@clawdstrike/wasm 0.1.0

package/README.md

@@ -0,0 +1,93 @@
+# @backbay/wasm
+
+WebAssembly bindings for clawdstrike cryptographic verification.
+
+## Installation
+
+```bash
+npm install @backbay/wasm
+```
+
+## Usage
+
+### Browser (ES Modules)
+
+```javascript
+import init, {
+  verify_ed25519,
+  hash_sha256,
+  hash_keccak256,
+  verify_receipt,
+  verify_merkle_proof
+} from '@backbay/wasm';
+
+// Initialize WASM module (required once)
+await init();
+
+// Hash data
+const hash = hash_sha256(new TextEncoder().encode('hello'));
+console.log(hash); // 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824
+
+// Verify Ed25519 signature
+const valid = verify_ed25519(publicKeyHex, messageBytes, signatureHex);
+
+// Verify a signed receipt
+const result = verify_receipt(receiptJson, signerPubkeyHex, null);
+console.log(result.valid, result.signer_valid);
+```
+
+### Node.js
+
+```javascript
+const { verify_ed25519, hash_sha256 } = require('@backbay/wasm');
+
+const hash = hash_sha256(Buffer.from('hello'));
+```
+
+## API
+
+### Hashing
+
+- `hash_sha256(data: Uint8Array): string` - SHA-256 hash (hex, no prefix)
+- `hash_sha256_prefixed(data: Uint8Array): string` - SHA-256 hash (hex, 0x prefix)
+- `hash_keccak256(data: Uint8Array): string` - Keccak-256 hash (hex, 0x prefix)
+
+### Signatures
+
+- `verify_ed25519(pubkey_hex: string, message: Uint8Array, sig_hex: string): boolean`
+
+### Receipts
+
+- `verify_receipt(receipt_json: string, signer_pubkey_hex: string, cosigner_pubkey_hex?: string): VerificationResult`
+- `hash_receipt(receipt_json: string, algorithm: "sha256" | "keccak256"): string`
+- `get_canonical_json(receipt_json: string): string`
+
+### Merkle Trees
+
+- `verify_merkle_proof(leaf_hash_hex: string, proof_json: string, root_hex: string): boolean`
+- `compute_merkle_root(leaf_hashes_json: string): string`
+- `generate_merkle_proof(leaf_hashes_json: string, leaf_index: number): string`
+
+## Bundle Size
+
+- Uncompressed: ~268KB
+- Gzipped: ~90KB
+
+The WASM binary is automatically loaded when you call `init()`.
+
+## TypeScript
+
+Full TypeScript definitions are included. The `VerificationResult` type:
+
+```typescript
+interface VerificationResult {
+  valid: boolean;
+  signer_valid: boolean;
+  cosigner_valid: boolean | null;
+  errors: string[];
+}
+```
+
+## License
+
+MIT

package/hush_wasm.d.ts

@@ -0,0 +1,127 @@
+/**
+ * TypeScript type definitions for @clawdstrike/wasm
+ *
+ * These augment the auto-generated wasm-bindgen types with
+ * more detailed documentation and type information.
+ */
+
+/** Verification result from verify_receipt */
+export interface VerificationResult {
+  /** Overall validity - true only if all signatures are valid */
+  valid: boolean;
+  /** Primary signer signature valid */
+  signer_valid: boolean;
+  /** Co-signer signature valid (null if no co-signer) */
+  cosigner_valid: boolean | null;
+  /** Error messages if verification failed */
+  errors: string[];
+}
+
+/** Initialize the WASM module (called automatically on import) */
+export function init(): void;
+
+/** Get the WASM module version */
+export function version(): string;
+
+/**
+ * Compute SHA-256 hash of data
+ * @param data - Bytes to hash
+ * @returns Hex-encoded hash (64 chars, no prefix)
+ */
+export function hash_sha256(data: Uint8Array): string;
+
+/**
+ * Compute SHA-256 hash with 0x prefix
+ * @param data - Bytes to hash
+ * @returns Hex-encoded hash with 0x prefix
+ */
+export function hash_sha256_prefixed(data: Uint8Array): string;
+
+/**
+ * Compute Keccak-256 hash (Ethereum-compatible)
+ * @param data - Bytes to hash
+ * @returns Hex-encoded hash with 0x prefix
+ */
+export function hash_keccak256(data: Uint8Array): string;
+
+/**
+ * Verify an Ed25519 signature
+ * @param publicKeyHex - Hex-encoded public key (32 bytes)
+ * @param message - Message bytes that were signed
+ * @param signatureHex - Hex-encoded signature (64 bytes)
+ * @returns true if signature is valid
+ * @throws Error if keys/signature are malformed
+ */
+export function verify_ed25519(
+  publicKeyHex: string,
+  message: Uint8Array,
+  signatureHex: string
+): boolean;
+
+/**
+ * Verify a signed receipt
+ * @param receiptJson - JSON-serialized SignedReceipt
+ * @param signerPubkeyHex - Hex-encoded signer public key
+ * @param cosignerPubkeyHex - Optional hex-encoded co-signer public key
+ * @returns Verification result object
+ * @throws Error if JSON is malformed or keys are invalid
+ */
+export function verify_receipt(
+  receiptJson: string,
+  signerPubkeyHex: string,
+  cosignerPubkeyHex?: string
+): VerificationResult;
+
+/**
+ * Hash a receipt using specified algorithm
+ * @param receiptJson - JSON-serialized Receipt
+ * @param algorithm - "sha256" or "keccak256"
+ * @returns Hex-encoded hash with 0x prefix
+ * @throws Error if JSON is malformed or algorithm is invalid
+ */
+export function hash_receipt(
+  receiptJson: string,
+  algorithm: 'sha256' | 'keccak256'
+): string;
+
+/**
+ * Get canonical JSON representation of a receipt
+ * @param receiptJson - JSON-serialized Receipt
+ * @returns Canonical JSON (sorted keys, no whitespace)
+ * @throws Error if JSON is malformed
+ */
+export function get_canonical_json(receiptJson: string): string;
+
+/**
+ * Verify a Merkle inclusion proof
+ * @param leafHashHex - Hex-encoded leaf hash
+ * @param proofJson - JSON-serialized MerkleProof
+ * @param rootHex - Hex-encoded expected root hash
+ * @returns true if proof is valid
+ * @throws Error if hashes are malformed
+ */
+export function verify_merkle_proof(
+  leafHashHex: string,
+  proofJson: string,
+  rootHex: string
+): boolean;
+
+/**
+ * Compute Merkle root from leaf hashes
+ * @param leafHashesJson - JSON array of hex-encoded leaf hashes
+ * @returns Hex-encoded root with 0x prefix
+ * @throws Error if hashes are malformed
+ */
+export function compute_merkle_root(leafHashesJson: string): string;
+
+/**
+ * Generate a Merkle inclusion proof
+ * @param leafHashesJson - JSON array of hex-encoded leaf hashes
+ * @param leafIndex - 0-based index of leaf to prove
+ * @returns JSON-serialized MerkleProof
+ * @throws Error if index is out of bounds
+ */
+export function generate_merkle_proof(
+  leafHashesJson: string,
+  leafIndex: number
+): string;

package/hush_wasm.js

@@ -0,0 +1,604 @@
+/* @ts-self-types="./hush_wasm.d.ts" */
+
+/**
+ * Compute Merkle root from leaf hashes.
+ *
+ * # Arguments
+ * * `leaf_hashes_json` - JSON array of hex-encoded leaf hashes
+ *
+ * # Returns
+ * Hex-encoded Merkle root (with 0x prefix)
+ * @param {string} leaf_hashes_json
+ * @returns {string}
+ */
+export function compute_merkle_root(leaf_hashes_json) {
+    let deferred3_0;
+    let deferred3_1;
+    try {
+        const ptr0 = passStringToWasm0(leaf_hashes_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.compute_merkle_root(ptr0, len0);
+        var ptr2 = ret[0];
+        var len2 = ret[1];
+        if (ret[3]) {
+            ptr2 = 0; len2 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred3_0 = ptr2;
+        deferred3_1 = len2;
+        return getStringFromWasm0(ptr2, len2);
+    } finally {
+        wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
+    }
+}
+
+/**
+ * Generate a Merkle proof for a specific leaf index.
+ *
+ * # Arguments
+ * * `leaf_hashes_json` - JSON array of hex-encoded leaf hashes
+ * * `leaf_index` - Index of the leaf to prove (0-based)
+ *
+ * # Returns
+ * JSON-serialized MerkleProof
+ * @param {string} leaf_hashes_json
+ * @param {number} leaf_index
+ * @returns {string}
+ */
+export function generate_merkle_proof(leaf_hashes_json, leaf_index) {
+    let deferred3_0;
+    let deferred3_1;
+    try {
+        const ptr0 = passStringToWasm0(leaf_hashes_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.generate_merkle_proof(ptr0, len0, leaf_index);
+        var ptr2 = ret[0];
+        var len2 = ret[1];
+        if (ret[3]) {
+            ptr2 = 0; len2 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred3_0 = ptr2;
+        deferred3_1 = len2;
+        return getStringFromWasm0(ptr2, len2);
+    } finally {
+        wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
+    }
+}
+
+/**
+ * Get the canonical JSON representation of a receipt.
+ * This is the exact bytes that are signed.
+ *
+ * # Arguments
+ * * `receipt_json` - JSON-serialized Receipt
+ *
+ * # Returns
+ * Canonical JSON string (sorted keys, no extra whitespace)
+ * @param {string} receipt_json
+ * @returns {string}
+ */
+export function get_canonical_json(receipt_json) {
+    let deferred3_0;
+    let deferred3_1;
+    try {
+        const ptr0 = passStringToWasm0(receipt_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.get_canonical_json(ptr0, len0);
+        var ptr2 = ret[0];
+        var len2 = ret[1];
+        if (ret[3]) {
+            ptr2 = 0; len2 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred3_0 = ptr2;
+        deferred3_1 = len2;
+        return getStringFromWasm0(ptr2, len2);
+    } finally {
+        wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
+    }
+}
+
+/**
+ * Compute Keccak-256 hash of data (Ethereum-compatible).
+ *
+ * # Arguments
+ * * `data` - The bytes to hash
+ *
+ * # Returns
+ * Hex-encoded hash with 0x prefix (66 characters)
+ * @param {Uint8Array} data
+ * @returns {string}
+ */
+export function hash_keccak256(data) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const ptr0 = passArray8ToWasm0(data, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.hash_keccak256(ptr0, len0);
+        deferred2_0 = ret[0];
+        deferred2_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+    }
+}
+
+/**
+ * Hash a Receipt to get its canonical hash.
+ *
+ * # Arguments
+ * * `receipt_json` - JSON-serialized Receipt (unsigned)
+ * * `algorithm` - "sha256" or "keccak256"
+ *
+ * # Returns
+ * Hex-encoded hash with 0x prefix
+ * @param {string} receipt_json
+ * @param {string} algorithm
+ * @returns {string}
+ */
+export function hash_receipt(receipt_json, algorithm) {
+    let deferred4_0;
+    let deferred4_1;
+    try {
+        const ptr0 = passStringToWasm0(receipt_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(algorithm, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ret = wasm.hash_receipt(ptr0, len0, ptr1, len1);
+        var ptr3 = ret[0];
+        var len3 = ret[1];
+        if (ret[3]) {
+            ptr3 = 0; len3 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred4_0 = ptr3;
+        deferred4_1 = len3;
+        return getStringFromWasm0(ptr3, len3);
+    } finally {
+        wasm.__wbindgen_free(deferred4_0, deferred4_1, 1);
+    }
+}
+
+/**
+ * Compute SHA-256 hash of data.
+ *
+ * # Arguments
+ * * `data` - The bytes to hash
+ *
+ * # Returns
+ * Hex-encoded hash (64 characters, no 0x prefix)
+ * @param {Uint8Array} data
+ * @returns {string}
+ */
+export function hash_sha256(data) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const ptr0 = passArray8ToWasm0(data, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.hash_sha256(ptr0, len0);
+        deferred2_0 = ret[0];
+        deferred2_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+    }
+}
+
+/**
+ * Compute SHA-256 hash with 0x prefix.
+ *
+ * # Arguments
+ * * `data` - The bytes to hash
+ *
+ * # Returns
+ * Hex-encoded hash with 0x prefix (66 characters)
+ * @param {Uint8Array} data
+ * @returns {string}
+ */
+export function hash_sha256_prefixed(data) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const ptr0 = passArray8ToWasm0(data, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.hash_sha256_prefixed(ptr0, len0);
+        deferred2_0 = ret[0];
+        deferred2_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+    }
+}
+
+/**
+ * Initialize the WASM module (call once at startup)
+ */
+export function init() {
+    wasm.init();
+}
+
+/**
+ * Verify an Ed25519 signature over a message.
+ *
+ * # Arguments
+ * * `public_key_hex` - Hex-encoded public key (32 bytes, with or without 0x prefix)
+ * * `message` - The message bytes that were signed
+ * * `signature_hex` - Hex-encoded signature (64 bytes, with or without 0x prefix)
+ *
+ * # Returns
+ * `true` if the signature is valid, `false` otherwise
+ * @param {string} public_key_hex
+ * @param {Uint8Array} message
+ * @param {string} signature_hex
+ * @returns {boolean}
+ */
+export function verify_ed25519(public_key_hex, message, signature_hex) {
+    const ptr0 = passStringToWasm0(public_key_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passArray8ToWasm0(message, wasm.__wbindgen_malloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ptr2 = passStringToWasm0(signature_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len2 = WASM_VECTOR_LEN;
+    const ret = wasm.verify_ed25519(ptr0, len0, ptr1, len1, ptr2, len2);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return ret[0] !== 0;
+}
+
+/**
+ * Verify a Merkle inclusion proof.
+ *
+ * # Arguments
+ * * `leaf_hash_hex` - Hex-encoded leaf hash (with or without 0x prefix)
+ * * `proof_json` - JSON-serialized MerkleProof
+ * * `root_hex` - Hex-encoded expected root hash (with or without 0x prefix)
+ *
+ * # Returns
+ * `true` if the proof is valid, `false` otherwise
+ * @param {string} leaf_hash_hex
+ * @param {string} proof_json
+ * @param {string} root_hex
+ * @returns {boolean}
+ */
+export function verify_merkle_proof(leaf_hash_hex, proof_json, root_hex) {
+    const ptr0 = passStringToWasm0(leaf_hash_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(proof_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ptr2 = passStringToWasm0(root_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len2 = WASM_VECTOR_LEN;
+    const ret = wasm.verify_merkle_proof(ptr0, len0, ptr1, len1, ptr2, len2);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return ret[0] !== 0;
+}
+
+/**
+ * Verify a signed Receipt.
+ *
+ * # Arguments
+ * * `receipt_json` - JSON-serialized SignedReceipt
+ * * `signer_pubkey_hex` - Hex-encoded signer public key
+ * * `cosigner_pubkey_hex` - Optional hex-encoded co-signer public key
+ *
+ * # Returns
+ * JavaScript object with verification result:
+ * ```json
+ * {
+ *   "valid": true,
+ *   "signer_valid": true,
+ *   "cosigner_valid": null,
+ *   "errors": []
+ * }
+ * ```
+ * @param {string} receipt_json
+ * @param {string} signer_pubkey_hex
+ * @param {string | null} [cosigner_pubkey_hex]
+ * @returns {any}
+ */
+export function verify_receipt(receipt_json, signer_pubkey_hex, cosigner_pubkey_hex) {
+    const ptr0 = passStringToWasm0(receipt_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(signer_pubkey_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    var ptr2 = isLikeNone(cosigner_pubkey_hex) ? 0 : passStringToWasm0(cosigner_pubkey_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len2 = WASM_VECTOR_LEN;
+    const ret = wasm.verify_receipt(ptr0, len0, ptr1, len1, ptr2, len2);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+
+/**
+ * Get version information about this WASM module
+ * @returns {string}
+ */
+export function version() {
+    let deferred1_0;
+    let deferred1_1;
+    try {
+        const ret = wasm.version();
+        deferred1_0 = ret[0];
+        deferred1_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+    }
+}
+
+function __wbg_get_imports() {
+    const import0 = {
+        __proto__: null,
+        __wbg_Error_8c4e43fe74559d73: function(arg0, arg1) {
+            const ret = Error(getStringFromWasm0(arg0, arg1));
+            return ret;
+        },
+        __wbg_String_8f0eb39a4a4c2f66: function(arg0, arg1) {
+            const ret = String(arg1);
+            const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            const len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg___wbindgen_throw_be289d5034ed271b: function(arg0, arg1) {
+            throw new Error(getStringFromWasm0(arg0, arg1));
+        },
+        __wbg_error_7534b8e9a36f1ab4: function(arg0, arg1) {
+            let deferred0_0;
+            let deferred0_1;
+            try {
+                deferred0_0 = arg0;
+                deferred0_1 = arg1;
+                console.error(getStringFromWasm0(arg0, arg1));
+            } finally {
+                wasm.__wbindgen_free(deferred0_0, deferred0_1, 1);
+            }
+        },
+        __wbg_new_361308b2356cecd0: function() {
+            const ret = new Object();
+            return ret;
+        },
+        __wbg_new_3eb36ae241fe6f44: function() {
+            const ret = new Array();
+            return ret;
+        },
+        __wbg_new_8a6f238a6ece86ea: function() {
+            const ret = new Error();
+            return ret;
+        },
+        __wbg_set_3f1d0b984ed272ed: function(arg0, arg1, arg2) {
+            arg0[arg1] = arg2;
+        },
+        __wbg_set_f43e577aea94465b: function(arg0, arg1, arg2) {
+            arg0[arg1 >>> 0] = arg2;
+        },
+        __wbg_stack_0ed75d68575b0f3c: function(arg0, arg1) {
+            const ret = arg1.stack;
+            const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            const len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbindgen_cast_0000000000000001: function(arg0, arg1) {
+            // Cast intrinsic for `Ref(String) -> Externref`.
+            const ret = getStringFromWasm0(arg0, arg1);
+            return ret;
+        },
+        __wbindgen_init_externref_table: function() {
+            const table = wasm.__wbindgen_externrefs;
+            const offset = table.grow(4);
+            table.set(0, undefined);
+            table.set(offset + 0, undefined);
+            table.set(offset + 1, null);
+            table.set(offset + 2, true);
+            table.set(offset + 3, false);
+        },
+    };
+    return {
+        __proto__: null,
+        "./hush_wasm_bg.js": import0,
+    };
+}
+
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
+
+function getStringFromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return decodeText(ptr, len);
+}
+
+let cachedUint8ArrayMemory0 = null;
+function getUint8ArrayMemory0() {
+    if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
+        cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
+    }
+    return cachedUint8ArrayMemory0;
+}
+
+function isLikeNone(x) {
+    return x === undefined || x === null;
+}
+
+function passArray8ToWasm0(arg, malloc) {
+    const ptr = malloc(arg.length * 1, 1) >>> 0;
+    getUint8ArrayMemory0().set(arg, ptr / 1);
+    WASM_VECTOR_LEN = arg.length;
+    return ptr;
+}
+
+function passStringToWasm0(arg, malloc, realloc) {
+    if (realloc === undefined) {
+        const buf = cachedTextEncoder.encode(arg);
+        const ptr = malloc(buf.length, 1) >>> 0;
+        getUint8ArrayMemory0().subarray(ptr, ptr + buf.length).set(buf);
+        WASM_VECTOR_LEN = buf.length;
+        return ptr;
+    }
+
+    let len = arg.length;
+    let ptr = malloc(len, 1) >>> 0;
+
+    const mem = getUint8ArrayMemory0();
+
+    let offset = 0;
+
+    for (; offset < len; offset++) {
+        const code = arg.charCodeAt(offset);
+        if (code > 0x7F) break;
+        mem[ptr + offset] = code;
+    }
+    if (offset !== len) {
+        if (offset !== 0) {
+            arg = arg.slice(offset);
+        }
+        ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
+        const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
+        const ret = cachedTextEncoder.encodeInto(arg, view);
+
+        offset += ret.written;
+        ptr = realloc(ptr, len, offset, 1) >>> 0;
+    }
+
+    WASM_VECTOR_LEN = offset;
+    return ptr;
+}
+
+function takeFromExternrefTable0(idx) {
+    const value = wasm.__wbindgen_externrefs.get(idx);
+    wasm.__externref_table_dealloc(idx);
+    return value;
+}
+
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+cachedTextDecoder.decode();
+const MAX_SAFARI_DECODE_BYTES = 2146435072;
+let numBytesDecoded = 0;
+function decodeText(ptr, len) {
+    numBytesDecoded += len;
+    if (numBytesDecoded >= MAX_SAFARI_DECODE_BYTES) {
+        cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+        cachedTextDecoder.decode();
+        numBytesDecoded = len;
+    }
+    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
+}
+
+const cachedTextEncoder = new TextEncoder();
+
+if (!('encodeInto' in cachedTextEncoder)) {
+    cachedTextEncoder.encodeInto = function (arg, view) {
+        const buf = cachedTextEncoder.encode(arg);
+        view.set(buf);
+        return {
+            read: arg.length,
+            written: buf.length
+        };
+    };
+}
+
+let WASM_VECTOR_LEN = 0;
+
+let wasmModule, wasm;
+function __wbg_finalize_init(instance, module) {
+    wasm = instance.exports;
+    wasmModule = module;
+    cachedDataViewMemory0 = null;
+    cachedUint8ArrayMemory0 = null;
+    wasm.__wbindgen_start();
+    return wasm;
+}
+
+async function __wbg_load(module, imports) {
+    if (typeof Response === 'function' && module instanceof Response) {
+        if (typeof WebAssembly.instantiateStreaming === 'function') {
+            try {
+                return await WebAssembly.instantiateStreaming(module, imports);
+            } catch (e) {
+                const validResponse = module.ok && expectedResponseType(module.type);
+
+                if (validResponse && module.headers.get('Content-Type') !== 'application/wasm') {
+                    console.warn("`WebAssembly.instantiateStreaming` failed because your server does not serve Wasm with `application/wasm` MIME type. Falling back to `WebAssembly.instantiate` which is slower. Original error:\n", e);
+
+                } else { throw e; }
+            }
+        }
+
+        const bytes = await module.arrayBuffer();
+        return await WebAssembly.instantiate(bytes, imports);
+    } else {
+        const instance = await WebAssembly.instantiate(module, imports);
+
+        if (instance instanceof WebAssembly.Instance) {
+            return { instance, module };
+        } else {
+            return instance;
+        }
+    }
+
+    function expectedResponseType(type) {
+        switch (type) {
+            case 'basic': case 'cors': case 'default': return true;
+        }
+        return false;
+    }
+}
+
+function initSync(module) {
+    if (wasm !== undefined) return wasm;
+
+
+    if (module !== undefined) {
+        if (Object.getPrototypeOf(module) === Object.prototype) {
+            ({module} = module)
+        } else {
+            console.warn('using deprecated parameters for `initSync()`; pass a single object instead')
+        }
+    }
+
+    const imports = __wbg_get_imports();
+    if (!(module instanceof WebAssembly.Module)) {
+        module = new WebAssembly.Module(module);
+    }
+    const instance = new WebAssembly.Instance(module, imports);
+    return __wbg_finalize_init(instance, module);
+}
+
+async function __wbg_init(module_or_path) {
+    if (wasm !== undefined) return wasm;
+
+
+    if (module_or_path !== undefined) {
+        if (Object.getPrototypeOf(module_or_path) === Object.prototype) {
+            ({module_or_path} = module_or_path)
+        } else {
+            console.warn('using deprecated parameters for the initialization function; pass a single object instead')
+        }
+    }
+
+    if (module_or_path === undefined) {
+        module_or_path = new URL('hush_wasm_bg.wasm', import.meta.url);
+    }
+    const imports = __wbg_get_imports();
+
+    if (typeof module_or_path === 'string' || (typeof Request === 'function' && module_or_path instanceof Request) || (typeof URL === 'function' && module_or_path instanceof URL)) {
+        module_or_path = fetch(module_or_path);
+    }
+
+    const { instance, module } = await __wbg_load(await module_or_path, imports);
+
+    return __wbg_finalize_init(instance, module);
+}
+
+export { initSync, __wbg_init as default };

package/hush_wasm_bg.wasm.d.ts

@@ -0,0 +1,21 @@
+/* tslint:disable */
+/* eslint-disable */
+export const memory: WebAssembly.Memory;
+export const compute_merkle_root: (a: number, b: number) => [number, number, number, number];
+export const generate_merkle_proof: (a: number, b: number, c: number) => [number, number, number, number];
+export const get_canonical_json: (a: number, b: number) => [number, number, number, number];
+export const hash_keccak256: (a: number, b: number) => [number, number];
+export const hash_receipt: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+export const hash_sha256: (a: number, b: number) => [number, number];
+export const hash_sha256_prefixed: (a: number, b: number) => [number, number];
+export const verify_ed25519: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
+export const verify_merkle_proof: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
+export const verify_receipt: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
+export const version: () => [number, number];
+export const init: () => void;
+export const __wbindgen_malloc: (a: number, b: number) => number;
+export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
+export const __wbindgen_free: (a: number, b: number, c: number) => void;
+export const __wbindgen_externrefs: WebAssembly.Table;
+export const __externref_table_dealloc: (a: number) => void;
+export const __wbindgen_start: () => void;

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@clawdstrike/wasm",
+  "version": "0.1.0",
+  "description": "WebAssembly bindings for clawdstrike cryptographic verification",
+  "main": "hush_wasm.js",
+  "types": "hush_wasm.d.ts",
+  "files": [
+    "hush_wasm_bg.wasm",
+    "hush_wasm.js",
+    "hush_wasm.d.ts",
+    "hush_wasm_bg.wasm.d.ts"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/backbay-labs/clawdstrike.git",
+    "directory": "crates/libs/hush-wasm"
+  },
+  "keywords": [
+    "wasm",
+    "webassembly",
+    "cryptography",
+    "verification",
+    "attestation",
+    "ed25519",
+    "merkle",
+    "clawdstrike"
+  ],
+  "author": "Clawdstrike Contributors",
+  "license": "Apache-2.0",
+  "bugs": {
+    "url": "https://github.com/backbay-labs/clawdstrike/issues"
+  },
+  "homepage": "https://clawdstrike.dev"
+}