Feature overview

Everything in Nucleus Framework, in plain words

Nucleus Framework is a production-tested platform for Java 21 / Spring Boot microservices. One reference architecture gives every service built-in orchestration, observability, security, messaging and integration. Below is each module and what it does — follow any card into the module reference for the full detail.

Orchestration & Workflow
Model business processes as data, run them durably, and watch every run live.

Visual Workflow Engine

Build multi-step processes in a drag-and-drop designer as a JSON DAG — 14 step kinds including branches, loops, dynamic scatter/gather, sub-workflows, human approvals, GraalVM scripting and service calls. Durable waits survive restarts; simulate a flow before it touches anything real.

Workflow details →

Execution Control Service

nucleus-execution-control-service

The deployable engine host: a durable run store and a control plane to start, suspend, resume, replay and cancel runs. Triggers from REST, a Kafka topic, a cron schedule or a file arrival; idempotent steps, saga compensation and SLA timers built in.

Reference →
Observability
Register a service and it is monitored immediately — then record and replay what happened.

Zero-setup Monitoring

nucleus-monitoring-client

Add the dependency, enable the monitoring profile, and a service self-registers with live health, CPU, memory, disk, threads and GC — streamed over Kafka into a fleet registry with history charts, red status when an instance is in trouble, and SSE-pushed alerts.

Observability details →

Session Recordings & Replay

Schedule a diagnostic capture window ahead of time (tonight's batch, next release) or record on the spot. Logs, GC pauses, thread dumps and CPU/heap samples replay on one synchronized timeline, then archive to object storage.

How replay works →

Session Tracking & MDC

Every HTTP request carries a session ID from the browser through every backend service into each log line, so support can trace one user's whole session across microservices from a single ID.

Reference →
Security & Identity
One identity layer, one gateway, one audit format — managed at runtime, fully audited.

Authentication (OAuth2 / OIDC)

nucleus-authentication

An OAuth2 / OIDC authorization server with JWT and rotating keys, client-credentials for service-to-service calls, and a password-reset pipeline with anti-enumeration and anti-replay.

Reference →

Security Gateway

nucleus-security-gateway

A reactive WebFlux edge gateway that routes from the live service registry, with an off-heap blacklist (revoked tokens, blocked users, blocked IPs) and marker-token verification so backends reject anything that bypassed the gateway.

Reference →

Audit

nucleus-audit-core

Add @AuditAction to any method and Nucleus records who, what, when and with what data — one audit format across every service, searchable, exportable and retention-aware.

Reference →

Users, Roles & Permissions

nucleus-user

Identity, roles, groups and route/authority rules in the database, managed from the operations console — grant or revoke access at runtime without a redeploy.

Reference →

Field-Level Data Obfuscation

Per-client, per-field AES/GCM encryption for sensitive values (descriptions, memos) — encrypted at rest, decrypted in-memory only when processing needs it.

Reference →

PII-Safe Logging

A logging framework that keeps personal data out of log output by construction, so diagnostics never leak what they shouldn't.

Reference →
Messaging, Data & Integration
One API for messaging, one catalog for everything else you connect out to.

Messaging Connectors

nucleus-connectors

One @NucleusListener / @NucleusPublish annotation works across 13 messaging brokers — Kafka, RabbitMQ, SQS/SNS/Kinesis, Google Pub/Sub, Azure Service Bus and JMS (ActiveMQ, Artemis, Solace, IBM MQ). Switch brokers with a config change, not a refactor.

Connectors details →

Integration Connectors

nucleus-connectors-service

A typed, Vault-backed catalog of 25 connection types — databases, REST/SOAP endpoints, SSH hosts, object stores, file/FTP servers, raw sockets, SNMP and more. Register once, run cataloged operations, with the native client as an escape hatch.

Connectors details →

AI Framework

nucleus-core · AI

A provider-agnostic LLM client: build an AiRequest, get a strongly-typed AiResult. Anthropic and OpenAI built in (multimodal, JSON responses), with classified errors and retries — add another provider with three beans.

Reference →

Object Storage

nucleus-storage

A MinIO / S3-compatible object-storage abstraction — upload, download and delete on standardized paths, with a pluggable backend you can swap from MinIO to AWS S3.

Reference →

Real-time UI Channel

nucleus-ui-message-broker

The server-sent-events channel that pushes live updates — health, alerts, run progress — from the platform to the console in real time.

Reference →

Mail

nucleus-mail

A Kafka-backed mail pipeline for transactional email — templated, asynchronous, and decoupled from the services that trigger it.

Reference →
Platform & Configuration
The shared foundation every Nucleus service is built on.

Core

nucleus-core

The reference architecture foundation — JWT security plumbing, MDC diagnostics, the in-process step model, low-latency primitives (off-heap caches, bounded executors, AFTER_COMMIT side effects) and the conventions every module builds on.

Reference →

Config

nucleus-config

A Spring Cloud Config server backed by MySQL, so configuration is materialized, versioned and queryable instead of scattered across files.

Reference →

System Properties

nucleus-system-property-service

The gateway for runtime properties — including a service's own per-instance settings — written through one audited endpoint, never by reaching into another service's tables.

Reference →

Reference Data

nucleus-reference-data

A managed store and browser for shared lookup data (buckets, codes, enumerations) used consistently across services.

Reference →

Address

nucleus-address

A reusable address model and components, so every product handles postal addresses the same way.

Reference →

UI Component Libraries

nucleus-ui-libs

The @nucleus/* Angular libraries the whole console is built from — page shells, list and edit pages, design tokens, the workflow designer and more.

Reference →

What "13 brokers" means

You may see Nucleus described as working with Kafka "across 13 brokers." To be precise: one messaging API — @NucleusListener and @NucleusPublish — runs unchanged across 13 different messaging systems. Kafka is the reference adapter; the same code path also targets RabbitMQ, Amazon SQS/SNS/Kinesis, Google Pub/Sub, Azure Service Bus, and JMS brokers (ActiveMQ, Artemis, Solace, IBM MQ). Your listener never knows which one is on the other end of the wire.

About the name. This is Nucleus Framework at nucleusframework.ca — a Java/Spring microservices platform. It is unrelated to other products that share the word "Nucleus." When you search, use Nucleus Framework with the .ca domain.

See it running, or read the full reference.

Open the live demo → Module reference →