From 3c4b71cc5f36c84da109b585595045ad49cca105 Mon Sep 17 00:00:00 2001
From: AJ ONeal <aj@daplie.com>
Date: Fri, 28 Jul 2017 17:26:02 -0600
Subject: [PATCH 1/6] rename package to walnut@daplie.com

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 55fb345..d1da1b4 100644
--- a/README.md
+++ b/README.md
@@ -126,7 +126,7 @@ Initialization
 needs to know its primary domain
 
 ```
-POST https://api.<domain.tld>/api/com.daplie.walnut.init
+POST https://api.<domain.tld>/api/walnut@daplie.com/init
 
 { "domain": "<domain.tld>" }
 ```

From 71014cec2788078f8d99c802773c4542f8985c98 Mon Sep 17 00:00:00 2001
From: AJ ONeal <aj@daplie.com>
Date: Fri, 28 Jul 2017 17:38:23 -0600
Subject: [PATCH 2/6] Update README.md

---
 README.md | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index d1da1b4..818b916 100644
--- a/README.md
+++ b/README.md
@@ -1,7 +1,13 @@
 walnut
 ======
 
-An opinionated, constrained, secure application framework with a hard shell - like iOS, but for a home server.
+An opinionated, constrained, secure application framework with a hard shell - kinda like iOS, but for a server.
+
+Applications are written in express, but instead of using `require` for generic packages,
+they use `req.getSiteCapability(pkg)` and are restricted to packages that have been
+allowed by app, device, site, or user permission. Any configuration for the capability
+(external passwords, api keys, etc) will be set up beforehand so that they are not exposed
+to the application.
 
 Security Features
 -----------------

From 73e4aaa75ddb615775964cda4733b89aa6ff834e Mon Sep 17 00:00:00 2001
From: AJ ONeal <aj@daplie.com>
Date: Mon, 31 Jul 2017 16:21:33 -0600
Subject: [PATCH 3/6] Update README.md

---
 README.md | 19 ++++++++++++++-----
 1 file changed, 14 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index 818b916..90ef86b 100644
--- a/README.md
+++ b/README.md
@@ -72,8 +72,13 @@ Initial Configuration
 
 Once installed and started you can visit <https://localhost.daplie.me:3000>.
 
-```
-curl http://localhost.daplie.me:3000 -H 'X-Forwarded-Proto: https'
+```bash
+curl -X POST http://localhost.daplie.me:3000 \
+  -H 'X-Forwarded-Proto: https' \
+  -H 'Content-Type: application/json' \
+  -d '{
+    domain: 'example.com'
+  }'
 ```
 
 API
@@ -139,15 +144,19 @@ POST https://api.<domain.tld>/api/walnut@daplie.com/init
 
 The following domains are required to point to WALNUT server
 
+```
+cloud.<domain.tld>
+api.cloud.<domain.tld>
+```
+
+and
+
 ```
 <domain.tld>
 www.<domain.tld>
 
 api.<domain.tld>
 assets.<domain.tld>
-
-cloud.<domain.tld>
-api.cloud.<domain.tld>
 ```
 
 Example `/etc/goldilocks/goldilocks.yml`:

From fc88fa148c020bbe0471ad709445f1472cd44e55 Mon Sep 17 00:00:00 2001
From: AJ ONeal <aj@daplie.com>
Date: Mon, 31 Jul 2017 16:21:55 -0600
Subject: [PATCH 4/6] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 90ef86b..856a169 100644
--- a/README.md
+++ b/README.md
@@ -77,7 +77,7 @@ curl -X POST http://localhost.daplie.me:3000 \
   -H 'X-Forwarded-Proto: https' \
   -H 'Content-Type: application/json' \
   -d '{
-    domain: 'example.com'
+    "domain": "example.com"
   }'
 ```
 

From c4439a928be9fd0eb4923bd2099f861750ef9ba6 Mon Sep 17 00:00:00 2001
From: AJ ONeal <aj@daplie.com>
Date: Mon, 31 Jul 2017 16:22:48 -0600
Subject: [PATCH 5/6] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 856a169..927039e 100644
--- a/README.md
+++ b/README.md
@@ -73,7 +73,7 @@ Initial Configuration
 Once installed and started you can visit <https://localhost.daplie.me:3000>.
 
 ```bash
-curl -X POST http://localhost.daplie.me:3000 \
+curl -X POST http://localhost.daplie.me:3000/api/walnut@daplie.com/init \
   -H 'X-Forwarded-Proto: https' \
   -H 'Content-Type: application/json' \
   -d '{

From 0dd3d6fe7bb24a3ffbad5c4e84e89547c1cacb5a Mon Sep 17 00:00:00 2001
From: AJ ONeal <aj@daplie.com>
Date: Mon, 31 Jul 2017 16:49:58 -0600
Subject: [PATCH 6/6] add missing 'api.' prefix

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 927039e..dd0798d 100644
--- a/README.md
+++ b/README.md
@@ -73,7 +73,7 @@ Initial Configuration
 Once installed and started you can visit <https://localhost.daplie.me:3000>.
 
 ```bash
-curl -X POST http://localhost.daplie.me:3000/api/walnut@daplie.com/init \
+curl -X POST http://api.localhost.daplie.me:3000/api/walnut@daplie.com/init \
   -H 'X-Forwarded-Proto: https' \
   -H 'Content-Type: application/json' \
   -d '{