feat: add WASM support for browser-based proof generation

.cargo/config.toml

@@ -1,3 +1,10 @@
 # This enables KaTex in docs, but requires running `cargo doc --no-deps`.
 [build]
 rustdocflags = "--html-in-header .cargo/katex-header.html"
+
+[target.wasm32-wasip2]
+rustflags = ["-C", "target-feature=+simd128,+relaxed-simd"]
+
+[target.wasm32-wasip1]
+runner = "wasmtime run --dir . "
+rustflags = ["-C", "target-feature=+simd128,+relaxed-simd"]

.github/workflows/benchmark.yml

@@ -18,6 +18,10 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - name: Replace divan with codspeed-divan-compat
+        run: |
+          sed -i 's/^divan = .*/divan = { package = "codspeed-divan-compat", version = "3.0.1" }/' Cargo.toml
+
       - name: Setup Rust toolchain, cache and cargo-codspeed binary
         uses: moonrepo/setup-rust@v1
         with:

.gitignore

@@ -6,6 +6,8 @@
 *.json
 # Allow JSON files in csca_registry
 !**/csca_registry/**/*.json
+# Allow package.json files
+!**/package.json
 *.gz
 *.bin
 *.nps
@@ -43,4 +45,12 @@ Cargo.lock
 #  and can be added to the global gitignore or merged into this file.  For a more nuclear
 #  option (not recommended) you can uncomment the following to ignore the entire idea folder.
 #.idea/
-circuit_stats_examples/
+circuit_stats_examples/
+# Node.js
+node_modules/
+
+# Old test directories (root level only)
+/wasm-node-demo/
+
+# wasm packages
+tooling/provekit-wasm/pkg/*

Cargo.toml

@@ -3,8 +3,8 @@ resolver = "2"
 members = [
   "skyscraper/fp-rounding",
   "skyscraper/hla",
-  "skyscraper/block-multiplier",
-  "skyscraper/block-multiplier-codegen",
+  "skyscraper/bn254-multiplier",
+  "skyscraper/bn254-multiplier-codegen",
   "skyscraper/core",
   "provekit/common",
   "provekit/r1cs-compiler",
@@ -13,6 +13,7 @@ members = [
   "tooling/cli",
   "tooling/provekit-bench",
   "tooling/provekit-gnark",
+  "tooling/provekit-wasm",
   "tooling/verifier-server",
   "ntt",
 ]
@@ -40,6 +41,9 @@ license = "MIT"
 homepage = "https://github.com/worldfnd/ProveKit"
 repository = "https://github.com/worldfnd/ProveKit"
 
+[workspace.lints.rust]
+unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
+
 [workspace.lints.clippy]
 cargo = "warn"
 perf = "warn"
@@ -55,7 +59,6 @@ missing_docs_in_private_items = { level = "allow", priority = 1 }
 missing_safety_doc = { level = "deny", priority = 1 }
 
 [profile.release]
-debug = true      # Generate symbol info for profiling
 opt-level = 3
 codegen-units = 1
 lto = "fat"
@@ -70,8 +73,8 @@ opt-level = 3
 
 [workspace.dependencies]
 # Workspace members - Skyscraper
-block-multiplier = { path = "skyscraper/block-multiplier" }
-block-multiplier-codegen = { path = "skyscraper/block-multiplier-codegen" }
+bn254-multiplier = { path = "skyscraper/bn254-multiplier" }
+bn254-multiplier-codegen = { path = "skyscraper/bn254-multiplier-codegen" }
 fp-rounding = { path = "skyscraper/fp-rounding" }
 hla = { path = "skyscraper/hla" }
 skyscraper = { path = "skyscraper/core" }
@@ -80,12 +83,14 @@ ntt = { path = "ntt" }
 # Workspace members - ProveKit
 provekit-bench = { path = "tooling/provekit-bench" }
 provekit-cli = { path = "tooling/cli" }
-provekit-common = { path = "provekit/common" }
+provekit-common = { path = "provekit/common", default-features = true }
+provekit-ffi = { path = "tooling/provekit-ffi" }
 provekit-gnark = { path = "tooling/provekit-gnark" }
-provekit-prover = { path = "provekit/prover" }
+provekit-prover = { path = "provekit/prover", default-features = true }
 provekit-r1cs-compiler = { path = "provekit/r1cs-compiler" }
 provekit-verifier = { path = "provekit/verifier" }
 provekit-verifier-server = { path = "tooling/verifier-server" }
+provekit-wasm = { path = "tooling/provekit-wasm" }
 
 # 3rd party
 anyhow = "1.0.93"
@@ -94,7 +99,9 @@ axum = "0.8.4"
 base64 = "0.22.1"
 bytes = "1.10.1"
 chrono = "0.4.41"
-divan = { package = "codspeed-divan-compat", version = "3.0.1" }
+# On CI divan get replaced by divan = { package = "codspeed-divan-compat", version = "3.0.1" } for benchmark tracking.
+# This is a workaround because different package selection based on target does not mix well with workspace dependencies.
+divan = "0.1.21"
 hex = "0.4.3"
 itertools = "0.14.0"
 paste = "1.0.15"
@@ -126,6 +133,14 @@ tracy-client-sys = "=0.24.3"
 zerocopy = "0.8.25"
 zeroize = "1.8.1"
 zstd = "0.13.3"
+ruzstd = "0.7"  # Pure Rust zstd decoder for WASM compatibility
+
+# WASM-specific dependencies
+wasm-bindgen = "0.2"
+serde-wasm-bindgen = "0.6"
+console_error_panic_hook = "0.1"
+getrandom = { version = "0.2", features = ["js"] }
+getrandom03 = { package = "getrandom", version = "0.3", features = ["wasm_js"] }
 
 # Noir language dependencies
 acir = { git = "https://github.com/noir-lang/noir", rev = "v1.0.0-beta.11" }
@@ -150,5 +165,7 @@ ark-std = { version = "0.5", features = ["std"] }
 spongefish = { git = "https://github.com/arkworks-rs/spongefish", features = [
   "arkworks-algebra",
 ], rev = "ecb4f08373ed930175585c856517efdb1851fb47" }
+# spongefish-pow with parallel feature for wasm-bindgen-rayon support
 spongefish-pow = { git = "https://github.com/arkworks-rs/spongefish", rev = "ecb4f08373ed930175585c856517efdb1851fb47" }
+# WHIR proof system - using main's revision
 whir = { git = "https://github.com/WizardOfMenlo/whir/", features = ["tracing"], rev = "cf1599b56ff50e09142ebe6d2e2fbd86875c9986" }

playground/wasm-demo/.gitignore

@@ -0,0 +1,13 @@
+# Dependencies
+node_modules/
+
+# Generated artifacts (created by setup script)
+artifacts/
+pkg/
+pkg-web/
+
+# Build outputs
+*.wasm
+!src/**/*.wasm
+
+pnpm-lock.yaml

playground/wasm-demo/README.md

@@ -0,0 +1,123 @@
+# ProveKit WASM Node.js Demo
+
+A Node.js demonstration of ProveKit's WASM bindings for zero-knowledge proof generation using the **OPRF Nullifier** circuit.
+
+## Prerequisites
+
+1. **Noir toolchain** (v1.0.0-beta.11):
+   ```bash
+   noirup --version v1.0.0-beta.11
+   ```
+
+2. **Rust** with wasm32 target:
+   ```bash
+   rustup target add wasm32-unknown-unknown
+   ```
+
+3. **wasm-pack**:
+   ```bash
+   cargo install wasm-pack
+   ```
+
+4. **wasm-opt**:
+   ```bash
+   npm install -g binaryen
+   ```
+
+## Setup
+
+Run the setup script to build all required artifacts:
+
+```bash
+npm install
+npm run setup
+```
+
+This will:
+1. Build the WASM package (`wasm-pack build`)
+2. Compile the OPRF Noir circuit (`nargo compile`)
+3. Prepare prover/verifier JSON artifacts (`provekit-cli prepare`)
+4. Build the native CLI for verification
+
+## Run the Demo
+
+```bash
+npm run demo
+```
+
+The demo will:
+1. Load the compiled OPRF circuit and prover artifact
+2. Generate a witness using `@noir-lang/noir_js`
+3. Generate a zero-knowledge proof using ProveKit WASM
+4. Verify the proof using the native ProveKit CLI
+
+## Architecture
+
+```
+┌─────────────────────────────────────────────────────────────┐
+│                       Node.js Demo                          │
+├─────────────────────────────────────────────────────────────┤
+│                                                             │
+│  Circuit: OPRF Nullifier                                    │
+│  ├─ Merkle tree membership proof (depth 10)                 │
+│  ├─ ECDSA signature verification                            │
+│  ├─ DLOG equality proof                                     │
+│  └─ Poseidon2 hashing                                       │
+│                                                             │
+│  1. Witness Generation                                      │
+│     ├─ Input: Noir circuit + OPRF inputs                    │
+│     └─ Tool: @noir-lang/noir_js                             │
+│                                                             │
+│  2. Proof Generation                                        │
+│     ├─ Input: Witness + Prover.json                         │
+│     └─ Tool: ProveKit WASM                                  │
+│                                                             │
+│  3. Verification                                            │
+│     ├─ Input: Proof + Verifier.pkv                          │
+│     └─ Tool: ProveKit native CLI*                           │
+│                                                             │
+└─────────────────────────────────────────────────────────────┘
+
+* WASM Verifier is WIP due to tokio/mio dependency resolution
+```
+
+## Files
+
+- `scripts/setup.mjs` - Setup script that builds all artifacts
+- `src/demo.mjs` - Main demo showing WASM proof generation
+- `src/wasm-loader.mjs` - Helper to load WASM module in Node.js
+- `artifacts/` - Generated artifacts (circuit, prover, verifier, proofs)
+
+## Notes
+
+- **WASM Verifier**: Currently disabled in ProveKit WASM due to tokio/mio dependencies. 
+  Verification uses the native CLI as a workaround.
+- **JSON Format**: WASM bindings use JSON artifacts (not binary `.pkp`/`.pkv`) to avoid 
+  compression dependencies in the browser.
+- **Witness Format**: The witness map uses hex-encoded field elements as strings.
+- **Circuit Complexity**: The OPRF circuit is moderately complex (~100k constraints). 
+  Proof generation may take 30-60 seconds on modern hardware.
+
+## Troubleshooting
+
+### "command not found: nargo"
+Install the Noir toolchain:
+```bash
+curl -L https://raw.githubusercontent.com/noir-lang/noirup/refs/heads/main/install | bash
+noirup --version v1.0.0-beta.11
+```
+
+### "wasm-pack: command not found"
+```bash
+cargo install wasm-pack
+```
+
+### WASM memory errors
+The OPRF circuit requires significant memory for proof generation. Increase Node.js memory limit:
+```bash
+NODE_OPTIONS="--max-old-space-size=8192" npm run demo
+```
+
+### Slow proof generation
+The OPRF circuit is complex. On Apple Silicon (M1/M2/M3), expect ~30-60s for proof generation.
+On x86_64, it may take longer. This is normal for WASM execution.