@sdcorejs/nestjs

One module wires it all

SdCoreModule.forRoot() composes context, tenancy, audit, permission, cache and HTTP. Opt-in keys add jwt, i18n, uploadedFile, actionHistory, jobScheduler and queue.

Neutral by design

No tenantCode/departmentCode baked in. You mark scoped columns with @Scoped() and write strategies; the library never knows your schema.

Multi-tenancy that just happens

BaseRepository injects a scope filter on every read and auto-fills scoped columns on every write. Scalar means EQUAL, array means IN. detail(id) is scoped too — no cross-tenant id leaks.

Permissions via DI strategy

IPermissionStrategy.load(ctx) resolves codes once per request; AuthGuard enforces @HasPermission / @HasAnyPermission and syncs user + permissions into the request context.

Keycloak / OIDC ready

KeycloakJwtStrategy verifies per-token against the issuer's JWKS — multiple realms and tenants work with no shared secret. Symmetric HS* secrets supported too.

Drop-in feature modules

Uploaded files (S3/local, extraData jsonb, 03:00 cron cleanup), action history, and a distributed cron lock — each with an optional drop-in controller.

i18n error envelopes

Producers throw i18n codes, not sentences. SdI18nExceptionFilter localizes per request language into a localized error envelope. Built-in en/vi core.* catalogs.

Dual ESM + CJS, fully typed

8 grouped entry points, per-format type declarations, publint + attw green on every entry. Import only what you use.

Install

bash

npm install @sdcorejs/nestjs

Only two peer dependencies — @nestjs/common ^11 and @nestjs/core ^11, which every NestJS app already has. Everything else is bundled and installs automatically. Optional feature libs (ioredis, zod@^4, jwks-rsa@^4 + jsonwebtoken, aws-sdk) ship as optionalDependencies. See Getting started for the full matrix.

The 8 entry points

Import	What's inside
`@sdcorejs/nestjs`	`SdCoreModule.forRoot({...})` + ergonomic re-exports
`@sdcorejs/nestjs/core`	ORM base classes, request context, multi-tenancy, audit
`@sdcorejs/nestjs/auth`	JWT / Keycloak strategies + permission guards & decorators
`@sdcorejs/nestjs/services`	context-aware HTTP client + cache (memory / redis)
`@sdcorejs/nestjs/queue`	BullMQ `QueueModule` + `SdWorkerHost`
`@sdcorejs/nestjs/validation`	`ZodValidationGuard` + query presets (Zod v4)
`@sdcorejs/nestjs/i18n`	i18n resolver + exception filter + en/vi `core.*` catalogs
`@sdcorejs/nestjs/features`	`UploadedFile`, `ActionHistory`, `JobScheduler` + drop-in controllers

Import

What's inside

@sdcorejs/nestjs

SdCoreModule.forRoot({...}) + ergonomic re-exports

@sdcorejs/nestjs/core

ORM base classes, request context, multi-tenancy, audit

@sdcorejs/nestjs/auth

JWT / Keycloak strategies + permission guards & decorators

@sdcorejs/nestjs/services

context-aware HTTP client + cache (memory / redis)

@sdcorejs/nestjs/queue

BullMQ QueueModule + SdWorkerHost

@sdcorejs/nestjs/validation

ZodValidationGuard + query presets (Zod v4)

@sdcorejs/nestjs/i18n

i18n resolver + exception filter + en/vi core.* catalogs

@sdcorejs/nestjs/features

UploadedFile, ActionHistory, JobScheduler + drop-in controllers

@sdcorejs/nestjsThe cross-cutting NestJS kernel