js-confuser-vm 0.0.2 → 0.0.3

package/CHANGELOG.md

@@ -0,0 +1,28 @@
+## `1.0.3` First update
+
+- Created [Website Playground](https://development--confuser.netlify.app/vm)
+
+- Added partial support for `try..catch` - The `finally` operator is not supported yet
+- More ES5 coverage: getter/setters, debugger statement
+- Improved compilation process:
+  - Parsing: 
+      JS -> AST
+      Done by [@babel/parser](https://www.npmjs.com/package/@babel/parser)
+  - Compilation: 
+      AST -> IR bytecode. 
+      This bytecode contains pseudo instructions and symbolic values for things like jump labels and constants
+  - Transform passes (Assembler):
+      Transform passes obfuscate and finally prepare the pseudo bytecode to be runnable. Here, all jump labels get converted into absolute PCs
+  - Serializer:
+      The bytecode is printed into the array form or encoded string if you have `encodeBytecode` enabled
+  - Generating:
+      This includes two sub-stages:
+        - 1) Creating (another parsing->transforming->generating) the VM Runtime with the given options (randomized op codes, shuffled handlers)
+        - 2) Placing the final bytecode into this VM Runtime
+
+- Typescript is now transpiled for NPM
+
+
+
+## `1.0.2` First release
+

package/README.MD

@@ -1,11 +1,12 @@
 # JS Confuser VM
 
-  [![NPM](https://img.shields.io/badge/NPM-%23000000.svg?style=for-the-badge&logo=npm&logoColor=white)](https://npmjs.com/package/js-confuser-vm) [![GitHub](https://img.shields.io/badge/github-%23121011.svg?style=for-the-badge&logo=github&logoColor=white)](https://github.com/MichaelXF/js-confuser-vm)
+  [![NPM](https://img.shields.io/badge/NPM-%23000000.svg?style=for-the-badge&logo=npm&logoColor=white)](https://npmjs.com/package/js-confuser-vm) [![GitHub](https://img.shields.io/badge/github-%23121011.svg?style=for-the-badge&logo=github&logoColor=white)](https://github.com/MichaelXF/js-confuser-vm) [![Netlify](https://img.shields.io/badge/netlify-%23000000.svg?style=for-the-badge&logo=netlify&logoColor=#00C7B7)](https://development--confuser.netlify.app/vm)
 
 
 - **Requires Node v24.13.1 or higher**
-- ES5 support only. No complex features: async, generator, and even try..catch are beyond scope.
+- ES5 support only. No complex features: async, generator, and even try..finally are beyond scope.
 - Experimental. Expect issues.
+- [Try the web version.](https://development--confuser.netlify.app/vm)
 
 ### Installation
 
@@ -39,6 +40,7 @@ JsConfuserVM.obfuscate(`
   encodeBytecode: true, // encode bytecode? when off, comments for instructions are added
   selfModifying: true, // do self-modifying bytecode for function bodies?
   timingChecks: true, // add timing checks to detect debuggers?
+  minify: true // pass final output through Google Closure Compiler? (Renames VM class properties)
 }).then(result => {
   console.log(result.code)
 })
@@ -88,13 +90,15 @@ G(new x(d("4AMAANUEAAAjAQAA1QUAAKEFAAAjBgAAGQAAAK0YAAChBwAAIwgAAEsAAAChBQAAoQQAA
 - [x] labeled statements
 - [x] for..in loop
 - [x] RegExp literals
+- [x] try..catch
+- [x] getter/setters
+- [x] debugger;
 
 ### Missing
 
-- [ ] try..catch
+- [ ] try..finally
 - [ ] with statement
 - [ ] arguments.callee, argument parameter syncing   
-- [ ] getter/setters
 
 ### Hardening
 
@@ -116,16 +120,18 @@ G(new x(d("4AMAANUEAAAjAQAA1QUAAKEFAAAjBgAAGQAAAK0YAAChBwAAIwgAAEsAAAChBQAAoQQAA
 
 The `minify` option uses Google Closure Compiler to minify the JS VM and renames (most) VM property names. This approach helps keep the VM Compiler simple and lets Google do the heavy lifting.
 
-### No Try Catch
+### No Try Finally
 
-Try..Catch is complex operator that may not get added. You can use Try..Catch by defining an outside helper function:
+While Try Catch is supported, Try..Finally is not. You can use Try..Finally by defining an outside helper function:
 
 ```js
-function TryCatch(cb) {
+function TryFinally(cb, _finally) {
   try {
-    return { value: cb() };
+    return { value: cb() }
   } catch (error) {
     return { error };
+  } finally {
+    _finally()
   }
 }
 ```
@@ -179,8 +185,8 @@ main().catch(console.error);
 
 ### WIP
 
-- 146 tests, 91.18% coverage
-- [Test262 (es5-tests)](https://github.com/tc39/test262/tree/es5-tests) percentage: 52.39%
+- 178 tests, 91.18% coverage
+- [Test262 (es5-tests)](https://github.com/tc39/test262/tree/es5-tests) percentage: 66.67%
 
 ### Made with AI
 

package/babel-plugin-inline-runtime.cjs

@@ -0,0 +1,34 @@
+const { readFileSync } = require("fs");
+const { join } = require("path");
+const babel = require("@babel/core");
+const { stripTypeScriptTypes } = require("node:module");
+
+module.exports = function inlineRuntimePlugin({ types: t }) {
+  const rawContent = readFileSync(join(__dirname, "./src/runtime.ts"), "utf-8");
+
+  const runtimeContent = stripTypeScriptTypes(rawContent);
+
+  return {
+    name: "inline-runtime",
+    visitor: {
+      VariableDeclarator(path) {
+        if (
+          path.node.id?.name === "readVMRuntimeFile" &&
+          (path.node.init?.type === "ArrowFunctionExpression" ||
+            path.node.init?.type === "FunctionExpression")
+        ) {
+          path.node.init = t.arrowFunctionExpression(
+            [],
+            t.stringLiteral(runtimeContent),
+          );
+        }
+      },
+      ImportDeclaration(path) {
+        const src = path.node.source.value;
+        if (src === "fs" || src === "path") {
+          path.remove();
+        }
+      },
+    },
+  };
+};

package/babel.config.json

@@ -9,11 +9,10 @@
         "modules": false
       }
     ],
-    [
-      "@babel/preset-typescript"
-    ]
+    ["@babel/preset-typescript"]
   ],
   "plugins": [
+    "./babel-plugin-inline-runtime.cjs",
     [
       "replace-import-extension",
       {