@jshookmcp/jshook 0.2.8 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (162) hide show
  1. package/README.md +36 -5
  2. package/README.zh.md +36 -5
  3. package/dist/{AntiCheatDetector-S8VRj-dD.mjs → AntiCheatDetector-CqGDXmfc.mjs} +160 -54
  4. package/dist/{CodeInjector-4Z3ngPoX.mjs → CodeInjector-BdjRfNx7.mjs} +5 -5
  5. package/dist/ConsoleMonitor-DykL3IAw.mjs +2269 -0
  6. package/dist/{DarwinAPI-B8hg_yhz.mjs → DarwinAPI-ETyy0xyo.mjs} +1 -1
  7. package/dist/DetailedDataManager-HT49OrvF.mjs +217 -0
  8. package/dist/EventBus-DFKvADm3.mjs +141 -0
  9. package/dist/EvidenceGraphBridge-318Oi0Lf.mjs +153 -0
  10. package/dist/{ExtensionManager-D5-bO9D8.mjs → ExtensionManager-BDMsY2Dz.mjs} +27 -13
  11. package/dist/{FingerprintManager-BVxFJL2-.mjs → FingerprintManager-BN4UQWnX.mjs} +1 -1
  12. package/dist/{HardwareBreakpoint-DK1yjWkV.mjs → HardwareBreakpoint-Cc2AFq1Y.mjs} +3 -3
  13. package/dist/{HeapAnalyzer-CEbo10xU.mjs → HeapAnalyzer-DruMgsgj.mjs} +21 -21
  14. package/dist/HookGeneratorBuilders.core.generators.storage-CTbB4Lcx.mjs +566 -0
  15. package/dist/InstrumentationSession-DLH0vd-z.mjs +244 -0
  16. package/dist/{MemoryController-DdtnBdD4.mjs → MemoryController-CMtviNW_.mjs} +3 -3
  17. package/dist/{MemoryScanSession-RMixN3bX.mjs → MemoryScanSession-ITgb_NMi.mjs} +81 -78
  18. package/dist/{MemoryScanner-QjK4ld0B.mjs → MemoryScanner-CiL7Z3ey.mjs} +50 -21
  19. package/dist/{NativeMemoryManager.impl-CB6gJ0NM.mjs → NativeMemoryManager.impl-D9Lkovvn.mjs} +20 -56
  20. package/dist/{NativeMemoryManager.utils-BML4q1ry.mjs → NativeMemoryManager.utils-BBlAixF5.mjs} +1 -1
  21. package/dist/{PEAnalyzer-CK0xe0Fs.mjs → PEAnalyzer-DMQ44gen.mjs} +16 -16
  22. package/dist/PageController-BPJNqqBN.mjs +431 -0
  23. package/dist/{PointerChainEngine-Cd73qu5b.mjs → PointerChainEngine-K7wN8Z-w.mjs} +10 -7
  24. package/dist/PrerequisiteError-TuyZIs6n.mjs +20 -0
  25. package/dist/ProcessRegistry-zGg12QbE.mjs +74 -0
  26. package/dist/ResponseBuilder-CJXWmWNw.mjs +143 -0
  27. package/dist/ReverseEvidenceGraph-C02-gXOh.mjs +269 -0
  28. package/dist/ScriptManager-ZuWD-0Jg.mjs +3003 -0
  29. package/dist/{Speedhack-CeF0XmEz.mjs → Speedhack-D-z0umeT.mjs} +2 -2
  30. package/dist/{StructureAnalyzer-D4GkMduU.mjs → StructureAnalyzer-Cav5AVSL.mjs} +9 -6
  31. package/dist/ToolCatalog-5OJdMiF0.mjs +582 -0
  32. package/dist/ToolError-jh9whhMd.mjs +15 -0
  33. package/dist/ToolProbe-DbCFGyrg.mjs +45 -0
  34. package/dist/ToolRegistry-B9krbTtI.mjs +180 -0
  35. package/dist/ToolRouter.policy-BGDAGyeH.mjs +344 -0
  36. package/dist/TraceRecorder-B41Z5XBj.mjs +1286 -0
  37. package/dist/{Win32API-Bc0QnQsN.mjs → Win32API-C2kjj0ze.mjs} +19 -13
  38. package/dist/{Win32Debug-DUHt9XUn.mjs → Win32Debug-CKrGOTpo.mjs} +3 -3
  39. package/dist/WorkflowEngine-DJ6M4opp.mjs +569 -0
  40. package/dist/analysis-BHeJW2Nb.mjs +1234 -0
  41. package/dist/antidebug-BRKeyt27.mjs +1081 -0
  42. package/dist/artifactRetention-CPXkUJXp.mjs +598 -0
  43. package/dist/artifacts-DkfosXH3.mjs +59 -0
  44. package/dist/authorization-schema-DRqyJMSk.mjs +31 -0
  45. package/dist/betterSqlite3-DLSBZodi.mjs +74 -0
  46. package/dist/binary-instrument--V3MAhJ4.mjs +971 -0
  47. package/dist/bind-helpers-ClV34xdn.mjs +42 -0
  48. package/dist/boringssl-inspector-Bo_LOLaS.mjs +180 -0
  49. package/dist/browser-Dx3_S2cG.mjs +4369 -0
  50. package/dist/capabilities-CcHlvWgK.mjs +33 -0
  51. package/dist/concurrency-Drev_Vz9.mjs +41 -0
  52. package/dist/{constants-CCvsN80K.mjs → constants-CDZLOoVv.mjs} +105 -48
  53. package/dist/coordination-DgItD9DL.mjs +259 -0
  54. package/dist/debugger-RS3RSAqs.mjs +1288 -0
  55. package/dist/definitions-BEoYofW5.mjs +47 -0
  56. package/dist/definitions-BRaefg3u.mjs +365 -0
  57. package/dist/definitions-BbkvZkiv.mjs +96 -0
  58. package/dist/definitions-BtWSHJ3o.mjs +17 -0
  59. package/dist/definitions-C1gCHO0i.mjs +43 -0
  60. package/dist/definitions-CDOg_b-l.mjs +138 -0
  61. package/dist/definitions-CVPD9hzZ.mjs +54 -0
  62. package/dist/definitions-Cea8Lgl7.mjs +94 -0
  63. package/dist/definitions-DAgIyjxM.mjs +10 -0
  64. package/dist/definitions-DJA27nsL.mjs +66 -0
  65. package/dist/definitions-DKPFU3LW.mjs +25 -0
  66. package/dist/definitions-DPRpZQ96.mjs +47 -0
  67. package/dist/definitions-DUE5gmdn.mjs +18 -0
  68. package/dist/definitions-DYVjOtxa.mjs +26 -0
  69. package/dist/definitions-DcYLVLCo.mjs +37 -0
  70. package/dist/definitions-Pp5LI2H4.mjs +27 -0
  71. package/dist/definitions-j9KdHVNR.mjs +14 -0
  72. package/dist/definitions-uzkjBwa7.mjs +258 -0
  73. package/dist/definitions-va-AnLuQ.mjs +28 -0
  74. package/dist/encoding-DJeqHmpd.mjs +1079 -0
  75. package/dist/evidence-graph-bridge-DcYizFk2.mjs +136 -0
  76. package/dist/{factory-CibqTNC8.mjs → factory-C90tBff6.mjs} +41 -56
  77. package/dist/flat-target-session-Dgax2Cy3.mjs +29 -0
  78. package/dist/graphql-CoHrhweh.mjs +1197 -0
  79. package/dist/handlers-4jmR0nMs.mjs +898 -0
  80. package/dist/handlers-BAHPxcch.mjs +789 -0
  81. package/dist/handlers-BOs9b907.mjs +2600 -0
  82. package/dist/handlers-BWXEy6ef.mjs +917 -0
  83. package/dist/handlers-Bndn6QvE.mjs +111 -0
  84. package/dist/handlers-BqC4bD4s.mjs +681 -0
  85. package/dist/handlers-BtYq60bM2.mjs +276 -0
  86. package/dist/handlers-BzgcB4iv.mjs +799 -0
  87. package/dist/handlers-CRyRWj2b.mjs +859 -0
  88. package/dist/handlers-CVv2H1uq.mjs +592 -0
  89. package/dist/handlers-Dl5a7JS4.mjs +572 -0
  90. package/dist/handlers-Dx2d7jt7.mjs +2537 -0
  91. package/dist/handlers-Dz9PYsCa.mjs +2805 -0
  92. package/dist/handlers-HujRKC3b.mjs +661 -0
  93. package/dist/handlers.impl-XWXkQfyi.mjs +807 -0
  94. package/dist/hooks-B1B8NRHL.mjs +898 -0
  95. package/dist/index.mjs +491 -259
  96. package/dist/{logger-BmWzC2lM.mjs → logger-Dh_xb7_2.mjs} +14 -6
  97. package/dist/maintenance-PRMkLVRW.mjs +835 -0
  98. package/dist/manifest-67Bok-Si.mjs +58 -0
  99. package/dist/manifest-6lNTMZAB2.mjs +87 -0
  100. package/dist/manifest-B2duEHiH.mjs +90 -0
  101. package/dist/manifest-B6EY9Vm8.mjs +57 -0
  102. package/dist/manifest-B6nKSbyY.mjs +95 -0
  103. package/dist/manifest-BL8AQNPF.mjs +106 -0
  104. package/dist/manifest-BSZvJJmV.mjs +47 -0
  105. package/dist/manifest-BU7qzUyX.mjs +418 -0
  106. package/dist/manifest-Bl62e8WK.mjs +49 -0
  107. package/dist/manifest-Bo5cXjdt.mjs +82 -0
  108. package/dist/manifest-BpS4gtUK.mjs +1347 -0
  109. package/dist/manifest-Bv65_e2W.mjs +101 -0
  110. package/dist/manifest-BytNIF4Z.mjs +117 -0
  111. package/dist/manifest-C-xtsjS3.mjs +81 -0
  112. package/dist/manifest-CDYl7OhA.mjs +66 -0
  113. package/dist/manifest-CRZ3xmkD.mjs +61 -0
  114. package/dist/manifest-CoW6u4Tp.mjs +132 -0
  115. package/dist/manifest-Cq5zN_8A.mjs +50 -0
  116. package/dist/manifest-D7YZM_2e.mjs +194 -0
  117. package/dist/manifest-DE_VrAeQ.mjs +314 -0
  118. package/dist/manifest-DGsXSCpT.mjs +39 -0
  119. package/dist/manifest-DJ2vfEuW.mjs +156 -0
  120. package/dist/manifest-DPXDYhEu.mjs +80 -0
  121. package/dist/manifest-Dd4fQb0a.mjs +322 -0
  122. package/dist/manifest-Deq6opGg.mjs +223 -0
  123. package/dist/manifest-DfJTafJK.mjs +37 -0
  124. package/dist/manifest-DgOdgN_j.mjs +50 -0
  125. package/dist/manifest-DlbMW4v4.mjs +47 -0
  126. package/dist/manifest-DmVfbH0w.mjs +374 -0
  127. package/dist/manifest-Dog6Ddjr.mjs +109 -0
  128. package/dist/manifest-DvgU5FWb.mjs +58 -0
  129. package/dist/manifest-HsfDBs7j.mjs +50 -0
  130. package/dist/manifest-I8oQHvCG.mjs +186 -0
  131. package/dist/manifest-NvH_a-av.mjs +786 -0
  132. package/dist/manifest-cEJU1v0Z.mjs +129 -0
  133. package/dist/manifest-wOl5XLB12.mjs +112 -0
  134. package/dist/modules-tZozf0LQ.mjs +10635 -0
  135. package/dist/mojo-ipc-DXNEXEqb.mjs +640 -0
  136. package/dist/network-CPVvwvFg.mjs +3852 -0
  137. package/dist/{artifacts-BbdOMET5.mjs → outputPaths-um7lCRY3.mjs} +219 -216
  138. package/dist/parse-args-B4cY5Vx5.mjs +39 -0
  139. package/dist/platform-CYeFoTWp.mjs +2161 -0
  140. package/dist/process-BTbgcVc6.mjs +1306 -0
  141. package/dist/proxy-r8YN6nP1.mjs +192 -0
  142. package/dist/registry-Bl8ZQW61.mjs +34 -0
  143. package/dist/response-CWhh2aLo.mjs +34 -0
  144. package/dist/server/plugin-api.mjs +2 -2
  145. package/dist/shared-state-board-BoZnSoj-.mjs +586 -0
  146. package/dist/sourcemap-BIDHUVXy.mjs +934 -0
  147. package/dist/ssrf-policy-Dsqd-DTX.mjs +166 -0
  148. package/dist/streaming-Dal6utPp.mjs +725 -0
  149. package/dist/tool-builder-BHJp32mV.mjs +186 -0
  150. package/dist/transform-DRVgGG90.mjs +1011 -0
  151. package/dist/types-Bx92KJfT.mjs +4 -0
  152. package/dist/wasm-BYx5UOeG.mjs +1044 -0
  153. package/dist/webcrack-Be0_FccV.mjs +747 -0
  154. package/dist/workflow-BpuKEtvn.mjs +725 -0
  155. package/package.json +82 -49
  156. package/dist/ExtensionManager-CPTJhHFg.mjs +0 -2
  157. package/dist/ToolCatalog-Bq4V2sbJ.mjs +0 -67201
  158. package/dist/{CacheAdapters-CzFNpD9a.mjs → CacheAdapters-jJFy20G-.mjs} +0 -0
  159. package/dist/{StealthVerifier-BzBCFiwx.mjs → StealthVerifier-BWmPgQsv.mjs} +0 -0
  160. package/dist/{VersionDetector-CNXcvD46.mjs → VersionDetector-K3V4vGsw.mjs} +0 -0
  161. package/dist/{formatAddress-ChCSIRWT.mjs → formatAddress-nnMvEohD.mjs} +0 -0
  162. package/dist/{types-BBjOqye-.mjs → types-DDBWs9UP.mjs} +1 -1
@@ -0,0 +1,859 @@
1
+ import { xr as UNIDBG_TIMEOUT_MS } from "./constants-CDZLOoVv.mjs";
2
+ import { a as invokePlugin, c as FridaSession, i as getAvailablePlugins, n as UnidbgRunner, o as HookCodeGenerator, r as HookGenerator, s as GhidraAnalyzer } from "./binary-instrument--V3MAhJ4.mjs";
3
+ import { n as capabilityReport, t as capabilityFailure } from "./capabilities-CcHlvWgK.mjs";
4
+ import { access } from "node:fs/promises";
5
+ import { execFile } from "node:child_process";
6
+ //#region src/server/domains/binary-instrument/handlers/shared.ts
7
+ /**
8
+ * Shared types and helpers for binary-instrument sub-handlers.
9
+ */
10
+ const UNIDBG_MAX_BUFFER_BYTES = 8 * 1024 * 1024;
11
+ const LEGACY_PLUGIN_FIXES = {
12
+ plugin_frida_bridge: "Install @jshookmcpextension/plugin-frida-bridge and reload extensions.",
13
+ plugin_ghidra_bridge: "Install @jshookmcpextension/plugin-ghidra-bridge and reload extensions.",
14
+ plugin_ida_bridge: "Install @jshookmcpextension/plugin-ida-bridge and reload extensions.",
15
+ plugin_jadx_bridge: "Install @jshookmcpextension/plugin-jadx-bridge and reload extensions."
16
+ };
17
+ function textResponse(text) {
18
+ return { content: [{
19
+ type: "text",
20
+ text
21
+ }] };
22
+ }
23
+ function jsonResponse(payload) {
24
+ return textResponse(JSON.stringify(payload));
25
+ }
26
+ function readRequiredString(args, key) {
27
+ const value = args[key];
28
+ if (typeof value !== "string" || value.trim().length === 0) throw new Error(`${key} is required`);
29
+ return value.trim();
30
+ }
31
+ function readOptionalString(args, key) {
32
+ const value = args[key];
33
+ return typeof value === "string" && value.trim().length > 0 ? value.trim() : void 0;
34
+ }
35
+ function readOptionalNumber(args, key) {
36
+ const value = args[key];
37
+ return typeof value === "number" && Number.isFinite(value) ? value : void 0;
38
+ }
39
+ function readStringArray(args, key) {
40
+ const value = args[key];
41
+ if (!Array.isArray(value)) return [];
42
+ return value.filter((entry) => typeof entry === "string" && entry.length > 0);
43
+ }
44
+ function isRecord(value) {
45
+ return typeof value === "object" && value !== null;
46
+ }
47
+ function isServerContext(value) {
48
+ return isRecord(value) && value["extensionPluginsById"] instanceof Map && value["extensionPluginRuntimeById"] instanceof Map;
49
+ }
50
+ function hasInstalledLegacyPlugin(context, pluginId) {
51
+ if (!context) return void 0;
52
+ const installed = context.extensionPluginsById;
53
+ if (!(installed instanceof Map)) return void 0;
54
+ return installed.has(pluginId);
55
+ }
56
+ function getLegacyPluginFix(pluginId) {
57
+ return LEGACY_PLUGIN_FIXES[pluginId];
58
+ }
59
+ function getLegacyPluginStatus(context, pluginId) {
60
+ const installed = hasInstalledLegacyPlugin(context, pluginId);
61
+ if (installed === true) return {
62
+ status: "available",
63
+ fix: getLegacyPluginFix(pluginId)
64
+ };
65
+ if (installed === false) return {
66
+ status: "unavailable",
67
+ reason: `Plugin ${pluginId.replaceAll("_", "-")} is not installed`,
68
+ fix: getLegacyPluginFix(pluginId)
69
+ };
70
+ return {
71
+ status: "unknown",
72
+ reason: "Extension plugin registry is not available in the current server context",
73
+ fix: "Run inside the full MCP server with extension support enabled."
74
+ };
75
+ }
76
+ async function invokeLegacyPlugin(context, pluginId, toolName, args) {
77
+ const pluginStatus = getLegacyPluginStatus(context, pluginId);
78
+ if (!context || pluginStatus.status !== "available") return jsonResponse({
79
+ ...capabilityFailure(toolName, pluginId, pluginStatus.reason ?? `Plugin ${pluginId.replaceAll("_", "-")} is not available`, pluginStatus.fix),
80
+ status: pluginStatus.status
81
+ });
82
+ const result = await invokePlugin(context, {
83
+ pluginId,
84
+ toolName,
85
+ args
86
+ });
87
+ if (result.success) return jsonResponse(result);
88
+ return jsonResponse({ ...capabilityFailure(toolName, pluginId, result.error ?? "Plugin invocation failed", pluginStatus.fix) });
89
+ }
90
+ function readHookOptions(args, key) {
91
+ const raw = args[key];
92
+ if (!isRecord(raw)) return void 0;
93
+ const options = {};
94
+ const includeArgs = raw["includeArgs"];
95
+ const includeRetAddr = raw["includeRetAddr"];
96
+ if (typeof includeArgs === "boolean") options.includeArgs = includeArgs;
97
+ if (typeof includeRetAddr === "boolean") options.includeRetAddr = includeRetAddr;
98
+ return options;
99
+ }
100
+ function parsePid(target) {
101
+ if (!/^\d+$/.test(target)) return null;
102
+ const parsed = Number.parseInt(target, 10);
103
+ return Number.isNaN(parsed) ? null : parsed;
104
+ }
105
+ function makeMockId(value) {
106
+ return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 24);
107
+ }
108
+ async function getUnidbgAvailability() {
109
+ const jarPath = process.env["UNIDBG_JAR"] ?? "";
110
+ if (jarPath.length === 0) return {
111
+ available: false,
112
+ reason: "UNIDBG_JAR is not configured",
113
+ command: "java",
114
+ jarPath: ""
115
+ };
116
+ try {
117
+ await access(jarPath);
118
+ } catch {
119
+ return {
120
+ available: false,
121
+ reason: `UNIDBG_JAR not found: ${jarPath}`,
122
+ command: "java",
123
+ jarPath
124
+ };
125
+ }
126
+ return {
127
+ available: true,
128
+ reason: "",
129
+ command: "java",
130
+ jarPath
131
+ };
132
+ }
133
+ function execFileUtf8(file, args, timeoutMs) {
134
+ return new Promise((resolve, reject) => {
135
+ execFile(file, args, {
136
+ timeout: timeoutMs,
137
+ windowsHide: true,
138
+ maxBuffer: UNIDBG_MAX_BUFFER_BYTES,
139
+ encoding: "utf8"
140
+ }, (error, stdout, stderr) => {
141
+ if (error) {
142
+ reject(error);
143
+ return;
144
+ }
145
+ resolve({
146
+ stdout: typeof stdout === "string" ? stdout : "",
147
+ stderr: typeof stderr === "string" ? stderr : ""
148
+ });
149
+ });
150
+ });
151
+ }
152
+ function isGhidraAnalysisOutput(value) {
153
+ return isRecord(value) && Array.isArray(value["functions"]) && Array.isArray(value["imports"]);
154
+ }
155
+ function toHookTemplates(value) {
156
+ const templates = [];
157
+ for (const entry of value) {
158
+ if (!isRecord(entry)) continue;
159
+ const functionName = readStringRecordField(entry, "functionName");
160
+ const hookCode = readStringRecordField(entry, "hookCode");
161
+ const description = readStringRecordField(entry, "description");
162
+ const parameters = parseHookParameters(entry["parameters"]);
163
+ if (!functionName || !hookCode || !description) continue;
164
+ templates.push({
165
+ functionName,
166
+ hookCode,
167
+ description,
168
+ parameters
169
+ });
170
+ }
171
+ return templates;
172
+ }
173
+ function readStringRecordField(record, key) {
174
+ const value = record[key];
175
+ return typeof value === "string" ? value : void 0;
176
+ }
177
+ function parseHookParameters(value) {
178
+ if (!Array.isArray(value)) return [];
179
+ const parameters = [];
180
+ for (const entry of value) {
181
+ if (!isRecord(entry)) continue;
182
+ const name = readStringRecordField(entry, "name");
183
+ const type = readStringRecordField(entry, "type");
184
+ const description = readStringRecordField(entry, "description");
185
+ if (name && type && description) parameters.push({
186
+ name,
187
+ type,
188
+ description
189
+ });
190
+ }
191
+ return parameters;
192
+ }
193
+ //#endregion
194
+ //#region src/server/domains/binary-instrument/handlers/frida-handlers.ts
195
+ /**
196
+ * Frida sub-handler — attach, runScript, detach, listSessions, generateScript,
197
+ * enumerateModules, enumerateFunctions, findSymbols.
198
+ */
199
+ var FridaHandlers = class {
200
+ state;
201
+ constructor(state) {
202
+ this.state = state;
203
+ }
204
+ async handleFridaAttach(args) {
205
+ const legacyPid = readOptionalString(args, "pid");
206
+ if (!readOptionalString(args, "target") && legacyPid) return invokeLegacyPlugin(this.state.context, "plugin_frida_bridge", "frida_attach", args);
207
+ const target = readRequiredString(args, "target");
208
+ const frida = this.getFridaSession();
209
+ const availability = await frida.getAvailability();
210
+ if (!availability.available) {
211
+ const sessionId = `mock-frida-${makeMockId(target)}`;
212
+ return jsonResponse({
213
+ success: false,
214
+ available: false,
215
+ capability: "frida_cli",
216
+ fix: "Install frida-tools and ensure the frida CLI is on PATH.",
217
+ target,
218
+ sessionId,
219
+ reason: availability.reason ?? "Frida CLI is not available",
220
+ sessions: [{
221
+ id: sessionId,
222
+ target,
223
+ pid: parsePid(target),
224
+ status: "unavailable"
225
+ }]
226
+ });
227
+ }
228
+ let sessionId;
229
+ try {
230
+ sessionId = await frida.attach(target);
231
+ } catch (error) {
232
+ return jsonResponse({
233
+ success: false,
234
+ available: true,
235
+ capability: "frida_attach",
236
+ fix: "Run the server elevated or choose a target process that allows Frida injection.",
237
+ target,
238
+ reason: error instanceof Error ? error.message : String(error),
239
+ sessions: frida.listSessions()
240
+ });
241
+ }
242
+ this.state.context?.eventBus.emit("frida:attached", {
243
+ target,
244
+ sessionId,
245
+ timestamp: (/* @__PURE__ */ new Date()).toISOString()
246
+ });
247
+ return jsonResponse({
248
+ success: true,
249
+ available: true,
250
+ target,
251
+ sessionId,
252
+ sessions: frida.listSessions()
253
+ });
254
+ }
255
+ async handleFridaEnumerateModules(args) {
256
+ const sessionId = readRequiredString(args, "sessionId");
257
+ const frida = this.getFridaSession();
258
+ const availability = await frida.getAvailability();
259
+ if (!availability.available) return jsonResponse({
260
+ available: false,
261
+ capability: "frida_cli",
262
+ fix: "Install frida-tools and ensure the frida CLI is on PATH.",
263
+ sessionId,
264
+ reason: availability.reason ?? "Frida CLI is not available",
265
+ modules: [{
266
+ name: "mock-module",
267
+ base: "0x0",
268
+ size: 0,
269
+ path: "<unavailable>"
270
+ }]
271
+ });
272
+ if (!frida.useSession(sessionId)) return jsonResponse({
273
+ available: false,
274
+ capability: "frida_session",
275
+ fix: "Call frida_attach first and reuse the returned sessionId.",
276
+ sessionId,
277
+ reason: `Unknown Frida session: ${sessionId}`,
278
+ modules: []
279
+ });
280
+ const modules = await frida.enumerateModules();
281
+ const diagnostics = frida.getSessionDiagnostics(sessionId);
282
+ if (diagnostics?.status === "error" && diagnostics.lastError) return jsonResponse({
283
+ success: false,
284
+ available: true,
285
+ sessionId,
286
+ reason: diagnostics.lastError,
287
+ modules
288
+ });
289
+ return jsonResponse({
290
+ success: true,
291
+ available: true,
292
+ sessionId,
293
+ modules
294
+ });
295
+ }
296
+ async handleFridaRunScript(args) {
297
+ const sessionId = readOptionalString(args, "sessionId");
298
+ if (!sessionId) return textResponse("Missing required string argument: sessionId");
299
+ const script = readRequiredString(args, "script");
300
+ const frida = this.getFridaSession();
301
+ const availability = await frida.getAvailability();
302
+ if (!availability.available) return {
303
+ available: false,
304
+ capability: "frida_cli",
305
+ fix: "Install frida-tools and ensure the frida CLI is on PATH.",
306
+ sessionId,
307
+ reason: availability.reason ?? "Frida CLI is not available",
308
+ execution: {
309
+ output: "",
310
+ error: "Frida unavailable"
311
+ }
312
+ };
313
+ if (!frida.useSession(sessionId)) return {
314
+ available: false,
315
+ capability: "frida_session",
316
+ fix: "Call frida_attach first and reuse the returned sessionId.",
317
+ sessionId,
318
+ reason: `Unknown Frida session: ${sessionId}`,
319
+ execution: {
320
+ output: "",
321
+ error: "Unknown session"
322
+ }
323
+ };
324
+ const execution = await frida.executeScript(script);
325
+ if (execution.error) return jsonResponse({
326
+ success: false,
327
+ available: true,
328
+ sessionId,
329
+ reason: execution.error,
330
+ execution
331
+ });
332
+ return jsonResponse({
333
+ success: true,
334
+ available: true,
335
+ sessionId,
336
+ execution
337
+ });
338
+ }
339
+ async handleFridaDetach(args) {
340
+ const sessionId = readOptionalString(args, "sessionId");
341
+ if (!sessionId) return textResponse("Missing required string argument: sessionId");
342
+ const frida = this.getFridaSession();
343
+ if ((await frida.getAvailability()).available && frida.hasSession(sessionId)) {
344
+ frida.useSession(sessionId);
345
+ await frida.detach();
346
+ return jsonResponse({
347
+ success: true,
348
+ sessionId,
349
+ detached: true
350
+ });
351
+ }
352
+ return invokeLegacyPlugin(this.state.context, "plugin_frida_bridge", "frida_detach", args);
353
+ }
354
+ async handleFridaListSessions(_args) {
355
+ const frida = this.getFridaSession();
356
+ const availability = await frida.getAvailability();
357
+ const sessions = frida.listSessions();
358
+ if (availability.available) return jsonResponse({
359
+ success: true,
360
+ available: true,
361
+ sessions,
362
+ count: sessions.length
363
+ });
364
+ const pluginStatus = getLegacyPluginStatus(this.state.context, "plugin_frida_bridge");
365
+ if (sessions.length > 0 || pluginStatus.status === "unavailable") return jsonResponse({
366
+ success: true,
367
+ available: false,
368
+ capability: "frida_cli",
369
+ reason: availability.reason ?? "Frida CLI is not available",
370
+ fix: "Install frida-tools and ensure the frida CLI is on PATH.",
371
+ sessions,
372
+ count: sessions.length
373
+ });
374
+ return invokeLegacyPlugin(this.state.context, "plugin_frida_bridge", "frida_list_sessions", _args);
375
+ }
376
+ async handleFridaGenerateScript(args) {
377
+ const target = readOptionalString(args, "target") ?? "unknown";
378
+ const template = readOptionalString(args, "template") ?? "trace";
379
+ const functionName = readOptionalString(args, "functionName") ?? "target_function";
380
+ const templates = [{
381
+ functionName,
382
+ hookCode: `console.log('[${template}] ${functionName} called');`,
383
+ description: `${template} hook for ${functionName}`,
384
+ parameters: []
385
+ }];
386
+ return jsonResponse({
387
+ success: true,
388
+ target,
389
+ template,
390
+ functionName,
391
+ script: this.state.hookCodeGenerator.exportScript(templates, "frida")
392
+ });
393
+ }
394
+ async handleFridaEnumerateFunctions(args) {
395
+ const sessionId = readRequiredString(args, "sessionId");
396
+ const moduleName = readRequiredString(args, "moduleName");
397
+ const frida = this.getFridaSession();
398
+ const availability = await frida.getAvailability();
399
+ if (!availability.available) return {
400
+ available: false,
401
+ capability: "frida_cli",
402
+ fix: "Install frida-tools and ensure the frida CLI is on PATH.",
403
+ sessionId,
404
+ moduleName,
405
+ reason: availability.reason ?? "Frida CLI is not available",
406
+ functions: []
407
+ };
408
+ if (!frida.useSession(sessionId)) return {
409
+ available: false,
410
+ capability: "frida_session",
411
+ fix: "Call frida_attach first and reuse the returned sessionId.",
412
+ sessionId,
413
+ reason: `Unknown Frida session: ${sessionId}`,
414
+ functions: []
415
+ };
416
+ const functions = await frida.enumerateFunctions(moduleName);
417
+ const diagnostics = frida.getSessionDiagnostics(sessionId);
418
+ if (diagnostics?.status === "error" && diagnostics.lastError) return jsonResponse({
419
+ success: false,
420
+ available: true,
421
+ sessionId,
422
+ moduleName,
423
+ reason: diagnostics.lastError,
424
+ functions,
425
+ count: functions.length
426
+ });
427
+ return jsonResponse({
428
+ success: true,
429
+ available: true,
430
+ sessionId,
431
+ moduleName,
432
+ functions,
433
+ count: functions.length
434
+ });
435
+ }
436
+ async handleFridaFindSymbols(args) {
437
+ const sessionId = readRequiredString(args, "sessionId");
438
+ const pattern = readRequiredString(args, "pattern");
439
+ const frida = this.getFridaSession();
440
+ const availability = await frida.getAvailability();
441
+ if (!availability.available) return {
442
+ available: false,
443
+ capability: "frida_cli",
444
+ fix: "Install frida-tools and ensure the frida CLI is on PATH.",
445
+ sessionId,
446
+ pattern,
447
+ reason: availability.reason ?? "Frida CLI is not available",
448
+ symbols: []
449
+ };
450
+ if (!frida.useSession(sessionId)) return {
451
+ available: false,
452
+ capability: "frida_session",
453
+ fix: "Call frida_attach first and reuse the returned sessionId.",
454
+ sessionId,
455
+ reason: `Unknown Frida session: ${sessionId}`,
456
+ symbols: []
457
+ };
458
+ const symbols = await frida.findSymbols(pattern);
459
+ const diagnostics = frida.getSessionDiagnostics(sessionId);
460
+ if (diagnostics?.status === "error" && diagnostics.lastError) return jsonResponse({
461
+ success: false,
462
+ available: true,
463
+ sessionId,
464
+ pattern,
465
+ reason: diagnostics.lastError,
466
+ symbols,
467
+ count: symbols.length
468
+ });
469
+ return jsonResponse({
470
+ success: true,
471
+ available: true,
472
+ sessionId,
473
+ pattern,
474
+ symbols,
475
+ count: symbols.length
476
+ });
477
+ }
478
+ getFridaSession() {
479
+ if (!this.state.fridaSession) this.state.fridaSession = new FridaSession();
480
+ return this.state.fridaSession;
481
+ }
482
+ };
483
+ //#endregion
484
+ //#region src/server/domains/binary-instrument/handlers/analysis-handlers.ts
485
+ /**
486
+ * Static analysis sub-handler — Ghidra, IDA, JADX, Unidbg, hooks, plugins.
487
+ */
488
+ var AnalysisHandlers = class {
489
+ state;
490
+ constructor(state) {
491
+ this.state = state;
492
+ }
493
+ async handleGhidraAnalyze(args) {
494
+ const legacyTargetPath = readOptionalString(args, "targetPath");
495
+ if (!readOptionalString(args, "binaryPath") && legacyTargetPath) return invokeLegacyPlugin(this.state.context, "plugin_ghidra_bridge", "ghidra_analyze", args);
496
+ const binaryPath = readRequiredString(args, "binaryPath");
497
+ const timeout = readOptionalNumber(args, "timeout");
498
+ const ghidra = this.getGhidraAnalyzer();
499
+ const availability = await ghidra.getAvailability();
500
+ const analysis = await ghidra.analyze(binaryPath, timeout !== void 0 ? { timeout } : void 0);
501
+ if (!availability.available) return {
502
+ available: false,
503
+ capability: "ghidra_headless",
504
+ fix: "Install Ghidra and ensure analyzeHeadless is on PATH.",
505
+ binaryPath,
506
+ reason: availability.reason ?? "Ghidra analyzeHeadless is not available",
507
+ analysis
508
+ };
509
+ return {
510
+ available: true,
511
+ binaryPath,
512
+ analysis
513
+ };
514
+ }
515
+ async handleGhidraDecompile(args) {
516
+ return invokeLegacyPlugin(this.state.context, "plugin_ghidra_bridge", "ghidra_decompile", args);
517
+ }
518
+ async handleIdaDecompile(args) {
519
+ return invokeLegacyPlugin(this.state.context, "plugin_ida_bridge", "ida_decompile", args);
520
+ }
521
+ async handleJadxDecompile(args) {
522
+ return invokeLegacyPlugin(this.state.context, "plugin_jadx_bridge", "jadx_decompile", args);
523
+ }
524
+ async handleGenerateHooks(args) {
525
+ const legacyGhidraOutput = readOptionalString(args, "ghidraOutput");
526
+ if (legacyGhidraOutput) return this.handleLegacyGenerateHooks(legacyGhidraOutput);
527
+ const legacyGhidraOutputObj = args["ghidraOutput"];
528
+ if (isRecord(legacyGhidraOutputObj)) return this.handleLegacyGenerateHooks(JSON.stringify(legacyGhidraOutputObj));
529
+ const symbols = readStringArray(args, "symbols");
530
+ if (symbols.length === 0) return textResponse("symbols or ghidraOutput is required");
531
+ const options = readHookOptions(args, "options");
532
+ const script = this.getHookGenerator().generateFridaHookScript(symbols, options);
533
+ return jsonResponse({
534
+ available: true,
535
+ symbolCount: symbols.length,
536
+ script
537
+ });
538
+ }
539
+ async handleExportHookScript(args) {
540
+ const rawTemplates = readOptionalString(args, "hookTemplates");
541
+ if (!rawTemplates) {
542
+ const generated = this.state.hookCodeGenerator.exportScript([], "frida");
543
+ return jsonResponse({
544
+ format: "frida",
545
+ hookCount: 0,
546
+ script: generated.includes("Java.perform") ? generated : `Java.perform(function() {\n${generated}\n});`
547
+ });
548
+ }
549
+ try {
550
+ const parsed = JSON.parse(rawTemplates);
551
+ if (!Array.isArray(parsed)) return textResponse("Invalid JSON");
552
+ const templates = toHookTemplates(parsed);
553
+ const script = this.state.hookCodeGenerator.exportScript(templates, "frida");
554
+ return jsonResponse({
555
+ format: "frida",
556
+ hookCount: templates.length,
557
+ script
558
+ });
559
+ } catch {
560
+ return textResponse("Invalid JSON");
561
+ }
562
+ }
563
+ async handleUnidbgEmulate(args) {
564
+ const binaryPath = readRequiredString(args, "binaryPath");
565
+ const functionName = readRequiredString(args, "functionName");
566
+ const invokeArgs = readStringArray(args, "args");
567
+ const availability = await getUnidbgAvailability();
568
+ if (!availability.available) return {
569
+ available: false,
570
+ capability: "unidbg_jar",
571
+ fix: "Set UNIDBG_JAR to a reachable Unidbg JAR path.",
572
+ binaryPath,
573
+ functionName,
574
+ args: invokeArgs,
575
+ reason: availability.reason,
576
+ result: {
577
+ returnValue: "0x0",
578
+ stdout: "",
579
+ stderr: "",
580
+ trace: ["mock-unidbg-unavailable"]
581
+ }
582
+ };
583
+ const result = await execFileUtf8(availability.command, [
584
+ "-jar",
585
+ availability.jarPath,
586
+ binaryPath,
587
+ functionName,
588
+ ...invokeArgs
589
+ ], UNIDBG_TIMEOUT_MS);
590
+ return {
591
+ available: true,
592
+ binaryPath,
593
+ functionName,
594
+ args: invokeArgs,
595
+ result: {
596
+ returnValue: "0x0",
597
+ stdout: result.stdout.trim(),
598
+ stderr: result.stderr.trim(),
599
+ trace: []
600
+ }
601
+ };
602
+ }
603
+ async handleUnidbgLaunch(args) {
604
+ const soPath = readOptionalString(args, "soPath");
605
+ if (!soPath) return textResponse("Missing required string argument: soPath");
606
+ const arch = readOptionalString(args, "arch") ?? "arm";
607
+ try {
608
+ const result = await this.state.unidbgRunner.launch(soPath, arch);
609
+ return {
610
+ available: true,
611
+ sessionId: result.sessionId,
612
+ soPath: result.soPath,
613
+ arch: result.arch,
614
+ sessions: this.state.unidbgRunner.listSessions()
615
+ };
616
+ } catch (error) {
617
+ return {
618
+ available: false,
619
+ capability: "unidbg_jar",
620
+ fix: "Set UNIDBG_JAR to a reachable Unidbg JAR path and retry.",
621
+ soPath,
622
+ arch,
623
+ reason: error instanceof Error ? error.message : String(error),
624
+ sessions: this.state.unidbgRunner.listSessions()
625
+ };
626
+ }
627
+ }
628
+ async handleUnidbgCall(args) {
629
+ const sessionId = readOptionalString(args, "sessionId");
630
+ if (!sessionId) return textResponse("Missing required string argument: sessionId");
631
+ const functionName = readOptionalString(args, "functionName");
632
+ if (!functionName) return textResponse("Missing required string argument: functionName");
633
+ const callArgs = isRecord(args["args"]) ? args["args"] : {};
634
+ try {
635
+ return jsonResponse(await this.state.unidbgRunner.callFunction(sessionId, functionName, callArgs));
636
+ } catch (error) {
637
+ const message = error instanceof Error ? error.message : String(error);
638
+ return textResponse(message.startsWith("No unidbg session found") ? `${message} (not found)` : message);
639
+ }
640
+ }
641
+ async handleUnidbgTrace(args) {
642
+ const sessionId = readOptionalString(args, "sessionId");
643
+ if (!sessionId) return textResponse("Missing required string argument: sessionId");
644
+ try {
645
+ return jsonResponse(await this.state.unidbgRunner.trace(sessionId));
646
+ } catch (error) {
647
+ const message = error instanceof Error ? error.message : String(error);
648
+ return textResponse(message.startsWith("No unidbg session found") ? `${message} (not found)` : message);
649
+ }
650
+ }
651
+ async handleGetAvailablePlugins(_args) {
652
+ const plugins = this.state.context ? getAvailablePlugins(this.state.context) : [];
653
+ return jsonResponse({
654
+ plugins,
655
+ count: plugins.length
656
+ });
657
+ }
658
+ getGhidraAnalyzer() {
659
+ if (!this.state.ghidra) this.state.ghidra = new GhidraAnalyzer();
660
+ return this.state.ghidra;
661
+ }
662
+ getHookGenerator() {
663
+ if (!this.state.hookGen) this.state.hookGen = new HookGenerator();
664
+ return this.state.hookGen;
665
+ }
666
+ handleLegacyGenerateHooks(ghidraOutput) {
667
+ let parsed;
668
+ try {
669
+ parsed = JSON.parse(ghidraOutput);
670
+ } catch {
671
+ return textResponse("Invalid JSON");
672
+ }
673
+ if (!isGhidraAnalysisOutput(parsed)) return textResponse("ghidraOutput is required");
674
+ const hooks = this.state.hookCodeGenerator.generateHooks(parsed);
675
+ return jsonResponse({
676
+ count: hooks.length,
677
+ hooks
678
+ });
679
+ }
680
+ };
681
+ //#endregion
682
+ //#region src/server/domains/binary-instrument/handlers/capability-handlers.ts
683
+ var CapabilityHandlers = class {
684
+ constructor(state) {
685
+ this.state = state;
686
+ }
687
+ async handleBinaryInstrumentCapabilities() {
688
+ const fridaAvailability = await this.getFridaSession().getAvailability();
689
+ const ghidraAvailability = await this.getGhidraAnalyzer().getAvailability();
690
+ const unidbgAvailability = await getUnidbgAvailability();
691
+ return jsonResponse(capabilityReport("binary_instrument_capabilities", [
692
+ {
693
+ capability: "frida_cli",
694
+ status: fridaAvailability.available ? "available" : "unavailable",
695
+ reason: fridaAvailability.reason,
696
+ fix: fridaAvailability.available ? void 0 : "Install frida-tools and ensure the frida CLI is on PATH.",
697
+ details: {
698
+ tools: [
699
+ "frida_attach",
700
+ "frida_enumerate_modules",
701
+ "frida_run_script",
702
+ "frida_enumerate_functions",
703
+ "frida_find_symbols"
704
+ ],
705
+ ...fridaAvailability.path ? { path: fridaAvailability.path } : {},
706
+ ...fridaAvailability.version ? { version: fridaAvailability.version } : {}
707
+ }
708
+ },
709
+ {
710
+ capability: "plugin_frida_bridge",
711
+ ...getLegacyPluginStatus(this.state.context, "plugin_frida_bridge"),
712
+ details: { tools: [
713
+ "frida_attach",
714
+ "frida_detach",
715
+ "frida_list_sessions"
716
+ ] }
717
+ },
718
+ {
719
+ capability: "ghidra_headless",
720
+ status: ghidraAvailability.available ? "available" : "unavailable",
721
+ reason: ghidraAvailability.reason,
722
+ fix: ghidraAvailability.available ? void 0 : "Install Ghidra and ensure analyzeHeadless is on PATH.",
723
+ details: {
724
+ tools: ["ghidra_analyze"],
725
+ ...ghidraAvailability.path ? { path: ghidraAvailability.path } : {},
726
+ ...ghidraAvailability.version ? { version: ghidraAvailability.version } : {}
727
+ }
728
+ },
729
+ {
730
+ capability: "plugin_ghidra_bridge",
731
+ ...getLegacyPluginStatus(this.state.context, "plugin_ghidra_bridge"),
732
+ details: { tools: ["ghidra_decompile"] }
733
+ },
734
+ {
735
+ capability: "plugin_ida_bridge",
736
+ ...getLegacyPluginStatus(this.state.context, "plugin_ida_bridge"),
737
+ details: { tools: ["ida_decompile"] }
738
+ },
739
+ {
740
+ capability: "plugin_jadx_bridge",
741
+ ...getLegacyPluginStatus(this.state.context, "plugin_jadx_bridge"),
742
+ details: { tools: ["jadx_decompile"] }
743
+ },
744
+ {
745
+ capability: "unidbg_jar",
746
+ status: unidbgAvailability.available ? "available" : "unavailable",
747
+ reason: unidbgAvailability.reason || void 0,
748
+ fix: unidbgAvailability.available ? void 0 : "Set UNIDBG_JAR to a reachable Unidbg JAR path.",
749
+ details: {
750
+ tools: [
751
+ "unidbg_emulate",
752
+ "unidbg_launch",
753
+ "unidbg_call",
754
+ "unidbg_trace"
755
+ ],
756
+ command: unidbgAvailability.command,
757
+ jarPath: unidbgAvailability.jarPath
758
+ }
759
+ }
760
+ ]));
761
+ }
762
+ getFridaSession() {
763
+ if (!this.state.fridaSession) this.state.fridaSession = new FridaSession();
764
+ return this.state.fridaSession;
765
+ }
766
+ getGhidraAnalyzer() {
767
+ if (!this.state.ghidra) this.state.ghidra = new GhidraAnalyzer();
768
+ return this.state.ghidra;
769
+ }
770
+ };
771
+ //#endregion
772
+ //#region src/server/domains/binary-instrument/handlers.impl.core.ts
773
+ /**
774
+ * BinaryInstrument domain — composition facade.
775
+ *
776
+ * Frida operations in ./handlers/frida-handlers.ts.
777
+ * Analysis/unidbg/hook operations in ./handlers/analysis-handlers.ts.
778
+ */
779
+ var BinaryInstrumentHandlers = class {
780
+ state;
781
+ frida;
782
+ analysis;
783
+ capabilities;
784
+ constructor(first, second, third) {
785
+ this.state = {
786
+ hookCodeGenerator: new HookCodeGenerator(),
787
+ unidbgRunner: new UnidbgRunner()
788
+ };
789
+ if (first instanceof FridaSession) this.state.fridaSession = first;
790
+ else if (isServerContext(first)) this.state.context = first;
791
+ if (second) this.state.ghidra = second;
792
+ if (third) this.state.hookGen = third;
793
+ this.frida = new FridaHandlers(this.state);
794
+ this.analysis = new AnalysisHandlers(this.state);
795
+ this.capabilities = new CapabilityHandlers(this.state);
796
+ }
797
+ handleBinaryInstrumentCapabilities() {
798
+ return this.capabilities.handleBinaryInstrumentCapabilities();
799
+ }
800
+ handleFridaAttach(args) {
801
+ return this.frida.handleFridaAttach(args);
802
+ }
803
+ handleFridaEnumerateModules(args) {
804
+ return this.frida.handleFridaEnumerateModules(args);
805
+ }
806
+ handleFridaRunScript(args) {
807
+ return this.frida.handleFridaRunScript(args);
808
+ }
809
+ handleFridaDetach(args) {
810
+ return this.frida.handleFridaDetach(args);
811
+ }
812
+ handleFridaListSessions(args) {
813
+ return this.frida.handleFridaListSessions(args);
814
+ }
815
+ handleFridaGenerateScript(args) {
816
+ return this.frida.handleFridaGenerateScript(args);
817
+ }
818
+ handleFridaEnumerateFunctions(args) {
819
+ return this.frida.handleFridaEnumerateFunctions(args);
820
+ }
821
+ handleFridaFindSymbols(args) {
822
+ return this.frida.handleFridaFindSymbols(args);
823
+ }
824
+ handleGhidraAnalyze(args) {
825
+ return this.analysis.handleGhidraAnalyze(args);
826
+ }
827
+ handleGhidraDecompile(args) {
828
+ return this.analysis.handleGhidraDecompile(args);
829
+ }
830
+ handleIdaDecompile(args) {
831
+ return this.analysis.handleIdaDecompile(args);
832
+ }
833
+ handleJadxDecompile(args) {
834
+ return this.analysis.handleJadxDecompile(args);
835
+ }
836
+ handleGenerateHooks(args) {
837
+ return this.analysis.handleGenerateHooks(args);
838
+ }
839
+ handleExportHookScript(args) {
840
+ return this.analysis.handleExportHookScript(args);
841
+ }
842
+ handleUnidbgEmulate(args) {
843
+ return this.analysis.handleUnidbgEmulate(args);
844
+ }
845
+ handleUnidbgLaunch(args) {
846
+ return this.analysis.handleUnidbgLaunch(args);
847
+ }
848
+ handleUnidbgCall(args) {
849
+ return this.analysis.handleUnidbgCall(args);
850
+ }
851
+ handleUnidbgTrace(args) {
852
+ return this.analysis.handleUnidbgTrace(args);
853
+ }
854
+ handleGetAvailablePlugins(args) {
855
+ return this.analysis.handleGetAvailablePlugins(args);
856
+ }
857
+ };
858
+ //#endregion
859
+ export { BinaryInstrumentHandlers };