ox 1.1.2 → 1.3.0

package/dist/wasm/Kzg.js

@@ -0,0 +1,333 @@
+import * as Errors from '../core/Errors.js';
+import * as Hex from '../core/Hex.js';
+export * from '../core/Kzg.js';
+const blobSize = 131_072;
+const cellSize = 2_048;
+const cellsPerBlob = 128;
+const commitmentSize = 48;
+const g1Points = 4_096;
+const g2Points = 65;
+const proofSize = 48;
+/**
+ * Creates an independently owned WASM implementation of [`Kzg.Kzg`](/api/Kzg).
+ *
+ * The factory compiles the c-kzg artifact once per JavaScript realm. Every call
+ * instantiates separate WASM memory and trusted-setup state. Call `dispose` when
+ * the instance is no longer needed.
+ *
+ * Operations on an instance are synchronous and run to completion. JavaScript
+ * workers do not share an instance, so create one in each worker that needs KZG.
+ *
+ * @example
+ * ```ts twoslash
+ * // @noErrors
+ * import { Setups } from 'ox/trusted-setups'
+ * import { Kzg } from 'ox/wasm'
+ *
+ * const kzg = await Kzg.create({
+ *   trustedSetup: Setups.mainnet
+ * })
+ * // Pass `kzg` anywhere that accepts `Kzg.Kzg`.
+ *
+ * kzg.dispose()
+ * ```
+ *
+ * @param options - Trusted setup and precomputation options.
+ * @returns An initialized KZG implementation with explicit disposal.
+ */
+export async function create(options) {
+    const { trustedSetup } = options;
+    const precompute = options.precompute ?? 0;
+    if (!Number.isInteger(precompute) || precompute < 0 || precompute > 8)
+        throw new InvalidPrecomputeError({ precompute });
+    const setup = {
+        g1Lagrange: normalizePoints(trustedSetup.g1_lagrange, g1Points, commitmentSize, 'g1_lagrange'),
+        g1Monomial: normalizePoints(trustedSetup.g1_monomial, g1Points, commitmentSize, 'g1_monomial'),
+        g2Monomial: normalizePoints(trustedSetup.g2_monomial, g2Points, 96, 'g2_monomial'),
+    };
+    const { instantiate } = await import('./internal/kzg.js');
+    let module = await instantiate();
+    const getModule = () => {
+        if (!module)
+            throw new DisposedError();
+        return module;
+    };
+    try {
+        const initialized = getModule();
+        withBuffers(initialized, [setup.g1Monomial, setup.g1Lagrange, setup.g2Monomial], [], ([g1Monomial, g1Lagrange, g2Monomial]) => {
+            assertReturn(initialized.exports.kzg_initialize(g1Monomial, g1Lagrange, g2Monomial, precompute), 'initialize');
+        });
+    }
+    catch (error) {
+        module?.exports.kzg_dispose();
+        module = undefined;
+        throw error;
+    }
+    const instance = {
+        blobToKzgCommitment(blob) {
+            assertBytes(blob, blobSize, 'blob');
+            return withBuffers(getModule(), [blob], [commitmentSize], ([blob], [out]) => {
+                const module = getModule();
+                assertReturn(module.exports.kzg_blob_to_kzg_commitment(out, blob), 'blobToKzgCommitment');
+            })[0];
+        },
+        computeCells(blob) {
+            assertBytes(blob, blobSize, 'blob');
+            const bytes = withBuffers(getModule(), [blob], [cellsPerBlob * cellSize], ([blob], [cells]) => {
+                const module = getModule();
+                assertReturn(module.exports.kzg_compute_cells(cells, blob), 'computeCells');
+            })[0];
+            return split(bytes, cellSize);
+        },
+        computeCellsAndKzgProofs(blob) {
+            assertBytes(blob, blobSize, 'blob');
+            const [cells, proofs] = withBuffers(getModule(), [blob], [cellsPerBlob * cellSize, cellsPerBlob * proofSize], ([blob], [cells, proofs]) => {
+                const module = getModule();
+                assertReturn(module.exports.kzg_compute_cells_and_kzg_proofs(cells, proofs, blob), 'computeCellsAndKzgProofs');
+            });
+            return {
+                cells: split(cells, cellSize),
+                proofs: split(proofs, proofSize),
+            };
+        },
+        dispose() {
+            if (!module)
+                return;
+            const initialized = module;
+            module = undefined;
+            initialized.exports.kzg_dispose();
+        },
+        recoverCellsAndKzgProofs(cellIndices, cells) {
+            if (cellIndices.length !== cells.length)
+                throw new InvalidInputError({
+                    message: '`cellIndices` and `cells` must have the same length.',
+                });
+            if (cells.length < 64 || cells.length > cellsPerBlob)
+                throw new InvalidInputError({
+                    message: '`cells` must contain between 64 and 128 cells.',
+                });
+            assertCellIndices(cellIndices, true);
+            for (const cell of cells)
+                assertBytes(cell, cellSize, 'cell');
+            const values = cellIndices
+                .map((index, i) => ({ cell: cells[i], index }))
+                .sort((a, b) => a.index - b.index);
+            const indices = values.map(({ index }) => index);
+            const sortedCells = values.map(({ cell }) => cell);
+            const [recoveredCells, proofs] = withBuffers(getModule(), [encodeIndices(indices), concat(sortedCells)], [cellsPerBlob * cellSize, cellsPerBlob * proofSize], ([indices, cells], [recoveredCells, proofs]) => {
+                const module = getModule();
+                assertReturn(module.exports.kzg_recover_cells_and_kzg_proofs(recoveredCells, proofs, indices, cells, values.length), 'recoverCellsAndKzgProofs');
+            });
+            return {
+                cells: split(recoveredCells, cellSize),
+                proofs: split(proofs, proofSize),
+            };
+        },
+        verifyCellKzgProofBatch(commitments, cellIndices, cells, proofs) {
+            const count = commitments.length;
+            if (count === 0 ||
+                cellIndices.length !== count ||
+                cells.length !== count ||
+                proofs.length !== count)
+                throw new InvalidInputError({
+                    message: '`commitments`, `cellIndices`, `cells`, and `proofs` must have the same non-zero length.',
+                });
+            assertCellIndices(cellIndices, false);
+            for (const commitment of commitments)
+                assertBytes(commitment, commitmentSize, 'commitment');
+            for (const cell of cells)
+                assertBytes(cell, cellSize, 'cell');
+            for (const proof of proofs)
+                assertBytes(proof, proofSize, 'proof');
+            return (withBuffers(getModule(), [
+                concat(commitments),
+                encodeIndices(cellIndices),
+                concat(cells),
+                concat(proofs),
+            ], [4], ([commitments, indices, cells, proofs], [verified]) => {
+                const module = getModule();
+                assertReturn(module.exports.kzg_verify_cell_kzg_proof_batch(verified, commitments, indices, cells, proofs, count), 'verifyCellKzgProofBatch');
+            })[0][0] === 1);
+        },
+    };
+    return instance;
+}
+function assertBytes(value, size, name) {
+    if (!(value instanceof Uint8Array) || value.length !== size)
+        throw new InvalidInputError({
+            message: `\`${name}\` must contain exactly ${size} bytes.`,
+        });
+}
+function assertCellIndices(indices, unique) {
+    const seen = new Set();
+    for (const index of indices) {
+        if (!Number.isInteger(index) || index < 0 || index >= cellsPerBlob)
+            throw new InvalidInputError({
+                message: '`cellIndices` must contain integers from 0 through 127.',
+            });
+        if (unique && seen.has(index))
+            throw new InvalidInputError({
+                message: '`cellIndices` must not contain duplicate indices.',
+            });
+        seen.add(index);
+    }
+}
+function assertReturn(value, operation) {
+    if (value === 0)
+        return;
+    if (value === 1)
+        throw operation === 'initialize'
+            ? new InvalidTrustedSetupError()
+            : new InvalidInputError({ message: `c-kzg rejected \`${operation}\`.` });
+    if (value === 3)
+        throw new MemoryError();
+    throw new WasmError({ operation });
+}
+function concat(values) {
+    const size = values.reduce((size, value) => size + value.length, 0);
+    const result = new Uint8Array(size);
+    let offset = 0;
+    for (const value of values) {
+        result.set(value, offset);
+        offset += value.length;
+    }
+    return result;
+}
+function encodeIndices(indices) {
+    const bytes = new Uint8Array(indices.length * 8);
+    const view = new DataView(bytes.buffer);
+    for (let i = 0; i < indices.length; i++)
+        view.setBigUint64(i * 8, BigInt(indices[i]), true);
+    return bytes;
+}
+function normalizePoints(value, count, size, name) {
+    const expected = count * size;
+    if (value instanceof Uint8Array) {
+        if (value.length !== expected)
+            throw new InvalidTrustedSetupError({
+                message: `\`${name}\` must contain exactly ${expected} bytes.`,
+            });
+        return Uint8Array.from(value);
+    }
+    if (!Array.isArray(value) || value.length !== count)
+        throw new InvalidTrustedSetupError({
+            message: `\`${name}\` must contain exactly ${count} points.`,
+        });
+    const result = new Uint8Array(expected);
+    for (let i = 0; i < value.length; i++) {
+        const point = value[i];
+        try {
+            const bytes = Hex.toBytes(point);
+            if (bytes.length !== size)
+                throw new Error();
+            result.set(bytes, i * size);
+        }
+        catch {
+            throw new InvalidTrustedSetupError({
+                message: `\`${name}[${i}]\` must be a ${size}-byte hex value.`,
+            });
+        }
+    }
+    return result;
+}
+function split(value, size) {
+    const result = [];
+    for (let offset = 0; offset < value.length; offset += size)
+        result.push(value.slice(offset, offset + size));
+    return result;
+}
+function withBuffers(module, inputs, outputs, call) {
+    const inputPointers = [];
+    const outputPointers = [];
+    try {
+        for (const input of inputs)
+            inputPointers.push(allocate(module, input.length));
+        for (const size of outputs)
+            outputPointers.push(allocate(module, size));
+        const view = module.view();
+        for (let i = 0; i < inputs.length; i++)
+            view.set(inputs[i], inputPointers[i]);
+        call(inputPointers, outputPointers);
+        return outputs.map((size, i) => module.view().slice(outputPointers[i], outputPointers[i] + size));
+    }
+    catch (cause) {
+        if (cause instanceof Errors.BaseError)
+            throw cause;
+        throw new WasmError({ cause: cause });
+    }
+    finally {
+        for (let i = 0; i < inputs.length; i++) {
+            const pointer = inputPointers[i];
+            if (!pointer)
+                continue;
+            module.exports.zero(pointer, inputs[i].length);
+            module.exports.dealloc(pointer);
+        }
+        for (let i = 0; i < outputs.length; i++) {
+            const pointer = outputPointers[i];
+            if (!pointer)
+                continue;
+            module.exports.zero(pointer, outputs[i]);
+            module.exports.dealloc(pointer);
+        }
+    }
+}
+function allocate(module, size) {
+    const pointer = module.exports.alloc(size);
+    if (!pointer)
+        throw new MemoryError();
+    return pointer;
+}
+/** Thrown when an operation is called after its KZG instance was disposed. */
+export class DisposedError extends Errors.BaseError {
+    name = 'Kzg.DisposedError';
+    constructor() {
+        super('KZG instance has been disposed.');
+    }
+}
+/** Thrown when a KZG operation receives malformed input. */
+export class InvalidInputError extends Errors.BaseError {
+    name = 'Kzg.InvalidInputError';
+    constructor({ message }) {
+        super(message);
+    }
+}
+/** Thrown when `precompute` is outside the supported memory bound. */
+export class InvalidPrecomputeError extends Errors.BaseError {
+    name = 'Kzg.InvalidPrecomputeError';
+    constructor({ precompute }) {
+        super(`\`precompute\` must be an integer from 0 through 8. Got ${precompute}.`);
+    }
+}
+/** Thrown when c-kzg rejects the trusted setup. */
+export class InvalidTrustedSetupError extends Errors.BaseError {
+    name = 'Kzg.InvalidTrustedSetupError';
+    constructor(options = {}) {
+        super(options.message ?? 'c-kzg rejected the trusted setup.');
+    }
+}
+/** Thrown when the KZG artifact reaches its 128 MiB memory limit. */
+export class MemoryError extends Errors.BaseError {
+    name = 'Kzg.MemoryError';
+    constructor() {
+        super('KZG WASM memory limit was exceeded.', {
+            metaMessages: [
+                'The artifact grows memory on demand up to 128 MiB.',
+                'Use a smaller `precompute` value or batch fewer proofs.',
+            ],
+        });
+    }
+}
+/** Thrown when the KZG artifact traps or reports an internal error. */
+export class WasmError extends Errors.BaseError {
+    name = 'Kzg.WasmError';
+    constructor(options = {}) {
+        super('KZG WASM operation failed.', {
+            cause: options.cause,
+            metaMessages: options.operation
+                ? [`Operation: ${options.operation}`]
+                : undefined,
+        });
+    }
+}
+//# sourceMappingURL=Kzg.js.map

package/dist/wasm/Kzg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Kzg.js","sourceRoot":"","sources":["../../src/wasm/Kzg.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAC3C,OAAO,KAAK,GAAG,MAAM,gBAAgB,CAAA;AAIrC,cAAc,gBAAgB,CAAA;AAE9B,MAAM,QAAQ,GAAG,OAAO,CAAA;AACxB,MAAM,QAAQ,GAAG,KAAK,CAAA;AACtB,MAAM,YAAY,GAAG,GAAG,CAAA;AACxB,MAAM,cAAc,GAAG,EAAE,CAAA;AACzB,MAAM,QAAQ,GAAG,KAAK,CAAA;AACtB,MAAM,QAAQ,GAAG,EAAE,CAAA;AACnB,MAAM,SAAS,GAAG,EAAE,CAAA;AAiBpB;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,OAAuB;IAEvB,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAA;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAA;IAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC;QACnE,MAAM,IAAI,sBAAsB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IAElD,MAAM,KAAK,GAAG;QACZ,UAAU,EAAE,eAAe,CACzB,YAAY,CAAC,WAAW,EACxB,QAAQ,EACR,cAAc,EACd,aAAa,CACd;QACD,UAAU,EAAE,eAAe,CACzB,YAAY,CAAC,WAAW,EACxB,QAAQ,EACR,cAAc,EACd,aAAa,CACd;QACD,UAAU,EAAE,eAAe,CACzB,YAAY,CAAC,WAAW,EACxB,QAAQ,EACR,EAAE,EACF,aAAa,CACd;KACF,CAAA;IAED,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAA;IACzD,IAAI,MAAM,GACR,MAAM,WAAW,EAAE,CAAA;IAErB,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,aAAa,EAAE,CAAA;QACtC,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,EAAE,CAAA;QAC/B,WAAW,CACT,WAAW,EACX,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EACtD,EAAE,EACF,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE;YACvC,YAAY,CACV,WAAW,CAAC,OAAO,CAAC,cAAc,CAChC,UAAW,EACX,UAAW,EACX,UAAW,EACX,UAAU,CACX,EACD,YAAY,CACb,CAAA;QACH,CAAC,CACF,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,CAAA;QAC7B,MAAM,GAAG,SAAS,CAAA;QAClB,MAAM,KAAK,CAAA;IACb,CAAC;IAED,MAAM,QAAQ,GAAsB;QAClC,mBAAmB,CAAC,IAAI;YACtB,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;YACnC,OAAO,WAAW,CAChB,SAAS,EAAE,EACX,CAAC,IAAI,CAAC,EACN,CAAC,cAAc,CAAC,EAChB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE;gBAChB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;gBAC1B,YAAY,CACV,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,GAAI,EAAE,IAAK,CAAC,EACtD,qBAAqB,CACtB,CAAA;YACH,CAAC,CACF,CAAC,CAAC,CAAE,CAAA;QACP,CAAC;QACD,YAAY,CAAC,IAAI;YACf,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;YACnC,MAAM,KAAK,GAAG,WAAW,CACvB,SAAS,EAAE,EACX,CAAC,IAAI,CAAC,EACN,CAAC,YAAY,GAAG,QAAQ,CAAC,EACzB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE;gBAClB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;gBAC1B,YAAY,CACV,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAM,EAAE,IAAK,CAAC,EAC/C,cAAc,CACf,CAAA;YACH,CAAC,CACF,CAAC,CAAC,CAAE,CAAA;YACL,OAAO,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;QAC/B,CAAC;QACD,wBAAwB,CAAC,IAAI;YAC3B,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;YACnC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,WAAW,CACjC,SAAS,EAAE,EACX,CAAC,IAAI,CAAC,EACN,CAAC,YAAY,GAAG,QAAQ,EAAE,YAAY,GAAG,SAAS,CAAC,EACnD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE;gBAC1B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;gBAC1B,YAAY,CACV,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAC7C,KAAM,EACN,MAAO,EACP,IAAK,CACN,EACD,0BAA0B,CAC3B,CAAA;YACH,CAAC,CACF,CAAA;YACD,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,KAAM,EAAE,QAAQ,CAAC;gBAC9B,MAAM,EAAE,KAAK,CAAC,MAAO,EAAE,SAAS,CAAC;aAClC,CAAA;QACH,CAAC;QACD,OAAO;YACL,IAAI,CAAC,MAAM;gBAAE,OAAM;YACnB,MAAM,WAAW,GAAG,MAAM,CAAA;YAC1B,MAAM,GAAG,SAAS,CAAA;YAClB,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,CAAA;QACnC,CAAC;QACD,wBAAwB,CAAC,WAAW,EAAE,KAAK;YACzC,IAAI,WAAW,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBACrC,MAAM,IAAI,iBAAiB,CAAC;oBAC1B,OAAO,EAAE,sDAAsD;iBAChE,CAAC,CAAA;YACJ,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY;gBAClD,MAAM,IAAI,iBAAiB,CAAC;oBAC1B,OAAO,EAAE,gDAAgD;iBAC1D,CAAC,CAAA;YACJ,iBAAiB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;YACpC,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;YAE7D,MAAM,MAAM,GAAG,WAAW;iBACvB,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,CAAC,CAAC;iBAC/C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAA;YACpC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAA;YAChD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;YAElD,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,WAAW,CAC1C,SAAS,EAAE,EACX,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,EAC7C,CAAC,YAAY,GAAG,QAAQ,EAAE,YAAY,GAAG,SAAS,CAAC,EACnD,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE;gBAC7C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;gBAC1B,YAAY,CACV,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAC7C,cAAe,EACf,MAAO,EACP,OAAQ,EACR,KAAM,EACN,MAAM,CAAC,MAAM,CACd,EACD,0BAA0B,CAC3B,CAAA;YACH,CAAC,CACF,CAAA;YACD,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,cAAe,EAAE,QAAQ,CAAC;gBACvC,MAAM,EAAE,KAAK,CAAC,MAAO,EAAE,SAAS,CAAC;aAClC,CAAA;QACH,CAAC;QACD,uBAAuB,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM;YAC7D,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAA;YAChC,IACE,KAAK,KAAK,CAAC;gBACX,WAAW,CAAC,MAAM,KAAK,KAAK;gBAC5B,KAAK,CAAC,MAAM,KAAK,KAAK;gBACtB,MAAM,CAAC,MAAM,KAAK,KAAK;gBAEvB,MAAM,IAAI,iBAAiB,CAAC;oBAC1B,OAAO,EACL,yFAAyF;iBAC5F,CAAC,CAAA;YACJ,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YACrC,KAAK,MAAM,UAAU,IAAI,WAAW;gBAClC,WAAW,CAAC,UAAU,EAAE,cAAc,EAAE,YAAY,CAAC,CAAA;YACvD,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;YAC7D,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;YAElE,OAAO,CACL,WAAW,CACT,SAAS,EAAE,EACX;gBACE,MAAM,CAAC,WAAW,CAAC;gBACnB,aAAa,CAAC,WAAW,CAAC;gBAC1B,MAAM,CAAC,KAAK,CAAC;gBACb,MAAM,CAAC,MAAM,CAAC;aACf,EACD,CAAC,CAAC,CAAC,EACH,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACpD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;gBAC1B,YAAY,CACV,MAAM,CAAC,OAAO,CAAC,+BAA+B,CAC5C,QAAS,EACT,WAAY,EACZ,OAAQ,EACR,KAAM,EACN,MAAO,EACP,KAAK,CACN,EACD,yBAAyB,CAC1B,CAAA;YACH,CAAC,CACF,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CACf,CAAA;QACH,CAAC;KACF,CAAA;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAsCD,SAAS,WAAW,CAAC,KAAkB,EAAE,IAAY,EAAE,IAAY;IACjE,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QACzD,MAAM,IAAI,iBAAiB,CAAC;YAC1B,OAAO,EAAE,KAAK,IAAI,2BAA2B,IAAI,SAAS;SAC3D,CAAC,CAAA;AACN,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA0B,EAAE,MAAe;IACpE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,YAAY;YAChE,MAAM,IAAI,iBAAiB,CAAC;gBAC1B,OAAO,EAAE,yDAAyD;aACnE,CAAC,CAAA;QACJ,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAC3B,MAAM,IAAI,iBAAiB,CAAC;gBAC1B,OAAO,EAAE,mDAAmD;aAC7D,CAAC,CAAA;QACJ,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,SAAiB;IACpD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAM;IACvB,IAAI,KAAK,KAAK,CAAC;QACb,MAAM,SAAS,KAAK,YAAY;YAC9B,CAAC,CAAC,IAAI,wBAAwB,EAAE;YAChC,CAAC,CAAC,IAAI,iBAAiB,CAAC,EAAE,OAAO,EAAE,oBAAoB,SAAS,KAAK,EAAE,CAAC,CAAA;IAC5E,IAAI,KAAK,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,EAAE,CAAA;IACxC,MAAM,IAAI,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,MAAM,CAAC,MAA8B;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACnE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACzB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAA;IACxB,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,aAAa,CAAC,OAA0B;IAC/C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAChD,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE;QACrC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IACrD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,eAAe,CACtB,KAAsC,EACtC,KAAa,EACb,IAAY,EACZ,IAAwB;IAExB,MAAM,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAA;IAC7B,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;YAC3B,MAAM,IAAI,wBAAwB,CAAC;gBACjC,OAAO,EAAE,KAAK,IAAI,2BAA2B,QAAQ,SAAS;aAC/D,CAAC,CAAA;QACJ,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK;QACjD,MAAM,IAAI,wBAAwB,CAAC;YACjC,OAAO,EAAE,KAAK,IAAI,2BAA2B,KAAK,UAAU;SAC7D,CAAC,CAAA;IAEJ,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAA;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;QACvB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,KAAgB,CAAC,CAAA;YAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAA;YAC5C,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,wBAAwB,CAAC;gBACjC,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,iBAAiB,IAAI,kBAAkB;aAC/D,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,KAAK,CAAC,KAAkB,EAAE,IAAY;IAC7C,MAAM,MAAM,GAAkB,EAAE,CAAA;IAChC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI;QACxD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAA;IACjD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,WAAW,CAClB,MAAmD,EACnD,MAA8B,EAC9B,OAA0B,EAC1B,IAAqE;IAErE,MAAM,aAAa,GAAa,EAAE,CAAA;IAClC,MAAM,cAAc,GAAa,EAAE,CAAA;IAEnC,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,MAAM;YACxB,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QACpD,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;QAEvE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;YACpC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,aAAa,CAAC,CAAC,CAAE,CAAC,CAAA;QAEzC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAA;QAEnC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAC7B,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAE,EAAE,cAAc,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,CACnE,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,MAAM,CAAC,SAAS;YAAE,MAAM,KAAK,CAAA;QAClD,MAAM,IAAI,SAAS,CAAC,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC,CAAA;IAChD,CAAC;YAAS,CAAC;QACT,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;YAChC,IAAI,CAAC,OAAO;gBAAE,SAAQ;YACtB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAA;YAC/C,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACjC,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;YACjC,IAAI,CAAC,OAAO;gBAAE,SAAQ;YACtB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,CAAA;YACzC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACjC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,MAAmD,EACnD,IAAY;IAEZ,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC1C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,WAAW,EAAE,CAAA;IACrC,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,8EAA8E;AAC9E,MAAM,OAAO,aAAc,SAAQ,MAAM,CAAC,SAAS;IAC/B,IAAI,GAAG,mBAAmB,CAAA;IAE5C;QACE,KAAK,CAAC,iCAAiC,CAAC,CAAA;IAC1C,CAAC;CACF;AAED,4DAA4D;AAC5D,MAAM,OAAO,iBAAkB,SAAQ,MAAM,CAAC,SAAS;IACnC,IAAI,GAAG,uBAAuB,CAAA;IAEhD,YAAY,EAAE,OAAO,EAAuB;QAC1C,KAAK,CAAC,OAAO,CAAC,CAAA;IAChB,CAAC;CACF;AAED,sEAAsE;AACtE,MAAM,OAAO,sBAAuB,SAAQ,MAAM,CAAC,SAAS;IACxC,IAAI,GAAG,4BAA4B,CAAA;IAErD,YAAY,EAAE,UAAU,EAA0B;QAChD,KAAK,CACH,2DAA2D,UAAU,GAAG,CACzE,CAAA;IACH,CAAC;CACF;AAED,mDAAmD;AACnD,MAAM,OAAO,wBAAyB,SAAQ,MAAM,CAAC,SAAS;IAC1C,IAAI,GAAG,8BAA8B,CAAA;IAEvD,YAAY,UAA4C,EAAE;QACxD,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,mCAAmC,CAAC,CAAA;IAC/D,CAAC;CACF;AAED,qEAAqE;AACrE,MAAM,OAAO,WAAY,SAAQ,MAAM,CAAC,SAAS;IAC7B,IAAI,GAAG,iBAAiB,CAAA;IAE1C;QACE,KAAK,CAAC,qCAAqC,EAAE;YAC3C,YAAY,EAAE;gBACZ,oDAAoD;gBACpD,yDAAyD;aAC1D;SACF,CAAC,CAAA;IACJ,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,OAAO,SAAU,SAAQ,MAAM,CAAC,SAA4B;IAC9C,IAAI,GAAG,eAAe,CAAA;IAExC,YACE,UAAyE,EAAE;QAE3E,KAAK,CAAC,4BAA4B,EAAE;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,OAAO,CAAC,SAAS;gBAC7B,CAAC,CAAC,CAAC,cAAc,OAAO,CAAC,SAAS,EAAE,CAAC;gBACrC,CAAC,CAAC,SAAS;SACd,CAAC,CAAA;IACJ,CAAC;CACF"}

package/dist/wasm/Secp256k1.d.ts

@@ -0,0 +1,55 @@
+import type * as Engine from '../core/Engine.js';
+import * as Errors from '../core/Errors.js';
+import * as internal from './internal/instantiate.js';
+export * from '../core/Secp256k1.js';
+export { MemoryError } from './internal/instantiate.js';
+/**
+ * Compiles WASM implementations of deterministic
+ * [`Secp256k1`](/api/Secp256k1) primitives, without installing them.
+ *
+ * Random key generation remains on Ox's host-backed default implementation.
+ *
+ * @example
+ * ```ts twoslash
+ * // @noErrors
+ * import { Engine } from 'ox'
+ * import { Secp256k1 } from 'ox/wasm'
+ *
+ * await Engine.install({ Secp256k1: Secp256k1.engine() })
+ *
+ * Secp256k1.getPublicKey({ privateKey: '0x...' })
+ * ```
+ *
+ * @returns The WASM implementation of the deterministic `Secp256k1` primitives.
+ */
+export declare function engine(): Promise<engine.ReturnType>;
+export declare namespace engine {
+    /** Every `Secp256k1` primitive this module implements. */
+    type ReturnType = {
+        [key in 'getPublicKey' | 'getSharedSecret' | 'recoverPublicKey' | 'sign' | 'verify']-?: NonNullable<Engine.Ecdsa[key]>;
+    };
+    type ErrorType = InvalidInputError | internal.MemoryError | Errors.GlobalErrorType;
+}
+/**
+ * Thrown when libsecp256k1 rejects a key or recovered signature.
+ *
+ * @example
+ * ```ts twoslash
+ * import { Secp256k1 } from 'ox/wasm'
+ *
+ * try {
+ *   const engine = await Secp256k1.engine()
+ *   engine.getPublicKey(new Uint8Array(32))
+ * } catch (error) {
+ *   if (error instanceof Secp256k1.InvalidInputError)
+ *     console.error(error.message)
+ * }
+ * ```
+ */
+export declare class InvalidInputError extends Errors.BaseError {
+    readonly name = "Secp256k1.InvalidInputError";
+    constructor({ operation }: {
+        operation: string;
+    });
+}
+//# sourceMappingURL=Secp256k1.d.ts.map

package/dist/wasm/Secp256k1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Secp256k1.d.ts","sourceRoot":"","sources":["../../src/wasm/Secp256k1.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAChD,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAC3C,OAAO,KAAK,QAAQ,MAAM,2BAA2B,CAAA;AAGrD,cAAc,sBAAsB,CAAA;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AASvD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAoJzD;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,0DAA0D;IAC1D,KAAK,UAAU,GAAG;SACf,GAAG,IACA,cAAc,GACd,iBAAiB,GACjB,kBAAkB,GAClB,MAAM,GACN,QAAQ,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;KAChD,CAAA;IAED,KAAK,SAAS,GACV,iBAAiB,GACjB,QAAQ,CAAC,WAAW,GACpB,MAAM,CAAC,eAAe,CAAA;CAC3B;AA0BD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,iBAAkB,SAAQ,MAAM,CAAC,SAAS;IACrD,SAAkB,IAAI,iCAAgC;gBAE1C,EAAE,SAAS,EAAE,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE;CAGjD"}

package/dist/wasm/Secp256k1.js

@@ -0,0 +1,181 @@
+import * as Errors from '../core/Errors.js';
+import * as secp256k1 from './internal/secp256k1.js';
+export * from '../core/Secp256k1.js';
+export { MemoryError } from './internal/instantiate.js';
+const privateKeySize = 32;
+const publicKeySize = 65;
+const sharedSecretSize = 33;
+const compactSignatureSize = 64;
+const recoveredSignatureSize = 65;
+const maxRawMessageSize = 8192;
+/**
+ * Compiles WASM implementations of deterministic
+ * [`Secp256k1`](/api/Secp256k1) primitives, without installing them.
+ *
+ * Random key generation remains on Ox's host-backed default implementation.
+ *
+ * @example
+ * ```ts twoslash
+ * // @noErrors
+ * import { Engine } from 'ox'
+ * import { Secp256k1 } from 'ox/wasm'
+ *
+ * await Engine.install({ Secp256k1: Secp256k1.engine() })
+ *
+ * Secp256k1.getPublicKey({ privateKey: '0x...' })
+ * ```
+ *
+ * @returns The WASM implementation of the deterministic `Secp256k1` primitives.
+ */
+export async function engine() {
+    const module = await secp256k1.load();
+    return {
+        getPublicKey(privateKey) {
+            assertLength(privateKey, privateKeySize, 'private key');
+            const size = privateKeySize + publicKeySize;
+            module.reserve(size);
+            const privateKeyPtr = module.heapBase;
+            const publicKeyPtr = privateKeyPtr + privateKeySize;
+            try {
+                module.view().set(privateKey, privateKeyPtr);
+                if (module.exports.secp256k1_get_public_key(privateKeyPtr, publicKeyPtr) !== 1)
+                    throw new InvalidInputError({ operation: 'getPublicKey' });
+                return module.view().slice(publicKeyPtr, publicKeyPtr + publicKeySize);
+            }
+            finally {
+                module.exports.zero(privateKeyPtr, size);
+            }
+        },
+        getSharedSecret(privateKey, publicKey) {
+            assertLength(privateKey, privateKeySize, 'private key');
+            assertPublicKeyLength(publicKey);
+            const size = privateKeySize + publicKey.length + sharedSecretSize;
+            module.reserve(size);
+            const privateKeyPtr = module.heapBase;
+            const publicKeyPtr = privateKeyPtr + privateKeySize;
+            const sharedSecretPtr = publicKeyPtr + publicKey.length;
+            try {
+                const memory = module.view();
+                memory.set(privateKey, privateKeyPtr);
+                memory.set(publicKey, publicKeyPtr);
+                if (module.exports.secp256k1_get_shared_secret(privateKeyPtr, publicKeyPtr, publicKey.length, sharedSecretPtr) !== 1)
+                    throw new InvalidInputError({ operation: 'getSharedSecret' });
+                return module
+                    .view()
+                    .slice(sharedSecretPtr, sharedSecretPtr + sharedSecretSize);
+            }
+            finally {
+                module.exports.zero(privateKeyPtr, size);
+            }
+        },
+        recoverPublicKey(signature, payload) {
+            assertLength(signature, recoveredSignatureSize, 'signature');
+            assertRawMessageLength(payload);
+            const size = recoveredSignatureSize + payload.length + publicKeySize;
+            module.reserve(size);
+            const signaturePtr = module.heapBase;
+            const payloadPtr = signaturePtr + recoveredSignatureSize;
+            const publicKeyPtr = payloadPtr + payload.length;
+            try {
+                const memory = module.view();
+                memory.set(signature, signaturePtr);
+                memory.set(payload, payloadPtr);
+                if (module.exports.secp256k1_recover_public_key(signaturePtr, payloadPtr, payload.length, publicKeyPtr) !== 1)
+                    throw new InvalidInputError({ operation: 'recoverPublicKey' });
+                return module.view().slice(publicKeyPtr, publicKeyPtr + publicKeySize);
+            }
+            finally {
+                module.exports.zero(signaturePtr, size);
+            }
+        },
+        sign(payload, privateKey, options) {
+            assertLength(privateKey, privateKeySize, 'private key');
+            if (!options.prehash)
+                assertRawMessageLength(payload);
+            const entropy = options.extraEntropy === true
+                ? crypto.getRandomValues(new Uint8Array(privateKeySize))
+                : options.extraEntropy === false
+                    ? undefined
+                    : options.extraEntropy;
+            const entropySize = entropy?.length ?? 0;
+            const size = payload.length + privateKeySize + entropySize + recoveredSignatureSize;
+            module.reserve(size);
+            const payloadPtr = module.heapBase;
+            const privateKeyPtr = payloadPtr + payload.length;
+            const entropyPtr = entropy ? privateKeyPtr + privateKeySize : 0;
+            const signaturePtr = privateKeyPtr + privateKeySize + entropySize;
+            try {
+                const memory = module.view();
+                memory.set(payload, payloadPtr);
+                memory.set(privateKey, privateKeyPtr);
+                if (entropy)
+                    memory.set(entropy, entropyPtr);
+                if (module.exports.secp256k1_sign(payloadPtr, payload.length, privateKeyPtr, entropyPtr, entropySize, Number(options.prehash), signaturePtr) !== 1)
+                    throw new InvalidInputError({ operation: 'sign' });
+                return module
+                    .view()
+                    .slice(signaturePtr, signaturePtr + recoveredSignatureSize);
+            }
+            finally {
+                module.exports.zero(payloadPtr, size);
+            }
+        },
+        verify(signature, payload, publicKey, options) {
+            assertLength(signature, compactSignatureSize, 'signature');
+            assertPublicKeyLength(publicKey);
+            if (!options.prehash && payload.length > maxRawMessageSize)
+                return false;
+            const size = compactSignatureSize + payload.length + publicKey.length;
+            module.reserve(size);
+            const signaturePtr = module.heapBase;
+            const payloadPtr = signaturePtr + compactSignatureSize;
+            const publicKeyPtr = payloadPtr + payload.length;
+            try {
+                const memory = module.view();
+                memory.set(signature, signaturePtr);
+                memory.set(payload, payloadPtr);
+                memory.set(publicKey, publicKeyPtr);
+                return (module.exports.secp256k1_verify(signaturePtr, payloadPtr, payload.length, publicKeyPtr, publicKey.length, Number(options.prehash)) === 1);
+            }
+            finally {
+                module.exports.zero(signaturePtr, size);
+            }
+        },
+    };
+}
+function assertLength(value, length, name) {
+    if (value.length !== length)
+        throw new RangeError(`Secp256k1 ${name} must be ${length} bytes, got ${value.length}`);
+}
+function assertPublicKeyLength(publicKey) {
+    if (publicKey.length !== sharedSecretSize &&
+        publicKey.length !== publicKeySize)
+        throw new RangeError(`Secp256k1 public key must be 33 or 65 bytes, got ${publicKey.length}`);
+}
+function assertRawMessageLength(payload) {
+    if (payload.length > maxRawMessageSize)
+        throw new RangeError(`Secp256k1 unhashed payload must not exceed ${maxRawMessageSize} bytes, got ${payload.length}`);
+}
+/**
+ * Thrown when libsecp256k1 rejects a key or recovered signature.
+ *
+ * @example
+ * ```ts twoslash
+ * import { Secp256k1 } from 'ox/wasm'
+ *
+ * try {
+ *   const engine = await Secp256k1.engine()
+ *   engine.getPublicKey(new Uint8Array(32))
+ * } catch (error) {
+ *   if (error instanceof Secp256k1.InvalidInputError)
+ *     console.error(error.message)
+ * }
+ * ```
+ */
+export class InvalidInputError extends Errors.BaseError {
+    name = 'Secp256k1.InvalidInputError';
+    constructor({ operation }) {
+        super(`WASM secp256k1 ${operation} received invalid input.`);
+    }
+}
+//# sourceMappingURL=Secp256k1.js.map

package/dist/wasm/Secp256k1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Secp256k1.js","sourceRoot":"","sources":["../../src/wasm/Secp256k1.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAE3C,OAAO,KAAK,SAAS,MAAM,yBAAyB,CAAA;AAEpD,cAAc,sBAAsB,CAAA;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAEvD,MAAM,cAAc,GAAG,EAAE,CAAA;AACzB,MAAM,aAAa,GAAG,EAAE,CAAA;AACxB,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAC3B,MAAM,oBAAoB,GAAG,EAAE,CAAA;AAC/B,MAAM,sBAAsB,GAAG,EAAE,CAAA;AACjC,MAAM,iBAAiB,GAAG,IAAI,CAAA;AAE9B;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAA;IAErC,OAAO;QACL,YAAY,CAAC,UAAU;YACrB,YAAY,CAAC,UAAU,EAAE,cAAc,EAAE,aAAa,CAAC,CAAA;YACvD,MAAM,IAAI,GAAG,cAAc,GAAG,aAAa,CAAA;YAC3C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACpB,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAA;YACrC,MAAM,YAAY,GAAG,aAAa,GAAG,cAAc,CAAA;YACnD,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;gBAC5C,IACE,MAAM,CAAC,OAAO,CAAC,wBAAwB,CACrC,aAAa,EACb,YAAY,CACb,KAAK,CAAC;oBAEP,MAAM,IAAI,iBAAiB,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAA;gBAC5D,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,GAAG,aAAa,CAAC,CAAA;YACxE,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;YAC1C,CAAC;QACH,CAAC;QACD,eAAe,CAAC,UAAU,EAAE,SAAS;YACnC,YAAY,CAAC,UAAU,EAAE,cAAc,EAAE,aAAa,CAAC,CAAA;YACvD,qBAAqB,CAAC,SAAS,CAAC,CAAA;YAChC,MAAM,IAAI,GAAG,cAAc,GAAG,SAAS,CAAC,MAAM,GAAG,gBAAgB,CAAA;YACjE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACpB,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAA;YACrC,MAAM,YAAY,GAAG,aAAa,GAAG,cAAc,CAAA;YACnD,MAAM,eAAe,GAAG,YAAY,GAAG,SAAS,CAAC,MAAM,CAAA;YACvD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;gBAC5B,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;gBACrC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;gBACnC,IACE,MAAM,CAAC,OAAO,CAAC,2BAA2B,CACxC,aAAa,EACb,YAAY,EACZ,SAAS,CAAC,MAAM,EAChB,eAAe,CAChB,KAAK,CAAC;oBAEP,MAAM,IAAI,iBAAiB,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAA;gBAC/D,OAAO,MAAM;qBACV,IAAI,EAAE;qBACN,KAAK,CAAC,eAAe,EAAE,eAAe,GAAG,gBAAgB,CAAC,CAAA;YAC/D,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;YAC1C,CAAC;QACH,CAAC;QACD,gBAAgB,CAAC,SAAS,EAAE,OAAO;YACjC,YAAY,CAAC,SAAS,EAAE,sBAAsB,EAAE,WAAW,CAAC,CAAA;YAC5D,sBAAsB,CAAC,OAAO,CAAC,CAAA;YAC/B,MAAM,IAAI,GAAG,sBAAsB,GAAG,OAAO,CAAC,MAAM,GAAG,aAAa,CAAA;YACpE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACpB,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAA;YACpC,MAAM,UAAU,GAAG,YAAY,GAAG,sBAAsB,CAAA;YACxD,MAAM,YAAY,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAA;YAChD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;gBAC5B,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;gBACnC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;gBAC/B,IACE,MAAM,CAAC,OAAO,CAAC,4BAA4B,CACzC,YAAY,EACZ,UAAU,EACV,OAAO,CAAC,MAAM,EACd,YAAY,CACb,KAAK,CAAC;oBAEP,MAAM,IAAI,iBAAiB,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAA;gBAChE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,GAAG,aAAa,CAAC,CAAA;YACxE,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;YACzC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO;YAC/B,YAAY,CAAC,UAAU,EAAE,cAAc,EAAE,aAAa,CAAC,CAAA;YACvD,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,sBAAsB,CAAC,OAAO,CAAC,CAAA;YACrD,MAAM,OAAO,GACX,OAAO,CAAC,YAAY,KAAK,IAAI;gBAC3B,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;gBACxD,CAAC,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK;oBAC9B,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,OAAO,CAAC,YAAY,CAAA;YAC5B,MAAM,WAAW,GAAG,OAAO,EAAE,MAAM,IAAI,CAAC,CAAA;YACxC,MAAM,IAAI,GACR,OAAO,CAAC,MAAM,GAAG,cAAc,GAAG,WAAW,GAAG,sBAAsB,CAAA;YACxE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACpB,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAA;YAClC,MAAM,aAAa,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAA;YACjD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;YAC/D,MAAM,YAAY,GAAG,aAAa,GAAG,cAAc,GAAG,WAAW,CAAA;YACjE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;gBAC5B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;gBAC/B,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;gBACrC,IAAI,OAAO;oBAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;gBAC5C,IACE,MAAM,CAAC,OAAO,CAAC,cAAc,CAC3B,UAAU,EACV,OAAO,CAAC,MAAM,EACd,aAAa,EACb,UAAU,EACV,WAAW,EACX,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EACvB,YAAY,CACb,KAAK,CAAC;oBAEP,MAAM,IAAI,iBAAiB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;gBACpD,OAAO,MAAM;qBACV,IAAI,EAAE;qBACN,KAAK,CAAC,YAAY,EAAE,YAAY,GAAG,sBAAsB,CAAC,CAAA;YAC/D,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;YACvC,CAAC;QACH,CAAC;QACD,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO;YAC3C,YAAY,CAAC,SAAS,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAA;YAC1D,qBAAqB,CAAC,SAAS,CAAC,CAAA;YAChC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB;gBAAE,OAAO,KAAK,CAAA;YACxE,MAAM,IAAI,GAAG,oBAAoB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAA;YACrE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACpB,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAA;YACpC,MAAM,UAAU,GAAG,YAAY,GAAG,oBAAoB,CAAA;YACtD,MAAM,YAAY,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAA;YAChD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;gBAC5B,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;gBACnC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;gBAC/B,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;gBACnC,OAAO,CACL,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAC7B,YAAY,EACZ,UAAU,EACV,OAAO,CAAC,MAAM,EACd,YAAY,EACZ,SAAS,CAAC,MAAM,EAChB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CACxB,KAAK,CAAC,CACR,CAAA;YACH,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;YACzC,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAmBD,SAAS,YAAY,CAAC,KAAiB,EAAE,MAAc,EAAE,IAAY;IACnE,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QACzB,MAAM,IAAI,UAAU,CAClB,aAAa,IAAI,YAAY,MAAM,eAAe,KAAK,CAAC,MAAM,EAAE,CACjE,CAAA;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAqB;IAClD,IACE,SAAS,CAAC,MAAM,KAAK,gBAAgB;QACrC,SAAS,CAAC,MAAM,KAAK,aAAa;QAElC,MAAM,IAAI,UAAU,CAClB,oDAAoD,SAAS,CAAC,MAAM,EAAE,CACvE,CAAA;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAmB;IACjD,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB;QACpC,MAAM,IAAI,UAAU,CAClB,8CAA8C,iBAAiB,eAAe,OAAO,CAAC,MAAM,EAAE,CAC/F,CAAA;AACL,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,iBAAkB,SAAQ,MAAM,CAAC,SAAS;IACnC,IAAI,GAAG,6BAA6B,CAAA;IAEtD,YAAY,EAAE,SAAS,EAAyB;QAC9C,KAAK,CAAC,kBAAkB,SAAS,0BAA0B,CAAC,CAAA;IAC9D,CAAC;CACF"}

package/dist/wasm/index.d.ts

@@ -60,7 +60,8 @@ export * as Ed25519 from './Ed25519.js';
  */
 export * as Hash from './Hash.js';
 /**
- * WASM implementation of Ox's synchronous PBKDF2-HMAC-SHA256 primitive.
+ * WASM implementations of Ox's synchronous PBKDF2-HMAC-SHA256 and scrypt
+ * primitives.
  *
  * @example
  * ```ts twoslash
@@ -76,6 +77,28 @@ export * as Hash from './Hash.js';
  * @category Crypto
  */
 export * as Keystore from './Keystore.js';
+/**
+ * WASM implementation of Ox's KZG interface, backed by c-kzg-4844.
+ *
+ * This module is not installed into [`Engine`](/api/Engine). Create an explicit
+ * instance, pass it anywhere that accepts `Kzg.Kzg`, and dispose it when done.
+ *
+ * @example
+ * ```ts twoslash
+ * // @noErrors
+ * import { Setups } from 'ox/trusted-setups'
+ * import { Kzg } from 'ox/wasm'
+ *
+ * const kzg = await Kzg.create({
+ *   trustedSetup: Setups.mainnet
+ * })
+ *
+ * kzg.dispose()
+ * ```
+ *
+ * @category Crypto
+ */
+export * as Kzg from './Kzg.js';
 /**
  * WASM implementation of Ox's BIP-39 seed derivation.
  *
@@ -95,6 +118,26 @@ export * as Keystore from './Keystore.js';
  * @category Crypto
  */
 export * as Mnemonic from './Mnemonic.js';
+/**
+ * WASM implementations of deterministic Secp256k1 primitives.
+ *
+ * This provider is opt-in because its embedded libsecp256k1 artifact is larger
+ * than the modules installed by [`Engine.install`](/api/Engine/install).
+ *
+ * @example
+ * ```ts twoslash
+ * // @noErrors
+ * import { Engine } from 'ox'
+ * import { Secp256k1 } from 'ox/wasm'
+ *
+ * await Engine.install({ Secp256k1: Secp256k1.engine() })
+ *
+ * Secp256k1.getPublicKey({ privateKey: '0x...' })
+ * ```
+ *
+ * @category Crypto
+ */
+export * as Secp256k1 from './Secp256k1.js';
 /**
  * WASM implementations of Ox's supported X25519 primitives.
  *