@aurorajs.dev/catalyst-cli 1.1.3 → 2.0.0

package/dist/templates/backend/packages/hub/src/@app/hub/app-account/application/paginate/hub-paginate-apps-accounts.service.ts

@@ -2,8 +2,8 @@
  * @aurora-catalyst-generated
  * @source cliter/hub/app-account.aurora.yaml
  */
-import { HubAppAccount } from '@api/graphql';
-import { HubDrizzleAppAccountRepository } from '@app/hub/app-account';
+import { HubAppAccount } from '@api/graphql.js';
+import { HubDrizzleAppAccountRepository } from '@app/hub/app-account/infrastructure/drizzle/hub-drizzle-app-account.repository.js';
 import { HandlerMeta, Pagination, QueryStatement } from '@aurorajs.dev/core-back';
 import { Injectable } from '@nestjs/common';
 
@@ -16,10 +16,12 @@ export class HubPaginateAppsAccountsService {
     constraint?: QueryStatement,
     handlerMeta?: HandlerMeta,
   ): Promise<Pagination<HubAppAccount>> {
-    return await this.repository.paginate({
+    const pagination = await this.repository.paginate({
       queryStatement,
       constraint,
       handlerMeta,
     });
+
+    return pagination;
   }
 }

package/dist/templates/backend/packages/hub/src/@app/hub/app-account/application/update/hub-update-app-account-by-id.handler.ts

@@ -2,9 +2,10 @@
  * @aurora-catalyst-generated
  * @source cliter/hub/app-account.aurora.yaml
  */
-import { HubAppAccount, HubUpdateAppAccountByIdInput } from '@api/graphql';
-import { HubFindAppAccountByIdService, HubUpdateAppAccountByIdService } from '@app/hub/app-account';
-import { HubAppAccountFieldSchema } from '@app/hub/app-account/domain';
+import { HubAppAccount, HubUpdateAppAccountByIdInput } from '@api/graphql.js';
+import { HubFindAppAccountByIdService } from '@app/hub/app-account/application/find/hub-find-app-account-by-id.service.js';
+import { HubUpdateAppAccountByIdService } from '@app/hub/app-account/application/update/hub-update-app-account-by-id.service.js';
+import { HubAppAccountFieldSchema } from '@app/hub/app-account/domain/index.js';
 import { ApplySchema, EmitEvent, HandlerMeta, Obj, QueryStatement } from '@aurorajs.dev/core-back';
 import { Injectable, NotFoundException } from '@nestjs/common';
 import { EventEmitter2 } from '@nestjs/event-emitter';
@@ -18,7 +19,7 @@ export class HubUpdateAppAccountByIdHandler {
   ) {}
 
   @EmitEvent('hub.appAccount.updated')
-  @ApplySchema(HubAppAccountFieldSchema)
+  @ApplySchema({ schema: HubAppAccountFieldSchema, operation: 'update' })
   async main(
     payload: HubUpdateAppAccountByIdInput,
     constraint?: QueryStatement,
@@ -43,7 +44,6 @@ export class HubUpdateAppAccountByIdHandler {
     // data loss, reproduced twice in production) — see
     // cliter/harness-rules/persistence-integrity.md.
     const dataToUpdate = Obj.diffAtomic(payload, appAccount);
-
     await this.updateByIdService.main(
       {
         ...dataToUpdate,

package/dist/templates/backend/packages/hub/src/@app/hub/app-account/application/update/hub-update-app-account-by-id.service.ts

@@ -2,8 +2,8 @@
  * @aurora-catalyst-generated
  * @source cliter/hub/app-account.aurora.yaml
  */
-import { HubUpdateAppAccountByIdInput } from '@api/graphql';
-import { HubDrizzleAppAccountRepository } from '@app/hub/app-account';
+import { HubUpdateAppAccountByIdInput } from '@api/graphql.js';
+import { HubDrizzleAppAccountRepository } from '@app/hub/app-account/infrastructure/drizzle/hub-drizzle-app-account.repository.js';
 import { HandlerMeta, QueryStatement } from '@aurorajs.dev/core-back';
 import { Injectable } from '@nestjs/common';
 

package/dist/templates/backend/packages/hub/src/@app/hub/app-account/domain/hub-app-account.field-schema.ts

@@ -2,8 +2,8 @@
  * @aurora-catalyst-generated
  * @source cliter/hub/app-account.aurora.yaml
  */
-import { HubAppFieldSchema } from '@app/hub/app';
-import { IamAccountFieldSchema } from '@app/iam/account';
+import { HubAppFieldSchema } from '@app/hub/app/domain/index.js';
+import { IamAccountFieldSchema } from '@app/iam/account/domain/index.js';
 import { FieldSchema } from '@aurorajs.dev/core-back';
 
 /**

package/dist/templates/backend/packages/hub/src/@app/hub/app-account/domain/index.ts

@@ -1 +1 @@
-export * from './hub-app-account.field-schema';
+export * from './hub-app-account.field-schema.js';

package/dist/templates/backend/packages/hub/src/@app/hub/app-account/index.ts

@@ -3,57 +3,34 @@
  * @source cliter/hub/app-account.aurora.yaml
  */
 // 1 - export domain
-export * from './domain';
+export * from './domain/index.js';
 
 // 2 - export infrastructure
-export { HubDrizzleAppAccountRepository } from './infrastructure/drizzle/hub-drizzle-app-account.repository';
-export { hubAppAccountTable } from './infrastructure/drizzle/hub-drizzle-app-account.schema';
+export { HubDrizzleAppAccountRepository } from './infrastructure/drizzle/hub-drizzle-app-account.repository.js';
+export { hubAppAccountTable } from './infrastructure/drizzle/hub-drizzle-app-account.schema.js';
 
 // 3 - import services
-import { HubCreateAppAccountService } from './application/create/hub-create-app-account.service';
-import { HubCreateAppsAccountsService } from './application/create/hub-create-apps-accounts.service';
-import { HubDeleteAppAccountByIdService } from './application/delete/hub-delete-app-account-by-id.service';
-import { HubDeleteAppsAccountsService } from './application/delete/hub-delete-apps-accounts.service';
-import { HubFindAppAccountByIdService } from './application/find/hub-find-app-account-by-id.service';
-import { HubFindAppAccountService } from './application/find/hub-find-app-account.service';
-import { HubGetAppsAccountsService } from './application/get/hub-get-apps-accounts.service';
-import { HubPaginateAppsAccountsService } from './application/paginate/hub-paginate-apps-accounts.service';
-import { HubUpdateAppAccountByIdService } from './application/update/hub-update-app-account-by-id.service';
+import { HubCreateAppAccountService } from './application/create/hub-create-app-account.service.js';
+import { HubCreateAppsAccountsService } from './application/create/hub-create-apps-accounts.service.js';
+import { HubDeleteAppAccountByIdService } from './application/delete/hub-delete-app-account-by-id.service.js';
+import { HubDeleteAppsAccountsService } from './application/delete/hub-delete-apps-accounts.service.js';
+import { HubFindAppAccountByIdService } from './application/find/hub-find-app-account-by-id.service.js';
+import { HubFindAppAccountService } from './application/find/hub-find-app-account.service.js';
+import { HubGetAppsAccountsService } from './application/get/hub-get-apps-accounts.service.js';
+import { HubPaginateAppsAccountsService } from './application/paginate/hub-paginate-apps-accounts.service.js';
+import { HubUpdateAppAccountByIdService } from './application/update/hub-update-app-account-by-id.service.js';
 
 // 4 - import handlers
-import { HubCreateAppAccountHandler } from './application/create/hub-create-app-account.handler';
-import { HubCreateAppsAccountsHandler } from './application/create/hub-create-apps-accounts.handler';
-import { HubDeleteAppAccountByIdHandler } from './application/delete/hub-delete-app-account-by-id.handler';
-import { HubDeleteAppsAccountsHandler } from './application/delete/hub-delete-apps-accounts.handler';
-import { HubFindAppAccountByIdHandler } from './application/find/hub-find-app-account-by-id.handler';
-import { HubFindAppAccountHandler } from './application/find/hub-find-app-account.handler';
-import { HubGetAppsAccountsHandler } from './application/get/hub-get-apps-accounts.handler';
-import { HubPaginateAppsAccountsHandler } from './application/paginate/hub-paginate-apps-accounts.handler';
-import { HubUpdateAppAccountByIdHandler } from './application/update/hub-update-app-account-by-id.handler';
+import { HubCreateAppAccountHandler } from './application/create/hub-create-app-account.handler.js';
+import { HubCreateAppsAccountsHandler } from './application/create/hub-create-apps-accounts.handler.js';
+import { HubDeleteAppAccountByIdHandler } from './application/delete/hub-delete-app-account-by-id.handler.js';
+import { HubDeleteAppsAccountsHandler } from './application/delete/hub-delete-apps-accounts.handler.js';
+import { HubFindAppAccountByIdHandler } from './application/find/hub-find-app-account-by-id.handler.js';
+import { HubFindAppAccountHandler } from './application/find/hub-find-app-account.handler.js';
+import { HubGetAppsAccountsHandler } from './application/get/hub-get-apps-accounts.handler.js';
+import { HubPaginateAppsAccountsHandler } from './application/paginate/hub-paginate-apps-accounts.handler.js';
+import { HubUpdateAppAccountByIdHandler } from './application/update/hub-update-app-account-by-id.handler.js';
 
-export const HubAppAccountHandlers = [
-  HubCreateAppAccountHandler,
-  HubCreateAppsAccountsHandler,
-  HubPaginateAppsAccountsHandler,
-  HubGetAppsAccountsHandler,
-  HubFindAppAccountByIdHandler,
-  HubFindAppAccountHandler,
-  HubUpdateAppAccountByIdHandler,
-  HubDeleteAppAccountByIdHandler,
-  HubDeleteAppsAccountsHandler,
-];
-
-export const HubAppAccountServices = [
-  HubCreateAppAccountService,
-  HubCreateAppsAccountsService,
-  HubPaginateAppsAccountsService,
-  HubGetAppsAccountsService,
-  HubFindAppAccountService,
-  HubFindAppAccountByIdService,
-  HubUpdateAppAccountByIdService,
-  HubDeleteAppAccountByIdService,
-  HubDeleteAppsAccountsService,
-];
 // 5 - export services
 export {
   HubCreateAppAccountService,
@@ -80,3 +57,26 @@ export {
   HubUpdateAppAccountByIdHandler,
 };
 
+export const HubAppAccountHandlers = [
+  HubCreateAppAccountHandler,
+  HubCreateAppsAccountsHandler,
+  HubPaginateAppsAccountsHandler,
+  HubGetAppsAccountsHandler,
+  HubFindAppAccountByIdHandler,
+  HubFindAppAccountHandler,
+  HubUpdateAppAccountByIdHandler,
+  HubDeleteAppAccountByIdHandler,
+  HubDeleteAppsAccountsHandler,
+];
+
+export const HubAppAccountServices = [
+  HubCreateAppAccountService,
+  HubCreateAppsAccountsService,
+  HubPaginateAppsAccountsService,
+  HubGetAppsAccountsService,
+  HubFindAppAccountService,
+  HubFindAppAccountByIdService,
+  HubUpdateAppAccountByIdService,
+  HubDeleteAppAccountByIdService,
+  HubDeleteAppsAccountsService,
+];

package/dist/templates/backend/packages/hub/src/@app/hub/app-account/infrastructure/drizzle/hub-drizzle-app-account.repository.ts

@@ -7,8 +7,8 @@ import {
   HubCreateAppAccountInput,
   HubUpdateAppAccountByIdInput,
   HubUpdateAppsAccountsInput,
-} from '@api/graphql';
-import { hubAppAccountTable } from '@app/hub/app-account';
+} from '@api/graphql.js';
+import { hubAppAccountTable } from '@app/hub/app-account/infrastructure/drizzle/hub-drizzle-app-account.schema.js';
 import {
   AuditingRunner,
   DRIZZLE_CONNECTION,

package/dist/templates/backend/packages/hub/src/@app/hub/hub.relations.ts

@@ -4,8 +4,8 @@
  */
 import { defineRelations } from 'drizzle-orm';
 
-import { hubAppTable } from '@app/hub/app';
-import { hubAppAccountTable } from '@app/hub/app-account';
+import { hubAppTable } from '@app/hub/app/index.js';
+import { hubAppAccountTable } from '@app/hub/app-account/index.js';
 
 export const hubSchema = {
   hubApp: hubAppTable,

package/dist/templates/backend/packages/hub/src/@app/hub/index.ts

@@ -1,13 +1,9 @@
-import {
-  HubAppHandlers,
-  HubAppServices,
-  HubDrizzleAppRepository,
-} from './app';
+import { HubAppHandlers, HubAppServices, HubDrizzleAppRepository } from './app/index.js';
 import {
   HubAppAccountHandlers,
   HubAppAccountServices,
   HubDrizzleAppAccountRepository,
-} from './app-account';
+} from './app-account/index.js';
 
 /**
  * @aurora-catalyst-generated
@@ -15,7 +11,4 @@ import {
  */
 export const HubHandlers = [...HubAppHandlers, ...HubAppAccountHandlers];
 export const HubServices = [...HubAppServices, ...HubAppAccountServices];
-export const HubRepositories = [
-  HubDrizzleAppRepository,
-  HubDrizzleAppAccountRepository,
-];
+export const HubRepositories = [HubDrizzleAppRepository, HubDrizzleAppAccountRepository];

package/dist/templates/backend/packages/hub/src/@bridges/providers/iam-bounded-context-writer.bridge.ts

@@ -1,5 +1,5 @@
-import { IAM_BOUNDED_CONTEXT_WRITER } from '@bridges/iam/bounded-context';
-import { IamBoundedContextWriterAdapter } from '@bridges/iam/bounded-context/adapters';
+import { IAM_BOUNDED_CONTEXT_WRITER } from '@bridges/iam/bounded-context/index.js';
+import { IamBoundedContextWriterAdapter } from '@bridges/iam/bounded-context/adapters/index.js';
 import { Provider } from '@nestjs/common';
 
 export const iamBoundedContextWriterBridge: Provider = {

package/dist/templates/backend/packages/hub/src/@bridges/providers/iam-permission-writer.bridge.ts

@@ -1,5 +1,5 @@
-import { IAM_PERMISSION_WRITER } from '@bridges/iam/permission';
-import { IamPermissionWriterAdapter } from '@bridges/iam/permission/adapters';
+import { IAM_PERMISSION_WRITER } from '@bridges/iam/permission/index.js';
+import { IamPermissionWriterAdapter } from '@bridges/iam/permission/adapters/index.js';
 import { Provider } from '@nestjs/common';
 
 export const iamPermissionWriterBridge: Provider = {

package/dist/templates/backend/packages/hub/src/@bridges/providers/o-auth-application-provisioner.bridge.ts

@@ -1,5 +1,5 @@
-import { OAUTH_APPLICATION_PROVISIONER } from '@bridges/o-auth/application';
-import { OAuthApplicationProvisionerAdapter } from '@bridges/o-auth/application/adapters';
+import { OAUTH_APPLICATION_PROVISIONER } from '@bridges/o-auth/application/index.js';
+import { OAuthApplicationProvisionerAdapter } from '@bridges/o-auth/application/adapters/index.js';
 import { Provider } from '@nestjs/common';
 
 export const oAuthApplicationProvisionerBridge: Provider = {

package/dist/templates/backend/packages/hub/test/acceptance/hub/hub-app-account-composite-key.e2e-spec.ts

@@ -13,8 +13,8 @@
  *           (x/y grid model). Coverage for the x/y layout lives with HubSaveMyLaunchpadLayoutHandler.
  *   FIX-1c: two accounts' rows are isolated (one account's update does NOT touch the other).
  *
- * Pattern: bootstrap full AppModule, DI-resolve the handlers, call handler.main() directly
- * (avoids the Jest+@Auth ESM limitation — @Auth lives on resolver/controller, not handler).
+ * Pattern: bootstrap full AppModule, DI-resolve the handlers, call handler.main() directly,
+ * bypassing HTTP/JWT — `@Auth` lives on resolver/controller, not handler.
  * Real DB at localhost:5432. Cleanup in afterAll.
  *
  * Account strategy: account 1 is the existing bootstrap-seeded iam_account; account 2 is
@@ -25,21 +25,6 @@
  * exactly one).
  */
 
-// Block ESM cascade before any imports
-jest.mock(
-  '@aurora/modules/authentication/infrastructure/strategies/aurora-hub/aurora-hub-consumer.adapter',
-  () => ({
-    AuroraHubConsumerAdapter: class AuroraHubConsumerAdapterMock {
-      getPassportOptions() {
-        return { jwtFromRequest: () => null, secretOrKey: 'mock' };
-      }
-      validate(): Promise<Record<string, never>> {
-        return Promise.resolve({});
-      }
-    },
-  }),
-);
-
 // NOTE: handlers are imported from the module BARREL (@app/hub/app), NOT deep paths.
 // The handlers themselves import their services from the barrel, so a deep-path-first
 // entry makes the barrel build its provider arrays while the handler module is still
@@ -49,14 +34,14 @@ import {
   HubCreateAppHandler,
   HubDeleteAppByIdHandler,
   HubToggleFavoriteAppHandler,
-} from '@app/hub/app';
+} from '@app/hub/app/index.js';
 import { DRIZZLE_CONNECTION } from '@aurorajs.dev/core-back';
 import { INestApplication } from '@nestjs/common';
 import { Test, TestingModule } from '@nestjs/testing';
 import { sql, type SQL } from 'drizzle-orm';
 import type { NodePgDatabase } from 'drizzle-orm/node-postgres';
 import { randomUUID } from 'node:crypto';
-import { AppModule } from '../../../src/app.module';
+import { AppModule } from '../../../src/app.module.js';
 
 // ---------------------------------------------------------------------------
 // IDs — unique per run to avoid collisions with seed data

package/dist/templates/backend/packages/hub/test/acceptance/hub/hub-app-deprovisioning.e2e-spec.ts

@@ -3,16 +3,15 @@
  *
  * Strategy: bootstrap the full AppModule (real DB, real Drizzle), then pull
  * HubCreateAppHandler and HubDeleteAppByIdHandler directly from DI and invoke
- * handler.main(). This avoids the Jest+@Auth ESM limitation while exercising the
- * real transaction, real repositories, and real DB.
+ * handler.main(), bypassing HTTP/JWT, while exercising the real transaction,
+ * real repositories, and real DB.
  *
  * Auth approach: handlers invoked directly — no HTTP, no JWT.
  * The @Auth decorator lives on resolver/controller, not the handler.
- * @see project memory "Jest + @Auth ESM limitation"
  *
  * Token seeding: raw SQL INSERT into o_auth_access_token and o_auth_refresh_token.
- * The issuance flow drags the @Auth ESM surface; raw SQL is simpler and consistent
- * with the provisioning e2e style (hub-app-provisioning.e2e-spec.ts).
+ * Simpler and consistent with the provisioning e2e style
+ * (hub-app-provisioning.e2e-spec.ts) than issuing real tokens through the flow.
  *
  * What this suite asserts:
  *   5.1a Happy path: provision → seed tokens → delete via handler →
@@ -31,34 +30,19 @@
  * Cleanup: all rows created during the test are deleted in afterAll.
  */
 
-// Mock the aurora-hub-consumer adapter (imports jwks-rsa ESM) before any import.
-jest.mock(
-  '@aurora/modules/authentication/infrastructure/strategies/aurora-hub/aurora-hub-consumer.adapter',
-  () => ({
-    AuroraHubConsumerAdapter: class AuroraHubConsumerAdapterMock {
-      getPassportOptions() {
-        return { jwtFromRequest: () => null, secretOrKey: 'mock' };
-      }
-      validate(): Promise<Record<string, never>> {
-        return Promise.resolve({});
-      }
-    },
-  }),
-);
-
 // BARREL import (not deep paths) — mirrors production boot order. A deep-path-first
 // entry makes the '@app/hub/app' barrel build its provider arrays while the handler
 // module is still mid-evaluation (CJS cycle) → undefined provider → Nest "circular
 // dependency inside HubModule" crash at TestingModule.compile().
-import { HubCreateAppHandler, HubDeleteAppByIdHandler } from '@app/hub/app';
-import { OAuthDrizzleApplicationRepository } from '@app/o-auth/application';
+import { HubCreateAppHandler, HubDeleteAppByIdHandler } from '@app/hub/app/index.js';
+import { OAuthDrizzleApplicationRepository } from '@app/o-auth/application/index.js';
 import { DRIZZLE_CONNECTION } from '@aurorajs.dev/core-back';
 import { INestApplication } from '@nestjs/common';
 import { Test, TestingModule } from '@nestjs/testing';
 import { sql, type SQL } from 'drizzle-orm';
 import type { NodePgDatabase } from 'drizzle-orm/node-postgres';
 import { randomUUID } from 'node:crypto';
-import { AppModule } from '../../../src/app.module';
+import { AppModule } from '../../../src/app.module.js';
 
 // ---------------------------------------------------------------------------
 // Test IDs — unique per suite run to avoid collisions with seed data

package/dist/templates/backend/packages/hub/test/acceptance/hub/hub-app-provisioning.e2e-spec.ts

@@ -2,14 +2,12 @@
  * E2E smoke test — HUB atomic OAuth provisioning (Task Group 7).
  *
  * Strategy: bootstrap the full AppModule (real DB, real Drizzle), then retrieve
- * HubCreateAppHandler directly from the NestJS DI container and call handler.main().
- * This avoids the Jest+@Auth ESM limitation (the @Auth decorator drags in jwks-rsa
- * and cache-manager ESM that ts-jest cannot transform) while still exercising the
- * real transaction, real repositories, and real DB.
+ * HubCreateAppHandler directly from the NestJS DI container and call handler.main(),
+ * bypassing HTTP/JWT, while still exercising the real transaction, real repositories,
+ * and real DB.
  *
  * Auth approach: handler invoked directly — no HTTP transport, no JWT.
  * The @Auth decorator lives on the resolver/controller, not on the handler.
- * @see project memory "Jest + @Auth ESM limitation"
  *
  * DB assertions: Drizzle connection retrieved via
  * `moduleRef.get(DRIZZLE_CONNECTION, { strict: false })` and used for raw SQL
@@ -35,21 +33,6 @@
  * Cleanup: all rows created during the test are deleted in afterAll.
  */
 
-// The aurora-hub-consumer adapter imports jwks-rsa (ESM). Mock it before any import.
-jest.mock(
-  '@aurora/modules/authentication/infrastructure/strategies/aurora-hub/aurora-hub-consumer.adapter',
-  () => ({
-    AuroraHubConsumerAdapter: class AuroraHubConsumerAdapterMock {
-      getPassportOptions() {
-        return { jwtFromRequest: () => null, secretOrKey: 'mock' };
-      }
-      validate(): Promise<Record<string, never>> {
-        return Promise.resolve({});
-      }
-    },
-  }),
-);
-
 // TYPE-ONLY static import (erased at runtime) — a VALUE import here would make
 // this spec the module-graph ENTRY POINT into the hub aggregate: the handler
 // file and its aggregate barrel import each other (codegen convention), so
@@ -58,14 +41,14 @@ jest.mock(
 // "A circular dependency has been detected inside HubModule" at compile().
 // The class VALUE is dynamically imported in beforeAll AFTER AppModule has
 // fully loaded the aggregate in its own (safe) order.
-import type { HubCreateAppHandler } from '@app/hub/app/application/create/hub-create-app.handler';
+import type { HubCreateAppHandler } from '@app/hub/app/application/create/hub-create-app.handler.js';
 import { DRIZZLE_CONNECTION } from '@aurorajs.dev/core-back';
 import { INestApplication } from '@nestjs/common';
 import { Test, TestingModule } from '@nestjs/testing';
 import { sql, type SQL } from 'drizzle-orm';
 import type { NodePgDatabase } from 'drizzle-orm/node-postgres';
 import { randomUUID } from 'node:crypto';
-import { AppModule } from '../../../src/app.module';
+import { AppModule } from '../../../src/app.module.js';
 
 // ---------------------------------------------------------------------------
 // Test IDs — unique per suite run to avoid collisions with seed data
@@ -116,16 +99,12 @@ describe('HUB — atomic OAuth provisioning (e2e)', () => {
 
     // Deferred load AFTER AppModule finished loading — cache is complete, no cycle:
     // pulling this handler in at module scope would make this spec the value
-    // entry point into the cyclic aggregate barrel. Uses `require()` rather
-    // than `await import(...)` so resolution stays a plain CJS require that
-    // jest's `moduleNameMapper` intercepts, instead of a native-ESM `import()`
-    // specifier that would resolve outside the alias mapping under
-    // `moduleResolution: nodenext`. The class SHAPE comes from the type-only
-    // static import above (type-only imports are erased — they add no runtime
-    // edge to the module graph). Runtime timing is identical to the dynamic
-    // import it replaces — both run here, after `app.init()`.
-    // eslint-disable-next-line @typescript-eslint/no-require-imports
-    const hubCreateAppHandlerModule = require('@app/hub/app/application/create/hub-create-app.handler');
+    // entry point into the cyclic aggregate barrel. The class SHAPE comes from
+    // the type-only static import above (type-only imports are erased — they
+    // add no runtime edge to the module graph).
+    const hubCreateAppHandlerModule = await import(
+      '@app/hub/app/application/create/hub-create-app.handler.js'
+    );
     const HubCreateAppHandlerClass: typeof HubCreateAppHandler =
       hubCreateAppHandlerModule.HubCreateAppHandler;
     // strict: false searches all DI sub-modules (models are registered per-module)

package/dist/templates/backend/packages/hub/test/acceptance/hub/hub-per-app-access.e2e-spec.ts

@@ -2,12 +2,10 @@
  * E2E suite — HUB per-app IAM access permission (Task Group 7, add-hub-per-app-access-permission).
  *
  * Strategy: bootstrap the full AppModule (real DB, real Drizzle), pull handlers and seeders
- * directly from the NestJS DI container, and call them without HTTP transport.
- * This avoids the Jest+@Auth ESM limitation while exercising real transactions, real
- * repositories, and the real PostgreSQL DB.
+ * directly from the NestJS DI container, and call them without HTTP transport, while
+ * exercising real transactions, real repositories, and the real PostgreSQL DB.
  *
  * Auth approach: handlers invoked directly — no JWT, no HTTP.
- * @see project memory "Jest + @Auth ESM limitation"
  *
  * DB assertions: raw SQL via `db.execute(sql\`...\`)` (drizzle-orm tagged-template helper —
  * `${value}` interpolates as a safe parameterized value, no manual escaping needed).
@@ -34,34 +32,19 @@
  *   o_auth_application_client → o_auth_client → o_auth_application → hub_app
  */
 
-// Mock AuroraHubConsumerAdapter BEFORE any imports (ESM / jwks-rsa blocker).
-jest.mock(
-  '@aurora/modules/authentication/infrastructure/strategies/aurora-hub/aurora-hub-consumer.adapter',
-  () => ({
-    AuroraHubConsumerAdapter: class AuroraHubConsumerAdapterMock {
-      getPassportOptions() {
-        return { jwtFromRequest: () => null, secretOrKey: 'mock' };
-      }
-      validate(): Promise<Record<string, never>> {
-        return Promise.resolve({});
-      }
-    },
-  }),
-);
-
-import { HubPerAppPermissionSeeder } from '@api/hub/hub-per-app-permission.seeder';
-import { BOOTSTRAP_ADMIN_ROLE_ID } from '@api/iam/iam-bootstrap.seeder';
-import { HubCreateAppHandler } from '@app/hub/app/application/create/hub-create-app.handler';
-import { HubDeleteAppByIdHandler } from '@app/hub/app/application/delete/hub-delete-app-by-id.handler';
-import { HubGetAppsHandler } from '@app/hub/app/application/get/hub-get-apps.handler';
+import { HubPerAppPermissionSeeder } from '@api/hub/hub-per-app-permission.seeder.js';
+import { BOOTSTRAP_ADMIN_ROLE_ID } from '@api/iam/iam-bootstrap.seeder.js';
+import { HubCreateAppHandler } from '@app/hub/app/application/create/hub-create-app.handler.js';
+import { HubDeleteAppByIdHandler } from '@app/hub/app/application/delete/hub-delete-app-by-id.handler.js';
+import { HubGetAppsHandler } from '@app/hub/app/application/get/hub-get-apps.handler.js';
 import { DRIZZLE_CONNECTION } from '@aurorajs.dev/core-back';
-import { IamPermissionWriterAdapter } from '@bridges/iam/permission/adapters';
+import { IamPermissionWriterAdapter } from '@bridges/iam/permission/adapters/index.js';
 import { ConflictException, INestApplication } from '@nestjs/common';
 import { Test, TestingModule } from '@nestjs/testing';
 import { sql } from 'drizzle-orm';
 import type { NodePgDatabase } from 'drizzle-orm/node-postgres';
 import { randomUUID } from 'node:crypto';
-import { AppModule } from '../../../src/app.module';
+import { AppModule } from '../../../src/app.module.js';
 
 // ─── Typed DB query helper ───────────────────────────────────────────────────
 

package/dist/templates/backend/packages/iam/src/@api/iam/account/controllers/iam-check-password-me-account.controller.ts

@@ -2,9 +2,9 @@
  * @aurora-catalyst-generated
  * @source cliter/iam/account.aurora.yaml
  */
-import { IamAccountDto } from '@api/iam/account';
-import { IamCheckPasswordMeAccountHandler } from '@app/iam/account';
-import { Auth } from '@aurora/decorators';
+import { IamAccountDto } from '@api/iam/account/index.js';
+import { IamCheckPasswordMeAccountHandler } from '@app/iam/account/index.js';
+import { Auth } from '@aurora/decorators/index.js';
 import { QueryStatement, Timezone } from '@aurorajs.dev/core-back';
 import { Body, Controller, HttpCode, Post } from '@nestjs/common';
 import { ApiOkResponse, ApiOperation, ApiTags } from '@nestjs/swagger';

package/dist/templates/backend/packages/iam/src/@api/iam/account/controllers/iam-check-unique-email-account.controller.ts

@@ -2,8 +2,8 @@
  * @aurora-catalyst-generated
  * @source cliter/iam/account.aurora.yaml
  */
-import { IamCheckUniqueEmailAccountHandler } from '@app/iam/account';
-import { Auth } from '@aurora/decorators';
+import { IamCheckUniqueEmailAccountHandler } from '@app/iam/account/index.js';
+import { Auth } from '@aurora/decorators/index.js';
 import { Timezone } from '@aurorajs.dev/core-back';
 import { Body, Controller, HttpCode, Post } from '@nestjs/common';
 import { ApiOkResponse, ApiOperation, ApiTags } from '@nestjs/swagger';

package/dist/templates/backend/packages/iam/src/@api/iam/account/controllers/iam-check-unique-username-account.controller.ts

@@ -2,8 +2,8 @@
  * @aurora-catalyst-generated
  * @source cliter/iam/account.aurora.yaml
  */
-import { IamCheckUniqueUsernameAccountHandler } from '@app/iam/account';
-import { Auth } from '@aurora/decorators';
+import { IamCheckUniqueUsernameAccountHandler } from '@app/iam/account/index.js';
+import { Auth } from '@aurora/decorators/index.js';
 import { Timezone } from '@aurorajs.dev/core-back';
 import { Body, Controller, HttpCode, Post } from '@nestjs/common';
 import { ApiOkResponse, ApiOperation, ApiTags } from '@nestjs/swagger';

package/dist/templates/backend/packages/iam/src/@api/iam/account/controllers/iam-count-account.controller.ts

@@ -2,8 +2,8 @@
  * @aurora-catalyst-generated
  * @source cliter/iam/account.aurora.yaml
  */
-import { IamCountAccountHandler } from '@app/iam/account';
-import { Auth } from '@aurora/decorators';
+import { IamCountAccountHandler } from '@app/iam/account/index.js';
+import { Auth } from '@aurora/decorators/index.js';
 import { QueryStatement, Timezone } from '@aurorajs.dev/core-back';
 import { Body, Controller, HttpCode, Post } from '@nestjs/common';
 import { ApiOkResponse, ApiOperation, ApiQuery, ApiTags } from '@nestjs/swagger';

package/dist/templates/backend/packages/iam/src/@api/iam/account/controllers/iam-create-account.controller.ts

@@ -2,10 +2,10 @@
  * @aurora-catalyst-generated
  * @source cliter/iam/account.aurora.yaml
  */
-import { IamAccount } from '@api/graphql';
-import { IamAccountDto, IamCreateAccountDto } from '@api/iam/account';
-import { IamCreateAccountHandler } from '@app/iam/account';
-import { Auth } from '@aurora/decorators';
+import { IamAccount } from '@api/graphql.js';
+import { IamAccountDto, IamCreateAccountDto } from '@api/iam/account/index.js';
+import { IamCreateAccountHandler } from '@app/iam/account/index.js';
+import { Auth } from '@aurora/decorators/index.js';
 import { Auditing, AuditingMeta, CurrentAccount, Timezone } from '@aurorajs.dev/core-back';
 import { Body, Controller, Post } from '@nestjs/common';
 import { ApiCreatedResponse, ApiOperation, ApiTags } from '@nestjs/swagger';

package/dist/templates/backend/packages/iam/src/@api/iam/account/controllers/iam-delete-account-by-id.controller.ts

@@ -2,9 +2,9 @@
  * @aurora-catalyst-generated
  * @source cliter/iam/account.aurora.yaml
  */
-import { IamAccountDto } from '@api/iam/account';
-import { IamDeleteAccountByIdHandler } from '@app/iam/account';
-import { Auth } from '@aurora/decorators';
+import { IamAccountDto } from '@api/iam/account/index.js';
+import { IamDeleteAccountByIdHandler } from '@app/iam/account/index.js';
+import { Auth } from '@aurora/decorators/index.js';
 import { Auditing, AuditingMeta, QueryStatement, Timezone } from '@aurorajs.dev/core-back';
 import { Body, Controller, Delete, Param } from '@nestjs/common';
 import { ApiOkResponse, ApiOperation, ApiTags } from '@nestjs/swagger';

package/dist/templates/backend/packages/iam/src/@api/iam/account/controllers/iam-delete-accounts.controller.ts

@@ -2,9 +2,9 @@
  * @aurora-catalyst-generated
  * @source cliter/iam/account.aurora.yaml
  */
-import { IamAccountDto } from '@api/iam/account';
-import { IamDeleteAccountsHandler } from '@app/iam/account';
-import { Auth } from '@aurora/decorators';
+import { IamAccountDto } from '@api/iam/account/index.js';
+import { IamDeleteAccountsHandler } from '@app/iam/account/index.js';
+import { Auth } from '@aurora/decorators/index.js';
 import { Auditing, AuditingMeta, QueryStatement, Timezone } from '@aurorajs.dev/core-back';
 import { Body, Controller, Delete } from '@nestjs/common';
 import { ApiBody, ApiOkResponse, ApiOperation, ApiQuery, ApiTags } from '@nestjs/swagger';

package/dist/templates/backend/packages/iam/src/@api/iam/account/controllers/iam-find-account-by-id.controller.ts

@@ -2,9 +2,9 @@
  * @aurora-catalyst-generated
  * @source cliter/iam/account.aurora.yaml
  */
-import { IamAccountDto } from '@api/iam/account';
-import { IamFindAccountByIdHandler } from '@app/iam/account';
-import { Auth } from '@aurora/decorators';
+import { IamAccountDto } from '@api/iam/account/index.js';
+import { IamFindAccountByIdHandler } from '@app/iam/account/index.js';
+import { Auth } from '@aurora/decorators/index.js';
 import { QueryStatement, Timezone } from '@aurorajs.dev/core-back';
 import { Body, Controller, HttpCode, Param, Post } from '@nestjs/common';
 import { ApiOkResponse, ApiOperation, ApiTags } from '@nestjs/swagger';