webfuscator 1.2.1 → 1.3.0

package/dist/utils/ast.js

@@ -53,65 +53,35 @@ export function isProtoKey(key) {
     return ((t.isIdentifier(key) && key.name === '__proto__') ||
         (t.isStringLiteral(key) && key.value === '__proto__'));
 }
+// A non-computed key names a property; it is not a runtime value.
+export function isNonComputedKey(path) {
+    const parent = path.parent;
+    return ('key' in parent && parent.key === path.node && 'computed' in parent && parent.computed === false);
+}
 // `with` can shadow names outside Babel's scope table.
 export function isInsideWith(path) {
-    if (!programContains(path.scope.getProgramParent().block, programWith, t.isWithStatement)) {
+    if (!programHasWith(path.scope.getProgramParent().block)) {
         return false;
     }
     return path.findParent((ancestor) => ancestor.isWithStatement()) !== null;
 }
-// Direct eval can access local bindings by name. Indirect eval runs globally and
-// does not count.
-export function enclosingScopeHasDirectEval(path) {
-    if (!programContains(path.scope.getProgramParent().block, programDirectEval, isDirectEvalCall)) {
-        return false;
-    }
-    let current = path;
-    while (current) {
-        if ((current.isFunction() || current.isProgram()) && ownScopeHasDirectEval(current.node)) {
-            return true;
-        }
-        current = current.parentPath;
-    }
-    return false;
-}
-// Cache program-wide `eval` and `with` checks to avoid a subtree walk per name.
-// No transform creates either construct, so a negative result stays valid.
-const programDirectEval = new WeakMap();
+// Cache the program-wide scan because `isInsideWith` runs for many identifiers.
+// Transforms never add `with`, so a cached miss remains valid.
 const programWith = new WeakMap();
-function programContains(programNode, cache, matches) {
-    const cached = cache.get(programNode);
+function programHasWith(programNode) {
+    const cached = programWith.get(programNode);
     if (cached !== undefined) {
         return cached;
     }
     let found = false;
     t.traverseFast(programNode, (node) => {
-        if (!matches(node)) {
+        if (!t.isWithStatement(node)) {
             return;
         }
         found = true;
         return t.traverseFast.stop;
     });
-    cache.set(programNode, found);
+    programWith.set(programNode, found);
     return found;
 }
-function ownScopeHasDirectEval(owner) {
-    let found = false;
-    // This walk stops at the first hit, unlike `walkOwnFunctionScope`.
-    t.traverseFast(owner, (node) => {
-        if (isDirectEvalCall(node)) {
-            found = true;
-            return t.traverseFast.stop;
-        }
-        return node !== owner && t.isFunction(node) ? t.traverseFast.skip : undefined;
-    });
-    return found;
-}
-export function isDirectEvalCall(node) {
-    // `eval?.(...)` is an OptionalCallExpression yet still a direct eval, so both
-    // call node shapes count.
-    return ((t.isCallExpression(node) || t.isOptionalCallExpression(node)) &&
-        t.isIdentifier(node.callee) &&
-        node.callee.name === 'eval');
-}
 //# sourceMappingURL=ast.js.map

package/dist/utils/ast.js.map

@@ -1 +1 @@
-{"version":3,"file":"ast.js","sourceRoot":"","sources":["../../src/utils/ast.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,cAAc,CAAA;AAEjC,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CAAC,IAAc;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAA;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,MAAM,GACV,MAAM,CAAC,SAAS,EAAE;QAClB,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;IAC5F,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAA;IACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAW,CAAA;QACtC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAChF,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,QAAgC;IACjF,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;QAC5B,MAAM,UAAU,GAAG,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACtD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC,CAAA;QAChB,CAAC;QACD,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IACrD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,4EAA4E;AAC5E,iDAAiD;AACjD,MAAM,UAAU,sBAAsB,CAAC,MAA4B;IACjE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAA;YACb,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,0EAA0E;AAC1E,wBAAwB;AACxB,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,CACL,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC;QACjD,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW,CAAC,CACtD,CAAA;AACH,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1F,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,KAAK,IAAI,CAAA;AAC3E,CAAC;AAED,iFAAiF;AACjF,kBAAkB;AAClB,MAAM,UAAU,2BAA2B,CAAC,IAAc;IACxD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC/F,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,OAAO,GAAoB,IAAI,CAAA;IACnC,OAAO,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzF,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,UAAU,CAAA;IAC9B,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,gFAAgF;AAChF,2EAA2E;AAC3E,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAAmB,CAAA;AACxD,MAAM,WAAW,GAAG,IAAI,OAAO,EAAmB,CAAA;AAElD,SAAS,eAAe,CACtB,WAAmB,EACnB,KAA+B,EAC/B,OAAkC;IAElC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAA;IACf,CAAC;IACD,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;QACnC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,OAAM;QACR,CAAC;QACD,KAAK,GAAG,IAAI,CAAA;QACZ,OAAO,CAAC,CAAC,YAAY,CAAC,IAAI,CAAA;IAC5B,CAAC,CAAC,CAAA;IACF,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAC7B,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,mEAAmE;IACnE,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;QAC7B,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,KAAK,GAAG,IAAI,CAAA;YACZ,OAAO,CAAC,CAAC,YAAY,CAAC,IAAI,CAAA;QAC5B,CAAC;QACD,OAAO,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/E,CAAC,CAAC,CAAA;IACF,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,8EAA8E;IAC9E,0BAA0B;IAC1B,OAAO,CACL,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAC5B,CAAA;AACH,CAAC"}
+{"version":3,"file":"ast.js","sourceRoot":"","sources":["../../src/utils/ast.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,cAAc,CAAA;AAEjC,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CAAC,IAAc;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAA;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,MAAM,GACV,MAAM,CAAC,SAAS,EAAE;QAClB,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;IAC5F,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAA;IACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAW,CAAA;QACtC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAChF,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,QAAgC;IACjF,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;QAC5B,MAAM,UAAU,GAAG,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACtD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC,CAAA;QAChB,CAAC;QACD,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IACrD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,4EAA4E;AAC5E,iDAAiD;AACjD,MAAM,UAAU,sBAAsB,CAAC,MAA4B;IACjE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAA;YACb,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,0EAA0E;AAC1E,wBAAwB;AACxB,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,CACL,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC;QACjD,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW,CAAC,CACtD,CAAA;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IAC1B,OAAO,CACL,KAAK,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI,IAAI,UAAU,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CACjG,CAAA;AACH,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,KAAK,IAAI,CAAA;AAC3E,CAAC;AAED,gFAAgF;AAChF,+DAA+D;AAC/D,MAAM,WAAW,GAAG,IAAI,OAAO,EAAmB,CAAA;AAElD,SAAS,cAAc,CAAC,WAAmB;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAA;IACf,CAAC;IACD,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;QACnC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAM;QACR,CAAC;QACD,KAAK,GAAG,IAAI,CAAA;QACZ,OAAO,CAAC,CAAC,YAAY,CAAC,IAAI,CAAA;IAC5B,CAAC,CAAC,CAAA;IACF,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IACnC,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/utils/literal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"literal.d.ts","sourceRoot":"","sources":["../../src/utils/literal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,cAAc,CAAA;AAKjC,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,OAAO,CAQxD;AAGD,wBAAgB,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,OAAO,CAErD;AA4BD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,UAAU,GAAG,IAAI,CAiDlE"}
+{"version":3,"file":"literal.d.ts","sourceRoot":"","sources":["../../src/utils/literal.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,cAAc,CAAA;AAQjC,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,OAAO,CAQxD;AAGD,wBAAgB,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,OAAO,CAErD;AA4BD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,UAAU,GAAG,IAAI,CAMlE"}

package/dist/utils/literal.js

@@ -1,4 +1,8 @@
+import generate from '@babel/generator';
 import * as t from '@babel/types';
+const MAX_GENERATED_LITERAL_LENGTH = 8192;
+const MAX_LITERAL_DEPTH = 32;
+const MAX_LITERAL_NODES = 512;
 const MAX_STRING_LITERAL_LENGTH = 4096;
 // RegExp literals allocate mutable objects and are not primitive values.
 export function isPrimitiveLiteral(node) {
@@ -38,19 +42,45 @@ function literalShapeKind(node) {
     return null;
 }
 export function valueToLiteral(value) {
+    const literal = buildValueLiteral(value, new Set(), { nodesRemaining: MAX_LITERAL_NODES }, 0);
+    if (!literal || generate(literal).code.length > MAX_GENERATED_LITERAL_LENGTH) {
+        return null;
+    }
+    return literal;
+}
+function reserveLiteralNodes(budget, count) {
+    if (budget.nodesRemaining < count) {
+        return false;
+    }
+    budget.nodesRemaining -= count;
+    return true;
+}
+function buildValueLiteral(value, seen, budget, depth) {
+    if (depth > MAX_LITERAL_DEPTH) {
+        return null;
+    }
     if (typeof value === 'string') {
-        if (value.length > MAX_STRING_LITERAL_LENGTH) {
+        if (value.length > MAX_STRING_LITERAL_LENGTH || !reserveLiteralNodes(budget, 1)) {
             return null;
         }
         return t.stringLiteral(value);
     }
     if (typeof value === 'boolean') {
+        if (!reserveLiteralNodes(budget, 1)) {
+            return null;
+        }
         return t.booleanLiteral(value);
     }
     if (value === null) {
+        if (!reserveLiteralNodes(budget, 1)) {
+            return null;
+        }
         return t.nullLiteral();
     }
     if (value === undefined) {
+        if (!reserveLiteralNodes(budget, 2)) {
+            return null;
+        }
         // `void 0` cannot be shadowed like the identifier `undefined`.
         return t.unaryExpression('void', t.numericLiteral(0));
     }
@@ -58,8 +88,14 @@ export function valueToLiteral(value) {
         // A UnaryExpression lets the generator parenthesize negative BigInt where
         // precedence requires it.
         if (value < 0n) {
+            if (!reserveLiteralNodes(budget, 2)) {
+                return null;
+            }
             return t.unaryExpression('-', t.bigIntLiteral(-value));
         }
+        if (!reserveLiteralNodes(budget, 1)) {
+            return null;
+        }
         return t.bigIntLiteral(value);
     }
     if (typeof value === 'number') {
@@ -67,17 +103,30 @@ export function valueToLiteral(value) {
             return null;
         }
         if (Object.is(value, -0)) {
+            if (!reserveLiteralNodes(budget, 2)) {
+                return null;
+            }
             return t.unaryExpression('-', t.numericLiteral(0));
         }
         if (value < 0) {
+            if (!reserveLiteralNodes(budget, 2)) {
+                return null;
+            }
             return t.unaryExpression('-', t.numericLiteral(-value));
         }
+        if (!reserveLiteralNodes(budget, 1)) {
+            return null;
+        }
         return t.numericLiteral(value);
     }
     if (Array.isArray(value)) {
+        if (seen.has(value) || !arrayHasLiteralShape(value) || !reserveLiteralNodes(budget, 1)) {
+            return null;
+        }
+        seen.add(value);
         const elements = [];
         for (const item of value) {
-            const lit = valueToLiteral(item);
+            const lit = buildValueLiteral(item, seen, budget, depth + 1);
             if (!lit) {
                 return null;
             }
@@ -87,4 +136,27 @@ export function valueToLiteral(value) {
     }
     return null;
 }
+function arrayHasLiteralShape(value) {
+    if (Object.getPrototypeOf(value) !== Array.prototype || !Object.isExtensible(value)) {
+        return false;
+    }
+    const names = Object.getOwnPropertyNames(value);
+    if (names.length !== value.length + 1 || names.at(-1) !== 'length') {
+        return false;
+    }
+    for (let index = 0; index < value.length; index++) {
+        if (names[index] !== String(index) ||
+            !isOrdinaryDataProperty(Object.getOwnPropertyDescriptor(value, String(index)))) {
+            return false;
+        }
+    }
+    return Object.getOwnPropertySymbols(value).length === 0;
+}
+function isOrdinaryDataProperty(descriptor) {
+    return (descriptor !== undefined &&
+        'value' in descriptor &&
+        descriptor.configurable === true &&
+        descriptor.enumerable === true &&
+        descriptor.writable === true);
+}
 //# sourceMappingURL=literal.js.map

package/dist/utils/literal.js.map

@@ -1 +1 @@
-{"version":3,"file":"literal.js","sourceRoot":"","sources":["../../src/utils/literal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,cAAc,CAAA;AAEjC,MAAM,yBAAyB,GAAG,IAAI,CAAA;AAEtC,yEAAyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,CACL,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC;QACvB,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC;QACxB,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC;QACxB,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC;QACrB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CACxB,CAAA;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,IAAI,CAAA;AACxC,CAAC;AAED,wEAAwE;AACxE,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,IAAI,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC7C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAA;QAChB,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;YAC1B,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAA;QAC5C,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;YACnD,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;IACxB,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,+DAA+D;QAC/D,OAAO,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,0EAA0E;QAC1E,0BAA0B;QAC1B,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;QACxD,CAAC;QACD,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;QACpD,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;QACzD,CAAC;QACD,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAmB,EAAE,CAAA;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;YAChC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,IAAI,CAAA;YACb,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACpB,CAAC;QACD,OAAO,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAA;IACpC,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"literal.js","sourceRoot":"","sources":["../../src/utils/literal.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,kBAAkB,CAAA;AACvC,OAAO,KAAK,CAAC,MAAM,cAAc,CAAA;AAEjC,MAAM,4BAA4B,GAAG,IAAI,CAAA;AACzC,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAC5B,MAAM,iBAAiB,GAAG,GAAG,CAAA;AAC7B,MAAM,yBAAyB,GAAG,IAAI,CAAA;AAEtC,yEAAyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,CACL,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC;QACvB,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC;QACxB,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC;QACxB,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC;QACrB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CACxB,CAAA;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,IAAI,CAAA;AACxC,CAAC;AAED,wEAAwE;AACxE,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,IAAI,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC7C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAA;QAChB,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;YAC1B,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAA;QAC5C,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;YACnD,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAA;IAC7F,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC;QAC7E,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAMD,SAAS,mBAAmB,CAAC,MAAqB,EAAE,KAAa;IAC/D,IAAI,MAAM,CAAC,cAAc,GAAG,KAAK,EAAE,CAAC;QAClC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,CAAC,cAAc,IAAI,KAAK,CAAA;IAC9B,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAc,EACd,IAAiB,EACjB,MAAqB,EACrB,KAAa;IAEb,IAAI,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,yBAAyB,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YAChF,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;IACxB,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAA;QACb,CAAC;QACD,+DAA+D;QAC/D,OAAO,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,0EAA0E;QAC1E,0BAA0B;QAC1B,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;YACf,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;gBACpC,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;QACxD,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;gBACpC,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;QACpD,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;gBACpC,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YACvF,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACf,MAAM,QAAQ,GAAmB,EAAE,CAAA;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;YAC5D,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,IAAI,CAAA;YACb,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACpB,CAAC;QACD,OAAO,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAA;IACpC,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAgB;IAC5C,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACpF,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnE,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,IACE,KAAK,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC;YAC9B,CAAC,sBAAsB,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAC9E,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,sBAAsB,CAAC,UAA0C;IACxE,OAAO,CACL,UAAU,KAAK,SAAS;QACxB,OAAO,IAAI,UAAU;QACrB,UAAU,CAAC,YAAY,KAAK,IAAI;QAChC,UAAU,CAAC,UAAU,KAAK,IAAI;QAC9B,UAAU,CAAC,QAAQ,KAAK,IAAI,CAC7B,CAAA;AACH,CAAC"}

package/dist/utils/statement-lists.d.ts

@@ -0,0 +1,9 @@
+import type { NodePath } from '@babel/traverse';
+import type * as t from '@babel/types';
+import type { File } from '@babel/types';
+export type StatementListContainer = t.Program | t.BlockStatement | t.StaticBlock | t.SwitchCase;
+type Rewrite = (statements: NodePath<t.Statement>[], container: NodePath<StatementListContainer>) => t.Statement[] | null;
+/** Applies a rewrite to every statement-list container in the AST. */
+export declare function rewriteStatementLists(ast: File, rewrite: Rewrite): boolean;
+export {};
+//# sourceMappingURL=statement-lists.d.ts.map

package/dist/utils/statement-lists.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"statement-lists.d.ts","sourceRoot":"","sources":["../../src/utils/statement-lists.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,KAAK,KAAK,CAAC,MAAM,cAAc,CAAA;AACtC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAKxC,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,UAAU,CAAA;AAEhG,KAAK,OAAO,GAAG,CACb,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EACnC,SAAS,EAAE,QAAQ,CAAC,sBAAsB,CAAC,KACxC,CAAC,CAAC,SAAS,EAAE,GAAG,IAAI,CAAA;AAEzB,sEAAsE;AACtE,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAe1E"}

package/dist/utils/statement-lists.js

@@ -0,0 +1,27 @@
+import { traverseForChanges } from './change-tracking.js';
+/** Applies a rewrite to every statement-list container in the AST. */
+export function rewriteStatementLists(ast, rewrite) {
+    return traverseForChanges(ast, {
+        Program(path, state) {
+            apply(path, 'body', rewrite, state);
+        },
+        BlockStatement(path, state) {
+            apply(path, 'body', rewrite, state);
+        },
+        StaticBlock(path, state) {
+            apply(path, 'body', rewrite, state);
+        },
+        SwitchCase(path, state) {
+            apply(path, 'consequent', rewrite, state);
+        },
+    });
+}
+function apply(container, key, rewrite, state) {
+    const statements = container.get(key);
+    const replacement = rewrite(statements, container);
+    if (replacement) {
+        container.set(key, replacement);
+        state.changed = true;
+    }
+}
+//# sourceMappingURL=statement-lists.js.map

package/dist/utils/statement-lists.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"statement-lists.js","sourceRoot":"","sources":["../../src/utils/statement-lists.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAUtD,sEAAsE;AACtE,MAAM,UAAU,qBAAqB,CAAC,GAAS,EAAE,OAAgB;IAC/D,OAAO,kBAAkB,CAAC,GAAG,EAAE;QAC7B,OAAO,CAAC,IAAI,EAAE,KAAK;YACjB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;QACrC,CAAC;QACD,cAAc,CAAC,IAAI,EAAE,KAAK;YACxB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;QACrC,CAAC;QACD,WAAW,CAAC,IAAI,EAAE,KAAK;YACrB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;QACrC,CAAC;QACD,UAAU,CAAC,IAAI,EAAE,KAAK;YACpB,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;QAC3C,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,KAAK,CACZ,SAA2C,EAC3C,GAA0B,EAC1B,OAAgB,EAChB,KAAkB;IAElB,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAA4B,CAAA;IAChE,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IAClD,IAAI,WAAW,EAAE,CAAC;QAChB,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;QAC/B,KAAK,CAAC,OAAO,GAAG,IAAI,CAAA;IACtB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "webfuscator",
-  "version": "1.2.1",
+  "version": "1.3.0",
   "description": "JavaScript obfuscator built on Babel",
   "keywords": [
     "babel",
@@ -41,14 +41,6 @@
   "publishConfig": {
     "access": "public"
   },
-  "scripts": {
-    "prepublishOnly": "pnpm --workspace-root check",
-    "prepack": "pnpm run build",
-    "build": "node --eval \"require('node:fs').rmSync('dist', { force: true, recursive: true })\" && tsc -p tsconfig.build.json && tsc-alias -p tsconfig.build.json && node scripts/verify-dist.mjs",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "typecheck": "tsc --noEmit"
-  },
   "dependencies": {
     "@babel/generator": "^8.0.0",
     "@babel/parser": "^8.0.4",
@@ -56,9 +48,9 @@
     "@babel/types": "^8.0.4"
   },
   "devDependencies": {
-    "@types/node": "catalog:",
+    "@types/node": "^26.2.0",
     "tsc-alias": "^1.9.2",
-    "typescript": "catalog:",
+    "typescript": "^7.0.2",
     "vitest": "^4.1.11"
   },
   "engines": {
@@ -66,5 +58,11 @@
   },
   "contentPolicy": {
     "class": "dual-use"
+  },
+  "scripts": {
+    "build": "node --eval \"require('node:fs').rmSync('dist', { force: true, recursive: true })\" && tsc -p tsconfig.build.json && tsc-alias -p tsconfig.build.json && node scripts/verify-dist.mjs",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit"
   }
-}
+}

package/src/analysis/constant.ts

@@ -1,7 +1,7 @@
 import type { Binding, NodePath, Scope } from '@babel/traverse'
 import * as t from '@babel/types'
 
-import { enclosingScopeHasDirectEval, isInsideWith } from '../utils/ast'
+import { isInsideWith } from '../utils/ast'
 import {
   declarationReaches,
   initializerReaches,
@@ -141,11 +141,8 @@ function evaluateIdentifier(node: t.Node, env: Env): Evaluation {
     return UNKNOWN
   }
 
-  // `with` and direct `eval` can redirect names outside Babel's scope table.
-  if (
-    env.referencePath &&
-    (isInsideWith(env.referencePath) || enclosingScopeHasDirectEval(env.referencePath))
-  ) {
+  // Babel's scope table cannot account for properties supplied by `with`.
+  if (env.referencePath && isInsideWith(env.referencePath)) {
     return UNKNOWN
   }
   const binding = env.scope.getBinding(identifier.name)

package/src/analysis/inlineability.ts

@@ -279,7 +279,7 @@ const analyzeBodyVisitor: Visitor<AnalyzeBodyState> = {
   },
   Identifier(path, state) {
     const name = path.node.name
-    if (state.innerFnDepth === 0 && (name === 'arguments' || name === 'eval')) {
+    if (state.innerFnDepth === 0 && name === 'arguments') {
       state.unsafe = true
       path.stop()
       return

package/src/index.ts

@@ -1,5 +1,6 @@
 export { obfuscate } from './obfuscator'
 export type {
+  ConcealStringsOptions,
   ManglePropertiesOptions,
   ObfuscatorOptions,
   PackOptions,

package/src/obfuscator.ts

@@ -14,6 +14,7 @@ import { wrapSingleStatements } from './preparation/wrap-single-statements'
 import { argumentsToParameters } from './transforms/arguments-to-parameters'
 import { arrowToFunction } from './transforms/arrow-to-function'
 import { collapseSingleUseTemps } from './transforms/collapse-single-use-temps'
+import { concealStrings } from './transforms/conceal-strings'
 import { constLetToVar } from './transforms/const-let-to-var'
 import { constToLet } from './transforms/const-to-let'
 import { doWhileToWhile } from './transforms/do-while-to-while'
@@ -26,9 +27,11 @@ import { foldBuiltinMethods } from './transforms/fold-builtin-methods'
 import { foldConstants } from './transforms/fold-constants'
 import { forToWhile } from './transforms/for-to-while'
 import { functionDeclarationToExpression } from './transforms/function-declaration-to-expression'
+import { hoistVariables } from './transforms/hoist-variables'
 import { inlineFunctions } from './transforms/inline-functions'
 import { logicalToTernary } from './transforms/logical-to-ternary'
 import { mangleProperties } from './transforms/mangle-properties'
+import { mergeVariableDeclarations } from './transforms/merge-variable-declarations'
 import { nullishCoalescingToTernary } from './transforms/nullish-coalescing-to-ternary'
 import { numbersToStrings } from './transforms/numbers-to-strings'
 import { objectMethodToProperty } from './transforms/object-method-to-property'
@@ -39,6 +42,7 @@ import { removeAnonymousFunctionNames } from './transforms/remove-anonymous-func
 import { removeUnreachableCode } from './transforms/remove-unreachable-code'
 import { removeUnusedCode } from './transforms/remove-unused-code'
 import { renameIdentifiers } from './transforms/rename-identifiers'
+import { reorderFunctionDeclarations } from './transforms/reorder-function-declarations'
 import { specialsToStrings } from './transforms/specials-to-strings'
 import { switchToIf } from './transforms/switch-to-if'
 import { ternaryToIf } from './transforms/ternary-to-if'
@@ -48,8 +52,6 @@ import type { StringGeneratorModeOption } from './utils/string-generator'
 
 const parserOptions: ParserOptions = { sourceType: 'unambiguous' }
 
-const PRESERVED_COMMENT_RE = /^!|@(?:license|preserve)\b|^#\s*source(?:Mapping)?URL=/iu
-
 const DEFAULT_STRING_GENERATOR_MODE: StringGeneratorModeOption = 'mangled'
 const DEFAULT_SEED = 0
 
@@ -76,11 +78,10 @@ const PREPARATION: readonly Phase[] = [
   ['dotToBracket', asBoolean(dotToBracket)],
 ]
 
-// These one-shot passes prepare the fixed point. Lexical declarations become
-// foldable function-scoped bindings, except at script top level where `var`
-// would create a global property. `argumentsToParameters` precedes parameter
-// renaming. Method demotion precedes extraction because any surviving
-// `ObjectMethod` makes extraction refuse the whole literal.
+// `constLetToVar` must precede the fixed point because folds need function-scoped
+// bindings. `argumentsToParameters` must precede parameter renaming.
+// `objectMethodToProperty` must precede extraction because one `ObjectMethod`
+// blocks the whole object literal.
 const PRE_LOOP: readonly ConfigurablePhase[] = [
   ['dropDebugger', dropDebugger],
   ['dropConsole', dropConsole],
@@ -124,15 +125,25 @@ const LOWERING: readonly ConfigurablePhase[] = [
   ['ternaryToIf', ternaryToIf],
 ]
 
-// Yodification and folding need raw numeric literals. Special-value lowering
-// comes next, then number lowering also handles the `1` created for `Infinity`.
+// `packDeclarationsIntoParameters` must precede declaration motion and merging.
+// `reorderFunctionDeclarations` follows `functionDeclarationToExpression`, so it
+// moves only declarations still needed for hoisting. `hoistVariables` must run
+// before `mergeVariableDeclarations`. `numbersToStrings` follows the fixed point,
+// yodification, and `specialsToStrings` because they need or create numbers.
 const POST_PROCESS: readonly ConfigurablePhase[] = [
   ['packDeclarationsIntoParameters', packDeclarationsIntoParameters],
+  ['reorderFunctionDeclarations', reorderFunctionDeclarations],
+  ['hoistVariables', hoistVariables],
+  ['mergeVariableDeclarations', mergeVariableDeclarations],
   ['yodifyConditions', yodifyConditions],
   ['specialsToStrings', specialsToStrings],
   ['numbersToStrings', numbersToStrings],
 ]
 
+// Conceal strings after every string-producing pass, but before renaming so the
+// generated vault bindings use the caller's name generator.
+const PROTECTION: readonly ConfigurablePhase[] = [['concealStrings', concealStrings]]
+
 // Renaming runs last because later transforms depend on recognizable bindings.
 const RENAME: readonly ConfigurablePhase[] = [['renameIdentifiers', renameIdentifiers]]
 
@@ -141,6 +152,19 @@ const RENAME: readonly ConfigurablePhase[] = [['renameIdentifiers', renameIdenti
 // every other rewrite, including renaming.
 const PACK: readonly ConfigurablePhase[] = [['pack', pack]]
 
+// Tests derive their all-transforms setup from this list. The phase tables remain
+// the only source of pipeline order.
+export const CONFIGURABLE_TRANSFORM_NAMES: readonly TransformName[] = [
+  ...BEFORE_PREPARATION,
+  ...PRE_LOOP,
+  ...FIXED_POINT,
+  ...LOWERING,
+  ...POST_PROCESS,
+  ...PROTECTION,
+  ...RENAME,
+  ...PACK,
+].map(([name]) => name)
+
 /** Parses, transforms, and prints JavaScript without mutating external state. */
 export function obfuscate(code: string, options: ObfuscatorOptions = {}): string {
   const log = options.verbose ? makeLogger() : null
@@ -184,6 +208,13 @@ export function obfuscate(code: string, options: ObfuscatorOptions = {}): string
     run(log, name, () => fn(ast, ctxFor(name, options, baseCtx)))
   }
 
+  for (const [name, fn] of PROTECTION) {
+    if (!isEnabled(name, options)) {
+      continue
+    }
+    run(log, name, () => fn(ast, ctxFor(name, options, baseCtx)))
+  }
+
   for (const [name, fn] of RENAME) {
     if (!isEnabled(name, options)) {
       continue
@@ -201,7 +232,13 @@ export function obfuscate(code: string, options: ObfuscatorOptions = {}): string
   return run(
     log,
     'generate',
-    () => generate(ast, { minified: options.minify ?? false, shouldPrintComment }).code,
+    () =>
+      generate(ast, {
+        comments: false,
+        minified: options.minify ?? false,
+        // `comments: false` still allows @license and @preserve.
+        shouldPrintComment: () => false,
+      }).code,
   )
 }
 
@@ -216,6 +253,10 @@ function ctxFor(
   options: ObfuscatorOptions,
   base: TransformContext,
 ): TransformContext {
+  if (name === 'concealStrings') {
+    const entry = options.transforms?.concealStrings
+    return entry && typeof entry === 'object' ? { ...base, concealStrings: entry } : base
+  }
   const entry = options.transforms?.[name]
   let context = base
   if (entry && typeof entry === 'object' && entry.stringGeneratorMode !== undefined) {
@@ -261,10 +302,6 @@ function asBoolean(fn: (ast: File) => unknown): TransformFn {
   }
 }
 
-function shouldPrintComment(value: string): boolean {
-  return PRESERVED_COMMENT_RE.test(value)
-}
-
 type Logger = <T>(name: string, fn: () => T) => T
 
 function run<T>(log: Logger | null, name: string, fn: () => T): T {

package/src/options.ts

@@ -21,6 +21,9 @@ export type TransformName =
   | 'collapseSingleUseTemps'
   | 'arrowToFunction'
   | 'functionDeclarationToExpression'
+  | 'reorderFunctionDeclarations'
+  | 'hoistVariables'
+  | 'mergeVariableDeclarations'
   | 'switchToIf'
   | 'forToWhile'
   | 'doWhileToWhile'
@@ -35,6 +38,7 @@ export type TransformName =
   | 'yodifyConditions'
   | 'specialsToStrings'
   | 'numbersToStrings'
+  | 'concealStrings'
   | 'mangleProperties'
   | 'renameIdentifiers'
   | 'pack'
@@ -61,8 +65,8 @@ export interface ManglePropertiesOptions {
   /** Custom property-name generator. It takes precedence over `stringGeneratorMode`. */
   nameGenerator?: PropertyNameGenerator
   /**
-   * Only names carrying `/*@__MANGLE_PROP__*\/` or `/*#__MANGLE_PROP__*\/` may
-   * be mangled. Default `false`.
+   * Mangle only names with an exact standalone `/*@__MANGLE_PROP__*\/` or
+   * `/*#__MANGLE_PROP__*\/` annotation. Default `false`.
    */
   onlyAnnotated?: boolean
   /** Only names already present in `cache` may be mangled. Default `false`. */
@@ -95,12 +99,25 @@ export interface PackOptions {
   stringGeneratorMode?: StringGeneratorModeOption
 }
 
+/** Options for the string vault generated by `concealStrings`. */
+export interface ConcealStringsOptions {
+  /** Cache each decoded string in its vault. Default `true`. */
+  cache?: boolean
+  /** Choose how much of the UTF-16 range pads each pool. Default `'regional'`. */
+  cover?: 'full' | 'regional' | 'used'
+  /** Reuse one vault entry for equal strings. Default `true`. */
+  deduplicate?: boolean
+  /** Use one program vault or a separate vault per function. Default `'program'`. */
+  scope?: 'function' | 'program'
+}
+
 type SimpleTransform = Exclude<
   TransformName,
-  'mangleProperties' | 'pack' | 'renameIdentifiers' | 'specialsToStrings'
+  'concealStrings' | 'mangleProperties' | 'pack' | 'renameIdentifiers' | 'specialsToStrings'
 >
 
 type TransformsMap = Partial<Record<SimpleTransform, boolean>> & {
+  concealStrings?: boolean | ConcealStringsOptions
   mangleProperties?: boolean | ManglePropertiesOptions
   pack?: boolean | PackOptions
   renameIdentifiers?: TransformEntry
@@ -129,6 +146,7 @@ export interface ObfuscatorOptions {
 
 // Resolved per-call defaults handed to every transform.
 export interface TransformContext {
+  concealStrings?: ConcealStringsOptions
   mangleProperties?: ManglePropertiesOptions
   pack?: PackOptions
   seed: number

package/src/preparation/expand-destructuring.ts

@@ -3,7 +3,7 @@ import type { NodePath, Scope } from '@babel/traverse'
 import * as t from '@babel/types'
 import type { File } from '@babel/types'
 
-import { enclosingScopeHasDirectEval, isInsideWith } from '../utils/ast'
+import { isInsideWith } from '../utils/ast'
 
 type Kind = t.VariableDeclaration['kind']
 
@@ -18,9 +18,9 @@ type BindingTarget = t.Identifier | t.ObjectPattern | t.ArrayPattern | t.Assignm
  * The source, computed keys, and getters keep their original evaluation counts.
  * Defaults compare against `void 0` because `undefined` can be shadowed.
  *
- * `with` and direct `eval` can expose synthesized names that Babel cannot see, so
- * those scopes are skipped. A `RequireObjectCoercible` guard runs before any
- * computed key, matching ObjectBindingPattern evaluation order.
+ * Patterns inside `with` stay untouched because an object property can capture
+ * a generated temporary. The `RequireObjectCoercible` guard runs before computed
+ * keys to preserve ObjectBindingPattern evaluation order.
  *
  * @example
  * // ◀️ before
@@ -42,8 +42,8 @@ const visitor = {
     if (typeof path.listKey !== 'string') {
       return
     }
-    // Babel cannot prove a generated name hidden from `with` or direct `eval`.
-    if (isInsideWith(path) || enclosingScopeHasDirectEval(path)) {
+    // A `with` property can capture the generated temporary.
+    if (isInsideWith(path)) {
       return
     }