javascript-solid-server 0.0.124 → 0.0.125

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "javascript-solid-server",
-  "version": "0.0.124",
+  "version": "0.0.125",
   "description": "A minimal, fast Solid server",
   "main": "src/index.js",
   "type": "module",

package/src/wac/checker.js

@@ -163,15 +163,26 @@ async function checkAuthorizations(authorizations, targetUrl, agentWebId, requir
         c.type === 'PaymentCondition' || c.type === 'https://webacl.org/ns#PaymentCondition'
       );
       if (paymentCondition) {
-        // Check if agent has sufficient balance
-        const cost = parseInt(paymentCondition.amount, 10) || 0;
+        const parsed = parseInt(paymentCondition.amount, 10);
+        const cost = Number.isNaN(parsed) ? -1 : parsed;
         const currency = paymentCondition.currency || 'sat';
-        if (agentWebId && cost > 0) {
+
+        // Skip invalid amounts
+        if (cost < 0) continue;
+
+        if (agentWebId) {
           try {
             const ledger = await readLedger();
+
+            // Zero-cost gate: verify they have a ledger entry (have deposited at some point)
+            if (cost === 0) {
+              const hasEntry = ledger.entries?.some(e => e.url === agentWebId);
+              if (hasEntry) return { allowed: true };
+            }
+
+            // Paid access: check balance and deduct
             const balance = getBalance(ledger, agentWebId);
-            if (balance >= cost) {
-              // Deduct and grant access
+            if (cost > 0 && balance >= cost) {
               debit(ledger, agentWebId, cost, currency === 'sats' ? 'sat' : currency);
               const { writeLedger } = await import('../webledger.js');
               await writeLedger(ledger);

package/test/wac.test.js

@@ -428,6 +428,30 @@ describe('WAC Conditions', () => {
       assert.strictEqual(auths[0].conditions[0].type, 'UnknownFutureCondition');
     });
 
+    it('should parse zero-cost PaymentCondition', async () => {
+      const acl = {
+        '@context': { 'acl': 'http://www.w3.org/ns/auth/acl#' },
+        '@graph': [{
+          '@id': '#gate',
+          '@type': 'acl:Authorization',
+          'acl:agentClass': { '@id': 'acl:AuthenticatedAgent' },
+          'acl:accessTo': { '@id': 'https://alice.example/members/' },
+          'acl:mode': [{ '@id': 'acl:Read' }],
+          'acl:condition': {
+            '@type': 'PaymentCondition',
+            'amount': '0',
+            'currency': 'sats'
+          }
+        }]
+      };
+
+      const auths = await parseAcl(JSON.stringify(acl), 'https://alice.example/members/.acl');
+      const condition = auths[0].conditions[0];
+
+      assert.strictEqual(condition.type, 'PaymentCondition');
+      assert.strictEqual(condition.amount, '0');
+    });
+
     it('should parse PaymentCondition with all fields', async () => {
       const acl = {
         '@context': { 'acl': 'http://www.w3.org/ns/auth/acl#' },