@axiam/opaque-wasm 1.0.0-alpha32

package/README.md

@@ -0,0 +1,60 @@
+# axiam-opaque-wasm
+
+WebAssembly build of AXIAM's OPAQUE (RFC 9807) client, published to npm as
+`@axiam/opaque-wasm` and consumed by the TypeScript SDK and the React admin UI.
+
+## Why this exists
+
+`sdks/CONTRACT.md` §23.1 forbids an SDK from implementing OPAQUE itself. SRP was
+hand-written eleven times because it is modular arithmetic and every language
+has a bignum; OPAQUE needs an oblivious PRF, `hash_to_curve`,
+`expand_message_xmd`, an envelope construction and a three-message AKE. So there
+is one implementation — `crates/axiam-opaque` — and this crate is how JavaScript
+reaches it.
+
+## Building
+
+```bash
+wasm-pack build --target web --release crates/axiam-opaque-wasm
+```
+
+Not a Cargo workspace member on purpose: it only ever builds for `wasm32`, and
+including it would make a plain `cargo test` at the repository root try to
+compile `wasm-bindgen` for the host.
+
+## Usage
+
+```js
+import init, { OpaqueLogin, OpaqueKsf } from "@axiam/opaque-wasm";
+
+await init();
+
+// 1. Blind the password and start the exchange.
+const login = new OpaqueLogin(password);
+const started = await postJson("/api/v1/auth/opaque/login/start", {
+  org_slug, tenant_slug, username_or_email, ke1: login.ke1,
+});
+
+// 2. Build the KSF from what the SERVER named — never from local defaults.
+const ksf = started.ksf === "argon2id"
+  ? OpaqueKsf.argon2id(started.memory_kib, started.iterations, started.parallelism)
+  : OpaqueKsf.scrypt(started.log_n, started.r, started.p);
+
+// 3. Open the envelope. A throw here means wrong password, unknown account,
+//    or a server that does not hold the record — indistinguishable by design,
+//    and nothing further may be posted.
+const finished = login.finish(password, started.ke2, ksf);
+
+await postJson("/api/v1/auth/opaque/login/finish", {
+  opaque_session: started.opaque_session,
+  ke3: finished.ke3,
+});
+```
+
+`login` is **consumed** by `finish`: a second call throws rather than reusing
+one OPRF blind across two exchanges.
+
+## What this does not do
+
+It performs no HTTP. Endpoint selection, cookie handling and error mapping
+belong to the SDK or application that calls it — see CONTRACT §23.4 and §23.5.

package/axiam_opaque.d.ts

@@ -0,0 +1,212 @@
+/* tslint:disable */
+/* eslint-disable */
+
+/**
+ * Key-stretching parameters, as named by the server.
+ *
+ * A caller MUST build this from the `ksf` fields of a `register/start` or
+ * `login/start` response rather than from its own configuration: a credential
+ * enrolled under one cost keeps working after a tenant raises its policy, so a
+ * client that guessed would derive a different randomized password and fail
+ * against a record that is perfectly good.
+ */
+export class OpaqueKsf {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Argon2id parameters, range-checked per CONTRACT §23.4 rule 4.
+     */
+    static argon2id(memory_kib: number, iterations: number, parallelism: number): OpaqueKsf;
+    /**
+     * scrypt parameters, range-checked per CONTRACT §23.4 rule 4.
+     */
+    static scrypt(log_n: number, r: number, p: number): OpaqueKsf;
+}
+
+/**
+ * In-flight login state.
+ */
+export class OpaqueLogin {
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Open the envelope and produce `KE3`. **Consumes** this object.
+     *
+     * A thrown error here is the *whole* of the client's authentication check,
+     * and it covers both halves of the mutual authentication: the envelope
+     * only opens under the right password, and `KE2`'s MAC only verifies if
+     * the server actually holds the record. Per CONTRACT §23.4 rule 7 the
+     * caller MUST NOT post anything to `login/finish` after it throws.
+     */
+    finish(password: string, ke2: string, ksf: OpaqueKsf): OpaqueLoginResult;
+    /**
+     * Blind the password and generate the client's ephemeral share.
+     */
+    constructor(password: string);
+    /**
+     * Hex `KE1`, to post to `/auth/opaque/login/start`.
+     */
+    readonly ke1: string;
+}
+
+/**
+ * The result of a completed login.
+ */
+export class OpaqueLoginResult {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Hex `export_key`, identical to the enrolment's for the same password.
+     */
+    readonly exportKey: string;
+    /**
+     * Hex `KE3`, to post to `/auth/opaque/login/finish`.
+     */
+    readonly ke3: string;
+    /**
+     * Hex mutually authenticated session key. AXIAM issues ordinary session
+     * cookies rather than binding anything to this.
+     */
+    readonly sessionKey: string;
+}
+
+/**
+ * In-flight registration state.
+ */
+export class OpaqueRegistration {
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Unblind, stretch and seal the envelope. **Consumes** this object.
+     */
+    finish(password: string, registration_response: string, ksf: OpaqueKsf): OpaqueRegistrationResult;
+    /**
+     * Blind the password. The `request` getter carries the hex
+     * `RegistrationRequest` to post to `/auth/opaque/register/start`.
+     */
+    constructor(password: string);
+    /**
+     * Hex `RegistrationRequest`.
+     */
+    readonly request: string;
+}
+
+/**
+ * The result of a completed enrolment.
+ */
+export class OpaqueRegistrationResult {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Hex `export_key`. AXIAM does not use it and no endpoint accepts it; it
+     * is surfaced because it cannot be re-derived later without the password.
+     */
+    readonly exportKey: string;
+    /**
+     * Hex `RegistrationRecord`, to embed in the request body's `opaque` object.
+     */
+    readonly record: string;
+}
+
+/**
+ * Run a complete OPAQUE registration and login inside this module, for
+ * release smoke-testing.
+ *
+ * # Why this is exported
+ *
+ * An old `binaryen` silently miscompiles WebAssembly built from this crate:
+ * `wasm-pack` reports success and the elliptic-curve arithmetic inside is
+ * wrong. "It built" is therefore not evidence that the artifact works, and the
+ * failure would surface as users who cannot log in.
+ *
+ * There is no fixed input to replay against — OPAQUE's blind is generated
+ * inside the protocol and is not injectable — so the available check is to
+ * perform both halves of a real exchange and assert they agree. A miscompiled
+ * scalar multiplication produces an envelope that will not open, which is
+ * exactly what this catches.
+ *
+ * Returns `true` on success and throws on failure, so a smoke test can assert
+ * on either.
+ *
+ * **Never call this in application code.** It talks to no server and
+ * authenticates nobody.
+ */
+export function __conformanceRoundTrip(): boolean;
+
+/**
+ * Non-zero when this build can perform OPAQUE.
+ *
+ * Always `true` — if the module instantiated, it works. It exists so a
+ * TypeScript `opaqueAvailable()` (CONTRACT §23.2) has something to call after
+ * a successful `init()`, and so a build whose WASM failed to load can answer
+ * the same question with `false` without a special case.
+ */
+export function opaqueAvailable(): boolean;
+
+/**
+ * Install the panic hook so a Rust panic surfaces as a stack trace in the
+ * browser console rather than `unreachable executed`.
+ *
+ * Idempotent; a caller may invoke it once at module init.
+ */
+export function start(): void;
+
+export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembly.Module;
+
+export interface InitOutput {
+    readonly memory: WebAssembly.Memory;
+    readonly __conformanceRoundTrip: () => [number, number, number];
+    readonly __wbg_opaqueksf_free: (a: number, b: number) => void;
+    readonly __wbg_opaquelogin_free: (a: number, b: number) => void;
+    readonly __wbg_opaqueloginresult_free: (a: number, b: number) => void;
+    readonly __wbg_opaqueregistration_free: (a: number, b: number) => void;
+    readonly __wbg_opaqueregistrationresult_free: (a: number, b: number) => void;
+    readonly opaqueAvailable: () => number;
+    readonly opaqueksf_argon2id: (a: number, b: number, c: number) => [number, number, number];
+    readonly opaqueksf_scrypt: (a: number, b: number, c: number) => [number, number, number];
+    readonly opaquelogin_finish: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
+    readonly opaquelogin_ke1: (a: number) => [number, number];
+    readonly opaquelogin_new: (a: number, b: number) => [number, number, number];
+    readonly opaqueloginresult_exportKey: (a: number) => [number, number];
+    readonly opaqueloginresult_ke3: (a: number) => [number, number];
+    readonly opaqueloginresult_sessionKey: (a: number) => [number, number];
+    readonly opaqueregistration_finish: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
+    readonly opaqueregistration_new: (a: number, b: number) => [number, number, number];
+    readonly opaqueregistration_request: (a: number) => [number, number];
+    readonly opaqueregistrationresult_exportKey: (a: number) => [number, number];
+    readonly opaqueregistrationresult_record: (a: number) => [number, number];
+    readonly start: () => void;
+    readonly __wbindgen_exn_store: (a: number) => void;
+    readonly __externref_table_alloc: () => number;
+    readonly __wbindgen_externrefs: WebAssembly.Table;
+    readonly __wbindgen_free: (a: number, b: number, c: number) => void;
+    readonly __wbindgen_malloc: (a: number, b: number) => number;
+    readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
+    readonly __externref_table_dealloc: (a: number) => void;
+    readonly __wbindgen_start: () => void;
+}
+
+export type SyncInitInput = BufferSource | WebAssembly.Module;
+
+/**
+ * Instantiates the given `module`, which can either be bytes or
+ * a precompiled `WebAssembly.Module`.
+ *
+ * @param {{ module: SyncInitInput }} module - Passing `SyncInitInput` directly is deprecated.
+ *
+ * @returns {InitOutput}
+ */
+export function initSync(module: { module: SyncInitInput } | SyncInitInput): InitOutput;
+
+/**
+ * If `module_or_path` is {RequestInfo} or {URL}, makes a request and
+ * for everything else, calls `WebAssembly.instantiate` directly.
+ *
+ * @param {{ module_or_path: InitInput | Promise<InitInput> }} module_or_path - Passing `InitInput` directly is deprecated.
+ *
+ * @returns {Promise<InitOutput>}
+ */
+export default function __wbg_init (module_or_path?: { module_or_path: InitInput | Promise<InitInput> } | InitInput | Promise<InitInput>): Promise<InitOutput>;

package/axiam_opaque.js

@@ -0,0 +1,760 @@
+/* @ts-self-types="./axiam_opaque.d.ts" */
+
+/**
+ * Key-stretching parameters, as named by the server.
+ *
+ * A caller MUST build this from the `ksf` fields of a `register/start` or
+ * `login/start` response rather than from its own configuration: a credential
+ * enrolled under one cost keeps working after a tenant raises its policy, so a
+ * client that guessed would derive a different randomized password and fail
+ * against a record that is perfectly good.
+ */
+export class OpaqueKsf {
+    static __wrap(ptr) {
+        const obj = Object.create(OpaqueKsf.prototype);
+        obj.__wbg_ptr = ptr;
+        OpaqueKsfFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        OpaqueKsfFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_opaqueksf_free(ptr, 0);
+    }
+    /**
+     * Argon2id parameters, range-checked per CONTRACT §23.4 rule 4.
+     * @param {number} memory_kib
+     * @param {number} iterations
+     * @param {number} parallelism
+     * @returns {OpaqueKsf}
+     */
+    static argon2id(memory_kib, iterations, parallelism) {
+        const ret = wasm.opaqueksf_argon2id(memory_kib, iterations, parallelism);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return OpaqueKsf.__wrap(ret[0]);
+    }
+    /**
+     * scrypt parameters, range-checked per CONTRACT §23.4 rule 4.
+     * @param {number} log_n
+     * @param {number} r
+     * @param {number} p
+     * @returns {OpaqueKsf}
+     */
+    static scrypt(log_n, r, p) {
+        const ret = wasm.opaqueksf_scrypt(log_n, r, p);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return OpaqueKsf.__wrap(ret[0]);
+    }
+}
+if (Symbol.dispose) OpaqueKsf.prototype[Symbol.dispose] = OpaqueKsf.prototype.free;
+
+/**
+ * In-flight login state.
+ */
+export class OpaqueLogin {
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        OpaqueLoginFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_opaquelogin_free(ptr, 0);
+    }
+    /**
+     * Open the envelope and produce `KE3`. **Consumes** this object.
+     *
+     * A thrown error here is the *whole* of the client's authentication check,
+     * and it covers both halves of the mutual authentication: the envelope
+     * only opens under the right password, and `KE2`'s MAC only verifies if
+     * the server actually holds the record. Per CONTRACT §23.4 rule 7 the
+     * caller MUST NOT post anything to `login/finish` after it throws.
+     * @param {string} password
+     * @param {string} ke2
+     * @param {OpaqueKsf} ksf
+     * @returns {OpaqueLoginResult}
+     */
+    finish(password, ke2, ksf) {
+        const ptr = this.__destroy_into_raw();
+        const ptr0 = passStringToWasm0(password, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(ke2, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        _assertClass(ksf, OpaqueKsf);
+        const ret = wasm.opaquelogin_finish(ptr, ptr0, len0, ptr1, len1, ksf.__wbg_ptr);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return OpaqueLoginResult.__wrap(ret[0]);
+    }
+    /**
+     * Hex `KE1`, to post to `/auth/opaque/login/start`.
+     * @returns {string}
+     */
+    get ke1() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.opaquelogin_ke1(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * Blind the password and generate the client's ephemeral share.
+     * @param {string} password
+     */
+    constructor(password) {
+        const ptr0 = passStringToWasm0(password, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.opaquelogin_new(ptr0, len0);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        this.__wbg_ptr = ret[0];
+        OpaqueLoginFinalization.register(this, this.__wbg_ptr, this);
+        return this;
+    }
+}
+if (Symbol.dispose) OpaqueLogin.prototype[Symbol.dispose] = OpaqueLogin.prototype.free;
+
+/**
+ * The result of a completed login.
+ */
+export class OpaqueLoginResult {
+    static __wrap(ptr) {
+        const obj = Object.create(OpaqueLoginResult.prototype);
+        obj.__wbg_ptr = ptr;
+        OpaqueLoginResultFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        OpaqueLoginResultFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_opaqueloginresult_free(ptr, 0);
+    }
+    /**
+     * Hex `export_key`, identical to the enrolment's for the same password.
+     * @returns {string}
+     */
+    get exportKey() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.opaqueloginresult_exportKey(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * Hex `KE3`, to post to `/auth/opaque/login/finish`.
+     * @returns {string}
+     */
+    get ke3() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.opaqueloginresult_ke3(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * Hex mutually authenticated session key. AXIAM issues ordinary session
+     * cookies rather than binding anything to this.
+     * @returns {string}
+     */
+    get sessionKey() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.opaqueloginresult_sessionKey(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+}
+if (Symbol.dispose) OpaqueLoginResult.prototype[Symbol.dispose] = OpaqueLoginResult.prototype.free;
+
+/**
+ * In-flight registration state.
+ */
+export class OpaqueRegistration {
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        OpaqueRegistrationFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_opaqueregistration_free(ptr, 0);
+    }
+    /**
+     * Unblind, stretch and seal the envelope. **Consumes** this object.
+     * @param {string} password
+     * @param {string} registration_response
+     * @param {OpaqueKsf} ksf
+     * @returns {OpaqueRegistrationResult}
+     */
+    finish(password, registration_response, ksf) {
+        const ptr = this.__destroy_into_raw();
+        const ptr0 = passStringToWasm0(password, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(registration_response, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        _assertClass(ksf, OpaqueKsf);
+        const ret = wasm.opaqueregistration_finish(ptr, ptr0, len0, ptr1, len1, ksf.__wbg_ptr);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return OpaqueRegistrationResult.__wrap(ret[0]);
+    }
+    /**
+     * Blind the password. The `request` getter carries the hex
+     * `RegistrationRequest` to post to `/auth/opaque/register/start`.
+     * @param {string} password
+     */
+    constructor(password) {
+        const ptr0 = passStringToWasm0(password, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.opaqueregistration_new(ptr0, len0);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        this.__wbg_ptr = ret[0];
+        OpaqueRegistrationFinalization.register(this, this.__wbg_ptr, this);
+        return this;
+    }
+    /**
+     * Hex `RegistrationRequest`.
+     * @returns {string}
+     */
+    get request() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.opaqueregistration_request(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+}
+if (Symbol.dispose) OpaqueRegistration.prototype[Symbol.dispose] = OpaqueRegistration.prototype.free;
+
+/**
+ * The result of a completed enrolment.
+ */
+export class OpaqueRegistrationResult {
+    static __wrap(ptr) {
+        const obj = Object.create(OpaqueRegistrationResult.prototype);
+        obj.__wbg_ptr = ptr;
+        OpaqueRegistrationResultFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        OpaqueRegistrationResultFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_opaqueregistrationresult_free(ptr, 0);
+    }
+    /**
+     * Hex `export_key`. AXIAM does not use it and no endpoint accepts it; it
+     * is surfaced because it cannot be re-derived later without the password.
+     * @returns {string}
+     */
+    get exportKey() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.opaqueregistrationresult_exportKey(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * Hex `RegistrationRecord`, to embed in the request body's `opaque` object.
+     * @returns {string}
+     */
+    get record() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.opaqueregistrationresult_record(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+}
+if (Symbol.dispose) OpaqueRegistrationResult.prototype[Symbol.dispose] = OpaqueRegistrationResult.prototype.free;
+
+/**
+ * Run a complete OPAQUE registration and login inside this module, for
+ * release smoke-testing.
+ *
+ * # Why this is exported
+ *
+ * An old `binaryen` silently miscompiles WebAssembly built from this crate:
+ * `wasm-pack` reports success and the elliptic-curve arithmetic inside is
+ * wrong. "It built" is therefore not evidence that the artifact works, and the
+ * failure would surface as users who cannot log in.
+ *
+ * There is no fixed input to replay against — OPAQUE's blind is generated
+ * inside the protocol and is not injectable — so the available check is to
+ * perform both halves of a real exchange and assert they agree. A miscompiled
+ * scalar multiplication produces an envelope that will not open, which is
+ * exactly what this catches.
+ *
+ * Returns `true` on success and throws on failure, so a smoke test can assert
+ * on either.
+ *
+ * **Never call this in application code.** It talks to no server and
+ * authenticates nobody.
+ * @returns {boolean}
+ */
+export function __conformanceRoundTrip() {
+    const ret = wasm.__conformanceRoundTrip();
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return ret[0] !== 0;
+}
+
+/**
+ * Non-zero when this build can perform OPAQUE.
+ *
+ * Always `true` — if the module instantiated, it works. It exists so a
+ * TypeScript `opaqueAvailable()` (CONTRACT §23.2) has something to call after
+ * a successful `init()`, and so a build whose WASM failed to load can answer
+ * the same question with `false` without a special case.
+ * @returns {boolean}
+ */
+export function opaqueAvailable() {
+    const ret = wasm.opaqueAvailable();
+    return ret !== 0;
+}
+
+/**
+ * Install the panic hook so a Rust panic surfaces as a stack trace in the
+ * browser console rather than `unreachable executed`.
+ *
+ * Idempotent; a caller may invoke it once at module init.
+ */
+export function start() {
+    wasm.start();
+}
+function __wbg_get_imports() {
+    const import0 = {
+        __proto__: null,
+        __wbg_Error_408e67f47ca7b58b: function(arg0, arg1) {
+            const ret = Error(getStringFromWasm0(arg0, arg1));
+            return ret;
+        },
+        __wbg___wbindgen_is_function_5e4570eb24ffa122: function(arg0) {
+            const ret = typeof(arg0) === 'function';
+            return ret;
+        },
+        __wbg___wbindgen_is_object_a2790eb24c211ea0: function(arg0) {
+            const val = arg0;
+            const ret = typeof(val) === 'object' && val !== null;
+            return ret;
+        },
+        __wbg___wbindgen_is_string_e6f02f0ea5f20a32: function(arg0) {
+            const ret = typeof(arg0) === 'string';
+            return ret;
+        },
+        __wbg___wbindgen_is_undefined_6cff064c44e0d823: function(arg0) {
+            const ret = arg0 === undefined;
+            return ret;
+        },
+        __wbg___wbindgen_throw_bb96b2010945f0bc: function(arg0, arg1) {
+            throw new Error(getStringFromWasm0(arg0, arg1));
+        },
+        __wbg_call_35dba3c747ad7521: function() { return handleError(function (arg0, arg1, arg2) {
+            const ret = arg0.call(arg1, arg2);
+            return ret;
+        }, arguments); },
+        __wbg_crypto_38df2bab126b63dc: function(arg0) {
+            const ret = arg0.crypto;
+            return ret;
+        },
+        __wbg_error_757e9472f8410341: function(arg0, arg1) {
+            let deferred0_0;
+            let deferred0_1;
+            try {
+                deferred0_0 = arg0;
+                deferred0_1 = arg1;
+                console.error(getStringFromWasm0(arg0, arg1));
+            } finally {
+                wasm.__wbindgen_free(deferred0_0, deferred0_1, 1);
+            }
+        },
+        __wbg_getRandomValues_c44a50d8cfdaebeb: function() { return handleError(function (arg0, arg1) {
+            arg0.getRandomValues(arg1);
+        }, arguments); },
+        __wbg_length_36bd29c6848c2144: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
+        __wbg_msCrypto_bd5a034af96bcba6: function(arg0) {
+            const ret = arg0.msCrypto;
+            return ret;
+        },
+        __wbg_new_227d7c05414eb861: function() {
+            const ret = new Error();
+            return ret;
+        },
+        __wbg_new_with_length_3ffc1c56427c525c: function(arg0) {
+            const ret = new Uint8Array(arg0 >>> 0);
+            return ret;
+        },
+        __wbg_node_84ea875411254db1: function(arg0) {
+            const ret = arg0.node;
+            return ret;
+        },
+        __wbg_process_44c7a14e11e9f69e: function(arg0) {
+            const ret = arg0.process;
+            return ret;
+        },
+        __wbg_prototypesetcall_de8e0d9553586985: function(arg0, arg1, arg2) {
+            Uint8Array.prototype.set.call(getArrayU8FromWasm0(arg0, arg1), arg2);
+        },
+        __wbg_randomFillSync_6c25eac9869eb53c: function() { return handleError(function (arg0, arg1) {
+            arg0.randomFillSync(arg1);
+        }, arguments); },
+        __wbg_require_b4edbdcf3e2a1ef0: function() { return handleError(function () {
+            const ret = module.require;
+            return ret;
+        }, arguments); },
+        __wbg_stack_3b0d974bbf31e44f: function(arg0, arg1) {
+            const ret = arg1.stack;
+            const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            const len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg_static_accessor_GLOBAL_THIS_466428f93b4eaa76: function() {
+            const ret = typeof globalThis === 'undefined' ? null : globalThis;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_static_accessor_GLOBAL_c7aea38d4de089bc: function() {
+            const ret = typeof global === 'undefined' ? null : global;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_static_accessor_SELF_42d4fae05e59267a: function() {
+            const ret = typeof self === 'undefined' ? null : self;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_static_accessor_WINDOW_e0db14a0eba6a812: function() {
+            const ret = typeof window === 'undefined' ? null : window;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_subarray_a4cc58201c7359fd: function(arg0, arg1, arg2) {
+            const ret = arg0.subarray(arg1 >>> 0, arg2 >>> 0);
+            return ret;
+        },
+        __wbg_versions_276b2795b1c6a219: function(arg0) {
+            const ret = arg0.versions;
+            return ret;
+        },
+        __wbindgen_cast_0000000000000001: function(arg0, arg1) {
+            // Cast intrinsic for `Ref(Slice(U8)) -> NamedExternref("Uint8Array")`.
+            const ret = getArrayU8FromWasm0(arg0, arg1);
+            return ret;
+        },
+        __wbindgen_cast_0000000000000002: function(arg0, arg1) {
+            // Cast intrinsic for `Ref(String) -> Externref`.
+            const ret = getStringFromWasm0(arg0, arg1);
+            return ret;
+        },
+        __wbindgen_init_externref_table: function() {
+            const table = wasm.__wbindgen_externrefs;
+            const offset = table.grow(4);
+            table.set(0, undefined);
+            table.set(offset + 0, undefined);
+            table.set(offset + 1, null);
+            table.set(offset + 2, true);
+            table.set(offset + 3, false);
+        },
+    };
+    return {
+        __proto__: null,
+        "./axiam_opaque_bg.js": import0,
+    };
+}
+
+const OpaqueKsfFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_opaqueksf_free(ptr, 1));
+const OpaqueLoginFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_opaquelogin_free(ptr, 1));
+const OpaqueLoginResultFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_opaqueloginresult_free(ptr, 1));
+const OpaqueRegistrationFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_opaqueregistration_free(ptr, 1));
+const OpaqueRegistrationResultFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_opaqueregistrationresult_free(ptr, 1));
+
+function addToExternrefTable0(obj) {
+    const idx = wasm.__externref_table_alloc();
+    wasm.__wbindgen_externrefs.set(idx, obj);
+    return idx;
+}
+
+function _assertClass(instance, klass) {
+    if (!(instance instanceof klass)) {
+        throw new Error(`expected instance of ${klass.name}`);
+    }
+}
+
+function getArrayU8FromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);
+}
+
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
+
+function getStringFromWasm0(ptr, len) {
+    return decodeText(ptr >>> 0, len);
+}
+
+let cachedUint8ArrayMemory0 = null;
+function getUint8ArrayMemory0() {
+    if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
+        cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
+    }
+    return cachedUint8ArrayMemory0;
+}
+
+function handleError(f, args) {
+    try {
+        return f.apply(this, args);
+    } catch (e) {
+        const idx = addToExternrefTable0(e);
+        wasm.__wbindgen_exn_store(idx);
+    }
+}
+
+function isLikeNone(x) {
+    return x === undefined || x === null;
+}
+
+function passStringToWasm0(arg, malloc, realloc) {
+    if (realloc === undefined) {
+        const buf = cachedTextEncoder.encode(arg);
+        const ptr = malloc(buf.length, 1) >>> 0;
+        getUint8ArrayMemory0().subarray(ptr, ptr + buf.length).set(buf);
+        WASM_VECTOR_LEN = buf.length;
+        return ptr;
+    }
+
+    let len = arg.length;
+    let ptr = malloc(len, 1) >>> 0;
+
+    const mem = getUint8ArrayMemory0();
+
+    let offset = 0;
+
+    for (; offset < len; offset++) {
+        const code = arg.charCodeAt(offset);
+        if (code > 0x7F) break;
+        mem[ptr + offset] = code;
+    }
+    if (offset !== len) {
+        if (offset !== 0) {
+            arg = arg.slice(offset);
+        }
+        ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
+        const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
+        const ret = cachedTextEncoder.encodeInto(arg, view);
+
+        offset += ret.written;
+        ptr = realloc(ptr, len, offset, 1) >>> 0;
+    }
+
+    WASM_VECTOR_LEN = offset;
+    return ptr;
+}
+
+function takeFromExternrefTable0(idx) {
+    const value = wasm.__wbindgen_externrefs.get(idx);
+    wasm.__externref_table_dealloc(idx);
+    return value;
+}
+
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+cachedTextDecoder.decode();
+const MAX_SAFARI_DECODE_BYTES = 2146435072;
+let numBytesDecoded = 0;
+function decodeText(ptr, len) {
+    numBytesDecoded += len;
+    if (numBytesDecoded >= MAX_SAFARI_DECODE_BYTES) {
+        cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+        cachedTextDecoder.decode();
+        numBytesDecoded = len;
+    }
+    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
+}
+
+const cachedTextEncoder = new TextEncoder();
+
+if (!('encodeInto' in cachedTextEncoder)) {
+    cachedTextEncoder.encodeInto = function (arg, view) {
+        const buf = cachedTextEncoder.encode(arg);
+        view.set(buf);
+        return {
+            read: arg.length,
+            written: buf.length
+        };
+    };
+}
+
+let WASM_VECTOR_LEN = 0;
+
+let wasmModule, wasmInstance, wasm;
+function __wbg_finalize_init(instance, module) {
+    wasmInstance = instance;
+    wasm = instance.exports;
+    wasmModule = module;
+    cachedDataViewMemory0 = null;
+    cachedUint8ArrayMemory0 = null;
+    wasm.__wbindgen_start();
+    return wasm;
+}
+
+async function __wbg_load(module, imports) {
+    if (typeof Response === 'function' && module instanceof Response) {
+        if (!module.ok) {
+            throw new Error(`failed to fetch Wasm: ${module.status} ${module.statusText} fetching '${module.url}'`);
+        }
+
+        if (typeof WebAssembly.instantiateStreaming === 'function') {
+            try {
+                return await WebAssembly.instantiateStreaming(module, imports);
+            } catch (e) {
+                const validResponse = expectedResponseType(module.type);
+
+                if (validResponse && module.headers.get('Content-Type') !== 'application/wasm') {
+                    console.warn("`WebAssembly.instantiateStreaming` failed because your server does not serve Wasm with `application/wasm` MIME type. Falling back to `WebAssembly.instantiate` which is slower. Original error:\n", e);
+
+                } else { throw e; }
+            }
+        }
+
+        const bytes = await module.arrayBuffer();
+        return await WebAssembly.instantiate(bytes, imports);
+    } else {
+        const instance = await WebAssembly.instantiate(module, imports);
+
+        if (instance instanceof WebAssembly.Instance) {
+            return { instance, module };
+        } else {
+            return instance;
+        }
+    }
+
+    function expectedResponseType(type) {
+        switch (type) {
+            case 'basic': case 'cors': case 'default': return true;
+        }
+        return false;
+    }
+}
+
+function initSync(module) {
+    if (wasm !== undefined) return wasm;
+
+
+    if (module !== undefined) {
+        if (Object.getPrototypeOf(module) === Object.prototype) {
+            ({module} = module)
+        } else {
+            console.warn('using deprecated parameters for `initSync()`; pass a single object instead')
+        }
+    }
+
+    const imports = __wbg_get_imports();
+    if (!(module instanceof WebAssembly.Module)) {
+        module = new WebAssembly.Module(module);
+    }
+    const instance = new WebAssembly.Instance(module, imports);
+    return __wbg_finalize_init(instance, module);
+}
+
+async function __wbg_init(module_or_path) {
+    if (wasm !== undefined) return wasm;
+
+
+    if (module_or_path !== undefined) {
+        if (Object.getPrototypeOf(module_or_path) === Object.prototype) {
+            ({module_or_path} = module_or_path)
+        } else {
+            console.warn('using deprecated parameters for the initialization function; pass a single object instead')
+        }
+    }
+
+    if (module_or_path === undefined) {
+        module_or_path = new URL('axiam_opaque_bg.wasm', import.meta.url);
+    }
+    const imports = __wbg_get_imports();
+
+    if (typeof module_or_path === 'string' || (typeof Request === 'function' && module_or_path instanceof Request) || (typeof URL === 'function' && module_or_path instanceof URL)) {
+        module_or_path = fetch(module_or_path);
+    }
+
+    const { instance, module } = await __wbg_load(await module_or_path, imports);
+
+    return __wbg_finalize_init(instance, module);
+}
+
+export { initSync, __wbg_init as default };

package/package.json

@@ -0,0 +1,21 @@
+{
+  "name": "@axiam/opaque-wasm",
+  "type": "module",
+  "description": "WebAssembly build of AXIAM's OPAQUE (RFC 9807) client",
+  "version": "1.0.0-alpha32",
+  "license": "Apache-2.0",
+  "files": [
+    "axiam_opaque_bg.wasm",
+    "axiam_opaque.js",
+    "axiam_opaque.d.ts"
+  ],
+  "main": "axiam_opaque.js",
+  "types": "axiam_opaque.d.ts",
+  "sideEffects": [
+    "./snippets/*"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ilpanich/axiam"
+  }
+}