category: reference

tags: [dev, vps, progress]

last_updated: 2026-03-15

Tracking the implementation of robot.wtf on the Debian 12 / Proxmox VM. See [[Tasks/VPS_Phases]] for the full plan.

- Ansible playbook provisioning: base packages, `/srv` directory structure, Python venv, crypto keys, SQLite schema

- RS256 signing keypair + EC P-256 ATProto client JWK generated

- Playbook idempotent, tested via full re-run

- VPS at 192.168.77.107 (WireGuard backplane), Caddy on separate host

- **V1-1/V1-2:** Data access layer ported from DynamoDB to SQLite (21 files, 2399 lines, 55 tests)

- **V1-3:** Gunicorn entry points, systemd units, Ansible deploy role (4 services on ports 8000-8003)

- **V1-4:** Caddy wildcard config with on-demand TLS, `/api/internal/check-slug` for cert validation

- **V1-5:** Full stack smoke tested — otterwiki serving pages, MCP connected via Claude Code

Key findings during V1:

- `RETAIN_PAGE_NAME_CASE = True` required (otterwiki lowercases filenames without it)

- `TREAT_UNDERSCORE_AS_SPACE_FOR_TITLES = True` for clean URLs

- ManagementMiddleware needed `/api/v1/*` and `/api/internal/*` passthroughs

- numpy/chromadb X86_V2 issue on the Proxmox VM (semantic search deferred)

- Bluesky cookbook demo adapted for robot.wtf

- Real Bluesky login completed end-to-end

- ATProto client JWK must be EC P-256 / ES256 (not RSA) — V0 playbook corrected

- DPoP nonce handling works, identity-only scope validated

- Findings at [[Dev/VS-1_ATProto_Spike]]

- Dev wiki cloned from dev.wikibot.io via git smart HTTP (`/.git/info/refs`)

- Running at https://dev.robot.wtf/ with MCP connected

- 3gw wiki NOT migrated (DNS CNAME exception keeps it on home server)

- MCP bearer token auth working for Claude Code

- Making FastMCP's OAuth provider persistent (SQLite-backed) so Claude.ai doesn't lose auth on restart

- Caddy routes updated to proxy OAuth paths to MCP sidecar

- Manager agent running in otterwiki-mcp repo

- Evolving VS-1 spike into production auth service on port 8003

- Platform JWT cookie on `.robot.wtf` domain

- Signup flow (choose username from Bluesky handle)

- Manager agent running in robot.wtf repo

- **Multi-tenant semantic search fixed:** slug derivation, auto-reindex empty backends, per-backend reindex lock, stale fallback removal. 104 tests.

- **FAISS backend safety:** query() TOCTOU race fixed (snapshot under lock), atomic save (temp files + rename), mismatch detection on load.

- **Async reindex:** POST /api/v1/reindex returns 202, background thread, GET /api/v1/reindex/status for polling. Dev wiki reindexed: 76 pages, 590 chunks.

- **Wiki template seeding:** New wikis seeded from `templates/default-wiki/` (Home, Getting Started, Agent Guide). Ansible deploys templates to VPS.

- **Wiki path consolidation:** Migrated all wikis from `/srv/wikis/` to `/srv/data/wikis/`. Quota script updated. Single canonical storage location.

- **Broken beta user wikis (gruen, igor) deleted** — repos were bare, created incorrectly during manual onboarding. Users can recreate via UI.

- **OAuth finding:** Claude.ai does not use refresh tokens. Re-auths every hour. Mitigation (extend token lifetime) not yet implemented.

- Per-wiki SQLite DB (re-enable admin panels)