@nexus_js/cli 0.6.0

package/dist/analyzer.js

@@ -0,0 +1,247 @@
+/**
+ * Nexus Bundle Budget Analyzer
+ *
+ * Generates a detailed visual report of JS payload per route.
+ * Runs automatically after `nexus build` or standalone with `nexus analyze`.
+ *
+ * Terminal output:
+ *
+ *   ◆ Nexus Bundle Analysis
+ *   ════════════════════════════════════════════════════════
+ *
+ *   Route: /
+ *   ┌─────────────────────────────┬────────┬────────┬───────┐
+ *   │ Module                      │  Raw   │ Gzip   │ Share │
+ *   ├─────────────────────────────┼────────┼────────┼───────┤
+ *   │ @nexus_js/runtime (shared)     │  4.2KB │  1.8KB │  ███░ │
+ *   │ islands/Counter.client.js   │  1.1KB │  0.5KB │  █░░░ │
+ *   │ islands/SearchBar.client.js │  2.8KB │  1.1KB │  ██░░ │
+ *   ├─────────────────────────────┼────────┼────────┼───────┤
+ *   │ TOTAL                       │  8.1KB │  3.4KB │       │
+ *   └─────────────────────────────┴────────┴────────┴───────┘
+ *   Budget: ✓ Under 10KB limit
+ *
+ *   Route: /blog/[slug]  ← OVER BUDGET ⚠
+ *   ...
+ *
+ *   ─── Summary ─────────────────────────────────────────────
+ *   Routes analyzed:  12
+ *   Under budget:     10
+ *   Over budget:       2  ⚠ /dashboard, /checkout
+ *   Largest route:    /checkout (48KB gzip)
+ *   Zero-JS routes:    4  (/, /about, /blog, /contact)
+ */
+import { readFile, stat } from 'node:fs/promises';
+import { join, relative } from 'node:path';
+// ── ANSI helpers ──────────────────────────────────────────────────────────────
+const C = {
+    reset: '\x1b[0m',
+    bold: '\x1b[1m',
+    dim: '\x1b[2m',
+    red: '\x1b[31m',
+    green: '\x1b[32m',
+    yellow: '\x1b[33m',
+    cyan: '\x1b[36m',
+    white: '\x1b[37m',
+    bgRed: '\x1b[41m',
+    bgGreen: '\x1b[42m',
+};
+// ── Main entry ────────────────────────────────────────────────────────────────
+export async function analyzeBundles(opts) {
+    const budgetBytes = opts.budgetBytes ?? 50 * 1024; // 50KB gzip default
+    const outDir = join(opts.root, '.nexus', 'output');
+    const verbose = opts.verbose ?? true;
+    const routes = await collectRouteBudgets(outDir, budgetBytes);
+    const runtimeSize = await measureRuntime(outDir);
+    const report = {
+        routes,
+        runtimeSize,
+        generatedAt: new Date().toISOString(),
+        totalIslands: routes.flatMap((r) => r.modules.filter((m) => m.kind === 'island')).length,
+        zeroJSRoutes: routes.filter((r) => r.isZeroJS).length,
+        overBudgetRoutes: routes.filter((r) => r.overBudget).map((r) => r.route),
+    };
+    // Output
+    if (opts.format === 'json') {
+        const json = JSON.stringify(report, null, 2);
+        if (opts.outFile) {
+            const { writeFile } = await import('node:fs/promises');
+            await writeFile(opts.outFile, json, 'utf-8');
+        }
+        else {
+            console.log(json);
+        }
+    }
+    else {
+        printTerminalReport(report, verbose);
+    }
+    return report;
+}
+// ── Route budget collection ───────────────────────────────────────────────────
+async function collectRouteBudgets(outDir, budgetBytes) {
+    const routes = [];
+    // Read the manifest
+    let manifest;
+    try {
+        const raw = await readFile(join(outDir, 'manifest.json'), 'utf-8');
+        manifest = JSON.parse(raw);
+    }
+    catch {
+        return [];
+    }
+    for (const route of manifest.routes) {
+        const modules = [];
+        // Check for client bundle
+        const clientPath = route.filepath.replace(/\.nx$/, '.client.js');
+        const clientAbs = join(outDir, clientPath);
+        try {
+            const info = await stat(clientAbs);
+            if (info.isFile()) {
+                const content = await readFile(clientAbs);
+                modules.push({
+                    name: relative(outDir, clientAbs),
+                    path: clientAbs,
+                    rawBytes: content.length,
+                    gzipBytes: estimateGzip(content.length),
+                    kind: 'island',
+                });
+            }
+        }
+        catch { }
+        const totalRaw = modules.reduce((s, m) => s + m.rawBytes, 0);
+        const totalGzip = modules.reduce((s, m) => s + m.gzipBytes, 0);
+        routes.push({
+            route: route.pattern,
+            modules,
+            totalRaw,
+            totalGzip,
+            isZeroJS: modules.length === 0,
+            overBudget: totalGzip > budgetBytes,
+            budgetBytes,
+        });
+    }
+    return routes;
+}
+async function measureRuntime(outDir) {
+    try {
+        const runtimePath = join(outDir, 'runtime.js');
+        const info = await stat(runtimePath);
+        return estimateGzip(info.size);
+    }
+    catch {
+        return 0; // Runtime not found — report 0
+    }
+}
+// ── Terminal renderer ─────────────────────────────────────────────────────────
+function printTerminalReport(report, verbose) {
+    const width = 66;
+    const line = '═'.repeat(width);
+    const thin = '─'.repeat(width);
+    console.log('');
+    console.log(`  ${C.cyan}${C.bold}◆ Nexus Bundle Analysis${C.reset}`);
+    console.log(`  ${C.dim}${line}${C.reset}`);
+    console.log('');
+    // Runtime overhead
+    if (report.runtimeSize > 0) {
+        console.log(`  ${C.dim}Shared Runtime${C.reset}  ${fmtSize(report.runtimeSize)} gzip  ${C.dim}(amortized across all routes)${C.reset}`);
+        console.log('');
+    }
+    for (const route of report.routes) {
+        const statusIcon = route.isZeroJS
+            ? `${C.green}◉ 0 JS${C.reset}`
+            : route.overBudget
+                ? `${C.red}⚠ OVER BUDGET${C.reset}`
+                : `${C.green}✓${C.reset}`;
+        console.log(`  ${C.bold}Route: ${route.route}${C.reset}  ${statusIcon}`);
+        if (route.isZeroJS) {
+            console.log(`    ${C.dim}No JavaScript sent to client — pure HTML${C.reset}`);
+            console.log('');
+            continue;
+        }
+        if (verbose && route.modules.length > 0) {
+            // Table header
+            console.log(`    ${C.dim}┌${'─'.repeat(32)}┬────────┬────────┬──────────┐${C.reset}`);
+            console.log(`    ${C.dim}│${C.reset} ${pad('Module', 30)} ${C.dim}│${C.reset}  ${C.dim}Raw   ${C.reset}${C.dim}│${C.reset}  ${C.dim}Gzip  ${C.reset}${C.dim}│${C.reset}  Budget   ${C.dim}│${C.reset}`);
+            console.log(`    ${C.dim}├${'─'.repeat(32)}┼────────┼────────┼──────────┤${C.reset}`);
+            for (const mod of route.modules) {
+                const share = Math.min(1, mod.gzipBytes / route.budgetBytes);
+                const bar = buildBar(share, 8);
+                const name = truncate(mod.name, 30);
+                const kindBadge = kindColor(mod.kind);
+                console.log(`    ${C.dim}│${C.reset} ${kindBadge}${pad(name, 30)}${C.reset} ${C.dim}│${C.reset} ${pad(fmtSize(mod.rawBytes), 6)} ${C.dim}│${C.reset} ${pad(fmtSize(mod.gzipBytes), 6)} ${C.dim}│${C.reset} ${bar} ${C.dim}│${C.reset}`);
+            }
+            console.log(`    ${C.dim}├${'─'.repeat(32)}┼────────┼────────┼──────────┤${C.reset}`);
+            const totalColor = route.overBudget ? C.red : C.green;
+            console.log(`    ${C.dim}│${C.reset} ${C.bold}${pad('TOTAL', 30)}${C.reset} ${C.dim}│${C.reset} ${pad(fmtSize(route.totalRaw), 6)} ${C.dim}│${C.reset} ${totalColor}${pad(fmtSize(route.totalGzip), 6)}${C.reset} ${C.dim}│${C.reset} ${buildBudgetBar(route)} ${C.dim}│${C.reset}`);
+            console.log(`    ${C.dim}└${'─'.repeat(32)}┴────────┴────────┴──────────┘${C.reset}`);
+        }
+        else {
+            const totalColor = route.overBudget ? C.red : C.green;
+            console.log(`    JS: ${fmtSize(route.totalRaw)} raw  ${totalColor}${fmtSize(route.totalGzip)} gzip${C.reset}  (${route.modules.length} island${route.modules.length !== 1 ? 's' : ''})`);
+        }
+        if (route.overBudget) {
+            const excess = fmtSize(route.totalGzip - route.budgetBytes);
+            console.log(`    ${C.red}Budget exceeded by ${excess}. Consider: client:visible, code-splitting, or reducing island scope.${C.reset}`);
+        }
+        console.log('');
+    }
+    // Summary
+    console.log(`  ${C.dim}${thin}${C.reset}`);
+    console.log(`  ${C.bold}Summary${C.reset}`);
+    console.log(`    Routes analyzed:  ${report.routes.length}`);
+    console.log(`    ${C.green}Zero-JS routes:   ${report.zeroJSRoutes}${C.reset}`);
+    console.log(`    Total islands:    ${report.totalIslands}`);
+    if (report.overBudgetRoutes.length > 0) {
+        console.log(`    ${C.red}Over budget:      ${report.overBudgetRoutes.length}${C.reset}`);
+        for (const r of report.overBudgetRoutes) {
+            console.log(`      ${C.dim}↳ ${r}${C.reset}`);
+        }
+    }
+    else {
+        console.log(`    ${C.green}All routes within budget ✓${C.reset}`);
+    }
+    console.log('');
+}
+// ── Formatters ────────────────────────────────────────────────────────────────
+function fmtSize(bytes) {
+    if (bytes === 0)
+        return '0B';
+    if (bytes < 1024)
+        return `${bytes}B`;
+    if (bytes < 1024 * 1024)
+        return `${(bytes / 1024).toFixed(1)}KB`;
+    return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;
+}
+function pad(s, n) {
+    return s.length >= n ? s.slice(0, n) : s + ' '.repeat(n - s.length);
+}
+function truncate(s, n) {
+    return s.length > n ? '…' + s.slice(-(n - 1)) : s;
+}
+function buildBar(share, width) {
+    const filled = Math.round(share * width);
+    const empty = width - filled;
+    return `${C.cyan}${'█'.repeat(filled)}${C.dim}${'░'.repeat(empty)}${C.reset}`;
+}
+function buildBudgetBar(route) {
+    const share = Math.min(1, route.totalGzip / route.budgetBytes);
+    const width = 8;
+    const filled = Math.round(share * width);
+    const empty = width - filled;
+    const color = route.overBudget ? C.red : C.green;
+    return `${color}${'█'.repeat(Math.min(filled, width))}${C.dim}${'░'.repeat(Math.max(0, empty))}${C.reset}`;
+}
+function kindColor(kind) {
+    switch (kind) {
+        case 'runtime': return C.cyan;
+        case 'island': return C.green;
+        case 'shared': return C.yellow;
+        case 'action': return '\x1b[35m';
+        default: return '';
+    }
+}
+/** Estimate gzip size: typically ~40% of raw for JS */
+function estimateGzip(rawBytes) {
+    return Math.round(rawBytes * 0.4);
+}
+//# sourceMappingURL=analyzer.js.map

package/dist/analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyzer.js","sourceRoot":"","sources":["../src/analyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAW,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAW,MAAM,WAAW,CAAC;AA2CpD,iFAAiF;AAEjF,MAAM,CAAC,GAAG;IACR,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,SAAS;IACd,GAAG,EAAE,UAAU;IACf,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,UAAU;IAClB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,UAAU;IACjB,KAAK,EAAE,UAAU;IACjB,OAAO,EAAE,UAAU;CACpB,CAAC;AAEF,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAqB;IACxD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,oBAAoB;IACvE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IAErC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAEjD,MAAM,MAAM,GAAmB;QAC7B,MAAM;QACN,WAAW;QACX,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM;QACxF,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM;QACrD,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;KACzE,CAAC;IAEF,SAAS;IACT,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACvD,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,mBAAmB,CAChC,MAAc,EACd,WAAmB;IAEnB,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,oBAAoB;IACpB,IAAI,QAAkE,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,OAAO,CAAC,CAAC;QACnE,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,OAAO,GAAmB,EAAE,CAAC;QAEnC,0BAA0B;QAC1B,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAE3C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBAClB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAC1C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;oBACjC,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,OAAO,CAAC,MAAM;oBACxB,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC;oBACvC,IAAI,EAAE,QAAQ;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAEV,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAE/D,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,KAAK,CAAC,OAAO;YACpB,OAAO;YACP,QAAQ;YACR,SAAS;YACT,QAAQ,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;YAC9B,UAAU,EAAE,SAAS,GAAG,WAAW;YACnC,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAAc;IAC1C,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;QACrC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,CAAC,+BAA+B;IAC3C,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,SAAS,mBAAmB,CAAC,MAAsB,EAAE,OAAgB;IACnE,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,0BAA0B,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,mBAAmB;IACnB,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,GAAG,gCAAgC,CAAC,CAAC,KAAK,EAAE,CAC3H,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ;YAC/B,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,KAAK,EAAE;YAC9B,CAAC,CAAC,KAAK,CAAC,UAAU;gBAChB,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,KAAK,EAAE;gBACnC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QAE9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,UAAU,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC,CAAC;QAEzE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,2CAA2C,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,SAAS;QACX,CAAC;QAED,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,eAAe;YACf,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACtF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACxM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAEtF,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC7D,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACpC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACtC,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAC3N,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACtF,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACtD,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CACxQ,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,KAAK,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,UAAU,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3L,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,sBAAsB,MAAM,wEAAwE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACzI,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,UAAU;IACV,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,yBAAyB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,qBAAqB,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,yBAAyB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAE5D,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,qBAAqB,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACzF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,6BAA6B,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,iFAAiF;AAEjF,SAAS,OAAO,CAAC,KAAa;IAC5B,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,GAAG,CAAC;IACrC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,GAAG,CAAC,CAAS,EAAE,CAAS;IAC/B,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,KAAa;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC7B,OAAO,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,cAAc,CAAC,KAAkB;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACjD,OAAO,GAAG,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;AAC7G,CAAC;AAED,SAAS,SAAS,CAAC,IAA0B;IAC3C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;QAC9B,KAAK,QAAQ,CAAC,CAAE,OAAO,CAAC,CAAC,KAAK,CAAC;QAC/B,KAAK,QAAQ,CAAC,CAAE,OAAO,CAAC,CAAC,MAAM,CAAC;QAChC,KAAK,QAAQ,CAAC,CAAE,OAAO,UAAU,CAAC;QAClC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;AACpC,CAAC"}

package/dist/audit.d.ts

@@ -0,0 +1,35 @@
+/**
+ * nexus audit — Security & Best Practices Auditor.
+ *
+ * Unlike `npm audit` (which only checks dependency CVEs), Nexus audit
+ * analyzes your application code and architecture for security issues:
+ *
+ *   1. Secret Leaks  — env vars / keys referenced in client code
+ *   2. Missing CSRF  — Server Actions without csrf protection
+ *   3. No Auth Guard — Routes that likely need authentication but don't have it
+ *   4. XSS Vectors   — `innerHTML`, `dangerouslySetInnerHTML` patterns in islands
+ *   5. Security Headers — Missing CSP, HSTS, X-Frame-Options in nexus.config.ts
+ *   6. Forms Without Validation — Action handlers with no schema
+ *   7. Hardcoded Secrets — API keys embedded in source files
+ *   8. Open Redirects — Unvalidated redirect targets
+ *   9. Rate Limit Coverage — Public actions without rate limiting
+ *  10. Dependency Audit — Wraps npm/pnpm audit for CVE summary
+ */
+export type Severity = 'critical' | 'high' | 'medium' | 'low' | 'info';
+export interface AuditFinding {
+    severity: Severity;
+    category: string;
+    title: string;
+    description: string;
+    file?: string;
+    line?: number;
+    fix?: string;
+}
+export interface AuditOptions {
+    root: string;
+    fix?: boolean;
+    ci?: boolean;
+    json?: boolean;
+}
+export declare function runAudit(opts: AuditOptions): Promise<void>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAwBH,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvE,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAK,QAAQ,CAAC;IACtB,QAAQ,EAAK,MAAM,CAAC;IACpB,KAAK,EAAQ,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAQ,MAAM,CAAC;IACpB,IAAI,CAAC,EAAQ,MAAM,CAAC;IACpB,GAAG,CAAC,EAAS,MAAM,CAAC;CACrB;AA6WD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAI,MAAM,CAAC;IACf,GAAG,CAAC,EAAI,OAAO,CAAC;IAChB,EAAE,CAAC,EAAK,OAAO,CAAC;IAChB,IAAI,CAAC,EAAG,OAAO,CAAC;CACjB;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAsChE"}