@jshookmcp/jshook 0.1.5 → 0.1.6

package/dist/modules/process/memory/regions.protection.js

@@ -1,5 +1,9 @@
+import { readFileSync } from 'fs';
 import { logger } from '../../../utils/logger.js';
 import { execAsync, executePowerShellScript } from '../../process/memory/types.js';
+import { parseProcMaps, formatLinuxProtection } from './linux/mapsParser.js';
+import { nativeMemoryManager } from '../../../native/NativeMemoryManager.js';
+import { isKoffiAvailable } from '../../../native/NativeMemoryManager.utils.js';
 function buildProtectionCheckScript(pid, address) {
     return `
 Add-Type @"
@@ -110,8 +114,28 @@ try {
   `.trim();
 }
 export async function checkMemoryProtection(platform, pid, address) {
-    if (platform !== 'win32' && platform !== 'darwin') {
-        return { success: false, error: 'Memory protection check currently only implemented for Windows and macOS' };
+    const addrNum = BigInt(address.startsWith('0x') ? address : `0x${address}`);
+    if (platform === 'linux') {
+        try {
+            const mapsContent = readFileSync(`/proc/${pid}/maps`, 'utf-8');
+            const regions = parseProcMaps(mapsContent);
+            const region = regions.find(r => addrNum >= r.start && addrNum < r.end);
+            if (!region) {
+                return { success: false, error: `Address ${address} not found in any memory region` };
+            }
+            return {
+                success: true,
+                protection: formatLinuxProtection(region.permissions),
+                isReadable: region.permissions.read,
+                isWritable: region.permissions.write,
+                isExecutable: region.permissions.exec,
+                regionStart: `0x${region.start.toString(16)}`,
+                regionSize: Number(region.end - region.start),
+            };
+        }
+        catch (error) {
+            return { success: false, error: error instanceof Error ? error.message : String(error) };
+        }
     }
     if (platform === 'darwin') {
         try {
@@ -145,6 +169,28 @@ export async function checkMemoryProtection(platform, pid, address) {
             return { success: false, error: error instanceof Error ? error.message : String(error) };
         }
     }
+    if (isKoffiAvailable()) {
+        try {
+            const nativeResult = await nativeMemoryManager.checkMemoryProtection(pid, address);
+            if (nativeResult.success) {
+                return nativeResult;
+            }
+            logger.warn('Native Windows memory protection check failed, falling back to PowerShell', {
+                pid,
+                address,
+                error: nativeResult.error,
+                nativeAvailable: isKoffiAvailable(),
+            });
+        }
+        catch (error) {
+            logger.warn('Native Windows memory protection check threw, falling back to PowerShell', {
+                pid,
+                address,
+                error: error instanceof Error ? error.message : String(error),
+                nativeAvailable: isKoffiAvailable(),
+            });
+        }
+    }
     try {
         const addrNum = parseInt(address, 16);
         if (isNaN(addrNum)) {

package/dist/modules/process/memory/scanner.d.ts

@@ -3,7 +3,10 @@ export declare function buildPatternBytesAndMask(pattern: string, patternType: s
     patternBytes: number[];
     mask: number[];
 };
-export declare function patternToBytesMac(pattern: string, patternType: string): number[];
+export declare function patternToBytesMac(pattern: string, patternType: string): {
+    bytes: number[];
+    mask: number[];
+};
 export declare function scanMemory(platform: Platform, pid: number, pattern: string, patternType?: PatternType): Promise<MemoryScanResult>;
 export declare function scanMemoryFiltered(pid: number, pattern: string, addresses: string[], patternType: PatternType | undefined, _readMemoryFn: (pid: number, address: string, size: number) => Promise<{
     success: boolean;