@idevconn/create-icore 0.6.0 → 0.6.1

package/dist/cli.js

@@ -301,23 +301,17 @@ async function rewriteRootPackageJson(targetDir, opts) {
   }
   if (opts.packageManager !== "yarn") {
     delete pkg.packageManager;
+  } else {
+    try {
+      const yarnrc = await readFile2(join2(targetDir, ".yarnrc.yml"), "utf8");
+      const match = yarnrc.match(/^yarnPath:\s*.+yarn-(\d+\.\d+\.\d+)\.cjs/m);
+      if (match?.[1]) {
+        pkg["packageManager"] = `yarn@${match[1]}`;
+      }
+    } catch {
+    }
   }
-  if (opts.packageManager === "pnpm") {
-    pkg["pnpm"] = {
-      onlyBuiltDependencies: [
-        "@firebase/util",
-        "@nestjs/core",
-        "@parcel/watcher",
-        "@scarf/scarf",
-        "@swc/core",
-        "less",
-        "msgpackr-extract",
-        "nx",
-        "protobufjs",
-        "unrs-resolver"
-      ]
-    };
-  }
+  delete pkg.pnpm;
   await writeFile(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
 }
 async function writeAuthEnv(targetDir, opts) {
@@ -478,7 +472,10 @@ async function removeNotesStack(targetDir) {
     await writeFile(appModulePath, next);
   } catch {
   }
-  await stripDeps(join2(targetDir, "apps/api/package.json"), ["@icore/notes-client"]);
+  await stripDeps(join2(targetDir, "apps/api/package.json"), [
+    "@icore/notes-client",
+    "@casl/ability"
+  ]);
   await stripGatewayTransport(targetDir, "NOTES");
   const tsconfigPath = join2(targetDir, "tsconfig.base.json");
   try {
@@ -642,7 +639,7 @@ async function removeUnusedDbStrategies(targetDir, dbProvider) {
     await stripTsconfigPath(targetDir, "@icore/db-supabase");
     try {
       const src = await readFile2(modulePath, "utf8");
-      const next = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/m, "").replace(/^import \{[^}]*SupabaseDBStrategy[^}]*\} from '@icore\/db-supabase';\n/m, "").replace(/\nfunction makeSupabaseDB[\s\S]*?\n}\n/m, "").replace(
+      const next = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/m, "").replace(/^import \{[^}]*SupabaseDBStrategy[^}]*\} from '@icore\/db-supabase';\n/m, "").replace(/\nfunction makeSupabaseDB[\s\S]*?\n}\n/m, "").replace(/\nfunction requireEnv[\s\S]*?\n}\n/m, "").replace(
         /if \(provider === 'supabase'\) return makeSupabaseDB\(cfg\);\n\s*return makeFirestoreDB\(cfg\);/m,
         "return makeFirestoreDB(cfg);"
       );
@@ -775,11 +772,69 @@ async function scaffold(opts, templatesDir2) {
     await rm(join2(opts.targetDir, ".yarn"), { recursive: true, force: true });
     await rm(join2(opts.targetDir, ".yarnrc.yml"), { force: true });
   }
+  if (opts.packageManager === "pnpm") {
+    await writePnpmWorkspace(opts.targetDir);
+    await rewritePnpmWorkspaceDeps(opts.targetDir);
+  }
   await patchGitignoreForPm(opts.targetDir, opts.packageManager);
   await writeAiFiles(opts.targetDir, opts);
   if (opts.install) runInstall(opts.targetDir, opts.packageManager);
   if (opts.initGit) gitInit(opts.targetDir, opts.projectName);
 }
+async function writePnpmWorkspace(targetDir) {
+  const pkgPath = join2(targetDir, "package.json");
+  const pkg = JSON.parse(await readFile2(pkgPath, "utf8"));
+  const workspaces = pkg.workspaces ?? [];
+  const packagesBlock = workspaces.map((p3) => `  - '${p3}'`).join("\n");
+  const allowBuilds = [
+    "@firebase/util",
+    "@nestjs/core",
+    "@parcel/watcher",
+    "@scarf/scarf",
+    "@swc/core",
+    "less",
+    "msgpackr-extract",
+    "nx",
+    "protobufjs",
+    "unrs-resolver"
+  ].map((p3) => `  '${p3}': true`).join("\n");
+  const content = `packages:
+${packagesBlock}
+
+allowBuilds:
+${allowBuilds}
+`;
+  await writeFile(join2(targetDir, "pnpm-workspace.yaml"), content);
+}
+async function rewritePnpmWorkspaceDeps(targetDir) {
+  const { readdir: rd } = await import("fs/promises");
+  async function walk(dir) {
+    const found = [];
+    let entries;
+    try {
+      entries = await rd(dir, { withFileTypes: true });
+    } catch {
+      return found;
+    }
+    for (const e of entries) {
+      if (e.isDirectory() && e.name !== "node_modules") {
+        found.push(...await walk(join2(dir, e.name)));
+      } else if (e.isFile() && e.name === "package.json") {
+        found.push(join2(dir, e.name));
+      }
+    }
+    return found;
+  }
+  const pkgFiles = await walk(targetDir);
+  for (const f of pkgFiles) {
+    try {
+      const raw = await readFile2(f, "utf8");
+      const next = raw.replace(/"(@icore\/[^"]+)":\s*"\*"/g, '"$1": "workspace:*"');
+      if (next !== raw) await writeFile(f, next);
+    } catch {
+    }
+  }
+}
 async function patchGitignoreForPm(targetDir, pm) {
   const giPath = join2(targetDir, ".gitignore");
   try {

package/dist/index.cjs

@@ -107,23 +107,17 @@ async function rewriteRootPackageJson(targetDir, opts) {
   }
   if (opts.packageManager !== "yarn") {
     delete pkg.packageManager;
+  } else {
+    try {
+      const yarnrc = await (0, import_promises.readFile)((0, import_node_path.join)(targetDir, ".yarnrc.yml"), "utf8");
+      const match = yarnrc.match(/^yarnPath:\s*.+yarn-(\d+\.\d+\.\d+)\.cjs/m);
+      if (match?.[1]) {
+        pkg["packageManager"] = `yarn@${match[1]}`;
+      }
+    } catch {
+    }
   }
-  if (opts.packageManager === "pnpm") {
-    pkg["pnpm"] = {
-      onlyBuiltDependencies: [
-        "@firebase/util",
-        "@nestjs/core",
-        "@parcel/watcher",
-        "@scarf/scarf",
-        "@swc/core",
-        "less",
-        "msgpackr-extract",
-        "nx",
-        "protobufjs",
-        "unrs-resolver"
-      ]
-    };
-  }
+  delete pkg.pnpm;
   await (0, import_promises.writeFile)(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
 }
 async function writeAuthEnv(targetDir, opts) {
@@ -284,7 +278,10 @@ async function removeNotesStack(targetDir) {
     await (0, import_promises.writeFile)(appModulePath, next);
   } catch {
   }
-  await stripDeps((0, import_node_path.join)(targetDir, "apps/api/package.json"), ["@icore/notes-client"]);
+  await stripDeps((0, import_node_path.join)(targetDir, "apps/api/package.json"), [
+    "@icore/notes-client",
+    "@casl/ability"
+  ]);
   await stripGatewayTransport(targetDir, "NOTES");
   const tsconfigPath = (0, import_node_path.join)(targetDir, "tsconfig.base.json");
   try {
@@ -448,7 +445,7 @@ async function removeUnusedDbStrategies(targetDir, dbProvider) {
     await stripTsconfigPath(targetDir, "@icore/db-supabase");
     try {
       const src = await (0, import_promises.readFile)(modulePath, "utf8");
-      const next = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/m, "").replace(/^import \{[^}]*SupabaseDBStrategy[^}]*\} from '@icore\/db-supabase';\n/m, "").replace(/\nfunction makeSupabaseDB[\s\S]*?\n}\n/m, "").replace(
+      const next = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/m, "").replace(/^import \{[^}]*SupabaseDBStrategy[^}]*\} from '@icore\/db-supabase';\n/m, "").replace(/\nfunction makeSupabaseDB[\s\S]*?\n}\n/m, "").replace(/\nfunction requireEnv[\s\S]*?\n}\n/m, "").replace(
         /if \(provider === 'supabase'\) return makeSupabaseDB\(cfg\);\n\s*return makeFirestoreDB\(cfg\);/m,
         "return makeFirestoreDB(cfg);"
       );
@@ -581,11 +578,69 @@ async function scaffold(opts, templatesDir) {
     await (0, import_promises.rm)((0, import_node_path.join)(opts.targetDir, ".yarn"), { recursive: true, force: true });
     await (0, import_promises.rm)((0, import_node_path.join)(opts.targetDir, ".yarnrc.yml"), { force: true });
   }
+  if (opts.packageManager === "pnpm") {
+    await writePnpmWorkspace(opts.targetDir);
+    await rewritePnpmWorkspaceDeps(opts.targetDir);
+  }
   await patchGitignoreForPm(opts.targetDir, opts.packageManager);
   await writeAiFiles(opts.targetDir, opts);
   if (opts.install) runInstall(opts.targetDir, opts.packageManager);
   if (opts.initGit) gitInit(opts.targetDir, opts.projectName);
 }
+async function writePnpmWorkspace(targetDir) {
+  const pkgPath = (0, import_node_path.join)(targetDir, "package.json");
+  const pkg = JSON.parse(await (0, import_promises.readFile)(pkgPath, "utf8"));
+  const workspaces = pkg.workspaces ?? [];
+  const packagesBlock = workspaces.map((p2) => `  - '${p2}'`).join("\n");
+  const allowBuilds = [
+    "@firebase/util",
+    "@nestjs/core",
+    "@parcel/watcher",
+    "@scarf/scarf",
+    "@swc/core",
+    "less",
+    "msgpackr-extract",
+    "nx",
+    "protobufjs",
+    "unrs-resolver"
+  ].map((p2) => `  '${p2}': true`).join("\n");
+  const content = `packages:
+${packagesBlock}
+
+allowBuilds:
+${allowBuilds}
+`;
+  await (0, import_promises.writeFile)((0, import_node_path.join)(targetDir, "pnpm-workspace.yaml"), content);
+}
+async function rewritePnpmWorkspaceDeps(targetDir) {
+  const { readdir: rd } = await import("fs/promises");
+  async function walk(dir) {
+    const found = [];
+    let entries;
+    try {
+      entries = await rd(dir, { withFileTypes: true });
+    } catch {
+      return found;
+    }
+    for (const e of entries) {
+      if (e.isDirectory() && e.name !== "node_modules") {
+        found.push(...await walk((0, import_node_path.join)(dir, e.name)));
+      } else if (e.isFile() && e.name === "package.json") {
+        found.push((0, import_node_path.join)(dir, e.name));
+      }
+    }
+    return found;
+  }
+  const pkgFiles = await walk(targetDir);
+  for (const f of pkgFiles) {
+    try {
+      const raw = await (0, import_promises.readFile)(f, "utf8");
+      const next = raw.replace(/"(@icore\/[^"]+)":\s*"\*"/g, '"$1": "workspace:*"');
+      if (next !== raw) await (0, import_promises.writeFile)(f, next);
+    } catch {
+    }
+  }
+}
 async function patchGitignoreForPm(targetDir, pm) {
   const giPath = (0, import_node_path.join)(targetDir, ".gitignore");
   try {

package/dist/index.js

@@ -65,23 +65,17 @@ async function rewriteRootPackageJson(targetDir, opts) {
   }
   if (opts.packageManager !== "yarn") {
     delete pkg.packageManager;
+  } else {
+    try {
+      const yarnrc = await readFile(join(targetDir, ".yarnrc.yml"), "utf8");
+      const match = yarnrc.match(/^yarnPath:\s*.+yarn-(\d+\.\d+\.\d+)\.cjs/m);
+      if (match?.[1]) {
+        pkg["packageManager"] = `yarn@${match[1]}`;
+      }
+    } catch {
+    }
   }
-  if (opts.packageManager === "pnpm") {
-    pkg["pnpm"] = {
-      onlyBuiltDependencies: [
-        "@firebase/util",
-        "@nestjs/core",
-        "@parcel/watcher",
-        "@scarf/scarf",
-        "@swc/core",
-        "less",
-        "msgpackr-extract",
-        "nx",
-        "protobufjs",
-        "unrs-resolver"
-      ]
-    };
-  }
+  delete pkg.pnpm;
   await writeFile(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
 }
 async function writeAuthEnv(targetDir, opts) {
@@ -242,7 +236,10 @@ async function removeNotesStack(targetDir) {
     await writeFile(appModulePath, next);
   } catch {
   }
-  await stripDeps(join(targetDir, "apps/api/package.json"), ["@icore/notes-client"]);
+  await stripDeps(join(targetDir, "apps/api/package.json"), [
+    "@icore/notes-client",
+    "@casl/ability"
+  ]);
   await stripGatewayTransport(targetDir, "NOTES");
   const tsconfigPath = join(targetDir, "tsconfig.base.json");
   try {
@@ -406,7 +403,7 @@ async function removeUnusedDbStrategies(targetDir, dbProvider) {
     await stripTsconfigPath(targetDir, "@icore/db-supabase");
     try {
       const src = await readFile(modulePath, "utf8");
-      const next = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/m, "").replace(/^import \{[^}]*SupabaseDBStrategy[^}]*\} from '@icore\/db-supabase';\n/m, "").replace(/\nfunction makeSupabaseDB[\s\S]*?\n}\n/m, "").replace(
+      const next = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/m, "").replace(/^import \{[^}]*SupabaseDBStrategy[^}]*\} from '@icore\/db-supabase';\n/m, "").replace(/\nfunction makeSupabaseDB[\s\S]*?\n}\n/m, "").replace(/\nfunction requireEnv[\s\S]*?\n}\n/m, "").replace(
         /if \(provider === 'supabase'\) return makeSupabaseDB\(cfg\);\n\s*return makeFirestoreDB\(cfg\);/m,
         "return makeFirestoreDB(cfg);"
       );
@@ -539,11 +536,69 @@ async function scaffold(opts, templatesDir) {
     await rm(join(opts.targetDir, ".yarn"), { recursive: true, force: true });
     await rm(join(opts.targetDir, ".yarnrc.yml"), { force: true });
   }
+  if (opts.packageManager === "pnpm") {
+    await writePnpmWorkspace(opts.targetDir);
+    await rewritePnpmWorkspaceDeps(opts.targetDir);
+  }
   await patchGitignoreForPm(opts.targetDir, opts.packageManager);
   await writeAiFiles(opts.targetDir, opts);
   if (opts.install) runInstall(opts.targetDir, opts.packageManager);
   if (opts.initGit) gitInit(opts.targetDir, opts.projectName);
 }
+async function writePnpmWorkspace(targetDir) {
+  const pkgPath = join(targetDir, "package.json");
+  const pkg = JSON.parse(await readFile(pkgPath, "utf8"));
+  const workspaces = pkg.workspaces ?? [];
+  const packagesBlock = workspaces.map((p2) => `  - '${p2}'`).join("\n");
+  const allowBuilds = [
+    "@firebase/util",
+    "@nestjs/core",
+    "@parcel/watcher",
+    "@scarf/scarf",
+    "@swc/core",
+    "less",
+    "msgpackr-extract",
+    "nx",
+    "protobufjs",
+    "unrs-resolver"
+  ].map((p2) => `  '${p2}': true`).join("\n");
+  const content = `packages:
+${packagesBlock}
+
+allowBuilds:
+${allowBuilds}
+`;
+  await writeFile(join(targetDir, "pnpm-workspace.yaml"), content);
+}
+async function rewritePnpmWorkspaceDeps(targetDir) {
+  const { readdir: rd } = await import("fs/promises");
+  async function walk(dir) {
+    const found = [];
+    let entries;
+    try {
+      entries = await rd(dir, { withFileTypes: true });
+    } catch {
+      return found;
+    }
+    for (const e of entries) {
+      if (e.isDirectory() && e.name !== "node_modules") {
+        found.push(...await walk(join(dir, e.name)));
+      } else if (e.isFile() && e.name === "package.json") {
+        found.push(join(dir, e.name));
+      }
+    }
+    return found;
+  }
+  const pkgFiles = await walk(targetDir);
+  for (const f of pkgFiles) {
+    try {
+      const raw = await readFile(f, "utf8");
+      const next = raw.replace(/"(@icore\/[^"]+)":\s*"\*"/g, '"$1": "workspace:*"');
+      if (next !== raw) await writeFile(f, next);
+    } catch {
+    }
+  }
+}
 async function patchGitignoreForPm(targetDir, pm) {
   const giPath = join(targetDir, ".gitignore");
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@idevconn/create-icore",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Bootstrap a new project from the iCore scaffold (Nx + NestJS + React + Vite + shadcn/Tailwind, swappable auth + storage providers).",
   "license": "Apache-2.0",
   "author": "iDEVconn",

package/templates/apps/api/package.json

@@ -3,6 +3,7 @@
   "version": "0.0.1",
   "private": true,
   "devDependencies": {
+    "@types/express": "^4.17.25",
     "@types/multer": "*"
   },
   "dependencies": {

package/templates/apps/api/webpack.config.js

@@ -1,4 +1,5 @@
 const { NxAppWebpackPlugin } = require('@nx/webpack/app-plugin');
+const { TsconfigPathsPlugin } = require('tsconfig-paths-webpack-plugin');
 const { join } = require('path');
 
 module.exports = {
@@ -9,6 +10,23 @@ module.exports = {
       devtoolModuleFilenameTemplate: '[absolute-resource-path]',
     }),
   },
+  resolve: {
+    plugins: [new TsconfigPathsPlugin({ configFile: join(__dirname, 'tsconfig.app.json') })],
+  },
+  // See microservices/*/webpack.config.js for the @icore/* bundling rationale.
+  externals: [
+    function ({ request }, callback) {
+      if (
+        !request ||
+        request.startsWith('.') ||
+        request.startsWith('/') ||
+        request.startsWith('@icore/')
+      ) {
+        return callback();
+      }
+      return callback(null, 'commonjs ' + request);
+    },
+  ],
   plugins: [
     new NxAppWebpackPlugin({
       target: 'node',
@@ -19,6 +37,8 @@ module.exports = {
       optimization: false,
       outputHashing: 'none',
       generatePackageJson: true,
+      mergeExternals: true,
+      externalDependencies: [],
       sourceMap: true,
     }),
   ],

package/templates/apps/microservices/auth/webpack.config.js

@@ -1,4 +1,5 @@
 const { NxAppWebpackPlugin } = require('@nx/webpack/app-plugin');
+const { TsconfigPathsPlugin } = require('tsconfig-paths-webpack-plugin');
 const { join } = require('path');
 
 module.exports = {
@@ -9,6 +10,31 @@ module.exports = {
       devtoolModuleFilenameTemplate: '[absolute-resource-path]',
     }),
   },
+  resolve: {
+    // Resolve @icore/* via tsconfig paths so webpack can bundle them inline.
+    // nx skips its own tsconfig-paths plugin on "TS solution" workspaces, so we
+    // wire the standalone plugin explicitly (it follows extends → tsconfig.base).
+    plugins: [new TsconfigPathsPlugin({ configFile: join(__dirname, 'tsconfig.app.json') })],
+  },
+  // Keep every npm package external EXCEPT @icore/* workspace packages, which
+  // are bundled inline. @icore/* are workspace-internal: at runtime the package
+  // manager symlinks them to their TS source dir (not the compiled dist), so an
+  // external require('@icore/shared') fails ("Cannot find module './env'").
+  // Bundling removes runtime workspace resolution entirely — works identically
+  // on yarn / npm / pnpm.
+  externals: [
+    function ({ request }, callback) {
+      if (
+        !request ||
+        request.startsWith('.') ||
+        request.startsWith('/') ||
+        request.startsWith('@icore/')
+      ) {
+        return callback(); // bundle inline
+      }
+      return callback(null, 'commonjs ' + request); // keep external
+    },
+  ],
   plugins: [
     new NxAppWebpackPlugin({
       target: 'node',
@@ -19,6 +45,10 @@ module.exports = {
       optimization: false,
       outputHashing: 'none',
       generatePackageJson: true,
+      // Keep our externals (above) authoritative — do not let the plugin add
+      // its own nodeExternals that would re-externalize @icore/*.
+      mergeExternals: true,
+      externalDependencies: [],
       sourceMap: true,
     }),
   ],

package/templates/apps/microservices/jobs/webpack.config.js

@@ -1,4 +1,5 @@
 const { NxAppWebpackPlugin } = require('@nx/webpack/app-plugin');
+const { TsconfigPathsPlugin } = require('tsconfig-paths-webpack-plugin');
 const { join } = require('path');
 
 module.exports = {
@@ -9,6 +10,31 @@ module.exports = {
       devtoolModuleFilenameTemplate: '[absolute-resource-path]',
     }),
   },
+  resolve: {
+    // Resolve @icore/* via tsconfig paths so webpack can bundle them inline.
+    // nx skips its own tsconfig-paths plugin on "TS solution" workspaces, so we
+    // wire the standalone plugin explicitly (it follows extends → tsconfig.base).
+    plugins: [new TsconfigPathsPlugin({ configFile: join(__dirname, 'tsconfig.app.json') })],
+  },
+  // Keep every npm package external EXCEPT @icore/* workspace packages, which
+  // are bundled inline. @icore/* are workspace-internal: at runtime the package
+  // manager symlinks them to their TS source dir (not the compiled dist), so an
+  // external require('@icore/shared') fails ("Cannot find module './env'").
+  // Bundling removes runtime workspace resolution entirely — works identically
+  // on yarn / npm / pnpm.
+  externals: [
+    function ({ request }, callback) {
+      if (
+        !request ||
+        request.startsWith('.') ||
+        request.startsWith('/') ||
+        request.startsWith('@icore/')
+      ) {
+        return callback(); // bundle inline
+      }
+      return callback(null, 'commonjs ' + request); // keep external
+    },
+  ],
   plugins: [
     new NxAppWebpackPlugin({
       target: 'node',
@@ -19,6 +45,10 @@ module.exports = {
       optimization: false,
       outputHashing: 'none',
       generatePackageJson: true,
+      // Keep our externals (above) authoritative — do not let the plugin add
+      // its own nodeExternals that would re-externalize @icore/*.
+      mergeExternals: true,
+      externalDependencies: [],
       sourceMap: true,
     }),
   ],

package/templates/apps/microservices/notes/webpack.config.js

@@ -1,4 +1,5 @@
 const { NxAppWebpackPlugin } = require('@nx/webpack/app-plugin');
+const { TsconfigPathsPlugin } = require('tsconfig-paths-webpack-plugin');
 const { join } = require('path');
 
 module.exports = {
@@ -9,6 +10,31 @@ module.exports = {
       devtoolModuleFilenameTemplate: '[absolute-resource-path]',
     }),
   },
+  resolve: {
+    // Resolve @icore/* via tsconfig paths so webpack can bundle them inline.
+    // nx skips its own tsconfig-paths plugin on "TS solution" workspaces, so we
+    // wire the standalone plugin explicitly (it follows extends → tsconfig.base).
+    plugins: [new TsconfigPathsPlugin({ configFile: join(__dirname, 'tsconfig.app.json') })],
+  },
+  // Keep every npm package external EXCEPT @icore/* workspace packages, which
+  // are bundled inline. @icore/* are workspace-internal: at runtime the package
+  // manager symlinks them to their TS source dir (not the compiled dist), so an
+  // external require('@icore/shared') fails ("Cannot find module './env'").
+  // Bundling removes runtime workspace resolution entirely — works identically
+  // on yarn / npm / pnpm.
+  externals: [
+    function ({ request }, callback) {
+      if (
+        !request ||
+        request.startsWith('.') ||
+        request.startsWith('/') ||
+        request.startsWith('@icore/')
+      ) {
+        return callback(); // bundle inline
+      }
+      return callback(null, 'commonjs ' + request); // keep external
+    },
+  ],
   plugins: [
     new NxAppWebpackPlugin({
       target: 'node',
@@ -19,6 +45,10 @@ module.exports = {
       optimization: false,
       outputHashing: 'none',
       generatePackageJson: true,
+      // Keep our externals (above) authoritative — do not let the plugin add
+      // its own nodeExternals that would re-externalize @icore/*.
+      mergeExternals: true,
+      externalDependencies: [],
       sourceMap: true,
     }),
   ],

package/templates/apps/microservices/payment/webpack.config.js

@@ -1,4 +1,5 @@
 const { NxAppWebpackPlugin } = require('@nx/webpack/app-plugin');
+const { TsconfigPathsPlugin } = require('tsconfig-paths-webpack-plugin');
 const { join } = require('path');
 
 module.exports = {
@@ -9,6 +10,31 @@ module.exports = {
       devtoolModuleFilenameTemplate: '[absolute-resource-path]',
     }),
   },
+  resolve: {
+    // Resolve @icore/* via tsconfig paths so webpack can bundle them inline.
+    // nx skips its own tsconfig-paths plugin on "TS solution" workspaces, so we
+    // wire the standalone plugin explicitly (it follows extends → tsconfig.base).
+    plugins: [new TsconfigPathsPlugin({ configFile: join(__dirname, 'tsconfig.app.json') })],
+  },
+  // Keep every npm package external EXCEPT @icore/* workspace packages, which
+  // are bundled inline. @icore/* are workspace-internal: at runtime the package
+  // manager symlinks them to their TS source dir (not the compiled dist), so an
+  // external require('@icore/shared') fails ("Cannot find module './env'").
+  // Bundling removes runtime workspace resolution entirely — works identically
+  // on yarn / npm / pnpm.
+  externals: [
+    function ({ request }, callback) {
+      if (
+        !request ||
+        request.startsWith('.') ||
+        request.startsWith('/') ||
+        request.startsWith('@icore/')
+      ) {
+        return callback(); // bundle inline
+      }
+      return callback(null, 'commonjs ' + request); // keep external
+    },
+  ],
   plugins: [
     new NxAppWebpackPlugin({
       target: 'node',
@@ -19,6 +45,10 @@ module.exports = {
       optimization: false,
       outputHashing: 'none',
       generatePackageJson: true,
+      // Keep our externals (above) authoritative — do not let the plugin add
+      // its own nodeExternals that would re-externalize @icore/*.
+      mergeExternals: true,
+      externalDependencies: [],
       sourceMap: true,
     }),
   ],

package/templates/apps/microservices/upload/webpack.config.js

@@ -1,4 +1,5 @@
 const { NxAppWebpackPlugin } = require('@nx/webpack/app-plugin');
+const { TsconfigPathsPlugin } = require('tsconfig-paths-webpack-plugin');
 const { join } = require('path');
 
 module.exports = {
@@ -9,6 +10,31 @@ module.exports = {
       devtoolModuleFilenameTemplate: '[absolute-resource-path]',
     }),
   },
+  resolve: {
+    // Resolve @icore/* via tsconfig paths so webpack can bundle them inline.
+    // nx skips its own tsconfig-paths plugin on "TS solution" workspaces, so we
+    // wire the standalone plugin explicitly (it follows extends → tsconfig.base).
+    plugins: [new TsconfigPathsPlugin({ configFile: join(__dirname, 'tsconfig.app.json') })],
+  },
+  // Keep every npm package external EXCEPT @icore/* workspace packages, which
+  // are bundled inline. @icore/* are workspace-internal: at runtime the package
+  // manager symlinks them to their TS source dir (not the compiled dist), so an
+  // external require('@icore/shared') fails ("Cannot find module './env'").
+  // Bundling removes runtime workspace resolution entirely — works identically
+  // on yarn / npm / pnpm.
+  externals: [
+    function ({ request }, callback) {
+      if (
+        !request ||
+        request.startsWith('.') ||
+        request.startsWith('/') ||
+        request.startsWith('@icore/')
+      ) {
+        return callback(); // bundle inline
+      }
+      return callback(null, 'commonjs ' + request); // keep external
+    },
+  ],
   plugins: [
     new NxAppWebpackPlugin({
       target: 'node',
@@ -19,6 +45,10 @@ module.exports = {
       optimization: false,
       outputHashing: 'none',
       generatePackageJson: true,
+      // Keep our externals (above) authoritative — do not let the plugin add
+      // its own nodeExternals that would re-externalize @icore/*.
+      mergeExternals: true,
+      externalDependencies: [],
       sourceMap: true,
     }),
   ],