obscura-js 0.1.0

package/dist/src/obfuscation/sequenceExpression.js

@@ -0,0 +1,85 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applySequenceExpression = applySequenceExpression;
+const traverse_1 = __importDefault(require("@babel/traverse"));
+const t = __importStar(require("@babel/types"));
+/**
+ * Pass: Sequence Expression Flattening
+ *
+ * Converts block statements inside `if` / `else` branches into comma-separated
+ * sequence expressions, mirroring reCAPTCHA's code-flattening technique.
+ *
+ * Before:
+ *   if (cond) { a = 1; b = 2; }
+ *
+ * After:
+ *   cond && ((a = 1), (b = 2));
+ */
+function applySequenceExpression(ast, options = {}) {
+    const probability = options.probability ?? 1.0;
+    (0, traverse_1.default)(ast, {
+        IfStatement(path) {
+            if (Math.random() > probability)
+                return;
+            const { test, consequent, alternate } = path.node;
+            // Only flatten simple BlockStatement bodies (no declarations)
+            const canFlatten = (node) => t.isBlockStatement(node) &&
+                node.body.every((s) => t.isExpressionStatement(s));
+            if (!canFlatten(consequent))
+                return;
+            if (alternate !== null && alternate !== undefined && !canFlatten(alternate))
+                return;
+            const toSeq = (block) => {
+                const exprs = block.body.map((s) => s.expression);
+                return exprs.length === 1 ? exprs[0] : t.sequenceExpression(exprs);
+            };
+            let replacement;
+            if (alternate === null || alternate === undefined) {
+                // if (cond) { ... }  →  cond && (...)
+                replacement = t.logicalExpression("&&", test, toSeq(consequent));
+            }
+            else {
+                // if (cond) { ... } else { ... }  →  cond ? (...) : (...)
+                replacement = t.conditionalExpression(test, toSeq(consequent), toSeq(alternate));
+            }
+            path.replaceWith(t.expressionStatement(replacement));
+        },
+    });
+}
+//# sourceMappingURL=sequenceExpression.js.map

package/dist/src/obfuscation/sequenceExpression.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sequenceExpression.js","sourceRoot":"","sources":["../../../src/obfuscation/sequenceExpression.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,0DAyCC;AAzDD,+DAAuC;AACvC,gDAAkC;AAGlC;;;;;;;;;;;GAWG;AACH,SAAgB,uBAAuB,CACrC,GAAW,EACX,UAAqC,EAAE;IAEvC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC;IAE/C,IAAA,kBAAQ,EAAC,GAAG,EAAE;QACZ,WAAW,CAAC,IAAI;YACd,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,WAAW;gBAAE,OAAO;YAExC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;YAElD,8DAA8D;YAC9D,MAAM,UAAU,GAAG,CAAC,IAAiB,EAA4B,EAAE,CACjE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAA8B,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;YAEjF,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,OAAO;YACpC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO;YAEpF,MAAM,KAAK,GAAG,CAAC,KAAuB,EAAgB,EAAE;gBACtD,MAAM,KAAK,GAAI,KAAK,CAAC,IAAgC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAC/E,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACrE,CAAC,CAAC;YAEF,IAAI,WAAyB,CAAC;YAC9B,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAClD,sCAAsC;gBACtC,WAAW,GAAG,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,UAA8B,CAAC,CAAC,CAAC;YACvF,CAAC;iBAAM,CAAC;gBACN,0DAA0D;gBAC1D,WAAW,GAAG,CAAC,CAAC,qBAAqB,CACnC,IAAI,EACJ,KAAK,CAAC,UAA8B,CAAC,EACrC,KAAK,CAAC,SAA6B,CAAC,CACrC,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC;QACvD,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/src/obfuscation/stringPool.d.ts

@@ -0,0 +1,14 @@
+import * as t from "@babel/types";
+import type { StringPoolOptions } from "../types";
+/**
+ * Pass: Encrypted String Pool
+ *
+ * Moves all string literals into an encrypted pool and replaces each
+ * occurrence with a runtime decryption call, mirroring the LCG-XOR approach
+ * used in Google reCAPTCHA's string obfuscation.
+ *
+ * Before:  "hello"
+ * After:   __haze_sp(0, 4, <seed>)
+ */
+export declare function applyStringPool(ast: t.File, options?: StringPoolOptions): void;
+//# sourceMappingURL=stringPool.d.ts.map

package/dist/src/obfuscation/stringPool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stringPool.d.ts","sourceRoot":"","sources":["../../../src/obfuscation/stringPool.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAClC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAqBlD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,GAAE,iBAAsB,GAAG,IAAI,CA6IlF"}

package/dist/src/obfuscation/stringPool.js

@@ -0,0 +1,142 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyStringPool = applyStringPool;
+const traverse_1 = __importDefault(require("@babel/traverse"));
+const t = __importStar(require("@babel/types"));
+const POOL_FN = "__haze_sp";
+const POOL_VAR = "__haze_pool";
+/**
+ * XOR-based LCG string encryption matching reCAPTCHA's encrypted string pool.
+ * Each character depends on all previous characters (running key accumulation).
+ */
+function encryptString(str, seed) {
+    let key = seed;
+    const ciphertext = [];
+    for (let i = 0; i < str.length; i++) {
+        const cp = str.codePointAt(i) ?? 0;
+        const encrypted = (cp ^ key) & 0x7f;
+        ciphertext.push(encrypted);
+        key = (key + encrypted) & 0x7f;
+    }
+    return { ciphertext, seed };
+}
+/**
+ * Pass: Encrypted String Pool
+ *
+ * Moves all string literals into an encrypted pool and replaces each
+ * occurrence with a runtime decryption call, mirroring the LCG-XOR approach
+ * used in Google reCAPTCHA's string obfuscation.
+ *
+ * Before:  "hello"
+ * After:   __haze_sp(0, 4, <seed>)
+ */
+function applyStringPool(ast, options = {}) {
+    const seed = options.seed ?? 42;
+    const entries = [];
+    const allCiphertext = [];
+    const literalToIndex = new Map();
+    function getOrAdd(str) {
+        if (literalToIndex.has(str)) {
+            return entries[literalToIndex.get(str)];
+        }
+        const { ciphertext } = encryptString(str, seed);
+        const start = allCiphertext.length;
+        allCiphertext.push(...ciphertext);
+        const entry = { start, len: str.length, seed };
+        literalToIndex.set(str, entries.length);
+        entries.push(entry);
+        return entry;
+    }
+    const replacements = [];
+    (0, traverse_1.default)(ast, {
+        StringLiteral(path) {
+            // Skip import/export specifiers and require calls
+            if (t.isImportDeclaration(path.parent) ||
+                t.isExportDeclaration(path.parent) ||
+                (t.isCallExpression(path.parent) &&
+                    t.isIdentifier(path.parent.callee, { name: "require" }))) {
+                return;
+            }
+            const entry = getOrAdd(path.node.value);
+            replacements.push({ path, entry });
+        },
+    });
+    if (entries.length === 0)
+        return;
+    // Replace string literals with __haze_sp(start, len, seed) calls
+    for (const { path, entry } of replacements) {
+        path.replaceWith(t.callExpression(t.identifier(POOL_FN), [
+            t.numericLiteral(entry.start),
+            t.numericLiteral(entry.len),
+            t.numericLiteral(seed),
+        ]));
+    }
+    // Prepend the pool array and decryption function
+    const poolArray = t.variableDeclaration("const", [
+        t.variableDeclarator(t.identifier(POOL_VAR), t.arrayExpression(allCiphertext.map((b) => t.numericLiteral(b)))),
+    ]);
+    // Decryption function:
+    // function __haze_sp(start, len, seed) {
+    //   let key = seed, out = '';
+    //   for (let i = 0; i < len; i++) {
+    //     const b = (__haze_pool[start + i] ^ key) & 0x7f;
+    //     out += String.fromCodePoint(b);
+    //     key = (key + b) & 0x7f;
+    //   }
+    //   return out;
+    // }
+    const decryptFn = t.functionDeclaration(t.identifier(POOL_FN), [t.identifier("start"), t.identifier("len"), t.identifier("seed")], t.blockStatement([
+        t.variableDeclaration("let", [
+            t.variableDeclarator(t.identifier("key"), t.identifier("seed")),
+            t.variableDeclarator(t.identifier("out"), t.stringLiteral("")),
+        ]),
+        t.forStatement(t.variableDeclaration("let", [
+            t.variableDeclarator(t.identifier("i"), t.numericLiteral(0)),
+        ]), t.binaryExpression("<", t.identifier("i"), t.identifier("len")), t.updateExpression("++", t.identifier("i")), t.blockStatement([
+            t.variableDeclaration("const", [
+                t.variableDeclarator(t.identifier("b"), t.binaryExpression("&", t.binaryExpression("^", t.memberExpression(t.identifier(POOL_VAR), t.binaryExpression("+", t.identifier("start"), t.identifier("i")), true), t.identifier("key")), t.numericLiteral(0x7f))),
+            ]),
+            t.expressionStatement(t.assignmentExpression("+=", t.identifier("out"), t.callExpression(t.memberExpression(t.identifier("String"), t.identifier("fromCodePoint")), [t.identifier("b")]))),
+            t.expressionStatement(t.assignmentExpression("=", t.identifier("key"), t.binaryExpression("&", t.binaryExpression("+", t.identifier("key"), t.memberExpression(t.identifier(POOL_VAR), t.binaryExpression("+", t.identifier("start"), t.identifier("i")), true)), t.numericLiteral(0x7f)))),
+        ])),
+        t.returnStatement(t.identifier("out")),
+    ]));
+    ast.program.body.unshift(decryptFn, poolArray);
+}
+//# sourceMappingURL=stringPool.js.map

package/dist/src/obfuscation/stringPool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stringPool.js","sourceRoot":"","sources":["../../../src/obfuscation/stringPool.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCA,0CA6IC;AA9KD,+DAA0D;AAC1D,gDAAkC;AAGlC,MAAM,OAAO,GAAG,WAAW,CAAC;AAC5B,MAAM,QAAQ,GAAG,aAAa,CAAC;AAE/B;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAW,EAAE,IAAY;IAC9C,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3B,GAAG,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,eAAe,CAAC,GAAW,EAAE,UAA6B,EAAE;IAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;IAEhC,MAAM,OAAO,GAAmD,EAAE,CAAC;IACnE,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEjD,SAAS,QAAQ,CAAC,GAAW;QAC3B,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC;QACnC,aAAa,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAC/C,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAGb,EAAE,CAAC;IAER,IAAA,kBAAQ,EAAC,GAAG,EAAE;QACZ,aAAa,CAAC,IAAI;YAChB,kDAAkD;YAClD,IACE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAClC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAClC,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;oBAC9B,CAAC,CAAC,YAAY,CAAE,IAAI,CAAC,MAA2B,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,EAChF,CAAC;gBACD,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEjC,iEAAiE;IACjE,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,YAAY,EAAE,CAAC;QAC3C,IAAI,CAAC,WAAW,CACd,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;YACtC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC;YAC7B,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC;YAC3B,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC;SACvB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,MAAM,SAAS,GAAG,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE;QAC/C,CAAC,CAAC,kBAAkB,CAClB,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EACtB,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CACjE;KACF,CAAC,CAAC;IAEH,uBAAuB;IACvB,yCAAyC;IACzC,8BAA8B;IAC9B,oCAAoC;IACpC,uDAAuD;IACvD,sCAAsC;IACtC,8BAA8B;IAC9B,MAAM;IACN,gBAAgB;IAChB,IAAI;IACJ,MAAM,SAAS,GAAG,CAAC,CAAC,mBAAmB,CACrC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,EACrB,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAClE,CAAC,CAAC,cAAc,CAAC;QACf,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE;YAC3B,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/D,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;SAC/D,CAAC;QACF,CAAC,CAAC,YAAY,CACZ,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE;YAC3B,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;SAC7D,CAAC,EACF,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAC/D,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAC3C,CAAC,CAAC,cAAc,CAAC;YACf,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE;gBAC7B,CAAC,CAAC,kBAAkB,CAClB,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EACjB,CAAC,CAAC,gBAAgB,CAChB,GAAG,EACH,CAAC,CAAC,gBAAgB,CAChB,GAAG,EACH,CAAC,CAAC,gBAAgB,CAChB,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EACtB,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EACjE,IAAI,CACL,EACD,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CACpB,EACD,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CACvB,CACF;aACF,CAAC;YACF,CAAC,CAAC,mBAAmB,CACnB,CAAC,CAAC,oBAAoB,CACpB,IAAI,EACJ,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EACnB,CAAC,CAAC,cAAc,CACd,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,EACzE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CACpB,CACF,CACF;YACD,CAAC,CAAC,mBAAmB,CACnB,CAAC,CAAC,oBAAoB,CACpB,GAAG,EACH,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EACnB,CAAC,CAAC,gBAAgB,CAChB,GAAG,EACH,CAAC,CAAC,gBAAgB,CAChB,GAAG,EACH,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EACnB,CAAC,CAAC,gBAAgB,CAChB,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EACtB,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EACjE,IAAI,CACL,CACF,EACD,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CACvB,CACF,CACF;SACF,CAAC,CACH;QACD,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;KACvC,CAAC,CACH,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,IAAsB,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACpE,CAAC"}

package/dist/src/types.d.ts

@@ -0,0 +1,65 @@
+import * as t from "@babel/types";
+/** A single AST transformation pass */
+export interface Pass<TOptions> {
+    /** Human-readable name of the pass */
+    readonly name: string;
+    /** Apply the pass to the given AST node in-place */
+    apply(ast: t.File, options?: TOptions): void;
+}
+export interface SequenceExpressionOptions {
+    /** Probability (0–1) of converting a block to a sequence expression */
+    probability?: number;
+}
+export interface MbaOptions {
+    /** Number of MBA expansion rounds (default: 1) */
+    rounds?: number;
+}
+export interface FunctionTableOptions {
+    /** Minimum number of functions before building an indirect table */
+    minFunctions?: number;
+}
+export interface StringPoolOptions {
+    /** XOR seed for the encrypted string pool */
+    seed?: number;
+}
+export interface ControlFlowFlatteningOptions {
+    /** Number of state-machine passes (default: 1) */
+    passes?: number;
+}
+export interface DeadCodeOptions {
+    /** Target lines of dead code to inject (default: 50) */
+    targetLines?: number;
+}
+export interface ObfuscationOptions {
+    sequenceExpression?: SequenceExpressionOptions | false;
+    mba?: MbaOptions | false;
+    functionTable?: FunctionTableOptions | false;
+    stringPool?: StringPoolOptions | false;
+    controlFlowFlattening?: ControlFlowFlatteningOptions | false;
+    deadCode?: DeadCodeOptions | false;
+}
+export interface IntegrityTagOptions {
+    /** Symbol description string (default: 'jas') */
+    tagDescription?: string;
+}
+export interface NativeBindingOptions {
+    /** List of native methods to pre-bind (e.g. 'Math.floor') */
+    methods?: string[];
+}
+export interface AntiDebugOptions {
+    integrityTag?: IntegrityTagOptions | false;
+    nativeBinding?: NativeBindingOptions | false;
+}
+export interface HazeOptions {
+    obfuscation?: ObfuscationOptions;
+    antiDebug?: AntiDebugOptions;
+    /** Minify the output (removes whitespace and shortens literals). Default: false */
+    minify?: boolean;
+}
+export interface ProtectResult {
+    /** Protected source code */
+    code: string;
+    /** Applied pass names in order */
+    appliedPasses: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAIlC,uCAAuC;AACvC,MAAM,WAAW,IAAI,CAAC,QAAQ;IAC5B,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;CAC9C;AAID,MAAM,WAAW,yBAAyB;IACxC,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,4BAA4B;IAC3C,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,CAAC,EAAE,yBAAyB,GAAG,KAAK,CAAC;IACvD,GAAG,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;IACzB,aAAa,CAAC,EAAE,oBAAoB,GAAG,KAAK,CAAC;IAC7C,UAAU,CAAC,EAAE,iBAAiB,GAAG,KAAK,CAAC;IACvC,qBAAqB,CAAC,EAAE,4BAA4B,GAAG,KAAK,CAAC;IAC7D,QAAQ,CAAC,EAAE,eAAe,GAAG,KAAK,CAAC;CACpC;AAID,MAAM,WAAW,mBAAmB;IAClC,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAC;IAC3C,aAAa,CAAC,EAAE,oBAAoB,GAAG,KAAK,CAAC;CAC9C;AAID,MAAM,WAAW,WAAW;IAC1B,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,mFAAmF;IACnF,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAID,MAAM,WAAW,aAAa;IAC5B,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB"}

package/dist/src/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/src/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,71 @@
+{
+  "name": "obscura-js",
+  "version": "0.1.0",
+  "description": "JavaScript code protection tool — obfuscation & anti-debugging inspired by Google reCAPTCHA",
+  "main": "dist/src/index.js",
+  "types": "dist/src/index.d.ts",
+  "exports": {
+    ".": {
+      "require": "./dist/src/index.js",
+      "types": "./dist/src/index.d.ts"
+    }
+  },
+  "files": [
+    "dist/",
+    "README.md"
+  ],
+  "sideEffects": false,
+  "bin": {
+    "obscura-js": "dist/bin/haze.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "build:watch": "tsc --watch",
+    "prepublishOnly": "npm run build && npm test",
+    "test": "jest --coverage",
+    "lint": "eslint src/ bin/",
+    "lint:fix": "eslint src/ bin/ --fix",
+    "format": "prettier --write \"src/**/*.ts\" \"bin/**/*.ts\" \"tests/**/*.ts\"",
+    "format:check": "prettier --check \"src/**/*.ts\" \"bin/**/*.ts\" \"tests/**/*.ts\"",
+    "dev": "ts-node bin/haze.ts"
+  },
+  "keywords": [
+    "obfuscation",
+    "javascript",
+    "security",
+    "anti-debug",
+    "anti-tamper",
+    "code-protection",
+    "ast",
+    "babel"
+  ],
+  "author": "vientorepublic",
+  "license": "MIT",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "@babel/core": "^7.24.0",
+    "@babel/generator": "^7.24.0",
+    "@babel/parser": "^7.24.0",
+    "@babel/traverse": "^7.24.0",
+    "@babel/types": "^7.24.0",
+    "commander": "^12.0.0"
+  },
+  "devDependencies": {
+    "@types/babel__core": "^7.20.5",
+    "@types/babel__generator": "^7.6.8",
+    "@types/babel__traverse": "^7.20.6",
+    "@types/jest": "^29.5.12",
+    "@types/node": "^20.12.0",
+    "@typescript-eslint/eslint-plugin": "^8.59.4",
+    "@typescript-eslint/parser": "^8.59.4",
+    "eslint": "^8.57.0",
+    "eslint-config-prettier": "^10.1.8",
+    "jest": "^29.7.0",
+    "prettier": "^3.8.3",
+    "ts-jest": "^29.1.2",
+    "ts-node": "^10.9.2",
+    "typescript": "^5.4.5"
+  }
+}