windows-exe-decompiler-mcp-server 0.1.0 → 0.1.3

package/dist/tools/dll-export-profile.d.ts

@@ -0,0 +1,625 @@
+import { z } from 'zod';
+import type { ToolArgs, ToolDefinition, WorkerResult } from '../types.js';
+import type { WorkspaceManager } from '../workspace-manager.js';
+import type { DatabaseManager } from '../database.js';
+import type { CacheManager } from '../cache-manager.js';
+export declare const DllExportProfileInputSchema: z.ZodObject<{
+    sample_id: z.ZodString;
+    max_exports: z.ZodDefault<z.ZodNumber>;
+    max_strings: z.ZodDefault<z.ZodNumber>;
+    force_refresh: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    sample_id: string;
+    force_refresh: boolean;
+    max_strings: number;
+    max_exports: number;
+}, {
+    sample_id: string;
+    force_refresh?: boolean | undefined;
+    max_strings?: number | undefined;
+    max_exports?: number | undefined;
+}>;
+export declare const DllExportProfileDataSchema: z.ZodObject<{
+    sample_id: z.ZodString;
+    original_filename: z.ZodNullable<z.ZodString>;
+    binary_role: z.ZodString;
+    library_like: z.ZodBoolean;
+    role_confidence: z.ZodNumber;
+    export_surface: z.ZodObject<{
+        total_exports: z.ZodNumber;
+        total_forwarders: z.ZodNumber;
+        notable_exports: z.ZodArray<z.ZodString, "many">;
+        com_related_exports: z.ZodArray<z.ZodString, "many">;
+        service_related_exports: z.ZodArray<z.ZodString, "many">;
+        plugin_related_exports: z.ZodArray<z.ZodString, "many">;
+        forwarded_exports: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        total_exports: number;
+        total_forwarders: number;
+        notable_exports: string[];
+        com_related_exports: string[];
+        service_related_exports: string[];
+        plugin_related_exports: string[];
+        forwarded_exports: string[];
+    }, {
+        total_exports: number;
+        total_forwarders: number;
+        notable_exports: string[];
+        com_related_exports: string[];
+        service_related_exports: string[];
+        plugin_related_exports: string[];
+        forwarded_exports: string[];
+    }>;
+    export_dispatch_profile: z.ZodObject<{
+        command_like_exports: z.ZodArray<z.ZodString, "many">;
+        callback_like_exports: z.ZodArray<z.ZodString, "many">;
+        registration_exports: z.ZodArray<z.ZodString, "many">;
+        ordinal_only_exports: z.ZodNumber;
+        likely_dispatch_model: z.ZodString;
+        confidence: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        confidence: number;
+        command_like_exports: string[];
+        callback_like_exports: string[];
+        registration_exports: string[];
+        ordinal_only_exports: number;
+        likely_dispatch_model: string;
+    }, {
+        confidence: number;
+        command_like_exports: string[];
+        callback_like_exports: string[];
+        registration_exports: string[];
+        ordinal_only_exports: number;
+        likely_dispatch_model: string;
+    }>;
+    host_interaction_profile: z.ZodObject<{
+        likely_hosted: z.ZodBoolean;
+        host_hints: z.ZodArray<z.ZodString, "many">;
+        callback_exports: z.ZodArray<z.ZodString, "many">;
+        callback_surface: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        callback_strings: z.ZodArray<z.ZodString, "many">;
+        service_hooks: z.ZodArray<z.ZodString, "many">;
+        confidence: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        confidence: number;
+        callback_surface: string[];
+        likely_hosted: boolean;
+        host_hints: string[];
+        callback_exports: string[];
+        callback_strings: string[];
+        service_hooks: string[];
+    }, {
+        confidence: number;
+        likely_hosted: boolean;
+        host_hints: string[];
+        callback_exports: string[];
+        callback_strings: string[];
+        service_hooks: string[];
+        callback_surface?: string[] | undefined;
+    }>;
+    lifecycle_surface: z.ZodObject<{
+        lifecycle_exports: z.ZodArray<z.ZodString, "many">;
+        lifecycle_imports: z.ZodArray<z.ZodString, "many">;
+        attach_detach_strings: z.ZodArray<z.ZodString, "many">;
+        confidence: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        confidence: number;
+        lifecycle_exports: string[];
+        lifecycle_imports: string[];
+        attach_detach_strings: string[];
+    }, {
+        confidence: number;
+        lifecycle_exports: string[];
+        lifecycle_imports: string[];
+        attach_detach_strings: string[];
+    }>;
+    class_factory_surface: z.ZodObject<{
+        class_factory_exports: z.ZodArray<z.ZodString, "many">;
+        activation_markers: z.ZodArray<z.ZodString, "many">;
+        confidence: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        confidence: number;
+        class_factory_exports: string[];
+        activation_markers: string[];
+    }, {
+        confidence: number;
+        class_factory_exports: string[];
+        activation_markers: string[];
+    }>;
+    callback_surface: z.ZodObject<{
+        callback_exports: z.ZodArray<z.ZodString, "many">;
+        callback_strings: z.ZodArray<z.ZodString, "many">;
+        host_hints: z.ZodArray<z.ZodString, "many">;
+        confidence: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        confidence: number;
+        host_hints: string[];
+        callback_exports: string[];
+        callback_strings: string[];
+    }, {
+        confidence: number;
+        host_hints: string[];
+        callback_exports: string[];
+        callback_strings: string[];
+    }>;
+    dll_entry_hints: z.ZodArray<z.ZodString, "many">;
+    likely_entry_model: z.ZodString;
+    analysis_priorities: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    sample_id: string;
+    export_surface: {
+        total_exports: number;
+        total_forwarders: number;
+        notable_exports: string[];
+        com_related_exports: string[];
+        service_related_exports: string[];
+        plugin_related_exports: string[];
+        forwarded_exports: string[];
+    };
+    callback_surface: {
+        confidence: number;
+        host_hints: string[];
+        callback_exports: string[];
+        callback_strings: string[];
+    };
+    binary_role: string;
+    original_filename: string | null;
+    analysis_priorities: string[];
+    class_factory_surface: {
+        confidence: number;
+        class_factory_exports: string[];
+        activation_markers: string[];
+    };
+    role_confidence: number;
+    export_dispatch_profile: {
+        confidence: number;
+        command_like_exports: string[];
+        callback_like_exports: string[];
+        registration_exports: string[];
+        ordinal_only_exports: number;
+        likely_dispatch_model: string;
+    };
+    lifecycle_surface: {
+        confidence: number;
+        lifecycle_exports: string[];
+        lifecycle_imports: string[];
+        attach_detach_strings: string[];
+    };
+    host_interaction_profile: {
+        confidence: number;
+        callback_surface: string[];
+        likely_hosted: boolean;
+        host_hints: string[];
+        callback_exports: string[];
+        callback_strings: string[];
+        service_hooks: string[];
+    };
+    library_like: boolean;
+    dll_entry_hints: string[];
+    likely_entry_model: string;
+}, {
+    sample_id: string;
+    export_surface: {
+        total_exports: number;
+        total_forwarders: number;
+        notable_exports: string[];
+        com_related_exports: string[];
+        service_related_exports: string[];
+        plugin_related_exports: string[];
+        forwarded_exports: string[];
+    };
+    callback_surface: {
+        confidence: number;
+        host_hints: string[];
+        callback_exports: string[];
+        callback_strings: string[];
+    };
+    binary_role: string;
+    original_filename: string | null;
+    analysis_priorities: string[];
+    class_factory_surface: {
+        confidence: number;
+        class_factory_exports: string[];
+        activation_markers: string[];
+    };
+    role_confidence: number;
+    export_dispatch_profile: {
+        confidence: number;
+        command_like_exports: string[];
+        callback_like_exports: string[];
+        registration_exports: string[];
+        ordinal_only_exports: number;
+        likely_dispatch_model: string;
+    };
+    lifecycle_surface: {
+        confidence: number;
+        lifecycle_exports: string[];
+        lifecycle_imports: string[];
+        attach_detach_strings: string[];
+    };
+    host_interaction_profile: {
+        confidence: number;
+        likely_hosted: boolean;
+        host_hints: string[];
+        callback_exports: string[];
+        callback_strings: string[];
+        service_hooks: string[];
+        callback_surface?: string[] | undefined;
+    };
+    library_like: boolean;
+    dll_entry_hints: string[];
+    likely_entry_model: string;
+}>;
+export declare const DllExportProfileOutputSchema: z.ZodObject<{
+    ok: z.ZodBoolean;
+    data: z.ZodOptional<z.ZodObject<{
+        sample_id: z.ZodString;
+        original_filename: z.ZodNullable<z.ZodString>;
+        binary_role: z.ZodString;
+        library_like: z.ZodBoolean;
+        role_confidence: z.ZodNumber;
+        export_surface: z.ZodObject<{
+            total_exports: z.ZodNumber;
+            total_forwarders: z.ZodNumber;
+            notable_exports: z.ZodArray<z.ZodString, "many">;
+            com_related_exports: z.ZodArray<z.ZodString, "many">;
+            service_related_exports: z.ZodArray<z.ZodString, "many">;
+            plugin_related_exports: z.ZodArray<z.ZodString, "many">;
+            forwarded_exports: z.ZodArray<z.ZodString, "many">;
+        }, "strip", z.ZodTypeAny, {
+            total_exports: number;
+            total_forwarders: number;
+            notable_exports: string[];
+            com_related_exports: string[];
+            service_related_exports: string[];
+            plugin_related_exports: string[];
+            forwarded_exports: string[];
+        }, {
+            total_exports: number;
+            total_forwarders: number;
+            notable_exports: string[];
+            com_related_exports: string[];
+            service_related_exports: string[];
+            plugin_related_exports: string[];
+            forwarded_exports: string[];
+        }>;
+        export_dispatch_profile: z.ZodObject<{
+            command_like_exports: z.ZodArray<z.ZodString, "many">;
+            callback_like_exports: z.ZodArray<z.ZodString, "many">;
+            registration_exports: z.ZodArray<z.ZodString, "many">;
+            ordinal_only_exports: z.ZodNumber;
+            likely_dispatch_model: z.ZodString;
+            confidence: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            confidence: number;
+            command_like_exports: string[];
+            callback_like_exports: string[];
+            registration_exports: string[];
+            ordinal_only_exports: number;
+            likely_dispatch_model: string;
+        }, {
+            confidence: number;
+            command_like_exports: string[];
+            callback_like_exports: string[];
+            registration_exports: string[];
+            ordinal_only_exports: number;
+            likely_dispatch_model: string;
+        }>;
+        host_interaction_profile: z.ZodObject<{
+            likely_hosted: z.ZodBoolean;
+            host_hints: z.ZodArray<z.ZodString, "many">;
+            callback_exports: z.ZodArray<z.ZodString, "many">;
+            callback_surface: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            callback_strings: z.ZodArray<z.ZodString, "many">;
+            service_hooks: z.ZodArray<z.ZodString, "many">;
+            confidence: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            confidence: number;
+            callback_surface: string[];
+            likely_hosted: boolean;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+            service_hooks: string[];
+        }, {
+            confidence: number;
+            likely_hosted: boolean;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+            service_hooks: string[];
+            callback_surface?: string[] | undefined;
+        }>;
+        lifecycle_surface: z.ZodObject<{
+            lifecycle_exports: z.ZodArray<z.ZodString, "many">;
+            lifecycle_imports: z.ZodArray<z.ZodString, "many">;
+            attach_detach_strings: z.ZodArray<z.ZodString, "many">;
+            confidence: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            confidence: number;
+            lifecycle_exports: string[];
+            lifecycle_imports: string[];
+            attach_detach_strings: string[];
+        }, {
+            confidence: number;
+            lifecycle_exports: string[];
+            lifecycle_imports: string[];
+            attach_detach_strings: string[];
+        }>;
+        class_factory_surface: z.ZodObject<{
+            class_factory_exports: z.ZodArray<z.ZodString, "many">;
+            activation_markers: z.ZodArray<z.ZodString, "many">;
+            confidence: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            confidence: number;
+            class_factory_exports: string[];
+            activation_markers: string[];
+        }, {
+            confidence: number;
+            class_factory_exports: string[];
+            activation_markers: string[];
+        }>;
+        callback_surface: z.ZodObject<{
+            callback_exports: z.ZodArray<z.ZodString, "many">;
+            callback_strings: z.ZodArray<z.ZodString, "many">;
+            host_hints: z.ZodArray<z.ZodString, "many">;
+            confidence: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            confidence: number;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+        }, {
+            confidence: number;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+        }>;
+        dll_entry_hints: z.ZodArray<z.ZodString, "many">;
+        likely_entry_model: z.ZodString;
+        analysis_priorities: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        sample_id: string;
+        export_surface: {
+            total_exports: number;
+            total_forwarders: number;
+            notable_exports: string[];
+            com_related_exports: string[];
+            service_related_exports: string[];
+            plugin_related_exports: string[];
+            forwarded_exports: string[];
+        };
+        callback_surface: {
+            confidence: number;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+        };
+        binary_role: string;
+        original_filename: string | null;
+        analysis_priorities: string[];
+        class_factory_surface: {
+            confidence: number;
+            class_factory_exports: string[];
+            activation_markers: string[];
+        };
+        role_confidence: number;
+        export_dispatch_profile: {
+            confidence: number;
+            command_like_exports: string[];
+            callback_like_exports: string[];
+            registration_exports: string[];
+            ordinal_only_exports: number;
+            likely_dispatch_model: string;
+        };
+        lifecycle_surface: {
+            confidence: number;
+            lifecycle_exports: string[];
+            lifecycle_imports: string[];
+            attach_detach_strings: string[];
+        };
+        host_interaction_profile: {
+            confidence: number;
+            callback_surface: string[];
+            likely_hosted: boolean;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+            service_hooks: string[];
+        };
+        library_like: boolean;
+        dll_entry_hints: string[];
+        likely_entry_model: string;
+    }, {
+        sample_id: string;
+        export_surface: {
+            total_exports: number;
+            total_forwarders: number;
+            notable_exports: string[];
+            com_related_exports: string[];
+            service_related_exports: string[];
+            plugin_related_exports: string[];
+            forwarded_exports: string[];
+        };
+        callback_surface: {
+            confidence: number;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+        };
+        binary_role: string;
+        original_filename: string | null;
+        analysis_priorities: string[];
+        class_factory_surface: {
+            confidence: number;
+            class_factory_exports: string[];
+            activation_markers: string[];
+        };
+        role_confidence: number;
+        export_dispatch_profile: {
+            confidence: number;
+            command_like_exports: string[];
+            callback_like_exports: string[];
+            registration_exports: string[];
+            ordinal_only_exports: number;
+            likely_dispatch_model: string;
+        };
+        lifecycle_surface: {
+            confidence: number;
+            lifecycle_exports: string[];
+            lifecycle_imports: string[];
+            attach_detach_strings: string[];
+        };
+        host_interaction_profile: {
+            confidence: number;
+            likely_hosted: boolean;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+            service_hooks: string[];
+            callback_surface?: string[] | undefined;
+        };
+        library_like: boolean;
+        dll_entry_hints: string[];
+        likely_entry_model: string;
+    }>>;
+    warnings: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    errors: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    metrics: z.ZodOptional<z.ZodObject<{
+        elapsed_ms: z.ZodNumber;
+        tool: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        elapsed_ms: number;
+        tool: string;
+    }, {
+        elapsed_ms: number;
+        tool: string;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    ok: boolean;
+    data?: {
+        sample_id: string;
+        export_surface: {
+            total_exports: number;
+            total_forwarders: number;
+            notable_exports: string[];
+            com_related_exports: string[];
+            service_related_exports: string[];
+            plugin_related_exports: string[];
+            forwarded_exports: string[];
+        };
+        callback_surface: {
+            confidence: number;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+        };
+        binary_role: string;
+        original_filename: string | null;
+        analysis_priorities: string[];
+        class_factory_surface: {
+            confidence: number;
+            class_factory_exports: string[];
+            activation_markers: string[];
+        };
+        role_confidence: number;
+        export_dispatch_profile: {
+            confidence: number;
+            command_like_exports: string[];
+            callback_like_exports: string[];
+            registration_exports: string[];
+            ordinal_only_exports: number;
+            likely_dispatch_model: string;
+        };
+        lifecycle_surface: {
+            confidence: number;
+            lifecycle_exports: string[];
+            lifecycle_imports: string[];
+            attach_detach_strings: string[];
+        };
+        host_interaction_profile: {
+            confidence: number;
+            callback_surface: string[];
+            likely_hosted: boolean;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+            service_hooks: string[];
+        };
+        library_like: boolean;
+        dll_entry_hints: string[];
+        likely_entry_model: string;
+    } | undefined;
+    metrics?: {
+        elapsed_ms: number;
+        tool: string;
+    } | undefined;
+    warnings?: string[] | undefined;
+    errors?: string[] | undefined;
+}, {
+    ok: boolean;
+    data?: {
+        sample_id: string;
+        export_surface: {
+            total_exports: number;
+            total_forwarders: number;
+            notable_exports: string[];
+            com_related_exports: string[];
+            service_related_exports: string[];
+            plugin_related_exports: string[];
+            forwarded_exports: string[];
+        };
+        callback_surface: {
+            confidence: number;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+        };
+        binary_role: string;
+        original_filename: string | null;
+        analysis_priorities: string[];
+        class_factory_surface: {
+            confidence: number;
+            class_factory_exports: string[];
+            activation_markers: string[];
+        };
+        role_confidence: number;
+        export_dispatch_profile: {
+            confidence: number;
+            command_like_exports: string[];
+            callback_like_exports: string[];
+            registration_exports: string[];
+            ordinal_only_exports: number;
+            likely_dispatch_model: string;
+        };
+        lifecycle_surface: {
+            confidence: number;
+            lifecycle_exports: string[];
+            lifecycle_imports: string[];
+            attach_detach_strings: string[];
+        };
+        host_interaction_profile: {
+            confidence: number;
+            likely_hosted: boolean;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+            service_hooks: string[];
+            callback_surface?: string[] | undefined;
+        };
+        library_like: boolean;
+        dll_entry_hints: string[];
+        likely_entry_model: string;
+    } | undefined;
+    metrics?: {
+        elapsed_ms: number;
+        tool: string;
+    } | undefined;
+    warnings?: string[] | undefined;
+    errors?: string[] | undefined;
+}>;
+export declare const dllExportProfileToolDefinition: ToolDefinition;
+export declare function createDllExportProfileHandler(workspaceManager: WorkspaceManager, database: DatabaseManager, cacheManager: CacheManager, dependencies?: {
+    binaryRoleProfileHandler?: (args: ToolArgs) => Promise<WorkerResult>;
+}): (args: ToolArgs) => Promise<WorkerResult>;
+//# sourceMappingURL=dll-export-profile.d.ts.map