ai-appshield 1.0.0

package/dist/server/middleware.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RateLimiter = exports.analyzeRequest = void 0;
+exports.createShieldMiddleware = createShieldMiddleware;
+exports.validateRequest = validateRequest;
+const BotAnalyzer_1 = require("./BotAnalyzer");
+const config_1 = require("../core/config");
+/**
+ * Express-compatible middleware factory.
+ * Also works with any framework that uses (req, res, next) pattern.
+ */
+function createShieldMiddleware(config = {}) {
+    const cfg = { ...config_1.DEFAULT_SERVER_CONFIG, ...config };
+    const limiter = config.rateLimit
+        ? new BotAnalyzer_1.RateLimiter(config.rateLimit.maxRequests, config.rateLimit.windowMs)
+        : null;
+    return function shieldMiddleware(req, res, next) {
+        const ip = req.ip ?? String(req.headers['x-forwarded-for'] ?? 'unknown');
+        // Rate limiting
+        if (limiter?.isRateLimited(ip)) {
+            if (config.onBlocked) {
+                config.onBlocked({
+                    ip,
+                    userAgent: String(req.headers['user-agent'] ?? ''),
+                    path: req.path,
+                    reason: 'Rate limit exceeded',
+                    timestamp: Date.now(),
+                });
+            }
+            res.status(429).json({ error: 'Too many requests' });
+            return;
+        }
+        // Bot analysis
+        const analysis = (0, BotAnalyzer_1.analyzeRequest)(req, config);
+        if (analysis.blocked) {
+            res.status(cfg.blockStatusCode).json({
+                error: 'Access denied',
+                reason: 'Automated access is not permitted',
+            });
+            return;
+        }
+        next();
+    };
+}
+/**
+ * Standalone request validator (for non-Express frameworks).
+ */
+function validateRequest(req, config) {
+    const cfg = { ...config_1.DEFAULT_SERVER_CONFIG, ...config };
+    const analysis = (0, BotAnalyzer_1.analyzeRequest)(req, config);
+    if (analysis.blocked) {
+        return {
+            allowed: false,
+            statusCode: cfg.blockStatusCode,
+            reason: analysis.reason,
+        };
+    }
+    return { allowed: true, statusCode: 200 };
+}
+var BotAnalyzer_2 = require("./BotAnalyzer");
+Object.defineProperty(exports, "analyzeRequest", { enumerable: true, get: function () { return BotAnalyzer_2.analyzeRequest; } });
+Object.defineProperty(exports, "RateLimiter", { enumerable: true, get: function () { return BotAnalyzer_2.RateLimiter; } });
+//# sourceMappingURL=middleware.js.map

package/dist/server/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/server/middleware.ts"],"names":[],"mappings":";;;AAuBA,wDAyCC;AAKD,0CAgBC;AArFD,+CAA4D;AAE5D,2CAAuD;AAiBvD;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,SAA6B,EAAE;IACpE,MAAM,GAAG,GAAG,EAAE,GAAG,8BAAqB,EAAE,GAAG,MAAM,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS;QAC9B,CAAC,CAAC,IAAI,yBAAW,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QAC1E,CAAC,CAAC,IAAI,CAAC;IAET,OAAO,SAAS,gBAAgB,CAC9B,GAAsB,EACtB,GAAuB,EACvB,IAAkB;QAElB,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,SAAS,CAAC,CAAC;QAEzE,gBAAgB;QAChB,IAAI,OAAO,EAAE,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,CAAC,SAAS,CAAC;oBACf,EAAE;oBACF,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;oBAClD,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,qBAAqB;oBAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAC;YACL,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,eAAe;QACf,MAAM,QAAQ,GAAG,IAAA,4BAAc,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE7C,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC;gBACnC,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,mCAAmC;aAC5C,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAC7B,GAAsB,EACtB,MAA2B;IAE3B,MAAM,GAAG,GAAG,EAAE,GAAG,8BAAqB,EAAE,GAAG,MAAM,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAA,4BAAc,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE7C,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,GAAG,CAAC,eAAe;YAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC;AAED,6CAA4D;AAAnD,6GAAA,cAAc,OAAA;AAAE,0GAAA,WAAW,OAAA"}

package/dist/utils/obfuscate.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Encode text for DOM obfuscation — rendered via CSS/content but harder to scrape.
+ */
+export declare function obfuscateText(text: string): string;
+/**
+ * Simple XOR-based string encoding for client-side content protection.
+ */
+export declare function encodeContent(text: string, key?: string): string;
+/**
+ * Decode XOR-encoded content (used at render time in browser).
+ */
+export declare function decodeContent(encoded: string, key?: string): string;
+/**
+ * Generate a random honeypot field name that looks legitimate.
+ */
+export declare function generateHoneypotName(): string;
+/**
+ * Hash a string to a simple fingerprint (FNV-1a).
+ */
+export declare function simpleHash(input: string): string;
+//# sourceMappingURL=obfuscate.d.ts.map

package/dist/utils/obfuscate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"obfuscate.d.ts","sourceRoot":"","sources":["../../src/utils/obfuscate.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKlD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAiB,GAAG,MAAM,CAMxE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,SAAiB,GAAG,MAAM,CAS3E;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAM7C;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOhD"}

package/dist/utils/obfuscate.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.obfuscateText = obfuscateText;
+exports.encodeContent = encodeContent;
+exports.decodeContent = decodeContent;
+exports.generateHoneypotName = generateHoneypotName;
+exports.simpleHash = simpleHash;
+/**
+ * Encode text for DOM obfuscation — rendered via CSS/content but harder to scrape.
+ */
+function obfuscateText(text) {
+    return text
+        .split('')
+        .map((char) => `&#${char.charCodeAt(0)};`)
+        .join('');
+}
+/**
+ * Simple XOR-based string encoding for client-side content protection.
+ */
+function encodeContent(text, key = 'ai-appshield') {
+    const encoded = [];
+    for (let i = 0; i < text.length; i++) {
+        encoded.push(text.charCodeAt(i) ^ key.charCodeAt(i % key.length));
+    }
+    return btoa(String.fromCharCode(...encoded));
+}
+/**
+ * Decode XOR-encoded content (used at render time in browser).
+ */
+function decodeContent(encoded, key = 'ai-appshield') {
+    const bytes = atob(encoded);
+    const decoded = [];
+    for (let i = 0; i < bytes.length; i++) {
+        decoded.push(String.fromCharCode(bytes.charCodeAt(i) ^ key.charCodeAt(i % key.length)));
+    }
+    return decoded.join('');
+}
+/**
+ * Generate a random honeypot field name that looks legitimate.
+ */
+function generateHoneypotName() {
+    const prefixes = ['email', 'phone', 'company', 'website', 'address', 'fax'];
+    const suffixes = ['_confirm', '_alt', '_2', '_backup', '_verify'];
+    const prefix = prefixes[Math.floor(Math.random() * prefixes.length)];
+    const suffix = suffixes[Math.floor(Math.random() * suffixes.length)];
+    return `${prefix}${suffix}`;
+}
+/**
+ * Hash a string to a simple fingerprint (FNV-1a).
+ */
+function simpleHash(input) {
+    let hash = 2166136261;
+    for (let i = 0; i < input.length; i++) {
+        hash ^= input.charCodeAt(i);
+        hash = (hash * 16777619) >>> 0;
+    }
+    return hash.toString(36);
+}
+//# sourceMappingURL=obfuscate.js.map

package/dist/utils/obfuscate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"obfuscate.js","sourceRoot":"","sources":["../../src/utils/obfuscate.ts"],"names":[],"mappings":";;AAGA,sCAKC;AAKD,sCAMC;AAKD,sCASC;AAKD,oDAMC;AAKD,gCAOC;AAxDD;;GAEG;AACH,SAAgB,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI;SACR,KAAK,CAAC,EAAE,CAAC;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;SACzC,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa,CAAC,IAAY,EAAE,GAAG,GAAG,cAAc;IAC9D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa,CAAC,OAAe,EAAE,GAAG,GAAG,cAAc;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CACV,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB;IAClC,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACrE,OAAO,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU,CAAC,KAAa;IACtC,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC3B,CAAC"}

package/dist/utils/signatures.d.ts

@@ -0,0 +1,13 @@
+/** Known automation tool signatures in navigator and window objects */
+export declare const AUTOMATION_SIGNATURES: readonly ["webdriver", "__webdriver_evaluate", "__selenium_evaluate", "__webdriver_script_function", "__webdriver_script_func", "__webdriver_script_fn", "__fxdriver_evaluate", "__driver_unwrapped", "__webdriver_unwrapped", "__driver_evaluate", "__selenium_unwrapped", "__fxdriver_unwrapped", "_Selenium_IDE_Recorder", "_selenium", "calledSelenium", "$cdc_asdjflasutopfhvcZLmcfl_", "$chrome_asyncScriptInfo", "__$webdriverAsyncExecutor", "__lastWatirAlert", "__lastWatirConfirm", "__lastWatirPrompt", "_WEBDRIVER_ELEM_CACHE", "ChromeDriverw", "domAutomation", "domAutomationController"];
+/** User-agent substrings associated with bots and scrapers */
+export declare const BOT_USER_AGENTS: readonly ["bot", "crawl", "spider", "scrape", "curl", "wget", "python-requests", "python-urllib", "axios", "go-http-client", "java/", "libwww", "httpclient", "scrapy", "phantomjs", "headlesschrome", "puppeteer", "playwright", "selenium", "gptbot", "chatgpt", "claudebot", "anthropic", "bytespider", "ccbot", "google-extended", "perplexitybot", "amazonbot", "facebookexternalhit", "bingpreview", "slurp", "duckduckbot", "ia_archiver", "semrushbot", "ahrefsbot", "dotbot", "mj12bot", "rogerbot", "screaming frog", "petalbot", "dataforseo", "brightbot", "omgili", "cohere-ai"];
+/** Headless browser indicators */
+export declare const HEADLESS_INDICATORS: {
+    readonly missingPlugins: true;
+    readonly zeroLanguages: true;
+    readonly webdriverProperty: true;
+    readonly chromeRuntimeMissing: true;
+    readonly permissionsInconsistency: true;
+};
+//# sourceMappingURL=signatures.d.ts.map

package/dist/utils/signatures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signatures.d.ts","sourceRoot":"","sources":["../../src/utils/signatures.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,2kBA0BxB,CAAC;AAEX,8DAA8D;AAC9D,eAAO,MAAM,eAAe,+jBA6ClB,CAAC;AAEX,kCAAkC;AAClC,eAAO,MAAM,mBAAmB;;;;;;CAMtB,CAAC"}

package/dist/utils/signatures.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HEADLESS_INDICATORS = exports.BOT_USER_AGENTS = exports.AUTOMATION_SIGNATURES = void 0;
+/** Known automation tool signatures in navigator and window objects */
+exports.AUTOMATION_SIGNATURES = [
+    'webdriver',
+    '__webdriver_evaluate',
+    '__selenium_evaluate',
+    '__webdriver_script_function',
+    '__webdriver_script_func',
+    '__webdriver_script_fn',
+    '__fxdriver_evaluate',
+    '__driver_unwrapped',
+    '__webdriver_unwrapped',
+    '__driver_evaluate',
+    '__selenium_unwrapped',
+    '__fxdriver_unwrapped',
+    '_Selenium_IDE_Recorder',
+    '_selenium',
+    'calledSelenium',
+    '$cdc_asdjflasutopfhvcZLmcfl_',
+    '$chrome_asyncScriptInfo',
+    '__$webdriverAsyncExecutor',
+    '__lastWatirAlert',
+    '__lastWatirConfirm',
+    '__lastWatirPrompt',
+    '_WEBDRIVER_ELEM_CACHE',
+    'ChromeDriverw',
+    'domAutomation',
+    'domAutomationController',
+];
+/** User-agent substrings associated with bots and scrapers */
+exports.BOT_USER_AGENTS = [
+    'bot',
+    'crawl',
+    'spider',
+    'scrape',
+    'curl',
+    'wget',
+    'python-requests',
+    'python-urllib',
+    'axios',
+    'go-http-client',
+    'java/',
+    'libwww',
+    'httpclient',
+    'scrapy',
+    'phantomjs',
+    'headlesschrome',
+    'puppeteer',
+    'playwright',
+    'selenium',
+    'gptbot',
+    'chatgpt',
+    'claudebot',
+    'anthropic',
+    'bytespider',
+    'ccbot',
+    'google-extended',
+    'perplexitybot',
+    'amazonbot',
+    'facebookexternalhit',
+    'bingpreview',
+    'slurp',
+    'duckduckbot',
+    'ia_archiver',
+    'semrushbot',
+    'ahrefsbot',
+    'dotbot',
+    'mj12bot',
+    'rogerbot',
+    'screaming frog',
+    'petalbot',
+    'dataforseo',
+    'brightbot',
+    'omgili',
+    'cohere-ai',
+];
+/** Headless browser indicators */
+exports.HEADLESS_INDICATORS = {
+    missingPlugins: true,
+    zeroLanguages: true,
+    webdriverProperty: true,
+    chromeRuntimeMissing: true,
+    permissionsInconsistency: true,
+};
+//# sourceMappingURL=signatures.js.map

package/dist/utils/signatures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signatures.js","sourceRoot":"","sources":["../../src/utils/signatures.ts"],"names":[],"mappings":";;;AAAA,uEAAuE;AAC1D,QAAA,qBAAqB,GAAG;IACnC,WAAW;IACX,sBAAsB;IACtB,qBAAqB;IACrB,6BAA6B;IAC7B,yBAAyB;IACzB,uBAAuB;IACvB,qBAAqB;IACrB,oBAAoB;IACpB,uBAAuB;IACvB,mBAAmB;IACnB,sBAAsB;IACtB,sBAAsB;IACtB,wBAAwB;IACxB,WAAW;IACX,gBAAgB;IAChB,8BAA8B;IAC9B,yBAAyB;IACzB,2BAA2B;IAC3B,kBAAkB;IAClB,oBAAoB;IACpB,mBAAmB;IACnB,uBAAuB;IACvB,eAAe;IACf,eAAe;IACf,yBAAyB;CACjB,CAAC;AAEX,8DAA8D;AACjD,QAAA,eAAe,GAAG;IAC7B,KAAK;IACL,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,iBAAiB;IACjB,eAAe;IACf,OAAO;IACP,gBAAgB;IAChB,OAAO;IACP,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,WAAW;IACX,gBAAgB;IAChB,WAAW;IACX,YAAY;IACZ,UAAU;IACV,QAAQ;IACR,SAAS;IACT,WAAW;IACX,WAAW;IACX,YAAY;IACZ,OAAO;IACP,iBAAiB;IACjB,eAAe;IACf,WAAW;IACX,qBAAqB;IACrB,aAAa;IACb,OAAO;IACP,aAAa;IACb,aAAa;IACb,YAAY;IACZ,WAAW;IACX,QAAQ;IACR,SAAS;IACT,UAAU;IACV,gBAAgB;IAChB,UAAU;IACV,YAAY;IACZ,WAAW;IACX,QAAQ;IACR,WAAW;CACH,CAAC;AAEX,kCAAkC;AACrB,QAAA,mBAAmB,GAAG;IACjC,cAAc,EAAE,IAAI;IACpB,aAAa,EAAE,IAAI;IACnB,iBAAiB,EAAE,IAAI;IACvB,oBAAoB,EAAE,IAAI;IAC1B,wBAAwB,EAAE,IAAI;CACtB,CAAC"}

package/package.json

@@ -0,0 +1,73 @@
+{
+  "name": "ai-appshield",
+  "version": "1.0.0",
+  "description": "NPM wrapper to protect applications from AI scrapers, bots, and reverse-engineering attempts",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "ai-appshield": "dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.js"
+    },
+    "./browser": {
+      "types": "./dist/browser/index.d.ts",
+      "import": "./dist/browser/index.js",
+      "require": "./dist/browser/index.js"
+    },
+    "./server": {
+      "types": "./dist/server/index.d.ts",
+      "import": "./dist/server/index.js",
+      "require": "./dist/server/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "browser",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc && node scripts/build-browser.js",
+    "prepublishOnly": "npm run build && node scripts/clean-test-artifacts.js",
+    "pretest": "npm run build && tsc -p tsconfig.test.json",
+    "dev": "tsc --watch",
+    "test": "node scripts/run-tests.js"
+  },
+  "keywords": [
+    "anti-bot",
+    "anti-scrape",
+    "bot-detection",
+    "content-protection",
+    "devtools",
+    "fingerprint",
+    "honeypot",
+    "obfuscation",
+    "rate-limit",
+    "security"
+  ],
+  "author": "",
+  "license": "MIT",
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {
+    "commander": "^12.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "esbuild": "^0.24.0",
+    "typescript": "^5.7.2"
+  },
+  "peerDependencies": {
+    "express": ">=4.0.0"
+  },
+  "peerDependenciesMeta": {
+    "express": {
+      "optional": true
+    }
+  }
+}