Wholiver / metis-reverse

Turn stripped binaries into source that recompiles and behaves the same, with your AI coding agent.
 English · 简体中文 
 =18"> 
**1. Install & connect.** You need Node.js 18+ and uv. New to the terminal? Follow the step-by-step **install guide**.
 [code] 
It finds the coding agents on your computer, shows what it will write, and asks before writing anything. When you see `Done.`, restart your agent. Run `npx metis-reverse-cli doctor` to check. You normally don't edit any config file yourself.
 Which apps it can configure (24) 
`setup` lets you pick from a list. To skip the menu, pass `--client` (repeatable) and `--yes`, for example `npx metis-reverse-cli setup --client cursor --client claude_code --yes`. `--all-detected` configures every app it found (there is no `--client all`). `npx metis-reverse-cli clients` shows each app's config file on your machine. Fully quit Claude Desktop before running it. Grok Bot is listed but is set up in its own app, not by `setup`.
| App | `--client` | App | `--client` |
|:---|:---|:---|:---|
| Claude Code | `claude_code` | Claude Desktop | `claude_desktop` |
| Codex | `codex` | Cursor | `cursor` |
| Gemini CLI | `gemini_cli` | Windsurf | `windsurf` |
| Devin | `devin` | OpenCode | `opencode` |
| Antigravity | `antigravity` | GitHub Copilot CLI | `copilot_cli` |
| Command Code | `commandcode` | Qwen Code | `qwen_code` |
| Kimi Code | `kimi` | VS Code | `vscode` |
| Trae | `trae` | WorkBuddy | `workbuddy` |
| Grok Build | `grok_build` | OMP | `omp` |
| Pi | `pi` | Hermes | `hermes` |
| Qoder | `qoder` | Factory Droid | `droid` |
| ZCode | `zcode` | DeepSeek Harness | `dsh` |
 Advanced: manual config, source install, SSE 
Only needed if you don't want `setup` to write the config. Paste one of these into your app's MCP config (path from `clients`).
npm (what `setup` writes; it pins the current version):
 [code] 
uvx straight from GitHub (there is no PyPI package):
 [code] 
From source. The `metis-reverse` command only exists after a source install:
 [code] 
**2. Try it.** Build the bundled demo, then ask your agent to analyze it.
 [code] 
> Analyze the stripped binary `demo/demo_target`. Use evidence from format strings and assertions to work out the cache record struct, then reconstruct the C source and verify it with differential testing.
**Names recovered from evidence.** Original variable names, structs and types come back from format strings, assertions, syscall signatures and language metadata (Go pclntab, C++ RTTI and more), and each one records where it came from and how confident it is.
**Multi-engine out of the box.** Built-in parsers cover ELF, PE, Mach-O, DEX, Electron ASAR, .NET CIL and firmware. When Ghidra, JADX or ILSpy are installed, they are picked up automatically for native, Android and .NET targets.
**A real source tree on disk.** `reconstruct_project` and `scaffold_project` write a project you can open, and `prepare_editable_workspace` turns an installed app into an editable folder.
**Real values f