novahiz 0.2.2 → 0.2.5

package/bundled-skills/android-reverse-engineering/scripts/decompile.sh

@@ -1,578 +0,0 @@
-#!/usr/bin/env bash
-# decompile.sh — Decompile APK/JAR/AAR using jadx, fernflower, or both
-set -euo pipefail
-
-usage() {
-  cat <<EOF
-Usage: decompile.sh [OPTIONS] <file>
-
-Decompile an Android APK, XAPK, JAR, or AAR file.
-
-Arguments:
-  <file>            Path to the .apk, .xapk, .jar, or .aar file
-
-Options:
-  -o, --output DIR  Output directory (default: <filename>-decompiled)
-  --deobf           Enable deobfuscation of names
-  --no-res          Skip resource decoding (faster, code-only)
-  --engine ENGINE   Decompiler engine: jadx, fernflower, or both (default: jadx)
-  -h, --help        Show this help message
-
-Engines:
-  jadx        Use jadx (default). Handles APK/JAR/AAR natively, decodes resources.
-  fernflower  Use Fernflower/Vineflower. Better on complex Java, lambdas, generics.
-              For APK files, requires dex2jar as intermediate step.
-  both        Run both decompilers side by side for comparison.
-              jadx output  → <output>/jadx/
-              fernflower   → <output>/fernflower/
-
-Environment:
-  FERNFLOWER_JAR_PATH   Path to fernflower.jar or vineflower.jar
-
-Examples:
-  decompile.sh app-release.apk
-  decompile.sh app-bundle.xapk
-  decompile.sh --engine both --deobf app-release.apk
-  decompile.sh --engine fernflower library.jar
-EOF
-  exit 0
-}
-
-# --- Parse arguments ---
-OUTPUT_DIR=""
-DEOBF=false
-NO_RES=false
-ENGINE="jadx"
-INPUT_FILE=""
-
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    -o|--output)   OUTPUT_DIR="$2"; shift 2 ;;
-    --deobf)       DEOBF=true; shift ;;
-    --no-res)      NO_RES=true; shift ;;
-    --engine)      ENGINE="$2"; shift 2 ;;
-    -h|--help)     usage ;;
-    -*)            echo "Error: Unknown option $1" >&2; usage ;;
-    *)             INPUT_FILE="$1"; shift ;;
-  esac
-done
-
-# --- Validate input ---
-if [[ -z "$INPUT_FILE" ]]; then
-  echo "Error: No input file specified." >&2
-  usage
-fi
-
-if [[ ! -f "$INPUT_FILE" ]]; then
-  echo "Error: File not found: $INPUT_FILE" >&2
-  exit 1
-fi
-
-ext="${INPUT_FILE##*.}"
-ext_lower=$(echo "$ext" | tr '[:upper:]' '[:lower:]')
-case "$ext_lower" in
-  apk|xapk|jar|aar) ;;
-  *)
-    echo "Error: Unsupported file type '.$ext'. Expected .apk, .xapk, .jar, or .aar" >&2
-    exit 1
-    ;;
-esac
-
-case "$ENGINE" in
-  jadx|fernflower|both) ;;
-  *)
-    echo "Error: Unknown engine '$ENGINE'. Use jadx, fernflower, or both." >&2
-    exit 1
-    ;;
-esac
-
-BASENAME=$(basename "$INPUT_FILE" ".$ext_lower")
-INPUT_FILE_ABS=$(realpath "$INPUT_FILE")
-
-if [[ -z "$OUTPUT_DIR" ]]; then
-  OUTPUT_DIR="${BASENAME}-decompiled"
-fi
-
-# --- XAPK handling ---
-# XAPK is a ZIP containing one or more APKs, optional OBB files, and a manifest.json.
-# We extract it, find all APKs inside, and decompile each one.
-XAPK_EXTRACTED_DIR=""
-XAPK_APK_FILES=()
-
-if [[ "$ext_lower" == "xapk" ]]; then
-  XAPK_EXTRACTED_DIR=$(mktemp -d "${TMPDIR:-/tmp}/xapk-extract-XXXXXX")
-  echo "=== Extracting XAPK archive ==="
-  unzip -qo "$INPUT_FILE_ABS" -d "$XAPK_EXTRACTED_DIR"
-
-  # Show manifest.json if present
-  if [[ -f "$XAPK_EXTRACTED_DIR/manifest.json" ]]; then
-    echo "XAPK manifest found:"
-    cat "$XAPK_EXTRACTED_DIR/manifest.json"
-    echo
-  fi
-
-  # Find all APK files inside
-  while IFS= read -r -d '' apk_file; do
-    XAPK_APK_FILES+=("$apk_file")
-  done < <(find "$XAPK_EXTRACTED_DIR" -name "*.apk" -print0 | sort -z)
-
-  if [[ ${#XAPK_APK_FILES[@]} -eq 0 ]]; then
-    echo "Error: No APK files found inside XAPK archive." >&2
-    rm -rf "$XAPK_EXTRACTED_DIR"
-    exit 1
-  fi
-
-  echo "Found ${#XAPK_APK_FILES[@]} APK(s) inside XAPK:"
-  for f in "${XAPK_APK_FILES[@]}"; do
-    echo "  - $(basename "$f")"
-  done
-  echo
-fi
-
-# --- Locate fernflower JAR ---
-find_fernflower_jar() {
-  if [[ -n "${FERNFLOWER_JAR_PATH:-}" ]] && [[ -f "$FERNFLOWER_JAR_PATH" ]]; then
-    echo "$FERNFLOWER_JAR_PATH"
-    return
-  fi
-  # Check common locations
-  for candidate in \
-    "$HOME/fernflower/build/libs/fernflower.jar" \
-    "$HOME/vineflower/build/libs/vineflower.jar" \
-    "$HOME/fernflower/fernflower.jar" \
-    "$HOME/vineflower/vineflower.jar"; do
-    if [[ -f "$candidate" ]]; then
-      echo "$candidate"
-      return
-    fi
-  done
-  return 1
-}
-
-# --- Locate dex2jar ---
-find_dex2jar() {
-  if command -v d2j-dex2jar &>/dev/null; then
-    echo "d2j-dex2jar"
-  elif command -v d2j-dex2jar.sh &>/dev/null; then
-    echo "d2j-dex2jar.sh"
-  else
-    return 1
-  fi
-}
-
-# --- jadx decompilation ---
-run_jadx() {
-  local out_dir="$1"
-  local jadx_status=0
-  local count=0
-
-  if ! command -v jadx &>/dev/null; then
-    echo "Error: jadx is not installed or not in PATH." >&2
-    return 1
-  fi
-
-  local args=()
-  args+=("-d" "$out_dir")
-  [[ "$DEOBF" == true ]] && args+=("--deobf")
-  [[ "$NO_RES" == true ]] && args+=("--no-res")
-  args+=("--show-bad-code")
-  args+=("$INPUT_FILE_ABS")
-
-  echo "Running: jadx ${args[*]}"
-  if jadx "${args[@]}"; then
-    jadx_status=0
-  else
-    jadx_status=$?
-  fi
-
-  echo "jadx output: $out_dir/sources/"
-  if [[ -d "$out_dir/sources" ]]; then
-    count=$(find "$out_dir/sources" -name "*.java" | wc -l)
-    echo "Java files decompiled by jadx: $count"
-  fi
-
-  if [[ $jadx_status -eq 0 ]]; then
-    return 0
-  fi
-
-  if [[ $count -gt 0 ]]; then
-    echo "Warning: jadx exited with status $jadx_status after writing $count Java files; treating this as partial success." >&2
-    return 2
-  fi
-
-  echo "Error: jadx failed with status $jadx_status and produced no Java output." >&2
-  return 1
-}
-
-# --- Fernflower decompilation ---
-run_fernflower() {
-  local out_dir="$1"
-  local jar_to_decompile=""
-  local converted_jar=""
-  local intermediate_dir="$out_dir/intermediate"
-  local ff_status=0
-  local d2j_status=0
-  local count=0
-  local ff_timeout_seconds="${FERNFLOWER_TIMEOUT_SECONDS:-900}"
-
-  local ff_jar
-  if ! ff_jar=$(find_fernflower_jar); then
-    echo "Error: Fernflower/Vineflower JAR not found." >&2
-    echo "Set FERNFLOWER_JAR_PATH or see references/setup-guide.md" >&2
-    return 1
-  fi
-
-  mkdir -p "$out_dir"
-
-  # For APK/AAR, we need dex2jar first to convert DEX→JAR
-  if [[ "$ext_lower" == "apk" || "$ext_lower" == "aar" ]]; then
-    local d2j
-    if ! d2j=$(find_dex2jar); then
-      echo "Error: dex2jar is required to use Fernflower on .$ext_lower files." >&2
-      echo "Install dex2jar — see references/setup-guide.md" >&2
-      return 1
-    fi
-
-    echo "Converting $ext_lower to JAR with dex2jar..."
-    mkdir -p "$intermediate_dir"
-    converted_jar="$intermediate_dir/${BASENAME}-dex2jar.jar"
-    if "$d2j" -f -o "$converted_jar" "$INPUT_FILE_ABS" 2>&1; then
-      d2j_status=0
-    else
-      d2j_status=$?
-    fi
-    if [[ ! -f "$converted_jar" ]]; then
-      echo "Error: dex2jar conversion failed with status $d2j_status." >&2
-      return 1
-    fi
-    if [[ $d2j_status -ne 0 ]]; then
-      echo "Warning: dex2jar exited with status $d2j_status but produced $converted_jar; continuing." >&2
-    fi
-    jar_to_decompile="$converted_jar"
-  else
-    jar_to_decompile="$INPUT_FILE_ABS"
-  fi
-
-  # Build fernflower args
-  local ff_args=()
-  ff_args+=("-dgs=1")   # decompile generic signatures
-  ff_args+=("-mpm=60")  # 60s max per method to avoid hangs
-  if [[ "$DEOBF" == true ]]; then
-    ff_args+=("-ren=1")  # rename obfuscated identifiers
-  fi
-  ff_args+=("$jar_to_decompile")
-  ff_args+=("$out_dir")
-
-  echo "Running: java -jar $ff_jar ${ff_args[*]}"
-  if command -v timeout &>/dev/null && [[ "$ff_timeout_seconds" =~ ^[0-9]+$ ]] && (( ff_timeout_seconds > 0 )); then
-    echo "Fernflower timeout: ${ff_timeout_seconds}s (override with FERNFLOWER_TIMEOUT_SECONDS)"
-    if timeout "${ff_timeout_seconds}s" java -jar "$ff_jar" "${ff_args[@]}"; then
-      ff_status=0
-    else
-      ff_status=$?
-    fi
-  elif java -jar "$ff_jar" "${ff_args[@]}"; then
-    ff_status=0
-  else
-    ff_status=$?
-  fi
-
-  # Fernflower outputs a JAR containing .java files — extract it
-  local result_jar="$out_dir/$(basename "$jar_to_decompile")"
-  if [[ -f "$result_jar" ]]; then
-    local sources_dir="$out_dir/sources"
-    mkdir -p "$sources_dir"
-    if unzip -qo "$result_jar" -d "$sources_dir"; then
-      rm -f "$result_jar"
-    else
-      echo "Warning: Fernflower result jar $result_jar could not be extracted; checking for direct folder output." >&2
-    fi
-  fi
-
-  local sources_dir="$out_dir/sources"
-  mkdir -p "$sources_dir"
-  count=$(find "$sources_dir" -name "*.java" | wc -l)
-
-  # Vineflower may write sources directly into the destination folder tree instead of a result jar.
-  if [[ $count -eq 0 ]]; then
-    local direct_count=0
-    direct_count=$(find "$out_dir" \
-      -path "$sources_dir" -prune -o \
-      -path "$intermediate_dir" -prune -o \
-      -name "*.java" -type f -print | wc -l)
-    if [[ $direct_count -gt 0 ]]; then
-      while IFS= read -r -d '' entry; do
-        mv "$entry" "$sources_dir"/
-      done < <(find "$out_dir" -mindepth 1 -maxdepth 1 \
-        ! -name "sources" \
-        ! -name "intermediate" \
-        -print0)
-      count=$(find "$sources_dir" -name "*.java" | wc -l)
-    fi
-  fi
-
-  # Clean up intermediate dex2jar output
-  if [[ $count -gt 0 ]]; then
-    echo "Fernflower output: $sources_dir/"
-    echo "Java files decompiled by Fernflower: $count"
-    if [[ -n "${converted_jar:-}" ]] && [[ -f "${converted_jar:-}" ]]; then
-      rm -f "$converted_jar"
-    fi
-    if [[ -d "$intermediate_dir" ]]; then
-      rmdir "$intermediate_dir" 2>/dev/null || true
-    fi
-    if [[ $ff_status -ne 0 ]]; then
-      echo "Warning: Fernflower/Vineflower exited with status $ff_status after writing $count Java files; treating this as partial success." >&2
-      return 2
-    fi
-    return 0
-  fi
-
-  if [[ -n "${converted_jar:-}" ]] && [[ -f "${converted_jar:-}" ]]; then
-    echo "Error: Fernflower/Vineflower produced no Java output. Intermediate dex2jar artifact kept at $converted_jar" >&2
-  else
-    echo "Error: Fernflower/Vineflower produced no Java output." >&2
-  fi
-
-  if [[ $ff_status -ne 0 ]]; then
-    if [[ $ff_status -eq 124 ]]; then
-      echo "Error: Fernflower/Vineflower exceeded timeout (${ff_timeout_seconds}s)." >&2
-    fi
-    echo "Error: Fernflower/Vineflower exited with status $ff_status." >&2
-  fi
-  return 1
-}
-
-# --- Summary helper ---
-print_structure() {
-  local src_dir="$1"
-  local label="$2"
-  if [[ -d "$src_dir" ]]; then
-    local packages=()
-    echo
-    echo "Top-level packages ($label):"
-    while IFS= read -r pkg; do
-      [[ -n "$pkg" ]] && packages+=("$pkg")
-    done < <(find "$src_dir" -mindepth 1 -maxdepth 3 -type d -printf '%P\n' | sort)
-
-    local limit=${#packages[@]}
-    if (( limit > 20 )); then
-      limit=20
-    fi
-
-    if (( limit == 0 )); then
-      echo "(none)"
-      return
-    fi
-
-    local i=0
-    while (( i < limit )); do
-      echo "${packages[$i]}"
-      ((i += 1))
-    done
-  fi
-}
-
-# --- Decompile a single file with the selected engine ---
-decompile_single() {
-  local file_abs="$1"
-  local out_dir="$2"
-  local label="$3"
-
-  # Temporarily override INPUT_FILE_ABS for run_jadx/run_fernflower
-  local saved_input="$INPUT_FILE_ABS"
-  local saved_ext="$ext_lower"
-  INPUT_FILE_ABS="$file_abs"
-  ext_lower="${file_abs##*.}"
-  ext_lower=$(echo "$ext_lower" | tr '[:upper:]' '[:lower:]')
-
-  if [[ -n "$label" ]]; then
-    echo "=== Decompiling $label (engine: $ENGINE) ==="
-  fi
-
-  case "$ENGINE" in
-    jadx)
-      local jadx_status=0
-      if run_jadx "$out_dir"; then
-        jadx_status=0
-      else
-        jadx_status=$?
-      fi
-      print_structure "$out_dir/sources" "jadx"
-      if [[ $jadx_status -eq 1 ]]; then
-        return 1
-      fi
-      if [[ $jadx_status -eq 2 ]]; then
-        echo "jadx completed with warnings but produced usable output."
-      fi
-      ;;
-    fernflower)
-      local ff_status=0
-      if run_fernflower "$out_dir"; then
-        ff_status=0
-      else
-        ff_status=$?
-      fi
-      print_structure "$out_dir/sources" "fernflower"
-      if [[ $ff_status -eq 1 ]]; then
-        return 1
-      fi
-      if [[ $ff_status -eq 2 ]]; then
-        echo "Fernflower completed with warnings but produced usable output."
-      fi
-      ;;
-    both)
-      local jadx_status=0
-      local ff_status=0
-      echo "--- Pass 1: jadx ---"
-      if run_jadx "$out_dir/jadx"; then
-        jadx_status=0
-      else
-        jadx_status=$?
-      fi
-      if [[ $jadx_status -eq 1 ]]; then
-        return 1
-      fi
-      if [[ $jadx_status -eq 2 ]]; then
-        echo "Continuing to Fernflower because jadx produced usable output despite warnings."
-      fi
-      echo
-      echo "--- Pass 2: Fernflower ---"
-      if run_fernflower "$out_dir/fernflower"; then
-        ff_status=0
-      else
-        ff_status=$?
-      fi
-      if [[ $ff_status -eq 1 ]]; then
-        return 1
-      fi
-      if [[ $ff_status -eq 2 ]]; then
-        echo "Continuing with Fernflower output because it produced usable sources despite warnings."
-      fi
-
-      print_structure "$out_dir/jadx/sources" "jadx"
-      print_structure "$out_dir/fernflower/sources" "fernflower"
-
-      echo
-      echo "=== Comparison ==="
-      local jadx_count=0 ff_count=0
-      if [[ -d "$out_dir/jadx/sources" ]]; then
-        jadx_count=$(find "$out_dir/jadx/sources" -name "*.java" | wc -l)
-      fi
-      if [[ -d "$out_dir/fernflower/sources" ]]; then
-        ff_count=$(find "$out_dir/fernflower/sources" -name "*.java" | wc -l)
-      fi
-      echo "jadx:        $jadx_count Java files"
-      echo "Fernflower:  $ff_count Java files"
-
-      if [[ -d "$out_dir/jadx/sources" ]]; then
-        local jadx_error_files
-        local jadx_errors
-        jadx_error_files=$(grep -rl 'JADX WARNING\|JADX WARN\|JADX ERROR\|Code decompiled incorrectly' "$out_dir/jadx/sources" 2>/dev/null || true)
-        if [[ -n "$jadx_error_files" ]]; then
-          jadx_errors=$(printf '%s\n' "$jadx_error_files" | wc -l)
-        else
-          jadx_errors=0
-        fi
-        echo "jadx files with warnings/errors: $jadx_errors"
-      fi
-      echo
-      echo "Tip: compare specific classes between jadx/ and fernflower/ to pick the better output."
-      ;;
-  esac
-
-  INPUT_FILE_ABS="$saved_input"
-  ext_lower="$saved_ext"
-}
-
-# --- Run ---
-echo "=== Decompiling $INPUT_FILE (engine: $ENGINE) ==="
-echo "Output directory: $OUTPUT_DIR"
-echo
-
-if [[ "$ext_lower" == "xapk" ]]; then
-  # Decompile each APK found inside the XAPK
-  mkdir -p "$OUTPUT_DIR"
-
-  # Copy XAPK manifest for reference
-  if [[ -f "$XAPK_EXTRACTED_DIR/manifest.json" ]]; then
-    cp "$XAPK_EXTRACTED_DIR/manifest.json" "$OUTPUT_DIR/xapk-manifest.json"
-  fi
-
-  # Copy OBB file list for reference
-  obb_files=()
-  while IFS= read -r -d '' obb; do
-    obb_files+=("$obb")
-  done < <(find "$XAPK_EXTRACTED_DIR" -name "*.obb" -print0 2>/dev/null)
-  if [[ ${#obb_files[@]} -gt 0 ]]; then
-    echo "OBB files found (not decompiled, data-only):"
-    for obb in "${obb_files[@]}"; do
-      echo "  - $(basename "$obb") ($(du -h "$obb" | cut -f1))"
-    done
-    echo
-  fi
-
-  for apk_file in "${XAPK_APK_FILES[@]}"; do
-    apk_name=$(basename "$apk_file" .apk)
-    echo
-    echo "======================================================"
-    decompile_single "$apk_file" "$OUTPUT_DIR/$apk_name" "$apk_name.apk"
-  done
-
-  # Cleanup extracted XAPK
-  rm -rf "$XAPK_EXTRACTED_DIR"
-
-  echo
-  echo "=== XAPK decompilation complete ==="
-  echo "Subdirectories in $OUTPUT_DIR/:"
-  ls -1 "$OUTPUT_DIR/"
-else
-  decompile_single "$INPUT_FILE_ABS" "$OUTPUT_DIR" ""
-
-  # --- Split/bundled APK detection ---
-  # Some APKs are bundles: the outer APK contains base.apk + split_config.*.apk
-  # inside the resources directory. jadx will decompile the thin outer wrapper
-  # and produce very few Java files. Detect this and re-decompile base.apk.
-  sources_dir="$OUTPUT_DIR/sources"
-  resources_dir="$OUTPUT_DIR/resources"
-  if [[ -d "$sources_dir" && -d "$resources_dir" ]]; then
-    java_count=$(find "$sources_dir" -name "*.java" -type f 2>/dev/null | wc -l)
-    base_apk=$(find "$resources_dir" -maxdepth 1 -name "base.apk" -type f 2>/dev/null | head -1)
-    inner_apk_count=$(find "$resources_dir" -maxdepth 1 -name "*.apk" -type f 2>/dev/null | wc -l)
-
-    if [[ "$java_count" -le 10 && -n "$base_apk" ]]; then
-      echo
-      echo "=== Split/bundled APK detected ==="
-      echo "Outer APK produced only $java_count Java file(s) but contains $inner_apk_count inner APK(s):"
-      find "$resources_dir" -maxdepth 1 -name "*.apk" -type f -exec basename {} \; | while read -r f; do echo "  - $f"; done
-      echo
-      echo "Decompiling base.apk (contains the actual app code)..."
-      decompile_single "$base_apk" "$OUTPUT_DIR/base" "base.apk"
-
-      # Decompile non-config split APKs
-      while IFS= read -r -d '' split_apk; do
-        split_name=$(basename "$split_apk" .apk)
-        case "$split_name" in
-          base|split_config.*) continue ;;
-        esac
-        echo
-        echo "Decompiling $split_name.apk..."
-        decompile_single "$split_apk" "$OUTPUT_DIR/$split_name" "$split_name.apk"
-      done < <(find "$resources_dir" -maxdepth 1 -name "*.apk" -type f -print0 2>/dev/null)
-
-      # Report skipped config splits
-      config_splits=$(find "$resources_dir" -maxdepth 1 -name "split_config.*.apk" -type f 2>/dev/null)
-      if [[ -n "$config_splits" ]]; then
-        echo
-        echo "Skipped config splits (resource/ABI only):"
-        echo "$config_splits" | while read -r f; do echo "  - $(basename "$f")"; done
-      fi
-
-      echo
-      echo "Main decompiled source is in: $OUTPUT_DIR/base/sources/"
-    fi
-  fi
-
-  echo
-  echo "=== Decompilation complete ==="
-fi

package/bundled-skills/android-reverse-engineering/scripts/find-api-calls.ps1

@@ -1,121 +0,0 @@
-# find-api-calls.ps1 — Search decompiled source for API calls and HTTP endpoints
-param(
-    [Parameter(Position=0)]
-    [string]$SourceDir,
-    [switch]$Retrofit,
-    [switch]$OkHttp,
-    [switch]$Volley,
-    [switch]$Urls,
-    [switch]$Auth,
-    [switch]$All,
-    [Alias('h')]
-    [switch]$Help
-)
-
-$ErrorActionPreference = 'Stop'
-
-function Show-Usage {
-    Write-Host @"
-Usage: find-api-calls.ps1 <source-dir> [OPTIONS]
-
-Search decompiled Java/Kotlin source for HTTP API calls and endpoints.
-
-Arguments:
-  <source-dir>    Path to the decompiled sources directory
-
-Options:
-  -Retrofit       Search only for Retrofit annotations
-  -OkHttp         Search only for OkHttp patterns
-  -Volley         Search only for Volley patterns
-  -Urls           Search only for hardcoded URLs
-  -Auth           Search only for auth-related patterns
-  -All            Search all patterns (default)
-  -Help           Show this help message
-
-Output:
-  Results are printed as file:line:match for easy navigation.
-"@
-    exit 0
-}
-
-if ($Help) { Show-Usage }
-
-if (-not $SourceDir) {
-    Write-Host "Error: No source directory specified." -ForegroundColor Red
-    Show-Usage
-}
-
-if (-not (Test-Path $SourceDir)) {
-    Write-Host "Error: Directory not found: $SourceDir" -ForegroundColor Red
-    exit 1
-}
-
-# Default to all if no specific flag set
-$searchAll = (-not $Retrofit -and -not $OkHttp -and -not $Volley -and -not $Urls -and -not $Auth) -or $All
-
-function Write-Section {
-    param([string]$Title)
-    Write-Host ""
-    Write-Host "==== $Title ===="
-    Write-Host ""
-}
-
-function Search-Sources {
-    param([string]$Pattern)
-    Get-ChildItem -Path $SourceDir -Recurse -Include '*.java','*.kt' -File |
-        Select-String -Pattern $Pattern -ErrorAction SilentlyContinue |
-        ForEach-Object {
-            "$($_.Path):$($_.LineNumber):$($_.Line.Trim())"
-        }
-}
-
-# --- Retrofit ---
-if ($searchAll -or $Retrofit) {
-    Write-Section "Retrofit Annotations"
-    Search-Sources '@(GET|POST|PUT|DELETE|PATCH|HEAD|OPTIONS|HTTP)\s*\('
-
-    Write-Section "Retrofit Headers & Parameters"
-    Search-Sources '@(Headers|Header|Query|QueryMap|Path|Body|Field|FieldMap|Part|PartMap|Url)\s*\('
-
-    Write-Section "Retrofit Base URL"
-    Search-Sources '(baseUrl|base_url)\s*\('
-}
-
-# --- OkHttp ---
-if ($searchAll -or $OkHttp) {
-    Write-Section "OkHttp Request Building"
-    Search-Sources '(Request\.Builder|HttpUrl|\.newCall|\.enqueue|addInterceptor|addNetworkInterceptor)'
-
-    Write-Section "OkHttp URL Construction"
-    Search-Sources '(\.url\s*\(|\.addQueryParameter|\.addPathSegment|\.scheme\s*\(|\.host\s*\()'
-}
-
-# --- Volley ---
-if ($searchAll -or $Volley) {
-    Write-Section "Volley Requests"
-    Search-Sources '(StringRequest|JsonObjectRequest|JsonArrayRequest|ImageRequest|RequestQueue|Volley\.newRequestQueue)'
-}
-
-# --- Hardcoded URLs ---
-if ($searchAll -or $Urls) {
-    Write-Section "Hardcoded URLs (http:// and https://)"
-    Search-Sources '"https?://[^"]+'
-
-    Write-Section "HttpURLConnection"
-    Search-Sources '(openConnection|setRequestMethod|HttpURLConnection|HttpsURLConnection)'
-
-    Write-Section "WebView URLs"
-    Search-Sources '(loadUrl|loadData|evaluateJavascript|addJavascriptInterface|WebViewClient|WebChromeClient)'
-}
-
-# --- Auth patterns ---
-if ($searchAll -or $Auth) {
-    Write-Section "Authentication & API Keys"
-    Search-Sources '(?i)(api[_\-]?key|auth[_\-]?token|bearer|authorization|x-api-key|client[_\-]?secret|access[_\-]?token)'
-
-    Write-Section "Base URLs and Constants"
-    Search-Sources '(?i)(BASE_URL|API_URL|SERVER_URL|ENDPOINT|API_BASE|HOST_NAME)'
-}
-
-Write-Host ""
-Write-Host "=== Search complete ==="