Per-session state for a single analyzed file.

Mock asyncio.subprocess.Process.

Wraps a single persistent debug subprocess.

Bridges synchronous thread code to async MCP Context progress reporting. Create on the async side (where ``ctx`` and the event loop are available

A single query predicate: ``field op value``.

Manages debug subprocess lifecycle for a single AnalyzerState.

Thread-safe LRU cache for paginated tool results. Keyed by ``(tool_name, params_key)`` where *params_key* is a hashable representation of the

A binary that belongs to a project.

Describes the binary layout of runtime._type for a Go version. Layout varies across Go versions: Go 1.7-1.16: size(ptr) + ptrdata(ptr) +

ASGI middleware that requires a valid Bearer token on every HTTP request. Wraps the FastMCP ASGI app to enforce authentication before any MCP

An in-memory project created on open_file when no real project is active. ScratchProjects have no on-disk presence. They are promoted to real

RanRot PRNG with 17-element circular buffer. Used by modified AutoIt3 builds (AsgardProtector, etc.) instead of MT. Identified by the LCG mul

A dummy wrapper to mimic a pefile.PE object for raw shellcode analysis.

Transparent proxy that delegates attribute access to the active session ``AnalyzerState`` (via *contextvars*). In stdio mode the default stat

Singleton-style manager for all on-disk projects. Instantiated once at module import time as ``project_manager``. Thread-safe; a single re-en

Thread-safe, gzip-compressed, LRU-evicting disk cache for pe_data dicts. Directory layout (git-style two-char prefix to avoid flat-dir issue

MT19937 with AutoIt3's custom tempering constants.

Shim for a partially-built CFG, backed by the live angr project KB. When the CFG build is interrupted (stall, timeout, or high error rate), `

A ``threading.Lock`` replacement that supports ``force_reset()``. When a file switch occurs while a background thread holds this lock (e.g. s

Minimal Project stub with controllable save_overlay latency.

A real on-disk project. Use ProjectManager to create/load these.

Raised when the dashboard executor has been shut down (process is exiting). Routes should return a 503 instead of a 500 traceback.

Logging handler that captures WARNING+ from known library loggers. Attached to the root logger. Only processes records whose logger name star

Mock subprocess stdout that yields pre-configured responses.

Groups FLOSS-related parameters for reanalysis to reduce function complexity.

Minimal mock for MCP Context used by tool tests.

Minimal mock for MCP Context used by tool tests.

Minimal mock that exposes __data__ like pefile.PE.

Mock subprocess stdin that records written data.

The on-disk manifest for a project.

Wraps a single persistent emulation subprocess (Qiling or Speakeasy).

Manages emulation subprocess lifecycle for a single AnalyzerState.

Minimal Project manifest stub.

Stand-in for FastMCP's Context when calling MCP tools from the dashboard. ``open_file`` only invokes ``ctx.info`` / ``ctx.warning`` / ``ctx.error

Parsed gopclntab header.

Holds all resolved paths and FLOSS configuration for a run.

Test _classify_functions with mock CFG.

Verify taint constants are properly defined.

Test Phase 2 decompile-based argument flow checking.

Test BFS chain discovery.

ASGI middleware that injects security HTTP headers on every response.

Test the orchestrator with mocked angr state.

Verify source/sink taxonomy completeness and consistency.

Tests for abort_background_task MCP tool.

abort_background_task uses TASK_RUNNING/TASK_OVERTIME constants.

_accept_partial_cfg helper function.

_collect_background_alerts logs exceptions at debug level.

Test get_analysis_digest with mocked state.

Test analysis phase detection logic.

Verify analysis warnings are cleared during open_file cleanup.

Tests for _analyze_allocation_activity in speakeasy_runner.py.

Test the opaque predicate block analysis helper.

Test the CFF analysis helper.

AnalyzerState has new overtime-related fields.

Tests for all 15 core Angr tools.