bhooai-nexus 2.0.12 → 2.0.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bhooai-nexus",
-  "version": "2.0.12",
+  "version": "2.0.13",
   "description": "BhooAI Nexus - a Node-based full-stack framework (websockets, GraphQL federation, inbuilt security, custom ODM, OAuth, payments, WebRTC, AI, plugins). v2: multi-app, Laravel-style folders, Docker-based scaling.",
   "license": "MIT",
   "author": "BhooAI",

package/packages/nexus-admin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bhooai/nexus-admin",
-  "version": "2.0.13",
+  "version": "2.0.14",
   "description": "BhooAI Nexus v2 admin SPA — Apps-tab-first, live registry/health/logs/config/users/payments/AI",
   "type": "module",
   "license": "MIT",

package/packages/nexus-admin/src/App.tsx

@@ -3276,11 +3276,34 @@ function GraphQLSettings({ onNavigate }: { onNavigate?: (tab: Tab) => void }) {
   const path = (g.path as string) ?? '/graphql';
   const introspection = g.introspection !== false;
 
+  // Build a directly-openable explorer URL (backend origin + path). The admin
+  // and backend share a host in local dev, so use the browser origin + the
+  // backend port from the merged config.
+  const serverCfg = (cfg?.config?.server ?? {}) as { port?: number };
+  const backendPort = serverCfg.port ?? 4000;
+  const explorerUrl = `${window.location.protocol}//${window.location.hostname}:${backendPort}/graphiql`;
+
   return (
     <div className="space-y-6">
       <PageHead title="GraphQL" />
       <PageHero kicker="GRAPHQL WORKSPACE" title={<>Explore your <em>schema.</em></>} desc="Control the GraphiQL explorer and gate it behind an admin access token." glyph="gitFork" art="grid" />
 
+      <section className="glass-card space-y-3">
+        <h3 className="glass-h3">Open the explorer</h3>
+        <p className="text-xs text-slate-500">Jump straight into the interactive GraphiQL sandbox on the backend.</p>
+        <div className="flex flex-wrap items-center gap-3">
+          <a
+            href={explorerUrl}
+            target="_blank"
+            rel="noreferrer"
+            className="glass-chip-btn-primary inline-flex items-center gap-2 px-4 py-2 text-sm"
+          >
+            <Icon name="gitFork" size={14} /> Open GraphQL explorer <Icon name="externalLink" size={12} />
+          </a>
+          <code className="font-mono text-xs text-slate-400">{explorerUrl}</code>
+        </div>
+      </section>
+
       <section className="glass-card space-y-3">
         <h3 className="glass-h3">GraphiQL explorer</h3>
         <p className="text-xs text-slate-500">The interactive sandbox is served at <code className="font-mono text-slate-300">{path}</code> (page) and <code className="font-mono text-slate-300">/graphiql</code>. The <code className="font-mono text-slate-300">/graphql</code> JSON endpoint is always public.</p>

package/packages/nexus-ads/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bhooai/nexus-ads",
-    "version": "2.0.11",
+    "version": "2.0.12",
     "publishConfig": {
         "access": "public"
     },

package/packages/nexus-ai-client/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bhooai/nexus-ai-client",
-    "version": "2.0.11",
+    "version": "2.0.12",
     "publishConfig": {
         "access": "public"
     },

package/packages/nexus-auth/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bhooai/nexus-auth",
-    "version": "2.0.11",
+    "version": "2.0.12",
     "publishConfig": {
         "access": "public"
     },

package/packages/nexus-cache/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bhooai/nexus-cache",
-    "version": "2.0.11",
+    "version": "2.0.12",
     "publishConfig": {
         "access": "public"
     },

package/packages/nexus-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bhooai/nexus-cli",
-  "version": "2.0.13",
+  "version": "2.0.14",
   "description": "BhooAI Nexus v2 CLI — init, dev, build, test, scaffolding, plugins, queue, db.",
   "license": "MIT",
   "type": "module",

package/packages/nexus-cli/src/commands/init.ts

@@ -8,10 +8,11 @@
  * Always interactive (the wizard). Requires a TTY; in a non-interactive
  * context it prints a message and exits non-zero. `--no-install` skips the
  * dependency install, `--force` overwrites an existing target directory.
- * `--dev` rewrites bhooai-nexus + @bhooai/* to file:../../PACKAGES/bhooai-nexus
+ * `--dev` rewrites bhooai-nexus + @bhooai/* (incl. the admin app's
+ * @bhooai/nexus-admin + @bhooai/nexus-safe-goto) to file:../../PACKAGES/bhooai-nexus
  * (relative) and runs `npm link` for live symlink.
  */
-import { mkdir, writeFile, readFile } from 'node:fs/promises';
+import { mkdir, writeFile, readFile, readdir } from 'node:fs/promises';
 import { existsSync } from 'node:fs';
 import { spawn } from 'node:child_process';
 import { join, resolve, dirname, relative, sep } from 'node:path';
@@ -204,7 +205,7 @@ export async function run(ctx: CommandContext): Promise<void> {
       if (devMode) {
         console.log(`\n[dev] Linking local packages for live symlink...\n`);
         const linkCode = await runNpmLinkForDev(targetDir);
-        if (linkCode === 0) console.log(`\n[dev] Live symlink ready — edits in ${resolveLocalBhooaiNexusRoot() ?? 'PACKAGES/bhooai-nexus'} reflect instantly.`);
+        if (linkCode === 0) console.log(`\n[dev] Live symlink ready — edits in ${resolveLocalBhooaiNexusRoot() ?? 'PACKAGES/bhooai-nexus'} (incl. admin) reflect instantly.`);
         else console.warn(`\n[dev] npm link failed (code ${linkCode}) — fallback to file: copy (re-run npm install after edits).`);
       }
     }
@@ -260,47 +261,79 @@ function resolveLocalBhooaiNexusRoot(): string | null {
   return null;
 }
 
-async function rewriteToLocalFileDeps(targetDir: string): Promise<{ count: number; root: string; entries: Array<{ name: string; spec: string }> }> {
-  const localRoot = resolveLocalBhooaiNexusRoot();
+/**
+ * Rewrite bhooai-nexus + @bhooai/* deps to local `file:` specs in the root
+ * package.json AND every app workspace package.json (notably apps/admin, which
+ * depends on @bhooai/nexus-admin + @bhooai/nexus-safe-goto). This ensures a
+ * `--dev` scaffold serves the local admin source, not the published npm copy.
+ *
+ * `localRootOverride` lets tests pin the local repo root; when omitted it is
+ * resolved automatically.
+ */
+export async function rewriteToLocalFileDeps(
+  targetDir: string,
+  localRootOverride?: string,
+): Promise<{ count: number; root: string; entries: Array<{ name: string; spec: string }> }> {
+  const localRoot = localRootOverride ?? resolveLocalBhooaiNexusRoot();
   if (!localRoot) return { count: 0, root: '', entries: [] };
-  const pkgPath = join(targetDir, 'package.json');
-  let raw: string;
-  try { raw = await readFile(pkgPath, 'utf8'); } catch { return { count: 0, root: localRoot, entries: [] }; }
-  let pkg: any;
-  try { pkg = JSON.parse(raw); } catch { return { count: 0, root: localRoot, entries: [] }; }
   const entries: Array<{ name: string; spec: string }> = [];
-  const toFileSpec = (abs: string) => {
-    let rel = relative(targetDir, abs).replace(/\\/g, '/');
-    if (!rel.startsWith('.')) rel = './' + rel;
-    // Use forward slashes for file: spec (npm supports both, but posix is more portable)
-    return `file:${rel}`;
-  };
-  const maybeRewrite = (obj: Record<string, string> | undefined) => {
-    if (!obj) return;
-    for (const name of Object.keys(obj)) {
-      if (name === 'bhooai-nexus') {
-        const spec = toFileSpec(localRoot);
-        obj[name] = spec;
-        entries.push({ name, spec });
-      } else if (name.startsWith('@bhooai/')) {
-        const short = name.replace('@bhooai/', '');
-        // Map @bhooai/nexus-* -> packages/nexus-<short> ; @bhooai/nexus -> packages/nexus-core? but we keep generic
-        const pkgDir = join(localRoot, 'packages', short === 'nexus' ? 'nexus-core' : short.startsWith('nexus-') ? short : `nexus-${short}`);
-        // Fallback: try packages/<name without @bhooai/> and packages/nexus-<name>
-        const candidates = [join(localRoot, 'packages', name.replace('@bhooai/', '')), join(localRoot, 'packages', `nexus-${short}`), pkgDir];
-        let found: string | null = null;
-        for (const c of candidates) if (existsSync(join(c, 'package.json'))) { found = c; break; }
-        if (found) {
-          const spec = toFileSpec(found);
+
+  const rewritePackageJson = async (pkgPath: string): Promise<void> => {
+    const appDir = dirname(pkgPath);
+    let raw: string;
+    try { raw = await readFile(pkgPath, 'utf8'); } catch { return; }
+    let pkg: any;
+    try { pkg = JSON.parse(raw); } catch { return; }
+    const toFileSpec = (abs: string) => {
+      let rel = relative(appDir, abs).replace(/\\/g, '/');
+      if (!rel.startsWith('.')) rel = './' + rel;
+      // Use forward slashes for file: spec (npm supports both, but posix is more portable)
+      return `file:${rel}`;
+    };
+    let changed = false;
+    const maybeRewrite = (obj: Record<string, string> | undefined) => {
+      if (!obj) return;
+      for (const name of Object.keys(obj)) {
+        if (name === 'bhooai-nexus') {
+          const spec = toFileSpec(localRoot);
           obj[name] = spec;
           entries.push({ name, spec });
+          changed = true;
+        } else if (name.startsWith('@bhooai/')) {
+          const short = name.replace('@bhooai/', '');
+          // Map @bhooai/nexus-* -> packages/nexus-<short> ; @bhooai/nexus -> packages/nexus-core
+          const pkgDir = join(localRoot, 'packages', short === 'nexus' ? 'nexus-core' : short.startsWith('nexus-') ? short : `nexus-${short}`);
+          // Fallback: try packages/<name without @bhooai/> and packages/nexus-<name>
+          const candidates = [join(localRoot, 'packages', name.replace('@bhooai/', '')), join(localRoot, 'packages', `nexus-${short}`), pkgDir];
+          let found: string | null = null;
+          for (const c of candidates) if (existsSync(join(c, 'package.json'))) { found = c; break; }
+          if (found) {
+            const spec = toFileSpec(found);
+            obj[name] = spec;
+            entries.push({ name, spec });
+            changed = true;
+          }
         }
       }
-    }
+    };
+    maybeRewrite(pkg.dependencies);
+    maybeRewrite(pkg.devDependencies);
+    if (changed) await writeFile(pkgPath, JSON.stringify(pkg, null, 2) + '\n', 'utf8');
   };
-  maybeRewrite(pkg.dependencies);
-  maybeRewrite(pkg.devDependencies);
-  if (entries.length) await writeFile(pkgPath, JSON.stringify(pkg, null, 2) + '\n', 'utf8');
+
+  // Root package.json first, then every app workspace package.json.
+  await rewritePackageJson(join(targetDir, 'package.json'));
+  const appsDir = join(targetDir, 'apps');
+  if (existsSync(appsDir)) {
+    let appEntries: import('node:fs').Dirent[] = [];
+    try { appEntries = await readdir(appsDir, { withFileTypes: true }); } catch {}
+    for (const e of appEntries) {
+      if (!e.isDirectory()) continue;
+      const appPkg = join(appsDir, e.name, 'package.json');
+      if (existsSync(appPkg)) await rewritePackageJson(appPkg);
+    }
+  }
+
   return { count: entries.length, root: localRoot, entries };
 }
 
@@ -320,18 +353,29 @@ async function runNpmLinkForDev(targetDir: string): Promise<number> {
     c.on('error', () => resolve(1));
     c.on('exit', (code) => resolve(code ?? 1));
   });
-  // Also link each @bhooai/* that we rewrote to file: (best-effort, ignore failures)
-  try {
-    const pkgRaw = await readFile(join(targetDir, 'package.json'), 'utf8');
-    const pkg = JSON.parse(pkgRaw);
-    const allDeps = { ...(pkg.dependencies ?? {}), ...(pkg.devDependencies ?? {}) };
-    for (const name of Object.keys(allDeps)) if (name.startsWith('@bhooai/')) {
-      await new Promise<void>((r) => {
-        const c = spawn('npm', ['link', name], { cwd: targetDir, stdio: 'inherit', shell: process.platform === 'win32' });
-        c.on('exit', () => r()); c.on('error', () => r());
-      });
+  // Also link each @bhooai/* that we rewrote to file: in the root AND app
+  // workspace package.json (e.g. apps/admin's @bhooai/nexus-admin) — best-effort.
+  const collectBhooaiDeps = async (): Promise<string[]> => {
+    const names = new Set<string>();
+    const roots = [join(targetDir, 'package.json'), join(targetDir, 'apps', 'admin', 'package.json')];
+    for (const p of roots) {
+      try {
+        const raw = await readFile(p, 'utf8');
+        const pkg = JSON.parse(raw);
+        for (const obj of [pkg.dependencies ?? {}, pkg.devDependencies ?? {}]) {
+          for (const name of Object.keys(obj)) if (name.startsWith('@bhooai/')) names.add(name);
+        }
+      } catch {}
     }
-  } catch {}
+    return [...names];
+  };
+  const bhooaiDeps = await collectBhooaiDeps();
+  for (const name of bhooaiDeps) {
+    await new Promise<void>((r) => {
+      const c = spawn('npm', ['link', name], { cwd: targetDir, stdio: 'inherit', shell: process.platform === 'win32' });
+      c.on('exit', () => r()); c.on('error', () => r());
+    });
+  }
   return linkTarget;
 }
 

package/packages/nexus-cli/templates/base/apps/frontend/vite.config.ts.ejs

@@ -1,11 +1,20 @@
 import { defineConfig } from 'vite';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
 
 // Backend host the dev proxy targets. Override with NEXUS_BACKEND_HOST when
 // deploying to a VPS (or running the backend on another machine). Defaults to
 // localhost for local development.
 const backendHost = process.env.NEXUS_BACKEND_HOST ?? 'localhost';
 
+// Project root (where .env lives) = 2 levels up from this config file.
+const projectRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..', '..');
+
 export default defineConfig({
+  // Expose NEXUS_PAYMENTS_* vars (from the project-root .env) to the browser
+  // via import.meta.env, alongside the default VITE_ prefix.
+  envDir: projectRoot,
+  envPrefix: ['VITE_', 'NEXUS_PAYMENTS_'],
   server: {
     port: <%= frontendPort %>,
     proxy: {
@@ -25,6 +34,19 @@ export default defineConfig({
         target: `ws://${backendHost}:<%= backendPort %>`,
         ws: true,
       },
+      '/graphql/ws': {
+        target: `ws://${backendHost}:<%= backendPort %>`,
+        ws: true,
+        changeOrigin: true,
+      },
+      '/graphql': {
+        target: `http://${backendHost}:<%= backendPort %>`,
+        changeOrigin: true,
+      },
+      '/csrf-token': {
+        target: `http://${backendHost}:<%= backendPort %>`,
+        changeOrigin: true,
+      },
     },
   },
-});
+});

package/packages/nexus-cli/templates/base/nexus.config.ts.ejs

@@ -19,6 +19,10 @@ const config: Partial<NexusConfig> = {
     bodyLimit: 12 * 1024 * 1024,
   },
 
+  frontend: { port: <%= frontendPort %>, host: 'localhost', enabled: true },
+  
+  admin: { port: <%= adminPort %>, host: 'localhost', enabled: true },
+
   uploads: {
     dir: 'storage/uploads',
     path: '/uploads',
@@ -27,17 +31,19 @@ const config: Partial<NexusConfig> = {
     allowedTypes: [],
   },
 
+  ai: {
+    serverUrl: process.env.NEXUS_AI_URL ?? `http://localhost:${process.env.AI_PORT ?? <%= aiPort %>}/v1`,
+    timeoutMs: 60_000,
+    defaultProvider: process.env.NEXUS_AI_PROVIDER ?? 'ollama',
+    schemaModel: process.env.NEXUS_AI_MODEL ?? 'llama3.1:8b',
+    },
+
   db: {
     uri: process.env.NEXUS_DB_URI ?? '<%= mongoUri %>',
     maxPoolSize: 10,
     autoIndex: true,
   },
 
-  redis: {
-    url: process.env.NEXUS_REDIS_URL ?? '<%= redisUrl %>',
-    keyPrefix: '<%= nameSlug %>:',
-  },
-
   graphql: {
     path: '/graphql',
     federation: 'in-process',
@@ -51,6 +57,11 @@ const config: Partial<NexusConfig> = {
     requireCsrf: true,
   },
 
+  redis: {
+    url: process.env.NEXUS_REDIS_URL ?? '<%= redisUrl %>',
+    keyPrefix: '<%= nameSlug %>:',
+  },
+
   auth: {
     jwt: {
       accessTtl: 60 * 15,
@@ -68,6 +79,9 @@ const config: Partial<NexusConfig> = {
     currency: 'INR',
     razorpay: { enabled: false, sandbox: true },
     paypal:   { enabled: false, sandbox: true },
+    payoneer:   { enabled: false, sandbox: true },
+    payu:   { enabled: false, sandbox: true },
+    skrill:   { enabled: false, sandbox: true },
   },
 
   email: { provider: 'log', from: 'no-reply@<%= nameSlug %>.local' },
@@ -78,20 +92,9 @@ const config: Partial<NexusConfig> = {
 
   webrtc: { rtcMinPort: 40000, rtcMaxPort: 40100, announceIp: '127.0.0.1' },
 
-  ai: {
-    serverUrl: process.env.NEXUS_AI_URL ?? `http://localhost:${process.env.AI_PORT ?? <%= aiPort %>}/v1`,
-    timeoutMs: 60_000,
-    defaultProvider: process.env.NEXUS_AI_PROVIDER ?? 'ollama',
-    schemaModel: process.env.NEXUS_AI_MODEL ?? 'llama3.1:8b',
-  },
-
   logging: { level: 'info', format: 'pretty', console: true, dir: 'logs', maxFileSize: 10 * 1024 * 1024, maxFiles: 7 },
 
   plugins: { dir: 'plugins', entries: [] },
-
-  frontend: { port: <%= frontendPort %>, host: 'localhost', enabled: true },
-
-  admin:    { port: <%= adminPort %>, host: 'localhost', enabled: true },
 };
 
 export default config;

package/packages/nexus-core/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bhooai/nexus-core",
-    "version": "2.0.11",
+    "version": "2.0.12",
     "publishConfig": {
         "access": "public"
     },

package/packages/nexus-core/src/app/createNexusApp.ts

@@ -36,8 +36,8 @@ import { createLazyDb, registerAdminRoutes, RequestLogBuffer } from './adminModu
 import { registerAuthRoutes } from './authModule.js';
 import { issueCsrfToken, getCsrfToken, csrf, authToken, requireRole } from '@bhooai/nexus-auth';
 import { connect } from '@bhooai/nexus-data';
-import { createGateway, createFederatedGateway, graphqlHttpHandler, getExplorerHtml, helloSubgraph } from '@bhooai/nexus-graphql';
-import type { Subgraph } from '@bhooai/nexus-graphql';
+import { createGateway, createFederatedGateway, graphqlHttpHandler, getExplorerHtml, helloSubgraph, SubscriptionServer } from '@bhooai/nexus-graphql';
+import type { Subgraph, GraphQLContext } from '@bhooai/nexus-graphql';
 
 export interface CreateNexusAppOptions {
   /** Identifier for this backend, used in admin, telemetry, logs. */
@@ -59,6 +59,11 @@ export interface CreateNexusAppOptions {
   /** Hooks for extending boot. */
   beforeStart?: (app: NexusApp) => Promise<void> | void;
   afterStart?: (app: NexusApp) => Promise<void> | void;
+  /**
+   * Extra values injected into every GraphQL resolver context (e.g. a payments
+   * service). Merged with the default `{ request, user }` context.
+   */
+  graphqlContext?: Record<string, unknown>;
 }
 
 export interface NexusApp {
@@ -249,6 +254,8 @@ export async function createNexusApp(opts: CreateNexusAppOptions = {}): Promise<
   // GraphQL gateway — builtin hello + discovered subgraphs (federated)
   // ------------------------------------------------------------------
   let graphqlMounted = false;
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  let graphqlGateway: any = null;
   {
     const explorerEnabled = (config.graphql as unknown as { explorer?: boolean })?.explorer ?? true;
     const helloEnabled = (config.graphql as unknown as { hello?: boolean })?.hello !== false;
@@ -295,6 +302,7 @@ export async function createNexusApp(opts: CreateNexusAppOptions = {}): Promise<
           gateway,
           introspection: config.graphql?.introspection ?? true,
           requireMutationCsrf: config.graphql?.requireMutationCsrf ?? true,
+          context: (ctx) => ({ request: ctx, user: (ctx.state.user as GraphQLContext['user']), ...opts.graphqlContext }),
         });
         if (explorerEnabled) {
           const explorerHtml = getExplorerHtml({
@@ -314,6 +322,7 @@ export async function createNexusApp(opts: CreateNexusAppOptions = {}): Promise<
         }
         router.add('POST', graphqlPath, handler);
         graphqlMounted = true;
+        graphqlGateway = gateway;
         if (subgraphs.length === 1) {
           console.log(`[${name}] GraphQL gateway mounted at ${graphqlPath} (${subgraphs[0]!.name} subgraph${explorerEnabled ? ' + explorer at /graphiql' : ''})`);
         } else {
@@ -340,7 +349,7 @@ export async function createNexusApp(opts: CreateNexusAppOptions = {}): Promise<
         if (helloEnabled) {
           // hello is available even in fallback — route through its gateway
           const gw = createGateway({ subgraph: helloSubgraph });
-          const h = graphqlHttpHandler({ gateway: gw, introspection: config.graphql?.introspection ?? true, requireMutationCsrf: config.graphql?.requireMutationCsrf ?? true });
+          const h = graphqlHttpHandler({ gateway: gw, introspection: config.graphql?.introspection ?? true, requireMutationCsrf: config.graphql?.requireMutationCsrf ?? true, context: (ctx) => ({ request: ctx, user: (ctx.state.user as GraphQLContext['user']), ...opts.graphqlContext }) });
           return h(ctx);
         }
         ctx.json({ errors: [{ message: 'No GraphQL subgraph found. Add one with: npx nexus make:subgraph <name>  (then restart)' }] }, 404);
@@ -350,7 +359,7 @@ export async function createNexusApp(opts: CreateNexusAppOptions = {}): Promise<
       try {
         if (helloEnabled) {
           const gw = createGateway({ subgraph: helloSubgraph });
-          router.add('POST', graphqlPath, graphqlHttpHandler({ gateway: gw, introspection: config.graphql?.introspection ?? true, requireMutationCsrf: config.graphql?.requireMutationCsrf ?? true }));
+          router.add('POST', graphqlPath, graphqlHttpHandler({ gateway: gw, introspection: config.graphql?.introspection ?? true, requireMutationCsrf: config.graphql?.requireMutationCsrf ?? true, context: (ctx) => ({ request: ctx, user: (ctx.state.user as GraphQLContext['user']), ...opts.graphqlContext }) }));
         } else {
           router.add('POST', graphqlPath, async (ctx) => ctx.json({ errors: [{ message: 'No GraphQL subgraph found. Add one with: npx nexus make:subgraph <name>' }] }, 404));
         }
@@ -526,6 +535,21 @@ export async function createNexusApp(opts: CreateNexusAppOptions = {}): Promise<
     if ((e as any)?.code !== 'ERR_MODULE_NOT_FOUND') console.warn('[realtime] ws init failed:', e);
   }
 
+  // ------------------------------------------------------------------
+  // GraphQL subscriptions over WebSocket — mount when a gateway exists
+  // and config.graphql.subscriptions is enabled.
+  // ------------------------------------------------------------------
+  const graphqlSubscriptions = (config.graphql as unknown as { subscriptions?: boolean })?.subscriptions ?? true;
+  if (graphqlGateway && graphqlSubscriptions && typeof graphqlGateway.subscribe === 'function') {
+    try {
+      const subPath = `${config.graphql?.path ?? '/graphql'}/ws`;
+      new SubscriptionServer({ httpServer: server.httpServer, gateway: graphqlGateway, path: subPath });
+      console.log(`[${name}] GraphQL subscriptions mounted at ${subPath}`);
+    } catch (err) {
+      console.warn(`[${name}] failed to mount GraphQL subscriptions:`, err);
+    }
+  }
+
   // Public uploads: serve GET /uploads/* from storage/uploads (file-storage example).
   // This was missing — 404 `No route for GET /uploads/media/...`.
   server.use(serveStatic(join(projectRoot, 'storage', 'uploads'), { prefix: '/uploads' }));

package/packages/nexus-core/src/config/runtimeJson.ts

@@ -74,5 +74,11 @@ export async function mergeRuntimeJson(projectRoot: string, patch: Record<string
   if (patch.ai && typeof patch.ai === 'object' && existing.ai && typeof existing.ai === 'object') {
     merged.ai = { ...(existing as { ai: Record<string, unknown> }).ai, ...(patch.ai as Record<string, unknown>) };
   }
+  // Deep-merge `payments` so toggling one provider's enabled/sandbox state does
+  // NOT wipe the other providers' persisted state (shallow merge would replace
+  // the whole payments object).
+  if (patch.payments && typeof patch.payments === 'object' && existing.payments && typeof existing.payments === 'object') {
+    merged.payments = { ...(existing as { payments: Record<string, unknown> }).payments, ...(patch.payments as Record<string, unknown>) };
+  }
   await writeRuntimeJson(projectRoot, stripRedactionMask(merged) as Record<string, unknown>);
 }

package/packages/nexus-crypto/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bhooai/nexus-crypto",
-    "version": "2.0.11",
+    "version": "2.0.12",
     "publishConfig": {
         "access": "public"
     },

package/packages/nexus-data/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bhooai/nexus-data",
-    "version": "2.0.11",
+    "version": "2.0.12",
     "publishConfig": {
         "access": "public"
     },

package/packages/nexus-email/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bhooai/nexus-email",
-    "version": "2.0.11",
+    "version": "2.0.12",
     "publishConfig": {
         "access": "public"
     },

package/packages/nexus-examples/examples/blog-crud/README.md

@@ -1,14 +1,16 @@
 # Blog CRUD example
 
-Posts + authors + comments with a REST API and an equivalent GraphQL subgraph.
-Best starting point for the `nexus-data` ODM.
+Posts + authors + comments, exposed through a GraphQL subgraph served at
+`/graphql`. Best starting point for the `nexus-data` ODM.
 
 ## What's here
 
 - `models/Post.ts`, `models/Author.ts`, `models/Comment.ts` — ODM documents
-- `routes/posts.ts` — full REST CRUD (`GET/POST /api/posts`, `GET/PUT/DELETE /api/posts/:id`, `POST /api/posts/:id/comments`)
-- `graphql/post.graph.ts` — federation subgraph: `typeDefs` + resolvers for posts, nested author + comments, and a `publishPost` mutation
-- `apps/frontend/src/main.tsx` — post list + create form (REST)
+- `graphql/app.graph.ts` — subgraph: `typeDefs` + resolvers for posts, nested
+  author + comments, and create/update/delete/publish mutations
+- `handlers/blog.handler.ts` — handler helpers extracted from the original REST
+  route (kept for reference / REST additions)
+- `apps/frontend/src/main.tsx` — post list + create form (GraphQL client)
 
 ## Conventions shown
 
@@ -42,4 +44,4 @@ npx nexus dev
 ```
 
 Create a post, toggle publish, delete — all through the UI or directly against
-`/api/posts`.
+`/graphql`.