memshell-party-cli 0.6.0 → 0.8.0

package/dist/index.d.ts

@@ -2,7 +2,7 @@ import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 
 /**
  * Type definitions mirroring the MemShellParty backend DTOs.
- * Source of truth: boot/src/main/java/com/reajason/javaweb/boot/{dto,vo,controller}
+ * Source of truth: memshell-party-{api,boot} (v3), with legacy v2 transport support.
  */
 interface ShellConfig {
     server: string;
@@ -15,15 +15,28 @@ interface ShellConfig {
     byPassJavaModule?: boolean;
     shrink?: boolean;
     lambdaSuffix?: boolean;
-    probe?: boolean;
+    /** v3 uses a ProbeConfig object; v2 used a boolean switch. */
+    probe?: boolean | ProbeConfig;
+    obfuscation?: ObfuscationConfig;
+    obfuscationScope?: "ALL" | "MEMSHELL_INJECTOR" | "INJECTOR" | "MEMSHELL";
 }
 interface ShellToolConfig {
     shellClassName?: string;
+    pass?: string;
+    key?: string;
+    paramName?: string;
+    template?: string;
+    /** @deprecated MemShellParty v2 request field. */
     godzillaPass?: string;
+    /** @deprecated MemShellParty v2 request field. */
     godzillaKey?: string;
+    /** @deprecated MemShellParty v2 request field. */
     commandParamName?: string;
+    /** @deprecated MemShellParty v2 request field. */
     commandTemplate?: string;
+    /** @deprecated MemShellParty v2 request field. */
     behinderPass?: string;
+    /** @deprecated MemShellParty v2 request field. */
     antSwordPass?: string;
     headerName?: string;
     headerValue?: string;
@@ -36,6 +49,10 @@ interface InjectorConfig {
     urlPattern?: string;
     staticInitialize?: boolean;
 }
+interface ObfuscationConfig {
+    enabled?: boolean;
+    options?: Record<string, unknown>;
+}
 interface MemShellGenerateRequest {
     shellConfig: ShellConfig;
     shellToolConfig: ShellToolConfig;
@@ -59,18 +76,20 @@ interface MemShellGenerateResponse {
     packResult?: string;
     allPackResults?: Record<string, string>;
 }
-type ProbeMethod = "ResponseBody" | "DNSLog" | "Sleep";
-type ProbeContent = "BasicInfo" | "Server" | "OS" | "JDK" | "Bytecode" | "Command";
+type ProbeMethod = "ResponseBody" | "ResponseHeader" | "DNSLog" | "Sleep";
+type ProbeContent = "BasicInfo" | "Server" | "OS" | "JDK" | "Bytecode" | "Command" | "ScriptEngine" | "Filter";
 interface ProbeConfig {
     probeMethod: string;
     probeContent: string;
     shellClassName?: string;
+    respHeaderName?: string;
     targetJreVersion?: number;
     debug?: boolean;
     byPassJavaModule?: boolean;
     shrink?: boolean;
     staticInitialize?: boolean;
     lambdaSuffix?: boolean;
+    obfuscation?: ObfuscationConfig;
 }
 interface ProbeContentConfig {
     host?: string;
@@ -79,6 +98,7 @@ interface ProbeContentConfig {
     server?: string;
     reqParamName?: string;
     commandTemplate?: string;
+    respHeaderName?: string;
 }
 interface ProbeShellGenerateRequest {
     probeConfig: ProbeConfig;
@@ -97,6 +117,30 @@ interface ProbeShellGenerateResponse {
     packResult?: string;
     allPackResults?: Record<string, string>;
 }
+interface BytecodeResult {
+    className: string;
+    size: number;
+    classBytesBase64Str: string;
+}
+interface BytecodeTransformRequest {
+    classBytesBase64: string;
+    packer?: string;
+    byPassJavaModule?: boolean;
+    staticInitialize?: boolean;
+    shrink?: boolean;
+    renamePackage?: boolean;
+    relocateFrom?: string;
+    relocateTo?: string;
+    entryMethod?: string;
+    newClassName?: string;
+    randomName?: boolean;
+    obfuscation?: ObfuscationConfig;
+    server?: string;
+    probe?: ProbeConfig | null;
+}
+interface BytecodeTransformResponse extends BytecodeResult {
+    packResult?: string;
+}
 /** server name -> supported shell types */
 type ServerConfig = Record<string, string[]>;
 /** server name -> { shell tool -> supported shell types } */
@@ -110,6 +154,19 @@ interface CommandConfigVO {
     encryptors: string[];
     implementationClasses: string[];
 }
+interface ToolConfigParam {
+    name: string;
+    type: "string" | "enum";
+    options: string[];
+    group?: string;
+    label?: string;
+    placeholder?: string;
+}
+interface ToolConfigDescriptor {
+    tool: string;
+    params: ToolConfigParam[];
+}
+type ObfuscationOption = Record<string, unknown>;
 interface VersionInfo {
     currentVersion: string;
     latestVersion: string;
@@ -143,17 +200,24 @@ declare class MemPartyClient {
     private readonly baseUrl;
     private readonly fetchImpl;
     private readonly timeoutMs;
+    private generationApiVersion?;
     constructor(options: MemPartyClientOptions);
     getServers(): Promise<ServerConfig>;
     getConfig(): Promise<MainConfig>;
     getPackerTree(): Promise<PackerTree>;
     getPackers(): Promise<string[]>;
     getCommandConfigs(): Promise<CommandConfigVO>;
+    getShellToolConfigs(): Promise<ToolConfigDescriptor[]>;
+    getObfuscationOptions(): Promise<ObfuscationOption[]>;
+    getProbeResponseServers(): Promise<string[]>;
     getVersion(): Promise<VersionInfo>;
     generateMemShell(req: MemShellGenerateRequest): Promise<MemShellGenerateResponse>;
+    private getGenerationApiVersion;
     generateProbe(req: ProbeShellGenerateRequest): Promise<ProbeShellGenerateResponse>;
     /** Parse a fully-qualified class name from a base64-encoded .class file. */
     parseClassName(classBase64: string): Promise<string>;
+    decodeBytecode(classBase64: string): Promise<BytecodeResult>;
+    transformBytecode(req: BytecodeTransformRequest): Promise<BytecodeTransformResponse>;
     private request;
 }
 
@@ -170,6 +234,9 @@ interface MemShellOptions {
     shrink?: boolean;
     lambdaSuffix?: boolean;
     probe?: boolean;
+    obfuscate?: boolean;
+    obfuscationOptions?: Record<string, unknown>;
+    obfuscationScope?: "ALL" | "MEMSHELL_INJECTOR" | "INJECTOR" | "MEMSHELL";
     shellClassName?: string;
     godzillaPass?: string;
     godzillaKey?: string;
@@ -199,12 +266,15 @@ interface ProbeOptions {
     shrink?: boolean;
     staticInitialize?: boolean;
     lambdaSuffix?: boolean;
+    obfuscate?: boolean;
+    obfuscationOptions?: Record<string, unknown>;
     host?: string;
     seconds?: number;
     sleepServer?: string;
     server?: string;
     reqParamName?: string;
     commandTemplate?: string;
+    respHeaderName?: string;
 }
 declare function buildProbeRequest(opts: ProbeOptions): ProbeShellGenerateRequest;
 
@@ -357,6 +427,8 @@ interface CommonConnectOptions {
     extraHeaders?: Record<string, string>;
     timeoutMs?: number;
     insecure?: boolean;
+    /** Tomcat Upgrade shell protocol: the generated shell's fully-qualified class name. */
+    upgradeProtocol?: string;
 }
 
 /** A saved shell connection profile, stored inside a project. */
@@ -371,6 +443,8 @@ interface StoredShell {
     insecure?: boolean;
     /** mimic protocol: site profile name (see 'memparty profile'). */
     profile?: string;
+    /** Godzilla Upgrade shell protocol (generated shell class name). */
+    upgradeProtocol?: string;
     /** Free-form note for this shell (e.g. "DMZ 跳板机"). */
     remark?: string;
     createdAt: string;
@@ -414,6 +488,7 @@ interface ConnectionFlags {
     extraHeaders?: Record<string, string>;
     insecure?: boolean;
     profile?: string;
+    upgradeProtocol?: string;
 }
 interface ResolvedConnection {
     url: string;
@@ -426,6 +501,7 @@ interface ResolvedConnection {
     insecure?: boolean;
     /** mimic protocol: site profile name. */
     profile?: string;
+    upgradeProtocol?: string;
     /** Canonical `project/shell` reference, when resolved from the store. */
     targetName?: string;
 }
@@ -476,9 +552,15 @@ declare function execGodzilla(url: string, pass: string, key: string, command: s
 interface ProfileTemplate {
     /** <title> of this page (metadata — the template is used verbatim). */
     title: string;
-    /** Full HTML of a real page on the site (a response skin). */
+    /**
+     * Full body of a real response on the site (a response skin). Any text
+     * format is allowed — HTML, JSON, XML, JS… When it contains the literal
+     * placeholder `{{payload}}`, the ciphertext is substituted exactly there
+     * (works for every format); without a placeholder the template must be an
+     * HTML page and the cipher's marker fragment is injected before </body>.
+     */
     template: string;
-    /** Content-Type this page is served with. */
+    /** Content-Type this page is served with (the shell answers with it). */
     contentType: string;
     /** Relative rotation weight (default 1). */
     weight?: number;
@@ -502,8 +584,25 @@ interface ProfileRequest {
     secretField: string;
     /** Where the ciphertext goes: form body (default), URL query, or a header. */
     secretIn?: "body" | "query" | "header";
+    /**
+     * Body serialization when secretIn=body: "form" (default, url-encoded) or
+     * "json" (a JSON object with Content-Type application/json — for API sites
+     * whose dominant traffic is JSON XHR). Ignored when bodyTemplate is set.
+     */
+    bodyStyle?: "form" | "json";
+    /**
+     * Full request body with the literal placeholder `{{payload}}` where the
+     * ciphertext goes (takes precedence over bodyStyle; secretIn must be body).
+     * Any text format — an OpenAI-style chat JSON, a GraphQL envelope, an XML
+     * SOAP message, a multipart/form-data body (pair it with a Content-Type
+     * header carrying the same boundary). Decoy macros {{hex:N}}, {{b64:N}},
+     * {{uuid}}, {{ts}}, {{int:A:B}} are rendered per request.
+     */
+    bodyTemplate?: string;
     /** Decoy fields sent alongside (e.g. csrftoken/j_username/agreement). */
     fields?: ProfileFormField[];
+    /** Extra/override request headers for this shape (e.g. Accept). */
+    headers?: Record<string, string>;
     /** Relative rotation weight (default 1) when `request` is an array. */
     weight?: number;
 }
@@ -659,9 +758,29 @@ interface FilterTemplateOptions {
     secret: string;
     /** Carrier field names (form fields / headers) that may hold the ciphertext. */
     fields: string[];
-    /** Cover pages from the site profile (raw HTML, rotated per response). */
-    templates: string[];
+    /**
+     * Lowercase Content-Type needles (contains-match): the body is read only
+     * when its Content-Type matches one — derived from the profile's body
+     * shapes. Empty = never touch the body stream: reading a body the shell
+     * doesn't own consumes it and breaks the app behind us.
+     */
+    bodyContentTypes: string[];
+    /** Cover bodies from the site profile (rotated per response, each with its contentType). */
+    templates: Array<{
+        template: string;
+        contentType: string;
+    }>;
     cipher: MimicCipher;
+    /**
+     * Base64 bytes of the body-wrapper classes (renderWrapperJava, compiled by
+     * the build's first phase). The filter self-defines them at runtime so the
+     * uploaded shell stays a single self-contained class — MemShellParty's
+     * Custom generator can only resolve one class.
+     */
+    wrapper: {
+        bodyB64: string;
+        streamB64: string;
+    };
 }
 declare function renderFilterJava(opts: FilterTemplateOptions): string;
 declare function renderCryptoProbe(cipher: MimicCipher): string;
@@ -709,4 +828,4 @@ declare function testSuo5(url: string, options?: Suo5ConnectOptions): Promise<Co
 
 declare const CLI_VERSION: string;
 
-export { ApiError, type ApiErrorResponse, type BehinderConnectOptions, type BuildDeps, CLI_VERSION, type CommandConfigVO, type CommonConnectOptions, type ConnectTestResult, type ConnectTool, type ConnectionFlags, type CustomBuildInput, type CustomBuildResult, DEFAULT_API_URL, ENV_VAR, type ExecResult, type FetchLike, type FilterTemplateOptions, type GenerateClient, type GodzillaExecOptions, type InjectorConfig, type InstallSkillOptions, JDK_VERSIONS, LEGACY_CIPHER, type MainConfig, MemPartyClient, type MemPartyClientOptions, type MemShellGenerateRequest, type MemShellGenerateResponse, type MemShellOptions, type MemShellResult, type MimicCipher, OUTPUT_LIMIT, type OpCategory, type OpFilter, type OpLogEntry, type OutputOptions, type OutputResult, type PackerOption, type PackerTree, type ProbeConfig, type ProbeContent, type ProbeContentConfig, type ProbeMethod, type ProbeOptions, type ProbeShellGenerateRequest, type ProbeShellGenerateResponse, type ProbeShellResult, type ResolvedConnection, SKILL_NAME, type ServerConfig, type ShellConfig, type ShellInput, type ShellToolConfig, type SkillInstallResult, type SkillScope, type StoredProject, type StoredShell, type Suo5ConnectOptions, type Suo5Mode, type VersionInfo, autoSaveShell, buildCustomMemshell, buildMemShellRequest, buildProbeRequest, createMcpServer, defaultClassName, deriveMarkers, emitPayload, execBehinder, execGodzilla, formatOp, getProject, hasJavac, installSkill, listProjects, logOp, marshalFrameBase64, marshalSuo5Map, opLogPath, profileSecretFields, readOps, removeProject, removeShell, renderCryptoProbe, renderFilterJava, resolveApiUrl, resolveCipher, resolveConnection, resolveJreVersion, saveProjectMeta, saveShell, saveShellMeta, shouldDecode, skillSourceDir, skillTargetDir, startMcpStdio, targetStorePath, testBehinder, testGodzilla, testSuo5, truncateOutput, unmarshalFrameBase64, unmarshalSuo5Map };
+export { ApiError, type ApiErrorResponse, type BehinderConnectOptions, type BuildDeps, type BytecodeResult, type BytecodeTransformRequest, type BytecodeTransformResponse, CLI_VERSION, type CommandConfigVO, type CommonConnectOptions, type ConnectTestResult, type ConnectTool, type ConnectionFlags, type CustomBuildInput, type CustomBuildResult, DEFAULT_API_URL, ENV_VAR, type ExecResult, type FetchLike, type FilterTemplateOptions, type GenerateClient, type GodzillaExecOptions, type InjectorConfig, type InstallSkillOptions, JDK_VERSIONS, LEGACY_CIPHER, type MainConfig, MemPartyClient, type MemPartyClientOptions, type MemShellGenerateRequest, type MemShellGenerateResponse, type MemShellOptions, type MemShellResult, type MimicCipher, OUTPUT_LIMIT, type ObfuscationConfig, type ObfuscationOption, type OpCategory, type OpFilter, type OpLogEntry, type OutputOptions, type OutputResult, type PackerOption, type PackerTree, type ProbeConfig, type ProbeContent, type ProbeContentConfig, type ProbeMethod, type ProbeOptions, type ProbeShellGenerateRequest, type ProbeShellGenerateResponse, type ProbeShellResult, type ResolvedConnection, SKILL_NAME, type ServerConfig, type ShellConfig, type ShellInput, type ShellToolConfig, type SkillInstallResult, type SkillScope, type StoredProject, type StoredShell, type Suo5ConnectOptions, type Suo5Mode, type ToolConfigDescriptor, type ToolConfigParam, type VersionInfo, autoSaveShell, buildCustomMemshell, buildMemShellRequest, buildProbeRequest, createMcpServer, defaultClassName, deriveMarkers, emitPayload, execBehinder, execGodzilla, formatOp, getProject, hasJavac, installSkill, listProjects, logOp, marshalFrameBase64, marshalSuo5Map, opLogPath, profileSecretFields, readOps, removeProject, removeShell, renderCryptoProbe, renderFilterJava, resolveApiUrl, resolveCipher, resolveConnection, resolveJreVersion, saveProjectMeta, saveShell, saveShellMeta, shouldDecode, skillSourceDir, skillTargetDir, startMcpStdio, targetStorePath, testBehinder, testGodzilla, testSuo5, truncateOutput, unmarshalFrameBase64, unmarshalSuo5Map };