Syferit Engineering Documentation

import { withSyferit } from '@syferit/next';

/** @type {import('next').NextConfig} */
const nextConfig = {
  reactStrictMode: true,
};

// Automatically activates during production build
export default withSyferit(nextConfig, {
  domainProfile: 'saas',
  preset: 'hardened',
  seed: null // Auto CSPRNG seed per build
});

import { defineConfig } from 'vite';
import react from '@vitejs/plugin-react';
import { syferit } from '@syferit/vite-plugin';

export default defineConfig({
  plugins: [
    react(),
    syferit({
      mode: 'production',
      domainProfile: 'fintech'
    })
  ]
});

const { SyferitWebpackPlugin } = require('@syferit/webpack-plugin');

module.exports = {
  mode: 'production',
  plugins: [
    new SyferitWebpackPlugin({
      preset: 'hardened',
      domainProfile: 'fintech',
      include: [/\.js$/],
      exclude: [/node_modules/]
    })
  ]
};

# Output protected files to a separate directory (Recommended)
npx @syferit/cli protect ./dist -o ./dist-protected --preset hardened

# Protect in-place with a domain profile
npx @syferit/cli protect ./dist -d fintech --preset maximum

# Use a deterministic build seed for reproducible CI polymorphism
npx @syferit/cli protect ./dist -s 0x4f22c19e

name: Production Deploy
on:
  push:
    branches: [main]

jobs:
  build-and-protect:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 22

      - name: Install & Build
        run: |
          npm ci
          npm run build

      - name: Syferit Code Protection Pass
        run: npx @syferit/cli protect ./dist --mode production --preset hardened

      - name: Deploy to Cloud
        run: npm run deploy

# Protect compiled Wasm distribution and JavaScript glue bindings (wasm-pack or Emscripten output)
npx @syferit/cli protect ./pkg --target wasm --out ./pkg-hardened --preset maximum

# Protect Python application tree before freezing or Docker distribution
npx @syferit/cli protect ./backend/src --target python --out ./backend/build --preset hardened

# Transform native sources before compilation
npx @syferit/cli protect ./src-native --out ./build-protected --preset hardened

# Compile the hardened sources with standard tooling
clang++ -O3 ./build-protected/main.cpp -o ./bin/release

# In package.json electron-builder build pipeline:
"scripts": {
  "build": "vite build && npx @syferit/cli protect ./dist --domain security --preset maximum",
  "package": "npm run build && electron-builder"
}

export interface SyferitOptions {
  /** Defense level applied to AST control flows */
  preset?: 'standard' | 'hardened' | 'maximum'; // default: 'hardened'

  /** Domain-tailored invariant profile */
  domainProfile?: 'saas' | 'fintech' | 'security' | 'gaming'; // default: 'saas'

  /** Fixed seed for reproducible builds. Pass null for CSPRNG entropy per build */
  seed?: string | null; // default: null

  /** Array of file patterns to include */
  include?: (string | RegExp)[]; // default: [/\.m?[jt]sx?$/]

  /** Array of file patterns to exclude */
  exclude?: (string | RegExp)[]; // default: [/node_modules/]

  /** Execution mode. 'development' automatically bypasses transforms to preserve HMR */
  mode?: 'development' | 'production'; // default: process.env.NODE_ENV

  /** Embed statutory trade secret attestation (18 U.S.C. § 1836) */
  legalAttestation?: boolean; // default: true

  /** Suppress non-critical compiler warnings */
  silent?: boolean; // default: false
}