@nexus_js/vite-plugin-nexus 0.7.4

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Nexus Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,27 @@
+# @nexus_js/vite-plugin-nexus
+
+Official Vite plugin for Nexus — transforms .nx files, HMR, island manifests, Server Actions.
+
+## Documentation
+
+All guides, API reference, and examples live on **[nexusjs.dev](https://nexusjs.dev)**.
+
+### Scoped CSS HMR (Vite dev)
+
+When you save a `.nx` file that contains a `<style>` block, the plugin:
+
+1. Recompiles on the server and emits a Vite custom event `nexus:style-update` with `{ hash, css, filepath }` — `hash` is `componentHash(filepath)` and matches `[data-nx="…"]` in the compiled template.
+2. Injects a small client bridge (via `index.html` in dev) that listens on `import.meta.hot` and updates or appends `<style data-nx-style-scope="…">` so styles can refresh without a full page reload. Runes / island state stay warm when the rest of the pipeline cooperates.
+
+Disable automatic injection with `nexus({ styleBridge: false })` and import `virtual:nexus-style-bridge` yourself if you prefer.
+
+## Links
+
+- **Website:** [https://nexusjs.dev](https://nexusjs.dev)
+- **Install:** `pnpm add -D @nexus_js/vite-plugin-nexus` (published under the same `@nexus_js` scope as the rest of the framework).
+- **Repository:** [github.com/bierfor/nexus](https://github.com/bierfor/nexus) (see `packages/vite-plugin-nexus/`)
+- **Issues:** [github.com/bierfor/nexus/issues](https://github.com/bierfor/nexus/issues)
+
+## License
+
+MIT © Nexus contributors

package/dist/index.d.ts

@@ -0,0 +1,50 @@
+/**
+ * vite-plugin-nexus — Official Vite integration for the Nexus Framework.
+ *
+ * What this plugin does:
+ *   1. Transforms .nx files through the Nexus compiler pipeline
+ *   2. Splits server/client code (virtual modules)
+ *   3. Handles HMR with surgical island updates (no full-page reload)
+ *   4. Generates and updates nexus-types.d.ts on every save
+ *   5. Emits island manifests for runtime hydration
+ *   6. Integrates with PostCSS/Sass via Vite's native pipeline
+ *   7. Handles /_nexus/action/* and /_nexus/image/* in dev server
+ *   8. Optimizes assets via Rollup in build mode
+ */
+import type { Plugin } from 'vite';
+export interface NexusPluginOptions {
+    /** Root directory of the Nexus app (default: process.cwd()) */
+    root?: string;
+    /** Enable SSR mode */
+    ssr?: boolean;
+    /** Enable debug output */
+    debug?: boolean;
+    /** Auto-generate types on save */
+    typeGen?: boolean;
+    /** Island hydration default strategy */
+    defaultHydration?: string;
+    /**
+     * Inject `virtual:nexus-style-bridge` into `index.html` so scoped `.nx` CSS can hot-patch
+     * via WebSocket without full reload (islands / runes stay warm).
+     * @default true
+     */
+    styleBridge?: boolean;
+}
+export declare function nexus(opts?: NexusPluginOptions): Plugin[];
+export { nexusSecurity } from './security.js';
+export type { NexusSecurityPluginOptions } from './security.js';
+/**
+ * Convenience: creates a full Vite config for a Nexus project.
+ */
+export declare function defineNexusConfig(config?: Record<string, unknown>): {
+    plugins: Plugin<any>[][];
+    optimizeDeps: {
+        include: string[];
+    };
+    build: {
+        rollupOptions: {
+            external: string[];
+        };
+    };
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,MAAM,EAA6B,MAAM,MAAM,CAAC;AAM9D,MAAM,WAAW,kBAAkB;IACjC,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,0BAA0B;IAC1B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,kCAAkC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wCAAwC;IACxC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAiBD,wBAAgB,KAAK,CAAC,IAAI,GAAE,kBAAuB,GAAG,MAAM,EAAE,CA8S7D;AA4DD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,YAAY,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAEhE;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;;;;;;;;;;EAarE"}

package/dist/index.js

@@ -0,0 +1,378 @@
+/**
+ * vite-plugin-nexus — Official Vite integration for the Nexus Framework.
+ *
+ * What this plugin does:
+ *   1. Transforms .nx files through the Nexus compiler pipeline
+ *   2. Splits server/client code (virtual modules)
+ *   3. Handles HMR with surgical island updates (no full-page reload)
+ *   4. Generates and updates nexus-types.d.ts on every save
+ *   5. Emits island manifests for runtime hydration
+ *   6. Integrates with PostCSS/Sass via Vite's native pipeline
+ *   7. Handles /_nexus/action/* and /_nexus/image/* in dev server
+ *   8. Optimizes assets via Rollup in build mode
+ */
+import { compile, componentHash } from '@nexus_js/compiler';
+import { generateTypes } from '@nexus_js/types';
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+/** Virtual module IDs */
+const VIRTUAL_SERVER = 'virtual:nexus-server/';
+const VIRTUAL_CLIENT = 'virtual:nexus-client/';
+const RESOLVED_SERVER = '\0' + VIRTUAL_SERVER;
+const RESOLVED_CLIENT = '\0' + VIRTUAL_CLIENT;
+/** Client HMR: applies `nexus:style-update` payloads to `<style data-nx-style-scope>`. */
+const VIRTUAL_STYLE_BRIDGE = 'virtual:nexus-style-bridge';
+const RESOLVED_STYLE_BRIDGE = '\0' + VIRTUAL_STYLE_BRIDGE;
+const NX_FILE_RE = /\.nx(\?.*)?$/;
+const ACTION_ROUTE_RE = /^\/_nexus\/action\//;
+const IMAGE_ROUTE_RE = /^\/_nexus\/image/;
+const SYNC_ROUTE_RE = /^\/_nexus\/sync\//;
+export function nexus(opts = {}) {
+    const root = opts.root ?? process.cwd();
+    const typeGen = opts.typeGen ?? true;
+    const styleBridgeEnabled = opts.styleBridge !== false;
+    // Compiled cache: filepath → { serverCode, clientCode, css, manifest }
+    const compiledCache = new Map();
+    let devServer = null;
+    let typeGenDebounce = null;
+    // ── Type generation debouncer ──────────────────────────────────────────────
+    function scheduleTypeGen() {
+        if (!typeGen)
+            return;
+        if (typeGenDebounce)
+            clearTimeout(typeGenDebounce);
+        typeGenDebounce = setTimeout(async () => {
+            try {
+                await generateTypes({ root });
+            }
+            catch (err) {
+                console.error('[vite-plugin-nexus] Type generation failed:', err);
+            }
+        }, 300);
+    }
+    // ── Main transform plugin ──────────────────────────────────────────────────
+    const transformPlugin = {
+        name: 'nexus:transform',
+        enforce: 'pre',
+        configResolved(config) {
+            if (opts.debug) {
+                console.log('[vite-plugin-nexus] Root:', root, 'SSR:', opts.ssr ?? config.build.ssr);
+            }
+        },
+        configureServer(server) {
+            devServer = server;
+            // Intercept /_nexus/* routes in dev
+            server.middlewares.use(async (req, res, next) => {
+                const url = req.url ?? '';
+                // Server Actions endpoint
+                if (ACTION_ROUTE_RE.test(url)) {
+                    const { handleActionRequest } = await import('@nexus_js/server/actions');
+                    const webReq = nodeToWebRequest(req);
+                    const webRes = await handleActionRequest(webReq);
+                    await pipeResponse(webRes, res);
+                    return;
+                }
+                // Image optimizer endpoint
+                if (IMAGE_ROUTE_RE.test(url)) {
+                    const { handleImageRequest } = await import('@nexus_js/assets/image');
+                    const webReq = nodeToWebRequest(req);
+                    const publicDir = join(root, 'public');
+                    const webRes = await handleImageRequest(webReq, { publicDir });
+                    if (req.method === 'HEAD') {
+                        res.statusCode = webRes.status;
+                        webRes.headers.forEach((v, k) => res.setHeader(k, v));
+                        res.end();
+                        return;
+                    }
+                    await pipeResponse(webRes, res);
+                    return;
+                }
+                next();
+            });
+        },
+        resolveId(id) {
+            if (id === VIRTUAL_STYLE_BRIDGE)
+                return RESOLVED_STYLE_BRIDGE;
+            if (id.startsWith(VIRTUAL_SERVER))
+                return RESOLVED_SERVER + id.slice(VIRTUAL_SERVER.length);
+            if (id.startsWith(VIRTUAL_CLIENT))
+                return RESOLVED_CLIENT + id.slice(VIRTUAL_CLIENT.length);
+            return undefined;
+        },
+        async load(id) {
+            if (id === RESOLVED_STYLE_BRIDGE) {
+                return styleBridgeClientCode();
+            }
+            if (id.startsWith(RESOLVED_SERVER)) {
+                const filepath = id.slice(RESOLVED_SERVER.length);
+                const compiled = compiledCache.get(filepath);
+                return compiled?.serverCode ?? null;
+            }
+            if (id.startsWith(RESOLVED_CLIENT)) {
+                const filepath = id.slice(RESOLVED_CLIENT.length);
+                const compiled = compiledCache.get(filepath);
+                return compiled?.clientCode ?? null;
+            }
+            return null;
+        },
+        async transform(code, id, transformOpts) {
+            if (!NX_FILE_RE.test(id))
+                return null;
+            const filepath = id.split('?')[0] ?? id;
+            const isSSR = transformOpts?.ssr ?? false;
+            try {
+                const result = compile(code, filepath, {
+                    mode: isSSR ? 'server' : 'client',
+                    dev: true,
+                    ssr: isSSR,
+                    emitIslandManifest: true,
+                    target: isSSR ? 'node' : 'browser',
+                });
+                compiledCache.set(filepath, result);
+                if (result.warnings?.length) {
+                    for (const w of result.warnings) {
+                        console.warn(`[nexus] ${w.message}`);
+                    }
+                }
+                // Inject island manifest as metadata
+                if (result.islandManifest) {
+                    this.emitFile?.({
+                        type: 'asset',
+                        fileName: `islands/${sanitizePath(filepath)}.manifest.json`,
+                        source: JSON.stringify(result.islandManifest, null, 2),
+                    });
+                }
+                // Trigger type generation on save
+                scheduleTypeGen();
+                if (opts.debug) {
+                    console.log(`[nexus] Compiled: ${filepath} (server=${isSSR}, islands=${result.islandManifest?.islands.length ?? 0})`);
+                }
+                // Return appropriate code for the context
+                return {
+                    code: isSSR ? result.serverCode : (result.clientCode ?? result.serverCode),
+                    map: result.map ?? null,
+                };
+            }
+            catch (err) {
+                this.error(`[nexus] Failed to compile ${filepath}: ${err instanceof Error ? err.message : String(err)}`);
+                return null;
+            }
+        },
+        // ── HMR — scoped CSS stream & inject (matches [data-nx="<hash>"] from compiler) ──
+        async handleHotUpdate({ file, server, modules }) {
+            if (!NX_FILE_RE.test(file))
+                return;
+            console.log(`  \x1b[33m[nexus HMR]\x1b[0m ${file.split('/').pop()}`);
+            let source;
+            try {
+                source = await readFile(file, 'utf-8');
+            }
+            catch {
+                return;
+            }
+            let hotResult;
+            try {
+                hotResult = compile(source, file, {
+                    mode: 'server',
+                    dev: true,
+                    ssr: true,
+                    emitIslandManifest: false,
+                    target: 'node',
+                });
+            }
+            catch (err) {
+                server.ws.send({
+                    type: 'custom',
+                    event: 'nexus:compile-error',
+                    data: {
+                        file,
+                        message: err instanceof Error ? err.message : String(err),
+                    },
+                });
+                return;
+            }
+            if (hotResult.css) {
+                server.ws.send({
+                    type: 'custom',
+                    event: 'nexus:style-update',
+                    data: {
+                        hash: componentHash(file),
+                        css: hotResult.css,
+                        filepath: file,
+                    },
+                });
+            }
+            compiledCache.delete(file);
+            scheduleTypeGen();
+            const affected = new Set();
+            for (const mod of modules) {
+                affected.add(mod);
+                for (const importer of mod.importers) {
+                    affected.add(importer);
+                }
+            }
+            server.ws.send({
+                type: 'custom',
+                event: 'nexus:hmr',
+                data: {
+                    file,
+                    islandUpdate: true,
+                    timestamp: Date.now(),
+                },
+            });
+            return [...affected];
+        },
+    };
+    // ── CSS handling plugin ────────────────────────────────────────────────────
+    const cssPlugin = {
+        name: 'nexus:css',
+        enforce: 'post',
+        transform(code, id) {
+            if (!NX_FILE_RE.test(id))
+                return null;
+            const compiled = compiledCache.get(id.split('?')[0] ?? id);
+            if (!compiled?.css)
+                return null;
+            // Inject scoped CSS as a virtual CSS module
+            return {
+                code: `${code}\nimport '${id}?nexus-css';`,
+            };
+        },
+        load(id) {
+            if (!id.includes('?nexus-css'))
+                return null;
+            const filepath = id.split('?')[0] ?? id;
+            const compiled = compiledCache.get(filepath);
+            return compiled?.css ?? null;
+        },
+    };
+    // ── Type generation plugin ─────────────────────────────────────────────────
+    const typesPlugin = {
+        name: 'nexus:types',
+        async buildStart() {
+            if (typeGen) {
+                await generateTypes({ root }).catch(console.error);
+            }
+        },
+    };
+    // ── Islands manifest plugin (build only) ──────────────────────────────────
+    const manifestPlugin = {
+        name: 'nexus:manifest',
+        apply: 'build',
+        generateBundle(_opts, bundle) {
+            const allIslands = [];
+            for (const chunk of Object.values(bundle)) {
+                if (chunk.type !== 'asset')
+                    continue;
+                if (!chunk.fileName.includes('.manifest.json'))
+                    continue;
+                try {
+                    const manifest = JSON.parse(chunk.source);
+                    allIslands.push(...(manifest.islands ?? []));
+                }
+                catch { }
+            }
+            if (allIslands.length > 0) {
+                this.emitFile({
+                    type: 'asset',
+                    fileName: 'nexus-islands.json',
+                    source: JSON.stringify({ islands: allIslands, generated: new Date().toISOString() }, null, 2),
+                });
+            }
+        },
+    };
+    const styleBridgeHtmlPlugin = {
+        name: 'nexus:style-bridge-html',
+        apply: 'serve',
+        transformIndexHtml(html) {
+            if (!styleBridgeEnabled)
+                return html;
+            if (!html.includes('</head>'))
+                return html;
+            if (html.includes('virtual:nexus-style-bridge') || html.includes('__x00__virtual:nexus-style-bridge')) {
+                return html;
+            }
+            return {
+                html,
+                tags: [
+                    {
+                        tag: 'script',
+                        attrs: { type: 'module', src: '/@id/__x00__virtual:nexus-style-bridge' },
+                        injectTo: 'head',
+                    },
+                ],
+            };
+        },
+    };
+    return [transformPlugin, cssPlugin, typesPlugin, manifestPlugin, styleBridgeHtmlPlugin];
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Helpers
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Dev-only client: listens for `nexus:style-update` and patches `<style data-nx-style-scope>`.
+ * Hash matches `componentHash(filepath)` → same as `data-nx` on scoped templates.
+ */
+function styleBridgeClientCode() {
+    return `/* nexus style bridge — hot-patch scoped .nx CSS (hash = componentHash(filepath)) */
+if (import.meta.hot) {
+  import.meta.hot.on('nexus:style-update', (payload) => {
+    const o = payload && typeof payload === 'object' ? payload : {};
+    const h = 'hash' in o && o.hash != null ? String(o.hash) : '';
+    const css = 'css' in o && o.css != null ? String(o.css) : '';
+    if (!h || !css) return;
+    const sel = 'style[data-nx-style-scope="' + h + '"]';
+    let el = document.querySelector(sel);
+    if (el) {
+      el.textContent = css;
+    } else {
+      el = document.createElement('style');
+      el.setAttribute('data-nx-style-scope', h);
+      el.textContent = css;
+      document.head.appendChild(el);
+    }
+  });
+  import.meta.hot.on('nexus:compile-error', (payload) => {
+    console.error('[nexus] .nx compile error:', payload);
+  });
+}
+`;
+}
+function sanitizePath(p) {
+    return p.replace(/[^a-zA-Z0-9]/g, '_');
+}
+function nodeToWebRequest(req) {
+    const url = `http://localhost${req.url ?? '/'}`;
+    const headers = new Headers();
+    for (const [k, v] of Object.entries(req.headers)) {
+        if (v)
+            headers.set(k, Array.isArray(v) ? v.join(', ') : v);
+    }
+    return new Request(url, { method: req.method ?? 'GET', headers });
+}
+async function pipeResponse(webRes, res) {
+    res.statusCode = webRes.status;
+    webRes.headers.forEach((v, k) => res.setHeader(k, v));
+    const body = Buffer.from(await webRes.arrayBuffer());
+    res.end(body);
+}
+// Re-export security plugin
+export { nexusSecurity } from './security.js';
+/**
+ * Convenience: creates a full Vite config for a Nexus project.
+ */
+export function defineNexusConfig(config = {}) {
+    return {
+        plugins: [nexus()],
+        optimizeDeps: {
+            include: ['@nexus_js/runtime'],
+        },
+        build: {
+            rollupOptions: {
+                external: ['node:fs', 'node:path', 'node:http', 'node:crypto'],
+            },
+        },
+        ...config,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAqBjC,yBAAyB;AACzB,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAC/C,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAC/C,MAAM,eAAe,GAAG,IAAI,GAAG,cAAc,CAAC;AAC9C,MAAM,eAAe,GAAG,IAAI,GAAG,cAAc,CAAC;AAE9C,0FAA0F;AAC1F,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAC1D,MAAM,qBAAqB,GAAG,IAAI,GAAG,oBAAoB,CAAC;AAE1D,MAAM,UAAU,GAAG,cAAc,CAAC;AAClC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAC9C,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAC1C,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAE1C,MAAM,UAAU,KAAK,CAAC,OAA2B,EAAE;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IACrC,MAAM,kBAAkB,GAAG,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC;IAEtD,uEAAuE;IACvE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAsC,CAAC;IAEpE,IAAI,SAAS,GAAyB,IAAI,CAAC;IAC3C,IAAI,eAAe,GAAyC,IAAI,CAAC;IAEjE,8EAA8E;IAC9E,SAAS,eAAe;QACtB,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,eAAe;YAAE,YAAY,CAAC,eAAe,CAAC,CAAC;QACnD,eAAe,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE;YACtC,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAC;YACpE,CAAC;QACH,CAAC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC;IAED,8EAA8E;IAC9E,MAAM,eAAe,GAAW;QAC9B,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,KAAK;QAEd,cAAc,CAAC,MAAM;YACnB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAED,eAAe,CAAC,MAAM;YACpB,SAAS,GAAG,MAAM,CAAC;YAEnB,oCAAoC;YACpC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;gBAE1B,0BAA0B;gBAC1B,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC9B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAAoC,CAAC,CAAC;oBACnF,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;oBACrC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;oBACjD,MAAM,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;oBAChC,OAAO;gBACT,CAAC;gBAED,2BAA2B;gBAC3B,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAkC,CAAC,CAAC;oBAChF,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;oBACrC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;oBACvC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;oBAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;wBAC1B,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;wBAC/B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;wBACtE,GAAG,CAAC,GAAG,EAAE,CAAC;wBACV,OAAO;oBACT,CAAC;oBACD,MAAM,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;oBAChC,OAAO;gBACT,CAAC;gBAED,IAAI,EAAE,CAAC;YACT,CAAC,CAAC,CAAC;QACL,CAAC;QAED,SAAS,CAAC,EAAE;YACV,IAAI,EAAE,KAAK,oBAAoB;gBAAE,OAAO,qBAAqB,CAAC;YAC9D,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;gBAAE,OAAO,eAAe,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC5F,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;gBAAE,OAAO,eAAe,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC5F,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,KAAK,qBAAqB,EAAE,CAAC;gBACjC,OAAO,qBAAqB,EAAE,CAAC;YACjC,CAAC;YACD,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;gBAClD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC7C,OAAO,QAAQ,EAAE,UAAU,IAAI,IAAI,CAAC;YACtC,CAAC;YACD,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;gBAClD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC7C,OAAO,QAAQ,EAAE,UAAU,IAAI,IAAI,CAAC;YACtC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,aAAa;YACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEtC,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,aAAa,EAAE,GAAG,IAAI,KAAK,CAAC;YAE1C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE;oBACrC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;oBACjC,GAAG,EAAE,IAAI;oBACT,GAAG,EAAE,KAAK;oBACV,kBAAkB,EAAE,IAAI;oBACxB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;iBACnC,CAAC,CAAC;gBAEH,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAEpC,IAAI,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;oBAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;wBAChC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;oBACvC,CAAC;gBACH,CAAC;gBAED,qCAAqC;gBACrC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC1B,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,IAAI,EAAE,OAAO;wBACb,QAAQ,EAAE,WAAW,YAAY,CAAC,QAAQ,CAAC,gBAAgB;wBAC3D,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;qBACvD,CAAC,CAAC;gBACL,CAAC;gBAED,kCAAkC;gBAClC,eAAe,EAAE,CAAC;gBAElB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,GAAG,CAAC,qBAAqB,QAAQ,YAAY,KAAK,aAAa,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;gBACxH,CAAC;gBAED,0CAA0C;gBAC1C,OAAO;oBACL,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC;oBAC1E,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,IAAI;iBACxB,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,KAAK,CAAC,6BAA6B,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACzG,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,oFAAoF;QACpF,KAAK,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO;YAEnC,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAErE,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;YAED,IAAI,SAAqC,CAAC;YAC1C,IAAI,CAAC;gBACH,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;oBAChC,IAAI,EAAQ,QAAQ;oBACpB,GAAG,EAAS,IAAI;oBAChB,GAAG,EAAS,IAAI;oBAChB,kBAAkB,EAAE,KAAK;oBACzB,MAAM,EAAM,MAAM;iBACnB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;oBACb,IAAI,EAAK,QAAQ;oBACjB,KAAK,EAAI,qBAAqB;oBAC9B,IAAI,EAAK;wBACP,IAAI;wBACJ,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBAC1D;iBACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClB,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;oBACb,IAAI,EAAG,QAAQ;oBACf,KAAK,EAAE,oBAAoB;oBAC3B,IAAI,EAAG;wBACL,IAAI,EAAM,aAAa,CAAC,IAAI,CAAC;wBAC7B,GAAG,EAAO,SAAS,CAAC,GAAG;wBACvB,QAAQ,EAAE,IAAI;qBACf;iBACF,CAAC,CAAC;YACL,CAAC;YAED,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3B,eAAe,EAAE,CAAC;YAElB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAc,CAAC;YACvC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClB,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;oBACrC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;gBACb,IAAI,EAAG,QAAQ;gBACf,KAAK,EAAE,WAAW;gBAClB,IAAI,EAAG;oBACL,IAAI;oBACJ,YAAY,EAAE,IAAI;oBAClB,SAAS,EAAK,IAAI,CAAC,GAAG,EAAE;iBACzB;aACF,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;QACvB,CAAC;KACF,CAAC;IAEF,8EAA8E;IAC9E,MAAM,SAAS,GAAW;QACxB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,MAAM;QAEf,SAAS,CAAC,IAAI,EAAE,EAAE;YAChB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEtC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,QAAQ,EAAE,GAAG;gBAAE,OAAO,IAAI,CAAC;YAEhC,4CAA4C;YAC5C,OAAO;gBACL,IAAI,EAAE,GAAG,IAAI,aAAa,EAAE,cAAc;aAC3C,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,EAAE;YACL,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5C,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7C,OAAO,QAAQ,EAAE,GAAG,IAAI,IAAI,CAAC;QAC/B,CAAC;KACF,CAAC;IAEF,8EAA8E;IAC9E,MAAM,WAAW,GAAW;QAC1B,IAAI,EAAE,aAAa;QAEnB,KAAK,CAAC,UAAU;YACd,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;KACF,CAAC;IAEF,6EAA6E;IAC7E,MAAM,cAAc,GAAW;QAC7B,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,OAAO;QAEd,cAAc,CAAC,KAAK,EAAE,MAAM;YAC1B,MAAM,UAAU,GAAc,EAAE,CAAC;YAEjC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;oBAAE,SAAS;gBACrC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC;oBAAE,SAAS;gBACzD,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAgB,CAAC,CAAC;oBACpD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/C,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;YAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,QAAQ,CAAC;oBACZ,IAAI,EAAE,OAAO;oBACb,QAAQ,EAAE,oBAAoB;oBAC9B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;iBAC9F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;IAEF,MAAM,qBAAqB,GAAW;QACpC,IAAI,EAAI,yBAAyB;QACjC,KAAK,EAAG,OAAO;QACf,kBAAkB,CAAC,IAAI;YACrB,IAAI,CAAC,kBAAkB;gBAAE,OAAO,IAAI,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;gBACtG,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO;gBACL,IAAI;gBACJ,IAAI,EAAE;oBACJ;wBACE,GAAG,EAAO,QAAQ;wBAClB,KAAK,EAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,wCAAwC,EAAE;wBAC3E,QAAQ,EAAE,MAAM;qBACjB;iBACF;aACF,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,OAAO,CAAC,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAC;AAC1F,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF;;;GAGG;AACH,SAAS,qBAAqB;IAC5B,OAAO;;;;;;;;;;;;;;;;;;;;;;CAsBR,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAwC;IAChE,MAAM,GAAG,GAAG,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,MAAgB,EAChB,GAAuC;IAEvC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACrD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,4BAA4B;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAG9C;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAkC,EAAE;IACpE,OAAO;QACL,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC;QAClB,YAAY,EAAE;YACZ,OAAO,EAAE,CAAC,mBAAmB,CAAC;SAC/B;QACD,KAAK,EAAE;YACL,aAAa,EAAE;gBACb,QAAQ,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC;aAC/D;SACF;QACD,GAAG,MAAM;KACV,CAAC;AACJ,CAAC"}

package/dist/security.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Nexus Security Vite Plugin — Compiler-Level Dependency Blocking.
+ *
+ * Integrates the @nexus_js/audit engine directly into the Vite module resolution
+ * pipeline. When an import is resolved, the plugin checks the package against
+ * the OSV CVE database BEFORE the bundler processes the module.
+ *
+ * Two modes:
+ *
+ *  WARN (default in dev):
+ *    Logs a colored warning to the terminal. Build continues.
+ *    Use for medium/high severity or when the developer is actively working.
+ *
+ *  BLOCK (in hardened mode or for critical severity):
+ *    Throws a build error with a detailed explanation.
+ *    The dev server shows a full-page error overlay.
+ *    The production build stops completely.
+ *
+ * The overlay in the browser shows:
+ *  ┌─────────────────────────────────────────────────────────────────────┐
+ *  │  🛑 Nexus Security Blocked                                          │
+ *  │  Package "pdfkit@0.13.0" has a CRITICAL vulnerability               │
+ *  │  CVE-2024-29415 — Server-Side Request Forgery                       │
+ *  │  Fix: pnpm update pdfkit@0.14.0 (patched)                          │
+ *  │  Or: nexus fix — auto-update all vulnerable packages                │
+ *  └─────────────────────────────────────────────────────────────────────┘
+ */
+import type { Plugin } from 'vite';
+export type AllowVulnerableConfig = Record<string, {
+    cve: string;
+    reason: string;
+    expires: string;
+}>;
+export interface NexusSecurityPluginOptions {
+    /**
+     * Security mode.
+     *   'off'      — no scanning
+     *   'warn'     — log warnings, never block
+     *   'block'    — block critical CVEs in build, warn for high/medium
+     *   'paranoid' — block critical + high, warn for medium
+     */
+    mode?: 'off' | 'warn' | 'block' | 'paranoid';
+    /** Override exceptions (from nexus.config.ts security.allowVulnerable) */
+    allowVulnerable?: AllowVulnerableConfig;
+    /** Enable supply chain risk checks (default: true) */
+    supplyChain?: boolean;
+}
+/**
+ * Creates the Nexus Security Vite plugin.
+ * Integrated automatically when `security.hardened: true` in nexus.config.ts.
+ *
+ * @example
+ * // vite.config.ts
+ * import { nexus, nexusSecurity } from '@nexus_js/vite-plugin-nexus';
+ * export default { plugins: [nexus(), nexusSecurity({ mode: 'block' })] };
+ */
+export declare function nexusSecurity(opts?: NexusSecurityPluginOptions): Plugin;
+//# sourceMappingURL=security.d.ts.map

package/dist/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAEnC,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,EAAE;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAEH,MAAM,WAAW,0BAA0B;IACzC;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;IAC7C,0EAA0E;IAC1E,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,sDAAsD;IACtD,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAkCD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,IAAI,GAAE,0BAA+B,GAAG,MAAM,CAmJ3E"}

package/dist/security.js

@@ -0,0 +1,204 @@
+/**
+ * Nexus Security Vite Plugin — Compiler-Level Dependency Blocking.
+ *
+ * Integrates the @nexus_js/audit engine directly into the Vite module resolution
+ * pipeline. When an import is resolved, the plugin checks the package against
+ * the OSV CVE database BEFORE the bundler processes the module.
+ *
+ * Two modes:
+ *
+ *  WARN (default in dev):
+ *    Logs a colored warning to the terminal. Build continues.
+ *    Use for medium/high severity or when the developer is actively working.
+ *
+ *  BLOCK (in hardened mode or for critical severity):
+ *    Throws a build error with a detailed explanation.
+ *    The dev server shows a full-page error overlay.
+ *    The production build stops completely.
+ *
+ * The overlay in the browser shows:
+ *  ┌─────────────────────────────────────────────────────────────────────┐
+ *  │  🛑 Nexus Security Blocked                                          │
+ *  │  Package "pdfkit@0.13.0" has a CRITICAL vulnerability               │
+ *  │  CVE-2024-29415 — Server-Side Request Forgery                       │
+ *  │  Fix: pnpm update pdfkit@0.14.0 (patched)                          │
+ *  │  Or: nexus fix — auto-update all vulnerable packages                │
+ *  └─────────────────────────────────────────────────────────────────────┘
+ */
+// ── ANSI ──────────────────────────────────────────────────────────────────────
+const c = {
+    reset: '\x1b[0m', bold: '\x1b[1m', dim: '\x1b[2m',
+    red: '\x1b[31m', yellow: '\x1b[33m', cyan: '\x1b[36m',
+    mag: '\x1b[35m', green: '\x1b[32m',
+};
+function sev(s) {
+    if (s === 'critical')
+        return `${c.red}${c.bold}CRITICAL${c.reset}`;
+    if (s === 'high')
+        return `${c.red}HIGH${c.reset}`;
+    if (s === 'medium')
+        return `${c.yellow}MEDIUM${c.reset}`;
+    return `${c.dim}${s.toUpperCase()}${c.reset}`;
+}
+// ── Package name extractor ────────────────────────────────────────────────────
+// From: 'lodash/fp', '@types/node', 'react' → package name only
+function extractPackageName(source) {
+    if (source.startsWith('.') || source.startsWith('/') || source.startsWith('\0'))
+        return null;
+    if (source.startsWith('virtual:') || source.startsWith('node:'))
+        return null;
+    // Handle scoped packages (@org/name)
+    if (source.startsWith('@')) {
+        const parts = source.split('/');
+        return parts.length >= 2 ? `${parts[0]}/${parts[1]}` : null;
+    }
+    return source.split('/')[0] ?? null;
+}
+// In-process cache to avoid scanning the same package multiple times per build
+const _scanned = new Map();
+// ── Plugin factory ────────────────────────────────────────────────────────────
+/**
+ * Creates the Nexus Security Vite plugin.
+ * Integrated automatically when `security.hardened: true` in nexus.config.ts.
+ *
+ * @example
+ * // vite.config.ts
+ * import { nexus, nexusSecurity } from '@nexus_js/vite-plugin-nexus';
+ * export default { plugins: [nexus(), nexusSecurity({ mode: 'block' })] };
+ */
+export function nexusSecurity(opts = {}) {
+    const mode = opts.mode ?? 'warn';
+    const allowVulnerable = opts.allowVulnerable ?? {};
+    if (mode === 'off') {
+        return { name: 'nexus:security-disabled' };
+    }
+    return {
+        name: 'nexus:dependency-audit',
+        /**
+         * buildStart — scan all dependencies once at startup (faster than per-import).
+         * resolveId  — catch dynamic imports and workspace packages not in package.json.
+         */
+        async buildStart() {
+            _scanned.clear();
+            // Lazy import to avoid loading @nexus_js/audit in non-security builds
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            let auditMod;
+            try {
+                auditMod = await import('@nexus_js/audit');
+            }
+            catch {
+                this.warn('[Nexus Security] @nexus_js/audit not installed. Run: pnpm add -D @nexus_js/audit');
+                return;
+            }
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            const scanProject = auditMod.scanProject;
+            const root = this.meta.env?.root
+                ?? process.cwd();
+            try {
+                const result = await scanProject({
+                    root,
+                    includeDev: false,
+                    supplyChain: opts.supplyChain !== false,
+                    allowVulnerable,
+                    failOnCritical: mode === 'block' || mode === 'paranoid',
+                    minSeverity: mode === 'paranoid' ? 'medium' : 'high',
+                });
+                // Log vulnerable packages
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                for (const vuln of result.vulnerable) {
+                    const topVuln = vuln.vulns[0];
+                    if (!topVuln)
+                        continue;
+                    const msg = `\n  ${c.mag}◆ Nexus Security${c.reset}  ${sev(topVuln.severity)} in ${c.bold}"${vuln.package}"${c.reset}\n` +
+                        `    ${topVuln.id}: ${topVuln.summary}\n` +
+                        (topVuln.fixedIn ? `    ${c.green}Fix: update to v${topVuln.fixedIn}${c.reset}\n` : '') +
+                        `    Run ${c.cyan}nexus fix${c.reset} to auto-update`;
+                    if ((mode === 'block' || mode === 'paranoid') && topVuln.severity === 'critical') {
+                        this.error(msg); // Stops the build
+                    }
+                    else {
+                        this.warn(msg);
+                    }
+                }
+                // Supply chain warnings
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                for (const [pkg, sc] of result.supplyChain) {
+                    if (sc.riskLevel === 'critical' || sc.riskLevel === 'high') {
+                        const topFlag = sc.flags[0];
+                        this.warn(`\n  ${c.mag}◆ Nexus Supply Chain${c.reset}  ${sev(sc.riskLevel)} risk: ${c.bold}"${pkg}"${c.reset}\n` +
+                            (topFlag ? `    ${topFlag.title}: ${topFlag.description}\n` : '') +
+                            `    Risk score: ${sc.riskScore}/100`);
+                    }
+                }
+                // Print override status
+                const { expiringSoon, expired } = result.overrideStatus;
+                for (const e of expiringSoon) {
+                    this.warn(`  ${c.yellow}[Nexus Security]${c.reset} Override expiring soon: ${e}`);
+                }
+                for (const e of expired) {
+                    this.error(`  ${c.red}[Nexus Security]${c.reset} Expired override: ${e} — update the dependency or renew the override`);
+                }
+                if (result.vulnerable.length === 0 && result.supplyChain.size === 0) {
+                    console.log(`  ${c.green}✔${c.reset}  ${c.dim}Nexus Security: all dependencies clean${c.reset}`);
+                }
+            }
+            catch (err) {
+                if (err.code === 'NEXUS_SECURITY_BLOCK') {
+                    this.error(err.message);
+                }
+                else {
+                    // Don't fail the build for audit infrastructure errors
+                    this.warn(`[Nexus Security] Audit failed: ${err.message}`);
+                }
+            }
+        },
+        async resolveId(source) {
+            // Only check external packages (not relative imports or virtual)
+            const pkg = extractPackageName(source);
+            if (!pkg || _scanned.has(pkg))
+                return null;
+            _scanned.set(pkg, true);
+            // Only block in 'block' or 'paranoid' mode — warn is handled at buildStart
+            if (mode !== 'block' && mode !== 'paranoid')
+                return null;
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            let auditMod2;
+            try {
+                auditMod2 = await import('@nexus_js/audit');
+            }
+            catch {
+                return null;
+            }
+            try {
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                const result = await auditMod2.auditPackage(pkg);
+                if (result.status !== 'vulnerable')
+                    return null;
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                const criticalVuln = result.vulns.find((v) => v.severity === 'critical');
+                if (!criticalVuln)
+                    return null;
+                // Check override
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                const overrideResult = auditMod2.findOverride(pkg, criticalVuln.id, allowVulnerable);
+                if (overrideResult?.valid)
+                    return null; // Override active
+                const msg = `\n  ${'─'.repeat(65)}\n` +
+                    `  ${c.red}${c.bold}🛑 NEXUS SECURITY — BUILD BLOCKED${c.reset}\n` +
+                    `  ${'─'.repeat(65)}\n` +
+                    `  Package   : ${c.bold}"${pkg}"${c.reset}\n` +
+                    `  CVE       : ${criticalVuln.id}\n` +
+                    `  Severity  : ${sev(criticalVuln.severity)}\n` +
+                    `  Summary   : ${criticalVuln.summary}\n` +
+                    (criticalVuln.fixedIn ? `  Fix       : Update to v${criticalVuln.fixedIn}\n` : '') +
+                    `  Command   : ${c.cyan}nexus fix${c.reset}\n` +
+                    `  Override  : Add to nexus.config.ts → security.allowVulnerable\n` +
+                    `  ${'─'.repeat(65)}`;
+                this.error(msg);
+            }
+            catch { /* audit failure is non-fatal */ }
+            return null;
+        },
+    };
+}
+//# sourceMappingURL=security.js.map

package/dist/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAyBH,iFAAiF;AACjF,MAAM,CAAC,GAAG;IACR,KAAK,EAAG,SAAS,EAAE,IAAI,EAAG,SAAS,EAAG,GAAG,EAAI,SAAS;IACtD,GAAG,EAAK,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAG,UAAU;IACzD,GAAG,EAAK,UAAU,EAAE,KAAK,EAAG,UAAU;CACvC,CAAC;AAEF,SAAS,GAAG,CAAC,CAAS;IACpB,IAAI,CAAC,KAAK,UAAU;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,KAAK,EAAE,CAAC;IACnE,IAAI,CAAC,KAAK,MAAM;QAAM,OAAO,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;IACtD,IAAI,CAAC,KAAK,QAAQ;QAAI,OAAO,GAAG,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC;IAC3D,OAAO,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;AAChD,CAAC;AAED,iFAAiF;AACjF,gEAAgE;AAChE,SAAS,kBAAkB,CAAC,MAAc;IACxC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7F,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,qCAAqC;IACrC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACtC,CAAC;AAED,+EAA+E;AAC/E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;AAE5C,iFAAiF;AAEjF;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,OAAmC,EAAE;IACjE,MAAM,IAAI,GAAa,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC;IAC3C,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;IAEnD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;IAC7C,CAAC;IAED,OAAO;QACL,IAAI,EAAE,wBAAwB;QAE9B;;;WAGG;QACH,KAAK,CAAC,UAAU;YACd,QAAQ,CAAC,KAAK,EAAE,CAAC;YAEjB,sEAAsE;YACtE,8DAA8D;YAC9D,IAAI,QAAa,CAAC;YAClB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;gBAC9F,OAAO;YACT,CAAC;YACD,8DAA8D;YAC9D,MAAM,WAAW,GAAgC,QAAQ,CAAC,WAAW,CAAC;YAEtE,MAAM,IAAI,GAAI,IAAI,CAAC,IAAyD,CAAC,GAAG,EAAE,IAAI;mBACjF,OAAO,CAAC,GAAG,EAAE,CAAC;YAEnB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;oBAC/B,IAAI;oBACJ,UAAU,EAAO,KAAK;oBACtB,WAAW,EAAM,IAAI,CAAC,WAAW,KAAK,KAAK;oBAC3C,eAAe;oBACf,cAAc,EAAG,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,UAAU;oBACxD,WAAW,EAAM,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;iBACzD,CAAC,CAAC;gBAEH,0BAA0B;gBAC1B,8DAA8D;gBAC9D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,UAAmB,EAAE,CAAC;oBAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAoF,CAAC;oBACjH,IAAI,CAAC,OAAO;wBAAE,SAAS;oBAEvB,MAAM,GAAG,GACP,OAAO,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI;wBAC5G,OAAO,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,OAAO,IAAI;wBACzC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,mBAAmB,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvF,WAAW,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,KAAK,iBAAiB,CAAC;oBAExD,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;wBACjF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB;oBACrC,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjB,CAAC;gBACH,CAAC;gBAED,wBAAwB;gBACxB,8DAA8D;gBAC9D,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,WAA+B,EAAE,CAAC;oBAC/D,IAAI,EAAE,CAAC,SAAS,KAAK,UAAU,IAAI,EAAE,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;wBAC3D,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAuD,CAAC;wBAClF,IAAI,CAAC,IAAI,CACP,OAAO,CAAC,CAAC,GAAG,uBAAuB,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI;4BACtG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;4BACjE,mBAAmB,EAAE,CAAC,SAAS,MAAM,CACtC,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,wBAAwB;gBACxB,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC;gBACxD,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;oBAC7B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,mBAAmB,CAAC,CAAC,KAAK,4BAA4B,CAAC,EAAE,CAAC,CAAC;gBACpF,CAAC;gBACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC,KAAK,sBAAsB,CAAC,gDAAgD,CAAC,CAAC;gBAC1H,CAAC;gBAED,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBACpE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,yCAAyC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACnG,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;oBACnE,IAAI,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;gBACrC,CAAC;qBAAM,CAAC;oBACN,uDAAuD;oBACvD,IAAI,CAAC,IAAI,CAAC,kCAAmC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,MAAM;YACpB,iEAAiE;YACjE,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3C,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAExB,2EAA2E;YAC3E,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;YAEzD,8DAA8D;YAC9D,IAAI,SAAc,CAAC;YACnB,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;YAExB,IAAI,CAAC;gBACH,8DAA8D;gBAC9D,MAAM,MAAM,GAAG,MAAO,SAAS,CAAC,YAA4C,CAAC,GAAG,CAAC,CAAC;gBAClF,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY;oBAAE,OAAO,IAAI,CAAC;gBAEhD,8DAA8D;gBAC9D,MAAM,YAAY,GAAI,MAAM,CAAC,KAAe,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAE1E,CAAC;gBACd,IAAI,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC;gBAE/B,iBAAiB;gBACjB,8DAA8D;gBAC9D,MAAM,cAAc,GAAI,SAAS,CAAC,YAA4D,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;gBACtI,IAAI,cAAc,EAAE,KAAK;oBAAE,OAAO,IAAI,CAAC,CAAC,kBAAkB;gBAE1D,MAAM,GAAG,GACP,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI;oBACzB,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,oCAAoC,CAAC,CAAC,KAAK,IAAI;oBAClE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI;oBACvB,iBAAiB,CAAC,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI;oBAC7C,iBAAiB,YAAY,CAAC,EAAE,IAAI;oBACpC,iBAAiB,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI;oBAC/C,iBAAiB,YAAY,CAAC,OAAO,IAAI;oBACzC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClF,iBAAiB,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,KAAK,IAAI;oBAC9C,mEAAmE;oBACnE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBAExB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;YAE5C,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@nexus_js/vite-plugin-nexus",
+  "version": "0.7.4",
+  "description": "Official Vite plugin for Nexus — transforms .nx files, HMR, island manifests, Server Actions",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "dependencies": {
+    "@nexus_js/assets": "0.7.4",
+    "@nexus_js/audit": "0.7.4",
+    "@nexus_js/types": "0.7.4",
+    "@nexus_js/compiler": "0.7.4"
+  },
+  "peerDependencies": {
+    "vite": ">=5.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.5.0",
+    "vite": "^5.0.0"
+  },
+  "license": "MIT",
+  "homepage": "https://nexusjs.dev",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/bierfor/nexus.git",
+    "directory": "packages/vite-plugin-nexus"
+  },
+  "bugs": {
+    "url": "https://github.com/bierfor/nexus/issues"
+  },
+  "keywords": [
+    "nexus",
+    "framework",
+    "full-stack",
+    "svelte",
+    "islands",
+    "ssr",
+    "vite",
+    "server-actions"
+  ],
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsc -p tsconfig.json --watch",
+    "clean": "rm -rf dist"
+  }
+}