@noy-db/create 0.5.0

package/dist/index.js

@@ -0,0 +1,902 @@
+// src/wizard/run.ts
+import { promises as fs4 } from "fs";
+import path3 from "path";
+import * as p from "@clack/prompts";
+import pc from "picocolors";
+
+// src/wizard/render.ts
+import { promises as fs } from "fs";
+import path from "path";
+import { fileURLToPath } from "url";
+async function renderTemplate(src, dest, tokens) {
+  const written = [];
+  await walk(src, dest, "", tokens, written);
+  written.sort();
+  return written;
+}
+async function walk(srcRoot, destRoot, rel, tokens, written) {
+  const srcDir = path.join(srcRoot, rel);
+  const entries = await fs.readdir(srcDir, { withFileTypes: true });
+  for (const entry of entries) {
+    const srcEntry = path.join(srcDir, entry.name);
+    const destName = entry.name.startsWith("_") ? `.${entry.name.slice(1)}` : entry.name;
+    const destRel = rel ? path.join(rel, destName) : destName;
+    const destEntry = path.join(destRoot, destRel);
+    if (entry.isDirectory()) {
+      await fs.mkdir(destEntry, { recursive: true });
+      await walk(srcRoot, destRoot, path.join(rel, entry.name), tokens, written);
+      continue;
+    }
+    const raw = await fs.readFile(srcEntry, "utf8");
+    const rendered = applyTokens(raw, tokens);
+    await fs.mkdir(path.dirname(destEntry), { recursive: true });
+    await fs.writeFile(destEntry, rendered, "utf8");
+    written.push(destRel);
+  }
+}
+function applyTokens(input, tokens) {
+  const bag = tokens;
+  return input.replace(/\{\{(\w+)\}\}/g, (match, key) => {
+    const value = bag[key];
+    return value === void 0 ? match : value;
+  });
+}
+function templateDir(name) {
+  const here = fileURLToPath(import.meta.url);
+  const packageRoot = path.resolve(path.dirname(here), "..", "..");
+  return path.join(packageRoot, "templates", name);
+}
+
+// src/wizard/detect.ts
+import { promises as fs2 } from "fs";
+import path2 from "path";
+async function detectNuxtProject(cwd) {
+  const reasons = [];
+  const configCandidates = ["nuxt.config.ts", "nuxt.config.js", "nuxt.config.mjs"];
+  let configPath = null;
+  for (const name of configCandidates) {
+    const candidate = path2.join(cwd, name);
+    if (await pathExists(candidate)) {
+      configPath = candidate;
+      reasons.push(`Found ${name}`);
+      break;
+    }
+  }
+  if (!configPath) {
+    reasons.push("No nuxt.config.{ts,js,mjs} in cwd");
+    return {
+      existing: false,
+      configPath: null,
+      packageJsonPath: null,
+      reasons
+    };
+  }
+  const pkgPath = path2.join(cwd, "package.json");
+  if (!await pathExists(pkgPath)) {
+    reasons.push("Config file present but no package.json \u2014 ambiguous, skipping");
+    return {
+      existing: false,
+      configPath,
+      packageJsonPath: null,
+      reasons
+    };
+  }
+  let pkg;
+  try {
+    pkg = JSON.parse(await fs2.readFile(pkgPath, "utf8"));
+  } catch (err) {
+    reasons.push(`package.json is not valid JSON: ${err.message}`);
+    return {
+      existing: false,
+      configPath,
+      packageJsonPath: pkgPath,
+      reasons
+    };
+  }
+  const depSections = ["dependencies", "devDependencies", "peerDependencies"];
+  let nuxtVersion;
+  for (const section of depSections) {
+    const deps = pkg[section];
+    if (deps && typeof deps === "object" && "nuxt" in deps) {
+      nuxtVersion = deps["nuxt"];
+      reasons.push(`Found nuxt@${nuxtVersion} in ${section}`);
+      break;
+    }
+  }
+  if (!nuxtVersion) {
+    reasons.push("Config file present, but package.json does not list `nuxt` as a dependency");
+    return {
+      existing: false,
+      configPath,
+      packageJsonPath: pkgPath,
+      reasons
+    };
+  }
+  return {
+    existing: true,
+    configPath,
+    packageJsonPath: pkgPath,
+    reasons
+  };
+}
+async function pathExists(target) {
+  try {
+    await fs2.access(target);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// src/wizard/augment.ts
+import { promises as fs3 } from "fs";
+import { loadFile, generateCode, builders } from "magicast";
+import { createPatch } from "diff";
+async function augmentNuxtConfig(options) {
+  const originalCode = await fs3.readFile(options.configPath, "utf8");
+  const mod = await loadFile(options.configPath);
+  const exported = mod.exports.default;
+  if (exported === void 0 || exported === null) {
+    return {
+      kind: "unsupported-shape",
+      configPath: options.configPath,
+      reason: `${options.configPath} has no default export. Expected \`export default defineNuxtConfig({...})\` or \`export default {...}\`.`
+    };
+  }
+  const config = resolveConfigObject(exported);
+  if (!config) {
+    return {
+      kind: "unsupported-shape",
+      configPath: options.configPath,
+      reason: `Could not find the config object in ${options.configPath}. Expected \`export default defineNuxtConfig({ modules: [], ... })\` or a plain object literal.`
+    };
+  }
+  const skipReasons = [];
+  const modulesRaw = config.modules;
+  let modulesWasMissing = false;
+  if (modulesRaw === void 0) {
+    modulesWasMissing = true;
+    config.modules = [];
+  } else if (typeof modulesRaw !== "object" || !isProxyArray(modulesRaw)) {
+    return {
+      kind: "unsupported-shape",
+      configPath: options.configPath,
+      reason: `\`modules\` in ${options.configPath} is not an array literal. Edit it manually and re-run the wizard if you want to continue.`
+    };
+  }
+  const modules = config.modules;
+  const alreadyHasModule = Array.from(modules).some((m) => String(m) === "@noy-db/nuxt");
+  if (alreadyHasModule) {
+    skipReasons.push("`@noy-db/nuxt` already in modules");
+  } else {
+    modules.push("@noy-db/nuxt");
+  }
+  const noydbRaw = config.noydb;
+  if (noydbRaw !== void 0) {
+    skipReasons.push("`noydb` key already set");
+  } else {
+    config.noydb = builders.raw(
+      `{ adapter: '${options.adapter}', pinia: true, devtools: true }`
+    );
+  }
+  if (skipReasons.length === 2 && !modulesWasMissing) {
+    return {
+      kind: "already-configured",
+      configPath: options.configPath,
+      reason: skipReasons.join("; ")
+    };
+  }
+  const generated = generateCode(mod).code;
+  const diff = createPatch(
+    options.configPath,
+    originalCode,
+    generated,
+    "",
+    "",
+    { context: 3 }
+  );
+  return {
+    kind: "proposed-change",
+    configPath: options.configPath,
+    originalCode,
+    newCode: generated,
+    diff,
+    dryRun: options.dryRun === true
+  };
+}
+async function writeAugmentedConfig(configPath, newCode) {
+  await fs3.writeFile(configPath, newCode, "utf8");
+}
+function resolveConfigObject(exported) {
+  if (!exported || typeof exported !== "object") return null;
+  const proxy = exported;
+  if (proxy.$type === "function-call" && proxy.$args) {
+    const firstArg = proxy.$args[0];
+    if (firstArg && typeof firstArg === "object") {
+      return firstArg;
+    }
+    return null;
+  }
+  if (proxy.$type === "object" || proxy.$type === void 0) {
+    return proxy;
+  }
+  return null;
+}
+function isProxyArray(value) {
+  if (!value || typeof value !== "object") return false;
+  const proxy = value;
+  return proxy.$type === "array";
+}
+
+// src/wizard/i18n/en.ts
+var en = {
+  wizardIntro: "A wizard for noy-db \u2014 None Of Your DataBase.\nGenerates a fresh Nuxt 4 + Pinia + encrypted-store starter.",
+  promptProjectName: "Project name",
+  promptProjectNamePlaceholder: "my-noy-db-app",
+  promptAdapter: "Storage adapter",
+  adapterBrowserLabel: "browser \u2014 localStorage / IndexedDB (recommended for web apps)",
+  adapterFileLabel: "file \u2014 JSON files on disk (Electron / Tauri / USB workflows)",
+  adapterMemoryLabel: "memory \u2014 no persistence (ideal for tests and demos)",
+  promptSampleData: "Include sample invoice records?",
+  freshNextStepsTitle: "Next steps",
+  freshOutroDone: "\u2714 Done \u2014 happy encrypting!",
+  augmentModeTitle: "Augment mode",
+  augmentDetectedPrefix: "Detected existing Nuxt 4 project:",
+  augmentDescription: "The wizard will add @noy-db/nuxt to your modules array\nand a noydb: config key. You can review the diff before\nanything is written to disk.",
+  augmentProposedChangesTitle: "Proposed changes",
+  augmentApplyConfirm: "Apply these changes?",
+  augmentAlreadyConfiguredTitle: "Already configured",
+  augmentNothingToDo: "Nothing to do:",
+  augmentAlreadyOutro: "\u2714 Your Nuxt config is already wired up.",
+  augmentAborted: "Aborted \u2014 your config is unchanged.",
+  augmentDryRunOutro: "\u2714 Dry run \u2014 no files were modified.",
+  augmentNextStepTitle: "Next step",
+  augmentInstallIntro: "Install the @noy-db packages your config now depends on:",
+  augmentInstallPmHint: "(or use npm/yarn/bun as appropriate)",
+  augmentDoneOutro: "\u2714 Config updated \u2014 happy encrypting!",
+  augmentUnsupportedPrefix: "Cannot safely patch this config:",
+  cancelled: "Cancelled."
+};
+
+// src/wizard/i18n/th.ts
+var th = {
+  wizardIntro: "\u0E15\u0E31\u0E27\u0E0A\u0E48\u0E27\u0E22\u0E2A\u0E23\u0E49\u0E32\u0E07\u0E2A\u0E33\u0E2B\u0E23\u0E31\u0E1A noy-db \u2014 None Of Your DataBase\n\u0E2A\u0E23\u0E49\u0E32\u0E07\u0E42\u0E1B\u0E23\u0E40\u0E08\u0E01\u0E15\u0E4C\u0E40\u0E23\u0E34\u0E48\u0E21\u0E15\u0E49\u0E19 Nuxt 4 + Pinia \u0E1E\u0E23\u0E49\u0E2D\u0E21\u0E17\u0E35\u0E48\u0E40\u0E01\u0E47\u0E1A\u0E02\u0E49\u0E2D\u0E21\u0E39\u0E25\u0E41\u0E1A\u0E1A\u0E40\u0E02\u0E49\u0E32\u0E23\u0E2B\u0E31\u0E2A",
+  promptProjectName: "\u0E0A\u0E37\u0E48\u0E2D\u0E42\u0E1B\u0E23\u0E40\u0E08\u0E01\u0E15\u0E4C",
+  promptProjectNamePlaceholder: "my-noy-db-app",
+  promptAdapter: "\u0E2D\u0E30\u0E41\u0E14\u0E1B\u0E40\u0E15\u0E2D\u0E23\u0E4C\u0E08\u0E31\u0E14\u0E40\u0E01\u0E47\u0E1A\u0E02\u0E49\u0E2D\u0E21\u0E39\u0E25",
+  adapterBrowserLabel: "browser \u2014 localStorage / IndexedDB (\u0E41\u0E19\u0E30\u0E19\u0E33\u0E2A\u0E33\u0E2B\u0E23\u0E31\u0E1A\u0E40\u0E27\u0E47\u0E1A\u0E41\u0E2D\u0E1B)",
+  adapterFileLabel: "file \u2014 \u0E44\u0E1F\u0E25\u0E4C JSON \u0E1A\u0E19\u0E14\u0E34\u0E2A\u0E01\u0E4C (Electron / Tauri / USB)",
+  adapterMemoryLabel: "memory \u2014 \u0E44\u0E21\u0E48\u0E1A\u0E31\u0E19\u0E17\u0E36\u0E01\u0E02\u0E49\u0E2D\u0E21\u0E39\u0E25 (\u0E40\u0E2B\u0E21\u0E32\u0E30\u0E2A\u0E33\u0E2B\u0E23\u0E31\u0E1A\u0E01\u0E32\u0E23\u0E17\u0E14\u0E2A\u0E2D\u0E1A\u0E41\u0E25\u0E30\u0E15\u0E31\u0E27\u0E2D\u0E22\u0E48\u0E32\u0E07)",
+  promptSampleData: "\u0E40\u0E1E\u0E34\u0E48\u0E21\u0E02\u0E49\u0E2D\u0E21\u0E39\u0E25\u0E15\u0E31\u0E27\u0E2D\u0E22\u0E48\u0E32\u0E07\u0E43\u0E1A\u0E41\u0E08\u0E49\u0E07\u0E2B\u0E19\u0E35\u0E49\u0E2B\u0E23\u0E37\u0E2D\u0E44\u0E21\u0E48?",
+  freshNextStepsTitle: "\u0E02\u0E31\u0E49\u0E19\u0E15\u0E2D\u0E19\u0E16\u0E31\u0E14\u0E44\u0E1B",
+  freshOutroDone: "\u2714 \u0E40\u0E2A\u0E23\u0E47\u0E08\u0E40\u0E23\u0E35\u0E22\u0E1A\u0E23\u0E49\u0E2D\u0E22 \u2014 \u0E02\u0E2D\u0E43\u0E2B\u0E49\u0E2A\u0E19\u0E38\u0E01\u0E01\u0E31\u0E1A\u0E01\u0E32\u0E23\u0E40\u0E02\u0E49\u0E32\u0E23\u0E2B\u0E31\u0E2A!",
+  augmentModeTitle: "\u0E42\u0E2B\u0E21\u0E14\u0E40\u0E2A\u0E23\u0E34\u0E21\u0E42\u0E1B\u0E23\u0E40\u0E08\u0E01\u0E15\u0E4C\u0E40\u0E14\u0E34\u0E21",
+  augmentDetectedPrefix: "\u0E1E\u0E1A\u0E42\u0E1B\u0E23\u0E40\u0E08\u0E01\u0E15\u0E4C Nuxt 4 \u0E17\u0E35\u0E48\u0E21\u0E35\u0E2D\u0E22\u0E39\u0E48\u0E41\u0E25\u0E49\u0E27:",
+  augmentDescription: "\u0E15\u0E31\u0E27\u0E0A\u0E48\u0E27\u0E22\u0E08\u0E30\u0E40\u0E1E\u0E34\u0E48\u0E21 @noy-db/nuxt \u0E40\u0E02\u0E49\u0E32\u0E43\u0E19 modules\n\u0E41\u0E25\u0E30\u0E40\u0E1E\u0E34\u0E48\u0E21\u0E04\u0E35\u0E22\u0E4C noydb: \u0E43\u0E19\u0E44\u0E1F\u0E25\u0E4C config \u0E04\u0E38\u0E13\u0E2A\u0E32\u0E21\u0E32\u0E23\u0E16\u0E14\u0E39 diff\n\u0E01\u0E48\u0E2D\u0E19\u0E17\u0E35\u0E48\u0E08\u0E30\u0E40\u0E02\u0E35\u0E22\u0E19\u0E44\u0E1F\u0E25\u0E4C\u0E25\u0E07\u0E14\u0E34\u0E2A\u0E01\u0E4C\u0E44\u0E14\u0E49",
+  augmentProposedChangesTitle: "\u0E23\u0E32\u0E22\u0E01\u0E32\u0E23\u0E40\u0E1B\u0E25\u0E35\u0E48\u0E22\u0E19\u0E41\u0E1B\u0E25\u0E07\u0E17\u0E35\u0E48\u0E08\u0E30\u0E17\u0E33",
+  augmentApplyConfirm: "\u0E22\u0E37\u0E19\u0E22\u0E31\u0E19\u0E01\u0E32\u0E23\u0E40\u0E1B\u0E25\u0E35\u0E48\u0E22\u0E19\u0E41\u0E1B\u0E25\u0E07\u0E40\u0E2B\u0E25\u0E48\u0E32\u0E19\u0E35\u0E49?",
+  augmentAlreadyConfiguredTitle: "\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E44\u0E27\u0E49\u0E41\u0E25\u0E49\u0E27",
+  augmentNothingToDo: "\u0E44\u0E21\u0E48\u0E21\u0E35\u0E2D\u0E30\u0E44\u0E23\u0E15\u0E49\u0E2D\u0E07\u0E17\u0E33:",
+  augmentAlreadyOutro: "\u2714 \u0E44\u0E1F\u0E25\u0E4C Nuxt config \u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E04\u0E23\u0E1A\u0E41\u0E25\u0E49\u0E27",
+  augmentAborted: "\u0E22\u0E01\u0E40\u0E25\u0E34\u0E01 \u2014 \u0E44\u0E1F\u0E25\u0E4C config \u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13\u0E44\u0E21\u0E48\u0E16\u0E39\u0E01\u0E41\u0E01\u0E49\u0E44\u0E02",
+  augmentDryRunOutro: "\u2714 Dry run \u2014 \u0E44\u0E21\u0E48\u0E21\u0E35\u0E44\u0E1F\u0E25\u0E4C\u0E43\u0E14\u0E16\u0E39\u0E01\u0E41\u0E01\u0E49\u0E44\u0E02",
+  augmentNextStepTitle: "\u0E02\u0E31\u0E49\u0E19\u0E15\u0E2D\u0E19\u0E16\u0E31\u0E14\u0E44\u0E1B",
+  augmentInstallIntro: "\u0E15\u0E34\u0E14\u0E15\u0E31\u0E49\u0E07\u0E41\u0E1E\u0E47\u0E01\u0E40\u0E01\u0E08 @noy-db \u0E17\u0E35\u0E48 config \u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13\u0E15\u0E49\u0E2D\u0E07\u0E43\u0E0A\u0E49:",
+  augmentInstallPmHint: "(\u0E2B\u0E23\u0E37\u0E2D\u0E43\u0E0A\u0E49 npm/yarn/bun \u0E15\u0E32\u0E21\u0E04\u0E27\u0E32\u0E21\u0E40\u0E2B\u0E21\u0E32\u0E30\u0E2A\u0E21)",
+  augmentDoneOutro: "\u2714 \u0E2D\u0E31\u0E1B\u0E40\u0E14\u0E15 config \u0E40\u0E23\u0E35\u0E22\u0E1A\u0E23\u0E49\u0E2D\u0E22 \u2014 \u0E02\u0E2D\u0E43\u0E2B\u0E49\u0E2A\u0E19\u0E38\u0E01\u0E01\u0E31\u0E1A\u0E01\u0E32\u0E23\u0E40\u0E02\u0E49\u0E32\u0E23\u0E2B\u0E31\u0E2A!",
+  augmentUnsupportedPrefix: "\u0E44\u0E21\u0E48\u0E2A\u0E32\u0E21\u0E32\u0E23\u0E16\u0E41\u0E01\u0E49\u0E44\u0E02 config \u0E19\u0E35\u0E49\u0E44\u0E14\u0E49\u0E2D\u0E22\u0E48\u0E32\u0E07\u0E1B\u0E25\u0E2D\u0E14\u0E20\u0E31\u0E22:",
+  cancelled: "\u0E22\u0E01\u0E40\u0E25\u0E34\u0E01\u0E41\u0E25\u0E49\u0E27"
+};
+
+// src/wizard/i18n/index.ts
+var BUNDLES = { en, th };
+var SUPPORTED_LOCALES = ["en", "th"];
+function loadMessages(locale) {
+  return BUNDLES[locale] ?? BUNDLES.en;
+}
+function detectLocale(env = process.env) {
+  const candidates = [
+    env.LC_ALL,
+    env.LC_MESSAGES,
+    env.LANG,
+    // LANGUAGE is a comma-separated preference list — take the first
+    // entry. We deliberately do NOT walk the whole list; the wizard
+    // ships exactly two locales, so a "best fit" walk would be
+    // overkill and would obscure unexpected behaviour.
+    env.LANGUAGE?.split(":")[0]?.split(",")[0]
+  ];
+  for (const raw of candidates) {
+    if (!raw) continue;
+    const normalised = raw.split(".")[0].split("@")[0].toLowerCase().split("_")[0];
+    if (SUPPORTED_LOCALES.includes(normalised)) {
+      return normalised;
+    }
+  }
+  return "en";
+}
+function parseLocaleFlag(value) {
+  const normalised = value.toLowerCase().trim();
+  if (SUPPORTED_LOCALES.includes(normalised)) {
+    return normalised;
+  }
+  throw new Error(
+    `Unsupported --lang value: "${value}". Supported: ${SUPPORTED_LOCALES.join(", ")}`
+  );
+}
+
+// src/wizard/run.ts
+var DEFAULT_SEED = [
+  {
+    id: "inv-001",
+    client: "Acme Holdings",
+    amount: 1500,
+    status: "open",
+    dueDate: "2026-05-01"
+  },
+  {
+    id: "inv-002",
+    client: "Globex Inc",
+    amount: 4200,
+    status: "paid",
+    dueDate: "2026-04-15"
+  },
+  {
+    id: "inv-003",
+    client: "Initech LLC",
+    amount: 850,
+    status: "overdue",
+    dueDate: "2026-03-20"
+  }
+];
+function adapterLabels(msg) {
+  return {
+    browser: msg.adapterBrowserLabel,
+    file: msg.adapterFileLabel,
+    memory: msg.adapterMemoryLabel
+  };
+}
+function validateProjectName(name) {
+  if (!name || name.trim() === "") return "Project name cannot be empty";
+  if (name.length > 214) return "Project name must be 214 characters or fewer";
+  if (!/^[a-z0-9][a-z0-9._-]*$/.test(name)) {
+    return "Project name must start with a lowercase letter or digit and contain only lowercase letters, digits, hyphens, dots, or underscores";
+  }
+  return null;
+}
+async function runWizard(options = {}) {
+  const cwd = options.cwd ?? process.cwd();
+  const yes = options.yes ?? false;
+  const msg = loadMessages(options.locale ?? detectLocale());
+  const detection = options.forceFresh ? null : await detectNuxtProject(cwd);
+  if (detection?.existing && detection.configPath) {
+    return runAugmentMode(options, cwd, detection.configPath, msg);
+  }
+  return runFreshMode(options, cwd, yes, msg);
+}
+async function runFreshMode(options, cwd, yes, msg) {
+  const projectName = yes ? options.projectName ?? "my-noy-db-app" : await promptProjectName(options.projectName, msg);
+  const adapter = yes ? options.adapter ?? "browser" : await promptAdapter(options.adapter, msg);
+  const sampleData = yes ? options.sampleData ?? true : await promptSampleData(options.sampleData, msg);
+  const projectPath = path3.resolve(cwd, projectName);
+  await assertWritableTarget(projectPath);
+  const tokens = {
+    PROJECT_NAME: projectName,
+    ADAPTER: adapter,
+    DEVTOOLS: "true",
+    SEED_INVOICES: sampleData ? JSON.stringify(DEFAULT_SEED, null, 2).replace(/\n/g, "\n  ") : "[]"
+  };
+  await fs4.mkdir(projectPath, { recursive: true });
+  const files = await renderTemplate(
+    templateDir("nuxt-default"),
+    projectPath,
+    tokens
+  );
+  if (!yes) {
+    p.note(
+      [
+        `${pc.bold("cd")} ${projectName}`,
+        `${pc.bold("pnpm install")}     ${pc.dim("(or npm/yarn/bun)")}`,
+        `${pc.bold("pnpm dev")}`
+      ].join("\n"),
+      msg.freshNextStepsTitle
+    );
+    p.outro(pc.green(msg.freshOutroDone));
+  }
+  return {
+    kind: "fresh",
+    options: {
+      projectName,
+      adapter,
+      sampleData,
+      cwd
+    },
+    projectPath,
+    files
+  };
+}
+async function runAugmentMode(options, cwd, configPath, msg) {
+  const yes = options.yes ?? false;
+  const dryRun = options.dryRun ?? false;
+  if (!yes) {
+    p.note(
+      [
+        `${pc.dim(msg.augmentDetectedPrefix)}`,
+        `  ${pc.cyan(configPath)}`,
+        "",
+        msg.augmentDescription
+      ].join("\n"),
+      msg.augmentModeTitle
+    );
+  }
+  const adapter = yes ? options.adapter ?? "browser" : await promptAdapter(options.adapter, msg);
+  const result = await augmentNuxtConfig({
+    configPath,
+    adapter,
+    dryRun
+  });
+  if (result.kind === "already-configured") {
+    if (!yes) {
+      p.note(
+        `${pc.yellow(msg.augmentNothingToDo)} ${result.reason}`,
+        msg.augmentAlreadyConfiguredTitle
+      );
+      p.outro(pc.green(msg.augmentAlreadyOutro));
+    }
+    return {
+      kind: "augment",
+      configPath,
+      adapter,
+      changed: false,
+      reason: "already-configured"
+    };
+  }
+  if (result.kind === "unsupported-shape") {
+    if (!yes) {
+      p.cancel(`${pc.red(msg.augmentUnsupportedPrefix)} ${result.reason}`);
+    }
+    return {
+      kind: "augment",
+      configPath,
+      adapter,
+      changed: false,
+      reason: "unsupported-shape"
+    };
+  }
+  if (!yes || dryRun) {
+    p.note(renderDiff(result.diff), msg.augmentProposedChangesTitle);
+  }
+  if (dryRun) {
+    if (!yes) p.outro(pc.green(msg.augmentDryRunOutro));
+    return {
+      kind: "augment",
+      configPath,
+      adapter,
+      changed: false,
+      reason: "dry-run",
+      diff: result.diff
+    };
+  }
+  let shouldWrite = yes;
+  if (!yes) {
+    const confirmed = await p.confirm({
+      message: msg.augmentApplyConfirm,
+      initialValue: true
+    });
+    if (p.isCancel(confirmed) || confirmed !== true) {
+      p.cancel(msg.augmentAborted);
+      return {
+        kind: "augment",
+        configPath,
+        adapter,
+        changed: false,
+        reason: "cancelled",
+        diff: result.diff
+      };
+    }
+    shouldWrite = true;
+  }
+  if (shouldWrite) {
+    await writeAugmentedConfig(configPath, result.newCode);
+    if (!yes) {
+      p.note(
+        [
+          pc.dim(msg.augmentInstallIntro),
+          "",
+          `${pc.bold("pnpm add")} @noy-db/nuxt @noy-db/pinia @noy-db/core @noy-db/browser @pinia/nuxt pinia`,
+          pc.dim(msg.augmentInstallPmHint)
+        ].join("\n"),
+        msg.augmentNextStepTitle
+      );
+      p.outro(pc.green(msg.augmentDoneOutro));
+    }
+  }
+  return {
+    kind: "augment",
+    configPath,
+    adapter,
+    changed: true,
+    reason: "written",
+    diff: result.diff
+  };
+}
+function renderDiff(diff) {
+  const lines = diff.split("\n");
+  const keep = [];
+  for (const line of lines) {
+    if (line.startsWith("Index:")) continue;
+    if (line.startsWith("=")) continue;
+    if (line.startsWith("---") || line.startsWith("+++")) continue;
+    if (line.startsWith("+")) keep.push(pc.green(line));
+    else if (line.startsWith("-")) keep.push(pc.red(line));
+    else if (line.startsWith("@@")) keep.push(pc.dim(line));
+    else keep.push(line);
+  }
+  return keep.join("\n").trim();
+}
+async function promptProjectName(initial, msg) {
+  if (initial) {
+    const err = validateProjectName(initial);
+    if (err) throw new Error(err);
+    return initial;
+  }
+  const result = await p.text({
+    message: msg.promptProjectName,
+    placeholder: msg.promptProjectNamePlaceholder,
+    initialValue: "my-noy-db-app",
+    validate: (v) => validateProjectName(v ?? "") ?? void 0
+  });
+  if (p.isCancel(result)) {
+    p.cancel(msg.cancelled);
+    process.exit(1);
+  }
+  return result;
+}
+async function promptAdapter(initial, msg) {
+  if (initial) return initial;
+  const labels = adapterLabels(msg);
+  const result = await p.select({
+    message: msg.promptAdapter,
+    options: ["browser", "file", "memory"].map((value) => ({
+      value,
+      label: labels[value]
+    })),
+    initialValue: "browser"
+  });
+  if (p.isCancel(result)) {
+    p.cancel(msg.cancelled);
+    process.exit(1);
+  }
+  return result;
+}
+async function promptSampleData(initial, msg) {
+  if (typeof initial === "boolean") return initial;
+  const result = await p.confirm({
+    message: msg.promptSampleData,
+    initialValue: true
+  });
+  if (p.isCancel(result)) {
+    p.cancel(msg.cancelled);
+    process.exit(1);
+  }
+  return result;
+}
+async function assertWritableTarget(target) {
+  try {
+    const entries = await fs4.readdir(target);
+    if (entries.length > 0) {
+      throw new Error(
+        `Target directory '${target}' already exists and is not empty. Refusing to overwrite \u2014 pick a different project name or remove the directory first.`
+      );
+    }
+  } catch (err) {
+    if (err.code === "ENOENT") return;
+    throw err;
+  }
+}
+
+// src/commands/add.ts
+import { promises as fs5 } from "fs";
+import path4 from "path";
+function validateCollectionName(name) {
+  if (!name) return "Collection name is required";
+  if (!/^[a-z][a-z0-9-]*$/.test(name)) {
+    return "Collection name must start with a lowercase letter and contain only lowercase letters, digits, or hyphens";
+  }
+  return null;
+}
+async function addCollection(options) {
+  const err = validateCollectionName(options.name);
+  if (err) throw new Error(err);
+  const cwd = options.cwd ?? process.cwd();
+  const compartment = options.compartment ?? "default";
+  const name = options.name;
+  const PascalName = name.split("-").map((s) => s.length === 0 ? s : (s[0]?.toUpperCase() ?? "") + s.slice(1)).join("");
+  const useFnName = `use${PascalName}`;
+  const storePath = path4.join(cwd, "app", "stores", `${name}.ts`);
+  const pagePath = path4.join(cwd, "app", "pages", `${name}.vue`);
+  for (const target of [storePath, pagePath]) {
+    if (await pathExists2(target)) {
+      throw new Error(`Refusing to overwrite existing file: ${target}`);
+    }
+  }
+  await fs5.mkdir(path4.dirname(storePath), { recursive: true });
+  await fs5.mkdir(path4.dirname(pagePath), { recursive: true });
+  await fs5.writeFile(storePath, renderStore(name, PascalName, useFnName, compartment), "utf8");
+  await fs5.writeFile(pagePath, renderPage(name, PascalName, useFnName), "utf8");
+  return { files: [storePath, pagePath] };
+}
+async function pathExists2(p2) {
+  try {
+    await fs5.access(p2);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function renderStore(name, PascalName, useFnName, compartment) {
+  return `// Generated by \`noy-db add ${name}\`.
+//
+// Edit the ${PascalName} interface to match your domain, then call
+// \`${useFnName}()\` from any component.
+//
+// defineNoydbStore is auto-imported by @noy-db/nuxt. The compartment
+// id is the tenant/company namespace \u2014 change it if you have multiple.
+
+export interface ${PascalName} {
+  id: string
+  name: string
+}
+
+export const ${useFnName} = defineNoydbStore<${PascalName}>('${name}', {
+  compartment: '${compartment}',
+})
+`;
+}
+function renderPage(name, PascalName, useFnName) {
+  return `<!--
+  Generated by \`noy-db add ${name}\`.
+  Visit /${name} in your dev server.
+-->
+<script setup lang="ts">
+const ${name} = ${useFnName}()
+await ${name}.$ready
+
+function addOne() {
+  ${name}.add({
+    id: crypto.randomUUID(),
+    name: 'New ${PascalName}',
+  })
+}
+
+function removeOne(id: string) {
+  ${name}.remove(id)
+}
+</script>
+
+<template>
+  <main>
+    <h1>${PascalName}</h1>
+    <button @click="addOne">Add ${PascalName}</button>
+    <ul>
+      <li v-for="item in ${name}.items" :key="item.id">
+        {{ item.name }}
+        <button @click="removeOne(item.id)">Delete</button>
+      </li>
+    </ul>
+  </main>
+</template>
+`;
+}
+
+// src/commands/verify.ts
+import { createNoydb } from "@noy-db/core";
+import { memory } from "@noy-db/memory";
+async function verifyIntegrity() {
+  const start = performance.now();
+  try {
+    const db = await createNoydb({
+      adapter: memory(),
+      user: "noy-db-verify",
+      // The passphrase here is throwaway — the in-memory adapter never
+      // persists anything, and the KEK is destroyed when we call close()
+      // a few lines down. We use a non-trivial value just to exercise
+      // PBKDF2 properly.
+      secret: "noy-db-verify-passphrase-2026"
+    });
+    const company = await db.openCompartment("verify-co");
+    const collection = company.collection("verify");
+    const original = { id: "verify-1", n: 42 };
+    await collection.put("verify-1", original);
+    const got = await collection.get("verify-1");
+    if (!got || got.id !== original.id || got.n !== original.n) {
+      return fail(start, `Round-trip mismatch: got ${JSON.stringify(got)}`);
+    }
+    const found = collection.query().where("n", "==", 42).toArray();
+    if (found.length !== 1) {
+      return fail(start, `Query DSL mismatch: expected 1 result, got ${found.length}`);
+    }
+    db.close();
+    return {
+      ok: true,
+      message: "noy-db integrity check passed",
+      durationMs: Math.round(performance.now() - start)
+    };
+  } catch (err) {
+    return fail(start, `Integrity check threw: ${err.message}`);
+  }
+}
+function fail(start, message) {
+  return {
+    ok: false,
+    message,
+    durationMs: Math.round(performance.now() - start)
+  };
+}
+
+// src/commands/rotate.ts
+import { createNoydb as createNoydb2 } from "@noy-db/core";
+import { jsonFile } from "@noy-db/file";
+
+// src/commands/shared.ts
+import { password, isCancel as isCancel2, cancel as cancel2 } from "@clack/prompts";
+var VALID_ROLES = ["owner", "admin", "operator", "viewer", "client"];
+var defaultReadPassphrase = async (label) => {
+  const value = await password({
+    message: label,
+    // Basic sanity: reject empty strings up front. We don't enforce
+    // length here because the caller's KEK-derivation step will
+    // reject weak passphrases with its own, richer error.
+    validate: (v) => v.length === 0 ? "Passphrase cannot be empty" : void 0
+  });
+  if (isCancel2(value)) {
+    cancel2("Cancelled.");
+    process.exit(1);
+  }
+  return value;
+};
+function assertRole(input) {
+  if (!VALID_ROLES.includes(input)) {
+    throw new Error(
+      `Invalid role "${input}" \u2014 must be one of: ${VALID_ROLES.join(", ")}`
+    );
+  }
+  return input;
+}
+function parseCollectionList(input) {
+  if (!input) return null;
+  const parts = input.split(",").map((s) => s.trim()).filter((s) => s.length > 0);
+  return parts.length > 0 ? parts : null;
+}
+
+// src/commands/rotate.ts
+async function rotate(options) {
+  const readPassphrase = options.readPassphrase ?? defaultReadPassphrase;
+  const buildAdapter = options.buildAdapter ?? ((dir) => jsonFile({ dir }));
+  const createDb = options.createDb ?? createNoydb2;
+  const secret = await readPassphrase(`Passphrase for ${options.user}`);
+  let db = null;
+  try {
+    db = await createDb({
+      adapter: buildAdapter(options.dir),
+      user: options.user,
+      secret
+    });
+    const compartment = await db.openCompartment(options.compartment);
+    const targets = options.collections && options.collections.length > 0 ? options.collections : await compartment.collections();
+    if (targets.length === 0) {
+      throw new Error(
+        `Compartment "${options.compartment}" has no collections to rotate.`
+      );
+    }
+    await db.rotate(options.compartment, targets);
+    return { rotated: targets };
+  } finally {
+    db?.close();
+  }
+}
+
+// src/commands/add-user.ts
+import { createNoydb as createNoydb3 } from "@noy-db/core";
+import { jsonFile as jsonFile2 } from "@noy-db/file";
+async function addUser(options) {
+  const readPassphrase = options.readPassphrase ?? defaultReadPassphrase;
+  const buildAdapter = options.buildAdapter ?? ((dir) => jsonFile2({ dir }));
+  const createDb = options.createDb ?? createNoydb3;
+  if ((options.role === "operator" || options.role === "client") && (!options.permissions || Object.keys(options.permissions).length === 0)) {
+    throw new Error(
+      `Role "${options.role}" requires explicit --collections \u2014 e.g. --collections invoices:rw,clients:ro`
+    );
+  }
+  const callerSecret = await readPassphrase(
+    `Your passphrase (${options.callerUser})`
+  );
+  const newSecret = await readPassphrase(
+    `New passphrase for ${options.newUserId}`
+  );
+  const confirmSecret = await readPassphrase(
+    `Confirm passphrase for ${options.newUserId}`
+  );
+  if (newSecret !== confirmSecret) {
+    throw new Error(`Passphrases do not match \u2014 grant aborted.`);
+  }
+  let db = null;
+  try {
+    db = await createDb({
+      adapter: buildAdapter(options.dir),
+      user: options.callerUser,
+      secret: callerSecret
+    });
+    const grantOpts = {
+      userId: options.newUserId,
+      displayName: options.newUserDisplayName ?? options.newUserId,
+      role: options.role,
+      passphrase: newSecret,
+      ...options.permissions ? { permissions: options.permissions } : {}
+    };
+    await db.grant(options.compartment, grantOpts);
+    return {
+      userId: options.newUserId,
+      role: options.role
+    };
+  } finally {
+    db?.close();
+  }
+}
+
+// src/commands/backup.ts
+import { promises as fs6 } from "fs";
+import path5 from "path";
+import { createNoydb as createNoydb4 } from "@noy-db/core";
+import { jsonFile as jsonFile3 } from "@noy-db/file";
+function resolveBackupTarget(target, cwd = process.cwd()) {
+  let raw = target;
+  if (target.startsWith("file://")) {
+    raw = target.slice("file://".length);
+  } else if (target.includes("://")) {
+    throw new Error(
+      `Unsupported backup target scheme: "${target.split("://")[0]}://". Only file:// and plain filesystem paths are supported in v0.5. S3 backups will land in a follow-up.`
+    );
+  }
+  return path5.resolve(cwd, raw);
+}
+async function backup(options) {
+  const readPassphrase = options.readPassphrase ?? defaultReadPassphrase;
+  const buildAdapter = options.buildAdapter ?? ((dir) => jsonFile3({ dir }));
+  const createDb = options.createDb ?? createNoydb4;
+  const absolutePath = resolveBackupTarget(options.target);
+  const secret = await readPassphrase(`Passphrase for ${options.user}`);
+  let db = null;
+  try {
+    db = await createDb({
+      adapter: buildAdapter(options.dir),
+      user: options.user,
+      secret
+    });
+    const compartment = await db.openCompartment(options.compartment);
+    const serialized = await compartment.dump();
+    await fs6.mkdir(path5.dirname(absolutePath), { recursive: true });
+    await fs6.writeFile(absolutePath, serialized, "utf8");
+    return {
+      path: absolutePath,
+      bytes: Buffer.byteLength(serialized, "utf8")
+    };
+  } finally {
+    db?.close();
+  }
+}
+export {
+  SUPPORTED_LOCALES,
+  addCollection,
+  addUser,
+  assertRole,
+  backup,
+  detectLocale,
+  loadMessages,
+  parseCollectionList,
+  parseLocaleFlag,
+  resolveBackupTarget,
+  rotate,
+  runWizard,
+  verifyIntegrity
+};
+//# sourceMappingURL=index.js.map