@nexushub/client 0.4.2 → 0.4.4

package/dist/content/local-cache-server.cjs

@@ -1,116 +1,281 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }"use client";
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/content/local-cache-server.ts
+var local_cache_server_exports = {};
+__export(local_cache_server_exports, {
+  LocalCache: () => LocalCache
+});
+module.exports = __toCommonJS(local_cache_server_exports);
+var import_fs = __toESM(require("fs"), 1);
+var import_path = __toESM(require("path"), 1);
+
+// src/config.ts
+var DEFAULT_API_URL = "https://endpoints.gnexus.co.tz";
+var DEFAULT_ANALYTICS_URL = "https://sentry.gnexus.co.tz";
+var LOCAL_NEST_URL = "https://endpoints.gnexus.co.tz";
+var LOCAL_RUST_URL = "https://sentry.gnexus.co.tz";
+var getEnvConfig = () => {
+  const NEXT_PUBLIC_ID = typeof process !== "undefined" ? process.env.NEXT_PUBLIC_NEXUS_ID : void 0;
+  const NEXT_PUBLIC_KEY = typeof process !== "undefined" ? process.env.NEXT_PUBLIC_NEXUS_KEY : void 0;
+  const NEXT_PUBLIC_URL = typeof process !== "undefined" ? process.env.NEXT_PUBLIC_NEXUS_API_URL : void 0;
+  const NODE_ID = typeof process !== "undefined" ? process.env.NEXUS_PROJECT_ID : void 0;
+  const NODE_KEY = typeof process !== "undefined" ? process.env.NEXUS_API_KEY : void 0;
+  const NODE_URL = typeof process !== "undefined" ? process.env.NEXUS_API_URL : void 0;
+  const NODE_ENV = typeof process !== "undefined" ? process.env.NODE_ENV : "production";
+  const isDev = NODE_ENV === "development" || typeof window !== "undefined" && window.location.hostname === "localhost";
+  const projectId = NEXT_PUBLIC_ID ?? NODE_ID;
+  const apiKey = NEXT_PUBLIC_KEY ?? NODE_KEY;
+  const apiUrl = NEXT_PUBLIC_URL ?? NODE_URL ?? (isDev ? LOCAL_NEST_URL : DEFAULT_API_URL);
+  const analyticsUrl = apiUrl.includes("localhost") ? LOCAL_RUST_URL : DEFAULT_ANALYTICS_URL;
+  return {
+    projectId,
+    apiKey,
+    apiUrl,
+    analyticsUrl
+  };
+};
+
+// src/content/binary-compiler.ts
+var crypto = __toESM(require("crypto"), 1);
+var BinaryCompiler = class {
+  /**
+   * Generates a secure, deterministic cryptographic key from the project's API key.
+   */
+  static deriveKeys(apiKey) {
+    const hash = crypto.createHash("sha256").update(apiKey).digest();
+    const encryptionKey = hash;
+    const hmacKey = crypto.createHmac("sha256", apiKey).update("nexus-integrity-key").digest();
+    return { encryptionKey, hmacKey };
+  }
+  /**
+   * Compiles JSON content data into a secure, signed, and encrypted .nx binary buffer.
+   */
+  static compile(data, apiKey, projectId, metadataOverrides = {}) {
+    const { encryptionKey, hmacKey } = this.deriveKeys(apiKey);
+    const metadata = {
+      version: "2.0.0",
+      compiledAt: (/* @__PURE__ */ new Date()).toISOString(),
+      projectId,
+      ...metadataOverrides
+    };
+    const metadataStr = JSON.stringify(metadata);
+    const metadataBuffer = Buffer.from(metadataStr, "utf-8");
+    const iv = crypto.randomBytes(16);
+    const cipher = crypto.createCipheriv(this.ALGORITHM, encryptionKey, iv);
+    const plainTextPayload = JSON.stringify(data);
+    let encryptedPayload = cipher.update(plainTextPayload, "utf8");
+    encryptedPayload = Buffer.concat([encryptedPayload, cipher.final()]);
+    const payloadBuffer = Buffer.concat([iv, encryptedPayload]);
+    const headerBuffer = Buffer.from(this.MAGIC_HEADER, "ascii");
+    const metaLengthBuffer = Buffer.alloc(4);
+    metaLengthBuffer.writeUInt32BE(metadataBuffer.length, 0);
+    const payloadLengthBuffer = Buffer.alloc(4);
+    payloadLengthBuffer.writeUInt32BE(payloadBuffer.length, 0);
+    const prefixBlock = Buffer.concat([
+      headerBuffer,
+      metaLengthBuffer,
+      metadataBuffer,
+      payloadLengthBuffer,
+      payloadBuffer
+    ]);
+    const hmac = crypto.createHmac("sha256", hmacKey);
+    hmac.update(prefixBlock);
+    const signature = hmac.digest();
+    return Buffer.concat([prefixBlock, signature]);
+  }
+  /**
+   * Verifies, decrypts, and decompiles a .nx binary buffer back into clean, type-safe JSON.
+   * Throws structured errors on integrity verification failures or file corruption.
+   */
+  static decompile(buffer, apiKey) {
+    if (buffer.length < 44) {
+      throw new Error(
+        "Corrupted File: Binary payload is too short to be a valid Nexus node."
+      );
+    }
+    const { encryptionKey, hmacKey } = this.deriveKeys(apiKey);
+    const prefixBlockLength = buffer.length - 32;
+    const prefixBlock = buffer.subarray(0, prefixBlockLength);
+    const expectedSignature = buffer.subarray(prefixBlockLength);
+    const hmac = crypto.createHmac("sha256", hmacKey);
+    hmac.update(prefixBlock);
+    const actualSignature = hmac.digest();
+    if (!crypto.timingSafeEqual(expectedSignature, actualSignature)) {
+      throw new Error(
+        "DATA_INTEGRITY_VIOLATION: Cryptographic signature mismatch. This local node has been modified externally or tampered with."
+      );
+    }
+    const magicHeader = prefixBlock.subarray(0, 4).toString("ascii");
+    if (magicHeader !== this.MAGIC_HEADER) {
+      throw new Error(
+        "Invalid Format: File lacks the correct Nexus binary magic header."
+      );
+    }
+    const metaLength = prefixBlock.readUInt32BE(4);
+    const metaStart = 8;
+    const metaEnd = metaStart + metaLength;
+    const metadataStr = prefixBlock.subarray(metaStart, metaEnd).toString("utf-8");
+    const metadata = JSON.parse(metadataStr);
+    const payloadLength = prefixBlock.readUInt32BE(metaEnd);
+    const payloadStart = metaEnd + 4;
+    const payloadEnd = payloadStart + payloadLength;
+    const payloadBuffer = prefixBlock.subarray(payloadStart, payloadEnd);
+    const iv = payloadBuffer.subarray(0, 16);
+    const cipherText = payloadBuffer.subarray(16);
+    const decipher = crypto.createDecipheriv(this.ALGORITHM, encryptionKey, iv);
+    let decrypted = decipher.update(cipherText);
+    decrypted = Buffer.concat([decrypted, decipher.final()]);
+    const data = JSON.parse(decrypted.toString("utf8"));
+    return { data, metadata };
+  }
+};
+BinaryCompiler.MAGIC_HEADER = "NEXS";
+// 4-byte ASCII magic identifier
+BinaryCompiler.ALGORITHM = "aes-256-cbc";
 
 // src/content/local-cache-server.ts
-var _fs = require('fs'); var _fs2 = _interopRequireDefault(_fs);
-var _path = require('path'); var _path2 = _interopRequireDefault(_path);
 var LocalCache = class {
   constructor(customPath) {
+    this.apiKey = "";
     this.baseDir = customPath || ".nexus/local";
+    const config = getEnvConfig();
+    this.apiKey = config.apiKey || "";
   }
   isLoaded() {
-    return _fs2.default.existsSync(_path2.default.resolve(process.cwd(), this.baseDir));
+    return import_fs.default.existsSync(import_path.default.resolve(process.cwd(), this.baseDir));
   }
   /**
-   * Retrieve a specific page directly from its file.
+   * Helper to decrypt and decompile `.nx` files on-the-fly.
    */
-  async getPage(slug) {
-    try {
-      const filePath = _path2.default.resolve(
-        process.cwd(),
-        this.baseDir,
-        "pages",
-        `${slug}.json`
-      );
-      if (_fs2.default.existsSync(filePath)) {
-        const fileContent = _fs2.default.readFileSync(filePath, "utf-8");
-        const pageData = JSON.parse(fileContent);
-        return pageData.data !== void 0 ? pageData.data : pageData;
+  decompileFile(filePath) {
+    if (!this.apiKey) {
+      if (process.env.NODE_ENV === "development") {
+        console.warn(
+          "\u26A0\uFE0F  NexusHub: Missing NEXUS_API_KEY. Local decryption bypassed."
+        );
       }
+      return null;
+    }
+    try {
+      const encryptedBuffer = import_fs.default.readFileSync(filePath);
+      const decompiled = BinaryCompiler.decompile(encryptedBuffer, this.apiKey);
+      return decompiled.data;
     } catch (error) {
       if (process.env.NODE_ENV === "development") {
-        console.warn(
-          `\u26A0\uFE0F  NexusHub: Failed to load local page '${slug}':`,
-          error
+        console.error(
+          `
+\u{1F6A8}  NexusHub Security Alert: Data Integrity Violation in file:
+    ${filePath}
+    Error: ${error.message}
+    This file has been disabled until regenerated via npx nexus pull.
+`
         );
       }
+      return null;
+    }
+  }
+  /**
+   * Retrieve a specific page directly from its .nx file.
+   */
+  async getPage(slug) {
+    const filePath = import_path.default.resolve(
+      process.cwd(),
+      this.baseDir,
+      "pages",
+      `${slug}.nx`
+    );
+    if (import_fs.default.existsSync(filePath)) {
+      const pageData = this.decompileFile(filePath);
+      if (!pageData) return null;
+      return pageData.data !== void 0 ? pageData.data : pageData;
     }
     return null;
   }
   /**
-   * Retrieve an entire collection from its specific collection file.
+   * Retrieve an entire collection from its specific .nx file.
    */
   async getCollection(collectionId) {
-    try {
-      const filePath = _path2.default.resolve(
-        process.cwd(),
-        this.baseDir,
-        "collections",
-        `${collectionId}.json`
-      );
-      if (_fs2.default.existsSync(filePath)) {
-        const fileContent = _fs2.default.readFileSync(filePath, "utf-8");
-        return JSON.parse(fileContent);
-      }
-    } catch (error) {
-      if (process.env.NODE_ENV === "development") {
-        console.warn(
-          `\u26A0\uFE0F  NexusHub: Failed to load local collection '${collectionId}':`,
-          error
-        );
-      }
+    const filePath = import_path.default.resolve(
+      process.cwd(),
+      this.baseDir,
+      "collections",
+      `${collectionId}.nx`
+    );
+    if (import_fs.default.existsSync(filePath)) {
+      return this.decompileFile(filePath);
     }
     return null;
   }
   /**
-   * Retrieve global settings from its file.
+   * Retrieve global settings from its .nx file.
    */
   async getGlobals() {
-    try {
-      const filePath = _path2.default.resolve(
-        process.cwd(),
-        this.baseDir,
-        "globals.json"
-      );
-      if (_fs2.default.existsSync(filePath)) {
-        const fileContent = _fs2.default.readFileSync(filePath, "utf-8");
-        return JSON.parse(fileContent);
-      }
-    } catch (e) {
+    const filePath = import_path.default.resolve(process.cwd(), this.baseDir, "globals.nx");
+    if (import_fs.default.existsSync(filePath)) {
+      return this.decompileFile(filePath);
     }
     return null;
   }
   /**
-   * Returns a merged JSON of the entire workspace structure (for dev analytics/inspectors)
+   * Returns a merged JSON of the entire workspace structure.
    */
   async getAllData() {
     const pages = {};
     const collections = {};
     let globals = {};
     try {
-      const pagesDir = _path2.default.resolve(process.cwd(), this.baseDir, "pages");
-      if (_fs2.default.existsSync(pagesDir)) {
-        for (const file of _fs2.default.readdirSync(pagesDir)) {
-          if (file.endsWith(".json")) {
-            const slug = _path2.default.basename(file, ".json");
+      const pagesDir = import_path.default.resolve(process.cwd(), this.baseDir, "pages");
+      if (import_fs.default.existsSync(pagesDir)) {
+        for (const file of import_fs.default.readdirSync(pagesDir)) {
+          if (file.endsWith(".nx")) {
+            const slug = import_path.default.basename(file, ".nx");
             pages[slug] = await this.getPage(slug);
           }
         }
       }
-      const colsDir = _path2.default.resolve(process.cwd(), this.baseDir, "collections");
-      if (_fs2.default.existsSync(colsDir)) {
-        for (const file of _fs2.default.readdirSync(colsDir)) {
-          if (file.endsWith(".json")) {
-            const id = _path2.default.basename(file, ".json");
+      const colsDir = import_path.default.resolve(process.cwd(), this.baseDir, "collections");
+      if (import_fs.default.existsSync(colsDir)) {
+        for (const file of import_fs.default.readdirSync(colsDir)) {
+          if (file.endsWith(".nx")) {
+            const id = import_path.default.basename(file, ".nx");
             collections[id] = await this.getCollection(id) || [];
           }
         }
       }
       globals = await this.getGlobals() || {};
-    } catch (e2) {
+    } catch {
     }
     return { pages, collections, globals };
   }
 };
-
-
-exports.LocalCache = LocalCache;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  LocalCache
+});

package/dist/content/local-cache-server.d.cts

@@ -2,22 +2,27 @@ import { I as ILocalCache } from '../cache-types-B39iNHfE.cjs';
 
 declare class LocalCache implements ILocalCache {
     private baseDir;
+    private apiKey;
     constructor(customPath?: string);
     isLoaded(): boolean;
     /**
-     * Retrieve a specific page directly from its file.
+     * Helper to decrypt and decompile `.nx` files on-the-fly.
+     */
+    private decompileFile;
+    /**
+     * Retrieve a specific page directly from its .nx file.
      */
     getPage(slug: string): Promise<any>;
     /**
-     * Retrieve an entire collection from its specific collection file.
+     * Retrieve an entire collection from its specific .nx file.
      */
     getCollection(collectionId: string): Promise<any[] | null>;
     /**
-     * Retrieve global settings from its file.
+     * Retrieve global settings from its .nx file.
      */
     getGlobals(): Promise<any>;
     /**
-     * Returns a merged JSON of the entire workspace structure (for dev analytics/inspectors)
+     * Returns a merged JSON of the entire workspace structure.
      */
     getAllData(): Promise<any>;
 }

package/dist/content/local-cache-server.d.ts

@@ -2,22 +2,27 @@ import { I as ILocalCache } from '../cache-types-B39iNHfE.js';
 
 declare class LocalCache implements ILocalCache {
     private baseDir;
+    private apiKey;
     constructor(customPath?: string);
     isLoaded(): boolean;
     /**
-     * Retrieve a specific page directly from its file.
+     * Helper to decrypt and decompile `.nx` files on-the-fly.
+     */
+    private decompileFile;
+    /**
+     * Retrieve a specific page directly from its .nx file.
      */
     getPage(slug: string): Promise<any>;
     /**
-     * Retrieve an entire collection from its specific collection file.
+     * Retrieve an entire collection from its specific .nx file.
      */
     getCollection(collectionId: string): Promise<any[] | null>;
     /**
-     * Retrieve global settings from its file.
+     * Retrieve global settings from its .nx file.
      */
     getGlobals(): Promise<any>;
     /**
-     * Returns a merged JSON of the entire workspace structure (for dev analytics/inspectors)
+     * Returns a merged JSON of the entire workspace structure.
      */
     getAllData(): Promise<any>;
 }