@cheatron/native 1.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Cheatron
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,105 @@
+# @cheatron/native
+
+Ergonomic Win32 process and memory management API for Cheatron, powered by [Bun](https://bun.sh/) and [Koffi](https://koffi.dev/).
+
+> [!IMPORTANT]
+> **64-bit Windows only.** This project exclusively targets 64-bit Windows environments.
+
+## Features
+
+- **Process Management**: Open processes by PID, access the current process, and query memory information.
+- **Memory Operations**: Read and write memory buffers from/to target processes.
+- **Thread Management**: Create local/remote threads, get/set thread context, suspend/resume, and track exit codes.
+- **Module Helper**: Easy access to loaded modules (`kernel32.dll`, `msvcrt.dll`, etc.) and function addresses.
+- **Low-level FFI**: Direct access to `Kernel32Impl` and `MsvcrtImpl` for advanced Win32 API calls.
+- **Safe Handles**: Automatic handle cleanup using `FinalizationRegistry`.
+- **Integrated Logging**: Scoped logging powered by `@cheatron/log`.
+
+## Installation
+
+```bash
+bun add @cheatron/native
+```
+
+## Quick Start
+
+```typescript
+import { Process, currentProcess } from '@cheatron/native';
+
+// Open a process by ID
+const proc = Process.open(1234);
+
+// Read memory
+const buffer = proc.readMemory(0x10000000n, 1024);
+console.log(buffer.toString('hex'));
+
+// Write memory
+proc.writeMemory(0x20000000n, Buffer.from([0x90, 0x90, 0x90]));
+
+// Create a thread in the target process
+const thread = proc.createThread(0x30000000n);
+thread.wait();
+console.log(`Thread exited with: ${thread.getExitCode()}`);
+
+proc.close();
+```
+
+## Core Components
+
+### Process
+
+The `Process` class provides methods for interacting with Windows processes. Use `Process.open(pid)` or `Process.current()` to get an instance.
+
+- `readMemory(address: bigint, size: number): Buffer`
+- `writeMemory(address: bigint, buffer: Buffer): void`
+- `createThread(startAddress: bigint, ...): Thread`
+- `virtualQuery(address: bigint): MemoryBasicInformation`
+
+### Thread
+
+Manage execution flow within processes.
+
+- `suspend() / resume(): number`
+- `getContext(flags?: number): ThreadContext`
+- `setContext(ctx: ThreadContext): void`
+- `getExitCode(): number`
+- `wait(timeoutMs?: number): WaitReturn`
+
+### Module
+
+Enumerate and interact with loaded DLLs.
+
+- `Module.get(name: string): Module`
+- `Module.kernel32 / Module.crt`: Pre-defined instances.
+- `getProcAddress(name: string): bigint`
+
+## Advanced FFI
+
+For tasks not covered by the ergonomic API, you can use the raw implementations directly:
+
+```typescript
+import { Kernel32Impl, MsvcrtImpl } from '@cheatron/native';
+
+const hProcess = Kernel32Impl.GetCurrentProcess();
+const ptr = MsvcrtImpl.malloc(1024);
+MsvcrtImpl.free(ptr);
+```
+
+## Development
+
+This project uses [Bun](https://bun.sh/). To run tests on Linux, you need `wine`.
+
+```bash
+# Install dependencies
+bun install
+
+# Run tests (runs natively or via wine depending on environment)
+bun test
+
+# Build the project
+bun run build
+```
+
+## License
+
+MIT

package/dist/eslint.config.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("typescript-eslint").FlatConfig.ConfigArray;
+export default _default;
+//# sourceMappingURL=eslint.config.d.ts.map

package/dist/eslint.config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eslint.config.d.ts","sourceRoot":"","sources":["../eslint.config.js"],"names":[],"mappings":""}

package/dist/eslint.config.js

@@ -0,0 +1,26 @@
+import js from '@eslint/js';
+import globals from 'globals';
+import tseslint from 'typescript-eslint';
+import prettierConfig from 'eslint-config-prettier';
+export default tseslint.config({ ignores: ['dist', 'node_modules', 'build'] }, {
+    extends: [js.configs.recommended, ...tseslint.configs.recommended],
+    files: ['**/*.{ts,tsx,js,jsx}'],
+    languageOptions: {
+        ecmaVersion: 2024,
+        sourceType: 'module',
+        globals: {
+            ...globals.browser,
+            ...globals.node,
+        },
+        parserOptions: {
+            project: ['./tsconfig.json'],
+            tsconfigRootDir: import.meta.dirname,
+        },
+    },
+    rules: {
+        'no-unused-vars': 'warn',
+        'no-console': ['warn', { allow: ['warn', 'error'] }],
+        '@typescript-eslint/no-explicit-any': 'warn',
+    },
+}, prettierConfig);
+//# sourceMappingURL=eslint.config.js.map

package/dist/eslint.config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eslint.config.js","sourceRoot":"","sources":["../eslint.config.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,cAAc,MAAM,wBAAwB,CAAC;AAEpD,eAAe,QAAQ,CAAC,MAAM,CAC5B,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,EAC9C;IACE,OAAO,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC;IAClE,KAAK,EAAE,CAAC,sBAAsB,CAAC;IAC/B,eAAe,EAAE;QACf,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE;YACP,GAAG,OAAO,CAAC,OAAO;YAClB,GAAG,OAAO,CAAC,IAAI;SAChB;QACD,aAAa,EAAE;YACb,OAAO,EAAE,CAAC,iBAAiB,CAAC;YAC5B,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;SACrC;KACF;IACD,KAAK,EAAE;QACL,gBAAgB,EAAE,MAAM;QACxB,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QACpD,oCAAoC,EAAE,MAAM;KAC7C;CACF,EACD,cAAc,CACf,CAAC"}

package/dist/src/handle.d.ts

@@ -0,0 +1,26 @@
+import { WaitReturn, type HANDLE } from '@cheatron/native-bindings';
+/**
+ * Base class for Win32 handles
+ */
+export declare class Handle {
+    protected _handle: HANDLE;
+    constructor(handle: HANDLE, autoClose?: boolean);
+    /**
+     * Checks if the handle is valid
+     */
+    isValid(): boolean;
+    /**
+     * Closes the handle
+     */
+    close(): void;
+    /**
+     * Waits for the handle to signal
+     * @param timeoutMs Timeout in milliseconds (default: INFINITE)
+     */
+    wait(timeoutMs?: number): WaitReturn;
+    /**
+     * Gets the raw handle
+     */
+    get handle(): HANDLE;
+}
+//# sourceMappingURL=handle.d.ts.map

package/dist/src/handle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle.d.ts","sourceRoot":"","sources":["../../src/handle.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,UAAU,EACV,KAAK,MAAM,EACZ,MAAM,2BAA2B,CAAC;AAcnC;;GAEG;AACH,qBAAa,MAAM;IACjB,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC;gBAEd,MAAM,EAAE,MAAM,EAAE,SAAS,GAAE,OAAc;IAOrD;;OAEG;IACH,OAAO,IAAI,OAAO;IAIlB;;OAEG;IACH,KAAK;IASL;;;OAGG;IACH,IAAI,CAAC,SAAS,GAAE,MAAiB,GAAG,UAAU;IAS9C;;OAEG;IACH,IAAI,MAAM,IAAI,MAAM,CAEnB;CACF"}

package/dist/src/handle.js

@@ -0,0 +1,57 @@
+import { Kernel32Impl, INFINITE, WaitReturn, } from '@cheatron/native-bindings';
+import { log } from './logger';
+const handleLog = log.child('Handle');
+/**
+ * Handle management registry for automatic cleanup
+ */
+const registry = new FinalizationRegistry((handle) => {
+    if (handle) {
+        Kernel32Impl.CloseHandle(handle);
+    }
+});
+/**
+ * Base class for Win32 handles
+ */
+export class Handle {
+    _handle;
+    constructor(handle, autoClose = true) {
+        this._handle = handle;
+        if (autoClose && handle) {
+            registry.register(this, handle, this);
+        }
+    }
+    /**
+     * Checks if the handle is valid
+     */
+    isValid() {
+        return this._handle !== null && this._handle !== undefined;
+    }
+    /**
+     * Closes the handle
+     */
+    close() {
+        if (this.isValid()) {
+            const h = this._handle;
+            this._handle = null;
+            registry.unregister(this);
+            Kernel32Impl.CloseHandle(h);
+        }
+    }
+    /**
+     * Waits for the handle to signal
+     * @param timeoutMs Timeout in milliseconds (default: INFINITE)
+     */
+    wait(timeoutMs = INFINITE) {
+        if (!this.isValid())
+            throw new Error('Handle is closed');
+        handleLog.debug(`Waiting for handle to signal (Timeout: ${timeoutMs}ms)`);
+        return Kernel32Impl.WaitForSingleObject(this._handle, timeoutMs);
+    }
+    /**
+     * Gets the raw handle
+     */
+    get handle() {
+        return this._handle;
+    }
+}
+//# sourceMappingURL=handle.js.map

package/dist/src/handle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle.js","sourceRoot":"","sources":["../../src/handle.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,QAAQ,EACR,UAAU,GAEX,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEtC;;GAEG;AACH,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CAAS,CAAC,MAAM,EAAE,EAAE;IAC3D,IAAI,MAAM,EAAE,CAAC;QACX,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,OAAO,MAAM;IACP,OAAO,CAAS;IAE1B,YAAY,MAAc,EAAE,YAAqB,IAAI;QACnD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;YACxB,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YACvB,IAAI,CAAC,OAAO,GAAG,IAAK,CAAC;YACrB,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC1B,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,YAAoB,QAAQ;QAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACzD,SAAS,CAAC,KAAK,CAAC,0CAA0C,SAAS,KAAK,CAAC,CAAC;QAC1E,OAAO,YAAY,CAAC,mBAAmB,CACrC,IAAI,CAAC,OAAO,EACZ,SAAS,CACI,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF"}

package/dist/src/index.d.ts

@@ -0,0 +1,8 @@
+export { log } from './logger';
+export * from './thread';
+export * from './process';
+export * from './module';
+export * from './handle';
+export * from '@cheatron/native-bindings';
+export type * from '@cheatron/native-bindings';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AAEzB,cAAc,2BAA2B,CAAC;AAC1C,mBAAmB,2BAA2B,CAAC"}

package/dist/src/index.js

@@ -0,0 +1,7 @@
+export { log } from './logger';
+export * from './thread';
+export * from './process';
+export * from './module';
+export * from './handle';
+export * from '@cheatron/native-bindings';
+//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AAEzB,cAAc,2BAA2B,CAAC"}

package/dist/src/logger.d.ts

@@ -0,0 +1,2 @@
+export declare const log: import("@cheatron/log").LoggerHelpers;
+//# sourceMappingURL=logger.d.ts.map

package/dist/src/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/logger.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,GAAG,uCAA4B,CAAC"}

package/dist/src/logger.js

@@ -0,0 +1,3 @@
+import { createLogHelper } from '@cheatron/log';
+export const log = createLogHelper('Native');
+//# sourceMappingURL=logger.js.map

package/dist/src/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,MAAM,CAAC,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC"}

package/dist/src/module.d.ts

@@ -0,0 +1,22 @@
+import { type HANDLE, type HMODULE } from '@cheatron/native-bindings';
+import { Handle } from './handle';
+/**
+ * Represents a loaded module
+ */
+export declare class Module extends Handle {
+    protected _name: string;
+    private static _kernel32;
+    private static _crt;
+    constructor(handle: HMODULE, name: string);
+    static get kernel32(): Module;
+    static get crt(): Module;
+    /**
+     * Gets a module handle for the specified module name
+     * Automatically detects if the name is ANSI or Unicode
+     * @param name Module name (e.g., 'kernel32.dll')
+     */
+    static get(name: string): Module;
+    getProcAddress(procName: string): HANDLE;
+    get name(): string;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/src/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../src/module.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,MAAM,EACX,KAAK,OAAO,EACb,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAKlC;;GAEG;AACH,qBAAa,MAAO,SAAQ,MAAM;IAChC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,MAAM,CAAC,SAAS,CAAS;IACjC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAS;gBAEhB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM;IAMzC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAK5B;IAED,MAAM,KAAK,GAAG,IAAI,MAAM,CAKvB;IAED;;;;OAIG;IACH,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAehC,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAQxC,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/src/module.js

@@ -0,0 +1,55 @@
+import { Kernel32Impl, } from '@cheatron/native-bindings';
+import { Handle } from './handle';
+import { log } from './logger';
+const moduleLog = log.child('Module');
+/**
+ * Represents a loaded module
+ */
+export class Module extends Handle {
+    _name;
+    static _kernel32;
+    static _crt;
+    constructor(handle, name) {
+        // Module handles from GetModuleHandle should not be closed with CloseHandle
+        super(handle, false);
+        this._name = name;
+    }
+    static get kernel32() {
+        if (!this._kernel32) {
+            this._kernel32 = this.get('kernel32.dll');
+        }
+        return this._kernel32;
+    }
+    static get crt() {
+        if (!this._crt) {
+            this._crt = this.get('msvcrt.dll');
+        }
+        return this._crt;
+    }
+    /**
+     * Gets a module handle for the specified module name
+     * Automatically detects if the name is ANSI or Unicode
+     * @param name Module name (e.g., 'kernel32.dll')
+     */
+    static get(name) {
+        moduleLog.debug(`Getting module handle for: ${name}`);
+        // Simple ASCII check: any char > 127 means we should use Unicode API
+        const isUnicode = Array.from(name).some((char) => char.charCodeAt(0) > 127);
+        const handle = isUnicode
+            ? Kernel32Impl.GetModuleHandleW(name)
+            : Kernel32Impl.GetModuleHandleA(name);
+        if (!handle) {
+            throw new Error(`Failed to get module handle for ${name}`);
+        }
+        return new Module(handle, name);
+    }
+    getProcAddress(procName) {
+        if (!this.isValid())
+            throw new Error('Module handle is closed');
+        return Kernel32Impl.GetProcAddress(this._handle, procName);
+    }
+    get name() {
+        return this._name;
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/src/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../src/module.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,GAGb,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEtC;;GAEG;AACH,MAAM,OAAO,MAAO,SAAQ,MAAM;IACtB,KAAK,CAAS;IAChB,MAAM,CAAC,SAAS,CAAS;IACzB,MAAM,CAAC,IAAI,CAAS;IAE5B,YAAY,MAAe,EAAE,IAAY;QACvC,4EAA4E;QAC5E,KAAK,CAAC,MAA2B,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,MAAM,KAAK,QAAQ;QACjB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,MAAM,KAAK,GAAG;QACZ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,GAAG,CAAC,IAAY;QACrB,SAAS,CAAC,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;QAEtD,qEAAqE;QACrE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,SAAS;YACtB,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC;YACrC,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,cAAc,CAAC,QAAgB;QAC7B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAChE,OAAO,YAAY,CAAC,cAAc,CAChC,IAAI,CAAC,OAA6B,EAClC,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF"}

package/dist/src/process.d.ts

@@ -0,0 +1,30 @@
+import { Thread } from './thread';
+import { ThreadCreationFlags, type SecurityAttributes, type MemoryBasicInformation, type HANDLE, type LPVOID, type SIZE_T } from '@cheatron/native-bindings';
+import { Handle } from './handle';
+/**
+ * Represents a process handle
+ */
+export declare class Process extends Handle {
+    protected _pid: number;
+    constructor(handle: HANDLE, pid?: number, autoClose?: boolean);
+    static open(pid: number, access?: number): Process;
+    readMemory(address: LPVOID, size: number): Buffer;
+    read: (address: LPVOID, size: number) => Buffer;
+    writeMemory(address: LPVOID, buffer: Buffer): void;
+    write: (address: LPVOID, buffer: Buffer) => void;
+    createThread(startAddress: LPVOID, parameter?: LPVOID | null, stackSize?: SIZE_T, flags?: ThreadCreationFlags | number, attributes?: SecurityAttributes | LPVOID | null): Thread;
+    virtualQuery(address: LPVOID): MemoryBasicInformation;
+    query: (address: LPVOID) => MemoryBasicInformation;
+    static current(): CurrentProcess;
+    get pid(): number;
+}
+/**
+ * Represents the current process (singleton)
+ */
+export declare class CurrentProcess extends Process {
+    constructor();
+    createThread(startAddress: LPVOID, parameter?: LPVOID | null, stackSize?: SIZE_T, flags?: ThreadCreationFlags | number, attributes?: SecurityAttributes | LPVOID | null): Thread;
+    close(): void;
+}
+export declare const currentProcess: CurrentProcess;
+//# sourceMappingURL=process.d.ts.map

package/dist/src/process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../../src/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAIL,mBAAmB,EAGnB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,MAAM,EACX,KAAK,MAAM,EACX,KAAK,MAAM,EACZ,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAKlC;;GAEG;AACH,qBAAa,OAAQ,SAAQ,MAAM;IACjC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEX,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,GAAE,OAAc;IAKnE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,MAAiC,GAAG,OAAO;IAU5E,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;IAkBjD,IAAI,YAlBgB,MAAM,QAAQ,MAAM,KAAG,MAAM,CAkB1B;IAEvB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAkBlD,KAAK,YAlBgB,MAAM,UAAU,MAAM,KAAG,IAAI,CAkBzB;IAEzB,YAAY,CACV,YAAY,EAAE,MAAM,EACpB,SAAS,GAAE,MAAM,GAAG,IAAW,EAC/B,SAAS,GAAE,MAAoB,EAC/B,KAAK,GAAE,mBAAmB,GAAG,MAAsC,EACnE,UAAU,GAAE,kBAAkB,GAAG,MAAM,GAAG,IAAW,GACpD,MAAM;IAsBT,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,sBAAsB;IAkBrD,KAAK,YAlBiB,MAAM,KAAG,sBAAsB,CAkB3B;IAE1B,MAAM,CAAC,OAAO,IAAI,cAAc;IAIhC,IAAI,GAAG,IAAI,MAAM,CAEhB;CACF;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,OAAO;;IAMhC,YAAY,CACnB,YAAY,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,SAAS,GAAE,MAAoB,EAC/B,KAAK,CAAC,EAAE,mBAAmB,GAAG,MAAM,EACpC,UAAU,CAAC,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,GAC9C,MAAM;IAIA,KAAK;CAGf;AAID,eAAO,MAAM,cAAc,EAAE,cAU3B,CAAC"}

package/dist/src/process.js

@@ -0,0 +1,104 @@
+import { Thread } from './thread';
+import { Kernel32Impl, ffi, ProcessAccess, ThreadCreationFlags, MEMORY_BASIC_INFORMATION, MBI_SIZE, } from '@cheatron/native-bindings';
+import { Handle } from './handle';
+import { log } from './logger';
+const processLog = log.child('Process');
+/**
+ * Represents a process handle
+ */
+export class Process extends Handle {
+    _pid;
+    constructor(handle, pid, autoClose = true) {
+        super(handle, autoClose);
+        this._pid = pid ?? Kernel32Impl.GetProcessId(handle);
+    }
+    static open(pid, access = ProcessAccess.ALL_ACCESS) {
+        processLog.debug(`Opening process ${pid} with access ${access}`);
+        const handle = Kernel32Impl.OpenProcess(access, 0, pid);
+        if (!handle) {
+            processLog.warn(`Failed to open process ${pid}`);
+            throw new Error(`Failed to open process ${pid}`);
+        }
+        return new Process(handle, pid);
+    }
+    readMemory(address, size) {
+        if (!this.isValid())
+            throw new Error('Process handle is closed');
+        const buf = Buffer.alloc(size);
+        const success = Kernel32Impl.ReadProcessMemory(this._handle, address, buf, size, null);
+        if (!success) {
+            processLog.error(`ReadProcessMemory failed at 0x${address.toString(16)}`);
+            throw new Error(`ReadProcessMemory failed at 0x${address.toString(16)}`);
+        }
+        return buf;
+    }
+    read = this.readMemory;
+    writeMemory(address, buffer) {
+        if (!this.isValid())
+            throw new Error('Process handle is closed');
+        const success = Kernel32Impl.WriteProcessMemory(this._handle, address, buffer, buffer.length, null);
+        if (!success) {
+            processLog.error(`WriteProcessMemory failed at 0x${address.toString(16)}`);
+            throw new Error(`WriteProcessMemory failed at 0x${address.toString(16)}`);
+        }
+    }
+    write = this.writeMemory;
+    createThread(startAddress, parameter = null, stackSize = 0, flags = ThreadCreationFlags.IMMEDIATE, attributes = null) {
+        if (!this.isValid())
+            throw new Error('Process handle is closed');
+        processLog.debug(`Creating remote thread at 0x${startAddress.toString(16)} (PID: ${this._pid})`);
+        const handle = Kernel32Impl.CreateRemoteThread(this._handle, attributes, stackSize, startAddress, parameter, flags, null);
+        if (!handle) {
+            processLog.error('CreateRemoteThread failed');
+            throw new Error('CreateRemoteThread failed');
+        }
+        return new Thread(handle);
+    }
+    virtualQuery(address) {
+        if (!this.isValid())
+            throw new Error('Process handle is closed');
+        const buf = Buffer.alloc(MBI_SIZE);
+        const result = Kernel32Impl.VirtualQueryEx(this._handle, address, buf, MBI_SIZE);
+        if (result === 0) {
+            processLog.error(`VirtualQueryEx failed at 0x${address.toString(16)}`);
+            throw new Error(`VirtualQueryEx failed at 0x${address.toString(16)}`);
+        }
+        return ffi.decode(buf, MEMORY_BASIC_INFORMATION);
+    }
+    query = this.virtualQuery;
+    static current() {
+        return currentProcess;
+    }
+    get pid() {
+        return this._pid;
+    }
+}
+/**
+ * Represents the current process (singleton)
+ */
+export class CurrentProcess extends Process {
+    constructor() {
+        // Current process uses a pseudo-handle that doesn't need closing
+        super(Kernel32Impl.GetCurrentProcess(), Kernel32Impl.GetCurrentProcessId());
+    }
+    createThread(startAddress, parameter, stackSize = 0, flags, attributes) {
+        return Thread.create(startAddress, parameter, stackSize, flags, attributes);
+    }
+    close() {
+        this._handle = null;
+    }
+}
+// Export a pre-initialized instance of the current process (lazy via Proxy)
+let _currentProcess;
+export const currentProcess = new Proxy({}, {
+    get(_target, prop, receiver) {
+        if (!_currentProcess) {
+            _currentProcess = new CurrentProcess();
+        }
+        return Reflect.get(_currentProcess, prop, receiver);
+    },
+    getPrototypeOf() {
+        return CurrentProcess.prototype;
+    },
+});
+//# sourceMappingURL=process.js.map

package/dist/src/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../../src/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EACL,YAAY,EACZ,GAAG,EACH,aAAa,EACb,mBAAmB,EACnB,wBAAwB,EACxB,QAAQ,GAMT,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAExC;;GAEG;AACH,MAAM,OAAO,OAAQ,SAAQ,MAAM;IACvB,IAAI,CAAS;IAEvB,YAAY,MAAc,EAAE,GAAY,EAAE,YAAqB,IAAI;QACjE,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,GAAW,EAAE,SAAiB,aAAa,CAAC,UAAU;QAChE,UAAU,CAAC,KAAK,CAAC,mBAAmB,GAAG,gBAAgB,MAAM,EAAE,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,UAAU,CAAC,IAAI,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,UAAU,CAAC,OAAe,EAAE,IAAY;QACtC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAEjE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,YAAY,CAAC,iBAAiB,CAC5C,IAAI,CAAC,OAAO,EACZ,OAAO,EACP,GAAG,EACH,IAAI,EACJ,IAAI,CACL,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,UAAU,CAAC,KAAK,CAAC,iCAAiC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;IAEvB,WAAW,CAAC,OAAe,EAAE,MAAc;QACzC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAEjE,MAAM,OAAO,GAAG,YAAY,CAAC,kBAAkB,CAC7C,IAAI,CAAC,OAAO,EACZ,OAAO,EACP,MAAM,EACN,MAAM,CAAC,MAAM,EACb,IAAI,CACL,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,UAAU,CAAC,KAAK,CACd,kCAAkC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CACzD,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,kCAAkC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC;IAEzB,YAAY,CACV,YAAoB,EACpB,YAA2B,IAAI,EAC/B,YAAoB,CAAW,EAC/B,QAAsC,mBAAmB,CAAC,SAAS,EACnE,aAAiD,IAAI;QAErD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAEjE,UAAU,CAAC,KAAK,CACd,+BAA+B,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,IAAI,CAAC,IAAI,GAAG,CAC/E,CAAC;QACF,MAAM,MAAM,GAAG,YAAY,CAAC,kBAAkB,CAC5C,IAAI,CAAC,OAAO,EACZ,UAAU,EACV,SAAS,EACT,YAAY,EACZ,SAAS,EACT,KAAK,EACL,IAAI,CACL,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,UAAU,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,YAAY,CAAC,OAAe;QAC1B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAEjE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,YAAY,CAAC,cAAc,CACxC,IAAI,CAAC,OAAO,EACZ,OAAO,EACP,GAAG,EACH,QAAQ,CACT,CAAC;QACF,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;YACjB,UAAU,CAAC,KAAK,CAAC,8BAA8B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,wBAAwB,CAA2B,CAAC;IAC7E,CAAC;IAED,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;IAE1B,MAAM,CAAC,OAAO;QACZ,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,OAAO;IACzC;QACE,iEAAiE;QACjE,KAAK,CAAC,YAAY,CAAC,iBAAiB,EAAE,EAAE,YAAY,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC9E,CAAC;IAEQ,YAAY,CACnB,YAAoB,EACpB,SAAyB,EACzB,YAAoB,CAAW,EAC/B,KAAoC,EACpC,UAA+C;QAE/C,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC9E,CAAC;IAEQ,KAAK;QACZ,IAAI,CAAC,OAAO,GAAG,IAAK,CAAC;IACvB,CAAC;CACF;AAED,4EAA4E;AAC5E,IAAI,eAA2C,CAAC;AAChD,MAAM,CAAC,MAAM,cAAc,GAAmB,IAAI,KAAK,CAAC,EAAoB,EAAE;IAC5E,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ;QACzB,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,eAAe,GAAG,IAAI,cAAc,EAAE,CAAC;QACzC,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IACD,cAAc;QACZ,OAAO,cAAc,CAAC,SAAS,CAAC;IAClC,CAAC;CACF,CAAC,CAAC"}

package/dist/src/thread.d.ts

@@ -0,0 +1,38 @@
+import { ThreadCreationFlags, type SecurityAttributes, type ThreadContext, type HANDLE, type LPVOID, type SIZE_T } from '@cheatron/native-bindings';
+import { Handle } from './handle';
+/**
+ * Represents a thread handle
+ */
+export declare class Thread extends Handle {
+    protected _tid: number;
+    constructor(handle: HANDLE, tid?: number, autoClose?: boolean);
+    static open(threadId: number, access?: number): Thread;
+    static create(startAddress: LPVOID, parameter?: LPVOID | null, stackSize?: SIZE_T, flags?: ThreadCreationFlags | number, attributes?: SecurityAttributes | LPVOID | null): Thread;
+    static current(): CurrentThread;
+    static currentId(): number;
+    suspend(): number;
+    resume(): number;
+    getContext(flags?: number): ThreadContext;
+    setContext(ctx: ThreadContext): void;
+    /**
+     * Gets the thread exit code
+     * @returns Exit code (STILL_ACTIVE means it's still running)
+     */
+    getExitCode(): number;
+    get tid(): number;
+}
+/**
+ * Thread states
+ */
+export declare const ThreadState: {
+    STILL_ACTIVE: number;
+};
+/**
+ * Represents the current thread (singleton)
+ */
+export declare class CurrentThread extends Thread {
+    constructor();
+    close(): void;
+}
+export declare const currentThread: CurrentThread;
+//# sourceMappingURL=thread.d.ts.map

package/dist/src/thread.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread.d.ts","sourceRoot":"","sources":["../../src/thread.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,mBAAmB,EAGnB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,MAAM,EACX,KAAK,MAAM,EACX,KAAK,MAAM,EACZ,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAKlC;;GAEG;AACH,qBAAa,MAAO,SAAQ,MAAM;IAChC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEX,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,GAAE,OAAc;IAKnE,MAAM,CAAC,IAAI,CACT,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,MAAgC,GACvC,MAAM;IAUT,MAAM,CAAC,MAAM,CACX,YAAY,EAAE,MAAM,EACpB,SAAS,GAAE,MAAM,GAAG,IAAW,EAC/B,SAAS,GAAE,MAAoB,EAC/B,KAAK,GAAE,mBAAmB,GAAG,MAAsC,EACnE,UAAU,GAAE,kBAAkB,GAAG,MAAM,GAAG,IAAW,GACpD,MAAM;IAqBT,MAAM,CAAC,OAAO,IAAI,aAAa;IAI/B,MAAM,CAAC,SAAS,IAAI,MAAM;IAI1B,OAAO,IAAI,MAAM;IAajB,MAAM,IAAI,MAAM;IAahB,UAAU,CAAC,KAAK,GAAE,MAA0B,GAAG,aAAa;IAmB5D,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI;IAgBpC;;;OAGG;IACH,WAAW,IAAI,MAAM;IAWrB,IAAI,GAAG,IAAI,MAAM,CAEhB;CACF;AAED;;GAEG;AACH,eAAO,MAAM,WAAW;;CAEvB,CAAC;AAEF;;GAEG;AACH,qBAAa,aAAc,SAAQ,MAAM;;IAU9B,KAAK;CAGf;AAID,eAAO,MAAM,aAAa,EAAE,aAU1B,CAAC"}