feat: support Flamingo matching in browser WASM

.github/workflows/ci.yml

@@ -110,7 +110,9 @@ jobs:
           llvm-ar-18 --version | head -n1
 
       - name: Run WASM compile check
-        run: cargo check -p walletkit --features embed-zkeys --target wasm32-unknown-unknown
+        run: |
+          cargo check -p walletkit --features embed-zkeys --locked --target wasm32-unknown-unknown
+          git diff --exit-code -- Cargo.lock
 
       # Keep this version aligned with the wasm-bindgen version in Cargo.lock.
       - name: Install WASM browser test runner
@@ -119,7 +121,17 @@ jobs:
       - name: Test walletkit-sqlite in a browser runner
         run: |
           CHROMEDRIVER="$CHROMEWEBDRIVER/chromedriver" \
-            cargo test -p walletkit-sqlite --target wasm32-unknown-unknown
+            cargo test -p walletkit-sqlite --locked --target wasm32-unknown-unknown
+
+      - name: Build JavaScript and WASM package
+        run: bash web/build.sh
+
+      - name: Test browser package in Chromium and WebKit
+        working-directory: web
+        run: |
+          npm ci
+          npx playwright install --with-deps chromium webkit
+          npm test
 
   swift-build:
     name: Build Swift

.gitignore

@@ -1,4 +1,5 @@
 target/
+/target-web/
 .DS_Store
 **/ios_build
 .swiftpm/

Cargo.toml

@@ -3,6 +3,7 @@ members = [
   "crates/uniffi-bindgen",
   "crates/walletkit-core",
   "crates/walletkit",
+  "crates/walletkit-web",
   "crates/walletkit-db",
   "crates/walletkit-sqlite",
   "crates/walletkit-cli",
@@ -41,9 +42,9 @@ clap = "4"
 ctor = "0.2"
 dirs = "6"
 dotenvy = "0.15.7"
-flamingo-verifier-client = "0.3.0"
-flamingo-verifier-protocol = "0.3.0"
-flamingo-verifier-sealed-types = "0.3.0"
+flamingo-verifier-client = { version = "0.3.0", git = "https://github.com/worldcoin/flamingo", rev = "3fc9028493359476aea6a871a95cd05951bc6513" }
+flamingo-verifier-protocol = { version = "0.3.0", git = "https://github.com/worldcoin/flamingo", rev = "3fc9028493359476aea6a871a95cd05951bc6513" }
+flamingo-verifier-sealed-types = { version = "0.3.0", git = "https://github.com/worldcoin/flamingo", rev = "3fc9028493359476aea6a871a95cd05951bc6513" }
 eyre = "0.6"
 getrandom = "0.3"
 hex = "0.4"

crates/walletkit-core/Cargo.toml

@@ -21,11 +21,15 @@ crate-type = ["lib", "staticlib", "cdylib"]
 name = "walletkit_core"
 
 [dependencies]
+async-trait = { workspace = true }
 alloy-core = { workspace = true }
 backon = { workspace = true }
 base64 = { workspace = true }
 ciborium = { workspace = true }
 hex = { workspace = true }
+flamingo-verifier-client = { workspace = true }
+flamingo-verifier-protocol = { workspace = true }
+flamingo-verifier-sealed-types = { workspace = true }
 hkdf = { workspace = true }
 log = { workspace = true }
 rand = { workspace = true }
@@ -57,11 +61,7 @@ getrandom = { workspace = true, features = ["wasm_js"] }
 
 # Native-only dependencies (not available on wasm32)
 [target.'cfg(not(target_arch = "wasm32"))'.dependencies]
-async-trait = { workspace = true }
 ctor = { workspace = true }
-flamingo-verifier-client = { workspace = true }
-flamingo-verifier-protocol = { workspace = true }
-flamingo-verifier-sealed-types = { workspace = true }
 reqwest = { workspace = true, features = ["brotli", "rustls-tls"] }
 rustls = { workspace = true, features = ["ring"] }
 

crates/walletkit-core/src/flamingo.rs

@@ -104,7 +104,8 @@ pub enum FlamingoError {
     Verifier(String),
 }
 
-#[async_trait]
+#[cfg_attr(target_arch = "wasm32", async_trait(?Send))]
+#[cfg_attr(not(target_arch = "wasm32"), async_trait)]
 trait MatchClient: Sync {
     type Assignment: Send + Sync;
 
@@ -297,7 +298,8 @@ impl From<FailureReason> for FlamingoMatchRejection {
     }
 }
 
-#[async_trait]
+#[cfg_attr(target_arch = "wasm32", async_trait(?Send))]
+#[cfg_attr(not(target_arch = "wasm32"), async_trait)]
 impl MatchClient for FlamingoVerifierClient {
     type Assignment = VerifiedAssignment;
 
@@ -404,7 +406,7 @@ fn verifier_error(error: &ClientError) -> FlamingoError {
     FlamingoError::Verifier(error.to_string())
 }
 
-#[cfg(test)]
+#[cfg(all(test, not(target_arch = "wasm32")))]
 mod tests {
     use std::{
         collections::{HashMap, VecDeque},

crates/walletkit-core/src/lib.rs

@@ -103,7 +103,6 @@ pub enum Region {
 }
 
 /// Attested Flamingo matching in preparation for zero-knowledge proof generation.
-#[cfg(not(target_arch = "wasm32"))]
 pub mod flamingo;
 
 /// Contains error outputs from `WalletKit`

crates/walletkit-web/Cargo.toml

@@ -0,0 +1,27 @@
+[package]
+name = "walletkit-web"
+description = "Browser bindings for WalletKit's attested Flamingo client."
+publish = false
+version.workspace = true
+edition.workspace = true
+rust-version.workspace = true
+license.workspace = true
+
+[lib]
+crate-type = ["cdylib", "rlib"]
+
+[dependencies]
+walletkit-core = { workspace = true, default-features = false }
+hex = { workspace = true }
+serde = { workspace = true, features = ["derive"] }
+serde_bytes = "0.11"
+serde-wasm-bindgen = "0.6"
+wasm-bindgen = "=0.2.126"
+wasm-bindgen-futures = "=0.4.76"
+js-sys = "=0.3.103"
+
+[target.'cfg(target_arch = "wasm32")'.dev-dependencies]
+wasm-bindgen-test = { workspace = true }
+
+[lints]
+workspace = true