From 4003d62a7d94ba9c2e937ecf1db8d2aad9598783 Mon Sep 17 00:00:00 2001
From: johanbeytell1 <107624055+johanbeytell1@users.noreply.github.com>
Date: Sun, 11 Oct 2026 14:52:26 +0000
Subject: [PATCH] Add CloakJS library, docs, tests, and minification workflow

Co-authored-by: arena-agent <297053741+arena-agent@users.noreply.github.com>
---
 .github/workflows/minify.yml |  37 +++
 README.md                    | 102 ++++++++
 cloakjs.js                   | 466 +++++++++++++++++++++++++++++++++++
 cloakjs.min.js               |   9 +
 test/cloakjs.test.js         | 120 +++++++++
 5 files changed, 734 insertions(+)
 create mode 100644 .github/workflows/minify.yml
 create mode 100644 README.md
 create mode 100644 cloakjs.js
 create mode 100644 cloakjs.min.js
 create mode 100644 test/cloakjs.test.js

diff --git a/.github/workflows/minify.yml b/.github/workflows/minify.yml
new file mode 100644
index 0000000..e316084
--- /dev/null
+++ b/.github/workflows/minify.yml
@@ -0,0 +1,37 @@
+name: Update minified CloakJS
+
+on:
+  push:
+    branches:
+      - '**'
+    paths:
+      - cloakjs.js
+
+permissions:
+  contents: write
+
+jobs:
+  minify:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+      - name: Minify and verify
+        run: |
+          node --test
+          npm exec --yes --package=terser@5.44.0 -- terser cloakjs.js --compress --mangle --comments '/^!/' --output cloakjs.min.js
+          node --check cloakjs.min.js
+          node -e 'const c = require("./cloakjs.min.js"); const source = require("./cloakjs.js"); if (c.VERSION !== source.VERSION || typeof c.obfuscate !== "function") process.exit(1); const vm = require("node:vm"); const logs = []; vm.runInNewContext(c.obfuscate("console.log(\"ok\")", "high"), { console: { log: x => logs.push(x) }, atob, TextDecoder }); if (logs[0] !== "ok") process.exit(1)'
+      - name: Commit minified file if changed
+        run: |
+          git add -- cloakjs.min.js
+          if git diff --cached --quiet; then
+            echo 'Minified file is already up to date.'
+            exit 0
+          fi
+          git config user.name 'github-actions[bot]'
+          git config user.email '41898282+github-actions[bot]@users.noreply.github.com'
+          git commit -m 'chore: update minified CloakJS'
+          git push origin "HEAD:${GITHUB_REF}"
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..ebe4f53
--- /dev/null
+++ b/README.md
@@ -0,0 +1,102 @@
+# CloakJS 1.2.0
+
+[![MIT License](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)
+[![GitHub stars](https://img.shields.io/github/stars/Infinitode/CloakJS.svg)](https://github.com/Infinitode/CloakJS/stargazers)
+[![GitHub issues](https://img.shields.io/github/issues/Infinitode/CloakJS.svg)](https://github.com/Infinitode/CloakJS/issues)
+[![jsDelivr monthly downloads](https://data.jsdelivr.com/v1/package/gh/Infinitode/CloakJS/badge?style=rounded)](https://www.jsdelivr.com/package/gh/Infinitode/CloakJS)
+
+CloakJS is a single-file, dependency-free JavaScript obfuscator for the browser and Node.js. It can rename some identifiers, encode strings and numbers, and optionally add a dispatcher and decoy statements. It returns JavaScript source code; it does **not** run the code for you.
+
+> [!IMPORTANT]
+> Obfuscation makes source less readable, **not secure**. Never put secrets, credentials or security-critical checks in client-side JavaScript. CloakJS uses a small lexer rather than a full JavaScript parser; test transformed output in the environment where it will run. It is intended for classic scripts, not ES modules, JSX or TypeScript.
+
+## Getting started
+
+Download [`cloakjs.js`](cloakjs.js) (readable) or [`cloakjs.min.js`](cloakjs.min.js) (minified), or load either from [jsDelivr](https://www.jsdelivr.com/package/gh/Infinitode/CloakJS) after the files are available on the repository's `main` branch:
+
+```html
+<!-- Production: minified version -->
+<script src="https://cdn.jsdelivr.net/gh/Infinitode/CloakJS@main/cloakjs.min.js"></script>
+<!-- For development, use https://cdn.jsdelivr.net/gh/Infinitode/CloakJS@main/cloakjs.js instead. -->
+<script>
+  const code = CloakJS.obfuscate('console.log("Hello from CloakJS!")', 'medium');
+  console.log(code); // JavaScript source as a string
+</script>
+```
+
+For reproducible deployments, replace `@main` with a published tag or commit hash (once available). The minified file is generated from `cloakjs.js` with Terser; there is no npm release to install. The badge above displays jsDelivr's live download information rather than a hard-coded count and may not show data until the files have been published on `main`.
+
+In Node.js (modern Node with `atob`, `TextEncoder` and `TextDecoder`):
+
+```js
+const CloakJS = require('./cloakjs.js');
+const result = CloakJS.obfuscateWithStats('console.log("hello")', 'high');
+console.log(result.code);
+console.log(result.stats, result.warnings);
+```
+
+The file is UMD: it also works as an AMD module, or as the global `CloakJS` in a normal `<script>` tag. The **generated** script needs `atob`, `Uint8Array` and `TextDecoder` when string encryption is enabled. If those APIs are unavailable, disable `stringEncryption` or provide polyfills.
+
+## API
+
+| Method / property | Description |
+| --- | --- |
+| `CloakJS.obfuscate(source, options?)` | Return the obfuscated JavaScript **string**. |
+| `CloakJS.obfuscateWithStats(source, options?)` | Return `{ code, stats, warnings }`. Check warnings before using the result. |
+| `CloakJS.measure(source, options?)` | Return `{ originalBytes, obfuscatedBytes, ratio }` (generates a fresh randomized output). |
+| `CloakJS.resolveOptions(options?)` | Return a copy of the chosen preset or defaults merged with your options. |
+| `CloakJS.presets`, `CloakJS.defaultOptions` | Available presets and default settings. |
+| `CloakJS.NAME`, `CloakJS.VERSION`, `CloakJS.BANNER` | Metadata. |
+
+`source` must be a string. `options` can be a preset name (`'off'`, `'low'`, `'medium'`, `'high'`, `'extreme'`), an options object, or omitted (defaults to the high settings). Unknown preset names throw an error. Output is randomized and may differ from call to call; `measure` will not necessarily describe a previous `obfuscate` result.
+
+The `stats` object contains `identifiersRenamed`, `stringsEncrypted`, `numbersEncoded`, `deadCodeBlocks`, `originalBytes`, `obfuscatedBytes`, and `ratio` (output bytes divided by input bytes). A ratio **greater than 1** means the output grew. The byte counts use UTF-8. `warnings` reports a skipped control-flow pass or a generated-script parse error; it does not guarantee behavioral equivalence.
+
+### Presets
+
+| Preset | Identifier mangling | String encryption | Number encoding | Control flow | Dead code | Self-defending prelude |
+| --- | :---: | :---: | :---: | :---: | :---: | :---: |
+| `off` | No | No | No | No | No | No |
+| `low` | Yes | No | No | No | No | No |
+| `medium` | Yes | Yes | Yes | No | No | No |
+| `high` | Yes | Yes | Yes | Yes | Yes | Yes |
+| `extreme` | Yes | Yes | Yes | Yes | Yes | Yes |
+
+`high` and `extreme` currently have the **same settings**. Every preset enables `compactOutput`. The default options are the high settings. A custom object overrides only the keys you supply:
+
+```js
+const result = CloakJS.obfuscateWithStats(
+  'var message = "hi"; console.log(message);',
+  { stringEncryption: false, controlFlowFlattening: false }
+);
+if (result.warnings.length) console.warn(result.warnings);
+console.log(result.code);
+```
+
+### Options and limitations
+
+- `identifierMangling`: renames selected declared identifiers when the lexer does not find a property/shorthand use. It can change externally visible names; do not use it on code whose bindings are part of a public API.
+- `stringEncryption`: stores eligible string literals as RC4-encoded UTF-8 bytes in a Base64 array and injects a runtime decoder. This is **obfuscation, not cryptographic protection**. Templates are left untouched, and some strings (such as object keys and directives) are skipped.
+- `numberEncoding`: rewrites some numeric literals as arithmetic or hexadecimal expressions. Small literals, BigInts and non-finite values are not rewritten.
+- `controlFlowFlattening`: uses a switch dispatcher only for a limited set of top-level expression statements. It skips statements that might change scope or behavior and reports this in `warnings`.
+- `deadCodeInjection`: adds unreachable decoy statements; this increases output size.
+- `selfDefending`: inserts an isolated prelude. It does **not** prevent debugging or tampering and does not freeze or alter host objects.
+- `compactOutput`: removes empty lines and trims whitespace; this is not a minifier.
+
+The transform is intentionally conservative in some places, but no textual/lexer-based transform can understand all JavaScript grammar, scopes, dynamic access, template expressions, regex/division ambiguity or automatic semicolon insertion. It may reject valid module syntax in the parse check (`new Function` only accepts scripts), or produce code that parses but behaves differently. Always run your own tests against the **generated** code, especially for complex syntax, strict mode, imports, public globals and code that uses `eval`/`with`. If you need production-grade semantic preservation, use a parser-based tool instead.
+
+## Testing and contributing
+
+Run the dependency-free Node test suite with `node --test`. To regenerate the minified file locally (build tool only; the library itself has no dependencies):
+
+```sh
+npm exec --yes --package=terser@5.44.0 -- terser cloakjs.js --compress --mangle --comments '/^!/' --output cloakjs.min.js
+```
+
+On pushes that change `cloakjs.js`, [the Ubuntu GitHub Actions workflow](.github/workflows/minify.yml) runs the tests, regenerates `cloakjs.min.js`, verifies it, and commits/pushes the file back to **the same branch** only if it changed. The workflow needs Actions to have permission to write repository contents; branch protection rules may prevent an automated push. Its generated-file-only commit does not retrigger the workflow because the trigger is limited to `cloakjs.js`.
+
+Contributions and bug reports are welcome via [GitHub issues](https://github.com/Infinitode/CloakJS/issues) and pull requests; include a small input/output reproduction and runtime details when reporting a transform bug.
+
+## License
+
+CloakJS is released under the [MIT License](LICENSE). Copyright (c) 2026 Infinitode.
diff --git a/cloakjs.js b/cloakjs.js
new file mode 100644
index 0000000..9922cd4
--- /dev/null
+++ b/cloakjs.js
@@ -0,0 +1,466 @@
+/*!
+ * CloakJS v1.2.0 — JavaScript Obfuscator
+ * https://github.com/Infinitode/CloakJS
+ *
+ * A single-file, dependency-free JavaScript obfuscator for browsers and Node.
+ * Load with a <script> tag to register global CloakJS, or require() in Node.
+ * MIT License — see LICENSE.
+ */
+(function (global, factory) {
+  if (typeof exports === "object" && typeof module !== "undefined") {
+    module.exports = factory();
+  } else if (typeof define === "function" && define.amd) {
+    define([], function () { return factory(); });
+  } else {
+    global.CloakJS = factory();
+  }
+})(typeof self !== "undefined" ? self : this, function () {
+  "use strict";
+
+  var VERSION = "1.2.0";
+  var NAME = "CloakJS";
+  var BANNER = NAME + " v" + VERSION + " — JavaScript obfuscator · MIT License";
+  var HEX = "0123456789abcdef";
+
+  var RESERVED = [
+    "__RESULT__", "__done",
+    "break", "case", "catch", "class", "const", "continue", "debugger",
+    "default", "delete", "do", "else", "enum", "export", "extends", "false",
+    "finally", "for", "function", "if", "import", "in", "instanceof", "new",
+    "null", "return", "super", "switch", "this", "throw", "true", "try",
+    "typeof", "var", "void", "while", "with", "yield", "let", "static",
+    "await", "async", "of", "as", "from",
+    "window", "document", "console", "globalThis", "Math", "Object", "Array",
+    "String", "Number", "Boolean", "JSON", "Date", "RegExp", "Error",
+    "Promise", "Map", "Set", "WeakMap", "WeakSet", "Symbol", "Reflect",
+    "Proxy", "Function", "arguments", "undefined", "Infinity", "NaN",
+    "parseInt", "parseFloat", "isNaN", "isFinite", "encodeURIComponent",
+    "decodeURIComponent", "encodeURI", "decodeURI", "eval", "setTimeout",
+    "setInterval", "clearTimeout", "clearInterval", "require", "module",
+    "exports", "__dirname", "__filename", "process"
+  ];
+  var RESERVED_SET = Object.create(null);
+  for (var _ri = 0; _ri < RESERVED.length; _ri++) RESERVED_SET[RESERVED[_ri]] = true;
+
+  var INTERNAL = [
+    "_0xa", "_0xdc", "_0xord", "_0xst", "_0xbt", "_0xba", "_0xbi", "_0xb1",
+    "_0xbn", "_0xbs", "_0xh", "_0xs", "_0xo", "_0xr", "_0xj", "_0xii",
+    "_0xl", "_0xk", "_0xt", "_0xv", "_0xpi", "_0xd", "_0xsd", "_0xf",
+    "_0xi", "_0xd1", "_0xd2", "_0xd4", "_0xd5", "_0xd6", "_0x9a", "_0xb", "_0xe"
+  ];
+  var INTERNAL_SET = Object.create(null);
+  for (var _ii = 0; _ii < INTERNAL.length; _ii++) INTERNAL_SET[INTERNAL[_ii]] = true;
+
+  var defaultOptions = {
+    identifierMangling: true,
+    stringEncryption: true,
+    numberEncoding: true,
+    controlFlowFlattening: true,
+    deadCodeInjection: true,
+    selfDefending: true,
+    compactOutput: true
+  };
+  var presets = {
+    off: { identifierMangling: false, stringEncryption: false, numberEncoding: false, controlFlowFlattening: false, deadCodeInjection: false, selfDefending: false, compactOutput: true },
+    low: { identifierMangling: true, stringEncryption: false, numberEncoding: false, controlFlowFlattening: false, deadCodeInjection: false, selfDefending: false, compactOutput: true },
+    medium: { identifierMangling: true, stringEncryption: true, numberEncoding: true, controlFlowFlattening: false, deadCodeInjection: false, selfDefending: false, compactOutput: true },
+    high: { identifierMangling: true, stringEncryption: true, numberEncoding: true, controlFlowFlattening: true, deadCodeInjection: true, selfDefending: true, compactOutput: true },
+    extreme: { identifierMangling: true, stringEncryption: true, numberEncoding: true, controlFlowFlattening: true, deadCodeInjection: true, selfDefending: true, compactOutput: true }
+  };
+
+  function randInt(max) { return Math.floor(Math.random() * max); }
+  function randomHexName(len) {
+    var s = "_0x";
+    for (var i = 0; i < len; i++) s += HEX[randInt(16)];
+    return s;
+  }
+  function randomUnicodeName(len) {
+    var s = "_";
+    for (var i = 0; i < len; i++) s += String.fromCharCode(0x4e00 + randInt(0x9fff - 0x4e00));
+    return s;
+  }
+  function pickName(pool, existing, len) {
+    len = len || 8;
+    var name, tries = 0;
+    do {
+      name = randInt(2) === 0 ? randomHexName(len) : randomUnicodeName(len);
+      if (++tries > 64) { len++; tries = 0; }
+    } while (pool[name] || RESERVED_SET[name] || existing[name] || INTERNAL_SET[name]);
+    pool[name] = true;
+    return name;
+  }
+  function byteLength(s) {
+    if (typeof TextEncoder !== "undefined") return new TextEncoder().encode(s).length;
+    // UTF-8 length without relying on Node's Buffer.
+    return unescape(encodeURIComponent(s)).length;
+  }
+  function toBase64(s) {
+    var hex = "";
+    for (var i = 0; i < s.length; i++) hex += ("0" + s.charCodeAt(i).toString(16)).slice(-2);
+    return base64Encode(hex);
+  }
+  // Works in browsers and in older Node versions without btoa.
+  function base64Encode(s) {
+    if (typeof btoa === "function") return btoa(s);
+    if (typeof Buffer !== "undefined") return Buffer.from(s, "latin1").toString("base64");
+    throw new Error("CloakJS: Base64 encoding is unavailable");
+  }
+  function rc4(key, data) {
+    var s = new Uint8Array(256), i, j, k;
+    for (i = 0; i < 256; i++) s[i] = i;
+    j = 0;
+    for (i = 0; i < 256; i++) {
+      j = (j + s[i] + key.charCodeAt(i % key.length)) & 0xff;
+      k = s[i]; s[i] = s[j]; s[j] = k;
+    }
+    i = 0; j = 0;
+    var out = [];
+    for (var n = 0; n < data.length; n++) {
+      i = (i + 1) & 0xff; j = (j + s[i]) & 0xff;
+      k = s[i]; s[i] = s[j]; s[j] = k;
+      out.push(data.charCodeAt(n) ^ s[(s[i] + s[j]) & 0xff]);
+    }
+    var result = "";
+    for (var start = 0; start < out.length; start += 8192) {
+      result += String.fromCharCode.apply(null, out.slice(start, start + 8192));
+    }
+    return result;
+  }
+
+  // A small lexer: preserve strings, templates, regexes and comments as opaque
+  // spans. This is deliberately not a full JavaScript parser.
+  function tokenize(code) {
+    var out = [], i = 0, last = null;
+    function emit(type, start, end) {
+      var token = { type: type, raw: code.slice(start, end), start: start, end: end };
+      out.push(token);
+      if (type !== "space" && type !== "comment") last = token;
+    }
+    function regexAllowed() {
+      if (!last) return true;
+      if (last.type === "word") return /^(return|throw|case|delete|void|typeof|instanceof|in|of|yield|await|else|do)$/.test(last.raw);
+      return last.type === "punct" && /^(=|\(|\[|\{|,|;|:|!|&|\||\?|\+|-|\*|~|\^|%|<|>)$/.test(last.raw);
+    }
+    while (i < code.length) {
+      var start = i, c = code[i];
+      if (/\s/.test(c)) {
+        while (i < code.length && /\s/.test(code[i])) i++;
+        emit("space", start, i);
+      } else if (c === "/" && code[i + 1] === "/") {
+        i = code.indexOf("\n", i + 2);
+        if (i < 0) i = code.length;
+        emit("comment", start, i);
+      } else if (c === "/" && code[i + 1] === "*") {
+        var end = code.indexOf("*/", i + 2);
+        i = end < 0 ? code.length : end + 2;
+        emit("comment", start, i);
+      } else if (c === "'" || c === '"' || c === "`") {
+        i++;
+        while (i < code.length) {
+          if (code[i] === "\\") { i += 2; continue; }
+          if (code[i++] === c) break;
+        }
+        emit(c === "`" ? "template" : "string", start, i);
+      } else if (c === "/" && regexAllowed()) {
+        i++;
+        var inClass = false;
+        while (i < code.length) {
+          if (code[i] === "\\") { i += 2; continue; }
+          if (code[i] === "[") inClass = true;
+          else if (code[i] === "]") inClass = false;
+          else if (code[i] === "/" && !inClass) { i++; break; }
+          i++;
+        }
+        while (i < code.length && /[a-z]/i.test(code[i])) i++;
+        emit("regex", start, i);
+      } else if (/[A-Za-z_$]/.test(c)) {
+        i++;
+        while (i < code.length && /[A-Za-z0-9_$]/.test(code[i])) i++;
+        emit("word", start, i);
+      } else if (/[0-9]/.test(c) || (c === "." && /[0-9]/.test(code[i + 1] || ""))) {
+        var match = /^(?:0[xX][\da-fA-F_]+|0[bB][01_]+|0[oO][0-7_]+|(?:\d[\d_]*(?:\.[\d_]*)?|\.[\d_]+)(?:[eE][+-]?[\d_]+)?)(n?)/.exec(code.slice(i));
+        i += match ? match[0].length : 1;
+        emit("number", start, i);
+      } else {
+        i++;
+        emit("punct", start, i);
+      }
+    }
+    return out;
+  }
+  function joinTokens(tokens) {
+    return tokens.map(function (t) { return t.raw; }).join("");
+  }
+  function significant(tokens, index, direction) {
+    for (var i = index + direction; i >= 0 && i < tokens.length; i += direction) {
+      if (tokens[i].type !== "space" && tokens[i].type !== "comment") return tokens[i];
+    }
+    return null;
+  }
+
+  // Only rename declared bindings with no member/property use anywhere in the
+  // input. A plain-text global replacement is not safe for JavaScript.
+  function mangleIdentifiers(code, opts) {
+    if (!opts.identifierMangling) return { code: code, map: {} };
+    var tokens = tokenize(code), bindings = Object.create(null), existing = Object.create(null);
+    var i, t, prev, next;
+    for (i = 0; i < tokens.length; i++) {
+      t = tokens[i];
+      if (t.type === "word") existing[t.raw] = true;
+    }
+    for (i = 0; i < tokens.length; i++) {
+      t = tokens[i];
+      if (t.type !== "word" || RESERVED_SET[t.raw] || INTERNAL_SET[t.raw] || t.raw.length === 1) continue;
+      prev = significant(tokens, i, -1);
+      if (prev && /^(var|let|const|function)$/.test(prev.raw)) bindings[t.raw] = true;
+    }
+    // If the spelling appears as a property, object key, shorthand, or is used
+    // by eval, don't rename it. This sacrifices coverage for safer output.
+    if (/\beval\s*\(|\bwith\s*\(/.test(code) || tokens.some(function (t) {
+      return t.type === "template" && t.raw.indexOf("${") !== -1;
+    })) bindings = Object.create(null);
+    for (i = 0; i < tokens.length; i++) {
+      t = tokens[i];
+      if (!bindings[t.raw]) continue;
+      prev = significant(tokens, i, -1);
+      next = significant(tokens, i, 1);
+      if ((prev && (prev.raw === "." || prev.raw === "?" && significant(tokens, i - 1, -1) && significant(tokens, i - 1, -1).raw === ".")) ||
+          (next && next.raw === ":") ||
+          (prev && (prev.raw === "{" || prev.raw === ",") && next &&
+           (next.raw === "," || next.raw === "}" || next.raw === "("))) {
+        delete bindings[t.raw];
+      }
+    }
+    var pool = Object.create(null), map = Object.create(null);
+    for (i = 0; i < INTERNAL.length; i++) pool[INTERNAL[i]] = true;
+    for (var id in bindings) map[id] = pickName(pool, existing, 8);
+    for (i = 0; i < tokens.length; i++) {
+      t = tokens[i];
+      if (t.type === "word" && map[t.raw]) t.raw = map[t.raw];
+    }
+    return { code: joinTokens(tokens), map: map };
+  }
+
+  function buildDecoder(key) {
+    return (
+      'var _0xdc=function(_0xpi){var _0xv=_0xa[_0xpi];' +
+      'if(_0xv===undefined)return _0xv;' +
+      'var _0xh=atob(_0xv),_0xs=new Uint8Array(_0xh.length>>1);' +
+      'for(var _0xbi=0;_0xbi<_0xs.length;_0xbi++)_0xs[_0xbi]=parseInt(_0xh.substr(_0xbi<<1,2),16);' +
+      'var _0xk="' + key + '",_0xr=new Uint8Array(256);' +
+      'for(var _0xi=0;_0xi<256;_0xi++)_0xr[_0xi]=_0xi;' +
+      'var _0xj=0;for(var _0xi=0;_0xi<256;_0xi++){' +
+      '_0xj=(_0xj+_0xr[_0xi]+_0xk.charCodeAt(_0xi%_0xk.length))&255;' +
+      'var _0xt=_0xr[_0xi];_0xr[_0xi]=_0xr[_0xj];_0xr[_0xj]=_0xt;}' +
+      'var _0xii=0;_0xj=0;var _0xo=new Uint8Array(_0xs.length);' +
+      'for(var _0xl=0;_0xl<_0xs.length;_0xl++){' +
+      '_0xii=(_0xii+1)&255;_0xj=(_0xj+_0xr[_0xii])&255;' +
+      'var _0xt=_0xr[_0xii];_0xr[_0xii]=_0xr[_0xj];_0xr[_0xj]=_0xt;' +
+      '_0xo[_0xl]=_0xs[_0xl]^_0xr[(_0xr[_0xii]+_0xr[_0xj])&255];}' +
+      'var _0xsd=new TextDecoder().decode(_0xo);return _0xsd;};'
+    );
+  }
+  function utf8Bytes(value) {
+    if (typeof TextEncoder !== "undefined") return new TextEncoder().encode(value);
+    var binary = unescape(encodeURIComponent(value)), bytes = [];
+    for (var i = 0; i < binary.length; i++) bytes.push(binary.charCodeAt(i));
+    return bytes;
+  }
+  function encryptStrings(code, opts) {
+    if (!opts.stringEncryption) return { code: code, count: 0 };
+    var tokens = tokenize(code), key = randomHexName(10), encrypted = [];
+    for (var i = 0; i < tokens.length; i++) {
+      var t = tokens[i];
+      if (t.type !== "string") continue;
+      // Do not turn directive prologues or property keys into expressions.
+      var prev = significant(tokens, i, -1), next = significant(tokens, i, 1);
+      if ((next && next.raw === ":") ||
+          (next && next.raw === "(" && prev &&
+           (prev.raw === "{" || prev.raw === "," || prev.raw === "get" || prev.raw === "set")) ||
+          ((!prev || prev.raw === "{" || prev.raw === ";") &&
+          (t.raw === '"use strict"' || t.raw === "'use strict'" ||
+           t.raw === '"use asm"' || t.raw === "'use asm'")) ||
+          (prev && (prev.raw === "from" || prev.raw === "import" || prev.raw === "export"))) continue;
+      var value;
+      try { value = Function('"use strict";return (' + t.raw + ')')(); } catch (e) { continue; }
+      if (!value) continue;
+      var bytes = utf8Bytes(value), binary = "";
+      for (var j = 0; j < bytes.length; j++) binary += String.fromCharCode(bytes[j]);
+      encrypted.push(toBase64(rc4(key, binary)));
+      t.raw = "_0xdc(" + (encrypted.length - 1) + ")";
+    }
+    if (!encrypted.length) return { code: code, count: 0 };
+    var arrayDecl = "var _0xa=[" + encrypted.map(function (e) { return '"' + e + '"'; }).join(",") + "];";
+    return { code: arrayDecl + buildDecoder(key) + joinTokens(tokens), count: encrypted.length };
+  }
+
+  function encodeNumberExpr(n) {
+    if (Number.isSafeInteger(n)) {
+      var mode = randInt(3);
+      var hex = n < 0 ? "-0x" + (-n).toString(16) : "0x" + n.toString(16);
+      if (mode === 0) return hex;
+      if (Math.abs(n) < 4096) {
+        if (mode === 1) { var a = randInt(64) + 1; return a + "+" + (n - a); }
+        var b = randInt(32) + 2, q = Math.round(n / b);
+        return b + "*" + q + "+" + (n - b * q);
+      }
+      return hex;
+    }
+    return String(n);
+  }
+  function encodeNumbers(code, opts) {
+    if (!opts.numberEncoding) return { code: code, count: 0 };
+    var tokens = tokenize(code), count = 0;
+    for (var i = 0; i < tokens.length; i++) {
+      var t = tokens[i];
+      if (t.type !== "number" || t.raw.length <= 1 || /n$/.test(t.raw)) continue;
+      var prev = significant(tokens, i, -1), next = significant(tokens, i, 1);
+      // Avoid property names, object keys, optional chaining and numeric method calls.
+      if ((next && (next.raw === ":" || next.raw === "." ||
+          next.raw === "(" && prev && (prev.raw === "{" || prev.raw === ","))) ||
+          (prev && prev.raw === ".")) continue;
+      var num = Number(t.raw);
+      if (!isFinite(num)) continue;
+      t.raw = "(" + encodeNumberExpr(num) + ")";
+      count++;
+    }
+    return { code: joinTokens(tokens), count: count };
+  }
+
+  var DECOYS = [
+    "if(false){void 1}",
+    "if(false){void 2}",
+    "if(false){void 3}"
+  ];
+  function makeDeadCodeStatements(realCount) {
+    var want = Math.min(DECOYS.length, Math.max(1, Math.ceil(realCount / 3)));
+    return DECOYS.slice(0, want);
+  }
+
+  // Split only at top-level semicolons. A newline is not necessarily a
+  // statement boundary (e.g. a multi-line expression or return value).
+  function splitTopLevel(code) {
+    var tokens = tokenize(code), out = [], start = 0, depth = 0;
+    for (var i = 0; i < tokens.length; i++) {
+      var t = tokens[i];
+      if (t.type !== "punct") continue;
+      if (t.raw === "{" || t.raw === "(" || t.raw === "[") depth++;
+      if (t.raw === "}" || t.raw === ")" || t.raw === "]") depth--;
+      if (t.raw === ";" && depth === 0) {
+        var part = code.slice(start, t.end).trim();
+        if (part) out.push(part);
+        start = t.end;
+      }
+    }
+    var tail = code.slice(start).trim();
+    if (tail) out.push(tail);
+    return out;
+  }
+  function flattenControlFlow(code, opts) {
+    // A dispatcher changes lexical scope, hoisting, directive prologues and
+    // completion values. Only use it for self-contained expression statements.
+    var stmts = splitTopLevel(code), deadCount = 0;
+    var safe = stmts.length > 1 && stmts.every(function (s) {
+      return /^(?:[A-Za-z_$][\w$]*\.)*[A-Za-z_$][\w$]*\s*\(/.test(s) &&
+        !/\b(?:return|throw|break|continue|await|yield|var|let|const|function|class|import|export)\b/.test(s);
+    });
+    if (!safe || !opts.controlFlowFlattening) {
+      if (opts.deadCodeInjection && stmts.length) {
+        var extras = makeDeadCodeStatements(stmts.length);
+        deadCount = extras.length;
+        return { code: code + "\n;" + extras.join(";"), deadCount: deadCount, flattened: false };
+      }
+      return { code: code, deadCount: 0, flattened: false };
+    }
+    if (opts.deadCodeInjection) {
+      var decoys = makeDeadCodeStatements(stmts.length);
+      deadCount = decoys.length;
+      stmts = stmts.concat(decoys);
+    }
+    // Scramble case layout, not execution order: side effects must stay ordered.
+    var indices = stmts.map(function (_, i) { return i; });
+    for (var i = indices.length - 1; i > 0; i--) {
+      var j = randInt(i + 1), tmp = indices[i]; indices[i] = indices[j]; indices[j] = tmp;
+    }
+    var cases = indices.map(function (k) {
+      return "case " + k + ":{" + stmts[k] + "}break;";
+    });
+    return {
+      code: "var _0xord=[" + stmts.map(function (_, k) { return k; }).join(",") + "];" +
+        "for(var _0xst=0;_0xst<_0xord.length;_0xst++){switch(_0xord[_0xst]){" + cases.join("") + "}}",
+      deadCount: deadCount,
+      flattened: true
+    };
+  }
+  function selfDefend(opts) {
+    // A harmless, isolated prelude. Freezing Object.prototype (as in the
+    // original sketch) mutates the host application and is intentionally avoided.
+    if (!opts.selfDefending) return "";
+    return '(function(){"use strict";void 0;})();';
+  }
+
+  function resolveOptions(options) {
+    if (options === undefined || options === null) return Object.assign({}, defaultOptions);
+    if (typeof options === "string") {
+      if (!Object.prototype.hasOwnProperty.call(presets, options)) {
+        throw new Error(NAME + ': unknown preset "' + options + '". Valid presets: ' + Object.keys(presets).join(", "));
+      }
+      return Object.assign({}, presets[options]);
+    }
+    if (typeof options !== "object" || Array.isArray(options)) throw new TypeError("CloakJS: options must be a preset name or an object");
+    return Object.assign({}, defaultOptions, options);
+  }
+  function obfuscateWithStats(source, options) {
+    if (typeof source !== "string") throw new TypeError("CloakJS: source must be a string");
+    var opts = resolveOptions(options), warnings = [];
+    // The injected decoder/dispatcher uses fixed helper names. Never shadow a
+    // user binding of the same spelling with those helpers.
+    if (tokenize(source).some(function (t) { return t.type === "word" && INTERNAL_SET[t.raw]; })) {
+      opts.stringEncryption = false;
+      opts.controlFlowFlattening = false;
+      opts.deadCodeInjection = false;
+      warnings.push("Generated helpers skipped because the source uses a reserved helper name.");
+    }
+    var stats = {
+      identifiersRenamed: 0, stringsEncrypted: 0, numbersEncoded: 0,
+      deadCodeBlocks: 0, originalBytes: byteLength(source), obfuscatedBytes: 0, ratio: 1
+    };
+    // Keep a top-level strict directive before all generated helpers/preludes.
+    var strict = /^(\s*(['"])use strict\2\s*;?)/.exec(source);
+    var code = strict ? source.slice(strict[0].length) : source;
+    var mangled = mangleIdentifiers(code, opts);
+    code = mangled.code;
+    stats.identifiersRenamed = Object.keys(mangled.map).length;
+    var flat = flattenControlFlow(code, opts);
+    code = flat.code;
+    stats.deadCodeBlocks = flat.deadCount;
+    if (opts.controlFlowFlattening && !flat.flattened && splitTopLevel(source).length > 1) {
+      warnings.push("Control-flow flattening skipped for statements that may change scope or behavior.");
+    }
+    var enc = encryptStrings(code, opts);
+    code = enc.code;
+    stats.stringsEncrypted = enc.count;
+    var nums = encodeNumbers(code, opts);
+    code = nums.code;
+    stats.numbersEncoded = nums.count;
+    code = (strict ? strict[0].trim().replace(/;?$/, ";") + "\n" : "") +
+      selfDefend(opts) + (opts.selfDefending ? "\n" : "") + code;
+    if (opts.compactOutput) code = code.replace(/\n\s*\n/g, "\n").trim();
+    try { new Function(code); } catch (e) {
+      warnings.push("Output failed to parse: " + (e && e.message ? e.message : String(e)));
+    }
+    stats.obfuscatedBytes = byteLength(code);
+    stats.ratio = stats.originalBytes > 0 ? stats.obfuscatedBytes / stats.originalBytes : 1;
+    return { code: code, stats: stats, warnings: warnings };
+  }
+  function obfuscate(source, options) { return obfuscateWithStats(source, options).code; }
+  function measure(source, options) {
+    var res = obfuscateWithStats(source, options);
+    return { originalBytes: res.stats.originalBytes, obfuscatedBytes: res.stats.obfuscatedBytes, ratio: res.stats.ratio };
+  }
+  return {
+    NAME: NAME, VERSION: VERSION, BANNER: BANNER, presets: presets,
+    defaultOptions: defaultOptions, resolveOptions: resolveOptions,
+    obfuscate: obfuscate, obfuscateWithStats: obfuscateWithStats, measure: measure
+  };
+});
diff --git a/cloakjs.min.js b/cloakjs.min.js
new file mode 100644
index 0000000..fc8ed99
--- /dev/null
+++ b/cloakjs.min.js
@@ -0,0 +1,9 @@
+/*!
+ * CloakJS v1.2.0 — JavaScript Obfuscator
+ * https://github.com/Infinitode/CloakJS
+ *
+ * A single-file, dependency-free JavaScript obfuscator for browsers and Node.
+ * Load with a <script> tag to register global CloakJS, or require() in Node.
+ * MIT License — see LICENSE.
+ */
+!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],function(){return t()}):e.CloakJS=t()}("undefined"!=typeof self?self:this,function(){"use strict";for(var e="1.2.0",t="CloakJS",n=t+" v"+e+" — JavaScript obfuscator · MIT License",r=["__RESULT__","__done","break","case","catch","class","const","continue","debugger","default","delete","do","else","enum","export","extends","false","finally","for","function","if","import","in","instanceof","new","null","return","super","switch","this","throw","true","try","typeof","var","void","while","with","yield","let","static","await","async","of","as","from","window","document","console","globalThis","Math","Object","Array","String","Number","Boolean","JSON","Date","RegExp","Error","Promise","Map","Set","WeakMap","WeakSet","Symbol","Reflect","Proxy","Function","arguments","undefined","Infinity","NaN","parseInt","parseFloat","isNaN","isFinite","encodeURIComponent","decodeURIComponent","encodeURI","decodeURI","eval","setTimeout","setInterval","clearTimeout","clearInterval","require","module","exports","__dirname","__filename","process"],o=Object.create(null),a=0;a<r.length;a++)o[r[a]]=!0;for(var i=["_0xa","_0xdc","_0xord","_0xst","_0xbt","_0xba","_0xbi","_0xb1","_0xbn","_0xbs","_0xh","_0xs","_0xo","_0xr","_0xj","_0xii","_0xl","_0xk","_0xt","_0xv","_0xpi","_0xd","_0xsd","_0xf","_0xi","_0xd1","_0xd2","_0xd4","_0xd5","_0xd6","_0x9a","_0xb","_0xe"],c=Object.create(null),s=0;s<i.length;s++)c[i[s]]=!0;var u={identifierMangling:!0,stringEncryption:!0,numberEncoding:!0,controlFlowFlattening:!0,deadCodeInjection:!0,selfDefending:!0,compactOutput:!0},f={off:{identifierMangling:!1,stringEncryption:!1,numberEncoding:!1,controlFlowFlattening:!1,deadCodeInjection:!1,selfDefending:!1,compactOutput:!0},low:{identifierMangling:!0,stringEncryption:!1,numberEncoding:!1,controlFlowFlattening:!1,deadCodeInjection:!1,selfDefending:!1,compactOutput:!0},medium:{identifierMangling:!0,stringEncryption:!0,numberEncoding:!0,controlFlowFlattening:!1,deadCodeInjection:!1,selfDefending:!1,compactOutput:!0},high:{identifierMangling:!0,stringEncryption:!0,numberEncoding:!0,controlFlowFlattening:!0,deadCodeInjection:!0,selfDefending:!0,compactOutput:!0},extreme:{identifierMangling:!0,stringEncryption:!0,numberEncoding:!0,controlFlowFlattening:!0,deadCodeInjection:!0,selfDefending:!0,compactOutput:!0}};function l(e){return Math.floor(Math.random()*e)}function d(e){for(var t="_0x",n=0;n<e;n++)t+="0123456789abcdef"[l(16)];return t}function x(e){for(var t="_",n=0;n<e;n++)t+=String.fromCharCode(19968+l(20991));return t}function _(e,t,n){n=n||8;var r,a=0;do{r=0===l(2)?d(n):x(n),++a>64&&(n++,a=0)}while(e[r]||o[r]||t[r]||c[r]);return e[r]=!0,r}function g(e){return"undefined"!=typeof TextEncoder?(new TextEncoder).encode(e).length:unescape(encodeURIComponent(e)).length}function p(e){for(var t="",n=0;n<e.length;n++)t+=("0"+e.charCodeAt(n).toString(16)).slice(-2);return function(e){if("function"==typeof btoa)return btoa(e);if("undefined"!=typeof Buffer)return Buffer.from(e,"latin1").toString("base64");throw new Error("CloakJS: Base64 encoding is unavailable")}(t)}function w(e,t){var n,r,o,a=new Uint8Array(256);for(n=0;n<256;n++)a[n]=n;for(r=0,n=0;n<256;n++)r=r+a[n]+e.charCodeAt(n%e.length)&255,o=a[n],a[n]=a[r],a[r]=o;n=0,r=0;for(var i=[],c=0;c<t.length;c++)r=r+a[n=n+1&255]&255,o=a[n],a[n]=a[r],a[r]=o,i.push(t.charCodeAt(c)^a[a[n]+a[r]&255]);for(var s="",u=0;u<i.length;u+=8192)s+=String.fromCharCode.apply(null,i.slice(u,u+8192));return s}function h(e){var t=[],n=0,r=null;function o(n,o,a){var i={type:n,raw:e.slice(o,a),start:o,end:a};t.push(i),"space"!==n&&"comment"!==n&&(r=i)}function a(){return!r||("word"===r.type?/^(return|throw|case|delete|void|typeof|instanceof|in|of|yield|await|else|do)$/.test(r.raw):"punct"===r.type&&/^(=|\(|\[|\{|,|;|:|!|&|\||\?|\+|-|\*|~|\^|%|<|>)$/.test(r.raw))}for(;n<e.length;){var i=n,c=e[n];if(/\s/.test(c)){for(;n<e.length&&/\s/.test(e[n]);)n++;o("space",i,n)}else if("/"===c&&"/"===e[n+1])(n=e.indexOf("\n",n+2))<0&&(n=e.length),o("comment",i,n);else if("/"===c&&"*"===e[n+1]){var s=e.indexOf("*/",n+2);o("comment",i,n=s<0?e.length:s+2)}else if("'"===c||'"'===c||"`"===c){for(n++;n<e.length;)if("\\"!==e[n]){if(e[n++]===c)break}else n+=2;o("`"===c?"template":"string",i,n)}else if("/"===c&&a()){n++;for(var u=!1;n<e.length;)if("\\"!==e[n]){if("["===e[n])u=!0;else if("]"===e[n])u=!1;else if("/"===e[n]&&!u){n++;break}n++}else n+=2;for(;n<e.length&&/[a-z]/i.test(e[n]);)n++;o("regex",i,n)}else if(/[A-Za-z_$]/.test(c)){for(n++;n<e.length&&/[A-Za-z0-9_$]/.test(e[n]);)n++;o("word",i,n)}else if(/[0-9]/.test(c)||"."===c&&/[0-9]/.test(e[n+1]||"")){var f=/^(?:0[xX][\da-fA-F_]+|0[bB][01_]+|0[oO][0-7_]+|(?:\d[\d_]*(?:\.[\d_]*)?|\.[\d_]+)(?:[eE][+-]?[\d_]+)?)(n?)/.exec(e.slice(n));o("number",i,n+=f?f[0].length:1)}else o("punct",i,++n)}return t}function v(e){return e.map(function(e){return e.raw}).join("")}function m(e,t,n){for(var r=t+n;r>=0&&r<e.length;r+=n)if("space"!==e[r].type&&"comment"!==e[r].type)return e[r];return null}function b(e){return'var _0xdc=function(_0xpi){var _0xv=_0xa[_0xpi];if(_0xv===undefined)return _0xv;var _0xh=atob(_0xv),_0xs=new Uint8Array(_0xh.length>>1);for(var _0xbi=0;_0xbi<_0xs.length;_0xbi++)_0xs[_0xbi]=parseInt(_0xh.substr(_0xbi<<1,2),16);var _0xk="'+e+'",_0xr=new Uint8Array(256);for(var _0xi=0;_0xi<256;_0xi++)_0xr[_0xi]=_0xi;var _0xj=0;for(var _0xi=0;_0xi<256;_0xi++){_0xj=(_0xj+_0xr[_0xi]+_0xk.charCodeAt(_0xi%_0xk.length))&255;var _0xt=_0xr[_0xi];_0xr[_0xi]=_0xr[_0xj];_0xr[_0xj]=_0xt;}var _0xii=0;_0xj=0;var _0xo=new Uint8Array(_0xs.length);for(var _0xl=0;_0xl<_0xs.length;_0xl++){_0xii=(_0xii+1)&255;_0xj=(_0xj+_0xr[_0xii])&255;var _0xt=_0xr[_0xii];_0xr[_0xii]=_0xr[_0xj];_0xr[_0xj]=_0xt;_0xo[_0xl]=_0xs[_0xl]^_0xr[(_0xr[_0xii]+_0xr[_0xj])&255];}var _0xsd=new TextDecoder().decode(_0xo);return _0xsd;};'}function y(e){if("undefined"!=typeof TextEncoder)return(new TextEncoder).encode(e);for(var t=unescape(encodeURIComponent(e)),n=[],r=0;r<t.length;r++)n.push(t.charCodeAt(r));return n}function j(e){if(Number.isSafeInteger(e)){var t=l(3),n=e<0?"-0x"+(-e).toString(16):"0x"+e.toString(16);if(0===t)return n;if(Math.abs(e)<4096){if(1===t){var r=l(64)+1;return r+"+"+(e-r)}var o=l(32)+2,a=Math.round(e/o);return o+"*"+a+"+"+(e-o*a)}return n}return String(e)}var C=["if(false){void 1}","if(false){void 2}","if(false){void 3}"];function E(e){var t=Math.min(C.length,Math.max(1,Math.ceil(e/3)));return C.slice(0,t)}function O(e){for(var t=h(e),n=[],r=0,o=0,a=0;a<t.length;a++){var i=t[a];if("punct"===i.type&&("{"!==i.raw&&"("!==i.raw&&"["!==i.raw||o++,"}"!==i.raw&&")"!==i.raw&&"]"!==i.raw||o--,";"===i.raw&&0===o)){var c=e.slice(r,i.end).trim();c&&n.push(c),r=i.end}}var s=e.slice(r).trim();return s&&n.push(s),n}function F(e){if(null==e)return Object.assign({},u);if("string"==typeof e){if(!Object.prototype.hasOwnProperty.call(f,e))throw new Error(t+': unknown preset "'+e+'". Valid presets: '+Object.keys(f).join(", "));return Object.assign({},f[e])}if("object"!=typeof e||Array.isArray(e))throw new TypeError("CloakJS: options must be a preset name or an object");return Object.assign({},u,e)}function S(e,t){if("string"!=typeof e)throw new TypeError("CloakJS: source must be a string");var n=F(t),r=[];h(e).some(function(e){return"word"===e.type&&c[e.raw]})&&(n.stringEncryption=!1,n.controlFlowFlattening=!1,n.deadCodeInjection=!1,r.push("Generated helpers skipped because the source uses a reserved helper name."));var a={identifiersRenamed:0,stringsEncrypted:0,numbersEncoded:0,deadCodeBlocks:0,originalBytes:g(e),obfuscatedBytes:0,ratio:1},s=/^(\s*(['"])use strict\2\s*;?)/.exec(e),u=s?e.slice(s[0].length):e,f=function(e,t){if(!t.identifierMangling)return{code:e,map:{}};var n,r,a,s,u=h(e),f=Object.create(null),l=Object.create(null);for(n=0;n<u.length;n++)"word"===(r=u[n]).type&&(l[r.raw]=!0);for(n=0;n<u.length;n++)"word"!==(r=u[n]).type||o[r.raw]||c[r.raw]||1===r.raw.length||(a=m(u,n,-1))&&/^(var|let|const|function)$/.test(a.raw)&&(f[r.raw]=!0);for((/\beval\s*\(|\bwith\s*\(/.test(e)||u.some(function(e){return"template"===e.type&&-1!==e.raw.indexOf("${")}))&&(f=Object.create(null)),n=0;n<u.length;n++)f[(r=u[n]).raw]&&(a=m(u,n,-1),s=m(u,n,1),(a&&("."===a.raw||"?"===a.raw&&m(u,n-1,-1)&&"."===m(u,n-1,-1).raw)||s&&":"===s.raw||a&&("{"===a.raw||","===a.raw)&&s&&(","===s.raw||"}"===s.raw||"("===s.raw))&&delete f[r.raw]);var d=Object.create(null),x=Object.create(null);for(n=0;n<i.length;n++)d[i[n]]=!0;for(var g in f)x[g]=_(d,l,8);for(n=0;n<u.length;n++)"word"===(r=u[n]).type&&x[r.raw]&&(r.raw=x[r.raw]);return{code:v(u),map:x}}(u,n);u=f.code,a.identifiersRenamed=Object.keys(f.map).length;var x=function(e,t){var n=O(e),r=0;if(!(n.length>1&&n.every(function(e){return/^(?:[A-Za-z_$][\w$]*\.)*[A-Za-z_$][\w$]*\s*\(/.test(e)&&!/\b(?:return|throw|break|continue|await|yield|var|let|const|function|class|import|export)\b/.test(e)})&&t.controlFlowFlattening)){if(t.deadCodeInjection&&n.length){var o=E(n.length);return r=o.length,{code:e+"\n;"+o.join(";"),deadCount:r,flattened:!1}}return{code:e,deadCount:0,flattened:!1}}if(t.deadCodeInjection){var a=E(n.length);r=a.length,n=n.concat(a)}for(var i=n.map(function(e,t){return t}),c=i.length-1;c>0;c--){var s=l(c+1),u=i[c];i[c]=i[s],i[s]=u}var f=i.map(function(e){return"case "+e+":{"+n[e]+"}break;"});return{code:"var _0xord=["+n.map(function(e,t){return t}).join(",")+"];for(var _0xst=0;_0xst<_0xord.length;_0xst++){switch(_0xord[_0xst]){"+f.join("")+"}}",deadCount:r,flattened:!0}}(u,n);u=x.code,a.deadCodeBlocks=x.deadCount,n.controlFlowFlattening&&!x.flattened&&O(e).length>1&&r.push("Control-flow flattening skipped for statements that may change scope or behavior.");var C=function(e,t){if(!t.stringEncryption)return{code:e,count:0};for(var n=h(e),r=d(10),o=[],a=0;a<n.length;a++){var i=n[a];if("string"===i.type){var c=m(n,a,-1),s=m(n,a,1);if(!(s&&":"===s.raw||s&&"("===s.raw&&c&&("{"===c.raw||","===c.raw||"get"===c.raw||"set"===c.raw))&&(c&&"{"!==c.raw&&";"!==c.raw||'"use strict"'!==i.raw&&"'use strict'"!==i.raw&&'"use asm"'!==i.raw&&"'use asm'"!==i.raw)&&(!c||"from"!==c.raw&&"import"!==c.raw&&"export"!==c.raw)){var u;try{u=Function('"use strict";return ('+i.raw+")")()}catch(e){continue}if(u){for(var f=y(u),l="",x=0;x<f.length;x++)l+=String.fromCharCode(f[x]);o.push(p(w(r,l))),i.raw="_0xdc("+(o.length-1)+")"}}}}return o.length?{code:"var _0xa=["+o.map(function(e){return'"'+e+'"'}).join(",")+"];"+b(r)+v(n),count:o.length}:{code:e,count:0}}(u,n);u=C.code,a.stringsEncrypted=C.count;var S=function(e,t){if(!t.numberEncoding)return{code:e,count:0};for(var n=h(e),r=0,o=0;o<n.length;o++){var a=n[o];if(!("number"!==a.type||a.raw.length<=1||/n$/.test(a.raw))){var i=m(n,o,-1),c=m(n,o,1);if(!(c&&(":"===c.raw||"."===c.raw||"("===c.raw&&i&&("{"===i.raw||","===i.raw))||i&&"."===i.raw)){var s=Number(a.raw);isFinite(s)&&(a.raw="("+j(s)+")",r++)}}}return{code:v(n),count:r}}(u,n);u=S.code,a.numbersEncoded=S.count,u=(s?s[0].trim().replace(/;?$/,";")+"\n":"")+function(e){return e.selfDefending?'(function(){"use strict";void 0;})();':""}(n)+(n.selfDefending?"\n":"")+u,n.compactOutput&&(u=u.replace(/\n\s*\n/g,"\n").trim());try{new Function(u)}catch(e){r.push("Output failed to parse: "+(e&&e.message?e.message:String(e)))}return a.obfuscatedBytes=g(u),a.ratio=a.originalBytes>0?a.obfuscatedBytes/a.originalBytes:1,{code:u,stats:a,warnings:r}}return{NAME:t,VERSION:e,BANNER:n,presets:f,defaultOptions:u,resolveOptions:F,obfuscate:function(e,t){return S(e,t).code},obfuscateWithStats:S,measure:function(e,t){var n=S(e,t);return{originalBytes:n.stats.originalBytes,obfuscatedBytes:n.stats.obfuscatedBytes,ratio:n.stats.ratio}}}});
\ No newline at end of file
diff --git a/test/cloakjs.test.js b/test/cloakjs.test.js
new file mode 100644
index 0000000..318666e
--- /dev/null
+++ b/test/cloakjs.test.js
@@ -0,0 +1,120 @@
+"use strict";
+
+const test = require("node:test");
+const assert = require("node:assert/strict");
+const vm = require("node:vm");
+const CloakJS = require("../cloakjs.js");
+
+function run(source, options) {
+  const logs = [];
+  const sandbox = { console: { log: (...values) => logs.push(values) }, TextDecoder, atob };
+  const result = CloakJS.obfuscateWithStats(source, options);
+  vm.runInNewContext(result.code, sandbox);
+  return { logs, result };
+}
+
+test("UMD browser global and CommonJS expose the same API", () => {
+  const fs = require("node:fs");
+  const browser = {};
+  vm.runInNewContext(fs.readFileSync(require.resolve("../cloakjs.js"), "utf8"), browser);
+  assert.equal(browser.CloakJS.VERSION, "1.2.0");
+  assert.equal(CloakJS.NAME, "CloakJS");
+  assert.equal(typeof CloakJS.obfuscate, "function");
+});
+
+test("every preset preserves the output of a small script", () => {
+  const source = 'var greeting = "héllo 😎"; console.log(greeting); console.log("second");';
+  for (const preset of Object.keys(CloakJS.presets)) {
+    for (let attempt = 0; attempt < 10; attempt++) {
+      const { logs, result } = run(source, preset);
+      assert.deepEqual(logs, [["héllo 😎"], ["second"]], preset);
+      assert.deepEqual(result.warnings.filter(w => /failed to parse/i.test(w)), []);
+      assert.equal(result.stats.originalBytes, Buffer.byteLength(source));
+      assert.equal(result.stats.obfuscatedBytes, Buffer.byteLength(result.code));
+    }
+  }
+});
+
+test("dispatcher preserves observable statement order", () => {
+  const source = 'console.log("first");console.log("second");console.log("third");';
+  for (let i = 0; i < 20; i++) {
+    const { logs, result } = run(source, "high");
+    assert.deepEqual(logs, [["first"], ["second"], ["third"]]);
+    assert.match(result.code, /switch\(_0xord\[_0xst\]\)/);
+    assert.ok(result.stats.deadCodeBlocks > 0);
+  }
+});
+
+test("escaped strings, object keys, regexes, templates, numbers and comments", () => {
+  const source = [
+    'var phrase = "line\\nnext";',
+    'var object = { phrase: 12, "named": 99 };',
+    'console.log(phrase, object.phrase, object["named"]);',
+    'console.log(/[0-9]+/.test("123"), `literal ${object.phrase}`);',
+    '// "commented out" 876',
+  ].join("\n");
+  const expected = [["line\nnext", 12, 99], [true, "literal 12"]];
+  for (const preset of Object.keys(CloakJS.presets)) {
+    const { logs } = run(source, preset);
+    assert.deepEqual(logs, expected, preset);
+  }
+});
+
+test("strict mode is kept before generated code", () => {
+  const source = '"use strict"; function check() { return this === undefined; } console.log(check());';
+  for (const preset of Object.keys(CloakJS.presets)) {
+    const { logs, result } = run(source, preset);
+    assert.deepEqual(logs, [[true]], preset);
+    assert.match(result.code, /^"use strict";/);
+  }
+});
+
+test("options and return types are documented accurately", () => {
+  assert.equal(typeof CloakJS.obfuscate('console.log("ok")', "medium"), "string");
+  assert.equal(CloakJS.obfuscate("var x=1;", "off"), "var x=1;");
+  assert.deepEqual(CloakJS.resolveOptions("low"), CloakJS.presets.low);
+  assert.equal(CloakJS.resolveOptions({ stringEncryption: false }).stringEncryption, false);
+  assert.throws(() => CloakJS.resolveOptions("__proto__"), /unknown preset/);
+  assert.throws(() => CloakJS.obfuscate(5), TypeError);
+  const result = CloakJS.obfuscateWithStats('console.log("ok")', "medium");
+  assert.equal(typeof result.code, "string");
+  assert.equal(typeof result.stats.stringsEncrypted, "number");
+  assert.ok(Array.isArray(result.warnings));
+  const measured = CloakJS.measure('console.log("ok")', "medium");
+  assert.ok(measured.obfuscatedBytes >= measured.originalBytes);
+  assert.equal(measured.ratio, measured.obfuscatedBytes / measured.originalBytes);
+});
+
+test("object methods and numeric keys are not turned into expressions", () => {
+  const source = 'var named = 7; var obj = { named() { return named; }, "other"() { return 8; }, 42() { return 9; } }; console.log(obj.named(), obj.other(), obj[42]());';
+  for (const preset of Object.keys(CloakJS.presets)) {
+    const { logs, result } = run(source, preset);
+    assert.deepEqual(logs, [[7, 8, 9]], preset);
+    assert.ok(!result.warnings.some(w => /failed to parse/.test(w)));
+  }
+});
+
+test("numeric separators and BigInt literals remain intact", () => {
+  const source = 'console.log(10_000, 123n, 0xFF_FF);';
+  const { logs, result } = run(source, "high");
+  assert.deepEqual(logs, [[10000, 123n, 65535]]);
+  assert.ok(!result.warnings.some(w => /failed to parse/.test(w)));
+});
+
+test("reserved helper bindings never collide with injected declarations", () => {
+  const { logs, result } = run('var _0xa = 5; console.log("safe", _0xa);', "high");
+  assert.deepEqual(logs, [["safe", 5]]);
+  assert.match(result.warnings.join(" "), /helper name/);
+  assert.equal(result.stats.stringsEncrypted, 0);
+});
+
+test("strict directive without a semicolon remains a directive", () => {
+  const source = '"use strict"\nfunction check(){return this === undefined;} console.log(check());';
+  const { logs } = run(source, "high");
+  assert.deepEqual(logs, [[true]]);
+});
+
+test("a generated script does not freeze the host prototype", () => {
+  run('console.log("safe")', "high");
+  assert.equal(Object.isFrozen(Object.prototype), false);
+});