@idevconn/create-icore 0.6.3 → 0.7.0

package/dist/index.js

@@ -4,34 +4,14 @@ function pmRun(pm, script) {
 }
 
 // src/lib/scaffold.ts
-import { copyFile, mkdir, readdir, readFile, stat, writeFile, rm } from "fs/promises";
+import { copyFile, mkdir as mkdir2, readdir as readdir2, readFile as readFile4, stat, writeFile as writeFile4, rm as rm2 } from "fs/promises";
 import { readFileSync } from "fs";
-import { join } from "path";
+import { join as join4 } from "path";
 import { spawnSync } from "child_process";
-var IGNORE_TOP = /* @__PURE__ */ new Set([
-  ".git",
-  "node_modules",
-  ".yarn/cache",
-  ".yarn/unplugged",
-  ".yarn/install-state.gz",
-  ".nx",
-  "dist",
-  "tmp",
-  "coverage",
-  ".idea",
-  ".vscode"
-]);
-async function copyTree(src, dest) {
-  await mkdir(dest, { recursive: true });
-  const entries = await readdir(src, { withFileTypes: true });
-  for (const entry of entries) {
-    if (IGNORE_TOP.has(entry.name)) continue;
-    const s = join(src, entry.name);
-    const d = join(dest, entry.name);
-    if (entry.isDirectory()) await copyTree(s, d);
-    else if (entry.isFile()) await copyFile(s, d);
-  }
-}
+
+// src/lib/scaffold-env.ts
+import { readFile, writeFile } from "fs/promises";
+import { join } from "path";
 var TRANSPORT_ENV_TOKEN = {
   redis: "REDIS",
   nats: "NATS",
@@ -45,11 +25,28 @@ var TRANSPORT_DEPS = {
   rmq: { amqplib: "^2.0.1", "amqp-connection-manager": "^5.0.0" },
   kafka: { kafkajs: "^2.2.4" }
 };
+var MONGODB_DEPS = {
+  mongoose: "^9.6.3",
+  "@nestjs/mongoose": "^11.0.4",
+  bcrypt: "^6.0.0",
+  jsonwebtoken: "^9.0.3"
+};
 function uncommentTransportEnv(text2, prefix, transport) {
   const token = TRANSPORT_ENV_TOKEN[transport];
   if (!token) return text2;
   return text2.replace(new RegExp(`^# (${prefix}_${token}_[A-Z0-9_]*=)`, "gm"), "$1");
 }
+async function stripGatewayTransport(targetDir, prefix) {
+  const gatewayEnv = join(targetDir, "apps/api/.env");
+  try {
+    const env = await readFile(gatewayEnv, "utf8");
+    const next = env.split("\n").filter(
+      (line) => !line.startsWith(`${prefix}_`) && !line.startsWith(`# ${prefix}_`) && !line.includes(`${prefix} MS transport`)
+    ).join("\n");
+    await writeFile(gatewayEnv, next);
+  } catch {
+  }
+}
 async function rewriteRootPackageJson(targetDir, opts) {
   const pkgPath = join(targetDir, "package.json");
   const raw = await readFile(pkgPath, "utf8");
@@ -63,6 +60,10 @@ async function rewriteRootPackageJson(targetDir, opts) {
     const deps = pkg["dependencies"] ??= {};
     Object.assign(deps, transportDeps);
   }
+  if (opts.authProvider === "mongodb" || opts.dbProvider === "mongodb" || opts.upload === "mongodb") {
+    const deps = pkg["dependencies"] ??= {};
+    Object.assign(deps, MONGODB_DEPS);
+  }
   if (opts.packageManager !== "yarn") {
     delete pkg.packageManager;
   } else {
@@ -83,6 +84,9 @@ async function writeAuthEnv(targetDir, opts) {
   const env = await readFile(envExample, "utf8");
   let next = env.replace(/^AUTH_PROVIDER=.*$/m, `AUTH_PROVIDER=${opts.authProvider}`).replace(/^AUTH_TRANSPORT=.*$/m, `AUTH_TRANSPORT=${opts.transport}`);
   next = uncommentTransportEnv(next, "AUTH", opts.transport);
+  if (opts.authProvider === "mongodb") {
+    next += "\nMONGODB_URI=mongodb://localhost:27017/icore-auth\nJWT_SECRET=change-me-in-production\n";
+  }
   await writeFile(join(targetDir, "apps/microservices/auth/.env"), next);
 }
 async function writeUploadEnv(targetDir, opts) {
@@ -91,6 +95,9 @@ async function writeUploadEnv(targetDir, opts) {
   const env = await readFile(envExample, "utf8");
   let next = env.replace(/^STORAGE_PROVIDER=.*$/m, `STORAGE_PROVIDER=${opts.upload}`).replace(/^UPLOAD_TRANSPORT=.*$/m, `UPLOAD_TRANSPORT=${opts.transport}`);
   next = uncommentTransportEnv(next, "UPLOAD", opts.transport);
+  if (opts.upload === "mongodb") {
+    next += "\nMONGODB_URI=mongodb://localhost:27017/icore-upload\n";
+  }
   await writeFile(join(targetDir, "apps/microservices/upload/.env"), next);
 }
 async function writeNotesEnv(targetDir, opts) {
@@ -120,18 +127,11 @@ async function writeRootEnv(targetDir, opts) {
     `DB_PROVIDER=${opts.dbProvider}`,
     ``
   ];
-  await writeFile(join(targetDir, ".env"), lines.join("\n"));
-}
-async function stripGatewayTransport(targetDir, prefix) {
-  const gatewayEnv = join(targetDir, "apps/api/.env");
-  try {
-    const env = await readFile(gatewayEnv, "utf8");
-    const next = env.split("\n").filter(
-      (line) => !line.startsWith(`${prefix}_`) && !line.startsWith(`# ${prefix}_`) && !line.includes(`${prefix} MS transport`)
-    ).join("\n");
-    await writeFile(gatewayEnv, next);
-  } catch {
+  if (opts.dbProvider === "mongodb") {
+    lines.push(`MONGODB_URI=mongodb://localhost:27017/icore-data`);
+    lines.push(``);
   }
+  await writeFile(join(targetDir, ".env"), lines.join("\n"));
 }
 async function writeClientEnv(targetDir) {
   const envExample = join(targetDir, "apps/client/.env.example");
@@ -152,15 +152,37 @@ async function writePaymentEnv(targetDir, opts) {
   } catch {
   }
 }
+
+// src/lib/scaffold-strip.ts
+import { readFile as readFile2, writeFile as writeFile2, rm } from "fs/promises";
+import { join as join2 } from "path";
 async function stripDeps(pkgPath, names) {
   try {
-    const raw = await readFile(pkgPath, "utf8");
+    const raw = await readFile2(pkgPath, "utf8");
     const pkg = JSON.parse(raw);
     for (const n of names) {
       if (pkg.dependencies) delete pkg.dependencies[n];
       if (pkg.devDependencies) delete pkg.devDependencies[n];
     }
-    await writeFile(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
+    await writeFile2(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
+  } catch {
+  }
+}
+async function stripTsconfigPath(targetDir, alias) {
+  const tsconfigPath = join2(targetDir, "tsconfig.base.json");
+  try {
+    const src = await readFile2(tsconfigPath, "utf8");
+    const escaped = alias.replace(/[@/]/g, (c) => c === "@" ? "@" : "\\/");
+    const pretty = src.replace(new RegExp(`^\\s*"${escaped}": \\[[^\\]]*\\],?\\n`, "m"), "");
+    if (pretty !== src) {
+      await writeFile2(tsconfigPath, pretty);
+      return;
+    }
+    const parsed = JSON.parse(src);
+    if (parsed.compilerOptions?.paths) {
+      delete parsed.compilerOptions.paths[alias];
+    }
+    await writeFile2(tsconfigPath, JSON.stringify(parsed));
   } catch {
   }
 }
@@ -172,25 +194,25 @@ async function removeJobsStack(targetDir) {
     "Dockerfile.ms-jobs"
   ];
   for (const p2 of paths) {
-    await rm(join(targetDir, p2), { recursive: true, force: true });
+    await rm(join2(targetDir, p2), { recursive: true, force: true });
   }
-  const appModulePath = join(targetDir, "apps/api/src/app/app.module.ts");
+  const appModulePath = join2(targetDir, "apps/api/src/app/app.module.ts");
   try {
-    const appModule = await readFile(appModulePath, "utf8");
+    const appModule = await readFile2(appModulePath, "utf8");
     const next = appModule.replace(/^import \{ AdminModule \} from '\.\/admin\/admin\.module';\n/m, "").replace(/,\s*AdminModule/g, "");
-    await writeFile(appModulePath, next);
+    await writeFile2(appModulePath, next);
   } catch {
   }
-  await stripDeps(join(targetDir, "apps/api/package.json"), [
+  await stripDeps(join2(targetDir, "apps/api/package.json"), [
     "@icore/jobs-client",
     "@bull-board/api",
     "@bull-board/express"
   ]);
-  const composePath = join(targetDir, "docker-compose.yml");
+  const composePath = join2(targetDir, "docker-compose.yml");
   try {
-    const compose = await readFile(composePath, "utf8");
+    const compose = await readFile2(composePath, "utf8");
     const next = compose.replace(/\n {2}jobs:[\s\S]+?(?=\n {2}\w+:|\nnetworks:)/m, "\n").replace(/\n {6}jobs:\n {8}condition: service_started/g, "").replace(/\n {6}JOBS_REDIS_URL:[^\n]*/g, "");
-    await writeFile(composePath, next);
+    await writeFile2(composePath, next);
   } catch {
   }
 }
@@ -202,25 +224,25 @@ async function removePaymentStack(targetDir) {
     "apps/api/src/app/payment"
   ];
   for (const p2 of paths) {
-    await rm(join(targetDir, p2), { recursive: true, force: true });
+    await rm(join2(targetDir, p2), { recursive: true, force: true });
   }
-  const appModulePath = join(targetDir, "apps/api/src/app/app.module.ts");
+  const appModulePath = join2(targetDir, "apps/api/src/app/app.module.ts");
   try {
-    const appModule = await readFile(appModulePath, "utf8");
+    const appModule = await readFile2(appModulePath, "utf8");
     const next = appModule.replace(/^import \{ PaymentModule \} from '\.\/payment\/payment\.module';\n/m, "").replace(/,\s*PaymentModule/g, "");
-    await writeFile(appModulePath, next);
+    await writeFile2(appModulePath, next);
   } catch {
   }
-  await stripDeps(join(targetDir, "apps/api/package.json"), [
+  await stripDeps(join2(targetDir, "apps/api/package.json"), [
     "@icore/payment-client",
     "@idevconn/payment"
   ]);
   await stripGatewayTransport(targetDir, "PAYMENT");
-  const mainTsPath = join(targetDir, "apps/api/src/main.ts");
+  const mainTsPath = join2(targetDir, "apps/api/src/main.ts");
   try {
-    const src = await readFile(mainTsPath, "utf8");
+    const src = await readFile2(mainTsPath, "utf8");
     const next = src.replace(/\n\s*\{ name: 'payment', prefix: 'PAYMENT' \},/, "");
-    await writeFile(mainTsPath, next);
+    await writeFile2(mainTsPath, next);
   } catch {
   }
 }
@@ -232,39 +254,39 @@ async function removeNotesStack(targetDir) {
     "apps/api/src/app/notes",
     "apps/client/src/components/notes"
   ]) {
-    await rm(join(targetDir, p2), { recursive: true, force: true });
+    await rm(join2(targetDir, p2), { recursive: true, force: true });
   }
-  await rm(join(targetDir, "apps/client/src/routes/_dashboard/notes.tsx"), { force: true });
-  await rm(join(targetDir, "apps/client/src/queries/notes.ts"), { force: true });
-  const appModulePath = join(targetDir, "apps/api/src/app/app.module.ts");
+  await rm(join2(targetDir, "apps/client/src/routes/_dashboard/notes.tsx"), { force: true });
+  await rm(join2(targetDir, "apps/client/src/queries/notes.ts"), { force: true });
+  const appModulePath = join2(targetDir, "apps/api/src/app/app.module.ts");
   try {
-    const src = await readFile(appModulePath, "utf8");
+    const src = await readFile2(appModulePath, "utf8");
     const next = src.replace(/^import \{ NotesModule \} from '\.\/notes\/notes\.module';\n/m, "").replace(/,\s*NotesModule/g, "");
-    await writeFile(appModulePath, next);
+    await writeFile2(appModulePath, next);
   } catch {
   }
-  await stripDeps(join(targetDir, "apps/api/package.json"), [
+  await stripDeps(join2(targetDir, "apps/api/package.json"), [
     "@icore/notes-client",
     "@casl/ability"
   ]);
   await stripGatewayTransport(targetDir, "NOTES");
-  const mainTsPath = join(targetDir, "apps/api/src/main.ts");
+  const mainTsPath = join2(targetDir, "apps/api/src/main.ts");
   try {
-    const src = await readFile(mainTsPath, "utf8");
+    const src = await readFile2(mainTsPath, "utf8");
     const next = src.replace(/\n\s*\{ name: 'notes', prefix: 'NOTES' \},/, "");
-    await writeFile(mainTsPath, next);
+    await writeFile2(mainTsPath, next);
   } catch {
   }
-  const tsconfigPath = join(targetDir, "tsconfig.base.json");
+  const tsconfigPath = join2(targetDir, "tsconfig.base.json");
   try {
-    const src = await readFile(tsconfigPath, "utf8");
+    const src = await readFile2(tsconfigPath, "utf8");
     const next = src.replace(/^\s*"@icore\/notes-client": \[[^\]]*\],?\n/m, "");
-    await writeFile(tsconfigPath, next);
+    await writeFile2(tsconfigPath, next);
   } catch {
   }
-  const siderPath = join(targetDir, "apps/client/src/components/layout/LayoutSider.tsx");
+  const siderPath = join2(targetDir, "apps/client/src/components/layout/LayoutSider.tsx");
   try {
-    const src = await readFile(siderPath, "utf8");
+    const src = await readFile2(siderPath, "utf8");
     const next = src.replace(", StickyNote", "").replace(/\n {8}<Link\n {10}to="\/(?:_dashboard\/)?notes"[\s\S]*?<\/Link>/, "").replace(", FileTextOutlined", "").replace(
       "const selectedKey = pathname.includes('/notes')\n    ? 'notes'\n    : pathname.includes('/profile')",
       "const selectedKey = pathname.includes('/profile')"
@@ -275,159 +297,213 @@ async function removeNotesStack(targetDir) {
       /\n {8}<ListItemButton\n {10}component=\{Link\}\n {10}to="\/(?:_dashboard\/)?notes"[\s\S]*?<\/ListItemButton>/,
       ""
     ).replace(/\n\s*<Link to="\/(?:_dashboard\/)?notes">[\s\S]*?<\/Link>/m, "");
-    await writeFile(siderPath, next);
+    await writeFile2(siderPath, next);
   } catch {
   }
-  const keysPath = join(targetDir, "libs/template-shared/src/lib/i18n/keys.ts");
+  const keysPath = join2(targetDir, "libs/template-shared/src/lib/i18n/keys.ts");
   try {
-    const src = await readFile(keysPath, "utf8");
+    const src = await readFile2(keysPath, "utf8");
     const next = src.replace(/^\s{4}notes: \{\n(?:\s+.*\n)*?\s{4}\},\n/m, "");
-    await writeFile(keysPath, next);
-  } catch {
-  }
-}
-async function stripTsconfigPath(targetDir, alias) {
-  const tsconfigPath = join(targetDir, "tsconfig.base.json");
-  try {
-    const src = await readFile(tsconfigPath, "utf8");
-    const escaped = alias.replace(/[@/]/g, (c) => c === "@" ? "@" : "\\/");
-    const pretty = src.replace(new RegExp(`^\\s*"${escaped}": \\[[^\\]]*\\],?\\n`, "m"), "");
-    if (pretty !== src) {
-      await writeFile(tsconfigPath, pretty);
-      return;
-    }
-    const parsed = JSON.parse(src);
-    if (parsed.compilerOptions?.paths) {
-      delete parsed.compilerOptions.paths[alias];
-    }
-    await writeFile(tsconfigPath, JSON.stringify(parsed));
+    await writeFile2(keysPath, next);
   } catch {
   }
 }
 async function removeUnusedAuthStrategies(targetDir, authProvider) {
-  const modulePath = join(targetDir, "apps/microservices/auth/src/app/app.module.ts");
-  const AUTH_BRANCH = /if \(provider === 'supabase'\) return makeSupabaseAuth\(cfg\);\n\s*return makeFirebaseAuth\(cfg\);/m;
+  const modulePath = join2(targetDir, "apps/microservices/auth/src/app/app.module.ts");
+  const AUTH_BRANCH = /if \(provider === 'supabase'\) return makeSupabaseAuth\(cfg\);\n\s*if \(provider === 'mongodb'\) return makeMongoDbAuth\(connection, cfg\);\n\s*return makeFirebaseAuth\(cfg\);/m;
   if (authProvider === "supabase") {
-    await rm(join(targetDir, "libs/auth-strategies/firebase"), { recursive: true, force: true });
-    await stripDeps(join(targetDir, "apps/microservices/auth/package.json"), [
+    await rm(join2(targetDir, "libs/auth-strategies/firebase"), { recursive: true, force: true });
+    await rm(join2(targetDir, "libs/auth-strategies/mongodb"), { recursive: true, force: true });
+    await stripDeps(join2(targetDir, "apps/microservices/auth/package.json"), [
       "@icore/auth-firebase",
-      "@icore/firebase-admin"
+      "@icore/firebase-admin",
+      "@icore/auth-mongodb"
     ]);
     await stripTsconfigPath(targetDir, "@icore/auth-firebase");
+    await stripTsconfigPath(targetDir, "@icore/auth-mongodb");
     try {
-      const src = await readFile(modulePath, "utf8");
-      const next = src.replace(/^import \{[^}]*\} from '@icore\/firebase-admin';\n/m, "").replace(/^import \{[^}]*FirebaseAuthStrategy[^}]*\} from '@icore\/auth-firebase';\n/m, "").replace(/^ {2}firebase: \[[^\]]*\],\n/m, "").replace(/\nfunction makeFirebaseAuth[\s\S]*?\n}\n/m, "").replace(AUTH_BRANCH, "return makeSupabaseAuth(cfg);");
-      await writeFile(modulePath, next);
+      const src = await readFile2(modulePath, "utf8");
+      const next = src.replace(/^import \{[^}]*\} from '@icore\/firebase-admin';\n/gm, "").replace(/^import \{[^}]*FirebaseAuthStrategy[^}]*\} from '@icore\/auth-firebase';\n/gm, "").replace(/^import \{[^}]*MongoDbAuthStrategy[^}]*\} from '@icore\/auth-mongodb';\n/gm, "").replace(
+        /^import \{ MongooseModule, getConnectionToken \} from '@nestjs\/mongoose';\n/gm,
+        ""
+      ).replace(/^import \{ Connection \} from 'mongoose';\n/gm, "").replace(/^ {2}firebase: \[[^\]]*\],\n/gm, "").replace(/^ {2}mongodb: \[[^\]]*\],\n/gm, "").replace(/\nfunction makeFirebaseAuth[\s\S]*?\n}\n/gm, "").replace(/\nfunction makeMongoDbAuth[\s\S]*?\n}\n/gm, "").replace(/^ {4}MongooseModule\.forRootAsync[\s\S]*?\n {4}\}\),\n/gm, "").replace(AUTH_BRANCH, "return makeSupabaseAuth(cfg);").replace(/, connection: Connection/, "").replace(/, getConnectionToken\(\)/, "");
+      await writeFile2(modulePath, next);
     } catch {
     }
   }
   if (authProvider === "firebase") {
-    await rm(join(targetDir, "libs/auth-strategies/supabase"), { recursive: true, force: true });
-    await stripDeps(join(targetDir, "apps/microservices/auth/package.json"), [
-      "@icore/auth-supabase"
+    await rm(join2(targetDir, "libs/auth-strategies/supabase"), { recursive: true, force: true });
+    await rm(join2(targetDir, "libs/auth-strategies/mongodb"), { recursive: true, force: true });
+    await stripDeps(join2(targetDir, "apps/microservices/auth/package.json"), [
+      "@icore/auth-supabase",
+      "@icore/auth-mongodb"
     ]);
     await stripTsconfigPath(targetDir, "@icore/auth-supabase");
+    await stripTsconfigPath(targetDir, "@icore/auth-mongodb");
     try {
-      const src = await readFile(modulePath, "utf8");
-      const next = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/m, "").replace(/^import \{[^}]*SupabaseAuthStrategy[^}]*\} from '@icore\/auth-supabase';\n/m, "").replace(/\nfunction makeSupabaseAuth[\s\S]*?\n}\n/m, "").replace(AUTH_BRANCH, "return makeFirebaseAuth(cfg);");
-      await writeFile(modulePath, next);
+      const src = await readFile2(modulePath, "utf8");
+      const next = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/gm, "").replace(/^import \{[^}]*SupabaseAuthStrategy[^}]*\} from '@icore\/auth-supabase';\n/gm, "").replace(/^import \{[^}]*MongoDbAuthStrategy[^}]*\} from '@icore\/auth-mongodb';\n/gm, "").replace(
+        /^import \{ MongooseModule, getConnectionToken \} from '@nestjs\/mongoose';\n/gm,
+        ""
+      ).replace(/^import \{ Connection \} from 'mongoose';\n/gm, "").replace(/^ {2}supabase: \[[^\]]*\],\n/gm, "").replace(/^ {2}mongodb: \[[^\]]*\],\n/gm, "").replace(/\nfunction makeSupabaseAuth[\s\S]*?\n}\n/gm, "").replace(/\nfunction makeMongoDbAuth[\s\S]*?\n}\n/gm, "").replace(/^ {4}MongooseModule\.forRootAsync[\s\S]*?\n {4}\}\),\n/gm, "").replace(AUTH_BRANCH, "return makeFirebaseAuth(cfg);").replace(/, connection: Connection/, "").replace(/, getConnectionToken\(\)/, "");
+      await writeFile2(modulePath, next);
+    } catch {
+    }
+  }
+  if (authProvider === "mongodb") {
+    await rm(join2(targetDir, "libs/auth-strategies/supabase"), { recursive: true, force: true });
+    await rm(join2(targetDir, "libs/auth-strategies/firebase"), { recursive: true, force: true });
+    await stripDeps(join2(targetDir, "apps/microservices/auth/package.json"), [
+      "@icore/auth-supabase",
+      "@icore/auth-firebase",
+      "@icore/firebase-admin"
+    ]);
+    await stripTsconfigPath(targetDir, "@icore/auth-supabase");
+    await stripTsconfigPath(targetDir, "@icore/auth-firebase");
+    try {
+      const src = await readFile2(modulePath, "utf8");
+      const next = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/gm, "").replace(/^import \{[^}]*SupabaseAuthStrategy[^}]*\} from '@icore\/auth-supabase';\n/gm, "").replace(/^import \{[^}]*\} from '@icore\/firebase-admin';\n/gm, "").replace(/^import \{[^}]*FirebaseAuthStrategy[^}]*\} from '@icore\/auth-firebase';\n/gm, "").replace(/^ {2}supabase: \[[^\]]*\],\n/gm, "").replace(/^ {2}firebase: \[[^\]]*\],\n/gm, "").replace(/\nfunction makeSupabaseAuth[\s\S]*?\n}\n/gm, "").replace(/\nfunction makeFirebaseAuth[\s\S]*?\n}\n/gm, "").replace(AUTH_BRANCH, "return makeMongoDbAuth(connection, cfg);");
+      await writeFile2(modulePath, next);
     } catch {
     }
   }
 }
 async function removeUnusedStorageStrategies(targetDir, uploadProvider) {
   if (uploadProvider === "none") return;
-  const modulePath = join(targetDir, "apps/microservices/upload/src/app/app.module.ts");
+  const modulePath = join2(targetDir, "apps/microservices/upload/src/app/app.module.ts");
+  const STORAGE_BRANCH = /if \(provider === 'supabase'\) return makeSupabaseStorage\(cfg\);\n\s*if \(provider === 'firebase'\) return makeFirebaseStorage\(cfg\);\n\s*if \(provider === 'mongodb'\) return makeMongoDbStorage\(connection\);\n\s*return makeCloudinaryStorage\(cfg\);/m;
   if (uploadProvider !== "firebase") {
-    await rm(join(targetDir, "libs/storage-strategies/firebase"), { recursive: true, force: true });
-    await stripDeps(join(targetDir, "apps/microservices/upload/package.json"), [
+    await rm(join2(targetDir, "libs/storage-strategies/firebase"), { recursive: true, force: true });
+    await stripDeps(join2(targetDir, "apps/microservices/upload/package.json"), [
       "@icore/storage-firebase",
       "@icore/firebase-admin"
     ]);
     await stripTsconfigPath(targetDir, "@icore/storage-firebase");
   }
   if (uploadProvider !== "cloudinary") {
-    await rm(join(targetDir, "libs/storage-strategies/cloudinary"), {
+    await rm(join2(targetDir, "libs/storage-strategies/cloudinary"), {
       recursive: true,
       force: true
     });
-    await stripDeps(join(targetDir, "apps/microservices/upload/package.json"), [
+    await stripDeps(join2(targetDir, "apps/microservices/upload/package.json"), [
       "@icore/storage-cloudinary"
     ]);
     await stripTsconfigPath(targetDir, "@icore/storage-cloudinary");
   }
   if (uploadProvider !== "supabase") {
-    await rm(join(targetDir, "libs/storage-strategies/supabase"), { recursive: true, force: true });
-    await stripDeps(join(targetDir, "apps/microservices/upload/package.json"), [
+    await rm(join2(targetDir, "libs/storage-strategies/supabase"), { recursive: true, force: true });
+    await stripDeps(join2(targetDir, "apps/microservices/upload/package.json"), [
       "@icore/storage-supabase"
     ]);
     await stripTsconfigPath(targetDir, "@icore/storage-supabase");
   }
+  if (uploadProvider !== "mongodb") {
+    await rm(join2(targetDir, "libs/storage-strategies/mongodb"), { recursive: true, force: true });
+    await stripDeps(join2(targetDir, "apps/microservices/upload/package.json"), [
+      "@icore/storage-mongodb"
+    ]);
+    await stripTsconfigPath(targetDir, "@icore/storage-mongodb");
+  }
   try {
-    let src = await readFile(modulePath, "utf8");
+    let src = await readFile2(modulePath, "utf8");
     if (uploadProvider !== "firebase") {
-      src = src.replace(/^import \{[^}]*\} from '@icore\/firebase-admin';\n/m, "").replace(
-        /^import \{[^}]*FirebaseStorageStrategy[^}]*\} from '@icore\/storage-firebase';\n/m,
+      src = src.replace(/^import \{[^}]*\} from '@icore\/firebase-admin';\n/gm, "").replace(
+        /^import \{[^}]*FirebaseStorageStrategy[^}]*\} from '@icore\/storage-firebase';\n/gm,
         ""
-      ).replace(/^ {2}firebase: \[[^\]]*\],\n/m, "").replace(/\nfunction makeFirebaseStorage[\s\S]*?\n}\n/m, "");
+      ).replace(/^ {2}firebase: \[[^\]]*\],\n/gm, "").replace(/\nfunction makeFirebaseStorage[\s\S]*?\n}\n/gm, "");
     }
     if (uploadProvider !== "cloudinary") {
-      src = src.replace(/^import \{ v2 as cloudinary \} from 'cloudinary';\n/m, "").replace(
-        /^import \{[^}]*CloudinaryStorageStrategy[^}]*\} from '@icore\/storage-cloudinary';\n/m,
+      src = src.replace(/^import \{ v2 as cloudinary \} from 'cloudinary';\n/gm, "").replace(
+        /^import \{[^}]*CloudinaryStorageStrategy[^}]*\} from '@icore\/storage-cloudinary';\n/gm,
         ""
-      ).replace(/\nfunction makeCloudinaryStorage[\s\S]*?\n}\n/m, "");
+      ).replace(/\nfunction makeCloudinaryStorage[\s\S]*?\n}\n/gm, "");
     }
     if (uploadProvider !== "supabase") {
-      src = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/m, "").replace(
-        /^import \{[^}]*SupabaseStorageStrategy[^}]*\} from '@icore\/storage-supabase';\n/m,
+      src = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/gm, "").replace(
+        /^import \{[^}]*SupabaseStorageStrategy[^}]*\} from '@icore\/storage-supabase';\n/gm,
+        ""
+      ).replace(/\nfunction makeSupabaseStorage[\s\S]*?\n}\n/gm, "");
+    }
+    if (uploadProvider !== "mongodb") {
+      src = src.replace(
+        /^import \{[^}]*MongoDbStorageStrategy[^}]*\} from '@icore\/storage-mongodb';\n/gm,
+        ""
+      ).replace(
+        /^import \{ MongooseModule, getConnectionToken \} from '@nestjs\/mongoose';\n/gm,
         ""
-      ).replace(/\nfunction makeSupabaseStorage[\s\S]*?\n}\n/m, "");
+      ).replace(/^import \{ Connection \} from 'mongoose';\n/gm, "").replace(/^ {2}mongodb: \[[^\]]*\],\n/gm, "").replace(/\nfunction makeMongoDbStorage[\s\S]*?\n}\n/gm, "").replace(/^ {4}MongooseModule\.forRootAsync[\s\S]*?\n {4}\}\),\n/gm, "");
     }
-    const STORAGE_BRANCH = /if \(provider === 'supabase'\) return makeSupabaseStorage\(cfg\);\n\s*if \(provider === 'firebase'\) return makeFirebaseStorage\(cfg\);\n\s*return makeCloudinaryStorage\(cfg\);/m;
-    const chosenReturn = `return make${uploadProvider.charAt(0).toUpperCase() + uploadProvider.slice(1)}Storage(cfg);`;
+    const chosenReturn = uploadProvider === "mongodb" ? `return makeMongoDbStorage(connection);` : `return make${uploadProvider.charAt(0).toUpperCase() + uploadProvider.slice(1)}Storage(cfg);`;
     src = src.replace(STORAGE_BRANCH, chosenReturn);
-    await writeFile(modulePath, src);
+    if (uploadProvider !== "mongodb") {
+      src = src.replace(/, connection: Connection/, "").replace(/, getConnectionToken\(\)/, "");
+    }
+    await writeFile2(modulePath, src);
   } catch {
   }
 }
 async function removeUnusedDbStrategies(targetDir, dbProvider) {
-  const modulePath = join(targetDir, "apps/microservices/notes/src/app/app.module.ts");
+  const modulePath = join2(targetDir, "apps/microservices/notes/src/app/app.module.ts");
+  const DB_BRANCH = /if \(provider === 'supabase'\) return makeSupabaseDB\(cfg\);\n\s*if \(provider === 'mongodb'\) return makeMongoDb\(connection\);\n\s*return makeFirestoreDB\(cfg\);/m;
   if (dbProvider === "supabase") {
-    await rm(join(targetDir, "libs/db-strategies/firestore"), { recursive: true, force: true });
-    await stripDeps(join(targetDir, "apps/microservices/notes/package.json"), [
+    await rm(join2(targetDir, "libs/db-strategies/firestore"), { recursive: true, force: true });
+    await rm(join2(targetDir, "libs/db-strategies/mongodb"), { recursive: true, force: true });
+    await stripDeps(join2(targetDir, "apps/microservices/notes/package.json"), [
       "@icore/db-firestore",
-      "@icore/firebase-admin"
+      "@icore/firebase-admin",
+      "@icore/db-mongodb"
     ]);
     await stripTsconfigPath(targetDir, "@icore/db-firestore");
+    await stripTsconfigPath(targetDir, "@icore/db-mongodb");
     try {
-      const src = await readFile(modulePath, "utf8");
-      const next = src.replace(/^import \{[^}]*\} from '@icore\/firebase-admin';\n/m, "").replace(/^import \{[^}]*FirestoreDBStrategy[^}]*\} from '@icore\/db-firestore';\n/m, "").replace(/^ {2}firestore: \[[^\]]*\],\n/m, "").replace(/^ {2}firebase: \[[^\]]*\],\n/m, "").replace(/\nfunction makeFirestoreDB[\s\S]*?\n}\n/m, "").replace(
-        /if \(provider === 'supabase'\) return makeSupabaseDB\(cfg\);\n\s*return makeFirestoreDB\(cfg\);/m,
-        "return makeSupabaseDB(cfg);"
-      );
-      await writeFile(modulePath, next);
+      const src = await readFile2(modulePath, "utf8");
+      const next = src.replace(/^import \{[^}]*\} from '@icore\/firebase-admin';\n/gm, "").replace(/^import \{[^}]*FirestoreDBStrategy[^}]*\} from '@icore\/db-firestore';\n/gm, "").replace(/^import \{[^}]*MongoDbDBStrategy[^}]*\} from '@icore\/db-mongodb';\n/gm, "").replace(
+        /^import \{ MongooseModule, getConnectionToken \} from '@nestjs\/mongoose';\n/gm,
+        ""
+      ).replace(/^import \{ Connection \} from 'mongoose';\n/gm, "").replace(/^ {2}firestore: \[[^\]]*\],\n/gm, "").replace(/^ {2}firebase: \[[^\]]*\],\n/gm, "").replace(/^ {2}mongodb: \[[^\]]*\],\n/gm, "").replace(/\nfunction makeFirestoreDB[\s\S]*?\n}\n/gm, "").replace(/\nfunction makeMongoDb[\s\S]*?\n}\n/gm, "").replace(/^ {4}MongooseModule\.forRootAsync[\s\S]*?\n {4}\}\),\n/gm, "").replace(DB_BRANCH, "return makeSupabaseDB(cfg);").replace(/, connection: Connection/, "").replace(/, getConnectionToken\(\)/, "");
+      await writeFile2(modulePath, next);
     } catch {
     }
   }
   if (dbProvider === "firebase") {
-    await rm(join(targetDir, "libs/db-strategies/supabase"), { recursive: true, force: true });
-    await stripDeps(join(targetDir, "apps/microservices/notes/package.json"), [
-      "@icore/db-supabase"
+    await rm(join2(targetDir, "libs/db-strategies/supabase"), { recursive: true, force: true });
+    await rm(join2(targetDir, "libs/db-strategies/mongodb"), { recursive: true, force: true });
+    await stripDeps(join2(targetDir, "apps/microservices/notes/package.json"), [
+      "@icore/db-supabase",
+      "@icore/db-mongodb"
     ]);
     await stripTsconfigPath(targetDir, "@icore/db-supabase");
+    await stripTsconfigPath(targetDir, "@icore/db-mongodb");
     try {
-      const src = await readFile(modulePath, "utf8");
-      const next = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/m, "").replace(/^import \{[^}]*SupabaseDBStrategy[^}]*\} from '@icore\/db-supabase';\n/m, "").replace(/\nfunction makeSupabaseDB[\s\S]*?\n}\n/m, "").replace(/\nfunction requireEnv[\s\S]*?\n}\n/m, "").replace(
-        /if \(provider === 'supabase'\) return makeSupabaseDB\(cfg\);\n\s*return makeFirestoreDB\(cfg\);/m,
-        "return makeFirestoreDB(cfg);"
-      );
-      await writeFile(modulePath, next);
+      const src = await readFile2(modulePath, "utf8");
+      const next = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/gm, "").replace(/^import \{[^}]*SupabaseDBStrategy[^}]*\} from '@icore\/db-supabase';\n/gm, "").replace(/^import \{[^}]*MongoDbDBStrategy[^}]*\} from '@icore\/db-mongodb';\n/gm, "").replace(
+        /^import \{ MongooseModule, getConnectionToken \} from '@nestjs\/mongoose';\n/gm,
+        ""
+      ).replace(/^import \{ Connection \} from 'mongoose';\n/gm, "").replace(/^ {2}supabase: \[[^\]]*\],\n/gm, "").replace(/^ {2}mongodb: \[[^\]]*\],\n/gm, "").replace(/\nfunction makeSupabaseDB[\s\S]*?\n}\n/gm, "").replace(/\nfunction makeMongoDb[\s\S]*?\n}\n/gm, "").replace(/^ {4}MongooseModule\.forRootAsync[\s\S]*?\n {4}\}\),\n/gm, "").replace(/\nfunction requireEnv[\s\S]*?\n}\n/gm, "").replace(DB_BRANCH, "return makeFirestoreDB(cfg);").replace(/, connection: Connection/, "").replace(/, getConnectionToken\(\)/, "");
+      await writeFile2(modulePath, next);
+    } catch {
+    }
+  }
+  if (dbProvider === "mongodb") {
+    await rm(join2(targetDir, "libs/db-strategies/supabase"), { recursive: true, force: true });
+    await rm(join2(targetDir, "libs/db-strategies/firestore"), { recursive: true, force: true });
+    await stripDeps(join2(targetDir, "apps/microservices/notes/package.json"), [
+      "@icore/db-supabase",
+      "@icore/db-firestore",
+      "@icore/firebase-admin"
+    ]);
+    await stripTsconfigPath(targetDir, "@icore/db-supabase");
+    await stripTsconfigPath(targetDir, "@icore/db-firestore");
+    try {
+      const src = await readFile2(modulePath, "utf8");
+      const next = src.replace(/^import \{ createClient \} from '@supabase\/supabase-js';\n/gm, "").replace(/^import \{[^}]*SupabaseDBStrategy[^}]*\} from '@icore\/db-supabase';\n/gm, "").replace(/^import \{[^}]*\} from '@icore\/firebase-admin';\n/gm, "").replace(/^import \{[^}]*FirestoreDBStrategy[^}]*\} from '@icore\/db-firestore';\n/gm, "").replace(/^ {2}supabase: \[[^\]]*\],\n/gm, "").replace(/^ {2}firestore: \[[^\]]*\],\n/gm, "").replace(/^ {2}firebase: \[[^\]]*\],\n/gm, "").replace(/\nfunction makeSupabaseDB[\s\S]*?\n}\n/gm, "").replace(/\nfunction makeFirestoreDB[\s\S]*?\n}\n/gm, "").replace(/\nfunction requireEnv[\s\S]*?\n}\n/gm, "").replace(DB_BRANCH, "return makeMongoDb(connection);");
+      await writeFile2(modulePath, next);
     } catch {
     }
   }
 }
 async function removeFirebaseAdminLib(targetDir) {
-  await rm(join(targetDir, "libs/firebase-admin"), { recursive: true, force: true });
+  await rm(join2(targetDir, "libs/firebase-admin"), { recursive: true, force: true });
   await stripTsconfigPath(targetDir, "@icore/firebase-admin");
 }
 async function removeUploadStack(targetDir) {
@@ -439,129 +515,36 @@ async function removeUploadStack(targetDir) {
     "apps/api/src/app/storage"
   ];
   for (const p2 of paths) {
-    await rm(join(targetDir, p2), { recursive: true, force: true });
+    await rm(join2(targetDir, p2), { recursive: true, force: true });
   }
-  const appModulePath = join(targetDir, "apps/api/src/app/app.module.ts");
+  const appModulePath = join2(targetDir, "apps/api/src/app/app.module.ts");
   try {
-    const appModule = await readFile(appModulePath, "utf8");
+    const appModule = await readFile2(appModulePath, "utf8");
     const next = appModule.replace(/^import \{ StorageModule \} from '\.\/storage\/storage\.module';\n/m, "").replace(/,\s*StorageModule/g, "");
-    await writeFile(appModulePath, next);
+    await writeFile2(appModulePath, next);
   } catch {
   }
-  const gatewayEnv = join(targetDir, "apps/api/.env");
+  const gatewayEnv = join2(targetDir, "apps/api/.env");
   try {
-    const env = await readFile(gatewayEnv, "utf8");
+    const env = await readFile2(gatewayEnv, "utf8");
     const next = env.split("\n").filter(
       (line) => !line.startsWith("UPLOAD_") && !line.startsWith("# UPLOAD_") && !line.startsWith("MAX_FILE_SIZE_KB")
     ).join("\n");
-    await writeFile(gatewayEnv, next);
+    await writeFile2(gatewayEnv, next);
   } catch {
   }
-  await stripDeps(join(targetDir, "apps/api/package.json"), [
+  await stripDeps(join2(targetDir, "apps/api/package.json"), [
     "@icore/upload-client",
     "@types/multer"
   ]);
 }
-async function selectClientTemplate(targetDir, opts) {
-  const templatesRoot = join(targetDir, "apps/templates");
-  const chosen = join(templatesRoot, `client-${opts.ui}`);
-  const destClient = join(targetDir, "apps/client");
-  let chosenUi = opts.ui;
-  try {
-    const s = await stat(chosen);
-    if (!s.isDirectory()) throw new Error("not a dir");
-    await copyTree(chosen, destClient);
-  } catch {
-    chosenUi = "shadcn";
-    await copyTree(join(templatesRoot, "client-shadcn"), destClient);
-  }
-  await rm(templatesRoot, { recursive: true, force: true });
-  await rewriteClientPaths(destClient, chosenUi);
-}
-async function rewriteClientPaths(clientDir, ui) {
-  const candidates = [
-    "vite.config.mts",
-    "tsconfig.json",
-    "tsconfig.app.json",
-    "tsconfig.spec.json",
-    "project.json",
-    "eslint.config.mjs"
-  ];
-  for (const rel of candidates) {
-    const path = join(clientDir, rel);
-    try {
-      const raw = await readFile(path, "utf8");
-      const next = raw.replaceAll("../../../", "../../").replaceAll(`apps/templates/client-${ui}`, "apps/client").replaceAll(`client-${ui}`, "client");
-      if (next !== raw) await writeFile(path, next);
-    } catch {
-    }
-  }
-}
-function gitInit(cwd, projectName) {
-  spawnSync("git", ["init"], { cwd, stdio: "inherit" });
-  spawnSync("git", ["add", "."], { cwd, stdio: "inherit" });
-  spawnSync(
-    "git",
-    ["commit", "-m", `chore: bootstrap ${projectName} from @idevconn/create-icore`],
-    { cwd, stdio: "inherit" }
-  );
-}
-function resolveYarnBin(cwd) {
-  try {
-    const yarnrc = readFileSync(join(cwd, ".yarnrc.yml"), "utf8");
-    const match = yarnrc.match(/^yarnPath:\s*(.+)$/m);
-    if (match?.[1]) return join(cwd, match[1].trim());
-  } catch {
-  }
-  return join(cwd, ".yarn", "releases", "yarn-4.5.0.cjs");
-}
-function runInstall(cwd, pm) {
-  if (pm === "yarn") {
-    spawnSync("node", [resolveYarnBin(cwd), "install"], { cwd, stdio: "inherit" });
-  } else if (pm === "npm") {
-    spawnSync("npm", ["install"], { cwd, stdio: "inherit" });
-  } else {
-    spawnSync("pnpm", ["install"], { cwd, stdio: "inherit" });
-  }
-}
-async function scaffold(opts, templatesDir) {
-  await copyTree(templatesDir, opts.targetDir);
-  await rewriteRootPackageJson(opts.targetDir, opts);
-  await writeAuthEnv(opts.targetDir, opts);
-  await writeUploadEnv(opts.targetDir, opts);
-  await writeNotesEnv(opts.targetDir, opts);
-  await writePaymentEnv(opts.targetDir, opts);
-  await writeGatewayEnv(opts.targetDir, opts);
-  await writeRootEnv(opts.targetDir, opts);
-  await selectClientTemplate(opts.targetDir, opts);
-  await writeClientEnv(opts.targetDir);
-  if (opts.upload === "none") await removeUploadStack(opts.targetDir);
-  if (opts.payment === "none") await removePaymentStack(opts.targetDir);
-  if (opts.jobs === "none") await removeJobsStack(opts.targetDir);
-  if (opts.example === "none") await removeNotesStack(opts.targetDir);
-  await removeUnusedAuthStrategies(opts.targetDir, opts.authProvider);
-  await removeUnusedStorageStrategies(opts.targetDir, opts.upload);
-  await removeUnusedDbStrategies(opts.targetDir, opts.dbProvider);
-  const firebaseUsed = opts.authProvider === "firebase" || opts.dbProvider === "firebase" || opts.upload === "firebase";
-  if (!firebaseUsed) await removeFirebaseAdminLib(opts.targetDir);
-  if (opts.packageManager === "yarn") {
-    await writeFile(join(opts.targetDir, "yarn.lock"), "");
-  } else {
-    await rm(join(opts.targetDir, ".yarn"), { recursive: true, force: true });
-    await rm(join(opts.targetDir, ".yarnrc.yml"), { force: true });
-  }
-  if (opts.packageManager === "pnpm") {
-    await writePnpmWorkspace(opts.targetDir);
-    await rewritePnpmWorkspaceDeps(opts.targetDir);
-  }
-  await patchGitignoreForPm(opts.targetDir, opts.packageManager);
-  await writeAiFiles(opts.targetDir, opts);
-  if (opts.install) runInstall(opts.targetDir, opts.packageManager);
-  if (opts.initGit) gitInit(opts.targetDir, opts.projectName);
-}
+
+// src/lib/scaffold-pkg.ts
+import { readFile as readFile3, writeFile as writeFile3, mkdir, readdir } from "fs/promises";
+import { join as join3 } from "path";
 async function writePnpmWorkspace(targetDir) {
-  const pkgPath = join(targetDir, "package.json");
-  const pkg = JSON.parse(await readFile(pkgPath, "utf8"));
+  const pkgPath = join3(targetDir, "package.json");
+  const pkg = JSON.parse(await readFile3(pkgPath, "utf8"));
   const workspaces = pkg.workspaces ?? [];
   const packagesBlock = workspaces.map((p2) => `  - '${p2}'`).join("\n");
   const allowBuilds = [
@@ -582,23 +565,22 @@ ${packagesBlock}
 allowBuilds:
 ${allowBuilds}
 `;
-  await writeFile(join(targetDir, "pnpm-workspace.yaml"), content);
+  await writeFile3(join3(targetDir, "pnpm-workspace.yaml"), content);
 }
 async function rewritePnpmWorkspaceDeps(targetDir) {
-  const { readdir: rd } = await import("fs/promises");
   async function walk(dir) {
     const found = [];
     let entries;
     try {
-      entries = await rd(dir, { withFileTypes: true });
+      entries = await readdir(dir, { withFileTypes: true });
     } catch {
       return found;
     }
     for (const e of entries) {
       if (e.isDirectory() && e.name !== "node_modules") {
-        found.push(...await walk(join(dir, e.name)));
+        found.push(...await walk(join3(dir, e.name)));
       } else if (e.isFile() && e.name === "package.json") {
-        found.push(join(dir, e.name));
+        found.push(join3(dir, e.name));
       }
     }
     return found;
@@ -606,17 +588,17 @@ async function rewritePnpmWorkspaceDeps(targetDir) {
   const pkgFiles = await walk(targetDir);
   for (const f of pkgFiles) {
     try {
-      const raw = await readFile(f, "utf8");
+      const raw = await readFile3(f, "utf8");
       const next = raw.replace(/"(@icore\/[^"]+)":\s*"\*"/g, '"$1": "workspace:*"');
-      if (next !== raw) await writeFile(f, next);
+      if (next !== raw) await writeFile3(f, next);
     } catch {
     }
   }
 }
 async function patchGitignoreForPm(targetDir, pm) {
-  const giPath = join(targetDir, ".gitignore");
+  const giPath = join3(targetDir, ".gitignore");
   try {
-    let src = await readFile(giPath, "utf8");
+    let src = await readFile3(giPath, "utf8");
     src = src.replace(/^# Build artifacts.*\ntools\/create-icore\/templates\/\s*\n/m, "");
     if (pm !== "yarn") {
       src = src.replace(/^\.yarn\/\*\s*\n/m, "").replace(/^!\.yarn\/patches\s*\n/m, "").replace(/^!\.yarn\/plugins\s*\n/m, "").replace(/^!\.yarn\/releases\s*\n/m, "").replace(/^!\.yarn\/sdks\s*\n/m, "").replace(/^!\.yarn\/versions\s*\n/m, "").replace(/^\.pnp\.\*\s*\n/m, "");
@@ -631,7 +613,7 @@ async function patchGitignoreForPm(targetDir, pm) {
         src += "\n# npm\nnpm-debug.log*\n";
       }
     }
-    await writeFile(giPath, src);
+    await writeFile3(giPath, src);
   } catch {
   }
 }
@@ -646,7 +628,7 @@ async function writeAiFiles(targetDir, opts) {
   if (opts.jobs !== "none") activeMSes.push(`jobs (standalone)`);
   const usesSupabase = opts.authProvider === "supabase" || opts.dbProvider === "supabase" || opts.upload === "supabase";
   const usesFirebase = opts.authProvider === "firebase" || opts.dbProvider === "firebase" || opts.upload === "firebase";
-  await writeFile(join(targetDir, "CLAUDE.md"), "@AGENTS.md\n");
+  await writeFile3(join3(targetDir, "CLAUDE.md"), "@AGENTS.md\n");
   const uiLabel = { shadcn: "shadcn/ui + Tailwind", antd: "Ant Design 6", mui: "MUI 6" }[opts.ui];
   const readme = `# ${opts.projectName}
 
@@ -696,7 +678,7 @@ ${pm === "yarn" ? "yarn remove-notes" : pm === "pnpm" ? "pnpm remove-notes" : "n
 
 Apache-2.0
 `;
-  await writeFile(join(targetDir, "README.md"), readme);
+  await writeFile3(join3(targetDir, "README.md"), readme);
   const agents = `# ${opts.projectName} \u2014 Agent Instructions
 
 ## Stack snapshot
@@ -777,8 +759,8 @@ ${opts.upload !== "none" ? `| \`apps/microservices/upload/.env\` | \`STORAGE_PRO
 - Test behaviour, not implementation. Fake strategies from \`@icore/shared\` (FakeAuthStrategy etc.) serve as test doubles.
 - Run: \`${nx} test <project>\`
 `;
-  await writeFile(join(targetDir, "AGENTS.md"), agents);
-  await mkdir(join(targetDir, ".claude"), { recursive: true });
+  await writeFile3(join3(targetDir, "AGENTS.md"), agents);
+  await mkdir(join3(targetDir, ".claude"), { recursive: true });
   const mcpServers = {
     nx: {
       command: "npx",
@@ -819,17 +801,140 @@ ${opts.upload !== "none" ? `| \`apps/microservices/upload/.env\` | \`STORAGE_PRO
       ]
     }
   };
-  await writeFile(
-    join(targetDir, ".claude", "settings.json"),
+  await writeFile3(
+    join3(targetDir, ".claude", "settings.json"),
     JSON.stringify(settings, null, 2) + "\n"
   );
 }
 
+// src/lib/scaffold.ts
+var IGNORE_TOP = /* @__PURE__ */ new Set([
+  ".git",
+  "node_modules",
+  ".yarn/cache",
+  ".yarn/unplugged",
+  ".yarn/install-state.gz",
+  ".nx",
+  "dist",
+  "tmp",
+  "coverage",
+  ".idea",
+  ".vscode"
+]);
+async function copyTree(src, dest) {
+  await mkdir2(dest, { recursive: true });
+  const entries = await readdir2(src, { withFileTypes: true });
+  for (const entry of entries) {
+    if (IGNORE_TOP.has(entry.name)) continue;
+    const s = join4(src, entry.name);
+    const d = join4(dest, entry.name);
+    if (entry.isDirectory()) await copyTree(s, d);
+    else if (entry.isFile()) await copyFile(s, d);
+  }
+}
+async function selectClientTemplate(targetDir, opts) {
+  const templatesRoot = join4(targetDir, "apps/templates");
+  const chosen = join4(templatesRoot, `client-${opts.ui}`);
+  const destClient = join4(targetDir, "apps/client");
+  let chosenUi = opts.ui;
+  try {
+    const s = await stat(chosen);
+    if (!s.isDirectory()) throw new Error("not a dir");
+    await copyTree(chosen, destClient);
+  } catch {
+    chosenUi = "shadcn";
+    await copyTree(join4(templatesRoot, "client-shadcn"), destClient);
+  }
+  await rm2(templatesRoot, { recursive: true, force: true });
+  await rewriteClientPaths(destClient, chosenUi);
+}
+async function rewriteClientPaths(clientDir, ui) {
+  const candidates = [
+    "vite.config.mts",
+    "tsconfig.json",
+    "tsconfig.app.json",
+    "tsconfig.spec.json",
+    "project.json",
+    "eslint.config.mjs"
+  ];
+  for (const rel of candidates) {
+    const path = join4(clientDir, rel);
+    try {
+      const raw = await readFile4(path, "utf8");
+      const next = raw.replaceAll("../../../", "../../").replaceAll(`apps/templates/client-${ui}`, "apps/client").replaceAll(`client-${ui}`, "client");
+      if (next !== raw) await writeFile4(path, next);
+    } catch {
+    }
+  }
+}
+function gitInit(cwd, projectName) {
+  spawnSync("git", ["init"], { cwd, stdio: "inherit" });
+  spawnSync("git", ["add", "."], { cwd, stdio: "inherit" });
+  spawnSync(
+    "git",
+    ["commit", "-m", `chore: bootstrap ${projectName} from @idevconn/create-icore`],
+    { cwd, stdio: "inherit" }
+  );
+}
+function resolveYarnBin(cwd) {
+  try {
+    const yarnrc = readFileSync(join4(cwd, ".yarnrc.yml"), "utf8");
+    const match = yarnrc.match(/^yarnPath:\s*(.+)$/m);
+    if (match?.[1]) return join4(cwd, match[1].trim());
+  } catch {
+  }
+  return join4(cwd, ".yarn", "releases", "yarn-4.5.0.cjs");
+}
+function runInstall(cwd, pm) {
+  if (pm === "yarn") {
+    spawnSync("node", [resolveYarnBin(cwd), "install"], { cwd, stdio: "inherit" });
+  } else if (pm === "npm") {
+    spawnSync("npm", ["install"], { cwd, stdio: "inherit" });
+  } else {
+    spawnSync("pnpm", ["install"], { cwd, stdio: "inherit" });
+  }
+}
+async function scaffold(opts, templatesDir) {
+  await copyTree(templatesDir, opts.targetDir);
+  await rewriteRootPackageJson(opts.targetDir, opts);
+  await writeAuthEnv(opts.targetDir, opts);
+  await writeUploadEnv(opts.targetDir, opts);
+  await writeNotesEnv(opts.targetDir, opts);
+  await writePaymentEnv(opts.targetDir, opts);
+  await writeGatewayEnv(opts.targetDir, opts);
+  await writeRootEnv(opts.targetDir, opts);
+  await selectClientTemplate(opts.targetDir, opts);
+  await writeClientEnv(opts.targetDir);
+  if (opts.upload === "none") await removeUploadStack(opts.targetDir);
+  if (opts.payment === "none") await removePaymentStack(opts.targetDir);
+  if (opts.jobs === "none") await removeJobsStack(opts.targetDir);
+  if (opts.example === "none") await removeNotesStack(opts.targetDir);
+  await removeUnusedAuthStrategies(opts.targetDir, opts.authProvider);
+  await removeUnusedStorageStrategies(opts.targetDir, opts.upload);
+  await removeUnusedDbStrategies(opts.targetDir, opts.dbProvider);
+  const firebaseUsed = opts.authProvider === "firebase" || opts.dbProvider === "firebase" || opts.upload === "firebase";
+  if (!firebaseUsed) await removeFirebaseAdminLib(opts.targetDir);
+  if (opts.packageManager === "yarn") {
+    await writeFile4(join4(opts.targetDir, "yarn.lock"), "");
+  } else {
+    await rm2(join4(opts.targetDir, ".yarn"), { recursive: true, force: true });
+    await rm2(join4(opts.targetDir, ".yarnrc.yml"), { force: true });
+  }
+  if (opts.packageManager === "pnpm") {
+    await writePnpmWorkspace(opts.targetDir);
+    await rewritePnpmWorkspaceDeps(opts.targetDir);
+  }
+  await patchGitignoreForPm(opts.targetDir, opts.packageManager);
+  await writeAiFiles(opts.targetDir, opts);
+  if (opts.install) runInstall(opts.targetDir, opts.packageManager);
+  if (opts.initGit) gitInit(opts.targetDir, opts.projectName);
+}
+
 // src/lib/prompts.ts
 import * as p from "@clack/prompts";
 import { resolve } from "path";
-import { readFile as readFile2 } from "fs/promises";
-import { dirname, join as join2 } from "path";
+import { readFile as readFile5 } from "fs/promises";
+import { dirname, join as join5 } from "path";
 import { fileURLToPath } from "url";
 function detectPackageManager() {
   const ua = process.env["npm_config_user_agent"] ?? "";
@@ -841,7 +946,7 @@ function detectPackageManager() {
 async function readSelfVersion() {
   try {
     const here = dirname(fileURLToPath(import.meta.url));
-    const pkgRaw = await readFile2(join2(here, "..", "package.json"), "utf8");
+    const pkgRaw = await readFile5(join5(here, "..", "package.json"), "utf8");
     const pkg = JSON.parse(pkgRaw);
     return pkg.version ?? null;
   } catch {
@@ -942,7 +1047,8 @@ Re-run with @latest to refresh:
     message: "Auth provider",
     options: [
       { value: "supabase", label: "Supabase" },
-      { value: "firebase", label: "Firebase" }
+      { value: "firebase", label: "Firebase" },
+      { value: "mongodb", label: "MongoDB (Custom Auth)" }
     ]
   });
   if (p.isCancel(authProvider)) throw new Error("cancelled");
@@ -950,7 +1056,8 @@ Re-run with @latest to refresh:
     message: "Database backend",
     options: [
       { value: "supabase", label: "Supabase Postgres" },
-      { value: "firebase", label: "Firestore" }
+      { value: "firebase", label: "Firestore" },
+      { value: "mongodb", label: "MongoDB" }
     ],
     initialValue: authProvider
   });
@@ -961,6 +1068,7 @@ Re-run with @latest to refresh:
       { value: "supabase", label: "Supabase Storage" },
       { value: "firebase", label: "Firebase Cloud Storage" },
       { value: "cloudinary", label: "Cloudinary" },
+      { value: "mongodb", label: "MongoDB GridFS" },
       { value: "none", label: "None \u2014 skip the upload microservice" }
     ]
   });