command-ref.json

{
  "generatedFrom": "lib/cli/reference.js COMMAND_GROUPS",
  "version": "2.46.3",
  "commandCount": 89,
  "groups": [
    {
      "title": "AI & Nexus",
      "commands": [
        {
          "usage": "nexus [opts] [task]",
          "desc": "Nexus AI coder chat: -e claude|gemini|codex|opencode|aider|ollama, -y skip prompts, --print headless"
        },
        {
          "usage": "nexus run \"<goal>\" [opts]",
          "desc": "autonomous multi-level runner: -e engine, --overnight, --until, --resume"
        },
        {
          "usage": "nexus serve [port]",
          "desc": "headless Nexus service: POST /run {goal} (loopback-only, token-gated)"
        },
        {
          "usage": "update [--check]",
          "desc": "self-update to the latest version (git fast-forward; --check only reports)"
        },
        {
          "usage": "init",
          "desc": "scaffold Nexus in this project (.nexus/NEXUS.md + config)"
        },
        {
          "usage": "docs [topic]",
          "desc": "built-in Nexus documentation (docs all for everything)"
        },
        {
          "usage": "report [--json] [--since <date>]",
          "desc": "AI cost & usage report for chargeback (reads .nexus/usage.jsonl)"
        },
        {
          "usage": "savings [--json] [--since <date>]",
          "desc": "cost-savings analysis: run-rate, 30d projection, local/downshift levers"
        },
        {
          "usage": "todo [TAG] [--max N] [--json]",
          "desc": "scan the project for TODO/FIXME/HACK markers (CI gate)"
        },
        {
          "usage": "stats [--json]",
          "desc": "codebase overview: files, lines & languages, largest files"
        },
        {
          "usage": "deps [--json] [--strict]",
          "desc": "dependency hygiene: unused + undeclared imports (CI gate)"
        },
        {
          "usage": "env [--json] [--strict]",
          "desc": "env-var audit: code vs .env.example (undocumented/unused)"
        },
        {
          "usage": "changelog [range] [--json]",
          "desc": "release notes from git history, grouped by commit type"
        },
        {
          "usage": "compliance [verify <file>]",
          "desc": "signed audit+usage compliance bundle for SOC2/review"
        }
      ]
    },
    {
      "title": "API",
      "commands": [
        {
          "usage": "api start [--port 8080] [--host 127.0.0.1]",
          "desc": "start the REST API server (loopback unless --host)"
        },
        {
          "usage": "api stop",
          "desc": "stop the API server"
        }
      ]
    },
    {
      "title": "Setup & security",
      "commands": [
        {
          "usage": "doctor",
          "desc": "health check: engines, Ollama, models, MCP, policy, memory, disk"
        },
        {
          "usage": "mcp [--list]",
          "desc": "MCP server: the Darknode Deck's tools for any AI client (Claude, Cursor, Codex, Gemini...)"
        },
        {
          "usage": "policy [init|--json]",
          "desc": "show/scaffold the security policy (init writes a starter .nexus/policy.json)"
        },
        {
          "usage": "audit [verify|--json]",
          "desc": "show the audit trail; 'verify' checks the hash chain (exit 1 if tampered)"
        },
        {
          "usage": "marketplace [list|install|init]",
          "desc": "browse, install & publish agents, skills, hooks, pipelines"
        },
        {
          "usage": "cron [list|add|remove|run]",
          "desc": "scheduled pipeline runs (cron.json)"
        },
        {
          "usage": "login [google|github|<code>]",
          "desc": "sign in (paste your code from the website Settings)"
        },
        {
          "usage": "setup <tool>",
          "desc": "auto-configure a tool on first use"
        }
      ]
    },
    {
      "title": "Recon",
      "commands": [
        {
          "usage": "scan <host> [ports]",
          "desc": "TCP scan (ports: top | 1-1024 | 80,443)"
        },
        {
          "usage": "dns <domain>",
          "desc": "A / AAAA / MX / NS / TXT / CNAME + reverse"
        },
        {
          "usage": "whois <domain|ip>",
          "desc": "native WHOIS lookup"
        },
        {
          "usage": "headers <url>",
          "desc": "HTTP status + security-header check"
        },
        {
          "usage": "cert <host>",
          "desc": "TLS certificate inspector"
        },
        {
          "usage": "subs <domain>",
          "desc": "passive subdomain enum (crt.sh)"
        },
        {
          "usage": "cve <keyword | CVE-id>",
          "desc": "search the NVD vulnerability database"
        },
        {
          "usage": "fuzz <url> [wordlist]",
          "desc": "directory / content brute-forcer"
        },
        {
          "usage": "nmap <host> [args]",
          "desc": "system nmap wrapper (falls back to the native scanner)"
        },
        {
          "usage": "nuclei <target> [args]",
          "desc": "run projectdiscovery nuclei templates (if installed)"
        },
        {
          "usage": "subrecon <domain>",
          "desc": "chained recon: subs → resolve → live-HTTP probe"
        }
      ]
    },
    {
      "title": "Offensive",
      "commands": [
        {
          "usage": "revshell <lang> <ip> <port>",
          "desc": "reverse-shell one-liner"
        },
        {
          "usage": "serve [port] [dir]",
          "desc": "HTTP file server for payload delivery (default 8000)"
        },
        {
          "usage": "listen [port]",
          "desc": "TCP listener to catch a reverse shell (default 4444)"
        },
        {
          "usage": "payloads [class]",
          "desc": "payload library (sqli, xss, lfi, cmdi, ssti, ssrf)"
        },
        {
          "usage": "hashcat <hashfile> <mode> [wl]",
          "desc": "hashcat runner (run with no mode for the mode list)"
        },
        {
          "usage": "lab [doctor|up <t>|sandbox|down|<id>]",
          "desc": "security lab: isolated vulnerable targets + malware-detonation sandbox"
        }
      ]
    },
    {
      "title": "Encoding & hashing",
      "commands": [
        {
          "usage": "encode <type> <text>",
          "desc": "encode text (b64|hex|url|base32|base58|rot13)"
        },
        {
          "usage": "decode <type> <text>",
          "desc": "decode text (b64|hex|url|base32|base58|rot13)"
        },
        {
          "usage": "hash <text>",
          "desc": "md5 / sha1 / sha256 / sha512"
        },
        {
          "usage": "hashfile <file>",
          "desc": "md5 / sha1 / sha256 / sha512 of a file"
        },
        {
          "usage": "hashid <hash>",
          "desc": "identify a hash type"
        },
        {
          "usage": "hexdump <text>",
          "desc": "canonical hex + ASCII dump (aliases: xxd, hd)"
        },
        {
          "usage": "strings [-n min] <text>",
          "desc": "extract printable runs from input"
        },
        {
          "usage": "rot [n] <text>",
          "desc": "Caesar / ROT-N cipher (default 13)"
        },
        {
          "usage": "xor <key> <text> | -d <key> <hex>",
          "desc": "repeating-key XOR (encrypt to hex / decrypt)"
        },
        {
          "usage": "genpass [length]",
          "desc": "generate a strong random password (default 20)"
        },
        {
          "usage": "defang <ioc>",
          "desc": "neutralize a URL/IP/email for safe pasting (hxxp, [.])"
        },
        {
          "usage": "refang <text>",
          "desc": "reverse defang"
        }
      ]
    },
    {
      "title": "Network & analysis",
      "commands": [
        {
          "usage": "entropy <string>",
          "desc": "Shannon entropy — flag high-entropy secrets/keys"
        },
        {
          "usage": "epoch [ts|date]",
          "desc": "unix timestamp <-> ISO/UTC (no arg = now)"
        },
        {
          "usage": "incidr <ip> <cidr>",
          "desc": "is an IP inside a CIDR range? (firewall/allowlist checks)"
        },
        {
          "usage": "port <number|service>",
          "desc": "port <-> service lookup (both directions)"
        },
        {
          "usage": "passphrase [count]",
          "desc": "memorable diceware passphrase (default 4 words)"
        },
        {
          "usage": "url <url>",
          "desc": "break a URL into scheme/host/port/path/query/fragment"
        },
        {
          "usage": "totp <base32-secret>",
          "desc": "generate a 2FA (TOTP) code from a secret"
        },
        {
          "usage": "useragent <ua-string>",
          "desc": "parse a User-Agent (browser / OS / device / bot)"
        },
        {
          "usage": "cidr <a.b.c.d/xx>",
          "desc": "subnet calculator (range, hosts, mask)"
        },
        {
          "usage": "ipclass <ip>",
          "desc": "classify an IP scope (private/loopback/CGNAT/global) — offline"
        },
        {
          "usage": "luhn <number>",
          "desc": "validate a Luhn (mod-10) number; append '?' for the check digit"
        },
        {
          "usage": "jwt <token>",
          "desc": "decode a JWT header + payload"
        },
        {
          "usage": "dorks <domain>",
          "desc": "print Google dork search URLs for a domain"
        },
        {
          "usage": "uuid",
          "desc": "generate a random UUID v4"
        },
        {
          "usage": "myip",
          "desc": "show your public IP address"
        },
        {
          "usage": "ipinfo <ip>",
          "desc": "geolocate an IP (city, ISP, ASN)"
        },
        {
          "usage": "status <code>",
          "desc": "look up an HTTP status code"
        }
      ]
    },
    {
      "title": "Git",
      "commands": [
        {
          "usage": "git clone <url>",
          "desc": "clone a repo (DARKNODE_GH_TOKEN for private)"
        },
        {
          "usage": "git push [message]",
          "desc": "commit all changes + push"
        },
        {
          "usage": "git pull",
          "desc": "pull the latest changes"
        },
        {
          "usage": "git status",
          "desc": "working-tree status"
        },
        {
          "usage": "git log",
          "desc": "recent commits"
        },
        {
          "usage": "git diff [file]",
          "desc": "working-tree diff"
        },
        {
          "usage": "git branch",
          "desc": "list branches"
        },
        {
          "usage": "git checkout <branch>",
          "desc": "switch branch"
        },
        {
          "usage": "git repos",
          "desc": "list your repositories"
        },
        {
          "usage": "git new <name>",
          "desc": "create a private repo"
        },
        {
          "usage": "git issues <owner/repo>",
          "desc": "list open issues"
        },
        {
          "usage": "git prs <owner/repo>",
          "desc": "list open pull requests"
        },
        {
          "usage": "git issue <owner/repo> \"title\"",
          "desc": "create an issue"
        },
        {
          "usage": "git pr \"title\" [base]",
          "desc": "open a PR from the current branch"
        },
        {
          "usage": "git comment <owner/repo> <n> \"…\"",
          "desc": "comment on an issue/PR"
        },
        {
          "usage": "git gists",
          "desc": "list your gists"
        },
        {
          "usage": "git gist <file> [description]",
          "desc": "create a gist from a file"
        }
      ]
    },
    {
      "title": "Reference",
      "commands": [
        {
          "usage": "cheats [topic]",
          "desc": "__CHEATS__"
        },
        {
          "usage": "tools",
          "desc": "tool catalog + install commands"
        }
      ]
    }
  ]
}