@zensre/lenny-wasm 0.0.0 → 0.0.1

package/README.md

@@ -0,0 +1,86 @@
+# lenny-wasm
+
+WebAssembly bindings for the [Lenny](https://github.com/ZenSRE/lenny) secret redaction engine.
+
+Runs in Node.js, browsers, Deno, and any WASM-capable runtime. No native compilation needed. Scans and redacts known secrets using BLAKE3 + rolling hash. Includes 216 built-in pattern rules.
+
+## Installation
+
+```bash
+npm install lenny-wasm
+```
+
+## Usage
+
+### Exact-match redaction
+
+```js
+import { Engine, PatternScanner } from 'lenny-wasm';
+
+const engine = new Engine();
+engine.loadSecrets([{ name: 'key', value: 'secret123' }]);
+
+const result = engine.scan('the key is secret123');
+console.log(result.output);        // "the key is [REDACTED:key]"
+console.log(result.hasRedactions);  // true
+```
+
+### Pattern scanning
+
+```js
+const scanner = new PatternScanner();
+const matches = scanner.scan('AWS_KEY=AKIAIOSFODNN7EXAMPLE');
+console.log(matches[0].ruleId); // "aws-access-key"
+```
+
+### Binary scanning
+
+```js
+const redacted = engine.scanBytes(new Uint8Array([...]));
+```
+
+## API
+
+### `new Engine(opts?)`
+
+Creates a scanning engine. Options: `{ patterns: boolean }` (default: true).
+
+### `engine.loadSecrets(secrets)`
+
+Load secrets from an array of objects. Required: `name` (string), `value` (string).
+
+Optional fields:
+- `tier`: `"log"` (default), `"alert"`, or `"page"`
+- `redaction`: `"tagged"` (default), `"full"`, or `"partial"`
+- `prefix` / `suffix`: bytes for partial redaction (default: 4)
+- `canary`: boolean (default: false)
+- `transformations`: array of `"base64"` and/or `"url"`
+
+### `engine.scan(input) -> ScanResult`
+
+Scan a string. Returns an object with:
+- `output` (string) -- redacted output
+- `hasRedactions`, `hasCanaryHit`, `hasExactMatchRedactions` (boolean)
+- `eventCount` (number)
+- `events` (array) -- `secretName`, `tier`, `isCanary`, `byteOffset`, `matchedLen`, `contextSnippet`, `source`
+
+### `engine.scanBytes(Uint8Array) -> Uint8Array`
+
+Scan binary data. Returns redacted bytes only (no events).
+
+### `new PatternScanner()`
+
+- `scan(input)` -- returns array of `{ ruleId, description, tier, start, end }`
+- `ruleCount()` -- returns number of loaded rules
+
+## Native Alternative
+
+For maximum performance, use [`@zensre/lenny-napi`](https://www.npmjs.com/package/@zensre/lenny-napi) (native addon, ~10x faster).
+
+## Full Documentation
+
+See the [Lenny project](https://github.com/ZenSRE/lenny) for configuration, deployment, threat model, and the complete list of pattern rules.
+
+## License
+
+MIT

package/lenny_wasm.d.ts

@@ -0,0 +1,78 @@
+/* tslint:disable */
+/* eslint-disable */
+
+export class Engine {
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Load secrets from a JSON string.
+     *
+     * Each element must have at minimum `name` (string) and `value` (string).
+     * Optional fields:
+     * - `tier`: `"log"` (default) | `"alert"` | `"page"`
+     * - `redaction`: `"full"` | `"tagged"` (default)
+     * - `canary`: boolean (default false)
+     * - `transformations`: array of `"base64"` | `"url"`
+     *
+     * Example:
+     * ```json
+     * [{"name":"MY_KEY","value":"s3cr3t","tier":"alert","redaction":"tagged","canary":false,"transformations":["base64"]}]
+     * ```
+     */
+    loadSecrets(secrets: any): void;
+    /**
+     * Create an Engine with built-in pattern scanning enabled by default.
+     * Pass a configuration object like `{ patterns: false }` to disable pattern scanning.
+     */
+    constructor(opts?: any | null);
+    /**
+     * Scan a string for secrets.
+     *
+     * Returns a native JavaScript object:
+     * ```
+     * {
+     *   output: "...",
+     *   hasRedactions: true,
+     *   hasCanaryHit: false,
+     *   hasExactMatchRedactions: true,
+     *   eventCount: 1,
+     *   events: [
+     *     {
+     *       secretName: "MY_KEY",
+     *       tier: "alert",
+     *       isCanary: false,
+     *       byteOffset: 12,
+     *       matchedLen: 6,
+     *       contextSnippet: "...MY_KEY=[REDACTED]..."
+     *     }
+     *   ]
+     * }
+     * ```
+     */
+    scan(input: string): any;
+    /**
+     * Scan bytes (Uint8Array). Returns the redacted bytes.
+     */
+    scanBytes(input: Uint8Array): Uint8Array;
+}
+
+export class PatternScanner {
+    free(): void;
+    [Symbol.dispose](): void;
+    constructor();
+    /**
+     * Returns the number of loaded pattern rules.
+     */
+    ruleCount(): number;
+    /**
+     * Scan for pattern matches.
+     *
+     * Returns a native JavaScript array of objects:
+     * ```
+     * [{ ruleId: "aws-access-key", description: "AWS Access Key", tier: "alert", start: 0, end: 20 }]
+     * ```
+     */
+    scan(input: string): any;
+}
+
+export function init(): void;

package/lenny_wasm.js

@@ -0,0 +1,557 @@
+/* @ts-self-types="./lenny_wasm.d.ts" */
+
+class Engine {
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        EngineFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_engine_free(ptr, 0);
+    }
+    /**
+     * Load secrets from a JSON string.
+     *
+     * Each element must have at minimum `name` (string) and `value` (string).
+     * Optional fields:
+     * - `tier`: `"log"` (default) | `"alert"` | `"page"`
+     * - `redaction`: `"full"` | `"tagged"` (default)
+     * - `canary`: boolean (default false)
+     * - `transformations`: array of `"base64"` | `"url"`
+     *
+     * Example:
+     * ```json
+     * [{"name":"MY_KEY","value":"s3cr3t","tier":"alert","redaction":"tagged","canary":false,"transformations":["base64"]}]
+     * ```
+     * @param {any} secrets
+     */
+    loadSecrets(secrets) {
+        const ret = wasm.engine_loadSecrets(this.__wbg_ptr, secrets);
+        if (ret[1]) {
+            throw takeFromExternrefTable0(ret[0]);
+        }
+    }
+    /**
+     * Create an Engine with built-in pattern scanning enabled by default.
+     * Pass a configuration object like `{ patterns: false }` to disable pattern scanning.
+     * @param {any | null} [opts]
+     */
+    constructor(opts) {
+        const ret = wasm.engine_new(isLikeNone(opts) ? 0 : addToExternrefTable0(opts));
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        this.__wbg_ptr = ret[0] >>> 0;
+        EngineFinalization.register(this, this.__wbg_ptr, this);
+        return this;
+    }
+    /**
+     * Scan a string for secrets.
+     *
+     * Returns a native JavaScript object:
+     * ```
+     * {
+     *   output: "...",
+     *   hasRedactions: true,
+     *   hasCanaryHit: false,
+     *   hasExactMatchRedactions: true,
+     *   eventCount: 1,
+     *   events: [
+     *     {
+     *       secretName: "MY_KEY",
+     *       tier: "alert",
+     *       isCanary: false,
+     *       byteOffset: 12,
+     *       matchedLen: 6,
+     *       contextSnippet: "...MY_KEY=[REDACTED]..."
+     *     }
+     *   ]
+     * }
+     * ```
+     * @param {string} input
+     * @returns {any}
+     */
+    scan(input) {
+        const ptr0 = passStringToWasm0(input, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.engine_scan(this.__wbg_ptr, ptr0, len0);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return takeFromExternrefTable0(ret[0]);
+    }
+    /**
+     * Scan bytes (Uint8Array). Returns the redacted bytes.
+     * @param {Uint8Array} input
+     * @returns {Uint8Array}
+     */
+    scanBytes(input) {
+        const ptr0 = passArray8ToWasm0(input, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.engine_scanBytes(this.__wbg_ptr, ptr0, len0);
+        var v2 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+        wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+        return v2;
+    }
+}
+if (Symbol.dispose) Engine.prototype[Symbol.dispose] = Engine.prototype.free;
+exports.Engine = Engine;
+
+class PatternScanner {
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        PatternScannerFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_patternscanner_free(ptr, 0);
+    }
+    constructor() {
+        const ret = wasm.patternscanner_new();
+        this.__wbg_ptr = ret >>> 0;
+        PatternScannerFinalization.register(this, this.__wbg_ptr, this);
+        return this;
+    }
+    /**
+     * Returns the number of loaded pattern rules.
+     * @returns {number}
+     */
+    ruleCount() {
+        const ret = wasm.patternscanner_ruleCount(this.__wbg_ptr);
+        return ret >>> 0;
+    }
+    /**
+     * Scan for pattern matches.
+     *
+     * Returns a native JavaScript array of objects:
+     * ```
+     * [{ ruleId: "aws-access-key", description: "AWS Access Key", tier: "alert", start: 0, end: 20 }]
+     * ```
+     * @param {string} input
+     * @returns {any}
+     */
+    scan(input) {
+        const ptr0 = passStringToWasm0(input, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.patternscanner_scan(this.__wbg_ptr, ptr0, len0);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return takeFromExternrefTable0(ret[0]);
+    }
+}
+if (Symbol.dispose) PatternScanner.prototype[Symbol.dispose] = PatternScanner.prototype.free;
+exports.PatternScanner = PatternScanner;
+
+function init() {
+    wasm.init();
+}
+exports.init = init;
+
+function __wbg_get_imports() {
+    const import0 = {
+        __proto__: null,
+        __wbg_Error_2e59b1b37a9a34c3: function(arg0, arg1) {
+            const ret = Error(getStringFromWasm0(arg0, arg1));
+            return ret;
+        },
+        __wbg_Number_e6ffdb596c888833: function(arg0) {
+            const ret = Number(arg0);
+            return ret;
+        },
+        __wbg_String_8564e559799eccda: function(arg0, arg1) {
+            const ret = String(arg1);
+            const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            const len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg___wbindgen_bigint_get_as_i64_2c5082002e4826e2: function(arg0, arg1) {
+            const v = arg1;
+            const ret = typeof(v) === 'bigint' ? v : undefined;
+            getDataViewMemory0().setBigInt64(arg0 + 8 * 1, isLikeNone(ret) ? BigInt(0) : ret, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, !isLikeNone(ret), true);
+        },
+        __wbg___wbindgen_boolean_get_a86c216575a75c30: function(arg0) {
+            const v = arg0;
+            const ret = typeof(v) === 'boolean' ? v : undefined;
+            return isLikeNone(ret) ? 0xFFFFFF : ret ? 1 : 0;
+        },
+        __wbg___wbindgen_debug_string_dd5d2d07ce9e6c57: function(arg0, arg1) {
+            const ret = debugString(arg1);
+            const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            const len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg___wbindgen_in_4bd7a57e54337366: function(arg0, arg1) {
+            const ret = arg0 in arg1;
+            return ret;
+        },
+        __wbg___wbindgen_is_bigint_6c98f7e945dacdde: function(arg0) {
+            const ret = typeof(arg0) === 'bigint';
+            return ret;
+        },
+        __wbg___wbindgen_is_function_49868bde5eb1e745: function(arg0) {
+            const ret = typeof(arg0) === 'function';
+            return ret;
+        },
+        __wbg___wbindgen_is_null_344c8750a8525473: function(arg0) {
+            const ret = arg0 === null;
+            return ret;
+        },
+        __wbg___wbindgen_is_object_40c5a80572e8f9d3: function(arg0) {
+            const val = arg0;
+            const ret = typeof(val) === 'object' && val !== null;
+            return ret;
+        },
+        __wbg___wbindgen_is_undefined_c0cca72b82b86f4d: function(arg0) {
+            const ret = arg0 === undefined;
+            return ret;
+        },
+        __wbg___wbindgen_jsval_eq_7d430e744a913d26: function(arg0, arg1) {
+            const ret = arg0 === arg1;
+            return ret;
+        },
+        __wbg___wbindgen_jsval_loose_eq_3a72ae764d46d944: function(arg0, arg1) {
+            const ret = arg0 == arg1;
+            return ret;
+        },
+        __wbg___wbindgen_number_get_7579aab02a8a620c: function(arg0, arg1) {
+            const obj = arg1;
+            const ret = typeof(obj) === 'number' ? obj : undefined;
+            getDataViewMemory0().setFloat64(arg0 + 8 * 1, isLikeNone(ret) ? 0 : ret, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, !isLikeNone(ret), true);
+        },
+        __wbg___wbindgen_string_get_914df97fcfa788f2: function(arg0, arg1) {
+            const obj = arg1;
+            const ret = typeof(obj) === 'string' ? obj : undefined;
+            var ptr1 = isLikeNone(ret) ? 0 : passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            var len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg___wbindgen_throw_81fc77679af83bc6: function(arg0, arg1) {
+            throw new Error(getStringFromWasm0(arg0, arg1));
+        },
+        __wbg_call_7f2987183bb62793: function() { return handleError(function (arg0, arg1) {
+            const ret = arg0.call(arg1);
+            return ret;
+        }, arguments); },
+        __wbg_done_547d467e97529006: function(arg0) {
+            const ret = arg0.done;
+            return ret;
+        },
+        __wbg_get_ed0642c4b9d31ddf: function() { return handleError(function (arg0, arg1) {
+            const ret = Reflect.get(arg0, arg1);
+            return ret;
+        }, arguments); },
+        __wbg_get_unchecked_7d7babe32e9e6a54: function(arg0, arg1) {
+            const ret = arg0[arg1 >>> 0];
+            return ret;
+        },
+        __wbg_get_with_ref_key_6412cf3094599694: function(arg0, arg1) {
+            const ret = arg0[arg1];
+            return ret;
+        },
+        __wbg_instanceof_ArrayBuffer_ff7c1337a5e3b33a: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof ArrayBuffer;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_instanceof_Uint8Array_4b8da683deb25d72: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof Uint8Array;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_isArray_db61795ad004c139: function(arg0) {
+            const ret = Array.isArray(arg0);
+            return ret;
+        },
+        __wbg_isSafeInteger_ea83862ba994770c: function(arg0) {
+            const ret = Number.isSafeInteger(arg0);
+            return ret;
+        },
+        __wbg_iterator_de403ef31815a3e6: function() {
+            const ret = Symbol.iterator;
+            return ret;
+        },
+        __wbg_length_0c32cb8543c8e4c8: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
+        __wbg_length_6e821edde497a532: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
+        __wbg_new_4f9fafbb3909af72: function() {
+            const ret = new Object();
+            return ret;
+        },
+        __wbg_new_a560378ea1240b14: function(arg0) {
+            const ret = new Uint8Array(arg0);
+            return ret;
+        },
+        __wbg_new_f3c9df4f38f3f798: function() {
+            const ret = new Array();
+            return ret;
+        },
+        __wbg_next_01132ed6134b8ef5: function(arg0) {
+            const ret = arg0.next;
+            return ret;
+        },
+        __wbg_next_b3713ec761a9dbfd: function() { return handleError(function (arg0) {
+            const ret = arg0.next();
+            return ret;
+        }, arguments); },
+        __wbg_prototypesetcall_3e05eb9545565046: function(arg0, arg1, arg2) {
+            Uint8Array.prototype.set.call(getArrayU8FromWasm0(arg0, arg1), arg2);
+        },
+        __wbg_set_6be42768c690e380: function(arg0, arg1, arg2) {
+            arg0[arg1] = arg2;
+        },
+        __wbg_set_6c60b2e8ad0e9383: function(arg0, arg1, arg2) {
+            arg0[arg1 >>> 0] = arg2;
+        },
+        __wbg_value_7f6052747ccf940f: function(arg0) {
+            const ret = arg0.value;
+            return ret;
+        },
+        __wbindgen_cast_0000000000000001: function(arg0) {
+            // Cast intrinsic for `F64 -> Externref`.
+            const ret = arg0;
+            return ret;
+        },
+        __wbindgen_cast_0000000000000002: function(arg0, arg1) {
+            // Cast intrinsic for `Ref(String) -> Externref`.
+            const ret = getStringFromWasm0(arg0, arg1);
+            return ret;
+        },
+        __wbindgen_cast_0000000000000003: function(arg0) {
+            // Cast intrinsic for `U64 -> Externref`.
+            const ret = BigInt.asUintN(64, arg0);
+            return ret;
+        },
+        __wbindgen_init_externref_table: function() {
+            const table = wasm.__wbindgen_externrefs;
+            const offset = table.grow(4);
+            table.set(0, undefined);
+            table.set(offset + 0, undefined);
+            table.set(offset + 1, null);
+            table.set(offset + 2, true);
+            table.set(offset + 3, false);
+        },
+    };
+    return {
+        __proto__: null,
+        "./lenny_wasm_bg.js": import0,
+    };
+}
+
+const EngineFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_engine_free(ptr >>> 0, 1));
+const PatternScannerFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_patternscanner_free(ptr >>> 0, 1));
+
+function addToExternrefTable0(obj) {
+    const idx = wasm.__externref_table_alloc();
+    wasm.__wbindgen_externrefs.set(idx, obj);
+    return idx;
+}
+
+function debugString(val) {
+    // primitive types
+    const type = typeof val;
+    if (type == 'number' || type == 'boolean' || val == null) {
+        return  `${val}`;
+    }
+    if (type == 'string') {
+        return `"${val}"`;
+    }
+    if (type == 'symbol') {
+        const description = val.description;
+        if (description == null) {
+            return 'Symbol';
+        } else {
+            return `Symbol(${description})`;
+        }
+    }
+    if (type == 'function') {
+        const name = val.name;
+        if (typeof name == 'string' && name.length > 0) {
+            return `Function(${name})`;
+        } else {
+            return 'Function';
+        }
+    }
+    // objects
+    if (Array.isArray(val)) {
+        const length = val.length;
+        let debug = '[';
+        if (length > 0) {
+            debug += debugString(val[0]);
+        }
+        for(let i = 1; i < length; i++) {
+            debug += ', ' + debugString(val[i]);
+        }
+        debug += ']';
+        return debug;
+    }
+    // Test for built-in
+    const builtInMatches = /\[object ([^\]]+)\]/.exec(toString.call(val));
+    let className;
+    if (builtInMatches && builtInMatches.length > 1) {
+        className = builtInMatches[1];
+    } else {
+        // Failed to match the standard '[object ClassName]'
+        return toString.call(val);
+    }
+    if (className == 'Object') {
+        // we're a user defined class or Object
+        // JSON.stringify avoids problems with cycles, and is generally much
+        // easier than looping through ownProperties of `val`.
+        try {
+            return 'Object(' + JSON.stringify(val) + ')';
+        } catch (_) {
+            return 'Object';
+        }
+    }
+    // errors
+    if (val instanceof Error) {
+        return `${val.name}: ${val.message}\n${val.stack}`;
+    }
+    // TODO we could test for more things here, like `Set`s and `Map`s.
+    return className;
+}
+
+function getArrayU8FromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);
+}
+
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
+
+function getStringFromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return decodeText(ptr, len);
+}
+
+let cachedUint8ArrayMemory0 = null;
+function getUint8ArrayMemory0() {
+    if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
+        cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
+    }
+    return cachedUint8ArrayMemory0;
+}
+
+function handleError(f, args) {
+    try {
+        return f.apply(this, args);
+    } catch (e) {
+        const idx = addToExternrefTable0(e);
+        wasm.__wbindgen_exn_store(idx);
+    }
+}
+
+function isLikeNone(x) {
+    return x === undefined || x === null;
+}
+
+function passArray8ToWasm0(arg, malloc) {
+    const ptr = malloc(arg.length * 1, 1) >>> 0;
+    getUint8ArrayMemory0().set(arg, ptr / 1);
+    WASM_VECTOR_LEN = arg.length;
+    return ptr;
+}
+
+function passStringToWasm0(arg, malloc, realloc) {
+    if (realloc === undefined) {
+        const buf = cachedTextEncoder.encode(arg);
+        const ptr = malloc(buf.length, 1) >>> 0;
+        getUint8ArrayMemory0().subarray(ptr, ptr + buf.length).set(buf);
+        WASM_VECTOR_LEN = buf.length;
+        return ptr;
+    }
+
+    let len = arg.length;
+    let ptr = malloc(len, 1) >>> 0;
+
+    const mem = getUint8ArrayMemory0();
+
+    let offset = 0;
+
+    for (; offset < len; offset++) {
+        const code = arg.charCodeAt(offset);
+        if (code > 0x7F) break;
+        mem[ptr + offset] = code;
+    }
+    if (offset !== len) {
+        if (offset !== 0) {
+            arg = arg.slice(offset);
+        }
+        ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
+        const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
+        const ret = cachedTextEncoder.encodeInto(arg, view);
+
+        offset += ret.written;
+        ptr = realloc(ptr, len, offset, 1) >>> 0;
+    }
+
+    WASM_VECTOR_LEN = offset;
+    return ptr;
+}
+
+function takeFromExternrefTable0(idx) {
+    const value = wasm.__wbindgen_externrefs.get(idx);
+    wasm.__externref_table_dealloc(idx);
+    return value;
+}
+
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+cachedTextDecoder.decode();
+function decodeText(ptr, len) {
+    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
+}
+
+const cachedTextEncoder = new TextEncoder();
+
+if (!('encodeInto' in cachedTextEncoder)) {
+    cachedTextEncoder.encodeInto = function (arg, view) {
+        const buf = cachedTextEncoder.encode(arg);
+        view.set(buf);
+        return {
+            read: arg.length,
+            written: buf.length
+        };
+    };
+}
+
+let WASM_VECTOR_LEN = 0;
+
+const wasmPath = `${__dirname}/lenny_wasm_bg.wasm`;
+const wasmBytes = require('fs').readFileSync(wasmPath);
+const wasmModule = new WebAssembly.Module(wasmBytes);
+let wasm = new WebAssembly.Instance(wasmModule, __wbg_get_imports()).exports;
+wasm.__wbindgen_start();

package/package.json

@@ -1 +1,24 @@
-{"name":"@zensre/lenny-wasm","version":"0.0.0","description":"WebAssembly bindings for Lenny secret redaction engine"}
+{
+  "name": "@zensre/lenny-wasm",
+  "description": "WebAssembly bindings for Lenny secret redaction engine",
+  "version": "0.0.1",
+  "license": "MIT OR Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ZenSRE/lenny"
+  },
+  "files": [
+    "lenny_wasm_bg.wasm",
+    "lenny_wasm.js",
+    "lenny_wasm.d.ts"
+  ],
+  "main": "lenny_wasm.js",
+  "types": "lenny_wasm.d.ts",
+  "keywords": [
+    "security",
+    "secrets",
+    "redaction",
+    "scanning",
+    "proxy"
+  ]
+}