@sebastienrousseau/crypto-wasm 0.0.0-stage → 0.0.8

package/LICENSE

@@ -0,0 +1,8 @@
+This project is dual-licensed under either of:
+
+  * Apache License, Version 2.0 — see LICENSE-APACHE
+  * MIT license — see LICENSE-MIT
+
+at your option.
+
+SPDX-License-Identifier: Apache-2.0 OR MIT

package/README.md

@@ -1,3 +1,312 @@
-# Temporary Holding Version
+<!-- SPDX-License-Identifier: Apache-2.0 OR MIT -->
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+<p align="center">
+  <img src="https://raw.githubusercontent.com/sebastienrousseau/crypto-service/main/assets/crypto-wasm-logo.svg" alt="crypto-wasm logo" width="360" />
+</p>
+
+<h1 align="center">@sebastienrousseau/crypto-wasm</h1>
+
+<p align="center">
+  WebAssembly performance accelerator for crypto-lib — near-native speed for SHA-256, AES-GCM, Argon2, Ed25519, and X25519.
+</p>
+
+<p align="center">
+  <a href="https://github.com/sebastienrousseau/crypto-service/actions"><img src="https://img.shields.io/github/actions/workflow/status/sebastienrousseau/crypto-service/ci.yml?branch=main&style=for-the-badge&logo=github" alt="Build" /></a>
+  <a href="https://coveralls.io/github/sebastienrousseau/crypto-service?branch=main"><img src="https://img.shields.io/coveralls/github/sebastienrousseau/crypto-service?branch=main&style=for-the-badge" alt="Coverage" /></a>
+  <a href="https://www.npmjs.com/package/@sebastienrousseau/crypto-wasm"><img src="https://img.shields.io/npm/v/@sebastienrousseau/crypto-wasm.svg?style=for-the-badge&color=f14041&logo=npm" alt="Registry" /></a>
+  <a href="https://sebastienrousseau.github.io/crypto-service/"><img src="https://img.shields.io/badge/docs-TypeDoc-blue.svg?style=for-the-badge&labelColor=555555&logo=typescript" alt="Docs" /></a>
+  <a href="https://scorecard.dev/viewer/?uri=github.com/sebastienrousseau/crypto-service" title="ossf-scorecard"><img src="https://img.shields.io/badge/OpenSSF-Scorecard-blue?style=for-the-badge&logo=openssf" alt="OpenSSF Scorecard" /></a>
+  <a href="https://github.com/sebastienrousseau/crypto-service/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-Apache--2.0%20OR%20MIT-blue.svg?style=for-the-badge" alt="License: Apache-2.0 OR MIT" /></a>
+  <a href="https://github.com/sebastienrousseau/crypto-service/blob/main/docs/POLICIES.md"><img src="https://img.shields.io/badge/Node.js-%3E%3D22-93450a.svg?style=for-the-badge&logo=node.js" alt="Node.js 22 or newer" /></a>
+</p>
+
+---
+
+## Contents
+
+**Getting started**
+
+- [Install](#install) — installation via pnpm, npm, or yarn
+- [Requirements](#requirements) — runtime floor and environment prerequisites
+- [Quick Start](#quick-start) — minimal working usage sample
+
+**The Crypto Service ecosystem**
+
+- [The Crypto Service ecosystem](#the-crypto-service-ecosystem) — full 14-package suite overview
+
+**Package reference**
+
+- [Reference & Usage](#overview) — features, configuration, and capabilities
+- [Examples](#examples) — runnable sample code
+
+**Operational**
+
+- [Development](#development) — build, lint, format, and test targets
+- [Security](#security) — vulnerability disclosure and cryptographic invariants
+- [Documentation](#documentation) — TypeDoc API docs and ecosystem guides
+- [Stability guarantees](#stability-guarantees) — SemVer axis and release policy
+- [License](#license)
+
+---
+
+## Install
+
+```bash
+pnpm add @sebastienrousseau/crypto-wasm
+# or
+npm install @sebastienrousseau/crypto-wasm
+# or
+yarn add @sebastienrousseau/crypto-wasm
+```
+
+<p align="right"><a href="#contents">Back to Top</a></p>
+
+---
+
+## Requirements
+
+- **Node.js**: `^22.0.0` or `>=24.0.0` (active and maintenance LTS releases)
+- **Package Manager**: `pnpm >=9` (recommended) or `npm >=10`
+- **TypeScript**: `>=5.0` (when compiling with TypeScript)
+
+<p align="right"><a href="#contents">Back to Top</a></p>
+
+---
+
+## Quick Start
+
+```ts
+import {
+  WasmAccelerator,
+  isWasmSupported,
+} from "@sebastienrousseau/crypto-wasm";
+
+const accel = new WasmAccelerator();
+await accel.init();
+
+// Hash data -- uses WASM when available, JS fallback otherwise
+const digest = await accel.hash("sha256", new TextEncoder().encode("hello"));
+console.log(Buffer.from(digest).toString("hex"));
+```
+
+<p align="right"><a href="#contents">Back to Top</a></p>
+
+---
+
+## The Crypto Service ecosystem
+
+Crypto Service provides a complete cryptography stack across 14 specialized packages:
+
+| Package                                                                 | Role             | Description                                                                                                                            |
+| :---------------------------------------------------------------------- | :--------------- | :------------------------------------------------------------------------------------------------------------------------------------- |
+| [`@sebastienrousseau/crypto-api`](../crypto-api)                        | API Schemas      | Shared TypeScript types and utilities for the Crypto Service Suite, defining the canonical API surface.                                |
+| [`@sebastienrousseau/crypto-cli`](../crypto-cli)                        | Terminal CLI     | An interactive command-line interface for cryptographic operations, supporting both legacy OpenPGP and modern post-quantum algorithms. |
+| [`@sebastienrousseau/crypto-edge`](../crypto-edge)                      | Edge Runtime     | Edge-runtime cryptographic operations using the Web Crypto API, optimized for Cloudflare Workers, Vercel Edge, and Deno.               |
+| [`@sebastienrousseau/crypto-kms`](../crypto-kms)                        | Cloud KMS        | Unified Key Management Service interface for AWS KMS, GCP Cloud KMS, Azure Key Vault, and HashiCorp Vault.                             |
+| [`@sebastienrousseau/crypto-lib`](../crypto-lib)                        | Core Library     | A modern cryptographic library for TypeScript, with post-quantum support, zero unsafe dependencies, and 100% test coverage.            |
+| [`@sebastienrousseau/crypto-middleware`](../crypto-middleware)          | Middleware       | Framework-agnostic cryptographic middleware for Express, Fastify, and Koa applications.                                                |
+| [`@sebastienrousseau/crypto-prisma`](../crypto-prisma)                  | ORM Adapter      | Transparent field-level encryption extension for Prisma Client, using XChaCha20-Poly1305.                                              |
+| [`@sebastienrousseau/crypto-react`](../crypto-react)                    | React Hooks      | React hooks and context provider for client-side cryptographic operations with zero boilerplate.                                       |
+| [`@sebastienrousseau/crypto-sdk`](../crypto-sdk)                        | Client SDK       | A zero-dependency, typed HTTP client for the Crypto Service REST API, with full post-quantum support.                                  |
+| [`@sebastienrousseau/crypto-server`](../crypto-server)                  | HTTP API         | A hardened Fastify REST API for cryptographic operations, with rate limiting, OpenAPI schemas, and post-quantum endpoints.             |
+| [`@sebastienrousseau/crypto-testing`](../crypto-testing)                | Test Support     | Deterministic keys, fast mocks, and test fixtures for crypto-lib                                                                       |
+| [`@sebastienrousseau/crypto-typeorm`](../crypto-typeorm)                | ORM Adapter      | TypeORM column-level encryption with a single decorator, powered by crypto-lib.                                                        |
+| [`@sebastienrousseau/crypto-vue`](../crypto-vue)                        | Vue Composables  | Vue 3 composables for client-side cryptography                                                                                         |
+| **[`@sebastienrousseau/crypto-wasm`](../crypto-wasm)** _(this package)_ | **Acceleration** | **WebAssembly performance accelerator for crypto-lib**                                                                                 |
+
+<p align="right"><a href="#contents">Back to Top</a></p>
+
+---
+
+## Overview
+
+crypto-wasm is an optional performance accelerator for the Crypto
+Service Suite. When installed alongside crypto-lib, heavy
+cryptographic operations are automatically routed through a
+WebAssembly module compiled from Rust, delivering near-native speed
+for hashing, AES-GCM encryption, Argon2 password hashing, and
+Ed25519/X25519 operations. If the WASM module is unavailable, every
+operation transparently falls back to the equivalent pure-JavaScript
+implementation.
+
+<p align="right"><a href="#contents">Back to Top</a></p>
+
+## How It Works
+
+### Auto-Detection
+
+When crypto-lib detects `@sebastienrousseau/crypto-wasm` as an
+installed dependency, it automatically routes heavy cryptographic
+operations through the WASM module. No configuration is needed.
+
+```
+crypto-lib  -->  crypto-wasm installed?
+                   |               |
+                  YES              NO
+                   |               |
+              WASM path       JS fallback
+              (near-native)   (pure JS)
+```
+
+### Transparent Fallback
+
+If the WASM module is not compiled or not available in the current
+runtime, every operation falls back to the equivalent
+pure-JavaScript implementation. Your application code does not need
+to handle either case differently.
+
+### Runtime Detection
+
+```ts
+import { detectCapabilities } from "@sebastienrousseau/crypto-wasm";
+
+const caps = detectCapabilities();
+// { wasmSupported: true, streamingSupported: true, simdSupported: true }
+```
+
+<p align="right"><a href="#contents">Back to Top</a></p>
+
+## Supported Operations
+
+| Operation       | ID                | Description                          |
+| :-------------- | :---------------- | :----------------------------------- |
+| SHA-256         | `hash-sha256`     | SHA-256 hash computation             |
+| SHA-512         | `hash-sha512`     | SHA-512 hash computation             |
+| BLAKE3          | `hash-blake3`     | BLAKE3 hash computation              |
+| AES-GCM Encrypt | `aes-gcm-encrypt` | AES-256-GCM authenticated encryption |
+| AES-GCM Decrypt | `aes-gcm-decrypt` | AES-256-GCM authenticated decryption |
+| Argon2          | `argon2-hash`     | Argon2id/i/d password hashing        |
+| Ed25519 Sign    | `ed25519-sign`    | Ed25519 signature generation         |
+| Ed25519 Verify  | `ed25519-verify`  | Ed25519 signature verification       |
+| X25519          | `x25519-exchange` | X25519 Diffie-Hellman key exchange   |
+
+<p align="right"><a href="#contents">Back to Top</a></p>
+
+## Building from Source
+
+The WASM module is compiled from Rust. A Rust toolchain with
+`wasm32-unknown-unknown` target is required.
+
+```bash
+# Install Rust (if not already installed)
+curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
+
+# Add the WASM target
+rustup target add wasm32-unknown-unknown
+
+# Install wasm-pack
+cargo install wasm-pack
+
+# Build the WASM module
+pnpm run build:wasm
+```
+
+The compiled `.wasm` file is placed in `wasm/crypto_accel.wasm`.
+
+<p align="right"><a href="#contents">Back to Top</a></p>
+
+## Benchmarks
+
+Run the built-in benchmark to compare JS and WASM performance:
+
+```ts
+import { WasmAccelerator } from "@sebastienrousseau/crypto-wasm";
+
+const accel = new WasmAccelerator();
+await accel.init();
+
+const result = await accel.benchmark("hash-sha256", 10000);
+console.log(`JS:      ${result.jsTimeMs.toFixed(2)} ms`);
+console.log(`WASM:    ${result.wasmTimeMs.toFixed(2)} ms`);
+console.log(`Speedup: ${result.speedup.toFixed(2)}x`);
+```
+
+**Expected speedups** (once Rust WASM module is compiled):
+
+| Operation             | Expected Speedup |
+| :-------------------- | :--------------- |
+| SHA-256 (large input) | 2-5x             |
+| AES-GCM               | 3-8x             |
+| Argon2                | 5-15x            |
+| Ed25519 Sign          | 2-4x             |
+| Ed25519 Verify        | 2-4x             |
+| X25519                | 2-4x             |
+
+<p align="right"><a href="#contents">Back to Top</a></p>
+
+## Examples
+
+All examples are self-contained TypeScript files in the `examples/`
+directory. Run any example with:
+
+```bash
+npx ts-node examples/<name>.ts
+```
+
+| Category   | Example                                 | Purpose                                    |
+| :--------- | :-------------------------------------- | :----------------------------------------- |
+| Accelerate | [accelerate.ts](examples/accelerate.ts) | Basic WASM acceleration for hashing        |
+| Benchmark  | [benchmark.ts](examples/benchmark.ts)   | Compare JS vs WASM performance             |
+| Detect     | [detect.ts](examples/detect.ts)         | Check WASM availability and capabilities   |
+| Fallback   | [fallback.ts](examples/fallback.ts)     | Graceful fallback when WASM is unavailable |
+
+<p align="right"><a href="#contents">Back to Top</a></p>
+
+<p align="right"><a href="#contents">Back to Top</a></p>
+
+---
+
+## Development
+
+```bash
+pnpm --filter @sebastienrousseau/crypto-wasm run build
+pnpm --filter @sebastienrousseau/crypto-wasm run test
+pnpm --filter @sebastienrousseau/crypto-wasm run lint
+pnpm --filter @sebastienrousseau/crypto-wasm run format
+```
+
+All 18 packages in the Crypto Service workspace maintain a **100% coverage floor** across statements, branches, functions, and lines.
+
+<p align="right"><a href="#contents">Back to Top</a></p>
+
+---
+
+## Security
+
+Report vulnerabilities privately via [GitHub Security Advisories](https://github.com/sebastienrousseau/crypto-service/security/advisories) or according to [`SECURITY.md`](../../SECURITY.md). Never report security issues publicly.
+
+Cryptographic operations use the `@noble/*` libraries, Node.js `crypto` and OpenPGP.js. `@noble/post-quantum` has not been independently audited and does not guarantee constant-time execution, and no module in this suite is FIPS 140-3 validated. Key zeroization is limited: JavaScript strings and garbage-collected buffers cannot be reliably wiped. See [`SECURITY.md`](../../SECURITY.md).
+
+<p align="right"><a href="#contents">Back to Top</a></p>
+
+---
+
+## Documentation
+
+- [Full Suite Documentation](https://sebastienrousseau.github.io/crypto-service/)
+- [API Reference (TypeDoc)](https://sebastienrousseau.github.io/crypto-service/)
+- [Developer Guide](../../DEVELOPMENT.md)
+- [Security Policy](../../SECURITY.md)
+- [Architecture & Design](../../ARCHITECTURE.md)
+
+<p align="right"><a href="#contents">Back to Top</a></p>
+
+---
+
+## Stability guarantees
+
+Versions advance strictly one step at a time on the `0.0.x` line (`v0.0.1` → `v0.0.2` → `v0.0.3` ... → `v0.0.999` → `v0.1.0`). Work for every release iteration begins on a dedicated `feat/v<version>` branch.
+
+All 18 packages in the workspace move in lockstep. Public API signatures, cipher output formats, and serialization schemas are strictly versioned. Breaking changes to serialized formats or algorithm defaults are considered major breaking changes. Minimum toolchain upgrades (e.g. Node.js LTS floor) are governed by [POLICIES.md](../../docs/POLICIES.md).
+
+<p align="right"><a href="#contents">Back to Top</a></p>
+
+---
+
+## License
+
+Dual-licensed under [Apache 2.0](https://www.apache.org/licenses/LICENSE-2.0) or [MIT](https://opensource.org/licenses/MIT), at your option.
+
+Copyright (c) 2022-2026 Sebastien Rousseau and The Crypto Service Suite contributors.
+
+<p align="right"><a href="#contents">Back to Top</a></p>

package/dist/accelerator.d.ts

@@ -0,0 +1,14 @@
+import type { AcceleratedOperation, BenchmarkResult, WasmStatus } from "./types";
+export declare class WasmAccelerator {
+    private _module;
+    private _instance;
+    private _initialized;
+    get isAvailable(): boolean;
+    get wasmModule(): WebAssembly.Module | null;
+    init(wasmSource?: BufferSource | Response): Promise<void>;
+    status(): WasmStatus;
+    hash(algorithm: string, data: Uint8Array): Promise<Uint8Array>;
+    benchmark(operation: AcceleratedOperation, iterations?: number): Promise<BenchmarkResult>;
+    destroy(): void;
+}
+//# sourceMappingURL=accelerator.d.ts.map

package/dist/accelerator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accelerator.d.ts","sourceRoot":"","sources":["../src/accelerator.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,oBAAoB,EACpB,eAAe,EACf,UAAU,EACX,MAAM,SAAS,CAAC;AAqCjB,qBAAa,eAAe;IAE1B,OAAO,CAAC,OAAO,CAAmC;IAElD,OAAO,CAAC,SAAS,CAAqC;IAEtD,OAAO,CAAC,YAAY,CAAS;IAG7B,IAAI,WAAW,IAAI,OAAO,CAEzB;IAGD,IAAI,UAAU,IAAI,WAAW,CAAC,MAAM,GAAG,IAAI,CAE1C;IAGK,IAAI,CAAC,UAAU,CAAC,EAAE,YAAY,GAAG,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAwC/D,MAAM,IAAI,UAAU;IAmBd,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IA4B9D,SAAS,CACb,SAAS,EAAE,oBAAoB,EAC/B,UAAU,SAAO,GAChB,OAAO,CAAC,eAAe,CAAC;IA6B3B,OAAO,IAAI,IAAI;CAKhB"}

package/dist/accelerator.js

@@ -0,0 +1,147 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WasmAccelerator = void 0;
+const version_1 = require("./version");
+const ALL_OPERATIONS = [
+    "hash-sha256",
+    "hash-sha512",
+    "hash-blake3",
+    "aes-gcm-encrypt",
+    "aes-gcm-decrypt",
+    "argon2-hash",
+    "ed25519-sign",
+    "ed25519-verify",
+    "x25519-exchange",
+];
+class WasmAccelerator {
+    _module = null;
+    _instance = null;
+    _initialized = false;
+    get isAvailable() {
+        return this._initialized && this._instance !== null;
+    }
+    get wasmModule() {
+        return this._module;
+    }
+    async init(wasmSource) {
+        if (this._initialized)
+            return;
+        try {
+            if (wasmSource) {
+                if (wasmSource instanceof Response) {
+                    const { module, instance } = await WebAssembly.instantiateStreaming(wasmSource);
+                    this._module = module;
+                    this._instance = instance;
+                }
+                else {
+                    const { module, instance } = await WebAssembly.instantiate(wasmSource);
+                    this._module = module;
+                    this._instance = instance;
+                }
+            }
+            else {
+                const fs = await Promise.resolve().then(() => __importStar(require("node:fs/promises")));
+                const path = await Promise.resolve().then(() => __importStar(require("node:path")));
+                const wasmPath = path.join(__dirname, "..", "wasm", "crypto_accel.wasm");
+                const buffer = await fs.readFile(wasmPath);
+                const { module, instance } = await WebAssembly.instantiate(buffer);
+                this._module = module;
+                this._instance = instance;
+            }
+            this._initialized = true;
+        }
+        catch {
+            this._initialized = true;
+            this._module = null;
+            this._instance = null;
+        }
+    }
+    status() {
+        return {
+            available: this.isAvailable,
+            version: this.isAvailable ? version_1.VERSION : null,
+            operations: this.isAvailable ? [...ALL_OPERATIONS] : [],
+            memoryUsageBytes: this._instance
+                ? this._instance.exports.memory.buffer
+                    .byteLength
+                : 0,
+        };
+    }
+    async hash(algorithm, data) {
+        if (!this.isAvailable) {
+            const { createHash } = await Promise.resolve().then(() => __importStar(require("node:crypto")));
+            const nodeAlg = algorithm.replace("-", "").toLowerCase();
+            const h = createHash(nodeAlg);
+            h.update(data);
+            return new Uint8Array(h.digest());
+        }
+        const exports = this._instance.exports;
+        const hashFn = exports[`hash_${algorithm.replace("-", "_")}`];
+        if (typeof hashFn !== "function") {
+            throw new Error(`WASM module does not export hash function for "${algorithm}"`);
+        }
+        return hashFn(data);
+    }
+    async benchmark(operation, iterations = 1000) {
+        const data = new Uint8Array(1024).fill(0x42);
+        const { createHash } = await Promise.resolve().then(() => __importStar(require("node:crypto")));
+        const jsStart = performance.now();
+        for (let i = 0; i < iterations; i++) {
+            const h = createHash("sha256");
+            h.update(data);
+            h.digest();
+        }
+        const jsTimeMs = performance.now() - jsStart;
+        const wasmStart = performance.now();
+        for (let i = 0; i < iterations; i++) {
+            await this.hash("sha256", data);
+        }
+        const wasmTimeMs = performance.now() - wasmStart;
+        return {
+            operation,
+            jsTimeMs,
+            wasmTimeMs,
+            speedup: wasmTimeMs > 0 ? jsTimeMs / wasmTimeMs : 0,
+        };
+    }
+    destroy() {
+        this._module = null;
+        this._instance = null;
+        this._initialized = false;
+    }
+}
+exports.WasmAccelerator = WasmAccelerator;
+//# sourceMappingURL=accelerator.js.map

package/dist/detect.d.ts

@@ -0,0 +1,9 @@
+export declare function isWasmSupported(): boolean;
+export declare function isStreamingSupported(): boolean;
+export declare function isSimdSupported(): boolean;
+export declare function detectCapabilities(): {
+    wasmSupported: boolean;
+    streamingSupported: boolean;
+    simdSupported: boolean;
+};
+//# sourceMappingURL=detect.d.ts.map

package/dist/detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../src/detect.ts"],"names":[],"mappings":"AAqBA,wBAAgB,eAAe,IAAI,OAAO,CAwBzC;AAoBD,wBAAgB,oBAAoB,IAAI,OAAO,CAK9C;AAkBD,wBAAgB,eAAe,IAAI,OAAO,CAoDzC;AAeD,wBAAgB,kBAAkB,IAAI;IAEpC,aAAa,EAAE,OAAO,CAAC;IAEvB,kBAAkB,EAAE,OAAO,CAAC;IAE5B,aAAa,EAAE,OAAO,CAAC;CACxB,CAMA"}

package/dist/detect.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isWasmSupported = isWasmSupported;
+exports.isStreamingSupported = isStreamingSupported;
+exports.isSimdSupported = isSimdSupported;
+exports.detectCapabilities = detectCapabilities;
+function isWasmSupported() {
+    try {
+        if (typeof WebAssembly === "object" &&
+            typeof WebAssembly.instantiate === "function") {
+            const minimal = new Uint8Array([
+                0x00,
+                0x61,
+                0x73,
+                0x6d,
+                0x01,
+                0x00,
+                0x00,
+                0x00,
+            ]);
+            const mod = new WebAssembly.Module(minimal);
+            return mod instanceof WebAssembly.Module;
+        }
+    }
+    catch {
+    }
+    return false;
+}
+function isStreamingSupported() {
+    return (typeof WebAssembly === "object" &&
+        typeof WebAssembly.instantiateStreaming === "function");
+}
+function isSimdSupported() {
+    try {
+        const simd = new Uint8Array([
+            0x00,
+            0x61,
+            0x73,
+            0x6d,
+            0x01,
+            0x00,
+            0x00,
+            0x00,
+            0x01,
+            0x05,
+            0x01,
+            0x60,
+            0x00,
+            0x01,
+            0x7b,
+            0x03,
+            0x02,
+            0x01,
+            0x00,
+            0x0a,
+            0x16,
+            0x01,
+            0x14,
+            0x00,
+            0xfd,
+            0x0c,
+            0x00,
+            0x00,
+            0x00,
+            0x00,
+            0x00,
+            0x00,
+            0x00,
+            0x00,
+            0x00,
+            0x00,
+            0x00,
+            0x00,
+            0x00,
+            0x00,
+            0x00,
+            0x00,
+            0x0b,
+        ]);
+        return new WebAssembly.Module(simd) instanceof WebAssembly.Module;
+    }
+    catch {
+        return false;
+    }
+}
+function detectCapabilities() {
+    return {
+        wasmSupported: isWasmSupported(),
+        streamingSupported: isStreamingSupported(),
+        simdSupported: isSimdSupported(),
+    };
+}
+//# sourceMappingURL=detect.js.map

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { WasmAccelerator } from "./accelerator";
+export { detectCapabilities, isSimdSupported, isStreamingSupported, isWasmSupported, } from "./detect";
+export type { AcceleratedOperation, BenchmarkResult, WasmStatus, } from "./types";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,eAAe,GAChB,MAAM,UAAU,CAAC;AAElB,YAAY,EACV,oBAAoB,EACpB,eAAe,EACf,UAAU,GACX,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isWasmSupported = exports.isStreamingSupported = exports.isSimdSupported = exports.detectCapabilities = exports.WasmAccelerator = void 0;
+var accelerator_1 = require("./accelerator");
+Object.defineProperty(exports, "WasmAccelerator", { enumerable: true, get: function () { return accelerator_1.WasmAccelerator; } });
+var detect_1 = require("./detect");
+Object.defineProperty(exports, "detectCapabilities", { enumerable: true, get: function () { return detect_1.detectCapabilities; } });
+Object.defineProperty(exports, "isSimdSupported", { enumerable: true, get: function () { return detect_1.isSimdSupported; } });
+Object.defineProperty(exports, "isStreamingSupported", { enumerable: true, get: function () { return detect_1.isStreamingSupported; } });
+Object.defineProperty(exports, "isWasmSupported", { enumerable: true, get: function () { return detect_1.isWasmSupported; } });
+//# sourceMappingURL=index.js.map

package/dist/types.d.ts

@@ -0,0 +1,14 @@
+export type AcceleratedOperation = "hash-sha256" | "hash-sha512" | "hash-blake3" | "aes-gcm-encrypt" | "aes-gcm-decrypt" | "argon2-hash" | "ed25519-sign" | "ed25519-verify" | "x25519-exchange";
+export interface BenchmarkResult {
+    operation: AcceleratedOperation;
+    jsTimeMs: number;
+    wasmTimeMs: number;
+    speedup: number;
+}
+export interface WasmStatus {
+    available: boolean;
+    version: string | null;
+    operations: AcceleratedOperation[];
+    memoryUsageBytes: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,oBAAoB,GAC5B,aAAa,GACb,aAAa,GACb,aAAa,GACb,iBAAiB,GACjB,iBAAiB,GACjB,aAAa,GACb,cAAc,GACd,gBAAgB,GAChB,iBAAiB,CAAC;AAiBtB,MAAM,WAAW,eAAe;IAE9B,SAAS,EAAE,oBAAoB,CAAC;IAEhC,QAAQ,EAAE,MAAM,CAAC;IAEjB,UAAU,EAAE,MAAM,CAAC;IAEnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAgBD,MAAM,WAAW,UAAU;IAEzB,SAAS,EAAE,OAAO,CAAC;IAEnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAEvB,UAAU,EAAE,oBAAoB,EAAE,CAAC;IAEnC,gBAAgB,EAAE,MAAM,CAAC;CAC1B"}

package/dist/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const VERSION: string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,OAAO,EAAE,MAIb,CAAC"}

package/dist/version.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VERSION = void 0;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+exports.VERSION = JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(__dirname, "..", "package.json"), "utf8")).version;
+//# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,61 @@
 {
   "name": "@sebastienrousseau/crypto-wasm",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.0.8",
+  "description": "WebAssembly performance accelerator for crypto-lib — near-native speed for heavy cryptographic operations.",
+  "author": "Sebastien Rousseau <sebastienrousseau@users.noreply.github.com>",
+  "license": "MIT OR Apache-2.0",
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "require": "./dist/index.js",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist/**/*.js",
+    "dist/**/*.d.ts",
+    "dist/**/*.d.ts.map",
+    "wasm/"
+  ],
+  "devDependencies": {
+    "@types/chai": "^4.3.7",
+    "@types/chai-as-promised": "^8.0.2",
+    "@types/mocha": "^10.0.2",
+    "@types/node": "^26.6.3",
+    "c8": "^12.0.0",
+    "chai": "^4.5.0",
+    "chai-as-promised": "^7.1.2",
+    "mocha": "^10.8.2",
+    "rimraf": "^6.1.3",
+    "ts-node": "^10.9.2",
+    "typedoc": "^0.28.20",
+    "typescript": "~5.9.3"
+  },
+  "homepage": "https://github.com/sebastienrousseau/crypto-service/tree/main/packages/crypto-wasm",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/sebastienrousseau/crypto-service.git",
+    "directory": "packages/crypto-wasm"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "private": false,
+  "scripts": {
+    "build": "tsc --build tsconfig.json",
+    "build:wasm": "echo 'WASM build requires Rust toolchain — see README'",
+    "clean": "rimraf ./coverage ./dist ./docs",
+    "test": "c8 --check-coverage --lines 100 --branches 100 --functions 100 --reporter=lcov --reporter=text mocha --config=.mocharc.cjs",
+    "docs": "typedoc",
+    "lint": "eslint --ext .ts src __tests__",
+    "lint:fix": "eslint --cache --fix --ext .ts src __tests__",
+    "format": "prettier --write src/**/*.ts",
+    "format:check": "prettier --check \"src/**/*.ts\""
+  }
 }