oxc-debolb 0.1.0__tar.gz

oxc_debolb-0.1.0/.github/workflows/CI.yml

@@ -0,0 +1,136 @@
+name: CI
+
+# Build abi3 (cp39+) wheels for Linux / Windows / macOS and an sdist, then
+# publish to PyPI when a version tag (v*) is pushed.
+#
+# Publishing reads the API token from the GitHub repository secret
+# `PYPI_API_TOKEN` (Settings → Secrets and variables → Actions → New secret).
+# The token is NEVER stored in this file. Trusted Publishing (OIDC) is the
+# recommended alternative — see the notes at the bottom of this file.
+
+on:
+  push:
+    branches: [main, master]
+    tags: ["v*"]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  linux:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        target: [x86_64, aarch64]
+        manylinux: [auto, musllinux_1_2]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Build wheels
+        uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.target }}
+          # abi3-py39 → one wheel covers CPython 3.9+. manylinux: auto picks a
+          # broadly-compatible glibc baseline; musllinux_1_2 covers Alpine /
+          # musl distros; aarch64 is cross-built via QEMU under the hood.
+          args: --release --out dist
+          sccache: "true"
+          manylinux: ${{ matrix.manylinux }}
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-linux-${{ matrix.target }}-${{ matrix.manylinux }}
+          path: dist
+
+  windows:
+    runs-on: windows-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        target: [x64]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+          architecture: ${{ matrix.target }}
+      - name: Build wheels
+        uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.target }}
+          args: --release --out dist
+          sccache: "true"
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-windows-${{ matrix.target }}
+          path: dist
+
+  macos:
+    runs-on: macos-14   # Apple Silicon; cross-builds x86_64 too
+    strategy:
+      fail-fast: false
+      matrix:
+        target: [aarch64, x86_64]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Build wheels
+        uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.target }}
+          args: --release --out dist
+          sccache: "true"
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-macos-${{ matrix.target }}
+          path: dist
+
+  sdist:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Build sdist
+        uses: PyO3/maturin-action@v1
+        with:
+          command: sdist
+          args: --out dist
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-sdist
+          path: dist
+
+  release:
+    name: Publish to PyPI
+    runs-on: ubuntu-latest
+    needs: [linux, windows, macos, sdist]
+    environment: pypi
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          pattern: wheels-*
+          merge-multiple: true
+          path: dist
+      - name: Publish to PyPI
+        uses: PyO3/maturin-action@v1
+        env:
+          MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
+        with:
+          command: upload
+          args: --non-interactive --skip-existing dist/*
+
+# ── Recommended: Trusted Publishing (OIDC) instead of a long-lived token ──
+# 1. On PyPI: project → Settings → Publishing → add a GitHub Actions publisher
+#    (owner/repo = your repo, workflow = CI.yml, environment = pypi).
+# 2. Replace the "Publish to PyPI" step above with:
+#       permissions:
+#         id-token: write          # add at the job level
+#       - uses: actions/download-artifact@v4
+#         with: { pattern: wheels-*, merge-multiple: true, path: dist }
+#       - uses: pypa/gh-action-pypi-publish@release/v1
+#    No PYPI_API_TOKEN secret is then needed.

oxc_debolb-0.1.0/.gitignore

@@ -0,0 +1,9 @@
+/target/
+__pycache__/
+*.pyc
+.venv/
+*.egg-info/
+dist/
+build/
+node_modules
+.idea

oxc_debolb-0.1.0/.idea/.gitignore

@@ -0,0 +1,8 @@
+# 默认忽略的文件
+/shelf/
+/workspace.xml
+# 基于编辑器的 HTTP 客户端请求
+/httpRequests/
+# Datasource local storage ignored files
+/dataSources/
+/dataSources.local.xml

oxc_debolb-0.1.0/.idea/misc.xml

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="Black">
+    <option name="sdkName" value="jscore" />
+  </component>
+</project>

oxc_debolb-0.1.0/.idea/modules.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="ProjectModuleManager">
+    <modules>
+      <module fileurl="file://$PROJECT_DIR$/.idea/swc_debolb.iml" filepath="$PROJECT_DIR$/.idea/swc_debolb.iml" />
+    </modules>
+  </component>
+</project>

oxc_debolb-0.1.0/.idea/swc_debolb.iml

@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<module type="EMPTY_MODULE" version="4">
+  <component name="FacetManager">
+    <facet type="Python" name="Python facet">
+      <configuration sdkName="jscore" />
+    </facet>
+  </component>
+  <component name="NewModuleRootManager">
+    <content url="file://$MODULE_DIR$">
+      <sourceFolder url="file://$MODULE_DIR$/examples" isTestSource="false" />
+      <sourceFolder url="file://$MODULE_DIR$/src" isTestSource="false" />
+      <sourceFolder url="file://$MODULE_DIR$/tests" isTestSource="true" />
+      <sourceFolder url="file://$MODULE_DIR$/python" isTestSource="false" />
+      <excludeFolder url="file://$MODULE_DIR$/target" />
+    </content>
+    <orderEntry type="inheritedJdk" />
+    <orderEntry type="sourceFolder" forTests="false" />
+    <orderEntry type="library" name="jscore interpreter library" level="application" />
+  </component>
+</module>

oxc_debolb-0.1.0/.idea/vcs.xml

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="VcsDirectoryMappings">
+    <mapping directory="" vcs="Git" />
+  </component>
+</project>

oxc_debolb-0.1.0/AGENTS.md

@@ -0,0 +1,34 @@
+# Repository Guidelines
+
+## Project Structure & Module Organization
+
+This repository builds `oxc_debolb`, a Rust + Python JavaScript deobfuscation tool. Core Rust code lives in `src/`; transformation passes are under `src/transforms/`, with helpers in `parser_utils.rs`, `hash.rs`, and `eval.rs`. Python package code lives in `python/oxc_debolb/`; `pipeline.py` coordinates the flow, `runtime.py` handles JavaScript execution, and `cli.py` provides `python -m oxc_debolb.cli`. Rust examples are in `examples/`. Python reference utilities are in `tests/`; `_bench/` contains performance probes. Root-level `test_code*.js`, `*.out.js`, and `sbsd_*.js` files are fixtures or generated outputs.
+
+## Build, Test, and Development Commands
+
+- `cargo build`: compile the Rust crate and PyO3 library.
+- `cargo build --release`: build optimized artifacts.
+- `cargo test`: run Rust unit tests, including hash and evaluator checks.
+- `cargo fmt`: format Rust code before submitting changes.
+- `maturin develop`: install the Python extension into the active virtual environment.
+- `python -m oxc_debolb.cli input.js output.js`: run the Python CLI.
+- `python example.py`: run the local fixture example.
+- `cargo run --example const_calc_smoke`: run a focused Rust example.
+
+Run `npm install` only when Babel dependencies from `package.json` are missing.
+
+## Coding Style & Naming Conventions
+
+Use Rust 2021 idioms and keep modules small, pass-oriented, and named in `snake_case`. Format Rust with `cargo fmt`; avoid broad rewrites of AST passes. Python uses 4-space indentation, type hints where useful, and `snake_case` functions. Keep generated fixtures separate from source changes unless intentional.
+
+## Testing Guidelines
+
+Add Rust unit tests near the implementation in `mod tests` blocks when changing parser, hash, eval, or transform behavior. Use `cargo test` as the default validation. `tests/dzd_oracle.py` generates reference hash values through `iv8`; it is a support script, not a normal test runner. For end-to-end checks, run `maturin develop`, then `python example.py` or the CLI.
+
+## Commit & Pull Request Guidelines
+
+This repository currently has no Git commit history, so no existing convention can be inferred. Use concise imperative subjects such as `fix sequence resolver edge case` or `add decrypt collector test`. Pull requests should describe the affected transform or Python pipeline step, list commands run, and note regenerated fixture outputs. Include before/after snippets only when tests do not make behavior clear.
+
+## Agent-Specific Instructions
+
+Do not edit `target/`, `node_modules/`, or generated archive/output artifacts unless asked. Preserve large JavaScript fixtures unless they are directly part of the task, and keep changes scoped to the relevant Rust pass or Python pipeline layer.