javascript-solid-server 0.0.122 → 0.0.124

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (17) hide show
  1. package/.claude/settings.local.json +341 -0
  2. package/README.md +3 -3
  3. package/docs/activitypub.md +5 -5
  4. package/docs/authentication.md +9 -9
  5. package/docs/configuration.md +14 -14
  6. package/docs/git-support.md +2 -2
  7. package/docs/mongodb.md +4 -4
  8. package/docs/notifications.md +5 -5
  9. package/docs/payments.md +48 -23
  10. package/docs/remotestorage.md +5 -5
  11. package/package.json +1 -1
  12. package/scripts/demo-402.sh +2 -2
  13. package/src/config.js +1 -1
  14. package/src/handlers/container.js +10 -10
  15. package/src/server.js +8 -8
  16. package/src/webid/profile.js +7 -7
  17. package/test/pod.test.js +4 -4
package/.claude/settings.local.json ADDED
@@ -0,0 +1,341 @@
1
+ {
2
+ "permissions": {
3
+ "allow": [
4
+ "WebSearch",
5
+ "WebFetch(domain:github.com)",
6
+ "WebFetch(domain:raw.githubusercontent.com)",
7
+ "Bash(cat:*)",
8
+ "WebFetch(domain:www.inrupt.com)",
9
+ "Bash(npm install:*)",
10
+ "Bash(timeout 3 node:*)",
11
+ "Bash(PORT=3030 timeout 3 node:*)",
12
+ "Bash(git commit:*)",
13
+ "Bash(pkill:*)",
14
+ "Bash(curl:*)",
15
+ "Bash(npm test:*)",
16
+ "Bash(git add:*)",
17
+ "WebFetch(domain:solid.github.io)",
18
+ "Bash(node:*)",
19
+ "WebFetch(domain:solidservers.org)",
20
+ "WebFetch(domain:solid-contrib.github.io)",
21
+ "Bash(git clone:*)",
22
+ "Bash(chmod:*)",
23
+ "Bash(JSS_PORT=4000 JSS_CONNEG=true node bin/jss.js:*)",
24
+ "Bash(find:*)",
25
+ "Bash(timeout 5 node:*)",
26
+ "Bash(npm view:*)",
27
+ "Bash(npm ls:*)",
28
+ "Bash(timeout 10 node:*)",
29
+ "Bash(npm run test:cth:*)",
30
+ "Bash(__NEW_LINE__ curl -s -X POST http://localhost:4000/.pods )",
31
+ "Bash(lsof:*)",
32
+ "Bash(xargs kill -9)",
33
+ "Bash(docker:*)",
34
+ "Bash(solidproject/conformance-test-harness )",
35
+ "Bash(timeout 30 node:*)",
36
+ "Bash(timeout 20 node:*)",
37
+ "Bash(timeout 25 node:*)",
38
+ "Bash(JSS_PORT=4000 JSS_CONNEG=true timeout 5 node:*)",
39
+ "Bash(pgrep:*)",
40
+ "Bash(python3:*)",
41
+ "Bash(ls:*)",
42
+ "Bash(timeout 15 node:*)",
43
+ "Bash(echo 'No .idp folder' echo find /home/melvin/remote/github.com/JavaScriptSolidServer/JavaScriptSolidServer/data/.idp/ -name *.json)",
44
+ "Bash(echo '=== Interactions ===' ls -la /home/melvin/remote/github.com/JavaScriptSolidServer/JavaScriptSolidServer/data/.idp/interaction/ echo echo '=== Latest interaction ===' cat /home/melvin/remote/github.com/JavaScriptSolidServer/JavaScriptSolidServer/data/.idp/interaction/*.json)",
45
+ "Bash(1 echo \"\" echo \"=== Server errors ===\" grep -E \"(error|Error)\" /tmp/jss.log)",
46
+ "Bash(echo 'Server not ready' curl -s -X POST http://localhost:4000/.pods -H 'Content-Type: application/json' -d {\"\"name\"\":\"\"alice\"\",\"\"email\"\":\"\"alice@example.com\"\",\"\"password\"\":\"\"alicepassword123\"\"})",
47
+ "Bash(head -1 curl -s -X POST http://localhost:4000/.pods -H \"Content-Type: application/json\" -d '{\"\"\"\"name\"\"\"\":\"\"\"\"bob\"\"\"\",\"\"\"\"email\"\"\"\":\"\"\"\"bob@example.com\"\"\"\",\"\"\"\"password\"\"\"\":\"\"\"\"bobpassword123\"\"\"\"}')",
48
+ "Bash(xargs:*)",
49
+ "Bash(fuser:*)",
50
+ "Bash(kill:*)",
51
+ "Bash(ACCESS_TOKEN=\"eyJhbGciOiJFUzI1NiIsImtpZCI6IjQwY2U0YzIzLWY2OWQtNDU4NS05ODg2LTE4MDQzZWIyZjU2ZCJ9.eyJpc3MiOiJodHRwOi8vbG9jYWxob3N0OjQwMDAvIiwic3ViIjoiYjhlZjY5YWUtODc0ZS00MDg5LThiMDktOGQwY2QyM2VlZWY3IiwiYXVkIjoic29saWQiLCJ3ZWJpZCI6Imh0dHA6Ly9sb2NhbGhvc3Q0MDAwL2FsaWNlLyNtZSIsImlhdCI6MTc2NjgyOTQ5MiwiZXhwIjoxNzY2ODMzMDkyLCJqdGkiOiIwMWY4ODVlZS05ZjY2LTQ3M2MtYmZkNC05MWM4ZGU3NGJhZjYiLCJjbGllbnRfaWQiOiJjcmVkZW50aWFsc19jbGllbnQiLCJzY29wZSI6Im9wZW5pZCB3ZWJpZCJ9.DYTlSRkORyDN28XtXk-zbR7xNLViD97KkPqUKb6chV860BaIgwa1suif4TxHQDnK_ejvbvmZ46_n5WwwRnf_Zw\" curl -sI -X PUT http://localhost:4000/alice/cth-test/ -H \"Content-Type: text/turtle\" -H \"Authorization: Bearer $ACCESS_TOKEN\")",
52
+ "Bash(timeout 60 docker run:*)",
53
+ "Bash(rm:*)",
54
+ "Bash(mkdir:*)",
55
+ "WebFetch(domain:communitysolidserver.github.io)",
56
+ "WebFetch(domain:solidos.github.io)",
57
+ "WebFetch(domain:solidcommunity.net)",
58
+ "WebFetch(domain:www.npmjs.com)",
59
+ "Bash(pm2 list:*)",
60
+ "Bash(pm2 logs:*)",
61
+ "Bash(pm2 restart:*)",
62
+ "Bash(timeout 60 npm test:*)",
63
+ "Bash(pm2 stop:*)",
64
+ "Bash(pm2 delete:*)",
65
+ "Bash(pm2 start:*)",
66
+ "Bash(DATA_ROOT=/home/melvin/jss/data pm2 start:*)",
67
+ "Bash(pm2 save:*)",
68
+ "Bash(gh issue create:*)",
69
+ "Bash(gh issue view:*)",
70
+ "Bash(gh issue edit:*)",
71
+ "WebFetch(domain:nostrcg.github.io)",
72
+ "WebFetch(domain:melvincarvalho.github.io)",
73
+ "WebFetch(domain:dev.to)",
74
+ "WebFetch(domain:solidproject.org)",
75
+ "WebFetch(domain:www.w3.org)",
76
+ "Bash(wc:*)",
77
+ "Bash(TOKEN=\"eyJraW5kIjoyNzIzNSwidGFncyI6W1sidSIsImh0dHA6Ly9sb2NhbGhvc3Q6NDAwMC9kZW1vL25vc3RyLXpvbmUvIl0sWyJtZXRob2QiLCJHRVQiXV0sImNyZWF0ZWRfYXQiOjE3NjY5MzQ1NjksImNvbnRlbnQiOiIiLCJwdWJrZXkiOiI4OTg5OWNmOWEyNGE5ZTdlMTNmODU3MGRkMGI1MmJiOTQyMjllNDI2OGM1MGQ1OWZhNjdhMzQ0MGQ0NmFhZTdkIiwiaWQiOiJiNTUyMDUyOTVmYmQwYzhjZDYwMzk1NTgwOWYxZGM5Y2MwMjdlY2U4N2NjYmNlNzcwNWY2MjdmNmQ0ODk1MGJkIiwic2lnIjoiOWYzN2Y0NzIyZDlkNmFmZGQ5OTNkYTM0MDg2MWQ2YzQ4MmY1NzQ1MmFmZTIwZmY2YmI5OTAxNGIwOTU3NjUwMWZiNTgyZjEzNzNlZmVhNjI4ZDI5ZjlhMzhmZTgyODU0ODlmMzAzYzlmYmJjYWE0OTQxZjUyZGZlMWYxNzVkOWMifQ==\")",
78
+ "WebFetch(domain:solid-lite.org)",
79
+ "Bash(git push:*)",
80
+ "WebFetch(domain:linkedwebstorage.com)",
81
+ "WebFetch(domain:w3c.github.io)",
82
+ "WebFetch(domain:socialdocs.org)",
83
+ "WebFetch(domain:nosdav.com)",
84
+ "WebFetch(domain:sandy-mount.com)",
85
+ "WebFetch(domain:ditto.pub)",
86
+ "WebFetch(domain:blocktrails.org)",
87
+ "WebFetch(domain:microfed.org)",
88
+ "WebFetch(domain:soliddocs.org)",
89
+ "WebFetch(domain:agenticalliance.com)",
90
+ "WebFetch(domain:activitypub.rocks)",
91
+ "WebFetch(domain:nostrgit.org)",
92
+ "Bash(convert:*)",
93
+ "WebFetch(domain:instantdomainsearch.com)",
94
+ "Bash(for domain in jss.dev jss.sh jss.io jss.app solidserver.dev solid-server.dev)",
95
+ "Bash(do echo -n '$domain: ')",
96
+ "Bash(whois $domain)",
97
+ "Bash(done)",
98
+ "Bash(for domain in jss.dev jss.sh jss.io jss.app solidserver.dev)",
99
+ "Bash(host:*)",
100
+ "WebFetch(domain:nostr-components.github.io)",
101
+ "Bash(ssh melvincarvalho.com \"pm2 list && echo ''---HAPROXY---'' && cat /etc/haproxy/haproxy.cfg 2>/dev/null | grep -A5 ''melvin\\|backend\\|frontend\\|acl host''\")",
102
+ "Bash(ssh:*)",
103
+ "Bash(time curl -s --connect-timeout 10 https://melvin.solid.live/credit/count.ttl)",
104
+ "Bash(time curl -s --connect-timeout 10 https://melvin.solid.live/)",
105
+ "Bash(time curl:*)",
106
+ "Bash(time curl -s 'https://melvin.solid.live/credit/count.ttl')",
107
+ "Bash(grep:*)",
108
+ "Bash(scp:*)",
109
+ "Bash(for i in 1 2 3)",
110
+ "Bash(do echo \"Attempt $i:\")",
111
+ "Bash(for i in 1 2 3 4 5)",
112
+ "Bash(do curl -so /dev/null -w \"%{http_code} \" https://melvincarvalho.com/js/handlemutation.js)",
113
+ "Bash(for i in 1 2 3 4 5 6 7 8 9 10)",
114
+ "Bash(if [ ! -d \"jose\" ])",
115
+ "Bash(then git clone --depth 1 --branch v0.7.0 https://github.com/solid/jose.git)",
116
+ "Bash(fi)",
117
+ "Bash(timeout 45 node:*)",
118
+ "Bash(gh issue list:*)",
119
+ "Bash(DATA_ROOT=/tmp/jss-git-test JSS_PORT=4444 timeout 3 node:*)",
120
+ "Bash(pm2 show:*)",
121
+ "Bash(git config:*)",
122
+ "Bash(npm version:*)",
123
+ "Bash(git init:*)",
124
+ "Bash(gh repo create:*)",
125
+ "Bash(./bin/git-credential-nostr generate:*)",
126
+ "Bash(./bin/git-credential-nostr get:*)",
127
+ "Bash(git-credential-nostr:*)",
128
+ "Bash(git branch:*)",
129
+ "Bash(GIT_TRACE=1 GIT_CURL_VERBOSE=1 git push:*)",
130
+ "Bash(GIT_CURL_VERBOSE=1 git push:*)",
131
+ "Bash(git reset:*)",
132
+ "Bash(echo:*)",
133
+ "Bash(unset DATA_ROOT)",
134
+ "Bash(timeout 30 npm test:*)",
135
+ "Bash(/home/melvin/remote/github.com/JavaScriptSolidServer/git-credential-nostr/bin/git-credential-nostr acl:*)",
136
+ "Bash(npm cache clean:*)",
137
+ "Bash(git checkout:*)",
138
+ "Bash(gh gist edit:*)",
139
+ "Bash(gh gist view:*)",
140
+ "Bash(./bin/git-credential-nostr acl:*)",
141
+ "Bash(DATA_ROOT=/tmp/jss-git-test/data node:*)",
142
+ "Bash(git remote set-url:*)",
143
+ "Bash(for:*)",
144
+ "Bash(if [ ! -d \"node-solid-server\" ])",
145
+ "Bash(then git clone --depth 1 https://github.com/nodeSolidServer/node-solid-server.git)",
146
+ "Bash(node test-local-nss2.js:*)",
147
+ "Bash(npm test)",
148
+ "Bash(repos.json)",
149
+ "Bash(*.log)",
150
+ "Bash(node --check:*)",
151
+ "Bash(gh repo view:*)",
152
+ "Bash(noskey --help:*)",
153
+ "Bash(npx noskey --help:*)",
154
+ "Bash(noskey:*)",
155
+ "Bash(node -e:*)",
156
+ "Bash(node src/publish.js:*)",
157
+ "Bash(git remote add:*)",
158
+ "Bash(git fetch:*)",
159
+ "Bash(git rev-parse:*)",
160
+ "Bash(f502f06c1d7553f4b7159e8d57a1e14819dc3053b59399e080882cc8e6bb62ad )",
161
+ "Bash(798715377357003683b979b41c5d99c0312e6e788d789f0d5df710465483aa3e )",
162
+ "Bash(f810e7491da3390109ddc13a74a1fff985ba3a4735024f2b714c12d213f5ea11 )",
163
+ "Bash(1 )",
164
+ "Bash(911912000 )",
165
+ "Bash(4ccef8c68cf18f8f156a0bb017dfd6e0cc7ebf1672fa2d769e02e2efc700328b 1000000 )",
166
+ "Bash(798715377357003683b979b41c5d99c0312e6e788d789f0d5df710465483aa3e 910911000 )",
167
+ "Bash(~/.gitmark/faucet.txt)",
168
+ "Bash(blocktrails --version:*)",
169
+ "Bash(blocktrails --help:*)",
170
+ "Bash(blocktrails show:*)",
171
+ "Bash(git restore:*)",
172
+ "Bash(npm show:*)",
173
+ "WebFetch(domain:gitlab.com)",
174
+ "Bash(gh repo edit:*)",
175
+ "WebFetch(domain:blocktrails.github.io)",
176
+ "Bash(jq:*)",
177
+ "Bash(SOLID_SYNC=true timeout 45 node:*)",
178
+ "Bash(git -C /home/melvin/remote/github.com/blocktrails/gitmark-amm status)",
179
+ "Bash(SOLID_SYNC=true ANCHOR=true timeout 8 node:*)",
180
+ "Bash(SOLID_SYNC=true ANCHOR=true node:*)",
181
+ "Bash(git -C /home/melvin/remote/github.com/blocktrails/gitmark-amm diff src/watcher.js)",
182
+ "Bash(git -C /home/melvin/remote/github.com/blocktrails/gitmark-amm add src/watcher.js)",
183
+ "Bash(git -C /home/melvin/remote/github.com/blocktrails/gitmark-amm commit -m \"$\\(cat <<''EOF''\nAdd transfer API and HTTP 402 middleware\n\n- Add POST /transfer endpoint for user-to-user token transfers\n- Add verify402Payment middleware for token-gated APIs\n- Add GET /api/quote demo endpoint \\(costs 1 GSAT\\)\n- Add GET /balance/:did and GET /state endpoints\n- Fix anchor function to use encodeBech32m for address derivation\n- Remove OP_RETURN from anchor tx \\(state hash stored in state.json\\)\nEOF\n\\)\")",
184
+ "Bash(git -C /home/melvin/remote/github.com/blocktrails/gitmark-amm push)",
185
+ "Bash(git -C /home/melvin/remote/github.com/blocktrails/gitmark-amm add demo.html src/watcher.js debug.html paywall.html transfer.html)",
186
+ "Bash(git -C /home/melvin/remote/github.com/blocktrails/gitmark-amm commit -m \"$\\(cat <<''EOF''\nAdd NIP-98 paywall, transfer, withdraw, and debug pages\n\n- Implement NIP-98 \\(kind 27235\\) for HTTP 402 authentication\n- Add paywall.html demo page showing NIP-98 flow\n- Add transfer.html for user-to-user GSAT transfers\n- Add debug.html with anchors, state, verify, withdraw, and users tabs\n- Add POST /withdraw endpoint for sats → Bitcoin address\n- Add navigation to demo.html linking all pages\nEOF\n\\)\")",
187
+ "Bash(git -C /home/melvin/remote/github.com/blocktrails/gitmark-amm add test-amm.mjs package.json)",
188
+ "Bash(git -C /home/melvin/remote/github.com/blocktrails/gitmark-amm commit -m \"$\\(cat <<''EOF''\nAdd AMM tests for math, signatures, and NIP-98\n\n- AMM math tests \\(calculateGsatOut, calculateSatsOut, slippage, k invariant\\)\n- Signature verification tests \\(sell, transfer, withdraw requests\\)\n- NIP-98 event creation, verification, and encoding tests\n- Update package.json with test script\nEOF\n\\)\")",
189
+ "Bash(SOLID_SYNC=true node src/watcher.js:*)",
190
+ "Bash(git -C /home/melvin/remote/github.com/blocktrails/gitmark-amm add demo.html src/watcher.js)",
191
+ "Bash(git -C /home/melvin/remote/github.com/blocktrails/gitmark-amm commit -m \"$\\(cat <<''EOF''\nAdd smart polling with manual deposit check\n\n- Change poll interval from 30s to 10 minutes\n- Add POST /check endpoint for manual deposit scan\n- Add 10-second rate limit between manual checks\n- Add \"Check Deposits\" button to demo.html\nEOF\n\\)\")",
192
+ "Bash(git -C /home/melvin/remote/github.com/blocktrails/gitmark-amm add:*)",
193
+ "Bash(git -C /home/melvin/remote/github.com/blocktrails/gitmark-amm commit -m \"Use blocktrails npm package instead of local path\")",
194
+ "Bash(for addr in tb1pdypd4k38q4x0qz5x7hqavjhfpgt2n4tm0egggx587aafqn3wsnds8gm3yf tb1pqxmrkvuyea9v7vv323tmptjfle5tj9y6cpe5g8wqvlz6d5xmfhlqctx7py tb1p0fv2683x2j5htf9n7fkpmxsy4h7yuxmetelq2c6vp8u2zw9rhp2s5kha7v)",
195
+ "Bash(do echo -n \"$addr: \" curl -s \"https://mempool.space/testnet4/api/address/$addr\")",
196
+ "WebFetch(domain:webledgers.org)",
197
+ "Bash(npm pack:*)",
198
+ "Bash(npm info:*)",
199
+ "Bash(tar:*)",
200
+ "Bash(TEST_API=1 API_URL=https://api.solid.social node:*)",
201
+ "Bash(webledgers show:*)",
202
+ "Bash(webledgers set-balance:*)",
203
+ "Bash(ssh melvincarvalho.com \"pm2 list | grep jss\")",
204
+ "Bash(ssh melvincarvalho.com \"cd /home/ubuntu/jss && git pull && pm2 restart jss\")",
205
+ "WebFetch(domain:registry.npmjs.org)",
206
+ "WebFetch(domain:solid-chat.com)",
207
+ "WebFetch(domain:developer.chrome.com)",
208
+ "WebFetch(domain:css-tricks.com)",
209
+ "Bash(node bin/jss.js:*)",
210
+ "WebFetch(domain:nostr.social)",
211
+ "Bash(xargs curl -s)",
212
+ "Bash(ssh phone:*)",
213
+ "Bash(dig:*)",
214
+ "WebFetch(domain:fonstr.com)",
215
+ "Bash(node -e \"import\\(''nostr-tools''\\).then\\(m => console.log\\(Object.keys\\(m\\).join\\(''\\\\n''\\)\\)\\)\":*)",
216
+ "Bash(gh repo list:*)",
217
+ "Bash(gh search:*)",
218
+ "Bash(__NEW_LINE__ echo \"\")",
219
+ "WebFetch(domain:webfinger.net)",
220
+ "Bash(npm update:*)",
221
+ "Bash(timeout 8 node:*)",
222
+ "Bash(gh pr view:*)",
223
+ "Bash(gh pr diff:*)",
224
+ "Bash(gh pr review:*)",
225
+ "Bash(gh api:*)",
226
+ "Bash(gh pr comment:*)",
227
+ "Bash(git pull:*)",
228
+ "Bash(gh pr:*)",
229
+ "Bash(node --test:*)",
230
+ "Bash(TOKEN_SECRET=test node --test:*)",
231
+ "Bash(gh search issues:*)",
232
+ "Bash(timeout 60 bash:*)",
233
+ "Bash(timeout 90 bash -c:*)",
234
+ "Bash(git commit -m \"$\\(cat <<''EOF''\nsecurity: add ACL check on WebSocket subscription requests\n\nCheck WAC read permission before allowing subscription to prevent\ninformation leakage via notifications. Unauthorized subscriptions\nnow receive ''err <url> forbidden'' response.\n\nSecurity improvements:\n- Check ACL read access before allowing subscription\n- Validate URLs are on this server \\(prevents SSRF-like probing\\)\n- Add subscription limit and URL length validation\n\nFixes #62\nEOF\n\\)\")",
235
+ "Bash(gh repo fork:*)",
236
+ "Bash(timeout 180 npm test:*)",
237
+ "Bash(git show:*)",
238
+ "Bash(git -C /home/melvin/remote/github.com/nodeSolidServer/node-solid-server log --oneline -30 -- \"test/integration/acl-tls-test.mjs\" \"test-esm/integration/acl-tls-test.js\")",
239
+ "Bash(git -C /home/melvin/remote/github.com/nodeSolidServer/node-solid-server log --oneline --follow -30 -- \"test/integration/acl-tls-test.mjs\")",
240
+ "Bash(git -C /home/melvin/remote/github.com/nodeSolidServer/node-solid-server show 778095ad --stat)",
241
+ "Bash(git -C /home/melvin/remote/github.com/nodeSolidServer/node-solid-server show 778095ad)",
242
+ "Bash(git -C /home/melvin/remote/github.com/nodeSolidServer/node-solid-server show b183c7a0)",
243
+ "Bash(git -C /home/melvin/remote/github.com/nodeSolidServer/node-solid-server log --oneline --before=\"2019-10-29\" --after=\"2019-10-01\" -20)",
244
+ "Bash(git -C /home/melvin/remote/github.com/nodeSolidServer/node-solid-server show 1a92a912 --stat)",
245
+ "Bash(git -C /home/melvin/remote/github.com/nodeSolidServer/node-solid-server log --oneline --all --grep=jaxoncreed)",
246
+ "Bash(git -C /home/melvin/remote/github.com/nodeSolidServer/node-solid-server log --oneline --author=\"jaxoncreed\" -30)",
247
+ "Bash(git -C /home/melvin/remote/github.com/nodeSolidServer/node-solid-server log --oneline --author=\"[Dd]mitri\" -20)",
248
+ "Bash(git -C /home/melvin/remote/github.com/nodeSolidServer/node-solid-server log --oneline --all --grep=\"oidc\" -20)",
249
+ "Bash(npm install)",
250
+ "Bash(timeout 60 npx mocha:*)",
251
+ "Bash(timeout 120 npx mocha:*)",
252
+ "Bash(timeout 30 npx mocha:*)",
253
+ "Bash(openssl x509:*)",
254
+ "Bash(gh pr checks:*)",
255
+ "Bash(gh run view:*)",
256
+ "Bash(gh pr edit:*)",
257
+ "WebFetch(domain:patch-diff.githubusercontent.com)",
258
+ "Bash(git rebase:*)",
259
+ "Bash(timeout 10 npm start)",
260
+ "Bash(node bin/jss.js start:*)",
261
+ "Bash(ssh solid.social \"cd /var/www/jss && git pull && pm2 restart jss\")",
262
+ "Bash(ssh solid.social:*)",
263
+ "Bash(git -C /tmp/lws-server log --oneline --all -20)",
264
+ "Bash(git -C /tmp/lws-server branch -a)",
265
+ "Bash(git -C /tmp/lws-server show-branch -a)",
266
+ "WebFetch(domain:web-platform-tests.org)",
267
+ "Bash(file:*)",
268
+ "WebFetch(domain:karate.apache.org)",
269
+ "WebFetch(domain:restfulapi.net)",
270
+ "Bash(npm run test:jss:*)",
271
+ "Bash(node /home/melvin/remote/github.com/JavaScriptSolidServer/JavaScriptSolidServer/bin/jss.js start:*)",
272
+ "Bash(VERBOSE=true npm run test:jss:*)",
273
+ "Bash(npm whoami:*)",
274
+ "Bash(node bin/lws-test.js:*)",
275
+ "Bash(timeout 2 node:*)",
276
+ "Bash(node index.js:*)",
277
+ "Bash(timeout 3 npx lws-server@0.0.3:*)",
278
+ "Bash(npx lws-server@0.0.3)",
279
+ "Bash(node /tmp/jssd/verify-spacing.js:*)",
280
+ "Bash(gh run list:*)",
281
+ "Bash(pm2 startup:*)",
282
+ "Bash(npm run build:*)",
283
+ "Bash(npx esbuild:*)",
284
+ "Bash(gzip:*)",
285
+ "Bash(sort:*)",
286
+ "Bash(echo __NEW_LINE_496cf3994d374e5c__ echo '1. jsonld \\(277 KB\\) - used by:' grep -r \"from ['''']jsonld\" src/ --include=*.ts --include=*.js 2)",
287
+ "Bash(/dev/null __NEW_LINE_496cf3994d374e5c__ echo echo '2. readable-stream \\(180 KB\\) - used by:' grep -r readable-stream node_modules/n3/package.json node_modules/jsonld/package.json)",
288
+ "Bash(head -3 __NEW_LINE_496cf3994d374e5c__ echo echo '3. n3 \\(156 KB\\) - used by:' grep -r \"from ['''']n3\" src/ --include=*.ts --include=*.js 2)",
289
+ "Bash(/dev/null __NEW_LINE_496cf3994d374e5c__ echo echo '4. @xmldom/xmldom \\(136 KB\\) - used by:' grep -r xmldom src/ --include=*.ts --include=*.js 2)",
290
+ "Bash(/dev/null __NEW_LINE_496cf3994d374e5c__ echo echo '5. @frogcat/ttl2jsonld \\(135 KB\\) - used by:' grep -r ttl2jsonld src/ --include=*.ts --include=*.js)",
291
+ "Bash(echo \"\" __NEW_LINE_b9f7c85f1ada8a30__ echo \"1. jsonld \\(277 KB\\):\" grep -rn \"jsonld\" src/ --include=\"*.ts\" --include=\"*.js\")",
292
+ "Bash(head -5 __NEW_LINE_b9f7c85f1ada8a30__ echo \"\" echo \"2. n3 \\(156 KB\\):\" grep -rn \"from ''''n3''''\" src/ --include=\"*.ts\" --include=\"*.js\")",
293
+ "Bash(head -5 __NEW_LINE_b9f7c85f1ada8a30__ echo \"\" echo \"3. @xmldom \\(136 KB\\):\" grep -rn \"xmldom\" src/ --include=\"*.ts\" --include=\"*.js\")",
294
+ "Bash(head -5 __NEW_LINE_b9f7c85f1ada8a30__ echo \"\" echo \"4. @frogcat/ttl2jsonld \\(135 KB\\):\" grep -rn \"ttl2jsonld\" src/ --include=\"*.ts\" --include=\"*.js\")",
295
+ "Bash(head -5 __NEW_LINE_b9f7c85f1ada8a30__ echo \"\" echo \"5. cross-fetch \\(20 KB\\):\" grep -rn \"cross-fetch\" src/ --include=\"*.ts\" --include=\"*.js\")",
296
+ "Bash(head -5 __NEW_LINE_b9f7c85f1ada8a30__ echo \"\" echo \"6. solid-namespace \\(3 KB\\):\" grep -rn \"solid-namespace\" src/ --include=\"*.ts\" --include=\"*.js\")",
297
+ "Bash(echo __NEW_LINE_fbfd1802fc51eb60__ echo '1. jsonld \\(277 KB\\):' grep -n jsonld src/*.ts src/*.js)",
298
+ "Bash(grep -E \"import|require\" __NEW_LINE_fbfd1802fc51eb60__ echo echo '2. n3 \\(156 KB\\):' grep -n ''n3'' src/*.ts src/*.js)",
299
+ "Bash(grep -E \"import|require\" __NEW_LINE_fbfd1802fc51eb60__ echo echo '3. @xmldom \\(136 KB\\):' grep -n xmldom src/*.ts src/*.js)",
300
+ "Bash(grep -E \"import|require\" __NEW_LINE_fbfd1802fc51eb60__ echo echo '4. @frogcat/ttl2jsonld \\(135 KB\\):' grep -n ttl2jsonld src/*.ts src/*.js)",
301
+ "Bash(grep -E \"import|require\" __NEW_LINE_fbfd1802fc51eb60__ echo echo '5. cross-fetch \\(20 KB\\):' grep -n cross-fetch src/*.ts src/*.js)",
302
+ "Bash(grep -E \"import|require\" __NEW_LINE_fbfd1802fc51eb60__ echo echo '6. solid-namespace \\(3 KB\\):' grep -n solid-namespace src/*.ts src/*.js)",
303
+ "Bash(npm run build:all:*)",
304
+ "Bash(git status:*)",
305
+ "Bash(npm run lint-fix:*)",
306
+ "Bash(npm uninstall:*)",
307
+ "Bash(npm search:*)",
308
+ "Bash(npm run lint:*)",
309
+ "Bash(npm run typecheck:*)",
310
+ "Bash(du:*)",
311
+ "Bash(for pkg in activitystreams-pane chat-pane contacts-pane folder-pane issue-pane meeting-pane profile-pane source-pane pane-registry)",
312
+ "Bash(do du -sh node_modules/$pkg)",
313
+ "Bash(for pkg in solid-ui solid-logic react react-dom lodash core-js @inrupt marked dompurify)",
314
+ "Bash(npm why:*)",
315
+ "Bash(for pkg in activitystreams-pane chat-pane contacts-pane folder-pane issue-pane meeting-pane profile-pane source-pane)",
316
+ "Bash(wc -l echo 'Brings: mime-types \\(we already removed this pattern\\)' echo echo '=== profile-pane unique deps ===')",
317
+ "Bash(npm run build-prod:*)",
318
+ "Bash(ln:*)",
319
+ "WebFetch(domain:remotestorage.io)",
320
+ "Bash(gh issue create --title \"Feature: --public flag to skip WAC and allow open access\" --body \"$\\(cat << ''ENDOFFILE''\n## Summary\n\nAdd a `--public` flag that disables WAC \\(Web Access Control\\) checks, allowing unauthenticated read/write access to all resources. This enables JSS to be used as a simple file server similar to `npx serve`, but with REST write capabilities.\n\n**Difficulty**: 15/100 \n**Estimated Effort**: 2-4 hours \n**Dependencies**: None\n\n---\n\n## Motivation\n\nCurrently, JSS requires either:\n1. ACL files to grant access, or\n2. Authentication via Solid-OIDC\n\nThis makes it impossible to use JSS as a simple \"just serve this folder\" tool like `npx serve`. The `--public` flag would enable:\n\n1. **Quick local development** - No auth setup needed\n2. **Simple file sharing** - LAN file server with write support\n3. **jsserve wrapper** - Foundation for `npx jsserve` \\(see future issue\\)\n4. **WebDAV alternative** - Simple REST-based file server\n5. **Testing/demos** - Quick Solid server without auth complexity\n\n---\n\n## Proposed Implementation\n\n### CLI Flag\n\n```bash\njss start --public # Open read/write, no auth\njss start --public --read-only # Open read, no writes \\(like npx serve\\)\n```\n\n### Environment Variable\n\n```bash\nJSS_PUBLIC=true jss start\n```\n\n### Config File\n\n```json\n{\n \"public\": true\n}\n```\n\n---\n\n## Implementation Details\n\n### 1. Add flag to CLI \\(`bin/jss.js`\\)\n\n```javascript\n.option\\(''--public'', ''Allow unauthenticated access to all resources \\(disables WAC\\)''\\)\n.option\\(''--read-only'', ''Disable PUT/DELETE methods \\(read-only mode\\)''\\)\n```\n\n### 2. Add to config \\(`src/config.js`\\)\n\n```javascript\nconst DEFAULTS = {\n // ... existing ...\n public: false,\n readOnly: false,\n};\n\n// Environment variable mapping\nif \\(process.env.JSS_PUBLIC\\) {\n config.public = process.env.JSS_PUBLIC === ''true'';\n}\nif \\(process.env.JSS_READ_ONLY\\) {\n config.readOnly = process.env.JSS_READ_ONLY === ''true'';\n}\n```\n\n### 3. Skip WAC when public \\(`src/auth/middleware.js`\\)\n\n```javascript\nexport async function authorize\\(request, reply\\) {\n // Public mode - skip all auth/WAC checks\n if \\(request.config?.public\\) {\n return; // Allow request to proceed\n }\n \n // ... existing WAC logic ...\n}\n```\n\n### 4. Block writes when read-only \\(`src/handlers/resource.js`, `src/handlers/container.js`\\)\n\n```javascript\n// At start of PUT/DELETE handlers\nif \\(request.config?.readOnly\\) {\n return reply.code\\(405\\).send\\({ \n error: ''Method Not Allowed'',\n message: ''Server is in read-only mode''\n }\\);\n}\n```\n\n---\n\n## Behavior Matrix\n\n| Flag Combination | GET | PUT/DELETE | Auth Required |\n|------------------|-----|------------|---------------|\n| \\(default\\) | ACL | ACL | Yes \\(if ACL requires\\) |\n| `--public` | ✅ Allow | ✅ Allow | No |\n| `--public --read-only` | ✅ Allow | ❌ Block | No |\n| `--read-only` \\(no public\\) | ACL | ❌ Block | Yes |\n\n---\n\n## Security Considerations\n\n### Warning on Startup\n\nWhen `--public` is enabled, show a clear warning:\n\n```\n⚠️ WARNING: Server running in PUBLIC mode\n All files are readable and writable without authentication.\n Do not use in production or expose to the internet.\n```\n\n### Binding to localhost by default?\n\nConsider: When `--public` is set, should the default host be `localhost` instead of `0.0.0.0`?\n\n```javascript\nif \\(config.public && !explicitHostSet\\) {\n config.host = ''localhost''; // Safer default for public mode\n}\n```\n\nUser can override with `--public --host 0.0.0.0` if they explicitly want network access.\n\n---\n\n## Examples\n\n### Local Development\n```bash\n# Quick Solid-compatible file server for development\njss start --public --port 3000 --root ./test-data\n```\n\n### Read-Only File Sharing\n```bash\n# Share files on LAN, no writes allowed\njss start --public --read-only --host 0.0.0.0 --root ~/shared\n```\n\n### Testing Solid Apps\n```bash\n# Test app without auth complexity\njss start --public --root ./fixtures\nnpm test\n```\n\n---\n\n## Files to Modify\n\n| File | Changes |\n|------|---------|\n| `bin/jss.js` | Add `--public` and `--read-only` options \\(~5 LOC\\) |\n| `src/config.js` | Add defaults and env var mapping \\(~10 LOC\\) |\n| `src/auth/middleware.js` | Skip WAC when public \\(~5 LOC\\) |\n| `src/handlers/resource.js` | Block writes when read-only \\(~5 LOC\\) |\n| `src/handlers/container.js` | Block writes when read-only \\(~5 LOC\\) |\n| **Total** | **~30 LOC** |\n\n---\n\n## Testing\n\n```javascript\ndescribe\\(''--public flag'', \\(\\) => {\n it\\(''should allow unauthenticated GET'', async \\(\\) => {\n const server = await createServer\\({ public: true, root: tmpDir }\\);\n const res = await request\\(server\\).get\\(''/file.txt''\\);\n expect\\(res.status\\).toBe\\(200\\);\n }\\);\n\n it\\(''should allow unauthenticated PUT'', async \\(\\) => {\n const server = await createServer\\({ public: true, root: tmpDir }\\);\n const res = await request\\(server\\)\n .put\\(''/new-file.txt''\\)\n .send\\(''content''\\);\n expect\\(res.status\\).toBe\\(201\\);\n }\\);\n\n it\\(''should block PUT when read-only'', async \\(\\) => {\n const server = await createServer\\({ public: true, readOnly: true, root: tmpDir }\\);\n const res = await request\\(server\\)\n .put\\(''/new-file.txt''\\)\n .send\\(''content''\\);\n expect\\(res.status\\).toBe\\(405\\);\n }\\);\n}\\);\n```\n\n---\n\n## Related Issues\n\n- Future: `jsserve` package \\(thin wrapper using this flag\\)\n- #100 - Production Readiness \\(this is a dev/convenience feature\\)\n\n---\n\n## Open Questions\n\n1. Should `--public` default to `localhost` binding for safety?\n2. Should there be a `--public-read` \\(read-only public\\) shorthand?\n3. Should `--public` disable IdP/login UI entirely, or just make it optional?\nENDOFFILE\n\\)\")",
321
+ "Bash(npx serve --help:*)",
322
+ "Bash(npm exec serve:*)",
323
+ "Bash(npm link)",
324
+ "Bash(npm link:*)",
325
+ "Bash(git push)",
326
+ "Bash(ulimit:*)",
327
+ "Bash(gh label:*)",
328
+ "Bash(mongosh --eval \"db.runCommand\\({ ping: 1 }\\)\" 2>&1 | head -5)",
329
+ "Bash(which jss && jss --version 2>&1)",
330
+ "Bash(jss start --help 2>&1 | grep -i mongo)",
331
+ "Bash(grep -A5 '\"\"files\"\"' package.json)",
332
+ "Bash(mkdir -p /tmp/wt-check)",
333
+ "Bash(npm init:*)",
334
+ "WebFetch(domain:webtorrent.io)",
335
+ "Bash(TORRENT=/home/melvin/.claude/projects/-home-melvin-remote-github-com-JavaScriptSolidServer-JavaScriptSolidServer/a05da419-92b7-4056-93b8-e97b2035d4ae/tool-results/webfetch-1774004425803-fce7mx.bin npx -y parse-torrent $TORRENT)",
336
+ "Bash(gh issue:*)",
337
+ "Bash(sed -i 's|Settings/|settings/|g' src/server.js src/handlers/container.js src/webid/profile.js)",
338
+ "Bash(sed -i 's|// Settings folder|// settings folder|' src/handlers/container.js)"
339
+ ]
340
+ }
341
+ }
package/README.md CHANGED
@@ -48,7 +48,7 @@ jss start --port 8443 --idp --mashlib --conneg --git --nostr
48
48
  ### Creating a Pod
49
49
 
50
50
  ```bash
51
- curl -X POST http://localhost:3000/.pods \
51
+ curl -X POST http://localhost:4443/.pods \
52
52
  -H "Content-Type: application/json" \
53
53
  -d '{"name": "alice"}'
54
54
  ```
@@ -57,10 +57,10 @@ curl -X POST http://localhost:3000/.pods \
57
57
 
58
58
  ```bash
59
59
  # Read
60
- curl http://localhost:3000/alice/public/
60
+ curl http://localhost:4443/alice/public/
61
61
 
62
62
  # Write
63
- curl -X PUT http://localhost:3000/alice/public/data.json \
63
+ curl -X PUT http://localhost:4443/alice/public/data.json \
64
64
  -H "Authorization: Bearer YOUR_TOKEN" \
65
65
  -H "Content-Type: application/ld+json" \
66
66
  -d '{"@id": "#data", "http://example.org/value": 42}'
package/docs/activitypub.md CHANGED
@@ -55,13 +55,13 @@ const server = createServer({
55
55
 
56
56
  ```bash
57
57
  # Check WebFinger
58
- curl "http://localhost:3000/.well-known/webfinger?resource=acct:alice@localhost:3000"
58
+ curl "http://localhost:4443/.well-known/webfinger?resource=acct:alice@localhost:4443"
59
59
 
60
60
  # Get Actor (AP format)
61
- curl -H "Accept: application/activity+json" http://localhost:3000/profile/card
61
+ curl -H "Accept: application/activity+json" http://localhost:4443/profile/card
62
62
 
63
63
  # Check NodeInfo
64
- curl http://localhost:3000/.well-known/nodeinfo/2.1
64
+ curl http://localhost:4443/.well-known/nodeinfo/2.1
65
65
  ```
66
66
 
67
67
  ## Mastodon-compatible API
@@ -99,11 +99,11 @@ Supports out-of-band (OOB) redirect for CLI/desktop clients.
99
99
 
100
100
  ```bash
101
101
  # Register a client
102
- curl -X POST http://localhost:3000/api/v1/apps \
102
+ curl -X POST http://localhost:4443/api/v1/apps \
103
103
  -H "Content-Type: application/json" \
104
104
  -d '{"client_name": "Test App", "redirect_uris": "urn:ietf:wg:oauth:2.0:oob"}'
105
105
 
106
106
  # Check instance info
107
- curl http://localhost:3000/api/v1/instance
107
+ curl http://localhost:4443/api/v1/instance
108
108
  ```
109
109
 
package/docs/authentication.md CHANGED
@@ -5,7 +5,7 @@
5
5
  Use the token returned from pod creation:
6
6
 
7
7
  ```bash
8
- curl -H "Authorization: Bearer YOUR_TOKEN" http://localhost:3000/alice/private/
8
+ curl -H "Authorization: Bearer YOUR_TOKEN" http://localhost:4443/alice/private/
9
9
  ```
10
10
 
11
11
  ### Built-in Identity Provider (v0.0.12+)
@@ -19,7 +19,7 @@ jss start --idp
19
19
  With IdP enabled, pod creation requires email and password:
20
20
 
21
21
  ```bash
22
- curl -X POST http://localhost:3000/.pods \
22
+ curl -X POST http://localhost:4443/.pods \
23
23
  -H "Content-Type: application/json" \
24
24
  -d '{"name": "alice", "email": "alice@example.com", "password": "secret123"}'
25
25
  ```
@@ -28,10 +28,10 @@ Response:
28
28
  ```json
29
29
  {
30
30
  "name": "alice",
31
- "webId": "http://localhost:3000/alice/#me",
32
- "podUri": "http://localhost:3000/alice/",
33
- "idpIssuer": "http://localhost:3000",
34
- "loginUrl": "http://localhost:3000/idp/auth"
31
+ "webId": "http://localhost:4443/alice/#me",
32
+ "podUri": "http://localhost:4443/alice/",
33
+ "idpIssuer": "http://localhost:4443",
34
+ "loginUrl": "http://localhost:4443/idp/auth"
35
35
  }
36
36
  ```
37
37
 
@@ -42,7 +42,7 @@ OIDC Discovery: `/.well-known/openid-configuration`
42
42
  For automated testing and scripts, use the credentials endpoint:
43
43
 
44
44
  ```bash
45
- curl -X POST http://localhost:3000/idp/credentials \
45
+ curl -X POST http://localhost:4443/idp/credentials \
46
46
  -H "Content-Type: application/json" \
47
47
  -d '{"email": "alice@example.com", "password": "secret123"}'
48
48
  ```
@@ -53,7 +53,7 @@ Response:
53
53
  "access_token": "...",
54
54
  "token_type": "Bearer",
55
55
  "expires_in": 3600,
56
- "webid": "http://localhost:3000/alice/#me"
56
+ "webid": "http://localhost:4443/alice/#me"
57
57
  }
58
58
  ```
59
59
 
@@ -109,7 +109,7 @@ The server also accepts DPoP-bound access tokens from external Solid identity pr
109
109
  ```bash
110
110
  curl -H "Authorization: DPoP ACCESS_TOKEN" \
111
111
  -H "DPoP: DPOP_PROOF" \
112
- http://localhost:3000/alice/private/
112
+ http://localhost:4443/alice/private/
113
113
  ```
114
114
 
115
115
  ### WebID-TLS (Client Certificates)
package/docs/configuration.md CHANGED
@@ -112,16 +112,16 @@ const server = createServer({ notifications: true });
112
112
  Clients discover the WebSocket URL via the `Updates-Via` header:
113
113
 
114
114
  ```bash
115
- curl -I http://localhost:3000/alice/public/
116
- # Updates-Via: ws://localhost:3000/.notifications
115
+ curl -I http://localhost:4443/alice/public/
116
+ # Updates-Via: ws://localhost:4443/.notifications
117
117
  ```
118
118
 
119
119
  Protocol (solid-0.1, compatible with SolidOS):
120
120
  ```
121
121
  Server: protocol solid-0.1
122
- Client: sub http://localhost:3000/alice/public/data.json
123
- Server: ack http://localhost:3000/alice/public/data.json
124
- Server: pub http://localhost:3000/alice/public/data.json (on change)
122
+ Client: sub http://localhost:4443/alice/public/data.json
123
+ Server: ack http://localhost:4443/alice/public/data.json
124
+ Server: pub http://localhost:4443/alice/public/data.json (on change)
125
125
  ```
126
126
 
127
127
 
@@ -131,7 +131,7 @@ Server: pub http://localhost:3000/alice/public/data.json (on change)
131
131
 
132
132
  | Option | Description | Default |
133
133
  |--------|-------------|---------|
134
- | `-p, --port <n>` | Port to listen on | 3000 |
134
+ | `-p, --port <n>` | Port to listen on | 4443 |
135
135
  | `-h, --host <addr>` | Host to bind to | 0.0.0.0 |
136
136
  | `-r, --root <path>` | Data directory | ./data |
137
137
  | `-c, --config <file>` | Config file path | - |
@@ -235,7 +235,7 @@ Then: `jss start --config config.json`
235
235
  ### Creating a Pod
236
236
 
237
237
  ```bash
238
- curl -X POST http://localhost:3000/.pods \
238
+ curl -X POST http://localhost:4443/.pods \
239
239
  -H "Content-Type: application/json" \
240
240
  -d '{"name": "alice"}'
241
241
  ```
@@ -244,8 +244,8 @@ Response:
244
244
  ```json
245
245
  {
246
246
  "name": "alice",
247
- "webId": "http://localhost:3000/alice/#me",
248
- "podUri": "http://localhost:3000/alice/",
247
+ "webId": "http://localhost:4443/alice/#me",
248
+ "podUri": "http://localhost:4443/alice/",
249
249
  "token": "eyJ..."
250
250
  }
251
251
  ```
@@ -421,15 +421,15 @@ const server = createServer({ notifications: true });
421
421
  Clients discover the WebSocket URL via the `Updates-Via` header:
422
422
 
423
423
  ```bash
424
- curl -I http://localhost:3000/alice/public/
425
- # Updates-Via: ws://localhost:3000/.notifications
424
+ curl -I http://localhost:4443/alice/public/
425
+ # Updates-Via: ws://localhost:4443/.notifications
426
426
  ```
427
427
 
428
428
  Protocol (solid-0.1, compatible with SolidOS):
429
429
  ```
430
430
  Server: protocol solid-0.1
431
- Client: sub http://localhost:3000/alice/public/data.json
432
- Server: ack http://localhost:3000/alice/public/data.json
433
- Server: pub http://localhost:3000/alice/public/data.json (on change)
431
+ Client: sub http://localhost:4443/alice/public/data.json
432
+ Server: ack http://localhost:4443/alice/public/data.json
433
+ Server: pub http://localhost:4443/alice/public/data.json (on change)
434
434
  ```
435
435
 
package/docs/git-support.md CHANGED
@@ -252,10 +252,10 @@ JSS_GIT=true jss start
252
252
 
253
253
  ```bash
254
254
  # Clone
255
- git clone http://localhost:3000/myrepo
255
+ git clone http://localhost:4443/myrepo
256
256
 
257
257
  # Clone with authentication (if required)
258
- git clone http://localhost:3000/myrepo
258
+ git clone http://localhost:4443/myrepo
259
259
  # Git will prompt for credentials
260
260
 
261
261
  # Push (requires write access)
package/docs/mongodb.md CHANGED
@@ -14,19 +14,19 @@ jss start --mongo --mongo-url mongodb://localhost:27017 --mongo-database solid
14
14
 
15
15
  ```bash
16
16
  # Store a document
17
- curl -X PUT http://localhost:3000/db/alice/notes/1 \
17
+ curl -X PUT http://localhost:4443/db/alice/notes/1 \
18
18
  -H "Content-Type: application/ld+json" \
19
19
  -H "Authorization: Bearer <token>" \
20
20
  -d '{"@context": "https://schema.org/", "@type": "Note", "text": "Hello"}'
21
21
 
22
22
  # Read it back
23
- curl http://localhost:3000/db/alice/notes/1
23
+ curl http://localhost:4443/db/alice/notes/1
24
24
 
25
25
  # List container (derived from URI prefixes)
26
- curl http://localhost:3000/db/alice/
26
+ curl http://localhost:4443/db/alice/
27
27
 
28
28
  # Delete
29
- curl -X DELETE http://localhost:3000/db/alice/notes/1 \
29
+ curl -X DELETE http://localhost:4443/db/alice/notes/1 \
30
30
  -H "Authorization: Bearer <token>"
31
31
  ```
32
32
 
package/docs/notifications.md CHANGED
@@ -11,17 +11,17 @@ jss start --notifications
11
11
  Clients discover the WebSocket URL via the `Updates-Via` header:
12
12
 
13
13
  ```bash
14
- curl -I http://localhost:3000/alice/public/
15
- # Updates-Via: ws://localhost:3000/.notifications
14
+ curl -I http://localhost:4443/alice/public/
15
+ # Updates-Via: ws://localhost:4443/.notifications
16
16
  ```
17
17
 
18
18
  ## Protocol
19
19
 
20
20
  ```
21
21
  Server: protocol solid-0.1
22
- Client: sub http://localhost:3000/alice/public/data.json
23
- Server: ack http://localhost:3000/alice/public/data.json
24
- Server: pub http://localhost:3000/alice/public/data.json (on change)
22
+ Client: sub http://localhost:4443/alice/public/data.json
23
+ Server: ack http://localhost:4443/alice/public/data.json
24
+ Server: pub http://localhost:4443/alice/public/data.json (on change)
25
25
  ```
26
26
 
27
27
  ## How It Works
package/docs/payments.md CHANGED
@@ -11,30 +11,55 @@ Any resource can be payment-gated by adding a `PaymentCondition` to its ACL:
11
11
 
12
12
  ```json
13
13
  {
14
- "@context": { "acl": "http://www.w3.org/ns/auth/acl#" },
15
- "@graph": [{
16
- "@type": "acl:Authorization",
17
- "acl:agentClass": { "@id": "acl:AuthenticatedAgent" },
18
- "acl:accessTo": { "@id": "/premium/article.jsonld" },
19
- "acl:mode": [{ "@id": "acl:Read" }],
20
- "acl:condition": {
21
- "@type": "PaymentCondition",
22
- "amount": "1000",
23
- "currency": "sats"
24
- }
25
- }]
14
+ "@type": "acl:Authorization",
15
+ "acl:agentClass": { "@id": "acl:AuthenticatedAgent" },
16
+ "acl:accessTo": { "@id": "/premium/article.jsonld" },
17
+ "acl:mode": [{ "@id": "acl:Read" }],
18
+ "acl:condition": {
19
+ "@type": "PaymentCondition",
20
+ "amount": "1000",
21
+ "currency": "sats"
22
+ }
26
23
  }
27
24
  ```
28
25
 
29
26
  When a client requests the resource:
30
27
 
31
28
  1. Server evaluates the ACL and finds the `PaymentCondition`
32
- 2. Server responds with `402 Payment Required` and payment details in the body
33
- 3. Client completes payment and retries with proof
34
- 4. Server verifies and grants access
29
+ 2. Server checks the agent's balance in the webledger
30
+ 3. If balance >= cost — deducts and serves the resource (200)
31
+ 4. If balance < cost — responds with `402 Payment Required` and payment details
32
+
33
+ To fund their balance, users deposit via the `/pay/.deposit` endpoint using a TXO URI (currently testnet4 for development). The balance is tracked in the webledger at `/.well-known/webledgers/webledgers.json`.
35
34
 
36
35
  **Design: fail-closed** — if the server encounters a condition type it doesn't support, access is denied. Unsupported conditions are never silently ignored.
37
36
 
37
+ #### Quick Demo
38
+
39
+ ```bash
40
+ # Start JSS with payments (testnet4 by default)
41
+ jss start --pay --pay-cost 10
42
+
43
+ # Create an article and payment-gated ACL
44
+ curl -X PUT http://localhost:4443/premium/article.jsonld \
45
+ -H "Content-Type: application/ld+json" \
46
+ -d '{"@type": "Article", "headline": "Premium Content"}'
47
+
48
+ curl -X PUT http://localhost:4443/premium/article.jsonld.acl \
49
+ -H "Content-Type: application/ld+json" \
50
+ -d '{"@type":"acl:Authorization","acl:agent":{"@id":"did:nostr:YOUR_PUBKEY"},"acl:accessTo":{"@id":"/premium/article.jsonld"},"acl:mode":[{"@id":"acl:Read"}],"acl:condition":{"@type":"PaymentCondition","amount":"10","currency":"sats"}}'
51
+
52
+ # Try to read → 402 Payment Required
53
+ curl -H "Authorization: Nostr <nip98-token>" http://localhost:4443/premium/article.jsonld
54
+
55
+ # Deposit testnet4 sats
56
+ curl -X POST -H "Authorization: Nostr <nip98-token>" \
57
+ http://localhost:4443/pay/.deposit -d 'txo:tbtc4:txid:vout'
58
+
59
+ # Try again → 200 OK + article
60
+ curl -H "Authorization: Nostr <nip98-token>" http://localhost:4443/premium/article.jsonld
61
+ ```
62
+
38
63
  ### Pay Route (Full Backend)
39
64
 
40
65
  Monetize API endpoints with per-request satoshi payments. Resources under `/pay/*` require NIP-98 authentication and a positive balance.
@@ -72,26 +97,26 @@ jss start --pay --pay-cost 10 --pay-address your-address --pay-token PODS --pay-
72
97
 
73
98
  ```bash
74
99
  # Check balance
75
- curl -H "Authorization: Nostr <base64-event>" http://localhost:3000/pay/.balance
100
+ curl -H "Authorization: Nostr <base64-event>" http://localhost:4443/pay/.balance
76
101
 
77
102
  # Deposit (post a confirmed transaction output)
78
103
  curl -X POST -H "Authorization: Nostr <base64-event>" \
79
- http://localhost:3000/pay/.deposit \
104
+ http://localhost:4443/pay/.deposit \
80
105
  -d "txid:vout"
81
106
 
82
107
  # Access paid resource
83
- curl -H "Authorization: Nostr <base64-event>" http://localhost:3000/pay/my-resource
108
+ curl -H "Authorization: Nostr <base64-event>" http://localhost:4443/pay/my-resource
84
109
 
85
110
  # Buy tokens with sat balance
86
111
  curl -X POST -H "Authorization: Nostr <base64-event>" \
87
112
  -H "Content-Type: application/json" \
88
- http://localhost:3000/pay/.buy \
113
+ http://localhost:4443/pay/.buy \
89
114
  -d '{"amount": 100}'
90
115
 
91
116
  # Withdraw entire balance as portable tokens
92
117
  curl -X POST -H "Authorization: Nostr <base64-event>" \
93
118
  -H "Content-Type: application/json" \
94
- http://localhost:3000/pay/.withdraw \
119
+ http://localhost:4443/pay/.withdraw \
95
120
  -d '{"all": true}'
96
121
  ```
97
122
 
@@ -115,17 +140,17 @@ Deposits detect the chain from the TXO URI prefix (`txo:tbtc3:txid:vout`). Each
115
140
  # Add liquidity
116
141
  curl -X POST -H "Authorization: Nostr <token>" \
117
142
  -H "Content-Type: application/json" \
118
- http://localhost:3000/pay/.pool \
143
+ http://localhost:4443/pay/.pool \
119
144
  -d '{"action": "add-liquidity", "tbtc3": 1000, "tbtc4": 5000}'
120
145
 
121
146
  # Swap
122
147
  curl -X POST -H "Authorization: Nostr <token>" \
123
148
  -H "Content-Type: application/json" \
124
- http://localhost:3000/pay/.pool \
149
+ http://localhost:4443/pay/.pool \
125
150
  -d '{"action": "swap", "sell": "tbtc3", "amount": 100}'
126
151
 
127
152
  # Check pool state
128
- curl http://localhost:3000/pay/.pool
153
+ curl http://localhost:4443/pay/.pool
129
154
  ```
130
155
 
131
156
  Supported chains: `btc`, `tbtc3`, `tbtc4`, `ltc`, `signet`.
package/docs/remotestorage.md CHANGED
@@ -11,7 +11,7 @@ jss start --activitypub --idp
11
11
  remoteStorage clients discover the storage endpoint via WebFinger:
12
12
 
13
13
  ```bash
14
- curl "http://localhost:3000/.well-known/webfinger?resource=acct:me@localhost:3000"
14
+ curl "http://localhost:4443/.well-known/webfinger?resource=acct:me@localhost:4443"
15
15
  ```
16
16
 
17
17
  The response includes a `remotestorage` link relation pointing to `/storage/me/`.
@@ -38,21 +38,21 @@ The response includes a `remotestorage` link relation pointing to `/storage/me/`
38
38
 
39
39
  ```bash
40
40
  # Write a file (needs Bearer token from OAuth flow)
41
- curl -X PUT http://localhost:3000/storage/me/documents/hello.txt \
41
+ curl -X PUT http://localhost:4443/storage/me/documents/hello.txt \
42
42
  -H "Authorization: Bearer YOUR_TOKEN" \
43
43
  -H "Content-Type: text/plain" \
44
44
  -d "Hello, remoteStorage!"
45
45
 
46
46
  # Read it back
47
47
  curl -H "Authorization: Bearer YOUR_TOKEN" \
48
- http://localhost:3000/storage/me/documents/hello.txt
48
+ http://localhost:4443/storage/me/documents/hello.txt
49
49
 
50
50
  # List a folder
51
51
  curl -H "Authorization: Bearer YOUR_TOKEN" \
52
- http://localhost:3000/storage/me/documents/
52
+ http://localhost:4443/storage/me/documents/
53
53
 
54
54
  # Read from public folder (no auth needed)
55
- curl http://localhost:3000/storage/me/public/readme.txt
55
+ curl http://localhost:4443/storage/me/public/readme.txt
56
56
  ```
57
57
 
58
58
  ### Linking Nostr to WebID (did:nostr)
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "javascript-solid-server",
3
- "version": "0.0.122",
3
+ "version": "0.0.124",
4
4
  "description": "A minimal, fast Solid server",
5
5
  "main": "src/index.js",
6
6
  "type": "module",
package/scripts/demo-402.sh CHANGED
@@ -1,8 +1,8 @@
1
1
  #!/bin/bash
2
2
  # Demo: HTTP 402 Payment-Gated Article
3
- # Requires: JSS running on localhost:3000 with --pay --pay-cost 10
3
+ # Requires: JSS running on localhost:4443 with --pay --pay-cost 10
4
4
 
5
- BASE="http://localhost:3000"
5
+ BASE="http://localhost:4443"
6
6
 
7
7
  echo "=== Setting up payment-gated article demo ==="
8
8
 
package/src/config.js CHANGED
@@ -16,7 +16,7 @@ import path from 'path';
16
16
  */
17
17
  export const defaults = {
18
18
  // Server
19
- port: 3000,
19
+ port: 4443,
20
20
  host: '0.0.0.0',
21
21
  root: './data',
22
22
 
package/src/handlers/container.js CHANGED
@@ -165,12 +165,12 @@ export async function createPodStructure(name, webId, podUri, issuer, defaultQuo
165
165
  const podPath = `/${name}/`;
166
166
 
167
167
  // Create pod directory structure
168
- // Uses 'Settings' (capital S) for mashlib compatibility
168
+ // Pod settings directory
169
169
  await storage.createContainer(podPath);
170
170
  await storage.createContainer(`${podPath}inbox/`);
171
171
  await storage.createContainer(`${podPath}public/`);
172
172
  await storage.createContainer(`${podPath}private/`);
173
- await storage.createContainer(`${podPath}Settings/`);
173
+ await storage.createContainer(`${podPath}settings/`);
174
174
  await storage.createContainer(`${podPath}profile/`);
175
175
 
176
176
  // Generate and write WebID profile at /profile/card (standard Solid location)
@@ -179,14 +179,14 @@ export async function createPodStructure(name, webId, podUri, issuer, defaultQuo
179
179
 
180
180
  // Generate and write preferences (mashlib-compatible paths)
181
181
  const prefs = generatePreferences({ webId, podUri });
182
- await storage.write(`${podPath}Settings/Preferences.ttl`, serialize(prefs));
182
+ await storage.write(`${podPath}settings/Preferences.ttl`, serialize(prefs));
183
183
 
184
184
  // Generate and write type indexes with .ttl extension for mashlib
185
- const publicTypeIndex = generateTypeIndex(`${podUri}Settings/publicTypeIndex.ttl`);
186
- await storage.write(`${podPath}Settings/publicTypeIndex.ttl`, serialize(publicTypeIndex));
185
+ const publicTypeIndex = generateTypeIndex(`${podUri}settings/publicTypeIndex.ttl`);
186
+ await storage.write(`${podPath}settings/publicTypeIndex.ttl`, serialize(publicTypeIndex));
187
187
 
188
- const privateTypeIndex = generateTypeIndex(`${podUri}Settings/privateTypeIndex.ttl`);
189
- await storage.write(`${podPath}Settings/privateTypeIndex.ttl`, serialize(privateTypeIndex));
188
+ const privateTypeIndex = generateTypeIndex(`${podUri}settings/privateTypeIndex.ttl`);
189
+ await storage.write(`${podPath}settings/privateTypeIndex.ttl`, serialize(privateTypeIndex));
190
190
 
191
191
  // Create default ACL files
192
192
  // Pod root: owner full control, public read
@@ -197,9 +197,9 @@ export async function createPodStructure(name, webId, podUri, issuer, defaultQuo
197
197
  const privateAcl = generatePrivateAcl(`${podUri}private/`, webId);
198
198
  await storage.write(`${podPath}private/.acl`, serializeAcl(privateAcl));
199
199
 
200
- // Settings folder: owner only
201
- const settingsAcl = generatePrivateAcl(`${podUri}Settings/`, webId);
202
- await storage.write(`${podPath}Settings/.acl`, serializeAcl(settingsAcl));
200
+ // settings folder: owner only
201
+ const settingsAcl = generatePrivateAcl(`${podUri}settings/`, webId);
202
+ await storage.write(`${podPath}settings/.acl`, serializeAcl(settingsAcl));
203
203
 
204
204
  // Inbox: owner full, public append
205
205
  const inboxAcl = generateInboxAcl(`${podUri}inbox/`, webId);
package/src/server.js CHANGED
@@ -571,7 +571,7 @@ export function createServer(options = {}) {
571
571
  await storage.createContainer('/inbox/');
572
572
  await storage.createContainer('/public/');
573
573
  await storage.createContainer('/private/');
574
- await storage.createContainer('/Settings/');
574
+ await storage.createContainer('/settings/');
575
575
  await storage.createContainer('/profile/');
576
576
 
577
577
  // Generate profile
@@ -580,13 +580,13 @@ export function createServer(options = {}) {
580
580
 
581
581
  // Preferences and type indexes
582
582
  const prefs = generatePreferences({ webId, podUri });
583
- await storage.write('/Settings/Preferences.ttl', serialize(prefs));
583
+ await storage.write('/settings/Preferences.ttl', serialize(prefs));
584
584
 
585
- const publicTypeIndex = generateTypeIndex(`${podUri}Settings/publicTypeIndex.ttl`);
586
- await storage.write('/Settings/publicTypeIndex.ttl', serialize(publicTypeIndex));
585
+ const publicTypeIndex = generateTypeIndex(`${podUri}settings/publicTypeIndex.ttl`);
586
+ await storage.write('/settings/publicTypeIndex.ttl', serialize(publicTypeIndex));
587
587
 
588
- const privateTypeIndex = generateTypeIndex(`${podUri}Settings/privateTypeIndex.ttl`);
589
- await storage.write('/Settings/privateTypeIndex.ttl', serialize(privateTypeIndex));
588
+ const privateTypeIndex = generateTypeIndex(`${podUri}settings/privateTypeIndex.ttl`);
589
+ await storage.write('/settings/privateTypeIndex.ttl', serialize(privateTypeIndex));
590
590
 
591
591
  // ACL files
592
592
  const rootAcl = generateOwnerAcl(podUri, webId, true);
@@ -595,8 +595,8 @@ export function createServer(options = {}) {
595
595
  const privateAcl = generatePrivateAcl(`${podUri}private/`, webId);
596
596
  await storage.write('/private/.acl', serializeAcl(privateAcl));
597
597
 
598
- const settingsAcl = generatePrivateAcl(`${podUri}Settings/`, webId);
599
- await storage.write('/Settings/.acl', serializeAcl(settingsAcl));
598
+ const settingsAcl = generatePrivateAcl(`${podUri}settings/`, webId);
599
+ await storage.write('/settings/.acl', serializeAcl(settingsAcl));
600
600
 
601
601
  const inboxAcl = generateInboxAcl(`${podUri}inbox/`, webId);
602
602
  await storage.write('/inbox/.acl', serializeAcl(inboxAcl));
package/src/webid/profile.js CHANGED
@@ -45,9 +45,9 @@ export function generateProfileJsonLd({ webId, name, podUri, issuer }) {
45
45
  'inbox': `${pod}inbox/`,
46
46
  'storage': pod,
47
47
  'oidcIssuer': issuer,
48
- 'preferencesFile': `${pod}Settings/Preferences.ttl`,
49
- 'publicTypeIndex': `${pod}Settings/publicTypeIndex.ttl`,
50
- 'privateTypeIndex': `${pod}Settings/privateTypeIndex.ttl`
48
+ 'preferencesFile': `${pod}settings/Preferences.ttl`,
49
+ 'publicTypeIndex': `${pod}settings/publicTypeIndex.ttl`,
50
+ 'privateTypeIndex': `${pod}settings/privateTypeIndex.ttl`
51
51
  };
52
52
  }
53
53
 
@@ -133,7 +133,7 @@ function escapeHtml(str) {
133
133
 
134
134
  /**
135
135
  * Generate preferences file as JSON-LD
136
- * Uses mashlib-compatible paths (Settings/Preferences.ttl)
136
+ * Uses mashlib-compatible paths (settings/Preferences.ttl)
137
137
  * @param {object} options
138
138
  * @param {string} options.webId - Full WebID URI
139
139
  * @param {string} options.podUri - Pod root URI
@@ -149,9 +149,9 @@ export function generatePreferences({ webId, podUri }) {
149
149
  'publicTypeIndex': { '@id': 'solid:publicTypeIndex', '@type': '@id' },
150
150
  'privateTypeIndex': { '@id': 'solid:privateTypeIndex', '@type': '@id' }
151
151
  },
152
- '@id': `${pod}Settings/Preferences.ttl`,
153
- 'publicTypeIndex': `${pod}Settings/publicTypeIndex.ttl`,
154
- 'privateTypeIndex': `${pod}Settings/privateTypeIndex.ttl`
152
+ '@id': `${pod}settings/Preferences.ttl`,
153
+ 'publicTypeIndex': `${pod}settings/publicTypeIndex.ttl`,
154
+ 'privateTypeIndex': `${pod}settings/privateTypeIndex.ttl`
155
155
  };
156
156
  }
157
157
 
package/test/pod.test.js CHANGED
@@ -96,7 +96,7 @@ describe('Pod Lifecycle', () => {
96
96
  assertStatus(priv, 200);
97
97
 
98
98
  // Check Settings exists (needs auth)
99
- const settings = await request('/carol/Settings/', { auth: 'carol' });
99
+ const settings = await request('/carol/settings/', { auth: 'carol' });
100
100
  assertStatus(settings, 200);
101
101
  });
102
102
 
@@ -104,15 +104,15 @@ describe('Pod Lifecycle', () => {
104
104
  await createTestPod('dan');
105
105
 
106
106
  // Check Preferences.ttl (needs auth - Settings is private)
107
- const prefs = await request('/dan/Settings/Preferences.ttl', { auth: 'dan' });
107
+ const prefs = await request('/dan/settings/Preferences.ttl', { auth: 'dan' });
108
108
  assertStatus(prefs, 200);
109
109
 
110
110
  // Check public type index (needs auth)
111
- const pubIndex = await request('/dan/Settings/publicTypeIndex.ttl', { auth: 'dan' });
111
+ const pubIndex = await request('/dan/settings/publicTypeIndex.ttl', { auth: 'dan' });
112
112
  assertStatus(pubIndex, 200);
113
113
 
114
114
  // Check private type index (needs auth)
115
- const privIndex = await request('/dan/Settings/privateTypeIndex.ttl', { auth: 'dan' });
115
+ const privIndex = await request('/dan/settings/privateTypeIndex.ttl', { auth: 'dan' });
116
116
  assertStatus(privIndex, 200);
117
117
  });
118
118
  });