# pds.js

A zero-dependency AT Protocol Personal Data Server written in JavaScript, running on Cloudflare Workers with Durable Objects. Let's see how far we can get with just Web APIs.

> ⚠️ **Work in progress** - This is experimental. You probably shouldn't use this yet.

## Status

- [x] Repo operations (createRecord, getRecord, putRecord, deleteRecord, applyWrites, listRecords)
- [x] Sync endpoints (getRepo, getRecord, subscribeRepos, listRepos, getLatestCommit)
- [x] Auth (createSession, getSession)
- [x] Handle resolution (resolveHandle)
- [x] AppView proxy (app.bsky.* forwarding with service auth)
- [x] Relay notification (requestCrawl)
- [x] Single or multi-user (each DID gets isolated storage, no self-service signup yet)
- [ ] Blob storage (uploadBlob, getBlob, listBlobs)
- [ ] refreshSession
- [ ] deleteSession (logout)
- [ ] updateHandle
- [ ] importRepo
- [ ] OAuth
- [ ] Account management (createAccount, deleteAccount)
- [ ] Email verification
- [ ] Invite codes
- [ ] Admin/moderation
- [ ] Rate limiting

## Prerequisites

- Node.js 18+
- [shfmt](https://github.com/mvdan/sh) (optional, for `npm run format`)
  ```bash
  brew install shfmt
  ```

## Quick Start

```bash
npm install

# Create local dev config
cp .env.example .dev.vars
# Edit .dev.vars with your values

# Run locally
npm run dev
```

## Configuration

For local development, create `.dev.vars`:

```
PDS_PASSWORD=your-password
JWT_SECRET=your-secret
RELAY_HOST=https://bsky.network  # optional
```

For production, use Cloudflare secrets:

```bash
wrangler secret put PDS_PASSWORD
wrangler secret put JWT_SECRET
wrangler secret put RELAY_HOST  # optional
```

## Testing

```bash
npm test          # Unit tests
npm run test:e2e  # E2E tests (starts local server)
```

## Deploy

```bash
wrangler deploy
```

## Initialize

After deployment, run the setup script to register with PLC and initialize:

```bash
npm run setup -- --pds https://your-pds.workers.dev
```

This generates keys, registers your DID with the PLC directory, initializes the PDS, and saves credentials. Handle defaults to the worker hostname.