@trenchwork/erosolar 1.1.16 → 1.1.18

package/dist/capabilities/aflppCapability.js

@@ -0,0 +1,301 @@
+import { spawn } from 'node:child_process';
+import { existsSync, mkdirSync, readFileSync, writeFileSync, readdirSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { logDebug } from '../utils/debugLogger.js';
+import { runBinary, formatResult } from './_processRunner.js';
+import { getSharedArtifactStore } from '../core/artifactStore.js';
+const JOBS_ROOT = join(homedir(), '.erosolar', 'jobs', 'aflpp');
+function ensureJobsDir() {
+    if (!existsSync(JOBS_ROOT))
+        mkdirSync(JOBS_ROOT, { recursive: true });
+}
+function jobStatePath(jobId) {
+    return join(JOBS_ROOT, `${jobId}.json`);
+}
+function readJob(jobId) {
+    const p = jobStatePath(jobId);
+    if (!existsSync(p))
+        return null;
+    return JSON.parse(readFileSync(p, 'utf8'));
+}
+function writeJob(record) {
+    ensureJobsDir();
+    writeFileSync(jobStatePath(record.jobId), JSON.stringify(record, null, 2), 'utf8');
+}
+function isAlive(pid) {
+    if (pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function buildAflppTools() {
+    return [
+        {
+            name: 'afl_fuzz_start',
+            description: 'Start an AFL++ fuzz campaign as a detached background process. Returns a jobId. Poll via afl_fuzz_status, terminate via afl_fuzz_stop. Harness must be AFL-instrumented (afl-clang-fast / afl-cc).',
+            parameters: {
+                type: 'object',
+                properties: {
+                    harness: { type: 'string', description: 'Path to AFL-instrumented binary' },
+                    inputDir: { type: 'string', description: 'Seed corpus directory (-i)' },
+                    outputDir: { type: 'string', description: 'Findings directory (-o)' },
+                    dictionary: { type: 'string', description: 'Optional dictionary path (-x)' },
+                    memoryLimitMB: { type: 'number', description: '-m memory limit MB (omit for none)' },
+                    extraArgs: { type: 'array', items: { type: 'string' }, description: 'Extra afl-fuzz args before --' },
+                    targetArgs: { type: 'array', items: { type: 'string' }, description: 'Args after -- passed to harness; use @@ for input file marker' },
+                },
+                required: ['harness', 'inputDir', 'outputDir'],
+            },
+            handler: async (args) => {
+                const harness = String(args.harness);
+                const inputDir = String(args.inputDir);
+                const outputDir = String(args.outputDir);
+                const argv = ['-i', inputDir, '-o', outputDir];
+                if (args.dictionary)
+                    argv.push('-x', String(args.dictionary));
+                if (typeof args.memoryLimitMB === 'number')
+                    argv.push('-m', String(Math.floor(args.memoryLimitMB)));
+                if (Array.isArray(args.extraArgs))
+                    argv.push(...args.extraArgs.map(String));
+                argv.push('--', harness);
+                if (Array.isArray(args.targetArgs))
+                    argv.push(...args.targetArgs.map(String));
+                ensureJobsDir();
+                if (!existsSync(outputDir))
+                    mkdirSync(outputDir, { recursive: true });
+                const child = spawn('afl-fuzz', argv, {
+                    detached: true,
+                    stdio: ['ignore', 'ignore', 'ignore'],
+                    env: {
+                        ...process.env,
+                        AFL_SKIP_CPUFREQ: '1',
+                        AFL_I_DONT_CARE_ABOUT_MISSING_CRASHES: '1',
+                    },
+                });
+                child.unref();
+                const jobId = `${Date.now()}_${child.pid ?? 'nopid'}`;
+                const record = {
+                    jobId,
+                    pid: child.pid ?? -1,
+                    harness,
+                    args: argv,
+                    inputDir,
+                    outputDir,
+                    startedAt: new Date().toISOString(),
+                };
+                writeJob(record);
+                return JSON.stringify({ jobId, pid: record.pid, outputDir, command: `afl-fuzz ${argv.join(' ')}` });
+            },
+        },
+        {
+            name: 'afl_fuzz_status',
+            description: 'Status and stats for a running AFL++ campaign by jobId.',
+            parameters: {
+                type: 'object',
+                properties: { jobId: { type: 'string' } },
+                required: ['jobId'],
+            },
+            handler: async (args) => {
+                const job = readJob(String(args.jobId));
+                if (!job)
+                    return JSON.stringify({ error: 'job not found', jobId: args.jobId });
+                const alive = isAlive(job.pid);
+                const statsFile = join(job.outputDir, 'default', 'fuzzer_stats');
+                const stats = {};
+                if (existsSync(statsFile)) {
+                    for (const line of readFileSync(statsFile, 'utf8').split('\n')) {
+                        const idx = line.indexOf(':');
+                        if (idx > 0)
+                            stats[line.slice(0, idx).trim()] = line.slice(idx + 1).trim();
+                    }
+                }
+                const crashesDir = join(job.outputDir, 'default', 'crashes');
+                const crashFiles = existsSync(crashesDir)
+                    ? readdirSync(crashesDir).filter((f) => f !== 'README.txt')
+                    : [];
+                const store = getSharedArtifactStore();
+                const crashes = crashFiles.slice(0, 50).map((name) => {
+                    const path = join(crashesDir, name);
+                    try {
+                        const buf = readFileSync(path);
+                        const put = store.put(buf, {
+                            source: 'afl_crash',
+                            tags: [job.jobId, name],
+                            description: `afl crash ${name} from job ${job.jobId}`,
+                        });
+                        return { name, path, artifactId: put.id, size: put.size };
+                    }
+                    catch (e) {
+                        return { name, path, error: String(e) };
+                    }
+                });
+                return JSON.stringify({
+                    jobId: job.jobId,
+                    pid: job.pid,
+                    alive,
+                    startedAt: job.startedAt,
+                    stats,
+                    crashCount: crashFiles.length,
+                    crashes,
+                });
+            },
+        },
+        {
+            name: 'afl_fuzz_stop',
+            description: 'Terminate a running AFL++ campaign by jobId.',
+            parameters: {
+                type: 'object',
+                properties: { jobId: { type: 'string' } },
+                required: ['jobId'],
+            },
+            handler: async (args) => {
+                const job = readJob(String(args.jobId));
+                if (!job)
+                    return JSON.stringify({ error: 'job not found', jobId: args.jobId });
+                try {
+                    process.kill(job.pid, 'SIGTERM');
+                    await new Promise((r) => setTimeout(r, 1500));
+                    if (isAlive(job.pid))
+                        process.kill(job.pid, 'SIGKILL');
+                }
+                catch (e) {
+                    return JSON.stringify({ jobId: job.jobId, killed: false, error: String(e) });
+                }
+                return JSON.stringify({ jobId: job.jobId, killed: true });
+            },
+        },
+        {
+            name: 'afl_showmap',
+            description: 'Capture coverage trace for a single input under afl-showmap.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    harness: { type: 'string' },
+                    input: { type: 'string', description: 'Path to input file' },
+                    output: { type: 'string', description: 'Path to write trace map' },
+                    targetArgs: { type: 'array', items: { type: 'string' }, description: 'Args to harness; use @@ for input marker' },
+                },
+                required: ['harness', 'input', 'output'],
+            },
+            handler: async (args) => {
+                const targetArgs = args.targetArgs?.map(String) ?? [];
+                const argv = ['-o', String(args.output), '-i', String(args.input), '--', String(args.harness), ...targetArgs];
+                const result = await runBinary('afl-showmap', argv, { timeoutMs: 60_000 });
+                return formatResult('afl-showmap', argv, result);
+            },
+        },
+        {
+            name: 'afl_cmin',
+            description: 'Minimize a corpus to the smallest set with the same coverage (afl-cmin).',
+            parameters: {
+                type: 'object',
+                properties: {
+                    harness: { type: 'string' },
+                    inputDir: { type: 'string' },
+                    outputDir: { type: 'string' },
+                    targetArgs: { type: 'array', items: { type: 'string' } },
+                },
+                required: ['harness', 'inputDir', 'outputDir'],
+            },
+            handler: async (args) => {
+                const targetArgs = args.targetArgs?.map(String) ?? [];
+                const argv = ['-i', String(args.inputDir), '-o', String(args.outputDir), '--', String(args.harness), ...targetArgs];
+                const result = await runBinary('afl-cmin', argv, { timeoutMs: 30 * 60 * 1000 });
+                return formatResult('afl-cmin', argv, result);
+            },
+        },
+        {
+            name: 'afl_compile_harness',
+            description: 'Compile a fuzzing harness with AFL++ instrumentation (afl-clang-fast or afl-cc). Optionally persist the resulting binary to the artifact store. Use this to instrument a target before afl_fuzz_start.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    sources: { type: 'array', items: { type: 'string' }, description: 'Source files to compile' },
+                    output: { type: 'string', description: 'Output binary path' },
+                    compiler: { type: 'string', enum: ['afl-clang-fast', 'afl-cc', 'afl-clang-lto', 'afl-clang-fast++'], description: 'Default afl-clang-fast' },
+                    sanitizers: { type: 'array', items: { type: 'string' }, description: 'AFL_USE_* sanitizers (asan, ubsan, msan, cfisan, tsan, lsan)' },
+                    extraFlags: { type: 'array', items: { type: 'string' }, description: 'Extra compiler flags (e.g. -O2 -g -DPERSISTENT)' },
+                    libraries: { type: 'array', items: { type: 'string' }, description: 'Libraries to link (e.g. -lz, -lpcap)' },
+                    persistArtifact: { type: 'boolean', description: 'Register output binary in the artifact store' },
+                },
+                required: ['sources', 'output'],
+            },
+            handler: async (args) => {
+                const compiler = String(args.compiler ?? 'afl-clang-fast');
+                const sources = args.sources.map(String);
+                const argv = [];
+                if (Array.isArray(args.extraFlags))
+                    argv.push(...args.extraFlags.map(String));
+                argv.push(...sources);
+                if (Array.isArray(args.libraries))
+                    argv.push(...args.libraries.map(String));
+                argv.push('-o', String(args.output));
+                const env = {};
+                if (Array.isArray(args.sanitizers)) {
+                    for (const s of args.sanitizers) {
+                        env[`AFL_USE_${String(s).toUpperCase()}`] = '1';
+                    }
+                }
+                const result = await runBinary(compiler, argv, { timeoutMs: 10 * 60 * 1000, env });
+                let artifactInfo = {};
+                if (result.exitCode === 0 && args.persistArtifact && existsSync(String(args.output))) {
+                    try {
+                        const buf = readFileSync(String(args.output));
+                        const put = getSharedArtifactStore().put(buf, {
+                            source: 'afl_harness',
+                            tags: ['compiled', compiler],
+                            description: `AFL-instrumented harness ${String(args.output)}`,
+                        });
+                        artifactInfo = { artifactId: put.id, size: put.size };
+                    }
+                    catch (e) {
+                        artifactInfo = { artifactId: `error: ${String(e)}` };
+                    }
+                }
+                const formatted = formatResult(compiler, argv, result);
+                return artifactInfo.artifactId ? `${formatted}\n--- artifact ---\n${JSON.stringify(artifactInfo)}` : formatted;
+            },
+        },
+        {
+            name: 'afl_tmin',
+            description: 'Minimize a single input to the smallest one with the same coverage (afl-tmin).',
+            parameters: {
+                type: 'object',
+                properties: {
+                    harness: { type: 'string' },
+                    input: { type: 'string' },
+                    output: { type: 'string' },
+                    targetArgs: { type: 'array', items: { type: 'string' } },
+                },
+                required: ['harness', 'input', 'output'],
+            },
+            handler: async (args) => {
+                const targetArgs = args.targetArgs?.map(String) ?? [];
+                const argv = ['-i', String(args.input), '-o', String(args.output), '--', String(args.harness), ...targetArgs];
+                const result = await runBinary('afl-tmin', argv, { timeoutMs: 30 * 60 * 1000 });
+                return formatResult('afl-tmin', argv, result);
+            },
+        },
+    ];
+}
+export class AflppCapabilityModule {
+    id = 'capability.aflpp';
+    description = 'AFL++ fuzzer wrappers — afl_compile_harness, afl_fuzz_start (detached), afl_fuzz_status (auto-registers crash files in the artifact store), afl_fuzz_stop, afl_showmap, afl_cmin, afl_tmin. Long campaigns run as detached background processes addressed by jobId.';
+    async create(_context) {
+        void _context;
+        logDebug('[AFL++] Capability initialized');
+        const toolSuite = {
+            id: 'aflpp.tools',
+            description: 'AFL++ fuzzer wrappers',
+            tools: buildAflppTools(),
+        };
+        return { id: this.id, description: this.description, toolSuite };
+    }
+}
+//# sourceMappingURL=aflppCapability.js.map

package/dist/capabilities/aflppCapability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aflppCapability.js","sourceRoot":"","sources":["../../src/capabilities/aflppCapability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAYhE,SAAS,aAAa;IACpB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAkB,CAAC;AAC9D,CAAC;AAED,SAAS,QAAQ,CAAC,MAAqB;IACrC,aAAa,EAAE,CAAC;IAChB,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe;IACtB,OAAO;QACL;YACE,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,oMAAoM;YACjN,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;oBAC3E,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4BAA4B,EAAE;oBACvE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yBAAyB,EAAE;oBACrE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;oBAC5E,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;oBACpF,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,+BAA+B,EAAE;oBACrG,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,+DAA+D,EAAE;iBACvI;gBACD,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC;aAC/C;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACvC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACzC,MAAM,IAAI,GAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;gBACzD,IAAI,IAAI,CAAC,UAAU;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC9D,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;gBACpG,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAI,IAAI,CAAC,SAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC1F,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACzB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAI,IAAI,CAAC,UAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5F,aAAa,EAAE,CAAC;gBAChB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;oBAAE,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtE,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE;oBACpC,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;oBACrC,GAAG,EAAE;wBACH,GAAG,OAAO,CAAC,GAAG;wBACd,gBAAgB,EAAE,GAAG;wBACrB,qCAAqC,EAAE,GAAG;qBAC3C;iBACF,CAAC,CAAC;gBACH,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAkB;oBAC5B,KAAK;oBACL,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;oBACpB,OAAO;oBACP,IAAI,EAAE,IAAI;oBACV,QAAQ;oBACR,SAAS;oBACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC;gBACF,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACjB,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACtG,CAAC;SACF;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,yDAAyD;YACtE,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gBACzC,QAAQ,EAAE,CAAC,OAAO,CAAC;aACpB;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACxC,IAAI,CAAC,GAAG;oBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC/E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;gBACjE,MAAM,KAAK,GAA2B,EAAE,CAAC;gBACzC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;wBAC9B,IAAI,GAAG,GAAG,CAAC;4BAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC7E,CAAC;gBACH,CAAC;gBACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;gBAC7D,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;oBACvC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,YAAY,CAAC;oBAC3D,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;gBACvC,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;oBACnD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;oBACpC,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;wBAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;4BACzB,MAAM,EAAE,WAAW;4BACnB,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC;4BACvB,WAAW,EAAE,aAAa,IAAI,aAAa,GAAG,CAAC,KAAK,EAAE;yBACvD,CAAC,CAAC;wBACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;oBAC5D,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1C,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,KAAK;oBACL,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,KAAK;oBACL,UAAU,EAAE,UAAU,CAAC,MAAM;oBAC7B,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;SACF;QACD;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,8CAA8C;YAC3D,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gBACzC,QAAQ,EAAE,CAAC,OAAO,CAAC;aACpB;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACxC,IAAI,CAAC,GAAG;oBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC/E,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;oBACjC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;oBAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;wBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACzD,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC/E,CAAC;gBACD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,8DAA8D;YAC3E,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE;oBAC5D,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yBAAyB,EAAE;oBAClE,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,0CAA0C,EAAE;iBAClH;gBACD,QAAQ,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC;aACzC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,UAAU,GAAI,IAAI,CAAC,UAAmC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChF,MAAM,IAAI,GAAa,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC;gBACxH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC3E,OAAO,YAAY,CAAC,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACnD,CAAC;SACF;QACD;YACE,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,0EAA0E;YACvF,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC5B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC7B,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBACzD;gBACD,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC;aAC/C;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,UAAU,GAAI,IAAI,CAAC,UAAmC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChF,MAAM,IAAI,GAAa,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC;gBAC9H,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;gBAChF,OAAO,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAChD,CAAC;SACF;QACD;YACE,IAAI,EAAE,qBAAqB;YAC3B,WAAW,EAAE,wMAAwM;YACrN,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE;oBAC7F,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE;oBAC7D,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,kBAAkB,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE;oBAC5I,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,8DAA8D,EAAE;oBACrI,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,iDAAiD,EAAE;oBACxH,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,sCAAsC,EAAE;oBAC5G,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,8CAA8C,EAAE;iBAClG;gBACD,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;aAChC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,gBAAgB,CAAC,CAAC;gBAC3D,MAAM,OAAO,GAAI,IAAI,CAAC,OAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACvD,MAAM,IAAI,GAAa,EAAE,CAAC;gBAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAI,IAAI,CAAC,UAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5F,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;gBACtB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAI,IAAI,CAAC,SAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC1F,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBACrC,MAAM,GAAG,GAA2B,EAAE,CAAC;gBACvC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBACnC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAsB,EAAE,CAAC;wBAC5C,GAAG,CAAC,WAAW,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC;oBAClD,CAAC;gBACH,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;gBACnF,IAAI,YAAY,GAA2C,EAAE,CAAC;gBAC9D,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,IAAI,CAAC,eAAe,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;oBACrF,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;wBAC9C,MAAM,GAAG,GAAG,sBAAsB,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE;4BAC5C,MAAM,EAAE,aAAa;4BACrB,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;4BAC5B,WAAW,EAAE,4BAA4B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;yBAC/D,CAAC,CAAC;wBACH,YAAY,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;oBACxD,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,YAAY,GAAG,EAAE,UAAU,EAAE,UAAU,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;oBACvD,CAAC;gBACH,CAAC;gBACD,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBACvD,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,SAAS,uBAAuB,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACjH,CAAC;SACF;QACD;YACE,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,gFAAgF;YAC7F,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC1B,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBACzD;gBACD,QAAQ,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC;aACzC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,UAAU,GAAI,IAAI,CAAC,UAAmC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChF,MAAM,IAAI,GAAa,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC;gBACxH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;gBAChF,OAAO,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAChD,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,qBAAqB;IACvB,EAAE,GAAG,kBAAkB,CAAC;IACxB,WAAW,GAAG,qQAAqQ,CAAC;IAE7R,KAAK,CAAC,MAAM,CAAC,QAA2B;QACtC,KAAK,QAAQ,CAAC;QACd,QAAQ,CAAC,gCAAgC,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAc;YAC3B,EAAE,EAAE,aAAa;YACjB,WAAW,EAAE,uBAAuB;YACpC,KAAK,EAAE,eAAe,EAAE;SACzB,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC;IACnE,CAAC;CACF"}

package/dist/capabilities/binaryAnalysisCapability.d.ts

@@ -0,0 +1,7 @@
+import type { CapabilityContext, CapabilityContribution, CapabilityModule } from '../runtime/agentHost.js';
+export declare class BinaryAnalysisCapabilityModule implements CapabilityModule {
+    readonly id = "capability.binaryAnalysis";
+    readonly description = "Static binary analysis \u2014 file/strings/objdump/readelf/nm/checksec/ROPgadget/r2. Complements the Ghidra MCP server for fast non-decompilation queries.";
+    create(_context: CapabilityContext): Promise<CapabilityContribution>;
+}
+//# sourceMappingURL=binaryAnalysisCapability.d.ts.map

package/dist/capabilities/binaryAnalysisCapability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binaryAnalysisCapability.d.ts","sourceRoot":"","sources":["../../src/capabilities/binaryAnalysisCapability.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAgL3G,qBAAa,8BAA+B,YAAW,gBAAgB;IACrE,QAAQ,CAAC,EAAE,+BAA+B;IAC1C,QAAQ,CAAC,WAAW,gKAA2J;IAEzK,MAAM,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAU3E"}

package/dist/capabilities/binaryAnalysisCapability.js

@@ -0,0 +1,201 @@
+import { logDebug } from '../utils/debugLogger.js';
+import { runBinary, formatResult } from './_processRunner.js';
+function buildBinaryAnalysisTools() {
+    return [
+        {
+            name: 'bin_file',
+            description: 'Run `file` to identify a binary type.',
+            parameters: { type: 'object', properties: { path: { type: 'string' } }, required: ['path'] },
+            handler: async (args) => {
+                const argv = [String(args.path)];
+                const r = await runBinary('file', argv, { timeoutMs: 30_000 });
+                return formatResult('file', argv, r);
+            },
+        },
+        {
+            name: 'bin_strings',
+            description: 'Extract printable strings from a binary.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    path: { type: 'string' },
+                    minLength: { type: 'number', description: '-n minimum length (default 6)' },
+                    encoding: { type: 'string', description: '-e {s,S,l,b,L,B}' },
+                },
+                required: ['path'],
+            },
+            handler: async (args) => {
+                const argv = [];
+                const minLen = typeof args.minLength === 'number' ? Math.max(1, Math.floor(args.minLength)) : 6;
+                argv.push('-n', String(minLen));
+                if (args.encoding)
+                    argv.push('-e', String(args.encoding));
+                argv.push(String(args.path));
+                const r = await runBinary('strings', argv, { timeoutMs: 60_000 });
+                return formatResult('strings', argv, r);
+            },
+        },
+        {
+            name: 'bin_objdump',
+            description: 'Run objdump for headers / disassembly / sections / dynamic info / relocs / symbols.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    path: { type: 'string' },
+                    mode: { type: 'string', enum: ['disasm', 'headers', 'sections', 'dynamic', 'relocs', 'symbols'] },
+                    section: { type: 'string', description: 'Optional --section name to limit disasm scope' },
+                    intelSyntax: { type: 'boolean', description: 'Use -M intel for x86 disassembly' },
+                },
+                required: ['path', 'mode'],
+            },
+            handler: async (args) => {
+                const argv = [];
+                const mode = String(args.mode);
+                if (mode === 'disasm') {
+                    argv.push('-d');
+                    if (args.intelSyntax)
+                        argv.push('-M', 'intel');
+                    if (args.section)
+                        argv.push(`--section=${String(args.section)}`);
+                }
+                else if (mode === 'headers')
+                    argv.push('-h');
+                else if (mode === 'sections')
+                    argv.push('-x');
+                else if (mode === 'dynamic')
+                    argv.push('-T');
+                else if (mode === 'relocs')
+                    argv.push('-r');
+                else if (mode === 'symbols')
+                    argv.push('-t');
+                argv.push(String(args.path));
+                const r = await runBinary('objdump', argv, { timeoutMs: 2 * 60_000 });
+                return formatResult('objdump', argv, r);
+            },
+        },
+        {
+            name: 'bin_readelf',
+            description: 'Run readelf for ELF metadata (headers / sections / symbols / dynamic / notes / relocs / all).',
+            parameters: {
+                type: 'object',
+                properties: {
+                    path: { type: 'string' },
+                    mode: { type: 'string', enum: ['all', 'headers', 'sections', 'symbols', 'dynamic', 'notes', 'relocs'] },
+                },
+                required: ['path', 'mode'],
+            },
+            handler: async (args) => {
+                const mode = String(args.mode);
+                const flagMap = {
+                    all: '-a',
+                    headers: '-h',
+                    sections: '-S',
+                    symbols: '-s',
+                    dynamic: '-d',
+                    notes: '-n',
+                    relocs: '-r',
+                };
+                const flag = flagMap[mode] ?? '-a';
+                const argv = [flag, String(args.path)];
+                const r = await runBinary('readelf', argv, { timeoutMs: 60_000 });
+                return formatResult('readelf', argv, r);
+            },
+        },
+        {
+            name: 'bin_nm',
+            description: 'List symbols of a binary using nm.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    path: { type: 'string' },
+                    dynamic: { type: 'boolean' },
+                    demangle: { type: 'boolean' },
+                },
+                required: ['path'],
+            },
+            handler: async (args) => {
+                const argv = [];
+                if (args.dynamic)
+                    argv.push('-D');
+                if (args.demangle)
+                    argv.push('-C');
+                argv.push(String(args.path));
+                const r = await runBinary('nm', argv, { timeoutMs: 60_000 });
+                return formatResult('nm', argv, r);
+            },
+        },
+        {
+            name: 'bin_checksec',
+            description: 'Check binary security mitigations (NX, PIE, RELRO, Stack Canary, Fortify) via checksec.',
+            parameters: {
+                type: 'object',
+                properties: { path: { type: 'string' } },
+                required: ['path'],
+            },
+            handler: async (args) => {
+                const argv = ['--file=' + String(args.path)];
+                const r = await runBinary('checksec', argv, { timeoutMs: 30_000 });
+                return formatResult('checksec', argv, r);
+            },
+        },
+        {
+            name: 'bin_ropgadget',
+            description: 'Find ROP gadgets in a binary using ROPgadget.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    path: { type: 'string' },
+                    filter: { type: 'string', description: 'Optional gadget filter (e.g. "pop rdi")' },
+                    maxGadgetLength: { type: 'number', description: '--depth value' },
+                },
+                required: ['path'],
+            },
+            handler: async (args) => {
+                const argv = ['--binary', String(args.path)];
+                if (args.filter)
+                    argv.push('--only', String(args.filter));
+                if (typeof args.maxGadgetLength === 'number') {
+                    argv.push('--depth', String(Math.max(1, Math.floor(args.maxGadgetLength))));
+                }
+                const r = await runBinary('ROPgadget', argv, { timeoutMs: 5 * 60_000 });
+                return formatResult('ROPgadget', argv, r);
+            },
+        },
+        {
+            name: 'bin_radare2_cmd',
+            description: 'Run a single radare2 command via -c (use -A to auto-analyze on load).',
+            parameters: {
+                type: 'object',
+                properties: {
+                    path: { type: 'string' },
+                    command: { type: 'string', description: 'r2 command (e.g. "afl", "pdf @ main")' },
+                    analyze: { type: 'boolean', description: 'Pass -A to auto-analyze (default true)' },
+                },
+                required: ['path', 'command'],
+            },
+            handler: async (args) => {
+                const argv = ['-q'];
+                if (args.analyze !== false)
+                    argv.push('-A');
+                argv.push('-c', String(args.command), String(args.path));
+                const r = await runBinary('r2', argv, { timeoutMs: 5 * 60_000 });
+                return formatResult('r2', argv, r);
+            },
+        },
+    ];
+}
+export class BinaryAnalysisCapabilityModule {
+    id = 'capability.binaryAnalysis';
+    description = 'Static binary analysis — file/strings/objdump/readelf/nm/checksec/ROPgadget/r2. Complements the Ghidra MCP server for fast non-decompilation queries.';
+    async create(_context) {
+        void _context;
+        logDebug('[BinAnalysis] Capability initialized');
+        const toolSuite = {
+            id: 'binaryAnalysis.tools',
+            description: 'Static binary analysis wrappers',
+            tools: buildBinaryAnalysisTools(),
+        };
+        return { id: this.id, description: this.description, toolSuite };
+    }
+}
+//# sourceMappingURL=binaryAnalysisCapability.js.map

package/dist/capabilities/binaryAnalysisCapability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binaryAnalysisCapability.js","sourceRoot":"","sources":["../../src/capabilities/binaryAnalysisCapability.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE9D,SAAS,wBAAwB;IAC/B,OAAO;QACL;YACE,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,uCAAuC;YACpD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE;YAC5F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC/D,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACvC,CAAC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,0CAA0C;YACvD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;oBAC3E,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;iBAC9D;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAa,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAChC,IAAI,IAAI,CAAC,QAAQ;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC1D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7B,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;gBAClE,OAAO,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1C,CAAC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,qFAAqF;YAClG,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE;oBACjG,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+CAA+C,EAAE;oBACzF,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,kCAAkC,EAAE;iBAClF;gBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;aAC3B;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAa,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAChB,IAAI,IAAI,CAAC,WAAW;wBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBAC/C,IAAI,IAAI,CAAC,OAAO;wBAAE,IAAI,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACnE,CAAC;qBAAM,IAAI,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;qBAC1C,IAAI,IAAI,KAAK,UAAU;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;qBACzC,IAAI,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;qBACxC,IAAI,IAAI,KAAK,QAAQ;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;qBACvC,IAAI,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7B,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;gBACtE,OAAO,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1C,CAAC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,+FAA+F;YAC5G,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE;iBACxG;gBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;aAC3B;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/B,MAAM,OAAO,GAA2B;oBACtC,GAAG,EAAE,IAAI;oBACT,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,IAAI;oBACb,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,IAAI;iBACb,CAAC;gBACF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;gBACnC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;gBAClE,OAAO,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1C,CAAC;SACF;QACD;YACE,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,oCAAoC;YACjD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;iBAC9B;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAa,EAAE,CAAC;gBAC1B,IAAI,IAAI,CAAC,OAAO;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClC,IAAI,IAAI,CAAC,QAAQ;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7B,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC7D,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACrC,CAAC;SACF;QACD;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,yFAAyF;YACtG,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gBACxC,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7C,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;gBACnE,OAAO,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC3C,CAAC;SACF;QACD;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,+CAA+C;YAC5D,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yCAAyC,EAAE;oBAClF,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE;iBAClE;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7C,IAAI,IAAI,CAAC,MAAM;oBAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC1D,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;oBAC7C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9E,CAAC;gBACD,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;gBACxE,OAAO,YAAY,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5C,CAAC;SACF;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,uEAAuE;YACpF,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;oBACjF,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,wCAAwC,EAAE;iBACpF;gBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;aAC9B;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAa,CAAC,IAAI,CAAC,CAAC;gBAC9B,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzD,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;gBACjE,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACrC,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,8BAA8B;IAChC,EAAE,GAAG,2BAA2B,CAAC;IACjC,WAAW,GAAG,uJAAuJ,CAAC;IAE/K,KAAK,CAAC,MAAM,CAAC,QAA2B;QACtC,KAAK,QAAQ,CAAC;QACd,QAAQ,CAAC,sCAAsC,CAAC,CAAC;QACjD,MAAM,SAAS,GAAc;YAC3B,EAAE,EAAE,sBAAsB;YAC1B,WAAW,EAAE,iCAAiC;YAC9C,KAAK,EAAE,wBAAwB,EAAE;SAClC,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC;IACnE,CAAC;CACF"}

package/dist/capabilities/gdbCapability.d.ts

@@ -0,0 +1,7 @@
+import type { CapabilityContext, CapabilityContribution, CapabilityModule } from '../runtime/agentHost.js';
+export declare class GdbCapabilityModule implements CapabilityModule {
+    readonly id = "capability.gdb";
+    readonly description = "GDB -batch wrappers for crash triage and binary inspection (gdb_run_with_input, gdb_inspect_at, gdb_disassemble). Pwndbg/GEF inherited from ~/.gdbinit if installed.";
+    create(_context: CapabilityContext): Promise<CapabilityContribution>;
+}
+//# sourceMappingURL=gdbCapability.d.ts.map

package/dist/capabilities/gdbCapability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gdbCapability.d.ts","sourceRoot":"","sources":["../../src/capabilities/gdbCapability.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AA2G3G,qBAAa,mBAAoB,YAAW,gBAAgB;IAC1D,QAAQ,CAAC,EAAE,oBAAoB;IAC/B,QAAQ,CAAC,WAAW,0KAA0K;IAExL,MAAM,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAU3E"}