import { JWTWallet } from 'jwtwallet';

// Create with default platform (jwtwallet.com)
const wallet = await JWTWallet.create();

// Or with custom platform
const wallet = await JWTWallet.create({
  platform: 'keys.mycompany.com',
});

console.log(wallet.accountId);  // "abc123..." → use as subdomain
console.log(wallet.issuer);     // "https://abc123.jwtwallet.com"

import * as jose from 'jose';

// Generate key pair (you keep the private key!)
const { publicKey, privateKey } = await jose.generateKeyPair('ES256');
const publicJWK = await jose.exportJWK(publicKey);

// Add only the public key to wallet
wallet.addSigningKey({
  kid: 'my-key-1',
  alg: 'ES256',
  publicKey: publicJWK,
});

const jwks = await wallet.signAndExportJwtWalletJWKS();
// {
//   keys: [{ kty: 'EC', ... }],
//   jwtwallet: {
//     version: 1,
//     accountPublicKey: { ... },
//     signature: "...",
//     revoked: []
//   }
// }

// Host this at: https://{accountId}.{platform}/.well-known/jwks.json

wallet.revokeKey('my-key-1');

const jwks = await wallet.signAndExportJwtWalletJWKS();
// jwks.jwtwallet.revoked = ['my-key-1']

// Export (includes account private key)
const backup = await wallet.export();
// Store backup securely!

// Import
const restored = await JWTWallet.import(backup);

import { validateJWKS } from 'jwtwallet';

const result = await validateJWKS(jwks, 'https://abc123.jwtwallet.com');
if (!result.valid) {
  console.error(result.error);
}

// Or self-validate
const result = await wallet.validate();