@idevconn/create-icore 0.9.2 → 0.10.0

package/dist/index.cjs

@@ -47,9 +47,9 @@ function pmRun(pm, script) {
 }
 
 // src/lib/scaffold.ts
-var import_promises8 = require("fs/promises");
+var import_promises9 = require("fs/promises");
 var import_node_fs = require("fs");
-var import_node_path8 = require("path");
+var import_node_path9 = require("path");
 var import_node_child_process = require("child_process");
 
 // src/lib/scaffold-env.ts
@@ -150,6 +150,30 @@ async function rewriteRootPackageJson(targetDir, opts) {
     }
   }
   delete pkg.pnpm;
+  const noMs = opts.authProvider === "none" && opts.upload === "none" && opts.payment === "none" && opts.jobs === "none" && opts.example === "none";
+  const ws = pkg.workspaces;
+  if (ws) {
+    pkg.workspaces = ws.filter((entry) => {
+      if (entry === "apps/templates/*") return false;
+      if (entry === "apps/microservices/*" && noMs) return false;
+      if (entry === "libs/auth-strategies/*" && opts.authProvider === "none") return false;
+      if (entry === "libs/storage-strategies/*" && opts.upload === "none") return false;
+      if (entry === "libs/db-strategies/*" && opts.dbProvider === "none") return false;
+      return true;
+    });
+  }
+  const rootDeps = pkg.dependencies ?? {};
+  const rootDevDeps = pkg.devDependencies ?? {};
+  if (opts.authProvider === "none") {
+    delete rootDeps["cookie-parser"];
+    delete rootDevDeps["@types/cookie-parser"];
+  }
+  if (opts.upload === "none") {
+    delete rootDevDeps["@types/multer"];
+  }
+  if (noMs) {
+    delete rootDeps["@nestjs/microservices"];
+  }
   await (0, import_promises.writeFile)(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
 }
 async function writeAuthEnv(targetDir, opts) {
@@ -191,6 +215,9 @@ async function writeGatewayEnv(targetDir, opts) {
   for (const prefix of ["AUTH", "UPLOAD", "NOTES", "PAYMENT"]) {
     next = uncommentTransportEnv(next, prefix, opts.transport);
   }
+  if (opts.authProvider === "none") {
+    next = next.split("\n").filter((line) => !line.startsWith("AUTH_") && !line.startsWith("# AUTH_")).join("\n");
+  }
   await (0, import_promises.writeFile)((0, import_node_path.join)(targetDir, "apps/api/.env"), next);
 }
 async function writeRootEnv(targetDir, opts) {
@@ -272,59 +299,26 @@ async function removeFirebaseAdminLib(targetDir) {
     "@icore/firebase-admin"
   ]);
 }
-async function removeAuthStack(targetDir) {
-  const rmPaths = [
-    "apps/microservices/auth",
-    "libs/auth-strategies",
-    "libs/auth-client",
-    "Dockerfile.ms-auth",
-    "apps/api/src/app/auth",
-    "apps/api/src/app/profile",
-    "apps/api/src/app/abilities",
-    "apps/client/src/components/auth",
-    "apps/client/src/routes/login.tsx",
-    "apps/client/src/routes/auth.callback.tsx",
-    "apps/client/src/routes/auth.oauth.callback.tsx",
-    "apps/client/src/routes/_dashboard/profile.tsx"
-  ];
-  for (const p2 of rmPaths) {
-    await (0, import_promises2.rm)((0, import_node_path2.join)(targetDir, p2), { recursive: true, force: true });
-  }
-  const appModulePath = (0, import_node_path2.join)(targetDir, "apps/api/src/app/app.module.ts");
+async function removeStrategiesLib(targetDir) {
+  await (0, import_promises2.rm)((0, import_node_path2.join)(targetDir, "libs/shared/src/strategies"), { recursive: true, force: true });
+  await (0, import_promises2.rm)((0, import_node_path2.join)(targetDir, "libs/shared/src/testing.ts"), { force: true });
+  await (0, import_promises2.rm)((0, import_node_path2.join)(targetDir, "libs/shared/src/transport.ts"), { force: true });
+  await (0, import_promises2.rm)((0, import_node_path2.join)(targetDir, "libs/shared/src/__tests__/transport.unit.test.ts"), { force: true });
+  const indexPath = (0, import_node_path2.join)(targetDir, "libs/shared/src/index.ts");
   try {
-    const src = await (0, import_promises2.readFile)(appModulePath, "utf8");
-    const next = src.replace(/^import \{ AuthModule \} from '\.\/auth\/auth\.module';\n/m, "").replace(/^import \{ ProfileModule \} from '\.\/profile\/profile\.module';\n/m, "").replace(/^import \{ AbilitiesModule \} from '\.\/abilities\/abilities\.module';\n/m, "").replace(/\bAuthModule,\s*/g, "").replace(/,\s*AuthModule\b/g, "").replace(/\bProfileModule,\s*/g, "").replace(/,\s*ProfileModule\b/g, "").replace(/\bAbilitiesModule,\s*/g, "").replace(/,\s*AbilitiesModule\b/g, "");
-    await (0, import_promises2.writeFile)(appModulePath, next);
-  } catch {
-  }
-  const dashboardPath = (0, import_node_path2.join)(targetDir, "apps/client/src/routes/_dashboard.tsx");
-  try {
-    const src = await (0, import_promises2.readFile)(dashboardPath, "utf8");
-    const next = src.replace(/^import \{ useAuthStore \} from '@icore\/template-shared';\n/m, "").replace(/, redirect/g, "").replace(/\n {2}beforeLoad: \(\) => \{[\s\S]*?\n {2}\},/m, "");
-    await (0, import_promises2.writeFile)(dashboardPath, next);
-  } catch {
-  }
-  for (const alias of [
-    "@icore/auth-client",
-    "@icore/auth-supabase",
-    "@icore/auth-firebase",
-    "@icore/auth-mongodb"
-  ]) {
-    await stripTsconfigPath(targetDir, alias);
-  }
-  await stripDeps((0, import_node_path2.join)(targetDir, "apps/api/package.json"), ["@icore/auth-client"]);
-  const gatewayEnv = (0, import_node_path2.join)(targetDir, "apps/api/.env");
-  try {
-    const env = await (0, import_promises2.readFile)(gatewayEnv, "utf8");
-    const next = env.split("\n").filter((line) => !line.startsWith("AUTH_") && !line.startsWith("# AUTH_")).join("\n");
-    await (0, import_promises2.writeFile)(gatewayEnv, next);
+    const src = await (0, import_promises2.readFile)(indexPath, "utf8");
+    await (0, import_promises2.writeFile)(
+      indexPath,
+      src.replace(/^export \* from '\.\/strategies';\n/m, "").replace(/^export \* from '\.\/transport';\n?/m, "")
+    );
   } catch {
   }
-  const composePath = (0, import_node_path2.join)(targetDir, "docker-compose.yml");
+  const pkgPath = (0, import_node_path2.join)(targetDir, "libs/shared/package.json");
   try {
-    const compose = await (0, import_promises2.readFile)(composePath, "utf8");
-    const next = compose.replace(/\n {2}auth:[\s\S]+?(?=\n {2}\w|\nnetworks:)/m, "\n").replace(/\n {6}auth:\n {8}condition: service_started/g, "").replace(/\n {6}AUTH_TRANSPORT:[^\n]*/g, "").replace(/\n {6}AUTH_REDIS_URL:[^\n]*/g, "");
-    await (0, import_promises2.writeFile)(composePath, next);
+    const pkg = JSON.parse(await (0, import_promises2.readFile)(pkgPath, "utf8"));
+    if (pkg.exports) delete pkg.exports["./testing"];
+    if (pkg.dependencies) delete pkg.dependencies["@nestjs/microservices"];
+    await (0, import_promises2.writeFile)(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
   } catch {
   }
 }
@@ -334,7 +328,8 @@ async function removeUploadStack(targetDir) {
     "apps/microservices/upload-e2e",
     "libs/storage-strategies",
     "libs/upload-client",
-    "apps/api/src/app/storage"
+    "apps/api/src/app/storage",
+    "Dockerfile.ms-upload"
   ];
   for (const p2 of paths) {
     await (0, import_promises2.rm)((0, import_node_path2.join)(targetDir, p2), { recursive: true, force: true });
@@ -359,11 +354,683 @@ async function removeUploadStack(targetDir) {
     "@icore/upload-client",
     "@types/multer"
   ]);
+  const uploadComposePath = (0, import_node_path2.join)(targetDir, "docker-compose.yml");
+  try {
+    const compose = await (0, import_promises2.readFile)(uploadComposePath, "utf8");
+    const next = compose.replace(/\n {2}upload:[\s\S]+?(?=\n {2}\w|\nnetworks:)/m, "\n").replace(/\n {6}upload:\n {8}condition: service_started/g, "").replace(/\n {6}UPLOAD_TRANSPORT:[^\n]*/g, "").replace(/\n {6}UPLOAD_REDIS_URL:[^\n]*/g, "");
+    await (0, import_promises2.writeFile)(uploadComposePath, next);
+  } catch {
+  }
+}
+
+// src/lib/scaffold-auth-none.ts
+var import_promises3 = require("fs/promises");
+var import_node_path3 = require("path");
+async function stripDeps2(pkgPath, names) {
+  try {
+    const raw = await (0, import_promises3.readFile)(pkgPath, "utf8");
+    const pkg = JSON.parse(raw);
+    for (const n of names) {
+      if (pkg.dependencies) delete pkg.dependencies[n];
+      if (pkg.devDependencies) delete pkg.devDependencies[n];
+    }
+    await (0, import_promises3.writeFile)(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
+  } catch {
+  }
+}
+var AUTH_ONLY_PATHS = [
+  "apps/microservices/auth",
+  "libs/auth-strategies",
+  "libs/auth-client",
+  "Dockerfile.ms-auth",
+  "apps/api/src/app/auth",
+  "apps/api/src/app/profile",
+  "apps/api/src/app/abilities",
+  "libs/shared/src/abilities",
+  "apps/client/src/components/auth",
+  "apps/client/src/routes/login.tsx",
+  "apps/client/src/routes/auth.callback.tsx",
+  "apps/client/src/routes/auth.oauth.callback.tsx",
+  "apps/client/src/routes/_dashboard/profile.tsx",
+  "libs/template-shared/src/lib/abilities"
+];
+async function removeAuthOnlyPaths(targetDir) {
+  for (const p2 of AUTH_ONLY_PATHS) {
+    await (0, import_promises3.rm)((0, import_node_path3.join)(targetDir, p2), { recursive: true, force: true });
+  }
+  await stripDeps2((0, import_node_path3.join)(targetDir, "apps/api/package.json"), [
+    "@icore/auth-client",
+    "cookie-parser"
+  ]);
+}
+async function stripTsconfigPath2(targetDir, alias) {
+  const tsconfigPath = (0, import_node_path3.join)(targetDir, "tsconfig.base.json");
+  try {
+    const src = await (0, import_promises3.readFile)(tsconfigPath, "utf8");
+    const escaped = alias.replace(/[@/]/g, (c) => c === "@" ? "@" : "\\/");
+    const pretty = src.replace(new RegExp(`^\\s*"${escaped}": \\[[^\\]]*\\],?\\n`, "m"), "");
+    if (pretty !== src) {
+      await (0, import_promises3.writeFile)(tsconfigPath, pretty);
+      return;
+    }
+    const parsed = JSON.parse(src);
+    if (parsed.compilerOptions?.paths) delete parsed.compilerOptions.paths[alias];
+    await (0, import_promises3.writeFile)(tsconfigPath, JSON.stringify(parsed));
+  } catch {
+  }
+}
+async function removeAuthTsconfigPaths(targetDir) {
+  for (const alias of [
+    "@icore/auth-client",
+    "@icore/auth-supabase",
+    "@icore/auth-firebase",
+    "@icore/auth-mongodb"
+  ]) {
+    await stripTsconfigPath2(targetDir, alias);
+  }
+}
+async function removeDockerComposeAuthService(targetDir) {
+  const composePath = (0, import_node_path3.join)(targetDir, "docker-compose.yml");
+  try {
+    const compose = await (0, import_promises3.readFile)(composePath, "utf8");
+    const next = compose.replace(/\n {2}auth:[\s\S]+?(?=\n {2}\w|\nnetworks:)/m, "\n").replace(/\n {6}auth:\n {8}condition: service_started/g, "").replace(/\n {6}AUTH_TRANSPORT:[^\n]*/g, "").replace(/\n {6}AUTH_REDIS_URL:[^\n]*/g, "");
+    await (0, import_promises3.writeFile)(composePath, next);
+  } catch {
+  }
+}
+var GATEWAY_MAIN_TS = `import { Logger } from '@nestjs/common';
+import { NestFactory } from '@nestjs/core';
+import { NestExpressApplication } from '@nestjs/platform-express';
+import { DocumentBuilder, SwaggerModule } from '@nestjs/swagger';
+import { formatGatewayBanner } from '@icore/shared';
+import { AppModule } from './app/app.module';
+import { GATEWAY_SERVICES } from './app/gateway-services';
+import pkg from '@icore/package.json';
+
+const DEFAULT_PORT = 3001;
+
+async function bootstrap() {
+  const app = await NestFactory.create<NestExpressApplication>(AppModule);
+  app.setGlobalPrefix('api');
+
+  const swaggerConfig = new DocumentBuilder()
+    .setTitle('iCore API')
+    .setDescription('iCore Gateway HTTP surface')
+    .setVersion(pkg.version)
+    .addBearerAuth()
+    .build();
+  const document = SwaggerModule.createDocument(app, swaggerConfig);
+  SwaggerModule.setup('api/docs', app, document);
+
+  const port = Number(process.env.API_PORT ?? DEFAULT_PORT);
+  await app.listen(port);
+}
+
+bootstrap()
+  .then(() => {
+    const origin = process.env.API_ORIGIN ?? 'http://localhost';
+    const port = Number(process.env.API_PORT ?? DEFAULT_PORT);
+    new Logger('API-Bootstrap').log(
+      formatGatewayBanner({ port, origin, services: GATEWAY_SERVICES }),
+    );
+  })
+  .catch((err) => {
+    new Logger('API-Bootstrap').error(
+      'Gateway bootstrap failed',
+      err instanceof Error ? err.stack : err,
+    );
+    process.exit(1);
+  });
+`;
+var GATEWAY_APP_MODULE_TS = `import { join } from 'node:path';
+import { Module } from '@nestjs/common';
+import { ConfigModule } from '@nestjs/config';
+import { ThrottlerModule, seconds } from '@nestjs/throttler';
+import { StorageModule } from './storage/storage.module';
+import { FeaturesModule } from './features.module';
+
+@Module({
+  imports: [
+    ConfigModule.forRoot({
+      isGlobal: true,
+      envFilePath: [join(process.cwd(), 'apps/api/.env'), join(process.cwd(), '.env')],
+    }),
+    ThrottlerModule.forRoot([{ name: 'auth-burst', ttl: seconds(60), limit: 10 }]),
+    StorageModule,
+    FeaturesModule,
+  ],
+})
+export class AppModule {}
+`;
+var SHARED_CLIENT_TS = `// Browser-safe subset of @icore/shared.
+// Import from '@icore/shared/client' in client-side code to avoid pulling
+// in NestJS / Node.js-only modules (transport, strategies, contracts).
+export * from './types';
+`;
+var SHARED_INDEX_TS = `export * from './env';
+export * from './bootstrap';
+export * from './jobs';
+export * from './strategies';
+export * from './transport';
+export * from './types';
+`;
+var TEMPLATE_SHARED_INDEX_TS = `export * from './lib/api/create-api.js';
+export * from './lib/stores/auth.store.js';
+export * from './lib/stores/loading.store.js';
+export * from './lib/i18n/create-i18n.js';
+export * from './lib/i18n/keys.js';
+export * from './lib/notify/use-notify.js';
+export * from './lib/draft/index.js';
+export * from './lib/landing/LandingPage.js';
+export * from './lib/stores/theme.store.js';
+`;
+var SHADCN_MAIN_TSX = `import './globals.css';
+import { StrictMode } from 'react';
+import { createRoot } from 'react-dom/client';
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
+import { RouterProvider, createRouter } from '@tanstack/react-router';
+import {
+  createIcoreApi,
+  createIcoreI18n,
+  ICORE_LOCALES,
+  useThemeStore,
+} from '@icore/template-shared';
+import { I18nextProvider } from 'react-i18next';
+import { Toaster } from 'sonner';
+import { routeTree } from './routeTree.gen';
+import { wireShadcnNotifier } from './lib/notify';
+
+const queryClient = new QueryClient({
+  defaultOptions: { queries: { retry: false, refetchOnWindowFocus: false } },
+});
+
+const router = createRouter({ routeTree, context: { queryClient } });
+
+declare module '@tanstack/react-router' {
+  interface Register {
+    router: typeof router;
+  }
+}
+
+const i18n = createIcoreI18n({ resources: ICORE_LOCALES });
+
+// Single shared API instance \u2014 used by every query in src/queries/
+export const api = createIcoreApi({
+  baseUrl: import.meta.env.VITE_API_URL ?? '/api',
+});
+
+wireShadcnNotifier();
+
+// Apply the theme class before React mounts so the first paint is correct
+const applyTheme = (mode: 'light' | 'dark') => {
+  document.documentElement.classList.toggle('dark', mode === 'dark');
+};
+applyTheme(useThemeStore.getState().mode);
+useThemeStore.subscribe((s) => applyTheme(s.mode));
+
+createRoot(document.getElementById('root')!).render(
+  <StrictMode>
+    <I18nextProvider i18n={i18n}>
+      <QueryClientProvider client={queryClient}>
+        <RouterProvider router={router} />
+        <Toaster richColors />
+      </QueryClientProvider>
+    </I18nextProvider>
+  </StrictMode>,
+);
+`;
+var SHADCN_DASHBOARD_TSX = `import { createFileRoute, Outlet } from '@tanstack/react-router';
+import { MainLayout } from '../layouts/MainLayout';
+
+export const Route = createFileRoute('/_dashboard')({
+  component: () => (
+    <MainLayout>
+      <Outlet />
+    </MainLayout>
+  ),
+});
+`;
+var SHADCN_INDEX_TSX = `import { createFileRoute } from '@tanstack/react-router';
+import { LandingPage } from '@icore/template-shared';
+
+// All version strings are injected at build time by vite.config.mts
+// (reads root package.json via fs.readFileSync so they stay accurate
+// even when workspace packages are bumped independently).
+const APP_VERSION = (import.meta.env.VITE_APP_VERSION as string | undefined) ?? '0.0.0-dev';
+
+export const Route = createFileRoute('/')({
+  component: () => (
+    <LandingPage
+      coreVersion={APP_VERSION}
+      uiLibrary="shadcn"
+      deps={[
+        { name: 'react', version: (import.meta.env.VITE_DEP_REACT as string) ?? '?' },
+        { name: 'vite', version: (import.meta.env.VITE_DEP_VITE as string) ?? '?' },
+        { name: 'tailwindcss', version: (import.meta.env.VITE_DEP_TAILWINDCSS as string) ?? '?' },
+        {
+          name: '@tanstack/react-router',
+          version: (import.meta.env.VITE_DEP_TANSTACK_ROUTER as string) ?? '?',
+        },
+        {
+          name: '@tanstack/react-query',
+          version: (import.meta.env.VITE_DEP_TANSTACK_QUERY as string) ?? '?',
+        },
+        { name: 'zustand', version: (import.meta.env.VITE_DEP_ZUSTAND as string) ?? '?' },
+        { name: '@casl/ability', version: (import.meta.env.VITE_DEP_CASL as string) ?? '?' },
+      ]}
+      ctaHref="/dashboard"
+      ctaLabel="Dashboard \u2192"
+    />
+  ),
+});
+`;
+var SHADCN_LAYOUT_HEADER_TSX = `import { setStoredLocale, type IcoreLocale } from '@icore/template-shared';
+import { ThemeToggle } from '../ThemeToggle';
+
+const LOCALES: { code: IcoreLocale; label: string }[] = [
+  { code: 'en', label: 'EN' },
+  { code: 'ru', label: 'RU' },
+  { code: 'he', label: 'HE' },
+];
+
+export function LayoutHeader() {
+  function handleLocale(code: IcoreLocale) {
+    setStoredLocale(code);
+    window.location.reload();
+  }
+
+  return (
+    <header className="sticky top-0 z-30 flex h-14 items-center justify-between border-b border-[--color-border] bg-[--color-background]/80 px-4 backdrop-blur-sm">
+      <div className="flex items-center gap-2">
+        <div className="flex h-6 w-6 items-center justify-center rounded bg-[--color-primary]">
+          <span className="text-xs font-bold text-[--color-primary-foreground]">i</span>
+        </div>
+        <span className="text-sm font-semibold tracking-tight">iCore</span>
+      </div>
+
+      <div className="flex items-center gap-1">
+        <div className="flex items-center rounded-md border border-[--color-border] overflow-hidden mr-2">
+          {LOCALES.map(({ code, label }) => (
+            <button
+              key={code}
+              type="button"
+              onClick={() => handleLocale(code)}
+              className="px-2.5 py-1 text-xs text-[--color-muted-foreground] hover:bg-[--color-muted] hover:text-[--color-foreground] transition-colors cursor-pointer"
+            >
+              {label}
+            </button>
+          ))}
+        </div>
+
+        <ThemeToggle />
+      </div>
+    </header>
+  );
+}
+`;
+var ANTD_MAIN_TSX = `import './globals.less';
+import { StrictMode } from 'react';
+import { createRoot } from 'react-dom/client';
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
+import { RouterProvider, createRouter } from '@tanstack/react-router';
+import { ConfigProvider, App as AntApp, theme } from 'antd';
+import { I18nextProvider } from 'react-i18next';
+import {
+  createIcoreApi,
+  createIcoreI18n,
+  ICORE_LOCALES,
+  useThemeStore,
+} from '@icore/template-shared';
+import { routeTree } from './routeTree.gen';
+
+const queryClient = new QueryClient({
+  defaultOptions: { queries: { retry: false, refetchOnWindowFocus: false } },
+});
+
+const router = createRouter({ routeTree, context: { queryClient } });
+
+declare module '@tanstack/react-router' {
+  interface Register {
+    router: typeof router;
+  }
+}
+
+const i18n = createIcoreI18n({ resources: ICORE_LOCALES });
+
+// Single shared API instance \u2014 used by every query in src/queries/
+export const api = createIcoreApi({
+  baseUrl: import.meta.env.VITE_API_URL ?? '/api',
+});
+
+function Root() {
+  const mode = useThemeStore((s) => s.mode);
+  const algorithm = mode === 'dark' ? theme.darkAlgorithm : theme.defaultAlgorithm;
+  return (
+    <ConfigProvider theme={{ algorithm, token: { colorPrimary: '#22c55e', colorLink: '#22c55e' } }}>
+      <AntApp>
+        <QueryClientProvider client={queryClient}>
+          <RouterProvider router={router} />
+        </QueryClientProvider>
+      </AntApp>
+    </ConfigProvider>
+  );
+}
+
+createRoot(document.getElementById('root')!).render(
+  <StrictMode>
+    <I18nextProvider i18n={i18n}>
+      <Root />
+    </I18nextProvider>
+  </StrictMode>,
+);
+`;
+var ANTD_DASHBOARD_TSX = `import { createFileRoute, Outlet } from '@tanstack/react-router';
+import { MainLayout } from '../layouts/MainLayout';
+
+export const Route = createFileRoute('/_dashboard')({
+  component: () => (
+    <MainLayout>
+      <Outlet />
+    </MainLayout>
+  ),
+});
+`;
+var ANTD_INDEX_TSX = `import { createFileRoute, Link } from '@tanstack/react-router';
+import { LandingPage } from '@icore/template-shared';
+
+// All version strings are injected at build time by vite.config.mts
+// (reads root package.json via fs.readFileSync so they stay accurate
+// even when workspace packages are bumped independently).
+const APP_VERSION = (import.meta.env.VITE_APP_VERSION as string | undefined) ?? '0.0.0-dev';
+
+export const Route = createFileRoute('/')({
+  component: () => (
+    <LandingPage
+      coreVersion={APP_VERSION}
+      uiLibrary="antd"
+      deps={[
+        { name: 'react', version: (import.meta.env.VITE_DEP_REACT as string) ?? '?' },
+        { name: 'antd', version: (import.meta.env.VITE_DEP_ANTD as string) ?? '?' },
+        { name: 'vite', version: (import.meta.env.VITE_DEP_VITE as string) ?? '?' },
+        {
+          name: '@tanstack/react-router',
+          version: (import.meta.env.VITE_DEP_TANSTACK_ROUTER as string) ?? '?',
+        },
+        {
+          name: '@tanstack/react-query',
+          version: (import.meta.env.VITE_DEP_TANSTACK_QUERY as string) ?? '?',
+        },
+        { name: 'zustand', version: (import.meta.env.VITE_DEP_ZUSTAND as string) ?? '?' },
+        { name: '@casl/ability', version: (import.meta.env.VITE_DEP_CASL as string) ?? '?' },
+      ]}
+      ctaHref="/dashboard"
+      ctaLabel={<Link to="/dashboard">Dashboard \u2192</Link>}
+    />
+  ),
+});
+`;
+var ANTD_LAYOUT_HEADER_TSX = `import { Button, Layout, Space } from 'antd';
+import { setStoredLocale, type IcoreLocale } from '@icore/template-shared';
+import { ThemeToggle } from '../ThemeToggle';
+
+const APP_VERSION = (import.meta.env.VITE_APP_VERSION as string | undefined) ?? '0.0.0-dev';
+
+const LOCALES: { code: IcoreLocale; label: string }[] = [
+  { code: 'en', label: 'EN' },
+  { code: 'ru', label: 'RU' },
+  { code: 'he', label: 'HE' },
+];
+
+export function LayoutHeader() {
+  function handleLocale(code: IcoreLocale) {
+    setStoredLocale(code);
+    window.location.reload();
+  }
+
+  return (
+    <Layout.Header
+      style={{
+        display: 'flex',
+        alignItems: 'center',
+        justifyContent: 'space-between',
+        padding: '0 24px',
+      }}
+    >
+      <Space>
+        <span style={{ color: '#fff', fontWeight: 600, fontSize: 16 }}>iCore</span>
+        <span
+          style={{
+            color: 'rgba(255,255,255,0.45)',
+            fontSize: 11,
+            background: 'rgba(255,255,255,0.1)',
+            padding: '1px 6px',
+            borderRadius: 4,
+          }}
+        >
+          v{APP_VERSION}
+        </span>
+      </Space>
+
+      <Space size="middle">
+        <Space size={4}>
+          {LOCALES.map(({ code, label }) => (
+            <Button
+              key={code}
+              size="small"
+              type="text"
+              style={{ color: 'rgba(255,255,255,0.65)' }}
+              onClick={() => handleLocale(code)}
+            >
+              {label}
+            </Button>
+          ))}
+        </Space>
+
+        <ThemeToggle />
+      </Space>
+    </Layout.Header>
+  );
+}
+`;
+var MUI_MAIN_TSX = `import './globals.css';
+import { StrictMode, useMemo } from 'react';
+import { createRoot } from 'react-dom/client';
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
+import { RouterProvider, createRouter } from '@tanstack/react-router';
+import { CssBaseline, ThemeProvider, createTheme } from '@mui/material';
+import { I18nextProvider } from 'react-i18next';
+import {
+  createIcoreApi,
+  createIcoreI18n,
+  ICORE_LOCALES,
+  useThemeStore,
+} from '@icore/template-shared';
+import { routeTree } from './routeTree.gen';
+import { wireMuiNotifier } from './lib/notify';
+
+const queryClient = new QueryClient({
+  defaultOptions: { queries: { retry: false, refetchOnWindowFocus: false } },
+});
+
+const router = createRouter({ routeTree, context: { queryClient } });
+
+declare module '@tanstack/react-router' {
+  interface Register {
+    router: typeof router;
+  }
+}
+
+const i18n = createIcoreI18n({ resources: ICORE_LOCALES });
+
+export const api = createIcoreApi({
+  baseUrl: import.meta.env.VITE_API_URL ?? '/api',
+});
+
+wireMuiNotifier();
+
+function Root() {
+  const mode = useThemeStore((s) => s.mode);
+  const theme = useMemo(
+    () => createTheme({ palette: { mode, primary: { main: '#22c55e' } } }),
+    [mode],
+  );
+  return (
+    <ThemeProvider theme={theme}>
+      <CssBaseline />
+      <QueryClientProvider client={queryClient}>
+        <RouterProvider router={router} />
+      </QueryClientProvider>
+    </ThemeProvider>
+  );
+}
+
+createRoot(document.getElementById('root')!).render(
+  <StrictMode>
+    <I18nextProvider i18n={i18n}>
+      <Root />
+    </I18nextProvider>
+  </StrictMode>,
+);
+`;
+var MUI_DASHBOARD_TSX = `import { createFileRoute, Outlet } from '@tanstack/react-router';
+import { MainLayout } from '../layouts/MainLayout';
+
+export const Route = createFileRoute('/_dashboard')({
+  component: () => (
+    <MainLayout>
+      <Outlet />
+    </MainLayout>
+  ),
+});
+`;
+var MUI_INDEX_TSX = `import { createFileRoute, Link } from '@tanstack/react-router';
+import { LandingPage } from '@icore/template-shared';
+
+// All version strings are injected at build time by vite.config.mts
+// (reads root package.json via fs.readFileSync so they stay accurate
+// even when workspace packages are bumped independently).
+const APP_VERSION = (import.meta.env.VITE_APP_VERSION as string | undefined) ?? '0.0.0-dev';
+
+export const Route = createFileRoute('/')({
+  component: () => (
+    <LandingPage
+      coreVersion={APP_VERSION}
+      uiLibrary="mui"
+      deps={[
+        { name: 'react', version: (import.meta.env.VITE_DEP_REACT as string) ?? '?' },
+        { name: '@mui/material', version: (import.meta.env.VITE_DEP_MUI as string) ?? '?' },
+        { name: 'vite', version: (import.meta.env.VITE_DEP_VITE as string) ?? '?' },
+        {
+          name: '@tanstack/react-router',
+          version: (import.meta.env.VITE_DEP_TANSTACK_ROUTER as string) ?? '?',
+        },
+        {
+          name: '@tanstack/react-query',
+          version: (import.meta.env.VITE_DEP_TANSTACK_QUERY as string) ?? '?',
+        },
+        { name: 'zustand', version: (import.meta.env.VITE_DEP_ZUSTAND as string) ?? '?' },
+        { name: '@casl/ability', version: (import.meta.env.VITE_DEP_CASL as string) ?? '?' },
+      ]}
+      ctaHref="/dashboard"
+      ctaLabel={<Link to="/dashboard">Dashboard \u2192</Link>}
+    />
+  ),
+});
+`;
+var MUI_LAYOUT_HEADER_TSX = `import { AppBar, Box, Button, Toolbar, Typography } from '@mui/material';
+import { useTranslation } from 'react-i18next';
+import { setStoredLocale, type IcoreLocale } from '@icore/template-shared';
+import { ThemeToggle } from '../ThemeToggle';
+
+const APP_VERSION = (import.meta.env.VITE_APP_VERSION as string | undefined) ?? '0.0.0-dev';
+
+const LOCALES: { code: IcoreLocale; label: string }[] = [
+  { code: 'en', label: 'EN' },
+  { code: 'ru', label: 'RU' },
+  { code: 'he', label: 'HE' },
+];
+
+export function LayoutHeader() {
+  const { i18n } = useTranslation();
+  const currentLocale = i18n.language as IcoreLocale;
+
+  function handleLocale(code: IcoreLocale) {
+    setStoredLocale(code);
+    window.location.reload();
+  }
+
+  return (
+    <AppBar position="sticky" color="default" elevation={1}>
+      <Toolbar sx={{ justifyContent: 'space-between' }}>
+        <Typography variant="h6" component="div" fontWeight={600}>
+          iCore{' '}
+          <span style={{ opacity: 0.6, fontSize: '0.75em', fontWeight: 400 }}>v{APP_VERSION}</span>
+        </Typography>
+
+        <Box sx={{ display: 'flex', alignItems: 'center', gap: 1 }}>
+          <Box sx={{ display: 'flex', gap: 0.5 }}>
+            {LOCALES.map(({ code, label }) => (
+              <Button
+                key={code}
+                size="small"
+                variant={currentLocale === code ? 'contained' : 'text'}
+                onClick={() => handleLocale(code)}
+              >
+                {label}
+              </Button>
+            ))}
+          </Box>
+
+          <ThemeToggle />
+        </Box>
+      </Toolbar>
+    </AppBar>
+  );
+}
+`;
+var COMMON_VARIANTS = {
+  "apps/api/src/main.ts": GATEWAY_MAIN_TS,
+  "apps/api/src/app/app.module.ts": GATEWAY_APP_MODULE_TS,
+  "libs/shared/src/client.ts": SHARED_CLIENT_TS,
+  "libs/shared/src/index.ts": SHARED_INDEX_TS,
+  "libs/template-shared/src/index.ts": TEMPLATE_SHARED_INDEX_TS
+};
+var UI_VARIANTS = {
+  shadcn: {
+    "apps/client/src/main.tsx": SHADCN_MAIN_TSX,
+    "apps/client/src/routes/_dashboard.tsx": SHADCN_DASHBOARD_TSX,
+    "apps/client/src/routes/index.tsx": SHADCN_INDEX_TSX,
+    "apps/client/src/components/layout/LayoutHeader.tsx": SHADCN_LAYOUT_HEADER_TSX
+  },
+  antd: {
+    "apps/client/src/main.tsx": ANTD_MAIN_TSX,
+    "apps/client/src/routes/_dashboard.tsx": ANTD_DASHBOARD_TSX,
+    "apps/client/src/routes/index.tsx": ANTD_INDEX_TSX,
+    "apps/client/src/components/layout/LayoutHeader.tsx": ANTD_LAYOUT_HEADER_TSX
+  },
+  mui: {
+    "apps/client/src/main.tsx": MUI_MAIN_TSX,
+    "apps/client/src/routes/_dashboard.tsx": MUI_DASHBOARD_TSX,
+    "apps/client/src/routes/index.tsx": MUI_INDEX_TSX,
+    "apps/client/src/components/layout/LayoutHeader.tsx": MUI_LAYOUT_HEADER_TSX
+  }
+};
+async function applyAuthNoneVariants(targetDir, ui) {
+  const uiFiles = UI_VARIANTS[ui] ?? UI_VARIANTS["shadcn"];
+  const all = { ...COMMON_VARIANTS, ...uiFiles };
+  for (const [rel, content] of Object.entries(all)) {
+    const dest = (0, import_node_path3.join)(targetDir, rel);
+    try {
+      await (0, import_promises3.mkdir)((0, import_node_path3.dirname)(dest), { recursive: true });
+      await (0, import_promises3.writeFile)(dest, content);
+    } catch {
+    }
+  }
 }
 
 // src/manifest/wire-features.ts
-var import_promises4 = require("fs/promises");
-var import_node_path4 = require("path");
+var import_promises5 = require("fs/promises");
+var import_node_path5 = require("path");
 
 // src/manifest/index.ts
 var EMPTY = { libDirs: [], deps: {}, tsPaths: {} };
@@ -523,8 +1190,8 @@ var MANIFEST = {
 };
 
 // src/manifest/wire-provider.ts
-var import_promises3 = require("fs/promises");
-var import_node_path3 = require("path");
+var import_promises4 = require("fs/promises");
+var import_node_path4 = require("path");
 async function writeProvider(targetDir, axis, provider) {
   const nestModule = axis.section[provider]?.nestModule;
   if (!nestModule) throw new Error(`provider "${provider}" has no nestModule in the manifest`);
@@ -535,27 +1202,27 @@ const ENV_PATH = '${axis.envPath}';
 
 export const ${axis.exportConst} = ${symbol}.forRoot(ENV_PATH);
 `;
-  await (0, import_promises3.writeFile)((0, import_node_path3.join)(targetDir, axis.providerFile), content);
+  await (0, import_promises4.writeFile)((0, import_node_path4.join)(targetDir, axis.providerFile), content);
 }
 async function stripJsonKeys(path, drop) {
   try {
-    const pkg = JSON.parse(await (0, import_promises3.readFile)(path, "utf8"));
+    const pkg = JSON.parse(await (0, import_promises4.readFile)(path, "utf8"));
     for (const field of ["dependencies", "devDependencies"]) {
       const deps = pkg[field];
       if (!deps) continue;
       for (const k of Object.keys(deps)) if (drop(k)) delete deps[k];
     }
-    await (0, import_promises3.writeFile)(path, JSON.stringify(pkg, null, 2) + "\n");
+    await (0, import_promises4.writeFile)(path, JSON.stringify(pkg, null, 2) + "\n");
   } catch {
   }
 }
 async function stripTsconfigKeys(targetDir, aliases) {
-  const path = (0, import_node_path3.join)(targetDir, "tsconfig.base.json");
+  const path = (0, import_node_path4.join)(targetDir, "tsconfig.base.json");
   try {
-    const parsed = JSON.parse(await (0, import_promises3.readFile)(path, "utf8"));
+    const parsed = JSON.parse(await (0, import_promises4.readFile)(path, "utf8"));
     const paths = parsed.compilerOptions?.paths;
     if (paths) for (const a of aliases) delete paths[a];
-    await (0, import_promises3.writeFile)(path, JSON.stringify(parsed, null, 2) + "\n");
+    await (0, import_promises4.writeFile)(path, JSON.stringify(parsed, null, 2) + "\n");
   } catch {
   }
 }
@@ -564,10 +1231,10 @@ async function cleanupUnusedAxis(targetDir, axis, chosen) {
     if (provider === chosen) continue;
     const unit = axis.section[provider];
     for (const dir of unit.libDirs)
-      await (0, import_promises3.rm)((0, import_node_path3.join)(targetDir, dir), { recursive: true, force: true });
-    for (const t of unit.appTests ?? []) await (0, import_promises3.rm)((0, import_node_path3.join)(targetDir, t), { force: true });
+      await (0, import_promises4.rm)((0, import_node_path4.join)(targetDir, dir), { recursive: true, force: true });
+    for (const t of unit.appTests ?? []) await (0, import_promises4.rm)((0, import_node_path4.join)(targetDir, t), { force: true });
     const dropKeys = /* @__PURE__ */ new Set([...Object.keys(unit.tsPaths), ...Object.keys(unit.deps)]);
-    await stripJsonKeys((0, import_node_path3.join)(targetDir, axis.msPackageJson), (k) => dropKeys.has(k));
+    await stripJsonKeys((0, import_node_path4.join)(targetDir, axis.msPackageJson), (k) => dropKeys.has(k));
     await stripTsconfigKeys(targetDir, Object.keys(unit.tsPaths));
   }
 }
@@ -596,7 +1263,7 @@ async function writeFeaturesWiring(targetDir, opts) {
 })
 export class FeaturesModule {}
 `;
-  await (0, import_promises4.writeFile)((0, import_node_path4.join)(targetDir, FEATURES_MODULE), featuresModule);
+  await (0, import_promises5.writeFile)((0, import_node_path5.join)(targetDir, FEATURES_MODULE), featuresModule);
   const services = [];
   if (opts.authProvider !== "none") services.push({ name: "auth", prefix: "AUTH" });
   if (opts.upload !== "none") services.push({ name: "upload", prefix: "UPLOAD" });
@@ -610,14 +1277,14 @@ export const GATEWAY_SERVICES = [
 ${entries}
 ];
 `;
-  await (0, import_promises4.writeFile)((0, import_node_path4.join)(targetDir, GATEWAY_SERVICES), gatewayServices);
+  await (0, import_promises5.writeFile)((0, import_node_path5.join)(targetDir, GATEWAY_SERVICES), gatewayServices);
 }
 async function stripJobsDockerCompose(targetDir) {
-  const composePath = (0, import_node_path4.join)(targetDir, "docker-compose.yml");
+  const composePath = (0, import_node_path5.join)(targetDir, "docker-compose.yml");
   try {
-    const compose = await (0, import_promises4.readFile)(composePath, "utf8");
+    const compose = await (0, import_promises5.readFile)(composePath, "utf8");
     const next = compose.replace(/\n {2}jobs:[\s\S]+?(?=\n {2}\w+:|\nnetworks:)/m, "\n").replace(/\n {6}jobs:\n {8}condition: service_started/g, "").replace(/\n {6}JOBS_REDIS_URL:[^\n]*/g, "");
-    await (0, import_promises4.writeFile)(composePath, next);
+    await (0, import_promises5.writeFile)(composePath, next);
   } catch {
   }
 }
@@ -627,18 +1294,38 @@ async function cleanupUnusedFeatures(targetDir, opts) {
     if (chosen.has(key)) continue;
     const unit = FEATURES[key];
     for (const dir of unit.libDirs)
-      await (0, import_promises4.rm)((0, import_node_path4.join)(targetDir, dir), { recursive: true, force: true });
+      await (0, import_promises5.rm)((0, import_node_path5.join)(targetDir, dir), { recursive: true, force: true });
     const dropKeys = /* @__PURE__ */ new Set([...Object.keys(unit.tsPaths), ...Object.keys(unit.deps)]);
-    await stripJsonKeys((0, import_node_path4.join)(targetDir, API_PKG), (k) => dropKeys.has(k));
+    await stripJsonKeys((0, import_node_path5.join)(targetDir, API_PKG), (k) => dropKeys.has(k));
     await stripTsconfigKeys(targetDir, Object.keys(unit.tsPaths));
     if (unit.gatewayService) await stripGatewayTransport(targetDir, unit.gatewayService.prefix);
     if (unit.dockerService === "jobs") await stripJobsDockerCompose(targetDir);
+    if (key === "jobs") {
+      try {
+        await (0, import_promises5.unlink)((0, import_node_path5.join)(targetDir, "libs/shared/src/jobs.ts"));
+      } catch {
+      }
+      try {
+        await (0, import_promises5.unlink)((0, import_node_path5.join)(targetDir, "libs/shared/src/__tests__/jobs.unit.test.ts"));
+      } catch {
+      }
+      const sharedIdx = (0, import_node_path5.join)(targetDir, "libs/shared/src/index.ts");
+      try {
+        const src = await (0, import_promises5.readFile)(sharedIdx, "utf8");
+        await (0, import_promises5.writeFile)(sharedIdx, src.replace(/^export \* from '\.\/jobs';\n/m, ""));
+      } catch {
+      }
+    }
+  }
+  try {
+    await (0, import_promises5.rmdir)((0, import_node_path5.join)(targetDir, "apps/client/src/queries"));
+  } catch {
   }
 }
 
 // src/manifest/wire-client.ts
-var import_promises5 = require("fs/promises");
-var import_node_path5 = require("path");
+var import_promises6 = require("fs/promises");
+var import_node_path6 = require("path");
 var NAV_CONFIG_FILE = "apps/client/src/nav.config.ts";
 var BASE_NAV = [
   { to: "/dashboard", labelKey: "nav.dashboard", iconName: "dashboard", exact: true }
@@ -676,12 +1363,12 @@ export const NAV_CONFIG: NavItem[] = [
 ` + entries.map(renderEntry).join("\n") + `
 ];
 `;
-  await (0, import_promises5.writeFile)((0, import_node_path5.join)(targetDir, NAV_CONFIG_FILE), content);
+  await (0, import_promises6.writeFile)((0, import_node_path6.join)(targetDir, NAV_CONFIG_FILE), content);
 }
 
 // src/manifest/blueprint.ts
-var import_promises6 = require("fs/promises");
-var import_node_path6 = require("path");
+var import_promises7 = require("fs/promises");
+var import_node_path7 = require("path");
 async function writeBlueprintJson(targetDir, opts) {
   const blueprint = {
     schemaVersion: 1,
@@ -696,10 +1383,10 @@ async function writeBlueprintJson(targetDir, opts) {
     transport: opts.transport,
     packageManager: opts.packageManager
   };
-  await (0, import_promises6.writeFile)((0, import_node_path6.join)(targetDir, "blueprint.json"), JSON.stringify(blueprint, null, 2) + "\n");
+  await (0, import_promises7.writeFile)((0, import_node_path7.join)(targetDir, "blueprint.json"), JSON.stringify(blueprint, null, 2) + "\n");
 }
 async function writeJson(targetDir, rel, data) {
-  await (0, import_promises6.writeFile)((0, import_node_path6.join)(targetDir, rel, "blueprint.json"), JSON.stringify(data, null, 2) + "\n");
+  await (0, import_promises7.writeFile)((0, import_node_path7.join)(targetDir, rel, "blueprint.json"), JSON.stringify(data, null, 2) + "\n");
 }
 async function writeServiceBlueprints(targetDir, opts) {
   const t = opts.transport;
@@ -793,11 +1480,11 @@ var writeDbProvider = (targetDir, provider) => writeProvider(targetDir, DB, prov
 var cleanupUnusedDb = (targetDir, chosen) => cleanupUnusedAxis(targetDir, DB, chosen);
 
 // src/lib/scaffold-pkg.ts
-var import_promises7 = require("fs/promises");
-var import_node_path7 = require("path");
+var import_promises8 = require("fs/promises");
+var import_node_path8 = require("path");
 async function writePnpmWorkspace(targetDir) {
-  const pkgPath = (0, import_node_path7.join)(targetDir, "package.json");
-  const pkg = JSON.parse(await (0, import_promises7.readFile)(pkgPath, "utf8"));
+  const pkgPath = (0, import_node_path8.join)(targetDir, "package.json");
+  const pkg = JSON.parse(await (0, import_promises8.readFile)(pkgPath, "utf8"));
   const workspaces = pkg.workspaces ?? [];
   const packagesBlock = workspaces.map((p2) => `  - '${p2}'`).join("\n");
   const allowBuilds = [
@@ -820,22 +1507,22 @@ ${packagesBlock}
 allowBuilds:
 ${allowBuilds}
 `;
-  await (0, import_promises7.writeFile)((0, import_node_path7.join)(targetDir, "pnpm-workspace.yaml"), content);
+  await (0, import_promises8.writeFile)((0, import_node_path8.join)(targetDir, "pnpm-workspace.yaml"), content);
 }
 async function rewritePnpmWorkspaceDeps(targetDir) {
   async function walk2(dir) {
     const found = [];
     let entries;
     try {
-      entries = await (0, import_promises7.readdir)(dir, { withFileTypes: true });
+      entries = await (0, import_promises8.readdir)(dir, { withFileTypes: true });
     } catch {
       return found;
     }
     for (const e of entries) {
       if (e.isDirectory() && e.name !== "node_modules") {
-        found.push(...await walk2((0, import_node_path7.join)(dir, e.name)));
+        found.push(...await walk2((0, import_node_path8.join)(dir, e.name)));
       } else if (e.isFile() && e.name === "package.json") {
-        found.push((0, import_node_path7.join)(dir, e.name));
+        found.push((0, import_node_path8.join)(dir, e.name));
       }
     }
     return found;
@@ -843,17 +1530,17 @@ async function rewritePnpmWorkspaceDeps(targetDir) {
   const pkgFiles = await walk2(targetDir);
   for (const f of pkgFiles) {
     try {
-      const raw = await (0, import_promises7.readFile)(f, "utf8");
+      const raw = await (0, import_promises8.readFile)(f, "utf8");
       const next = raw.replace(/"(@icore\/[^"]+)":\s*"\*"/g, '"$1": "workspace:*"');
-      if (next !== raw) await (0, import_promises7.writeFile)(f, next);
+      if (next !== raw) await (0, import_promises8.writeFile)(f, next);
     } catch {
     }
   }
 }
 async function patchGitignoreForPm(targetDir, pm) {
-  const giPath = (0, import_node_path7.join)(targetDir, ".gitignore");
+  const giPath = (0, import_node_path8.join)(targetDir, ".gitignore");
   try {
-    let src = await (0, import_promises7.readFile)(giPath, "utf8");
+    let src = await (0, import_promises8.readFile)(giPath, "utf8");
     src = src.replace(/^# Build artifacts.*\ntools\/create-icore\/templates\/\s*\n/m, "");
     if (pm !== "yarn") {
       src = src.replace(/^\.yarn\/\*\s*\n/m, "").replace(/^!\.yarn\/patches\s*\n/m, "").replace(/^!\.yarn\/plugins\s*\n/m, "").replace(/^!\.yarn\/releases\s*\n/m, "").replace(/^!\.yarn\/sdks\s*\n/m, "").replace(/^!\.yarn\/versions\s*\n/m, "").replace(/^\.pnp\.\*\s*\n/m, "");
@@ -868,7 +1555,7 @@ async function patchGitignoreForPm(targetDir, pm) {
         src += "\n# npm\nnpm-debug.log*\n";
       }
     }
-    await (0, import_promises7.writeFile)(giPath, src);
+    await (0, import_promises8.writeFile)(giPath, src);
   } catch {
   }
 }
@@ -876,14 +1563,15 @@ async function writeAiFiles(targetDir, opts) {
   const pm = opts.packageManager;
   const nx = pm === "npm" ? "npx nx" : `${pm} nx`;
   const devCmd = pmRun(pm, "dev");
-  const activeMSes = ["auth (port 4001)"];
+  const activeMSes = [];
+  if (opts.authProvider !== "none") activeMSes.push("auth (port 4001)");
   if (opts.upload !== "none") activeMSes.push(`upload (port 4002)`);
   if (opts.payment !== "none") activeMSes.push(`payment (port 4003)`);
   if (opts.example !== "none") activeMSes.push(`notes (port 4004)`);
   if (opts.jobs !== "none") activeMSes.push(`jobs (standalone)`);
   const usesSupabase = opts.authProvider === "supabase" || opts.dbProvider === "supabase" || opts.upload === "supabase";
   const usesFirebase = opts.authProvider === "firebase" || opts.dbProvider === "firebase" || opts.upload === "firebase";
-  await (0, import_promises7.writeFile)((0, import_node_path7.join)(targetDir, "CLAUDE.md"), "@AGENTS.md\n");
+  await (0, import_promises8.writeFile)((0, import_node_path8.join)(targetDir, "CLAUDE.md"), "@AGENTS.md\n");
   const uiLabel = { shadcn: "shadcn/ui + Tailwind", antd: "Ant Design 6", mui: "MUI 6" }[opts.ui];
   const readme = `# ${opts.projectName}
 
@@ -905,9 +1593,7 @@ async function writeAiFiles(targetDir, opts) {
 
 \`\`\`bash
 # 1. Fill in provider credentials
-#    apps/microservices/auth/.env
-#    apps/microservices/upload/.env  (if upload is enabled)
-#    apps/client/.env               (VITE_API_URL \u2014 already defaults to /api)
+${opts.authProvider !== "none" ? "#    apps/microservices/auth/.env\n" : ""}${opts.upload !== "none" ? "#    apps/microservices/upload/.env\n" : ""}#    apps/client/.env               (VITE_API_URL \u2014 already defaults to /api)
 
 # 2. Start everything
 ${devCmd}
@@ -933,7 +1619,7 @@ ${pm === "yarn" ? "yarn remove-notes" : pm === "pnpm" ? "pnpm remove-notes" : "n
 
 Apache-2.0
 `;
-  await (0, import_promises7.writeFile)((0, import_node_path7.join)(targetDir, "README.md"), readme);
+  await (0, import_promises8.writeFile)((0, import_node_path8.join)(targetDir, "README.md"), readme);
   const agents = `# ${opts.projectName} \u2014 Agent Instructions
 
 ## Stack snapshot
@@ -1003,10 +1689,10 @@ ${nx} g @nx/nest:resource     # generate NestJS resource
 
 | File | Key vars |
 |------|----------|
-| \`apps/microservices/auth/.env\` | \`AUTH_PROVIDER=${opts.authProvider}\`, ${opts.authProvider === "supabase" ? "`SUPABASE_URL`, `SUPABASE_SERVICE_ROLE_KEY`" : "`FB_ADMIN_*`, `FIREBASE_WEB_API_KEY`"} |
-${opts.upload !== "none" ? `| \`apps/microservices/upload/.env\` | \`STORAGE_PROVIDER=${opts.upload}\`, provider creds |
-` : ""}| \`apps/microservices/notes/.env\` | \`DB_PROVIDER=${opts.dbProvider}\`, DB creds |
-| \`apps/client/.env\` | \`VITE_API_URL=/api\` (proxied to :3001 in dev) |
+${opts.authProvider !== "none" ? `| \`apps/microservices/auth/.env\` | \`AUTH_PROVIDER=${opts.authProvider}\`, ${opts.authProvider === "supabase" ? "`SUPABASE_URL`, `SUPABASE_SERVICE_ROLE_KEY`" : "`FB_ADMIN_*`, `FIREBASE_WEB_API_KEY`"} |
+` : ""}${opts.upload !== "none" ? `| \`apps/microservices/upload/.env\` | \`STORAGE_PROVIDER=${opts.upload}\`, provider creds |
+` : ""}${opts.example !== "none" ? `| \`apps/microservices/notes/.env\` | \`DB_PROVIDER=${opts.dbProvider}\`, DB creds |
+` : ""}| \`apps/client/.env\` | \`VITE_API_URL=/api\` (proxied to :3001 in dev) |
 
 ## Testing
 
@@ -1014,8 +1700,8 @@ ${opts.upload !== "none" ? `| \`apps/microservices/upload/.env\` | \`STORAGE_PRO
 - Test behaviour, not implementation. Fake strategies from \`@icore/shared\` (FakeAuthStrategy etc.) serve as test doubles.
 - Run: \`${nx} test <project>\`
 `;
-  await (0, import_promises7.writeFile)((0, import_node_path7.join)(targetDir, "AGENTS.md"), agents);
-  await (0, import_promises7.mkdir)((0, import_node_path7.join)(targetDir, ".claude"), { recursive: true });
+  await (0, import_promises8.writeFile)((0, import_node_path8.join)(targetDir, "AGENTS.md"), agents);
+  await (0, import_promises8.mkdir)((0, import_node_path8.join)(targetDir, ".claude"), { recursive: true });
   const mcpServers = {
     nx: {
       command: "npx",
@@ -1056,8 +1742,8 @@ ${opts.upload !== "none" ? `| \`apps/microservices/upload/.env\` | \`STORAGE_PRO
       ]
     }
   };
-  await (0, import_promises7.writeFile)(
-    (0, import_node_path7.join)(targetDir, ".claude", "settings.json"),
+  await (0, import_promises8.writeFile)(
+    (0, import_node_path8.join)(targetDir, ".claude", "settings.json"),
     JSON.stringify(settings, null, 2) + "\n"
   );
 }
@@ -1077,30 +1763,30 @@ var IGNORE_TOP = /* @__PURE__ */ new Set([
   ".vscode"
 ]);
 async function copyTree(src, dest) {
-  await (0, import_promises8.mkdir)(dest, { recursive: true });
-  const entries = await (0, import_promises8.readdir)(src, { withFileTypes: true });
+  await (0, import_promises9.mkdir)(dest, { recursive: true });
+  const entries = await (0, import_promises9.readdir)(src, { withFileTypes: true });
   for (const entry of entries) {
     if (IGNORE_TOP.has(entry.name)) continue;
-    const s = (0, import_node_path8.join)(src, entry.name);
-    const d = (0, import_node_path8.join)(dest, entry.name);
+    const s = (0, import_node_path9.join)(src, entry.name);
+    const d = (0, import_node_path9.join)(dest, entry.name);
     if (entry.isDirectory()) await copyTree(s, d);
-    else if (entry.isFile()) await (0, import_promises8.copyFile)(s, d);
+    else if (entry.isFile()) await (0, import_promises9.copyFile)(s, d);
   }
 }
 async function selectClientTemplate(targetDir, opts) {
-  const templatesRoot = (0, import_node_path8.join)(targetDir, "apps/templates");
-  const chosen = (0, import_node_path8.join)(templatesRoot, `client-${opts.ui}`);
-  const destClient = (0, import_node_path8.join)(targetDir, "apps/client");
+  const templatesRoot = (0, import_node_path9.join)(targetDir, "apps/templates");
+  const chosen = (0, import_node_path9.join)(templatesRoot, `client-${opts.ui}`);
+  const destClient = (0, import_node_path9.join)(targetDir, "apps/client");
   let chosenUi = opts.ui;
   try {
-    const s = await (0, import_promises8.stat)(chosen);
+    const s = await (0, import_promises9.stat)(chosen);
     if (!s.isDirectory()) throw new Error("not a dir");
     await copyTree(chosen, destClient);
   } catch {
     chosenUi = "shadcn";
-    await copyTree((0, import_node_path8.join)(templatesRoot, "client-shadcn"), destClient);
+    await copyTree((0, import_node_path9.join)(templatesRoot, "client-shadcn"), destClient);
   }
-  await (0, import_promises8.rm)(templatesRoot, { recursive: true, force: true });
+  await (0, import_promises9.rm)(templatesRoot, { recursive: true, force: true });
   await rewriteClientPaths(destClient, chosenUi);
 }
 async function rewriteClientPaths(clientDir, ui) {
@@ -1113,11 +1799,11 @@ async function rewriteClientPaths(clientDir, ui) {
     "eslint.config.mjs"
   ];
   for (const rel of candidates) {
-    const path = (0, import_node_path8.join)(clientDir, rel);
+    const path = (0, import_node_path9.join)(clientDir, rel);
     try {
-      const raw = await (0, import_promises8.readFile)(path, "utf8");
+      const raw = await (0, import_promises9.readFile)(path, "utf8");
       const next = raw.replaceAll("../../../", "../../").replaceAll(`apps/templates/client-${ui}`, "apps/client").replaceAll(`client-${ui}`, "client");
-      if (next !== raw) await (0, import_promises8.writeFile)(path, next);
+      if (next !== raw) await (0, import_promises9.writeFile)(path, next);
     } catch {
     }
   }
@@ -1133,12 +1819,12 @@ function gitInit(cwd, projectName) {
 }
 function resolveYarnBin(cwd) {
   try {
-    const yarnrc = (0, import_node_fs.readFileSync)((0, import_node_path8.join)(cwd, ".yarnrc.yml"), "utf8");
+    const yarnrc = (0, import_node_fs.readFileSync)((0, import_node_path9.join)(cwd, ".yarnrc.yml"), "utf8");
     const match = yarnrc.match(/^yarnPath:\s*(.+)$/m);
-    if (match?.[1]) return (0, import_node_path8.join)(cwd, match[1].trim());
+    if (match?.[1]) return (0, import_node_path9.join)(cwd, match[1].trim());
   } catch {
   }
-  return (0, import_node_path8.join)(cwd, ".yarn", "releases", "yarn-4.5.0.cjs");
+  return (0, import_node_path9.join)(cwd, ".yarn", "releases", "yarn-4.5.0.cjs");
 }
 function runInstall(cwd, pm) {
   if (pm === "yarn") {
@@ -1149,7 +1835,8 @@ function runInstall(cwd, pm) {
     (0, import_node_child_process.spawnSync)("pnpm", ["install"], { cwd, stdio: "inherit" });
   }
 }
-async function scaffold(opts, templatesDir) {
+async function scaffold(rawOpts, templatesDir) {
+  const opts = rawOpts.authProvider === "none" && rawOpts.example !== "none" ? { ...rawOpts, example: "none" } : rawOpts;
   await copyTree(templatesDir, opts.targetDir);
   await rewriteRootPackageJson(opts.targetDir, opts);
   if (opts.authProvider !== "none") await writeAuthEnv(opts.targetDir, opts);
@@ -1160,6 +1847,10 @@ async function scaffold(opts, templatesDir) {
   await writeRootEnv(opts.targetDir, opts);
   await selectClientTemplate(opts.targetDir, opts);
   await writeClientEnv(opts.targetDir);
+  if (opts.authProvider === "none") {
+    await removeAuthOnlyPaths(opts.targetDir);
+    await applyAuthNoneVariants(opts.targetDir, opts.ui);
+  }
   if (opts.upload === "none") await removeUploadStack(opts.targetDir);
   await cleanupUnusedFeatures(opts.targetDir, opts);
   await writeFeaturesWiring(opts.targetDir, opts);
@@ -1168,7 +1859,8 @@ async function scaffold(opts, templatesDir) {
     await cleanupUnusedAuth(opts.targetDir, opts.authProvider);
     await writeAuthProvider(opts.targetDir, opts.authProvider);
   } else {
-    await removeAuthStack(opts.targetDir);
+    await removeAuthTsconfigPaths(opts.targetDir);
+    await removeDockerComposeAuthService(opts.targetDir);
   }
   if (opts.upload !== "none") {
     await cleanupUnusedStorage(opts.targetDir, opts.upload);
@@ -1181,13 +1873,20 @@ async function scaffold(opts, templatesDir) {
     await writeDbProvider(opts.targetDir, opts.dbProvider);
   }
   await pruneRootProviderDeps(opts.targetDir, opts);
+  if (opts.authProvider === "none" && opts.upload === "none" && opts.dbProvider === "none" && opts.payment === "none") {
+    await removeStrategiesLib(opts.targetDir);
+  }
+  try {
+    await (0, import_promises9.rmdir)((0, import_node_path9.join)(opts.targetDir, "apps/microservices"));
+  } catch {
+  }
   await writeBlueprintJson(opts.targetDir, opts);
   await writeServiceBlueprints(opts.targetDir, opts);
   if (opts.packageManager === "yarn") {
-    await (0, import_promises8.writeFile)((0, import_node_path8.join)(opts.targetDir, "yarn.lock"), "");
+    await (0, import_promises9.writeFile)((0, import_node_path9.join)(opts.targetDir, "yarn.lock"), "");
   } else {
-    await (0, import_promises8.rm)((0, import_node_path8.join)(opts.targetDir, ".yarn"), { recursive: true, force: true });
-    await (0, import_promises8.rm)((0, import_node_path8.join)(opts.targetDir, ".yarnrc.yml"), { force: true });
+    await (0, import_promises9.rm)((0, import_node_path9.join)(opts.targetDir, ".yarn"), { recursive: true, force: true });
+    await (0, import_promises9.rm)((0, import_node_path9.join)(opts.targetDir, ".yarnrc.yml"), { force: true });
   }
   if (opts.packageManager === "pnpm") {
     await writePnpmWorkspace(opts.targetDir);
@@ -1201,13 +1900,13 @@ async function scaffold(opts, templatesDir) {
 
 // src/lib/prompts.ts
 var p = __toESM(require("@clack/prompts"), 1);
-var import_node_path9 = require("path");
-var import_promises10 = require("fs/promises");
 var import_node_path10 = require("path");
+var import_promises11 = require("fs/promises");
+var import_node_path11 = require("path");
 var import_node_url = require("url");
 
 // src/lib/config.ts
-var import_promises9 = require("fs/promises");
+var import_promises10 = require("fs/promises");
 var ConfigFileError = class extends Error {
   constructor(message) {
     super(message);
@@ -1278,7 +1977,7 @@ function validateConfig(raw) {
 async function loadConfig(filePath) {
   let raw;
   try {
-    raw = await (0, import_promises9.readFile)(filePath, "utf8");
+    raw = await (0, import_promises10.readFile)(filePath, "utf8");
   } catch {
     throw new ConfigFileError(`config file not found: ${filePath}`);
   }
@@ -1303,8 +2002,8 @@ function detectPackageManager() {
 }
 async function readSelfVersion() {
   try {
-    const here = (0, import_node_path10.dirname)((0, import_node_url.fileURLToPath)(importMetaUrl));
-    const pkgRaw = await (0, import_promises10.readFile)((0, import_node_path10.join)(here, "..", "package.json"), "utf8");
+    const here = (0, import_node_path11.dirname)((0, import_node_url.fileURLToPath)(importMetaUrl));
+    const pkgRaw = await (0, import_promises11.readFile)((0, import_node_path11.join)(here, "..", "package.json"), "utf8");
     const pkg = JSON.parse(pkgRaw);
     return pkg.version ?? null;
   } catch {
@@ -1512,7 +2211,7 @@ Re-run with @latest to refresh:
   }) === false;
   return {
     projectName,
-    targetDir: (0, import_node_path9.resolve)(cwd, projectName),
+    targetDir: (0, import_node_path10.resolve)(cwd, projectName),
     authProvider,
     dbProvider,
     upload,
@@ -1528,23 +2227,23 @@ Re-run with @latest to refresh:
 }
 
 // src/manifest/audit.ts
-var import_promises11 = require("fs/promises");
-var import_node_path11 = require("path");
+var import_promises12 = require("fs/promises");
+var import_node_path12 = require("path");
 var IGNORE_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", ".nx"]);
 async function walk(dir, out = []) {
-  const entries = await (0, import_promises11.readdir)(dir, { withFileTypes: true });
+  const entries = await (0, import_promises12.readdir)(dir, { withFileTypes: true });
   for (const e of entries) {
     if (e.isDirectory()) {
-      if (!IGNORE_DIRS.has(e.name)) await walk((0, import_node_path11.join)(dir, e.name), out);
+      if (!IGNORE_DIRS.has(e.name)) await walk((0, import_node_path12.join)(dir, e.name), out);
     } else if (/\.(ts|tsx|mjs)$/.test(e.name)) {
-      out.push((0, import_node_path11.join)(dir, e.name));
+      out.push((0, import_node_path12.join)(dir, e.name));
     }
   }
   return out;
 }
 async function tsconfigAliases(dir) {
   try {
-    const raw = await (0, import_promises11.readFile)((0, import_node_path11.join)(dir, "tsconfig.base.json"), "utf8");
+    const raw = await (0, import_promises12.readFile)((0, import_node_path12.join)(dir, "tsconfig.base.json"), "utf8");
     const aliases = /* @__PURE__ */ new Set();
     for (const m of raw.matchAll(/"(@icore\/[a-z0-9.-]+)"\s*:/g)) {
       if (m[1]) aliases.add(m[1]);
@@ -1562,7 +2261,7 @@ var PROVIDER_SDKS = {
 };
 async function readBlueprint(dir) {
   try {
-    return JSON.parse(await (0, import_promises11.readFile)((0, import_node_path11.join)(dir, "blueprint.json"), "utf8"));
+    return JSON.parse(await (0, import_promises12.readFile)((0, import_node_path12.join)(dir, "blueprint.json"), "utf8"));
   } catch {
     return null;
   }
@@ -1579,29 +2278,29 @@ function forbiddenFromBlueprint(bp) {
 }
 async function allPackageJsons(dir) {
   const out = [];
-  const root = (0, import_node_path11.join)(dir, "package.json");
+  const root = (0, import_node_path12.join)(dir, "package.json");
   out.push(root);
   async function walk2(d) {
     let entries;
     try {
-      entries = await (0, import_promises11.readdir)(d, { withFileTypes: true });
+      entries = await (0, import_promises12.readdir)(d, { withFileTypes: true });
     } catch {
       return;
     }
     for (const e of entries) {
       if (e.isDirectory()) {
-        if (!IGNORE_DIRS.has(e.name)) await walk2((0, import_node_path11.join)(d, e.name));
+        if (!IGNORE_DIRS.has(e.name)) await walk2((0, import_node_path12.join)(d, e.name));
       } else if (e.name === "package.json") {
-        out.push((0, import_node_path11.join)(d, e.name));
+        out.push((0, import_node_path12.join)(d, e.name));
       }
     }
   }
-  await walk2((0, import_node_path11.join)(dir, "apps"));
+  await walk2((0, import_node_path12.join)(dir, "apps"));
   return out;
 }
 async function depKeys(pkgPath) {
   try {
-    const pkg = JSON.parse(await (0, import_promises11.readFile)(pkgPath, "utf8"));
+    const pkg = JSON.parse(await (0, import_promises12.readFile)(pkgPath, "utf8"));
     return /* @__PURE__ */ new Set([
       ...Object.keys(pkg.dependencies ?? {}),
       ...Object.keys(pkg.devDependencies ?? {})
@@ -1615,7 +2314,7 @@ async function auditProject(dir, opts = {}) {
   const violations = [];
   const aliases = await tsconfigAliases(dir);
   for (const file of await walk(dir)) {
-    const src = await (0, import_promises11.readFile)(file, "utf8");
+    const src = await (0, import_promises12.readFile)(file, "utf8");
     for (const m of src.matchAll(ICORE_IMPORT)) {
       const alias = m[1];
       if (alias && !aliases.has(alias)) {