@haatlabs-core/nest-common

What every app's NestJS API shares, below authentication.

• Tokens (CONFIG, LOGGER, APP_DB, SYSTEM_DB, REDIS, RATE_LIMITER, METRICS, PLAIN_FETCH, FETCH, MAILER, TOKEN_CIPHER, STORE_TOKENS): registered symbols, so two installed copies name the same provider. An app's infra/tokens.ts re-exports them beside its own.
• AppExceptionFilter: every error as { error: { code, message, requestId } }; a fault of ours is INTERNAL, logged without SQL or bound values, and never shown.
• HtmlProblemFilter with the provider HTML_PROBLEM_OPTIONS: a page, not JSON, for a refusal a person's browser was sent to.
• ZodPipe, Public / OptionalAuth (the auth mode nest-auth's guard reads).
• MAILER is bound by the app to @haatlabs-core/mailer's mailerFromConfig(config.mail).
• requireFeature / requireFeatureFor over a FeatureSource, with FEATURE_ERRORS (spread into defineErrors by an app with plans).
• HealthController (/health/live, /health/ready) over the provider HEALTH_CHECKS, with postgresCheck and redisCheck; a check may be advisory and cached (cacheMs).
• createFastifyApp(module, options): request IDs, a span per request, metrics by route pattern, helmet, cookies, CORS and the OpenAPI document. installShutdown and warnAuthMisconfig for the app's main. oneMonthAfter. observeHttp is given before the app exists, so an app makes its metrics in main (with @haatlabs-core/observability/metrics) and hands the same object to its module as METRICS.

Every @nestjs/* package, fastify, ioredis, drizzle-orm and zod are peers.

Install

pnpm add @haatlabs-core/nest-common

It leaves these packages to your app, so the app holds one copy: @fastify/cookie, @fastify/helmet, @nestjs/common, @nestjs/core, @nestjs/platform-fastify, @nestjs/swagger, drizzle-orm, fastify, ioredis, reflect-metadata, rxjs, zod.