@jshookmcp/jshook 0.1.2

package/dist/modules/deobfuscator/VMDeobfuscator.js

@@ -0,0 +1,258 @@
+import { logger } from '../../utils/logger.js';
+import { VM_DEOBF_LLM_MAX_TOKENS } from '../../constants.js';
+import * as parser from '@babel/parser';
+import traverse from '@babel/traverse';
+import * as t from '@babel/types';
+import { generateVMDeobfuscationMessages } from '../../services/prompts/deobfuscation.js';
+export class VMDeobfuscator {
+    llm;
+    constructor(llm) {
+        this.llm = llm;
+    }
+    detectVMProtection(code) {
+        const vmPatterns = [
+            /while\s*\(\s*true\s*\)\s*\{[\s\S]*?switch\s*\(/i,
+            /var\s+\w+\s*=\s*\[\s*\d+(?:\s*,\s*\d+){10,}\s*\]/i,
+            /\w+\[pc\+\+\]/i,
+            /stack\.push|stack\.pop/i,
+        ];
+        const matchCount = vmPatterns.filter((pattern) => pattern.test(code)).length;
+        if (matchCount >= 2) {
+            return {
+                detected: true,
+                type: matchCount >= 3 ? 'custom-vm' : 'simple-vm',
+                instructionCount: this.countVMInstructions(code),
+            };
+        }
+        return { detected: false, type: 'none', instructionCount: 0 };
+    }
+    countVMInstructions(code) {
+        const match = code.match(/case\s+\d+:/g);
+        return match ? match.length : 0;
+    }
+    async deobfuscateVM(code, vmInfo) {
+        logger.warn('VM deobfuscation is experimental and may fail');
+        try {
+            const vmStructure = this.analyzeVMStructure(code);
+            if (vmStructure.hasInterpreter) {
+                logger.info(`Detected VM interpreter with ${vmStructure.instructionTypes.length} instruction types`);
+            }
+            const vmComponents = this.extractVMComponents(code);
+            if (this.llm) {
+                const prompt = this.buildVMDeobfuscationPrompt(code, vmInfo, vmStructure, vmComponents);
+                const response = await this.llm.chat(generateVMDeobfuscationMessages(prompt), {
+                    temperature: 0.05,
+                    maxTokens: VM_DEOBF_LLM_MAX_TOKENS,
+                });
+                const deobfuscatedCode = this.extractCodeFromLLMResponse(response.content);
+                if (this.isValidJavaScript(deobfuscatedCode)) {
+                    logger.success('VM deobfuscation succeeded via LLM');
+                    return {
+                        success: true,
+                        code: deobfuscatedCode,
+                    };
+                }
+                else {
+                    logger.warn('LLM output is not valid JavaScript, falling back to original');
+                }
+            }
+            const simplifiedCode = this.simplifyVMCode(code, vmComponents);
+            return {
+                success: simplifiedCode !== code,
+                code: simplifiedCode,
+            };
+        }
+        catch (error) {
+            logger.error('VM deobfuscation failed', error);
+            return { success: false, code };
+        }
+    }
+    analyzeVMStructure(code) {
+        const structure = {
+            hasInterpreter: false,
+            instructionTypes: [],
+            hasStack: false,
+            hasRegisters: false,
+        };
+        if (/while\s*\(\s*true\s*\)|for\s*\(\s*;\s*;\s*\)/.test(code)) {
+            structure.hasInterpreter = true;
+        }
+        const switchMatches = code.match(/case\s+0x[0-9a-f]+:/gi);
+        if (switchMatches && switchMatches.length > 10) {
+            structure.hasInterpreter = true;
+            structure.instructionTypes = switchMatches.map((m) => m.replace(/case\s+/i, '').replace(/:/, ''));
+        }
+        if (/\.push\(|\.pop\(/.test(code)) {
+            structure.hasStack = true;
+        }
+        if (/r\d+\s*=|reg\[\d+\]/.test(code)) {
+            structure.hasRegisters = true;
+        }
+        return structure;
+    }
+    extractVMComponents(code) {
+        const components = {};
+        try {
+            const ast = parser.parse(code, {
+                sourceType: 'module',
+                plugins: ['jsx', 'typescript'],
+            });
+            traverse(ast, {
+                VariableDeclarator(path) {
+                    if (t.isArrayExpression(path.node.init)) {
+                        const arrayLength = path.node.init.elements.length;
+                        if (arrayLength > 50) {
+                            const arrayName = t.isIdentifier(path.node.id) ? path.node.id.name : 'unknown';
+                            const firstElement = path.node.init.elements[0];
+                            if (t.isNumericLiteral(firstElement)) {
+                                components.instructionArray = arrayName;
+                            }
+                            else if (t.isStringLiteral(firstElement)) {
+                                components.dataArray = arrayName;
+                            }
+                        }
+                    }
+                },
+                FunctionDeclaration(path) {
+                    let hasBigSwitch = false;
+                    traverse(path.node, {
+                        SwitchStatement(switchPath) {
+                            if (switchPath.node.cases.length > 10) {
+                                hasBigSwitch = true;
+                            }
+                        },
+                    }, path.scope, path);
+                    if (hasBigSwitch && t.isIdentifier(path.node.id)) {
+                        components.interpreterFunction = path.node.id.name;
+                    }
+                },
+            });
+        }
+        catch (error) {
+            logger.debug('Failed to extract VM components:', error);
+        }
+        return components;
+    }
+    buildVMDeobfuscationPrompt(code, vmInfo, vmStructure, vmComponents) {
+        const codeSnippet = code.length > 2000 ? code.slice(0, 2000) + '\n...(truncated)' : code;
+        return `# VM Deobfuscation Analysis
+
+## VM Profile
+- **Architecture**: ${vmInfo.type}
+- **Instruction Count**: ${vmInfo.instructionCount}
+- **Interpreter Loop**: ${vmStructure.hasInterpreter ? 'Detected' : 'Not detected'}
+- **Stack Operations**: ${vmStructure.hasStack ? 'Present' : 'Absent'}
+- **Register Usage**: ${vmStructure.hasRegisters ? 'Present' : 'Absent'}
+- **Instruction Variety**: ${vmStructure.instructionTypes.length} distinct types
+
+## Identified Components
+${vmComponents.instructionArray ? ` Instruction Array: Found at ${vmComponents.instructionArray}` : ' Instruction Array: Not found'}
+${vmComponents.dataArray ? ` Data Array: Found at ${vmComponents.dataArray}` : ' Data Array: Not found'}
+${vmComponents.interpreterFunction ? ` Interpreter Function: Found at ${vmComponents.interpreterFunction}` : ' Interpreter Function: Not found'}
+
+## VM-Protected Code
+\`\`\`javascript
+${codeSnippet}
+\`\`\`
+
+## Deobfuscation Instructions (Chain-of-Thought)
+
+### Step 1: VM Structure Analysis
+Examine the code to identify:
+- Instruction array (usually a large array of numbers/strings)
+- Interpreter loop (while/for loop processing instructions)
+- Stack/register variables
+- Opcode handlers (switch-case or if-else chains)
+
+### Step 2: Instruction Decoding
+For each instruction type, determine:
+- What JavaScript operation it represents (e.g., opcode 0x01 = addition)
+- How it manipulates the stack/registers
+- What side effects it has (function calls, property access, etc.)
+
+### Step 3: Control Flow Reconstruction
+- Map VM jumps/branches to JavaScript if/while/for statements
+- Identify function calls and returns
+- Reconstruct try-catch blocks if present
+
+### Step 4: Code Generation
+- Replace VM instruction sequences with equivalent JavaScript
+- Use meaningful variable names based on usage context
+- Remove VM overhead (interpreter loop, stack management)
+- Preserve all side effects and program behavior
+
+### Step 5: Validation
+- Ensure output is syntactically valid JavaScript
+- Verify no functionality is lost
+- Add comments for complex patterns
+
+## Example Transformation (Few-shot Learning)
+
+**VM Code (Before)**:
+\`\`\`javascript
+var vm = [0x01, 0x05, 0x02, 0x03, 0x10];
+var stack = [];
+for(var i=0; i<vm.length; i++) {
+  switch(vm[i]) {
+    case 0x01: stack.push(5); break;
+    case 0x02: stack.push(3); break;
+    case 0x10: var b=stack.pop(), a=stack.pop(); stack.push(a+b); break;
+  }
+}
+console.log(stack[0]);
+\`\`\`
+
+**Deobfuscated Code (After)**:
+\`\`\`javascript
+var result = 5 + 3;
+console.log(result);
+\`\`\`
+
+## Critical Requirements
+1. Output ONLY the deobfuscated JavaScript code
+2. NO markdown code blocks, NO explanations, NO comments outside the code
+3. Code must be syntactically valid and executable
+4. Preserve exact program logic and side effects
+5. If full deobfuscation is impossible, return the best partial result
+
+## Output Format
+Return clean JavaScript code starting immediately (no preamble).`;
+    }
+    simplifyVMCode(code, vmComponents) {
+        try {
+            let simplified = code;
+            if (vmComponents.interpreterFunction) {
+                const regex = new RegExp(`function\\s+${vmComponents.interpreterFunction}\\s*\\([^)]*\\)\\s*\\{[^}]*\\}`, 'g');
+                simplified = simplified.replace(regex, '/* vm interpreter removed */');
+            }
+            if (vmComponents.instructionArray) {
+                const regex = new RegExp(`var\\s+${vmComponents.instructionArray}\\s*=\\s*\\[[^\\]]*\\];`, 'g');
+                simplified = simplified.replace(regex, '/* vm instruction array removed */');
+            }
+            return simplified;
+        }
+        catch (error) {
+            logger.debug('Failed to simplify VM code:', error);
+            return code;
+        }
+    }
+    extractCodeFromLLMResponse(response) {
+        let code = response.trim();
+        code = code.replace(/^```(?:javascript|js)?\s*\n/i, '');
+        code = code.replace(/\n```\s*$/i, '');
+        return code.trim();
+    }
+    isValidJavaScript(code) {
+        try {
+            parser.parse(code, {
+                sourceType: 'module',
+                plugins: ['jsx', 'typescript'],
+            });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+//# sourceMappingURL=VMDeobfuscator.js.map

package/dist/modules/deobfuscator/VMDeobfuscator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VMDeobfuscator.js","sourceRoot":"","sources":["../../../src/modules/deobfuscator/VMDeobfuscator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AAEvC,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAelF,MAAM,OAAO,cAAc;IACjB,GAAG,CAAc;IAEzB,YAAY,GAAgB;QAC1B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAEM,kBAAkB,CAAC,IAAY;QAKpC,MAAM,UAAU,GAAG;YACjB,iDAAiD;YACjD,mDAAmD;YACnD,gBAAgB;YAChB,yBAAyB;SAC1B,CAAC;QAEF,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAE7E,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YACpB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW;gBACjD,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;aACjD,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;IAEM,mBAAmB,CAAC,IAAY;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IAEM,KAAK,CAAC,aAAa,CACxB,IAAY,EACZ,MAAkD;QAElD,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAE7D,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAElD,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CACT,gCAAgC,WAAW,CAAC,gBAAgB,CAAC,MAAM,oBAAoB,CACxF,CAAC;YACJ,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAEpD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;gBAExF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,MAAM,CAAC,EAAE;oBAC5E,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,uBAAuB;iBACnC,CAAC,CAAC;gBAEH,MAAM,gBAAgB,GAAG,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAE3E,IAAI,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBAC7C,MAAM,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;oBACrD,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,gBAAgB;qBACvB,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;gBAC9E,CAAC;YACH,CAAC;YAED,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAE/D,OAAO;gBACL,OAAO,EAAE,cAAc,KAAK,IAAI;gBAChC,IAAI,EAAE,cAAc;aACrB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAC/C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAEM,kBAAkB,CAAC,IAAY;QACpC,MAAM,SAAS,GAAgB;YAC7B,cAAc,EAAE,KAAK;YACrB,gBAAgB,EAAE,EAAE;YACpB,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,KAAK;SACpB,CAAC;QAEF,IAAI,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC;QAClC,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC1D,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC/C,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC;YAChC,SAAS,CAAC,gBAAgB,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACnD,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAC3C,CAAC;QACJ,CAAC;QAED,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC;QAC5B,CAAC;QAED,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC;QAChC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEM,mBAAmB,CAAC,IAAY;QACrC,MAAM,UAAU,GAAiB,EAAE,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;gBAC7B,UAAU,EAAE,QAAQ;gBACpB,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;aAC/B,CAAC,CAAC;YAEH,QAAQ,CAAC,GAAG,EAAE;gBACZ,kBAAkB,CAAC,IAAoC;oBACrD,IAAI,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACxC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;wBAEnD,IAAI,WAAW,GAAG,EAAE,EAAE,CAAC;4BACrB,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;4BAE/E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;4BAChD,IAAI,CAAC,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC;gCACrC,UAAU,CAAC,gBAAgB,GAAG,SAAS,CAAC;4BAC1C,CAAC;iCAAM,IAAI,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;gCAC3C,UAAU,CAAC,SAAS,GAAG,SAAS,CAAC;4BACnC,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,mBAAmB,CAAC,IAAqC;oBACvD,IAAI,YAAY,GAAG,KAAK,CAAC;oBAEzB,QAAQ,CACN,IAAI,CAAC,IAAI,EACT;wBACE,eAAe,CAAC,UAAuC;4BACrD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gCACtC,YAAY,GAAG,IAAI,CAAC;4BACtB,CAAC;wBACH,CAAC;qBACF,EACD,IAAI,CAAC,KAAK,EACV,IAAI,CACL,CAAC;oBAEF,IAAI,YAAY,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;wBACjD,UAAU,CAAC,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;oBACrD,CAAC;gBACH,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEM,0BAA0B,CAC/B,IAAY,EACZ,MAAkD,EAClD,WAAwB,EACxB,YAA0B;QAE1B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC;QACzF,OAAO;;;sBAGW,MAAM,CAAC,IAAI;2BACN,MAAM,CAAC,gBAAgB;0BACxB,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc;0BACxD,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;wBAC7C,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;6BAC1C,WAAW,CAAC,gBAAgB,CAAC,MAAM;;;EAG9D,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC,gCAAgC,YAAY,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,+BAA+B;EACjI,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,wBAAwB;EACrG,YAAY,CAAC,mBAAmB,CAAC,CAAC,CAAC,mCAAmC,YAAY,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,kCAAkC;;;;EAI7I,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iEAgEoD,CAAC;IAChE,CAAC;IAEM,cAAc,CAAC,IAAY,EAAE,YAA0B;QAC5D,IAAI,CAAC;YACH,IAAI,UAAU,GAAG,IAAI,CAAC;YAEtB,IAAI,YAAY,CAAC,mBAAmB,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,eAAe,YAAY,CAAC,mBAAmB,gCAAgC,EAC/E,GAAG,CACJ,CAAC;gBACF,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;YACzE,CAAC;YAED,IAAI,YAAY,CAAC,gBAAgB,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,UAAU,YAAY,CAAC,gBAAgB,yBAAyB,EAChE,GAAG,CACJ,CAAC;gBACF,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;YAC/E,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEM,0BAA0B,CAAC,QAAgB;QAChD,IAAI,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAE3B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAEtC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;IAEM,iBAAiB,CAAC,IAAY;QACnC,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;gBACjB,UAAU,EAAE,QAAQ;gBACpB,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;aAC/B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF"}

package/dist/modules/detector/ObfuscationDetector.d.ts

@@ -0,0 +1,35 @@
+import { ObfuscationType, VMFeatures } from '../../types/index.js';
+export interface DetectionResult {
+    types: ObfuscationType[];
+    confidence: Record<ObfuscationType, number>;
+    features: string[];
+    recommendations: string[];
+    vmFeatures?: VMFeatures;
+}
+export declare class ObfuscationDetector {
+    private jsvmpDetector;
+    constructor();
+    detect(code: string): DetectionResult;
+    private detectVMProtectionDetailed;
+    private detectJavaScriptObfuscator;
+    private detectWebpack;
+    private detectUglify;
+    private detectVMProtection;
+    private detectInvisibleUnicode;
+    private detectControlFlowFlattening;
+    private detectStringArrayRotation;
+    private detectDeadCodeInjection;
+    private detectOpaquePredicates;
+    private detectJSFuck;
+    private detectAAEncode;
+    private detectJJEncode;
+    private detectPacker;
+    private detectEvalObfuscation;
+    private detectBase64Encoding;
+    private detectHexEncoding;
+    private detectSelfModifying;
+    private detectJScrambler;
+    private detectURLEncode;
+    generateReport(result: DetectionResult): string;
+}
+//# sourceMappingURL=ObfuscationDetector.d.ts.map

package/dist/modules/detector/ObfuscationDetector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ObfuscationDetector.d.ts","sourceRoot":"","sources":["../../../src/modules/detector/ObfuscationDetector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAIpE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC5C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,aAAa,CAAoB;;IAMzC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe;IAiKrC,OAAO,CAAC,0BAA0B;IAuBlC,OAAO,CAAC,0BAA0B;IAWlC,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,sBAAsB;IAK9B,OAAO,CAAC,2BAA2B;IAInC,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,uBAAuB;IAM/B,OAAO,CAAC,sBAAsB;IAI9B,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,mBAAmB;IAQ3B,OAAO,CAAC,gBAAgB;IAyBxB,OAAO,CAAC,eAAe;IAKvB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM;CAqBhD"}

package/dist/modules/detector/ObfuscationDetector.js

@@ -0,0 +1,279 @@
+import { logger } from '../../utils/logger.js';
+import { JSVMPDeobfuscator } from '../deobfuscator/JSVMPDeobfuscator.js';
+export class ObfuscationDetector {
+    jsvmpDetector;
+    constructor() {
+        this.jsvmpDetector = new JSVMPDeobfuscator();
+    }
+    detect(code) {
+        const types = [];
+        const confidence = {};
+        const features = [];
+        const recommendations = [];
+        let vmFeatures;
+        if (this.detectJavaScriptObfuscator(code)) {
+            types.push('javascript-obfuscator');
+            confidence['javascript-obfuscator'] = 0.9;
+            features.push('String array with rotation');
+            features.push('Control flow flattening');
+            recommendations.push('Use webcrack or restringer for deobfuscation');
+        }
+        if (this.detectWebpack(code)) {
+            types.push('webpack');
+            confidence['webpack'] = 0.85;
+            features.push('__webpack_require__');
+            recommendations.push('Use webpack-bundle-analyzer');
+        }
+        if (this.detectUglify(code)) {
+            types.push('uglify');
+            confidence['uglify'] = 0.7;
+            features.push('Minified variable names');
+            recommendations.push('Use prettier or beautifier');
+        }
+        const vmDetectionResult = this.detectVMProtectionDetailed(code);
+        if (vmDetectionResult) {
+            types.push('vm-protection');
+            confidence['vm-protection'] = 0.95;
+            vmFeatures = vmDetectionResult;
+            features.push(`JSVMP with ${vmDetectionResult.instructionCount} instructions`);
+            features.push(`Complexity: ${vmDetectionResult.complexity}`);
+            recommendations.push('Use JSVMPDeobfuscator for advanced deobfuscation');
+        }
+        if (this.detectInvisibleUnicode(code)) {
+            types.push('invisible-unicode');
+            confidence['invisible-unicode'] = 1.0;
+            features.push('Zero-width characters');
+            recommendations.push('Use AdvancedDeobfuscator.decodeInvisibleUnicode()');
+        }
+        if (this.detectControlFlowFlattening(code)) {
+            types.push('control-flow-flattening');
+            confidence['control-flow-flattening'] = 0.8;
+            features.push('Switch-case state machine');
+            recommendations.push('Requires symbolic execution');
+        }
+        if (this.detectStringArrayRotation(code)) {
+            types.push('string-array-rotation');
+            confidence['string-array-rotation'] = 0.85;
+            features.push('Rotated string array');
+            recommendations.push('Extract and derotate string array');
+        }
+        if (this.detectDeadCodeInjection(code)) {
+            types.push('dead-code-injection');
+            confidence['dead-code-injection'] = 0.75;
+            features.push('Unreachable code blocks');
+            recommendations.push('Use AST-based dead code elimination');
+        }
+        if (this.detectOpaquePredicates(code)) {
+            types.push('opaque-predicates');
+            confidence['opaque-predicates'] = 0.7;
+            features.push('Always-true/false conditions');
+            recommendations.push('Use constant folding');
+        }
+        if (this.detectJSFuck(code)) {
+            types.push('jsfuck');
+            confidence['jsfuck'] = 1.0;
+            features.push('Only uses []()!+');
+            recommendations.push('Use jsfuck decoder');
+        }
+        if (this.detectAAEncode(code)) {
+            types.push('aaencode');
+            confidence['aaencode'] = 1.0;
+            features.push('Japanese emoticons');
+            recommendations.push('Use aaencode decoder');
+        }
+        if (this.detectJJEncode(code)) {
+            types.push('jjencode');
+            confidence['jjencode'] = 1.0;
+            features.push('$={___:++$');
+            recommendations.push('Use jjencode decoder');
+        }
+        if (this.detectPacker(code)) {
+            types.push('packer');
+            confidence['packer'] = 0.95;
+            features.push('eval(function(p,a,c,k,e,d)');
+            recommendations.push('Use unpacker tools');
+        }
+        if (this.detectEvalObfuscation(code)) {
+            types.push('eval-obfuscation');
+            confidence['eval-obfuscation'] = 0.8;
+            features.push('Multiple eval() calls');
+            recommendations.push('Hook eval() and log arguments');
+        }
+        if (this.detectBase64Encoding(code)) {
+            types.push('base64-encoding');
+            confidence['base64-encoding'] = 0.9;
+            features.push('atob() or Base64 strings');
+            recommendations.push('Decode Base64 strings');
+        }
+        if (this.detectHexEncoding(code)) {
+            types.push('hex-encoding');
+            confidence['hex-encoding'] = 0.85;
+            features.push('\\x hex sequences');
+            recommendations.push('Decode hex strings');
+        }
+        if (this.detectSelfModifying(code)) {
+            types.push('self-modifying');
+            confidence['self-modifying'] = 0.9;
+            features.push('Dynamic code generation');
+            recommendations.push('Requires runtime analysis');
+        }
+        if (this.detectJScrambler(code)) {
+            types.push('jscrambler');
+            confidence['jscrambler'] = 0.85;
+            features.push('Control flow flattening + Self-defending');
+            recommendations.push('Use JScrambler deobfuscator');
+        }
+        if (this.detectURLEncode(code)) {
+            types.push('urlencoded');
+            confidence['urlencoded'] = 0.95;
+            features.push('URL encoded strings');
+            recommendations.push('Decode URL encoding');
+        }
+        if (types.length === 0) {
+            types.push('unknown');
+            confidence['unknown'] = 0.5;
+            recommendations.push('Code may be clean or use custom obfuscation');
+        }
+        logger.info(`Detected obfuscation types: ${types.join(', ')}`);
+        return {
+            types,
+            confidence: confidence,
+            features,
+            recommendations,
+            vmFeatures,
+        };
+    }
+    detectVMProtectionDetailed(code) {
+        try {
+            const detector = this.jsvmpDetector;
+            const result = detector.detectJSVMP(code);
+            return result;
+        }
+        catch (error) {
+            logger.warn('VM Protection detection failed', error);
+            if (this.detectVMProtection(code)) {
+                return {
+                    instructionCount: 0,
+                    interpreterLocation: 'Unknown',
+                    complexity: 'medium',
+                    hasSwitch: true,
+                    hasInstructionArray: false,
+                    hasProgramCounter: false,
+                };
+            }
+            return null;
+        }
+    }
+    detectJavaScriptObfuscator(code) {
+        const patterns = [
+            /_0x[a-f0-9]{4,6}/i,
+            /var\s+_0x[a-f0-9]+\s*=\s*\[/i,
+            /\(function\s*\(_0x[a-f0-9]+,\s*_0x[a-f0-9]+\)/i,
+            /while\s*\(!!\[\]\)/i,
+        ];
+        return patterns.filter((p) => p.test(code)).length >= 2;
+    }
+    detectWebpack(code) {
+        return (code.includes('__webpack_require__') ||
+            code.includes('webpackJsonp') ||
+            /\/\*\*\*\*\*\*\/\s*\(/m.test(code));
+    }
+    detectUglify(code) {
+        const singleLetterVars = code.match(/\b[a-z]\b/g);
+        return (singleLetterVars?.length || 0) > 50;
+    }
+    detectVMProtection(code) {
+        const vmPatterns = [
+            /while\s*\(\s*true\s*\)\s*\{[\s\S]*?switch\s*\(/i,
+            /var\s+\w+\s*=\s*\[\s*\d+(?:\s*,\s*\d+){10,}\s*\]/i,
+            /\w+\[pc\+\+\]/i,
+            /stack\.push|stack\.pop/i,
+        ];
+        return vmPatterns.filter((p) => p.test(code)).length >= 2;
+    }
+    detectInvisibleUnicode(code) {
+        const invisibleChars = ['\u200B', '\u200C', '\u200D', '\u2060', '\uFEFF'];
+        return invisibleChars.some((char) => code.includes(char));
+    }
+    detectControlFlowFlattening(code) {
+        return /while\s*\(\s*!!\s*\[\s*\]\s*\)\s*\{[\s\S]*?switch\s*\(/i.test(code);
+    }
+    detectStringArrayRotation(code) {
+        return (/var\s+\w+\s*=\s*\[.*?\];[\s\S]*?\(\s*function\s*\(\s*\w+,\s*\w+\s*\)/i.test(code) &&
+            /\w+\s*=\s*\w+\s*\+\s*0x[0-9a-f]+/i.test(code));
+    }
+    detectDeadCodeInjection(code) {
+        return (/if\s*\(\s*false\s*\)\s*\{/i.test(code) || /if\s*\(\s*!!\s*\[\s*\]\s*\)\s*\{/i.test(code));
+    }
+    detectOpaquePredicates(code) {
+        return /if\s*\(\s*\d+\s*[<>!=]+\s*\d+\s*\)/i.test(code);
+    }
+    detectJSFuck(code) {
+        const jsfuckChars = /^[\[\]\(\)!+\s]+$/;
+        return jsfuckChars.test(code.substring(0, 1000));
+    }
+    detectAAEncode(code) {
+        return /゚ω゚|ﾟωﾟ/.test(code);
+    }
+    detectJJEncode(code) {
+        return /\$=\{___:\+\+\$/.test(code);
+    }
+    detectPacker(code) {
+        return /eval\s*\(\s*function\s*\(\s*p\s*,\s*a\s*,\s*c\s*,\s*k\s*,\s*e\s*,\s*d\s*\)/i.test(code);
+    }
+    detectEvalObfuscation(code) {
+        const evalCount = (code.match(/\beval\s*\(/g) || []).length;
+        return evalCount >= 3;
+    }
+    detectBase64Encoding(code) {
+        return code.includes('atob(') || /[A-Za-z0-9+/]{50,}={0,2}/.test(code);
+    }
+    detectHexEncoding(code) {
+        const hexCount = (code.match(/\\x[0-9a-f]{2}/gi) || []).length;
+        return hexCount > 20;
+    }
+    detectSelfModifying(code) {
+        return (code.includes('Function(') ||
+            code.includes('new Function') ||
+            /eval\s*\(\s*[^)]*\+/.test(code));
+    }
+    detectJScrambler(code) {
+        let score = 0;
+        if (/while\s*\(\s*!!\s*\[\s*\]\s*\)/.test(code) ||
+            /while\s*\(\s*true\s*\)\s*{[\s\S]*?switch/.test(code)) {
+            score += 3;
+        }
+        if (code.includes('debugger') && code.includes('constructor')) {
+            score += 2;
+        }
+        if (/function\s+\w+\s*\([^)]*\)\s*{[\s\S]*?charCodeAt[\s\S]*?fromCharCode/.test(code)) {
+            score += 2;
+        }
+        if (code.includes('Function.prototype.toString') || code.includes('.toString.call')) {
+            score += 1;
+        }
+        return score >= 3;
+    }
+    detectURLEncode(code) {
+        const percentMatches = code.match(/%[0-9A-Fa-f]{2}/g);
+        return (percentMatches?.length || 0) > 10;
+    }
+    generateReport(result) {
+        let report = '=== Obfuscation Detection Report ===\n\n';
+        report += `Detected Types (${result.types.length}):\n`;
+        result.types.forEach((type) => {
+            const conf = result.confidence[type] || 0;
+            report += `  - ${type}: ${(conf * 100).toFixed(0)}% confidence\n`;
+        });
+        report += `\nFeatures:\n`;
+        result.features.forEach((feature) => {
+            report += `  - ${feature}\n`;
+        });
+        report += `\nRecommendations:\n`;
+        result.recommendations.forEach((rec) => {
+            report += `  - ${rec}\n`;
+        });
+        return report;
+    }
+}
+//# sourceMappingURL=ObfuscationDetector.js.map

package/dist/modules/detector/ObfuscationDetector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ObfuscationDetector.js","sourceRoot":"","sources":["../../../src/modules/detector/ObfuscationDetector.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAU5E,MAAM,OAAO,mBAAmB;IACtB,aAAa,CAAoB;IAEzC;QACE,IAAI,CAAC,aAAa,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,MAAM,KAAK,GAAsB,EAAE,CAAC;QACpC,MAAM,UAAU,GAA6C,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,IAAI,UAAkC,CAAC;QAEvC,IAAI,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACpC,UAAU,CAAC,uBAAuB,CAAC,GAAG,GAAG,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACzC,eAAe,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACrC,eAAe,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrB,UAAU,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACzC,eAAe,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,iBAAiB,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,UAAU,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;YACnC,UAAU,GAAG,iBAAiB,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,cAAc,iBAAiB,CAAC,gBAAgB,eAAe,CAAC,CAAC;YAC/E,QAAQ,CAAC,IAAI,CAAC,eAAe,iBAAiB,CAAC,UAAU,EAAE,CAAC,CAAC;YAC7D,eAAe,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAChC,UAAU,CAAC,mBAAmB,CAAC,GAAG,GAAG,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACvC,eAAe,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACtC,UAAU,CAAC,yBAAyB,CAAC,GAAG,GAAG,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC3C,eAAe,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACpC,UAAU,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACtC,eAAe,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAClC,UAAU,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC;YACzC,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACzC,eAAe,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAChC,UAAU,CAAC,mBAAmB,CAAC,GAAG,GAAG,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC9C,eAAe,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrB,UAAU,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAClC,eAAe,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvB,UAAU,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACpC,eAAe,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvB,UAAU,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC5B,eAAe,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrB,UAAU,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC5C,eAAe,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC/B,UAAU,CAAC,kBAAkB,CAAC,GAAG,GAAG,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACvC,eAAe,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,UAAU,CAAC,iBAAiB,CAAC,GAAG,GAAG,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC1C,eAAe,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC3B,UAAU,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACnC,eAAe,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC7B,UAAU,CAAC,gBAAgB,CAAC,GAAG,GAAG,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACzC,eAAe,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACzB,UAAU,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YAC1D,eAAe,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACzB,UAAU,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACrC,eAAe,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;YAC5B,eAAe,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,+BAA+B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE/D,OAAO;YACL,KAAK;YACL,UAAU,EAAE,UAA6C;YACzD,QAAQ;YACR,eAAe;YACf,UAAU;SACX,CAAC;IACJ,CAAC;IAEO,0BAA0B,CAAC,IAAY;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,aAErB,CAAC;YACF,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YACrD,IAAI,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,OAAO;oBACL,gBAAgB,EAAE,CAAC;oBACnB,mBAAmB,EAAE,SAAS;oBAC9B,UAAU,EAAE,QAAQ;oBACpB,SAAS,EAAE,IAAI;oBACf,mBAAmB,EAAE,KAAK;oBAC1B,iBAAiB,EAAE,KAAK;iBACzB,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,0BAA0B,CAAC,IAAY;QAC7C,MAAM,QAAQ,GAAG;YACf,mBAAmB;YACnB,8BAA8B;YAC9B,gDAAgD;YAChD,qBAAqB;SACtB,CAAC;QAEF,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IAC1D,CAAC;IAEO,aAAa,CAAC,IAAY;QAChC,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC7B,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CACpC,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAClD,OAAO,CAAC,gBAAgB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9C,CAAC;IAEO,kBAAkB,CAAC,IAAY;QACrC,MAAM,UAAU,GAAG;YACjB,iDAAiD;YACjD,mDAAmD;YACnD,gBAAgB;YAChB,yBAAyB;SAC1B,CAAC;QAEF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IAC5D,CAAC;IAEO,sBAAsB,CAAC,IAAY;QACzC,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC1E,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAEO,2BAA2B,CAAC,IAAY;QAC9C,OAAO,yDAAyD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC;IAEO,yBAAyB,CAAC,IAAY;QAC5C,OAAO,CACL,uEAAuE,CAAC,IAAI,CAAC,IAAI,CAAC;YAClF,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/C,CAAC;IACJ,CAAC;IAEO,uBAAuB,CAAC,IAAY;QAC1C,OAAO,CACL,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC1F,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,IAAY;QACzC,OAAO,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,MAAM,WAAW,GAAG,mBAAmB,CAAC;QACxC,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IAEO,cAAc,CAAC,IAAY;QACjC,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAEO,cAAc,CAAC,IAAY;QACjC,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,OAAO,6EAA6E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClG,CAAC;IAEO,qBAAqB,CAAC,IAAY;QACxC,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAC5D,OAAO,SAAS,IAAI,CAAC,CAAC;IACxB,CAAC;IAEO,oBAAoB,CAAC,IAAY;QACvC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IAEO,iBAAiB,CAAC,IAAY;QACpC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAC/D,OAAO,QAAQ,GAAG,EAAE,CAAC;IACvB,CAAC;IAEO,mBAAmB,CAAC,IAAY;QACtC,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC1B,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC7B,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CACjC,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,IAAY;QACnC,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,IACE,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC3C,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,EACrD,CAAC;YACD,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9D,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QAED,IAAI,sEAAsE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtF,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpF,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QAED,OAAO,KAAK,IAAI,CAAC,CAAC;IACpB,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtD,OAAO,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;IAC5C,CAAC;IAED,cAAc,CAAC,MAAuB;QACpC,IAAI,MAAM,GAAG,0CAA0C,CAAC;QAExD,MAAM,IAAI,mBAAmB,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,MAAM,IAAI,OAAO,IAAI,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,eAAe,CAAC;QAC1B,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,IAAI,OAAO,OAAO,IAAI,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,sBAAsB,CAAC;QACjC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YACrC,MAAM,IAAI,OAAO,GAAG,IAAI,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/modules/emulator/AIEnvironmentAnalyzer.d.ts

@@ -0,0 +1,31 @@
+import type { LLMService } from '../../services/LLMService.js';
+import type { DetectedEnvironmentVariables, MissingAPI } from '../../types/index.js';
+import type { BrowserType } from '../emulator/BrowserEnvironmentRules.js';
+export interface AIAnalysisResult {
+    recommendedVariables: Record<string, unknown>;
+    recommendedAPIs: Array<{
+        path: string;
+        implementation: string;
+        reason: string;
+    }>;
+    antiCrawlFeatures: Array<{
+        feature: string;
+        severity: 'low' | 'medium' | 'high' | 'critical';
+        description: string;
+        mitigation: string;
+    }>;
+    suggestions: string[];
+    confidence: number;
+}
+export declare class AIEnvironmentAnalyzer {
+    private llm?;
+    constructor(llm?: LLMService | undefined);
+    analyze(code: string, detected: DetectedEnvironmentVariables, missing: MissingAPI[], browserType?: BrowserType): Promise<AIAnalysisResult>;
+    private parseAIResponse;
+    private getEmptyResult;
+    analyzeAntiCrawl(code: string): Promise<AIAnalysisResult['antiCrawlFeatures']>;
+    inferAPIImplementation(apiPath: string, context: string): Promise<string | null>;
+    generateSuggestions(detected: DetectedEnvironmentVariables, missing: MissingAPI[], browserType: BrowserType): Promise<string[]>;
+    private getDefaultSuggestions;
+}
+//# sourceMappingURL=AIEnvironmentAnalyzer.d.ts.map

package/dist/modules/emulator/AIEnvironmentAnalyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AIEnvironmentAnalyzer.d.ts","sourceRoot":"","sources":["../../../src/modules/emulator/AIEnvironmentAnalyzer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,4BAA4B,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AAS7E,MAAM,WAAW,gBAAgB;IAC/B,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE9C,eAAe,EAAE,KAAK,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IAEH,iBAAiB,EAAE,KAAK,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;QACjD,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IAEH,WAAW,EAAE,MAAM,EAAE,CAAC;IAEtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,qBAAqB;IACpB,OAAO,CAAC,GAAG,CAAC;gBAAJ,GAAG,CAAC,EAAE,UAAU,YAAA;IAE9B,OAAO,CACX,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,4BAA4B,EACtC,OAAO,EAAE,UAAU,EAAE,EACrB,WAAW,GAAE,WAAsB,GAClC,OAAO,CAAC,gBAAgB,CAAC;IAyB5B,OAAO,CAAC,eAAe;IA0BvB,OAAO,CAAC,cAAc;IAUhB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAwB9E,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAyBhF,mBAAmB,CACvB,QAAQ,EAAE,4BAA4B,EACtC,OAAO,EAAE,UAAU,EAAE,EACrB,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,MAAM,EAAE,CAAC;IAiCpB,OAAO,CAAC,qBAAqB;CA6B9B"}