReadonlyArray<string>;
-  value: unknown;
-}
-/**
-* An environment variable an item needs. Scaffolded into `.dev.vars` (Workers'
-* local-secrets file) on add — non-secrets get their `value`; secrets get an
-* empty placeholder and a reminder to run `wrangler secret put` for production.
-*/
-interface RegistryEnvVariable {
-  /** Human note on what the variable is for. */
-  description?: string;
-  /** The variable name (e.g. `RESEND_API_KEY`). */
-  name: string;
-  /** Mark as a secret: never write a value, only a placeholder, and remind about prod. Defaults to `true` when no `value` is given. */
-  secret?: boolean;
-  /** A default/example value for non-secret vars. */
-  value?: string;
-}
-/** The `registry.json` manifest shape. */
-interface RegistryManifest {
-  /** wrangler.jsonc additions (best-effort structural edits). */
-  bindings?: ReadonlyArray<RegistryBinding>;
-  /** npm deps to add to the project package.json (name → version range). */
-  deps?: Readonly<Record<string, string>>;
-  description?: string;
-  /** npm devDependencies to add to the project package.json. */
-  devDependencies?: Readonly<Record<string, string>>;
-  /** Post-install guidance printed after the item is added (per-item next steps). */
-  docs?: string;
-  /** Environment variables the item needs; scaffolded into `.dev.vars`. */
-  envVars?: ReadonlyArray<RegistryEnvVariable>;
-  files: ReadonlyArray<RegistryFile>;
-  name: string;
-  /** Other registry items this one depends on (resolved transitively, deps first). */
-  requires?: ReadonlyArray<string>;
-  /** Short human-readable label (distinct from the longer `description`). */
-  title?: string;
-}
-interface AddCommandOptions {
-  /** Bypass the `--source` safety gate (matches init). */
-  allowUnsafeSource?: boolean;
-  /** `registry build --check`: verify the index is current instead of rewriting it. */
-  check?: boolean;
-  /** Inject a confirmer for non-interactive callers / tests. */
-  confirm?: (prompt: string) => Promise<boolean>;
-  cwd?: string;
-  /** Preview the file-level changes (a content diff) and write nothing. */
-  diff?: boolean;
-  /** Print the plan and stop without writing anything. */
-  dryRun?: boolean;
-  /** Local registry root (offline / tests). Expects per-item subdirs, each with a `registry.json`. */
-  from?: string;
-  /** Emit a JSON snapshot of the plan/result. */
-  json?: boolean;
-  /** `--list`: enumerate available items instead of adding. */
-  list?: boolean;
-  logger: Logger;
-  /** Item names to add (positional args). */
-  names: ReadonlyArray<string>;
-  /** `registry build` output path for the generated catalog (defaults to the root's `index.json`). */
-  out?: string;
-  /** Force-overwrite existing files (take the incoming copy) instead of skipping/conflicting. */
-  overwrite?: boolean;
-  /** Override the git ref (branch, tag, or commit) items are fetched from (default: version-derived); appended to the `source` base when that is set. Ignored when `from` is set. */
-  ref?: string;
-  /** Override the remote registry source base (default gh:anolilab/lunora/registry). */
-  source?: string;
-  /** Skip the package.json mutation confirmation prompt. */
-  yes?: boolean;
-}
-interface AddCommandResult {
-  /** Bindings written to wrangler.jsonc. */
-  bindings: ReadonlyArray<string>;
-  code: number;
-  /** Deps added to package.json. */
-  deps: ReadonlyArray<string>;
-  /** Files skipped because they already existed. */
-  skipped: ReadonlyArray<string>;
-  /** Files written (absolute paths). */
-  written: ReadonlyArray<string>;
-}
-/** One resolved item: its parsed manifest plus the (possibly staged) directory it lives in. */
 /** `lunora registry add` (one or more item names): scaffold items into the project. */
 declare const runAddCommand: (options: AddCommandOptions) => Promise<AddCommandResult>;
 /**

package/dist/index.d.ts

@@ -508,16 +508,123 @@ type PackageManagerProbe = (manager: PackageManager) => boolean;
 /** A registry item a feature can install. */
 type FeatureItem = "auth" | "auth-auth0" | "auth-clerk" | "mail";
 /** The auth-provider choices offered for `add auth` / the init auth prompt. Each value is a registry item name. */
-
+/** A single file the item scaffolds into the project. */
+interface RegistryFile {
+  /** Source path inside the item dir (e.g. `schema.ts`). */
+  from: string;
+  /** Merge strategy. `create-or-skip` writes whole files; `schema-extension` AST-merges schema.ts. */
+  merge: "create-or-skip" | "schema-extension";
+  /** Destination relative to the project root (e.g. `lunora/ratelimit/index.ts`). */
+  to: string;
+}
+/** A wrangler.jsonc binding addition. `path` is the jsonc key path; `value` the value to set. */
+interface RegistryBinding {
+  path: ReadonlyArray<string>;
+  value: unknown;
+}
+/**
+* An environment variable an item needs. Scaffolded into `.dev.vars` (Workers'
+* local-secrets file) on add — non-secrets get their `value`; secrets get an
+* empty placeholder and a reminder to run `wrangler secret put` for production.
+*/
+interface RegistryEnvVariable {
+  /** Human note on what the variable is for. */
+  description?: string;
+  /** The variable name (e.g. `RESEND_API_KEY`). */
+  name: string;
+  /** Mark as a secret: never write a value, only a placeholder, and remind about prod. Defaults to `true` when no `value` is given. */
+  secret?: boolean;
+  /** A default/example value for non-secret vars. */
+  value?: string;
+}
+/** The `registry.json` manifest shape. */
+interface RegistryManifest {
+  /** wrangler.jsonc additions (best-effort structural edits). */
+  bindings?: ReadonlyArray<RegistryBinding>;
+  /** npm deps to add to the project package.json (name → version range). */
+  deps?: Readonly<Record<string, string>>;
+  description?: string;
+  /** npm devDependencies to add to the project package.json. */
+  devDependencies?: Readonly<Record<string, string>>;
+  /** Post-install guidance printed after the item is added (per-item next steps). */
+  docs?: string;
+  /** Environment variables the item needs; scaffolded into `.dev.vars`. */
+  envVars?: ReadonlyArray<RegistryEnvVariable>;
+  files: ReadonlyArray<RegistryFile>;
+  name: string;
+  /** Other registry items this one depends on (resolved transitively, deps first). */
+  requires?: ReadonlyArray<string>;
+  /** Short human-readable label (distinct from the longer `description`). */
+  title?: string;
+}
+interface AddCommandOptions {
+  /** Bypass the `--source` safety gate (matches init). */
+  allowUnsafeSource?: boolean;
+  /** `registry build --check`: verify the index is current instead of rewriting it. */
+  check?: boolean;
+  /** Inject a confirmer for non-interactive callers / tests. */
+  confirm?: (prompt: string) => Promise<boolean>;
+  cwd?: string;
+  /** Preview the file-level changes (a content diff) and write nothing. */
+  diff?: boolean;
+  /** Print the plan and stop without writing anything. */
+  dryRun?: boolean;
+  /** Local registry root (offline / tests). Expects per-item subdirs, each with a `registry.json`. */
+  from?: string;
+  /** Emit a JSON snapshot of the plan/result. */
+  json?: boolean;
+  /** `--list`: enumerate available items instead of adding. */
+  list?: boolean;
+  logger: Logger;
+  /** Item names to add (positional args). */
+  names: ReadonlyArray<string>;
+  /** `registry build` output path for the generated catalog (defaults to the root's `index.json`). */
+  out?: string;
+  /** Force-overwrite existing files (take the incoming copy) instead of skipping/conflicting. */
+  overwrite?: boolean;
+  /** Override the git ref (branch, tag, or commit) items are fetched from (default: version-derived); appended to the `source` base when that is set. Ignored when `from` is set. */
+  ref?: string;
+  /** Override the remote registry source base (default gh:anolilab/lunora/registry). */
+  source?: string;
+  /**
+  * Customize each resolved manifest after it is loaded but before the plan is
+  * printed / reconciled — used to inject user-chosen values into otherwise
+  * static manifests (e.g. the R2 `bucket_name` the init storage prompt asks
+  * for). Applied to every item; return the manifest unchanged to leave it as-is.
+  */
+  transformManifest?: (manifest: RegistryManifest) => RegistryManifest;
+  /** Skip the package.json mutation confirmation prompt. */
+  yes?: boolean;
+}
+interface AddCommandResult {
+  /** Bindings written to wrangler.jsonc. */
+  bindings: ReadonlyArray<string>;
+  code: number;
+  /** Deps added to package.json. */
+  deps: ReadonlyArray<string>;
+  /** Files skipped because they already existed. */
+  skipped: ReadonlyArray<string>;
+  /** Files written (absolute paths). */
+  written: ReadonlyArray<string>;
+}
+/** One resolved item: its parsed manifest plus the (possibly staged) directory it lives in. */
 /**
 * A feature offered in the post-scaffold multi-select. `auth`/`email` carry a
 * sub-prompt or alias; every other value IS the registry item name applied
 * directly (`storage` → the `storage` registry item, etc.).
 */
 type StackFeature = "auth" | "backup" | "crons" | "email" | "presence" | "ratelimit" | "storage";
+/** Customize a resolved manifest before it is written (e.g. inject the chosen R2 bucket name). */
+type OfferTransformManifest = (manifest: RegistryManifest) => RegistryManifest;
 interface OfferDeps {
-  /** Apply one or more registry items into the new project; resolves `true` on success. */
-  apply: (names: ReadonlyArray<string>) => Promise<boolean>;
+  /**
+  * Apply one or more registry items into the new project; resolves `true` on
+  * success. `options.transformManifest` customizes each item's manifest before
+  * it is written (used to inject the user-chosen R2 bucket name for storage).
+  */
+  apply: (names: ReadonlyArray<string>, options?: {
+    transformManifest?: OfferTransformManifest;
+  }) => Promise<boolean>;
   /** When `false`, skip all prompts and print the later-setup hint. */
   interactive: boolean;
   logger: Logger;
@@ -529,6 +636,8 @@ interface OfferDeps {
   }>, settings?: {
     defaults?: ReadonlyArray<StackFeature>;
   }) => Promise<StackFeature[]>;
+  /** The new project's name — seeds smart defaults like the `project-uploads` bucket name. */
+  projectName: string;
   /** Single-select among the auth providers (TTY-backed in production). */
   select: (message: string, options: ReadonlyArray<{
     description?: string;
@@ -537,14 +646,19 @@ interface OfferDeps {
   }>, settings?: {
     default?: FeatureItem;
   }) => Promise<FeatureItem | undefined>;
+  /** Single-line text input (TTY-backed in production) — used for the storage bucket-name prompt. */
+  text: (message: string, settings?: {
+    default?: string;
+    placeholder?: string;
+  }) => Promise<string>;
 }
 /**
 * Offer the stack features (auth, email, storage, rate limiting, crons,
-* presence, backups) in ONE multi-select after a successful scaffold. When auth
-* is picked, a follow-up single-select chooses the provider (email+password /
-* Clerk / Auth0); email maps to the `mail` item; every other feature value is
-* applied as its registry item directly. Picked items are applied in selection
-* order. Non-interactive: prints how to add them later and changes nothing.
+* presence, backups) in ONE multi-select after a successful scaffold. Auth,
+* email, and storage run a follow-up prompt (provider / destination / bucket
+* name); every other feature value is applied as its registry item directly.
+* Picked items are applied in selection order. Non-interactive: prints how to
+* add them later and changes nothing.
 */
 type Template = "analog" | "astro" | "next" | "nuxt" | "react-router" | "standalone" | "sveltekit" | "tanstack-start-react" | "tanstack-start-solid";
 interface InitCommandOptions {
@@ -599,10 +713,10 @@ interface InitCommandOptions {
   packageManagerProbe?: PackageManagerProbe;
   /**
   * Inject the offer's prompts (tests). When set, the offer is treated as
-  * interactive regardless of TTY, and these drive the feature multi-select
-  * and the auth-provider sub-select.
+  * interactive regardless of TTY, and these drive the feature multi-select,
+  * the auth-provider sub-select, and the storage bucket-name text input.
   */
-  prompt?: Pick<OfferDeps, "multiSelect" | "select">;
+  prompt?: Pick<OfferDeps, "multiSelect" | "select" | "text">;
   /**
   * Override the git ref (branch, tag, or commit) the default template source
   * is fetched from. Takes precedence over the version-derived ref. Ignored
@@ -681,99 +795,6 @@ interface IndexItem extends CatalogItem {
 declare const buildRegistryIndex: (root: string) => {
   items: IndexItem[];
 };
-/** A single file the item scaffolds into the project. */
-interface RegistryFile {
-  /** Source path inside the item dir (e.g. `schema.ts`). */
-  from: string;
-  /** Merge strategy. `create-or-skip` writes whole files; `schema-extension` AST-merges schema.ts. */
-  merge: "create-or-skip" | "schema-extension";
-  /** Destination relative to the project root (e.g. `lunora/ratelimit/index.ts`). */
-  to: string;
-}
-/** A wrangler.jsonc binding addition. `path` is the jsonc key path; `value` the value to set. */
-interface RegistryBinding {
-  path: ReadonlyArray<string>;
-  value: unknown;
-}
-/**
-* An environment variable an item needs. Scaffolded into `.dev.vars` (Workers'
-* local-secrets file) on add — non-secrets get their `value`; secrets get an
-* empty placeholder and a reminder to run `wrangler secret put` for production.
-*/
-interface RegistryEnvVariable {
-  /** Human note on what the variable is for. */
-  description?: string;
-  /** The variable name (e.g. `RESEND_API_KEY`). */
-  name: string;
-  /** Mark as a secret: never write a value, only a placeholder, and remind about prod. Defaults to `true` when no `value` is given. */
-  secret?: boolean;
-  /** A default/example value for non-secret vars. */
-  value?: string;
-}
-/** The `registry.json` manifest shape. */
-interface RegistryManifest {
-  /** wrangler.jsonc additions (best-effort structural edits). */
-  bindings?: ReadonlyArray<RegistryBinding>;
-  /** npm deps to add to the project package.json (name → version range). */
-  deps?: Readonly<Record<string, string>>;
-  description?: string;
-  /** npm devDependencies to add to the project package.json. */
-  devDependencies?: Readonly<Record<string, string>>;
-  /** Post-install guidance printed after the item is added (per-item next steps). */
-  docs?: string;
-  /** Environment variables the item needs; scaffolded into `.dev.vars`. */
-  envVars?: ReadonlyArray<RegistryEnvVariable>;
-  files: ReadonlyArray<RegistryFile>;
-  name: string;
-  /** Other registry items this one depends on (resolved transitively, deps first). */
-  requires?: ReadonlyArray<string>;
-  /** Short human-readable label (distinct from the longer `description`). */
-  title?: string;
-}
-interface AddCommandOptions {
-  /** Bypass the `--source` safety gate (matches init). */
-  allowUnsafeSource?: boolean;
-  /** `registry build --check`: verify the index is current instead of rewriting it. */
-  check?: boolean;
-  /** Inject a confirmer for non-interactive callers / tests. */
-  confirm?: (prompt: string) => Promise<boolean>;
-  cwd?: string;
-  /** Preview the file-level changes (a content diff) and write nothing. */
-  diff?: boolean;
-  /** Print the plan and stop without writing anything. */
-  dryRun?: boolean;
-  /** Local registry root (offline / tests). Expects per-item subdirs, each with a `registry.json`. */
-  from?: string;
-  /** Emit a JSON snapshot of the plan/result. */
-  json?: boolean;
-  /** `--list`: enumerate available items instead of adding. */
-  list?: boolean;
-  logger: Logger;
-  /** Item names to add (positional args). */
-  names: ReadonlyArray<string>;
-  /** `registry build` output path for the generated catalog (defaults to the root's `index.json`). */
-  out?: string;
-  /** Force-overwrite existing files (take the incoming copy) instead of skipping/conflicting. */
-  overwrite?: boolean;
-  /** Override the git ref (branch, tag, or commit) items are fetched from (default: version-derived); appended to the `source` base when that is set. Ignored when `from` is set. */
-  ref?: string;
-  /** Override the remote registry source base (default gh:anolilab/lunora/registry). */
-  source?: string;
-  /** Skip the package.json mutation confirmation prompt. */
-  yes?: boolean;
-}
-interface AddCommandResult {
-  /** Bindings written to wrangler.jsonc. */
-  bindings: ReadonlyArray<string>;
-  code: number;
-  /** Deps added to package.json. */
-  deps: ReadonlyArray<string>;
-  /** Files skipped because they already existed. */
-  skipped: ReadonlyArray<string>;
-  /** Files written (absolute paths). */
-  written: ReadonlyArray<string>;
-}
-/** One resolved item: its parsed manifest plus the (possibly staged) directory it lives in. */
 /** `lunora registry add` (one or more item names): scaffold items into the project. */
 declare const runAddCommand: (options: AddCommandOptions) => Promise<AddCommandResult>;
 /**

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { COMMANDS, VERSION, runCli } from './packem_shared/COMMANDS-Bn8luojF.mjs';
+export { COMMANDS, VERSION, runCli } from './packem_shared/COMMANDS-Dh0bSERi.mjs';
 export { runCodegenCommand } from './packem_chunks/runCodegenCommand.mjs';
 export { DEFAULT_IMPORT_BATCH_SIZE, runExportCommand, runImportCommand } from './packem_shared/DEFAULT_IMPORT_BATCH_SIZE-Ck-2bU08.mjs';
 export { runDeployCommand } from './packem_chunks/runDeployCommand.mjs';
@@ -16,4 +16,4 @@ export { createRecordingSpawner, defaultSpawner } from './packem_shared/createRe
 export { default as parseManifest } from './packem_shared/parseManifest--vZf2FY1.mjs';
 export { REQUIRED_COMPATIBILITY_DATE, REQUIRED_FLAG, validateWranglerProject as validateWrangler, validateWranglerConfig } from '@lunora/config';
 export { buildRegistryIndex } from './packem_shared/buildRegistryIndex-BcYe607_.mjs';
-export { r as runAddCommand, a as runBuildIndexCommand, b as runRegistryViewCommand } from './packem_shared/commands-DqsEzojt.mjs';
+export { r as runAddCommand, a as runBuildIndexCommand, b as runRegistryViewCommand } from './packem_shared/commands-CkkATMMx.mjs';

package/dist/packem_chunks/handler.mjs

@@ -1,10 +1,10 @@
 import { existsSync } from 'node:fs';
 import { findWranglerFile } from '@lunora/config';
-import { join } from '@visulima/path';
+import { join, basename } from '@visulima/path';
 import { d as defineHandler } from '../packem_shared/command-BDXcJCCJ.mjs';
-import { t as tuiSelect } from '../packem_shared/tui-prompts-XHFxlOg5.mjs';
-import { n as normalizeFeature, E as EMAIL_ITEM, D as DEFAULT_AUTH_ITEM, p as promptAuthProvider, A as AUTH_PROVIDER_OPTIONS } from '../packem_shared/features-ocSSpZtS.mjs';
-import { r as runAddCommand } from '../packem_shared/commands-DqsEzojt.mjs';
+import { t as tuiText, a as tuiSelect } from '../packem_shared/tui-prompts-CA9lngSS.mjs';
+import { n as normalizeFeature, E as EMAIL_ITEM, s as sanitizeBucketName, d as deriveBucketName, p as promptBucketName, r as resolveTypedDestination, M as MAIL_DESTINATION_PROMPT, a as sanitizeDatabaseName, b as deriveDatabaseName, c as promptDatabaseName, D as DEFAULT_AUTH_ITEM, e as promptAuthProvider, A as AUTH_PROVIDER_OPTIONS, w as withStorageBucketName, f as withMailDestination, g as withAuthDatabaseName } from '../packem_shared/storage-Bjo35hPa.mjs';
+import { r as runAddCommand } from '../packem_shared/commands-CkkATMMx.mjs';
 
 const providerToItem = (provider) => {
   const value = provider.trim().toLowerCase();
@@ -28,6 +28,51 @@ const resolveAuthItem = async (options) => {
   const select = options.promptSelect ?? ((message, choices, settings) => tuiSelect(message, choices, settings));
   return promptAuthProvider(select);
 };
+const textPrompt = (options) => options.promptText ?? ((message, settings) => tuiText(message, settings));
+const resolveStorageBucketName = async (options) => {
+  const projectName = basename(options.cwd ?? process.cwd());
+  if (options.bucket !== void 0 && options.bucket !== "") {
+    const sanitized = sanitizeBucketName(options.bucket);
+    if (sanitized !== void 0) {
+      return sanitized;
+    }
+    const fallback = deriveBucketName(projectName);
+    options.logger.warn(`add: "${options.bucket}" isn't a valid R2 bucket name (lowercase alphanumeric + hyphens, 3–63 chars) — using "${fallback}".`);
+    return fallback;
+  }
+  if (options.yes === true) {
+    return deriveBucketName(projectName);
+  }
+  return promptBucketName(textPrompt(options), projectName);
+};
+const resolveMailDestination = async (options) => {
+  const warn = (message) => {
+    options.logger.warn(`add: ${message}`);
+  };
+  if (options.mailTo !== void 0 && options.mailTo !== "") {
+    return resolveTypedDestination(options.mailTo, warn);
+  }
+  if (options.yes === true) {
+    return void 0;
+  }
+  return resolveTypedDestination(await textPrompt(options)(MAIL_DESTINATION_PROMPT, { placeholder: "you@yourdomain.com" }), warn);
+};
+const resolveAuthDatabaseName = async (options) => {
+  const projectName = basename(options.cwd ?? process.cwd());
+  if (options.db !== void 0 && options.db !== "") {
+    const sanitized = sanitizeDatabaseName(options.db);
+    if (sanitized !== void 0) {
+      return sanitized;
+    }
+    const fallback = deriveDatabaseName(projectName);
+    options.logger.warn(`add: "${options.db}" isn't a usable D1 database name — using "${fallback}".`);
+    return fallback;
+  }
+  if (options.yes === true) {
+    return deriveDatabaseName(projectName);
+  }
+  return promptDatabaseName(textPrompt(options), projectName);
+};
 const resolveFeatureItems = async (feature, options) => {
   if (feature.kind === "auth") {
     return [await resolveAuthItem(options)];
@@ -49,6 +94,28 @@ const runAddFeature = async (options) => {
     return { code: 1, items: [] };
   }
   const items = await resolveFeatureItems(feature, options);
+  const transforms = [];
+  if (items.includes("storage")) {
+    const bucketName = await resolveStorageBucketName(options);
+    transforms.push((manifest) => withStorageBucketName(manifest, bucketName));
+  }
+  if (items.includes("mail")) {
+    const destination = await resolveMailDestination(options);
+    if (destination !== void 0) {
+      transforms.push((manifest) => withMailDestination(manifest, destination));
+    }
+  }
+  if (items.some((name) => name === "auth" || name.startsWith("auth-"))) {
+    const databaseName = await resolveAuthDatabaseName(options);
+    transforms.push((manifest) => withAuthDatabaseName(manifest, databaseName));
+  }
+  const transformManifest = transforms.length > 0 ? (manifest) => {
+    let result2 = manifest;
+    for (const transform of transforms) {
+      result2 = transform(result2);
+    }
+    return result2;
+  } : void 0;
   const result = await runAddCommand({
     allowUnsafeSource: options.allowUnsafeSource,
     cwd,
@@ -57,6 +124,7 @@ const runAddFeature = async (options) => {
     names: [...items],
     ref: options.ref,
     source: options.source,
+    transformManifest,
     yes: true
   });
   return { code: result.code, items };
@@ -64,10 +132,13 @@ const runAddFeature = async (options) => {
 const execute = defineHandler(async ({ argument, cwd, logger, options }) => {
   const result = await runAddFeature({
     allowUnsafeSource: options.allowUnsafeSource === true,
+    bucket: options.bucket,
     cwd,
+    db: options.db,
     feature: argument[0],
     from: options.from,
     logger,
+    mailTo: options.mailTo,
     provider: options.provider,
     ref: options.ref,
     source: options.source,

package/dist/packem_chunks/handler16.mjs

@@ -1,5 +1,5 @@
 import { d as defineHandler } from '../packem_shared/command-BDXcJCCJ.mjs';
-import { r as runAddCommand, b as runRegistryViewCommand, a as runBuildIndexCommand } from '../packem_shared/commands-DqsEzojt.mjs';
+import { r as runAddCommand, b as runRegistryViewCommand, a as runBuildIndexCommand } from '../packem_shared/commands-CkkATMMx.mjs';
 
 const execute = defineHandler(({ argument, cwd, logger, options }) => {
   const subcommand = argument[0];

package/dist/packem_chunks/handler18.mjs

@@ -7,7 +7,7 @@ import { join } from '@visulima/path';
 import { Project } from 'ts-morph';
 import { d as defineHandler } from '../packem_shared/command-BDXcJCCJ.mjs';
 import { a as resolveProductionWorkerUrl } from '../packem_shared/resolve-target-qbsJ_5sF.mjs';
-import { a as tuiConfirm } from '../packem_shared/tui-prompts-XHFxlOg5.mjs';
+import { b as tuiConfirm } from '../packem_shared/tui-prompts-CA9lngSS.mjs';
 import { runImportCommand } from '../packem_shared/DEFAULT_IMPORT_BATCH_SIZE-Ck-2bU08.mjs';
 import { runResetCommand } from './runResetCommand.mjs';
 

package/dist/packem_chunks/planDevCommand.mjs

@@ -9,7 +9,7 @@ import { d as detectPackageManager, e as execArgsFor } from '../packem_shared/de
 import { createServer, request } from 'node:http';
 import { connect } from 'node:net';
 import { loadStudioAssets, studioAssetsStamp, renderStudioHtml, resolveAdminToken, SCHEMA_EDIT_ENDPOINT, POLICY_SCAFFOLD_ENDPOINT, SEED_ENDPOINT, serveJsonHandler, handleSchemaEditRequest, handlePolicyScaffoldRequest, handleSeedRequest } from '@lunora/config/studio-host';
-import { c as createTuiConfirm } from '../packem_shared/tui-prompts-XHFxlOg5.mjs';
+import { c as createTuiConfirm } from '../packem_shared/tui-prompts-CA9lngSS.mjs';
 
 const DEFAULT_DEBOUNCE_MS = 100;
 const PATH_SEGMENT_SEPARATOR = /[/\\]/u;

package/dist/packem_chunks/runInitCommand.mjs

@@ -10,10 +10,10 @@ import { d as defineHandler } from '../packem_shared/command-BDXcJCCJ.mjs';
 import { a as detectInstalledManagers, i as installArgsFor } from '../packem_shared/detect-package-manager-DYp7n3mJ.mjs';
 import MagicString from 'magic-string';
 import { Project, SyntaxKind } from 'ts-morph';
-import { c as resolveDistTag, d as resolveSourceRef, r as runAddCommand } from '../packem_shared/commands-DqsEzojt.mjs';
+import { c as resolveDistTag, d as resolveSourceRef, r as runAddCommand } from '../packem_shared/commands-CkkATMMx.mjs';
 import { defaultSpawner } from '../packem_shared/createRecordingSpawner-DxI3mebw.mjs';
-import { b as tuiOutro, d as tuiBanner, e as tuiText, f as tuiIntro, t as tuiSelect, w as withTuiSpinner, a as tuiConfirm, g as tuiMultiSelect } from '../packem_shared/tui-prompts-XHFxlOg5.mjs';
-import { p as promptAuthProvider, E as EMAIL_ITEM } from '../packem_shared/features-ocSSpZtS.mjs';
+import { d as tuiOutro, e as tuiBanner, t as tuiText, f as tuiIntro, a as tuiSelect, w as withTuiSpinner, b as tuiConfirm, g as tuiMultiSelect } from '../packem_shared/tui-prompts-CA9lngSS.mjs';
+import { p as promptBucketName, w as withStorageBucketName, M as MAIL_DESTINATION_PROMPT, r as resolveTypedDestination, E as EMAIL_ITEM, f as withMailDestination, e as promptAuthProvider, c as promptDatabaseName, g as withAuthDatabaseName } from '../packem_shared/storage-Bjo35hPa.mjs';
 
 const GITHUB_CONTENT = `name: Deploy
 
@@ -294,6 +294,27 @@ const STACK_FEATURE_OPTIONS = [
   { description: "Live presence / who's-online over hibernated WebSockets", label: "Presence", value: "presence" },
   { description: "Snapshot + restore your Durable Object data", label: "Backups", value: "backup" }
 ];
+const applyAuthFeature = async (deps) => {
+  const provider = await promptAuthProvider(deps.select);
+  const databaseName = await promptDatabaseName(deps.text, deps.projectName);
+  await deps.apply([provider], { transformManifest: (manifest) => withAuthDatabaseName(manifest, databaseName) });
+};
+const applyEmailFeature = async (deps) => {
+  const answer = await deps.text(MAIL_DESTINATION_PROMPT, { placeholder: "you@yourdomain.com" });
+  const destination = resolveTypedDestination(answer, (message) => {
+    deps.logger.warn(message);
+  });
+  await deps.apply([EMAIL_ITEM], destination === void 0 ? void 0 : { transformManifest: (manifest) => withMailDestination(manifest, destination) });
+};
+const applyStorageFeature = async (deps) => {
+  const bucketName = await promptBucketName(deps.text, deps.projectName);
+  await deps.apply(["storage"], { transformManifest: (manifest) => withStorageBucketName(manifest, bucketName) });
+};
+const FEATURE_HANDLERS = {
+  auth: applyAuthFeature,
+  email: applyEmailFeature,
+  storage: applyStorageFeature
+};
 const offerRegistryExtras = async (deps) => {
   if (!deps.interactive) {
     deps.logger.info("tip: add features later with `lunora add <auth|email|storage|ratelimit|crons|presence|backup>`.");
@@ -301,12 +322,8 @@ const offerRegistryExtras = async (deps) => {
   }
   const picked = await deps.multiSelect("Which features do you want to add?", STACK_FEATURE_OPTIONS, { defaults: [] });
   for (const feature of picked) {
-    if (feature === "auth") {
-      const provider = await promptAuthProvider(deps.select);
-      await deps.apply([provider]);
-    } else {
-      await deps.apply([feature === "email" ? EMAIL_ITEM : feature]);
-    }
+    const handler = FEATURE_HANDLERS[feature];
+    await (handler ? handler(deps) : deps.apply([feature]));
   }
 };
 
@@ -936,7 +953,7 @@ const runInPlaceInit = (cwd, logger) => {
 const offerIsInteractive = (options) => options.yes !== true && (options.prompt !== void 0 || (options.interactive ?? isInteractive()));
 const maybeOfferExtras = async (options, projectDirectory) => {
   const interactive = offerIsInteractive(options);
-  const apply = async (names) => {
+  const apply = async (names, applyOptions) => {
     const applyLogger = isInteractive() ? {
       error: (message) => {
         options.logger.error(message);
@@ -959,6 +976,7 @@ const maybeOfferExtras = async (options, projectDirectory) => {
         names: [...names],
         ref: options.ref,
         source: options.registrySource,
+        transformManifest: applyOptions?.transformManifest,
         yes: true
       })
     );
@@ -970,7 +988,9 @@ const maybeOfferExtras = async (options, projectDirectory) => {
     interactive,
     logger: options.logger,
     multiSelect: options.prompt?.multiSelect ?? ((message, choices, settings) => tuiMultiSelect(message, choices, settings)),
-    select: options.prompt?.select ?? ((message, choices, settings) => tuiSelect(message, choices, settings))
+    projectName: basename(projectDirectory),
+    select: options.prompt?.select ?? ((message, choices, settings) => tuiSelect(message, choices, settings)),
+    text: options.prompt?.text ?? ((message, settings) => tuiText(message, settings))
   });
 };
 const DEFAULT_FRAMEWORK = "react";

package/dist/packem_chunks/runResetCommand.mjs

@@ -1,7 +1,7 @@
 import { existsSync, rmSync } from 'node:fs';
 import { join } from '@visulima/path';
 import { d as defineHandler } from '../packem_shared/command-BDXcJCCJ.mjs';
-import { a as tuiConfirm } from '../packem_shared/tui-prompts-XHFxlOg5.mjs';
+import { b as tuiConfirm } from '../packem_shared/tui-prompts-CA9lngSS.mjs';
 
 const runResetCommand = async (options) => {
   const cwd = options.cwd ?? process.cwd();

package/dist/packem_shared/{COMMANDS-Bn8luojF.mjs → COMMANDS-Dh0bSERi.mjs}

@@ -14,7 +14,8 @@ const addCommand = {
     ["lunora add auth", "Add authentication (asks which provider)"],
     ["lunora add auth --provider clerk", "Add Clerk auth without prompting"],
     ["lunora add email", "Add transactional email (Cloudflare Email Workers + dev mail catcher)"],
-    ["lunora add storage", "Add the R2 storage registry item"],
+    ["lunora add storage", "Add the R2 storage registry item (asks for the bucket name)"],
+    ["lunora add storage --bucket my-app-uploads", "Add storage with a bucket name, no prompt"],
     ["lunora add crons", "Add the scheduled-jobs registry item"],
     ["lunora add storage --ref alpha", "Add an item from the alpha branch's registry"]
   ],
@@ -25,7 +26,10 @@ const addCommand = {
   name: "add",
   options: [
     { description: "auth: provider to use without prompting (auth | clerk | auth0)", name: "provider", type: String },
-    { description: "Skip the provider prompt and use the default (email & password)", name: "yes", type: Boolean },
+    { description: "auth: D1 database name to use without prompting (lowercase alphanumeric + hyphens)", name: "db", type: String },
+    { description: "storage: R2 bucket name to use without prompting (lowercase alphanumeric + hyphens)", name: "bucket", type: String },
+    { description: "email: verified destination address to use without prompting", name: "mail-to", type: String },
+    { description: "Skip prompts (auth provider, DB name, bucket name, mail destination) and use the defaults", name: "yes", type: Boolean },
     { description: "Local registry root (offline; expects <name>/ subdirs)", name: "from", type: String },
     { description: "Override the remote registry source base (e.g. gh:owner/repo/registry)", name: "source", type: String },
     {

package/dist/packem_shared/{commands-DqsEzojt.mjs → commands-CkkATMMx.mjs}

@@ -3,7 +3,7 @@ import { dirname, join } from '@visulima/path';
 import { DEV_VARS_FILE, parseDevVariableEntries } from '@lunora/config';
 import { modify, applyEdits, parse } from 'jsonc-parser';
 import { fileURLToPath } from 'node:url';
-import { a as tuiConfirm } from './tui-prompts-XHFxlOg5.mjs';
+import { b as tuiConfirm } from './tui-prompts-CA9lngSS.mjs';
 import { collectCatalog, buildRegistryIndex } from './buildRegistryIndex-BcYe607_.mjs';
 import { insertSchemaExtension } from './insertSchemaExtension-BuzF6-t2.mjs';
 import { createHash } from 'node:crypto';
@@ -583,6 +583,26 @@ const resolvePlan = async (names, options) => {
 const emptyResult = () => {
   return { bindings: [], code: 0, deps: [], skipped: [], written: [] };
 };
+const setBindingField = (manifest, section, match, field, fieldValue) => {
+  if (!manifest.bindings) {
+    return manifest;
+  }
+  return {
+    ...manifest,
+    bindings: manifest.bindings.map((binding) => {
+      if (binding.path[0] !== section || !Array.isArray(binding.value)) {
+        return binding;
+      }
+      const entries = binding.value;
+      return {
+        ...binding,
+        value: entries.map(
+          (entry) => typeof entry === "object" && entry !== null && entry[match.key] === match.value ? { ...entry, [field]: fieldValue } : entry
+        )
+      };
+    })
+  };
+};
 
 const printPlan = (logger, manifest) => {
   const label = manifest.title ?? manifest.description;
@@ -688,8 +708,12 @@ const runAddCommand = async (options) => {
   }
   let cleanups = [];
   try {
-    const { cleanups: planCleanups, items } = await resolvePlan(options.names, options);
+    const { cleanups: planCleanups, items: resolvedItems } = await resolvePlan(options.names, options);
     cleanups = planCleanups;
+    const { transformManifest } = options;
+    const items = transformManifest ? resolvedItems.map((item) => {
+      return { ...item, manifest: transformManifest(item.manifest) };
+    }) : resolvedItems;
     for (const { manifest } of items) {
       printPlan(options.logger, manifest);
     }
@@ -785,4 +809,4 @@ const runBuildIndexCommand = async (options) => {
   return empty;
 };
 
-export { runBuildIndexCommand as a, runRegistryViewCommand as b, resolveDistTag as c, resolveSourceRef as d, runListCommand as e, runAddCommand as r };
+export { runBuildIndexCommand as a, runRegistryViewCommand as b, resolveDistTag as c, resolveSourceRef as d, runListCommand as e, runAddCommand as r, setBindingField as s };

package/dist/packem_shared/{runAddCommand-G544_v6e.mjs → runAddCommand-DepS9W9W.mjs}

@@ -1,4 +1,4 @@
 import 'node:fs';
 import '@visulima/path';
-export { r as runAddCommand, a as runBuildIndexCommand, e as runListCommand, b as runRegistryViewCommand } from './commands-DqsEzojt.mjs';
+export { r as runAddCommand, a as runBuildIndexCommand, e as runListCommand, b as runRegistryViewCommand } from './commands-CkkATMMx.mjs';
 import './buildRegistryIndex-BcYe607_.mjs';

package/dist/packem_shared/storage-Bjo35hPa.mjs

@@ -0,0 +1,84 @@
+import { s as setBindingField } from './commands-CkkATMMx.mjs';
+
+const INVALID_SLUG_CHARS = /[^a-z0-9]+/u;
+const toKebabSlug = (input, min, max) => {
+  let slug = input.toLowerCase().split(INVALID_SLUG_CHARS).filter(Boolean).join("-").slice(0, max);
+  if (slug.endsWith("-")) {
+    slug = slug.slice(0, -1);
+  }
+  return slug.length >= min ? slug : void 0;
+};
+
+const DB_BINDING = "DB";
+const AUTH_DB_PROMPT = "Name your D1 database (run `wrangler d1 create` to get its id, then put it in wrangler.jsonc)";
+const sanitizeDatabaseName = (input) => toKebabSlug(input, 1, 64);
+const FALLBACK_DATABASE_NAME = "lunora-db";
+const deriveDatabaseName = (projectName) => sanitizeDatabaseName(`${projectName}-db`) ?? FALLBACK_DATABASE_NAME;
+const promptDatabaseName = async (text, projectName) => {
+  const fallback = deriveDatabaseName(projectName);
+  return sanitizeDatabaseName(await text(AUTH_DB_PROMPT, { default: fallback, placeholder: fallback })) ?? fallback;
+};
+const withAuthDatabaseName = (manifest, name) => setBindingField(manifest, "d1_databases", { key: "binding", value: DB_BINDING }, "database_name", name);
+
+const AUTH_PROVIDER_OPTIONS = [
+  { description: "Email + password on better-auth (default)", label: "Email & password", value: "auth" },
+  { description: "Clerk-hosted auth", label: "Clerk", value: "auth-clerk" },
+  { description: "Auth0 (OIDC)", label: "Auth0", value: "auth-auth0" }
+];
+const DEFAULT_AUTH_ITEM = "auth";
+const promptAuthProvider = async (select) => await select("Which auth provider?", AUTH_PROVIDER_OPTIONS, { default: DEFAULT_AUTH_ITEM }) ?? DEFAULT_AUTH_ITEM;
+const EMAIL_ITEM = "mail";
+const normalizeFeature = (raw) => {
+  const value = raw.trim();
+  if (value === "") {
+    return void 0;
+  }
+  const lower = value.toLowerCase();
+  if (lower === "auth") {
+    return { kind: "auth" };
+  }
+  if (lower === "email" || lower === "mail") {
+    return { kind: "email" };
+  }
+  return { item: lower, kind: "item" };
+};
+
+const SEND_EMAIL_BINDING = "SEND_EMAIL";
+const MAIL_DESTINATION_PROMPT = "Verified destination email for production delivery (blank = set it later in wrangler.jsonc)";
+const isValidEmail = (value) => {
+  const trimmed = value.trim();
+  if (trimmed.length === 0 || trimmed.includes(" ")) {
+    return false;
+  }
+  const at = trimmed.indexOf("@");
+  if (at <= 0 || at !== trimmed.lastIndexOf("@")) {
+    return false;
+  }
+  const domain = trimmed.slice(at + 1);
+  return domain.length >= 3 && domain.includes(".") && !domain.startsWith(".") && !domain.endsWith(".");
+};
+const resolveTypedDestination = (entered, warn) => {
+  const trimmed = entered.trim();
+  if (trimmed === "") {
+    return void 0;
+  }
+  if (!isValidEmail(trimmed)) {
+    warn(`"${trimmed}" doesn't look like an email — leaving the placeholder; set destination_address in wrangler.jsonc.`);
+    return void 0;
+  }
+  return trimmed;
+};
+const withMailDestination = (manifest, address) => setBindingField(manifest, "send_email", { key: "name", value: SEND_EMAIL_BINDING }, "destination_address", address);
+
+const UPLOADS_BINDING = "UPLOADS";
+const STORAGE_BUCKET_PROMPT = "Name your R2 bucket (you can rename it in wrangler.jsonc later)";
+const sanitizeBucketName = (input) => toKebabSlug(input, 3, 63);
+const FALLBACK_BUCKET_NAME = "lunora-uploads";
+const deriveBucketName = (projectName) => sanitizeBucketName(`${projectName}-uploads`) ?? FALLBACK_BUCKET_NAME;
+const promptBucketName = async (text, projectName) => {
+  const fallback = deriveBucketName(projectName);
+  return sanitizeBucketName(await text(STORAGE_BUCKET_PROMPT, { default: fallback, placeholder: fallback })) ?? fallback;
+};
+const withStorageBucketName = (manifest, bucketName) => setBindingField(manifest, "r2_buckets", { key: "binding", value: UPLOADS_BINDING }, "bucket_name", bucketName);
+
+export { AUTH_PROVIDER_OPTIONS as A, DEFAULT_AUTH_ITEM as D, EMAIL_ITEM as E, MAIL_DESTINATION_PROMPT as M, sanitizeDatabaseName as a, deriveDatabaseName as b, promptDatabaseName as c, deriveBucketName as d, promptAuthProvider as e, withMailDestination as f, withAuthDatabaseName as g, normalizeFeature as n, promptBucketName as p, resolveTypedDestination as r, sanitizeBucketName as s, withStorageBucketName as w };

package/dist/packem_shared/{tui-prompts-XHFxlOg5.mjs → tui-prompts-CA9lngSS.mjs}

@@ -266,4 +266,4 @@ const withTuiSpinner = async (label, task) => {
   }
 };
 
-export { tuiConfirm as a, tuiOutro as b, createTuiConfirm as c, tuiBanner as d, tuiText as e, tuiIntro as f, tuiMultiSelect as g, tuiSelect as t, withTuiSpinner as w };
+export { tuiSelect as a, tuiConfirm as b, createTuiConfirm as c, tuiOutro as d, tuiBanner as e, tuiIntro as f, tuiMultiSelect as g, tuiText as t, withTuiSpinner as w };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/cli",
-  "version": "1.0.0-alpha.8",
+  "version": "1.0.0-alpha.9",
   "description": "The Lunora CLI: init, dev, deploy, codegen, run, reset, and migrate commands",
   "keywords": [
     "agent-skills",

package/skills/lunora-setup-storage/SKILL.md

@@ -41,7 +41,7 @@ This:
 1. Adds `@lunora/storage` and `@lunora/server` to `package.json` (run
    `pnpm install` afterwards).
 2. Adds an R2 bucket binding to `wrangler.jsonc` (`r2_buckets`, binding
-   **`UPLOADS`**, `bucket_name: "REPLACE_ME-uploads"` — rename it to a real
+   **`UPLOADS`**, `bucket_name: "replace-me-uploads"` — rename it to a real
    bucket). It **merges** into any existing `r2_buckets`.
 3. Scaffolds `STORAGE_SIGNING_SECRET` (a secret) and `STORAGE_PUBLIC_BASE_URL`
    into `.dev.vars`.
@@ -137,8 +137,12 @@ persist that, and pass the bare key back in — the component re-scopes it.
 
 1. **Skipping `verifySignedUrl` on the download route.** Without it, anyone can
    read any key. Always verify before streaming.
-2. **Placeholder bucket name.** `bucket_name: "REPLACE_ME-uploads"` ships as a
-   placeholder — rename it to a real R2 bucket.
+2. **Placeholder bucket name.** `lunora init` and `lunora add storage` prompt for
+   the bucket name (or take `--bucket <name>`), but the low-level
+   `lunora registry add storage` writes the placeholder
+   `bucket_name: "replace-me-uploads"` — rename it to a real R2 bucket. (R2 names
+   are lowercase alphanumeric + hyphens, 3–63 chars; wrangler rejects anything
+   else on `dev`/`deploy`.)
 3. **Short / shared signing secret.** Use ≥32 chars and a distinct secret per
    bucket; reusing it lets one bucket's URLs sign for another.
 4. **Proxying bytes through the Worker.** The design uploads/downloads directly

package/dist/packem_shared/features-ocSSpZtS.mjs

@@ -1,24 +0,0 @@
-const AUTH_PROVIDER_OPTIONS = [
-  { description: "Email + password on better-auth (default)", label: "Email & password", value: "auth" },
-  { description: "Clerk-hosted auth", label: "Clerk", value: "auth-clerk" },
-  { description: "Auth0 (OIDC)", label: "Auth0", value: "auth-auth0" }
-];
-const DEFAULT_AUTH_ITEM = "auth";
-const promptAuthProvider = async (select) => await select("Which auth provider?", AUTH_PROVIDER_OPTIONS, { default: DEFAULT_AUTH_ITEM }) ?? DEFAULT_AUTH_ITEM;
-const EMAIL_ITEM = "mail";
-const normalizeFeature = (raw) => {
-  const value = raw.trim();
-  if (value === "") {
-    return void 0;
-  }
-  const lower = value.toLowerCase();
-  if (lower === "auth") {
-    return { kind: "auth" };
-  }
-  if (lower === "email" || lower === "mail") {
-    return { kind: "email" };
-  }
-  return { item: lower, kind: "item" };
-};
-
-export { AUTH_PROVIDER_OPTIONS as A, DEFAULT_AUTH_ITEM as D, EMAIL_ITEM as E, normalizeFeature as n, promptAuthProvider as p };