js-confuser 1.7.2 → 2.0.0-alpha.0

package/src/templates/getGlobalTemplate.ts

@@ -0,0 +1,72 @@
+import { NodePath } from "@babel/traverse";
+import { PluginInstance } from "../transforms/plugin";
+import Template from "./template";
+import { UNSAFE } from "../constants";
+
+export const createGetGlobalTemplate = (
+  pluginInstance: PluginInstance,
+  path: NodePath
+) => {
+  if (pluginInstance.options.lock?.tamperProtection) {
+    return new Template(`
+      function {getGlobalFnName}(){
+        var localVar = false;
+        eval(__JS_CONFUSER_VAR__(localVar) + " = true")
+        if (!localVar) {
+          {countermeasures}
+
+          return {};
+        }
+
+        const root = eval("this");
+        return root;
+      }
+    `)
+      .addSymbols(UNSAFE)
+      .setDefaultVariables({
+        countermeasures:
+          pluginInstance.globalState.lock.createCountermeasuresCode(),
+      });
+  }
+
+  return GetGlobalTemplate;
+};
+
+const GetGlobalTemplate = new Template(`
+  function {getGlobalFnName}(){
+    var array = [
+      function (){
+        return globalThis
+      },
+      function (){
+        return global
+      },
+      function (){
+        return window
+      },
+      function (){
+        return new Function("return this")()
+      }
+    ];
+
+    var bestMatch
+    var itemsToSearch = []
+    try {
+      bestMatch = Object
+      itemsToSearch["push"](("")["__proto__"]["constructor"]["name"])
+    } catch(e) {
+
+    }
+    A: for(var i = 0; i < array["length"]; i++) {
+      try {
+        bestMatch = array[i]()
+        for(var j = 0; j < itemsToSearch["length"]; j++) {
+          if(typeof bestMatch[itemsToSearch[j]] === "undefined") continue A;
+        }
+        return bestMatch
+      } catch(e) {}
+    }
+
+		return bestMatch || this;
+  }
+`);

package/src/templates/integrityTemplate.ts

@@ -0,0 +1,69 @@
+import { MULTI_TRANSFORM, SKIP, UNSAFE } from "../constants";
+import Template from "./template";
+
+/**
+ * Hashing Algorithm for Integrity: `cyrb53`
+ * @param str
+ * @param seed
+ */
+export function HashFunction(str: string, seed: number) {
+  let h1 = 0xdeadbeef ^ seed,
+    h2 = 0x41c6ce57 ^ seed;
+  for (let i = 0, ch; i < str.length; i++) {
+    ch = str.charCodeAt(i);
+    h1 = Math.imul(h1 ^ ch, 2654435761);
+    h2 = Math.imul(h2 ^ ch, 1597334677);
+  }
+  h1 =
+    Math.imul(h1 ^ (h1 >>> 16), 2246822507) ^
+    Math.imul(h2 ^ (h2 >>> 13), 3266489909);
+  h2 =
+    Math.imul(h2 ^ (h2 >>> 16), 2246822507) ^
+    Math.imul(h1 ^ (h1 >>> 13), 3266489909);
+  return 4294967296 * (2097151 & h2) + (h1 >>> 0);
+}
+
+// In template form to be inserted into code
+export const HashTemplate = new Template(`
+// Must be Function Declaration for hoisting
+// Math.imul polyfill for ES5
+function {imul}(opA, opB) {
+  var MathImul = Math["imul"] || function(opA, opB){
+    opB |= 0; // ensure that opB is an integer. opA will automatically be coerced.
+    // floating points give us 53 bits of precision to work with plus 1 sign bit
+    // automatically handled for our convienence:
+    // 1. 0x003fffff /*opA & 0x000fffff*/ * 0x7fffffff /*opB*/ = 0x1fffff7fc00001
+    //    0x1fffff7fc00001 < Number.MAX_SAFE_INTEGER /*0x1fffffffffffff*/
+    var result = (opA & 0x003fffff) * opB;
+    // 2. We can remove an integer coersion from the statement above because:
+    //    0x1fffff7fc00001 + 0xffc00000 = 0x1fffffff800001
+    //    0x1fffffff800001 < Number.MAX_SAFE_INTEGER /*0x1fffffffffffff*/
+    if (opA & 0xffc00000 /*!== 0*/) result += (opA & 0xffc00000) * opB |0;
+    return result |0;
+  };
+
+  var result = MathImul(opA, opB);
+
+  return result;
+}
+
+
+function {hashingUtilFnName}(str, seed) {
+  var h1 = 0xdeadbeef ^ seed;
+  var h2 = 0x41c6ce57 ^ seed;
+  for (var i = 0, ch; i < str.length; i++) {
+      ch = str.charCodeAt(i);
+      h1 = {imul}(h1 ^ ch, 2654435761);
+      h2 = {imul}(h2 ^ ch, 1597334677);
+  }
+  h1 = {imul}(h1 ^ (h1>>>16), 2246822507) ^ {imul}(h2 ^ (h2>>>13), 3266489909);
+  h2 = {imul}(h2 ^ (h2>>>16), 2246822507) ^ {imul}(h1 ^ (h1>>>13), 3266489909);
+  return 4294967296 * (2097151 & h2) + (h1>>>0);
+};
+
+// Simple function that returns .toString() value with spaces replaced out
+function {name}(fnObject, seed, regex={sensitivityRegex}){
+  var fnStringed = fnObject["toString"]()["replace"](regex, "");
+  return {hashingUtilFnName}(fnStringed, seed);
+}
+`).addSymbols(SKIP, MULTI_TRANSFORM);

package/src/templates/setFunctionLengthTemplate.ts

@@ -0,0 +1,11 @@
+import Template from "./template";
+
+export const SetFunctionLengthTemplate = new Template(`
+  function {fnName}(fn, length = 1){
+    Object["defineProperty"](fn, "length", {
+      "value": length,
+      "configurable": false
+    });
+    return fn;
+  }
+`);

package/src/templates/stringCompressionTemplate.ts

@@ -0,0 +1,42 @@
+import Template from "./template";
+
+export const StringCompressionTemplate = new Template(
+  `
+var {stringFn};
+
+(function (){
+  {GetGlobalTemplate}
+
+  var __globalObject = {getGlobalFnName}() || {};
+  var _atob = __globalObject["atob"];
+  var _Uint8Array = __globalObject["Uint8Array"];
+
+  function convertBase64ToArrayBuffer(base64) {
+    var binaryString = _atob(base64); // Decode Base64
+    var len = binaryString.length;
+    var uint8Array = new _Uint8Array(len);
+
+    // Convert binary string back into Uint8Array
+    for (var i = 0; i < len; i++) {
+      uint8Array[i] = binaryString["charCodeAt"](i);
+    }
+    return uint8Array;
+  }
+
+  var compressedBuffer = convertBase64ToArrayBuffer({stringValue});
+  var utf8String = {pakoName}["inflate"](compressedBuffer, { to: 'string' });
+  var stringArray = utf8String["split"]({stringDelimiter});
+
+  {stringFn} = function(index){
+    return stringArray[index];
+  }
+})();
+`
+);
+
+export const PakoInflateMin = ` 
+var {pako} = {};
+
+/*! pako 2.1.0 https://github.com/nodeca/pako @license (MIT AND Zlib) */
+!function(e,t){ t({pako}) }(this,(function(e){"use strict";var t=function(e,t,i,n){for(var a=65535&e|0,r=e>>>16&65535|0,o=0;0!==i;){i-=o=i>2e3?2e3:i;do{r=r+(a=a+t[n++]|0)|0}while(--o);a%=65521,r%=65521}return a|r<<16|0},i=new Uint32Array(function(){for(var e,t=[],i=0;i<256;i++){e=i;for(var n=0;n<8;n++)e=1&e?3988292384^e>>>1:e>>>1;t[i]=e}return t}()),n=function(e,t,n,a){var r=i,o=a+n;e^=-1;for(var s=a;s<o;s++)e=e>>>8^r[255&(e^t[s])];return-1^e},a=16209,r=function(e,t){var i,n,r,o,s,l,f,d,h,c,u,w,b,m,k,_,v,g,p,y,x,E,R,A,Z=e.state;i=e.next_in,R=e.input,n=i+(e.avail_in-5),r=e.next_out,A=e.output,o=r-(t-e.avail_out),s=r+(e.avail_out-257),l=Z.dmax,f=Z.wsize,d=Z.whave,h=Z.wnext,c=Z.window,u=Z.hold,w=Z.bits,b=Z.lencode,m=Z.distcode,k=(1<<Z.lenbits)-1,_=(1<<Z.distbits)-1;e:do{w<15&&(u+=R[i++]<<w,w+=8,u+=R[i++]<<w,w+=8),v=b[u&k];t:for(;;){if(u>>>=g=v>>>24,w-=g,0===(g=v>>>16&255))A[r++]=65535&v;else{if(!(16&g)){if(0==(64&g)){v=b[(65535&v)+(u&(1<<g)-1)];continue t}if(32&g){Z.mode=16191;break e}e.msg="invalid literal/length code",Z.mode=a;break e}p=65535&v,(g&=15)&&(w<g&&(u+=R[i++]<<w,w+=8),p+=u&(1<<g)-1,u>>>=g,w-=g),w<15&&(u+=R[i++]<<w,w+=8,u+=R[i++]<<w,w+=8),v=m[u&_];i:for(;;){if(u>>>=g=v>>>24,w-=g,!(16&(g=v>>>16&255))){if(0==(64&g)){v=m[(65535&v)+(u&(1<<g)-1)];continue i}e.msg="invalid distance code",Z.mode=a;break e}if(y=65535&v,w<(g&=15)&&(u+=R[i++]<<w,(w+=8)<g&&(u+=R[i++]<<w,w+=8)),(y+=u&(1<<g)-1)>l){e.msg="invalid distance too far back",Z.mode=a;break e}if(u>>>=g,w-=g,y>(g=r-o)){if((g=y-g)>d&&Z.sane){e.msg="invalid distance too far back",Z.mode=a;break e}if(x=0,E=c,0===h){if(x+=f-g,g<p){p-=g;do{A[r++]=c[x++]}while(--g);x=r-y,E=A}}else if(h<g){if(x+=f+h-g,(g-=h)<p){p-=g;do{A[r++]=c[x++]}while(--g);if(x=0,h<p){p-=g=h;do{A[r++]=c[x++]}while(--g);x=r-y,E=A}}}else if(x+=h-g,g<p){p-=g;do{A[r++]=c[x++]}while(--g);x=r-y,E=A}for(;p>2;)A[r++]=E[x++],A[r++]=E[x++],A[r++]=E[x++],p-=3;p&&(A[r++]=E[x++],p>1&&(A[r++]=E[x++]))}else{x=r-y;do{A[r++]=A[x++],A[r++]=A[x++],A[r++]=A[x++],p-=3}while(p>2);p&&(A[r++]=A[x++],p>1&&(A[r++]=A[x++]))}break}}break}}while(i<n&&r<s);i-=p=w>>3,u&=(1<<(w-=p<<3))-1,e.next_in=i,e.next_out=r,e.avail_in=i<n?n-i+5:5-(i-n),e.avail_out=r<s?s-r+257:257-(r-s),Z.hold=u,Z.bits=w},o=15,s=new Uint16Array([3,4,5,6,7,8,9,10,11,13,15,17,19,23,27,31,35,43,51,59,67,83,99,115,131,163,195,227,258,0,0]),l=new Uint8Array([16,16,16,16,16,16,16,16,17,17,17,17,18,18,18,18,19,19,19,19,20,20,20,20,21,21,21,21,16,72,78]),f=new Uint16Array([1,2,3,4,5,7,9,13,17,25,33,49,65,97,129,193,257,385,513,769,1025,1537,2049,3073,4097,6145,8193,12289,16385,24577,0,0]),d=new Uint8Array([16,16,16,16,17,17,18,18,19,19,20,20,21,21,22,22,23,23,24,24,25,25,26,26,27,27,28,28,29,29,64,64]),h=function(e,t,i,n,a,r,h,c){var u,w,b,m,k,_,v,g,p,y=c.bits,x=0,E=0,R=0,A=0,Z=0,S=0,T=0,O=0,U=0,D=0,I=null,B=new Uint16Array(16),N=new Uint16Array(16),C=null;for(x=0;x<=o;x++)B[x]=0;for(E=0;E<n;E++)B[t[i+E]]++;for(Z=y,A=o;A>=1&&0===B[A];A--);if(Z>A&&(Z=A),0===A)return a[r++]=20971520,a[r++]=20971520,c.bits=1,0;for(R=1;R<A&&0===B[R];R++);for(Z<R&&(Z=R),O=1,x=1;x<=o;x++)if(O<<=1,(O-=B[x])<0)return-1;if(O>0&&(0===e||1!==A))return-1;for(N[1]=0,x=1;x<o;x++)N[x+1]=N[x]+B[x];for(E=0;E<n;E++)0!==t[i+E]&&(h[N[t[i+E]]++]=E);if(0===e?(I=C=h,_=20):1===e?(I=s,C=l,_=257):(I=f,C=d,_=0),D=0,E=0,x=R,k=r,S=Z,T=0,b=-1,m=(U=1<<Z)-1,1===e&&U>852||2===e&&U>592)return 1;for(;;){v=x-T,h[E]+1<_?(g=0,p=h[E]):h[E]>=_?(g=C[h[E]-_],p=I[h[E]-_]):(g=96,p=0),u=1<<x-T,R=w=1<<S;do{a[k+(D>>T)+(w-=u)]=v<<24|g<<16|p|0}while(0!==w);for(u=1<<x-1;D&u;)u>>=1;if(0!==u?(D&=u-1,D+=u):D=0,E++,0==--B[x]){if(x===A)break;x=t[i+h[E]]}if(x>Z&&(D&m)!==b){for(0===T&&(T=Z),k+=R,O=1<<(S=x-T);S+T<A&&!((O-=B[S+T])<=0);)S++,O<<=1;if(U+=1<<S,1===e&&U>852||2===e&&U>592)return 1;a[b=D&m]=Z<<24|S<<16|k-r|0}}return 0!==D&&(a[k+D]=x-T<<24|64<<16|0),c.bits=Z,0},c={Z_NO_FLUSH:0,Z_PARTIAL_FLUSH:1,Z_SYNC_FLUSH:2,Z_FULL_FLUSH:3,Z_FINISH:4,Z_BLOCK:5,Z_TREES:6,Z_OK:0,Z_STREAM_END:1,Z_NEED_DICT:2,Z_ERRNO:-1,Z_STREAM_ERROR:-2,Z_DATA_ERROR:-3,Z_MEM_ERROR:-4,Z_BUF_ERROR:-5,Z_NO_COMPRESSION:0,Z_BEST_SPEED:1,Z_BEST_COMPRESSION:9,Z_DEFAULT_COMPRESSION:-1,Z_FILTERED:1,Z_HUFFMAN_ONLY:2,Z_RLE:3,Z_FIXED:4,Z_DEFAULT_STRATEGY:0,Z_BINARY:0,Z_TEXT:1,Z_UNKNOWN:2,Z_DEFLATED:8},u=c.Z_FINISH,w=c.Z_BLOCK,b=c.Z_TREES,m=c.Z_OK,k=c.Z_STREAM_END,_=c.Z_NEED_DICT,v=c.Z_STREAM_ERROR,g=c.Z_DATA_ERROR,p=c.Z_MEM_ERROR,y=c.Z_BUF_ERROR,x=c.Z_DEFLATED,E=16180,R=16190,A=16191,Z=16192,S=16194,T=16199,O=16200,U=16206,D=16209,I=function(e){return(e>>>24&255)+(e>>>8&65280)+((65280&e)<<8)+((255&e)<<24)};function B(){this.strm=null,this.mode=0,this.last=!1,this.wrap=0,this.havedict=!1,this.flags=0,this.dmax=0,this.check=0,this.total=0,this.head=null,this.wbits=0,this.wsize=0,this.whave=0,this.wnext=0,this.window=null,this.hold=0,this.bits=0,this.length=0,this.offset=0,this.extra=0,this.lencode=null,this.distcode=null,this.lenbits=0,this.distbits=0,this.ncode=0,this.nlen=0,this.ndist=0,this.have=0,this.next=null,this.lens=new Uint16Array(320),this.work=new Uint16Array(288),this.lendyn=null,this.distdyn=null,this.sane=0,this.back=0,this.was=0}var N,C,z=function(e){if(!e)return 1;var t=e.state;return!t||t.strm!==e||t.mode<E||t.mode>16211?1:0},F=function(e){if(z(e))return v;var t=e.state;return e.total_in=e.total_out=t.total=0,e.msg="",t.wrap&&(e.adler=1&t.wrap),t.mode=E,t.last=0,t.havedict=0,t.flags=-1,t.dmax=32768,t.head=null,t.hold=0,t.bits=0,t.lencode=t.lendyn=new Int32Array(852),t.distcode=t.distdyn=new Int32Array(592),t.sane=1,t.back=-1,m},L=function(e){if(z(e))return v;var t=e.state;return t.wsize=0,t.whave=0,t.wnext=0,F(e)},M=function(e,t){var i;if(z(e))return v;var n=e.state;return t<0?(i=0,t=-t):(i=5+(t>>4),t<48&&(t&=15)),t&&(t<8||t>15)?v:(null!==n.window&&n.wbits!==t&&(n.window=null),n.wrap=i,n.wbits=t,L(e))},H=function(e,t){if(!e)return v;var i=new B;e.state=i,i.strm=e,i.window=null,i.mode=E;var n=M(e,t);return n!==m&&(e.state=null),n},j=!0,K=function(e){if(j){N=new Int32Array(512),C=new Int32Array(32);for(var t=0;t<144;)e.lens[t++]=8;for(;t<256;)e.lens[t++]=9;for(;t<280;)e.lens[t++]=7;for(;t<288;)e.lens[t++]=8;for(h(1,e.lens,0,288,N,0,e.work,{bits:9}),t=0;t<32;)e.lens[t++]=5;h(2,e.lens,0,32,C,0,e.work,{bits:5}),j=!1}e.lencode=N,e.lenbits=9,e.distcode=C,e.distbits=5},P=function(e,t,i,n){var a,r=e.state;return null===r.window&&(r.wsize=1<<r.wbits,r.wnext=0,r.whave=0,r.window=new Uint8Array(r.wsize)),n>=r.wsize?(r.window.set(t.subarray(i-r.wsize,i),0),r.wnext=0,r.whave=r.wsize):((a=r.wsize-r.wnext)>n&&(a=n),r.window.set(t.subarray(i-n,i-n+a),r.wnext),(n-=a)?(r.window.set(t.subarray(i-n,i),0),r.wnext=n,r.whave=r.wsize):(r.wnext+=a,r.wnext===r.wsize&&(r.wnext=0),r.whave<r.wsize&&(r.whave+=a))),0},Y={inflateReset:L,inflateReset2:M,inflateResetKeep:F,inflateInit:function(e){return H(e,15)},inflateInit2:H,inflate:function(e,i){var a,o,s,l,f,d,c,B,N,C,F,L,M,H,j,Y,G,X,W,q,J,Q,V,$,ee=0,te=new Uint8Array(4),ie=new Uint8Array([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]);if(z(e)||!e.output||!e.input&&0!==e.avail_in)return v;(a=e.state).mode===A&&(a.mode=Z),f=e.next_out,s=e.output,c=e.avail_out,l=e.next_in,o=e.input,d=e.avail_in,B=a.hold,N=a.bits,C=d,F=c,Q=m;e:for(;;)switch(a.mode){case E:if(0===a.wrap){a.mode=Z;break}for(;N<16;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}if(2&a.wrap&&35615===B){0===a.wbits&&(a.wbits=15),a.check=0,te[0]=255&B,te[1]=B>>>8&255,a.check=n(a.check,te,2,0),B=0,N=0,a.mode=16181;break}if(a.head&&(a.head.done=!1),!(1&a.wrap)||(((255&B)<<8)+(B>>8))%31){e.msg="incorrect header check",a.mode=D;break}if((15&B)!==x){e.msg="unknown compression method",a.mode=D;break}if(N-=4,J=8+(15&(B>>>=4)),0===a.wbits&&(a.wbits=J),J>15||J>a.wbits){e.msg="invalid window size",a.mode=D;break}a.dmax=1<<a.wbits,a.flags=0,e.adler=a.check=1,a.mode=512&B?16189:A,B=0,N=0;break;case 16181:for(;N<16;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}if(a.flags=B,(255&a.flags)!==x){e.msg="unknown compression method",a.mode=D;break}if(57344&a.flags){e.msg="unknown header flags set",a.mode=D;break}a.head&&(a.head.text=B>>8&1),512&a.flags&&4&a.wrap&&(te[0]=255&B,te[1]=B>>>8&255,a.check=n(a.check,te,2,0)),B=0,N=0,a.mode=16182;case 16182:for(;N<32;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}a.head&&(a.head.time=B),512&a.flags&&4&a.wrap&&(te[0]=255&B,te[1]=B>>>8&255,te[2]=B>>>16&255,te[3]=B>>>24&255,a.check=n(a.check,te,4,0)),B=0,N=0,a.mode=16183;case 16183:for(;N<16;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}a.head&&(a.head.xflags=255&B,a.head.os=B>>8),512&a.flags&&4&a.wrap&&(te[0]=255&B,te[1]=B>>>8&255,a.check=n(a.check,te,2,0)),B=0,N=0,a.mode=16184;case 16184:if(1024&a.flags){for(;N<16;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}a.length=B,a.head&&(a.head.extra_len=B),512&a.flags&&4&a.wrap&&(te[0]=255&B,te[1]=B>>>8&255,a.check=n(a.check,te,2,0)),B=0,N=0}else a.head&&(a.head.extra=null);a.mode=16185;case 16185:if(1024&a.flags&&((L=a.length)>d&&(L=d),L&&(a.head&&(J=a.head.extra_len-a.length,a.head.extra||(a.head.extra=new Uint8Array(a.head.extra_len)),a.head.extra.set(o.subarray(l,l+L),J)),512&a.flags&&4&a.wrap&&(a.check=n(a.check,o,L,l)),d-=L,l+=L,a.length-=L),a.length))break e;a.length=0,a.mode=16186;case 16186:if(2048&a.flags){if(0===d)break e;L=0;do{J=o[l+L++],a.head&&J&&a.length<65536&&(a.head.name+=String.fromCharCode(J))}while(J&&L<d);if(512&a.flags&&4&a.wrap&&(a.check=n(a.check,o,L,l)),d-=L,l+=L,J)break e}else a.head&&(a.head.name=null);a.length=0,a.mode=16187;case 16187:if(4096&a.flags){if(0===d)break e;L=0;do{J=o[l+L++],a.head&&J&&a.length<65536&&(a.head.comment+=String.fromCharCode(J))}while(J&&L<d);if(512&a.flags&&4&a.wrap&&(a.check=n(a.check,o,L,l)),d-=L,l+=L,J)break e}else a.head&&(a.head.comment=null);a.mode=16188;case 16188:if(512&a.flags){for(;N<16;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}if(4&a.wrap&&B!==(65535&a.check)){e.msg="header crc mismatch",a.mode=D;break}B=0,N=0}a.head&&(a.head.hcrc=a.flags>>9&1,a.head.done=!0),e.adler=a.check=0,a.mode=A;break;case 16189:for(;N<32;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}e.adler=a.check=I(B),B=0,N=0,a.mode=R;case R:if(0===a.havedict)return e.next_out=f,e.avail_out=c,e.next_in=l,e.avail_in=d,a.hold=B,a.bits=N,_;e.adler=a.check=1,a.mode=A;case A:if(i===w||i===b)break e;case Z:if(a.last){B>>>=7&N,N-=7&N,a.mode=U;break}for(;N<3;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}switch(a.last=1&B,N-=1,3&(B>>>=1)){case 0:a.mode=16193;break;case 1:if(K(a),a.mode=T,i===b){B>>>=2,N-=2;break e}break;case 2:a.mode=16196;break;case 3:e.msg="invalid block type",a.mode=D}B>>>=2,N-=2;break;case 16193:for(B>>>=7&N,N-=7&N;N<32;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}if((65535&B)!=(B>>>16^65535)){e.msg="invalid stored block lengths",a.mode=D;break}if(a.length=65535&B,B=0,N=0,a.mode=S,i===b)break e;case S:a.mode=16195;case 16195:if(L=a.length){if(L>d&&(L=d),L>c&&(L=c),0===L)break e;s.set(o.subarray(l,l+L),f),d-=L,l+=L,c-=L,f+=L,a.length-=L;break}a.mode=A;break;case 16196:for(;N<14;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}if(a.nlen=257+(31&B),B>>>=5,N-=5,a.ndist=1+(31&B),B>>>=5,N-=5,a.ncode=4+(15&B),B>>>=4,N-=4,a.nlen>286||a.ndist>30){e.msg="too many length or distance symbols",a.mode=D;break}a.have=0,a.mode=16197;case 16197:for(;a.have<a.ncode;){for(;N<3;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}a.lens[ie[a.have++]]=7&B,B>>>=3,N-=3}for(;a.have<19;)a.lens[ie[a.have++]]=0;if(a.lencode=a.lendyn,a.lenbits=7,V={bits:a.lenbits},Q=h(0,a.lens,0,19,a.lencode,0,a.work,V),a.lenbits=V.bits,Q){e.msg="invalid code lengths set",a.mode=D;break}a.have=0,a.mode=16198;case 16198:for(;a.have<a.nlen+a.ndist;){for(;Y=(ee=a.lencode[B&(1<<a.lenbits)-1])>>>16&255,G=65535&ee,!((j=ee>>>24)<=N);){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}if(G<16)B>>>=j,N-=j,a.lens[a.have++]=G;else{if(16===G){for($=j+2;N<$;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}if(B>>>=j,N-=j,0===a.have){e.msg="invalid bit length repeat",a.mode=D;break}J=a.lens[a.have-1],L=3+(3&B),B>>>=2,N-=2}else if(17===G){for($=j+3;N<$;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}N-=j,J=0,L=3+(7&(B>>>=j)),B>>>=3,N-=3}else{for($=j+7;N<$;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}N-=j,J=0,L=11+(127&(B>>>=j)),B>>>=7,N-=7}if(a.have+L>a.nlen+a.ndist){e.msg="invalid bit length repeat",a.mode=D;break}for(;L--;)a.lens[a.have++]=J}}if(a.mode===D)break;if(0===a.lens[256]){e.msg="invalid code -- missing end-of-block",a.mode=D;break}if(a.lenbits=9,V={bits:a.lenbits},Q=h(1,a.lens,0,a.nlen,a.lencode,0,a.work,V),a.lenbits=V.bits,Q){e.msg="invalid literal/lengths set",a.mode=D;break}if(a.distbits=6,a.distcode=a.distdyn,V={bits:a.distbits},Q=h(2,a.lens,a.nlen,a.ndist,a.distcode,0,a.work,V),a.distbits=V.bits,Q){e.msg="invalid distances set",a.mode=D;break}if(a.mode=T,i===b)break e;case T:a.mode=O;case O:if(d>=6&&c>=258){e.next_out=f,e.avail_out=c,e.next_in=l,e.avail_in=d,a.hold=B,a.bits=N,r(e,F),f=e.next_out,s=e.output,c=e.avail_out,l=e.next_in,o=e.input,d=e.avail_in,B=a.hold,N=a.bits,a.mode===A&&(a.back=-1);break}for(a.back=0;Y=(ee=a.lencode[B&(1<<a.lenbits)-1])>>>16&255,G=65535&ee,!((j=ee>>>24)<=N);){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}if(Y&&0==(240&Y)){for(X=j,W=Y,q=G;Y=(ee=a.lencode[q+((B&(1<<X+W)-1)>>X)])>>>16&255,G=65535&ee,!(X+(j=ee>>>24)<=N);){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}B>>>=X,N-=X,a.back+=X}if(B>>>=j,N-=j,a.back+=j,a.length=G,0===Y){a.mode=16205;break}if(32&Y){a.back=-1,a.mode=A;break}if(64&Y){e.msg="invalid literal/length code",a.mode=D;break}a.extra=15&Y,a.mode=16201;case 16201:if(a.extra){for($=a.extra;N<$;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}a.length+=B&(1<<a.extra)-1,B>>>=a.extra,N-=a.extra,a.back+=a.extra}a.was=a.length,a.mode=16202;case 16202:for(;Y=(ee=a.distcode[B&(1<<a.distbits)-1])>>>16&255,G=65535&ee,!((j=ee>>>24)<=N);){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}if(0==(240&Y)){for(X=j,W=Y,q=G;Y=(ee=a.distcode[q+((B&(1<<X+W)-1)>>X)])>>>16&255,G=65535&ee,!(X+(j=ee>>>24)<=N);){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}B>>>=X,N-=X,a.back+=X}if(B>>>=j,N-=j,a.back+=j,64&Y){e.msg="invalid distance code",a.mode=D;break}a.offset=G,a.extra=15&Y,a.mode=16203;case 16203:if(a.extra){for($=a.extra;N<$;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}a.offset+=B&(1<<a.extra)-1,B>>>=a.extra,N-=a.extra,a.back+=a.extra}if(a.offset>a.dmax){e.msg="invalid distance too far back",a.mode=D;break}a.mode=16204;case 16204:if(0===c)break e;if(L=F-c,a.offset>L){if((L=a.offset-L)>a.whave&&a.sane){e.msg="invalid distance too far back",a.mode=D;break}L>a.wnext?(L-=a.wnext,M=a.wsize-L):M=a.wnext-L,L>a.length&&(L=a.length),H=a.window}else H=s,M=f-a.offset,L=a.length;L>c&&(L=c),c-=L,a.length-=L;do{s[f++]=H[M++]}while(--L);0===a.length&&(a.mode=O);break;case 16205:if(0===c)break e;s[f++]=a.length,c--,a.mode=O;break;case U:if(a.wrap){for(;N<32;){if(0===d)break e;d--,B|=o[l++]<<N,N+=8}if(F-=c,e.total_out+=F,a.total+=F,4&a.wrap&&F&&(e.adler=a.check=a.flags?n(a.check,s,F,f-F):t(a.check,s,F,f-F)),F=c,4&a.wrap&&(a.flags?B:I(B))!==a.check){e.msg="incorrect data check",a.mode=D;break}B=0,N=0}a.mode=16207;case 16207:if(a.wrap&&a.flags){for(;N<32;){if(0===d)break e;d--,B+=o[l++]<<N,N+=8}if(4&a.wrap&&B!==(4294967295&a.total)){e.msg="incorrect length check",a.mode=D;break}B=0,N=0}a.mode=16208;case 16208:Q=k;break e;case D:Q=g;break e;case 16210:return p;default:return v}return e.next_out=f,e.avail_out=c,e.next_in=l,e.avail_in=d,a.hold=B,a.bits=N,(a.wsize||F!==e.avail_out&&a.mode<D&&(a.mode<U||i!==u))&&P(e,e.output,e.next_out,F-e.avail_out),C-=e.avail_in,F-=e.avail_out,e.total_in+=C,e.total_out+=F,a.total+=F,4&a.wrap&&F&&(e.adler=a.check=a.flags?n(a.check,s,F,e.next_out-F):t(a.check,s,F,e.next_out-F)),e.data_type=a.bits+(a.last?64:0)+(a.mode===A?128:0)+(a.mode===T||a.mode===S?256:0),(0===C&&0===F||i===u)&&Q===m&&(Q=y),Q},inflateEnd:function(e){if(z(e))return v;var t=e.state;return t.window&&(t.window=null),e.state=null,m},inflateGetHeader:function(e,t){if(z(e))return v;var i=e.state;return 0==(2&i.wrap)?v:(i.head=t,t.done=!1,m)},inflateSetDictionary:function(e,i){var n,a=i.length;return z(e)||0!==(n=e.state).wrap&&n.mode!==R?v:n.mode===R&&t(1,i,a,0)!==n.check?g:P(e,i,a,a)?(n.mode=16210,p):(n.havedict=1,m)},inflateInfo:"pako inflate (from Nodeca project)"};function G(e){return G="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},G(e)}var X=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},W=function(e){for(var t=Array.prototype.slice.call(arguments,1);t.length;){var i=t.shift();if(i){if("object"!==G(i))throw new TypeError(i+"must be non-object");for(var n in i)X(i,n)&&(e[n]=i[n])}}return e},q=function(e){for(var t=0,i=0,n=e.length;i<n;i++)t+=e[i].length;for(var a=new Uint8Array(t),r=0,o=0,s=e.length;r<s;r++){var l=e[r];a.set(l,o),o+=l.length}return a},J=!0;try{String.fromCharCode.apply(null,new Uint8Array(1))}catch(e){J=!1}for(var Q=new Uint8Array(256),V=0;V<256;V++)Q[V]=V>=252?6:V>=248?5:V>=240?4:V>=224?3:V>=192?2:1;Q[254]=Q[254]=1;var $=function(e){if("function"==typeof TextEncoder&&TextEncoder.prototype.encode)return(new TextEncoder).encode(e);var t,i,n,a,r,o=e.length,s=0;for(a=0;a<o;a++)55296==(64512&(i=e.charCodeAt(a)))&&a+1<o&&56320==(64512&(n=e.charCodeAt(a+1)))&&(i=65536+(i-55296<<10)+(n-56320),a++),s+=i<128?1:i<2048?2:i<65536?3:4;for(t=new Uint8Array(s),r=0,a=0;r<s;a++)55296==(64512&(i=e.charCodeAt(a)))&&a+1<o&&56320==(64512&(n=e.charCodeAt(a+1)))&&(i=65536+(i-55296<<10)+(n-56320),a++),i<128?t[r++]=i:i<2048?(t[r++]=192|i>>>6,t[r++]=128|63&i):i<65536?(t[r++]=224|i>>>12,t[r++]=128|i>>>6&63,t[r++]=128|63&i):(t[r++]=240|i>>>18,t[r++]=128|i>>>12&63,t[r++]=128|i>>>6&63,t[r++]=128|63&i);return t},ee=function(e,t){var i,n,a=t||e.length;if("function"==typeof TextDecoder&&TextDecoder.prototype.decode)return(new TextDecoder).decode(e.subarray(0,t));var r=new Array(2*a);for(n=0,i=0;i<a;){var o=e[i++];if(o<128)r[n++]=o;else{var s=Q[o];if(s>4)r[n++]=65533,i+=s-1;else{for(o&=2===s?31:3===s?15:7;s>1&&i<a;)o=o<<6|63&e[i++],s--;s>1?r[n++]=65533:o<65536?r[n++]=o:(o-=65536,r[n++]=55296|o>>10&1023,r[n++]=56320|1023&o)}}}return function(e,t){if(t<65534&&e.subarray&&J)return String.fromCharCode.apply(null,e.length===t?e:e.subarray(0,t));for(var i="",n=0;n<t;n++)i+=String.fromCharCode(e[n]);return i}(r,n)},te=function(e,t){(t=t||e.length)>e.length&&(t=e.length);for(var i=t-1;i>=0&&128==(192&e[i]);)i--;return i<0||0===i?t:i+Q[e[i]]>t?i:t},ie={2:"need dictionary",1:"stream end",0:"","-1":"file error","-2":"stream error","-3":"data error","-4":"insufficient memory","-5":"buffer error","-6":"incompatible version"};var ne=function(){this.input=null,this.next_in=0,this.avail_in=0,this.total_in=0,this.output=null,this.next_out=0,this.avail_out=0,this.total_out=0,this.msg="",this.state=null,this.data_type=2,this.adler=0};var ae=function(){this.text=0,this.time=0,this.xflags=0,this.os=0,this.extra=null,this.extra_len=0,this.name="",this.comment="",this.hcrc=0,this.done=!1},re=Object.prototype.toString,oe=c.Z_NO_FLUSH,se=c.Z_FINISH,le=c.Z_OK,fe=c.Z_STREAM_END,de=c.Z_NEED_DICT,he=c.Z_STREAM_ERROR,ce=c.Z_DATA_ERROR,ue=c.Z_MEM_ERROR;function we(e){this.options=W({chunkSize:65536,windowBits:15,to:""},e||{});var t=this.options;t.raw&&t.windowBits>=0&&t.windowBits<16&&(t.windowBits=-t.windowBits,0===t.windowBits&&(t.windowBits=-15)),!(t.windowBits>=0&&t.windowBits<16)||e&&e.windowBits||(t.windowBits+=32),t.windowBits>15&&t.windowBits<48&&0==(15&t.windowBits)&&(t.windowBits|=15),this.err=0,this.msg="",this.ended=!1,this.chunks=[],this.strm=new ne,this.strm.avail_out=0;var i=Y.inflateInit2(this.strm,t.windowBits);if(i!==le)throw new Error(ie[i]);if(this.header=new ae,Y.inflateGetHeader(this.strm,this.header),t.dictionary&&("string"==typeof t.dictionary?t.dictionary=$(t.dictionary):"[object ArrayBuffer]"===re.call(t.dictionary)&&(t.dictionary=new Uint8Array(t.dictionary)),t.raw&&(i=Y.inflateSetDictionary(this.strm,t.dictionary))!==le))throw new Error(ie[i])}function be(e,t){var i=new we(t);if(i.push(e),i.err)throw i.msg||ie[i.err];return i.result}we.prototype.push=function(e,t){var i,n,a,r=this.strm,o=this.options.chunkSize,s=this.options.dictionary;if(this.ended)return!1;for(n=t===~~t?t:!0===t?se:oe,"[object ArrayBuffer]"===re.call(e)?r.input=new Uint8Array(e):r.input=e,r.next_in=0,r.avail_in=r.input.length;;){for(0===r.avail_out&&(r.output=new Uint8Array(o),r.next_out=0,r.avail_out=o),(i=Y.inflate(r,n))===de&&s&&((i=Y.inflateSetDictionary(r,s))===le?i=Y.inflate(r,n):i===ce&&(i=de));r.avail_in>0&&i===fe&&r.state.wrap>0&&0!==e[r.next_in];)Y.inflateReset(r),i=Y.inflate(r,n);switch(i){case he:case ce:case de:case ue:return this.onEnd(i),this.ended=!0,!1}if(a=r.avail_out,r.next_out&&(0===r.avail_out||i===fe))if("string"===this.options.to){var l=te(r.output,r.next_out),f=r.next_out-l,d=ee(r.output,l);r.next_out=f,r.avail_out=o-f,f&&r.output.set(r.output.subarray(l,l+f),0),this.onData(d)}else this.onData(r.output.length===r.next_out?r.output:r.output.subarray(0,r.next_out));if(i!==le||0!==a){if(i===fe)return i=Y.inflateEnd(this.strm),this.onEnd(i),this.ended=!0,!0;if(0===r.avail_in)break}}return!0},we.prototype.onData=function(e){this.chunks.push(e)},we.prototype.onEnd=function(e){e===le&&("string"===this.options.to?this.result=this.chunks.join(""):this.result=q(this.chunks)),this.chunks=[],this.err=e,this.msg=this.strm.msg};var me=we,ke=be,_e=function(e,t){return(t=t||{}).raw=!0,be(e,t)},ve=be,ge=c,pe={Inflate:me,inflate:ke,inflateRaw:_e,ungzip:ve,constants:ge};e.Inflate=me,e.constants=ge,e.default=pe,e.inflate=ke,e.inflateRaw=_e,e.ungzip=ve,Object.defineProperty(e,"__esModule",{value:!0})}));
+  `;

package/src/templates/tamperProtectionTemplates.ts

@@ -0,0 +1,116 @@
+import { NodePath } from "@babel/traverse";
+import { PluginInstance } from "../transforms/plugin";
+import Template from "./template";
+import { MULTI_TRANSFORM, UNSAFE } from "../constants";
+
+export const StrictModeTemplate = new Template(`
+  (function(){
+    function isStrictMode(){
+      try {
+        var arr = []
+        delete arr["length"]
+      } catch(e) {
+        return true;
+      }
+      return false;
+    }
+
+    if(isStrictMode()) {
+      {countermeasures}
+      {nativeFunctionName} = undefined;
+    }
+  })()
+  `);
+
+export const IndexOfTemplate = new Template(`
+function indexOf(str, substr) {
+  const len = str.length;
+  const sublen = substr.length;
+  let count = 0;
+
+  if (sublen > len) {
+    return -1;
+  }
+
+  for (let i = 0; i <= len - sublen; i++) {
+    for (let j = 0; j < sublen; j++) {
+      if (str[i + j] === substr[j]) {
+        count++;
+        if (count === sublen) {
+          return i;
+        }
+      } else {
+        count = 0;
+        break;
+      }
+    }
+  }
+
+  return -1;
+}
+`);
+
+export const NativeFunctionTemplate = new Template(`
+function {nativeFunctionName}() {
+  {IndexOfTemplate}
+
+  function checkFunction(fn) {
+    if (
+      indexOf("" + fn, "{ [native code] }") === -1 ||
+      typeof Object.getOwnPropertyDescriptor(fn, "toString") !== "undefined"
+    ) {
+      {countermeasures}
+
+      return undefined;
+    }
+
+    return fn;
+  }
+
+  var args = arguments;
+  if (args.length === 1) {
+    return checkFunction(args[0]);
+  } else if (args.length === 2) {
+    var object = args[0];
+    var property = args[1];
+
+    var fn = object[property];
+    fn = checkFunction(fn);
+
+    return fn.bind(object);
+  }
+}`).addSymbols(UNSAFE, MULTI_TRANSFORM);
+
+export const createEvalIntegrityTemplate = (
+  pluginInstance: PluginInstance,
+  path: NodePath
+) => {
+  if (pluginInstance.options.lock?.tamperProtection) {
+    return new Template(`
+      function {EvalIntegrityName}(){
+        var localVar = false;
+        eval(__JS_CONFUSER_VAR__(localVar) + " = true")
+
+        if (!localVar) {
+          // Eval was tampered!
+          {countermeasures}
+
+          return false;
+        }
+
+        return true;
+      }
+    `)
+      .addSymbols(UNSAFE)
+      .setDefaultVariables({
+        countermeasures:
+          pluginInstance.globalState.lock.createCountermeasuresCode(),
+      });
+  }
+
+  return new Template(`
+    function {EvalIntegrityName}(a = true){
+      return a;
+    }
+  `);
+};

package/src/templates/template.ts

@@ -1,131 +1,222 @@
-import { Node } from "../util/gen";
-import { parseSnippet, parseSync } from "../parser";
+import * as babelTypes from "@babel/types";
+import { parse } from "@babel/parser";
+import traverse from "@babel/traverse";
+import { NodePath } from "@babel/traverse";
 import { ok } from "assert";
-import { choice } from "../util/random";
-import { placeholderVariablePrefix } from "../constants";
+import { getRandomString } from "../utils/random-utils";
+import { NodeSymbol } from "../constants";
+
+// Create a union type of the symbol keys in NodeSymbol
+type NodeSymbolKeys = keyof {
+  [K in keyof NodeSymbol as K extends symbol ? K : never]: NodeSymbol[K];
+};
+
+export interface TemplateVariables {
+  [varName: string]:
+    | string
+    | number
+    | (() => babelTypes.Node | babelTypes.Node[] | Template)
+    | babelTypes.Node
+    | babelTypes.Node[]
+    | Template;
+}
 
-export interface ITemplate {
-  fill(variables?: { [name: string]: string | number }): {
-    output: string;
-    template: string;
-  };
+export default class Template {
+  private templates: string[];
+  private defaultVariables: TemplateVariables;
+  private requiredVariables: Set<string>;
+  private astVariableMappings: Map<string, string>;
+  private astIdentifierPrefix = "__t_" + getRandomString(6);
+  private symbols: NodeSymbolKeys[] = [];
 
-  compile(variables?: { [name: string]: string | number }): Node[];
+  constructor(...templates: string[]) {
+    this.templates = templates;
+    this.defaultVariables = Object.create(null);
+    this.requiredVariables = new Set<string>();
 
-  single(variables?: { [name: string]: string | number }): Node;
+    this.findRequiredVariables();
+  }
 
-  variables(variables): ITemplate;
+  addSymbols(...symbols: NodeSymbolKeys[]): this {
+    this.symbols.push(...symbols);
+    return this;
+  }
 
-  ignoreMissingVariables(): ITemplate;
+  setDefaultVariables(defaultVariables: TemplateVariables): this {
+    this.defaultVariables = defaultVariables;
+    return this;
+  }
 
-  templates: string[];
-  source: string;
-}
+  private findRequiredVariables() {
+    const matches = this.templates[0].match(/{[$A-Za-z0-9_]+}/g);
+    if (matches !== null) {
+      matches.forEach((variable) => {
+        const name = variable.slice(1, -1);
 
-export default function Template(...templates: string[]): ITemplate {
-  ok(templates.length);
-
-  var requiredVariables = new Set<string>();
-  var providedVariables = {};
-  var defaultVariables: { [key: string]: string } = Object.create(null);
-
-  // This may picked up "$mb[pP`x]" from String Encoding function
-  // ignoreMissingVariables() prevents this
-  var matches = templates[0].match(/{[$A-z0-9_]+}/g);
-  if (matches !== null) {
-    matches.forEach((variable) => {
-      var name = variable.slice(1, -1);
-
-      // $ variables are for default variables
-      if (name.startsWith("$")) {
-        defaultVariables[name] =
-          placeholderVariablePrefix +
-          "td_" +
-          Object.keys(defaultVariables).length;
-      } else {
-        requiredVariables.add(name);
-      }
-    });
+        this.requiredVariables.add(name);
+      });
+    }
   }
 
-  function fill(
-    variables: { [name: string]: string | number } = Object.create(null)
-  ) {
-    var userVariables = { ...providedVariables, ...variables };
+  private interpolateTemplate(variables: TemplateVariables) {
+    const allVariables = { ...this.defaultVariables, ...variables };
 
-    // Validate all variables were passed in
-    for (var requiredVariable of requiredVariables) {
-      if (typeof userVariables[requiredVariable] === "undefined") {
+    for (const requiredVariable of this.requiredVariables) {
+      if (typeof allVariables[requiredVariable] === "undefined") {
         throw new Error(
-          templates[0] +
-            " missing variable: " +
-            requiredVariable +
-            " from " +
-            JSON.stringify(userVariables)
+          `${
+            this.templates[0]
+          } missing variable: ${requiredVariable} from ${JSON.stringify(
+            allVariables
+          )}`
         );
       }
     }
 
-    var template = choice(templates);
-    var output = template;
-    var allVariables = {
-      ...defaultVariables,
-      ...userVariables,
-    };
+    const template =
+      this.templates[Math.floor(Math.random() * this.templates.length)];
+    let output = template;
+
+    this.astVariableMappings = new Map();
 
     Object.keys(allVariables).forEach((name) => {
-      var bracketName = "{" + name.replace("$", "\\$") + "}";
-      var value = allVariables[name] + "";
+      const bracketName = `{${name.replace("$", "\\$")}}`;
+      let value = allVariables[name] as string;
 
-      var reg = new RegExp(bracketName, "g");
+      if (this.isASTVariable(value)) {
+        let astIdentifierName = this.astIdentifierPrefix + name;
+        this.astVariableMappings.set(name, astIdentifierName);
 
+        value = astIdentifierName;
+      }
+
+      const reg = new RegExp(bracketName, "g");
       output = output.replace(reg, value);
     });
 
     return { output, template };
   }
 
-  function compile(variables: { [name: string]: string | number }): Node[] {
-    var { output, template } = fill(variables);
-    try {
-      var program = parseSnippet(output);
+  private isASTVariable(variable: any): boolean {
+    return typeof variable !== "string" && typeof variable !== "number";
+  }
+
+  private interpolateAST(ast: babelTypes.Node, variables: TemplateVariables) {
+    if (this.astVariableMappings.size === 0) return;
 
-      return program.body;
+    const allVariables = { ...this.defaultVariables, ...variables };
+    const template = this;
+
+    // Reverse the lookup map
+    // Before {name -> __t_m4H6nk_name}
+    // After {__t_m4H6nk_name -> name}
+    const reverseMappings = new Map<string, string>();
+    this.astVariableMappings.forEach((value, key) => {
+      reverseMappings.set(value, key);
+    });
+
+    const insertedVariables = new Set<string>();
+
+    traverse(ast, {
+      Identifier(path: NodePath<babelTypes.Identifier>) {
+        const idName = path.node.name;
+        if (!idName.startsWith(template.astIdentifierPrefix)) return;
+
+        const variableName = reverseMappings.get(idName);
+        ok(variableName, `Variable ${idName} not found in mappings`);
+
+        let value = allVariables[variableName];
+        let isSingleUse = true; // Hard-coded nodes are deemed 'single use'
+        if (typeof value === "function") {
+          value = value();
+          isSingleUse = false;
+        }
+
+        if (value instanceof Template) {
+          value = value.compile(allVariables);
+          isSingleUse = false;
+        }
+
+        // Duplicate node check
+        if (isSingleUse) {
+          if (insertedVariables.has(variableName)) {
+            ok(false, "Duplicate node inserted for variable: " + variableName);
+          }
+          insertedVariables.add(variableName);
+        }
+
+        // Insert new nodes
+        if (!Array.isArray(value)) {
+          path.replaceWith(value as babelTypes.Node);
+        } else {
+          path.replaceWithMultiple(value as babelTypes.Node[]);
+        }
+
+        path.skip();
+      },
+    });
+  }
+
+  file(variables: TemplateVariables = {}): babelTypes.File {
+    const { output } = this.interpolateTemplate(variables);
+
+    let file: babelTypes.File;
+    try {
+      file = parse(output, {
+        sourceType: "module",
+        allowReturnOutsideFunction: true,
+      });
     } catch (e) {
-      console.error(e);
-      console.error(template);
-      console.error({ ...providedVariables, ...variables });
       throw new Error(
-        "Template failed to parse: OUTPUT= " + output + " SOURCE= " + template
+        output + "\n" + "Template failed to parse: " + (e as Error).message
       );
     }
-  }
 
-  function single(variables?: { [name: string]: string | number }): Node {
-    var nodes = compile(variables);
-    return nodes[0];
+    this.interpolateAST(file, variables);
+
+    if (this.symbols.length > 0) {
+      file.program.body.forEach((node) => {
+        for (const symbol of this.symbols) {
+          node[symbol] = true;
+        }
+      });
+    }
+
+    return file;
   }
 
-  function variables(newVariables) {
-    Object.assign(providedVariables, newVariables);
-    return obj;
+  compile(variables: TemplateVariables = {}): babelTypes.Statement[] {
+    const file = this.file(variables);
+
+    return file.program.body;
   }
 
-  function ignoreMissingVariables() {
-    defaultVariables = Object.create(null);
-    requiredVariables.clear();
-    return obj;
+  single<T extends babelTypes.Statement>(variables: TemplateVariables = {}): T {
+    const nodes = this.compile(variables);
+
+    if (nodes.length !== 1) {
+      const filteredNodes = nodes.filter(
+        (node) => node.type !== "EmptyStatement"
+      );
+      ok(
+        filteredNodes.length === 1,
+        `Expected single node, got ${filteredNodes
+          .map((node) => node.type)
+          .join(", ")}`
+      );
+      return filteredNodes[0] as T;
+    }
+
+    return nodes[0] as T;
   }
 
-  var obj: ITemplate = {
-    fill,
-    compile,
-    single,
-    templates,
-    variables,
-    ignoreMissingVariables,
-    source: templates[0],
-  };
-
-  return obj;
+  expression<T extends babelTypes.Expression>(
+    variables: TemplateVariables = {}
+  ): T {
+    const statement = this.single(variables);
+
+    babelTypes.assertExpressionStatement(statement);
+
+    return statement.expression as T;
+  }
 }