c2pa-text-binding 0.2.0

package/README.md

@@ -0,0 +1,87 @@
+<p align="center">
+  <h1 align="center">c2pa-text-binding</h1>
+  <p align="center">C2PA soft binding and content fingerprinting for text assets</p>
+</p>
+
+<p align="center">
+  <a href="https://github.com/writerslogic/c2pa-text-binding/actions/workflows/ci.yml"><img src="https://github.com/writerslogic/c2pa-text-binding/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
+  <a href="https://crates.io/crates/c2pa-text-binding"><img src="https://img.shields.io/crates/v/c2pa-text-binding.svg" alt="crates.io"></a>
+  <a href="https://docs.rs/c2pa-text-binding"><img src="https://docs.rs/c2pa-text-binding/badge.svg" alt="docs.rs"></a>
+  <a href="#license"><img src="https://img.shields.io/crates/l/c2pa-text-binding.svg" alt="License"></a>
+</p>
+
+## Overview
+
+A concrete family of text soft-binding algorithms compatible with the [C2PA Soft Binding](https://spec.c2pa.org/) framework, each registered in the [C2PA soft binding algorithm list](https://github.com/c2pa-org/softbinding-algorithm-list). A soft binding derives a content-keyed value that survives reformatting, re-encoding, excerpting, and light editing, so a manifest is recoverable when the hard binding — a byte-exact hash — has been broken.
+
+| Module | Algorithm (list id) | Kind |
+|---|---|---|
+| `simhash` | `com.writerslogic.text-fingerprint.1` (41) | surface fingerprint |
+| `stego` | `com.writerslogic.zwc-watermark.2` (42) | zero-width watermark |
+| `structure` | `com.writerslogic.text-structure.1` (43) | structural fingerprint |
+| `minhash` | `com.writerslogic.text-minhash.1` (44) | excerpt/quotation fingerprint |
+
+This crate is the **perceptual/watermark recovery layer**. It is distinct from the Variation-Selector transport used elsewhere in WritersProof, which is a *hard* binding (a `c2pa.hash.data` over normalized text) and is not soft binding. Registration in the algorithm list is **not** C2PA conformance certification.
+
+## Quick Start
+
+```toml
+[dependencies]
+c2pa-text-binding = "0.1"
+```
+
+### Emit and sign a `c2pa.soft-binding` assertion
+
+`soft_binding` builds the normative CBOR assertion (it round-trips through the
+`c2pa-rs` reader — see `tests/c2pa_roundtrip.rs`); `manifest` signs it as a
+COSE_Sign1 / EdDSA envelope.
+
+```rust
+use c2pa_text_binding::{simhash::Fingerprint, soft_binding, sign_cose, SOFT_BINDING_LABEL};
+
+let text = "…the document being bound…";
+let secret_key = [7u8; 32];                   // caller-supplied Ed25519 secret
+let assertion = soft_binding::from_fingerprint(&Fingerprint::compute(text));
+let cbor = assertion.to_cbor()?;              // store under SOFT_BINDING_LABEL
+let signed = sign_cose(&cbor, &secret_key)?;  // detached-key COSE_Sign1
+# Ok::<(), c2pa_text_binding::Error>(())
+```
+
+### Recover and classify a candidate
+
+The verify path recomputes the fingerprint from the current text, compares it to
+the stored value at the algorithm's registered threshold, and returns a
+confidence tier. BOUND requires a *durable* fingerprint match (41/44, measured
+zero false matches) plus the anti-transfer cross-check; a structural (43) match
+or a watermark hit alone caps at LIKELY. Tier thresholds are grounded in
+[`ROBUSTNESS.md`](ROBUSTNESS.md).
+
+```rust
+use c2pa_text_binding::{simhash::Fingerprint, soft_binding::{self, SoftBinding}, verify, Confidence};
+
+let text = "…the document being bound…";
+let cbor = soft_binding::from_fingerprint(&Fingerprint::compute(text)).to_cbor()?;
+
+let candidate = SoftBinding::from_cbor(&cbor)?;
+let tier = verify(text, &candidate, /*watermark_verified=*/ false, /*crosscheck_ok=*/ true);
+assert_eq!(tier, Confidence::Bound);
+# Ok::<(), c2pa_text_binding::Error>(())
+```
+
+### Register with the Soft Binding Resolution API
+
+These algorithms are registered in the [C2PA soft binding algorithm list](https://github.com/c2pa-org/softbinding-algorithm-list), so a `c2pa.soft-binding` assertion referencing them can drive [decentralized manifest recovery](https://spec.c2pa.org/).
+
+## Related Crates
+
+| Crate | Description |
+|---|---|
+| [c2pa-structured-text](https://github.com/writerslogic/c2pa-structured-text) | Structured text embedding via ASCII armour delimiters |
+| [c2pa-text](https://crates.io/crates/c2pa-text) | Unstructured text embedding via Unicode Variation Selectors |
+| [c2pa-rs](https://crates.io/crates/c2pa) | Official C2PA SDK |
+
+## License
+
+Licensed under either of [Apache License, Version 2.0](LICENSE-APACHE) or [MIT License](LICENSE-MIT) at your option.
+
+Built by [WritersLogic](https://writerslogic.com)

package/c2pa_text_binding.d.ts

@@ -0,0 +1,145 @@
+/* tslint:disable */
+/* eslint-disable */
+
+/**
+ * SHA-256 of the canonical stream (the blind-recoverable content hash), hex.
+ */
+export function content_hash(text: string): string;
+
+/**
+ * Anti-transfer cross-check tag (hex): `HMAC(key, repo_id ‖ content_hash)`.
+ */
+export function cross_check(key_hex: string, repo_id: string, content_hash_hex: string): string;
+
+/**
+ * Embed a `zwc-watermark.2` carrying `pointer_hex`, bound to the content by
+ * `key_hex`. Returns the watermarked text.
+ */
+export function embed_watermark(text: string, pointer_hex: string, key_hex: string): string;
+
+/**
+ * Blind-extract and verify a `zwc-watermark.2`. Returns
+ * `{"pointer":"<hex>","verified":<bool>,"recovered":<n>}`.
+ */
+export function extract_watermark(text: string, key_hex: string): string;
+
+/**
+ * Hamming distance in bits between two 256-bit hex fingerprints.
+ */
+export function hamming_hex(a: string, b: string): number;
+
+/**
+ * The 32 LSH band hashes, comma-joined — index keys for discovery.
+ */
+export function minhash_bands(text: string): string;
+
+/**
+ * Estimated Jaccard from two comma-joined MinHash signatures.
+ */
+export function minhash_jaccard(sig_a: string, sig_b: string): number;
+
+/**
+ * `com.writerslogic.text-minhash.1` — 128 signature values, comma-joined.
+ */
+export function minhash_signature(text: string): string;
+
+/**
+ * Derive the Ed25519 public key (hex) from a 32-byte secret key (hex).
+ */
+export function public_key(secret_hex: string): string;
+
+/**
+ * Sign a payload (e.g. the soft-binding assertion JSON) as tagged
+ * COSE_Sign1 / EdDSA. Returns the envelope as hex.
+ */
+export function sign(payload: string, secret_hex: string): string;
+
+/**
+ * Build the `c2pa.soft-binding` assertion (list id 41, surface fingerprint)
+ * as CBOR, hex-encoded. Sign the result with [`sign`] and store it under the
+ * `c2pa.soft-binding` label. Includes per-window scoped blocks.
+ */
+export function soft_binding_fingerprint(text: string): string;
+
+/**
+ * Build the `c2pa.soft-binding` assertion (list id 44, MinHash) as CBOR hex.
+ */
+export function soft_binding_minhash(text: string): string;
+
+/**
+ * Build the `c2pa.soft-binding` assertion (list id 43, structural) as CBOR hex.
+ */
+export function soft_binding_structure(text: string): string;
+
+/**
+ * Build the `c2pa.soft-binding` assertion (list id 42, ZWC watermark) for a
+ * routing `pointer_hex`, as CBOR hex.
+ */
+export function soft_binding_watermark(pointer_hex: string): string;
+
+/**
+ * `com.writerslogic.text-fingerprint.1` — 256-bit surface SimHash, hex.
+ */
+export function text_fingerprint(text: string): string;
+
+/**
+ * `com.writerslogic.text-structure.1` — 256-bit structural SimHash, hex.
+ */
+export function text_structure(text: string): string;
+
+/**
+ * Verify a hex COSE_Sign1 envelope against a hex public key; returns the
+ * payload string on success, throws on failure.
+ */
+export function verify(cose_hex: string, public_hex: string): string;
+
+export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembly.Module;
+
+export interface InitOutput {
+    readonly memory: WebAssembly.Memory;
+    readonly content_hash: (a: number, b: number) => [number, number];
+    readonly cross_check: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+    readonly embed_watermark: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+    readonly extract_watermark: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly hamming_hex: (a: number, b: number, c: number, d: number) => [number, number, number];
+    readonly minhash_bands: (a: number, b: number) => [number, number];
+    readonly minhash_jaccard: (a: number, b: number, c: number, d: number) => [number, number, number];
+    readonly minhash_signature: (a: number, b: number) => [number, number];
+    readonly public_key: (a: number, b: number) => [number, number, number, number];
+    readonly sign: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly soft_binding_fingerprint: (a: number, b: number) => [number, number];
+    readonly soft_binding_minhash: (a: number, b: number) => [number, number];
+    readonly soft_binding_structure: (a: number, b: number) => [number, number];
+    readonly soft_binding_watermark: (a: number, b: number) => [number, number, number, number];
+    readonly text_fingerprint: (a: number, b: number) => [number, number];
+    readonly text_structure: (a: number, b: number) => [number, number];
+    readonly verify: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly __wbindgen_externrefs: WebAssembly.Table;
+    readonly __wbindgen_malloc: (a: number, b: number) => number;
+    readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
+    readonly __wbindgen_free: (a: number, b: number, c: number) => void;
+    readonly __externref_table_dealloc: (a: number) => void;
+    readonly __wbindgen_start: () => void;
+}
+
+export type SyncInitInput = BufferSource | WebAssembly.Module;
+
+/**
+ * Instantiates the given `module`, which can either be bytes or
+ * a precompiled `WebAssembly.Module`.
+ *
+ * @param {{ module: SyncInitInput }} module - Passing `SyncInitInput` directly is deprecated.
+ *
+ * @returns {InitOutput}
+ */
+export function initSync(module: { module: SyncInitInput } | SyncInitInput): InitOutput;
+
+/**
+ * If `module_or_path` is {RequestInfo} or {URL}, makes a request and
+ * for everything else, calls `WebAssembly.instantiate` directly.
+ *
+ * @param {{ module_or_path: InitInput | Promise<InitInput> }} module_or_path - Passing `InitInput` directly is deprecated.
+ *
+ * @returns {Promise<InitOutput>}
+ */
+export default function __wbg_init (module_or_path?: { module_or_path: InitInput | Promise<InitInput> } | InitInput | Promise<InitInput>): Promise<InitOutput>;

package/c2pa_text_binding.js

@@ -0,0 +1,606 @@
+/* @ts-self-types="./c2pa_text_binding.d.ts" */
+
+/**
+ * SHA-256 of the canonical stream (the blind-recoverable content hash), hex.
+ * @param {string} text
+ * @returns {string}
+ */
+export function content_hash(text) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const ptr0 = passStringToWasm0(text, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.content_hash(ptr0, len0);
+        deferred2_0 = ret[0];
+        deferred2_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+    }
+}
+
+/**
+ * Anti-transfer cross-check tag (hex): `HMAC(key, repo_id ‖ content_hash)`.
+ * @param {string} key_hex
+ * @param {string} repo_id
+ * @param {string} content_hash_hex
+ * @returns {string}
+ */
+export function cross_check(key_hex, repo_id, content_hash_hex) {
+    let deferred5_0;
+    let deferred5_1;
+    try {
+        const ptr0 = passStringToWasm0(key_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(repo_id, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ptr2 = passStringToWasm0(content_hash_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len2 = WASM_VECTOR_LEN;
+        const ret = wasm.cross_check(ptr0, len0, ptr1, len1, ptr2, len2);
+        var ptr4 = ret[0];
+        var len4 = ret[1];
+        if (ret[3]) {
+            ptr4 = 0; len4 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred5_0 = ptr4;
+        deferred5_1 = len4;
+        return getStringFromWasm0(ptr4, len4);
+    } finally {
+        wasm.__wbindgen_free(deferred5_0, deferred5_1, 1);
+    }
+}
+
+/**
+ * Embed a `zwc-watermark.2` carrying `pointer_hex`, bound to the content by
+ * `key_hex`. Returns the watermarked text.
+ * @param {string} text
+ * @param {string} pointer_hex
+ * @param {string} key_hex
+ * @returns {string}
+ */
+export function embed_watermark(text, pointer_hex, key_hex) {
+    let deferred5_0;
+    let deferred5_1;
+    try {
+        const ptr0 = passStringToWasm0(text, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(pointer_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ptr2 = passStringToWasm0(key_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len2 = WASM_VECTOR_LEN;
+        const ret = wasm.embed_watermark(ptr0, len0, ptr1, len1, ptr2, len2);
+        var ptr4 = ret[0];
+        var len4 = ret[1];
+        if (ret[3]) {
+            ptr4 = 0; len4 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred5_0 = ptr4;
+        deferred5_1 = len4;
+        return getStringFromWasm0(ptr4, len4);
+    } finally {
+        wasm.__wbindgen_free(deferred5_0, deferred5_1, 1);
+    }
+}
+
+/**
+ * Blind-extract and verify a `zwc-watermark.2`. Returns
+ * `{"pointer":"<hex>","verified":<bool>,"recovered":<n>}`.
+ * @param {string} text
+ * @param {string} key_hex
+ * @returns {string}
+ */
+export function extract_watermark(text, key_hex) {
+    let deferred4_0;
+    let deferred4_1;
+    try {
+        const ptr0 = passStringToWasm0(text, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(key_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ret = wasm.extract_watermark(ptr0, len0, ptr1, len1);
+        var ptr3 = ret[0];
+        var len3 = ret[1];
+        if (ret[3]) {
+            ptr3 = 0; len3 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred4_0 = ptr3;
+        deferred4_1 = len3;
+        return getStringFromWasm0(ptr3, len3);
+    } finally {
+        wasm.__wbindgen_free(deferred4_0, deferred4_1, 1);
+    }
+}
+
+/**
+ * Hamming distance in bits between two 256-bit hex fingerprints.
+ * @param {string} a
+ * @param {string} b
+ * @returns {number}
+ */
+export function hamming_hex(a, b) {
+    const ptr0 = passStringToWasm0(a, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(b, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ret = wasm.hamming_hex(ptr0, len0, ptr1, len1);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return ret[0] >>> 0;
+}
+
+/**
+ * The 32 LSH band hashes, comma-joined — index keys for discovery.
+ * @param {string} text
+ * @returns {string}
+ */
+export function minhash_bands(text) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const ptr0 = passStringToWasm0(text, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.minhash_bands(ptr0, len0);
+        deferred2_0 = ret[0];
+        deferred2_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+    }
+}
+
+/**
+ * Estimated Jaccard from two comma-joined MinHash signatures.
+ * @param {string} sig_a
+ * @param {string} sig_b
+ * @returns {number}
+ */
+export function minhash_jaccard(sig_a, sig_b) {
+    const ptr0 = passStringToWasm0(sig_a, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(sig_b, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ret = wasm.minhash_jaccard(ptr0, len0, ptr1, len1);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return ret[0];
+}
+
+/**
+ * `com.writerslogic.text-minhash.1` — 128 signature values, comma-joined.
+ * @param {string} text
+ * @returns {string}
+ */
+export function minhash_signature(text) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const ptr0 = passStringToWasm0(text, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.minhash_signature(ptr0, len0);
+        deferred2_0 = ret[0];
+        deferred2_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+    }
+}
+
+/**
+ * Derive the Ed25519 public key (hex) from a 32-byte secret key (hex).
+ * @param {string} secret_hex
+ * @returns {string}
+ */
+export function public_key(secret_hex) {
+    let deferred3_0;
+    let deferred3_1;
+    try {
+        const ptr0 = passStringToWasm0(secret_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.public_key(ptr0, len0);
+        var ptr2 = ret[0];
+        var len2 = ret[1];
+        if (ret[3]) {
+            ptr2 = 0; len2 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred3_0 = ptr2;
+        deferred3_1 = len2;
+        return getStringFromWasm0(ptr2, len2);
+    } finally {
+        wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
+    }
+}
+
+/**
+ * Sign a payload (e.g. the soft-binding assertion JSON) as tagged
+ * COSE_Sign1 / EdDSA. Returns the envelope as hex.
+ * @param {string} payload
+ * @param {string} secret_hex
+ * @returns {string}
+ */
+export function sign(payload, secret_hex) {
+    let deferred4_0;
+    let deferred4_1;
+    try {
+        const ptr0 = passStringToWasm0(payload, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(secret_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ret = wasm.sign(ptr0, len0, ptr1, len1);
+        var ptr3 = ret[0];
+        var len3 = ret[1];
+        if (ret[3]) {
+            ptr3 = 0; len3 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred4_0 = ptr3;
+        deferred4_1 = len3;
+        return getStringFromWasm0(ptr3, len3);
+    } finally {
+        wasm.__wbindgen_free(deferred4_0, deferred4_1, 1);
+    }
+}
+
+/**
+ * Build the `c2pa.soft-binding` assertion (list id 41, surface fingerprint)
+ * as CBOR, hex-encoded. Sign the result with [`sign`] and store it under the
+ * `c2pa.soft-binding` label. Includes per-window scoped blocks.
+ * @param {string} text
+ * @returns {string}
+ */
+export function soft_binding_fingerprint(text) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const ptr0 = passStringToWasm0(text, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.soft_binding_fingerprint(ptr0, len0);
+        deferred2_0 = ret[0];
+        deferred2_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+    }
+}
+
+/**
+ * Build the `c2pa.soft-binding` assertion (list id 44, MinHash) as CBOR hex.
+ * @param {string} text
+ * @returns {string}
+ */
+export function soft_binding_minhash(text) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const ptr0 = passStringToWasm0(text, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.soft_binding_minhash(ptr0, len0);
+        deferred2_0 = ret[0];
+        deferred2_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+    }
+}
+
+/**
+ * Build the `c2pa.soft-binding` assertion (list id 43, structural) as CBOR hex.
+ * @param {string} text
+ * @returns {string}
+ */
+export function soft_binding_structure(text) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const ptr0 = passStringToWasm0(text, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.soft_binding_structure(ptr0, len0);
+        deferred2_0 = ret[0];
+        deferred2_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+    }
+}
+
+/**
+ * Build the `c2pa.soft-binding` assertion (list id 42, ZWC watermark) for a
+ * routing `pointer_hex`, as CBOR hex.
+ * @param {string} pointer_hex
+ * @returns {string}
+ */
+export function soft_binding_watermark(pointer_hex) {
+    let deferred3_0;
+    let deferred3_1;
+    try {
+        const ptr0 = passStringToWasm0(pointer_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.soft_binding_watermark(ptr0, len0);
+        var ptr2 = ret[0];
+        var len2 = ret[1];
+        if (ret[3]) {
+            ptr2 = 0; len2 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred3_0 = ptr2;
+        deferred3_1 = len2;
+        return getStringFromWasm0(ptr2, len2);
+    } finally {
+        wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
+    }
+}
+
+/**
+ * `com.writerslogic.text-fingerprint.1` — 256-bit surface SimHash, hex.
+ * @param {string} text
+ * @returns {string}
+ */
+export function text_fingerprint(text) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const ptr0 = passStringToWasm0(text, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.text_fingerprint(ptr0, len0);
+        deferred2_0 = ret[0];
+        deferred2_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+    }
+}
+
+/**
+ * `com.writerslogic.text-structure.1` — 256-bit structural SimHash, hex.
+ * @param {string} text
+ * @returns {string}
+ */
+export function text_structure(text) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const ptr0 = passStringToWasm0(text, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.text_structure(ptr0, len0);
+        deferred2_0 = ret[0];
+        deferred2_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+    }
+}
+
+/**
+ * Verify a hex COSE_Sign1 envelope against a hex public key; returns the
+ * payload string on success, throws on failure.
+ * @param {string} cose_hex
+ * @param {string} public_hex
+ * @returns {string}
+ */
+export function verify(cose_hex, public_hex) {
+    let deferred4_0;
+    let deferred4_1;
+    try {
+        const ptr0 = passStringToWasm0(cose_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(public_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ret = wasm.verify(ptr0, len0, ptr1, len1);
+        var ptr3 = ret[0];
+        var len3 = ret[1];
+        if (ret[3]) {
+            ptr3 = 0; len3 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred4_0 = ptr3;
+        deferred4_1 = len3;
+        return getStringFromWasm0(ptr3, len3);
+    } finally {
+        wasm.__wbindgen_free(deferred4_0, deferred4_1, 1);
+    }
+}
+function __wbg_get_imports() {
+    const import0 = {
+        __proto__: null,
+        __wbg_Error_92b29b0548f8b746: function(arg0, arg1) {
+            const ret = Error(getStringFromWasm0(arg0, arg1));
+            return ret;
+        },
+        __wbindgen_init_externref_table: function() {
+            const table = wasm.__wbindgen_externrefs;
+            const offset = table.grow(4);
+            table.set(0, undefined);
+            table.set(offset + 0, undefined);
+            table.set(offset + 1, null);
+            table.set(offset + 2, true);
+            table.set(offset + 3, false);
+        },
+    };
+    return {
+        __proto__: null,
+        "./c2pa_text_binding_bg.js": import0,
+    };
+}
+
+function getStringFromWasm0(ptr, len) {
+    return decodeText(ptr >>> 0, len);
+}
+
+let cachedUint8ArrayMemory0 = null;
+function getUint8ArrayMemory0() {
+    if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
+        cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
+    }
+    return cachedUint8ArrayMemory0;
+}
+
+function passStringToWasm0(arg, malloc, realloc) {
+    if (realloc === undefined) {
+        const buf = cachedTextEncoder.encode(arg);
+        const ptr = malloc(buf.length, 1) >>> 0;
+        getUint8ArrayMemory0().subarray(ptr, ptr + buf.length).set(buf);
+        WASM_VECTOR_LEN = buf.length;
+        return ptr;
+    }
+
+    let len = arg.length;
+    let ptr = malloc(len, 1) >>> 0;
+
+    const mem = getUint8ArrayMemory0();
+
+    let offset = 0;
+
+    for (; offset < len; offset++) {
+        const code = arg.charCodeAt(offset);
+        if (code > 0x7F) break;
+        mem[ptr + offset] = code;
+    }
+    if (offset !== len) {
+        if (offset !== 0) {
+            arg = arg.slice(offset);
+        }
+        ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
+        const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
+        const ret = cachedTextEncoder.encodeInto(arg, view);
+
+        offset += ret.written;
+        ptr = realloc(ptr, len, offset, 1) >>> 0;
+    }
+
+    WASM_VECTOR_LEN = offset;
+    return ptr;
+}
+
+function takeFromExternrefTable0(idx) {
+    const value = wasm.__wbindgen_externrefs.get(idx);
+    wasm.__externref_table_dealloc(idx);
+    return value;
+}
+
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+cachedTextDecoder.decode();
+const MAX_SAFARI_DECODE_BYTES = 2146435072;
+let numBytesDecoded = 0;
+function decodeText(ptr, len) {
+    numBytesDecoded += len;
+    if (numBytesDecoded >= MAX_SAFARI_DECODE_BYTES) {
+        cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+        cachedTextDecoder.decode();
+        numBytesDecoded = len;
+    }
+    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
+}
+
+const cachedTextEncoder = new TextEncoder();
+
+if (!('encodeInto' in cachedTextEncoder)) {
+    cachedTextEncoder.encodeInto = function (arg, view) {
+        const buf = cachedTextEncoder.encode(arg);
+        view.set(buf);
+        return {
+            read: arg.length,
+            written: buf.length
+        };
+    };
+}
+
+let WASM_VECTOR_LEN = 0;
+
+let wasmModule, wasmInstance, wasm;
+function __wbg_finalize_init(instance, module) {
+    wasmInstance = instance;
+    wasm = instance.exports;
+    wasmModule = module;
+    cachedUint8ArrayMemory0 = null;
+    wasm.__wbindgen_start();
+    return wasm;
+}
+
+async function __wbg_load(module, imports) {
+    if (typeof Response === 'function' && module instanceof Response) {
+        if (typeof WebAssembly.instantiateStreaming === 'function') {
+            try {
+                return await WebAssembly.instantiateStreaming(module, imports);
+            } catch (e) {
+                const validResponse = module.ok && expectedResponseType(module.type);
+
+                if (validResponse && module.headers.get('Content-Type') !== 'application/wasm') {
+                    console.warn("`WebAssembly.instantiateStreaming` failed because your server does not serve Wasm with `application/wasm` MIME type. Falling back to `WebAssembly.instantiate` which is slower. Original error:\n", e);
+
+                } else { throw e; }
+            }
+        }
+
+        const bytes = await module.arrayBuffer();
+        return await WebAssembly.instantiate(bytes, imports);
+    } else {
+        const instance = await WebAssembly.instantiate(module, imports);
+
+        if (instance instanceof WebAssembly.Instance) {
+            return { instance, module };
+        } else {
+            return instance;
+        }
+    }
+
+    function expectedResponseType(type) {
+        switch (type) {
+            case 'basic': case 'cors': case 'default': return true;
+        }
+        return false;
+    }
+}
+
+function initSync(module) {
+    if (wasm !== undefined) return wasm;
+
+
+    if (module !== undefined) {
+        if (Object.getPrototypeOf(module) === Object.prototype) {
+            ({module} = module)
+        } else {
+            console.warn('using deprecated parameters for `initSync()`; pass a single object instead')
+        }
+    }
+
+    const imports = __wbg_get_imports();
+    if (!(module instanceof WebAssembly.Module)) {
+        module = new WebAssembly.Module(module);
+    }
+    const instance = new WebAssembly.Instance(module, imports);
+    return __wbg_finalize_init(instance, module);
+}
+
+async function __wbg_init(module_or_path) {
+    if (wasm !== undefined) return wasm;
+
+
+    if (module_or_path !== undefined) {
+        if (Object.getPrototypeOf(module_or_path) === Object.prototype) {
+            ({module_or_path} = module_or_path)
+        } else {
+            console.warn('using deprecated parameters for the initialization function; pass a single object instead')
+        }
+    }
+
+    if (module_or_path === undefined) {
+        module_or_path = new URL('c2pa_text_binding_bg.wasm', import.meta.url);
+    }
+    const imports = __wbg_get_imports();
+
+    if (typeof module_or_path === 'string' || (typeof Request === 'function' && module_or_path instanceof Request) || (typeof URL === 'function' && module_or_path instanceof URL)) {
+        module_or_path = fetch(module_or_path);
+    }
+
+    const { instance, module } = await __wbg_load(await module_or_path, imports);
+
+    return __wbg_finalize_init(instance, module);
+}
+
+export { initSync, __wbg_init as default };

package/package.json

@@ -0,0 +1,28 @@
+{
+  "name": "c2pa-text-binding",
+  "type": "module",
+  "description": "C2PA soft binding and content fingerprinting for text assets (watermark + fingerprint family)",
+  "version": "0.2.0",
+  "license": "MIT OR Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/writerslogic/c2pa-text-binding"
+  },
+  "files": [
+    "c2pa_text_binding_bg.wasm",
+    "c2pa_text_binding.js",
+    "c2pa_text_binding.d.ts"
+  ],
+  "main": "c2pa_text_binding.js",
+  "types": "c2pa_text_binding.d.ts",
+  "sideEffects": [
+    "./snippets/*"
+  ],
+  "keywords": [
+    "c2pa",
+    "provenance",
+    "text",
+    "fingerprint",
+    "soft-binding"
+  ]
+}