@nexus_js/cli 0.6.0

package/dist/audit.js

@@ -0,0 +1,383 @@
+/**
+ * nexus audit — Security & Best Practices Auditor.
+ *
+ * Unlike `npm audit` (which only checks dependency CVEs), Nexus audit
+ * analyzes your application code and architecture for security issues:
+ *
+ *   1. Secret Leaks  — env vars / keys referenced in client code
+ *   2. Missing CSRF  — Server Actions without csrf protection
+ *   3. No Auth Guard — Routes that likely need authentication but don't have it
+ *   4. XSS Vectors   — `innerHTML`, `dangerouslySetInnerHTML` patterns in islands
+ *   5. Security Headers — Missing CSP, HSTS, X-Frame-Options in nexus.config.ts
+ *   6. Forms Without Validation — Action handlers with no schema
+ *   7. Hardcoded Secrets — API keys embedded in source files
+ *   8. Open Redirects — Unvalidated redirect targets
+ *   9. Rate Limit Coverage — Public actions without rate limiting
+ *  10. Dependency Audit — Wraps npm/pnpm audit for CVE summary
+ */
+import { readdir, readFile } from 'node:fs/promises';
+import { join, relative, extname } from 'node:path';
+import { execSync } from 'node:child_process';
+// ── ANSI palette ──────────────────────────────────────────────────────────────
+const c = {
+    reset: '\x1b[0m', bold: '\x1b[1m', dim: '\x1b[2m',
+    red: '\x1b[31m', green: '\x1b[32m', yellow: '\x1b[33m',
+    blue: '\x1b[34m', mag: '\x1b[35m', cyan: '\x1b[36m',
+    gray: '\x1b[90m', white: '\x1b[97m',
+};
+const sym = {
+    error: `${c.red}✖${c.reset}`,
+    warn: `${c.yellow}⚠${c.reset}`,
+    ok: `${c.green}✔${c.reset}`,
+    info: `${c.cyan}ℹ${c.reset}`,
+    shield: `${c.mag}🛡${c.reset}`,
+};
+const SEVERITY_ORDER = {
+    critical: 0, high: 1, medium: 2, low: 3, info: 4,
+};
+const SEVERITY_COLOR = {
+    critical: c.red,
+    high: c.red,
+    medium: c.yellow,
+    low: c.cyan,
+    info: c.gray,
+};
+const RULES = [
+    // ── Secret Leaks ────────────────────────────────────────────────────────────
+    {
+        id: 'secret-env-pattern', category: 'Secret Leak', severity: 'critical',
+        title: 'Hardcoded secret pattern detected',
+        description: 'A variable matching a secret pattern (*_KEY, *_SECRET, *_PASSWORD, *_TOKEN) was found outside a server block.',
+        fix: 'Move secrets to the server frontmatter block (---) and never reference them in <script> islands.',
+        pattern: /(?:api_?key|secret_?key|private_?key|password|db_?pass|jwt_?secret|auth_?token)\s*[=:]\s*['"`][^'"`\s]{8,}/i,
+    },
+    {
+        id: 'process-env-client', category: 'Secret Leak', severity: 'critical',
+        title: 'process.env used in client context',
+        description: '`process.env` variables are undefined in the browser. If this is a secret, it will be exposed in the JS bundle.',
+        fix: 'Use process.env only inside the server frontmatter (---). For public env vars, use import.meta.env.PUBLIC_*.',
+        pattern: /process\.env\.\w+/,
+        clientOnly: true,
+        extensions: ['.nx', '.ts', '.js'],
+    },
+    {
+        id: 'hardcoded-connection-string', category: 'Secret Leak', severity: 'critical',
+        title: 'Hardcoded database connection string',
+        description: 'A database URL with credentials was found in source code.',
+        fix: 'Store connection strings in environment variables and load them only in server code.',
+        pattern: /(['"`])(postgresql|mysql|mongodb|redis|sqlite):\/\/[^:]+:[^@]+@[^'"`\s]+\1/i,
+    },
+    // ── XSS Vectors ─────────────────────────────────────────────────────────────
+    {
+        id: 'unsafe-innerhtml', category: 'XSS', severity: 'high',
+        title: 'Unsafe innerHTML assignment',
+        description: '`innerHTML` allows arbitrary HTML injection. If the value comes from user input or an API, this is an XSS vulnerability.',
+        fix: 'Use `textContent` for plain text. For trusted HTML, use `@nexus_js/ui` components. For user HTML, use DOMPurify.sanitize().',
+        pattern: /\.innerHTML\s*=/,
+        extensions: ['.nx', '.ts', '.js'],
+    },
+    {
+        id: 'unsafe-insertadjacenthtml', category: 'XSS', severity: 'high',
+        title: 'Unsafe insertAdjacentHTML call',
+        description: '`insertAdjacentHTML` is equivalent to innerHTML in terms of XSS risk.',
+        fix: 'Use DOM methods (createElement, appendChild) or a safe template literal library.',
+        pattern: /\.insertAdjacentHTML\s*\(/,
+        extensions: ['.nx', '.ts', '.js'],
+    },
+    {
+        id: 'eval-usage', category: 'XSS', severity: 'critical',
+        title: 'eval() usage detected',
+        description: '`eval()` executes arbitrary code and is a severe XSS and code injection risk.',
+        fix: 'Remove eval(). Use JSON.parse for data, or structured function calls.',
+        pattern: /\beval\s*\(/,
+        extensions: ['.nx', '.ts', '.js'],
+    },
+    // ── Missing Security ─────────────────────────────────────────────────────────
+    {
+        id: 'console-log-sensitive', category: 'Info Disclosure', severity: 'medium',
+        title: 'console.log may expose sensitive data',
+        description: 'console.log statements found in server-side code may expose user data or secrets in production logs.',
+        fix: 'Use the Nexus logger (nexusLogger.info) which respects the IS_DEV flag. Remove or guard console.log in production.',
+        pattern: /console\.(log|info|debug)\s*\([^)]*(?:password|secret|token|key|auth)/i,
+        extensions: ['.ts', '.js', '.mjs'],
+    },
+    // ── Open Redirects ───────────────────────────────────────────────────────────
+    {
+        id: 'open-redirect', category: 'Open Redirect', severity: 'high',
+        title: 'Potential open redirect via user-controlled URL',
+        description: 'Redirecting to a URL from query parameters or form input without validation can be exploited for phishing.',
+        fix: 'Validate redirect URLs against an allowlist. Use `new URL(input, origin)` and check that origin matches.',
+        pattern: /redirect\s*\(\s*(?:req|request|url|params|query|searchParams)\./,
+        extensions: ['.nx', '.ts', '.js'],
+    },
+    // ── Missing CSP ──────────────────────────────────────────────────────────────
+    {
+        id: 'missing-csp', category: 'Security Headers', severity: 'medium',
+        title: 'Content-Security-Policy not configured',
+        description: 'Without CSP, browsers allow any script to execute, making XSS attacks much more dangerous.',
+        fix: 'Add security headers in nexus.config.ts: headers: { "Content-Security-Policy": "default-src \'self\'" }',
+    },
+    {
+        id: 'missing-hsts', category: 'Security Headers', severity: 'medium',
+        title: 'HSTS (Strict-Transport-Security) not configured',
+        description: 'Without HSTS, users can be downgraded to HTTP on subsequent visits.',
+        fix: 'Add to nexus.config.ts: headers: { "Strict-Transport-Security": "max-age=31536000; includeSubDomains" }',
+    },
+    {
+        id: 'missing-x-frame', category: 'Security Headers', severity: 'low',
+        title: 'X-Frame-Options not configured',
+        description: 'Without X-Frame-Options, your site can be embedded in iframes (clickjacking risk).',
+        fix: 'Add to nexus.config.ts: headers: { "X-Frame-Options": "DENY" }',
+    },
+];
+// ── File scanner ──────────────────────────────────────────────────────────────
+async function collectFiles(dir, exts = ['.nx', '.ts', '.js', '.mjs']) {
+    const results = [];
+    let entries;
+    try {
+        entries = await readdir(dir, { withFileTypes: true });
+    }
+    catch {
+        return results;
+    }
+    for (const e of entries) {
+        if (e.name.startsWith('.') || e.name === 'node_modules' || e.name === 'dist')
+            continue;
+        const full = join(dir, e.name);
+        if (e.isDirectory()) {
+            results.push(...await collectFiles(full, exts));
+        }
+        else if (exts.includes(extname(e.name))) {
+            results.push(full);
+        }
+    }
+    return results;
+}
+async function scanFile(filepath, root, rules) {
+    const findings = [];
+    let source;
+    try {
+        source = await readFile(filepath, 'utf-8');
+    }
+    catch {
+        return findings;
+    }
+    const relPath = relative(root, filepath);
+    const lines = source.split('\n');
+    const ext = extname(filepath);
+    // For .nx files, split into server and client blocks
+    let serverLines = [];
+    let isServer = false;
+    let serverDone = false;
+    for (let i = 0; i < lines.length; i++) {
+        if (lines[i]?.trim() === '---') {
+            if (!serverDone) {
+                isServer = !isServer;
+                if (!isServer)
+                    serverDone = true;
+            }
+            continue;
+        }
+        if (isServer)
+            serverLines.push(i);
+    }
+    for (const rule of rules) {
+        if (!rule.pattern)
+            continue;
+        if (rule.extensions && !rule.extensions.includes(ext))
+            continue;
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i] ?? '';
+            // Skip server block for clientOnly rules
+            if (rule.clientOnly && serverLines.includes(i))
+                continue;
+            if (rule.pattern.test(line)) {
+                findings.push({
+                    severity: rule.severity,
+                    category: rule.category,
+                    title: rule.title,
+                    description: rule.description,
+                    file: relPath,
+                    line: i + 1,
+                    fix: rule.fix,
+                });
+                // One finding per rule per file max
+                break;
+            }
+        }
+    }
+    return findings;
+}
+// ── Config scanner ────────────────────────────────────────────────────────────
+async function auditConfig(root) {
+    const findings = [];
+    const configPath = join(root, 'nexus.config.ts');
+    let configSource = '';
+    try {
+        configSource = await readFile(configPath, 'utf-8');
+    }
+    catch { /* no config */ }
+    const SECURITY_HEADERS = ['Content-Security-Policy', 'Strict-Transport-Security', 'X-Frame-Options'];
+    for (const header of SECURITY_HEADERS) {
+        if (!configSource.includes(header)) {
+            const rule = RULES.find((r) => r.id === `missing-${header.toLowerCase().replace(/[^a-z]/g, '-').replace(/-+/g, '-')}`);
+            if (rule) {
+                findings.push({
+                    severity: rule.severity,
+                    category: rule.category,
+                    title: rule.title,
+                    description: rule.description,
+                    file: 'nexus.config.ts',
+                    fix: rule.fix,
+                });
+            }
+        }
+    }
+    // Check for hardened mode
+    if (!configSource.includes('hardened:') && !configSource.includes('"hardened"')) {
+        findings.push({
+            severity: 'info',
+            category: 'Hardened Mode',
+            title: 'Consider enabling Nexus Hardened Mode',
+            description: 'Hardened mode enforces all security headers, CSP nonces, CSRF tokens, and rate limiting globally.',
+            file: 'nexus.config.ts',
+            fix: 'Add hardened: true to defineNexusConfig() or set individual security options.',
+        });
+    }
+    return findings;
+}
+// ── Dependency audit ──────────────────────────────────────────────────────────
+function runDependencyAudit(root) {
+    const findings = [];
+    try {
+        const output = execSync('npm audit --json', { cwd: root, stdio: 'pipe' }).toString();
+        const report = JSON.parse(output);
+        const vulns = report.metadata?.vulnerabilities ?? {};
+        const critical = vulns['critical'] ?? 0;
+        const high = vulns['high'] ?? 0;
+        const moderate = vulns['moderate'] ?? 0;
+        if (critical > 0) {
+            findings.push({
+                severity: 'critical',
+                category: 'Dependencies',
+                title: `${critical} critical vulnerability in dependencies`,
+                description: 'Critical CVEs found in project dependencies.',
+                fix: 'Run `npm audit fix` or `pnpm audit --fix` to update vulnerable packages.',
+            });
+        }
+        if (high > 0) {
+            findings.push({
+                severity: 'high',
+                category: 'Dependencies',
+                title: `${high} high severity vulnerability in dependencies`,
+                description: 'High severity CVEs found in project dependencies.',
+                fix: 'Run `npm audit fix` to update vulnerable packages.',
+            });
+        }
+        if (moderate > 0) {
+            findings.push({
+                severity: 'medium',
+                category: 'Dependencies',
+                title: `${moderate} moderate severity vulnerability in dependencies`,
+                description: 'Moderate CVEs found in project dependencies.',
+                fix: 'Review `npm audit` output and update where possible.',
+            });
+        }
+        if (critical === 0 && high === 0 && moderate === 0) {
+            findings.push({
+                severity: 'info',
+                category: 'Dependencies',
+                title: 'No known vulnerabilities in dependencies',
+                description: 'npm audit returned no critical, high, or moderate vulnerabilities.',
+            });
+        }
+    }
+    catch {
+        findings.push({
+            severity: 'info',
+            category: 'Dependencies',
+            title: 'Dependency audit unavailable',
+            description: 'Could not run npm audit. Ensure you are in a project with package.json.',
+        });
+    }
+    return findings;
+}
+// ── Report formatter ──────────────────────────────────────────────────────────
+function formatFindings(findings, root) {
+    const sorted = [...findings].sort((a, b) => SEVERITY_ORDER[a.severity] - SEVERITY_ORDER[b.severity]);
+    const byCategory = new Map();
+    for (const f of sorted) {
+        const list = byCategory.get(f.category) ?? [];
+        list.push(f);
+        byCategory.set(f.category, list);
+    }
+    const counts = {
+        critical: 0, high: 0, medium: 0, low: 0, info: 0,
+    };
+    for (const f of findings)
+        counts[f.severity]++;
+    console.log();
+    console.log(`  ${sym.shield} ${c.bold}${c.white}Nexus Security Audit${c.reset}  ${c.dim}${root}${c.reset}`);
+    console.log();
+    for (const [category, catFindings] of byCategory) {
+        console.log(`  ${c.bold}${category}${c.reset}`);
+        for (const f of catFindings) {
+            const col = SEVERITY_COLOR[f.severity];
+            const tag = `${col}${f.severity.toUpperCase().padEnd(8)}${c.reset}`;
+            const loc = f.file ? `${c.dim}${f.file}${f.line ? `:${f.line}` : ''}${c.reset}` : '';
+            console.log(`  ${tag}  ${f.title}  ${loc}`);
+            if (f.fix) {
+                console.log(`           ${c.gray}→ ${f.fix}${c.reset}`);
+            }
+        }
+        console.log();
+    }
+    // Summary bar
+    const total = findings.length;
+    const hasIssues = counts.critical + counts.high + counts.medium > 0;
+    console.log(`  ${c.dim}${'─'.repeat(60)}${c.reset}`);
+    console.log(`  ${hasIssues ? sym.error : sym.ok}  ` +
+        `${c.red}${counts.critical} critical${c.reset}  ` +
+        `${c.red}${counts.high} high${c.reset}  ` +
+        `${c.yellow}${counts.medium} medium${c.reset}  ` +
+        `${c.cyan}${counts.low} low${c.reset}  ` +
+        `${c.gray}${counts.info} info${c.reset}  ` +
+        `${c.dim}(${total} total)${c.reset}`);
+    if (!hasIssues) {
+        console.log(`\n  ${sym.ok}  ${c.green}${c.bold}Audit passed — no critical/high/medium issues found.${c.reset}`);
+    }
+    else {
+        console.log(`\n  ${sym.error}  ${c.red}${c.bold}Audit failed — fix critical and high severity issues before deploying.${c.reset}`);
+    }
+    console.log();
+}
+export async function runAudit(opts) {
+    const { root } = opts;
+    console.log(`\n  ${c.cyan}◆${c.reset}  ${c.dim}Scanning for security issues...${c.reset}`);
+    const allFindings = [];
+    // 1. Scan source files
+    const files = await collectFiles(root);
+    for (const file of files) {
+        const findings = await scanFile(file, root, RULES.filter((r) => !!r.pattern));
+        allFindings.push(...findings);
+    }
+    // 2. Audit nexus.config.ts
+    const configFindings = await auditConfig(root);
+    allFindings.push(...configFindings);
+    // 3. Dependency audit
+    const depFindings = runDependencyAudit(root);
+    allFindings.push(...depFindings);
+    if (opts.json) {
+        console.log(JSON.stringify(allFindings, null, 2));
+        return;
+    }
+    formatFindings(allFindings, root);
+    // CI mode: exit with code 1 if critical or high issues found
+    if (opts.ci) {
+        const hasCritical = allFindings.some((f) => f.severity === 'critical' || f.severity === 'high');
+        if (hasCritical) {
+            process.exitCode = 1;
+        }
+    }
+}
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAQ,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,iFAAiF;AACjF,MAAM,CAAC,GAAG;IACR,KAAK,EAAG,SAAS,EAAG,IAAI,EAAI,SAAS,EAAG,GAAG,EAAK,SAAS;IACzD,GAAG,EAAK,UAAU,EAAE,KAAK,EAAG,UAAU,EAAE,MAAM,EAAE,UAAU;IAC1D,IAAI,EAAI,UAAU,EAAE,GAAG,EAAK,UAAU,EAAE,IAAI,EAAI,UAAU;IAC1D,IAAI,EAAI,UAAU,EAAE,KAAK,EAAG,UAAU;CACvC,CAAC;AAEF,MAAM,GAAG,GAAG;IACV,KAAK,EAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE;IAC7B,IAAI,EAAI,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE;IAChC,EAAE,EAAM,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE;IAC/B,IAAI,EAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE;IAC9B,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,EAAE;CAC/B,CAAC;AAgBF,MAAM,cAAc,GAA6B;IAC/C,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;CACjD,CAAC;AAEF,MAAM,cAAc,GAA6B;IAC/C,QAAQ,EAAE,CAAC,CAAC,GAAG;IACf,IAAI,EAAM,CAAC,CAAC,GAAG;IACf,MAAM,EAAI,CAAC,CAAC,MAAM;IAClB,GAAG,EAAO,CAAC,CAAC,IAAI;IAChB,IAAI,EAAM,CAAC,CAAC,IAAI;CACjB,CAAC;AAkBF,MAAM,KAAK,GAAW;IACpB,+EAA+E;IAC/E;QACE,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU;QACvE,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,+GAA+G;QAC5H,GAAG,EAAE,kGAAkG;QACvG,OAAO,EAAE,6GAA6G;KACvH;IACD;QACE,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU;QACvE,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EAAE,iHAAiH;QAC9H,GAAG,EAAE,8GAA8G;QACnH,OAAO,EAAE,mBAAmB;QAC5B,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;KAClC;IACD;QACE,EAAE,EAAE,6BAA6B,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU;QAChF,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EAAE,2DAA2D;QACxE,GAAG,EAAE,sFAAsF;QAC3F,OAAO,EAAE,6EAA6E;KACvF;IAED,+EAA+E;IAC/E;QACE,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM;QACzD,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,0HAA0H;QACvI,GAAG,EAAE,6HAA6H;QAClI,OAAO,EAAE,iBAAiB;QAC1B,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;KAClC;IACD;QACE,EAAE,EAAE,2BAA2B,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM;QAClE,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,uEAAuE;QACpF,GAAG,EAAE,kFAAkF;QACvF,OAAO,EAAE,2BAA2B;QACpC,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;KAClC;IACD;QACE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU;QACvD,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,+EAA+E;QAC5F,GAAG,EAAE,uEAAuE;QAC5E,OAAO,EAAE,aAAa;QACtB,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;KAClC;IAED,gFAAgF;IAChF;QACE,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ;QAC5E,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EAAE,sGAAsG;QACnH,GAAG,EAAE,oHAAoH;QACzH,OAAO,EAAE,wEAAwE;QACjF,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;KACnC;IAED,gFAAgF;IAChF;QACE,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;QAChE,KAAK,EAAE,iDAAiD;QACxD,WAAW,EAAE,4GAA4G;QACzH,GAAG,EAAE,0GAA0G;QAC/G,OAAO,EAAE,iEAAiE;QAC1E,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;KAClC;IAED,gFAAgF;IAChF;QACE,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ;QACnE,KAAK,EAAE,wCAAwC;QAC/C,WAAW,EAAE,4FAA4F;QACzG,GAAG,EAAE,yGAAyG;KAC/G;IACD;QACE,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ;QACpE,KAAK,EAAE,iDAAiD;QACxD,WAAW,EAAE,qEAAqE;QAClF,GAAG,EAAE,yGAAyG;KAC/G;IACD;QACE,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,KAAK;QACpE,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,oFAAoF;QACjG,GAAG,EAAE,gEAAgE;KACtE;CACF,CAAC;AAEF,iFAAiF;AAEjF,KAAK,UAAU,YAAY,CACzB,GAAW,EACX,OAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;IAE9C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAmD,CAAC;IACxD,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,CAAC;IAAC,CAAC;IAE3B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACvF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,QAAgB,EAChB,IAAgB,EAChB,KAAgB;IAEhB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,QAAQ,CAAC;IAAC,CAAC;IAE5B,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,KAAK,GAAK,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,GAAG,GAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IAElC,qDAAqD;IACrD,IAAI,WAAW,GAAa,EAAE,CAAC;IAC/B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;gBAAC,QAAQ,GAAG,CAAC,QAAQ,CAAC;gBAAC,IAAI,CAAC,QAAQ;oBAAE,UAAU,GAAG,IAAI,CAAC;YAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,IAAI,QAAQ;YAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,SAAS;QAC5B,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAEhE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAE5B,yCAAyC;YACzC,IAAI,IAAI,CAAC,UAAU,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,SAAS;YAEzD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAK,IAAI,CAAC,QAAQ;oBAC1B,QAAQ,EAAK,IAAI,CAAC,QAAQ;oBAC1B,KAAK,EAAQ,IAAI,CAAC,KAAK;oBACvB,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,IAAI,EAAS,OAAO;oBACpB,IAAI,EAAS,CAAC,GAAG,CAAC;oBAClB,GAAG,EAAU,IAAI,CAAC,GAAG;iBACtB,CAAC,CAAC;gBACH,oCAAoC;gBACpC,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACjD,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,CAAC;QAAC,YAAY,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAErF,MAAM,gBAAgB,GAAG,CAAC,yBAAyB,EAAE,2BAA2B,EAAE,iBAAiB,CAAC,CAAC;IACrG,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;QACtC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,WAAW,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACvH,IAAI,IAAI,EAAE,CAAC;gBACT,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAK,IAAI,CAAC,QAAQ;oBAC1B,QAAQ,EAAK,IAAI,CAAC,QAAQ;oBAC1B,KAAK,EAAQ,IAAI,CAAC,KAAK;oBACvB,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,IAAI,EAAS,iBAAiB;oBAC9B,GAAG,EAAU,IAAI,CAAC,GAAG;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAChF,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAK,MAAM;YACnB,QAAQ,EAAK,eAAe;YAC5B,KAAK,EAAQ,uCAAuC;YACpD,WAAW,EAAE,mGAAmG;YAChH,IAAI,EAAS,iBAAiB;YAC9B,GAAG,EAAU,+EAA+E;SAC7F,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,iFAAiF;AAEjF,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAE/B,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,eAAe,IAAI,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAO,KAAK,CAAC,MAAM,CAAC,IAAQ,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAExC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAK,UAAU;gBACvB,QAAQ,EAAK,cAAc;gBAC3B,KAAK,EAAQ,GAAG,QAAQ,yCAAyC;gBACjE,WAAW,EAAE,8CAA8C;gBAC3D,GAAG,EAAU,0EAA0E;aACxF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAK,MAAM;gBACnB,QAAQ,EAAK,cAAc;gBAC3B,KAAK,EAAQ,GAAG,IAAI,8CAA8C;gBAClE,WAAW,EAAE,mDAAmD;gBAChE,GAAG,EAAU,oDAAoD;aAClE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAK,QAAQ;gBACrB,QAAQ,EAAK,cAAc;gBAC3B,KAAK,EAAQ,GAAG,QAAQ,kDAAkD;gBAC1E,WAAW,EAAE,8CAA8C;gBAC3D,GAAG,EAAU,sDAAsD;aACpE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAK,MAAM;gBACnB,QAAQ,EAAK,cAAc;gBAC3B,KAAK,EAAQ,0CAA0C;gBACvD,WAAW,EAAE,oEAAoE;aAClF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAK,MAAM;YACnB,QAAQ,EAAK,cAAc;YAC3B,KAAK,EAAQ,8BAA8B;YAC3C,WAAW,EAAE,yEAAyE;SACvF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,iFAAiF;AAEjF,SAAS,cAAc,CAAC,QAAwB,EAAE,IAAY;IAC5D,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAClE,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,MAAM,GAA6B;QACvC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;KACjD,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;IAE/C,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,uBAAuB,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5G,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,KAAK,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,UAAU,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,QAAQ,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;YACpE,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,cAAc;IACd,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAEpE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CACT,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI;QACvC,GAAG,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,QAAQ,YAAY,CAAC,CAAC,KAAK,IAAI;QACjD,GAAG,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC,KAAK,IAAI;QACzC,GAAG,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,UAAU,CAAC,CAAC,KAAK,IAAI;QAChD,GAAG,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,KAAK,IAAI;QACxC,GAAG,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC,KAAK,IAAI;QAC1C,GAAG,CAAC,CAAC,GAAG,IAAI,KAAK,UAAU,CAAC,CAAC,KAAK,EAAE,CACrC,CAAC;IAEF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,uDAAuD,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAClH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,yEAAyE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACrI,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB;IAC/C,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAEtB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,kCAAkC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAE3F,MAAM,WAAW,GAAmB,EAAE,CAAC;IAEvC,uBAAuB;IACvB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9E,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,2BAA2B;IAC3B,MAAM,cAAc,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/C,WAAW,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;IAEpC,sBAAsB;IACtB,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC7C,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;IAEjC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAElC,6DAA6D;IAC7D,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAC1D,CAAC;QACF,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/bin.d.ts

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+/**
+ * Nexus CLI — nexus dev | nexus build | nexus start | nexus check | nexus studio | nexus audit
+ */
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/dist/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA;;GAEG"}