WASM bridge: web client now uses same crypto as CLI (full interop)

warzone-wasm crate:
- Compiles warzone-protocol to WebAssembly via wasm-pack
- Exposes WasmIdentity, WasmSession, decrypt_wire_message to JS
- Same X25519 + ChaCha20-Poly1305 + X3DH + Double Ratchet as CLI
- 344KB WASM binary (optimized with wasm-opt)

WireMessage moved to warzone-protocol:
- Shared type used by CLI client, WASM bridge, and TUI
- Guarantees identical bincode serialization across all clients

Web client rewritten:
- Loads WASM module on startup (/wasm/warzone_wasm.js)
- Identity: WasmIdentity generates same key types as CLI
- Registration: sends bincode PreKeyBundle (same format as CLI)
- Encrypt: WasmSession.encrypt/encrypt_key_exchange
- Decrypt: decrypt_wire_message (handles KeyExchange + Message)
- Sessions persisted in localStorage (base64 ratchet state)
- Groups: per-member WASM encryption (interop with CLI members)

Server routes:
- GET /wasm/warzone_wasm.js — serves WASM JS glue
- GET /wasm/warzone_wasm_bg.wasm — serves WASM binary
- Both embedded at compile time via include_str!/include_bytes!

Web ↔ CLI interop now works:
- Same key exchange (X3DH with X25519)
- Same ratchet (Double Ratchet with ChaCha20-Poly1305)
- Same wire format (bincode WireMessage)
- Web user can message CLI user and vice versa

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

warzone/crates/warzone-client/src/cli/recv.rs

@@ -5,7 +5,7 @@ use warzone_protocol::types::Fingerprint;
 use warzone_protocol::x3dh;
 use x25519_dalek::PublicKey;
 
-use crate::cli::send::WireMessage;
+use warzone_protocol::message::WireMessage;
 use crate::net::ServerClient;
 use crate::storage::LocalDb;
 

warzone/crates/warzone-client/src/cli/send.rs

@@ -1,6 +1,7 @@
 use anyhow::{Context, Result};
 use warzone_protocol::identity::IdentityKeyPair;
-use warzone_protocol::ratchet::{RatchetMessage, RatchetState};
+use warzone_protocol::message::WireMessage;
+use warzone_protocol::ratchet::RatchetState;
 use warzone_protocol::types::Fingerprint;
 use warzone_protocol::x3dh;
 use x25519_dalek::PublicKey;
@@ -8,24 +9,6 @@ use x25519_dalek::PublicKey;
 use crate::net::ServerClient;
 use crate::storage::LocalDb;
 
-/// The wire envelope: contains either a key exchange init or a ratchet message.
-#[derive(serde::Serialize, serde::Deserialize)]
-pub enum WireMessage {
-    /// First message to a peer: includes X3DH ephemeral key + ratchet message.
-    KeyExchange {
-        sender_fingerprint: String,
-        sender_identity_encryption_key: [u8; 32],
-        ephemeral_public: [u8; 32],
-        used_one_time_pre_key_id: Option<u32>,
-        ratchet_message: RatchetMessage,
-    },
-    /// Subsequent messages: just ratchet messages.
-    Message {
-        sender_fingerprint: String,
-        ratchet_message: RatchetMessage,
-    },
-}
-
 pub async fn run(recipient_fp: &str, message: &str, server_url: &str, identity: &IdentityKeyPair) -> Result<()> {
     let our_pub = identity.public_identity();
     let db = LocalDb::open()?;

warzone/crates/warzone-client/src/tui/app.rs

@@ -14,7 +14,7 @@ use warzone_protocol::types::Fingerprint;
 use warzone_protocol::x3dh;
 use x25519_dalek::PublicKey;
 
-use crate::cli::send::WireMessage;
+use warzone_protocol::message::WireMessage;
 use crate::net::ServerClient;
 use crate::storage::LocalDb;