@jshookmcp/jshook 0.2.0 → 0.2.2

package/dist/src/config/search-defaults.js

@@ -0,0 +1,151 @@
+import { SEARCH_VECTOR_ENABLED, SEARCH_VECTOR_MODEL_ID, SEARCH_VECTOR_COSINE_WEIGHT, SEARCH_VECTOR_DYNAMIC_WEIGHT, } from '../constants.js';
+export const DEFAULT_QUERY_CATEGORY_PROFILE_CONFIGS = [
+    {
+        pattern: '(?:security|vuln|xss|injection|csrf|exploit|attack|prototype\\s*pollution|漏洞|安全|注入|攻击)',
+        flags: 'i',
+        domainBoosts: [
+            { domain: 'security', weight: 1.6 },
+            { domain: 'analysis', weight: 1.2 },
+        ],
+    },
+    {
+        pattern: '(?:debug|breakpoint|pause|step\\s*over|step\\s*into|stack\\s*trace|断点|调试|单步)',
+        flags: 'i',
+        domainBoosts: [
+            { domain: 'debugger', weight: 1.6 },
+            { domain: 'runtime', weight: 1.2 },
+        ],
+    },
+    {
+        pattern: '(?:network|request|response|header|cookie|fetch|xhr|网络|请求|抓包)',
+        flags: 'i',
+        domainBoosts: [
+            { domain: 'network', weight: 1.6 },
+            { domain: 'browser', weight: 1.1 },
+        ],
+    },
+    {
+        pattern: '(?:transform|deobfuscate|beautify|minify|decode|encode|解密|混淆|反混淆|转换)',
+        flags: 'i',
+        domainBoosts: [
+            { domain: 'transform', weight: 1.6 },
+            { domain: 'analysis', weight: 1.2 },
+        ],
+    },
+    {
+        pattern: '(?:memory|heap|dump|scan|inject|内存|堆|扫描)',
+        flags: 'i',
+        domainBoosts: [
+            { domain: 'memory', weight: 1.6 },
+            { domain: 'native', weight: 1.2 },
+        ],
+    },
+    {
+        pattern: '(?:wasm|webassembly)',
+        flags: 'i',
+        domainBoosts: [{ domain: 'wasm', weight: 1.6 }],
+    },
+    {
+        pattern: '(?:browser|page|tab|navigate|click|screenshot|浏览器|页面|标签)',
+        flags: 'i',
+        domainBoosts: [{ domain: 'browser', weight: 1.4 }],
+    },
+    {
+        pattern: '(?:captcha|人机验证|验证码|图形验证)',
+        flags: 'i',
+        domainBoosts: [
+            { domain: 'captcha', weight: 1.6 },
+            { domain: 'browser', weight: 1.1 },
+        ],
+    },
+];
+export const DEFAULT_CJK_QUERY_ALIAS_CONFIGS = [
+    { pattern: '工作流|流程编排|流程自动化|编排', tokens: ['workflow', 'flow', 'orchestration'] },
+    { pattern: '抓包|抓取|采集|捕获', tokens: ['capture', 'sniff', 'collect'] },
+    { pattern: '接口|端点', tokens: ['api', 'endpoint', 'request'] },
+    { pattern: '探测|探针|扫描', tokens: ['probe', 'scan'] },
+    { pattern: '账号|账户|用户', tokens: ['account', 'user'] },
+    { pattern: '注册|开户|报名', tokens: ['register', 'signup'] },
+    { pattern: '验证|校验|激活', tokens: ['verify', 'verification', 'activation'] },
+    { pattern: '验证码|图形验证码|人机验证', tokens: ['captcha', 'verify', 'verification'] },
+    { pattern: '邮箱|邮件', tokens: ['email', 'mail'] },
+    { pattern: 'keygen|密钥|注册码|激活码', tokens: ['keygen', 'key', 'activation'] },
+    { pattern: '轮询|监听', tokens: ['poll', 'watch'] },
+    { pattern: '批量|并发', tokens: ['batch', 'parallel'] },
+    { pattern: '令牌|凭证|鉴权|认证', tokens: ['token', 'auth', 'credential'] },
+    { pattern: '提取|抽取|解析', tokens: ['extract', 'parse'] },
+    { pattern: '多标签页|多标签|标签页', tokens: ['tab', 'multi'] },
+    { pattern: '脚本库|脚本仓库', tokens: ['script', 'library'] },
+    { pattern: '脚本', tokens: ['script'] },
+    { pattern: '执行|运行', tokens: ['run', 'execute'] },
+    { pattern: '导出', tokens: ['export'] },
+    { pattern: '回放|重放', tokens: ['replay'] },
+    { pattern: '请求', tokens: ['request'] },
+];
+export const DEFAULT_INTENT_TOOL_BOOST_RULE_CONFIGS = [
+    {
+        pattern: '(?:端到端闭环|全链路闭环|一键闭环|api(?:[_\\s-]*)capture(?:[_\\s-]*)session|web_api_capture_session|抓取接口|抓包流程)',
+        flags: 'i',
+        boosts: [
+            { tool: 'web_api_capture_session', bonus: 26 },
+            { tool: 'api_probe_batch', bonus: 18 },
+            { tool: 'network_extract_auth', bonus: 10 },
+            { tool: 'network_export_har', bonus: 8 },
+        ],
+    },
+    {
+        pattern: '(?:register|signup|sign\\s*up|账号注册|账户注册|邮箱验证|验证账号|激活账号|注册验证|验证码|邮箱激活|激活链接|mail\\s*verify|email\\s*verify|account\\s*pending|keygen)',
+        flags: 'i',
+        boosts: [
+            { tool: 'run_extension_workflow', bonus: 40 },
+            { tool: 'list_extension_workflows', bonus: 24 },
+            { tool: 'register_account_flow', bonus: 20 },
+            { tool: 'batch_register', bonus: 18 },
+            { tool: 'tab_workflow', bonus: 8 },
+        ],
+    },
+    {
+        pattern: '(?:script\\s*library|script\\s*preset|run\\s*script|脚本库执行|脚本库|执行脚本)',
+        flags: 'i',
+        boosts: [
+            { tool: 'page_script_run', bonus: 22 },
+            { tool: 'page_script_register', bonus: 16 },
+            { tool: 'run_extension_workflow', bonus: 10 },
+        ],
+    },
+    {
+        pattern: '(?:bundle|webpack|js\\s*bundle|脚本包|静态包|源码包)',
+        flags: 'i',
+        boosts: [
+            { tool: 'js_bundle_search', bonus: 20 },
+            { tool: 'source_map_extract', bonus: 10 },
+            { tool: 'webpack_enumerate', bonus: 8 },
+        ],
+    },
+    {
+        pattern: '(?:workflow|orchestration|工作流|流程编排|流程自动化)',
+        flags: 'i',
+        boosts: [
+            { tool: 'run_extension_workflow', bonus: 26 },
+            { tool: 'list_extension_workflows', bonus: 16 },
+            { tool: 'web_api_capture_session', bonus: 8 },
+        ],
+    },
+    {
+        pattern: '(?=.*(?:抓包|抓取|捕获|capture|sniff|collect))(?=.*(?:鉴权|认证|令牌|凭证|jwt|token|auth|credential))',
+        flags: 'i',
+        boosts: [
+            { tool: 'web_api_capture_session', bonus: 20 },
+            { tool: 'network_extract_auth', bonus: 18 },
+        ],
+    },
+];
+export const DEFAULT_SEARCH_CONFIG = {
+    queryCategoryProfiles: DEFAULT_QUERY_CATEGORY_PROFILE_CONFIGS,
+    cjkQueryAliases: DEFAULT_CJK_QUERY_ALIAS_CONFIGS,
+    intentToolBoostRules: DEFAULT_INTENT_TOOL_BOOST_RULE_CONFIGS,
+    vectorEnabled: SEARCH_VECTOR_ENABLED,
+    vectorModelId: SEARCH_VECTOR_MODEL_ID,
+    vectorCosineWeight: SEARCH_VECTOR_COSINE_WEIGHT,
+    vectorDynamicWeight: SEARCH_VECTOR_DYNAMIC_WEIGHT,
+};

package/dist/src/constants.d.ts

@@ -48,6 +48,8 @@ export declare const NETWORK_REPLAY_TIMEOUT_MS: number;
 export declare const NETWORK_REPLAY_MAX_BODY_BYTES: number;
 export declare const NETWORK_REPLAY_MAX_REDIRECTS: number;
 export declare const NETWORK_HAR_BODY_CONCURRENCY: number;
+export declare const WORKFLOW_BATCH_MAX_ACCOUNTS: number;
+export declare const WORKFLOW_BATCH_MAX_CONCURRENCY: number;
 export declare const WORKFLOW_BATCH_MAX_RETRIES: number;
 export declare const WORKFLOW_BATCH_MAX_BACKOFF_MS: number;
 export declare const WORKFLOW_BATCH_MAX_TIMEOUT_MS: number;
@@ -60,31 +62,37 @@ export declare const WORKFLOW_BUNDLE_CACHE_TTL_MS: number;
 export declare const WORKFLOW_BUNDLE_CACHE_MAX_BYTES: number;
 export declare const SEARCH_WORKFLOW_BOOST_TIERS: Set<string>;
 export declare const SEARCH_WORKFLOW_DOMAIN_BOOST_MULTIPLIER: number;
-export type SearchIntentToolBoostRuleConfig = {
-    pattern: string;
-    flags?: string;
-    boosts: Array<{
-        tool: string;
-        bonus: number;
-    }>;
-};
-export declare const SEARCH_INTENT_TOOL_BOOST_RULES_OVERRIDE: SearchIntentToolBoostRuleConfig[] | null;
-export declare const DYNAMIC_BOOST_ENABLED: boolean;
-export type DynamicBoostStrategy = 'max' | 'top1' | 'majority' | 'weighted';
-export declare const DYNAMIC_BOOST_STRATEGY: DynamicBoostStrategy;
-export declare const DYNAMIC_BOOST_SKIP_SEARCH_TO_FULL: boolean;
-export declare const DYNAMIC_BOOST_MAX_JUMP: number;
-export declare const DYNAMIC_BOOST_RERESEARCH_AFTER_BOOST: boolean;
+export declare const ACTIVATION_TTL_MINUTES: number;
+export declare const SEARCH_AUTO_ACTIVATE_DOMAINS: boolean;
 export declare const SEARCH_TFIDF_COSINE_WEIGHT: number;
 export declare const SEARCH_AFFINITY_BOOST_FACTOR: number;
 export declare const SEARCH_AFFINITY_TOP_N: number;
 export declare const SEARCH_DOMAIN_HUB_THRESHOLD: number;
 export declare const SEARCH_QUERY_CACHE_CAPACITY: number;
+export declare const SEARCH_TRIGRAM_WEIGHT: number;
+export declare const SEARCH_RRF_K: number;
+export declare const SEARCH_SYNONYM_EXPANSION_LIMIT: number;
+export declare const SEARCH_PARAM_TOKEN_WEIGHT: number;
+export declare const SEARCH_VECTOR_ENABLED: boolean;
+export declare const SEARCH_VECTOR_MODEL_ID: string;
+export declare const SEARCH_VECTOR_COSINE_WEIGHT: number;
+export declare const SEARCH_VECTOR_DYNAMIC_WEIGHT: boolean;
 export declare const EXTENSION_GIT_CLONE_TIMEOUT_MS: number;
 export declare const EXTENSION_GIT_CHECKOUT_TIMEOUT_MS: number;
 export declare const PROCESS_LIST_MAX_BUFFER_BYTES: number;
 export declare const EXTERNAL_TOOL_MAX_STDOUT_BYTES: number;
 export declare const EXTERNAL_TOOL_MAX_STDERR_BYTES: number;
+export declare const GRAPHQL_MAX_PREVIEW_CHARS: number;
+export declare const GRAPHQL_MAX_SCHEMA_CHARS: number;
+export declare const GRAPHQL_MAX_QUERY_CHARS: number;
+export declare const GRAPHQL_MAX_GRAPH_NODES: number;
+export declare const GRAPHQL_MAX_GRAPH_EDGES: number;
+export declare const ANALYSIS_MAX_SUMMARY_FILES: number;
+export declare const ANALYSIS_MAX_SAFE_COLLECTED_BYTES: number;
+export declare const ANALYSIS_MAX_SAFE_RESPONSE_BYTES: number;
+export declare const WS_PAYLOAD_PREVIEW_LIMIT: number;
+export declare const WS_PAYLOAD_SAMPLE_LIMIT: number;
+export declare const SCRIPTS_MAX_CAP: number;
 export declare const WORKER_POOL_MIN_WORKERS: number;
 export declare const WORKER_POOL_MAX_WORKERS: number;
 export declare const WORKER_POOL_IDLE_TIMEOUT_MS: number;
@@ -125,3 +133,27 @@ export declare const PROCESS_LAUNCH_WAIT_MS: number;
 export declare const WIN_DEBUG_PORT_POLL_ATTEMPTS: number;
 export declare const WIN_DEBUG_PORT_POLL_INTERVAL_MS: number;
 export declare const PACKER_SANDBOX_TIMEOUT_MS: number;
+export declare const CODE_CAVE_MIN_SIZE: number;
+export declare const BREAKPOINT_HIT_TIMEOUT_MS: number;
+export declare const BREAKPOINT_TRACE_MAX_HITS: number;
+export declare const HEAP_ENUMERATE_MAX_BLOCKS: number;
+export declare const HEAP_SPRAY_THRESHOLD: number;
+export declare const HEAP_SPRAY_SIZE_TOLERANCE: number;
+export declare const HEAP_SUSPICIOUS_BLOCK_SIZE: number;
+export declare const FREEZE_DEFAULT_INTERVAL_MS: number;
+export declare const WRITE_HISTORY_MAX: number;
+export declare const SCAN_MAX_RESULTS_PER_SCAN: number;
+export declare const SCAN_DISPLAY_RESULTS_LIMIT: number;
+export declare const SCAN_UNKNOWN_INITIAL_MAX_ADDRESSES: number;
+export declare const SCAN_POINTER_MAX_RESULTS: number;
+export declare const SCAN_GROUP_MAX_PATTERN_SIZE: number;
+export declare const SCAN_SESSION_MAX_COUNT: number;
+export declare const SCAN_SESSION_TTL_MS: number;
+export declare const POINTER_CHAIN_MAX_DEPTH: number;
+export declare const POINTER_CHAIN_MAX_OFFSET: number;
+export declare const POINTER_CHAIN_MAX_RESULTS: number;
+export declare const POINTER_CHAIN_SCAN_CHUNK_SIZE: number;
+export declare const STRUCT_ANALYZE_DEFAULT_SIZE: number;
+export declare const STRUCT_VTABLE_MAX_FUNCTIONS: number;
+export declare const STRUCT_RTTI_MAX_STRING_LEN: number;
+export declare const STRUCT_CSTRING_MAX_LEN: number;

package/dist/src/constants.js

@@ -40,17 +40,6 @@ const csv = (key, fallback) => {
         .filter(Boolean);
     return parsed.length > 0 ? parsed : fallback;
 };
-const json = (key, fallback) => {
-    const v = process.env[key];
-    if (!v)
-        return fallback;
-    try {
-        return JSON.parse(v);
-    }
-    catch {
-        return fallback;
-    }
-};
 export const DEBUG_PORT_CANDIDATES = list('DEBUG_PORT_CANDIDATES', [9222, 9229, 9333, 2039]);
 export const DEFAULT_DEBUG_PORT = int('DEFAULT_DEBUG_PORT', 9222);
 export const GHIDRA_BRIDGE_ENDPOINT = str('GHIDRA_BRIDGE_URL', 'http://127.0.0.1:18080');
@@ -103,6 +92,8 @@ export const NETWORK_REPLAY_TIMEOUT_MS = int('NETWORK_REPLAY_TIMEOUT_MS', 30_000
 export const NETWORK_REPLAY_MAX_BODY_BYTES = int('NETWORK_REPLAY_MAX_BODY_BYTES', 512_000);
 export const NETWORK_REPLAY_MAX_REDIRECTS = int('NETWORK_REPLAY_MAX_REDIRECTS', 5);
 export const NETWORK_HAR_BODY_CONCURRENCY = int('NETWORK_HAR_BODY_CONCURRENCY', 8);
+export const WORKFLOW_BATCH_MAX_ACCOUNTS = int('WORKFLOW_BATCH_MAX_ACCOUNTS', 50);
+export const WORKFLOW_BATCH_MAX_CONCURRENCY = int('WORKFLOW_BATCH_MAX_CONCURRENCY', 1);
 export const WORKFLOW_BATCH_MAX_RETRIES = int('WORKFLOW_BATCH_MAX_RETRIES', 3);
 export const WORKFLOW_BATCH_MAX_BACKOFF_MS = int('WORKFLOW_BATCH_MAX_BACKOFF_MS', 30_000);
 export const WORKFLOW_BATCH_MAX_TIMEOUT_MS = int('WORKFLOW_BATCH_MAX_TIMEOUT_MS', 300_000);
@@ -115,22 +106,37 @@ export const WORKFLOW_BUNDLE_CACHE_TTL_MS = int('WORKFLOW_BUNDLE_CACHE_TTL_MS',
 export const WORKFLOW_BUNDLE_CACHE_MAX_BYTES = int('WORKFLOW_BUNDLE_CACHE_MAX_BYTES', 100 * 1024 * 1024);
 export const SEARCH_WORKFLOW_BOOST_TIERS = new Set(csv('SEARCH_WORKFLOW_BOOST_TIERS', ['workflow', 'full']));
 export const SEARCH_WORKFLOW_DOMAIN_BOOST_MULTIPLIER = float('SEARCH_WORKFLOW_DOMAIN_BOOST_MULTIPLIER', 1.5);
-export const SEARCH_INTENT_TOOL_BOOST_RULES_OVERRIDE = json('SEARCH_INTENT_TOOL_BOOST_RULES_JSON', null);
-export const DYNAMIC_BOOST_ENABLED = bool('DYNAMIC_BOOST_ENABLED', true);
-export const DYNAMIC_BOOST_STRATEGY = str('DYNAMIC_BOOST_STRATEGY', 'majority');
-export const DYNAMIC_BOOST_SKIP_SEARCH_TO_FULL = bool('DYNAMIC_BOOST_SKIP_SEARCH_TO_FULL', true);
-export const DYNAMIC_BOOST_MAX_JUMP = int('DYNAMIC_BOOST_MAX_JUMP', 1);
-export const DYNAMIC_BOOST_RERESEARCH_AFTER_BOOST = bool('DYNAMIC_BOOST_RERESEARCH_AFTER_BOOST', false);
+export const ACTIVATION_TTL_MINUTES = int('ACTIVATION_TTL_MINUTES', 30);
+export const SEARCH_AUTO_ACTIVATE_DOMAINS = bool('SEARCH_AUTO_ACTIVATE_DOMAINS', true);
 export const SEARCH_TFIDF_COSINE_WEIGHT = float('SEARCH_TFIDF_COSINE_WEIGHT', 0.3);
 export const SEARCH_AFFINITY_BOOST_FACTOR = float('SEARCH_AFFINITY_BOOST_FACTOR', 0.15);
 export const SEARCH_AFFINITY_TOP_N = int('SEARCH_AFFINITY_TOP_N', 5);
 export const SEARCH_DOMAIN_HUB_THRESHOLD = int('SEARCH_DOMAIN_HUB_THRESHOLD', 3);
 export const SEARCH_QUERY_CACHE_CAPACITY = int('SEARCH_QUERY_CACHE_CAPACITY', 100);
+export const SEARCH_TRIGRAM_WEIGHT = float('SEARCH_TRIGRAM_WEIGHT', 0.15);
+export const SEARCH_RRF_K = int('SEARCH_RRF_K', 60);
+export const SEARCH_SYNONYM_EXPANSION_LIMIT = int('SEARCH_SYNONYM_EXPANSION_LIMIT', 3);
+export const SEARCH_PARAM_TOKEN_WEIGHT = float('SEARCH_PARAM_TOKEN_WEIGHT', 1.5);
+export const SEARCH_VECTOR_ENABLED = bool('SEARCH_VECTOR_ENABLED', true);
+export const SEARCH_VECTOR_MODEL_ID = str('SEARCH_VECTOR_MODEL_ID', 'Xenova/bge-micro-v2');
+export const SEARCH_VECTOR_COSINE_WEIGHT = float('SEARCH_VECTOR_COSINE_WEIGHT', 0.4);
+export const SEARCH_VECTOR_DYNAMIC_WEIGHT = bool('SEARCH_VECTOR_DYNAMIC_WEIGHT', true);
 export const EXTENSION_GIT_CLONE_TIMEOUT_MS = int('EXTENSION_GIT_CLONE_TIMEOUT_MS', 60_000);
 export const EXTENSION_GIT_CHECKOUT_TIMEOUT_MS = int('EXTENSION_GIT_CHECKOUT_TIMEOUT_MS', 30_000);
 export const PROCESS_LIST_MAX_BUFFER_BYTES = int('PROCESS_LIST_MAX_BUFFER_BYTES', 1024 * 1024 * 10);
 export const EXTERNAL_TOOL_MAX_STDOUT_BYTES = int('EXTERNAL_TOOL_MAX_STDOUT_BYTES', 10 * 1024 * 1024);
 export const EXTERNAL_TOOL_MAX_STDERR_BYTES = int('EXTERNAL_TOOL_MAX_STDERR_BYTES', 1 * 1024 * 1024);
+export const GRAPHQL_MAX_PREVIEW_CHARS = int('GRAPHQL_MAX_PREVIEW_CHARS', 4_000);
+export const GRAPHQL_MAX_SCHEMA_CHARS = int('GRAPHQL_MAX_SCHEMA_CHARS', 120_000);
+export const GRAPHQL_MAX_QUERY_CHARS = int('GRAPHQL_MAX_QUERY_CHARS', 12_000);
+export const GRAPHQL_MAX_GRAPH_NODES = int('GRAPHQL_MAX_GRAPH_NODES', 2_000);
+export const GRAPHQL_MAX_GRAPH_EDGES = int('GRAPHQL_MAX_GRAPH_EDGES', 5_000);
+export const ANALYSIS_MAX_SUMMARY_FILES = int('ANALYSIS_MAX_SUMMARY_FILES', 40);
+export const ANALYSIS_MAX_SAFE_COLLECTED_BYTES = int('ANALYSIS_MAX_SAFE_COLLECTED_BYTES', 256 * 1024);
+export const ANALYSIS_MAX_SAFE_RESPONSE_BYTES = int('ANALYSIS_MAX_SAFE_RESPONSE_BYTES', 220 * 1024);
+export const WS_PAYLOAD_PREVIEW_LIMIT = int('WS_PAYLOAD_PREVIEW_LIMIT', 200);
+export const WS_PAYLOAD_SAMPLE_LIMIT = int('WS_PAYLOAD_SAMPLE_LIMIT', 2_000);
+export const SCRIPTS_MAX_CAP = int('SCRIPTS_MAX_CAP', 500);
 export const WORKER_POOL_MIN_WORKERS = int('WORKER_POOL_MIN_WORKERS', 2);
 export const WORKER_POOL_MAX_WORKERS = int('WORKER_POOL_MAX_WORKERS', 4);
 export const WORKER_POOL_IDLE_TIMEOUT_MS = int('WORKER_POOL_IDLE_TIMEOUT_MS', 30_000);
@@ -171,3 +177,27 @@ export const PROCESS_LAUNCH_WAIT_MS = int('PROCESS_LAUNCH_WAIT_MS', 2_000);
 export const WIN_DEBUG_PORT_POLL_ATTEMPTS = int('WIN_DEBUG_PORT_POLL_ATTEMPTS', 20);
 export const WIN_DEBUG_PORT_POLL_INTERVAL_MS = int('WIN_DEBUG_PORT_POLL_INTERVAL_MS', 500);
 export const PACKER_SANDBOX_TIMEOUT_MS = int('PACKER_SANDBOX_TIMEOUT_MS', 3_000);
+export const CODE_CAVE_MIN_SIZE = int('CODE_CAVE_MIN_SIZE', 16);
+export const BREAKPOINT_HIT_TIMEOUT_MS = int('BREAKPOINT_HIT_TIMEOUT_MS', 10_000);
+export const BREAKPOINT_TRACE_MAX_HITS = int('BREAKPOINT_TRACE_MAX_HITS', 100);
+export const HEAP_ENUMERATE_MAX_BLOCKS = int('HEAP_ENUMERATE_MAX_BLOCKS', 10_000);
+export const HEAP_SPRAY_THRESHOLD = int('HEAP_SPRAY_THRESHOLD', 50);
+export const HEAP_SPRAY_SIZE_TOLERANCE = int('HEAP_SPRAY_SIZE_TOLERANCE', 64);
+export const HEAP_SUSPICIOUS_BLOCK_SIZE = int('HEAP_SUSPICIOUS_BLOCK_SIZE', 10_485_760);
+export const FREEZE_DEFAULT_INTERVAL_MS = int('FREEZE_DEFAULT_INTERVAL_MS', 100);
+export const WRITE_HISTORY_MAX = int('WRITE_HISTORY_MAX', 200);
+export const SCAN_MAX_RESULTS_PER_SCAN = int('SCAN_MAX_RESULTS_PER_SCAN', 100_000);
+export const SCAN_DISPLAY_RESULTS_LIMIT = int('SCAN_DISPLAY_RESULTS_LIMIT', 200);
+export const SCAN_UNKNOWN_INITIAL_MAX_ADDRESSES = int('SCAN_UNKNOWN_INITIAL_MAX_ADDRESSES', 500_000);
+export const SCAN_POINTER_MAX_RESULTS = int('SCAN_POINTER_MAX_RESULTS', 5_000);
+export const SCAN_GROUP_MAX_PATTERN_SIZE = int('SCAN_GROUP_MAX_PATTERN_SIZE', 256);
+export const SCAN_SESSION_MAX_COUNT = int('SCAN_SESSION_MAX_COUNT', 20);
+export const SCAN_SESSION_TTL_MS = int('SCAN_SESSION_TTL_MS', 1_800_000);
+export const POINTER_CHAIN_MAX_DEPTH = int('POINTER_CHAIN_MAX_DEPTH', 6);
+export const POINTER_CHAIN_MAX_OFFSET = int('POINTER_CHAIN_MAX_OFFSET', 4096);
+export const POINTER_CHAIN_MAX_RESULTS = int('POINTER_CHAIN_MAX_RESULTS', 500);
+export const POINTER_CHAIN_SCAN_CHUNK_SIZE = int('POINTER_CHAIN_SCAN_CHUNK_SIZE', 16_777_216);
+export const STRUCT_ANALYZE_DEFAULT_SIZE = int('STRUCT_ANALYZE_DEFAULT_SIZE', 256);
+export const STRUCT_VTABLE_MAX_FUNCTIONS = int('STRUCT_VTABLE_MAX_FUNCTIONS', 64);
+export const STRUCT_RTTI_MAX_STRING_LEN = int('STRUCT_RTTI_MAX_STRING_LEN', 256);
+export const STRUCT_CSTRING_MAX_LEN = int('STRUCT_CSTRING_MAX_LEN', 256);

package/dist/src/index.js

@@ -4,7 +4,8 @@ import { getConfig, validateConfig } from './utils/config.js';
 import { logger } from './utils/logger.js';
 import { initRegistry } from './server/registry/index.js';
 import { resolveCliFastPath } from './utils/cliFastPath.js';
-import { cleanupArtifacts, getArtifactRetentionConfig, startArtifactRetentionScheduler } from './utils/artifactRetention.js';
+import { cleanupArtifacts, getArtifactRetentionConfig, startArtifactRetentionScheduler, } from './utils/artifactRetention.js';
+const SHUTDOWN_TIMEOUT_MS = 10_000;
 const FATAL_ERROR_CODES = new Set([
     'ERR_WORKER_OUT_OF_MEMORY',
     'ERR_MEMORY_ALLOCATION_FAILED',
@@ -18,10 +19,12 @@ const FATAL_ERRNO_CODES = new Set([
 function isFatalError(error) {
     if (!(error instanceof Error))
         return false;
-    const appErr = error;
-    if (appErr.code && FATAL_ERROR_CODES.has(appErr.code))
+    const code = 'code' in error && typeof error.code === 'string'
+        ? error.code
+        : undefined;
+    if (code && FATAL_ERROR_CODES.has(code))
         return true;
-    if (appErr.code && FATAL_ERRNO_CODES.has(appErr.code))
+    if (code && FATAL_ERRNO_CODES.has(code))
         return true;
     if (error instanceof RangeError && error.message.includes('allocation'))
         return true;
@@ -92,14 +95,36 @@ async function main() {
         };
         process.on('SIGINT', async () => {
             logger.info('Received SIGINT, shutting down...');
-            stopArtifactRetentionScheduler?.();
-            await server.close();
+            const forceExitTimer = setTimeout(() => {
+                logger.error('Graceful shutdown timed out, forcing exit');
+                process.exit(1);
+            }, SHUTDOWN_TIMEOUT_MS);
+            forceExitTimer.unref();
+            try {
+                stopArtifactRetentionScheduler?.();
+                await server.close();
+            }
+            catch (error) {
+                logger.error('Error during SIGINT shutdown:', error);
+            }
+            clearTimeout(forceExitTimer);
             process.exit(0);
         });
         process.on('SIGTERM', async () => {
             logger.info('Received SIGTERM, shutting down...');
-            stopArtifactRetentionScheduler?.();
-            await server.close();
+            const forceExitTimer = setTimeout(() => {
+                logger.error('Graceful shutdown timed out, forcing exit');
+                process.exit(1);
+            }, SHUTDOWN_TIMEOUT_MS);
+            forceExitTimer.unref();
+            try {
+                stopArtifactRetentionScheduler?.();
+                await server.close();
+            }
+            catch (error) {
+                logger.error('Error during SIGTERM shutdown:', error);
+            }
+            clearTimeout(forceExitTimer);
             process.exit(0);
         });
         process.on('uncaughtException', (error) => {
@@ -108,6 +133,24 @@ async function main() {
         process.on('unhandledRejection', (reason) => {
             handleRuntimeFailure('unhandledRejection', reason);
         });
+        process.stdin.resume();
+        process.stdin.on('end', async () => {
+            logger.info('stdin EOF — parent disconnected, shutting down...');
+            const forceExitTimer = setTimeout(() => {
+                logger.error('Graceful shutdown timed out after stdin EOF, forcing exit');
+                process.exit(1);
+            }, SHUTDOWN_TIMEOUT_MS);
+            forceExitTimer.unref();
+            try {
+                stopArtifactRetentionScheduler?.();
+                await server.close();
+            }
+            catch (error) {
+                logger.error('Error during stdin EOF shutdown:', error);
+            }
+            clearTimeout(forceExitTimer);
+            process.exit(0);
+        });
         logger.info('Starting MCP server...');
         await server.start();
         logger.info('MCP server started successfully');
@@ -115,15 +158,18 @@ async function main() {
     }
     catch (error) {
         logger.error('Failed to start MCP server:');
-        const appError = error;
-        logger.error('Error name:', appError.name);
-        logger.error('Error message:', appError.message);
-        logger.error('Error stack:', appError.stack);
+        if (error instanceof Error) {
+            logger.error('Error name:', error.name);
+            logger.error('Error message:', error.message);
+            logger.error('Error stack:', error.stack);
+        }
         logger.error('Full error object:', JSON.stringify(error, null, 2));
-        if (appError.code === 'EADDRINUSE') {
+        const code = error?.['code'];
+        const message = error instanceof Error ? error.message : String(error);
+        if (code === 'EADDRINUSE') {
             logger.error('Port is already in use. Please check if another instance is running.');
         }
-        if (appError.message?.includes('credentials')) {
+        if (message?.includes('credentials')) {
             logger.error('Authentication failed. Please check your API keys or credentials.');
         }
         process.exit(1);
@@ -136,4 +182,4 @@ if (cliFastPath.handled) {
     }
     process.exit(cliFastPath.exitCode);
 }
-main();
+void main();

package/dist/src/modules/analyzer/CodeAnalyzer.js

@@ -1,5 +1,6 @@
 import * as parser from '@babel/parser';
 import traverse from '@babel/traverse';
+import { LLMService } from '../../services/LLMService.js';
 import { generateCodeAnalysisPrompt } from '../../services/prompts/analysis.js';
 import { logger } from '../../utils/logger.js';
 import { identifySecurityRisks } from '../analyzer/SecurityCodeAnalyzer.js';

package/dist/src/modules/analyzer/CodeAnalyzerDataFlow.js

@@ -223,7 +223,10 @@ export async function analyzeDataFlowWithTaint(code, llm) {
                         location: { file: 'current', line },
                     });
                 }
-                if (t.isIdentifier(obj) && obj.name === 'event' && t.isIdentifier(prop) && prop.name === 'data') {
+                if (t.isIdentifier(obj) &&
+                    obj.name === 'event' &&
+                    t.isIdentifier(prop) &&
+                    prop.name === 'data') {
                     const sourceId = `source-postmessage-${line}`;
                     sources.push({ type: 'network', location: { file: 'current', line } });
                     graph.nodes.push({

package/dist/src/modules/analyzer/IntelligentAnalyzer.js

@@ -63,7 +63,8 @@ export class IntelligentAnalyzer {
                 }
                 groups.get(baseUrl).push(req);
             }
-            catch { }
+            catch {
+            }
         }
         return groups;
     }

package/dist/src/modules/analyzer/PatternDetector.js

@@ -255,7 +255,8 @@ export function extractSuspiciousAPIs(requests) {
                 apis.add(`${req.method} ${path}`);
             }
         }
-        catch { }
+        catch {
+        }
     }
     return Array.from(apis).slice(0, 20);
 }

package/dist/src/modules/browser/BrowserDiscovery.js

@@ -2,24 +2,33 @@ import { ScriptLoader } from '../../native/ScriptLoader.js';
 export class BrowserDiscovery {
     scriptLoader;
     browserSignatures = new Map([
-        ['chrome', {
+        [
+            'chrome',
+            {
                 windowClasses: ['Chrome_WidgetWin_0', 'Chrome_WidgetWin_1', 'Chrome_WidgetWin_*'],
                 processNames: ['chrome.exe', 'chrome'],
                 mainWindowTitle: /.*- Google Chrome$/,
                 debugPorts: [9222, 9229, 9333],
-            }],
-        ['edge', {
+            },
+        ],
+        [
+            'edge',
+            {
                 windowClasses: ['Edge_WidgetWin_0', 'Edge_WidgetWin_1', 'Edge_WidgetWin_*'],
                 processNames: ['msedge.exe', 'msedge'],
                 mainWindowTitle: /.*- Microsoft Edge$/,
                 debugPorts: [9222, 9229],
-            }],
-        ['firefox', {
+            },
+        ],
+        [
+            'firefox',
+            {
                 windowClasses: ['MozillaWindowClass'],
                 processNames: ['firefox.exe', 'firefox'],
                 mainWindowTitle: /.*- Mozilla Firefox$/,
                 debugPorts: [9222],
-            }],
+            },
+        ],
     ]);
     constructor() {
         this.scriptLoader = new ScriptLoader();
@@ -84,7 +93,15 @@ export class BrowserDiscovery {
             const { execFile } = await import('child_process');
             const { promisify } = await import('util');
             const execFileAsync = promisify(execFile);
-            const { stdout } = await execFileAsync('powershell.exe', ['-NoProfile', '-ExecutionPolicy', 'Bypass', '-File', scriptPath, '-ClassPattern', escapedPattern], { maxBuffer: 1024 * 1024 * 10 });
+            const { stdout } = await execFileAsync('powershell.exe', [
+                '-NoProfile',
+                '-ExecutionPolicy',
+                'Bypass',
+                '-File',
+                scriptPath,
+                '-ClassPattern',
+                escapedPattern,
+            ], { maxBuffer: 1024 * 1024 * 10 });
             return this.parseWindowsResult(stdout, classNamePattern);
         }
         catch (error) {

package/dist/src/modules/browser/BrowserModeManager.d.ts

@@ -1,4 +1,4 @@
-import { Browser, Page, LaunchOptions } from 'rebrowser-puppeteer-core';
+import { Browser, Page, type LaunchOptions } from 'rebrowser-puppeteer-core';
 export interface BrowserModeConfig {
     autoDetectCaptcha?: boolean;
     autoSwitchHeadless?: boolean;
@@ -15,6 +15,8 @@ export declare class BrowserModeManager {
     private config;
     private captchaDetector;
     private launchOptions;
+    private chromePid;
+    private static readonly BROWSER_CLOSE_TIMEOUT_MS;
     private sessionData;
     constructor(config?: BrowserModeConfig, launchOptions?: LaunchOptions);
     launch(): Promise<Browser>;
@@ -33,4 +35,6 @@ export declare class BrowserModeManager {
     getBrowser(): Browser | null;
     getCurrentPage(): Page | null;
     isHeadlessMode(): boolean;
+    getChromePid(): number | null;
+    static forceKillPid(pid: number | null): void;
 }