@jshookmcp/jshook 0.2.8 → 0.2.9

package/README.md

@@ -17,6 +17,28 @@ An MCP (Model Context Protocol) server with a runtime-registry-driven catalog of
 - **[⚙️ Configuration](https://vmoranv.github.io/jshookmcp/guide/configuration.html)**
 - **[📚 Tool Reference](https://vmoranv.github.io/jshookmcp/reference/)**
 
+## 🚀 Quick Start
+
+Use jshookmcp instantly with Claude Desktop or Cursor without installing anything globally.
+
+**Claude Desktop Configuration (`claude_desktop_config.json`)**:
+
+```json
+{
+  "mcpServers": {
+    "jshook": {
+      "command": "npx",
+      "args": ["-y", "@jshookmcp/jshook@latest"],
+      "env": {
+        "JSHOOK_BASE_PROFILE": "search"
+      }
+    }
+  }
+}
+```
+
+*(Note for Windows users: If `npx` is not found, specify the absolute path to `npx.cmd`)*
+
 ## 🌟 Key Highlights
 
 - 🤖 **AI-Driven Analysis**: Leverage LLMs for intelligent JavaScript deobfuscation, cryptographic algorithm detection, and AST-level code comprehension.
@@ -28,14 +50,23 @@ An MCP (Model Context Protocol) server with a runtime-registry-driven catalog of
 - 🔧 **Zero-Wiring Extensibility**: Auto-discovered domains via `manifest.ts`, lazy handler instantiation, and B-Skeleton contracts for plugins/workflows.
 - 🛠️ **Reverse Engineering Toolchain**: Integrated WASM disassembly, binary entropy analysis, in-memory scanning, and bridges for Burp Suite/Ghidra/IDA Pro.
 
-## Features
+## 🛡️ Core Capabilities
+
+JSHookMCP exposes **360+ atomic tools** across 36 domains, empowering AI orchestrators with unparalleled capabilities:
 
-Provides a comprehensive suite of tools for AI-assisted JavaScript analysis, browser automation, CDP debugging, network interception, memory analysis, and more.
+- 🕸️ **Browser Automation & Reverse Engineering**: Zero-config Chromium/Camoufox injection, CDP (Chrome DevTools Protocol) orchestration, and iframe evaluation bypasses.
+- 📡 **Network Interception & Spoofing**: Deep HTTP/2 frame building, MiTM traffic capture, GraphQL introspection, and Burp Suite bridge.
+- 🧠 **AST & Semantic Analysis**: LLM-powered deobfuscation, WebAssembly (WASM) disassembly, Source Map reconstruction, and binary entropy visualization.
+- 🧰 **Process & Memory Forensics**: Native Frida instrumentation, memory scanning, pointer dereferencing, and strict Anti-Debug mitigation.
+- 🔌 **Dynamic Extensibility**: Hot-reloadable B-Skeleton plugins and declarative `WorkflowContract` pipelines.
 
-> **[View the full feature list in the documentation ↗](https://vmoranv.github.io/jshookmcp/guide/getting-started.html)**
+> **[View the complete 36-domain tool catalog ↗](https://vmoranv.github.io/jshookmcp/reference/)**
 
 ## Architecture & Performance
 
+> [!TIP]
+> **Context Efficiency Benchmark**: Built-in tool-schema init delta (Claude server-side count): `search` ≈ 3.0K tokens vs `full` ≈ 40.0K+ tokens.
+
 - **Progressive Tool Discovery**: `search_tools` meta-tool (BM25 ranking) + `activate_tools` / `activate_domain` + profile-based tier upgrades (`boost_profile`)
 - **Search-tier behavior**: `search_tools` only searches and ranks results; it does not auto-run `activate_tools`, and it does not auto-run `boost_profile`. Preferred chain: `search_tools -> activate_tools / activate_domain -> boost_profile only when needed`
 - **Do not boost for one tool**: `activate_tools` can register exact tools across tiers from the current base tier; `boost_profile` is better when you expect to reuse a broad family of related tools repeatedly
@@ -43,14 +74,14 @@ Provides a comprehensive suite of tools for AI-assisted JavaScript analysis, bro
 - **Domain Self-Discovery**: Runtime manifest scanning (`domains/*/manifest.ts`) replaces hardcoded imports; add new domains by creating a single manifest file
 - **B-Skeleton Contracts**: Extensibility contracts for plugins (`PluginContract`), workflows (`WorkflowContract`), and observability (`InstrumentationContract`)
 - **MCP ToolAnnotations**: Every tool carries semantic annotations (`readOnlyHint`, `destructiveHint`, `idempotentHint`, `openWorldHint`) enabling AI orchestrators to reason about tool safety and side-effects before invocation
-- **Context Efficiency Benchmark**: Built-in tool-schema init delta (Claude server-side count): `search` ≈ 3K tokens vs `full` ≈ 40K+ tokens; values change as tools/descriptions evolve
 
 ## Registry Snapshot
 
 The built-in surface below is generated from the runtime registry and checked in CI.
 
 <!-- metadata-sync:start -->
-- Package version: `0.2.8`
+- Package version: `0.2.9`
+- Built-in Tools: `364`
 - Domains: `adb-bridge`, `antidebug`, `binary-instrument`, `boringssl-inspector`, `browser`, `canvas`, `coordination`, `core`, `cross-domain`, `debugger`, `encoding`, `evidence`, `extension-registry`, `graphql`, `hooks`, `instrumentation`, `macro`, `maintenance`, `memory`, `mojo-ipc`, `network`, `platform`, `process`, `protocol-analysis`, `proxy`, `sandbox`, `shared-state-board`, `skia-capture`, `sourcemap`, `streaming`, `syscall-hook`, `trace`, `transform`, `v8-inspector`, `wasm`, `workflow`
 - Note: this snapshot is generated from the runtime registry; do not edit the counts by hand.
 <!-- metadata-sync:end -->

package/README.zh.md

@@ -17,6 +17,28 @@
 - **[⚙️ 配置指南](https://vmoranv.github.io/jshookmcp/guide/configuration.html)**
 - **[📚 API 与工具参考](https://vmoranv.github.io/jshookmcp/reference/)**
 
+## 🚀 快速接入 (Quick Start)
+
+无需全局安装任何环境，使用 `npx` 即可让 Claude Desktop 或 Cursor 瞬间获得强大的全双工安全分析能力。
+
+**Claude Desktop 配置 (`claude_desktop_config.json`)**:
+
+```json
+{
+  "mcpServers": {
+    "jshook": {
+      "command": "npx",
+      "args": ["-y", "@jshookmcp/jshook@latest"],
+      "env": {
+        "JSHOOK_BASE_PROFILE": "search"
+      }
+    }
+  }
+}
+```
+
+*(Windows 用户注意: 若报错找不到 npx，请指定为绝对路径 `npx.cmd`)*
+
 ## 🌟 核心亮点
 
 - 🤖 **AI 智能分析**：结合大语言模型实现 JavaScript 语义级反混淆、加密算法识别与深度 AST 结构理解。
@@ -28,14 +50,23 @@
 - 🔧 **零胶水扩展性**：通过 `manifest.ts` 自动发现域、懒加载处理器实例化、B-Skeleton 契约驱动的插件/工作流架构。
 - 🛠️ **全能逆向工具链**：集成 WASM 反编译、二进制漏洞/熵分析、实时内存扫描，并原生提供 Burp Suite 与 Ghidra/IDA Pro 桥接。
 
-## 功能特性
+## 🛡️ 核心能力矩阵
+
+JSHookMCP 跨 36 个技术域提供了 **360+ 个内置原子工具**，赋予 AI 前所未有的能力栈：
 
-提供了一整套用于 AI 辅助 JavaScript 分析、浏览器自动化、CDP 调试、网络拦截与内存分析的全面工具集。
+- 🕸️ **浏览器自动化与逆向**：零配置注入 Chromium/Camoufox，接管 CDP (Chrome DevTools Protocol) 编排，支持 iframe 跨域突破。
+- 📡 **网络拦截与流量嗅探**：深度 HTTP/2 帧构造、中间人 (MiTM) 流量捕获、GraphQL 内省嗅探以及 Burp Suite 无缝桥接。
+- 🧠 **AST 与语义分析**：大模型驱动的代码反混淆、WebAssembly (WASM) 实时反编译、Source Map 重建以及二进制熵值可视化。
+- 🧰 **进程与内存剖析**：系统级 Frida hook 注入、内存地址扫描挖掘、指针解引用以及严苛的反反调试 (Anti-Debug) 对抗。
+- 🔌 **动态扩展性引擎**：支持热重载的 B-Skeleton 插件系统与声明式 `WorkflowContract` 业务流管线。
 
-> **[查看完整功能列表 ↗](https://vmoranv.github.io/jshookmcp/)**
+> **[查看完整的 36 个能力域与工具参考 ↗](https://vmoranv.github.io/jshookmcp/reference/)**
 
 ## 架构与性能
 
+> [!TIP]
+> **上下文效率基准 (Context Efficiency Benchmark)**：基于 Claude 服务端实测，“Schema 初始化 Context 增量” —— `search` 档 ≈ 3.0K tokens vs `full` 档 ≈ 40.0K+ tokens。
+
 - **渐进式工具发现**：`search_tools` 元工具（BM25 排序）+ `activate_tools` / `activate_domain` + 配置档位升级（`boost_profile`）
 - **search 档行为说明**：`search_tools` 只负责检索与排序，不会自动 `activate_tools`，也不会自动 `boost_profile`；推荐链路是 `search_tools -> activate_tools / activate_domain -> （确有需要时）boost_profile`
 - **单工具不必先升档**：`activate_tools` 可跨当前基座档精确启用单个工具；只有在你接下来会反复使用一整组相关能力时，`boost_profile` 才更合适
@@ -43,14 +74,14 @@
 - **域自发现架构**：运行时扫描 `domains/*/manifest.ts` 替代硬编码导入；新增域只需创建一个 manifest 文件
 - **B-Skeleton 契约**：插件（`PluginContract`）、工作流（`WorkflowContract`）、可观测性（`InstrumentationContract`）的扩展性契约
 - **MCP ToolAnnotations**：每个工具均带有语义标注（`readOnlyHint`、`destructiveHint`、`idempotentHint`、`openWorldHint`），使 AI 协调器能在调用前推理工具安全性与副作用
-- **上下文效率基准**：基于 Claude 服务端实测，`search` 档 ≈ 3K tokens，`full` 档 ≈ 40K+ tokens；数值会随工具与描述变更而变化
 
 ## 注册表快照
 
 下面的内置能力快照由运行时 registry 动态生成，并在 CI 中校验。
 
 <!-- metadata-sync:start -->
-- 包版本：`0.2.8`
+- 包版本：`0.2.9`
+- 内置工具数：`364`
 - 域列表：`adb-bridge`, `antidebug`, `binary-instrument`, `boringssl-inspector`, `browser`, `canvas`, `coordination`, `core`, `cross-domain`, `debugger`, `encoding`, `evidence`, `extension-registry`, `graphql`, `hooks`, `instrumentation`, `macro`, `maintenance`, `memory`, `mojo-ipc`, `network`, `platform`, `process`, `protocol-analysis`, `proxy`, `sandbox`, `shared-state-board`, `skia-capture`, `sourcemap`, `streaming`, `syscall-hook`, `trace`, `transform`, `v8-inspector`, `wasm`, `workflow`
 - 说明：以上数据由运行时 registry 动态生成，不要手改计数。
 <!-- metadata-sync:end -->

package/dist/{AntiCheatDetector-S8VRj-dD.mjs → AntiCheatDetector-BNk-EoBt.mjs}

@@ -1,6 +1,6 @@
-import { t as logger } from "./logger-BmWzC2lM.mjs";
-import { a as GetModuleFileNameEx, b as openProcessForMemory, d as ReadProcessMemory, h as VirtualQueryEx, i as GetModuleBaseName, n as EnumProcessModules, s as GetModuleInformation, t as CloseHandle, u as PAGE } from "./Win32API-Bc0QnQsN.mjs";
-import { PEAnalyzer } from "./PEAnalyzer-CK0xe0Fs.mjs";
+import { t as logger } from "./logger-Dh_xb7_2.mjs";
+import { a as GetModuleFileNameEx, b as openProcessForMemory, d as ReadProcessMemory, h as VirtualQueryEx, i as GetModuleBaseName, n as EnumProcessModules, s as GetModuleInformation, t as CloseHandle, u as PAGE } from "./Win32API-CePkipZY.mjs";
+import { PEAnalyzer } from "./PEAnalyzer-D1lzJ_VG.mjs";
 import { createHash } from "node:crypto";
 import { promises } from "node:fs";
 //#region src/native/AntiCheatDetector.ts

package/dist/{CodeInjector-4Z3ngPoX.mjs → CodeInjector-Cq8q01kp.mjs}

@@ -1,8 +1,8 @@
-import { k as CODE_CAVE_MIN_SIZE } from "./constants-CCvsN80K.mjs";
-import { t as nativeMemoryManager } from "./NativeMemoryManager.impl-CB6gJ0NM.mjs";
-import { _ as WriteProcessMemory, b as openProcessForMemory, d as ReadProcessMemory, f as VirtualAllocEx, h as VirtualQueryEx, l as MEM, m as VirtualProtectEx, p as VirtualFreeEx, t as CloseHandle, u as PAGE } from "./Win32API-Bc0QnQsN.mjs";
-import { n as isExecutable } from "./NativeMemoryManager.utils-BML4q1ry.mjs";
-import { l as FlushInstructionCache } from "./Win32Debug-DUHt9XUn.mjs";
+import { k as CODE_CAVE_MIN_SIZE } from "./constants-B0OANIBL.mjs";
+import { _ as WriteProcessMemory, b as openProcessForMemory, d as ReadProcessMemory, f as VirtualAllocEx, h as VirtualQueryEx, l as MEM, m as VirtualProtectEx, p as VirtualFreeEx, t as CloseHandle, u as PAGE } from "./Win32API-CePkipZY.mjs";
+import { l as FlushInstructionCache } from "./Win32Debug-BvKs-gxc.mjs";
+import { n as isExecutable } from "./NativeMemoryManager.utils-B-FjA2mJ.mjs";
+import { t as nativeMemoryManager } from "./NativeMemoryManager.impl-dZtA1ZGn.mjs";
 import { randomUUID } from "node:crypto";
 //#region src/native/CodeInjector.ts
 /**