keri 0.0.0-dev.fc3df9d → 0.0.4

package/dist/events/events.js

@@ -0,0 +1,184 @@
+import { blake3 } from "@noble/hashes/blake3";
+import { cesr, MatterCode } from "cesr/__unstable__";
+export function formatDate(date) {
+    return date.toISOString().replace("Z", "000+00:00");
+}
+export function randomNonce() {
+    return cesr.encodeMatter({ code: MatterCode.Salt_128, raw: crypto.getRandomValues(new Uint8Array(16)) });
+}
+function calculateSaid(event) {
+    const encoder = new TextEncoder();
+    const digest = cesr.encodeMatter({
+        code: MatterCode.Blake3_256,
+        raw: blake3
+            .create({ dkLen: 32 })
+            .update(encoder.encode(JSON.stringify(event)))
+            .digest(),
+    });
+    return digest;
+}
+export function saidify(event, labels) {
+    if (!labels?.length) {
+        return event;
+    }
+    const digest = calculateSaid(event);
+    for (const label of labels ?? []) {
+        event[label] = digest;
+    }
+    return event;
+}
+function isTransferable(key) {
+    const raw = cesr.decodeMatter(key);
+    switch (raw.code) {
+        case MatterCode.ECDSA_256k1N:
+        case MatterCode.Ed25519N:
+        case MatterCode.Ed448N:
+            return false;
+        default:
+            return true;
+    }
+}
+function resolveBackerThreshold(data) {
+    if (data.bt) {
+        return data.bt;
+    }
+    if (!data.b || data.b.length === 0) {
+        return 0;
+    }
+    if (data.b.length === 1) {
+        return 1;
+    }
+    return data.b.length - 1;
+}
+export class KeriEventCreator {
+    #version;
+    constructor(options) {
+        this.#version = options.version;
+    }
+    #encode(data, labels = ["d"]) {
+        for (const label of labels) {
+            if (!(label in data)) {
+                throw new Error(`Input missing label '${label}'`);
+            }
+            data[label] = "#".repeat(44);
+        }
+        const event = JSON.parse(cesr.encodeMessage(data, { legacy: this.#version === 1 }));
+        return saidify(event, labels);
+    }
+    registry(args) {
+        return this.#encode({
+            t: "vcp",
+            d: "",
+            i: "",
+            ii: args.ii,
+            s: "0",
+            c: ["NB"],
+            bt: "0",
+            b: [],
+            n: args.n ?? randomNonce(),
+        }, ["d", "i"]);
+    }
+    issue(args) {
+        return this.#encode({
+            t: "iss",
+            d: "",
+            i: args.i,
+            s: "0",
+            ri: args.ri,
+            dt: args.dt ?? formatDate(new Date()),
+        });
+    }
+    incept(data) {
+        if (data.k.length === 0) {
+            throw new Error("No keys provided in inception event");
+        }
+        const transferable = data.k.length > 1 || isTransferable(data.k[0]);
+        const labels = ["d"];
+        if (transferable) {
+            labels.push("i");
+        }
+        return this.#encode({
+            t: "icp",
+            d: "",
+            i: transferable ? "" : data.k[0],
+            s: "0",
+            kt: data.kt ?? data.k.length.toString(),
+            k: data.k,
+            nt: data.nt ?? data.n?.length.toString() ?? "0",
+            n: data.n ?? [],
+            bt: resolveBackerThreshold(data).toString(),
+            b: data.b ?? [],
+            c: [],
+            a: [],
+        }, labels);
+    }
+    exchange(data) {
+        return this.#encode({
+            t: "exn",
+            d: "",
+            i: data.i,
+            rp: data.rp || "",
+            p: data.p || "",
+            dt: data.dt || formatDate(new Date()),
+            r: data.r,
+            q: data.q || {},
+            a: data.a || {},
+            e: data.e ? saidify({ ...(data.e ?? {}), d: "" }, ["d"]) : {},
+        });
+    }
+    interact(data) {
+        return this.#encode({
+            t: "ixn",
+            d: "",
+            i: data.i,
+            s: data.s,
+            p: data.p,
+            a: data.a ?? [],
+        });
+    }
+    query(args) {
+        return this.#encode({
+            t: "qry",
+            d: "",
+            dt: formatDate(args.dt ?? new Date()),
+            r: args.r ?? "",
+            rr: args.rr ?? "",
+            q: args.q,
+        });
+    }
+    receipt(data) {
+        return this.#encode({
+            t: "rct",
+            d: data.d,
+            i: data.i,
+            s: data.s,
+        }, []);
+    }
+    reply(data) {
+        return this.#encode({
+            t: "rpy",
+            d: "",
+            dt: data.dt ?? formatDate(new Date()),
+            r: data.r,
+            a: data.a,
+        });
+    }
+    credential(data) {
+        const event = JSON.parse(cesr.encodeMessage({
+            d: "#".repeat(44),
+            ...(data.u && { u: data.u }),
+            i: data.i,
+            ri: data.ri,
+            s: data.s,
+            a: saidify({
+                d: "#".repeat(44),
+                ...data.a,
+            }, ["d"]),
+            ...(data.e && { e: saidify({ d: "#".repeat(44), ...data.e }, ["d"]) }),
+            r: saidify({ d: "#".repeat(44), ...data.r }, ["d"]),
+        }, { legacy: this.#version === 1, protocol: "ACDC" }));
+        return saidify(event, ["d"]);
+    }
+}
+export const keri = new KeriEventCreator({ version: 1 });
+//# sourceMappingURL=events.js.map

package/dist/events/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/events/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAyQrD,MAAM,UAAU,UAAU,CAAC,IAAU;IACnC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,aAAa,CAAC,KAA8B;IACnD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAElC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC;QAC/B,IAAI,EAAE,UAAU,CAAC,UAAU;QAC3B,GAAG,EAAE,MAAM;aACR,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;aACrB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;aAC7C,MAAM,EAAE;KACZ,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,OAAO,CAAoC,KAAQ,EAAE,MAAiB;IACpF,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAEpC,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;QAChC,KAAiC,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IACrD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,UAAU,CAAC,YAAY,CAAC;QAC7B,KAAK,UAAU,CAAC,QAAQ,CAAC;QACzB,KAAK,UAAU,CAAC,MAAM;YACpB,OAAO,KAAK,CAAC;QACf;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAqB;IACnD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC3B,CAAC;AAMD,MAAM,OAAO,gBAAgB;IAC3B,QAAQ,CAAS;IAEjB,YAAY,OAAgC;QAC1C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAClC,CAAC;IAED,OAAO,CAAoC,IAAO,EAAE,SAAmB,CAAC,GAAG,CAAC;QAC1E,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,GAAG,CAAC,CAAC;YACpD,CAAC;YAEA,IAAgC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACpF,OAAO,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,QAAQ,CAAC,IAA6B;QACpC,OAAO,IAAI,CAAC,OAAO,CACjB;YACE,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,EAAE;YACL,CAAC,EAAE,EAAE;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,CAAC,EAAE,GAAG;YACN,CAAC,EAAE,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,GAAG;YACP,CAAC,EAAE,EAAE;YACL,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,WAAW,EAAE;SAC3B,EACD,CAAC,GAAG,EAAE,GAAG,CAAC,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAoB;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,EAAE;YACL,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,CAAC,EAAE,GAAG;YACN,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,IAAqB;QAC1B,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CACjB;YACE,CAAC,EAAE,KAAc;YACjB,CAAC,EAAE,EAAE;YACL,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAChC,CAAC,EAAE,GAAG;YACN,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE;YACvC,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,GAAG;YAC/C,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE;YACf,EAAE,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;YAC3C,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE;YACf,CAAC,EAAE,EAAc;YACjB,CAAC,EAAE,EAAE;SACN,EACD,MAAM,CACP,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,IAAuB;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,EAAE;YACL,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;YACjB,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE;YACf,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;YACrC,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE;YACf,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE;YACf,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,IAAuB;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,CAAC,EAAE,KAAc;YACjB,CAAC,EAAE,EAAE;YACL,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE;SAChB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAoB;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,CAAC,EAAE,KAAc;YACjB,CAAC,EAAE,EAAE;YACL,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;YACrC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE;YACf,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;YACjB,CAAC,EAAE,IAAI,CAAC,CAAC;SACV,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,IAAsB;QAC5B,OAAO,IAAI,CAAC,OAAO,CACjB;YACE,CAAC,EAAE,KAAc;YACjB,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,CAAC,EAAE,IAAI,CAAC,CAAC;SACV,EACD,EAAE,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAoB;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,CAAC,EAAE,KAAc;YACjB,CAAC,EAAE,EAAE;YACL,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;YACrC,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,CAAC,EAAE,IAAI,CAAC,CAAC;SACV,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,IAAoB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CACtB,IAAI,CAAC,aAAa,CAChB;YACE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACjB,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC5B,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,CAAC,EAAE,OAAO,CACR;gBACE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjB,GAAG,IAAI,CAAC,CAAC;aACV,EACD,CAAC,GAAG,CAAC,CACN;YACD,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACtE,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;SACpD,EACD,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAClD,CACF,CAAC;QAEF,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC"}

package/dist/keystore/encrypt.d.ts

@@ -1,2 +1,10 @@
-export declare function encrypt(passphrase: string, data: Uint8Array): Promise<Uint8Array<ArrayBuffer>>;
-export declare function decrypt(passphrase: string, ciphertext: Uint8Array): Promise<Uint8Array>;
+export interface Encrypter {
+    encrypt(data: Uint8Array): Promise<Uint8Array>;
+    decrypt(data: Uint8Array): Promise<Uint8Array>;
+}
+export declare class PassphraseEncrypter implements Encrypter {
+    #private;
+    constructor(passphrase: string);
+    encrypt(data: Uint8Array): Promise<Uint8Array<ArrayBuffer>>;
+    decrypt(ciphertext: Uint8Array): Promise<Uint8Array>;
+}

package/dist/keystore/encrypt.js

@@ -1,38 +1,39 @@
-export async function encrypt(passphrase, data) {
+async function deriveKey(passphrase, salt) {
     const encoder = new TextEncoder();
     const encryptionKey = await crypto.subtle.importKey("raw", encoder.encode(passphrase), "PBKDF2", false, [
         "deriveBits",
         "deriveKey",
     ]);
-    const salt = crypto.getRandomValues(new Uint8Array(16));
-    const iv = crypto.getRandomValues(new Uint8Array(16));
     const key = await crypto.subtle.deriveKey({
         name: "PBKDF2",
         salt,
         iterations: 100000,
         hash: "SHA-256",
     }, encryptionKey, { name: "AES-GCM", length: 256 }, true, ["encrypt", "decrypt"]);
-    const encrypted = await crypto.subtle.encrypt({ name: "AES-GCM", iv }, key, data);
-    const result = new Uint8Array(salt.byteLength + iv.byteLength + encrypted.byteLength);
-    result.set(salt, 0);
-    result.set(iv, salt.byteLength);
-    result.set(new Uint8Array(encrypted), salt.byteLength + iv.byteLength);
-    return result;
+    return key;
 }
-export async function decrypt(passphrase, ciphertext) {
-    const encoder = new TextEncoder();
-    const keyMaterial = await crypto.subtle.importKey("raw", encoder.encode(passphrase), "PBKDF2", false, [
-        "deriveBits",
-        "deriveKey",
-    ]);
-    const salt = ciphertext.slice(0, 16);
-    const iv = ciphertext.slice(16, 32);
-    const encrypted = ciphertext.slice(32);
-    const key = await crypto.subtle.deriveKey({
-        name: "PBKDF2",
-        salt,
-        iterations: 100000,
-        hash: "SHA-256",
-    }, keyMaterial, { name: "AES-GCM", length: 256 }, true, ["encrypt", "decrypt"]);
-    return new Uint8Array(await crypto.subtle.decrypt({ name: "AES-GCM", iv }, key, encrypted));
+export class PassphraseEncrypter {
+    #passphrase;
+    constructor(passphrase) {
+        this.#passphrase = passphrase;
+    }
+    async encrypt(data) {
+        const salt = crypto.getRandomValues(new Uint8Array(16));
+        const iv = crypto.getRandomValues(new Uint8Array(16));
+        const key = await deriveKey(this.#passphrase, salt);
+        const encrypted = await crypto.subtle.encrypt({ name: "AES-GCM", iv }, key, data);
+        const result = new Uint8Array(salt.byteLength + iv.byteLength + encrypted.byteLength);
+        result.set(salt, 0);
+        result.set(iv, salt.byteLength);
+        result.set(new Uint8Array(encrypted), salt.byteLength + iv.byteLength);
+        return result;
+    }
+    async decrypt(ciphertext) {
+        const salt = ciphertext.slice(0, 16);
+        const key = await deriveKey(this.#passphrase, salt);
+        const iv = ciphertext.slice(16, 32);
+        const encrypted = ciphertext.slice(32);
+        return new Uint8Array(await crypto.subtle.decrypt({ name: "AES-GCM", iv }, key, encrypted));
+    }
 }
+//# sourceMappingURL=encrypt.js.map

package/dist/keystore/encrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt.js","sourceRoot":"","sources":["../../src/keystore/encrypt.ts"],"names":[],"mappings":"AAKA,KAAK,UAAU,SAAS,CAAC,UAAkB,EAAE,IAAgB;IAC3D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;QACtG,YAAY;QACZ,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC;QACE,IAAI,EAAE,QAAQ;QACd,IAAI;QACJ,UAAU,EAAE,MAAM;QAClB,IAAI,EAAE,SAAS;KAChB,EACD,aAAa,EACb,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,IAAI,EACJ,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,mBAAmB;IAC9B,WAAW,CAAS;IAEpB,YAAY,UAAkB;QAC5B,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAgB;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAElF,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACtF,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC;QAEvE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,UAAsB;QAClC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAEvC,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9F,CAAC;CACF"}

package/dist/keystore/key-manager.d.ts

@@ -0,0 +1,26 @@
+import type { Encrypter } from "./encrypt.ts";
+import { type KeyValueStorage } from "../events/event-store.ts";
+export interface Key {
+    /**
+     * The public key of the tranferable key.
+     */
+    current: string;
+    /**
+     * Digest of the next public key of the key pair.
+     */
+    next: string;
+}
+export interface KeyManagerOptions {
+    encrypter: Encrypter;
+    storage: KeyValueStorage;
+}
+export declare class KeyManager {
+    storage: KeyValueStorage;
+    encrypter: Encrypter;
+    constructor(options: KeyManagerOptions);
+    private load;
+    import(key0: Uint8Array, key1: Uint8Array): Promise<Key>;
+    incept(): Promise<Key>;
+    rotate(publicKey: string): Promise<Key>;
+    sign(publicKey: string, message: Uint8Array, index?: number): Promise<string>;
+}

package/dist/keystore/key-manager.js

@@ -0,0 +1,70 @@
+import { ed25519 } from "@noble/curves/ed25519";
+import { blake3 } from "@noble/hashes/blake3";
+import { decodeBase64Url, encodeBase64Url, encodeIndexer, encodeMatter, IndexCode, MatterCode, } from "cesr/__unstable__";
+export class KeyManager {
+    storage;
+    encrypter;
+    constructor(options) {
+        this.encrypter = options.encrypter;
+        this.storage = options.storage;
+    }
+    async load(publicKey) {
+        const value = await this.storage.get(`keys.${publicKey}`);
+        if (!value) {
+            throw new Error(`Key ${publicKey} not found`);
+        }
+        const [key0, key1] = value.split("\n");
+        return [await this.encrypter.decrypt(decodeBase64Url(key0)), await this.encrypter.decrypt(decodeBase64Url(key1))];
+    }
+    async import(key0, key1) {
+        const current = encodeMatter({
+            code: MatterCode.Ed25519,
+            raw: ed25519.getPublicKey(key0),
+        });
+        const next = encodeMatter({
+            code: MatterCode.Blake3_256,
+            raw: blake3.create({ dkLen: 32 }).update(current).digest(),
+        });
+        await this.storage.set(`keys.${current}`, [
+            encodeBase64Url(await this.encrypter.encrypt(key0)),
+            encodeBase64Url(await this.encrypter.encrypt(key1)),
+            "\n",
+        ].join("\n"));
+        return { current, next };
+    }
+    async incept() {
+        const key0 = ed25519.utils.randomPrivateKey();
+        const key1 = ed25519.utils.randomPrivateKey();
+        return await this.import(key0, key1);
+    }
+    async rotate(publicKey) {
+        const [, key0] = await this.load(publicKey);
+        const key1 = ed25519.utils.randomPrivateKey();
+        const current = encodeMatter({
+            code: MatterCode.Ed25519,
+            raw: ed25519.getPublicKey(key0),
+        });
+        const next = encodeMatter({
+            code: MatterCode.Blake3_256,
+            raw: blake3.create({ dkLen: 32 }).update(current).digest(),
+        });
+        await this.import(key0, key1);
+        return { current, next };
+    }
+    async sign(publicKey, message, index) {
+        const [key] = await this.load(publicKey);
+        const signature = ed25519.sign(message, key);
+        if (index !== undefined) {
+            return encodeIndexer({
+                code: IndexCode.Ed25519_Sig,
+                raw: signature,
+                index,
+            });
+        }
+        return encodeMatter({
+            code: MatterCode.Ed25519_Sig,
+            raw: signature,
+        });
+    }
+}
+//# sourceMappingURL=key-manager.js.map

package/dist/keystore/key-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-manager.js","sourceRoot":"","sources":["../../src/keystore/key-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EACL,eAAe,EACf,eAAe,EACf,aAAa,EACb,YAAY,EACZ,SAAS,EACT,UAAU,GACX,MAAM,mBAAmB,CAAC;AAqB3B,MAAM,OAAO,UAAU;IACrB,OAAO,CAAkB;IACzB,SAAS,CAAY;IAErB,YAAY,OAA0B;QACpC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,SAAiB;QAClC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,SAAS,EAAE,CAAC,CAAC;QAE1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,OAAO,SAAS,YAAY,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEvC,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAgB,EAAE,IAAgB;QAC7C,MAAM,OAAO,GAAG,YAAY,CAAC;YAC3B,IAAI,EAAE,UAAU,CAAC,OAAO;YACxB,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;SAChC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,YAAY,CAAC;YACxB,IAAI,EAAE,UAAU,CAAC,UAAU;YAC3B,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE;SAC3D,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACpB,QAAQ,OAAO,EAAE,EACjB;YACE,eAAe,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnD,eAAe,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI;SACL,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QAEF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAE9C,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAE9C,MAAM,OAAO,GAAG,YAAY,CAAC;YAC3B,IAAI,EAAE,UAAU,CAAC,OAAO;YACxB,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;SAChC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,YAAY,CAAC;YACxB,IAAI,EAAE,UAAU,CAAC,UAAU;YAC3B,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE;SAC3D,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAE9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB,EAAE,OAAmB,EAAE,KAAc;QAC/D,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAE7C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,aAAa,CAAC;gBACnB,IAAI,EAAE,SAAS,CAAC,WAAW;gBAC3B,GAAG,EAAE,SAAS;gBACd,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAED,OAAO,YAAY,CAAC;YAClB,IAAI,EAAE,UAAU,CAAC,WAAW;YAC5B,GAAG,EAAE,SAAS;SACf,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/main.d.ts

@@ -1,2 +1,6 @@
-export * from "./keystore/keystore-fs.ts";
-export * from "./main-common.ts";
+export * from "./events/events.ts";
+export * from "./events/event-store.ts";
+export * from "./db/storage.ts";
+export * from "./keystore/key-manager.ts";
+export * from "./keystore/encrypt.ts";
+export * from "./controller.ts";

package/dist/main.js

@@ -1,2 +1,7 @@
-export * from "./keystore/keystore-fs.js";
-export * from "./main-common.js";
+export * from "./events/events.js";
+export * from "./events/event-store.js";
+export * from "./db/storage.js";
+export * from "./keystore/key-manager.js";
+export * from "./keystore/encrypt.js";
+export * from "./controller.js";
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC"}

package/package.json

@@ -1,45 +1,48 @@
 {
   "name": "keri",
-  "version": "0.0.0-dev.fc3df9d",
+  "version": "0.0.4",
   "scripts": {
-    "lint": "eslint && prettier --check . && tsc --noEmit",
-    "lint:fix": "eslint --fix && prettier --write .",
     "build": "tsc -p tsconfig.build.json",
-    "test": "node --no-warnings --experimental-strip-types --experimental-sqlite scripts/run-test.ts",
-    "clean": "node scripts/clean.ts"
+    "dev": "tsc -p tsconfig.build.json --watch",
+    "test": "node --test --test-reporter=spec --no-warnings --experimental-strip-types",
+    "test:integration": "npm test -- 'test_integration/**/*.ts'",
+    "test:scripts": "node --no-warnings --experimental-strip-types scripts/run-scripts.ts",
+    "lint": "eslint",
+    "clean": "node --experimental-strip-types --no-warnings scripts/clean.ts"
   },
   "bin": {
-    "keri": "bin/keri.js"
+    "keri": "dist/cli/main.js"
   },
   "exports": {
     ".": "./dist/main.js",
-    "./web": "./dist/main-web.js"
+    "./storage-sqlite": "./dist/db/storage-sqlite.js"
   },
   "files": [
     "dist"
   ],
   "type": "module",
-  "author": "",
-  "license": "ISC",
-  "description": "",
+  "author": "Daniel Lenksjö",
+  "license": "Apache-2.0",
+  "description": "KERI for JavaScript",
   "engines": {
     "node": ">=22"
   },
+  "dependencies": {
+    "@noble/curves": "^1.9.2",
+    "@noble/ed25519": "^2.2.3",
+    "@noble/hashes": "^1.8.0",
+    "@noble/secp256k1": "^2.2.3",
+    "cesr": "^0.0.14",
+    "commander": "^14.0.0"
+  },
   "devDependencies": {
-    "@eslint/js": "^9.17.0",
-    "@types/node": "^22.9.1",
-    "commander": "^12.1.0",
-    "eslint": "^9.17.0",
+    "@eslint/js": "^9.28.0",
+    "@types/node": "^22.15.30",
+    "eslint": "^9.28.0",
     "eslint-config-prettier": "^9.1.0",
-    "globals": "^15.12.0",
-    "prettier": "^3.3.3",
-    "typescript": "^5.7.3",
-    "typescript-eslint": "^8.19.0"
-  },
-  "dependencies": {
-    "@noble/curves": "^1.6.0",
-    "@noble/ed25519": "^2.2.2",
-    "@noble/hashes": "^1.5.0",
-    "@noble/secp256k1": "^2.2.2"
+    "globals": "^15.15.0",
+    "prettier": "^3.5.3",
+    "typescript": "^5.8.3",
+    "typescript-eslint": "^8.33.1"
   }
 }

package/dist/data-type.d.ts

@@ -1,9 +0,0 @@
-export type DataValue = string | number | boolean | DataObject | DataArray;
-export type DataArray = DataValue[];
-/**
- * Defines a data object that can be serialized to JSON.
- * E.g. key events and acdc objects
- */
-export interface DataObject {
-    [x: string]: DataValue;
-}

package/dist/data-type.js

@@ -1 +0,0 @@
-export {};

package/dist/db/sqlite-db.d.ts

@@ -1,14 +0,0 @@
-import type { KeyEvent, ReplyEvent } from "../event.ts";
-export interface SqliteEventStoreOptions {
-    filename?: string;
-}
-export declare class SqliteEventStore {
-    #private;
-    constructor(options?: SqliteEventStoreOptions);
-    init(): void;
-    insert(event: KeyEvent): Promise<void>;
-    get(id: string): Promise<any>;
-    aid(id: string): Promise<any[]>;
-    locations(id: string): Promise<ReplyEvent[]>;
-    list(): Promise<KeyEvent[]>;
-}

package/dist/db/sqlite-db.js

@@ -1,90 +0,0 @@
-var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
-    if (kind === "m") throw new TypeError("Private method is not writable");
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
-    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
-};
-var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
-    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-};
-var _SqliteEventStore_db;
-import { DatabaseSync } from "node:sqlite";
-import { existsSync, mkdirSync } from "node:fs";
-import { dirname } from "node:path";
-function parseRow(row) {
-    if (!row || typeof row !== "object") {
-        throw new Error(`Row not found`);
-    }
-    const data = "data" in row && row["data"];
-    if (!data || typeof data !== "string") {
-        throw new Error(`Unexpected row format`);
-    }
-    return JSON.parse(data);
-}
-function ensureDirSync(filename) {
-    const dir = dirname(filename);
-    if (!existsSync(dir)) {
-        mkdirSync(dir);
-    }
-}
-export class SqliteEventStore {
-    constructor(options = {}) {
-        _SqliteEventStore_db.set(this, void 0);
-        if (options.filename) {
-            ensureDirSync(options.filename);
-        }
-        __classPrivateFieldSet(this, _SqliteEventStore_db, new DatabaseSync(options.filename ?? ":memory:"), "f");
-    }
-    init() {
-        __classPrivateFieldGet(this, _SqliteEventStore_db, "f").exec(`
-        CREATE TABLE IF NOT EXISTS events (
-            id TEXT PRIMARY KEY,
-            data JSON NOT NULL
-        );
-    `);
-    }
-    async insert(event) {
-        const sql = `
-      INSERT INTO events (id, data)
-      VALUES ($id, $data) ON CONFLICT(id) DO NOTHING;
-    `;
-        __classPrivateFieldGet(this, _SqliteEventStore_db, "f").prepare(sql).run({
-            id: event.d,
-            data: JSON.stringify(event),
-        });
-    }
-    async get(id) {
-        const row = __classPrivateFieldGet(this, _SqliteEventStore_db, "f").prepare("SELECT * FROM events WHERE id = ?").get(id);
-        return parseRow(row);
-    }
-    async aid(id) {
-        const sql = `
-      SELECT * FROM events WHERE json_extract(data, '$.i') = $aid
-      ORDER BY json_extract(data, '$.sn') DESC;
-    `;
-        const rows = __classPrivateFieldGet(this, _SqliteEventStore_db, "f").prepare(sql).all({ aid: id });
-        return rows.map(parseRow);
-    }
-    async locations(id) {
-        const sql = `
-      SELECT * FROM
-        events
-      WHERE
-        json_extract(data, '$.t') = 'rpy' AND
-        json_extract(data, '$.r') = '/loc/scheme' AND
-        json_extract(data, '$.a.eid') = $id;
-    `;
-        const rows = __classPrivateFieldGet(this, _SqliteEventStore_db, "f").prepare(sql).all({ id });
-        return rows.map(parseRow);
-    }
-    async list() {
-        const sql = `
-      SELECT * FROM events;
-    `;
-        const rows = __classPrivateFieldGet(this, _SqliteEventStore_db, "f").prepare(sql).all();
-        return rows.map(parseRow);
-    }
-}
-_SqliteEventStore_db = new WeakMap();

package/dist/event.d.ts

@@ -1,45 +0,0 @@
-import type { DataArray, DataObject } from "./data-type.ts";
-export type Threshold = string | string[];
-export interface InceptArgs {
-    k: string[];
-    kt: Threshold;
-    n: string[];
-    nt: Threshold;
-    b?: string[];
-    bt?: string;
-}
-export interface KeyEvent {
-    v: string;
-    t: string;
-    d: string;
-}
-export interface InceptEvent {
-    v: string;
-    t: "icp";
-    d: string;
-    i: string;
-    s: string;
-    kt: Threshold;
-    k: string[];
-    nt: Threshold;
-    n: string[];
-    bt: string;
-    b: string[];
-    c: string[];
-    a: DataArray;
-}
-export declare function incept(data: InceptArgs): InceptEvent;
-export interface ReplyArgs {
-    dt?: string;
-    r: string;
-    a: DataObject;
-}
-export interface ReplyEvent {
-    v: string;
-    t: "rpy";
-    d: string;
-    dt: string;
-    r: string;
-    a: DataObject;
-}
-export declare function reply(data: ReplyArgs): ReplyEvent;