@idevconn/create-icore 0.9.3 → 0.10.0

package/dist/index.js

@@ -4,9 +4,9 @@ function pmRun(pm, script) {
 }
 
 // src/lib/scaffold.ts
-import { copyFile, mkdir as mkdir2, readdir as readdir2, readFile as readFile6, rmdir as rmdir2, stat, writeFile as writeFile8, rm as rm4 } from "fs/promises";
+import { copyFile, mkdir as mkdir3, readdir as readdir2, readFile as readFile7, rmdir as rmdir2, stat, writeFile as writeFile9, rm as rm5 } from "fs/promises";
 import { readFileSync } from "fs";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 import { spawnSync } from "child_process";
 
 // src/lib/scaffold-env.ts
@@ -172,6 +172,9 @@ async function writeGatewayEnv(targetDir, opts) {
   for (const prefix of ["AUTH", "UPLOAD", "NOTES", "PAYMENT"]) {
     next = uncommentTransportEnv(next, prefix, opts.transport);
   }
+  if (opts.authProvider === "none") {
+    next = next.split("\n").filter((line) => !line.startsWith("AUTH_") && !line.startsWith("# AUTH_")).join("\n");
+  }
   await writeFile(join(targetDir, "apps/api/.env"), next);
 }
 async function writeRootEnv(targetDir, opts) {
@@ -257,6 +260,7 @@ async function removeStrategiesLib(targetDir) {
   await rm(join2(targetDir, "libs/shared/src/strategies"), { recursive: true, force: true });
   await rm(join2(targetDir, "libs/shared/src/testing.ts"), { force: true });
   await rm(join2(targetDir, "libs/shared/src/transport.ts"), { force: true });
+  await rm(join2(targetDir, "libs/shared/src/__tests__/transport.unit.test.ts"), { force: true });
   const indexPath = join2(targetDir, "libs/shared/src/index.ts");
   try {
     const src = await readFile2(indexPath, "utf8");
@@ -275,122 +279,6 @@ async function removeStrategiesLib(targetDir) {
   } catch {
   }
 }
-async function removeAuthStack(targetDir) {
-  const rmPaths = [
-    "apps/microservices/auth",
-    "libs/auth-strategies",
-    "libs/auth-client",
-    "Dockerfile.ms-auth",
-    "apps/api/src/app/auth",
-    "apps/api/src/app/profile",
-    "apps/api/src/app/abilities",
-    "libs/shared/src/abilities",
-    "apps/client/src/components/auth",
-    "apps/client/src/routes/login.tsx",
-    "apps/client/src/routes/auth.callback.tsx",
-    "apps/client/src/routes/auth.oauth.callback.tsx",
-    "apps/client/src/routes/_dashboard/profile.tsx"
-  ];
-  for (const p2 of rmPaths) {
-    await rm(join2(targetDir, p2), { recursive: true, force: true });
-  }
-  const appModulePath = join2(targetDir, "apps/api/src/app/app.module.ts");
-  try {
-    const src = await readFile2(appModulePath, "utf8");
-    const next = src.replace(/^import \{ AuthModule \} from '\.\/auth\/auth\.module';\n/m, "").replace(/^import \{ ProfileModule \} from '\.\/profile\/profile\.module';\n/m, "").replace(/^import \{ AbilitiesModule \} from '\.\/abilities\/abilities\.module';\n/m, "").replace(/\bAuthModule,\s*/g, "").replace(/,\s*AuthModule\b/g, "").replace(/\bProfileModule,\s*/g, "").replace(/,\s*ProfileModule\b/g, "").replace(/\bAbilitiesModule,\s*/g, "").replace(/,\s*AbilitiesModule\b/g, "");
-    await writeFile2(appModulePath, next);
-  } catch {
-  }
-  const dashboardPath = join2(targetDir, "apps/client/src/routes/_dashboard.tsx");
-  try {
-    const src = await readFile2(dashboardPath, "utf8");
-    const next = src.replace(/^import \{ useAuthStore \} from '@icore\/template-shared';\n/m, "").replace(/, redirect/g, "").replace(/\n {2}beforeLoad: \(\) => \{[\s\S]*?\n {2}\},/m, "");
-    await writeFile2(dashboardPath, next);
-  } catch {
-  }
-  for (const alias of [
-    "@icore/auth-client",
-    "@icore/auth-supabase",
-    "@icore/auth-firebase",
-    "@icore/auth-mongodb"
-  ]) {
-    await stripTsconfigPath(targetDir, alias);
-  }
-  await stripDeps(join2(targetDir, "apps/api/package.json"), [
-    "@icore/auth-client",
-    "cookie-parser"
-  ]);
-  const gatewayMainPath = join2(targetDir, "apps/api/src/main.ts");
-  try {
-    const src = await readFile2(gatewayMainPath, "utf8");
-    const next = src.replace(/^import cookieParser from 'cookie-parser';\n/m, "").replace(/^\s*app\.use\(cookieParser\(\)\);\n/m, "");
-    await writeFile2(gatewayMainPath, next);
-  } catch {
-  }
-  const gatewayEnv = join2(targetDir, "apps/api/.env");
-  try {
-    const env = await readFile2(gatewayEnv, "utf8");
-    const next = env.split("\n").filter((line) => !line.startsWith("AUTH_") && !line.startsWith("# AUTH_")).join("\n");
-    await writeFile2(gatewayEnv, next);
-  } catch {
-  }
-  const composePath = join2(targetDir, "docker-compose.yml");
-  try {
-    const compose = await readFile2(composePath, "utf8");
-    const next = compose.replace(/\n {2}auth:[\s\S]+?(?=\n {2}\w|\nnetworks:)/m, "\n").replace(/\n {6}auth:\n {8}condition: service_started/g, "").replace(/\n {6}AUTH_TRANSPORT:[^\n]*/g, "").replace(/\n {6}AUTH_REDIS_URL:[^\n]*/g, "");
-    await writeFile2(composePath, next);
-  } catch {
-  }
-  for (const rel of ["libs/shared/src/index.ts", "libs/shared/src/client.ts"]) {
-    const sharedIndexPath = join2(targetDir, rel);
-    try {
-      const src = await readFile2(sharedIndexPath, "utf8");
-      await writeFile2(sharedIndexPath, src.replace(/^export \* from '\.\/abilities';\n?/m, ""));
-    } catch {
-    }
-  }
-  const routesIndexPath = join2(targetDir, "apps/client/src/routes/index.tsx");
-  try {
-    const src = await readFile2(routesIndexPath, "utf8");
-    await writeFile2(
-      routesIndexPath,
-      src.replace(/ctaHref="\/login"/, 'ctaHref="/dashboard"').replace(/ctaLabel="Log in →"/, 'ctaLabel="Dashboard \u2192"')
-    );
-  } catch {
-  }
-  const mainTsxPath = join2(targetDir, "apps/client/src/main.tsx");
-  try {
-    const src = await readFile2(mainTsxPath, "utf8");
-    const next = src.replace(/\n {2}onUnauthorized: \(\) => router\.navigate\(\{ to: '\/login' \}\),/, "").replace(/^\s*AbilityProvider,\n/m, "").replace(/^\s*<AbilityProvider>\n/m, "").replace(/^\s*<\/AbilityProvider>\n/m, "");
-    await writeFile2(mainTsxPath, next);
-  } catch {
-  }
-  await rm(join2(targetDir, "libs/template-shared/src/lib/abilities"), {
-    recursive: true,
-    force: true
-  });
-  const templateSharedIndexPath = join2(targetDir, "libs/template-shared/src/index.ts");
-  try {
-    const src = await readFile2(templateSharedIndexPath, "utf8");
-    await writeFile2(
-      templateSharedIndexPath,
-      src.replace(/^export \* from '\.\/lib\/abilities\/ability-provider\.js';\n/m, "")
-    );
-  } catch {
-  }
-  const headerPath = join2(targetDir, "apps/client/src/components/layout/LayoutHeader.tsx");
-  try {
-    const src = await readFile2(headerPath, "utf8");
-    await writeFile2(
-      headerPath,
-      src.replace(/^import \{ useTranslation \} from 'react-i18next';\n/m, "").replace(/^import \{ useNavigate \} from '@tanstack\/react-router';\n/m, "").replace(/^import \{ LogOut \} from 'lucide-react';\n/m, "").replace(/^import \{ Button \} from '\.\.\/ui\/button';\n/m, "").replace(
-        /import \{ useAuthStore, setStoredLocale, type IcoreLocale \} from '@icore\/template-shared';/,
-        "import { setStoredLocale, type IcoreLocale } from '@icore/template-shared';"
-      ).replace(/^ {2}const \{ t \} = useTranslation\(\);\n/m, "").replace(/^ {2}const navigate = useNavigate\(\);\n/m, "").replace(/^ {2}const user = useAuthStore\(\(s\) => s\.user\);\n/m, "").replace(/^ {2}const logout = useAuthStore\(\(s\) => s\.logout\);\n/m, "").replace(/\n {2}function handleLogout\(\) \{[\s\S]*?\n {2}\}\n(?=\n {2}return)/m, "\n").replace(/\n {8}<div className="hidden sm:flex[\s\S]*?\n {8}<\/div>\n/m, "\n").replace(/\n {8}<Button[\s\S]*?sm:hidden[\s\S]*?\n {8}<\/Button>\n/m, "\n")
-    );
-  } catch {
-  }
-}
 async function removeUploadStack(targetDir) {
   const paths = [
     "apps/microservices/upload",
@@ -432,9 +320,674 @@ async function removeUploadStack(targetDir) {
   }
 }
 
+// src/lib/scaffold-auth-none.ts
+import { mkdir, rm as rm2, readFile as readFile3, writeFile as writeFile3 } from "fs/promises";
+import { dirname, join as join3 } from "path";
+async function stripDeps2(pkgPath, names) {
+  try {
+    const raw = await readFile3(pkgPath, "utf8");
+    const pkg = JSON.parse(raw);
+    for (const n of names) {
+      if (pkg.dependencies) delete pkg.dependencies[n];
+      if (pkg.devDependencies) delete pkg.devDependencies[n];
+    }
+    await writeFile3(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
+  } catch {
+  }
+}
+var AUTH_ONLY_PATHS = [
+  "apps/microservices/auth",
+  "libs/auth-strategies",
+  "libs/auth-client",
+  "Dockerfile.ms-auth",
+  "apps/api/src/app/auth",
+  "apps/api/src/app/profile",
+  "apps/api/src/app/abilities",
+  "libs/shared/src/abilities",
+  "apps/client/src/components/auth",
+  "apps/client/src/routes/login.tsx",
+  "apps/client/src/routes/auth.callback.tsx",
+  "apps/client/src/routes/auth.oauth.callback.tsx",
+  "apps/client/src/routes/_dashboard/profile.tsx",
+  "libs/template-shared/src/lib/abilities"
+];
+async function removeAuthOnlyPaths(targetDir) {
+  for (const p2 of AUTH_ONLY_PATHS) {
+    await rm2(join3(targetDir, p2), { recursive: true, force: true });
+  }
+  await stripDeps2(join3(targetDir, "apps/api/package.json"), [
+    "@icore/auth-client",
+    "cookie-parser"
+  ]);
+}
+async function stripTsconfigPath2(targetDir, alias) {
+  const tsconfigPath = join3(targetDir, "tsconfig.base.json");
+  try {
+    const src = await readFile3(tsconfigPath, "utf8");
+    const escaped = alias.replace(/[@/]/g, (c) => c === "@" ? "@" : "\\/");
+    const pretty = src.replace(new RegExp(`^\\s*"${escaped}": \\[[^\\]]*\\],?\\n`, "m"), "");
+    if (pretty !== src) {
+      await writeFile3(tsconfigPath, pretty);
+      return;
+    }
+    const parsed = JSON.parse(src);
+    if (parsed.compilerOptions?.paths) delete parsed.compilerOptions.paths[alias];
+    await writeFile3(tsconfigPath, JSON.stringify(parsed));
+  } catch {
+  }
+}
+async function removeAuthTsconfigPaths(targetDir) {
+  for (const alias of [
+    "@icore/auth-client",
+    "@icore/auth-supabase",
+    "@icore/auth-firebase",
+    "@icore/auth-mongodb"
+  ]) {
+    await stripTsconfigPath2(targetDir, alias);
+  }
+}
+async function removeDockerComposeAuthService(targetDir) {
+  const composePath = join3(targetDir, "docker-compose.yml");
+  try {
+    const compose = await readFile3(composePath, "utf8");
+    const next = compose.replace(/\n {2}auth:[\s\S]+?(?=\n {2}\w|\nnetworks:)/m, "\n").replace(/\n {6}auth:\n {8}condition: service_started/g, "").replace(/\n {6}AUTH_TRANSPORT:[^\n]*/g, "").replace(/\n {6}AUTH_REDIS_URL:[^\n]*/g, "");
+    await writeFile3(composePath, next);
+  } catch {
+  }
+}
+var GATEWAY_MAIN_TS = `import { Logger } from '@nestjs/common';
+import { NestFactory } from '@nestjs/core';
+import { NestExpressApplication } from '@nestjs/platform-express';
+import { DocumentBuilder, SwaggerModule } from '@nestjs/swagger';
+import { formatGatewayBanner } from '@icore/shared';
+import { AppModule } from './app/app.module';
+import { GATEWAY_SERVICES } from './app/gateway-services';
+import pkg from '@icore/package.json';
+
+const DEFAULT_PORT = 3001;
+
+async function bootstrap() {
+  const app = await NestFactory.create<NestExpressApplication>(AppModule);
+  app.setGlobalPrefix('api');
+
+  const swaggerConfig = new DocumentBuilder()
+    .setTitle('iCore API')
+    .setDescription('iCore Gateway HTTP surface')
+    .setVersion(pkg.version)
+    .addBearerAuth()
+    .build();
+  const document = SwaggerModule.createDocument(app, swaggerConfig);
+  SwaggerModule.setup('api/docs', app, document);
+
+  const port = Number(process.env.API_PORT ?? DEFAULT_PORT);
+  await app.listen(port);
+}
+
+bootstrap()
+  .then(() => {
+    const origin = process.env.API_ORIGIN ?? 'http://localhost';
+    const port = Number(process.env.API_PORT ?? DEFAULT_PORT);
+    new Logger('API-Bootstrap').log(
+      formatGatewayBanner({ port, origin, services: GATEWAY_SERVICES }),
+    );
+  })
+  .catch((err) => {
+    new Logger('API-Bootstrap').error(
+      'Gateway bootstrap failed',
+      err instanceof Error ? err.stack : err,
+    );
+    process.exit(1);
+  });
+`;
+var GATEWAY_APP_MODULE_TS = `import { join } from 'node:path';
+import { Module } from '@nestjs/common';
+import { ConfigModule } from '@nestjs/config';
+import { ThrottlerModule, seconds } from '@nestjs/throttler';
+import { StorageModule } from './storage/storage.module';
+import { FeaturesModule } from './features.module';
+
+@Module({
+  imports: [
+    ConfigModule.forRoot({
+      isGlobal: true,
+      envFilePath: [join(process.cwd(), 'apps/api/.env'), join(process.cwd(), '.env')],
+    }),
+    ThrottlerModule.forRoot([{ name: 'auth-burst', ttl: seconds(60), limit: 10 }]),
+    StorageModule,
+    FeaturesModule,
+  ],
+})
+export class AppModule {}
+`;
+var SHARED_CLIENT_TS = `// Browser-safe subset of @icore/shared.
+// Import from '@icore/shared/client' in client-side code to avoid pulling
+// in NestJS / Node.js-only modules (transport, strategies, contracts).
+export * from './types';
+`;
+var SHARED_INDEX_TS = `export * from './env';
+export * from './bootstrap';
+export * from './jobs';
+export * from './strategies';
+export * from './transport';
+export * from './types';
+`;
+var TEMPLATE_SHARED_INDEX_TS = `export * from './lib/api/create-api.js';
+export * from './lib/stores/auth.store.js';
+export * from './lib/stores/loading.store.js';
+export * from './lib/i18n/create-i18n.js';
+export * from './lib/i18n/keys.js';
+export * from './lib/notify/use-notify.js';
+export * from './lib/draft/index.js';
+export * from './lib/landing/LandingPage.js';
+export * from './lib/stores/theme.store.js';
+`;
+var SHADCN_MAIN_TSX = `import './globals.css';
+import { StrictMode } from 'react';
+import { createRoot } from 'react-dom/client';
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
+import { RouterProvider, createRouter } from '@tanstack/react-router';
+import {
+  createIcoreApi,
+  createIcoreI18n,
+  ICORE_LOCALES,
+  useThemeStore,
+} from '@icore/template-shared';
+import { I18nextProvider } from 'react-i18next';
+import { Toaster } from 'sonner';
+import { routeTree } from './routeTree.gen';
+import { wireShadcnNotifier } from './lib/notify';
+
+const queryClient = new QueryClient({
+  defaultOptions: { queries: { retry: false, refetchOnWindowFocus: false } },
+});
+
+const router = createRouter({ routeTree, context: { queryClient } });
+
+declare module '@tanstack/react-router' {
+  interface Register {
+    router: typeof router;
+  }
+}
+
+const i18n = createIcoreI18n({ resources: ICORE_LOCALES });
+
+// Single shared API instance \u2014 used by every query in src/queries/
+export const api = createIcoreApi({
+  baseUrl: import.meta.env.VITE_API_URL ?? '/api',
+});
+
+wireShadcnNotifier();
+
+// Apply the theme class before React mounts so the first paint is correct
+const applyTheme = (mode: 'light' | 'dark') => {
+  document.documentElement.classList.toggle('dark', mode === 'dark');
+};
+applyTheme(useThemeStore.getState().mode);
+useThemeStore.subscribe((s) => applyTheme(s.mode));
+
+createRoot(document.getElementById('root')!).render(
+  <StrictMode>
+    <I18nextProvider i18n={i18n}>
+      <QueryClientProvider client={queryClient}>
+        <RouterProvider router={router} />
+        <Toaster richColors />
+      </QueryClientProvider>
+    </I18nextProvider>
+  </StrictMode>,
+);
+`;
+var SHADCN_DASHBOARD_TSX = `import { createFileRoute, Outlet } from '@tanstack/react-router';
+import { MainLayout } from '../layouts/MainLayout';
+
+export const Route = createFileRoute('/_dashboard')({
+  component: () => (
+    <MainLayout>
+      <Outlet />
+    </MainLayout>
+  ),
+});
+`;
+var SHADCN_INDEX_TSX = `import { createFileRoute } from '@tanstack/react-router';
+import { LandingPage } from '@icore/template-shared';
+
+// All version strings are injected at build time by vite.config.mts
+// (reads root package.json via fs.readFileSync so they stay accurate
+// even when workspace packages are bumped independently).
+const APP_VERSION = (import.meta.env.VITE_APP_VERSION as string | undefined) ?? '0.0.0-dev';
+
+export const Route = createFileRoute('/')({
+  component: () => (
+    <LandingPage
+      coreVersion={APP_VERSION}
+      uiLibrary="shadcn"
+      deps={[
+        { name: 'react', version: (import.meta.env.VITE_DEP_REACT as string) ?? '?' },
+        { name: 'vite', version: (import.meta.env.VITE_DEP_VITE as string) ?? '?' },
+        { name: 'tailwindcss', version: (import.meta.env.VITE_DEP_TAILWINDCSS as string) ?? '?' },
+        {
+          name: '@tanstack/react-router',
+          version: (import.meta.env.VITE_DEP_TANSTACK_ROUTER as string) ?? '?',
+        },
+        {
+          name: '@tanstack/react-query',
+          version: (import.meta.env.VITE_DEP_TANSTACK_QUERY as string) ?? '?',
+        },
+        { name: 'zustand', version: (import.meta.env.VITE_DEP_ZUSTAND as string) ?? '?' },
+        { name: '@casl/ability', version: (import.meta.env.VITE_DEP_CASL as string) ?? '?' },
+      ]}
+      ctaHref="/dashboard"
+      ctaLabel="Dashboard \u2192"
+    />
+  ),
+});
+`;
+var SHADCN_LAYOUT_HEADER_TSX = `import { setStoredLocale, type IcoreLocale } from '@icore/template-shared';
+import { ThemeToggle } from '../ThemeToggle';
+
+const LOCALES: { code: IcoreLocale; label: string }[] = [
+  { code: 'en', label: 'EN' },
+  { code: 'ru', label: 'RU' },
+  { code: 'he', label: 'HE' },
+];
+
+export function LayoutHeader() {
+  function handleLocale(code: IcoreLocale) {
+    setStoredLocale(code);
+    window.location.reload();
+  }
+
+  return (
+    <header className="sticky top-0 z-30 flex h-14 items-center justify-between border-b border-[--color-border] bg-[--color-background]/80 px-4 backdrop-blur-sm">
+      <div className="flex items-center gap-2">
+        <div className="flex h-6 w-6 items-center justify-center rounded bg-[--color-primary]">
+          <span className="text-xs font-bold text-[--color-primary-foreground]">i</span>
+        </div>
+        <span className="text-sm font-semibold tracking-tight">iCore</span>
+      </div>
+
+      <div className="flex items-center gap-1">
+        <div className="flex items-center rounded-md border border-[--color-border] overflow-hidden mr-2">
+          {LOCALES.map(({ code, label }) => (
+            <button
+              key={code}
+              type="button"
+              onClick={() => handleLocale(code)}
+              className="px-2.5 py-1 text-xs text-[--color-muted-foreground] hover:bg-[--color-muted] hover:text-[--color-foreground] transition-colors cursor-pointer"
+            >
+              {label}
+            </button>
+          ))}
+        </div>
+
+        <ThemeToggle />
+      </div>
+    </header>
+  );
+}
+`;
+var ANTD_MAIN_TSX = `import './globals.less';
+import { StrictMode } from 'react';
+import { createRoot } from 'react-dom/client';
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
+import { RouterProvider, createRouter } from '@tanstack/react-router';
+import { ConfigProvider, App as AntApp, theme } from 'antd';
+import { I18nextProvider } from 'react-i18next';
+import {
+  createIcoreApi,
+  createIcoreI18n,
+  ICORE_LOCALES,
+  useThemeStore,
+} from '@icore/template-shared';
+import { routeTree } from './routeTree.gen';
+
+const queryClient = new QueryClient({
+  defaultOptions: { queries: { retry: false, refetchOnWindowFocus: false } },
+});
+
+const router = createRouter({ routeTree, context: { queryClient } });
+
+declare module '@tanstack/react-router' {
+  interface Register {
+    router: typeof router;
+  }
+}
+
+const i18n = createIcoreI18n({ resources: ICORE_LOCALES });
+
+// Single shared API instance \u2014 used by every query in src/queries/
+export const api = createIcoreApi({
+  baseUrl: import.meta.env.VITE_API_URL ?? '/api',
+});
+
+function Root() {
+  const mode = useThemeStore((s) => s.mode);
+  const algorithm = mode === 'dark' ? theme.darkAlgorithm : theme.defaultAlgorithm;
+  return (
+    <ConfigProvider theme={{ algorithm, token: { colorPrimary: '#22c55e', colorLink: '#22c55e' } }}>
+      <AntApp>
+        <QueryClientProvider client={queryClient}>
+          <RouterProvider router={router} />
+        </QueryClientProvider>
+      </AntApp>
+    </ConfigProvider>
+  );
+}
+
+createRoot(document.getElementById('root')!).render(
+  <StrictMode>
+    <I18nextProvider i18n={i18n}>
+      <Root />
+    </I18nextProvider>
+  </StrictMode>,
+);
+`;
+var ANTD_DASHBOARD_TSX = `import { createFileRoute, Outlet } from '@tanstack/react-router';
+import { MainLayout } from '../layouts/MainLayout';
+
+export const Route = createFileRoute('/_dashboard')({
+  component: () => (
+    <MainLayout>
+      <Outlet />
+    </MainLayout>
+  ),
+});
+`;
+var ANTD_INDEX_TSX = `import { createFileRoute, Link } from '@tanstack/react-router';
+import { LandingPage } from '@icore/template-shared';
+
+// All version strings are injected at build time by vite.config.mts
+// (reads root package.json via fs.readFileSync so they stay accurate
+// even when workspace packages are bumped independently).
+const APP_VERSION = (import.meta.env.VITE_APP_VERSION as string | undefined) ?? '0.0.0-dev';
+
+export const Route = createFileRoute('/')({
+  component: () => (
+    <LandingPage
+      coreVersion={APP_VERSION}
+      uiLibrary="antd"
+      deps={[
+        { name: 'react', version: (import.meta.env.VITE_DEP_REACT as string) ?? '?' },
+        { name: 'antd', version: (import.meta.env.VITE_DEP_ANTD as string) ?? '?' },
+        { name: 'vite', version: (import.meta.env.VITE_DEP_VITE as string) ?? '?' },
+        {
+          name: '@tanstack/react-router',
+          version: (import.meta.env.VITE_DEP_TANSTACK_ROUTER as string) ?? '?',
+        },
+        {
+          name: '@tanstack/react-query',
+          version: (import.meta.env.VITE_DEP_TANSTACK_QUERY as string) ?? '?',
+        },
+        { name: 'zustand', version: (import.meta.env.VITE_DEP_ZUSTAND as string) ?? '?' },
+        { name: '@casl/ability', version: (import.meta.env.VITE_DEP_CASL as string) ?? '?' },
+      ]}
+      ctaHref="/dashboard"
+      ctaLabel={<Link to="/dashboard">Dashboard \u2192</Link>}
+    />
+  ),
+});
+`;
+var ANTD_LAYOUT_HEADER_TSX = `import { Button, Layout, Space } from 'antd';
+import { setStoredLocale, type IcoreLocale } from '@icore/template-shared';
+import { ThemeToggle } from '../ThemeToggle';
+
+const APP_VERSION = (import.meta.env.VITE_APP_VERSION as string | undefined) ?? '0.0.0-dev';
+
+const LOCALES: { code: IcoreLocale; label: string }[] = [
+  { code: 'en', label: 'EN' },
+  { code: 'ru', label: 'RU' },
+  { code: 'he', label: 'HE' },
+];
+
+export function LayoutHeader() {
+  function handleLocale(code: IcoreLocale) {
+    setStoredLocale(code);
+    window.location.reload();
+  }
+
+  return (
+    <Layout.Header
+      style={{
+        display: 'flex',
+        alignItems: 'center',
+        justifyContent: 'space-between',
+        padding: '0 24px',
+      }}
+    >
+      <Space>
+        <span style={{ color: '#fff', fontWeight: 600, fontSize: 16 }}>iCore</span>
+        <span
+          style={{
+            color: 'rgba(255,255,255,0.45)',
+            fontSize: 11,
+            background: 'rgba(255,255,255,0.1)',
+            padding: '1px 6px',
+            borderRadius: 4,
+          }}
+        >
+          v{APP_VERSION}
+        </span>
+      </Space>
+
+      <Space size="middle">
+        <Space size={4}>
+          {LOCALES.map(({ code, label }) => (
+            <Button
+              key={code}
+              size="small"
+              type="text"
+              style={{ color: 'rgba(255,255,255,0.65)' }}
+              onClick={() => handleLocale(code)}
+            >
+              {label}
+            </Button>
+          ))}
+        </Space>
+
+        <ThemeToggle />
+      </Space>
+    </Layout.Header>
+  );
+}
+`;
+var MUI_MAIN_TSX = `import './globals.css';
+import { StrictMode, useMemo } from 'react';
+import { createRoot } from 'react-dom/client';
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
+import { RouterProvider, createRouter } from '@tanstack/react-router';
+import { CssBaseline, ThemeProvider, createTheme } from '@mui/material';
+import { I18nextProvider } from 'react-i18next';
+import {
+  createIcoreApi,
+  createIcoreI18n,
+  ICORE_LOCALES,
+  useThemeStore,
+} from '@icore/template-shared';
+import { routeTree } from './routeTree.gen';
+import { wireMuiNotifier } from './lib/notify';
+
+const queryClient = new QueryClient({
+  defaultOptions: { queries: { retry: false, refetchOnWindowFocus: false } },
+});
+
+const router = createRouter({ routeTree, context: { queryClient } });
+
+declare module '@tanstack/react-router' {
+  interface Register {
+    router: typeof router;
+  }
+}
+
+const i18n = createIcoreI18n({ resources: ICORE_LOCALES });
+
+export const api = createIcoreApi({
+  baseUrl: import.meta.env.VITE_API_URL ?? '/api',
+});
+
+wireMuiNotifier();
+
+function Root() {
+  const mode = useThemeStore((s) => s.mode);
+  const theme = useMemo(
+    () => createTheme({ palette: { mode, primary: { main: '#22c55e' } } }),
+    [mode],
+  );
+  return (
+    <ThemeProvider theme={theme}>
+      <CssBaseline />
+      <QueryClientProvider client={queryClient}>
+        <RouterProvider router={router} />
+      </QueryClientProvider>
+    </ThemeProvider>
+  );
+}
+
+createRoot(document.getElementById('root')!).render(
+  <StrictMode>
+    <I18nextProvider i18n={i18n}>
+      <Root />
+    </I18nextProvider>
+  </StrictMode>,
+);
+`;
+var MUI_DASHBOARD_TSX = `import { createFileRoute, Outlet } from '@tanstack/react-router';
+import { MainLayout } from '../layouts/MainLayout';
+
+export const Route = createFileRoute('/_dashboard')({
+  component: () => (
+    <MainLayout>
+      <Outlet />
+    </MainLayout>
+  ),
+});
+`;
+var MUI_INDEX_TSX = `import { createFileRoute, Link } from '@tanstack/react-router';
+import { LandingPage } from '@icore/template-shared';
+
+// All version strings are injected at build time by vite.config.mts
+// (reads root package.json via fs.readFileSync so they stay accurate
+// even when workspace packages are bumped independently).
+const APP_VERSION = (import.meta.env.VITE_APP_VERSION as string | undefined) ?? '0.0.0-dev';
+
+export const Route = createFileRoute('/')({
+  component: () => (
+    <LandingPage
+      coreVersion={APP_VERSION}
+      uiLibrary="mui"
+      deps={[
+        { name: 'react', version: (import.meta.env.VITE_DEP_REACT as string) ?? '?' },
+        { name: '@mui/material', version: (import.meta.env.VITE_DEP_MUI as string) ?? '?' },
+        { name: 'vite', version: (import.meta.env.VITE_DEP_VITE as string) ?? '?' },
+        {
+          name: '@tanstack/react-router',
+          version: (import.meta.env.VITE_DEP_TANSTACK_ROUTER as string) ?? '?',
+        },
+        {
+          name: '@tanstack/react-query',
+          version: (import.meta.env.VITE_DEP_TANSTACK_QUERY as string) ?? '?',
+        },
+        { name: 'zustand', version: (import.meta.env.VITE_DEP_ZUSTAND as string) ?? '?' },
+        { name: '@casl/ability', version: (import.meta.env.VITE_DEP_CASL as string) ?? '?' },
+      ]}
+      ctaHref="/dashboard"
+      ctaLabel={<Link to="/dashboard">Dashboard \u2192</Link>}
+    />
+  ),
+});
+`;
+var MUI_LAYOUT_HEADER_TSX = `import { AppBar, Box, Button, Toolbar, Typography } from '@mui/material';
+import { useTranslation } from 'react-i18next';
+import { setStoredLocale, type IcoreLocale } from '@icore/template-shared';
+import { ThemeToggle } from '../ThemeToggle';
+
+const APP_VERSION = (import.meta.env.VITE_APP_VERSION as string | undefined) ?? '0.0.0-dev';
+
+const LOCALES: { code: IcoreLocale; label: string }[] = [
+  { code: 'en', label: 'EN' },
+  { code: 'ru', label: 'RU' },
+  { code: 'he', label: 'HE' },
+];
+
+export function LayoutHeader() {
+  const { i18n } = useTranslation();
+  const currentLocale = i18n.language as IcoreLocale;
+
+  function handleLocale(code: IcoreLocale) {
+    setStoredLocale(code);
+    window.location.reload();
+  }
+
+  return (
+    <AppBar position="sticky" color="default" elevation={1}>
+      <Toolbar sx={{ justifyContent: 'space-between' }}>
+        <Typography variant="h6" component="div" fontWeight={600}>
+          iCore{' '}
+          <span style={{ opacity: 0.6, fontSize: '0.75em', fontWeight: 400 }}>v{APP_VERSION}</span>
+        </Typography>
+
+        <Box sx={{ display: 'flex', alignItems: 'center', gap: 1 }}>
+          <Box sx={{ display: 'flex', gap: 0.5 }}>
+            {LOCALES.map(({ code, label }) => (
+              <Button
+                key={code}
+                size="small"
+                variant={currentLocale === code ? 'contained' : 'text'}
+                onClick={() => handleLocale(code)}
+              >
+                {label}
+              </Button>
+            ))}
+          </Box>
+
+          <ThemeToggle />
+        </Box>
+      </Toolbar>
+    </AppBar>
+  );
+}
+`;
+var COMMON_VARIANTS = {
+  "apps/api/src/main.ts": GATEWAY_MAIN_TS,
+  "apps/api/src/app/app.module.ts": GATEWAY_APP_MODULE_TS,
+  "libs/shared/src/client.ts": SHARED_CLIENT_TS,
+  "libs/shared/src/index.ts": SHARED_INDEX_TS,
+  "libs/template-shared/src/index.ts": TEMPLATE_SHARED_INDEX_TS
+};
+var UI_VARIANTS = {
+  shadcn: {
+    "apps/client/src/main.tsx": SHADCN_MAIN_TSX,
+    "apps/client/src/routes/_dashboard.tsx": SHADCN_DASHBOARD_TSX,
+    "apps/client/src/routes/index.tsx": SHADCN_INDEX_TSX,
+    "apps/client/src/components/layout/LayoutHeader.tsx": SHADCN_LAYOUT_HEADER_TSX
+  },
+  antd: {
+    "apps/client/src/main.tsx": ANTD_MAIN_TSX,
+    "apps/client/src/routes/_dashboard.tsx": ANTD_DASHBOARD_TSX,
+    "apps/client/src/routes/index.tsx": ANTD_INDEX_TSX,
+    "apps/client/src/components/layout/LayoutHeader.tsx": ANTD_LAYOUT_HEADER_TSX
+  },
+  mui: {
+    "apps/client/src/main.tsx": MUI_MAIN_TSX,
+    "apps/client/src/routes/_dashboard.tsx": MUI_DASHBOARD_TSX,
+    "apps/client/src/routes/index.tsx": MUI_INDEX_TSX,
+    "apps/client/src/components/layout/LayoutHeader.tsx": MUI_LAYOUT_HEADER_TSX
+  }
+};
+async function applyAuthNoneVariants(targetDir, ui) {
+  const uiFiles = UI_VARIANTS[ui] ?? UI_VARIANTS["shadcn"];
+  const all = { ...COMMON_VARIANTS, ...uiFiles };
+  for (const [rel, content] of Object.entries(all)) {
+    const dest = join3(targetDir, rel);
+    try {
+      await mkdir(dirname(dest), { recursive: true });
+      await writeFile3(dest, content);
+    } catch {
+    }
+  }
+}
+
 // src/manifest/wire-features.ts
-import { readFile as readFile4, writeFile as writeFile4, rm as rm3, rmdir, unlink } from "fs/promises";
-import { join as join4 } from "path";
+import { readFile as readFile5, writeFile as writeFile5, rm as rm4, rmdir, unlink } from "fs/promises";
+import { join as join5 } from "path";
 
 // src/manifest/index.ts
 var EMPTY = { libDirs: [], deps: {}, tsPaths: {} };
@@ -594,8 +1147,8 @@ var MANIFEST = {
 };
 
 // src/manifest/wire-provider.ts
-import { readFile as readFile3, writeFile as writeFile3, rm as rm2 } from "fs/promises";
-import { join as join3 } from "path";
+import { readFile as readFile4, writeFile as writeFile4, rm as rm3 } from "fs/promises";
+import { join as join4 } from "path";
 async function writeProvider(targetDir, axis, provider) {
   const nestModule = axis.section[provider]?.nestModule;
   if (!nestModule) throw new Error(`provider "${provider}" has no nestModule in the manifest`);
@@ -606,27 +1159,27 @@ const ENV_PATH = '${axis.envPath}';
 
 export const ${axis.exportConst} = ${symbol}.forRoot(ENV_PATH);
 `;
-  await writeFile3(join3(targetDir, axis.providerFile), content);
+  await writeFile4(join4(targetDir, axis.providerFile), content);
 }
 async function stripJsonKeys(path, drop) {
   try {
-    const pkg = JSON.parse(await readFile3(path, "utf8"));
+    const pkg = JSON.parse(await readFile4(path, "utf8"));
     for (const field of ["dependencies", "devDependencies"]) {
       const deps = pkg[field];
       if (!deps) continue;
       for (const k of Object.keys(deps)) if (drop(k)) delete deps[k];
     }
-    await writeFile3(path, JSON.stringify(pkg, null, 2) + "\n");
+    await writeFile4(path, JSON.stringify(pkg, null, 2) + "\n");
   } catch {
   }
 }
 async function stripTsconfigKeys(targetDir, aliases) {
-  const path = join3(targetDir, "tsconfig.base.json");
+  const path = join4(targetDir, "tsconfig.base.json");
   try {
-    const parsed = JSON.parse(await readFile3(path, "utf8"));
+    const parsed = JSON.parse(await readFile4(path, "utf8"));
     const paths = parsed.compilerOptions?.paths;
     if (paths) for (const a of aliases) delete paths[a];
-    await writeFile3(path, JSON.stringify(parsed, null, 2) + "\n");
+    await writeFile4(path, JSON.stringify(parsed, null, 2) + "\n");
   } catch {
   }
 }
@@ -635,10 +1188,10 @@ async function cleanupUnusedAxis(targetDir, axis, chosen) {
     if (provider === chosen) continue;
     const unit = axis.section[provider];
     for (const dir of unit.libDirs)
-      await rm2(join3(targetDir, dir), { recursive: true, force: true });
-    for (const t of unit.appTests ?? []) await rm2(join3(targetDir, t), { force: true });
+      await rm3(join4(targetDir, dir), { recursive: true, force: true });
+    for (const t of unit.appTests ?? []) await rm3(join4(targetDir, t), { force: true });
     const dropKeys = /* @__PURE__ */ new Set([...Object.keys(unit.tsPaths), ...Object.keys(unit.deps)]);
-    await stripJsonKeys(join3(targetDir, axis.msPackageJson), (k) => dropKeys.has(k));
+    await stripJsonKeys(join4(targetDir, axis.msPackageJson), (k) => dropKeys.has(k));
     await stripTsconfigKeys(targetDir, Object.keys(unit.tsPaths));
   }
 }
@@ -667,7 +1220,7 @@ async function writeFeaturesWiring(targetDir, opts) {
 })
 export class FeaturesModule {}
 `;
-  await writeFile4(join4(targetDir, FEATURES_MODULE), featuresModule);
+  await writeFile5(join5(targetDir, FEATURES_MODULE), featuresModule);
   const services = [];
   if (opts.authProvider !== "none") services.push({ name: "auth", prefix: "AUTH" });
   if (opts.upload !== "none") services.push({ name: "upload", prefix: "UPLOAD" });
@@ -681,14 +1234,14 @@ export const GATEWAY_SERVICES = [
 ${entries}
 ];
 `;
-  await writeFile4(join4(targetDir, GATEWAY_SERVICES), gatewayServices);
+  await writeFile5(join5(targetDir, GATEWAY_SERVICES), gatewayServices);
 }
 async function stripJobsDockerCompose(targetDir) {
-  const composePath = join4(targetDir, "docker-compose.yml");
+  const composePath = join5(targetDir, "docker-compose.yml");
   try {
-    const compose = await readFile4(composePath, "utf8");
+    const compose = await readFile5(composePath, "utf8");
     const next = compose.replace(/\n {2}jobs:[\s\S]+?(?=\n {2}\w+:|\nnetworks:)/m, "\n").replace(/\n {6}jobs:\n {8}condition: service_started/g, "").replace(/\n {6}JOBS_REDIS_URL:[^\n]*/g, "");
-    await writeFile4(composePath, next);
+    await writeFile5(composePath, next);
   } catch {
   }
 }
@@ -698,34 +1251,38 @@ async function cleanupUnusedFeatures(targetDir, opts) {
     if (chosen.has(key)) continue;
     const unit = FEATURES[key];
     for (const dir of unit.libDirs)
-      await rm3(join4(targetDir, dir), { recursive: true, force: true });
+      await rm4(join5(targetDir, dir), { recursive: true, force: true });
     const dropKeys = /* @__PURE__ */ new Set([...Object.keys(unit.tsPaths), ...Object.keys(unit.deps)]);
-    await stripJsonKeys(join4(targetDir, API_PKG), (k) => dropKeys.has(k));
+    await stripJsonKeys(join5(targetDir, API_PKG), (k) => dropKeys.has(k));
     await stripTsconfigKeys(targetDir, Object.keys(unit.tsPaths));
     if (unit.gatewayService) await stripGatewayTransport(targetDir, unit.gatewayService.prefix);
     if (unit.dockerService === "jobs") await stripJobsDockerCompose(targetDir);
     if (key === "jobs") {
       try {
-        await unlink(join4(targetDir, "libs/shared/src/jobs.ts"));
+        await unlink(join5(targetDir, "libs/shared/src/jobs.ts"));
       } catch {
       }
-      const sharedIdx = join4(targetDir, "libs/shared/src/index.ts");
       try {
-        const src = await readFile4(sharedIdx, "utf8");
-        await writeFile4(sharedIdx, src.replace(/^export \* from '\.\/jobs';\n/m, ""));
+        await unlink(join5(targetDir, "libs/shared/src/__tests__/jobs.unit.test.ts"));
+      } catch {
+      }
+      const sharedIdx = join5(targetDir, "libs/shared/src/index.ts");
+      try {
+        const src = await readFile5(sharedIdx, "utf8");
+        await writeFile5(sharedIdx, src.replace(/^export \* from '\.\/jobs';\n/m, ""));
       } catch {
       }
     }
   }
   try {
-    await rmdir(join4(targetDir, "apps/client/src/queries"));
+    await rmdir(join5(targetDir, "apps/client/src/queries"));
   } catch {
   }
 }
 
 // src/manifest/wire-client.ts
-import { writeFile as writeFile5 } from "fs/promises";
-import { join as join5 } from "path";
+import { writeFile as writeFile6 } from "fs/promises";
+import { join as join6 } from "path";
 var NAV_CONFIG_FILE = "apps/client/src/nav.config.ts";
 var BASE_NAV = [
   { to: "/dashboard", labelKey: "nav.dashboard", iconName: "dashboard", exact: true }
@@ -763,12 +1320,12 @@ export const NAV_CONFIG: NavItem[] = [
 ` + entries.map(renderEntry).join("\n") + `
 ];
 `;
-  await writeFile5(join5(targetDir, NAV_CONFIG_FILE), content);
+  await writeFile6(join6(targetDir, NAV_CONFIG_FILE), content);
 }
 
 // src/manifest/blueprint.ts
-import { writeFile as writeFile6 } from "fs/promises";
-import { join as join6 } from "path";
+import { writeFile as writeFile7 } from "fs/promises";
+import { join as join7 } from "path";
 async function writeBlueprintJson(targetDir, opts) {
   const blueprint = {
     schemaVersion: 1,
@@ -783,10 +1340,10 @@ async function writeBlueprintJson(targetDir, opts) {
     transport: opts.transport,
     packageManager: opts.packageManager
   };
-  await writeFile6(join6(targetDir, "blueprint.json"), JSON.stringify(blueprint, null, 2) + "\n");
+  await writeFile7(join7(targetDir, "blueprint.json"), JSON.stringify(blueprint, null, 2) + "\n");
 }
 async function writeJson(targetDir, rel, data) {
-  await writeFile6(join6(targetDir, rel, "blueprint.json"), JSON.stringify(data, null, 2) + "\n");
+  await writeFile7(join7(targetDir, rel, "blueprint.json"), JSON.stringify(data, null, 2) + "\n");
 }
 async function writeServiceBlueprints(targetDir, opts) {
   const t = opts.transport;
@@ -880,11 +1437,11 @@ var writeDbProvider = (targetDir, provider) => writeProvider(targetDir, DB, prov
 var cleanupUnusedDb = (targetDir, chosen) => cleanupUnusedAxis(targetDir, DB, chosen);
 
 // src/lib/scaffold-pkg.ts
-import { readFile as readFile5, writeFile as writeFile7, mkdir, readdir } from "fs/promises";
-import { join as join7 } from "path";
+import { readFile as readFile6, writeFile as writeFile8, mkdir as mkdir2, readdir } from "fs/promises";
+import { join as join8 } from "path";
 async function writePnpmWorkspace(targetDir) {
-  const pkgPath = join7(targetDir, "package.json");
-  const pkg = JSON.parse(await readFile5(pkgPath, "utf8"));
+  const pkgPath = join8(targetDir, "package.json");
+  const pkg = JSON.parse(await readFile6(pkgPath, "utf8"));
   const workspaces = pkg.workspaces ?? [];
   const packagesBlock = workspaces.map((p2) => `  - '${p2}'`).join("\n");
   const allowBuilds = [
@@ -907,7 +1464,7 @@ ${packagesBlock}
 allowBuilds:
 ${allowBuilds}
 `;
-  await writeFile7(join7(targetDir, "pnpm-workspace.yaml"), content);
+  await writeFile8(join8(targetDir, "pnpm-workspace.yaml"), content);
 }
 async function rewritePnpmWorkspaceDeps(targetDir) {
   async function walk2(dir) {
@@ -920,9 +1477,9 @@ async function rewritePnpmWorkspaceDeps(targetDir) {
     }
     for (const e of entries) {
       if (e.isDirectory() && e.name !== "node_modules") {
-        found.push(...await walk2(join7(dir, e.name)));
+        found.push(...await walk2(join8(dir, e.name)));
       } else if (e.isFile() && e.name === "package.json") {
-        found.push(join7(dir, e.name));
+        found.push(join8(dir, e.name));
       }
     }
     return found;
@@ -930,17 +1487,17 @@ async function rewritePnpmWorkspaceDeps(targetDir) {
   const pkgFiles = await walk2(targetDir);
   for (const f of pkgFiles) {
     try {
-      const raw = await readFile5(f, "utf8");
+      const raw = await readFile6(f, "utf8");
       const next = raw.replace(/"(@icore\/[^"]+)":\s*"\*"/g, '"$1": "workspace:*"');
-      if (next !== raw) await writeFile7(f, next);
+      if (next !== raw) await writeFile8(f, next);
     } catch {
     }
   }
 }
 async function patchGitignoreForPm(targetDir, pm) {
-  const giPath = join7(targetDir, ".gitignore");
+  const giPath = join8(targetDir, ".gitignore");
   try {
-    let src = await readFile5(giPath, "utf8");
+    let src = await readFile6(giPath, "utf8");
     src = src.replace(/^# Build artifacts.*\ntools\/create-icore\/templates\/\s*\n/m, "");
     if (pm !== "yarn") {
       src = src.replace(/^\.yarn\/\*\s*\n/m, "").replace(/^!\.yarn\/patches\s*\n/m, "").replace(/^!\.yarn\/plugins\s*\n/m, "").replace(/^!\.yarn\/releases\s*\n/m, "").replace(/^!\.yarn\/sdks\s*\n/m, "").replace(/^!\.yarn\/versions\s*\n/m, "").replace(/^\.pnp\.\*\s*\n/m, "");
@@ -955,7 +1512,7 @@ async function patchGitignoreForPm(targetDir, pm) {
         src += "\n# npm\nnpm-debug.log*\n";
       }
     }
-    await writeFile7(giPath, src);
+    await writeFile8(giPath, src);
   } catch {
   }
 }
@@ -971,7 +1528,7 @@ async function writeAiFiles(targetDir, opts) {
   if (opts.jobs !== "none") activeMSes.push(`jobs (standalone)`);
   const usesSupabase = opts.authProvider === "supabase" || opts.dbProvider === "supabase" || opts.upload === "supabase";
   const usesFirebase = opts.authProvider === "firebase" || opts.dbProvider === "firebase" || opts.upload === "firebase";
-  await writeFile7(join7(targetDir, "CLAUDE.md"), "@AGENTS.md\n");
+  await writeFile8(join8(targetDir, "CLAUDE.md"), "@AGENTS.md\n");
   const uiLabel = { shadcn: "shadcn/ui + Tailwind", antd: "Ant Design 6", mui: "MUI 6" }[opts.ui];
   const readme = `# ${opts.projectName}
 
@@ -1019,7 +1576,7 @@ ${pm === "yarn" ? "yarn remove-notes" : pm === "pnpm" ? "pnpm remove-notes" : "n
 
 Apache-2.0
 `;
-  await writeFile7(join7(targetDir, "README.md"), readme);
+  await writeFile8(join8(targetDir, "README.md"), readme);
   const agents = `# ${opts.projectName} \u2014 Agent Instructions
 
 ## Stack snapshot
@@ -1100,8 +1657,8 @@ ${opts.authProvider !== "none" ? `| \`apps/microservices/auth/.env\` | \`AUTH_PR
 - Test behaviour, not implementation. Fake strategies from \`@icore/shared\` (FakeAuthStrategy etc.) serve as test doubles.
 - Run: \`${nx} test <project>\`
 `;
-  await writeFile7(join7(targetDir, "AGENTS.md"), agents);
-  await mkdir(join7(targetDir, ".claude"), { recursive: true });
+  await writeFile8(join8(targetDir, "AGENTS.md"), agents);
+  await mkdir2(join8(targetDir, ".claude"), { recursive: true });
   const mcpServers = {
     nx: {
       command: "npx",
@@ -1142,8 +1699,8 @@ ${opts.authProvider !== "none" ? `| \`apps/microservices/auth/.env\` | \`AUTH_PR
       ]
     }
   };
-  await writeFile7(
-    join7(targetDir, ".claude", "settings.json"),
+  await writeFile8(
+    join8(targetDir, ".claude", "settings.json"),
     JSON.stringify(settings, null, 2) + "\n"
   );
 }
@@ -1163,20 +1720,20 @@ var IGNORE_TOP = /* @__PURE__ */ new Set([
   ".vscode"
 ]);
 async function copyTree(src, dest) {
-  await mkdir2(dest, { recursive: true });
+  await mkdir3(dest, { recursive: true });
   const entries = await readdir2(src, { withFileTypes: true });
   for (const entry of entries) {
     if (IGNORE_TOP.has(entry.name)) continue;
-    const s = join8(src, entry.name);
-    const d = join8(dest, entry.name);
+    const s = join9(src, entry.name);
+    const d = join9(dest, entry.name);
     if (entry.isDirectory()) await copyTree(s, d);
     else if (entry.isFile()) await copyFile(s, d);
   }
 }
 async function selectClientTemplate(targetDir, opts) {
-  const templatesRoot = join8(targetDir, "apps/templates");
-  const chosen = join8(templatesRoot, `client-${opts.ui}`);
-  const destClient = join8(targetDir, "apps/client");
+  const templatesRoot = join9(targetDir, "apps/templates");
+  const chosen = join9(templatesRoot, `client-${opts.ui}`);
+  const destClient = join9(targetDir, "apps/client");
   let chosenUi = opts.ui;
   try {
     const s = await stat(chosen);
@@ -1184,9 +1741,9 @@ async function selectClientTemplate(targetDir, opts) {
     await copyTree(chosen, destClient);
   } catch {
     chosenUi = "shadcn";
-    await copyTree(join8(templatesRoot, "client-shadcn"), destClient);
+    await copyTree(join9(templatesRoot, "client-shadcn"), destClient);
   }
-  await rm4(templatesRoot, { recursive: true, force: true });
+  await rm5(templatesRoot, { recursive: true, force: true });
   await rewriteClientPaths(destClient, chosenUi);
 }
 async function rewriteClientPaths(clientDir, ui) {
@@ -1199,11 +1756,11 @@ async function rewriteClientPaths(clientDir, ui) {
     "eslint.config.mjs"
   ];
   for (const rel of candidates) {
-    const path = join8(clientDir, rel);
+    const path = join9(clientDir, rel);
     try {
-      const raw = await readFile6(path, "utf8");
+      const raw = await readFile7(path, "utf8");
       const next = raw.replaceAll("../../../", "../../").replaceAll(`apps/templates/client-${ui}`, "apps/client").replaceAll(`client-${ui}`, "client");
-      if (next !== raw) await writeFile8(path, next);
+      if (next !== raw) await writeFile9(path, next);
     } catch {
     }
   }
@@ -1219,12 +1776,12 @@ function gitInit(cwd, projectName) {
 }
 function resolveYarnBin(cwd) {
   try {
-    const yarnrc = readFileSync(join8(cwd, ".yarnrc.yml"), "utf8");
+    const yarnrc = readFileSync(join9(cwd, ".yarnrc.yml"), "utf8");
     const match = yarnrc.match(/^yarnPath:\s*(.+)$/m);
-    if (match?.[1]) return join8(cwd, match[1].trim());
+    if (match?.[1]) return join9(cwd, match[1].trim());
   } catch {
   }
-  return join8(cwd, ".yarn", "releases", "yarn-4.5.0.cjs");
+  return join9(cwd, ".yarn", "releases", "yarn-4.5.0.cjs");
 }
 function runInstall(cwd, pm) {
   if (pm === "yarn") {
@@ -1247,6 +1804,10 @@ async function scaffold(rawOpts, templatesDir) {
   await writeRootEnv(opts.targetDir, opts);
   await selectClientTemplate(opts.targetDir, opts);
   await writeClientEnv(opts.targetDir);
+  if (opts.authProvider === "none") {
+    await removeAuthOnlyPaths(opts.targetDir);
+    await applyAuthNoneVariants(opts.targetDir, opts.ui);
+  }
   if (opts.upload === "none") await removeUploadStack(opts.targetDir);
   await cleanupUnusedFeatures(opts.targetDir, opts);
   await writeFeaturesWiring(opts.targetDir, opts);
@@ -1255,7 +1816,8 @@ async function scaffold(rawOpts, templatesDir) {
     await cleanupUnusedAuth(opts.targetDir, opts.authProvider);
     await writeAuthProvider(opts.targetDir, opts.authProvider);
   } else {
-    await removeAuthStack(opts.targetDir);
+    await removeAuthTsconfigPaths(opts.targetDir);
+    await removeDockerComposeAuthService(opts.targetDir);
   }
   if (opts.upload !== "none") {
     await cleanupUnusedStorage(opts.targetDir, opts.upload);
@@ -1268,20 +1830,20 @@ async function scaffold(rawOpts, templatesDir) {
     await writeDbProvider(opts.targetDir, opts.dbProvider);
   }
   await pruneRootProviderDeps(opts.targetDir, opts);
-  if (opts.authProvider === "none" && opts.upload === "none" && opts.dbProvider === "none") {
+  if (opts.authProvider === "none" && opts.upload === "none" && opts.dbProvider === "none" && opts.payment === "none") {
     await removeStrategiesLib(opts.targetDir);
   }
   try {
-    await rmdir2(join8(opts.targetDir, "apps/microservices"));
+    await rmdir2(join9(opts.targetDir, "apps/microservices"));
   } catch {
   }
   await writeBlueprintJson(opts.targetDir, opts);
   await writeServiceBlueprints(opts.targetDir, opts);
   if (opts.packageManager === "yarn") {
-    await writeFile8(join8(opts.targetDir, "yarn.lock"), "");
+    await writeFile9(join9(opts.targetDir, "yarn.lock"), "");
   } else {
-    await rm4(join8(opts.targetDir, ".yarn"), { recursive: true, force: true });
-    await rm4(join8(opts.targetDir, ".yarnrc.yml"), { force: true });
+    await rm5(join9(opts.targetDir, ".yarn"), { recursive: true, force: true });
+    await rm5(join9(opts.targetDir, ".yarnrc.yml"), { force: true });
   }
   if (opts.packageManager === "pnpm") {
     await writePnpmWorkspace(opts.targetDir);
@@ -1296,12 +1858,12 @@ async function scaffold(rawOpts, templatesDir) {
 // src/lib/prompts.ts
 import * as p from "@clack/prompts";
 import { resolve } from "path";
-import { readFile as readFile8 } from "fs/promises";
-import { dirname, join as join9 } from "path";
+import { readFile as readFile9 } from "fs/promises";
+import { dirname as dirname2, join as join10 } from "path";
 import { fileURLToPath } from "url";
 
 // src/lib/config.ts
-import { readFile as readFile7 } from "fs/promises";
+import { readFile as readFile8 } from "fs/promises";
 var ConfigFileError = class extends Error {
   constructor(message) {
     super(message);
@@ -1372,7 +1934,7 @@ function validateConfig(raw) {
 async function loadConfig(filePath) {
   let raw;
   try {
-    raw = await readFile7(filePath, "utf8");
+    raw = await readFile8(filePath, "utf8");
   } catch {
     throw new ConfigFileError(`config file not found: ${filePath}`);
   }
@@ -1397,8 +1959,8 @@ function detectPackageManager() {
 }
 async function readSelfVersion() {
   try {
-    const here = dirname(fileURLToPath(import.meta.url));
-    const pkgRaw = await readFile8(join9(here, "..", "package.json"), "utf8");
+    const here = dirname2(fileURLToPath(import.meta.url));
+    const pkgRaw = await readFile9(join10(here, "..", "package.json"), "utf8");
     const pkg = JSON.parse(pkgRaw);
     return pkg.version ?? null;
   } catch {
@@ -1622,23 +2184,23 @@ Re-run with @latest to refresh:
 }
 
 // src/manifest/audit.ts
-import { readFile as readFile9, readdir as readdir3 } from "fs/promises";
-import { join as join10 } from "path";
+import { readFile as readFile10, readdir as readdir3 } from "fs/promises";
+import { join as join11 } from "path";
 var IGNORE_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", ".nx"]);
 async function walk(dir, out = []) {
   const entries = await readdir3(dir, { withFileTypes: true });
   for (const e of entries) {
     if (e.isDirectory()) {
-      if (!IGNORE_DIRS.has(e.name)) await walk(join10(dir, e.name), out);
+      if (!IGNORE_DIRS.has(e.name)) await walk(join11(dir, e.name), out);
     } else if (/\.(ts|tsx|mjs)$/.test(e.name)) {
-      out.push(join10(dir, e.name));
+      out.push(join11(dir, e.name));
     }
   }
   return out;
 }
 async function tsconfigAliases(dir) {
   try {
-    const raw = await readFile9(join10(dir, "tsconfig.base.json"), "utf8");
+    const raw = await readFile10(join11(dir, "tsconfig.base.json"), "utf8");
     const aliases = /* @__PURE__ */ new Set();
     for (const m of raw.matchAll(/"(@icore\/[a-z0-9.-]+)"\s*:/g)) {
       if (m[1]) aliases.add(m[1]);
@@ -1656,7 +2218,7 @@ var PROVIDER_SDKS = {
 };
 async function readBlueprint(dir) {
   try {
-    return JSON.parse(await readFile9(join10(dir, "blueprint.json"), "utf8"));
+    return JSON.parse(await readFile10(join11(dir, "blueprint.json"), "utf8"));
   } catch {
     return null;
   }
@@ -1673,7 +2235,7 @@ function forbiddenFromBlueprint(bp) {
 }
 async function allPackageJsons(dir) {
   const out = [];
-  const root = join10(dir, "package.json");
+  const root = join11(dir, "package.json");
   out.push(root);
   async function walk2(d) {
     let entries;
@@ -1684,18 +2246,18 @@ async function allPackageJsons(dir) {
     }
     for (const e of entries) {
       if (e.isDirectory()) {
-        if (!IGNORE_DIRS.has(e.name)) await walk2(join10(d, e.name));
+        if (!IGNORE_DIRS.has(e.name)) await walk2(join11(d, e.name));
       } else if (e.name === "package.json") {
-        out.push(join10(d, e.name));
+        out.push(join11(d, e.name));
       }
     }
   }
-  await walk2(join10(dir, "apps"));
+  await walk2(join11(dir, "apps"));
   return out;
 }
 async function depKeys(pkgPath) {
   try {
-    const pkg = JSON.parse(await readFile9(pkgPath, "utf8"));
+    const pkg = JSON.parse(await readFile10(pkgPath, "utf8"));
     return /* @__PURE__ */ new Set([
       ...Object.keys(pkg.dependencies ?? {}),
       ...Object.keys(pkg.devDependencies ?? {})
@@ -1709,7 +2271,7 @@ async function auditProject(dir, opts = {}) {
   const violations = [];
   const aliases = await tsconfigAliases(dir);
   for (const file of await walk(dir)) {
-    const src = await readFile9(file, "utf8");
+    const src = await readFile10(file, "utf8");
     for (const m of src.matchAll(ICORE_IMPORT)) {
       const alias = m[1];
       if (alias && !aliases.has(alias)) {