@wakaru/cli

Turn production JavaScript — bundled, transpiled, minified — back into readable modules.

Quick Start

npx @wakaru/cli input.js -o output.js               # decompile a file
npx @wakaru/cli bundle.js --unpack -o out/          # unpack and decompile a bundle
npx @wakaru/cli dist/ --unpack -o out/              # scan a bundle output directory

Install

npm install -g @wakaru/cli@latest
wakaru input.js -o output.js

What It Does

• Splits webpack 4/5 bundles (including supported Vercel ncc output), esbuild, Bun, Browserify (including Cocos Creator 2.x), Metro, Closure ModuleManager, SystemJS, and AMD/UMD, plus scope-hoisted Rollup/Vite output.
• Extracts Bun standalone executables (PE, Mach-O, ELF) and unpacks their embedded JavaScript.
• Recovers readable JavaScript from transpiler and minifier output.
• Supports source maps for name recovery and output mappings.
• Offers minimal, standard, and aggressive rewrite levels.
• Deliberately not a deobfuscator — obfuscated input should have the obfuscation stripped with a dedicated tool first.

CLI Reference

Decompile a single file

wakaru input.js -o output.js
cat input.js | wakaru > output.js

Without -o, output goes to stdout. Stdin is supported for single-file decompilation.

Unpack bundles and chunks

wakaru bundle.js --unpack -o out/
wakaru bundle.js --unpack --raw -o out/
wakaru bundle.js --unpack=strict -o out/
wakaru bundle.js --unpack=inspect -o out/
wakaru entry.js chunk.js --unpack -o out/
wakaru dist/ --unpack -o out/
wakaru ./compiled-app --unpack -o out/

• --unpack splits detected bundles and then decompiles each module.
• --unpack --raw writes extracted modules before the readability pipeline.
• --unpack=strict uses structural bundle detection without heuristic fallback.
• --unpack=inspect keeps finer module boundaries for static inspection.
• Directory inputs are recursive and detect-only; skipped files are not copied.
• A Bun standalone executable input has its embedded JavaScript entries sent through the same unpack pipeline.

Extract a Bun standalone executable

wakaru bun extract ./compiled-app -o extracted/

Writes every embedded file record — JavaScript, assets, and binaries — to extracted/files/, with a manifest.json mapping original Bun paths to safe output paths. Extraction only writes the files; it does not decompile or execute them.

Formatter

wakaru input.js --formatter -o output.js
wakaru bundle.js --unpack --formatter -o out/

--formatter runs a final formatting pass after decompilation. It is off by default.

Source maps

wakaru input.js --source-map input.js.map -o output.js
wakaru input.js --emit-source-map -o output.js

--source-map improves name recovery from the original source map. --emit-source-map writes a .map file that maps the decompiled output back to the input.

Extract original sources

wakaru extract input.js.map -o src/

Writes files embedded in a source map's sourcesContent to disk.

Rewrite levels and cleanup

wakaru input.js --level minimal
wakaru input.js --level standard
wakaru input.js --level aggressive
wakaru input.js --dce

• minimal keeps to high-confidence, low-risk rewrites.
• standard is the default readability-oriented mode.
• aggressive enables more speculative generated-code recovery.
• --dce opts into a full dead-code reachability sweep.

JSON, diagnostics, and profiling

wakaru bundle.js --unpack --json -o out/
echo 'var a=1;' | wakaru --json
wakaru input.js --diagnostics
wakaru input.js --profile trace.json
wakaru input.js --profile trace.json --profile-rules

• --json writes structured JSON to stdout.
• --diagnostics reports post-transform warnings to stderr.
• --profile writes a Chrome trace file.
• --profile-rules includes per-rule timings in the trace.

Overwrite protection

Wakaru refuses to overwrite existing files unless --force is passed.

Links

• Website: https://wakarujs.com
• Playground (runs in your browser): https://wakarujs.com/playground
• Repository: https://github.com/pionxzh/wakaru
• Documentation: https://github.com/pionxzh/wakaru#readme
• Releases: https://github.com/pionxzh/wakaru/releases