@jshookmcp/jshook 0.2.5 → 0.2.7

package/dist/artifacts-BbdOMET5.mjs

@@ -0,0 +1,1138 @@
+import { t as __exportAll } from "./chunk-CjcI7cDX.mjs";
+import { Tn as SEARCH_VECTOR_MODEL_ID, bn as SEARCH_VECTOR_DYNAMIC_WEIGHT, xn as SEARCH_VECTOR_ENABLED, yn as SEARCH_VECTOR_COSINE_WEIGHT } from "./constants-CCvsN80K.mjs";
+import { homedir } from "node:os";
+import { mkdir } from "node:fs/promises";
+import { basename, dirname, extname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
+import { fileURLToPath } from "node:url";
+import { config } from "dotenv";
+import { z } from "zod";
+const DEFAULT_SEARCH_CONFIG = {
+	queryCategoryProfiles: [
+		{
+			pattern: "(?:security|vuln|xss|injection|csrf|exploit|attack|prototype\\s*pollution|漏洞|安全|注入|攻击)",
+			flags: "i",
+			domainBoosts: [{
+				domain: "security",
+				weight: 1.6
+			}, {
+				domain: "analysis",
+				weight: 1.2
+			}]
+		},
+		{
+			pattern: "(?:debug|breakpoint|pause|step\\s*over|step\\s*into|stack\\s*trace|断点|调试|单步)",
+			flags: "i",
+			domainBoosts: [{
+				domain: "debugger",
+				weight: 1.6
+			}, {
+				domain: "runtime",
+				weight: 1.2
+			}]
+		},
+		{
+			pattern: "(?:network|request|response|header|cookie|fetch|xhr|网络|请求|抓包)",
+			flags: "i",
+			domainBoosts: [{
+				domain: "network",
+				weight: 1.6
+			}, {
+				domain: "browser",
+				weight: 1.1
+			}]
+		},
+		{
+			pattern: "(?:transform|deobfuscate|beautify|minify|decode|encode|解密|混淆|反混淆|转换)",
+			flags: "i",
+			domainBoosts: [{
+				domain: "transform",
+				weight: 1.6
+			}, {
+				domain: "analysis",
+				weight: 1.2
+			}]
+		},
+		{
+			pattern: "(?:memory|heap|dump|scan|inject|内存|堆|扫描)",
+			flags: "i",
+			domainBoosts: [{
+				domain: "memory",
+				weight: 1.6
+			}, {
+				domain: "native",
+				weight: 1.2
+			}]
+		},
+		{
+			pattern: "(?:wasm|webassembly)",
+			flags: "i",
+			domainBoosts: [{
+				domain: "wasm",
+				weight: 1.6
+			}]
+		},
+		{
+			pattern: "(?:browser|page|tab|navigate|click|screenshot|浏览器|页面|标签)",
+			flags: "i",
+			domainBoosts: [{
+				domain: "browser",
+				weight: 1.4
+			}]
+		},
+		{
+			pattern: "(?:captcha|人机验证|验证码|图形验证)",
+			flags: "i",
+			domainBoosts: [{
+				domain: "captcha",
+				weight: 1.6
+			}, {
+				domain: "browser",
+				weight: 1.1
+			}]
+		},
+		{
+			pattern: "(?:reverse|mission|signature|hook|crypto|encrypt|websocket|\\bws\\b|protocol|bundle|webpack|deobfusc|stealth|fingerprint|evidence|\\bhar\\b|逆向|签名|加签|协议|反混淆|反检测|指纹|证据|报告)",
+			flags: "i",
+			domainBoosts: [{
+				domain: "workflow",
+				weight: 1.8
+			}, {
+				domain: "analysis",
+				weight: 1.1
+			}]
+		}
+	],
+	cjkQueryAliases: [
+		{
+			pattern: "工作流|流程编排|流程自动化|编排",
+			tokens: [
+				"workflow",
+				"flow",
+				"orchestration"
+			]
+		},
+		{
+			pattern: "抓包|抓取|采集|捕获",
+			tokens: [
+				"capture",
+				"sniff",
+				"collect"
+			]
+		},
+		{
+			pattern: "接口|端点",
+			tokens: [
+				"api",
+				"endpoint",
+				"request"
+			]
+		},
+		{
+			pattern: "探测|探针|扫描",
+			tokens: ["probe", "scan"]
+		},
+		{
+			pattern: "账号|账户|用户",
+			tokens: ["account", "user"]
+		},
+		{
+			pattern: "注册|开户|报名",
+			tokens: ["register", "signup"]
+		},
+		{
+			pattern: "验证|校验|激活",
+			tokens: [
+				"verify",
+				"verification",
+				"activation"
+			]
+		},
+		{
+			pattern: "验证码|图形验证码|人机验证",
+			tokens: [
+				"captcha",
+				"verify",
+				"verification"
+			]
+		},
+		{
+			pattern: "邮箱|邮件",
+			tokens: ["email", "mail"]
+		},
+		{
+			pattern: "keygen|密钥|注册码|激活码",
+			tokens: [
+				"keygen",
+				"key",
+				"activation"
+			]
+		},
+		{
+			pattern: "轮询|监听",
+			tokens: ["poll", "watch"]
+		},
+		{
+			pattern: "批量|并发",
+			tokens: ["batch", "parallel"]
+		},
+		{
+			pattern: "令牌|凭证|鉴权|认证",
+			tokens: [
+				"token",
+				"auth",
+				"credential"
+			]
+		},
+		{
+			pattern: "提取|抽取|解析",
+			tokens: ["extract", "parse"]
+		},
+		{
+			pattern: "签名|加签|加密|hook",
+			tokens: [
+				"signature",
+				"crypto",
+				"hook",
+				"sign"
+			]
+		},
+		{
+			pattern: "协议|消息|帧|handler",
+			tokens: [
+				"websocket",
+				"protocol",
+				"ws",
+				"handler"
+			]
+		},
+		{
+			pattern: "打包|webpack|混淆|反混淆",
+			tokens: [
+				"bundle",
+				"webpack",
+				"deobfuscate",
+				"unpack"
+			]
+		},
+		{
+			pattern: "反爬|反检测|指纹|stealth",
+			tokens: [
+				"antibot",
+				"stealth",
+				"fingerprint",
+				"detection"
+			]
+		},
+		{
+			pattern: "证据|取证|导出|报告|快照",
+			tokens: [
+				"evidence",
+				"export",
+				"report",
+				"forensic"
+			]
+		},
+		{
+			pattern: "多标签页|多标签|标签页",
+			tokens: ["tab", "multi"]
+		},
+		{
+			pattern: "脚本库|脚本仓库",
+			tokens: ["script", "library"]
+		},
+		{
+			pattern: "脚本",
+			tokens: ["script"]
+		},
+		{
+			pattern: "执行|运行",
+			tokens: ["run", "execute"]
+		},
+		{
+			pattern: "导出",
+			tokens: ["export"]
+		},
+		{
+			pattern: "回放|重放",
+			tokens: ["replay"]
+		},
+		{
+			pattern: "请求",
+			tokens: ["request"]
+		},
+		{
+			pattern: "鉴权面|认证面|授权面|凭证枚举",
+			tokens: [
+				"auth",
+				"surface",
+				"token",
+				"credential"
+			]
+		},
+		{
+			pattern: "通道|通信|协议注册|协议枚举",
+			tokens: [
+				"protocol",
+				"channel",
+				"registry"
+			]
+		},
+		{
+			pattern: "人机|挑战|风控|拦截页",
+			tokens: [
+				"challenge",
+				"captcha",
+				"cloudflare",
+				"turnstile"
+			]
+		},
+		{
+			pattern: "签名谱系|签名链路|加签链路|签名追踪",
+			tokens: [
+				"signing",
+				"lineage",
+				"signature",
+				"trace"
+			]
+		},
+		{
+			pattern: "复现|重发|篡改|参数篡改",
+			tokens: [
+				"replay",
+				"tamper",
+				"request"
+			]
+		},
+		{
+			pattern: "反混淆链|反混淆管道|清洗|还原",
+			tokens: [
+				"deobfuscate",
+				"pipeline",
+				"transform",
+				"ast"
+			]
+		},
+		{
+			pattern: "桌面应用|electron|nwjs|预加载",
+			tokens: [
+				"electron",
+				"bridge",
+				"preload",
+				"ipc"
+			]
+		}
+	],
+	intentToolBoostRules: [
+		{
+			pattern: "(?:端到端闭环|全链路闭环|一键闭环|api(?:[_\\s-]*)capture(?:[_\\s-]*)session|web_api_capture_session|抓取接口|抓包流程)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "run_extension_workflow",
+					bonus: 40
+				},
+				{
+					tool: "list_extension_workflows",
+					bonus: 24
+				},
+				{
+					tool: "api_probe_batch",
+					bonus: 18
+				},
+				{
+					tool: "network_extract_auth",
+					bonus: 10
+				},
+				{
+					tool: "network_export_har",
+					bonus: 8
+				}
+			]
+		},
+		{
+			pattern: "(?:register|signup|sign\\s*up|账号注册|账户注册|邮箱验证|验证账号|激活账号|注册验证|验证码|邮箱激活|激活链接|mail\\s*verify|email\\s*verify|account\\s*pending|keygen)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "run_extension_workflow",
+					bonus: 40
+				},
+				{
+					tool: "list_extension_workflows",
+					bonus: 24
+				},
+				{
+					tool: "tab_workflow",
+					bonus: 8
+				}
+			]
+		},
+		{
+			pattern: "(?:script\\s*library|script\\s*preset|run\\s*script|脚本库执行|脚本库|执行脚本)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "page_script_run",
+					bonus: 22
+				},
+				{
+					tool: "page_script_register",
+					bonus: 16
+				},
+				{
+					tool: "run_extension_workflow",
+					bonus: 10
+				}
+			]
+		},
+		{
+			pattern: "(?:bundle|webpack|js\\s*bundle|脚本包|静态包|源码包)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "js_bundle_search",
+					bonus: 20
+				},
+				{
+					tool: "source_map_extract",
+					bonus: 10
+				},
+				{
+					tool: "webpack_enumerate",
+					bonus: 8
+				}
+			]
+		},
+		{
+			pattern: "(?:workflow|orchestration|工作流|流程编排|流程自动化)",
+			flags: "i",
+			boosts: [{
+				tool: "run_extension_workflow",
+				bonus: 26
+			}, {
+				tool: "list_extension_workflows",
+				bonus: 16
+			}]
+		},
+		{
+			pattern: "(?=.*(?:抓包|抓取|捕获|capture|sniff|collect))(?=.*(?:鉴权|认证|令牌|凭证|jwt|token|auth|credential))",
+			flags: "i",
+			boosts: [
+				{
+					tool: "run_extension_workflow",
+					bonus: 28
+				},
+				{
+					tool: "list_extension_workflows",
+					bonus: 16
+				},
+				{
+					tool: "network_extract_auth",
+					bonus: 18
+				}
+			]
+		},
+		{
+			pattern: "(?:signature|crypto|encrypt|hash|hook|签名|加签|加密)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "run_extension_workflow",
+					bonus: 40
+				},
+				{
+					tool: "list_extension_workflows",
+					bonus: 24
+				},
+				{
+					tool: "search_in_scripts",
+					bonus: 12
+				},
+				{
+					tool: "detect_crypto",
+					bonus: 10
+				},
+				{
+					tool: "manage_hooks",
+					bonus: 8
+				}
+			]
+		},
+		{
+			pattern: "(?:websocket|\\bws\\b|protocol|socket|handler|协议|消息|帧)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "run_extension_workflow",
+					bonus: 40
+				},
+				{
+					tool: "list_extension_workflows",
+					bonus: 24
+				},
+				{
+					tool: "ws_monitor_enable",
+					bonus: 12
+				},
+				{
+					tool: "ws_get_frames",
+					bonus: 10
+				},
+				{
+					tool: "ws_get_connections",
+					bonus: 8
+				}
+			]
+		},
+		{
+			pattern: "(?:bundle|webpack|chunk|source.*map|deobfusc|源码|打包|混淆|反混淆)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "run_extension_workflow",
+					bonus: 40
+				},
+				{
+					tool: "list_extension_workflows",
+					bonus: 24
+				},
+				{
+					tool: "js_bundle_search",
+					bonus: 14
+				},
+				{
+					tool: "collect_code",
+					bonus: 10
+				},
+				{
+					tool: "source_map_extract",
+					bonus: 8
+				}
+			]
+		},
+		{
+			pattern: "(?:stealth|fingerprint|webdriver|antibot|bot.*detect|反爬|反检测|指纹)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "run_extension_workflow",
+					bonus: 40
+				},
+				{
+					tool: "list_extension_workflows",
+					bonus: 24
+				},
+				{
+					tool: "stealth_inject",
+					bonus: 10
+				},
+				{
+					tool: "stealth_generate_fingerprint",
+					bonus: 10
+				},
+				{
+					tool: "stealth_verify",
+					bonus: 8
+				}
+			]
+		},
+		{
+			pattern: "(?:evidence|export|har|report|snapshot|证据|导出|报告|快照|取证)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "run_extension_workflow",
+					bonus: 40
+				},
+				{
+					tool: "list_extension_workflows",
+					bonus: 24
+				},
+				{
+					tool: "evidence_query_url",
+					bonus: 14
+				},
+				{
+					tool: "evidence_export_markdown",
+					bonus: 12
+				},
+				{
+					tool: "evidence_export_json",
+					bonus: 10
+				}
+			]
+		},
+		{
+			pattern: "(?:auth.*surface|token.*enum|credential.*map|鉴权面|认证面|凭证枚举|jwt|csrf|api.?key|授权)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "run_extension_workflow",
+					bonus: 40
+				},
+				{
+					tool: "list_extension_workflows",
+					bonus: 24
+				},
+				{
+					tool: "network_extract_auth",
+					bonus: 14
+				},
+				{
+					tool: "page_get_cookies",
+					bonus: 8
+				}
+			]
+		},
+		{
+			pattern: "(?:protocol.*registry|channel.*enum|通道枚举|协议注册|协议归类|SSE|EventSource|beacon|postMessage)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "run_extension_workflow",
+					bonus: 40
+				},
+				{
+					tool: "list_extension_workflows",
+					bonus: 24
+				},
+				{
+					tool: "ws_monitor_enable",
+					bonus: 10
+				},
+				{
+					tool: "sse_monitor_enable",
+					bonus: 10
+				},
+				{
+					tool: "network_get_requests",
+					bonus: 8
+				}
+			]
+		},
+		{
+			pattern: "(?:challenge|turnstile|cloudflare|hcaptcha|datadome|akamai|perimeterx|kasada|人机|挑战|风控|拦截页)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "run_extension_workflow",
+					bonus: 40
+				},
+				{
+					tool: "list_extension_workflows",
+					bonus: 24
+				},
+				{
+					tool: "captcha_detect",
+					bonus: 14
+				},
+				{
+					tool: "stealth_verify",
+					bonus: 10
+				}
+			]
+		},
+		{
+			pattern: "(?:signing.*lineage|签名谱系|签名链路|加签链路|签名追踪|plaintext.*cipher|明文.*密文)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "run_extension_workflow",
+					bonus: 40
+				},
+				{
+					tool: "list_extension_workflows",
+					bonus: 24
+				},
+				{
+					tool: "detect_crypto",
+					bonus: 12
+				},
+				{
+					tool: "extract_function_tree",
+					bonus: 10
+				},
+				{
+					tool: "manage_hooks",
+					bonus: 8
+				}
+			]
+		},
+		{
+			pattern: "(?:replay.*lab|request.*replay|复现|重发|篡改|参数篡改|request.*tamper)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "run_extension_workflow",
+					bonus: 40
+				},
+				{
+					tool: "list_extension_workflows",
+					bonus: 24
+				},
+				{
+					tool: "network_replay_request",
+					bonus: 14
+				},
+				{
+					tool: "instrumentation_network_replay",
+					bonus: 12
+				},
+				{
+					tool: "network_export_har",
+					bonus: 8
+				}
+			]
+		},
+		{
+			pattern: "(?:deobfusc.*pipeline|反混淆链|反混淆管道|清洗|还原|ast.*transform|packer|unpack)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "run_extension_workflow",
+					bonus: 40
+				},
+				{
+					tool: "list_extension_workflows",
+					bonus: 24
+				},
+				{
+					tool: "webcrack_unpack",
+					bonus: 14
+				},
+				{
+					tool: "ast_transform_apply",
+					bonus: 12
+				},
+				{
+					tool: "deobfuscate",
+					bonus: 10
+				},
+				{
+					tool: "detect_obfuscation",
+					bonus: 8
+				}
+			]
+		},
+		{
+			pattern: "(?:electron|nwjs|preload|ipc|asar|桌面应用|预加载|桥接|electron.*bridge)",
+			flags: "i",
+			boosts: [
+				{
+					tool: "run_extension_workflow",
+					bonus: 40
+				},
+				{
+					tool: "list_extension_workflows",
+					bonus: 24
+				},
+				{
+					tool: "electron_inspect_app",
+					bonus: 14
+				},
+				{
+					tool: "electron_ipc_sniff",
+					bonus: 12
+				},
+				{
+					tool: "asar_search",
+					bonus: 10
+				},
+				{
+					tool: "electron_check_fuses",
+					bonus: 8
+				}
+			]
+		}
+	],
+	vectorEnabled: SEARCH_VECTOR_ENABLED,
+	vectorModelId: SEARCH_VECTOR_MODEL_ID,
+	vectorCosineWeight: SEARCH_VECTOR_COSINE_WEIGHT,
+	vectorDynamicWeight: SEARCH_VECTOR_DYNAMIC_WEIGHT
+};
+//#endregion
+//#region src/utils/config.ts
+const projectRoot = fileURLToPath(new URL("../..", import.meta.url));
+const envPath = fileURLToPath(new URL("../../.env", import.meta.url));
+let envLoaded = false;
+const CONFIG_DEFAULTS = {
+	puppeteer: {
+		headless: false,
+		timeout: 3e4
+	},
+	mcp: {
+		name: "jshookmcp",
+		version: "0.1.8"
+	},
+	cache: {
+		enabled: false,
+		dir: ".cache",
+		ttl: 3600
+	},
+	paths: {
+		screenshotDir: "screenshots",
+		captchaScreenshotDir: "screenshots/captcha",
+		debuggerSessionsDir: "debugger-sessions",
+		extensionRegistryDir: "artifacts/extension-registry",
+		tlsKeyLogDir: "artifacts/tmp",
+		registryCacheDir: ".jshookmcp/cache"
+	},
+	performance: {
+		maxConcurrentAnalysis: 3,
+		maxCodeSizeMB: 10
+	}
+};
+function loadEnvIfNeeded() {
+	if (envLoaded) return;
+	envLoaded = true;
+	const result = config({
+		path: envPath,
+		quiet: true
+	});
+	const errorCode = result.error?.code;
+	if (result.error && errorCode !== "ENOENT") {
+		console.error("[Config] Warning: Failed to load .env file from configured path");
+		console.error(`[Config] Error: ${result.error.message}`);
+		console.error("[Config] Will use environment variables or defaults");
+	} else if (!result.error && process.env.DEBUG === "true") console.info("[Config] .env file loaded (debug mode)");
+}
+const envInt = (fallback) => z.string().optional().transform((v) => v ? parseInt(v, 10) : fallback).pipe(z.number().int().finite());
+const envBool = (fallback) => z.string().optional().transform((v) => v === void 0 ? fallback : v === "true");
+function resolveConfigPath(inputPath, baseDir) {
+	return normalize(isAbsolute(inputPath) ? inputPath : resolve(baseDir, inputPath));
+}
+const ConfigSchema = z.object({
+	PUPPETEER_HEADLESS: envBool(CONFIG_DEFAULTS.puppeteer.headless),
+	PUPPETEER_TIMEOUT: envInt(CONFIG_DEFAULTS.puppeteer.timeout).pipe(z.number().min(1e3).max(3e5)),
+	PUPPETEER_EXECUTABLE_PATH: z.string().optional(),
+	CHROME_PATH: z.string().optional(),
+	BROWSER_EXECUTABLE_PATH: z.string().optional(),
+	MCP_SERVER_NAME: z.string().optional().default(CONFIG_DEFAULTS.mcp.name),
+	MCP_SERVER_VERSION: z.string().optional().default(CONFIG_DEFAULTS.mcp.version),
+	ENABLE_CACHE: envBool(CONFIG_DEFAULTS.cache.enabled),
+	CACHE_DIR: z.string().optional().default(CONFIG_DEFAULTS.cache.dir),
+	CACHE_TTL: envInt(CONFIG_DEFAULTS.cache.ttl).pipe(z.number().min(0)),
+	MCP_SCREENSHOT_DIR: z.string().optional().default(CONFIG_DEFAULTS.paths.screenshotDir),
+	CAPTCHA_SCREENSHOT_DIR: z.string().optional().default(CONFIG_DEFAULTS.paths.captchaScreenshotDir),
+	MCP_DEBUGGER_SESSIONS_DIR: z.string().optional().default(CONFIG_DEFAULTS.paths.debuggerSessionsDir),
+	MCP_EXTENSION_REGISTRY_DIR: z.string().optional().default(CONFIG_DEFAULTS.paths.extensionRegistryDir),
+	MCP_TLS_KEYLOG_DIR: z.string().optional().default(CONFIG_DEFAULTS.paths.tlsKeyLogDir),
+	MCP_REGISTRY_CACHE_DIR: z.string().optional().default(CONFIG_DEFAULTS.paths.registryCacheDir),
+	MAX_CONCURRENT_ANALYSIS: envInt(CONFIG_DEFAULTS.performance.maxConcurrentAnalysis).pipe(z.number().min(1).max(32)),
+	MAX_CODE_SIZE_MB: envInt(CONFIG_DEFAULTS.performance.maxCodeSizeMB).pipe(z.number().min(1).max(500))
+});
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseJsonArrayEnv(key) {
+	const raw = process.env[key];
+	if (!raw) return;
+	try {
+		const parsed = JSON.parse(raw);
+		return Array.isArray(parsed) ? parsed : void 0;
+	} catch {
+		return;
+	}
+}
+function parseSearchQueryCategoryProfiles() {
+	const parsed = parseJsonArrayEnv("SEARCH_QUERY_CATEGORY_PROFILES_JSON");
+	if (parsed === void 0) return;
+	return parsed.flatMap((entry) => {
+		if (!isRecord(entry) || typeof entry.pattern !== "string" || !Array.isArray(entry.domainBoosts)) return [];
+		const domainBoosts = entry.domainBoosts.flatMap((boost) => {
+			if (!isRecord(boost) || typeof boost.domain !== "string" || typeof boost.weight !== "number") return [];
+			return [{
+				domain: boost.domain,
+				weight: boost.weight
+			}];
+		});
+		return [{
+			pattern: entry.pattern,
+			flags: typeof entry.flags === "string" ? entry.flags : void 0,
+			domainBoosts
+		}];
+	});
+}
+function parseCjkQueryAliases() {
+	const parsed = parseJsonArrayEnv("SEARCH_CJK_QUERY_ALIASES_JSON");
+	if (parsed === void 0) return;
+	return parsed.flatMap((entry) => {
+		if (!isRecord(entry) || typeof entry.pattern !== "string" || !Array.isArray(entry.tokens)) return [];
+		const tokens = entry.tokens.filter((token) => typeof token === "string");
+		return [{
+			pattern: entry.pattern,
+			flags: typeof entry.flags === "string" ? entry.flags : void 0,
+			tokens
+		}];
+	});
+}
+function parseIntentToolBoostRules() {
+	const parsed = parseJsonArrayEnv("SEARCH_INTENT_TOOL_BOOST_RULES_JSON");
+	if (parsed === void 0) return;
+	return parsed.flatMap((entry) => {
+		if (!isRecord(entry) || typeof entry.pattern !== "string" || !Array.isArray(entry.boosts)) return [];
+		const boosts = entry.boosts.flatMap((boost) => {
+			if (!isRecord(boost) || typeof boost.tool !== "string" || typeof boost.bonus !== "number") return [];
+			return [{
+				tool: boost.tool,
+				bonus: boost.bonus
+			}];
+		});
+		return [{
+			pattern: entry.pattern,
+			flags: typeof entry.flags === "string" ? entry.flags : void 0,
+			boosts
+		}];
+	});
+}
+function cloneSearchConfig(search) {
+	return {
+		queryCategoryProfiles: search.queryCategoryProfiles.map((profile) => ({
+			pattern: profile.pattern,
+			flags: profile.flags,
+			domainBoosts: profile.domainBoosts.map((boost) => ({
+				domain: boost.domain,
+				weight: boost.weight
+			}))
+		})),
+		cjkQueryAliases: search.cjkQueryAliases.map((alias) => ({
+			pattern: alias.pattern,
+			flags: alias.flags,
+			tokens: [...alias.tokens]
+		})),
+		intentToolBoostRules: search.intentToolBoostRules.map((rule) => ({
+			pattern: rule.pattern,
+			flags: rule.flags,
+			boosts: rule.boosts.map((boost) => ({
+				tool: boost.tool,
+				bonus: boost.bonus
+			}))
+		}))
+	};
+}
+function buildSearchConfig() {
+	const defaults = cloneSearchConfig(DEFAULT_SEARCH_CONFIG);
+	return {
+		queryCategoryProfiles: parseSearchQueryCategoryProfiles() ?? defaults.queryCategoryProfiles,
+		cjkQueryAliases: parseCjkQueryAliases() ?? defaults.cjkQueryAliases,
+		intentToolBoostRules: parseIntentToolBoostRules() ?? defaults.intentToolBoostRules
+	};
+}
+function coerceBooleanEnv(value, fallback) {
+	if (typeof value === "boolean") return value;
+	if (typeof value === "string") return value === "true";
+	return fallback;
+}
+function coerceIntegerEnv(value, fallback) {
+	if (typeof value === "number" && Number.isFinite(value)) return value;
+	if (typeof value === "string") {
+		const parsed = Number.parseInt(value, 10);
+		if (Number.isFinite(parsed)) return parsed;
+	}
+	return fallback;
+}
+function getConfig() {
+	loadEnvIfNeeded();
+	const parsed = ConfigSchema.safeParse(process.env);
+	if (!parsed.success) {
+		const issues = parsed.error.issues.map((i) => `  ${i.path.join(".")}: ${i.message}`);
+		console.error(`[Config] Validation errors:\n${issues.join("\n")}`);
+		console.error("[Config] Falling back to safe defaults for invalid fields");
+	}
+	const env = parsed.success ? parsed.data : process.env;
+	const cacheDir = env.CACHE_DIR || CONFIG_DEFAULTS.cache.dir;
+	const configuredExecutablePath = env.PUPPETEER_EXECUTABLE_PATH || env.CHROME_PATH || env.BROWSER_EXECUTABLE_PATH;
+	const absoluteCacheDir = cacheDir.startsWith("/") || cacheDir.match(/^[A-Za-z]:/) ? cacheDir : join(projectRoot, cacheDir);
+	const search = buildSearchConfig();
+	const paths = {
+		screenshotDir: resolveConfigPath(env.MCP_SCREENSHOT_DIR || CONFIG_DEFAULTS.paths.screenshotDir, projectRoot),
+		captchaScreenshotDir: resolveConfigPath(env.CAPTCHA_SCREENSHOT_DIR || CONFIG_DEFAULTS.paths.captchaScreenshotDir, projectRoot),
+		debuggerSessionsDir: resolveConfigPath(env.MCP_DEBUGGER_SESSIONS_DIR || CONFIG_DEFAULTS.paths.debuggerSessionsDir, process.cwd()),
+		extensionRegistryDir: resolveConfigPath(env.MCP_EXTENSION_REGISTRY_DIR || CONFIG_DEFAULTS.paths.extensionRegistryDir, projectRoot),
+		tlsKeyLogDir: resolveConfigPath(env.MCP_TLS_KEYLOG_DIR || CONFIG_DEFAULTS.paths.tlsKeyLogDir, projectRoot),
+		registryCacheDir: resolveConfigPath(env.MCP_REGISTRY_CACHE_DIR || CONFIG_DEFAULTS.paths.registryCacheDir, homedir())
+	};
+	return {
+		puppeteer: {
+			headless: coerceBooleanEnv(env.PUPPETEER_HEADLESS, CONFIG_DEFAULTS.puppeteer.headless),
+			timeout: coerceIntegerEnv(env.PUPPETEER_TIMEOUT, CONFIG_DEFAULTS.puppeteer.timeout),
+			executablePath: configuredExecutablePath?.trim() || void 0
+		},
+		mcp: {
+			name: env.MCP_SERVER_NAME || CONFIG_DEFAULTS.mcp.name,
+			version: env.MCP_SERVER_VERSION || CONFIG_DEFAULTS.mcp.version
+		},
+		cache: {
+			enabled: coerceBooleanEnv(env.ENABLE_CACHE, CONFIG_DEFAULTS.cache.enabled),
+			dir: absoluteCacheDir,
+			ttl: coerceIntegerEnv(env.CACHE_TTL, CONFIG_DEFAULTS.cache.ttl)
+		},
+		paths,
+		performance: {
+			maxConcurrentAnalysis: coerceIntegerEnv(env.MAX_CONCURRENT_ANALYSIS, CONFIG_DEFAULTS.performance.maxConcurrentAnalysis),
+			maxCodeSizeMB: coerceIntegerEnv(env.MAX_CODE_SIZE_MB, CONFIG_DEFAULTS.performance.maxCodeSizeMB)
+		},
+		search
+	};
+}
+function validateConfig(config) {
+	const errors = [];
+	if (config.performance.maxConcurrentAnalysis < 1) errors.push("maxConcurrentAnalysis must be at least 1");
+	if (config.performance.maxCodeSizeMB < 1) errors.push("maxCodeSizeMB must be at least 1");
+	if (config.puppeteer.timeout < 1e3) errors.push("puppeteer.timeout must be at least 1000ms");
+	if (config.cache.ttl < 0) errors.push("cache.ttl must be non-negative");
+	for (const profile of config.search.queryCategoryProfiles) try {
+		new RegExp(profile.pattern, profile.flags);
+	} catch {
+		errors.push(`search.queryCategoryProfiles contains invalid regex: ${profile.pattern}`);
+	}
+	for (const alias of config.search.cjkQueryAliases) try {
+		new RegExp(alias.pattern, alias.flags);
+	} catch {
+		errors.push(`search.cjkQueryAliases contains invalid regex: ${alias.pattern}`);
+	}
+	for (const rule of config.search.intentToolBoostRules) try {
+		new RegExp(rule.pattern, rule.flags);
+	} catch {
+		errors.push(`search.intentToolBoostRules contains invalid regex: ${rule.pattern}`);
+	}
+	return {
+		valid: errors.length === 0,
+		errors
+	};
+}
+//#endregion
+//#region src/utils/outputPaths.ts
+const currentFileUrl = fileURLToPath(import.meta.url);
+const defaultProjectRoot = currentFileUrl.includes("/src/utils/") || currentFileUrl.includes("\\src\\utils\\") ? fileURLToPath(new URL("../..", import.meta.url)) : fileURLToPath(new URL("..", import.meta.url));
+function resolveProjectRoot(env = process.env) {
+	const requestedRoot = env.MCP_PROJECT_ROOT?.trim();
+	if (!requestedRoot) return defaultProjectRoot;
+	return normalize(isAbsolute(requestedRoot) ? requestedRoot : resolve(defaultProjectRoot, requestedRoot));
+}
+function isInside(baseDir, targetPath) {
+	const rel = relative(baseDir, targetPath);
+	if (!rel || rel === ".." || rel.startsWith(`..${sep}`) || isAbsolute(rel)) return false;
+	return true;
+}
+function resolveWithinProject(inputPath, baseRoot = getProjectRoot()) {
+	const candidate = isAbsolute(inputPath) ? normalize(inputPath) : resolve(baseRoot, inputPath);
+	return isInside(baseRoot, candidate) ? candidate : resolve(baseRoot, "screenshots", "external", normalize(inputPath).split(/[\\/]/).pop() || "output.bin");
+}
+function withDefaultExtension(filePath, extension) {
+	if (extname(filePath)) return filePath;
+	return `${filePath}.${extension.replace(/^\./, "")}`;
+}
+function getProjectRoot() {
+	return resolveProjectRoot();
+}
+function resolveOutputDirectory(inputDir, fallbackDir = "screenshots") {
+	const projectRoot = getProjectRoot();
+	const requested = inputDir?.trim();
+	if (!requested) return resolve(projectRoot, fallbackDir);
+	const resolved = resolveWithinProject(requested, projectRoot);
+	if (isInside(projectRoot, resolved)) return resolved;
+	/* v8 ignore next */
+	return resolve(projectRoot, fallbackDir);
+}
+function getDebuggerSessionsDir() {
+	return getConfig().paths.debuggerSessionsDir;
+}
+function getExtensionRegistryDir() {
+	return getConfig().paths.extensionRegistryDir;
+}
+function getCodeCacheDir() {
+	return resolve(getConfig().cache.dir, "code");
+}
+function getTlsKeyLogDir() {
+	return getConfig().paths.tlsKeyLogDir;
+}
+async function resolveScreenshotOutputPath(options) {
+	const projectRoot = getProjectRoot();
+	const extension = options.type === "jpeg" ? "jpg" : "png";
+	const fallbackDir = options.fallbackDir || "screenshots/manual";
+	const fallbackName = options.fallbackName || "page";
+	const screenshotRoot = resolveOutputDirectory(getConfig().paths.screenshotDir, fallbackDir);
+	const requested = options.requestedPath?.trim();
+	let absolutePath;
+	let pathRewritten = false;
+	if (!requested) {
+		absolutePath = resolve(screenshotRoot, `${fallbackName}-${Date.now()}.${extension}`);
+		pathRewritten = true;
+	} else {
+		const requestedWithExt = withDefaultExtension(requested, extension);
+		if (isAbsolute(requestedWithExt)) {
+			absolutePath = resolve(screenshotRoot, basename(requestedWithExt));
+			pathRewritten = true;
+		} else {
+			absolutePath = resolve(screenshotRoot, requestedWithExt);
+			if (!isInside(screenshotRoot, absolutePath)) {
+				absolutePath = resolve(screenshotRoot, basename(absolutePath));
+				pathRewritten = true;
+			}
+		}
+	}
+	await mkdir(dirname(absolutePath), { recursive: true });
+	const displayPath = isAbsolute(requested || "") ? absolutePath.replace(/\\/g, "/") : relative(projectRoot, absolutePath).replace(/\\/g, "/");
+	return {
+		absolutePath,
+		displayPath,
+		pathRewritten
+	};
+}
+//#endregion
+//#region src/utils/artifacts.ts
+/**
+* Unified artifact output management.
+* Ensures all tool outputs go to well-structured directories with consistent naming.
+*/
+var artifacts_exports = /* @__PURE__ */ __exportAll({
+	getArtifactDir: () => getArtifactDir,
+	getArtifactsRoot: () => getArtifactsRoot,
+	resolveArtifactPath: () => resolveArtifactPath
+});
+const ARTIFACT_BASE = "artifacts";
+/**
+* Generate a timestamped artifact path.
+*
+* @param category - Artifact subdirectory (wasm, traces, etc.)
+* @param toolName - Tool that produces this artifact
+* @param target - Target identifier (e.g., module name, URL hash)
+* @param ext - File extension (without dot)
+* @returns { absolutePath, displayPath }
+*/
+async function resolveArtifactPath(options) {
+	const { category, toolName, target, ext, customDir } = options;
+	const root = getProjectRoot();
+	const dir = customDir ? resolve(root, customDir) : resolve(root, ARTIFACT_BASE, category);
+	const relativeDir = relative(normalize(root), normalize(dir));
+	if (relativeDir === ".." || relativeDir.startsWith(`..${sep}`) || isAbsolute(relativeDir)) throw new Error(`Path traversal blocked: artifact directory "${customDir}" escapes project root`);
+	await mkdir(dir, { recursive: true });
+	const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").replace("T", "_").slice(0, 19);
+	const shortId = Math.random().toString(36).substring(2, 8);
+	const absolutePath = resolve(dir, `${sanitizeFilename(toolName)}${target ? `-${sanitizeFilename(target)}` : ""}-${ts}-${shortId}.${ext.replace(/^\./, "")}`);
+	return {
+		absolutePath,
+		displayPath: relative(root, absolutePath).replace(/\\/g, "/")
+	};
+}
+/**
+* Get the artifacts root directory.
+*/
+function getArtifactsRoot() {
+	return resolve(getProjectRoot(), ARTIFACT_BASE);
+}
+/**
+* Get a specific artifact category directory.
+*/
+function getArtifactDir(category) {
+	return resolve(getProjectRoot(), ARTIFACT_BASE, category);
+}
+/**
+* Sanitize a string for use as a filename component.
+*/
+function sanitizeFilename(name) {
+	return name.replace(/[^a-zA-Z0-9_-]/g, "_").replace(/_+/g, "_").replace(/^_|_$/g, "").substring(0, 60);
+}
+//#endregion
+export { getCodeCacheDir as a, getProjectRoot as c, resolveScreenshotOutputPath as d, getConfig as f, DEFAULT_SEARCH_CONFIG as h, resolveArtifactPath as i, getTlsKeyLogDir as l, validateConfig as m, getArtifactDir as n, getDebuggerSessionsDir as o, projectRoot as p, getArtifactsRoot as r, getExtensionRegistryDir as s, artifacts_exports as t, resolveOutputDirectory as u };