@idevconn/create-icore 0.8.0 → 0.9.1

package/README.md

@@ -19,15 +19,16 @@ npm i -g @idevconn/create-icore && create-icore my-saas
 
 ## Flags
 
-| Flag           | Values                                             | Default         | Notes                                                                                                                                   |
-| -------------- | -------------------------------------------------- | --------------- | --------------------------------------------------------------------------------------------------------------------------------------- |
-| `--auth`       | `supabase` \| `firebase`                           | prompted        | Auth provider                                                                                                                           |
-| `--db`         | `supabase` \| `firebase`                           | prompted        | Database backend. Fully independent of `--auth` — mix-and-match combos like `--auth=firebase --db=supabase` are first-class.            |
-| `--upload`     | `supabase` \| `firebase` \| `cloudinary` \| `none` | prompted        | File upload provider. Use `none` to remove the upload microservice entirely.                                                            |
-| `--ui`         | `shadcn` \| `antd` \| `mui`                        | `shadcn`        | UI library. All three are fully implemented: `shadcn` (Tailwind 4 + shadcn/ui), `antd` (Ant Design 6), `mui` (MUI 6 / Material Design). |
-| `--transport`  | `tcp` \| `redis` \| `nats`                         | `tcp`           | Microservice transport                                                                                                                  |
-| `--no-git`     | —                                                  | git enabled     | Skip `git init`                                                                                                                         |
-| `--no-install` | —                                                  | install enabled | Skip `yarn install`                                                                                                                     |
+| Flag           | Values                                             | Default         | Notes                                                                                                                                                                           |
+| -------------- | -------------------------------------------------- | --------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `--auth`       | `supabase` \| `firebase` \| `mongodb` \| `none`    | prompted        | Auth provider. Use `none` for a minimal SPA with no login system — skips db, example, and transport questions.                                                                  |
+| `--db`         | `supabase` \| `firebase` \| `mongodb` \| `none`    | prompted        | Database backend. Fully independent of `--auth` — mix-and-match combos like `--auth=firebase --db=supabase` are first-class. Use `none` when `--auth=none` (set automatically). |
+| `--upload`     | `supabase` \| `firebase` \| `cloudinary` \| `none` | prompted        | File upload provider. Use `none` to remove the upload microservice entirely.                                                                                                    |
+| `--ui`         | `shadcn` \| `antd` \| `mui`                        | `shadcn`        | UI library. All three are fully implemented: `shadcn` (Tailwind 4 + shadcn/ui), `antd` (Ant Design 6), `mui` (MUI 6 / Material Design).                                         |
+| `--transport`  | `tcp` \| `redis` \| `nats`                         | `tcp`           | Microservice transport                                                                                                                                                          |
+| `--no-git`     | —                                                  | git enabled     | Skip `git init`                                                                                                                                                                 |
+| `--no-install` | —                                                  | install enabled | Skip `yarn install`                                                                                                                                                             |
+| `--config`     | path to `.json` file                               | —               | Pre-fill any wizard answer from a JSON file. Missing fields still prompt interactively. CLI flags override config values. See **Non-interactive / CI mode** below.              |
 
 > **Deprecated:** `--storage` is a deprecated alias for `--upload`. A warning is printed to stderr and the value is forwarded to `--upload`. Remove `--storage` from your scripts.
 
@@ -52,10 +53,44 @@ npm init @idevconn/icore my-app -- --auth=firebase --db=firebase --upload=cloudi
 # Skip the upload microservice entirely (--upload=none)
 npm init @idevconn/icore api-only -- --auth=supabase --db=supabase --upload=none --no-install
 
+# No auth — simple SPA (no login system, no auth microservice)
+npm init @idevconn/icore spa-app -- --auth=none --upload=none --no-install
+
 # NATS transport
 npm init @idevconn/icore my-app -- --auth=supabase --db=supabase --upload=supabase --transport=nats
 ```
 
+## Non-interactive / CI mode
+
+Pass `--config <path>` to skip individual prompts using a JSON file. Any field omitted from the file is still asked interactively. Individual CLI flags always override config file values.
+
+```json
+{
+  "projectName": "demo-saas",
+  "authProvider": "supabase",
+  "dbProvider": "supabase",
+  "upload": "cloudinary",
+  "payment": "none",
+  "jobs": "bullmq",
+  "example": "notes",
+  "ui": "shadcn",
+  "transport": "nats",
+  "packageManager": "yarn",
+  "initGit": true,
+  "install": false
+}
+```
+
+```bash
+# Fully non-interactive — all fields in config, no prompts
+npx @idevconn/create-icore --config ./my-config.json
+
+# CLI flag overrides config value (firebase wins over supabase in the file)
+npx @idevconn/create-icore --auth firebase --config ./my-config.json
+```
+
+Field names mirror the TypeScript `CreateIcoreOptions` type. Unknown fields are silently ignored. `targetDir` is always derived from `projectName` + the working directory and is ignored if present.
+
 ## Building
 
 Run `nx build create-icore` to build the library.

package/dist/cli.js

@@ -10,9 +10,98 @@ import * as p2 from "@clack/prompts";
 // src/lib/prompts.ts
 import * as p from "@clack/prompts";
 import { resolve } from "path";
-import { readFile } from "fs/promises";
+import { readFile as readFile2 } from "fs/promises";
 import { dirname, join } from "path";
 import { fileURLToPath } from "url";
+
+// src/lib/config.ts
+import { readFile } from "fs/promises";
+var ConfigFileError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ConfigFileError";
+  }
+};
+var AUTH_PROVIDERS = ["supabase", "firebase", "mongodb", "none"];
+var DB_PROVIDERS = ["supabase", "firebase", "mongodb", "none"];
+var UPLOAD_PROVIDERS = [
+  "supabase",
+  "firebase",
+  "cloudinary",
+  "mongodb",
+  "none"
+];
+var PAYMENT_PROVIDERS = ["paypal", "none"];
+var JOBS_PROVIDERS = ["bullmq", "none"];
+var EXAMPLE_MODES = ["notes", "none"];
+var UI_LIBRARIES = ["shadcn", "antd", "mui"];
+var MS_TRANSPORTS = ["tcp", "redis", "nats", "mqtt", "rmq", "kafka"];
+var PACKAGE_MANAGERS = ["yarn", "npm", "pnpm"];
+function assertEnum(field, value, valid) {
+  if (typeof value !== "string" || !valid.includes(value)) {
+    throw new ConfigFileError(
+      `config field "${field}" got "${String(value)}", expected one of: ${valid.join(", ")}`
+    );
+  }
+  return value;
+}
+function assertBoolean(field, value) {
+  if (typeof value !== "boolean") {
+    throw new ConfigFileError(`config field "${field}" must be a boolean, got ${typeof value}`);
+  }
+  return value;
+}
+function validateConfig(raw) {
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+    throw new ConfigFileError("config file must be a JSON object");
+  }
+  const obj = raw;
+  const result = {};
+  if ("projectName" in obj) {
+    const v = obj["projectName"];
+    if (typeof v !== "string" || !/^[a-z0-9-]+$/i.test(v)) {
+      throw new ConfigFileError(
+        `config field "projectName" must match /^[a-z0-9-]+$/i, got "${String(v)}"`
+      );
+    }
+    result.projectName = v;
+  }
+  if ("authProvider" in obj)
+    result.authProvider = assertEnum("authProvider", obj["authProvider"], AUTH_PROVIDERS);
+  if ("dbProvider" in obj)
+    result.dbProvider = assertEnum("dbProvider", obj["dbProvider"], DB_PROVIDERS);
+  if ("upload" in obj) result.upload = assertEnum("upload", obj["upload"], UPLOAD_PROVIDERS);
+  if ("payment" in obj) result.payment = assertEnum("payment", obj["payment"], PAYMENT_PROVIDERS);
+  if ("jobs" in obj) result.jobs = assertEnum("jobs", obj["jobs"], JOBS_PROVIDERS);
+  if ("example" in obj) result.example = assertEnum("example", obj["example"], EXAMPLE_MODES);
+  if ("ui" in obj) result.ui = assertEnum("ui", obj["ui"], UI_LIBRARIES);
+  if ("transport" in obj)
+    result.transport = assertEnum("transport", obj["transport"], MS_TRANSPORTS);
+  if ("packageManager" in obj)
+    result.packageManager = assertEnum("packageManager", obj["packageManager"], PACKAGE_MANAGERS);
+  if ("initGit" in obj) result.initGit = assertBoolean("initGit", obj["initGit"]);
+  if ("install" in obj) result.install = assertBoolean("install", obj["install"]);
+  return result;
+}
+async function loadConfig(filePath) {
+  let raw;
+  try {
+    raw = await readFile(filePath, "utf8");
+  } catch {
+    throw new ConfigFileError(`config file not found: ${filePath}`);
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (e) {
+    throw new ConfigFileError(
+      `config file is not valid JSON: ${e instanceof Error ? e.message : String(e)}`
+    );
+  }
+  return validateConfig(parsed);
+}
+
+// src/lib/prompts.ts
 function detectPackageManager() {
   const ua = process.env["npm_config_user_agent"] ?? "";
   if (ua.startsWith("yarn/")) return "yarn";
@@ -23,7 +112,7 @@ function detectPackageManager() {
 async function readSelfVersion() {
   try {
     const here2 = dirname(fileURLToPath(import.meta.url));
-    const pkgRaw = await readFile(join(here2, "..", "package.json"), "utf8");
+    const pkgRaw = await readFile2(join(here2, "..", "package.json"), "utf8");
     const pkg = JSON.parse(pkgRaw);
     return pkg.version ?? null;
   } catch {
@@ -97,12 +186,21 @@ function parseFlags(argv) {
       case "no-install":
         out.install = false;
         break;
+      case "config":
+        out._configPath = v;
+        break;
     }
   }
   return out;
 }
 async function collectOptions({ argv, cwd }) {
   const flags = parseFlags(argv);
+  const configPath = flags._configPath;
+  delete flags._configPath;
+  if (configPath) {
+    const configValues = await loadConfig(configPath);
+    Object.assign(flags, { ...configValues, ...flags });
+  }
   const [selfVersion, latestVersion] = await Promise.all([readSelfVersion(), fetchLatestVersion()]);
   const versionTag = selfVersion ? ` v${selfVersion}` : "";
   p.intro(`iCore${versionTag} \u2014 bootstrap a new project`);
@@ -125,11 +223,12 @@ Re-run with @latest to refresh:
     options: [
       { value: "supabase", label: "Supabase" },
       { value: "firebase", label: "Firebase" },
-      { value: "mongodb", label: "MongoDB (Custom Auth)" }
+      { value: "mongodb", label: "MongoDB (Custom Auth)" },
+      { value: "none", label: "None \u2014 no login, open API (simple SPA)" }
     ]
   });
   if (p.isCancel(authProvider)) throw new Error("cancelled");
-  const dbProvider = flags.dbProvider ?? await p.select({
+  const dbProvider = authProvider === "none" ? "none" : flags.dbProvider ?? await p.select({
     message: "Database backend",
     options: [
       { value: "supabase", label: "Supabase Postgres" },
@@ -168,7 +267,7 @@ Re-run with @latest to refresh:
     initialValue: "none"
   });
   if (p.isCancel(jobs)) throw new Error("cancelled");
-  const example = flags.example ?? await p.select({
+  const example = authProvider === "none" ? "none" : flags.example ?? await p.select({
     message: "Include notes sample feature? (CRUD demo \u2014 remove before production)",
     options: [
       { value: "notes", label: "Yes \u2014 include notes sample" },
@@ -193,7 +292,8 @@ Re-run with @latest to refresh:
     initialValue: "shadcn"
   });
   if (p.isCancel(ui)) throw new Error("cancelled");
-  const transport = flags.transport ?? await p.select({
+  const noMicroservices = authProvider === "none" && upload === "none" && payment === "none";
+  const transport = flags.transport ?? (noMicroservices ? "tcp" : await p.select({
     message: "Microservice transport",
     options: [
       { value: "tcp", label: "TCP (default, no broker required)" },
@@ -204,7 +304,7 @@ Re-run with @latest to refresh:
       { value: "kafka", label: "Kafka" }
     ],
     initialValue: "tcp"
-  });
+  }));
   if (p.isCancel(transport)) throw new Error("cancelled");
   const packageManager = flags.packageManager ?? detectPackageManager();
   if (packageManager === "yarn") {
@@ -236,13 +336,13 @@ Re-run with @latest to refresh:
 }
 
 // src/lib/scaffold.ts
-import { copyFile, mkdir as mkdir2, readdir as readdir2, readFile as readFile7, stat, writeFile as writeFile8, rm as rm4 } from "fs/promises";
+import { copyFile, mkdir as mkdir2, readdir as readdir2, readFile as readFile8, stat, writeFile as writeFile8, rm as rm4 } from "fs/promises";
 import { readFileSync } from "fs";
 import { join as join9 } from "path";
 import { spawnSync } from "child_process";
 
 // src/lib/scaffold-env.ts
-import { readFile as readFile2, writeFile } from "fs/promises";
+import { readFile as readFile3, writeFile } from "fs/promises";
 import { join as join2 } from "path";
 var TRANSPORT_ENV_TOKEN = {
   redis: "REDIS",
@@ -271,7 +371,7 @@ function uncommentTransportEnv(text2, prefix, transport) {
 async function stripGatewayTransport(targetDir, prefix) {
   const gatewayEnv = join2(targetDir, "apps/api/.env");
   try {
-    const env = await readFile2(gatewayEnv, "utf8");
+    const env = await readFile3(gatewayEnv, "utf8");
     const next = env.split("\n").filter(
       (line) => !line.startsWith(`${prefix}_`) && !line.startsWith(`# ${prefix}_`) && !line.includes(`${prefix} MS transport`)
     ).join("\n");
@@ -294,7 +394,7 @@ async function pruneRootProviderDeps(targetDir, opts) {
   if (drop.size === 0) return;
   const pkgPath = join2(targetDir, "package.json");
   try {
-    const pkg = JSON.parse(await readFile2(pkgPath, "utf8"));
+    const pkg = JSON.parse(await readFile3(pkgPath, "utf8"));
     for (const field of ["dependencies", "devDependencies"]) {
       const deps = pkg[field];
       if (!deps) continue;
@@ -306,7 +406,7 @@ async function pruneRootProviderDeps(targetDir, opts) {
 }
 async function rewriteRootPackageJson(targetDir, opts) {
   const pkgPath = join2(targetDir, "package.json");
-  const raw = await readFile2(pkgPath, "utf8");
+  const raw = await readFile3(pkgPath, "utf8");
   const pkg = JSON.parse(raw);
   pkg["name"] = opts.projectName;
   pkg["version"] = "0.0.1";
@@ -321,11 +421,16 @@ async function rewriteRootPackageJson(targetDir, opts) {
     const deps = pkg["dependencies"] ??= {};
     Object.assign(deps, MONGODB_DEPS);
   }
+  if (opts.authProvider === "mongodb") {
+    const devDeps = pkg["devDependencies"] ??= {};
+    devDeps["@types/bcrypt"] = "^6.0.0";
+    devDeps["@types/jsonwebtoken"] = "^9.0.10";
+  }
   if (opts.packageManager !== "yarn") {
     delete pkg.packageManager;
   } else {
     try {
-      const yarnrc = await readFile2(join2(targetDir, ".yarnrc.yml"), "utf8");
+      const yarnrc = await readFile3(join2(targetDir, ".yarnrc.yml"), "utf8");
       const match = yarnrc.match(/^yarnPath:\s*.+yarn-(\d+\.\d+\.\d+)\.cjs/m);
       if (match?.[1]) {
         pkg["packageManager"] = `yarn@${match[1]}`;
@@ -338,7 +443,7 @@ async function rewriteRootPackageJson(targetDir, opts) {
 }
 async function writeAuthEnv(targetDir, opts) {
   const envExample = join2(targetDir, "apps/microservices/auth/.env.example");
-  const env = await readFile2(envExample, "utf8");
+  const env = await readFile3(envExample, "utf8");
   let next = env.replace(/^AUTH_PROVIDER=.*$/m, `AUTH_PROVIDER=${opts.authProvider}`).replace(/^AUTH_TRANSPORT=.*$/m, `AUTH_TRANSPORT=${opts.transport}`);
   next = uncommentTransportEnv(next, "AUTH", opts.transport);
   if (opts.authProvider === "mongodb") {
@@ -349,7 +454,7 @@ async function writeAuthEnv(targetDir, opts) {
 async function writeUploadEnv(targetDir, opts) {
   if (opts.upload === "none") return;
   const envExample = join2(targetDir, "apps/microservices/upload/.env.example");
-  const env = await readFile2(envExample, "utf8");
+  const env = await readFile3(envExample, "utf8");
   let next = env.replace(/^STORAGE_PROVIDER=.*$/m, `STORAGE_PROVIDER=${opts.upload}`).replace(/^UPLOAD_TRANSPORT=.*$/m, `UPLOAD_TRANSPORT=${opts.transport}`);
   next = uncommentTransportEnv(next, "UPLOAD", opts.transport);
   if (opts.upload === "mongodb") {
@@ -361,7 +466,7 @@ async function writeNotesEnv(targetDir, opts) {
   if (opts.example === "none") return;
   const envExample = join2(targetDir, "apps/microservices/notes/.env.example");
   try {
-    const env = await readFile2(envExample, "utf8");
+    const env = await readFile3(envExample, "utf8");
     let next = env.replace(/^NOTES_TRANSPORT=.*$/m, `NOTES_TRANSPORT=${opts.transport}`);
     next = uncommentTransportEnv(next, "NOTES", opts.transport);
     await writeFile(join2(targetDir, "apps/microservices/notes/.env"), next);
@@ -370,7 +475,7 @@ async function writeNotesEnv(targetDir, opts) {
 }
 async function writeGatewayEnv(targetDir, opts) {
   const envExample = join2(targetDir, "apps/api/.env.example");
-  const env = await readFile2(envExample, "utf8");
+  const env = await readFile3(envExample, "utf8");
   let next = env.replace(/^AUTH_TRANSPORT=.*$/m, `AUTH_TRANSPORT=${opts.transport}`).replace(/^UPLOAD_TRANSPORT=.*$/m, `UPLOAD_TRANSPORT=${opts.transport}`).replace(/^NOTES_TRANSPORT=.*$/m, `NOTES_TRANSPORT=${opts.transport}`).replace(/^PAYMENT_TRANSPORT=.*$/m, `PAYMENT_TRANSPORT=${opts.transport}`);
   for (const prefix of ["AUTH", "UPLOAD", "NOTES", "PAYMENT"]) {
     next = uncommentTransportEnv(next, prefix, opts.transport);
@@ -393,7 +498,7 @@ async function writeRootEnv(targetDir, opts) {
 async function writeClientEnv(targetDir) {
   const envExample = join2(targetDir, "apps/client/.env.example");
   try {
-    const env = await readFile2(envExample, "utf8");
+    const env = await readFile3(envExample, "utf8");
     await writeFile(join2(targetDir, "apps/client/.env"), env);
   } catch {
   }
@@ -402,7 +507,7 @@ async function writePaymentEnv(targetDir, opts) {
   if (opts.payment === "none") return;
   const envExample = join2(targetDir, "apps/microservices/payment/.env.example");
   try {
-    const env = await readFile2(envExample, "utf8");
+    const env = await readFile3(envExample, "utf8");
     let next = env.replace(/^PAYMENT_PROVIDER=.*$/m, `PAYMENT_PROVIDER=${opts.payment}`).replace(/^PAYMENT_TRANSPORT=.*$/m, `PAYMENT_TRANSPORT=${opts.transport}`);
     next = uncommentTransportEnv(next, "PAYMENT", opts.transport);
     await writeFile(join2(targetDir, "apps/microservices/payment/.env"), next);
@@ -411,11 +516,11 @@ async function writePaymentEnv(targetDir, opts) {
 }
 
 // src/lib/scaffold-strip.ts
-import { readFile as readFile3, writeFile as writeFile2, rm } from "fs/promises";
+import { readFile as readFile4, writeFile as writeFile2, rm } from "fs/promises";
 import { join as join3 } from "path";
 async function stripDeps(pkgPath, names) {
   try {
-    const raw = await readFile3(pkgPath, "utf8");
+    const raw = await readFile4(pkgPath, "utf8");
     const pkg = JSON.parse(raw);
     for (const n of names) {
       if (pkg.dependencies) delete pkg.dependencies[n];
@@ -428,7 +533,7 @@ async function stripDeps(pkgPath, names) {
 async function stripTsconfigPath(targetDir, alias) {
   const tsconfigPath = join3(targetDir, "tsconfig.base.json");
   try {
-    const src = await readFile3(tsconfigPath, "utf8");
+    const src = await readFile4(tsconfigPath, "utf8");
     const escaped = alias.replace(/[@/]/g, (c) => c === "@" ? "@" : "\\/");
     const pretty = src.replace(new RegExp(`^\\s*"${escaped}": \\[[^\\]]*\\],?\\n`, "m"), "");
     if (pretty !== src) {
@@ -456,6 +561,62 @@ async function removeFirebaseAdminLib(targetDir) {
     "@icore/firebase-admin"
   ]);
 }
+async function removeAuthStack(targetDir) {
+  const rmPaths = [
+    "apps/microservices/auth",
+    "libs/auth-strategies",
+    "libs/auth-client",
+    "Dockerfile.ms-auth",
+    "apps/api/src/app/auth",
+    "apps/api/src/app/profile",
+    "apps/api/src/app/abilities",
+    "apps/client/src/components/auth",
+    "apps/client/src/routes/login.tsx",
+    "apps/client/src/routes/auth.callback.tsx",
+    "apps/client/src/routes/auth.oauth.callback.tsx",
+    "apps/client/src/routes/_dashboard/profile.tsx"
+  ];
+  for (const p3 of rmPaths) {
+    await rm(join3(targetDir, p3), { recursive: true, force: true });
+  }
+  const appModulePath = join3(targetDir, "apps/api/src/app/app.module.ts");
+  try {
+    const src = await readFile4(appModulePath, "utf8");
+    const next = src.replace(/^import \{ AuthModule \} from '\.\/auth\/auth\.module';\n/m, "").replace(/^import \{ ProfileModule \} from '\.\/profile\/profile\.module';\n/m, "").replace(/^import \{ AbilitiesModule \} from '\.\/abilities\/abilities\.module';\n/m, "").replace(/\bAuthModule,\s*/g, "").replace(/,\s*AuthModule\b/g, "").replace(/\bProfileModule,\s*/g, "").replace(/,\s*ProfileModule\b/g, "").replace(/\bAbilitiesModule,\s*/g, "").replace(/,\s*AbilitiesModule\b/g, "");
+    await writeFile2(appModulePath, next);
+  } catch {
+  }
+  const dashboardPath = join3(targetDir, "apps/client/src/routes/_dashboard.tsx");
+  try {
+    const src = await readFile4(dashboardPath, "utf8");
+    const next = src.replace(/^import \{ useAuthStore \} from '@icore\/template-shared';\n/m, "").replace(/, redirect/g, "").replace(/\n {2}beforeLoad: \(\) => \{[\s\S]*?\n {2}\},/m, "");
+    await writeFile2(dashboardPath, next);
+  } catch {
+  }
+  for (const alias of [
+    "@icore/auth-client",
+    "@icore/auth-supabase",
+    "@icore/auth-firebase",
+    "@icore/auth-mongodb"
+  ]) {
+    await stripTsconfigPath(targetDir, alias);
+  }
+  await stripDeps(join3(targetDir, "apps/api/package.json"), ["@icore/auth-client"]);
+  const gatewayEnv = join3(targetDir, "apps/api/.env");
+  try {
+    const env = await readFile4(gatewayEnv, "utf8");
+    const next = env.split("\n").filter((line) => !line.startsWith("AUTH_") && !line.startsWith("# AUTH_")).join("\n");
+    await writeFile2(gatewayEnv, next);
+  } catch {
+  }
+  const composePath = join3(targetDir, "docker-compose.yml");
+  try {
+    const compose = await readFile4(composePath, "utf8");
+    const next = compose.replace(/\n {2}auth:[\s\S]+?(?=\n {2}\w|\nnetworks:)/m, "\n").replace(/\n {6}auth:\n {8}condition: service_started/g, "").replace(/\n {6}AUTH_TRANSPORT:[^\n]*/g, "").replace(/\n {6}AUTH_REDIS_URL:[^\n]*/g, "");
+    await writeFile2(composePath, next);
+  } catch {
+  }
+}
 async function removeUploadStack(targetDir) {
   const paths = [
     "apps/microservices/upload",
@@ -469,14 +630,14 @@ async function removeUploadStack(targetDir) {
   }
   const appModulePath = join3(targetDir, "apps/api/src/app/app.module.ts");
   try {
-    const appModule = await readFile3(appModulePath, "utf8");
+    const appModule = await readFile4(appModulePath, "utf8");
     const next = appModule.replace(/^import \{ StorageModule \} from '\.\/storage\/storage\.module';\n/m, "").replace(/,\s*StorageModule/g, "");
     await writeFile2(appModulePath, next);
   } catch {
   }
   const gatewayEnv = join3(targetDir, "apps/api/.env");
   try {
-    const env = await readFile3(gatewayEnv, "utf8");
+    const env = await readFile4(gatewayEnv, "utf8");
     const next = env.split("\n").filter(
       (line) => !line.startsWith("UPLOAD_") && !line.startsWith("# UPLOAD_") && !line.startsWith("MAX_FILE_SIZE_KB")
     ).join("\n");
@@ -490,7 +651,7 @@ async function removeUploadStack(targetDir) {
 }
 
 // src/manifest/wire-features.ts
-import { readFile as readFile5, writeFile as writeFile4, rm as rm3 } from "fs/promises";
+import { readFile as readFile6, writeFile as writeFile4, rm as rm3 } from "fs/promises";
 import { join as join5 } from "path";
 
 // src/manifest/index.ts
@@ -651,7 +812,7 @@ var MANIFEST = {
 };
 
 // src/manifest/wire-provider.ts
-import { readFile as readFile4, writeFile as writeFile3, rm as rm2 } from "fs/promises";
+import { readFile as readFile5, writeFile as writeFile3, rm as rm2 } from "fs/promises";
 import { join as join4 } from "path";
 async function writeProvider(targetDir, axis, provider) {
   const nestModule = axis.section[provider]?.nestModule;
@@ -667,7 +828,7 @@ export const ${axis.exportConst} = ${symbol}.forRoot(ENV_PATH);
 }
 async function stripJsonKeys(path, drop) {
   try {
-    const pkg = JSON.parse(await readFile4(path, "utf8"));
+    const pkg = JSON.parse(await readFile5(path, "utf8"));
     for (const field of ["dependencies", "devDependencies"]) {
       const deps = pkg[field];
       if (!deps) continue;
@@ -680,7 +841,7 @@ async function stripJsonKeys(path, drop) {
 async function stripTsconfigKeys(targetDir, aliases) {
   const path = join4(targetDir, "tsconfig.base.json");
   try {
-    const parsed = JSON.parse(await readFile4(path, "utf8"));
+    const parsed = JSON.parse(await readFile5(path, "utf8"));
     const paths = parsed.compilerOptions?.paths;
     if (paths) for (const a of aliases) delete paths[a];
     await writeFile3(path, JSON.stringify(parsed, null, 2) + "\n");
@@ -725,7 +886,8 @@ async function writeFeaturesWiring(targetDir, opts) {
 export class FeaturesModule {}
 `;
   await writeFile4(join5(targetDir, FEATURES_MODULE), featuresModule);
-  const services = [{ name: "auth", prefix: "AUTH" }];
+  const services = [];
+  if (opts.authProvider !== "none") services.push({ name: "auth", prefix: "AUTH" });
   if (opts.upload !== "none") services.push({ name: "upload", prefix: "UPLOAD" });
   for (const k of chosen) {
     const svc = FEATURES[k].gatewayService;
@@ -742,7 +904,7 @@ ${entries}
 async function stripJobsDockerCompose(targetDir) {
   const composePath = join5(targetDir, "docker-compose.yml");
   try {
-    const compose = await readFile5(composePath, "utf8");
+    const compose = await readFile6(composePath, "utf8");
     const next = compose.replace(/\n {2}jobs:[\s\S]+?(?=\n {2}\w+:|\nnetworks:)/m, "\n").replace(/\n {6}jobs:\n {8}condition: service_started/g, "").replace(/\n {6}JOBS_REDIS_URL:[^\n]*/g, "");
     await writeFile4(composePath, next);
   } catch {
@@ -830,12 +992,14 @@ async function writeJson(targetDir, rel, data) {
 }
 async function writeServiceBlueprints(targetDir, opts) {
   const t = opts.transport;
-  await writeJson(targetDir, "apps/microservices/auth", {
-    schemaVersion: 1,
-    service: "auth",
-    authProvider: opts.authProvider,
-    transport: t
-  });
+  if (opts.authProvider !== "none") {
+    await writeJson(targetDir, "apps/microservices/auth", {
+      schemaVersion: 1,
+      service: "auth",
+      authProvider: opts.authProvider,
+      transport: t
+    });
+  }
   if (opts.upload !== "none") {
     await writeJson(targetDir, "apps/microservices/upload", {
       schemaVersion: 1,
@@ -918,7 +1082,7 @@ var writeDbProvider = (targetDir, provider) => writeProvider(targetDir, DB, prov
 var cleanupUnusedDb = (targetDir, chosen) => cleanupUnusedAxis(targetDir, DB, chosen);
 
 // src/lib/scaffold-pkg.ts
-import { readFile as readFile6, writeFile as writeFile7, mkdir, readdir } from "fs/promises";
+import { readFile as readFile7, writeFile as writeFile7, mkdir, readdir } from "fs/promises";
 import { join as join8 } from "path";
 
 // src/lib/options.ts
@@ -929,7 +1093,7 @@ function pmRun(pm, script) {
 // src/lib/scaffold-pkg.ts
 async function writePnpmWorkspace(targetDir) {
   const pkgPath = join8(targetDir, "package.json");
-  const pkg = JSON.parse(await readFile6(pkgPath, "utf8"));
+  const pkg = JSON.parse(await readFile7(pkgPath, "utf8"));
   const workspaces = pkg.workspaces ?? [];
   const packagesBlock = workspaces.map((p3) => `  - '${p3}'`).join("\n");
   const allowBuilds = [
@@ -938,7 +1102,9 @@ async function writePnpmWorkspace(targetDir) {
     "@parcel/watcher",
     "@scarf/scarf",
     "@swc/core",
+    "bcrypt",
     "less",
+    "mongodb-memory-server",
     "msgpackr-extract",
     "nx",
     "protobufjs",
@@ -973,7 +1139,7 @@ async function rewritePnpmWorkspaceDeps(targetDir) {
   const pkgFiles = await walk(targetDir);
   for (const f of pkgFiles) {
     try {
-      const raw = await readFile6(f, "utf8");
+      const raw = await readFile7(f, "utf8");
       const next = raw.replace(/"(@icore\/[^"]+)":\s*"\*"/g, '"$1": "workspace:*"');
       if (next !== raw) await writeFile7(f, next);
     } catch {
@@ -983,7 +1149,7 @@ async function rewritePnpmWorkspaceDeps(targetDir) {
 async function patchGitignoreForPm(targetDir, pm) {
   const giPath = join8(targetDir, ".gitignore");
   try {
-    let src = await readFile6(giPath, "utf8");
+    let src = await readFile7(giPath, "utf8");
     src = src.replace(/^# Build artifacts.*\ntools\/create-icore\/templates\/\s*\n/m, "");
     if (pm !== "yarn") {
       src = src.replace(/^\.yarn\/\*\s*\n/m, "").replace(/^!\.yarn\/patches\s*\n/m, "").replace(/^!\.yarn\/plugins\s*\n/m, "").replace(/^!\.yarn\/releases\s*\n/m, "").replace(/^!\.yarn\/sdks\s*\n/m, "").replace(/^!\.yarn\/versions\s*\n/m, "").replace(/^\.pnp\.\*\s*\n/m, "");
@@ -1245,7 +1411,7 @@ async function rewriteClientPaths(clientDir, ui) {
   for (const rel of candidates) {
     const path = join9(clientDir, rel);
     try {
-      const raw = await readFile7(path, "utf8");
+      const raw = await readFile8(path, "utf8");
       const next = raw.replaceAll("../../../", "../../").replaceAll(`apps/templates/client-${ui}`, "apps/client").replaceAll(`client-${ui}`, "client");
       if (next !== raw) await writeFile8(path, next);
     } catch {
@@ -1282,7 +1448,7 @@ function runInstall(cwd, pm) {
 async function scaffold(opts, templatesDir2) {
   await copyTree(templatesDir2, opts.targetDir);
   await rewriteRootPackageJson(opts.targetDir, opts);
-  await writeAuthEnv(opts.targetDir, opts);
+  if (opts.authProvider !== "none") await writeAuthEnv(opts.targetDir, opts);
   await writeUploadEnv(opts.targetDir, opts);
   await writeNotesEnv(opts.targetDir, opts);
   await writePaymentEnv(opts.targetDir, opts);
@@ -1294,18 +1460,22 @@ async function scaffold(opts, templatesDir2) {
   await cleanupUnusedFeatures(opts.targetDir, opts);
   await writeFeaturesWiring(opts.targetDir, opts);
   await writeNavConfig(opts.targetDir, opts);
-  await cleanupUnusedAuth(opts.targetDir, opts.authProvider);
-  await writeAuthProvider(opts.targetDir, opts.authProvider);
+  if (opts.authProvider !== "none") {
+    await cleanupUnusedAuth(opts.targetDir, opts.authProvider);
+    await writeAuthProvider(opts.targetDir, opts.authProvider);
+  } else {
+    await removeAuthStack(opts.targetDir);
+  }
   if (opts.upload !== "none") {
     await cleanupUnusedStorage(opts.targetDir, opts.upload);
     await writeStorageProvider(opts.targetDir, opts.upload);
   }
-  if (opts.example !== "none") {
-    await cleanupUnusedDb(opts.targetDir, opts.dbProvider);
-    await writeDbProvider(opts.targetDir, opts.dbProvider);
-  }
   const firebaseUsed = opts.authProvider === "firebase" || opts.dbProvider === "firebase" || opts.upload === "firebase";
   if (!firebaseUsed) await removeFirebaseAdminLib(opts.targetDir);
+  await cleanupUnusedDb(opts.targetDir, opts.dbProvider);
+  if (opts.dbProvider !== "none" && opts.example !== "none") {
+    await writeDbProvider(opts.targetDir, opts.dbProvider);
+  }
   await pruneRootProviderDeps(opts.targetDir, opts);
   await writeBlueprintJson(opts.targetDir, opts);
   await writeServiceBlueprints(opts.targetDir, opts);