Struct P47hClient 

pub struct P47hClient { /* private fields */ }

WASM-compatible client managing Identity lifecycle and local policy evaluation.

Handles key generation, secure wrapped export (ChaCha20Poly1305), and signing operations. Private keys remain within WASM linear memory unless explicitly exported.

Implementations

impl P47hClient

pub fn generate_new() -> Result<P47hClient, JsValue>

Generates a new cryptographic identity using browser’s secure random source

pub fn from_secret(secret_bytes: &[u8]) -> Result<P47hClient, JsValue>

Reconstructs identity from previously exported secret bytes

pub fn export_wrapped_secret( &self, session_key: &[u8], ) -> Result<Vec<u8>, JsValue>

Exports the private key encrypted with ChaCha20Poly1305

Security

This method encrypts the private key using ChaCha20Poly1305 AEAD cipher before exporting it. The caller must provide a 32-byte session key.

Arguments

• session_key - A 32-byte key derived from user password or other secure source

Returns

Returns a byte array containing: [nonce(12 bytes) || ciphertext || tag(16 bytes)]

Example

// Derive session key from password using PBKDF2 or similar
const sessionKey = await deriveKey(password);
const wrapped = client.export_wrapped_secret(sessionKey);
// Store wrapped securely in IndexedDB

pub fn from_wrapped_secret( wrapped: &[u8], session_key: &[u8], ) -> Result<P47hClient, JsValue>

Imports identity from encrypted secret

Arguments

• wrapped - The encrypted secret from export_wrapped_secret
• session_key - The same 32-byte key used for encryption

Returns

Returns a new P47hClient instance with the decrypted identity

Example

const sessionKey = await deriveKey(password);
const client = P47hClient.from_wrapped_secret(wrapped, sessionKey);

pub fn get_did(&self) -> String

Returns the Decentralized Identifier (DID) for this identity

pub fn get_public_key(&self) -> Vec<u8>

Returns the raw public key bytes (for advanced use cases)

pub fn sign_challenge(&self, challenge: &[u8]) -> Vec<u8>

Signs a challenge for authentication with the server

pub fn sign_data(&self, data: &[u8]) -> Vec<u8>

Signs arbitrary data (for advanced use cases)

pub fn evaluate_request( &self, policy_toml: &str, resource: &str, action: &str, ) -> Result<JsValue, JsValue>

Evaluates a policy request locally without server round-trip

pub fn evaluate_batch( &self, policy_toml: &str, requests_json: &str, ) -> Result<JsValue, JsValue>

Batch evaluation of multiple requests (more efficient)

Trait Implementations

impl From<P47hClient> for JsValue

fn from(value: P47hClient) -> Self

Converts to this type from the input type.

impl FromWasmAbi for P47hClient

type Abi = WasmPtr<WasmRefCell<P47hClient>>

The Wasm ABI type that this converts from when coming back out from the ABI boundary.

unsafe fn from_abi(js: Self::Abi) -> Self

Recover a Self from Self::Abi.

impl IntoWasmAbi for P47hClient

type Abi = WasmPtr<WasmRefCell<P47hClient>>

The Wasm ABI type that this converts into when crossing the ABI boundary.

fn into_abi(self) -> Self::Abi

Convert self into Self::Abi so that it can be sent across the wasm ABI boundary.

impl LongRefFromWasmAbi for P47hClient

type Abi = WasmPtr<WasmRefCell<P47hClient>>

Same as RefFromWasmAbi::Abi

type Anchor = RcRef<P47hClient>

Same as RefFromWasmAbi::Anchor

unsafe fn long_ref_from_abi(js: Self::Abi) -> Self::Anchor

Same as RefFromWasmAbi::ref_from_abi

impl OptionFromWasmAbi for P47hClient

fn is_none(abi: &Self::Abi) -> bool

Tests whether the argument is a “none” instance. If so it will be deserialized as None, and otherwise it will be passed to FromWasmAbi.

impl OptionIntoWasmAbi for P47hClient

fn none() -> Self::Abi

Returns an ABI instance indicating “none”, which JS will interpret as the None branch of this option.

impl RefFromWasmAbi for P47hClient

type Abi = WasmPtr<WasmRefCell<P47hClient>>

The Wasm ABI type references to Self are recovered from.

type Anchor = RcRef<P47hClient>

The type that holds the reference to Self for the duration of the invocation of the function that has an &Self parameter. This is required to ensure that the lifetimes don’t persist beyond one function call, and so that they remain anonymous.

unsafe fn ref_from_abi(js: Self::Abi) -> Self::Anchor

Recover a Self::Anchor from Self::Abi.

impl RefMutFromWasmAbi for P47hClient

type Abi = WasmPtr<WasmRefCell<P47hClient>>

Same as RefFromWasmAbi::Abi

type Anchor = RcRefMut<P47hClient>

Same as RefFromWasmAbi::Anchor

unsafe fn ref_mut_from_abi(js: Self::Abi) -> Self::Anchor

Same as RefFromWasmAbi::ref_from_abi

impl TryFromJsValue for P47hClient

fn try_from_js_value(value: JsValue) -> Result<Self, JsValue>

Performs the conversion.

fn try_from_js_value_ref(value: &JsValue) -> Option<Self>

Performs the conversion.

impl VectorFromWasmAbi for P47hClient

type Abi = <Box<[JsValue]> as FromWasmAbi>::Abi

unsafe fn vector_from_abi(js: Self::Abi) -> Box<[P47hClient]>

impl VectorIntoWasmAbi for P47hClient

type Abi = <Box<[JsValue]> as IntoWasmAbi>::Abi

fn vector_into_abi(vector: Box<[P47hClient]>) -> Self::Abi

impl WasmDescribe for P47hClient

fn describe()

impl WasmDescribeVector for P47hClient

fn describe_vector()

impl SupportsConstructor for P47hClient

impl SupportsInstanceProperty for P47hClient

impl SupportsStaticProperty for P47hClient