windows-exe-decompiler-mcp-server 0.1.0

package/dist/dynamic-trace.d.ts

@@ -0,0 +1,95 @@
+import type { DatabaseManager } from './database.js';
+import type { WorkspaceManager } from './workspace-manager.js';
+export type DynamicTraceSourceFormat = 'normalized' | 'generic_json' | 'frida_json' | 'speakeasy_json' | 'minidump' | 'process_memory' | 'raw_dump' | 'sandbox_trace';
+export type DynamicEvidenceKind = 'trace' | 'memory_snapshot' | 'hybrid';
+export type DynamicEvidenceLayerName = 'safe_simulation' | 'memory_or_hybrid' | 'executed_trace';
+export type DynamicEvidenceScope = 'all' | 'latest' | 'session';
+export interface LoadDynamicTraceEvidenceOptions {
+    evidenceScope?: DynamicEvidenceScope;
+    sessionTag?: string;
+}
+export interface NormalizedDynamicTraceApi {
+    api: string;
+    module?: string;
+    category: string;
+    count: number;
+    confidence: number;
+    sources: string[];
+}
+export interface NormalizedDynamicTraceMemoryRegion {
+    region_type: string;
+    purpose: string;
+    source: string;
+    confidence: number;
+    base_address?: string;
+    size?: number;
+    protection?: string;
+    indicators: string[];
+}
+export interface NormalizedDynamicTrace {
+    schema_version: '0.1.0';
+    source_format: DynamicTraceSourceFormat;
+    evidence_kind: DynamicEvidenceKind;
+    source_name?: string;
+    source_mode?: string;
+    imported_at: string;
+    executed: boolean;
+    raw_event_count: number;
+    api_calls: NormalizedDynamicTraceApi[];
+    memory_regions: NormalizedDynamicTraceMemoryRegion[];
+    modules: string[];
+    strings: string[];
+    stages: string[];
+    risk_hints: string[];
+    notes: string[];
+}
+export interface DynamicEvidenceLayerSummary {
+    layer: DynamicEvidenceLayerName;
+    artifact_count: number;
+    confidence_band: 'baseline' | 'suggestive' | 'high';
+    source_formats: string[];
+    evidence_kinds: string[];
+    source_names: string[];
+    source_modes: string[];
+    latest_imported_at: string | null;
+    summary: string;
+}
+export interface DynamicTraceSummary {
+    artifact_count: number;
+    artifact_ids?: string[];
+    executed: boolean;
+    executed_artifact_count?: number;
+    api_count: number;
+    memory_region_count: number;
+    stage_count: number;
+    observed_apis: string[];
+    high_signal_apis: string[];
+    memory_regions: string[];
+    region_types?: string[];
+    observed_modules?: string[];
+    observed_strings?: string[];
+    stages: string[];
+    risk_hints: string[];
+    source_formats?: string[];
+    evidence_kinds?: string[];
+    source_names?: string[];
+    source_modes?: string[];
+    confidence_layers?: DynamicEvidenceLayerSummary[];
+    earliest_imported_at?: string | null;
+    latest_imported_at?: string | null;
+    scope_note?: string;
+    evidence_scope?: DynamicEvidenceScope;
+    session_selector?: string | null;
+    session_tags?: string[];
+    evidence: string[];
+    summary: string;
+}
+export declare function normalizeDynamicTrace(raw: unknown, options?: {
+    sourceFormat?: DynamicTraceSourceFormat;
+    evidenceKind?: DynamicEvidenceKind;
+    sourceName?: string;
+}): NormalizedDynamicTrace;
+export declare function normalizeDynamicTraceArtifactPayload(raw: unknown): NormalizedDynamicTrace | null;
+export declare function summarizeDynamicTrace(trace: NormalizedDynamicTrace): DynamicTraceSummary;
+export declare function loadDynamicTraceEvidence(workspaceManager: WorkspaceManager, database: DatabaseManager, sampleId: string, options?: LoadDynamicTraceEvidenceOptions): Promise<DynamicTraceSummary | null>;
+//# sourceMappingURL=dynamic-trace.d.ts.map