/**
 * Generate an ES256 JWK private key for AT Proto OAuth client signing.
 * Print the JSON-encoded private JWK on stdout. Add it to your env as
 * `NUXT_ATPROTO_PRIVATE_JWK`. The public half is exposed at
 * /.well-known/jwks.json by the running app.
 *
 * Usage:
 *   pnpm gen:jwk > .jwk.json
 *   NUXT_ATPROTO_PRIVATE_JWK="$(cat .jwk.json)" pnpm dev
 */
import { JoseKey } from '@atproto/jwk-jose'

const key = await JoseKey.generate(['ES256'], crypto.randomUUID().slice(0, 8))
process.stdout.write(JSON.stringify(key.privateJwk))
process.stdout.write('\n')