keri 0.0.0-dev.bf75350 → 0.0.0-dev.deec53e

package/dist/nodejs-utils/serve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.js","sourceRoot":"","sources":["../../src/nodejs-utils/serve.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEnC,SAAS,YAAY,CAAC,GAAoB,EAAE,GAAQ;IAClD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;oBAChC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,GAAoB,IAAI,CAAC;IACjC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAA+B,CAAC;IAC3D,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QAC/B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,OAAO;QAChB,IAAI;QACJ,MAAM,EAAE,MAAM;QACd,4GAA4G;KACzE,CAAC,CAAC;IAEvC,OAAO,OAAO,CAAC;AACjB,CAAC;AAMD,KAAK,UAAU,aAAa,CAC1B,GAAoB,EACpB,GAAoC,EACpC,OAAgD;IAEhD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC;IAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,GAAG,QAAQ,MAAM,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAExC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAE/E,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,GAAG,CAAC,GAAG,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,OAAgD,EAChD,MAAqD;IAErD,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QACnC,MAAM,EAAE,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAE7B,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACpB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YAE9B,MAAM,EAAE,CAAC,GAAG,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,MAAM,EAAE,IAAI,EAAE;gBACzD,OAAO,EAAE;oBACP,GAAG;oBACH,MAAM;oBACN,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,GAAG,CAAC,UAAU;iBACvB;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,CAAC,2BAA2B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/storage/credential-storage.d.ts

@@ -0,0 +1,8 @@
+import type { CredentialBody, IssueEvent, Message, RegistryInceptEventBody, RevokeEvent } from "../core/main.ts";
+export interface CredentialStorage {
+    getCredentialEvents(id: string): Generator<Message<IssueEvent | RevokeEvent>>;
+    getRegistry(id: string): Message<RegistryInceptEventBody> | null;
+    getRegistriesByOwner(owner: string): Generator<Message<RegistryInceptEventBody>>;
+    getCredential(id: string): CredentialBody | null;
+    getCredentialsByRegistry(registryId: string): CredentialBody[];
+}

package/dist/storage/credential-storage.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=credential-storage.js.map

package/dist/storage/credential-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-storage.js","sourceRoot":"","sources":["../../src/storage/credential-storage.ts"],"names":[],"mappings":""}

package/dist/storage/key-event-storage.d.ts

@@ -0,0 +1,10 @@
+import type { KeyEvent, Message, ReplyEventBody } from "../core/main.ts";
+export interface KeyEventStorage {
+    saveMessage(message: Message): void;
+    getKeyEvents(prefix: string): Generator<KeyEvent>;
+    getReplies(filter?: {
+        route?: string;
+        eid?: string;
+        cid?: string;
+    }): Generator<Message<ReplyEventBody>>;
+}

package/dist/storage/key-event-storage.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=key-event-storage.js.map

package/dist/storage/key-event-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-event-storage.js","sourceRoot":"","sources":["../../src/storage/key-event-storage.ts"],"names":[],"mappings":""}

package/dist/storage/mailbox-storage.d.ts

@@ -0,0 +1,4 @@
+export interface MailboxStorage {
+    getMailboxOffset(prefix: string, topic: string): number;
+    saveMailboxOffset(prefix: string, topic: string, offset: number): void;
+}

package/dist/storage/mailbox-storage.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mailbox-storage.js.map

package/dist/storage/mailbox-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailbox-storage.js","sourceRoot":"","sources":["../../src/storage/mailbox-storage.ts"],"names":[],"mappings":""}

package/dist/storage/private-key-storage.d.ts

@@ -0,0 +1,5 @@
+export interface PrivateKeyStorage {
+    saveKey(publicKey: string, digest: string, encryptedPrivKey: string): void;
+    getEncryptedPrivateKey(publicKey: string): string;
+    getPublicKeyByDigest(digest: string): string;
+}

package/dist/storage/private-key-storage.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=private-key-storage.js.map

package/dist/storage/private-key-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-key-storage.js","sourceRoot":"","sources":["../../src/storage/private-key-storage.ts"],"names":[],"mappings":""}

package/dist/storage/sqlite/node-sqlite.d.ts

@@ -0,0 +1,12 @@
+import type { DatabaseSync } from "node:sqlite";
+import type { Database, Params, Row } from "./sqlite-database.ts";
+/**
+ * Adapter that wraps the built-in `node:sqlite` `DatabaseSync` class so it satisfies the `Database` interface.
+ */
+export declare class NodeSqliteDatabase implements Database {
+    #private;
+    constructor(db: DatabaseSync);
+    execute(sql: string, params?: Params): void;
+    queryOne(sql: string, params?: Params): Row | undefined;
+    iterate(sql: string, params?: Params): Iterable<Row>;
+}

package/dist/storage/sqlite/node-sqlite.js

@@ -0,0 +1,25 @@
+/**
+ * Adapter that wraps the built-in `node:sqlite` `DatabaseSync` class so it satisfies the `Database` interface.
+ */
+export class NodeSqliteDatabase {
+    #db;
+    constructor(db) {
+        this.#db = db;
+    }
+    execute(sql, params) {
+        if (params !== undefined) {
+            this.#db.prepare(sql).run(params);
+        }
+        else {
+            this.#db.exec(sql);
+        }
+    }
+    queryOne(sql, params) {
+        const result = this.#db.prepare(sql).get(params ?? {});
+        return result;
+    }
+    iterate(sql, params) {
+        return this.#db.prepare(sql).iterate(params ?? {});
+    }
+}
+//# sourceMappingURL=node-sqlite.js.map

package/dist/storage/sqlite/node-sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-sqlite.js","sourceRoot":"","sources":["../../../src/storage/sqlite/node-sqlite.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,OAAO,kBAAkB;IAC7B,GAAG,CAAe;IAElB,YAAY,EAAgB;QAC1B,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,GAAW,EAAE,MAAe;QAClC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,GAAW,EAAE,MAAe;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACvD,OAAO,MAAyB,CAAC;IACnC,CAAC;IAED,OAAO,CAAC,GAAW,EAAE,MAAe;QAClC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAkB,CAAC;IACtE,CAAC;CACF"}

package/dist/storage/sqlite/schema.d.ts

@@ -0,0 +1,2 @@
+import type { Database } from "./sqlite-database.ts";
+export declare function migrate(db: Database): void;

package/dist/storage/sqlite/schema.js

@@ -0,0 +1,55 @@
+const migrations = [
+    // Migration 1: initial schema
+    [
+        [
+            "CREATE TABLE IF NOT EXISTS event (",
+            "  event_id    TEXT PRIMARY KEY,",
+            "  protocol    TEXT NOT NULL,",
+            "  type        TEXT NOT NULL,",
+            "  sn          INTEGER,",
+            "  event_json  JSON NOT NULL,",
+            "  attachments TEXT",
+            ")",
+        ].join("\n"),
+        [
+            "CREATE TABLE IF NOT EXISTS key_info (",
+            "  public_key            TEXT PRIMARY KEY,",
+            "  public_key_digest     TEXT NOT NULL,",
+            "  encrypted_private_key TEXT NOT NULL",
+            ")",
+        ].join("\n"),
+    ],
+    // Migration 2: mailbox cursor
+    [
+        [
+            "CREATE TABLE IF NOT EXISTS mailbox_cursor (",
+            "  prefix TEXT NOT NULL,",
+            "  topic  TEXT NOT NULL,",
+            "  offset INTEGER NOT NULL DEFAULT 0,",
+            "  PRIMARY KEY (prefix, topic)",
+            ")",
+        ].join("\n"),
+    ],
+];
+export function migrate(db) {
+    db.execute(`CREATE TABLE IF NOT EXISTS schema_version (version INTEGER NOT NULL)`);
+    db.execute(`INSERT INTO schema_version (version) SELECT 0 WHERE NOT EXISTS (SELECT 1 FROM schema_version)`);
+    const row = Array.from(db.iterate("SELECT version FROM schema_version"))[0];
+    let current = typeof row?.version === "number" ? row.version : 0;
+    for (let i = current; i < migrations.length; i++) {
+        db.execute("BEGIN");
+        try {
+            for (const statement of migrations[i]) {
+                db.execute(statement);
+            }
+            db.execute(`UPDATE schema_version SET version = ${i + 1}`);
+            db.execute("COMMIT");
+        }
+        catch (err) {
+            db.execute("ROLLBACK");
+            throw err;
+        }
+        current = i + 1;
+    }
+}
+//# sourceMappingURL=schema.js.map

package/dist/storage/sqlite/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/storage/sqlite/schema.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAAe;IAC7B,8BAA8B;IAC9B;QACE;YACE,oCAAoC;YACpC,iCAAiC;YACjC,8BAA8B;YAC9B,8BAA8B;YAC9B,wBAAwB;YACxB,8BAA8B;YAC9B,oBAAoB;YACpB,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ;YACE,uCAAuC;YACvC,2CAA2C;YAC3C,wCAAwC;YACxC,uCAAuC;YACvC,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD,8BAA8B;IAC9B;QACE;YACE,6CAA6C;YAC7C,yBAAyB;YACzB,yBAAyB;YACzB,sCAAsC;YACtC,+BAA+B;YAC/B,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;CACF,CAAC;AAEF,MAAM,UAAU,OAAO,CAAC,EAAY;IAClC,EAAE,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC;IACnF,EAAE,CAAC,OAAO,CAAC,+FAA+F,CAAC,CAAC;IAE5G,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,GAAG,OAAO,GAAG,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjE,KAAK,IAAI,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YACD,EAAE,CAAC,OAAO,CAAC,uCAAuC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3D,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACvB,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/storage/sqlite/sqlite-database.d.ts

@@ -0,0 +1,13 @@
+export type SQLValue = string | number | null | Uint8Array;
+export type Params = Record<string, SQLValue>;
+export type Row = Record<string, SQLValue>;
+export interface Database {
+    /**
+     * Execute a statement that produces no rows (DDL, DML, transaction control).
+     */
+    execute(sql: string, params?: Params): void;
+    /**
+     * Iterate over matching rows one at a time without loading all into memory.
+     */
+    iterate(sql: string, params?: Params): Iterable<Row>;
+}

package/dist/storage/sqlite/sqlite-database.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sqlite-database.js.map

package/dist/storage/sqlite/sqlite-database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-database.js","sourceRoot":"","sources":["../../../src/storage/sqlite/sqlite-database.ts"],"names":[],"mappings":""}

package/dist/storage/sqlite/storage-sqlite.d.ts

@@ -0,0 +1,29 @@
+import type { Database } from "./sqlite-database.ts";
+export { NodeSqliteDatabase } from "./node-sqlite.ts";
+export type { Database, Params, Row, SQLValue } from "./sqlite-database.ts";
+import { type CredentialBody, type IssueEvent, type KeyEvent, Message, type RegistryInceptEventBody, type ReplyEventBody, type RevokeEvent } from "../../core/main.ts";
+import type { CredentialStorage } from "../credential-storage.ts";
+import type { KeyEventStorage } from "../key-event-storage.ts";
+import type { MailboxStorage } from "../mailbox-storage.ts";
+import type { PrivateKeyStorage } from "../private-key-storage.ts";
+export declare class SqliteControllerStorage implements KeyEventStorage, PrivateKeyStorage, CredentialStorage, MailboxStorage {
+    #private;
+    constructor(db: Database);
+    saveKey(publicKey: string, digest: string, encryptedPrivKey: string): void;
+    getEncryptedPrivateKey(publicKey: string): string;
+    getPublicKeyByDigest(digest: string): string;
+    saveMessage(message: Message): void;
+    getReplies(filter?: {
+        route?: string;
+        eid?: string;
+        cid?: string;
+    }): Generator<Message<ReplyEventBody>>;
+    getKeyEvents(prefix: string): Generator<KeyEvent>;
+    getCredentialEvents(id: string): Generator<Message<IssueEvent | RevokeEvent>>;
+    getRegistry(id: string): Message<RegistryInceptEventBody> | null;
+    getRegistriesByOwner(owner: string): Generator<Message<RegistryInceptEventBody>>;
+    getCredential(id: string): CredentialBody | null;
+    getCredentialsByRegistry(registryId: string): CredentialBody[];
+    getMailboxOffset(prefix: string, topic: string): number;
+    saveMailboxOffset(prefix: string, topic: string, offset: number): void;
+}

package/dist/storage/sqlite/storage-sqlite.js

@@ -0,0 +1,214 @@
+import { migrate } from "./schema.js";
+export { NodeSqliteDatabase } from "./node-sqlite.js";
+import { Attachments, Message, } from "../../core/main.js";
+function parseRow(result) {
+    if (!("event_json" in result) || typeof result.event_json !== "string") {
+        throw new Error("Row does not contain event_json");
+    }
+    if (!("attachments" in result) || typeof result.attachments !== "string") {
+        throw new Error("Row does not contain attachments");
+    }
+    const body = JSON.parse(result.event_json);
+    const atc = Attachments.parse(new TextEncoder().encode(result.attachments)) ?? new Attachments();
+    return new Message(body, atc);
+}
+function prepareRow(message) {
+    if (message.version.protocol === "ACDC") {
+        const body = message.body;
+        return {
+            event_id: body.d,
+            protocol: message.version.protocol,
+            type: "credential",
+            sn: null,
+            event_json: JSON.stringify(body),
+            attachments: message.attachments.text(),
+        };
+    }
+    switch (message.body.t) {
+        case "icp":
+        case "rot":
+        case "ixn": {
+            const body = message.body;
+            return {
+                event_id: body.d,
+                protocol: message.version.protocol,
+                type: body.t,
+                sn: parseInt(body.s, 16),
+                event_json: JSON.stringify(body),
+                attachments: message.attachments.text(),
+            };
+        }
+        case "vcp": {
+            const body = message.body;
+            return {
+                event_id: body.d,
+                protocol: message.version.protocol,
+                type: body.t,
+                sn: null,
+                event_json: JSON.stringify(body),
+                attachments: message.attachments.text(),
+            };
+        }
+        case "iss":
+        case "rev": {
+            const body = message.body;
+            return {
+                event_id: body.d,
+                protocol: message.version.protocol,
+                type: body.t,
+                sn: null,
+                event_json: JSON.stringify(body),
+                attachments: message.attachments.text(),
+            };
+        }
+        default: {
+            const body = message.body;
+            return {
+                event_id: typeof body.d === "string" ? body.d : null,
+                protocol: message.version.protocol,
+                type: typeof body.t === "string" ? body.t : null,
+                sn: null,
+                event_json: JSON.stringify(body),
+                attachments: message.attachments.text(),
+            };
+        }
+    }
+}
+export class SqliteControllerStorage {
+    #db;
+    constructor(db) {
+        migrate(db);
+        this.#db = db;
+    }
+    #queryOne(sql, params) {
+        const result = Array.from(this.#db.iterate(sql, params))[0];
+        return result ? result : undefined;
+    }
+    saveKey(publicKey, digest, encryptedPrivKey) {
+        const statement = [
+            "INSERT INTO key_info(public_key, public_key_digest, encrypted_private_key)",
+            "VALUES ($public_key, $digest, $encrypted_private_key)",
+            "ON CONFLICT (public_key) DO NOTHING",
+        ].join("\n");
+        this.#db.execute(statement, {
+            public_key: publicKey,
+            digest,
+            encrypted_private_key: encryptedPrivKey,
+        });
+    }
+    getEncryptedPrivateKey(publicKey) {
+        const statement = ["SELECT encrypted_private_key FROM key_info", "WHERE public_key = $public_key", "LIMIT 1"].join("\n");
+        const result = this.#queryOne(statement, { public_key: publicKey });
+        if (!result || typeof result.encrypted_private_key !== "string") {
+            throw new Error(`Key not found for public key: ${publicKey}`);
+        }
+        return result.encrypted_private_key;
+    }
+    getPublicKeyByDigest(digest) {
+        const statement = ["SELECT public_key FROM key_info", "WHERE public_key_digest = $digest", "LIMIT 1"].join("\n");
+        const result = this.#queryOne(statement, { digest });
+        if (!result || typeof result.public_key !== "string") {
+            throw new Error(`Key not found for digest: ${digest}`);
+        }
+        return result.public_key;
+    }
+    saveMessage(message) {
+        // TODO: Should we use a flag to indicate "upsert" or "insert" ?
+        const statement = [
+            "INSERT INTO event(event_id, protocol, type, sn, event_json, attachments)",
+            "VALUES ($event_id, $protocol, $type, $sn, $event_json, $attachments)",
+            "ON CONFLICT(event_id) DO UPDATE SET attachments = excluded.attachments",
+        ].join("\n");
+        this.#db.execute(statement, prepareRow(message));
+    }
+    *getReplies(filter = {}) {
+        const conditions = ["type = 'rpy'"];
+        const params = {};
+        if (filter.eid !== undefined) {
+            conditions.push("json_extract(event_json, '$.a.eid') = $eid");
+            params.eid = filter.eid;
+        }
+        if (filter.route !== undefined) {
+            conditions.push("json_extract(event_json, '$.r') = $route");
+            params.route = filter.route;
+        }
+        if (filter.cid !== undefined) {
+            conditions.push("json_extract(event_json, '$.a.cid') = $cid");
+            params.cid = filter.cid;
+        }
+        const statement = [
+            "SELECT event_json, attachments FROM event",
+            `WHERE ${conditions.join(" AND ")}`,
+            "ORDER BY sn ASC",
+        ].join("\n");
+        for (const result of this.#db.iterate(statement, params)) {
+            yield parseRow(result);
+        }
+    }
+    *getKeyEvents(prefix) {
+        const statement = [
+            "SELECT event_json, attachments",
+            "FROM event",
+            "WHERE json_extract(event_json, '$.i') = $prefix",
+            "AND type in ('icp', 'rot', 'ixn')",
+            "ORDER BY sn ASC",
+        ].join("\n");
+        for (const result of this.#db.iterate(statement, { prefix })) {
+            yield parseRow(result);
+        }
+    }
+    *getCredentialEvents(id) {
+        const statement = [
+            "SELECT event_json, attachments",
+            "FROM event",
+            "WHERE type IN ('iss', 'rev') AND json_extract(event_json, '$.i') = $id",
+            "ORDER BY rowid ASC",
+        ].join("\n");
+        for (const row of this.#db.iterate(statement, { id })) {
+            yield parseRow(row);
+        }
+    }
+    getRegistry(id) {
+        const statement = [
+            "SELECT event_json, attachments",
+            "FROM event",
+            "WHERE type = 'vcp' AND json_extract(event_json, '$.i') = $id",
+            "LIMIT 1",
+        ].join("\n");
+        const result = this.#queryOne(statement, { id });
+        return result ? parseRow(result) : null;
+    }
+    *getRegistriesByOwner(owner) {
+        const statement = [
+            "SELECT event_json, attachments",
+            "FROM event",
+            "WHERE type = 'vcp' AND json_extract(event_json, '$.ii') = $owner",
+            "ORDER BY rowid ASC",
+        ].join("\n");
+        for (const row of this.#db.iterate(statement, { owner })) {
+            yield parseRow(row);
+        }
+    }
+    getCredential(id) {
+        const statement = ["SELECT event_json, attachments", "FROM event", "WHERE event_id = $id", "LIMIT 1"].join("\n");
+        const result = this.#queryOne(statement, { id });
+        return result ? parseRow(result).body : null;
+    }
+    getCredentialsByRegistry(registryId) {
+        const statement = [
+            "SELECT event_json, attachments",
+            "FROM event",
+            "WHERE json_extract(event_json, '$.ri') = $registry_id",
+        ].join("\n");
+        return Array.from(this.#db.iterate(statement, { registry_id: registryId })).map((row) => parseRow(row).body);
+    }
+    getMailboxOffset(prefix, topic) {
+        const result = this.#queryOne("SELECT offset FROM mailbox_cursor WHERE prefix = $prefix AND topic = $topic LIMIT 1", { prefix, topic });
+        return typeof result?.offset === "number" ? result.offset : 0;
+    }
+    saveMailboxOffset(prefix, topic, offset) {
+        this.#db.execute("INSERT INTO mailbox_cursor(prefix, topic, offset) VALUES ($prefix, $topic, $offset) " +
+            "ON CONFLICT(prefix, topic) DO UPDATE SET offset = $offset", { prefix, topic, offset });
+    }
+}
+//# sourceMappingURL=storage-sqlite.js.map

package/dist/storage/sqlite/storage-sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-sqlite.js","sourceRoot":"","sources":["../../../src/storage/sqlite/storage-sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAGtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAItD,OAAO,EACL,WAAW,EAKX,OAAO,GAIR,MAAM,oBAAoB,CAAC;AAM5B,SAAS,QAAQ,CAAwB,MAAW;IAClD,IAAI,CAAC,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;IAEjG,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAYD,SAAS,UAAU,CAAwB,OAAmB;IAC5D,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAiC,CAAC;QACvD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChB,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;YAClC,IAAI,EAAE,YAAY;YAClB,EAAE,EAAE,IAAI;YACR,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAChC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE;SACxC,CAAC;IACJ,CAAC;IAED,QAAQ,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACvB,KAAK,KAAK,CAAC;QACX,KAAK,KAAK,CAAC;QACX,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,IAAI,GAAG,OAAO,CAAC,IAA+B,CAAC;YACrD,OAAO;gBACL,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAChB,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;gBAClC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACZ,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;gBACxB,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAChC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE;aACxC,CAAC;QACJ,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,IAAI,GAAG,OAAO,CAAC,IAA0C,CAAC;YAChE,OAAO;gBACL,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAChB,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;gBAClC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACZ,EAAE,EAAE,IAAI;gBACR,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAChC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE;aACxC,CAAC;QACJ,CAAC;QACD,KAAK,KAAK,CAAC;QACX,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,IAAI,GAAG,OAAO,CAAC,IAA2C,CAAC;YACjE,OAAO;gBACL,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAChB,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;gBAClC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACZ,EAAE,EAAE,IAAI;gBACR,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAChC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE;aACxC,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAI,GAAG,OAAO,CAAC,IAA8B,CAAC;YACpD,OAAO;gBACL,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;gBACpD,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;gBAClC,IAAI,EAAE,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;gBAChD,EAAE,EAAE,IAAI;gBACR,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAChC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE;aACxC,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,OAAO,uBAAuB;IAClC,GAAG,CAAW;IAEd,YAAY,EAAY;QACtB,OAAO,CAAC,EAAE,CAAC,CAAC;QACZ,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,SAAS,CAAC,GAAW,EAAE,MAAe;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,CAAC,CAAE,MAAc,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,MAAc,EAAE,gBAAwB;QACjE,MAAM,SAAS,GAAG;YAChB,4EAA4E;YAC5E,uDAAuD;YACvD,qCAAqC;SACtC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE;YAC1B,UAAU,EAAE,SAAS;YACrB,MAAM;YACN,qBAAqB,EAAE,gBAAgB;SACxC,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB,CAAC,SAAiB;QACtC,MAAM,SAAS,GAAG,CAAC,4CAA4C,EAAE,gCAAgC,EAAE,SAAS,CAAC,CAAC,IAAI,CAChH,IAAI,CACL,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,qBAAqB,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,iCAAiC,SAAS,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,MAAM,CAAC,qBAAqB,CAAC;IACtC,CAAC;IAED,oBAAoB,CAAC,MAAc;QACjC,MAAM,SAAS,GAAG,CAAC,iCAAiC,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEjH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,MAAM,CAAC,UAAU,CAAC;IAC3B,CAAC;IAED,WAAW,CAAC,OAAgB;QAC1B,gEAAgE;QAChE,MAAM,SAAS,GAAG;YAChB,0EAA0E;YAC1E,sEAAsE;YACtE,wEAAwE;SACzE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,CAAC,UAAU,CAAC,SAAyD,EAAE;QACrE,MAAM,UAAU,GAAa,CAAC,cAAc,CAAC,CAAC;QAC9C,MAAM,MAAM,GAA2B,EAAE,CAAC;QAE1C,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,UAAU,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC9D,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QAC1B,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YAC5D,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC9B,CAAC;QAED,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,UAAU,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC9D,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QAC1B,CAAC;QAED,MAAM,SAAS,GAAG;YAChB,2CAA2C;YAC3C,SAAS,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YACnC,iBAAiB;SAClB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;YACzD,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,CAAC,YAAY,CAAC,MAAc;QAC1B,MAAM,SAAS,GAAG;YAChB,gCAAgC;YAChC,YAAY;YACZ,iDAAiD;YACjD,mCAAmC;YACnC,iBAAiB;SAClB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YAC7D,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,CAAC,mBAAmB,CAAC,EAAU;QAC7B,MAAM,SAAS,GAAG;YAChB,gCAAgC;YAChC,YAAY;YACZ,wEAAwE;YACxE,oBAAoB;SACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;YACtD,MAAM,QAAQ,CAA2B,GAAG,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,WAAW,CAAC,EAAU;QACpB,MAAM,SAAS,GAAG;YAChB,gCAAgC;YAChC,YAAY;YACZ,8DAA8D;YAC9D,SAAS;SACV,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IAED,CAAC,oBAAoB,CAAC,KAAa;QACjC,MAAM,SAAS,GAAG;YAChB,gCAAgC;YAChC,YAAY;YACZ,kEAAkE;YAClE,oBAAoB;SACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACzD,MAAM,QAAQ,CAA0B,GAAG,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,aAAa,CAAC,EAAU;QACtB,MAAM,SAAS,GAAG,CAAC,gCAAgC,EAAE,YAAY,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEjH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC,CAAC,CAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAuB,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IAED,wBAAwB,CAAC,UAAkB;QACzC,MAAM,SAAS,GAAG;YAChB,gCAAgC;YAChC,YAAY;YACZ,uDAAuD;SACxD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAC7E,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAsB,CAC9C,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,MAAc,EAAE,KAAa;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAC3B,qFAAqF,EACrF,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;QACF,OAAO,OAAO,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,iBAAiB,CAAC,MAAc,EAAE,KAAa,EAAE,MAAc;QAC7D,IAAI,CAAC,GAAG,CAAC,OAAO,CACd,sFAAsF;YACpF,2DAA2D,EAC7D,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAC1B,CAAC;IACJ,CAAC;CACF"}

package/dist/witness/main.d.ts

@@ -0,0 +1,2 @@
+export { Witness, WitnessError, type WitnessEvent, type WitnessOptions } from "./witness.ts";
+export { createRouter } from "./witness-router.ts";

package/dist/witness/main.js

@@ -0,0 +1,3 @@
+export { Witness, WitnessError } from "./witness.js";
+export { createRouter } from "./witness-router.js";
+//# sourceMappingURL=main.js.map

package/dist/witness/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/witness/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,YAAY,EAA0C,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/witness/witness-router.d.ts

@@ -0,0 +1,2 @@
+import { type Witness } from "./witness.ts";
+export declare function createRouter(witness: Witness): (request: Request) => Promise<Response>;

package/dist/witness/witness-router.js

@@ -0,0 +1,103 @@
+import { Attachments, parse } from "../cesr/__main__.js";
+import { WitnessError } from "./witness.js";
+function createResponse(events) {
+    const body = events
+        .flatMap(({ message, timestamp }) => {
+        const atc = new Attachments({
+            ControllerIdxSigs: message.attachments.ControllerIdxSigs,
+            WitnessIdxSigs: message.attachments.WitnessIdxSigs,
+            NonTransReceiptCouples: message.attachments.NonTransReceiptCouples,
+            FirstSeenReplayCouples: [{ fnu: String(message.body.s ?? "0"), dt: timestamp }],
+        });
+        return [new TextDecoder().decode(message.raw), atc.text()];
+    })
+        .join("");
+    return new Response(body, {
+        status: 200,
+        headers: { "Content-Type": "application/json+cesr" },
+    });
+}
+export function createRouter(witness) {
+    async function handleReceiptRequest(request) {
+        const atc = request.headers.get("CESR-ATTACHMENT");
+        if (!atc) {
+            return Response.json({ error: "Bad Request" }, { status: 400 });
+        }
+        const bodyText = await request.text();
+        const receipts = [];
+        for await (const witnessEvent of parse(bodyText + atc)) {
+            try {
+                const receipt = witness.receipt(witnessEvent);
+                receipts.push({ message: receipt, timestamp: new Date() });
+            }
+            catch (err) {
+                if (err instanceof WitnessError) {
+                    return Response.json({ error: "Bad Request" }, { status: 400 });
+                }
+                throw err;
+            }
+        }
+        return createResponse(receipts);
+    }
+    async function handleOobiRequest(request) {
+        const url = new URL(request.url);
+        const aid = url.pathname.split("/")[2];
+        let response;
+        if (aid === undefined || aid === witness.aid) {
+            response = createResponse(witness.events);
+        }
+        else {
+            const events = Array.from(witness.getKeyEvents(aid)).map((event) => ({
+                message: event,
+                timestamp: event.attachments.FirstSeenReplayCouples[0]?.dt ?? new Date(0),
+            }));
+            response = events.length === 0 ? new Response("Not Found", { status: 404 }) : createResponse(events);
+        }
+        response.headers.set("Keri-Aid", witness.aid);
+        return response;
+    }
+    async function handleMessageRequest(request) {
+        const atc = request.headers.get("CESR-ATTACHMENT");
+        if (!atc) {
+            return Response.json({ error: "Bad Request" }, { status: 400 });
+        }
+        const bodyText = await request.text();
+        for await (const event of parse(bodyText + atc)) {
+            witness.handleMessage(event);
+        }
+        return new Response(null, { status: 200 });
+    }
+    return async function handler(request) {
+        const { method } = request;
+        const pathname = new URL(request.url).pathname;
+        if (pathname === "/") {
+            switch (method) {
+                case "GET":
+                    return Response.json({ status: "OK" });
+                case "POST": {
+                    return handleMessageRequest(request);
+                }
+                default:
+                    return new Response("Method Not Allowed", { status: 405 });
+            }
+        }
+        if (pathname.startsWith("/oobi")) {
+            switch (method) {
+                case "GET":
+                    return handleOobiRequest(request);
+                default:
+                    return new Response("Method Not Allowed", { status: 405 });
+            }
+        }
+        if (pathname === "/receipts") {
+            switch (method) {
+                case "POST":
+                    return handleReceiptRequest(request);
+                default:
+                    return new Response("Method Not Allowed", { status: 405 });
+            }
+        }
+        return new Response("Not Found", { status: 404 });
+    };
+}
+//# sourceMappingURL=witness-router.js.map

package/dist/witness/witness-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"witness-router.js","sourceRoot":"","sources":["../../src/witness/witness-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAgB,YAAY,EAAqB,MAAM,cAAc,CAAC;AAE7E,SAAS,cAAc,CAAC,MAA+B;IACrD,MAAM,IAAI,GAAG,MAAM;SAChB,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE;QAClC,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC;YAC1B,iBAAiB,EAAE,OAAO,CAAC,WAAW,CAAC,iBAAiB;YACxD,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,cAAc;YAClD,sBAAsB,EAAE,OAAO,CAAC,WAAW,CAAC,sBAAsB;YAClE,sBAAsB,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAE,OAAO,CAAC,IAAqB,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;SAClG,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,uBAAuB,EAAE;KACrD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,KAAK,UAAU,oBAAoB,CAAC,OAAgB;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAmB,EAAE,CAAC;QAEpC,IAAI,KAAK,EAAE,MAAM,YAAY,IAAI,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,YAAwB,CAAC,CAAC;gBAC1D,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;oBAChC,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBAClE,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,UAAU,iBAAiB,CAAC,OAAgB;QAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,QAAkB,CAAC;QACvB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;YAC7C,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACnE,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC;aAC1E,CAAC,CAAC,CAAC;YACJ,QAAQ,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACvG,CAAC;QACD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,UAAU,oBAAoB,CAAC,OAAgB;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,KAAK,UAAU,OAAO,CAAC,OAAgB;QAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QAE/C,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACrB,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,KAAK;oBACR,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzC,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;gBACvC,CAAC;gBACD;oBACE,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,KAAK;oBACR,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBACpC;oBACE,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,MAAM;oBACT,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;gBACvC;oBACE,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC;AACJ,CAAC"}

package/dist/witness/witness.d.ts

@@ -0,0 +1,24 @@
+import { Message } from "../cesr/__main__.ts";
+import { type KeyEvent, type KeyEventBody, KeyEventLog, type ReceiptEventBody } from "../core/main.ts";
+import type { KeyEventStorage } from "../storage/key-event-storage.ts";
+export interface WitnessOptions {
+    privateKey?: Uint8Array;
+    url?: string;
+    storage: KeyEventStorage;
+}
+export interface WitnessEvent {
+    readonly message: Message;
+    readonly timestamp: Date;
+}
+export declare class WitnessError extends Error {
+}
+export declare class Witness {
+    #private;
+    readonly events: readonly WitnessEvent[];
+    get aid(): string;
+    static createKEL(privateKey: Uint8Array): KeyEventLog;
+    constructor(options: WitnessOptions);
+    receipt(message: Message<KeyEventBody>): Message<ReceiptEventBody>;
+    handleMessage(message: Message): void;
+    getKeyEvents(aid: string): Generator<KeyEvent>;
+}