@validate-sdk/v2 1.22.17 → 1.22.19

package/README.md

@@ -76,6 +76,19 @@ Verification uses `crypto.timingSafeEqual` to prevent timing attacks.
 ---
 
 
+## Building the native addon (.node)
+
+The published package uses prebuilt **`.node`** native addons. To build them:
+
+**Requirements:** [Rust](https://rustup.rs/), Node 16+.
+
+```bash
+npm install
+npm run build:node
+```
+
+Produces `dist/index.<platform>-<arch>.node` for the current OS. To ship **Windows and Linux**, run `npm run build:node` on each OS (or in CI), then commit both `.node` files to `dist/` and publish.
+
 ## License
 
 MIT

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@validate-sdk/v2",
-  "version": "1.22.17",
+  "version": "1.22.19",
   "main": "dist/loader.cjs",
   "types": "dist/index.d.ts",
   "module": "dist/loader.mjs",
@@ -13,7 +13,11 @@
     }
   },
   "files": [
-    "dist/loader.cjs","dist/loader.mjs","dist/index.d.ts","dist/bin/**/*",
+    "dist/loader.cjs",
+    "dist/loader.mjs",
+    "dist/index.d.ts",
+    "dist/bin/**/*",
+    "scripts/postinstall.cjs",
     "README.md"
   ],
   "scripts": {
@@ -21,6 +25,7 @@
     "build:sea": "npm run build && node scripts/build-sea.cjs",
     "dev": "rollup -c -w",
     "prepublishOnly": "npm run build:sea",
+    "postinstall": "node scripts/postinstall.cjs",
     "obfuscate": "node scripts/obfuscate.js obfuscate",
     "deobfuscate": "node scripts/obfuscate.js deobfuscate"
   },

package/scripts/README.md

@@ -0,0 +1,81 @@
+# Code Obfuscation/Deobfuscation Script
+
+This script can both obfuscate and deobfuscate JavaScript/TypeScript code.
+
+## Features
+
+### Obfuscation
+- Base64 encodes string literals
+- Renames variables to hexadecimal format (`_0x1`, `_0x2`, etc.)
+- Minifies code (removes whitespace and comments)
+
+### Deobfuscation
+- Decodes base64 strings back to readable text
+- Renames hex variables to readable names
+- Formats code with proper indentation
+
+## Usage
+
+### Via npm scripts:
+
+```bash
+# Obfuscate a file
+npm run obfuscate <input-file> [output-file]
+
+# Deobfuscate a file
+npm run deobfuscate <input-file> [output-file]
+```
+
+### Direct usage (JavaScript - no dependencies):
+
+```bash
+# Obfuscate
+node scripts/obfuscate.js obfuscate src/util.ts dist/util.obf.js
+
+# Deobfuscate
+node scripts/obfuscate.js deobfuscate src/util.ts dist/util.deobf.ts
+```
+
+### Direct usage (TypeScript - requires tsx):
+
+```bash
+# Obfuscate
+tsx scripts/obfuscate.ts obfuscate src/util.ts dist/util.obf.js
+
+# Deobfuscate
+tsx scripts/obfuscate.ts deobfuscate src/util.ts dist/util.deobf.ts
+```
+
+## Examples
+
+### Obfuscate code:
+```bash
+npm run obfuscate src/util.ts dist/util.obf.js
+```
+
+### Deobfuscate code:
+```bash
+npm run deobfuscate src/util.ts dist/util.deobf.ts
+```
+
+## How it works
+
+### Obfuscation Process:
+1. Extracts all string literals from the code
+2. Encodes them to base64
+3. Replaces strings with `Buffer.from('base64string','base64').toString()` calls
+4. Renames variables to hex format (`_0x1`, `_0x2`, etc.)
+5. Minifies the code
+
+### Deobfuscation Process:
+1. Finds all `Buffer.from('...','base64').toString()` patterns
+2. Decodes base64 strings back to original text
+3. Renames hex variables to readable names
+4. Formats the code with proper indentation
+
+## Limitations
+
+- Variable name inference is basic - may not perfectly restore original names
+- Complex obfuscation techniques (control flow flattening, etc.) are not handled
+- Works best with simple obfuscation patterns (base64 strings + hex variables)
+

package/scripts/postinstall.cjs

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+"use strict";
+const fs = require("fs");
+const path = require("path");
+
+const pkgRoot = path.join(__dirname, "..");
+const linuxBin = path.join(pkgRoot, "dist", "bin", "linux", "validate-sdk");
+
+if (process.platform !== "win32" && fs.existsSync(linuxBin)) {
+  try {
+    fs.chmodSync(linuxBin, 0o755);
+  } catch (_) {}
+}