windows-exe-decompiler-mcp-server 0.1.0 → 0.1.3

package/dist/tools/binary-role-profile.d.ts

@@ -0,0 +1,1197 @@
+import { z } from 'zod';
+import type { ToolArgs, ToolDefinition, WorkerResult } from '../types.js';
+import type { WorkspaceManager } from '../workspace-manager.js';
+import type { DatabaseManager } from '../database.js';
+import type { CacheManager } from '../cache-manager.js';
+export declare const BinaryRoleProfileInputSchema: z.ZodObject<{
+    sample_id: z.ZodString;
+    max_exports: z.ZodDefault<z.ZodNumber>;
+    max_strings: z.ZodDefault<z.ZodNumber>;
+    force_refresh: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    sample_id: string;
+    force_refresh: boolean;
+    max_strings: number;
+    max_exports: number;
+}, {
+    sample_id: string;
+    force_refresh?: boolean | undefined;
+    max_strings?: number | undefined;
+    max_exports?: number | undefined;
+}>;
+export declare const ExportSurfaceSchema: z.ZodObject<{
+    total_exports: z.ZodNumber;
+    total_forwarders: z.ZodNumber;
+    notable_exports: z.ZodArray<z.ZodString, "many">;
+    com_related_exports: z.ZodArray<z.ZodString, "many">;
+    service_related_exports: z.ZodArray<z.ZodString, "many">;
+    plugin_related_exports: z.ZodArray<z.ZodString, "many">;
+    forwarded_exports: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    total_exports: number;
+    total_forwarders: number;
+    notable_exports: string[];
+    com_related_exports: string[];
+    service_related_exports: string[];
+    plugin_related_exports: string[];
+    forwarded_exports: string[];
+}, {
+    total_exports: number;
+    total_forwarders: number;
+    notable_exports: string[];
+    com_related_exports: string[];
+    service_related_exports: string[];
+    plugin_related_exports: string[];
+    forwarded_exports: string[];
+}>;
+export declare const ImportSurfaceSchema: z.ZodObject<{
+    dll_count: z.ZodNumber;
+    notable_dlls: z.ZodArray<z.ZodString, "many">;
+    com_related_imports: z.ZodArray<z.ZodString, "many">;
+    service_related_imports: z.ZodArray<z.ZodString, "many">;
+    network_related_imports: z.ZodArray<z.ZodString, "many">;
+    process_related_imports: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    dll_count: number;
+    notable_dlls: string[];
+    com_related_imports: string[];
+    service_related_imports: string[];
+    network_related_imports: string[];
+    process_related_imports: string[];
+}, {
+    dll_count: number;
+    notable_dlls: string[];
+    com_related_imports: string[];
+    service_related_imports: string[];
+    network_related_imports: string[];
+    process_related_imports: string[];
+}>;
+export declare const RoleIndicatorSchema: z.ZodObject<{
+    likely: z.ZodBoolean;
+    confidence: z.ZodNumber;
+    evidence: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    confidence: number;
+    evidence: string[];
+    likely: boolean;
+}, {
+    confidence: number;
+    evidence: string[];
+    likely: boolean;
+}>;
+export declare const ExportDispatchProfileSchema: z.ZodObject<{
+    command_like_exports: z.ZodArray<z.ZodString, "many">;
+    callback_like_exports: z.ZodArray<z.ZodString, "many">;
+    registration_exports: z.ZodArray<z.ZodString, "many">;
+    ordinal_only_exports: z.ZodNumber;
+    likely_dispatch_model: z.ZodString;
+    confidence: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    confidence: number;
+    command_like_exports: string[];
+    callback_like_exports: string[];
+    registration_exports: string[];
+    ordinal_only_exports: number;
+    likely_dispatch_model: string;
+}, {
+    confidence: number;
+    command_like_exports: string[];
+    callback_like_exports: string[];
+    registration_exports: string[];
+    ordinal_only_exports: number;
+    likely_dispatch_model: string;
+}>;
+export declare const ComProfileSchema: z.ZodObject<{
+    clsid_strings: z.ZodArray<z.ZodString, "many">;
+    progid_strings: z.ZodArray<z.ZodString, "many">;
+    interface_hints: z.ZodArray<z.ZodString, "many">;
+    registration_strings: z.ZodArray<z.ZodString, "many">;
+    class_factory_exports: z.ZodArray<z.ZodString, "many">;
+    class_factory_surface: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    confidence: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    confidence: number;
+    clsid_strings: string[];
+    progid_strings: string[];
+    interface_hints: string[];
+    registration_strings: string[];
+    class_factory_exports: string[];
+    class_factory_surface: string[];
+}, {
+    confidence: number;
+    clsid_strings: string[];
+    progid_strings: string[];
+    interface_hints: string[];
+    registration_strings: string[];
+    class_factory_exports: string[];
+    class_factory_surface?: string[] | undefined;
+}>;
+export declare const HostInteractionProfileSchema: z.ZodObject<{
+    likely_hosted: z.ZodBoolean;
+    host_hints: z.ZodArray<z.ZodString, "many">;
+    callback_exports: z.ZodArray<z.ZodString, "many">;
+    callback_surface: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    callback_strings: z.ZodArray<z.ZodString, "many">;
+    service_hooks: z.ZodArray<z.ZodString, "many">;
+    confidence: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    confidence: number;
+    callback_surface: string[];
+    likely_hosted: boolean;
+    host_hints: string[];
+    callback_exports: string[];
+    callback_strings: string[];
+    service_hooks: string[];
+}, {
+    confidence: number;
+    likely_hosted: boolean;
+    host_hints: string[];
+    callback_exports: string[];
+    callback_strings: string[];
+    service_hooks: string[];
+    callback_surface?: string[] | undefined;
+}>;
+export declare const BinaryRoleProfileDataSchema: z.ZodObject<{
+    sample_id: z.ZodString;
+    original_filename: z.ZodNullable<z.ZodString>;
+    binary_role: z.ZodString;
+    role_confidence: z.ZodNumber;
+    runtime_hint: z.ZodObject<{
+        is_dotnet: z.ZodNullable<z.ZodBoolean>;
+        dotnet_version: z.ZodNullable<z.ZodString>;
+        target_framework: z.ZodNullable<z.ZodString>;
+        primary_runtime: z.ZodNullable<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        is_dotnet: boolean | null;
+        dotnet_version: string | null;
+        target_framework: string | null;
+        primary_runtime: string | null;
+    }, {
+        is_dotnet: boolean | null;
+        dotnet_version: string | null;
+        target_framework: string | null;
+        primary_runtime: string | null;
+    }>;
+    export_surface: z.ZodObject<{
+        total_exports: z.ZodNumber;
+        total_forwarders: z.ZodNumber;
+        notable_exports: z.ZodArray<z.ZodString, "many">;
+        com_related_exports: z.ZodArray<z.ZodString, "many">;
+        service_related_exports: z.ZodArray<z.ZodString, "many">;
+        plugin_related_exports: z.ZodArray<z.ZodString, "many">;
+        forwarded_exports: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        total_exports: number;
+        total_forwarders: number;
+        notable_exports: string[];
+        com_related_exports: string[];
+        service_related_exports: string[];
+        plugin_related_exports: string[];
+        forwarded_exports: string[];
+    }, {
+        total_exports: number;
+        total_forwarders: number;
+        notable_exports: string[];
+        com_related_exports: string[];
+        service_related_exports: string[];
+        plugin_related_exports: string[];
+        forwarded_exports: string[];
+    }>;
+    import_surface: z.ZodObject<{
+        dll_count: z.ZodNumber;
+        notable_dlls: z.ZodArray<z.ZodString, "many">;
+        com_related_imports: z.ZodArray<z.ZodString, "many">;
+        service_related_imports: z.ZodArray<z.ZodString, "many">;
+        network_related_imports: z.ZodArray<z.ZodString, "many">;
+        process_related_imports: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        dll_count: number;
+        notable_dlls: string[];
+        com_related_imports: string[];
+        service_related_imports: string[];
+        network_related_imports: string[];
+        process_related_imports: string[];
+    }, {
+        dll_count: number;
+        notable_dlls: string[];
+        com_related_imports: string[];
+        service_related_imports: string[];
+        network_related_imports: string[];
+        process_related_imports: string[];
+    }>;
+    packed: z.ZodBoolean;
+    packing_confidence: z.ZodNumber;
+    indicators: z.ZodObject<{
+        com_server: z.ZodObject<{
+            likely: z.ZodBoolean;
+            confidence: z.ZodNumber;
+            evidence: z.ZodArray<z.ZodString, "many">;
+        }, "strip", z.ZodTypeAny, {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        }, {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        }>;
+        service_binary: z.ZodObject<{
+            likely: z.ZodBoolean;
+            confidence: z.ZodNumber;
+            evidence: z.ZodArray<z.ZodString, "many">;
+        }, "strip", z.ZodTypeAny, {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        }, {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        }>;
+        plugin_binary: z.ZodObject<{
+            likely: z.ZodBoolean;
+            confidence: z.ZodNumber;
+            evidence: z.ZodArray<z.ZodString, "many">;
+        }, "strip", z.ZodTypeAny, {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        }, {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        }>;
+        driver_binary: z.ZodObject<{
+            likely: z.ZodBoolean;
+            confidence: z.ZodNumber;
+            evidence: z.ZodArray<z.ZodString, "many">;
+        }, "strip", z.ZodTypeAny, {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        }, {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        }>;
+    }, "strip", z.ZodTypeAny, {
+        com_server: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+        service_binary: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+        plugin_binary: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+        driver_binary: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+    }, {
+        com_server: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+        service_binary: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+        plugin_binary: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+        driver_binary: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+    }>;
+    export_dispatch_profile: z.ZodObject<{
+        command_like_exports: z.ZodArray<z.ZodString, "many">;
+        callback_like_exports: z.ZodArray<z.ZodString, "many">;
+        registration_exports: z.ZodArray<z.ZodString, "many">;
+        ordinal_only_exports: z.ZodNumber;
+        likely_dispatch_model: z.ZodString;
+        confidence: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        confidence: number;
+        command_like_exports: string[];
+        callback_like_exports: string[];
+        registration_exports: string[];
+        ordinal_only_exports: number;
+        likely_dispatch_model: string;
+    }, {
+        confidence: number;
+        command_like_exports: string[];
+        callback_like_exports: string[];
+        registration_exports: string[];
+        ordinal_only_exports: number;
+        likely_dispatch_model: string;
+    }>;
+    lifecycle_surface: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    com_profile: z.ZodObject<{
+        clsid_strings: z.ZodArray<z.ZodString, "many">;
+        progid_strings: z.ZodArray<z.ZodString, "many">;
+        interface_hints: z.ZodArray<z.ZodString, "many">;
+        registration_strings: z.ZodArray<z.ZodString, "many">;
+        class_factory_exports: z.ZodArray<z.ZodString, "many">;
+        class_factory_surface: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        confidence: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        confidence: number;
+        clsid_strings: string[];
+        progid_strings: string[];
+        interface_hints: string[];
+        registration_strings: string[];
+        class_factory_exports: string[];
+        class_factory_surface: string[];
+    }, {
+        confidence: number;
+        clsid_strings: string[];
+        progid_strings: string[];
+        interface_hints: string[];
+        registration_strings: string[];
+        class_factory_exports: string[];
+        class_factory_surface?: string[] | undefined;
+    }>;
+    host_interaction_profile: z.ZodObject<{
+        likely_hosted: z.ZodBoolean;
+        host_hints: z.ZodArray<z.ZodString, "many">;
+        callback_exports: z.ZodArray<z.ZodString, "many">;
+        callback_surface: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        callback_strings: z.ZodArray<z.ZodString, "many">;
+        service_hooks: z.ZodArray<z.ZodString, "many">;
+        confidence: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        confidence: number;
+        callback_surface: string[];
+        likely_hosted: boolean;
+        host_hints: string[];
+        callback_exports: string[];
+        callback_strings: string[];
+        service_hooks: string[];
+    }, {
+        confidence: number;
+        likely_hosted: boolean;
+        host_hints: string[];
+        callback_exports: string[];
+        callback_strings: string[];
+        service_hooks: string[];
+        callback_surface?: string[] | undefined;
+    }>;
+    analysis_priorities: z.ZodArray<z.ZodString, "many">;
+    strings_considered: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    sample_id: string;
+    indicators: {
+        com_server: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+        service_binary: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+        plugin_binary: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+        driver_binary: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+    };
+    export_surface: {
+        total_exports: number;
+        total_forwarders: number;
+        notable_exports: string[];
+        com_related_exports: string[];
+        service_related_exports: string[];
+        plugin_related_exports: string[];
+        forwarded_exports: string[];
+    };
+    packed: boolean;
+    binary_role: string;
+    original_filename: string | null;
+    packing_confidence: number;
+    analysis_priorities: string[];
+    role_confidence: number;
+    runtime_hint: {
+        is_dotnet: boolean | null;
+        dotnet_version: string | null;
+        target_framework: string | null;
+        primary_runtime: string | null;
+    };
+    import_surface: {
+        dll_count: number;
+        notable_dlls: string[];
+        com_related_imports: string[];
+        service_related_imports: string[];
+        network_related_imports: string[];
+        process_related_imports: string[];
+    };
+    export_dispatch_profile: {
+        confidence: number;
+        command_like_exports: string[];
+        callback_like_exports: string[];
+        registration_exports: string[];
+        ordinal_only_exports: number;
+        likely_dispatch_model: string;
+    };
+    lifecycle_surface: string[];
+    com_profile: {
+        confidence: number;
+        clsid_strings: string[];
+        progid_strings: string[];
+        interface_hints: string[];
+        registration_strings: string[];
+        class_factory_exports: string[];
+        class_factory_surface: string[];
+    };
+    host_interaction_profile: {
+        confidence: number;
+        callback_surface: string[];
+        likely_hosted: boolean;
+        host_hints: string[];
+        callback_exports: string[];
+        callback_strings: string[];
+        service_hooks: string[];
+    };
+    strings_considered: number;
+}, {
+    sample_id: string;
+    indicators: {
+        com_server: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+        service_binary: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+        plugin_binary: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+        driver_binary: {
+            confidence: number;
+            evidence: string[];
+            likely: boolean;
+        };
+    };
+    export_surface: {
+        total_exports: number;
+        total_forwarders: number;
+        notable_exports: string[];
+        com_related_exports: string[];
+        service_related_exports: string[];
+        plugin_related_exports: string[];
+        forwarded_exports: string[];
+    };
+    packed: boolean;
+    binary_role: string;
+    original_filename: string | null;
+    packing_confidence: number;
+    analysis_priorities: string[];
+    role_confidence: number;
+    runtime_hint: {
+        is_dotnet: boolean | null;
+        dotnet_version: string | null;
+        target_framework: string | null;
+        primary_runtime: string | null;
+    };
+    import_surface: {
+        dll_count: number;
+        notable_dlls: string[];
+        com_related_imports: string[];
+        service_related_imports: string[];
+        network_related_imports: string[];
+        process_related_imports: string[];
+    };
+    export_dispatch_profile: {
+        confidence: number;
+        command_like_exports: string[];
+        callback_like_exports: string[];
+        registration_exports: string[];
+        ordinal_only_exports: number;
+        likely_dispatch_model: string;
+    };
+    com_profile: {
+        confidence: number;
+        clsid_strings: string[];
+        progid_strings: string[];
+        interface_hints: string[];
+        registration_strings: string[];
+        class_factory_exports: string[];
+        class_factory_surface?: string[] | undefined;
+    };
+    host_interaction_profile: {
+        confidence: number;
+        likely_hosted: boolean;
+        host_hints: string[];
+        callback_exports: string[];
+        callback_strings: string[];
+        service_hooks: string[];
+        callback_surface?: string[] | undefined;
+    };
+    strings_considered: number;
+    lifecycle_surface?: string[] | undefined;
+}>;
+export declare const BinaryRoleProfileOutputSchema: z.ZodObject<{
+    ok: z.ZodBoolean;
+    data: z.ZodOptional<z.ZodObject<{
+        sample_id: z.ZodString;
+        original_filename: z.ZodNullable<z.ZodString>;
+        binary_role: z.ZodString;
+        role_confidence: z.ZodNumber;
+        runtime_hint: z.ZodObject<{
+            is_dotnet: z.ZodNullable<z.ZodBoolean>;
+            dotnet_version: z.ZodNullable<z.ZodString>;
+            target_framework: z.ZodNullable<z.ZodString>;
+            primary_runtime: z.ZodNullable<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            is_dotnet: boolean | null;
+            dotnet_version: string | null;
+            target_framework: string | null;
+            primary_runtime: string | null;
+        }, {
+            is_dotnet: boolean | null;
+            dotnet_version: string | null;
+            target_framework: string | null;
+            primary_runtime: string | null;
+        }>;
+        export_surface: z.ZodObject<{
+            total_exports: z.ZodNumber;
+            total_forwarders: z.ZodNumber;
+            notable_exports: z.ZodArray<z.ZodString, "many">;
+            com_related_exports: z.ZodArray<z.ZodString, "many">;
+            service_related_exports: z.ZodArray<z.ZodString, "many">;
+            plugin_related_exports: z.ZodArray<z.ZodString, "many">;
+            forwarded_exports: z.ZodArray<z.ZodString, "many">;
+        }, "strip", z.ZodTypeAny, {
+            total_exports: number;
+            total_forwarders: number;
+            notable_exports: string[];
+            com_related_exports: string[];
+            service_related_exports: string[];
+            plugin_related_exports: string[];
+            forwarded_exports: string[];
+        }, {
+            total_exports: number;
+            total_forwarders: number;
+            notable_exports: string[];
+            com_related_exports: string[];
+            service_related_exports: string[];
+            plugin_related_exports: string[];
+            forwarded_exports: string[];
+        }>;
+        import_surface: z.ZodObject<{
+            dll_count: z.ZodNumber;
+            notable_dlls: z.ZodArray<z.ZodString, "many">;
+            com_related_imports: z.ZodArray<z.ZodString, "many">;
+            service_related_imports: z.ZodArray<z.ZodString, "many">;
+            network_related_imports: z.ZodArray<z.ZodString, "many">;
+            process_related_imports: z.ZodArray<z.ZodString, "many">;
+        }, "strip", z.ZodTypeAny, {
+            dll_count: number;
+            notable_dlls: string[];
+            com_related_imports: string[];
+            service_related_imports: string[];
+            network_related_imports: string[];
+            process_related_imports: string[];
+        }, {
+            dll_count: number;
+            notable_dlls: string[];
+            com_related_imports: string[];
+            service_related_imports: string[];
+            network_related_imports: string[];
+            process_related_imports: string[];
+        }>;
+        packed: z.ZodBoolean;
+        packing_confidence: z.ZodNumber;
+        indicators: z.ZodObject<{
+            com_server: z.ZodObject<{
+                likely: z.ZodBoolean;
+                confidence: z.ZodNumber;
+                evidence: z.ZodArray<z.ZodString, "many">;
+            }, "strip", z.ZodTypeAny, {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            }, {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            }>;
+            service_binary: z.ZodObject<{
+                likely: z.ZodBoolean;
+                confidence: z.ZodNumber;
+                evidence: z.ZodArray<z.ZodString, "many">;
+            }, "strip", z.ZodTypeAny, {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            }, {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            }>;
+            plugin_binary: z.ZodObject<{
+                likely: z.ZodBoolean;
+                confidence: z.ZodNumber;
+                evidence: z.ZodArray<z.ZodString, "many">;
+            }, "strip", z.ZodTypeAny, {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            }, {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            }>;
+            driver_binary: z.ZodObject<{
+                likely: z.ZodBoolean;
+                confidence: z.ZodNumber;
+                evidence: z.ZodArray<z.ZodString, "many">;
+            }, "strip", z.ZodTypeAny, {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            }, {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            }>;
+        }, "strip", z.ZodTypeAny, {
+            com_server: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            service_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            plugin_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            driver_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+        }, {
+            com_server: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            service_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            plugin_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            driver_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+        }>;
+        export_dispatch_profile: z.ZodObject<{
+            command_like_exports: z.ZodArray<z.ZodString, "many">;
+            callback_like_exports: z.ZodArray<z.ZodString, "many">;
+            registration_exports: z.ZodArray<z.ZodString, "many">;
+            ordinal_only_exports: z.ZodNumber;
+            likely_dispatch_model: z.ZodString;
+            confidence: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            confidence: number;
+            command_like_exports: string[];
+            callback_like_exports: string[];
+            registration_exports: string[];
+            ordinal_only_exports: number;
+            likely_dispatch_model: string;
+        }, {
+            confidence: number;
+            command_like_exports: string[];
+            callback_like_exports: string[];
+            registration_exports: string[];
+            ordinal_only_exports: number;
+            likely_dispatch_model: string;
+        }>;
+        lifecycle_surface: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        com_profile: z.ZodObject<{
+            clsid_strings: z.ZodArray<z.ZodString, "many">;
+            progid_strings: z.ZodArray<z.ZodString, "many">;
+            interface_hints: z.ZodArray<z.ZodString, "many">;
+            registration_strings: z.ZodArray<z.ZodString, "many">;
+            class_factory_exports: z.ZodArray<z.ZodString, "many">;
+            class_factory_surface: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            confidence: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            confidence: number;
+            clsid_strings: string[];
+            progid_strings: string[];
+            interface_hints: string[];
+            registration_strings: string[];
+            class_factory_exports: string[];
+            class_factory_surface: string[];
+        }, {
+            confidence: number;
+            clsid_strings: string[];
+            progid_strings: string[];
+            interface_hints: string[];
+            registration_strings: string[];
+            class_factory_exports: string[];
+            class_factory_surface?: string[] | undefined;
+        }>;
+        host_interaction_profile: z.ZodObject<{
+            likely_hosted: z.ZodBoolean;
+            host_hints: z.ZodArray<z.ZodString, "many">;
+            callback_exports: z.ZodArray<z.ZodString, "many">;
+            callback_surface: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            callback_strings: z.ZodArray<z.ZodString, "many">;
+            service_hooks: z.ZodArray<z.ZodString, "many">;
+            confidence: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            confidence: number;
+            callback_surface: string[];
+            likely_hosted: boolean;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+            service_hooks: string[];
+        }, {
+            confidence: number;
+            likely_hosted: boolean;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+            service_hooks: string[];
+            callback_surface?: string[] | undefined;
+        }>;
+        analysis_priorities: z.ZodArray<z.ZodString, "many">;
+        strings_considered: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        sample_id: string;
+        indicators: {
+            com_server: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            service_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            plugin_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            driver_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+        };
+        export_surface: {
+            total_exports: number;
+            total_forwarders: number;
+            notable_exports: string[];
+            com_related_exports: string[];
+            service_related_exports: string[];
+            plugin_related_exports: string[];
+            forwarded_exports: string[];
+        };
+        packed: boolean;
+        binary_role: string;
+        original_filename: string | null;
+        packing_confidence: number;
+        analysis_priorities: string[];
+        role_confidence: number;
+        runtime_hint: {
+            is_dotnet: boolean | null;
+            dotnet_version: string | null;
+            target_framework: string | null;
+            primary_runtime: string | null;
+        };
+        import_surface: {
+            dll_count: number;
+            notable_dlls: string[];
+            com_related_imports: string[];
+            service_related_imports: string[];
+            network_related_imports: string[];
+            process_related_imports: string[];
+        };
+        export_dispatch_profile: {
+            confidence: number;
+            command_like_exports: string[];
+            callback_like_exports: string[];
+            registration_exports: string[];
+            ordinal_only_exports: number;
+            likely_dispatch_model: string;
+        };
+        lifecycle_surface: string[];
+        com_profile: {
+            confidence: number;
+            clsid_strings: string[];
+            progid_strings: string[];
+            interface_hints: string[];
+            registration_strings: string[];
+            class_factory_exports: string[];
+            class_factory_surface: string[];
+        };
+        host_interaction_profile: {
+            confidence: number;
+            callback_surface: string[];
+            likely_hosted: boolean;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+            service_hooks: string[];
+        };
+        strings_considered: number;
+    }, {
+        sample_id: string;
+        indicators: {
+            com_server: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            service_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            plugin_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            driver_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+        };
+        export_surface: {
+            total_exports: number;
+            total_forwarders: number;
+            notable_exports: string[];
+            com_related_exports: string[];
+            service_related_exports: string[];
+            plugin_related_exports: string[];
+            forwarded_exports: string[];
+        };
+        packed: boolean;
+        binary_role: string;
+        original_filename: string | null;
+        packing_confidence: number;
+        analysis_priorities: string[];
+        role_confidence: number;
+        runtime_hint: {
+            is_dotnet: boolean | null;
+            dotnet_version: string | null;
+            target_framework: string | null;
+            primary_runtime: string | null;
+        };
+        import_surface: {
+            dll_count: number;
+            notable_dlls: string[];
+            com_related_imports: string[];
+            service_related_imports: string[];
+            network_related_imports: string[];
+            process_related_imports: string[];
+        };
+        export_dispatch_profile: {
+            confidence: number;
+            command_like_exports: string[];
+            callback_like_exports: string[];
+            registration_exports: string[];
+            ordinal_only_exports: number;
+            likely_dispatch_model: string;
+        };
+        com_profile: {
+            confidence: number;
+            clsid_strings: string[];
+            progid_strings: string[];
+            interface_hints: string[];
+            registration_strings: string[];
+            class_factory_exports: string[];
+            class_factory_surface?: string[] | undefined;
+        };
+        host_interaction_profile: {
+            confidence: number;
+            likely_hosted: boolean;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+            service_hooks: string[];
+            callback_surface?: string[] | undefined;
+        };
+        strings_considered: number;
+        lifecycle_surface?: string[] | undefined;
+    }>>;
+    warnings: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    errors: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    metrics: z.ZodOptional<z.ZodObject<{
+        elapsed_ms: z.ZodNumber;
+        tool: z.ZodString;
+        cached: z.ZodOptional<z.ZodBoolean>;
+        cache_key: z.ZodOptional<z.ZodString>;
+        cache_tier: z.ZodOptional<z.ZodString>;
+        cache_created_at: z.ZodOptional<z.ZodString>;
+        cache_expires_at: z.ZodOptional<z.ZodString>;
+        cache_hit_at: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        elapsed_ms: number;
+        tool: string;
+        cached?: boolean | undefined;
+        cache_key?: string | undefined;
+        cache_tier?: string | undefined;
+        cache_created_at?: string | undefined;
+        cache_expires_at?: string | undefined;
+        cache_hit_at?: string | undefined;
+    }, {
+        elapsed_ms: number;
+        tool: string;
+        cached?: boolean | undefined;
+        cache_key?: string | undefined;
+        cache_tier?: string | undefined;
+        cache_created_at?: string | undefined;
+        cache_expires_at?: string | undefined;
+        cache_hit_at?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    ok: boolean;
+    data?: {
+        sample_id: string;
+        indicators: {
+            com_server: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            service_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            plugin_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            driver_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+        };
+        export_surface: {
+            total_exports: number;
+            total_forwarders: number;
+            notable_exports: string[];
+            com_related_exports: string[];
+            service_related_exports: string[];
+            plugin_related_exports: string[];
+            forwarded_exports: string[];
+        };
+        packed: boolean;
+        binary_role: string;
+        original_filename: string | null;
+        packing_confidence: number;
+        analysis_priorities: string[];
+        role_confidence: number;
+        runtime_hint: {
+            is_dotnet: boolean | null;
+            dotnet_version: string | null;
+            target_framework: string | null;
+            primary_runtime: string | null;
+        };
+        import_surface: {
+            dll_count: number;
+            notable_dlls: string[];
+            com_related_imports: string[];
+            service_related_imports: string[];
+            network_related_imports: string[];
+            process_related_imports: string[];
+        };
+        export_dispatch_profile: {
+            confidence: number;
+            command_like_exports: string[];
+            callback_like_exports: string[];
+            registration_exports: string[];
+            ordinal_only_exports: number;
+            likely_dispatch_model: string;
+        };
+        lifecycle_surface: string[];
+        com_profile: {
+            confidence: number;
+            clsid_strings: string[];
+            progid_strings: string[];
+            interface_hints: string[];
+            registration_strings: string[];
+            class_factory_exports: string[];
+            class_factory_surface: string[];
+        };
+        host_interaction_profile: {
+            confidence: number;
+            callback_surface: string[];
+            likely_hosted: boolean;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+            service_hooks: string[];
+        };
+        strings_considered: number;
+    } | undefined;
+    metrics?: {
+        elapsed_ms: number;
+        tool: string;
+        cached?: boolean | undefined;
+        cache_key?: string | undefined;
+        cache_tier?: string | undefined;
+        cache_created_at?: string | undefined;
+        cache_expires_at?: string | undefined;
+        cache_hit_at?: string | undefined;
+    } | undefined;
+    warnings?: string[] | undefined;
+    errors?: string[] | undefined;
+}, {
+    ok: boolean;
+    data?: {
+        sample_id: string;
+        indicators: {
+            com_server: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            service_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            plugin_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+            driver_binary: {
+                confidence: number;
+                evidence: string[];
+                likely: boolean;
+            };
+        };
+        export_surface: {
+            total_exports: number;
+            total_forwarders: number;
+            notable_exports: string[];
+            com_related_exports: string[];
+            service_related_exports: string[];
+            plugin_related_exports: string[];
+            forwarded_exports: string[];
+        };
+        packed: boolean;
+        binary_role: string;
+        original_filename: string | null;
+        packing_confidence: number;
+        analysis_priorities: string[];
+        role_confidence: number;
+        runtime_hint: {
+            is_dotnet: boolean | null;
+            dotnet_version: string | null;
+            target_framework: string | null;
+            primary_runtime: string | null;
+        };
+        import_surface: {
+            dll_count: number;
+            notable_dlls: string[];
+            com_related_imports: string[];
+            service_related_imports: string[];
+            network_related_imports: string[];
+            process_related_imports: string[];
+        };
+        export_dispatch_profile: {
+            confidence: number;
+            command_like_exports: string[];
+            callback_like_exports: string[];
+            registration_exports: string[];
+            ordinal_only_exports: number;
+            likely_dispatch_model: string;
+        };
+        com_profile: {
+            confidence: number;
+            clsid_strings: string[];
+            progid_strings: string[];
+            interface_hints: string[];
+            registration_strings: string[];
+            class_factory_exports: string[];
+            class_factory_surface?: string[] | undefined;
+        };
+        host_interaction_profile: {
+            confidence: number;
+            likely_hosted: boolean;
+            host_hints: string[];
+            callback_exports: string[];
+            callback_strings: string[];
+            service_hooks: string[];
+            callback_surface?: string[] | undefined;
+        };
+        strings_considered: number;
+        lifecycle_surface?: string[] | undefined;
+    } | undefined;
+    metrics?: {
+        elapsed_ms: number;
+        tool: string;
+        cached?: boolean | undefined;
+        cache_key?: string | undefined;
+        cache_tier?: string | undefined;
+        cache_created_at?: string | undefined;
+        cache_expires_at?: string | undefined;
+        cache_hit_at?: string | undefined;
+    } | undefined;
+    warnings?: string[] | undefined;
+    errors?: string[] | undefined;
+}>;
+export declare const binaryRoleProfileToolDefinition: ToolDefinition;
+interface BinaryRoleProfileDependencies {
+    exportsHandler?: (args: ToolArgs) => Promise<WorkerResult>;
+    importsHandler?: (args: ToolArgs) => Promise<WorkerResult>;
+    stringsHandler?: (args: ToolArgs) => Promise<WorkerResult>;
+    runtimeHandler?: (args: ToolArgs) => Promise<WorkerResult>;
+    packerHandler?: (args: ToolArgs) => Promise<WorkerResult>;
+}
+export declare function createBinaryRoleProfileHandler(workspaceManager: WorkspaceManager, database: DatabaseManager, cacheManager: CacheManager, dependencies?: BinaryRoleProfileDependencies): (args: ToolArgs) => Promise<WorkerResult>;
+export {};
+//# sourceMappingURL=binary-role-profile.d.ts.map