- Jottit
- Put your ideas on the web
- Create a page
- {% if not signed_in %}
- no sign-up required
+
+
+
+
+ How it works
+ Write. Publish. Share.
+
+
+
1
+
Write in markdown
+
A clean split editor. Your markdown on the left, live preview on the right.
+
+
+
2
+
Hit publish
+
One click. Your page is live at jottit.org/your-slug with beautiful typography.
+
+
+
3
+
Share the URL
+
That's it. No setup, no config. Just a URL that looks great on any device.
+
+
+
+
+
+
+ For AI agents
+ Your agent can write too
+
+
Connect Claude, ChatGPT, or any MCP-compatible agent. They create and edit pages directly.
+
# In Claude Desktop, add Jottit as an MCP server
+# Then just ask:
+
+"Save my insights about distributed systems to Jottit"
+
+# Your agent creates a page, you refine it, share when ready.
+
+
+
{% include "_footer.html" %}
+ Private
Unlisted
Listed
Pinned
diff --git a/templates/profile.html b/templates/profile.html
index 7c181f2..dc1f3bf 100644
--- a/templates/profile.html
+++ b/templates/profile.html
@@ -9,6 +9,7 @@
{% block body %}
{% include "_site_header.html" %}
+{% if not checklist %}
-
{% endblock %}
diff --git a/tests/test_api.py b/tests/test_api.py
index 9b43e53..4a67e20 100644
--- a/tests/test_api.py
+++ b/tests/test_api.py
@@ -62,6 +62,62 @@ def test_get_user_profile_not_found(client):
assert r.status_code == 404
+def test_agent_setup(client):
+ _, token = _setup_user_with_token()
+ r = client.get("/api/v1/agent-setup", headers=_auth(token))
+ assert r.status_code == 200
+ data = r.get_json()
+ assert "welcome" in data
+ assert "endpoints" in data
+ assert "create_page" in data["endpoints"]
+ assert "@" in data["welcome"]
+
+
+def test_agent_setup_includes_philosophy_and_workflow(client):
+ _, token = _setup_user_with_token()
+ r = client.get("/api/v1/agent-setup", headers=_auth(token))
+ data = r.get_json()
+ assert "philosophy" in data
+ assert "workflow" in data
+ assert "when_to_create" in data["workflow"]
+ assert "when_to_update" in data["workflow"]
+ assert data["workflow"]["default_visibility"] == "private"
+ assert "conventions" in data
+
+
+def test_agent_setup_conventions_include_agents_content(client):
+ user_id, token = _setup_user_with_token()
+ save_page("AGENTS", "# Agents\n\nBe concise.", "unlisted", user_id)
+ r = client.get("/api/v1/agent-setup", headers=_auth(token))
+ data = r.get_json()
+ agents = data["conventions"]["special_pages"]["AGENTS"]
+ assert agents["content"] == "# Agents\n\nBe concise."
+
+
+def test_agent_setup_conventions_empty_without_agents(client):
+ _, token = _setup_user_with_token()
+ r = client.get("/api/v1/agent-setup", headers=_auth(token))
+ data = r.get_json()
+ assert "AGENTS" in data["conventions"]["special_pages"]
+ assert "content" not in data["conventions"]["special_pages"]["AGENTS"]
+
+
+def test_agent_setup_visibility_states_correct(client):
+ _, token = _setup_user_with_token()
+ r = client.get("/api/v1/agent-setup", headers=_auth(token))
+ data = r.get_json()
+ body = data["endpoints"]["create_page"]["body"]
+ assert "private" in body["visibility"]
+ assert "unlisted" in body["visibility"]
+ assert "listed" in body["visibility"]
+ assert "pinned" in body["visibility"]
+
+
+def test_agent_setup_requires_auth(client):
+ r = client.get("/api/v1/agent-setup")
+ assert r.status_code == 401
+
+
def test_create_page(client):
_, token = _setup_user_with_token()
r = client.post(
@@ -73,7 +129,7 @@ def test_create_page(client):
data = r.get_json()
assert data["title"] == "My Page"
assert data["content"] == "# My Page\n\nHello world"
- assert data["visibility"] == "unlisted"
+ assert data["visibility"] == "private"
def test_create_page_with_custom_slug(client):
diff --git a/tests/test_auth.py b/tests/test_auth.py
index e27f980..a05369a 100644
--- a/tests/test_auth.py
+++ b/tests/test_auth.py
@@ -390,12 +390,10 @@ def test_signin_page(client):
# Sign-in with unknown email is rejected
-def test_signin_rejects_unknown_email(client):
+def test_signin_accepts_unknown_email_for_signup(client):
r = client.post("/signin", data={"email": "nobody@example.com"})
- assert r.status_code == 200
- assert b"Email not found" in r.data
- assert b"Create a page" in r.data
- assert b"Try another email" in r.data
+ assert r.status_code == 302
+ assert "/signin/verify" in r.headers["Location"]
# Full sign-in: submit email, verify code, session contains user_id
@@ -414,7 +412,7 @@ def test_signin_full_flow(client):
r = client.post("/signin/verify", data={"code": code, "email": "user@example.com"})
assert r.status_code == 302
- assert r.headers["Location"] == "/"
+ assert r.headers["Location"] == "/setup/username"
with client.session_transaction() as sess:
assert "user_id" in sess
@@ -434,6 +432,73 @@ def test_signin_with_username_redirects_to_profile(client):
assert r.headers["Location"] == "/@signinuser"
+# Full signup: new email, verify code, pick username, land on profile
+def test_signup_full_flow(client):
+ r = client.post("/signin", data={"email": "newuser@example.com"})
+ assert r.status_code == 302
+
+ code = create_verification_code("newuser@example.com", "signin")
+ r = client.post(
+ "/signin/verify", data={"code": code, "email": "newuser@example.com"}
+ )
+ assert r.status_code == 302
+ assert r.headers["Location"] == "/setup/username"
+
+ r = client.get("/setup/username")
+ assert r.status_code == 200
+
+ r = client.post("/setup/username", data={"username": "newuser"})
+ assert r.status_code == 302
+ assert r.headers["Location"] == "/setup/profile"
+
+ r = client.get("/setup/profile")
+ assert r.status_code == 200
+
+ r = client.post("/setup/profile", data={"name": "New User"})
+ assert r.status_code == 302
+ assert r.headers["Location"] == "/@newuser"
+
+
+def test_setup_profile_skip(client):
+ user_id = find_or_create_user("skipper@example.com")
+ set_user_username(user_id, "skipper")
+ with client.session_transaction() as sess:
+ sess["user_id"] = user_id
+
+ r = client.get("/@skipper")
+ assert r.status_code == 200
+
+
+def test_setup_username_requires_signin(client):
+ r = client.get("/setup/username")
+ assert r.status_code == 302
+ assert "/signin" in r.headers["Location"]
+
+
+def test_setup_username_rejects_taken(client):
+ user_id = find_or_create_user("existing@example.com")
+ set_user_username(user_id, "taken")
+
+ new_id = find_or_create_user("newperson@example.com")
+ with client.session_transaction() as sess:
+ sess["user_id"] = new_id
+
+ r = client.post("/setup/username", data={"username": "taken"})
+ assert r.status_code == 200
+ assert b"already taken" in r.data
+
+
+def test_setup_username_skips_if_already_set(client):
+ user_id = find_or_create_user("hasname@example.com")
+ set_user_username(user_id, "hasname")
+ with client.session_transaction() as sess:
+ sess["user_id"] = user_id
+
+ r = client.get("/setup/username")
+ assert r.status_code == 302
+ assert "/@hasname" in r.headers["Location"]
+
+
# Invalid sign-in code shows an error
def test_signin_invalid_code(client):
find_or_create_user("user@example.com")
@@ -471,28 +536,16 @@ def test_homepage_shows_signin_when_logged_out(client):
assert b"Sign in" in r.data
-# Logged-in homepage shows settings link instead of sign in
+# Logged-in homepage shows avatar instead of sign in
def test_homepage_shows_avatar_when_logged_in(client):
user_id = find_or_create_user("logged@example.com")
with client.session_transaction() as sess:
sess["user_id"] = user_id
r = client.get("/")
- assert b"/settings" in r.data
+ assert b"Markdown pages for humans and agents" in r.data
assert b"Sign in" not in r.data
-
-
-# -- Homepage pages list --
-
-
-# Homepage doesn't show a "My pages" link
-def test_homepage_no_my_pages_link(client):
- user_id = find_or_create_user("pages@example.com")
- with client.session_transaction() as sess:
- sess["user_id"] = user_id
-
- r = client.get("/")
- assert b"My pages" not in r.data
+ assert b"home-header-avatar-link" in r.data
# -- Auto-claim for signed-in users --
diff --git a/tests/test_pages.py b/tests/test_pages.py
index 647b306..c3ea290 100644
--- a/tests/test_pages.py
+++ b/tests/test_pages.py
@@ -266,7 +266,7 @@ def test_homepage_logged_out_shows_landing(client):
r = client.get("/")
body = r.data.decode()
assert "tab--active" not in body
- assert "Create a page" in body
+ assert "Sign up for Jottit" in body
# /pages requires sign-in
diff --git a/tests/test_revisions.py b/tests/test_revisions.py
index e73cd88..f006aa4 100644
--- a/tests/test_revisions.py
+++ b/tests/test_revisions.py
@@ -62,6 +62,19 @@ def test_view_revision_nonexistent(client):
assert r.status_code == 404
+# Private page revision is not accessible to non-owners
+def test_view_revision_private_blocked(client):
+ from db import find_or_create_user, set_user_username
+
+ user_id = find_or_create_user("revpriv@test.com")
+ set_user_username(user_id, "revprivuser")
+ save_page("secretrev", "# Secret\n\nHidden content", "private", user_id)
+ with client.session_transaction() as sess:
+ sess.clear()
+ r = client.get("/@revprivuser/secretrev/history/1")
+ assert r.status_code == 404
+
+
# -- Change descriptions --
diff --git a/tests/test_subdomain.py b/tests/test_subdomain.py
index 760ef64..9cd1b28 100644
--- a/tests/test_subdomain.py
+++ b/tests/test_subdomain.py
@@ -116,11 +116,21 @@ def test_old_slug_redirects_unclaimed_page(client):
# -- Visibility --
-# New pages default to "listed" visibility (via create_user_with_username)
-def test_visibility_default_is_listed(client):
- user_id = create_user_with_username(client, "list1@example.com", "listuser1", "lp1")
- page_meta = get_page_meta("lp1", user_id)
- assert page_meta["visibility"] == "listed"
+# New pages by signed-in users default to "private" visibility
+def test_visibility_default_is_private(client):
+ from db import find_or_create_user, set_user_username
+
+ user_id = find_or_create_user("list1@example.com")
+ set_user_username(user_id, "listuser1")
+ with client.session_transaction() as sess:
+ sess["user_id"] = user_id
+ client.post(
+ "/@listuser1/newpage/edit",
+ data={"content": "# Test\n\nContent"},
+ )
+ page_meta = get_page_meta("newpage", user_id)
+ assert page_meta is not None
+ assert page_meta["visibility"] == "private"
# Owner can change a page's visibility to "unlisted"
@@ -134,6 +144,51 @@ def test_update_visibility(client):
assert page_meta["visibility"] == "unlisted"
+# Private pages are blocked for non-owners
+def test_private_page_blocked_for_non_owner(client):
+ from db import update_page_visibility
+
+ user_id = create_user_with_username(
+ client, "priv@example.com", "privuser", "privpage"
+ )
+ page_meta = get_page_meta("privpage", user_id)
+ update_page_visibility(page_meta["id"], "private")
+ with client.session_transaction() as sess:
+ sess.clear()
+ r = client.get("/@privuser/privpage")
+ assert r.status_code == 404
+
+
+# Private pages are accessible to the owner
+def test_private_page_accessible_for_owner(client):
+ from db import update_page_visibility
+
+ user_id = create_user_with_username(
+ client, "privo@example.com", "privowner", "privownpage"
+ )
+ page_meta = get_page_meta("privownpage", user_id)
+ update_page_visibility(page_meta["id"], "private")
+ with client.session_transaction() as sess:
+ sess["user_id"] = user_id
+ r = client.get("/@privowner/privownpage")
+ assert r.status_code == 200
+
+
+# Private pages don't appear on the profile for visitors
+def test_private_page_hidden_from_profile(client):
+ from db import update_page_visibility
+
+ user_id = create_user_with_username(
+ client, "privh@example.com", "privhidden", "privhpage"
+ )
+ page_meta = get_page_meta("privhpage", user_id)
+ update_page_visibility(page_meta["id"], "private")
+ with client.session_transaction() as sess:
+ sess.clear()
+ r = client.get("/@privhidden")
+ assert b"privhpage" not in r.data
+
+
# Unlisted pages don't appear on the profile homepage
def test_unlisted_page_hidden_from_profile(client):
user_id = create_user_with_username(client, "list3@example.com", "listuser3", "lp3")
@@ -286,3 +341,47 @@ def test_subdomain_redirects_to_profile(client):
r = client.get("/lp1", headers={"Host": "legacyuser.jottit.localhost:8000"})
assert r.status_code == 301
assert "/@legacyuser" in r.headers["Location"]
+
+
+# INDEX.md: page with slug "index" renders as profile content
+def test_index_page_renders_on_profile(client):
+ user_id = find_or_create_user("idx@example.com")
+ set_user_username(user_id, "idxuser")
+ save_page("index", "# Welcome\n\nThis is my profile.", "listed")
+ page_meta = get_page_meta("index")
+ claim_page(page_meta["id"], user_id)
+ r = client.get("/@idxuser")
+ assert r.status_code == 200
+ assert b"This is my profile" in r.data
+
+
+# INDEX.md: private index page visible to owner but not visitors
+def test_index_page_private_hidden_from_visitors(client):
+ from db import update_page_visibility
+
+ user_id = find_or_create_user("idxp@example.com")
+ set_user_username(user_id, "idxpriv")
+ save_page("index", "# Secret\n\nPrivate index.", "listed")
+ page_meta = get_page_meta("index")
+ claim_page(page_meta["id"], user_id)
+ update_page_visibility(page_meta["id"], "private")
+ with client.session_transaction() as sess:
+ sess.clear()
+ r = client.get("/@idxpriv")
+ assert b"Private index" not in r.data
+
+
+# INDEX.md: private index page visible to owner
+def test_index_page_private_visible_to_owner(client):
+ from db import update_page_visibility
+
+ user_id = find_or_create_user("idxo@example.com")
+ set_user_username(user_id, "idxown")
+ save_page("index", "# My Index\n\nOwner sees this.", "listed")
+ page_meta = get_page_meta("index")
+ claim_page(page_meta["id"], user_id)
+ update_page_visibility(page_meta["id"], "private")
+ with client.session_transaction() as sess:
+ sess["user_id"] = user_id
+ r = client.get("/@idxown")
+ assert b"Owner sees this" in r.data
{% elif owner_initials %}{{ owner_initials }}{% endif %}
+ {% else %}
+ Already have an account? Sign in
{% endif %}
+