Aithos Client

Offline WebAssembly client for the Aithos Core 0.1.0-alpha.1 protocol line.

This prerelease cold-verifies untrusted Aithos artifact packs, opens opaque owner or grantee sessions from caller-supplied local capabilities, rechecks mandate authority at each injected operation time, and reads authorized content locally. It performs no HTTP, DNS, socket, synchronization, cache, CAS, retry, or provider operation.

The package is intentionally read-only. Mutation and PublicationPlan support are not part of 0.1.0-alpha.1; they require their own vectors-first client contract over the published Core + Bundle mutation APIs.

import { AithosClient } from "@aithos/client";

const client = await AithosClient.create();
const snapshot = client.coldVerify(artifacts);
const publicContent = snapshot.readPublic("guide/welcome");

artifacts is an iterable of { path, bytes: Uint8Array }. Transport belongs to the host application or future Aithos SDK. Secret key arrays passed to importOwnerKey or importGranteeKey are consumed and zeroed by the binding; handles and sessions remain in memory until locked or reset.

Security model: this first browser profile assumes honestly delivered JavaScript and an uncompromised browser context. It does not protect against a hostile page, XSS, extensions, or a compromised device.

License: Business Source License 1.1 with the Aithos client-side Additional Use Grant. See LICENSE for the complete terms.