@guardbee/mcp-reverse-shield 0.0.0-stage → 0.1.1

package/dist/apk.d.ts

@@ -0,0 +1,9 @@
+import type { Finding } from "./finding.js";
+export interface ApkResult {
+    findings: Finding[];
+    notes: string[];
+    scannedFiles: number;
+}
+export declare function isApk(filePath: string): boolean;
+export declare function analyzeApk(filePath: string): ApkResult | null;
+//# sourceMappingURL=apk.d.ts.map

package/dist/apk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apk.d.ts","sourceRoot":"","sources":["../src/apk.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAY5C,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE/C;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAiH7D"}

package/dist/apk.js

@@ -0,0 +1,132 @@
+import { closeSync, openSync, statSync } from "fs";
+import { attribute, parseAxml } from "./axml.js";
+import { assessDexObfuscation, readTypeDescriptors } from "./dex.js";
+import { finding } from "./finding.js";
+import { readAt } from "./fsutil.js";
+import { analyzeNative } from "./native.js";
+import { analyzeWebFiles } from "./web.js";
+import { extractZipEntry, locateCentralDirectory, readZipEntries } from "./zip.js";
+const APK_SIG_BLOCK_MAGIC = "APK Sig Block 42";
+const HERMES_MAGIC = Buffer.from([0xc6, 0x1f, 0xbc, 0x03, 0xc1, 0x03, 0x19, 0x1f]);
+const MAX_ENTRY_BYTES = 64 * 1024 * 1024;
+const MAX_NATIVE_LIBS = 40;
+export function isApk(filePath) {
+    return /\.apk$/i.test(filePath);
+}
+export function analyzeApk(filePath) {
+    const size = statSync(filePath).size;
+    const fd = openSync(filePath, "r");
+    try {
+        const entries = readZipEntries(fd, size);
+        const manifestEntry = entries.find((e) => e.name === "AndroidManifest.xml");
+        if (!manifestEntry)
+            return null;
+        const read = (e) => (e.uncompressedSize > MAX_ENTRY_BYTES ? null : extractZipEntry(fd, e));
+        const at = (name) => `${filePath}!/${name}`;
+        const findings = [];
+        const notes = [];
+        let scannedFiles = 1;
+        // ── Manifest ──
+        const manifestBuf = read(manifestEntry);
+        const elements = manifestBuf ? parseAxml(manifestBuf) : null;
+        const manifest = elements?.find((e) => e.name === "manifest");
+        const application = elements?.find((e) => e.name === "application");
+        const packageName = String(manifest?.attributes.find((a) => a.name === "package")?.value ?? "");
+        if (!elements)
+            notes.push("AndroidManifest.xml is not binary XML (unpacked or re-encoded APK?)");
+        if (packageName)
+            notes.push(`package ${packageName}`);
+        if (attribute(application, "debuggable")?.value === true) {
+            findings.push(finding("apk_debuggable", at("AndroidManifest.xml"), { match: 'android:debuggable="true"' }));
+        }
+        if (attribute(application, "testOnly")?.value === true) {
+            findings.push(finding("apk_test_only", at("AndroidManifest.xml"), { match: 'android:testOnly="true"' }));
+        }
+        const allowBackup = attribute(application, "allowBackup");
+        if (application && allowBackup?.value !== false) {
+            findings.push(finding("apk_allow_backup", at("AndroidManifest.xml"), {
+                match: allowBackup ? 'android:allowBackup="true"' : "android:allowBackup not set (defaults to true)",
+            }));
+        }
+        // ── Code: R8/ProGuard ──
+        const dexEntries = entries.filter((e) => /^classes\d*\.dex$/.test(e.name));
+        const descriptors = [];
+        for (const e of dexEntries) {
+            const buf = read(e);
+            if (buf)
+                descriptors.push(...readTypeDescriptors(buf));
+        }
+        scannedFiles += dexEntries.length;
+        if (descriptors.length > 0) {
+            // The application id can differ from the code namespace (e.g. a ".debug"
+            // suffix), so also try the packages of the classes the manifest names.
+            const componentClasses = (elements ?? [])
+                .flatMap((el) => el.attributes.filter((a) => a.name === "name" && typeof a.value === "string").map((a) => String(a.value)))
+                .map((n) => (n.startsWith(".") ? packageName + n : n))
+                .filter((n) => n.includes("."));
+            const candidates = new Set([packageName, ...componentClasses.map((n) => n.slice(0, n.lastIndexOf(".")))].filter(Boolean));
+            const verdict = [...candidates]
+                .map((pkg) => ({ pkg, ...assessDexObfuscation(descriptors, pkg) }))
+                .sort((a, b) => b.appClasses - a.appClasses)[0];
+            if (verdict) {
+                notes.push(`${verdict.pkg}: ${verdict.appClasses} app classes in ${dexEntries.length} dex file(s), ${verdict.shortNamed} with 1–2 letter names`);
+                if (!verdict.obfuscated) {
+                    findings.push(finding("apk_no_obfuscation", at(dexEntries[0].name), {
+                        match: `${verdict.appClasses} classes under ${verdict.pkg}, ${verdict.shortNamed} renamed; e.g. ${verdict.sample.join(", ")}`,
+                    }));
+                }
+            }
+        }
+        // ── React Native / web assets ──
+        const jsBundle = entries.find((e) => e.name === "assets/index.android.bundle");
+        if (jsBundle) {
+            const buf = read(jsBundle);
+            if (buf && buf.subarray(0, 8).equals(HERMES_MAGIC)) {
+                notes.push("React Native bundle is Hermes bytecode");
+            }
+            else if (buf) {
+                findings.push(finding("apk_js_bundle_plaintext", at(jsBundle.name), { match: `${(buf.length / 1024).toFixed(0)} KiB of JavaScript` }));
+                findings.push(...analyzeWebFiles([{ key: "index.android.bundle.js", display: at(jsBundle.name), size: buf.length, read: () => buf }]));
+                scannedFiles++;
+            }
+        }
+        const webAssets = entries.filter((e) => /^assets\/.*\.(?:m?js|map)$/i.test(e.name) && !e.name.includes("node_modules"));
+        if (webAssets.length > 0) {
+            scannedFiles += webAssets.length;
+            findings.push(...analyzeWebFiles(webAssets.map((e) => ({ key: e.name, display: at(e.name), size: e.uncompressedSize, read: () => read(e) }))));
+        }
+        // ── Native libraries ──
+        const libs = entries.filter((e) => /^lib\/[^/]+\/[^/]+\.so$/.test(e.name)).slice(0, MAX_NATIVE_LIBS);
+        const seen = new Set();
+        for (const e of libs) {
+            const buf = read(e);
+            const result = buf ? analyzeNative(buf, at(e.name)) : null;
+            scannedFiles++;
+            for (const f of result?.findings ?? []) {
+                // Same library for several ABIs: report each issue once per library name.
+                const key = `${f.patternId}:${e.name.split("/").pop()}`;
+                if (f.patternId !== "native_debug_info" && f.patternId !== "native_symbols_not_stripped")
+                    continue;
+                if (!seen.has(key)) {
+                    seen.add(key);
+                    findings.push(f);
+                }
+            }
+        }
+        // ── Signing ──
+        const located = locateCentralDirectory(fd, size);
+        const hasSigBlock = located !== null && located.cdOffset >= 16 && readAt(fd, located.cdOffset - 16, 16).toString("latin1") === APK_SIG_BLOCK_MAGIC;
+        const hasV1 = entries.some((e) => /^META-INF\/[^/]+\.(?:RSA|DSA|EC)$/i.test(e.name));
+        if (!hasSigBlock && !hasV1)
+            findings.push(finding("apk_unsigned", filePath, { match: "no APK Signing Block and no META-INF signature" }));
+        else if (!hasSigBlock)
+            findings.push(finding("apk_v1_only_signature", filePath, { match: "META-INF signature only, no APK Signing Block (v2+)" }));
+        else
+            notes.push(`signed with APK Signature Scheme v2+${hasV1 ? " and v1" : ""}`);
+        return { findings, notes, scannedFiles };
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+//# sourceMappingURL=apk.js.map

package/dist/apk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apk.js","sourceRoot":"","sources":["../src/apk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAGnF,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACnF,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,eAAe,GAAG,EAAE,CAAC;AAQ3B,MAAM,UAAU,KAAK,CAAC,QAAgB;IACpC,OAAO,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IACrC,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC;QAC5E,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAEhC,MAAM,IAAI,GAAG,CAAC,CAAW,EAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACpH,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,QAAQ,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,iBAAiB;QACjB,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7D,MAAM,QAAQ,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;QACjG,IAAI,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,WAAW,EAAE,CAAC,CAAC;QAEtD,IAAI,SAAS,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CAAC,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;QAC9G,CAAC;QACD,IAAI,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;YACvD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,qBAAqB,CAAC,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC;QAC3G,CAAC;QACD,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC1D,IAAI,WAAW,IAAI,WAAW,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,qBAAqB,CAAC,EAAE;gBACnE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,gDAAgD;aACrG,CAAC,CAAC,CAAC;QACN,CAAC;QAED,0BAA0B;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3E,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,GAAG;gBAAE,WAAW,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,YAAY,IAAI,UAAU,CAAC,MAAM,CAAC;QAClC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,yEAAyE;YACzE,uEAAuE;YACvE,MAAM,gBAAgB,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;iBACtC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;iBAC1H,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBACrD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1H,MAAM,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC;iBAC5B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;iBAClE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,UAAU,mBAAmB,UAAU,CAAC,MAAM,iBAAiB,OAAO,CAAC,UAAU,wBAAwB,CAAC,CAAC;gBACjJ,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;oBACxB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;wBAClE,KAAK,EAAE,GAAG,OAAO,CAAC,UAAU,kBAAkB,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,UAAU,kBAAkB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBAC9H,CAAC,CAAC,CAAC;gBACN,CAAC;YACH,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,6BAA6B,CAAC,CAAC;QAC/E,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBACnD,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YACvD,CAAC;iBAAM,IAAI,GAAG,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;gBACvI,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,yBAAyB,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;gBACvI,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;QACxH,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,YAAY,IAAI,SAAS,CAAC,MAAM,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,gBAAgB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjJ,CAAC;QAED,yBAAyB;QACzB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;QACrG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC3D,YAAY,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;gBACvC,0EAA0E;gBAC1E,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;gBACxD,IAAI,CAAC,CAAC,SAAS,KAAK,mBAAmB,IAAI,CAAC,CAAC,SAAS,KAAK,6BAA6B;oBAAE,SAAS;gBACnG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACd,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,MAAM,OAAO,GAAG,sBAAsB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,mBAAmB,CAAC;QACnJ,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oCAAoC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC,CAAC,CAAC;aACrI,IAAI,CAAC,WAAW;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,qDAAqD,EAAE,CAAC,CAAC,CAAC;;YAC9I,KAAK,CAAC,IAAI,CAAC,uCAAuC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEjF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/asar.d.ts

@@ -0,0 +1,10 @@
+import type { ArtifactFile } from "./web.js";
+/**
+ * Lists an ASAR archive's files. Layout: a Chromium Pickle holding the header
+ * size (u32 4, u32 headerPickleSize), then a Pickle holding the JSON index
+ * (u32 payloadSize, u32 jsonLength, json). File data starts right after the
+ * header pickle; each entry's offset is relative to that. Entries marked
+ * `unpacked` live in `<archive>.unpacked/` instead.
+ */
+export declare function readAsar(archivePath: string): ArtifactFile[] | null;
+//# sourceMappingURL=asar.d.ts.map

package/dist/asar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asar.d.ts","sourceRoot":"","sources":["../src/asar.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAY7C;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,EAAE,GAAG,IAAI,CAwDnE"}

package/dist/asar.js

@@ -0,0 +1,73 @@
+import { closeSync, existsSync, openSync, readFileSync, statSync } from "fs";
+import { join } from "path";
+import { readAt } from "./fsutil.js";
+const MAX_HEADER_BYTES = 64 * 1024 * 1024;
+/**
+ * Lists an ASAR archive's files. Layout: a Chromium Pickle holding the header
+ * size (u32 4, u32 headerPickleSize), then a Pickle holding the JSON index
+ * (u32 payloadSize, u32 jsonLength, json). File data starts right after the
+ * header pickle; each entry's offset is relative to that. Entries marked
+ * `unpacked` live in `<archive>.unpacked/` instead.
+ */
+export function readAsar(archivePath) {
+    const fileSize = statSync(archivePath).size;
+    if (fileSize < 16)
+        return null;
+    const fd = openSync(archivePath, "r");
+    let header;
+    let dataStart;
+    try {
+        const prefix = readAt(fd, 0, 16);
+        const headerPickleSize = prefix.readUInt32LE(4);
+        const jsonLength = prefix.readUInt32LE(12);
+        if (prefix.readUInt32LE(0) !== 4 || jsonLength > MAX_HEADER_BYTES || 16 + jsonLength > fileSize)
+            return null;
+        header = JSON.parse(readAt(fd, 16, jsonLength).toString("utf8"));
+        dataStart = 8 + headerPickleSize;
+    }
+    catch {
+        return null;
+    }
+    finally {
+        closeSync(fd);
+    }
+    const files = [];
+    const unpackedRoot = `${archivePath}.unpacked`;
+    const visit = (node, prefix) => {
+        for (const [name, child] of Object.entries(node.files ?? {})) {
+            const key = prefix ? `${prefix}/${name}` : name;
+            if (child.files) {
+                visit(child, key);
+                continue;
+            }
+            if (child.link !== undefined || typeof child.size !== "number")
+                continue;
+            const size = child.size;
+            const display = `${archivePath}!/${key}`;
+            if (child.unpacked) {
+                const onDisk = join(unpackedRoot, ...key.split("/"));
+                files.push({ key, display, size, read: () => (existsSync(onDisk) ? readFileSync(onDisk) : null) });
+            }
+            else {
+                const offset = dataStart + Number(child.offset ?? 0);
+                files.push({
+                    key,
+                    display,
+                    size,
+                    read: () => {
+                        const rfd = openSync(archivePath, "r");
+                        try {
+                            return readAt(rfd, offset, size);
+                        }
+                        finally {
+                            closeSync(rfd);
+                        }
+                    },
+                });
+            }
+        }
+    };
+    visit(header, "");
+    return files;
+}
+//# sourceMappingURL=asar.js.map

package/dist/asar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asar.js","sourceRoot":"","sources":["../src/asar.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAWrC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,WAAmB;IAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC;IAC5C,IAAI,QAAQ,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,MAAgB,CAAC;IACrB,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,gBAAgB,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,UAAU,GAAG,gBAAgB,IAAI,EAAE,GAAG,UAAU,GAAG,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC7G,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAa,CAAC;QAC7E,SAAS,GAAG,CAAC,GAAG,gBAAgB,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,YAAY,GAAG,GAAG,WAAW,WAAW,CAAC;IAE/C,MAAM,KAAK,GAAG,CAAC,IAAc,EAAE,MAAc,EAAQ,EAAE;QACrD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7D,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAChD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACzE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YACxB,MAAM,OAAO,GAAG,GAAG,WAAW,KAAK,GAAG,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrD,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrG,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;gBACrD,KAAK,CAAC,IAAI,CAAC;oBACT,GAAG;oBACH,OAAO;oBACP,IAAI;oBACJ,IAAI,EAAE,GAAG,EAAE;wBACT,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;wBACvC,IAAI,CAAC;4BACH,OAAO,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;wBACnC,CAAC;gCAAS,CAAC;4BACT,SAAS,CAAC,GAAG,CAAC,CAAC;wBACjB,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/axml.d.ts

@@ -0,0 +1,20 @@
+export interface AxmlAttribute {
+    name: string;
+    resourceId: number | null;
+    /** Booleans as true/false, strings as text, anything else as the raw 32-bit value. */
+    value: boolean | string | number;
+}
+export interface AxmlElement {
+    name: string;
+    attributes: AxmlAttribute[];
+}
+/** Returns the elements in document order, or null when the buffer is not AXML. */
+export declare function parseAxml(buf: Buffer): AxmlElement[] | null;
+/** android.R.attr ids, which are stable across platform versions. */
+export declare const ATTR: {
+    readonly debuggable: 16842767;
+    readonly allowBackup: 16843392;
+    readonly testOnly: 16843378;
+};
+export declare function attribute(element: AxmlElement | undefined, name: keyof typeof ATTR): AxmlAttribute | undefined;
+//# sourceMappingURL=axml.d.ts.map

package/dist/axml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"axml.d.ts","sourceRoot":"","sources":["../src/axml.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,sFAAsF;IACtF,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,aAAa,EAAE,CAAC;CAC7B;AAqCD,mFAAmF;AACnF,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,GAAG,IAAI,CAyC3D;AAED,qEAAqE;AACrE,eAAO,MAAM,IAAI;;;;CAIP,CAAC;AAEX,wBAAgB,SAAS,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,OAAO,IAAI,GAAG,aAAa,GAAG,SAAS,CAE9G"}

package/dist/axml.js

@@ -0,0 +1,104 @@
+// Android's compiled XML (AXML), as found in an APK's AndroidManifest.xml:
+// a RES_XML chunk holding a string pool, a resource-id map for attribute
+// names, then start/end element chunks whose attributes carry typed values.
+const RES_STRING_POOL_TYPE = 0x0001;
+const RES_XML_TYPE = 0x0003;
+const RES_XML_RESOURCE_MAP_TYPE = 0x0180;
+const RES_XML_START_ELEMENT_TYPE = 0x0102;
+const UTF8_FLAG = 0x100;
+const TYPE_STRING = 0x03;
+const TYPE_INT_BOOLEAN = 0x12;
+function readStringPool(buf, start) {
+    const headerSize = buf.readUInt16LE(start + 2);
+    const count = buf.readUInt32LE(start + 8);
+    const flags = buf.readUInt32LE(start + 16);
+    const stringsStart = start + buf.readUInt32LE(start + 20);
+    const utf8 = (flags & UTF8_FLAG) !== 0;
+    const strings = [];
+    for (let i = 0; i < count; i++) {
+        let p = stringsStart + buf.readUInt32LE(start + headerSize + i * 4);
+        if (utf8) {
+            // char count, then byte count; each is 1 byte, or 2 when the high bit is set
+            p += buf[p] & 0x80 ? 2 : 1;
+            let len = buf[p];
+            if (len & 0x80) {
+                len = ((len & 0x7f) << 8) | buf[p + 1];
+                p += 2;
+            }
+            else {
+                p += 1;
+            }
+            strings.push(buf.toString("utf8", p, p + len));
+        }
+        else {
+            let len = buf.readUInt16LE(p);
+            if (len & 0x8000) {
+                len = ((len & 0x7fff) << 16) | buf.readUInt16LE(p + 2);
+                p += 4;
+            }
+            else {
+                p += 2;
+            }
+            strings.push(buf.toString("utf16le", p, p + len * 2));
+        }
+    }
+    return strings;
+}
+/** Returns the elements in document order, or null when the buffer is not AXML. */
+export function parseAxml(buf) {
+    if (buf.length < 8 || buf.readUInt16LE(0) !== RES_XML_TYPE)
+        return null;
+    const elements = [];
+    let strings = [];
+    let resourceIds = [];
+    let p = buf.readUInt16LE(2);
+    while (p + 8 <= buf.length) {
+        const type = buf.readUInt16LE(p);
+        const headerSize = buf.readUInt16LE(p + 2);
+        const size = buf.readUInt32LE(p + 4);
+        if (size < 8 || p + size > buf.length)
+            break;
+        if (type === RES_STRING_POOL_TYPE) {
+            strings = readStringPool(buf, p);
+        }
+        else if (type === RES_XML_RESOURCE_MAP_TYPE) {
+            resourceIds = [];
+            for (let o = p + headerSize; o + 4 <= p + size; o += 4)
+                resourceIds.push(buf.readUInt32LE(o));
+        }
+        else if (type === RES_XML_START_ELEMENT_TYPE) {
+            const ext = p + headerSize;
+            const name = strings[buf.readUInt32LE(ext + 4)] ?? "";
+            const attrStart = buf.readUInt16LE(ext + 8);
+            const attrSize = buf.readUInt16LE(ext + 10);
+            const attrCount = buf.readUInt16LE(ext + 12);
+            const attributes = [];
+            for (let i = 0; i < attrCount; i++) {
+                const a = ext + attrStart + i * attrSize;
+                const nameIdx = buf.readUInt32LE(a + 4);
+                const rawValue = buf.readUInt32LE(a + 8);
+                const dataType = buf[a + 15];
+                const data = buf.readUInt32LE(a + 16);
+                let value = data;
+                if (dataType === TYPE_INT_BOOLEAN)
+                    value = data !== 0;
+                else if (dataType === TYPE_STRING)
+                    value = strings[rawValue !== 0xffffffff ? rawValue : data] ?? "";
+                attributes.push({ name: strings[nameIdx] ?? "", resourceId: resourceIds[nameIdx] ?? null, value });
+            }
+            elements.push({ name, attributes });
+        }
+        p += size;
+    }
+    return elements;
+}
+/** android.R.attr ids, which are stable across platform versions. */
+export const ATTR = {
+    debuggable: 0x0101000f,
+    allowBackup: 0x01010280,
+    testOnly: 0x01010272,
+};
+export function attribute(element, name) {
+    return element?.attributes.find((a) => a.resourceId === ATTR[name] || (a.resourceId === null && a.name === name));
+}
+//# sourceMappingURL=axml.js.map

package/dist/axml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"axml.js","sourceRoot":"","sources":["../src/axml.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,yEAAyE;AACzE,4EAA4E;AAE5E,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAc9B,SAAS,cAAc,CAAC,GAAW,EAAE,KAAa;IAChD,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACpE,IAAI,IAAI,EAAE,CAAC;YACT,6EAA6E;YAC7E,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACjB,IAAI,GAAG,GAAG,IAAI,EAAE,CAAC;gBACf,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvC,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;iBAAM,CAAC;gBACN,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;gBACjB,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvD,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;iBAAM,CAAC;gBACN,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IACxE,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,WAAW,GAAa,EAAE,CAAC;IAE/B,IAAI,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM;YAAE,MAAM;QAE7C,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAClC,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,IAAI,KAAK,yBAAyB,EAAE,CAAC;YAC9C,WAAW,GAAG,EAAE,CAAC;YACjB,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC;gBAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,CAAC;aAAM,IAAI,IAAI,KAAK,0BAA0B,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,CAAC,GAAG,UAAU,CAAC;YAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACtD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;YAC5C,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAoB,EAAE,CAAC;YACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,GAAG,GAAG,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC;gBACzC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtC,IAAI,KAAK,GAA2B,IAAI,CAAC;gBACzC,IAAI,QAAQ,KAAK,gBAAgB;oBAAE,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC;qBACjD,IAAI,QAAQ,KAAK,WAAW;oBAAE,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACpG,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACrG,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,CAAC,IAAI,IAAI,CAAC;IACZ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,UAAU,EAAE,UAAU;IACtB,WAAW,EAAE,UAAU;IACvB,QAAQ,EAAE,UAAU;CACZ,CAAC;AAEX,MAAM,UAAU,SAAS,CAAC,OAAgC,EAAE,IAAuB;IACjF,OAAO,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;AACpH,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,172 @@
+#!/usr/bin/env node
+import { readFileSync } from "fs";
+import { dirname, resolve } from "path";
+import { fileURLToPath } from "url";
+import { configFilePath, loadConfig } from "./config.js";
+import { scanUrl } from "./live.js";
+import { buildSarif } from "./sarif.js";
+import { scanPath } from "./scanner.js";
+import { startServer } from "./server.js";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+function getVersion() {
+    try {
+        const pkg = JSON.parse(readFileSync(resolve(__dirname, "../package.json"), "utf8"));
+        return pkg.version;
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+const SEV_ICON = {
+    critical: "🔴",
+    high: "🟠",
+    medium: "🟡",
+    low: "🔵",
+};
+function printText(result) {
+    const kinds = result.kinds.length > 0 ? result.kinds.join(", ") : "nothing recognised";
+    if (result.findings.length === 0) {
+        console.log(`✅ Grade ${result.grade} — no reverse-engineering exposure found in ${result.scannedFiles} file(s) (${kinds}, ${result.durationMs}ms)`);
+    }
+    else {
+        const counts = {};
+        for (const f of result.findings)
+            counts[f.severity] = (counts[f.severity] ?? 0) + 1;
+        console.log(`🛡️  Grade ${result.grade} — ${result.findings.length} reverse-engineering exposure(s) in ${result.scannedFiles} file(s) (${kinds}, ${result.durationMs}ms)`);
+        console.log(`   Critical: ${counts["critical"] ?? 0}  High: ${counts["high"] ?? 0}  Medium: ${counts["medium"] ?? 0}  Low: ${counts["low"] ?? 0}`);
+        console.log("");
+        for (const f of result.findings) {
+            console.log(`${SEV_ICON[f.severity] ?? "⚪"} [${f.severity.toUpperCase()}] ${f.patternName} (${f.target}/${f.category})`);
+            if (f.file)
+                console.log(`   Where          : ${f.file}${f.line > 1 ? `:${f.line}:${f.column}` : ""}`);
+            if (f.match)
+                console.log(`   Evidence       : ${f.match}`);
+            console.log(`   Fix            : ${f.recommendation}`);
+            console.log("");
+        }
+    }
+    for (const n of result.notes)
+        console.log(`   • ${n}`);
+}
+function parseArgs(args) {
+    const positionals = [];
+    let failOn = "any";
+    let format = "text";
+    let maxFiles = 5000;
+    for (const arg of args) {
+        if (arg.startsWith("--fail-on="))
+            failOn = arg.split("=")[1] ?? "any";
+        else if (arg.startsWith("--format="))
+            format = arg.split("=")[1] ?? "text";
+        else if (arg.startsWith("--max-files="))
+            maxFiles = parseInt(arg.split("=")[1] ?? "5000", 10);
+        else if (!arg.startsWith("--"))
+            positionals.push(arg);
+    }
+    return { positionals, failOn, format, maxFiles };
+}
+function shouldFail(findings, failOn) {
+    if (failOn === "none")
+        return false;
+    if (failOn === "any")
+        return findings.length > 0;
+    const RANK = { critical: 0, high: 1, medium: 2, low: 3 };
+    const threshold = RANK[failOn] ?? 1;
+    return findings.some((f) => (RANK[f.severity] ?? 3) <= threshold);
+}
+async function runCli(rawArgs) {
+    const { positionals, failOn: cliFail, format, maxFiles: cliMax } = parseArgs(rawArgs);
+    const target = positionals[0];
+    if (!target) {
+        console.error("Usage: guardbee-reverse-shield scan <path|url> [--fail-on=any] [--format=text|json|sarif]");
+        process.exit(2);
+    }
+    let result;
+    let failOn = cliFail;
+    if (/^https?:\/\//i.test(target)) {
+        result = await scanUrl(target);
+    }
+    else {
+        const cfg = loadConfig(target, {
+            ...(cliFail !== "any" ? { failOn: cliFail } : {}),
+            ...(cliMax !== 5000 ? { maxFiles: cliMax } : {}),
+        });
+        const cfgPath = configFilePath(target);
+        if (cfgPath && format === "text")
+            process.stderr.write(`[guardbee] Using config: ${cfgPath}\n`);
+        failOn = cfg.failOn;
+        try {
+            result = scanPath(target, { maxFiles: cfg.maxFiles, exclude: cfg.exclude });
+        }
+        catch (err) {
+            console.error(err.message);
+            process.exit(2);
+        }
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(result, null, 2));
+    }
+    else if (format === "sarif") {
+        console.log(JSON.stringify(buildSarif(getVersion(), result.findings), null, 2));
+    }
+    else {
+        printText(result);
+    }
+    // exitCode, not exit(): a large JSON/SARIF report piped to another process
+    // would otherwise be cut off before stdout drains.
+    process.exitCode = shouldFail(result.findings, failOn) ? 1 : 0;
+}
+function printHelp() {
+    console.log(`@guardbee/mcp-reverse-shield
+
+How much does your shipped app give a reverse engineer for free?
+
+Usage (MCP server):
+  guardbee-reverse-shield [serve]
+
+Usage (CLI):
+  guardbee-reverse-shield scan <path>   Scan an artifact or a build output directory
+  guardbee-reverse-shield scan <url>    Scan a live site's same-site bundles and source maps
+
+Recognised artifacts:
+  Web        .js .mjs .cjs bundles, .map source maps, build output folders, live URLs
+  Electron   .app bundles, app folders with resources/, app.asar (fuses + bundled code)
+  Android    .apk (manifest flags, R8 obfuscation, signing, RN bundle, native libs)
+  Native     ELF, Mach-O (incl. universal), PE executables and libraries
+  .NET       PE assemblies with a CLR header (obfuscation, embedded PDB)
+
+Options:
+  --fail-on=<level>   Exit 1 if issues at this severity or above are found
+                      Levels: any (default) | critical | high | medium | low | none
+  --format=<fmt>      Output format: text (default) | json | sarif
+  --max-files=<n>     Max files to check in a directory (default: 5000)
+
+Exit codes:
+  0  No issues found (or none above --fail-on threshold)
+  1  Issues found at or above threshold
+  2  Error / bad arguments
+`);
+}
+const [, , firstArg, ...rest] = process.argv;
+if (!firstArg || firstArg === "serve") {
+    startServer().catch((err) => {
+        process.stderr.write(`[guardbee-reverse-shield] Fatal error: ${err instanceof Error ? err.message : String(err)}\n`);
+        process.exit(1);
+    });
+}
+else if (firstArg === "--help" || firstArg === "-h") {
+    printHelp();
+    process.exit(0);
+}
+else if (firstArg === "scan") {
+    runCli(rest).catch((err) => {
+        console.error("Error:", err.message);
+        process.exit(2);
+    });
+}
+else {
+    console.error(`Unknown command: ${firstArg}`);
+    console.error("Run with --help for usage.");
+    process.exit(2);
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAwB,CAAC;QAC3G,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,QAAQ,GAA2B;IACvC,QAAQ,EAAE,IAAI;IACd,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,IAAI;IACZ,GAAG,EAAE,IAAI;CACV,CAAC;AAEF,SAAS,SAAS,CAAC,MAAkB;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACvF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,KAAK,+CAA+C,MAAM,CAAC,YAAY,aAAa,KAAK,KAAK,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC;IACtJ,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;YAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,uCAAuC,MAAM,CAAC,YAAY,aAAa,KAAK,KAAK,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC;QAC3K,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnJ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;YACzH,IAAI,CAAC,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtG,IAAI,CAAC,CAAC,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,MAAM,GAAG,MAAM,CAAC;IACpB,IAAI,QAAQ,GAAG,IAAI,CAAC;IAEpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;aACjE,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;aACtE,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;aACzF,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,UAAU,CAAC,QAAmB,EAAE,MAAc;IACrD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACjD,MAAM,IAAI,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACjF,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,OAAiB;IACrC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAEtF,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,2FAA2F,CAAC,CAAC;QAC3G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAkB,CAAC;IACvB,IAAI,MAAM,GAAG,OAAO,CAAC;IACrB,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE;YAC7B,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,OAAO,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,OAAO,IAAI,CAAC,CAAC;QAChG,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IAED,2EAA2E;IAC3E,mDAAmD;IACnD,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4Bb,CAAC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,EAAE,AAAD,EAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;AAE7C,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;IACtC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;IACtD,SAAS,EAAE,CAAC;IACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;KAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;IAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,CAAC;IACN,OAAO,CAAC,KAAK,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,8 @@
+export interface ReverseShieldConfig {
+    failOn: string;
+    maxFiles: number;
+    exclude: string[];
+}
+export declare function loadConfig(searchDir: string, cliOverrides?: Partial<ReverseShieldConfig>): ReverseShieldConfig;
+export declare function configFilePath(searchDir: string): string | null;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAkFD,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,GAAE,OAAO,CAAC,mBAAmB,CAAM,GAAG,mBAAmB,CAmBlH;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE/D"}