create-vexcms 0.0.3

package/dist/index.js

@@ -0,0 +1,2409 @@
+#!/usr/bin/env node
+
+// src/index.ts
+import { Command } from "commander";
+import chalk2 from "chalk";
+import { input, select, confirm, checkbox } from "@inquirer/prompts";
+import path2 from "path";
+import fs5 from "fs-extra";
+
+// src/utils/validation.ts
+import validateNpmPackageName from "validate-npm-package-name";
+import fs from "fs-extra";
+function validateProjectName(name) {
+  const result = validateNpmPackageName(name);
+  if (result.validForNewPackages) {
+    return { valid: true, errors: [] };
+  }
+  const errors = [];
+  if (result.errors) {
+    errors.push(...result.errors);
+  }
+  if (result.warnings) {
+    errors.push(...result.warnings);
+  }
+  return { valid: false, errors };
+}
+async function checkDirectoryExists(targetPath) {
+  return await fs.pathExists(targetPath);
+}
+async function isDirectoryEmpty(dirPath) {
+  try {
+    const files = await fs.readdir(dirPath);
+    const visibleFiles = files.filter((file) => !file.startsWith("."));
+    return visibleFiles.length === 0;
+  } catch (error) {
+    return true;
+  }
+}
+function resolveProjectName(input2, cwd) {
+  return input2;
+}
+
+// src/utils/messages.ts
+import chalk from "chalk";
+function displayInvalidNameError(name, errors) {
+  console.error();
+  console.error(chalk.red(`Error: Invalid project name '${name}'.`));
+  console.error();
+  if (errors.length > 0) {
+    console.error(chalk.yellow("Validation errors:"));
+    errors.forEach((error) => {
+      console.error(chalk.yellow(`  - ${error}`));
+    });
+    console.error();
+  }
+  console.error(chalk.yellow("Project names must be valid npm package names."));
+  console.error(chalk.yellow("They should be lowercase, contain no spaces, and use hyphens for word separation."));
+  console.error();
+  process.exit(1);
+}
+function displayDirectoryNotEmptyError() {
+  console.error();
+  console.error(chalk.red("Error: Current directory is not empty."));
+  console.error(chalk.yellow("Please use a different directory or provide a project name."));
+  console.error();
+  process.exit(1);
+}
+function displaySuccessMessage(projectName, targetPath, isCurrentDir) {
+  console.log();
+  if (isCurrentDir) {
+    console.log(chalk.green(`\u2713 Successfully created project '${projectName}' in current directory`));
+  } else {
+    console.log(chalk.green(`\u2713 Successfully created project '${projectName}' at ${targetPath}`));
+  }
+  console.log();
+}
+
+// src/installers/base.ts
+import fs3 from "fs-extra";
+import { execa } from "execa";
+import ora from "ora";
+import crypto from "crypto";
+import path from "path";
+
+// src/helpers/fileOperations.ts
+import fs2 from "fs-extra";
+import { join, dirname } from "path";
+import { fileURLToPath } from "url";
+async function copyTemplate(framework, targetPath) {
+  const __filename = fileURLToPath(import.meta.url);
+  const __dirname = dirname(__filename);
+  const templateDir = framework === "tanstack" ? "base-tanstack" : "base-nextjs";
+  let templatePath = join(__dirname, "../../templates", templateDir);
+  if (!fs2.existsSync(templatePath)) {
+    templatePath = join(__dirname, "../templates", templateDir);
+  }
+  await fs2.copy(templatePath, targetPath, {
+    overwrite: false,
+    errorOnExist: false,
+    filter: (src) => {
+      return !src.endsWith("_gitignore");
+    }
+  });
+  const sourceGitignore = join(templatePath, "_gitignore");
+  const targetGitignore = join(targetPath, ".gitignore");
+  if (await fs2.pathExists(sourceGitignore)) {
+    await fs2.copy(sourceGitignore, targetGitignore, {
+      overwrite: false,
+      errorOnExist: false
+    });
+  }
+}
+async function overlayTemplate({ overlayDir, targetDir }) {
+  await fs2.copy(overlayDir, targetDir, { overwrite: true });
+}
+
+// src/installers/base.ts
+var VexFrameworkInstaller = class {
+  constructor(targetPath, projectName) {
+    this.targetPath = targetPath;
+    this.projectName = projectName;
+  }
+  /**
+   * Copy base template files to target directory
+   */
+  async copyBaseFiles() {
+    await copyTemplate(this.frameworkName, this.targetPath);
+  }
+  /**
+   * Apply a template overlay on top of the base template.
+   * Merges overlay files onto the already-copied base — existing files
+   * not in the overlay are left untouched.
+   */
+  async applyTemplateOverlay(overlay) {
+    const { dirname: dirname2 } = await import("path");
+    const { fileURLToPath: fileURLToPath2 } = await import("url");
+    const __filename = fileURLToPath2(import.meta.url);
+    const __dirname = dirname2(__filename);
+    let overlayDir = path.join(__dirname, "../../templates", overlay);
+    if (!await fs3.pathExists(overlayDir)) {
+      overlayDir = path.join(__dirname, "../templates", overlay);
+    }
+    await overlayTemplate({ overlayDir, targetDir: this.targetPath });
+  }
+  /**
+   * Update the package.json name field and vex:update script
+   * to match the detected package manager.
+   */
+  async updatePackageName(name) {
+    const pkgPath = path.join(this.targetPath, "package.json");
+    const pkg = await fs3.readJson(pkgPath);
+    pkg.name = name;
+    const pm = this.detectPackageManager();
+    if (pkg.scripts?.["vex:update"] && pm !== "pnpm") {
+      const addCmd = pm === "yarn" ? "yarn add" : pm === "bun" ? "bun add" : "npm install";
+      pkg.scripts["vex:update"] = pkg.scripts["vex:update"].replace(/^pnpm add/, addCmd);
+    }
+    await fs3.writeJson(pkgPath, pkg, { spaces: 2 });
+  }
+  /**
+   * Detect the package manager used to invoke the CLI
+   */
+  detectPackageManager() {
+    const userAgent = process.env.npm_config_user_agent;
+    if (userAgent) {
+      if (userAgent.includes("pnpm")) return "pnpm";
+      if (userAgent.includes("yarn")) return "yarn";
+      if (userAgent.includes("bun")) return "bun";
+    }
+    return "npm";
+  }
+  /**
+   * Install project dependencies using detected package manager
+   */
+  async installDependencies() {
+    const packageManager = this.detectPackageManager();
+    const spinner = ora(`Installing dependencies with ${packageManager}...`).start();
+    try {
+      await execa(packageManager, ["install"], {
+        cwd: this.targetPath,
+        stdio: "pipe"
+      });
+      spinner.succeed("Dependencies installed successfully");
+    } catch (error) {
+      spinner.fail("Failed to install dependencies");
+      throw new Error(
+        `Dependency installation failed: ${error instanceof Error ? error.message : "Unknown error"}`
+      );
+    }
+  }
+  /**
+   * Format code using project's formatter
+   */
+  async formatCode() {
+    const packageManager = this.detectPackageManager();
+    const spinner = ora("Formatting code...").start();
+    try {
+      const result = await execa(packageManager, ["run", "format"], {
+        cwd: this.targetPath,
+        stdio: "pipe",
+        reject: false
+      });
+      if (result.exitCode === 0) {
+        spinner.succeed("Code formatted successfully");
+      } else {
+        spinner.warn("Formatting completed with warnings");
+      }
+    } catch (error) {
+      const errorMessage = error instanceof Error ? error.message : "Unknown error";
+      spinner.warn(`Failed to format code: ${errorMessage}`);
+    }
+  }
+  /**
+   * Lint and fix code using project's ESLint configuration
+   */
+  async lintCode() {
+    const packageManager = this.detectPackageManager();
+    const spinner = ora("Linting and fixing code...").start();
+    try {
+      const args2 = packageManager === "pnpm" ? ["lint", "--fix"] : ["run", "lint", "--", "--fix"];
+      const result = await execa(packageManager, args2, {
+        cwd: this.targetPath,
+        stdio: "pipe",
+        reject: false
+      });
+      if (result.exitCode === 0) {
+        spinner.succeed("Code linted and fixed successfully");
+      } else {
+        spinner.warn("Linting completed with warnings");
+      }
+    } catch (error) {
+      const errorMessage = error instanceof Error ? error.message : "Unknown error";
+      spinner.warn(`Failed to lint code: ${errorMessage}`);
+    }
+  }
+  /**
+   * Initialize Git repository in target directory
+   */
+  async initGitRepo() {
+    const spinner = ora("Initializing Git repository...").start();
+    try {
+      try {
+        await execa("git", ["--version"], { stdio: "pipe" });
+      } catch {
+        spinner.fail("Git is not installed");
+        throw new Error("Git is not installed. Please install Git to initialize a repository.");
+      }
+      await execa("git", ["init"], { cwd: this.targetPath, stdio: "pipe" });
+      await execa("git", ["add", "."], { cwd: this.targetPath, stdio: "pipe" });
+      await execa(
+        "git",
+        ["commit", "-m", "Initial commit from create-vexcms"],
+        { cwd: this.targetPath, stdio: "pipe" }
+      );
+      spinner.succeed("Git repository initialized");
+    } catch (error) {
+      spinner.fail("Failed to initialize Git repository");
+      throw new Error(
+        `Git initialization failed: ${error instanceof Error ? error.message : "Unknown error"}`
+      );
+    }
+  }
+  /**
+   * Generate a secure random secret for Better Auth
+   */
+  generateAuthSecret() {
+    return crypto.randomBytes(32).toString("hex");
+  }
+  /**
+   * Write the generated auth secret to .env.example
+   */
+  async writeAuthSecret() {
+    const envPath = path.join(this.targetPath, ".env.example");
+    const secret = this.generateAuthSecret();
+    if (await fs3.pathExists(envPath)) {
+      let content = await fs3.readFile(envPath, "utf-8");
+      content = content.replace(
+        /BETTER_AUTH_SECRET=.*/,
+        `BETTER_AUTH_SECRET=${secret}`
+      );
+      await fs3.writeFile(envPath, content);
+    }
+  }
+  /**
+   * Configure the Better Auth organizations plugin.
+   * When enabled, replaces placeholders with organization import and plugin.
+   * When disabled, removes the placeholder lines.
+   */
+  async configureOrganizations(enabled) {
+    const pluginsPath = path.join(this.targetPath, "convex/auth/plugins/index.ts");
+    if (!await fs3.pathExists(pluginsPath)) return;
+    let content = await fs3.readFile(pluginsPath, "utf-8");
+    if (enabled) {
+      content = content.replace(
+        "// {{ORGANIZATIONS_IMPORT}}",
+        'import { organization } from "better-auth/plugins"'
+      );
+      content = content.replace(
+        "  // {{ORGANIZATIONS_PLUGIN}}",
+        "  organization(),"
+      );
+    } else {
+      content = content.replace(/.*\/\/ \{\{ORGANIZATIONS_IMPORT\}\}\n?/, "");
+      content = content.replace(/.*\/\/ \{\{ORGANIZATIONS_PLUGIN\}\}\n?/, "");
+    }
+    await fs3.writeFile(pluginsPath, content);
+  }
+  /**
+   * Main orchestration method for project initialization
+   */
+  async initProject(options) {
+    const copySpinner = ora("Copying template files...").start();
+    try {
+      await this.copyBaseFiles();
+      copySpinner.succeed("Template files copied");
+    } catch (error) {
+      copySpinner.fail("Failed to copy template files");
+      throw error;
+    }
+    if (!options.bare) {
+      const overlaySpinner = ora("Applying marketing site template...").start();
+      try {
+        await this.applyTemplateOverlay("marketing-site");
+        overlaySpinner.succeed("Marketing site template applied");
+      } catch (error) {
+        overlaySpinner.fail("Failed to apply template overlay");
+        throw error;
+      }
+    }
+    const nameSpinner = ora("Configuring project...").start();
+    try {
+      await this.updatePackageName(options.projectName);
+      nameSpinner.succeed("Project configured");
+    } catch (error) {
+      nameSpinner.fail("Failed to configure project");
+      throw error;
+    }
+    const authSpinner = ora("Configuring authentication...").start();
+    try {
+      await this.updateOAuthConfig(options.oauthProviders, options.emailPasswordAuth);
+      authSpinner.succeed(
+        options.emailPasswordAuth || options.oauthProviders.length > 0 ? "Authentication configuration updated" : "Authentication placeholders cleaned up"
+      );
+    } catch (error) {
+      authSpinner.fail("Failed to configure authentication");
+      throw error;
+    }
+    const oauthUISpinner = ora("Configuring OAuth UI...").start();
+    try {
+      await this.updateOAuthUIConfig(options.oauthProviders, options.emailPasswordAuth);
+      oauthUISpinner.succeed(
+        options.oauthProviders.length > 0 ? "OAuth UI configuration updated" : "OAuth UI placeholders cleaned up"
+      );
+    } catch (error) {
+      oauthUISpinner.fail("Failed to configure OAuth UI");
+      throw error;
+    }
+    const envSpinner = ora("Updating .env.example...").start();
+    try {
+      await this.updateEnvExample(options.oauthProviders);
+      envSpinner.succeed(
+        options.oauthProviders.length > 0 ? ".env.example updated" : ".env.example placeholders cleaned up"
+      );
+    } catch (error) {
+      envSpinner.fail("Failed to update .env.example");
+      throw error;
+    }
+    const envTsSpinner = ora("Updating typed env configuration...").start();
+    try {
+      await this.updateEnvTs(options.oauthProviders);
+      envTsSpinner.succeed(
+        options.oauthProviders.length > 0 ? "Typed env configuration updated" : "Typed env placeholders cleaned up"
+      );
+    } catch (error) {
+      envTsSpinner.fail("Failed to update typed env configuration");
+      throw error;
+    }
+    const readmeSpinner = ora("Updating README...").start();
+    try {
+      await this.updateReadme(options.oauthProviders);
+      readmeSpinner.succeed(
+        options.oauthProviders.length > 0 ? "README updated" : "README placeholders cleaned up"
+      );
+    } catch (error) {
+      readmeSpinner.fail("Failed to update README");
+      throw error;
+    }
+    const orgsSpinner = ora("Configuring organizations...").start();
+    try {
+      await this.configureOrganizations(options.orgs);
+      orgsSpinner.succeed(
+        options.orgs ? "Organizations plugin enabled" : "Organizations placeholders cleaned up"
+      );
+    } catch (error) {
+      orgsSpinner.fail("Failed to configure organizations");
+      throw error;
+    }
+    const secretSpinner = ora("Generating auth secret...").start();
+    try {
+      await this.writeAuthSecret();
+      secretSpinner.succeed("Auth secret generated");
+    } catch (error) {
+      secretSpinner.fail("Failed to generate auth secret");
+      throw error;
+    }
+    if (options.initGit) {
+      await this.initGitRepo();
+    }
+    if (options.installDependencies) {
+      await this.installDependencies();
+      await this.lintCode();
+      await this.formatCode();
+    }
+  }
+};
+
+// src/installers/nextjs.ts
+import { join as join2 } from "path";
+
+// src/installers/string-utils.ts
+import fs4 from "fs-extra";
+
+// src/installers/providers.ts
+var OAUTH_PROVIDERS = {
+  // ========================================
+  // POPULAR PROVIDERS (10)
+  // ========================================
+  google: {
+    id: "google",
+    name: "Google",
+    envPrefix: "GOOGLE",
+    clientIdVar: "GOOGLE_CLIENT_ID",
+    clientSecretVar: "GOOGLE_CLIENT_SECRET",
+    popular: true,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"google"',
+      socialProvider: `google({
+      clientId: process.env.GOOGLE_CLIENT_ID!,
+      clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "GOOGLE_CLIENT_ID",
+        type: "server",
+        description: "Google OAuth Client ID"
+      },
+      {
+        name: "GOOGLE_CLIENT_SECRET",
+        type: "server",
+        description: "Google OAuth Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://console.cloud.google.com/apis/credentials",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "",
+    readme: {
+      title: "Google OAuth Setup",
+      content: `## Google OAuth Setup
+
+1. Create OAuth credentials at https://console.cloud.google.com/apis/credentials
+2. Set the Authorized redirect URI to: \`http://localhost:3000/api/auth/callback/google\` (update for production)
+3. Copy the Client ID and Client Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  github: {
+    id: "github",
+    name: "GitHub",
+    envPrefix: "GITHUB",
+    clientIdVar: "GITHUB_CLIENT_ID",
+    clientSecretVar: "GITHUB_CLIENT_SECRET",
+    popular: true,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"github"',
+      socialProvider: `github({
+      clientId: process.env.GITHUB_CLIENT_ID!,
+      clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+    })`,
+      scopes: ["user:email"]
+    },
+    env: [
+      {
+        name: "GITHUB_CLIENT_ID",
+        type: "server",
+        description: "GitHub OAuth App Client ID"
+      },
+      {
+        name: "GITHUB_CLIENT_SECRET",
+        type: "server",
+        description: "GitHub OAuth App Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://docs.github.com/en/apps/oauth-apps/building-oauth-apps/creating-an-oauth-app",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: true,
+    extraConfigNotes: "You MUST include the user:email scope in your GitHub app. For GitHub Apps, enable Read-Only access to Email Addresses in Permissions.",
+    readme: {
+      title: "GitHub OAuth Setup",
+      content: `## GitHub OAuth Setup
+
+1. Create a GitHub OAuth App at https://github.com/settings/developers
+2. Set the Authorization callback URL to: \`http://localhost:3000/api/auth/callback/github\` (update for production)
+3. Copy the Client ID and Client Secret to your \`.env\` file
+4. **Important**: Include the \`user:email\` scope in your GitHub app permissions
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  discord: {
+    id: "discord",
+    name: "Discord",
+    envPrefix: "DISCORD",
+    clientIdVar: "DISCORD_CLIENT_ID",
+    clientSecretVar: "DISCORD_CLIENT_SECRET",
+    popular: true,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"discord"',
+      socialProvider: `discord({
+      clientId: process.env.DISCORD_CLIENT_ID!,
+      clientSecret: process.env.DISCORD_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "DISCORD_CLIENT_ID",
+        type: "server",
+        description: "Discord OAuth Application Client ID"
+      },
+      {
+        name: "DISCORD_CLIENT_SECRET",
+        type: "server",
+        description: "Discord OAuth Application Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://discord.com/developers/applications",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "You can optionally add a permissions field to request additional Discord permissions.",
+    readme: {
+      title: "Discord OAuth Setup",
+      content: `## Discord OAuth Setup
+
+1. Create an application at https://discord.com/developers/applications
+2. Add a redirect URL: \`http://localhost:3000/api/auth/callback/discord\` (update for production)
+3. Copy the Client ID and Client Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  apple: {
+    id: "apple",
+    name: "Apple",
+    envPrefix: "APPLE",
+    clientIdVar: "APPLE_CLIENT_ID",
+    clientSecretVar: "APPLE_CLIENT_SECRET",
+    popular: true,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"apple"',
+      socialProvider: `apple({
+      clientId: process.env.APPLE_CLIENT_ID!,
+      clientSecret: process.env.APPLE_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "APPLE_CLIENT_ID",
+        type: "server",
+        description: "Apple Sign In Service ID"
+      },
+      {
+        name: "APPLE_CLIENT_SECRET",
+        type: "server",
+        description: "Apple Sign In Client Secret (JWT token)"
+      }
+    ],
+    docs: {
+      provider: "https://developer.apple.com/sign-in-with-apple/get-started/",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: true,
+    extraConfigNotes: "Apple requires additional configuration: clientId is your Service ID, clientSecret must be a JWT token generated from your Team ID, Key ID, and Private Key. You may also need to provide appBundleIdentifier for iOS apps.",
+    readme: {
+      title: "Apple Sign In Setup",
+      content: `## Apple Sign In Setup
+
+1. Create a Sign In with Apple service at https://developer.apple.com
+2. Configure your Service ID and return URLs
+3. Generate a client secret JWT using your private key, Team ID, and Key ID
+4. Add credentials to your \`.env\` file
+
+**Note**: The clientSecret must be a JWT token generated from your Apple credentials, not a standard client secret.
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  microsoft: {
+    id: "microsoft",
+    name: "Microsoft",
+    envPrefix: "MICROSOFT",
+    clientIdVar: "MICROSOFT_CLIENT_ID",
+    clientSecretVar: "MICROSOFT_CLIENT_SECRET",
+    popular: true,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"microsoft"',
+      socialProvider: `microsoft({
+      clientId: process.env.MICROSOFT_CLIENT_ID!,
+      clientSecret: process.env.MICROSOFT_CLIENT_SECRET!,
+      tenantId: process.env.MICROSOFT_TENANT_ID,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "MICROSOFT_CLIENT_ID",
+        type: "server",
+        description: "Microsoft Entra ID Application (client) ID"
+      },
+      {
+        name: "MICROSOFT_CLIENT_SECRET",
+        type: "server",
+        description: "Microsoft Entra ID Client Secret"
+      },
+      {
+        name: "MICROSOFT_TENANT_ID",
+        type: "server",
+        description: 'Microsoft Entra ID Tenant ID (optional, defaults to "common")'
+      }
+    ],
+    docs: {
+      provider: "https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: true,
+    extraConfigNotes: 'Optional fields: tenantId (defaults to "common"), authority (custom authority URL), prompt (consent behavior).',
+    readme: {
+      title: "Microsoft Entra ID OAuth Setup",
+      content: `## Microsoft Entra ID OAuth Setup
+
+1. Register an application at https://portal.azure.com
+2. Add a redirect URI: \`http://localhost:3000/api/auth/callback/microsoft\` (update for production)
+3. Create a client secret in "Certificates & secrets"
+4. Copy the Application (client) ID and Client Secret to your \`.env\` file
+5. (Optional) Copy the Directory (tenant) ID if you want to restrict to a specific tenant
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  facebook: {
+    id: "facebook",
+    name: "Facebook",
+    envPrefix: "FACEBOOK",
+    clientIdVar: "FACEBOOK_CLIENT_ID",
+    clientSecretVar: "FACEBOOK_CLIENT_SECRET",
+    popular: true,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"facebook"',
+      socialProvider: `facebook({
+      clientId: process.env.FACEBOOK_CLIENT_ID!,
+      clientSecret: process.env.FACEBOOK_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "FACEBOOK_CLIENT_ID",
+        type: "server",
+        description: "Facebook App ID"
+      },
+      {
+        name: "FACEBOOK_CLIENT_SECRET",
+        type: "server",
+        description: "Facebook App Secret"
+      }
+    ],
+    docs: {
+      provider: "https://developers.facebook.com/apps/",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "Facebook supports custom scopes and fields arrays to request additional user data.",
+    readme: {
+      title: "Facebook OAuth Setup",
+      content: `## Facebook OAuth Setup
+
+1. Create an app at https://developers.facebook.com/apps/
+2. Add Facebook Login product to your app
+3. Add OAuth redirect URI: \`http://localhost:3000/api/auth/callback/facebook\` (update for production)
+4. Copy the App ID and App Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  twitter: {
+    id: "twitter",
+    name: "Twitter/X",
+    envPrefix: "TWITTER",
+    clientIdVar: "TWITTER_CLIENT_ID",
+    clientSecretVar: "TWITTER_CLIENT_SECRET",
+    popular: true,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"twitter"',
+      socialProvider: `twitter({
+      clientId: process.env.TWITTER_CLIENT_ID!,
+      clientSecret: process.env.TWITTER_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "TWITTER_CLIENT_ID",
+        type: "server",
+        description: "Twitter/X OAuth 2.0 Client ID"
+      },
+      {
+        name: "TWITTER_CLIENT_SECRET",
+        type: "server",
+        description: "Twitter/X OAuth 2.0 Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://developer.twitter.com/en/portal/projects-and-apps",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "",
+    readme: {
+      title: "Twitter/X OAuth Setup",
+      content: `## Twitter/X OAuth Setup
+
+1. Create an app at https://developer.twitter.com/en/portal/projects-and-apps
+2. Enable OAuth 2.0 authentication
+3. Add callback URL: \`http://localhost:3000/api/auth/callback/twitter\` (update for production)
+4. Copy the Client ID and Client Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  linkedin: {
+    id: "linkedin",
+    name: "LinkedIn",
+    envPrefix: "LINKEDIN",
+    clientIdVar: "LINKEDIN_CLIENT_ID",
+    clientSecretVar: "LINKEDIN_CLIENT_SECRET",
+    popular: true,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"linkedin"',
+      socialProvider: `linkedin({
+      clientId: process.env.LINKEDIN_CLIENT_ID!,
+      clientSecret: process.env.LINKEDIN_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "LINKEDIN_CLIENT_ID",
+        type: "server",
+        description: "LinkedIn OAuth Client ID"
+      },
+      {
+        name: "LINKEDIN_CLIENT_SECRET",
+        type: "server",
+        description: "LinkedIn OAuth Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://www.linkedin.com/developers/apps",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "",
+    readme: {
+      title: "LinkedIn OAuth Setup",
+      content: `## LinkedIn OAuth Setup
+
+1. Create an app at https://www.linkedin.com/developers/apps
+2. Add redirect URL: \`http://localhost:3000/api/auth/callback/linkedin\` (update for production)
+3. Request access to Sign In with LinkedIn
+4. Copy the Client ID and Client Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  twitch: {
+    id: "twitch",
+    name: "Twitch",
+    envPrefix: "TWITCH",
+    clientIdVar: "TWITCH_CLIENT_ID",
+    clientSecretVar: "TWITCH_CLIENT_SECRET",
+    popular: true,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"twitch"',
+      socialProvider: `twitch({
+      clientId: process.env.TWITCH_CLIENT_ID!,
+      clientSecret: process.env.TWITCH_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "TWITCH_CLIENT_ID",
+        type: "server",
+        description: "Twitch Application Client ID"
+      },
+      {
+        name: "TWITCH_CLIENT_SECRET",
+        type: "server",
+        description: "Twitch Application Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://dev.twitch.tv/console/apps",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "",
+    readme: {
+      title: "Twitch OAuth Setup",
+      content: `## Twitch OAuth Setup
+
+1. Register an application at https://dev.twitch.tv/console/apps
+2. Set OAuth Redirect URL to: \`http://localhost:3000/api/auth/callback/twitch\` (update for production)
+3. Copy the Client ID and generate a Client Secret
+4. Add credentials to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  spotify: {
+    id: "spotify",
+    name: "Spotify",
+    envPrefix: "SPOTIFY",
+    clientIdVar: "SPOTIFY_CLIENT_ID",
+    clientSecretVar: "SPOTIFY_CLIENT_SECRET",
+    popular: true,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"spotify"',
+      socialProvider: `spotify({
+      clientId: process.env.SPOTIFY_CLIENT_ID!,
+      clientSecret: process.env.SPOTIFY_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "SPOTIFY_CLIENT_ID",
+        type: "server",
+        description: "Spotify App Client ID"
+      },
+      {
+        name: "SPOTIFY_CLIENT_SECRET",
+        type: "server",
+        description: "Spotify App Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://developer.spotify.com/dashboard/applications",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "",
+    readme: {
+      title: "Spotify OAuth Setup",
+      content: `## Spotify OAuth Setup
+
+1. Create an app at https://developer.spotify.com/dashboard/applications
+2. Add redirect URI: \`http://localhost:3000/api/auth/callback/spotify\` (update for production)
+3. Copy the Client ID and Client Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  // ========================================
+  // ADDITIONAL PROVIDERS (23)
+  // ========================================
+  atlassian: {
+    id: "atlassian",
+    name: "Atlassian",
+    envPrefix: "ATLASSIAN",
+    clientIdVar: "ATLASSIAN_CLIENT_ID",
+    clientSecretVar: "ATLASSIAN_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"atlassian"',
+      socialProvider: `atlassian({
+      clientId: process.env.ATLASSIAN_CLIENT_ID!,
+      clientSecret: process.env.ATLASSIAN_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "ATLASSIAN_CLIENT_ID",
+        type: "server",
+        description: "Atlassian OAuth 2.0 Client ID"
+      },
+      {
+        name: "ATLASSIAN_CLIENT_SECRET",
+        type: "server",
+        description: "Atlassian OAuth 2.0 Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://developer.atlassian.com/console/myapps/",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "Default scopes include read:jira-user, read:jira-work, and offline_access.",
+    readme: {
+      title: "Atlassian OAuth Setup",
+      content: `## Atlassian OAuth Setup
+
+1. Create an app at https://developer.atlassian.com/console/myapps/
+2. Configure OAuth 2.0 integration
+3. Add callback URL: \`http://localhost:3000/api/auth/callback/atlassian\` (update for production)
+4. Copy the Client ID and Client Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  cognito: {
+    id: "cognito",
+    name: "AWS Cognito",
+    envPrefix: "COGNITO",
+    clientIdVar: "COGNITO_CLIENT_ID",
+    clientSecretVar: "COGNITO_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"cognito"',
+      socialProvider: `cognito({
+      clientId: process.env.COGNITO_CLIENT_ID!,
+      clientSecret: process.env.COGNITO_CLIENT_SECRET!,
+      domain: process.env.COGNITO_DOMAIN!,
+      region: process.env.COGNITO_REGION!,
+      userPoolId: process.env.COGNITO_USER_POOL_ID!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "COGNITO_CLIENT_ID",
+        type: "server",
+        description: "AWS Cognito App Client ID"
+      },
+      {
+        name: "COGNITO_CLIENT_SECRET",
+        type: "server",
+        description: "AWS Cognito App Client Secret"
+      },
+      {
+        name: "COGNITO_DOMAIN",
+        type: "server",
+        description: "AWS Cognito domain (e.g., your-domain.auth.us-east-1.amazoncognito.com)"
+      },
+      {
+        name: "COGNITO_REGION",
+        type: "server",
+        description: "AWS region (e.g., us-east-1)"
+      },
+      {
+        name: "COGNITO_USER_POOL_ID",
+        type: "server",
+        description: "AWS Cognito User Pool ID"
+      }
+    ],
+    docs: {
+      provider: "https://console.aws.amazon.com/cognito/",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: true,
+    extraConfigNotes: "AWS Cognito requires domain, region, and userPoolId in addition to clientId and clientSecret.",
+    readme: {
+      title: "AWS Cognito OAuth Setup",
+      content: `## AWS Cognito OAuth Setup
+
+1. Create a User Pool at https://console.aws.amazon.com/cognito/
+2. Configure an App Client with OAuth 2.0 flows
+3. Set up a Cognito domain for your user pool
+4. Add callback URL: \`http://localhost:3000/api/auth/callback/cognito\` (update for production)
+5. Copy the following to your \`.env\` file:
+   - App Client ID
+   - App Client Secret
+   - Cognito Domain
+   - AWS Region
+   - User Pool ID
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  dropbox: {
+    id: "dropbox",
+    name: "Dropbox",
+    envPrefix: "DROPBOX",
+    clientIdVar: "DROPBOX_CLIENT_ID",
+    clientSecretVar: "DROPBOX_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"dropbox"',
+      socialProvider: `dropbox({
+      clientId: process.env.DROPBOX_CLIENT_ID!,
+      clientSecret: process.env.DROPBOX_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "DROPBOX_CLIENT_ID",
+        type: "server",
+        description: "Dropbox App Key"
+      },
+      {
+        name: "DROPBOX_CLIENT_SECRET",
+        type: "server",
+        description: "Dropbox App Secret"
+      }
+    ],
+    docs: {
+      provider: "https://www.dropbox.com/developers/apps",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "",
+    readme: {
+      title: "Dropbox OAuth Setup",
+      content: `## Dropbox OAuth Setup
+
+1. Create an app at https://www.dropbox.com/developers/apps
+2. Choose OAuth 2 settings
+3. Add redirect URI: \`http://localhost:3000/api/auth/callback/dropbox\` (update for production)
+4. Copy the App Key and App Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  figma: {
+    id: "figma",
+    name: "Figma",
+    envPrefix: "FIGMA",
+    clientIdVar: "FIGMA_CLIENT_ID",
+    clientSecretVar: "FIGMA_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"figma"',
+      socialProvider: `figma({
+      clientId: process.env.FIGMA_CLIENT_ID!,
+      clientSecret: process.env.FIGMA_CLIENT_SECRET!,
+      clientKey: process.env.FIGMA_CLIENT_KEY!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "FIGMA_CLIENT_ID",
+        type: "server",
+        description: "Figma OAuth Client ID"
+      },
+      {
+        name: "FIGMA_CLIENT_SECRET",
+        type: "server",
+        description: "Figma OAuth Client Secret"
+      },
+      {
+        name: "FIGMA_CLIENT_KEY",
+        type: "server",
+        description: "Figma OAuth Client Key"
+      }
+    ],
+    docs: {
+      provider: "https://www.figma.com/developers/apps",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: true,
+    extraConfigNotes: "Figma requires a clientKey in addition to clientId and clientSecret.",
+    readme: {
+      title: "Figma OAuth Setup",
+      content: `## Figma OAuth Setup
+
+1. Create an app at https://www.figma.com/developers/apps
+2. Configure OAuth settings
+3. Add callback URL: \`http://localhost:3000/api/auth/callback/figma\` (update for production)
+4. Copy the Client ID, Client Secret, and Client Key to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  gitlab: {
+    id: "gitlab",
+    name: "GitLab",
+    envPrefix: "GITLAB",
+    clientIdVar: "GITLAB_CLIENT_ID",
+    clientSecretVar: "GITLAB_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"gitlab"',
+      socialProvider: `gitlab({
+      clientId: process.env.GITLAB_CLIENT_ID!,
+      clientSecret: process.env.GITLAB_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "GITLAB_CLIENT_ID",
+        type: "server",
+        description: "GitLab Application ID"
+      },
+      {
+        name: "GITLAB_CLIENT_SECRET",
+        type: "server",
+        description: "GitLab Application Secret"
+      }
+    ],
+    docs: {
+      provider: "https://gitlab.com/-/profile/applications",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "Optionally supports an issuer field for self-hosted GitLab instances.",
+    readme: {
+      title: "GitLab OAuth Setup",
+      content: `## GitLab OAuth Setup
+
+1. Create an application at https://gitlab.com/-/profile/applications
+2. Add redirect URI: \`http://localhost:3000/api/auth/callback/gitlab\` (update for production)
+3. Select the required scopes (read_user is recommended)
+4. Copy the Application ID and Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  huggingface: {
+    id: "huggingface",
+    name: "Hugging Face",
+    envPrefix: "HUGGINGFACE",
+    clientIdVar: "HUGGINGFACE_CLIENT_ID",
+    clientSecretVar: "HUGGINGFACE_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"huggingface"',
+      socialProvider: `huggingface({
+      clientId: process.env.HUGGINGFACE_CLIENT_ID!,
+      clientSecret: process.env.HUGGINGFACE_CLIENT_SECRET!,
+    })`,
+      scopes: ["email"]
+    },
+    env: [
+      {
+        name: "HUGGINGFACE_CLIENT_ID",
+        type: "server",
+        description: "Hugging Face OAuth Client ID"
+      },
+      {
+        name: "HUGGINGFACE_CLIENT_SECRET",
+        type: "server",
+        description: "Hugging Face OAuth Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://huggingface.co/settings/connected-applications",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: true,
+    extraConfigNotes: "You MUST include the email scope for Hugging Face.",
+    readme: {
+      title: "Hugging Face OAuth Setup",
+      content: `## Hugging Face OAuth Setup
+
+1. Create an OAuth app at https://huggingface.co/settings/connected-applications
+2. Set redirect URI to: \`http://localhost:3000/api/auth/callback/huggingface\` (update for production)
+3. Copy the Client ID and Client Secret to your \`.env\` file
+4. **Important**: Make sure to include the \`email\` scope in your configuration
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  kakao: {
+    id: "kakao",
+    name: "Kakao",
+    envPrefix: "KAKAO",
+    clientIdVar: "KAKAO_CLIENT_ID",
+    clientSecretVar: "KAKAO_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"kakao"',
+      socialProvider: `kakao({
+      clientId: process.env.KAKAO_CLIENT_ID!,
+      clientSecret: process.env.KAKAO_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "KAKAO_CLIENT_ID",
+        type: "server",
+        description: "Kakao REST API Key"
+      },
+      {
+        name: "KAKAO_CLIENT_SECRET",
+        type: "server",
+        description: "Kakao Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://developers.kakao.com/console/app",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "",
+    readme: {
+      title: "Kakao OAuth Setup",
+      content: `## Kakao OAuth Setup
+
+1. Create an application at https://developers.kakao.com/console/app
+2. Enable Kakao Login in the app settings
+3. Add redirect URI: \`http://localhost:3000/api/auth/callback/kakao\` (update for production)
+4. Copy the REST API Key and Client Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  kick: {
+    id: "kick",
+    name: "Kick",
+    envPrefix: "KICK",
+    clientIdVar: "KICK_CLIENT_ID",
+    clientSecretVar: "KICK_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"kick"',
+      socialProvider: `kick({
+      clientId: process.env.KICK_CLIENT_ID!,
+      clientSecret: process.env.KICK_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "KICK_CLIENT_ID",
+        type: "server",
+        description: "Kick OAuth Client ID"
+      },
+      {
+        name: "KICK_CLIENT_SECRET",
+        type: "server",
+        description: "Kick OAuth Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://dev.kick.com/",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "",
+    readme: {
+      title: "Kick OAuth Setup",
+      content: `## Kick OAuth Setup
+
+1. Create an application at https://dev.kick.com/
+2. Configure OAuth settings
+3. Add redirect URI: \`http://localhost:3000/api/auth/callback/kick\` (update for production)
+4. Copy the Client ID and Client Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  line: {
+    id: "line",
+    name: "LINE",
+    envPrefix: "LINE",
+    clientIdVar: "LINE_CLIENT_ID",
+    clientSecretVar: "LINE_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"line"',
+      socialProvider: `line({
+      clientId: process.env.LINE_CLIENT_ID!,
+      clientSecret: process.env.LINE_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "LINE_CLIENT_ID",
+        type: "server",
+        description: "LINE Channel ID"
+      },
+      {
+        name: "LINE_CLIENT_SECRET",
+        type: "server",
+        description: "LINE Channel Secret"
+      }
+    ],
+    docs: {
+      provider: "https://developers.line.biz/console/",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "Supports multi-channel configuration.",
+    readme: {
+      title: "LINE OAuth Setup",
+      content: `## LINE OAuth Setup
+
+1. Create a channel at https://developers.line.biz/console/
+2. Enable LINE Login
+3. Add callback URL: \`http://localhost:3000/api/auth/callback/line\` (update for production)
+4. Copy the Channel ID and Channel Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  linear: {
+    id: "linear",
+    name: "Linear",
+    envPrefix: "LINEAR",
+    clientIdVar: "LINEAR_CLIENT_ID",
+    clientSecretVar: "LINEAR_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"linear"',
+      socialProvider: `linear({
+      clientId: process.env.LINEAR_CLIENT_ID!,
+      clientSecret: process.env.LINEAR_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "LINEAR_CLIENT_ID",
+        type: "server",
+        description: "Linear OAuth Client ID"
+      },
+      {
+        name: "LINEAR_CLIENT_SECRET",
+        type: "server",
+        description: "Linear OAuth Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://linear.app/settings/api",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "Supports custom scope options.",
+    readme: {
+      title: "Linear OAuth Setup",
+      content: `## Linear OAuth Setup
+
+1. Create an OAuth application at https://linear.app/settings/api
+2. Add redirect URL: \`http://localhost:3000/api/auth/callback/linear\` (update for production)
+3. Copy the Client ID and Client Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  naver: {
+    id: "naver",
+    name: "Naver",
+    envPrefix: "NAVER",
+    clientIdVar: "NAVER_CLIENT_ID",
+    clientSecretVar: "NAVER_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"naver"',
+      socialProvider: `naver({
+      clientId: process.env.NAVER_CLIENT_ID!,
+      clientSecret: process.env.NAVER_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "NAVER_CLIENT_ID",
+        type: "server",
+        description: "Naver Client ID"
+      },
+      {
+        name: "NAVER_CLIENT_SECRET",
+        type: "server",
+        description: "Naver Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://developers.naver.com/apps/",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "",
+    readme: {
+      title: "Naver OAuth Setup",
+      content: `## Naver OAuth Setup
+
+1. Register an application at https://developers.naver.com/apps/
+2. Configure Login API settings
+3. Add callback URL: \`http://localhost:3000/api/auth/callback/naver\` (update for production)
+4. Copy the Client ID and Client Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  notion: {
+    id: "notion",
+    name: "Notion",
+    envPrefix: "NOTION",
+    clientIdVar: "NOTION_CLIENT_ID",
+    clientSecretVar: "NOTION_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"notion"',
+      socialProvider: `notion({
+      clientId: process.env.NOTION_CLIENT_ID!,
+      clientSecret: process.env.NOTION_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "NOTION_CLIENT_ID",
+        type: "server",
+        description: "Notion OAuth Client ID"
+      },
+      {
+        name: "NOTION_CLIENT_SECRET",
+        type: "server",
+        description: "Notion OAuth Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://www.notion.so/my-integrations",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "",
+    readme: {
+      title: "Notion OAuth Setup",
+      content: `## Notion OAuth Setup
+
+1. Create an integration at https://www.notion.so/my-integrations
+2. Configure OAuth settings and capabilities
+3. Add redirect URI: \`http://localhost:3000/api/auth/callback/notion\` (update for production)
+4. Copy the OAuth Client ID and Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  paybin: {
+    id: "paybin",
+    name: "Paybin",
+    envPrefix: "PAYBIN",
+    clientIdVar: "PAYBIN_CLIENT_ID",
+    clientSecretVar: "PAYBIN_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"paybin"',
+      socialProvider: `paybin({
+      clientId: process.env.PAYBIN_CLIENT_ID!,
+      clientSecret: process.env.PAYBIN_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "PAYBIN_CLIENT_ID",
+        type: "server",
+        description: "Paybin OAuth Client ID"
+      },
+      {
+        name: "PAYBIN_CLIENT_SECRET",
+        type: "server",
+        description: "Paybin OAuth Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://paybin.io/",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "Uses OpenID Connect scopes.",
+    readme: {
+      title: "Paybin OAuth Setup",
+      content: `## Paybin OAuth Setup
+
+1. Create an application at https://paybin.io/
+2. Configure OAuth settings
+3. Add redirect URI: \`http://localhost:3000/api/auth/callback/paybin\` (update for production)
+4. Copy the Client ID and Client Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  paypal: {
+    id: "paypal",
+    name: "PayPal",
+    envPrefix: "PAYPAL",
+    clientIdVar: "PAYPAL_CLIENT_ID",
+    clientSecretVar: "PAYPAL_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"paypal"',
+      socialProvider: `paypal({
+      clientId: process.env.PAYPAL_CLIENT_ID!,
+      clientSecret: process.env.PAYPAL_CLIENT_SECRET!,
+      environment: process.env.PAYPAL_ENVIRONMENT || "sandbox",
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "PAYPAL_CLIENT_ID",
+        type: "server",
+        description: "PayPal REST API Client ID"
+      },
+      {
+        name: "PAYPAL_CLIENT_SECRET",
+        type: "server",
+        description: "PayPal REST API Secret"
+      },
+      {
+        name: "PAYPAL_ENVIRONMENT",
+        type: "server",
+        description: 'PayPal environment: "sandbox" or "live" (default: sandbox)'
+      }
+    ],
+    docs: {
+      provider: "https://developer.paypal.com/dashboard/applications",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: true,
+    extraConfigNotes: "PayPal supports environment (sandbox/live) and requestShippingAddress options.",
+    readme: {
+      title: "PayPal OAuth Setup",
+      content: `## PayPal OAuth Setup
+
+1. Create an app at https://developer.paypal.com/dashboard/applications
+2. Configure OAuth settings in the app
+3. Add return URL: \`http://localhost:3000/api/auth/callback/paypal\` (update for production)
+4. Copy the Client ID and Secret to your \`.env\` file
+5. Set PAYPAL_ENVIRONMENT to "sandbox" for testing or "live" for production
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  polar: {
+    id: "polar",
+    name: "Polar",
+    envPrefix: "POLAR",
+    clientIdVar: "POLAR_CLIENT_ID",
+    clientSecretVar: "POLAR_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"polar"',
+      socialProvider: `polar({
+      clientId: process.env.POLAR_CLIENT_ID!,
+      clientSecret: process.env.POLAR_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "POLAR_CLIENT_ID",
+        type: "server",
+        description: "Polar OAuth Client ID"
+      },
+      {
+        name: "POLAR_CLIENT_SECRET",
+        type: "server",
+        description: "Polar OAuth Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://polar.sh/",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "Uses OpenID Connect scopes.",
+    readme: {
+      title: "Polar OAuth Setup",
+      content: `## Polar OAuth Setup
+
+1. Create an OAuth application at https://polar.sh/
+2. Configure OAuth settings
+3. Add redirect URI: \`http://localhost:3000/api/auth/callback/polar\` (update for production)
+4. Copy the Client ID and Client Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  reddit: {
+    id: "reddit",
+    name: "Reddit",
+    envPrefix: "REDDIT",
+    clientIdVar: "REDDIT_CLIENT_ID",
+    clientSecretVar: "REDDIT_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"reddit"',
+      socialProvider: `reddit({
+      clientId: process.env.REDDIT_CLIENT_ID!,
+      clientSecret: process.env.REDDIT_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "REDDIT_CLIENT_ID",
+        type: "server",
+        description: "Reddit App Client ID"
+      },
+      {
+        name: "REDDIT_CLIENT_SECRET",
+        type: "server",
+        description: "Reddit App Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://www.reddit.com/prefs/apps",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "Supports duration and scope fields for custom access.",
+    readme: {
+      title: "Reddit OAuth Setup",
+      content: `## Reddit OAuth Setup
+
+1. Create an app at https://www.reddit.com/prefs/apps
+2. Choose "web app" as the app type
+3. Set redirect URI to: \`http://localhost:3000/api/auth/callback/reddit\` (update for production)
+4. Copy the Client ID (under app name) and Client Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  roblox: {
+    id: "roblox",
+    name: "Roblox",
+    envPrefix: "ROBLOX",
+    clientIdVar: "ROBLOX_CLIENT_ID",
+    clientSecretVar: "ROBLOX_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"roblox"',
+      socialProvider: `roblox({
+      clientId: process.env.ROBLOX_CLIENT_ID!,
+      clientSecret: process.env.ROBLOX_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "ROBLOX_CLIENT_ID",
+        type: "server",
+        description: "Roblox OAuth Client ID"
+      },
+      {
+        name: "ROBLOX_CLIENT_SECRET",
+        type: "server",
+        description: "Roblox OAuth Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://create.roblox.com/credentials",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: true,
+    extraConfigNotes: "Note: Roblox OAuth does not provide user email addresses.",
+    readme: {
+      title: "Roblox OAuth Setup",
+      content: `## Roblox OAuth Setup
+
+1. Create OAuth credentials at https://create.roblox.com/credentials
+2. Configure OAuth 2.0 settings
+3. Add redirect URI: \`http://localhost:3000/api/auth/callback/roblox\` (update for production)
+4. Copy the Client ID and Client Secret to your \`.env\` file
+
+**Note**: Roblox does not provide email addresses through OAuth.
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  salesforce: {
+    id: "salesforce",
+    name: "Salesforce",
+    envPrefix: "SALESFORCE",
+    clientIdVar: "SALESFORCE_CLIENT_ID",
+    clientSecretVar: "SALESFORCE_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"salesforce"',
+      socialProvider: `salesforce({
+      clientId: process.env.SALESFORCE_CLIENT_ID!,
+      clientSecret: process.env.SALESFORCE_CLIENT_SECRET!,
+      environment: process.env.SALESFORCE_ENVIRONMENT || "login",
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "SALESFORCE_CLIENT_ID",
+        type: "server",
+        description: "Salesforce Connected App Consumer Key"
+      },
+      {
+        name: "SALESFORCE_CLIENT_SECRET",
+        type: "server",
+        description: "Salesforce Connected App Consumer Secret"
+      },
+      {
+        name: "SALESFORCE_ENVIRONMENT",
+        type: "server",
+        description: 'Salesforce environment: "login" (production) or "test" (sandbox) (default: login)'
+      }
+    ],
+    docs: {
+      provider: "https://developer.salesforce.com/",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: true,
+    extraConfigNotes: 'Salesforce supports environment field: "login" for production, "test" for sandbox.',
+    readme: {
+      title: "Salesforce OAuth Setup",
+      content: `## Salesforce OAuth Setup
+
+1. Create a Connected App in Salesforce Setup
+2. Enable OAuth Settings
+3. Add callback URL: \`http://localhost:3000/api/auth/callback/salesforce\` (update for production)
+4. Copy the Consumer Key and Consumer Secret to your \`.env\` file
+5. Set SALESFORCE_ENVIRONMENT to "login" for production or "test" for sandbox
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  slack: {
+    id: "slack",
+    name: "Slack",
+    envPrefix: "SLACK",
+    clientIdVar: "SLACK_CLIENT_ID",
+    clientSecretVar: "SLACK_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"slack"',
+      socialProvider: `slack({
+      clientId: process.env.SLACK_CLIENT_ID!,
+      clientSecret: process.env.SLACK_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "SLACK_CLIENT_ID",
+        type: "server",
+        description: "Slack App Client ID"
+      },
+      {
+        name: "SLACK_CLIENT_SECRET",
+        type: "server",
+        description: "Slack App Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://api.slack.com/apps",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "Supports optional team field for workspace restrictions.",
+    readme: {
+      title: "Slack OAuth Setup",
+      content: `## Slack OAuth Setup
+
+1. Create a Slack app at https://api.slack.com/apps
+2. Add OAuth & Permissions and configure redirect URLs
+3. Add redirect URL: \`http://localhost:3000/api/auth/callback/slack\` (update for production)
+4. Copy the Client ID and Client Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  tiktok: {
+    id: "tiktok",
+    name: "TikTok",
+    envPrefix: "TIKTOK",
+    clientIdVar: "TIKTOK_CLIENT_KEY",
+    clientSecretVar: "TIKTOK_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"tiktok"',
+      socialProvider: `tiktok({
+      clientKey: process.env.TIKTOK_CLIENT_KEY!,
+      clientSecret: process.env.TIKTOK_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "TIKTOK_CLIENT_KEY",
+        type: "server",
+        description: "TikTok Client Key (not Client ID)"
+      },
+      {
+        name: "TIKTOK_CLIENT_SECRET",
+        type: "server",
+        description: "TikTok Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://developers.tiktok.com/",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: true,
+    extraConfigNotes: "TikTok uses clientKey instead of clientId. Make sure to use the correct field name.",
+    readme: {
+      title: "TikTok OAuth Setup",
+      content: `## TikTok OAuth Setup
+
+1. Register an app at https://developers.tiktok.com/
+2. Configure Login Kit
+3. Add redirect URI: \`http://localhost:3000/api/auth/callback/tiktok\` (update for production)
+4. Copy the Client Key (not Client ID) and Client Secret to your \`.env\` file
+
+**Important**: TikTok uses clientKey instead of clientId.
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  vercel: {
+    id: "vercel",
+    name: "Vercel",
+    envPrefix: "VERCEL",
+    clientIdVar: "VERCEL_CLIENT_ID",
+    clientSecretVar: "VERCEL_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"vercel"',
+      socialProvider: `vercel({
+      clientId: process.env.VERCEL_CLIENT_ID!,
+      clientSecret: process.env.VERCEL_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "VERCEL_CLIENT_ID",
+        type: "server",
+        description: "Vercel OAuth Client ID"
+      },
+      {
+        name: "VERCEL_CLIENT_SECRET",
+        type: "server",
+        description: "Vercel OAuth Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://vercel.com/account/integrations",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "Uses PKCE for enhanced security.",
+    readme: {
+      title: "Vercel OAuth Setup",
+      content: `## Vercel OAuth Setup
+
+1. Create an integration at https://vercel.com/account/integrations
+2. Configure OAuth settings
+3. Add redirect URL: \`http://localhost:3000/api/auth/callback/vercel\` (update for production)
+4. Copy the Client ID and Client Secret to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  vk: {
+    id: "vk",
+    name: "VK",
+    envPrefix: "VK",
+    clientIdVar: "VK_CLIENT_ID",
+    clientSecretVar: "VK_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"vk"',
+      socialProvider: `vk({
+      clientId: process.env.VK_CLIENT_ID!,
+      clientSecret: process.env.VK_CLIENT_SECRET!,
+    })`,
+      scopes: []
+    },
+    env: [
+      {
+        name: "VK_CLIENT_ID",
+        type: "server",
+        description: "VK Application ID"
+      },
+      {
+        name: "VK_CLIENT_SECRET",
+        type: "server",
+        description: "VK Secure Key"
+      }
+    ],
+    docs: {
+      provider: "https://vk.com/apps?act=manage",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: false,
+    extraConfigNotes: "",
+    readme: {
+      title: "VK OAuth Setup",
+      content: `## VK OAuth Setup
+
+1. Create an app at https://vk.com/apps?act=manage
+2. Configure OAuth settings in the app
+3. Add authorized redirect URI: \`http://localhost:3000/api/auth/callback/vk\` (update for production)
+4. Copy the Application ID and Secure Key to your \`.env\` file
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  },
+  zoom: {
+    id: "zoom",
+    name: "Zoom",
+    envPrefix: "ZOOM",
+    clientIdVar: "ZOOM_CLIENT_ID",
+    clientSecretVar: "ZOOM_CLIENT_SECRET",
+    popular: false,
+    betterAuthConfig: {
+      import: "",
+      clientSideProvider: '"zoom"',
+      socialProvider: `zoom({
+      clientId: process.env.ZOOM_CLIENT_ID!,
+      clientSecret: process.env.ZOOM_CLIENT_SECRET!,
+    })`,
+      scopes: ["user:read:user"]
+    },
+    env: [
+      {
+        name: "ZOOM_CLIENT_ID",
+        type: "server",
+        description: "Zoom OAuth Client ID"
+      },
+      {
+        name: "ZOOM_CLIENT_SECRET",
+        type: "server",
+        description: "Zoom OAuth Client Secret"
+      }
+    ],
+    docs: {
+      provider: "https://marketplace.zoom.us/",
+      betterAuth: "https://www.better-auth.com/docs/authentication/social"
+    },
+    requiresExtraConfig: true,
+    extraConfigNotes: "You MUST include the user:read:user scope for Zoom.",
+    readme: {
+      title: "Zoom OAuth Setup",
+      content: `## Zoom OAuth Setup
+
+1. Create an app at https://marketplace.zoom.us/
+2. Choose OAuth as the app type
+3. Add redirect URL: \`http://localhost:3000/api/auth/callback/zoom\` (update for production)
+4. Copy the Client ID and Client Secret to your \`.env\` file
+5. **Important**: Make sure to include the \`user:read:user\` scope
+
+For more details, see the [Better Auth documentation](https://www.better-auth.com/docs/authentication/social).`
+    }
+  }
+};
+function getProvider(id) {
+  return OAUTH_PROVIDERS[id];
+}
+function getPopularProviders() {
+  return Object.values(OAUTH_PROVIDERS).filter(
+    (provider) => provider.popular === true
+  );
+}
+function getAdditionalProviders() {
+  return Object.values(OAUTH_PROVIDERS).filter(
+    (provider) => provider.popular !== true
+  );
+}
+
+// src/installers/string-utils.ts
+function detectIndentation(line) {
+  const match = line.match(/^(\s*)/);
+  return match ? match[1] : "";
+}
+async function replacePlaceholder(filePath, placeholder, content, options) {
+  const fileContent = await fs4.readFile(filePath, "utf-8");
+  if (!fileContent.includes(placeholder)) {
+    if (options?.graceful) {
+      console.warn(
+        `Warning: Placeholder "${placeholder}" not found in file: ${filePath}. Skipping replacement.`
+      );
+      return;
+    }
+    throw new Error(
+      `Placeholder "${placeholder}" not found in file: ${filePath}`
+    );
+  }
+  if (options?.inline) {
+    const updatedContent = fileContent.replace(placeholder, content);
+    await fs4.writeFile(filePath, updatedContent, "utf-8");
+    return;
+  }
+  const lines = fileContent.split("\n");
+  const updatedLines = [];
+  for (const line of lines) {
+    if (line.includes(placeholder)) {
+      if (content === "" || content.startsWith("__REMOVE_")) {
+        continue;
+      }
+      const indentation = detectIndentation(line);
+      const indentedContent = content.split("\n").map((contentLine, index) => {
+        if (index === 0) {
+          return indentation + contentLine;
+        }
+        return contentLine ? indentation + contentLine : "";
+      }).join("\n");
+      updatedLines.push(indentedContent);
+    } else {
+      updatedLines.push(line);
+    }
+  }
+  await fs4.writeFile(filePath, updatedLines.join("\n"), "utf-8");
+}
+function generateCredentialsValue(enabled) {
+  return `credentials={${enabled}}`;
+}
+function generateAuthProvidersBlock(oauthProviders, emailPasswordEnabled) {
+  const parts = [];
+  parts.push(`emailAndPassword: {
+      enabled: ${emailPasswordEnabled}
+    },`);
+  if (oauthProviders.length > 0) {
+    const providersObject = oauthProviders.map((providerId) => {
+      const provider = getProvider(providerId);
+      if (!provider) {
+        throw new Error(`Unknown OAuth provider: ${providerId}`);
+      }
+      const configLines = [
+        `clientId: process.env.${provider.envPrefix}_CLIENT_ID!,`,
+        `clientSecret: process.env.${provider.envPrefix}_CLIENT_SECRET!,`
+      ];
+      if (providerId === "figma") {
+        configLines.push(`clientKey: process.env.FIGMA_CLIENT_KEY!,`);
+      }
+      return `${providerId}: {
+        ${configLines.join("\n        ")}
+      }`;
+    }).join(",\n      ");
+    parts.push(`socialProviders: {
+      ${providersObject}
+    },`);
+  }
+  return parts.join("\n    ");
+}
+function generateEnvTsServerSchema(providers) {
+  if (providers.length === 0) {
+    return "";
+  }
+  const schemas = providers.map((providerId) => {
+    const provider = getProvider(providerId);
+    if (!provider) {
+      throw new Error(`Unknown OAuth provider: ${providerId}`);
+    }
+    const lines = [];
+    lines.push(`${provider.envPrefix}_CLIENT_ID: z.string(),`);
+    lines.push(`${provider.envPrefix}_CLIENT_SECRET: z.string(),`);
+    if (providerId === "figma") {
+      lines.push(`FIGMA_CLIENT_KEY: z.string(),`);
+    }
+    return lines.join("\n    ");
+  }).join("\n    ");
+  return schemas;
+}
+function generateEnvTsRuntimeMapping(providers) {
+  if (providers.length === 0) {
+    return "";
+  }
+  const mappings = providers.map((providerId) => {
+    const provider = getProvider(providerId);
+    if (!provider) {
+      throw new Error(`Unknown OAuth provider: ${providerId}`);
+    }
+    const lines = [];
+    lines.push(`${provider.envPrefix}_CLIENT_ID: process.env.${provider.envPrefix}_CLIENT_ID,`);
+    lines.push(`${provider.envPrefix}_CLIENT_SECRET: process.env.${provider.envPrefix}_CLIENT_SECRET,`);
+    if (providerId === "figma") {
+      lines.push(`FIGMA_CLIENT_KEY: process.env.FIGMA_CLIENT_KEY,`);
+    }
+    return lines.join("\n    ");
+  }).join("\n    ");
+  return mappings;
+}
+function generateOAuthUIProvidersBlock(providers) {
+  if (providers.length === 0) {
+    return "";
+  }
+  const providerList = providers.map((id) => `"${id}"`).join(", ");
+  return `social={{
+  providers: [${providerList}]
+}}`;
+}
+function generateEnvVarsBlock(providers, framework) {
+  if (providers.length === 0) {
+    return "";
+  }
+  const envVars = providers.flatMap((providerId) => {
+    const provider = getProvider(providerId);
+    if (!provider) {
+      throw new Error(`Unknown OAuth provider: ${providerId}`);
+    }
+    if (provider.env && provider.env.length > 0) {
+      return provider.env.map((envVar) => {
+        let prefix = "";
+        if (envVar.type === "client") {
+          prefix = framework === "nextjs" ? "NEXT_PUBLIC_" : "VITE_";
+        }
+        return `# ${envVar.description}
+${prefix}${envVar.name}=`;
+      });
+    } else {
+      return [
+        `${provider.clientIdVar}=`,
+        `${provider.clientSecretVar}=`
+      ];
+    }
+  });
+  return envVars.join("\n");
+}
+function generateReadmeSection(providers) {
+  if (providers.length === 0) {
+    return "";
+  }
+  const sections = providers.map((providerId) => {
+    const provider = getProvider(providerId);
+    if (!provider) {
+      throw new Error(`Unknown OAuth provider: ${providerId}`);
+    }
+    if (!provider.readme) {
+      throw new Error(
+        `Provider ${providerId} missing readme metadata`
+      );
+    }
+    return provider.readme.content;
+  }).filter(Boolean);
+  if (sections.length === 0) {
+    return "";
+  }
+  return `# OAuth Provider Setup
+
+${sections.join("\n\n---\n\n")}`;
+}
+
+// src/installers/nextjs.ts
+var VexNextJSInstaller = class extends VexFrameworkInstaller {
+  get frameworkName() {
+    return "nextjs";
+  }
+  /**
+   * Update OAuth configuration in Convex auth options file
+   * Target file: convex/auth/options.ts
+   */
+  async updateOAuthConfig(selectedProviders, emailPasswordEnabled) {
+    const authFilePath = join2(this.targetPath, "convex/auth/options.ts");
+    const authProvidersBlock = generateAuthProvidersBlock(
+      selectedProviders,
+      emailPasswordEnabled
+    );
+    await replacePlaceholder(
+      authFilePath,
+      "// {{OAUTH_PROVIDERS}}",
+      authProvidersBlock
+    );
+    await replacePlaceholder(
+      authFilePath,
+      "// {{EMAIL_PASSWORD_AUTH}}",
+      "",
+      { graceful: true }
+    );
+  }
+  /**
+   * Update OAuth UI configuration in auth client file
+   * Target file: src/auth/client.tsx
+   */
+  async updateOAuthUIConfig(selectedProviders, emailPasswordEnabled) {
+    const providersFilePath = join2(this.targetPath, "src/auth/client.tsx");
+    const uiConfigBlock = generateOAuthUIProvidersBlock(selectedProviders);
+    await replacePlaceholder(
+      providersFilePath,
+      "// {{OAUTH_UI_PROVIDERS}}",
+      uiConfigBlock
+    );
+    const credentialsValue = generateCredentialsValue(emailPasswordEnabled);
+    await replacePlaceholder(
+      providersFilePath,
+      "/* {{EMAIL_PASSWORD_CREDENTIALS}} */",
+      credentialsValue
+    );
+  }
+  /**
+   * Update .env.example with OAuth environment variables
+   * Target file: .env.example
+   */
+  async updateEnvExample(selectedProviders) {
+    const envFilePath = join2(this.targetPath, ".env.example");
+    const envVarsBlock = generateEnvVarsBlock(selectedProviders, "nextjs");
+    await replacePlaceholder(
+      envFilePath,
+      "# {{ENV_OAUTH_VARS}}",
+      envVarsBlock
+    );
+  }
+  /**
+   * Update README with OAuth provider setup guides
+   * Target file: README.md
+   */
+  async updateReadme(selectedProviders) {
+    const readmeFilePath = join2(this.targetPath, "README.md");
+    const readmeSection = generateReadmeSection(selectedProviders);
+    await replacePlaceholder(
+      readmeFilePath,
+      "<!-- {{OAUTH_SETUP_GUIDE}} -->",
+      readmeSection,
+      { graceful: true }
+    );
+  }
+  /**
+   * Update env.mjs with OAuth provider environment variables
+   * Target file: src/env.mjs
+   */
+  async updateEnvTs(selectedProviders) {
+    const envFilePath = join2(this.targetPath, "src/env.mjs");
+    const serverSchema = generateEnvTsServerSchema(selectedProviders);
+    await replacePlaceholder(
+      envFilePath,
+      "// {{OAUTH_ENV_SERVER_SCHEMA}}",
+      serverSchema
+    );
+    const runtimeMapping = generateEnvTsRuntimeMapping(selectedProviders);
+    await replacePlaceholder(
+      envFilePath,
+      "// {{OAUTH_ENV_RUNTIME_MAPPING}}",
+      runtimeMapping
+    );
+  }
+};
+
+// src/installers/createInstaller.ts
+function createInstaller(props) {
+  switch (props.framework) {
+    case "nextjs":
+      return new VexNextJSInstaller(props.projectDir, props.projectName);
+    case "tanstack":
+      throw new Error("TanStack Start is not yet supported");
+    default:
+      throw new Error(`Unknown framework: ${props.framework}`);
+  }
+}
+
+// src/index.ts
+var program = new Command().name("create-vexcms").description("Scaffold a new VEX CMS project").argument("[project-name]", "Project directory name").option("--bare", "Skip marketing site collections, scaffold empty project").option("--orgs", "Enable multi-tenant organizations").version("0.0.2").parse();
+var args = program.args;
+var opts = program.opts();
+async function main() {
+  console.log();
+  console.log(chalk2.bold("  create-vexcms"));
+  console.log();
+  const bare = opts.bare ?? false;
+  let inputArg;
+  if (args[0]) {
+    inputArg = args[0];
+  } else {
+    inputArg = await input({
+      message: "What is your project named?",
+      default: "my-vexcms-app",
+      validate: (value) => {
+        const name = value.includes("/") ? path2.basename(value) : value;
+        if (name === ".") return true;
+        const result = validateProjectName(name);
+        if (result.valid) return true;
+        return result.errors[0] ?? "Invalid project name";
+      }
+    });
+  }
+  inputArg = resolveProjectName(inputArg, process.cwd());
+  const projectName = inputArg === "." ? path2.basename(process.cwd()) : path2.basename(inputArg);
+  const validation = validateProjectName(projectName);
+  if (!validation.valid) {
+    displayInvalidNameError(projectName, validation.errors);
+    process.exit(1);
+  }
+  const targetDir = inputArg === "." ? process.cwd() : path2.resolve(process.cwd(), inputArg);
+  if (await checkDirectoryExists(targetDir)) {
+    if (!await isDirectoryEmpty(targetDir)) {
+      displayDirectoryNotEmptyError();
+      process.exit(1);
+    }
+  }
+  let framework;
+  while (true) {
+    framework = await select({
+      message: "Select a framework:",
+      choices: [
+        { name: "Next.js (Recommended)", value: "nextjs" },
+        { name: "TanStack Start (Coming Soon)", value: "tanstack" }
+      ]
+    });
+    if (framework === "tanstack") {
+      console.log(chalk2.yellow("\n  TanStack Start support is coming soon! Please select Next.js for now.\n"));
+      continue;
+    }
+    break;
+  }
+  const emailPasswordAuth = await confirm({
+    message: "Enable email/password authentication?",
+    default: true
+  });
+  const popularProviders = getPopularProviders();
+  const additionalProviders = getAdditionalProviders();
+  const allProviderChoices = [
+    ...popularProviders.map((p) => ({
+      name: p.name,
+      value: p.id
+    })),
+    { name: "\u2500\u2500 Additional providers \u2500\u2500", value: "__separator__", disabled: true },
+    ...additionalProviders.map((p) => ({
+      name: p.name,
+      value: p.id
+    }))
+  ];
+  const oauthProviders = await checkbox({
+    message: "Select OAuth providers (space to toggle, enter to confirm):",
+    choices: allProviderChoices
+  });
+  const orgs = opts.orgs ?? await confirm({
+    message: "Enable multi-tenant (organizations)?",
+    default: false
+  });
+  const initGit = await confirm({
+    message: "Initialize a Git repository?",
+    default: true
+  });
+  const installDependencies = await confirm({
+    message: "Install dependencies?",
+    default: false
+  });
+  const options = {
+    projectName,
+    projectDir: targetDir,
+    framework,
+    bare,
+    orgs,
+    emailPasswordAuth,
+    oauthProviders,
+    initGit,
+    installDependencies
+  };
+  await fs5.ensureDir(targetDir);
+  const installer = createInstaller({
+    framework,
+    projectDir: targetDir,
+    projectName: options.projectName
+  });
+  console.log();
+  await installer.initProject(options);
+  console.log();
+  displaySuccessMessage(options.projectName, targetDir, inputArg === ".");
+}
+main().catch((error) => {
+  console.error(chalk2.red("\nAn error occurred:"), error.message);
+  process.exit(1);
+});