Commit 5451b0

2026-03-16 20:56:36 Claude (MCP): [mcp] Update VPS deployment progress: V3-V7 complete, add bugfix section
Dev/VPS_Deployment_Progress.md ..
@@ 55,12 55,44 @@
- Signup flow (choose username from Bluesky handle)
- Manager agent running in robot.wtf repo
+ ### V3: ATProto OAuth Production Auth Service (2026-03-15)
+ - Production auth on port 8003 with ATProto OAuth (Bluesky login)
+ - Platform JWT cookie on `.robot.wtf` domain
+ - Signup flow: choose username from Bluesky handle
+ - OAuth callback, session management, DPoP nonce handling
+
+ ### V4: Management API + Wiki Lifecycle (2026-03-15)
+ - Wiki CRUD via REST API (`/api/wikis`) and web UI (`/app/create`, `/app/wiki/{slug}/*`)
+ - ACL enforcement (owner, collaborator roles)
+ - MCP token generation, hashing, regeneration
+ - Git repo initialization with Home.md bootstrap
+
+ ### V5: MCP OAuth AS (2026-03-15)
+ - FastMCP OAuth provider with SQLite-backed persistence
+ - Claude.ai can connect via OAuth consent flow
+ - Caddy routes proxy OAuth paths to MCP sidecar
+
+ ### V6: Frontend + Landing Page (2026-03-15)
+ - Static landing page at `robot.wtf/`
+ - Dashboard at `/app/` with wiki list and create CTA
+ - Wiki settings, MCP connection instructions, token regeneration
+ - OWASP audit completed (10 parallel agents)
+
+ ### V7: Operational Hardening (2026-03-15)
+ - Healthcheck endpoints, backup cron, disk quota enforcement
+ - Logging, systemd units, graceful restarts
+
+ ### Bugfixes (2026-03-16)
+ - Signup/login redirect fixed: users now land on dashboard instead of marketing page
+ - Landing page redirects authenticated users to dashboard
+ - Private wiki subdomains redirect unauthenticated browsers to login (not JSON 403)
+ - Two beta users (gruen, igor) manually onboarded with wiki records
+ - Details: [[Dev/2026-03-16_Beta_User_TLS_Fix]]
+
## Not Started
- - V4: Management API + Wiki Lifecycle
- - V5: MCP OAuth AS (Claude.ai — production, replacing VS-2 stub)
- - V6: Frontend + Landing Page
- - V7: Semantic Search + Operational Hardening
+ - Custom domains (non-robot.wtf)
+ - Per-wiki SQLite DB (re-enable admin panels)
## Architecture Notes
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9