@interop/did-cli 0.10.0 → 0.10.1

package/dist/commands/did/webvh-update.js

@@ -0,0 +1,402 @@
+/**
+ * did:webvh update-key plumbing and the `rotate-keys` runner. A stored
+ * did:webvh is authored by appending entries to its history log (the source of
+ * truth); each entry must be signed by an update (authorization) key. This
+ * module owns the shared machinery for that -- loading and resolving the log,
+ * selecting the signer (ordinary active key vs. a pre-rotation staged reveal),
+ * and persisting the update-keys sidecar -- plus `runRotateKeys`, which rotates
+ * the update key itself. The service-update and create runners reuse these
+ * helpers.
+ */
+import { createInterface } from 'node:readline/promises';
+import { stdin, stdout } from 'node:process';
+import { resolveDIDFromLog, updateDID } from '@interop/did-method-webvh';
+import { Ed25519VerificationKey } from '@interop/ed25519-verification-key';
+import { loadDidLog, loadDidUpdateKeys, saveDidLog, saveDidUpdateKeys, saveToDids } from '../../storage.js';
+import { resolveDidRef } from '../../meta.js';
+import { makeWebvhSigner } from '../../keys/webvh-signer.js';
+import { webvhLogVerifier } from '../../documentLoader.js';
+import { exportUpdateKey, generateStagedKey, loadUpdateKey } from '../../keys/webvh-update.js';
+/**
+ * Parse a raw did:webvh history log (newline-delimited JSON) into the entry
+ * array the library's resolver/updater expect, ignoring blank lines.
+ *
+ * @param logText {string}
+ * @returns {DIDLog}
+ */
+export function parseDidLog(logText) {
+    return logText
+        .split('\n')
+        .filter(line => line.trim().length > 0)
+        .map(line => JSON.parse(line));
+}
+/**
+ * Ask the user to confirm a hard-to-undo action. Returns true immediately when
+ * `--yes` was passed or when stdin is not an interactive TTY (so scripts and
+ * tests are not blocked); otherwise prompts and requires an explicit `y`.
+ *
+ * @param options {object}
+ * @param options.message {string}
+ * @param options.yes {boolean} the value of the `--yes` flag.
+ * @returns {Promise<boolean>}
+ */
+export async function confirmAction({ message, yes }) {
+    if (yes || !stdin.isTTY) {
+        return true;
+    }
+    const rl = createInterface({ input: stdin, output: stdout });
+    try {
+        const answer = await rl.question(`${message} [y/N] `);
+        return answer.trim().toLowerCase() === 'y';
+    }
+    finally {
+        rl.close();
+    }
+}
+/**
+ * Load and resolve a locally stored did:webvh history log in preparation for an
+ * update, asserting it is updatable. The log is the source of truth for a
+ * stored did:webvh, so its absence is what "not locally stored" means.
+ *
+ * @param options {object}
+ * @param options.targetDid {string} the resolved did:webvh DID.
+ * @param options.action {string} verb used in error messages (e.g.
+ *   `rotate keys`, `update services`).
+ * @returns {Promise<{ log, doc, meta }>}
+ * @throws {Error} with a user-facing message if the log is missing, fails to
+ *   resolve, or the DID is deactivated.
+ */
+export async function resolveWebvhForUpdate({ targetDid, action }) {
+    let logText;
+    try {
+        logText = await loadDidLog(targetDid);
+    }
+    catch {
+        throw new Error(`No locally stored did:webvh found for ${targetDid}`);
+    }
+    const log = parseDidLog(logText);
+    let resolved;
+    try {
+        resolved = await resolveDIDFromLog(log, { verifier: webvhLogVerifier });
+    }
+    catch (err) {
+        throw new Error(`Could not resolve the DID log: ${err.message}`, {
+            cause: err
+        });
+    }
+    if (resolved.meta.deactivated) {
+        throw new Error(`Cannot ${action}: the DID is deactivated.`);
+    }
+    return { log, doc: resolved.doc, meta: resolved.meta };
+}
+/**
+ * Resolve a locally stored did:webvh DID from its history log (`.jsonl`) -- the
+ * source of truth for the current document and its accumulated parameters.
+ * Unlike `resolveWebvhForUpdate` this does not reject a deactivated DID, since
+ * `show` should still display it; it returns `undefined` when no log is stored
+ * so the caller can fall back to the stored document snapshot.
+ *
+ * @param did {string} the resolved did:webvh DID.
+ * @returns {Promise<{ doc, meta } | undefined>}
+ * @throws {Error} if a log exists but fails to resolve/verify.
+ */
+export async function resolveStoredWebvh(did) {
+    let logText;
+    try {
+        logText = await loadDidLog(did);
+    }
+    catch {
+        return undefined;
+    }
+    const { doc, meta } = await resolveDIDFromLog(parseDidLog(logText), {
+        verifier: webvhLogVerifier
+    });
+    return { doc, meta };
+}
+/**
+ * Load a did:webvh DID's update-keys sidecar, treating an absent file as
+ * `undefined` (no stored secrets) rather than an error.
+ *
+ * @param did {string}
+ * @returns {Promise<WebvhUpdateKeys | undefined>}
+ */
+export async function loadStoredUpdateKeys(did) {
+    try {
+        return await loadDidUpdateKeys(did);
+    }
+    catch (err) {
+        if (err.code !== 'ENOENT') {
+            throw err;
+        }
+        return undefined;
+    }
+}
+/**
+ * Pre-rotation reveal: validate and load the staged (pre-committed) update key
+ * that must sign this entry, returning the signer key pair plus the records
+ * that make it the new active key and retire the current one.
+ *
+ * @param options {object}
+ * @param options.stored {WebvhUpdateKeys | undefined} the update-keys sidecar.
+ * @param options.meta {Awaited<ReturnType<typeof resolveDIDFromLog>>['meta']}
+ * @param options.targetDid {string}
+ * @param options.action {string} verb used in error messages.
+ * @returns {Promise<{ signerKeyPair, newActive, retiredActive }>}
+ * @throws {Error} if the staged secret is missing or has diverged from the
+ *   log's committed nextKeyHashes.
+ */
+export async function revealStagedSigner({ stored, meta, targetDid, action }) {
+    if (!stored?.staged) {
+        throw new Error(`Cannot ${action}: the pre-committed next-key secret was not found. ` +
+            'While pre-rotation is armed the staged key must sign this entry; ' +
+            `check for a backup of the ${targetDid}.update-keys.json sidecar.`);
+    }
+    if (!meta.nextKeyHashes.includes(stored.staged.nextKeyHash)) {
+        throw new Error(`Cannot ${action}: the staged key's hash is not among the log's ` +
+            'committed nextKeyHashes. The local update-keys record has diverged ' +
+            'from the published log (an update may have happened elsewhere); ' +
+            're-resolve before retrying.');
+    }
+    return {
+        signerKeyPair: await loadUpdateKey(stored.staged),
+        newActive: {
+            publicKeyMultibase: stored.staged.publicKeyMultibase,
+            secretKeyMultibase: stored.staged.secretKeyMultibase
+        },
+        retiredActive: stored.active
+    };
+}
+/**
+ * Ordinary (non-pre-rotation) signer: the current active update key signs.
+ * Returns the signer key pair and the active record it was loaded from.
+ *
+ * @param options {object}
+ * @param options.stored {WebvhUpdateKeys | undefined} the update-keys sidecar.
+ * @param options.meta {Awaited<ReturnType<typeof resolveDIDFromLog>>['meta']}
+ * @param options.targetDid {string}
+ * @param options.action {string} verb used in error messages.
+ * @returns {Promise<{ signerKeyPair, activeRecord }>}
+ * @throws {Error} if the active secret is missing or no longer matches the
+ *   log's updateKeys.
+ */
+export async function loadActiveSigner({ stored, meta, targetDid, action }) {
+    const activeRecord = stored?.active.secretKeyMultibase &&
+        meta.updateKeys.includes(stored.active.publicKeyMultibase)
+        ? stored.active
+        : undefined;
+    if (!activeRecord) {
+        throw new Error(`Cannot ${action}: the current active update-key secret was not found ` +
+            `in ${targetDid}.update-keys.json.`);
+    }
+    return { signerKeyPair: await loadUpdateKey(activeRecord), activeRecord };
+}
+/**
+ * Build the entry signer for a did:webvh update from an update key pair.
+ *
+ * @param keyPair {Ed25519VerificationKey} mutated: its `id` is set in place.
+ * @returns the signer to pass to `updateDID`.
+ */
+export function makeWebvhEntrySigner(keyPair) {
+    const signer = makeWebvhSigner({ keyPair });
+    // `keyPair.signer()` requires an id to be set before signing.
+    keyPair.id = signer.getVerificationMethodId();
+    return signer;
+}
+/**
+ * Write the update-keys sidecar: the active key, the staged next key (or
+ * none), and any retired secrets. At creation there is no prior sidecar; after
+ * an advance/rotation the superseded active key is appended to `retired` only
+ * when `keepOldKey` asks to preserve it.
+ *
+ * @param options {object}
+ * @param options.did {string}
+ * @param options.newActive {WebvhUpdateKey}
+ * @param [options.newStaged] {WebvhUpdateKey & { nextKeyHash: string }}
+ * @param [options.retiredActive] {WebvhUpdateKey} the superseded active key.
+ * @param [options.stored] {WebvhUpdateKeys} the prior sidecar, if any.
+ * @param [options.keepOldKey] {boolean} retain the retired secret.
+ * @returns {Promise<string>} the saved sidecar path.
+ */
+export async function persistUpdateKeysSidecar({ did, newActive, newStaged, retiredActive, stored, keepOldKey }) {
+    const updated = { active: newActive };
+    if (newStaged) {
+        updated.staged = newStaged;
+    }
+    const retiredList = stored?.retired ? [...stored.retired] : [];
+    // retiredActive is undefined on the stage-only path, so this also skips that
+    // case without a separate guard.
+    if (keepOldKey && retiredActive?.secretKeyMultibase) {
+        retiredList.push(retiredActive);
+    }
+    if (retiredList.length > 0) {
+        updated.retired = retiredList;
+    }
+    return saveDidUpdateKeys({ did, updateKeys: updated });
+}
+/**
+ * Rotate the update (authorization) key of a locally stored did:webvh DID. By
+ * default advances key pre-rotation -- reveals the staged next key and stages a
+ * fresh one -- and never touches the document verification methods.
+ *
+ * @param options {object}
+ * @param options.didRef {string}   The DID or metadata handle.
+ * @param [options.updateKey] {string[]}   Rotate to specific update key(s).
+ * @param [options.enablePrerotation] {boolean}   Turn pre-rotation on.
+ * @param [options.stopPrerotation] {boolean}   Turn pre-rotation off.
+ * @param [options.keepOldKey] {boolean}   Retain the retired update key secret.
+ * @param [options.yes] {boolean}   Skip the confirmation prompt.
+ * @returns {Promise<number>}   The process exit code.
+ */
+export async function runRotateKeys(options) {
+    const { didRef } = options;
+    let resolved;
+    try {
+        resolved = await resolveDidRef({ ref: didRef });
+    }
+    catch (err) {
+        console.error(err.message);
+        return 1;
+    }
+    const targetDid = resolved ?? didRef;
+    if (!targetDid.startsWith('did:webvh:')) {
+        console.error('rotate-keys is only supported for did:webvh DIDs');
+        return 1;
+    }
+    // The history log is the source of truth for a stored did:webvh (the
+    // current document is just its last entry's state), so a key-only
+    // rotation ignores the resolved document.
+    let log;
+    let meta;
+    try {
+        ;
+        ({ log, meta } = await resolveWebvhForUpdate({
+            targetDid,
+            action: 'rotate keys'
+        }));
+    }
+    catch (err) {
+        console.error(err.message);
+        return 1;
+    }
+    // Flag validation against the current pre-rotation state.
+    if (options.enablePrerotation && options.stopPrerotation) {
+        console.error('--enable-prerotation and --stop-prerotation are mutually exclusive');
+        return 1;
+    }
+    if (meta.prerotation) {
+        if (options.updateKey) {
+            console.error('--update-key is not allowed while pre-rotation is armed; the ' +
+                'next update keys are fixed by the committed nextKeyHashes');
+            return 1;
+        }
+        if (options.enablePrerotation) {
+            console.error('pre-rotation is already enabled for this DID');
+            return 1;
+        }
+    }
+    else if (options.stopPrerotation) {
+        console.error('pre-rotation is already off for this DID');
+        return 1;
+    }
+    const stored = await loadStoredUpdateKeys(targetDid);
+    // Inbound: who signs this entry, and what becomes the active key.
+    let signerKeyPair;
+    let newActive;
+    let retiredActive;
+    try {
+        if (meta.prerotation) {
+            // Pre-rotation reveal: the staged key signs its own activation.
+            ;
+            ({ signerKeyPair, newActive, retiredActive } = await revealStagedSigner({
+                stored,
+                meta,
+                targetDid,
+                action: 'rotate keys'
+            }));
+        }
+        else {
+            // Ordinary rotation: the current active key signs.
+            let activeRecord;
+            ({ signerKeyPair, activeRecord } = await loadActiveSigner({
+                stored,
+                meta,
+                targetDid,
+                action: 'rotate keys'
+            }));
+            if (options.enablePrerotation && !options.updateKey) {
+                // Stage only: arm pre-rotation without changing the active key.
+                newActive = activeRecord;
+            }
+            else if (options.updateKey) {
+                // Rotate to externally-held key(s); the secret is not ours to store.
+                newActive = { publicKeyMultibase: options.updateKey[0] };
+                retiredActive = activeRecord;
+            }
+            else {
+                newActive = await exportUpdateKey(await Ed25519VerificationKey.generate());
+                retiredActive = activeRecord;
+            }
+        }
+    }
+    catch (err) {
+        console.error(err.message);
+        return 1;
+    }
+    // Outbound: keep the ratchet armed (stage a fresh next key) or not.
+    const arm = meta.prerotation
+        ? !options.stopPrerotation
+        : Boolean(options.enablePrerotation);
+    const newStaged = arm ? await generateStagedKey() : undefined;
+    const nextKeyHashes = newStaged ? [newStaged.nextKeyHash] : [];
+    const confirmed = await confirmAction({
+        message: `Rotate the update key of ${targetDid}? This appends a new log ` +
+            'entry and is hard to undo.',
+        yes: options.yes
+    });
+    if (!confirmed) {
+        console.error('Aborted.');
+        return 0;
+    }
+    const signer = makeWebvhEntrySigner(signerKeyPair);
+    // A sparse updateDID() carries the prior DID document state forward and
+    // only overlays the fields an update actually supplies, so a key-only
+    // rotation omits all document directives to leave the document
+    // unchanged.
+    let result;
+    try {
+        result = await updateDID({
+            log,
+            signer,
+            verifier: webvhLogVerifier,
+            updateKeys: [newActive.publicKeyMultibase],
+            nextKeyHashes
+        });
+    }
+    catch (err) {
+        console.error(`Key rotation failed: ${err.message}`);
+        return 1;
+    }
+    const logPath = await saveDidLog({ did: result.did, log: result.log });
+    const docPath = await saveToDids({
+        method: 'webvh',
+        did: result.did,
+        data: result.doc
+    });
+    const updateKeysPath = await persistUpdateKeysSidecar({
+        did: result.did,
+        newActive,
+        newStaged,
+        retiredActive,
+        stored,
+        keepOldKey: options.keepOldKey
+    });
+    console.error(`DID document saved to ${docPath}`);
+    console.error(`DID history log saved to ${logPath}`);
+    console.error(`Update keys saved to ${updateKeysPath}`);
+    console.error(nextKeyHashes.length > 0
+        ? 'Pre-rotation is armed: a next update key is staged.'
+        : 'Pre-rotation is off after this rotation.');
+    console.log(JSON.stringify({ id: result.did, didDocument: result.doc }, null, 2));
+    return 0;
+}
+//# sourceMappingURL=webvh-update.js.map

package/dist/commands/did/webvh-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webvh-update.js","sourceRoot":"","sources":["../../../src/commands/did/webvh-update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EACL,iBAAiB,EACjB,SAAS,EAEV,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAC1E,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,iBAAiB,EACjB,UAAU,EAGX,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,aAAa,EACd,MAAM,4BAA4B,CAAA;AAEnC;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,OAAO;SACX,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SACtC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAW,CAAA;AAC5C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAClC,OAAO,EACP,GAAG,EAIJ;IACC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAC5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,OAAO,SAAS,CAAC,CAAA;QACrD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAA;IAC5C,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAC1C,SAAS,EACT,MAAM,EAIP;IAKC,IAAI,OAAe,CAAA;IACnB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yCAAyC,SAAS,EAAE,CAAC,CAAA;IACvE,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IAChC,IAAI,QAAuD,CAAA;IAC3D,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAA;IACzE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,kCAAmC,GAAa,CAAC,OAAO,EAAE,EAC1D;YACE,KAAK,EAAE,GAAG;SACX,CACF,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,2BAA2B,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAA;AACxD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAOlD,IAAI,OAAe,CAAA;IACnB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE;QAClE,QAAQ,EAAE,gBAAgB;KAC3B,CAAC,CAAA;IACF,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAA;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAW;IAEX,IAAI,CAAC;QACH,OAAO,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAA;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,MAAM,EACN,IAAI,EACJ,SAAS,EACT,MAAM,EAMP;IAKC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,UAAU,MAAM,qDAAqD;YACnE,mEAAmE;YACnE,6BAA6B,SAAS,4BAA4B,CACrE,CAAA;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,UAAU,MAAM,iDAAiD;YAC/D,qEAAqE;YACrE,kEAAkE;YAClE,6BAA6B,CAChC,CAAA;IACH,CAAC;IACD,OAAO;QACL,aAAa,EAAE,MAAM,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;QACjD,SAAS,EAAE;YACT,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB;YACpD,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB;SACrD;QACD,aAAa,EAAE,MAAM,CAAC,MAAM;KAC7B,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,MAAM,EACN,IAAI,EACJ,SAAS,EACT,MAAM,EAMP;IAIC,MAAM,YAAY,GAChB,MAAM,EAAE,MAAM,CAAC,kBAAkB;QACjC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACxD,CAAC,CAAC,MAAM,CAAC,MAAM;QACf,CAAC,CAAC,SAAS,CAAA;IACf,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,UAAU,MAAM,uDAAuD;YACrE,MAAM,SAAS,oBAAoB,CACtC,CAAA;IACH,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,CAAA;AAC3E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA+B;IAClE,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IAC3C,8DAA8D;IAC9D,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,uBAAuB,EAAE,CAAA;IAC7C,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,EAC7C,GAAG,EACH,SAAS,EACT,SAAS,EACT,aAAa,EACb,MAAM,EACN,UAAU,EAQX;IACC,MAAM,OAAO,GAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IACtD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,GAAG,SAAS,CAAA;IAC5B,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,6EAA6E;IAC7E,iCAAiC;IACjC,IAAI,UAAU,IAAI,aAAa,EAAE,kBAAkB,EAAE,CAAC;QACpD,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACjC,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,OAAO,GAAG,WAAW,CAAA;IAC/B,CAAC;IACD,OAAO,iBAAiB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;AACxD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAOnC;IACC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAC1B,IAAI,QAA4B,CAAA;IAChC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAA;QACrC,OAAO,CAAC,CAAA;IACV,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,IAAI,MAAM,CAAA;IACpC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAA;QACjE,OAAO,CAAC,CAAA;IACV,CAAC;IACD,qEAAqE;IACrE,kEAAkE;IAClE,0CAA0C;IAC1C,IAAI,GAAW,CAAA;IACf,IAAI,IAA2D,CAAA;IAC/D,IAAI,CAAC;QACH,CAAC;QAAA,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,qBAAqB,CAAC;YAC5C,SAAS;YACT,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC,CAAA;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAA;QACrC,OAAO,CAAC,CAAA;IACV,CAAC;IAED,0DAA0D;IAC1D,IAAI,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QACzD,OAAO,CAAC,KAAK,CACX,oEAAoE,CACrE,CAAA;QACD,OAAO,CAAC,CAAA;IACV,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CACX,+DAA+D;gBAC7D,2DAA2D,CAC9D,CAAA;YACD,OAAO,CAAC,CAAA;QACV,CAAC;QACD,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAA;YAC7D,OAAO,CAAC,CAAA;QACV,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAA;QACzD,OAAO,CAAC,CAAA;IACV,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAA;IAEpD,kEAAkE;IAClE,IAAI,aAAqC,CAAA;IACzC,IAAI,SAAyB,CAAA;IAC7B,IAAI,aAAyC,CAAA;IAC7C,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,gEAAgE;YAChE,CAAC;YAAA,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,kBAAkB,CAAC;gBACvE,MAAM;gBACN,IAAI;gBACJ,SAAS;gBACT,MAAM,EAAE,aAAa;aACtB,CAAC,CAAC,CAAA;QACL,CAAC;aAAM,CAAC;YACN,mDAAmD;YACnD,IAAI,YAA4B,CAC/B;YAAA,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,MAAM,gBAAgB,CAAC;gBACzD,MAAM;gBACN,IAAI;gBACJ,SAAS;gBACT,MAAM,EAAE,aAAa;aACtB,CAAC,CAAC,CAAA;YACH,IAAI,OAAO,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBACpD,gEAAgE;gBAChE,SAAS,GAAG,YAAY,CAAA;YAC1B,CAAC;iBAAM,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC7B,qEAAqE;gBACrE,SAAS,GAAG,EAAE,kBAAkB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAA;gBACxD,aAAa,GAAG,YAAY,CAAA;YAC9B,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,MAAM,eAAe,CAC/B,MAAM,sBAAsB,CAAC,QAAQ,EAAE,CACxC,CAAA;gBACD,aAAa,GAAG,YAAY,CAAA;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAA;QACrC,OAAO,CAAC,CAAA;IACV,CAAC;IAED,oEAAoE;IACpE,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW;QAC1B,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe;QAC1B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7D,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAE9D,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC;QACpC,OAAO,EACL,4BAA4B,SAAS,2BAA2B;YAChE,4BAA4B;QAC9B,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAA;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QACzB,OAAO,CAAC,CAAA;IACV,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAA;IAElD,wEAAwE;IACxE,sEAAsE;IACtE,+DAA+D;IAC/D,aAAa;IACb,IAAI,MAA6C,CAAA;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,SAAS,CAAC;YACvB,GAAG;YACH,MAAM;YACN,QAAQ,EAAE,gBAAgB;YAC1B,UAAU,EAAE,CAAC,SAAS,CAAC,kBAAkB,CAAC;YAC1C,aAAa;SACd,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,wBAAyB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAA;QAC/D,OAAO,CAAC,CAAA;IACV,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;IACtE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC;QAC/B,MAAM,EAAE,OAAO;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,IAAI,EAAE,MAAM,CAAC,GAAG;KACjB,CAAC,CAAA;IAEF,MAAM,cAAc,GAAG,MAAM,wBAAwB,CAAC;QACpD,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,SAAS;QACT,SAAS;QACT,aAAa;QACb,MAAM;QACN,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAA;IAEF,OAAO,CAAC,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAA;IACjD,OAAO,CAAC,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAA;IACpD,OAAO,CAAC,KAAK,CAAC,wBAAwB,cAAc,EAAE,CAAC,CAAA;IACvD,OAAO,CAAC,KAAK,CACX,aAAa,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,CAAC,qDAAqD;QACvD,CAAC,CAAC,0CAA0C,CAC/C,CAAA;IAED,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CACrE,CAAA;IACD,OAAO,CAAC,CAAA;AACV,CAAC"}

package/dist/commands/did.d.ts

@@ -1,12 +1,12 @@
-import { Command } from 'commander';
-import { type DIDLog } from '@interop/did-method-webvh';
 /**
- * Parse a raw did:webvh history log (newline-delimited JSON) into the entry
- * array the library's resolver/updater expect, ignoring blank lines.
- *
- * @param logText {string}
- * @returns {DIDLog}
+ * `did` command wiring. Defines the commander surface (create, add-key,
+ * add-service, remove-service, get, show, list, meta, remove, and the webvh
+ * subcommand) and delegates each action to a `run*` function in the `did/`
+ * modules: create/add-key in `./did/create.js`, service edits in
+ * `./did/service.js`, read/manage operations in `./did/manage.js`, and the
+ * did:webvh update-key plumbing plus rotate-keys in `./did/webvh-update.js`.
  */
-export declare function parseDidLog(logText: string): DIDLog;
+import { Command } from 'commander';
+export { parseDidLog } from './did/webvh-update.js';
 export declare function makeDidCommand(): Command;
 //# sourceMappingURL=did.d.ts.map

package/dist/commands/did.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"did.d.ts","sourceRoot":"","sources":["../../src/commands/did.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAOnC,OAAO,EAIL,KAAK,MAAM,EAEZ,MAAM,2BAA2B,CAAA;AA2FlC;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKnD;AA6qBD,wBAAgB,cAAc,IAAI,OAAO,CA41CxC"}
+{"version":3,"file":"did.d.ts","sourceRoot":"","sources":["../../src/commands/did.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAmBnC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEnD,wBAAgB,cAAc,IAAI,OAAO,CAwVxC"}