From 8cb5749cc97d3063e011b4484afff8b2a2fccd1e Mon Sep 17 00:00:00 2001 From: Jacques HULLU Date: Wed, 20 May 2026 19:53:06 +0200 Subject: [PATCH 1/5] fix(api): enable utoipa-swagger-ui reqwest feature for Windows cross-compile MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit utoipa-swagger-ui 7.1.0 build.rs has a host-vs-target cfg mismatch: when cross-compiling from Linux to Windows, the runtime branch picks the (target_os=windows) download path, but the inner cfg-gated block is evaluated on the host, so it's excluded — Ok(()) returns without downloading, then the later File::open panics with NotFound. Enabling the reqwest feature forces the host-side cfg to include the download code regardless of target. Native Linux/macOS builds keep working as before. Co-Authored-By: Claude Opus 4.7 (1M context) --- server/api/Cargo.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/api/Cargo.toml b/server/api/Cargo.toml index e7ebbcb..b2da916 100644 --- a/server/api/Cargo.toml +++ b/server/api/Cargo.toml @@ -27,7 +27,7 @@ hex = "0.4" rust-embed = { version = "8", features = ["mime-guess", "interpolate-folder-path"] } mime_guess = "2" utoipa = { version = "4", features = ["axum_extras"] } -utoipa-swagger-ui = { version = "7", features = ["axum"] } +utoipa-swagger-ui = { version = "7", features = ["axum", "reqwest"] } anyhow = "1" sha2 = "0.10" tracing = "0.1" From 8e33e129483cee44a9eaeb63315320be32586dcc Mon Sep 17 00:00:00 2001 From: Jacques HULLU Date: Thu, 21 May 2026 00:01:36 +0200 Subject: [PATCH 2/5] feat(website): add /status page and route SPA under /demo/ MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Restructure jot.mindlog.today routing: - / → marketing landing (clients/website) - /demo/ → Preact SPA (clients/web, base=/demo/) - /status → live health page (client-side pings /health, /, /mcp, /install.sh) - /oauth/callback → routed to SPA index so OAuth Code+PKCE lands in-app Bundles the str01 deploy tree (compose, nginx, build scripts) that was previously untracked. Co-Authored-By: Claude Opus 4.7 (1M context) --- clients/web/vite.config.ts | 1 + clients/website/index.html | 204 ++++++++++++-- clients/website/public/status.html | 281 +++++++++++++++++++ deploy/str01/README.md | 133 +++++++++ deploy/str01/docs/reconfigure-ttx-gateway.md | 56 ++++ deploy/str01/edge/docker-compose.yml | 24 ++ deploy/str01/edge/nginx.conf | 59 ++++ deploy/str01/jot/.env.example | 2 + deploy/str01/jot/Dockerfile.api | 62 ++++ deploy/str01/jot/Dockerfile.web | 36 +++ deploy/str01/jot/docker-compose.yml | 66 +++++ deploy/str01/jot/nginx/jot-proxy.inc | 9 + deploy/str01/jot/nginx/jot-web.conf | 81 ++++++ deploy/str01/scripts/bootstrap-cert.sh | 24 ++ deploy/str01/scripts/deploy-edge.sh | 30 ++ deploy/str01/scripts/deploy-jot.sh | 19 ++ deploy/str01/scripts/sync.sh | 29 ++ 17 files changed, 1099 insertions(+), 17 deletions(-) create mode 100644 clients/website/public/status.html create mode 100644 deploy/str01/README.md create mode 100644 deploy/str01/docs/reconfigure-ttx-gateway.md create mode 100644 deploy/str01/edge/docker-compose.yml create mode 100644 deploy/str01/edge/nginx.conf create mode 100644 deploy/str01/jot/.env.example create mode 100644 deploy/str01/jot/Dockerfile.api create mode 100644 deploy/str01/jot/Dockerfile.web create mode 100644 deploy/str01/jot/docker-compose.yml create mode 100644 deploy/str01/jot/nginx/jot-proxy.inc create mode 100644 deploy/str01/jot/nginx/jot-web.conf create mode 100755 deploy/str01/scripts/bootstrap-cert.sh create mode 100755 deploy/str01/scripts/deploy-edge.sh create mode 100755 deploy/str01/scripts/deploy-jot.sh create mode 100755 deploy/str01/scripts/sync.sh diff --git a/clients/web/vite.config.ts b/clients/web/vite.config.ts index 3dc247b..481d1f4 100644 --- a/clients/web/vite.config.ts +++ b/clients/web/vite.config.ts @@ -2,6 +2,7 @@ import { defineConfig } from "vite"; import preact from "@preact/preset-vite"; export default defineConfig({ + base: "/demo/", plugins: [preact()], build: { outDir: "dist", emptyOutDir: true }, }); diff --git a/clients/website/index.html b/clients/website/index.html index 7e4003c..3af7a0d 100644 --- a/clients/website/index.html +++ b/clients/website/index.html @@ -18,7 +18,11 @@
install + features + self-host downloads + demo + status github ENCRYPTED·ANONYMOUS·ONE BINARY

-
- - +
+
+ + +
+
+ + + + +
$ @@ -59,63 +71,221 @@

→ one command. one binary. zero setup.

    -
  • CLIjot add · list · share
    • +
  • CLIjot add · list · share · login
  • TUIjot tui
    • -
  • APIREST + WebSocket
    • +
  • APIREST + WebSocket · OAuth 2.1 + PKCE
  • SPAlocalhost:3000
    • +
  • MCP/mcp HTTP + jot-mcp stdio
  • AndroidFlutter + FFI beta
    • -
  • iOSsoon
    -
  • ver …
    • +
  • ver v0.1.0
  • license MIT
    • -
  • released …
    • +
  • released 2026-05-20
  • deps 0
    • -
  • platforms …
    • +
  • platforms 10
+
+
+

§01 what it does

+

universal encrypted notes. think digital post-its for hackers.

+
+ + +
+
+
01 end-to-end encrypted
+

AES-256-GCM per-note DEKs, X25519 key wrapping, HKDF-SHA-256. The server stores ciphertext only — your private key never leaves the device.

+
+ +
+
02 no email, no password
+

Identity is a local UUID + Ed25519 keypair generated on first run. Pair new devices with a QR code, a 4-digit code, or jot link <token>.

+
+ +
+
03 CLI · TUI · SPA · mobile
+

One binary serves the REST API and embeds the Preact web app. Drive it from the shell, the terminal UI, the browser, or the Android client.

+
+ +
+
04 blocks & backlinks
+

Notes are block trees with [[note]], ((block)) and #tag references. Journal view groups by day; todo view aggregates checkboxes; graph view renders backlinks.

+
+ +
+
05 mcp-native
+

Built-in MCP server at POST /mcp plus the jot-mcp stdio bridge. Claude Desktop, Claude Code and Cursor read & write your notes via OAuth.

+
+ +
+
06 oauth 2.1 + pkce
+

Authorization Code + PKCE + Dynamic Client Registration. Same tokens.json shared between CLI, SPA, mobile and the MCP bridge — auto-refresh built in.

+
+ +
+
07 share what you want
+

Per-note, per-board or per-block sharing with read / write / delete permissions. Recent contacts as quick-pick chips. Invites are one-shot tokens — no email required.

+
+ +
+
08 runs anywhere, owns nothing
+

SQLite + local blobs by default, S3-compatible (R2/MinIO/AWS) optional. Static musl binaries for Linux, native for macOS, Windows. Zero runtime deps.

+
+
+ + +

stack — Rust · Axum · SQLite · RustCrypto · Preact · Flutter

+ +
+ +
+
+

§02 self-host the server

+

one binary. sqlite + local blobs. zero deps. own your notes.

+
+ + +
    +
  1. +
    01 install jot-server
    + 
    $ curl -fsSL jot.mindlog.today/install.sh | sh -s -- --component server
    +

    Windows : $env:JOT_COMPONENT='server'; irm jot.mindlog.today/install.ps1 | iex

    +
    2. + +
  2. +
    02 start it
    + 
    $ jot-server serve --bind 0.0.0.0:3000
    +

    Generates an X25519 identity + Ed25519 keypair in ~/.local/share/jot/, applies migrations, prints the local device token. Add --open-registration for a public instance.

    +
    3. + +
  3. +
    03 open the SPA & log a client in
    + 
    $ open http://localhost:3000        # register via QR or invite
+$ jot login --server http://localhost:3000   # OAuth + PKCE
    +

    The CLI, TUI and jot-mcp share ~/.config/jot/tokens.json with auto-refresh.

    +
    4. + +
  4. +
    04 wire Claude Desktop / Code (optional)
    + 
    # ~/.config/Claude/claude_desktop_config.json
+{
+  "mcpServers": {
+    "jot": { "command": "jot-mcp" }
+  }
+}
    +

    The bridge proxies stdio ↔ POST /mcp and reuses your OAuth tokens. Tools exposed : list_boards, read_note, add_note, list_journal, list_todo, …

    +
    5. + +
  5. +
    05 add another device
    + 
    $ jot link-init                  # prints token + 4-digit code + QR URL
+$ jot link <token>               # on the new device
    +

    Or scan the QR from the SPA / Android app. The new device fetches the private key over the authenticated channel so end-to-end encryption stays seamless.

    +
    6. +
+ + + +
+ advanced — environment & storage +
    +
  • JOT_STORAGE=local (default) — blobs under ~/.local/share/jot/blobs/
    • +
  • JOT_STORAGE=s3 + standard AWS_* env — Cloudflare R2, MinIO, AWS S3
    • +
  • --legacy-device-tokens — keep the pre-OAuth device JWT path alive during migration
    • +
  • jot migrate — apply pending migrations without starting the server
    • +
  • jot-server openapi > openapi.json — dump the OpenAPI 3 spec
    • +
+
+ +
+
-

§01 downloads

+

§03 downloads

pre-built static binaries. pick a target.

+

jot — CLI / TUI

- + linux x86_64 · musl · — download ↓ - + linux arm64 · musl · — download ↓ - + windows x86_64 · .exe · — download ↓ - + android beta - arm64 · .apk · soon + arm64 · .apk · — + download ↓ + +
+ +

jot-server — API + SPA + MCP

+
+ + linux + x86_64 · musl · — + download ↓ + + + linux + arm64 · musl · — + download ↓ + + + windows + x86_64 · .exe · — + download ↓ + +
+ +

jot-mcp — stdio MCP bridge

+
+ + linux + x86_64 · musl · — + download ↓ + + + linux + arm64 · musl · — + download ↓ + + + windows + x86_64 · .exe · — download ↓
-

or build from source — cargo build --release -p cli

+

or build from source — cargo build --release