Its a wasm blob encoded as bech32. Working on the actual apis still
Discussion
Nice! I am very interested in what data should be available to the script. I assume you are blocking most if not all of the phone APIs (access to the web and stuff), essentially making it a read-only query language for Nostr Events.
Right now damus nostrscripts can query relays and handle results. But nothing is standardized atm