Project at a glance: languages, LOC, git state, index health, entry points.

Search files by content (regex/literal) or by glob pattern. Gitignore-aware.

Read a line range of a file. Encoding-safe, binary-aware, injection-scanned.

Build or refresh the code index (symbols, imports, calls). Required before code-intel tools.

Get the symbol outline of a file (functions, classes, types, etc.).

Fuzzy search for symbols across the entire workspace.

Find all reference sites of a symbol (calls, imports, type annotations).

Callers or callees of a function, depth-N.

Import dependencies of a file (what it depends on) or dependents (what depends on it).

Ranked repo map within a token budget. Shows top symbols per file, PageRank-ordered. Most important context feature.

Task-focused context bundle: repo map slice + symbol outlines of focus files + related files.

Blast radius of editing a symbol or file: what else would be affected? Uses reverse reachability on the dependency/call graph.

Smart git diff: stat summary + paginated hunks. Binary files flagged.

Checkpoint files before editing. Creates a restore point with full file contents.

Restore files from a snapshot. Overwrites current content. DESTRUCTIVE.

Run a command with timeout, ring-buffer output, and secret redaction. Process-group killed on timeout.

Poll, list, or kill background exec jobs.

Detect framework (jest/vitest/pytest/cargo/go) and run tests. Returns structured pass/fail counts and failures.

Run typecheck (tsc) and linter (eslint). Parses output into structured diagnostics {file, line, col, severity, rule, message}.

Store a persistent memory: knowledge, decision, gotcha, or preference. Survives across sessions.

Recall memories by text query, tags, or namespace.

Delete memories by ID or text match. Audit-logged. DESTRUCTIVE.

Submit a task DAG (directed acyclic graph). Validates cycles. Persists across restarts.

Update task status (completed/failed/in_progress). Unblocks dependents.

View task DAG: ready, blocked, in_progress, completed, failed.

Parallel map: run a command over multiple items with concurrency limit.

Scan files for secrets (AWS, GitHub, OpenAI, JWT, private keys, etc.). Findings are redacted.

Dependency inventory with risk heuristics: typosquatting, unpinned versions, abandoned packages.

Preview workspace-wide rename of a symbol (graph-scoped, not blind sed). Returns the changes to make.

Server self-diagnostics: index age, backend, caps, state dirs, version.

On-demand playbook: recommended workflows, recipes, and gotchas for using NEXUS effectively.