@idevconn/create-icore 0.5.2 → 0.6.1

package/dist/index.js

@@ -32,6 +32,24 @@ async function copyTree(src, dest) {
     else if (entry.isFile()) await copyFile(s, d);
   }
 }
+var TRANSPORT_ENV_TOKEN = {
+  redis: "REDIS",
+  nats: "NATS",
+  mqtt: "MQTT",
+  rmq: "RMQ",
+  kafka: "KAFKA"
+};
+var TRANSPORT_DEPS = {
+  nats: { nats: "^2.29.3" },
+  mqtt: { mqtt: "^5.15.1" },
+  rmq: { amqplib: "^2.0.1", "amqp-connection-manager": "^5.0.0" },
+  kafka: { kafkajs: "^2.2.4" }
+};
+function uncommentTransportEnv(text2, prefix, transport) {
+  const token = TRANSPORT_ENV_TOKEN[transport];
+  if (!token) return text2;
+  return text2.replace(new RegExp(`^# (${prefix}_${token}_[A-Z0-9_]*=)`, "gm"), "$1");
+}
 async function rewriteRootPackageJson(targetDir, opts) {
   const pkgPath = join(targetDir, "package.json");
   const raw = await readFile(pkgPath, "utf8");
@@ -40,38 +58,31 @@ async function rewriteRootPackageJson(targetDir, opts) {
   pkg["version"] = "0.0.1";
   pkg["private"] = true;
   delete pkg.description;
-  if (opts.transport === "nats") {
+  const transportDeps = TRANSPORT_DEPS[opts.transport];
+  if (transportDeps) {
     const deps = pkg["dependencies"] ??= {};
-    deps["nats"] = "^2.29.3";
+    Object.assign(deps, transportDeps);
   }
   if (opts.packageManager !== "yarn") {
     delete pkg.packageManager;
+  } else {
+    try {
+      const yarnrc = await readFile(join(targetDir, ".yarnrc.yml"), "utf8");
+      const match = yarnrc.match(/^yarnPath:\s*.+yarn-(\d+\.\d+\.\d+)\.cjs/m);
+      if (match?.[1]) {
+        pkg["packageManager"] = `yarn@${match[1]}`;
+      }
+    } catch {
+    }
   }
-  if (opts.packageManager === "pnpm") {
-    pkg["pnpm"] = {
-      onlyBuiltDependencies: [
-        "@firebase/util",
-        "@nestjs/core",
-        "@parcel/watcher",
-        "@scarf/scarf",
-        "@swc/core",
-        "less",
-        "msgpackr-extract",
-        "nx",
-        "protobufjs",
-        "unrs-resolver"
-      ]
-    };
-  }
+  delete pkg.pnpm;
   await writeFile(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
 }
 async function writeAuthEnv(targetDir, opts) {
   const envExample = join(targetDir, "apps/microservices/auth/.env.example");
   const env = await readFile(envExample, "utf8");
   let next = env.replace(/^AUTH_PROVIDER=.*$/m, `AUTH_PROVIDER=${opts.authProvider}`).replace(/^AUTH_TRANSPORT=.*$/m, `AUTH_TRANSPORT=${opts.transport}`);
-  if (opts.transport !== "tcp") {
-    next = next.replace(/^# (AUTH_(?:REDIS|NATS)_URL=)/m, "$1");
-  }
+  next = uncommentTransportEnv(next, "AUTH", opts.transport);
   await writeFile(join(targetDir, "apps/microservices/auth/.env"), next);
 }
 async function writeUploadEnv(targetDir, opts) {
@@ -79,9 +90,7 @@ async function writeUploadEnv(targetDir, opts) {
   const envExample = join(targetDir, "apps/microservices/upload/.env.example");
   const env = await readFile(envExample, "utf8");
   let next = env.replace(/^STORAGE_PROVIDER=.*$/m, `STORAGE_PROVIDER=${opts.upload}`).replace(/^UPLOAD_TRANSPORT=.*$/m, `UPLOAD_TRANSPORT=${opts.transport}`);
-  if (opts.transport !== "tcp") {
-    next = next.replace(/^# (UPLOAD_(?:REDIS|NATS)_URL=)/m, "$1");
-  }
+  next = uncommentTransportEnv(next, "UPLOAD", opts.transport);
   await writeFile(join(targetDir, "apps/microservices/upload/.env"), next);
 }
 async function writeNotesEnv(targetDir, opts) {
@@ -90,9 +99,7 @@ async function writeNotesEnv(targetDir, opts) {
   try {
     const env = await readFile(envExample, "utf8");
     let next = env.replace(/^NOTES_TRANSPORT=.*$/m, `NOTES_TRANSPORT=${opts.transport}`);
-    if (opts.transport !== "tcp") {
-      next = next.replace(/^# (NOTES_(?:REDIS|NATS)_URL=)/m, "$1");
-    }
+    next = uncommentTransportEnv(next, "NOTES", opts.transport);
     await writeFile(join(targetDir, "apps/microservices/notes/.env"), next);
   } catch {
   }
@@ -101,8 +108,8 @@ async function writeGatewayEnv(targetDir, opts) {
   const envExample = join(targetDir, "apps/api/.env.example");
   const env = await readFile(envExample, "utf8");
   let next = env.replace(/^AUTH_TRANSPORT=.*$/m, `AUTH_TRANSPORT=${opts.transport}`).replace(/^UPLOAD_TRANSPORT=.*$/m, `UPLOAD_TRANSPORT=${opts.transport}`).replace(/^NOTES_TRANSPORT=.*$/m, `NOTES_TRANSPORT=${opts.transport}`).replace(/^PAYMENT_TRANSPORT=.*$/m, `PAYMENT_TRANSPORT=${opts.transport}`);
-  if (opts.transport !== "tcp") {
-    next = next.replace(/^# (AUTH_(?:REDIS|NATS)_URL=)/m, "$1").replace(/^# (UPLOAD_(?:REDIS|NATS)_URL=)/m, "$1").replace(/^# (NOTES_(?:REDIS|NATS)_URL=)/m, "$1").replace(/^# (PAYMENT_(?:REDIS|NATS)_URL=)/m, "$1");
+  for (const prefix of ["AUTH", "UPLOAD", "NOTES", "PAYMENT"]) {
+    next = uncommentTransportEnv(next, prefix, opts.transport);
   }
   await writeFile(join(targetDir, "apps/api/.env"), next);
 }
@@ -140,9 +147,7 @@ async function writePaymentEnv(targetDir, opts) {
   try {
     const env = await readFile(envExample, "utf8");
     let next = env.replace(/^PAYMENT_PROVIDER=.*$/m, `PAYMENT_PROVIDER=${opts.payment}`).replace(/^PAYMENT_TRANSPORT=.*$/m, `PAYMENT_TRANSPORT=${opts.transport}`);
-    if (opts.transport !== "tcp") {
-      next = next.replace(/^# (PAYMENT_(?:REDIS|NATS)_URL=)/m, "$1");
-    }
+    next = uncommentTransportEnv(next, "PAYMENT", opts.transport);
     await writeFile(join(targetDir, "apps/microservices/payment/.env"), next);
   } catch {
   }
@@ -231,7 +236,10 @@ async function removeNotesStack(targetDir) {
     await writeFile(appModulePath, next);
   } catch {
   }
-  await stripDeps(join(targetDir, "apps/api/package.json"), ["@icore/notes-client"]);
+  await stripDeps(join(targetDir, "apps/api/package.json"), [
+    "@icore/notes-client",
+    "@casl/ability"
+  ]);
   await stripGatewayTransport(targetDir, "NOTES");
   const tsconfigPath = join(targetDir, "tsconfig.base.json");
   try {
@@ -243,21 +251,16 @@ async function removeNotesStack(targetDir) {
   const siderPath = join(targetDir, "apps/client/src/components/layout/LayoutSider.tsx");
   try {
     const src = await readFile(siderPath, "utf8");
-    const next = src.replace(", StickyNote", "").replace(/\n {8}<Link\n {10}to="\/_dashboard\/notes"[\s\S]*?<\/Link>/, "").replace(", FileTextOutlined", "").replace(
+    const next = src.replace(", StickyNote", "").replace(/\n {8}<Link\n {10}to="\/(?:_dashboard\/)?notes"[\s\S]*?<\/Link>/, "").replace(", FileTextOutlined", "").replace(
       "const selectedKey = pathname.includes('/notes')\n    ? 'notes'\n    : pathname.includes('/profile')",
       "const selectedKey = pathname.includes('/profile')"
     ).replace(
-      `
-    {
-      key: 'notes',
-      icon: <FileTextOutlined />,
-      label: <Link to="/_dashboard/notes">{t('notes.title')}</Link>,
-    },`,
+      /\n {4}\{\n {6}key: 'notes',\n {6}icon: <FileTextOutlined \/>,\n {6}label: <Link to="\/(?:_dashboard\/)?notes">\{t\('notes\.title'\)\}<\/Link>,\n {4}\},/,
       ""
     ).replace("import NoteOutlinedIcon from '@mui/icons-material/NoteOutlined';\n", "").replace(
-      /\n {8}<ListItemButton\n {10}component=\{Link\}\n {10}to="\/_dashboard\/notes"[\s\S]*?<\/ListItemButton>/,
+      /\n {8}<ListItemButton\n {10}component=\{Link\}\n {10}to="\/(?:_dashboard\/)?notes"[\s\S]*?<\/ListItemButton>/,
       ""
-    ).replace(/\n\s*<Link to="\/_dashboard\/notes">[\s\S]*?<\/Link>/m, "");
+    ).replace(/\n\s*<Link to="\/(?:_dashboard\/)?notes">[\s\S]*?<\/Link>/m, "");
     await writeFile(siderPath, next);
   } catch {
   }
@@ -400,7 +403,7 @@ async function removeUnusedDbStrategies(targetDir, dbProvider) {
     await stripTsconfigPath(targetDir, "@icore/db-supabase");
     try {
       const src = await readFile(modulePath, "utf8");
-      const next = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/m, "").replace(/^import \{[^}]*SupabaseDBStrategy[^}]*\} from '@icore\/db-supabase';\n/m, "").replace(/\nfunction makeSupabaseDB[\s\S]*?\n}\n/m, "").replace(
+      const next = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/m, "").replace(/^import \{[^}]*SupabaseDBStrategy[^}]*\} from '@icore\/db-supabase';\n/m, "").replace(/\nfunction makeSupabaseDB[\s\S]*?\n}\n/m, "").replace(/\nfunction requireEnv[\s\S]*?\n}\n/m, "").replace(
         /if \(provider === 'supabase'\) return makeSupabaseDB\(cfg\);\n\s*return makeFirestoreDB\(cfg\);/m,
         "return makeFirestoreDB(cfg);"
       );
@@ -533,11 +536,69 @@ async function scaffold(opts, templatesDir) {
     await rm(join(opts.targetDir, ".yarn"), { recursive: true, force: true });
     await rm(join(opts.targetDir, ".yarnrc.yml"), { force: true });
   }
+  if (opts.packageManager === "pnpm") {
+    await writePnpmWorkspace(opts.targetDir);
+    await rewritePnpmWorkspaceDeps(opts.targetDir);
+  }
   await patchGitignoreForPm(opts.targetDir, opts.packageManager);
   await writeAiFiles(opts.targetDir, opts);
   if (opts.install) runInstall(opts.targetDir, opts.packageManager);
   if (opts.initGit) gitInit(opts.targetDir, opts.projectName);
 }
+async function writePnpmWorkspace(targetDir) {
+  const pkgPath = join(targetDir, "package.json");
+  const pkg = JSON.parse(await readFile(pkgPath, "utf8"));
+  const workspaces = pkg.workspaces ?? [];
+  const packagesBlock = workspaces.map((p2) => `  - '${p2}'`).join("\n");
+  const allowBuilds = [
+    "@firebase/util",
+    "@nestjs/core",
+    "@parcel/watcher",
+    "@scarf/scarf",
+    "@swc/core",
+    "less",
+    "msgpackr-extract",
+    "nx",
+    "protobufjs",
+    "unrs-resolver"
+  ].map((p2) => `  '${p2}': true`).join("\n");
+  const content = `packages:
+${packagesBlock}
+
+allowBuilds:
+${allowBuilds}
+`;
+  await writeFile(join(targetDir, "pnpm-workspace.yaml"), content);
+}
+async function rewritePnpmWorkspaceDeps(targetDir) {
+  const { readdir: rd } = await import("fs/promises");
+  async function walk(dir) {
+    const found = [];
+    let entries;
+    try {
+      entries = await rd(dir, { withFileTypes: true });
+    } catch {
+      return found;
+    }
+    for (const e of entries) {
+      if (e.isDirectory() && e.name !== "node_modules") {
+        found.push(...await walk(join(dir, e.name)));
+      } else if (e.isFile() && e.name === "package.json") {
+        found.push(join(dir, e.name));
+      }
+    }
+    return found;
+  }
+  const pkgFiles = await walk(targetDir);
+  for (const f of pkgFiles) {
+    try {
+      const raw = await readFile(f, "utf8");
+      const next = raw.replace(/"(@icore\/[^"]+)":\s*"\*"/g, '"$1": "workspace:*"');
+      if (next !== raw) await writeFile(f, next);
+    } catch {
+    }
+  }
+}
 async function patchGitignoreForPm(targetDir, pm) {
   const giPath = join(targetDir, ".gitignore");
   try {
@@ -641,7 +702,7 @@ Apache-2.0
 
 - **Branch strategy**: \`dev\` is default. Cut \`feature/<name>\` or \`bug/<name>\` from dev. PRs only target dev. Never push directly to main.
 - **No code without approval**: Propose changes first, wait for go-ahead.
-- **\u0417\u0410\u041A\u041E\u041D \u2014 no crash on missing .env**: MS factories must catch config errors, print a boxed banner with ALL missing vars, and return a Fake strategy in dev. In prod (\`NODE_ENV=production\`) throw the same banner. The \`formatEnvBanner\` + \`missingEnv\` helpers from \`@icore/shared\` handle this.
+- **RULE \u2014 no crash on missing .env**: MS factories must catch config errors, print a boxed banner with ALL missing vars, and return a Fake strategy in dev. In prod (\`NODE_ENV=production\`) throw the same banner. The \`formatEnvBanner\` + \`missingEnv\` helpers from \`@icore/shared\` handle this.
 - **Post-coding routine**: \`npx prettier --write <files>\` \u2192 \`${nx} lint <project>\` \u2192 \`${nx} build <project>\` \u2014 all green before committing.
 - **Nx generators only**: never hand-write \`project.json\` / tsconfig stacks. Use \`${nx} g @nx/<plugin>:<schematic>\`.
 
@@ -938,7 +999,10 @@ Re-run with @latest to refresh:
     options: [
       { value: "tcp", label: "TCP (default, no broker required)" },
       { value: "redis", label: "Redis" },
-      { value: "nats", label: "NATS" }
+      { value: "nats", label: "NATS" },
+      { value: "mqtt", label: "MQTT" },
+      { value: "rmq", label: "RabbitMQ" },
+      { value: "kafka", label: "Kafka" }
     ],
     initialValue: "tcp"
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@idevconn/create-icore",
-  "version": "0.5.2",
+  "version": "0.6.1",
   "description": "Bootstrap a new project from the iCore scaffold (Nx + NestJS + React + Vite + shadcn/Tailwind, swappable auth + storage providers).",
   "license": "Apache-2.0",
   "author": "iDEVconn",

package/templates/apps/api/.env.example

@@ -7,6 +7,11 @@ AUTH_HOST=127.0.0.1
 AUTH_PORT=4001
 # AUTH_REDIS_URL=redis://localhost:6379
 # AUTH_NATS_URL=nats://localhost:4222
+# AUTH_MQTT_URL=mqtt://localhost:1883
+# AUTH_RMQ_URL=amqp://localhost:5672
+# AUTH_RMQ_QUEUE=auth_queue
+# AUTH_KAFKA_BROKERS=localhost:9092
+# AUTH_KAFKA_CLIENT_ID=auth
 
 # Upload MS transport — must match apps/microservices/upload/.env
 UPLOAD_TRANSPORT=tcp
@@ -14,6 +19,11 @@ UPLOAD_HOST=127.0.0.1
 UPLOAD_PORT=4002
 # UPLOAD_REDIS_URL=redis://localhost:6379
 # UPLOAD_NATS_URL=nats://localhost:4222
+# UPLOAD_MQTT_URL=mqtt://localhost:1883
+# UPLOAD_RMQ_URL=amqp://localhost:5672
+# UPLOAD_RMQ_QUEUE=upload_queue
+# UPLOAD_KAFKA_BROKERS=localhost:9092
+# UPLOAD_KAFKA_CLIENT_ID=upload
 
 # Notes MS transport — must match apps/microservices/notes/.env
 NOTES_TRANSPORT=tcp
@@ -21,6 +31,11 @@ NOTES_HOST=127.0.0.1
 NOTES_PORT=4004
 # NOTES_REDIS_URL=redis://localhost:6379
 # NOTES_NATS_URL=nats://localhost:4222
+# NOTES_MQTT_URL=mqtt://localhost:1883
+# NOTES_RMQ_URL=amqp://localhost:5672
+# NOTES_RMQ_QUEUE=notes_queue
+# NOTES_KAFKA_BROKERS=localhost:9092
+# NOTES_KAFKA_CLIENT_ID=notes
 
 # Payment MS transport — must match apps/microservices/payment/.env
 PAYMENT_TRANSPORT=tcp
@@ -28,6 +43,11 @@ PAYMENT_HOST=127.0.0.1
 PAYMENT_PORT=4003
 # PAYMENT_REDIS_URL=redis://localhost:6379
 # PAYMENT_NATS_URL=nats://localhost:4222
+# PAYMENT_MQTT_URL=mqtt://localhost:1883
+# PAYMENT_RMQ_URL=amqp://localhost:5672
+# PAYMENT_RMQ_QUEUE=payment_queue
+# PAYMENT_KAFKA_BROKERS=localhost:9092
+# PAYMENT_KAFKA_CLIENT_ID=payment
 
 # Per-request multipart file size cap (KB). Default 5120 (5 MB) when unset.
 MAX_FILE_SIZE_KB=5120

package/templates/apps/api/package.json

@@ -3,6 +3,7 @@
   "version": "0.0.1",
   "private": true,
   "devDependencies": {
+    "@types/express": "^4.17.25",
     "@types/multer": "*"
   },
   "dependencies": {

package/templates/apps/api/tsconfig.json

@@ -11,6 +11,11 @@
     }
   ],
   "compilerOptions": {
-    "esModuleInterop": true
+    "esModuleInterop": true,
+    "module": "node16",
+    "moduleResolution": "node16",
+    "experimentalDecorators": true,
+    "emitDecoratorMetadata": true,
+    "target": "es2021"
   }
 }

package/templates/apps/api/webpack.config.js

@@ -1,4 +1,5 @@
 const { NxAppWebpackPlugin } = require('@nx/webpack/app-plugin');
+const { TsconfigPathsPlugin } = require('tsconfig-paths-webpack-plugin');
 const { join } = require('path');
 
 module.exports = {
@@ -9,6 +10,23 @@ module.exports = {
       devtoolModuleFilenameTemplate: '[absolute-resource-path]',
     }),
   },
+  resolve: {
+    plugins: [new TsconfigPathsPlugin({ configFile: join(__dirname, 'tsconfig.app.json') })],
+  },
+  // See microservices/*/webpack.config.js for the @icore/* bundling rationale.
+  externals: [
+    function ({ request }, callback) {
+      if (
+        !request ||
+        request.startsWith('.') ||
+        request.startsWith('/') ||
+        request.startsWith('@icore/')
+      ) {
+        return callback();
+      }
+      return callback(null, 'commonjs ' + request);
+    },
+  ],
   plugins: [
     new NxAppWebpackPlugin({
       target: 'node',
@@ -19,6 +37,8 @@ module.exports = {
       optimization: false,
       outputHashing: 'none',
       generatePackageJson: true,
+      mergeExternals: true,
+      externalDependencies: [],
       sourceMap: true,
     }),
   ],

package/templates/apps/microservices/auth/.env.example

@@ -4,6 +4,11 @@ AUTH_HOST=127.0.0.1
 AUTH_PORT=4001
 # AUTH_REDIS_URL=redis://localhost:6379
 # AUTH_NATS_URL=nats://localhost:4222
+# AUTH_MQTT_URL=mqtt://localhost:1883
+# AUTH_RMQ_URL=amqp://localhost:5672
+# AUTH_RMQ_QUEUE=auth_queue
+# AUTH_KAFKA_BROKERS=localhost:9092
+# AUTH_KAFKA_CLIENT_ID=auth
 
 # Which concrete AuthStrategy to instantiate
 AUTH_PROVIDER=supabase

package/templates/apps/microservices/auth/tsconfig.json

@@ -11,6 +11,11 @@
     }
   ],
   "compilerOptions": {
-    "esModuleInterop": true
+    "esModuleInterop": true,
+    "module": "node16",
+    "moduleResolution": "node16",
+    "experimentalDecorators": true,
+    "emitDecoratorMetadata": true,
+    "target": "es2021"
   }
 }

package/templates/apps/microservices/auth/webpack.config.js

@@ -1,4 +1,5 @@
 const { NxAppWebpackPlugin } = require('@nx/webpack/app-plugin');
+const { TsconfigPathsPlugin } = require('tsconfig-paths-webpack-plugin');
 const { join } = require('path');
 
 module.exports = {
@@ -9,6 +10,31 @@ module.exports = {
       devtoolModuleFilenameTemplate: '[absolute-resource-path]',
     }),
   },
+  resolve: {
+    // Resolve @icore/* via tsconfig paths so webpack can bundle them inline.
+    // nx skips its own tsconfig-paths plugin on "TS solution" workspaces, so we
+    // wire the standalone plugin explicitly (it follows extends → tsconfig.base).
+    plugins: [new TsconfigPathsPlugin({ configFile: join(__dirname, 'tsconfig.app.json') })],
+  },
+  // Keep every npm package external EXCEPT @icore/* workspace packages, which
+  // are bundled inline. @icore/* are workspace-internal: at runtime the package
+  // manager symlinks them to their TS source dir (not the compiled dist), so an
+  // external require('@icore/shared') fails ("Cannot find module './env'").
+  // Bundling removes runtime workspace resolution entirely — works identically
+  // on yarn / npm / pnpm.
+  externals: [
+    function ({ request }, callback) {
+      if (
+        !request ||
+        request.startsWith('.') ||
+        request.startsWith('/') ||
+        request.startsWith('@icore/')
+      ) {
+        return callback(); // bundle inline
+      }
+      return callback(null, 'commonjs ' + request); // keep external
+    },
+  ],
   plugins: [
     new NxAppWebpackPlugin({
       target: 'node',
@@ -19,6 +45,10 @@ module.exports = {
       optimization: false,
       outputHashing: 'none',
       generatePackageJson: true,
+      // Keep our externals (above) authoritative — do not let the plugin add
+      // its own nodeExternals that would re-externalize @icore/*.
+      mergeExternals: true,
+      externalDependencies: [],
       sourceMap: true,
     }),
   ],

package/templates/apps/microservices/jobs/tsconfig.json

@@ -8,6 +8,11 @@
     }
   ],
   "compilerOptions": {
-    "esModuleInterop": true
+    "esModuleInterop": true,
+    "module": "node16",
+    "moduleResolution": "node16",
+    "experimentalDecorators": true,
+    "emitDecoratorMetadata": true,
+    "target": "es2021"
   }
 }

package/templates/apps/microservices/jobs/webpack.config.js

@@ -1,4 +1,5 @@
 const { NxAppWebpackPlugin } = require('@nx/webpack/app-plugin');
+const { TsconfigPathsPlugin } = require('tsconfig-paths-webpack-plugin');
 const { join } = require('path');
 
 module.exports = {
@@ -9,6 +10,31 @@ module.exports = {
       devtoolModuleFilenameTemplate: '[absolute-resource-path]',
     }),
   },
+  resolve: {
+    // Resolve @icore/* via tsconfig paths so webpack can bundle them inline.
+    // nx skips its own tsconfig-paths plugin on "TS solution" workspaces, so we
+    // wire the standalone plugin explicitly (it follows extends → tsconfig.base).
+    plugins: [new TsconfigPathsPlugin({ configFile: join(__dirname, 'tsconfig.app.json') })],
+  },
+  // Keep every npm package external EXCEPT @icore/* workspace packages, which
+  // are bundled inline. @icore/* are workspace-internal: at runtime the package
+  // manager symlinks them to their TS source dir (not the compiled dist), so an
+  // external require('@icore/shared') fails ("Cannot find module './env'").
+  // Bundling removes runtime workspace resolution entirely — works identically
+  // on yarn / npm / pnpm.
+  externals: [
+    function ({ request }, callback) {
+      if (
+        !request ||
+        request.startsWith('.') ||
+        request.startsWith('/') ||
+        request.startsWith('@icore/')
+      ) {
+        return callback(); // bundle inline
+      }
+      return callback(null, 'commonjs ' + request); // keep external
+    },
+  ],
   plugins: [
     new NxAppWebpackPlugin({
       target: 'node',
@@ -19,6 +45,10 @@ module.exports = {
       optimization: false,
       outputHashing: 'none',
       generatePackageJson: true,
+      // Keep our externals (above) authoritative — do not let the plugin add
+      // its own nodeExternals that would re-externalize @icore/*.
+      mergeExternals: true,
+      externalDependencies: [],
       sourceMap: true,
     }),
   ],

package/templates/apps/microservices/notes/.env.example

@@ -4,6 +4,11 @@ NOTES_HOST=127.0.0.1
 NOTES_PORT=4004
 # NOTES_REDIS_URL=redis://localhost:6379
 # NOTES_NATS_URL=nats://localhost:4222
+# NOTES_MQTT_URL=mqtt://localhost:1883
+# NOTES_RMQ_URL=amqp://localhost:5672
+# NOTES_RMQ_QUEUE=notes_queue
+# NOTES_KAFKA_BROKERS=localhost:9092
+# NOTES_KAFKA_CLIENT_ID=notes
 
 # Which DB to use — defaults to the root .env DB_PROVIDER if unset.
 # Supabase Postgres or Firestore. Both honored by NotesController via DBStrategy.

package/templates/apps/microservices/notes/tsconfig.json

@@ -8,6 +8,11 @@
     }
   ],
   "compilerOptions": {
-    "esModuleInterop": true
+    "esModuleInterop": true,
+    "module": "node16",
+    "moduleResolution": "node16",
+    "experimentalDecorators": true,
+    "emitDecoratorMetadata": true,
+    "target": "es2021"
   }
 }

package/templates/apps/microservices/notes/webpack.config.js

@@ -1,4 +1,5 @@
 const { NxAppWebpackPlugin } = require('@nx/webpack/app-plugin');
+const { TsconfigPathsPlugin } = require('tsconfig-paths-webpack-plugin');
 const { join } = require('path');
 
 module.exports = {
@@ -9,6 +10,31 @@ module.exports = {
       devtoolModuleFilenameTemplate: '[absolute-resource-path]',
     }),
   },
+  resolve: {
+    // Resolve @icore/* via tsconfig paths so webpack can bundle them inline.
+    // nx skips its own tsconfig-paths plugin on "TS solution" workspaces, so we
+    // wire the standalone plugin explicitly (it follows extends → tsconfig.base).
+    plugins: [new TsconfigPathsPlugin({ configFile: join(__dirname, 'tsconfig.app.json') })],
+  },
+  // Keep every npm package external EXCEPT @icore/* workspace packages, which
+  // are bundled inline. @icore/* are workspace-internal: at runtime the package
+  // manager symlinks them to their TS source dir (not the compiled dist), so an
+  // external require('@icore/shared') fails ("Cannot find module './env'").
+  // Bundling removes runtime workspace resolution entirely — works identically
+  // on yarn / npm / pnpm.
+  externals: [
+    function ({ request }, callback) {
+      if (
+        !request ||
+        request.startsWith('.') ||
+        request.startsWith('/') ||
+        request.startsWith('@icore/')
+      ) {
+        return callback(); // bundle inline
+      }
+      return callback(null, 'commonjs ' + request); // keep external
+    },
+  ],
   plugins: [
     new NxAppWebpackPlugin({
       target: 'node',
@@ -19,6 +45,10 @@ module.exports = {
       optimization: false,
       outputHashing: 'none',
       generatePackageJson: true,
+      // Keep our externals (above) authoritative — do not let the plugin add
+      // its own nodeExternals that would re-externalize @icore/*.
+      mergeExternals: true,
+      externalDependencies: [],
       sourceMap: true,
     }),
   ],

package/templates/apps/microservices/notes-e2e/src/support/global.d.ts

@@ -0,0 +1,6 @@
+// Augments globalThis so TypeScript accepts custom properties set in
+// global-setup.ts and read in global-teardown.ts (TS7017 fix).
+declare global {
+  var __TEARDOWN_MESSAGE__: string;
+}
+export {};

package/templates/apps/microservices/payment/.env.example

@@ -4,6 +4,11 @@ PAYMENT_HOST=127.0.0.1
 PAYMENT_PORT=4003
 # PAYMENT_REDIS_URL=redis://localhost:6379
 # PAYMENT_NATS_URL=nats://localhost:4222
+# PAYMENT_MQTT_URL=mqtt://localhost:1883
+# PAYMENT_RMQ_URL=amqp://localhost:5672
+# PAYMENT_RMQ_QUEUE=payment_queue
+# PAYMENT_KAFKA_BROKERS=localhost:9092
+# PAYMENT_KAFKA_CLIENT_ID=payment
 
 # Which concrete PaymentStrategy to instantiate
 PAYMENT_PROVIDER=paypal

package/templates/apps/microservices/payment/tsconfig.json

@@ -8,6 +8,11 @@
     }
   ],
   "compilerOptions": {
-    "esModuleInterop": true
+    "esModuleInterop": true,
+    "module": "node16",
+    "moduleResolution": "node16",
+    "experimentalDecorators": true,
+    "emitDecoratorMetadata": true,
+    "target": "es2021"
   }
 }