@jshookmcp/jshook 0.2.9 → 0.3.0

package/dist/{modules-C184v-S9.mjs → modules-tZozf0LQ.mjs}

@@ -1,29 +1,31 @@
 import { t as __exportAll } from "./chunk-CjcI7cDX.mjs";
 import { t as logger } from "./logger-Dh_xb7_2.mjs";
-import { At as MEMORY_MODULES_TIMEOUT_MS, Bt as MEMORY_VMMAP_TIMEOUT_MS, Dt as MEMORY_INJECT_TIMEOUT_MS, Et as MEMORY_DUMP_TIMEOUT_MS, F as DEFAULT_DEBUG_PORT, Ft as MEMORY_READ_TIMEOUT_MS, G as EXTERNAL_TOOL_MAX_STDERR_BYTES, It as MEMORY_SCAN_MAX_BUFFER_BYTES, J as EXTERNAL_TOOL_PROBE_TIMEOUT_MS, K as EXTERNAL_TOOL_MAX_STDOUT_BYTES, Mt as MEMORY_PROCESS_SIGNAL_TIMEOUT_MS, N as DEBUGGER_WAIT_FOR_PAUSED_TIMEOUT_MS, Nt as MEMORY_PROTECTION_PWSH_TIMEOUT_MS, Ot as MEMORY_MAX_READ_BYTES, P as DEBUG_PORT_CANDIDATES, Pt as MEMORY_PROTECTION_QUERY_TIMEOUT_MS, Rt as MEMORY_SCAN_TIMEOUT_MS, Tt as MEMORY_AVAILABILITY_CACHE_TTL_MS, Ut as NATIVE_ADMIN_CHECK_TIMEOUT_MS, Vt as MEMORY_WRITE_TIMEOUT_MS, W as EXTERNAL_TOOL_FORCE_KILL_GRACE_MS, Y as EXTERNAL_TOOL_TIMEOUT_MS, _r as WIN_DEBUG_PORT_POLL_ATTEMPTS, cn as SANDBOX_MEMORY_LIMIT_MB, gt as JSVMP_MAX_ITERATIONS, hr as WATCH_EVAL_TIMEOUT_MS, ht as JSVMP_DEOBFUSCATE_TIMEOUT_MS, jt as MEMORY_PROBE_CMD_TIMEOUT_MS, kt as MEMORY_MAX_WRITE_BYTES, ln as SANDBOX_STACK_SIZE_MB, nn as PROCESS_LAUNCH_WAIT_MS, on as SANDBOX_EXEC_TIMEOUT_MS, rn as PROCESS_LIST_MAX_BUFFER_BYTES, un as SANDBOX_TERMINATE_GRACE_MS, vr as WIN_DEBUG_PORT_POLL_INTERVAL_MS, zt as MEMORY_VMMAP_ENUM_TIMEOUT_MS } from "./constants-B0OANIBL.mjs";
-import { a as generateEvalHook, c as generateObjectMethodHook, i as generateAntiDebugBypass, l as ProcessRegistry, n as generateLocalStorageHook, o as generateFunctionHook, r as getInjectionInstructions, s as generateHookTemplate, t as generateCookieHook } from "./HookGeneratorBuilders.core.generators.storage-CtcdK78Q.mjs";
-import { i as getProjectRoot, n as getDebuggerSessionsDir } from "./outputPaths-B1uGmrWZ.mjs";
-import { i as resolveArtifactPath } from "./artifacts-Bk2-_uPq.mjs";
-import "./ConsoleMonitor-CPVQW1Y-.mjs";
-import { t as PrerequisiteError } from "./PrerequisiteError-Dl33Svkz.mjs";
-import { n as execFileAsync$1, r as executePowerShellScript, t as execAsync$3 } from "./types-CPhOReNX.mjs";
-import { v as isKoffiAvailable } from "./Win32API-CePkipZY.mjs";
-import { n as cpuLimit, r as ioLimit, t as cdpLimit } from "./concurrency-Bt0yv1kJ.mjs";
-import { i as parseProcMaps, r as formatLinuxProtection } from "./factory-DxlGh9Xf.mjs";
-import { r as isKoffiAvailable$1, t as findPatternInBuffer } from "./NativeMemoryManager.utils-B-FjA2mJ.mjs";
-import { t as nativeMemoryManager } from "./NativeMemoryManager.impl-dZtA1ZGn.mjs";
-import { r as CodeCollector } from "./ScriptManager-aHHq0X7U.mjs";
-import { a as coverageStopJSWithTimeout, i as coverageStopCSSWithTimeout, n as coverageStartCSSWithTimeout, r as coverageStartJSWithTimeout, s as evaluateWithTimeout } from "./PageController-Bqm2kZ_X.mjs";
-import "./ToolRegistry-BjaF4oNz.mjs";
+import { Ar as WIN_DEBUG_PORT_POLL_ATTEMPTS, At as MEMORY_MAX_WRITE_BYTES, Bt as MEMORY_VMMAP_ENUM_TIMEOUT_MS, Dt as MEMORY_DUMP_TIMEOUT_MS, Et as MEMORY_AVAILABILITY_CACHE_TTL_MS, F as DEBUG_PORT_CANDIDATES, Ft as MEMORY_PROTECTION_QUERY_TIMEOUT_MS, G as EXTERNAL_TOOL_FORCE_KILL_GRACE_MS, Ht as MEMORY_WRITE_TIMEOUT_MS, I as DEFAULT_DEBUG_PORT, It as MEMORY_READ_TIMEOUT_MS, K as EXTERNAL_TOOL_MAX_STDERR_BYTES, Lt as MEMORY_SCAN_MAX_BUFFER_BYTES, Mt as MEMORY_PROBE_CMD_TIMEOUT_MS, Nt as MEMORY_PROCESS_SIGNAL_TIMEOUT_MS, Or as WATCH_EVAL_TIMEOUT_MS, Ot as MEMORY_INJECT_TIMEOUT_MS, P as DEBUGGER_WAIT_FOR_PAUSED_TIMEOUT_MS, Pt as MEMORY_PROTECTION_PWSH_TIMEOUT_MS, Vt as MEMORY_VMMAP_TIMEOUT_MS, Wt as NATIVE_ADMIN_CHECK_TIMEOUT_MS, X as EXTERNAL_TOOL_TIMEOUT_MS, Y as EXTERNAL_TOOL_PROBE_TIMEOUT_MS, in as PROCESS_LIST_MAX_BUFFER_BYTES, jr as WIN_DEBUG_PORT_POLL_INTERVAL_MS, jt as MEMORY_MODULES_TIMEOUT_MS, kt as MEMORY_MAX_READ_BYTES, q as EXTERNAL_TOOL_MAX_STDOUT_BYTES, rn as PROCESS_LAUNCH_WAIT_MS, zt as MEMORY_SCAN_TIMEOUT_MS } from "./constants-CDZLOoVv.mjs";
+import { t as ProcessRegistry } from "./ProcessRegistry-zGg12QbE.mjs";
+import { i as getProjectRoot, n as getDebuggerSessionsDir } from "./outputPaths-um7lCRY3.mjs";
+import { a as generateEvalHook, c as generateObjectMethodHook, i as generateAntiDebugBypass, n as generateLocalStorageHook, o as generateFunctionHook, r as getInjectionInstructions, s as generateHookTemplate, t as generateCookieHook } from "./HookGeneratorBuilders.core.generators.storage-CTbB4Lcx.mjs";
+import { i as resolveArtifactPath } from "./artifacts-DkfosXH3.mjs";
+import { n as ConsoleMonitor } from "./ConsoleMonitor-DykL3IAw.mjs";
+import { t as PrerequisiteError } from "./PrerequisiteError-TuyZIs6n.mjs";
+import { n as execFileAsync$1, r as executePowerShellScript, t as execAsync$3 } from "./types-DDBWs9UP.mjs";
+import { v as isKoffiAvailable } from "./Win32API-C2kjj0ze.mjs";
+import { r as ioLimit, t as cdpLimit } from "./concurrency-Drev_Vz9.mjs";
+import { i as parseProcMaps, r as formatLinuxProtection } from "./factory-C90tBff6.mjs";
+import { r as isKoffiAvailable$1, t as findPatternInBuffer } from "./NativeMemoryManager.utils-BBlAixF5.mjs";
+import { t as nativeMemoryManager } from "./NativeMemoryManager.impl-D9Lkovvn.mjs";
+import { r as CodeCollector } from "./ScriptManager-ZuWD-0Jg.mjs";
+import { a as coverageStopJSWithTimeout, i as coverageStopCSSWithTimeout, n as coverageStartCSSWithTimeout, r as coverageStartJSWithTimeout, s as evaluateWithTimeout } from "./PageController-BPJNqqBN.mjs";
+import { n as JSVMPDeobfuscator, t as runWebcrack } from "./webcrack-Be0_FccV.mjs";
+import "./ToolRegistry-B9krbTtI.mjs";
 import { existsSync, promises, readFileSync } from "fs";
 import * as path$2 from "path";
 import { join } from "path";
 import crypto from "crypto";
 import { platform, tmpdir } from "node:os";
 import { closeSync, openSync, promises as promises$1, readFileSync as readFileSync$1, readSync } from "node:fs";
-import path$1, { isAbsolute, join as join$1, relative, resolve, sep } from "node:path";
+import { isAbsolute, join as join$1, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import { readdir, rm, stat, writeFile } from "node:fs/promises";
+import { writeFile } from "node:fs/promises";
 import { spawn } from "node:child_process";
 import { exec as exec$1, execFile as execFile$1, spawn as spawn$1 } from "child_process";
 import { promisify } from "util";
@@ -35,8 +37,7 @@ import { setImmediate } from "node:timers/promises";
 import * as parser from "@babel/parser";
 import traverse from "@babel/traverse";
 import * as t from "@babel/types";
-import generate from "@babel/generator";
-import { Worker } from "node:worker_threads";
+import "@babel/generator";
 //#region src/modules/hook/HookGeneratorBuilders.core.generators.network.ts
 function generateXHRHook(action, customCode, _condition, _performance = false) {
 	return `
@@ -1613,7 +1614,7 @@ var CodeAnalyzer = class {
 			callGraph: this.buildCallGraph(functions, code)
 		};
 	}
-	async aiAnalyze(_code, _focus) {
+	async aiAnalyze(_exitCodeValue, _focus) {
 		return {};
 	}
 	detectTechStack(code, aiAnalysis) {
@@ -3041,7 +3042,7 @@ var CryptoDetector = class {
 			};
 		});
 	}
-	evaluateSecurity(algorithms, _code) {
+	evaluateSecurity(algorithms, _exitCodeValue) {
 		const issues = [];
 		const securityRules = this.rulesManager.getSecurityRules();
 		algorithms.forEach((algo) => {
@@ -3165,162 +3166,6 @@ function getCalleeFullName(node) {
 	return parts.join(".");
 }
 //#endregion
-//#region src/modules/deobfuscator/webcrack.ts
-const DEFAULT_OPTIONS = {
-	jsx: true,
-	mangle: false,
-	unminify: true,
-	unpack: true
-};
-const MAX_BUNDLE_MODULES = 100;
-function normalizeOptions(options) {
-	return {
-		jsx: options.jsx ?? DEFAULT_OPTIONS.jsx,
-		mangle: options.mangle ?? DEFAULT_OPTIONS.mangle,
-		unminify: options.unminify ?? DEFAULT_OPTIONS.unminify,
-		unpack: options.unpack ?? DEFAULT_OPTIONS.unpack
-	};
-}
-function isSupportedNodeVersion() {
-	const [majorPart = "0", minorPart = "0"] = process.versions.node.split(".");
-	const major = Number.parseInt(majorPart, 10);
-	const minor = Number.parseInt(minorPart, 10);
-	if (!Number.isFinite(major) || !Number.isFinite(minor)) return false;
-	if (major === 20) return minor >= 19;
-	if (major === 22) return minor >= 12;
-	return major > 22;
-}
-function matchesRule(module, rule) {
-	const target = rule.target === "path" ? module.path : module.code;
-	const matchType = rule.matchType ?? "includes";
-	if (matchType === "exact") return target === rule.pattern;
-	if (matchType === "regex") try {
-		return new RegExp(rule.pattern, "m").test(target);
-	} catch {
-		return false;
-	}
-	return target.includes(rule.pattern);
-}
-function applyBundleMappings(bundle, mappings) {
-	const remapped = /* @__PURE__ */ new Map();
-	if (!mappings || mappings.length === 0) return remapped;
-	for (const module of bundle.modules.values()) for (const rule of mappings) {
-		if (!rule.path || !rule.pattern) continue;
-		if (matchesRule(module, rule)) {
-			if (module.path !== rule.path) {
-				remapped.set(module.id, { fromPath: module.path });
-				module.path = rule.path;
-			}
-			break;
-		}
-	}
-	return remapped;
-}
-function summarizeBundle(bundle, options, remapped) {
-	const maxBundleModules = options.maxBundleModules ?? MAX_BUNDLE_MODULES;
-	const modules = Array.from(bundle.modules.values()).toSorted((left, right) => {
-		if (left.isEntry !== right.isEntry) return left.isEntry ? -1 : 1;
-		return left.path.localeCompare(right.path);
-	}).slice(0, maxBundleModules).map((module) => ({
-		id: module.id,
-		path: module.path,
-		isEntry: module.isEntry,
-		size: module.code.length,
-		code: options.includeModuleCode ? module.code : void 0,
-		mappedPathFrom: remapped.get(module.id)?.fromPath
-	}));
-	return {
-		type: bundle.type,
-		entryId: bundle.entryId,
-		moduleCount: bundle.modules.size,
-		truncated: bundle.modules.size > maxBundleModules,
-		mappingsApplied: remapped.size,
-		modules
-	};
-}
-async function collectSavedArtifacts(rootDir, currentDir = rootDir) {
-	const entries = await readdir(currentDir, { withFileTypes: true });
-	const artifacts = [];
-	for (const entry of entries) {
-		const fullPath = path$1.join(currentDir, entry.name);
-		if (entry.isDirectory()) {
-			artifacts.push(...await collectSavedArtifacts(rootDir, fullPath));
-			continue;
-		}
-		if (!entry.isFile()) continue;
-		const metadata = await stat(fullPath);
-		artifacts.push({
-			path: path$1.relative(rootDir, fullPath).replace(/\\/g, "/"),
-			size: metadata.size,
-			type: "file"
-		});
-	}
-	return artifacts.toSorted((left, right) => left.path.localeCompare(right.path));
-}
-async function runWebcrack(code, options) {
-	const optionsUsed = normalizeOptions(options);
-	if (!isSupportedNodeVersion()) {
-		const reason = `webcrack requires Node.js 20.19+ or 22.12+; current runtime is ${process.versions.node}`;
-		logger.warn(reason);
-		return {
-			applied: false,
-			code,
-			optionsUsed,
-			reason
-		};
-	}
-	try {
-		await import("isolated-vm");
-	} catch {
-		logger.warn("isolated-vm is unavailable (likely Node 24 incompatibility). Deobfuscation sandbox is disabled — do not process untrusted code.");
-	}
-	try {
-		const { webcrack } = await import("webcrack");
-		const result = await webcrack(code, {
-			jsx: optionsUsed.jsx,
-			unpack: optionsUsed.unpack,
-			deobfuscate: true,
-			unminify: optionsUsed.unminify,
-			mangle: optionsUsed.mangle
-		});
-		const remapped = result.bundle ? applyBundleMappings(result.bundle, options.mappings) : /* @__PURE__ */ new Map();
-		let savedTo;
-		let savedArtifacts;
-		if (typeof options.outputDir === "string" && options.outputDir.trim().length > 0) {
-			savedTo = path$1.resolve(options.outputDir);
-			const cwd = process.cwd();
-			const relFromCwd = path$1.relative(cwd, savedTo);
-			if (path$1.isAbsolute(relFromCwd) || relFromCwd.startsWith("..") || savedTo === "/" || savedTo === path$1.parse(savedTo).root) throw new Error(`outputDir must resolve to a path within the project root. Got: ${savedTo}`);
-			if (options.forceOutput) await rm(savedTo, {
-				recursive: true,
-				force: true
-			});
-			await result.save(savedTo);
-			savedArtifacts = await collectSavedArtifacts(savedTo);
-		}
-		return {
-			applied: true,
-			code: result.code,
-			bundle: result.bundle ? summarizeBundle(result.bundle, {
-				includeModuleCode: options.includeModuleCode,
-				maxBundleModules: options.maxBundleModules
-			}, remapped) : void 0,
-			savedTo,
-			savedArtifacts,
-			optionsUsed
-		};
-	} catch (error) {
-		const reason = error instanceof Error ? error.message : String(error);
-		logger.warn("webcrack execution failed, falling back to legacy pipeline", error);
-		return {
-			applied: false,
-			code,
-			optionsUsed,
-			reason
-		};
-	}
-}
-//#endregion
 //#region src/modules/deobfuscator/Deobfuscator.utils.ts
 function detectObfuscationType(code) {
 	const types = [];
@@ -3570,582 +3415,6 @@ var Deobfuscator = class {
 	}
 };
 //#endregion
-//#region src/modules/security/ExecutionSandbox.ts
-/**
-* ExecutionSandbox — Safe code execution for untrusted JavaScript.
-*
-* Uses worker_threads + vm module to isolate dynamic code execution
-* (e.g., deobfuscation eval, packer unpacking).
-*
-* Security:
-* - Runs in a separate worker thread (process isolation)
-* - vm.createContext with empty global (no require, no fs, no net)
-* - Timeout enforcement via worker termination
-* - Memory limit via worker resourceLimits
-*/
-const WORKER_SCRIPT = `
-import { workerData, parentPort } from 'node:worker_threads';
-import * as vm from 'node:vm';
-
-const { code, timeoutMs } = workerData;
-
-try {
-  // Create an isolated context with minimal globals
-  const sandbox = {
-    // Safe built-ins only
-    parseInt, parseFloat, isNaN, isFinite,
-    encodeURIComponent, decodeURIComponent,
-    encodeURI, decodeURI,
-    JSON: { parse: JSON.parse, stringify: JSON.stringify },
-    Math,
-    String, Number, Boolean, Array, Object, Map, Set,
-    Date, RegExp, Error, TypeError, RangeError,
-    Promise,
-    Symbol,
-    undefined,
-    NaN,
-    Infinity,
-    // Explicitly denied: require, process, __filename, __dirname, Buffer, setTimeout, setInterval, fetch
-  };
-
-  const context = vm.createContext(sandbox, {
-    name: 'jshook-sandbox',
-    codeGeneration: { strings: false, wasm: false },
-  });
-
-  const script = new vm.Script(code, {
-    filename: 'sandbox-eval.js',
-    timeout: timeoutMs,
-  });
-
-  const result = script.runInContext(context, { timeout: timeoutMs });
-  parentPort.postMessage({ ok: true, output: result });
-} catch (err) {
-  parentPort.postMessage({
-    ok: false,
-    error: err.message || String(err),
-    timedOut: err.code === 'ERR_SCRIPT_EXECUTION_TIMEOUT',
-  });
-}
-`;
-var ExecutionSandbox = class {
-	/**
-	* Execute JavaScript in an isolated sandbox.
-	* Wrapped in cpuLimit for global concurrency control.
-	*/
-	async execute(request) {
-		return cpuLimit(() => this._execute(request));
-	}
-	_execute(request) {
-		const timeoutMs = request.timeoutMs ?? SANDBOX_EXEC_TIMEOUT_MS;
-		const memoryLimitMB = request.memoryLimitMB ?? SANDBOX_MEMORY_LIMIT_MB;
-		const startTime = Date.now();
-		return new Promise((resolve) => {
-			let settled = false;
-			const terminationTimeout = setTimeout(() => {
-				if (!settled) {
-					worker.terminate();
-					logger.warn(`[ExecutionSandbox] Worker terminated after ${timeoutMs + SANDBOX_TERMINATE_GRACE_MS}ms`);
-					finish({
-						ok: false,
-						error: "Execution timed out (worker terminated)",
-						timedOut: true
-					});
-				}
-			}, timeoutMs + SANDBOX_TERMINATE_GRACE_MS);
-			const workerOptions = {
-				eval: true,
-				workerData: {
-					code: request.code,
-					timeoutMs
-				},
-				resourceLimits: {
-					maxOldGenerationSizeMb: memoryLimitMB,
-					maxYoungGenerationSizeMb: Math.ceil(memoryLimitMB / 4),
-					stackSizeMb: SANDBOX_STACK_SIZE_MB
-				}
-			};
-			workerOptions.type = "module";
-			const worker = new Worker(WORKER_SCRIPT, workerOptions);
-			if (typeof worker.unref === "function") worker.unref();
-			ProcessRegistry.register(worker);
-			const finish = (result) => {
-				if (settled) return;
-				settled = true;
-				if (terminationTimeout) clearTimeout(terminationTimeout);
-				resolve({
-					...result,
-					durationMs: Date.now() - startTime
-				});
-			};
-			worker.on("message", (msg) => {
-				finish({
-					ok: msg.ok,
-					output: msg.output,
-					error: msg.error,
-					timedOut: msg.timedOut || false
-				});
-				worker.terminate();
-			});
-			worker.on("error", (err) => {
-				finish({
-					ok: false,
-					error: `Worker error: ${err.message}`,
-					timedOut: false
-				});
-			});
-			worker.on("exit", (code) => {
-				if (!settled) finish({
-					ok: false,
-					error: `Worker exited unexpectedly with code ${code}`,
-					timedOut: false
-				});
-			});
-		});
-	}
-};
-//#endregion
-//#region src/modules/deobfuscator/JSVMPDeobfuscator.restore.ts
-async function restoreJSVMPCode(context, code, vmType, aggressive) {
-	const warnings = [];
-	const unresolvedParts = [];
-	if (vmType === "obfuscator.io") return restoreObfuscatorIO(context, code, aggressive, warnings, unresolvedParts);
-	if (vmType === "jsfuck") return restoreJSFuck(context, code, warnings);
-	if (vmType === "jjencode") return restoreJJEncode(context, code, warnings);
-	return restoreCustomVM(context, code, aggressive, warnings, unresolvedParts);
-}
-async function restoreObfuscatorIO(context, code, aggressive, warnings, unresolvedParts) {
-	let restored = code;
-	let confidence = .5;
-	try {
-		const stringArrayMatch = code.match(/var\s+(_0x[a-f0-9]+)\s*=\s*(\[.*?\]);/s);
-		if (stringArrayMatch) {
-			const arrayName = stringArrayMatch[1];
-			const arrayContent = stringArrayMatch[2];
-			logger.info(` : ${arrayName}`);
-			try {
-				const sandboxResult = await context.sandbox.execute({
-					code: `return ${arrayContent || "[]"};`,
-					timeoutMs: 3e3
-				});
-				const stringArray = sandboxResult.ok ? sandboxResult.output : void 0;
-				if (Array.isArray(stringArray)) {
-					logger.info(`String array detected, ${stringArray.length} strings found`);
-					const refPattern = new RegExp(`${arrayName}\\[(\\d+)\\]`, "g");
-					restored = restored.replace(refPattern, (_match, index) => {
-						const idx = parseInt(index, 10);
-						if (idx < stringArray.length) return JSON.stringify(stringArray[idx]);
-						return _match;
-					});
-					confidence += .2;
-				}
-			} catch (e) {
-				warnings.push(`: ${e}`);
-				unresolvedParts.push({
-					location: "String Array",
-					reason: "",
-					suggestion: ""
-				});
-			}
-		}
-		restored = restored.replace(/\(function\s*\(_0x[a-f0-9]+,\s*_0x[a-f0-9]+\)\s*\{[\s\S]*?\}\(_0x[a-f0-9]+,\s*0x[a-f0-9]+\)\);?/g, "");
-		if (aggressive) {
-			restored = restored.replace(/\(function\s*\(\)\s*\{([\s\S]*)\}\(\)\);?/g, "$1");
-			confidence += .1;
-		}
-		restored = restored.replace(/0x([0-9a-f]+)/gi, (_match, hex) => {
-			return String(parseInt(hex, 16));
-		});
-		restored = restored.replace(/;\s*;/g, ";");
-		restored = restored.replace(/\{\s*\}/g, "{}");
-		warnings.push("obfuscator.io detected, may need special handling");
-		return {
-			code: restored,
-			confidence: Math.min(confidence, 1),
-			warnings,
-			unresolvedParts: unresolvedParts.length > 0 ? unresolvedParts : void 0
-		};
-	} catch (error) {
-		warnings.push(`obfuscator.io: ${error}`);
-		return {
-			code,
-			confidence: .2,
-			warnings,
-			unresolvedParts
-		};
-	}
-}
-async function restoreJSFuck(context, code, warnings) {
-	try {
-		logger.info("JSFuck detected, attempting deobfuscation...");
-		try {
-			if (code.length > 1e5) {
-				warnings.push("JSFuck code detected, file too large to process directly.");
-				warnings.push("Consider using an online JSFuck decoder tool.");
-				return {
-					code,
-					confidence: .1,
-					warnings
-				};
-			}
-			const sandboxResult = await context.sandbox.execute({
-				code: `return ${code};`,
-				timeoutMs: 5e3
-			});
-			const result = sandboxResult.ok ? sandboxResult.output : void 0;
-			if (typeof result === "string") {
-				logger.info(" JSFuck");
-				return {
-					code: result,
-					confidence: .9,
-					warnings: ["JSFuck"]
-				};
-			}
-			warnings.push("JSFuck");
-			return {
-				code,
-				confidence: .2,
-				warnings
-			};
-		} catch (execError) {
-			warnings.push(`JSFuck: ${execError}`);
-			warnings.push("Consider using an online JSFuck decoder tool.");
-			return {
-				code,
-				confidence: .1,
-				warnings
-			};
-		}
-	} catch (error) {
-		warnings.push(`JSFuck: ${error}`);
-		return {
-			code,
-			confidence: .1,
-			warnings
-		};
-	}
-}
-async function restoreJJEncode(context, code, warnings) {
-	try {
-		logger.info("JJEncode detected, attempting deobfuscation...");
-		try {
-			const lines = code.split("\n").filter((line) => line.trim());
-			if ((lines.length > 0 ? lines[lines.length - 1] : "")?.includes("$$$$")) {
-				const sandboxResult = await context.sandbox.execute({
-					code: `${code}; return $$$$()`,
-					timeoutMs: 5e3
-				});
-				const result = sandboxResult.ok ? sandboxResult.output : void 0;
-				if (typeof result === "string") {
-					logger.info(" JJEncode");
-					return {
-						code: result,
-						confidence: .9,
-						warnings: ["JJEncode"]
-					};
-				}
-			}
-			const sandboxResult = await context.sandbox.execute({
-				code,
-				timeoutMs: 5e3
-			});
-			if (!sandboxResult.ok) logger.warn("JJEncode sandbox execution failed:", sandboxResult.error);
-			warnings.push("JJEncode deobfuscation may be incomplete");
-			warnings.push("Result may still contain JJEncode fragments");
-			return {
-				code,
-				confidence: .2,
-				warnings
-			};
-		} catch (execError) {
-			warnings.push(`JJEncode: ${execError}`);
-			warnings.push("Result may contain evaluation artifacts");
-			return {
-				code,
-				confidence: .1,
-				warnings
-			};
-		}
-	} catch (error) {
-		warnings.push(`JJEncode: ${error}`);
-		return {
-			code,
-			confidence: .1,
-			warnings
-		};
-	}
-}
-async function restoreCustomVM(_context, code, aggressive, warnings, unresolvedParts) {
-	warnings.push("AI-assisted deobfuscation removed, using fallback directly.");
-	return restoreCustomVMBasic(code, aggressive, warnings, unresolvedParts);
-}
-function restoreCustomVMBasic(code, aggressive, warnings, unresolvedParts) {
-	let restored = code;
-	let confidence = .3;
-	try {
-		restored = restored.replace(/if\s*\([^)]*\)\s*\{\s*\}/g, "");
-		restored = restored.replace(/!!\s*\(/g, "Boolean(");
-		restored = restored.replace(/""\s*\+\s*/g, "");
-		if (aggressive) {
-			restored = restored.replace(/debugger;?/g, "");
-			confidence += .1;
-			restored = restored.replace(/\?\s*([^:]+)\s*:\s*\1/g, "$1");
-			confidence += .05;
-		}
-		warnings.push("Analysis incomplete, partial results may be returned");
-		warnings.push("For better results, configure an LLM API key");
-		unresolvedParts.push({
-			location: "Custom VM",
-			reason: "VM",
-			suggestion: "VM protection detected, LLM-assisted analysis recommended"
-		});
-		return {
-			code: restored,
-			confidence,
-			warnings,
-			unresolvedParts: unresolvedParts.length > 0 ? unresolvedParts : void 0
-		};
-	} catch (error) {
-		warnings.push(`: ${error}`);
-		return {
-			code,
-			confidence: .1,
-			warnings,
-			unresolvedParts
-		};
-	}
-}
-//#endregion
-//#region src/modules/deobfuscator/JSVMPDeobfuscator.ts
-var JSVMPDeobfuscator = class {
-	sandbox = new ExecutionSandbox();
-	async deobfuscate(options) {
-		const startTime = Date.now();
-		const { code, aggressive = false, extractInstructions = false, timeout = JSVMP_DEOBFUSCATE_TIMEOUT_MS, maxIterations = JSVMP_MAX_ITERATIONS } = options;
-		logger.info(" JSVMP...");
-		try {
-			const vmFeatures = this.detectJSVMP(code);
-			if (!vmFeatures) {
-				logger.info("JSVMP");
-				return {
-					isJSVMP: false,
-					deobfuscatedCode: code,
-					confidence: 0,
-					warnings: ["JSVMP"]
-				};
-			}
-			logger.info(`JSVMP analysis complete, complexity: ${vmFeatures.complexity}`);
-			logger.info(` : ${vmFeatures.instructionCount}`);
-			const vmType = this.identifyVMType(code, vmFeatures);
-			logger.info(` : ${vmType}`);
-			let instructions;
-			if (extractInstructions) {
-				logger.info(" ...");
-				instructions = this.extractInstructions(code, vmFeatures);
-				logger.info(`  ${instructions.length} `);
-			}
-			logger.info(" ...");
-			const deobfuscationResult = await this.restoreCode(code, vmFeatures, vmType, aggressive, timeout, maxIterations);
-			const processingTime = Date.now() - startTime;
-			const result = {
-				isJSVMP: true,
-				vmType,
-				vmFeatures,
-				instructions,
-				deobfuscatedCode: deobfuscationResult.code,
-				confidence: deobfuscationResult.confidence,
-				warnings: deobfuscationResult.warnings,
-				unresolvedParts: deobfuscationResult.unresolvedParts,
-				stats: {
-					originalSize: code.length,
-					deobfuscatedSize: deobfuscationResult.code.length,
-					reductionRate: 1 - deobfuscationResult.code.length / code.length,
-					processingTime
-				}
-			};
-			logger.info(`JSVMP deobfuscation complete in ${processingTime}ms`);
-			logger.info(` : ${(result.confidence * 100).toFixed(1)}%`);
-			return result;
-		} catch (error) {
-			logger.error("JSVMP", error);
-			return {
-				isJSVMP: false,
-				deobfuscatedCode: code,
-				confidence: 0,
-				warnings: [`: ${error}`]
-			};
-		}
-	}
-	detectJSVMP(code) {
-		try {
-			const ast = parser.parse(code, {
-				sourceType: "unambiguous",
-				plugins: ["jsx", "typescript"],
-				errorRecovery: true
-			});
-			let hasSwitch = false;
-			let hasInstructionArray = false;
-			let hasProgramCounter = false;
-			let instructionCount = 0;
-			let interpreterLocation = "";
-			let maxSwitchCases = 0;
-			let hasBytecodeArray = false;
-			let hasApplyCall = false;
-			let hasWhileLoop = false;
-			let bytecodePattern = false;
-			traverse(ast, {
-				SwitchStatement(path) {
-					const caseCount = path.node.cases.length;
-					if (caseCount > 10) {
-						hasSwitch = true;
-						if (caseCount > maxSwitchCases) {
-							maxSwitchCases = caseCount;
-							instructionCount = caseCount;
-							interpreterLocation = `Line ${path.node.loc?.start.line || 0}`;
-						}
-					}
-				},
-				ArrayExpression(path) {
-					if (path.node.elements.length > 50) hasInstructionArray = true;
-				},
-				UpdateExpression(path) {
-					if (path.node.operator === "++" || path.node.operator === "--") {
-						const arg = path.node.argument;
-						if (t.isIdentifier(arg) && arg.name.length <= 3) hasProgramCounter = true;
-					}
-				},
-				CallExpression(path) {
-					if (t.isIdentifier(path.node.callee, { name: "parseInt" }) && path.node.arguments.length >= 2) {
-						const firstArg = path.node.arguments[0];
-						if (t.isBinaryExpression(firstArg) && firstArg.operator === "+") {
-							bytecodePattern = true;
-							hasBytecodeArray = true;
-						}
-					}
-					if (t.isMemberExpression(path.node.callee) && t.isIdentifier(path.node.callee.property, { name: "apply" })) hasApplyCall = true;
-				},
-				WhileStatement(path) {
-					if (t.isBooleanLiteral(path.node.test, { value: true }) || t.isNumericLiteral(path.node.test, { value: 1 })) hasWhileLoop = true;
-				},
-				ForStatement(path) {
-					if (!path.node.test) hasWhileLoop = true;
-				}
-			});
-			if (hasSwitch && (hasInstructionArray || hasProgramCounter) && (hasApplyCall || hasWhileLoop || bytecodePattern)) {
-				const complexity = instructionCount > 100 ? "high" : instructionCount > 50 ? "medium" : "low";
-				logger.info(" JSVMP:");
-				logger.info(`  - Switch: ${hasSwitch} (${maxSwitchCases} cases)`);
-				logger.info(`  - : ${hasInstructionArray}`);
-				logger.info(`  - : ${hasProgramCounter}`);
-				logger.info(`  - : ${hasBytecodeArray}`);
-				logger.info(`  - Apply: ${hasApplyCall}`);
-				logger.info(`  - : ${hasWhileLoop}`);
-				logger.info(`  - : ${bytecodePattern}`);
-				return {
-					instructionCount,
-					interpreterLocation,
-					complexity,
-					hasSwitch,
-					hasInstructionArray,
-					hasProgramCounter
-				};
-			}
-			return null;
-		} catch (error) {
-			logger.warn("JSVMP analysis failed", error);
-			return this.detectJSVMPWithRegex(code);
-		}
-	}
-	detectJSVMPWithRegex(code) {
-		const hasSwitch = (code.match(/switch\s*\(/g)?.length || 0) > 0;
-		const bytecodePattern = /parseInt\s*\(\s*["']?\s*\+\s*\w+\[/g.test(code);
-		const applyPattern = /\.apply\s*\(/g.test(code);
-		const whilePattern = /while\s*\(\s*(true|1)\s*\)/g.test(code);
-		if (hasSwitch && (bytecodePattern || applyPattern || whilePattern)) {
-			logger.info(" JSVMP");
-			return {
-				instructionCount: 0,
-				interpreterLocation: "Unknown",
-				complexity: "medium",
-				hasSwitch: true,
-				hasInstructionArray: bytecodePattern,
-				hasProgramCounter: applyPattern
-			};
-		}
-		return null;
-	}
-	identifyVMType(code, _features) {
-		if (code.includes("_0x") && code.includes("function(_0x")) return "obfuscator.io";
-		if (/^\s*\[\s*\]\s*\[\s*\(/.test(code)) return "jsfuck";
-		if (code.includes("$=~[];")) return "jjencode";
-		return "custom";
-	}
-	extractInstructions(code, features) {
-		const instructions = [];
-		try {
-			traverse(parser.parse(code, {
-				sourceType: "unambiguous",
-				plugins: ["jsx", "typescript"]
-			}), { SwitchStatement: (path) => {
-				if (path.node.cases.length === features.instructionCount) path.node.cases.forEach((caseNode, index) => {
-					const opcode = caseNode.test ? t.isNumericLiteral(caseNode.test) ? caseNode.test.value : t.isStringLiteral(caseNode.test) ? caseNode.test.value : index : index;
-					const type = this.inferInstructionType(caseNode);
-					instructions.push({
-						opcode,
-						name: `INST_${opcode}`,
-						type,
-						description: `Instruction ${opcode}`
-					});
-				});
-			} });
-		} catch (error) {
-			logger.warn("", error);
-		}
-		return instructions;
-	}
-	inferInstructionType(caseNode) {
-		const code = generate(caseNode).code;
-		const consequent = caseNode.consequent;
-		let hasAssignment = false;
-		let hasArrayAccess = false;
-		let hasFunctionCall = false;
-		let hasArithmetic = false;
-		let hasControlFlow = false;
-		for (const stmt of consequent) {
-			if (t.isExpressionStatement(stmt)) {
-				const expr = stmt.expression;
-				if (t.isAssignmentExpression(expr)) hasAssignment = true;
-				if (t.isMemberExpression(expr) && t.isNumericLiteral(expr.property)) hasArrayAccess = true;
-				if (t.isCallExpression(expr)) hasFunctionCall = true;
-				if (t.isBinaryExpression(expr)) {
-					if ([
-						"+",
-						"-",
-						"*",
-						"/",
-						"%",
-						"**"
-					].includes(expr.operator)) hasArithmetic = true;
-				}
-			}
-			if (t.isIfStatement(stmt) || t.isWhileStatement(stmt) || t.isBreakStatement(stmt) || t.isContinueStatement(stmt) || t.isReturnStatement(stmt)) hasControlFlow = true;
-		}
-		if ((code.includes("push") || code.includes(".push(")) && (hasArrayAccess || code.includes("["))) return "load";
-		if (hasAssignment && !hasArithmetic && !hasFunctionCall) return "store";
-		if (hasArithmetic || code.match(/[+\-*/%]/)) return "arithmetic";
-		if (hasControlFlow || code.includes("break") || code.includes("continue")) return "control";
-		if (hasFunctionCall || code.includes(".apply(") || code.includes(".call(")) return "call";
-		return "unknown";
-	}
-	async restoreCode(code, _features, vmType, aggressive, _timeout, _maxIterations) {
-		this.restoreCustomVMBasic;
-		return restoreJSVMPCode({ sandbox: this.sandbox }, code, vmType, aggressive);
-	}
-	restoreCustomVMBasic(code, aggressive, warnings, unresolvedParts) {
-		return restoreCustomVMBasic(code, aggressive, warnings, unresolvedParts);
-	}
-};
-//#endregion
 //#region src/modules/detector/ObfuscationDetector.ts
 var ObfuscationDetector = class {
 	jsvmpDetector;
@@ -5503,10 +4772,10 @@ var DebuggerManager = class {
 	pausedResolvers = [];
 	breakpointHitCallbacks = /* @__PURE__ */ new Set();
 	pauseOnExceptionsState = "none";
-	_watchManager = null;
-	_xhrManager = null;
-	_eventManager = null;
-	_blackboxManager = null;
+	watchManager = null;
+	xhrManager = null;
+	eventManager = null;
+	blackboxManager = null;
 	advancedFeatureSession = null;
 	pausedListener = null;
 	resumedListener = null;
@@ -5531,20 +4800,20 @@ var DebuggerManager = class {
 		return this.cdpSession;
 	}
 	getWatchManager() {
-		if (!this._watchManager) throw new Error("WatchExpressionManager not initialized. Call initAdvancedFeatures() first.");
-		return this._watchManager;
+		if (!this.watchManager) throw new Error("WatchExpressionManager not initialized. Call initAdvancedFeatures() first.");
+		return this.watchManager;
 	}
 	getXHRManager() {
-		if (!this._xhrManager) throw new Error("XHRBreakpointManager not initialized. Call initAdvancedFeatures() first.");
-		return this._xhrManager;
+		if (!this.xhrManager) throw new Error("XHRBreakpointManager not initialized. Call initAdvancedFeatures() first.");
+		return this.xhrManager;
 	}
 	getEventManager() {
-		if (!this._eventManager) throw new Error("EventBreakpointManager not initialized. Call initAdvancedFeatures() first.");
-		return this._eventManager;
+		if (!this.eventManager) throw new Error("EventBreakpointManager not initialized. Call initAdvancedFeatures() first.");
+		return this.eventManager;
 	}
 	getBlackboxManager() {
-		if (!this._blackboxManager) throw new Error("BlackboxManager not initialized. Call initAdvancedFeatures() first.");
-		return this._blackboxManager;
+		if (!this.blackboxManager) throw new Error("BlackboxManager not initialized. Call initAdvancedFeatures() first.");
+		return this.blackboxManager;
 	}
 	async init() {
 		if (this.enabled) return;
@@ -5565,9 +4834,9 @@ var DebuggerManager = class {
 				this.enabled = false;
 				this.cdpSession = null;
 				this.advancedFeatureSession = null;
-				this._xhrManager = null;
-				this._eventManager = null;
-				this._blackboxManager = null;
+				this.xhrManager = null;
+				this.eventManager = null;
+				this.blackboxManager = null;
 			});
 			await this.cdpSession.send("Debugger.enable");
 			this.enabled = true;
@@ -5605,14 +4874,14 @@ var DebuggerManager = class {
 		if (!this.enabled || !this.cdpSession) throw new Error("Debugger must be enabled before initializing advanced features. Call init() first.");
 		try {
 			if (runtimeInspector) {
-				this._watchManager = new WatchExpressionManager(runtimeInspector);
+				this.watchManager = new WatchExpressionManager(runtimeInspector);
 				logger.info("WatchExpressionManager initialized");
 			}
-			this._xhrManager = new XHRBreakpointManager(this.cdpSession);
+			this.xhrManager = new XHRBreakpointManager(this.cdpSession);
 			logger.info("XHRBreakpointManager initialized");
-			this._eventManager = new EventBreakpointManager(this.cdpSession);
+			this.eventManager = new EventBreakpointManager(this.cdpSession);
 			logger.info("EventBreakpointManager initialized");
-			this._blackboxManager = new BlackboxManager(this.cdpSession);
+			this.blackboxManager = new BlackboxManager(this.cdpSession);
 			logger.info("BlackboxManager initialized");
 			this.advancedFeatureSession = this.cdpSession;
 			logger.info("All advanced debugging features initialized");
@@ -5624,7 +4893,7 @@ var DebuggerManager = class {
 	async ensureAdvancedFeatures() {
 		await this.ensureSession();
 		if (!this.cdpSession) throw new Error("CDP session unavailable after reconnect.");
-		if (this.advancedFeatureSession !== this.cdpSession || !this._xhrManager || !this._eventManager || !this._blackboxManager) await this.initAdvancedFeatures();
+		if (this.advancedFeatureSession !== this.cdpSession || !this.xhrManager || !this.eventManager || !this.blackboxManager) await this.initAdvancedFeatures();
 	}
 	async disable() {
 		if (!this.enabled || !this.cdpSession) {
@@ -5632,21 +4901,21 @@ var DebuggerManager = class {
 			return;
 		}
 		try {
-			if (this._xhrManager) {
-				await this._xhrManager.close();
-				this._xhrManager = null;
+			if (this.xhrManager) {
+				await this.xhrManager.close();
+				this.xhrManager = null;
 			}
-			if (this._eventManager) {
-				await this._eventManager.close();
-				this._eventManager = null;
+			if (this.eventManager) {
+				await this.eventManager.close();
+				this.eventManager = null;
 			}
-			if (this._blackboxManager) {
-				await this._blackboxManager.close();
-				this._blackboxManager = null;
+			if (this.blackboxManager) {
+				await this.blackboxManager.close();
+				this.blackboxManager = null;
 			}
-			if (this._watchManager) {
-				this._watchManager.clearAll();
-				this._watchManager = null;
+			if (this.watchManager) {
+				this.watchManager.clearAll();
+				this.watchManager = null;
 			}
 			if (this.pausedListener) {
 				this.cdpSession.off("Debugger.paused", this.pausedListener);
@@ -6116,9 +5385,9 @@ var ExternalToolRunner = class {
 	* Wrapped in ioLimit for global concurrency control.
 	*/
 	async run(request) {
-		return ioLimit(() => this._run(request));
+		return ioLimit(() => this.runInternal(request));
 	}
-	async _run(request) {
+	async runInternal(request) {
 		const spec = this.registry.getSpec(request.tool);
 		const probe = this.registry.getCachedProbe(request.tool);
 		if (probe && !probe.available) return {
@@ -6843,7 +6112,7 @@ var PerformanceMonitor = class {
 };
 //#endregion
 //#region src/native/ScriptLoader.ts
-let _scriptsBaseDir = null;
+let scriptsBaseDir = null;
 function tryGetEsmBaseDir() {
 	try {
 		const metaUrl = new Function("try { return import.meta.url ?? null; } catch { return null; }")();
@@ -6853,11 +6122,11 @@ function tryGetEsmBaseDir() {
 	}
 }
 function getScriptsBaseDir() {
-	if (_scriptsBaseDir) return _scriptsBaseDir;
+	if (scriptsBaseDir) return scriptsBaseDir;
 	const esmBaseDir = tryGetEsmBaseDir();
 	if (esmBaseDir) {
-		_scriptsBaseDir = esmBaseDir;
-		return _scriptsBaseDir;
+		scriptsBaseDir = esmBaseDir;
+		return scriptsBaseDir;
 	}
 	return process.cwd();
 }
@@ -8297,9 +7566,9 @@ async function readMemoryWindows(pid, address, size) {
           @{ success = $false; error = $_.Exception.Message } | ConvertTo-Json -Compress
         }
       `, { maxBuffer: 1024 * 1024 * 10 });
-		const _trimmed = stdout.trim();
-		if (!_trimmed) throw new Error("PowerShell returned empty output");
-		const result = JSON.parse(_trimmed);
+		const trimmed = stdout.trim();
+		if (!trimmed) throw new Error("PowerShell returned empty output");
+		const result = JSON.parse(trimmed);
 		return {
 			success: result.success,
 			data: result.data,
@@ -8313,17 +7582,17 @@ async function readMemoryWindows(pid, address, size) {
 		};
 	}
 }
-let _linuxProvider$1 = null;
-let _linuxProviderChecked$1 = false;
+let linuxProvider$1 = null;
+let linuxProviderChecked$1 = false;
 async function getLinuxProvider$1() {
-	if (_linuxProviderChecked$1) return _linuxProvider$1;
+	if (linuxProviderChecked$1) return linuxProvider$1;
 	try {
-		const { createPlatformProvider } = await import("./factory-DxlGh9Xf.mjs").then((n) => n.n);
+		const { createPlatformProvider } = await import("./factory-C90tBff6.mjs").then((n) => n.n);
 		const provider = createPlatformProvider();
-		if ((await provider.checkAvailability()).available) _linuxProvider$1 = provider;
+		if ((await provider.checkAvailability()).available) linuxProvider$1 = provider;
 	} catch {}
-	_linuxProviderChecked$1 = true;
-	return _linuxProvider$1;
+	linuxProviderChecked$1 = true;
+	return linuxProvider$1;
 }
 function bufferToHex(data, bytesRead) {
 	return data.subarray(0, bytesRead).toString("hex").toUpperCase().replace(/../g, "$& ");
@@ -8379,7 +7648,7 @@ async function readMemoryMac(pid, address, size, checkProtectionFn) {
 	};
 	const addrHex = `0x${address.toString(16)}`;
 	try {
-		const { createPlatformProvider } = await import("./factory-DxlGh9Xf.mjs").then((n) => n.n);
+		const { createPlatformProvider } = await import("./factory-C90tBff6.mjs").then((n) => n.n);
 		const provider = createPlatformProvider();
 		if ((await provider.checkAvailability()).available) {
 			const handle = provider.openProcess(pid, false);
@@ -8535,9 +7804,9 @@ async function writeMemoryWindows(pid, address, data) {
           @{ success = $false; error = $_.Exception.Message } | ConvertTo-Json -Compress
         }
       `, { maxBuffer: 1024 * 1024 });
-		const _trimmed = stdout.trim();
-		if (!_trimmed) throw new Error("PowerShell returned empty output");
-		const result = JSON.parse(_trimmed);
+		const trimmed = stdout.trim();
+		if (!trimmed) throw new Error("PowerShell returned empty output");
+		const result = JSON.parse(trimmed);
 		return {
 			success: result.success,
 			bytesWritten: result.bytesWritten,
@@ -8551,17 +7820,17 @@ async function writeMemoryWindows(pid, address, data) {
 		};
 	}
 }
-let _linuxProvider = null;
-let _linuxProviderChecked = false;
+let linuxProvider = null;
+let linuxProviderChecked = false;
 async function getLinuxProvider() {
-	if (_linuxProviderChecked) return _linuxProvider;
+	if (linuxProviderChecked) return linuxProvider;
 	try {
-		const { createPlatformProvider } = await import("./factory-DxlGh9Xf.mjs").then((n) => n.n);
+		const { createPlatformProvider } = await import("./factory-C90tBff6.mjs").then((n) => n.n);
 		const provider = createPlatformProvider();
-		if ((await provider.checkAvailability()).available) _linuxProvider = provider;
+		if ((await provider.checkAvailability()).available) linuxProvider = provider;
 	} catch {}
-	_linuxProviderChecked = true;
-	return _linuxProvider;
+	linuxProviderChecked = true;
+	return linuxProvider;
 }
 async function writeMemoryLinux(pid, address, data) {
 	try {
@@ -8614,7 +7883,7 @@ async function writeMemoryMac(pid, address, data, checkProtectionFn) {
 	};
 	const addrHex = `0x${address.toString(16)}`;
 	try {
-		const { createPlatformProvider } = await import("./factory-DxlGh9Xf.mjs").then((n) => n.n);
+		const { createPlatformProvider } = await import("./factory-C90tBff6.mjs").then((n) => n.n);
 		const provider = createPlatformProvider();
 		if ((await provider.checkAvailability()).available) {
 			const handle = provider.openProcess(pid, true);
@@ -9078,9 +8347,9 @@ async function scanMemoryWindows(pid, pattern, patternType) {
 			addresses: [],
 			error: stderr
 		};
-		const _trimmed = stdout.trim();
-		if (!_trimmed) throw new Error("PowerShell returned empty output");
-		const result = JSON.parse(_trimmed);
+		const trimmed = stdout.trim();
+		if (!trimmed) throw new Error("PowerShell returned empty output");
+		const result = JSON.parse(trimmed);
 		return {
 			success: result.success,
 			addresses: result.addresses || [],
@@ -9261,7 +8530,7 @@ async function scanMemoryMac(pid, pattern, patternType) {
 * Returns null if the native provider is unavailable.
 */
 async function scanMemoryMacNative(pid, patternBytes, patternMask) {
-	const { createPlatformProvider } = await import("./factory-DxlGh9Xf.mjs").then((n) => n.n);
+	const { createPlatformProvider } = await import("./factory-C90tBff6.mjs").then((n) => n.n);
 	const provider = createPlatformProvider();
 	if (!(await provider.checkAvailability()).available) return null;
 	const handle = provider.openProcess(pid, false);
@@ -9469,7 +8738,7 @@ async function scanMemoryFiltered(pid, pattern, addresses, patternType = "hex",
 	};
 }
 async function withScopedTaskPort(pid, fn) {
-	const { machTaskSelf, taskForPid, machPortDeallocate, KERN } = await import("./DarwinAPI-BNPxu0RH.mjs").then((n) => n.t);
+	const { machTaskSelf, taskForPid, machPortDeallocate, KERN } = await import("./DarwinAPI-ETyy0xyo.mjs").then((n) => n.t);
 	const selfTask = machTaskSelf();
 	const { kr, task } = taskForPid(selfTask, pid);
 	if (kr !== KERN.SUCCESS) return false;
@@ -9483,16 +8752,16 @@ async function suspendProcess(platform, pid) {
 	try {
 		switch (platform) {
 			case "darwin": {
-				const { taskSuspend, KERN } = await import("./DarwinAPI-BNPxu0RH.mjs").then((n) => n.t);
+				const { taskSuspend, KERN } = await import("./DarwinAPI-ETyy0xyo.mjs").then((n) => n.t);
 				return withScopedTaskPort(pid, (task) => taskSuspend(task) === KERN.SUCCESS);
 			}
 			case "linux": {
-				const { execAsync } = await import("./types-CPhOReNX.mjs").then((n) => n.i);
+				const { execAsync } = await import("./types-DDBWs9UP.mjs").then((n) => n.i);
 				await execAsync(`kill -STOP ${pid}`, { timeout: MEMORY_PROCESS_SIGNAL_TIMEOUT_MS });
 				return true;
 			}
 			case "win32": {
-				const { execAsync } = await import("./types-CPhOReNX.mjs").then((n) => n.i);
+				const { execAsync } = await import("./types-DDBWs9UP.mjs").then((n) => n.i);
 				await execAsync(`powershell -NoProfile -Command "(Add-Type -MemberDefinition '[DllImport("ntdll.dll")] public static extern int NtSuspendProcess(IntPtr h);' -Name W -Namespace N -PassThru)::NtSuspendProcess((Get-Process -Id ${pid}).Handle)"`, { timeout: MEMORY_PROBE_CMD_TIMEOUT_MS });
 				return true;
 			}
@@ -9507,19 +8776,19 @@ async function resumeProcess(platform, pid) {
 	try {
 		switch (platform) {
 			case "darwin": {
-				const { taskResume } = await import("./DarwinAPI-BNPxu0RH.mjs").then((n) => n.t);
+				const { taskResume } = await import("./DarwinAPI-ETyy0xyo.mjs").then((n) => n.t);
 				await withScopedTaskPort(pid, (task) => {
 					taskResume(task);
 				});
 				break;
 			}
 			case "linux": {
-				const { execAsync } = await import("./types-CPhOReNX.mjs").then((n) => n.i);
+				const { execAsync } = await import("./types-DDBWs9UP.mjs").then((n) => n.i);
 				await execAsync(`kill -CONT ${pid}`, { timeout: MEMORY_PROCESS_SIGNAL_TIMEOUT_MS });
 				break;
 			}
 			case "win32": {
-				const { execAsync } = await import("./types-CPhOReNX.mjs").then((n) => n.i);
+				const { execAsync } = await import("./types-DDBWs9UP.mjs").then((n) => n.i);
 				await execAsync(`powershell -NoProfile -Command "(Add-Type -MemberDefinition '[DllImport("ntdll.dll")] public static extern int NtResumeProcess(IntPtr h);' -Name W -Namespace N -PassThru)::NtResumeProcess((Get-Process -Id ${pid}).Handle)"`, { timeout: MEMORY_PROBE_CMD_TIMEOUT_MS });
 				break;
 			}
@@ -9647,9 +8916,9 @@ async function dumpMemoryRegion(platform, pid, startAddress, size, outputPath) {
 			maxBuffer: 1024 * 1024,
 			timeout: MEMORY_DUMP_TIMEOUT_MS
 		});
-		const _trimmed = stdout.trim();
-		if (!_trimmed) throw new Error("PowerShell returned empty output");
-		const result = JSON.parse(_trimmed);
+		const trimmed = stdout.trim();
+		if (!trimmed) throw new Error("PowerShell returned empty output");
+		const result = JSON.parse(trimmed);
 		return {
 			success: result.success,
 			error: result.error
@@ -9857,9 +9126,9 @@ async function enumerateRegions(platform, pid) {
 			maxBuffer: 1024 * 1024 * 10,
 			timeout: MEMORY_MODULES_TIMEOUT_MS
 		});
-		const _trimmed = stdout.trim();
-		if (!_trimmed) throw new Error("PowerShell returned empty output");
-		const result = JSON.parse(_trimmed);
+		const trimmed = stdout.trim();
+		if (!trimmed) throw new Error("PowerShell returned empty output");
+		const result = JSON.parse(trimmed);
 		return {
 			success: result.success,
 			regions: result.regions,
@@ -10009,7 +9278,7 @@ async function checkMemoryProtection(platform, pid, address) {
 	}
 	if (platform === "darwin") {
 		try {
-			const { createPlatformProvider } = await import("./factory-DxlGh9Xf.mjs").then((n) => n.n);
+			const { createPlatformProvider } = await import("./factory-C90tBff6.mjs").then((n) => n.n);
 			const provider = createPlatformProvider();
 			if ((await provider.checkAvailability()).available) {
 				const handle = provider.openProcess(pid, false);
@@ -10104,9 +9373,9 @@ async function checkMemoryProtection(platform, pid, address) {
 			maxBuffer: 1024 * 1024,
 			timeout: MEMORY_PROTECTION_PWSH_TIMEOUT_MS
 		});
-		const _trimmed = stdout.trim();
-		if (!_trimmed) throw new Error("PowerShell returned empty output");
-		const result = JSON.parse(_trimmed);
+		const trimmed = stdout.trim();
+		if (!trimmed) throw new Error("PowerShell returned empty output");
+		const result = JSON.parse(trimmed);
 		return {
 			success: result.success,
 			protection: result.protection,
@@ -10217,9 +9486,9 @@ try {
 			maxBuffer: 1024 * 1024 * 10,
 			timeout: MEMORY_MODULES_TIMEOUT_MS
 		});
-		const _trimmed = stdout.trim();
-		if (!_trimmed) throw new Error("PowerShell returned empty output");
-		return JSON.parse(_trimmed);
+		const trimmed = stdout.trim();
+		if (!trimmed) throw new Error("PowerShell returned empty output");
+		return JSON.parse(trimmed);
 	} catch (error) {
 		logger.error("Module enumeration failed:", error);
 		return {
@@ -10371,9 +9640,9 @@ async function injectDll(platform, pid, dllPath) {
 			maxBuffer: 1024 * 1024,
 			timeout: MEMORY_INJECT_TIMEOUT_MS
 		});
-		const _trimmed = stdout.trim();
-		if (!_trimmed) throw new Error("PowerShell returned empty output");
-		const result = JSON.parse(_trimmed);
+		const trimmed = stdout.trim();
+		if (!trimmed) throw new Error("PowerShell returned empty output");
+		const result = JSON.parse(trimmed);
 		return {
 			success: result.success,
 			remoteThreadId: result.remoteThreadId,
@@ -10581,9 +9850,9 @@ def __lldb_init_module(debugger, internal_dict):
 			maxBuffer: 1024 * 1024,
 			timeout: MEMORY_INJECT_TIMEOUT_MS
 		});
-		const _trimmed = stdout.trim();
-		if (!_trimmed) throw new Error("PowerShell returned empty output");
-		const result = JSON.parse(_trimmed);
+		const trimmed = stdout.trim();
+		if (!trimmed) throw new Error("PowerShell returned empty output");
+		const result = JSON.parse(trimmed);
 		return {
 			success: result.success,
 			remoteThreadId: result.remoteThreadId,
@@ -11006,29 +10275,29 @@ var StealthScripts = class StealthScripts {
 	*/
 	static async injectTimingDefense(page) {
 		await page.evaluateOnNewDocument(() => {
-			const _originalPerfNow = performance.now.bind(performance);
-			const _originalDateNow = Date.now;
-			let _cdpOffset = 0;
+			const originalPerfNow = performance.now.bind(performance);
+			const originalDateNow = Date.now;
+			let cdpOffset = 0;
 			performance.now = function() {
 				const win = window;
-				if (typeof win.__cdpTimingOffset === "number") _cdpOffset = win.__cdpTimingOffset;
-				return _originalPerfNow() - _cdpOffset;
+				if (typeof win.__cdpTimingOffset === "number") cdpOffset = win.__cdpTimingOffset;
+				return originalPerfNow() - cdpOffset;
 			};
 			Date.now = function() {
 				const win = window;
-				if (typeof win.__cdpTimingOffset === "number") _cdpOffset = win.__cdpTimingOffset;
-				return _originalDateNow.call(Date) - Math.floor(_cdpOffset);
+				if (typeof win.__cdpTimingOffset === "number") cdpOffset = win.__cdpTimingOffset;
+				return originalDateNow.call(Date) - Math.floor(cdpOffset);
 			};
-			const _OriginalDate = Date;
-			const _ProxiedDate = function(...args) {
-				if (args.length === 0) return new _OriginalDate(_OriginalDate.now());
-				return new _OriginalDate(...args);
+			const OriginalDateValue = Date;
+			const ProxiedDateValue = function(...args) {
+				if (args.length === 0) return new OriginalDateValue(OriginalDateValue.now());
+				return new OriginalDateValue(...args);
 			};
-			_ProxiedDate.now = _OriginalDate.now;
-			_ProxiedDate.parse = _OriginalDate.parse.bind(_OriginalDate);
-			_ProxiedDate.UTC = _OriginalDate.UTC.bind(_OriginalDate);
-			Object.defineProperty(_ProxiedDate, "prototype", { value: _OriginalDate.prototype });
-			globalThis.Date = _ProxiedDate;
+			ProxiedDateValue.now = OriginalDateValue.now;
+			ProxiedDateValue.parse = OriginalDateValue.parse.bind(OriginalDateValue);
+			ProxiedDateValue.UTC = OriginalDateValue.UTC.bind(OriginalDateValue);
+			Object.defineProperty(ProxiedDateValue, "prototype", { value: OriginalDateValue.prototype });
+			globalThis.Date = ProxiedDateValue;
 		});
 	}
 	static async hideWebDriver(page) {
@@ -11354,6 +10623,7 @@ var modules_exports = /* @__PURE__ */ __exportAll({
 	AdvancedDeobfuscator: () => AdvancedDeobfuscator,
 	CodeAnalyzer: () => CodeAnalyzer,
 	CodeCollector: () => CodeCollector,
+	ConsoleMonitor: () => ConsoleMonitor,
 	CryptoDetector: () => CryptoDetector,
 	DebuggerManager: () => DebuggerManager,
 	Deobfuscator: () => Deobfuscator,
@@ -11362,4 +10632,4 @@ var modules_exports = /* @__PURE__ */ __exportAll({
 	RuntimeInspector: () => RuntimeInspector
 });
 //#endregion
-export { PerformanceMonitor as a, AICaptchaDetector as c, MemoryManager as i, CamoufoxBrowserManager as l, StealthScripts as n, ExternalToolRunner as o, UnifiedProcessManager as r, runWebcrack as s, modules_exports as t };
+export { PerformanceMonitor as a, CamoufoxBrowserManager as c, MemoryManager as i, StealthScripts as n, ExternalToolRunner as o, UnifiedProcessManager as r, AICaptchaDetector as s, modules_exports as t };