I don't want the angular app used by customers to include everything used by staff:

* It would be much bigger - the staff-related code is 10x larger than that for customers
* It's a security risk - I don't want customers to infer what my system does behind the scenes (I want to protect my IP)

So I probably need two apps - one for customers, and one for staff. Maybe a third for shared code. Is this the correct approach?

If so, the advise I've found is to "eject" and tweak webpack. *But the latest angular doesn't allow this.*

So for the latest angular, how do I setup two related apps in the same project, with a third shared lib?

---

*UPDATE* to avoid the arguments in the comments below

I want a single git repo, which I work on in vscode. Inside I have two angular apps (one for customers and one for staff) and a third app/project/package/whatever for shared code.

Just restricting access to staff-related endpoints is nonsensical - although the customer can't access staff-related features because he is not a member of staff, *he can still INFER my system's features because he can see the code that supports it*. Thus the need for separate apps.

My question was how to do that with the latest angular, because all resources are for older versions.