zuro-cli 0.0.2-beta.1 → 0.0.2-beta.10

package/dist/index.mjs

@@ -166,18 +166,36 @@ async function fetchFile(filePath, options) {
 import fs from "fs-extra";
 import path from "path";
 import { execa } from "execa";
-async function initPackageJson(cwd, force = false) {
+function normalizePackageName(name) {
+  const normalized = name.trim().toLowerCase().replace(/[^a-z0-9._-]/g, "-").replace(/-+/g, "-").replace(/^[._-]+|[._-]+$/g, "");
+  return normalized || "zuro-app";
+}
+async function ensurePackageManagerAvailable(pm) {
+  try {
+    await execa(pm, ["--version"], { stdio: "ignore" });
+  } catch {
+    throw new Error(
+      `Package manager '${pm}' is not installed or not available in PATH. Install it or choose npm.`
+    );
+  }
+}
+async function initPackageJson(cwd, force = false, packageName = "zuro-app", srcDir = "src", options = {}) {
   const pkgPath = path.join(cwd, "package.json");
   if (force || !await fs.pathExists(pkgPath)) {
+    const scripts = {
+      "dev": `tsx watch ${srcDir}/server.ts`,
+      "build": "tsc",
+      "start": "node dist/server.js"
+    };
+    if (options.enablePrettier) {
+      scripts["format"] = "prettier --write .";
+      scripts["format:check"] = "prettier --check .";
+    }
     await fs.writeJson(pkgPath, {
-      name: "zuro-app",
+      name: normalizePackageName(packageName),
       version: "0.0.1",
       private: true,
-      scripts: {
-        "dev": "tsx watch src/server.ts",
-        "build": "tsc",
-        "start": "node dist/server.js"
-      }
+      scripts
     }, { spaces: 2 });
   }
 }
@@ -214,8 +232,9 @@ async function installDependencies(pm, deps, cwd, options = {}) {
 import fs2 from "fs-extra";
 import path2 from "path";
 import os from "os";
-var updateEnvFile = async (cwd, variables, createIfMissing = true) => {
+var updateEnvFile = async (cwd, variables, createIfMissing = true, options = {}) => {
   const envPath = path2.join(cwd, ".env");
+  const overwriteExisting = options.overwriteExisting ?? false;
   let content = "";
   if (fs2.existsSync(envPath)) {
     content = await fs2.readFile(envPath, "utf-8");
@@ -224,14 +243,25 @@ var updateEnvFile = async (cwd, variables, createIfMissing = true) => {
   }
   let modified = false;
   for (const [key, value] of Object.entries(variables)) {
-    const regex = new RegExp(`^${key}=`, "m");
-    if (!regex.test(content)) {
-      if (content && !content.endsWith("\n")) {
-        content += os.EOL;
+    const escapedKey = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const regex = new RegExp(`^${escapedKey}=.*$`, "m");
+    if (regex.test(content)) {
+      if (!overwriteExisting) {
+        continue;
       }
-      content += `${key}=${value}${os.EOL}`;
-      modified = true;
+      const nextLine = `${key}=${value}`;
+      const updated = content.replace(regex, nextLine);
+      if (updated !== content) {
+        content = updated;
+        modified = true;
+      }
+      continue;
     }
+    if (content && !content.endsWith("\n")) {
+      content += os.EOL;
+    }
+    content += `${key}=${value}${os.EOL}`;
+    modified = true;
   }
   if (modified || !fs2.existsSync(envPath)) {
     await fs2.writeFile(envPath, content);
@@ -354,6 +384,13 @@ function showNonZuroProjectMessage() {
   console.log("- a fresh/empty directory, or");
   console.log("- an existing project already managed by Zuro CLI.");
 }
+function showInitFirstMessage() {
+  console.log(chalk.yellow("No Zuro project found in this directory."));
+  console.log("");
+  console.log(chalk.yellow("Run init first, then add modules."));
+  console.log("");
+  console.log(chalk.cyan("npx zuro-cli init"));
+}
 
 // src/commands/init.ts
 function resolveSafeTargetPath(projectRoot, srcDir, file) {
@@ -368,6 +405,48 @@ function resolveSafeTargetPath(projectRoot, srcDir, file) {
     targetPath
   };
 }
+async function ensureSafeTargetDirectory(targetDir, cwd, projectName) {
+  await fs4.ensureDir(targetDir);
+  const entries = await fs4.readdir(targetDir);
+  if (entries.length === 0) {
+    return true;
+  }
+  const isCurrentFolder = targetDir === cwd;
+  const response = await prompts({
+    type: "confirm",
+    name: "proceed",
+    message: isCurrentFolder ? `Current folder '${projectName}' is not empty. Continue anyway?` : `Target folder '${projectName}' already exists and is not empty. Continue anyway?`,
+    initial: false
+  });
+  return response.proceed === true;
+}
+async function setupPrettier(targetDir) {
+  const prettierConfigPath = path4.join(targetDir, ".prettierrc");
+  const prettierIgnorePath = path4.join(targetDir, ".prettierignore");
+  if (!await fs4.pathExists(prettierConfigPath)) {
+    const prettierConfig = {
+      semi: true,
+      singleQuote: false,
+      trailingComma: "es5",
+      printWidth: 100,
+      tabWidth: 2
+    };
+    await fs4.writeJson(prettierConfigPath, prettierConfig, { spaces: 2 });
+  }
+  if (!await fs4.pathExists(prettierIgnorePath)) {
+    const ignoreContent = `node_modules
+dist
+build
+coverage
+.next
+pnpm-lock.yaml
+package-lock.json
+bun.lock
+bun.lockb
+`;
+    await fs4.writeFile(prettierIgnorePath, ignoreContent);
+  }
+}
 async function init() {
   const cwd = process.cwd();
   const isExistingProject = await fs4.pathExists(path4.join(cwd, "package.json"));
@@ -380,6 +459,7 @@ async function init() {
   let pm = "npm";
   let srcDir = "src";
   let projectName = path4.basename(cwd);
+  let enablePrettier = false;
   if (isExistingProject) {
     console.log(chalk2.blue("\u2139 Existing project detected."));
     projectName = path4.basename(cwd);
@@ -417,6 +497,12 @@ async function init() {
           { title: "bun", value: "bun" }
         ],
         initial: 0
+      },
+      {
+        type: "confirm",
+        name: "prettier",
+        message: "Setup Prettier?",
+        initial: true
       }
     ]);
     if (response.pm === void 0) {
@@ -424,6 +510,7 @@ async function init() {
       return;
     }
     pm = response.pm;
+    enablePrettier = response.prettier === true;
     srcDir = "src";
     if (!response.path || response.path.trim() === "") {
       projectName = path4.basename(cwd);
@@ -432,7 +519,11 @@ async function init() {
     } else {
       projectName = response.path.trim();
       targetDir = path4.resolve(cwd, projectName);
-      await fs4.ensureDir(targetDir);
+    }
+    const isSafeTarget = await ensureSafeTargetDirectory(targetDir, cwd, projectName);
+    if (!isSafeTarget) {
+      console.log(chalk2.red("Operation cancelled."));
+      return;
     }
   }
   const existingConfig = targetDir === cwd ? existingZuroConfig : await readZuroConfig(targetDir);
@@ -441,20 +532,26 @@ async function init() {
     pm,
     srcDir: srcDir || existingConfig?.srcDir || "src"
   };
-  await writeZuroConfig(targetDir, zuroConfig);
   const spinner = ora("Connecting to Zuro Registry...").start();
+  let currentStep = "package manager preflight";
   try {
+    spinner.text = `Checking ${pm} availability...`;
+    await ensurePackageManagerAvailable(pm);
+    currentStep = "registry fetch";
+    spinner.text = "Connecting to Zuro Registry...";
     const registryContext = await fetchRegistry();
     const coreModule = registryContext.manifest.modules.core;
     if (!coreModule) {
       spinner.fail("Core module not found in registry.");
       return;
     }
+    currentStep = "project initialization";
     spinner.text = "Initializing project...";
     const hasPackageJson = await fs4.pathExists(path4.join(targetDir, "package.json"));
     if (!hasPackageJson) {
-      await initPackageJson(targetDir, true);
+      await initPackageJson(targetDir, true, projectName, srcDir, { enablePrettier });
     }
+    currentStep = "dependency installation";
     spinner.text = `Installing dependencies using ${pm}...`;
     let runtimeDeps = [];
     let devDeps = [];
@@ -469,6 +566,10 @@ async function init() {
     }
     await installDependencies(pm, runtimeDeps, targetDir);
     await installDependencies(pm, devDeps, targetDir, { dev: true });
+    if (enablePrettier) {
+      await installDependencies(pm, ["prettier"], targetDir, { dev: true });
+    }
+    currentStep = "module file generation";
     spinner.text = "Fetching core module files...";
     for (const file of coreModule.files) {
       const { relativeTargetPath, targetPath } = resolveSafeTargetPath(targetDir, srcDir, file);
@@ -491,7 +592,14 @@ async function init() {
       await fs4.ensureDir(path4.dirname(targetPath));
       await fs4.writeFile(targetPath, content);
     }
+    currentStep = "environment file setup";
     await createInitialEnv(targetDir);
+    if (enablePrettier) {
+      currentStep = "prettier setup";
+      await setupPrettier(targetDir);
+    }
+    currentStep = "config write";
+    await writeZuroConfig(targetDir, zuroConfig);
     spinner.succeed(chalk2.green("Project initialized successfully!"));
     console.log(`
 ${chalk2.bold("Next steps:")}`);
@@ -502,8 +610,15 @@ ${chalk2.bold("Next steps:")}`);
     console.log(`
 ${chalk2.dim("Add modules: zuro-cli add database, zuro-cli add auth")}`);
   } catch (error) {
-    spinner.fail(chalk2.red("Failed to initialize project."));
-    console.error(error);
+    spinner.fail(chalk2.red(`Failed during ${currentStep}.`));
+    const errorMessage = error instanceof Error ? error.message : String(error);
+    console.error(chalk2.red(errorMessage));
+    console.log(`
+${chalk2.bold("Retry:")}`);
+    if (targetDir !== cwd) {
+      console.log(chalk2.cyan(`  cd ${projectName}`));
+    }
+    console.log(chalk2.cyan("  npx zuro-cli init"));
   }
 }
 
@@ -512,6 +627,7 @@ import prompts2 from "prompts";
 import ora2 from "ora";
 import path6 from "path";
 import fs6 from "fs-extra";
+import { randomBytes } from "crypto";
 
 // src/utils/dependency.ts
 import fs5 from "fs-extra";
@@ -557,6 +673,10 @@ var resolveDependencies = async (moduleDependencies, cwd) => {
 
 // src/commands/add.ts
 import chalk4 from "chalk";
+var DEFAULT_DATABASE_URLS = {
+  "database-pg": "postgresql://postgres@localhost:5432/mydb",
+  "database-mysql": "mysql://root@localhost:3306/mydb"
+};
 function resolveSafeTargetPath2(projectRoot, srcDir, file) {
   const targetPath = path6.resolve(projectRoot, srcDir, file.target);
   const normalizedRoot = path6.resolve(projectRoot);
@@ -565,86 +685,338 @@ function resolveSafeTargetPath2(projectRoot, srcDir, file) {
   }
   return targetPath;
 }
+function resolvePackageManager(projectRoot) {
+  if (fs6.existsSync(path6.join(projectRoot, "pnpm-lock.yaml"))) {
+    return "pnpm";
+  }
+  if (fs6.existsSync(path6.join(projectRoot, "bun.lockb")) || fs6.existsSync(path6.join(projectRoot, "bun.lock"))) {
+    return "bun";
+  }
+  if (fs6.existsSync(path6.join(projectRoot, "yarn.lock"))) {
+    return "yarn";
+  }
+  return "npm";
+}
+function parseDatabaseDialect(value) {
+  const normalized = value?.trim().toLowerCase();
+  if (!normalized) {
+    return null;
+  }
+  if (normalized === "pg" || normalized === "postgres" || normalized === "postgresql" || normalized === "database-pg") {
+    return "database-pg";
+  }
+  if (normalized === "mysql" || normalized === "database-mysql") {
+    return "database-mysql";
+  }
+  return null;
+}
+function isDatabaseModule(moduleName) {
+  return moduleName === "database-pg" || moduleName === "database-mysql";
+}
+function validateDatabaseUrl(rawUrl, moduleName) {
+  const dbUrl = rawUrl.trim();
+  if (!dbUrl) {
+    throw new Error("Database URL cannot be empty.");
+  }
+  let parsed;
+  try {
+    parsed = new URL(dbUrl);
+  } catch {
+    throw new Error(`Invalid database URL: '${dbUrl}'.`);
+  }
+  const protocol = parsed.protocol.toLowerCase();
+  if (moduleName === "database-pg" && protocol !== "postgresql:" && protocol !== "postgres:") {
+    throw new Error("PostgreSQL URL must start with postgres:// or postgresql://");
+  }
+  if (moduleName === "database-mysql" && protocol !== "mysql:") {
+    throw new Error("MySQL URL must start with mysql://");
+  }
+  return dbUrl;
+}
+async function detectInstalledDatabaseDialect(projectRoot, srcDir) {
+  const dbIndexPath = path6.join(projectRoot, srcDir, "db", "index.ts");
+  if (!fs6.existsSync(dbIndexPath)) {
+    return null;
+  }
+  const content = await fs6.readFile(dbIndexPath, "utf-8");
+  if (content.includes("drizzle-orm/node-postgres") || content.includes(`from "pg"`)) {
+    return "database-pg";
+  }
+  if (content.includes("drizzle-orm/mysql2") || content.includes(`from "mysql2`)) {
+    return "database-mysql";
+  }
+  return null;
+}
+async function backupDatabaseFiles(projectRoot, srcDir) {
+  const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+  const backupRoot = path6.join(projectRoot, ".zuro", "backups", `database-${timestamp}`);
+  const candidates = [
+    path6.join(projectRoot, srcDir, "db", "index.ts"),
+    path6.join(projectRoot, "drizzle.config.ts")
+  ];
+  let copied = false;
+  for (const filePath of candidates) {
+    if (!fs6.existsSync(filePath)) {
+      continue;
+    }
+    const relativePath = path6.relative(projectRoot, filePath);
+    const backupPath = path6.join(backupRoot, relativePath);
+    await fs6.ensureDir(path6.dirname(backupPath));
+    await fs6.copyFile(filePath, backupPath);
+    copied = true;
+  }
+  return copied ? backupRoot : null;
+}
+function databaseLabel(moduleName) {
+  return moduleName === "database-pg" ? "PostgreSQL" : "MySQL";
+}
+function getDatabaseSetupHint(moduleName, dbUrl) {
+  try {
+    const parsed = new URL(dbUrl);
+    const dbName = parsed.pathname.replace(/^\/+/, "") || "mydb";
+    if (moduleName === "database-pg") {
+      return `createdb ${dbName}`;
+    }
+    return `mysql -e "CREATE DATABASE IF NOT EXISTS ${dbName};"`;
+  } catch {
+    return moduleName === "database-pg" ? "createdb <database_name>" : `mysql -e "CREATE DATABASE IF NOT EXISTS <database_name>;"`;
+  }
+}
+function getModuleDocsPath(moduleName) {
+  if (isDatabaseModule(moduleName)) {
+    return "database";
+  }
+  return moduleName;
+}
+function escapeRegex(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+async function hasEnvVariable(projectRoot, key) {
+  const envPath = path6.join(projectRoot, ".env");
+  if (!await fs6.pathExists(envPath)) {
+    return false;
+  }
+  const content = await fs6.readFile(envPath, "utf-8");
+  const pattern = new RegExp(`^${escapeRegex(key)}=`, "m");
+  return pattern.test(content);
+}
+async function isLikelyEmptyDirectory(cwd) {
+  const entries = await fs6.readdir(cwd);
+  const ignored = /* @__PURE__ */ new Set([".ds_store", "thumbs.db"]);
+  return entries.filter((entry) => !ignored.has(entry.toLowerCase())).length === 0;
+}
+async function ensureSchemaExport(projectRoot, srcDir, schemaFileName) {
+  const schemaIndexPath = path6.join(projectRoot, srcDir, "db", "schema", "index.ts");
+  if (!await fs6.pathExists(schemaIndexPath)) {
+    return;
+  }
+  const exportLine = `export * from "./${schemaFileName}";`;
+  const content = await fs6.readFile(schemaIndexPath, "utf-8");
+  const normalized = content.replace(/\r\n/g, "\n");
+  const exportPattern = new RegExp(
+    `^\\s*export\\s*\\*\\s*from\\s*["']\\./${escapeRegex(schemaFileName)}["'];?\\s*$`,
+    "m"
+  );
+  if (exportPattern.test(normalized)) {
+    return;
+  }
+  let next = normalized.replace(/^\s*export\s*\{\s*\};?\s*$/m, "").trimEnd();
+  if (next.length > 0) {
+    next += "\n\n";
+  }
+  next += `${exportLine}
+`;
+  await fs6.writeFile(schemaIndexPath, next);
+}
 async function injectErrorHandler(projectRoot, srcDir) {
   const appPath = path6.join(projectRoot, srcDir, "app.ts");
   if (!fs6.existsSync(appPath)) {
     return false;
   }
   let content = await fs6.readFile(appPath, "utf-8");
-  if (content.includes("errorHandler")) {
-    return true;
-  }
   const errorImport = `import { errorHandler, notFoundHandler } from "./middleware/error-handler";`;
-  const importRegex = /^import .+ from .+;?\s*$/gm;
-  let lastImportIndex = 0;
-  let match;
-  while ((match = importRegex.exec(content)) !== null) {
-    lastImportIndex = match.index + match[0].length;
-  }
-  if (lastImportIndex > 0) {
-    content = content.slice(0, lastImportIndex) + `
+  const hasErrorImport = content.includes(errorImport);
+  const hasNotFoundUse = /app\.use\(\s*notFoundHandler\s*\)/.test(content);
+  const hasErrorUse = /app\.use\(\s*errorHandler\s*\)/.test(content);
+  let modified = false;
+  let importInserted = hasErrorImport;
+  if (!hasErrorImport) {
+    const importRegex = /^import .+ from .+;?\s*$/gm;
+    let lastImportIndex = 0;
+    let match;
+    while ((match = importRegex.exec(content)) !== null) {
+      lastImportIndex = match.index + match[0].length;
+    }
+    if (lastImportIndex > 0) {
+      content = content.slice(0, lastImportIndex) + `
 ${errorImport}` + content.slice(lastImportIndex);
+      modified = true;
+      importInserted = true;
+    }
   }
-  const errorSetup = `
+  let setupInserted = hasNotFoundUse && hasErrorUse;
+  if (!setupInserted) {
+    const setupLines = [];
+    if (!hasNotFoundUse) {
+      setupLines.push("app.use(notFoundHandler);");
+    }
+    if (!hasErrorUse) {
+      setupLines.push("app.use(errorHandler);");
+    }
+    const errorSetup = `
 // Error handling (must be last)
-app.use(notFoundHandler);
-app.use(errorHandler);
+${setupLines.join("\n")}
 `;
-  const exportMatch = content.match(/export default app;?\s*$/m);
-  if (exportMatch && exportMatch.index !== void 0) {
-    content = content.slice(0, exportMatch.index) + errorSetup + "\n" + content.slice(exportMatch.index);
+    const exportMatch = content.match(/export default app;?\s*$/m);
+    if (exportMatch && exportMatch.index !== void 0) {
+      content = content.slice(0, exportMatch.index) + errorSetup + "\n" + content.slice(exportMatch.index);
+      modified = true;
+      setupInserted = true;
+    }
   }
-  await fs6.writeFile(appPath, content);
-  return true;
+  if (modified) {
+    await fs6.writeFile(appPath, content);
+  }
+  return importInserted && setupInserted;
 }
 async function injectAuthRoutes(projectRoot, srcDir) {
   const appPath = path6.join(projectRoot, srcDir, "app.ts");
-  if (!fs6.existsSync(appPath)) {
+  if (!await fs6.pathExists(appPath)) {
     return false;
   }
-  let content = await fs6.readFile(appPath, "utf-8");
-  if (content.includes("routes/auth.routes")) {
-    return true;
+  let appContent = await fs6.readFile(appPath, "utf-8");
+  const authHandlerImport = `import { toNodeHandler } from "better-auth/node";`;
+  const authImport = `import { auth } from "./lib/auth";`;
+  const routeIndexUserImport = `import userRoutes from "./user.routes";`;
+  const appUserImport = `import userRoutes from "./routes/user.routes";`;
+  let appModified = false;
+  const appendImport = (source, line) => {
+    if (source.includes(line)) {
+      return { source, inserted: true };
+    }
+    const importRegex = /^import .+ from .+;?\s*$/gm;
+    let lastImportIndex = 0;
+    let match;
+    while ((match = importRegex.exec(source)) !== null) {
+      lastImportIndex = match.index + match[0].length;
+    }
+    if (lastImportIndex <= 0) {
+      return { source, inserted: false };
+    }
+    return {
+      source: source.slice(0, lastImportIndex) + `
+${line}` + source.slice(lastImportIndex),
+      inserted: true
+    };
+  };
+  for (const importLine of [authHandlerImport, authImport]) {
+    const next = appendImport(appContent, importLine);
+    if (!next.inserted) {
+      return false;
+    }
+    if (next.source !== appContent) {
+      appContent = next.source;
+      appModified = true;
+    }
+  }
+  const hasAuthMount = /toNodeHandler\(\s*auth\s*\)/.test(appContent) && /\/api\/auth/.test(appContent);
+  if (!hasAuthMount) {
+    const authMountLine = "app.all(/^\\/api\\/auth(?:\\/.*)?$/, toNodeHandler(auth));\n";
+    const jsonIndex = appContent.search(/^\s*app\.use\(\s*express\.json\(\)\s*\);\s*$/m);
+    let insertionIndex = jsonIndex;
+    if (insertionIndex < 0) {
+      const healthIndex = appContent.search(/^\s*app\.get\(\s*["']\/health["']\s*,/m);
+      insertionIndex = healthIndex;
+    }
+    if (insertionIndex < 0) {
+      const exportMatch = appContent.match(/export default app;?\s*$/m);
+      insertionIndex = exportMatch?.index ?? -1;
+    }
+    if (insertionIndex < 0) {
+      return false;
+    }
+    appContent = appContent.slice(0, insertionIndex) + authMountLine + appContent.slice(insertionIndex);
+    appModified = true;
   }
-  const authImport = `import authRoutes from "./routes/auth.routes";`;
-  const userImport = `import userRoutes from "./routes/user.routes";`;
-  const routeSetup = `
-// Auth routes
-app.use(authRoutes);
+  const routeIndexPath = path6.join(projectRoot, srcDir, "routes", "index.ts");
+  if (await fs6.pathExists(routeIndexPath)) {
+    let routeContent = await fs6.readFile(routeIndexPath, "utf-8");
+    let routeModified = false;
+    const userImportResult = appendImport(routeContent, routeIndexUserImport);
+    if (!userImportResult.inserted) {
+      return false;
+    }
+    if (userImportResult.source !== routeContent) {
+      routeContent = userImportResult.source;
+      routeModified = true;
+    }
+    const hasUserRoute = /rootRouter\.use\(\s*["']\/users["']\s*,\s*userRoutes\s*\)/.test(routeContent);
+    if (!hasUserRoute) {
+      const routeSetup = `
+// User routes
+rootRouter.use("/users", userRoutes);
+`;
+      const exportMatch = routeContent.match(/export default rootRouter;?\s*$/m);
+      if (!exportMatch || exportMatch.index === void 0) {
+        return false;
+      }
+      routeContent = routeContent.slice(0, exportMatch.index) + routeSetup + "\n" + routeContent.slice(exportMatch.index);
+      routeModified = true;
+    }
+    if (routeModified) {
+      await fs6.writeFile(routeIndexPath, routeContent);
+    }
+  } else {
+    const hasUserRoute = /app\.use\(\s*["']\/api\/users["']\s*,\s*userRoutes\s*\)/.test(appContent);
+    if (!hasUserRoute) {
+      const exportMatch = appContent.match(/export default app;?\s*$/m);
+      if (!exportMatch || exportMatch.index === void 0) {
+        return false;
+      }
+      const routeSetup = `
+// User routes
 app.use("/api/users", userRoutes);
 `;
-  const importRegex = /^import .+ from .+;?\s*$/gm;
-  let lastImportIndex = 0;
-  let match;
-  while ((match = importRegex.exec(content)) !== null) {
-    lastImportIndex = match.index + match[0].length;
-  }
-  if (lastImportIndex > 0) {
-    content = content.slice(0, lastImportIndex) + `
-${authImport}
-${userImport}` + content.slice(lastImportIndex);
-  }
-  const exportMatch = content.match(/export default app;?\s*$/m);
-  if (exportMatch && exportMatch.index !== void 0) {
-    content = content.slice(0, exportMatch.index) + routeSetup + "\n" + content.slice(exportMatch.index);
-  }
-  await fs6.writeFile(appPath, content);
+      appContent = appContent.slice(0, exportMatch.index) + routeSetup + "\n" + appContent.slice(exportMatch.index);
+      appModified = true;
+    }
+    const userImportResult = appendImport(appContent, appUserImport);
+    if (!userImportResult.inserted) {
+      return false;
+    }
+    if (userImportResult.source !== appContent) {
+      appContent = userImportResult.source;
+      appModified = true;
+    }
+  }
+  if (appModified) {
+    await fs6.writeFile(appPath, appContent);
+  }
   return true;
 }
 var add = async (moduleName) => {
   const projectRoot = process.cwd();
   const projectConfig = await readZuroConfig(projectRoot);
   if (!projectConfig) {
+    if (await isLikelyEmptyDirectory(projectRoot)) {
+      showInitFirstMessage();
+      return;
+    }
     showNonZuroProjectMessage();
     return;
   }
-  let srcDir = projectConfig.srcDir || "src";
+  const srcDir = projectConfig.srcDir || "src";
+  let resolvedModuleName = moduleName;
+  const parsedDialect = parseDatabaseDialect(moduleName);
+  if (parsedDialect) {
+    resolvedModuleName = parsedDialect;
+  }
   let customDbUrl;
-  const DEFAULT_URLS = {
-    "database-pg": "postgresql://root@localhost:5432/mydb",
-    "database-mysql": "mysql://root@localhost:3306/mydb"
-  };
-  if (moduleName === "database") {
+  let usedDefaultDbUrl = false;
+  let databaseBackupPath = null;
+  let generatedAuthSecret = false;
+  let authDatabaseDialect = null;
+  if (resolvedModuleName === "database") {
     const variantResponse = await prompts2({
       type: "select",
       name: "variant",
@@ -655,22 +1027,39 @@ var add = async (moduleName) => {
       ]
     });
     if (!variantResponse.variant) {
-      process.exit(0);
+      console.log(chalk4.yellow("Operation cancelled."));
+      return;
     }
-    moduleName = variantResponse.variant;
-    const defaultUrl = DEFAULT_URLS[moduleName];
-    console.log(chalk4.dim(`  Tip: Leave blank to use ${defaultUrl}
-`));
-    const urlResponse = await prompts2({
-      type: "text",
-      name: "dbUrl",
-      message: "Database URL",
-      initial: ""
-    });
-    customDbUrl = urlResponse.dbUrl?.trim() || defaultUrl;
+    resolvedModuleName = variantResponse.variant;
   }
-  if ((moduleName === "database-pg" || moduleName === "database-mysql") && customDbUrl === void 0) {
-    const defaultUrl = DEFAULT_URLS[moduleName];
+  if (isDatabaseModule(resolvedModuleName)) {
+    const installedDialect = await detectInstalledDatabaseDialect(projectRoot, srcDir);
+    if (installedDialect && installedDialect !== resolvedModuleName) {
+      console.log(
+        chalk4.yellow(
+          `
+\u26A0 Existing database setup detected: ${databaseLabel(installedDialect)}.`
+        )
+      );
+      console.log(
+        chalk4.yellow(
+          `  Switching to ${databaseLabel(resolvedModuleName)} will overwrite db files and drizzle config.
+`
+        )
+      );
+      const switchResponse = await prompts2({
+        type: "confirm",
+        name: "proceed",
+        message: "Continue and switch database dialect?",
+        initial: false
+      });
+      if (!switchResponse.proceed) {
+        console.log(chalk4.yellow("Operation cancelled."));
+        return;
+      }
+      databaseBackupPath = await backupDatabaseFiles(projectRoot, srcDir);
+    }
+    const defaultUrl = DEFAULT_DATABASE_URLS[resolvedModuleName];
     console.log(chalk4.dim(`  Tip: Leave blank to use ${defaultUrl}
 `));
     const response = await prompts2({
@@ -679,53 +1068,82 @@ var add = async (moduleName) => {
       message: "Database URL",
       initial: ""
     });
-    customDbUrl = response.dbUrl?.trim() || defaultUrl;
+    if (response.dbUrl === void 0) {
+      console.log(chalk4.yellow("Operation cancelled."));
+      return;
+    }
+    const enteredUrl = response.dbUrl?.trim() || "";
+    usedDefaultDbUrl = enteredUrl.length === 0;
+    customDbUrl = validateDatabaseUrl(enteredUrl || defaultUrl, resolvedModuleName);
   }
-  const spinner = ora2(`Checking registry for ${moduleName}...`).start();
+  const pm = resolvePackageManager(projectRoot);
+  const spinner = ora2(`Checking registry for ${resolvedModuleName}...`).start();
+  let currentStep = "package manager preflight";
   try {
+    spinner.text = `Checking ${pm} availability...`;
+    await ensurePackageManagerAvailable(pm);
+    currentStep = "registry fetch";
+    spinner.text = `Checking registry for ${resolvedModuleName}...`;
     const registryContext = await fetchRegistry();
-    const module = registryContext.manifest.modules[moduleName];
+    const module = registryContext.manifest.modules[resolvedModuleName];
     if (!module) {
-      spinner.fail(`Module '${moduleName}' not found.`);
+      spinner.fail(`Module '${resolvedModuleName}' not found.`);
       return;
     }
-    spinner.succeed(`Found module: ${chalk4.cyan(moduleName)}`);
+    spinner.succeed(`Found module: ${chalk4.cyan(resolvedModuleName)}`);
     const moduleDeps = module.moduleDependencies || [];
+    currentStep = "module dependency resolution";
     await resolveDependencies(moduleDeps, projectRoot);
+    currentStep = "dependency installation";
     spinner.start("Installing dependencies...");
-    let pm = "npm";
-    if (fs6.existsSync(path6.join(projectRoot, "pnpm-lock.yaml"))) {
-      pm = "pnpm";
-    } else if (fs6.existsSync(path6.join(projectRoot, "bun.lockb"))) {
-      pm = "bun";
-    } else if (fs6.existsSync(path6.join(projectRoot, "yarn.lock"))) {
-      pm = "yarn";
-    }
     await installDependencies(pm, module.dependencies || [], projectRoot);
     await installDependencies(pm, module.devDependencies || [], projectRoot, { dev: true });
     spinner.succeed("Dependencies installed");
+    currentStep = "module scaffolding";
     spinner.start("Scaffolding files...");
+    if (resolvedModuleName === "auth") {
+      authDatabaseDialect = await detectInstalledDatabaseDialect(projectRoot, srcDir);
+    }
     for (const file of module.files) {
-      const content = await fetchFile(file.path, {
+      let fetchPath = file.path;
+      let expectedSha256 = file.sha256;
+      let expectedSize = file.size;
+      if (resolvedModuleName === "auth" && file.target === "db/schema/auth.ts" && authDatabaseDialect === "database-mysql") {
+        fetchPath = "express/db/schema/auth.mysql.ts";
+        expectedSha256 = void 0;
+        expectedSize = void 0;
+      }
+      let content = await fetchFile(fetchPath, {
         baseUrl: registryContext.fileBaseUrl,
-        expectedSha256: file.sha256,
-        expectedSize: file.size
+        expectedSha256,
+        expectedSize
       });
+      if (isDatabaseModule(resolvedModuleName) && file.target === "../drizzle.config.ts") {
+        const normalizedSrcDir = srcDir.replace(/\\/g, "/");
+        content = content.replace(
+          /schema:\s*["'][^"']+["']/,
+          `schema: "./${normalizedSrcDir}/db/schema/*"`
+        );
+      }
       const targetPath = resolveSafeTargetPath2(projectRoot, srcDir, file);
       await fs6.ensureDir(path6.dirname(targetPath));
       await fs6.writeFile(targetPath, content);
     }
+    const schemaExports = module.files.map((file) => file.target.replace(/\\/g, "/")).filter((target) => /^db\/schema\/[^/]+\.ts$/.test(target)).map((target) => path6.posix.basename(target, ".ts")).filter((name) => name !== "index");
+    for (const schemaFileName of schemaExports) {
+      await ensureSchemaExport(projectRoot, srcDir, schemaFileName);
+    }
     spinner.succeed("Files generated");
-    if (moduleName === "auth") {
-      spinner.start("Configuring routes in app.ts...");
+    if (resolvedModuleName === "auth") {
+      spinner.start("Configuring routes...");
       const injected = await injectAuthRoutes(projectRoot, srcDir);
       if (injected) {
-        spinner.succeed("Routes configured in app.ts");
+        spinner.succeed("Routes configured");
       } else {
-        spinner.warn("Could not find app.ts - routes need manual setup");
+        spinner.warn("Could not configure routes automatically");
       }
     }
-    if (moduleName === "error-handler") {
+    if (resolvedModuleName === "error-handler") {
       spinner.start("Configuring error handler in app.ts...");
       const injected = await injectErrorHandler(projectRoot, srcDir);
       if (injected) {
@@ -734,78 +1152,63 @@ var add = async (moduleName) => {
         spinner.warn("Could not find app.ts - error handler needs manual setup");
       }
     }
-    const envConfig = ENV_CONFIGS[moduleName];
+    const envConfig = ENV_CONFIGS[resolvedModuleName];
     if (envConfig) {
+      currentStep = "environment configuration";
       spinner.start("Updating environment configuration...");
       const envVars = { ...envConfig.envVars };
-      if (customDbUrl && (moduleName === "database-pg" || moduleName === "database-mysql")) {
+      if (customDbUrl && isDatabaseModule(resolvedModuleName)) {
         envVars.DATABASE_URL = customDbUrl;
       }
-      await updateEnvFile(projectRoot, envVars);
+      if (resolvedModuleName === "auth") {
+        const hasExistingSecret = await hasEnvVariable(projectRoot, "BETTER_AUTH_SECRET");
+        if (!hasExistingSecret) {
+          envVars.BETTER_AUTH_SECRET = randomBytes(32).toString("hex");
+          generatedAuthSecret = true;
+        }
+      }
+      await updateEnvFile(projectRoot, envVars, true, {
+        overwriteExisting: isDatabaseModule(resolvedModuleName)
+      });
       await updateEnvSchema(projectRoot, srcDir, envConfig.schemaFields);
       spinner.succeed("Environment configured");
     }
     console.log(chalk4.green(`
-\u2714 ${moduleName} added successfully!
+\u2714 ${resolvedModuleName} added successfully!
 `));
-    if (moduleName === "auth") {
-      console.log(chalk4.bold("\u{1F4CB} Next Steps:\n"));
-      console.log(chalk4.yellow("1. Update your .env file:"));
-      console.log(
-        chalk4.dim("   We added placeholder values. Update BETTER_AUTH_SECRET with a secure key.\n")
+    if (databaseBackupPath) {
+      console.log(chalk4.blue(`\u2139 Backup created at: ${databaseBackupPath}
+`));
+    }
+    const docsPath = getModuleDocsPath(resolvedModuleName);
+    const docsUrl = `https://zuro-cli.devbybriyan.com/docs/${docsPath}`;
+    console.log(chalk4.blue(`\u2139 Docs: ${docsUrl}`));
+    if (isDatabaseModule(resolvedModuleName)) {
+      if (usedDefaultDbUrl) {
+        console.log(chalk4.yellow("\u2139 Review DATABASE_URL in .env if your local DB config differs."));
+      }
+      const setupHint = getDatabaseSetupHint(
+        resolvedModuleName,
+        customDbUrl || DEFAULT_DATABASE_URLS[resolvedModuleName]
       );
-      console.log(chalk4.yellow("2. Run database migrations:"));
-      console.log(chalk4.cyan("   npx drizzle-kit generate"));
-      console.log(chalk4.cyan("   npx drizzle-kit migrate\n"));
-      console.log(chalk4.yellow("3. Available endpoints:"));
-      console.log(chalk4.dim("   POST /auth/sign-up/email  - Register"));
-      console.log(chalk4.dim("   POST /auth/sign-in/email  - Login"));
-      console.log(chalk4.dim("   POST /auth/sign-out       - Logout"));
-      console.log(chalk4.dim("   GET  /api/users/me        - Current user\n"));
-    } else if (moduleName === "error-handler") {
-      console.log(chalk4.bold("\u{1F4CB} Usage:\n"));
-      console.log(chalk4.yellow("Throw errors in your controllers:"));
-      console.log(chalk4.dim("   \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-      console.log(chalk4.white(`   import { UnauthorizedError, NotFoundError } from "./lib/errors";`));
-      console.log("");
-      console.log(chalk4.white(`   throw new UnauthorizedError("Invalid credentials");`));
-      console.log(chalk4.white(`   throw new NotFoundError("User not found");`));
-      console.log(chalk4.dim("   \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n"));
-      console.log(chalk4.yellow("Available error classes:"));
-      console.log(chalk4.dim("   BadRequestError     (400)"));
-      console.log(chalk4.dim("   UnauthorizedError   (401)"));
-      console.log(chalk4.dim("   ForbiddenError      (403)"));
-      console.log(chalk4.dim("   NotFoundError       (404)"));
-      console.log(chalk4.dim("   ConflictError       (409)"));
-      console.log(chalk4.dim("   ValidationError     (422)"));
-      console.log(chalk4.dim("   InternalServerError (500)\n"));
-      console.log(chalk4.yellow("Wrap async handlers:"));
-      console.log(chalk4.dim("   \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-      console.log(chalk4.white(`   import { asyncHandler } from "./middleware/error-handler";`));
-      console.log("");
-      console.log(chalk4.white(`   router.get("/users", asyncHandler(async (req, res) => {`));
-      console.log(chalk4.white("       // errors auto-caught"));
-      console.log(chalk4.white("   }));"));
-      console.log(chalk4.dim("   \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n"));
-    } else if (moduleName.includes("database")) {
-      console.log(chalk4.bold("\u{1F4CB} Next Steps:\n"));
-      let stepNum = 1;
-      if (!customDbUrl) {
-        console.log(chalk4.yellow(`${stepNum}. Update DATABASE_URL in .env:`));
-        console.log(
-          chalk4.dim("   We added a placeholder. Update with your actual database credentials.\n")
-        );
-        stepNum++;
+      console.log(chalk4.yellow(`\u2139 Ensure DB exists: ${setupHint}`));
+      console.log(chalk4.yellow("\u2139 Run migrations: npx drizzle-kit generate && npx drizzle-kit migrate"));
+    }
+    if (resolvedModuleName === "auth") {
+      if (generatedAuthSecret) {
+        console.log(chalk4.yellow("\u2139 BETTER_AUTH_SECRET was generated automatically."));
+      } else {
+        console.log(chalk4.yellow("\u2139 Review BETTER_AUTH_SECRET and BETTER_AUTH_URL in .env."));
       }
-      console.log(chalk4.yellow(`${stepNum}. Create schemas in src/db/schema/:`));
-      console.log(chalk4.dim("   Add table files and export from index.ts\n"));
-      stepNum++;
-      console.log(chalk4.yellow(`${stepNum}. Run migrations:`));
-      console.log(chalk4.cyan("   npx drizzle-kit generate"));
-      console.log(chalk4.cyan("   npx drizzle-kit migrate\n"));
+      console.log(chalk4.yellow("\u2139 Run migrations: npx drizzle-kit generate && npx drizzle-kit migrate"));
     }
   } catch (error) {
-    spinner.fail(`Failed to add module: ${error.message}`);
+    spinner.fail(chalk4.red(`Failed during ${currentStep}.`));
+    const errorMessage = error instanceof Error ? error.message : String(error);
+    console.error(chalk4.red(errorMessage));
+    console.log(`
+${chalk4.bold("Retry:")}`);
+    console.log(chalk4.cyan(`  npx zuro-cli add ${resolvedModuleName}`));
   }
 };