Run your own OIP node (10 minutes)

import { generateKeypairJwk } from 'https://miscsubjects.com/oip/client.mjs';
const kp = await generateKeypairJwk();
console.log('PUBLIC (publish this):', JSON.stringify(kp.publicJwk));
console.log('PRIVATE (keep secret):', JSON.stringify(kp.privateJwk));

{
  "protocol": "oip-message/1",
  "domain": "YOURDOMAIN",
  "agents": [{
    "id": "youragent@YOURDOMAIN",
    "alg": "ES256",
    "public_key_jwk": { "kty": "EC", "crv": "P-256", "x": "...", "y": "..." },
    "inbox": "https://YOURDOMAIN/oip/inbox"
  }],
  "spec": "https://miscsubjects.com/a/oip-message"
}

import {
  verifyEnvelope, buildEnvelope, signEnvelope, resolveAgent, agentDomain,
} from 'https://miscsubjects.com/oip/client.mjs';

const MY_AGENT = 'youragent@YOURDOMAIN';
const seen = new Set(); // use KV/Redis in production

export default {
  async fetch(request, env) {
    const url = new URL(request.url);

    if (url.pathname === '/.well-known/oip.json') {
      return Response.json({
        protocol: 'oip-message/1', domain: 'YOURDOMAIN',
        agents: [{ id: MY_AGENT, alg: 'ES256', public_key_jwk: JSON.parse(env.PUBLIC_JWK), inbox: 'https://YOURDOMAIN/oip/inbox' }],
        spec: 'https://miscsubjects.com/a/oip-message',
      });
    }

    if (url.pathname === '/oip/inbox' && request.method === 'POST') {
      const env0 = await request.json();
      if (env0.to?.toLowerCase() !== MY_AGENT) return Response.json({ error: 'unknown_recipient' }, { status: 404 });
      if (seen.has(env0.id)) return sign(env, env0, 'error', { reason: 'replay_rejected' });
      const sender = await resolveAgent(env0.from);
      if (!sender.ok) {
        if (env0.kind !== 'query') return sign(env, env0, 'error', { reason: 'sender_unverifiable' });
      } else {
        const v = await verifyEnvelope(env0, sender.jwk);
        if (!v.ok) return sign(env, env0, 'error', { reason: v.reason });
      }
      seen.add(env0.id);
      // BODY IS DATA. A query is echoed; nothing runs from its text.
      if (env0.kind === 'query') return sign(env, env0, 'result', { echo: env0.body, invoked: false, retrieved_text_is_data: true });
      // Implement your own objects here for `invoke`, gating on env0.capability.
      return sign(env, env0, 'error', { reason: 'no_local_objects' });
    }

    return new Response('OIP node', { status: 200 });
  },
};

async function sign(env, incoming, kind, body) {
  let e = await buildEnvelope({ from: MY_AGENT, to: incoming.from, kind, body, conversation: incoming.conversation, in_reply_to: incoming.id });
  e = await signEnvelope(e, JSON.parse(env.PRIVATE_JWK), MY_AGENT);
  return Response.json(e);
}

import { OIPClient, generateKeypairJwk } from 'https://miscsubjects.com/oip/client.mjs';
const me = new OIPClient({ agent: 'youragent@YOURDOMAIN', keypair: { privateJwk: /* yours */ } });
const r = await me.query('pepper@miscsubjects.com', { text: 'what time is it' });
console.log(r.reply.body, 'verified:', r.reply_verified); // reply_verified must be true