clawd/memory/2026-01-28.md

2026-01-28

Todo App Deployment & Features

Deployed to Dokploy

• API (todo-app-v2) deployed and running at https://api.todo.donovankelly.xyz
  • Source: raw compose, builds from https://git.infra.nkode.tech/hammer/todo-app.git
  • Compose ID: e07fMO8TXcHI_SkKqBWrl
  • ENV: APP_URL=https://app.todo.donovankelly.xyz (was wrong before, pointed to API)
  • Hammer API key: stored in Dokploy env as HAMMER_API_KEY
• Frontend (todo-app-web) deployed at https://app.todo.donovankelly.xyz
  • Source: raw compose, builds from https://git.infra.nkode.tech/hammer/todo-app-web.git
  • Compose ID: ofMFmzQhEYK-3LfH5QmU_
• DB (todo-app-db) Postgres running on Dokploy
  • Postgres ID: WrvHLAc1kaqsrpTaSGOG4
  • Not externally exposed (firewall blocks)
• Dokploy API: https://app.dokploy.com, auth via X-API-Key header, key in Bitwarden ("dokploy api key")
• Dokploy server: 191.101.0.153 (Hostzinger kvm2), server ID: QppaqcotG-I-6fUYCNolg
• Deploy pattern: compose.deploy via tRPC API, poll deployment.allByCompose for status

Fixed cross-subdomain auth

• BetterAuth cookies were scoped to api.todo.donovankelly.xyz only
• Added crossSubDomainCookies config with domain .donovankelly.xyz
• Added https://app.todo.donovankelly.xyz to trustedOrigins

Fixed project loading

• getProject API route had invalid isArchived filter on tasks table (column doesn't exist on tasks)
• Removed the bad filter, projects load correctly now

Fixed invite links

• APP_URL env was set to API domain, generating wrong invite URLs
• Updated to https://app.todo.donovankelly.xyz

User accounts

• Donovan's admin account: donovan@donovankelly.xyz, creds in BW shared vault "Todo App (donovankelly.xyz)"
• Hammer service account: hammer@donovankelly.xyz, ID: 1HltUpL3R0qZkVxIu0oQ3UoqBCHuuMpV, role: service
• BetterAuth has auth.api.setPassword({ body: { userId, newPassword } }) for password resets

Features implemented (frontend)

• Unit tests: 60 tests (API client, auth store, tasks store, utils)
• Project creation: Inline form in sidebar with color picker
• Task assignment: Assignee selector + avatar display on tasks
• Kanban board: Board view at /project/:id/board with section columns
• Collapsible sidebar: Toggle to icon-only mode, persists in localStorage
• Task detail panel: Right slide-over with editable fields (title, description, due date, priority, assignee, project)
• Due date picker: Fixed broken hidden input, now visible styled input with clear button
• Completed tasks archive: Collapsible "Completed" section at bottom of views + "Done" column in board
• Project selector in task detail: Move tasks between projects
• Section management: Add/rename/delete sections from board view
• Admin: role selector on invites — pick admin/user when inviting
• Admin: change user roles — dropdown in users table
• Admin: password reset — key icon to reset any user's password

Infrastructure notes

• Local Caddy container (todo-caddy) on this VPS is unnecessary — domains point to Dokploy
• Git remotes: gitea for todo-app, origin for todo-app-web

Network App Frontend

• Built SPA at /home/clawdbot/clawd/network-app-web (Vite + React + TS + Tailwind)
• Gitea: hammer/network-app-web
• Dokploy compose ID: Sa1LrtH5uu-a7chrtebXb
• Domain: https://app.donovankelly.xyz
• API at: https://api.donovankelly.xyz (compose ID: UKrNvUyMCdaSWkl6DcAGA)
• DB: network-app-db (Postgres, compose ID: KzFkJETXrW_oMaiPsUb2o)
• Features: Clients CRM, Events tracking, AI email generation, Profile/settings
• Pages: Dashboard, Clients list, Client detail, Events, Emails, Settings, Login

Bitwarden rule

• Donovan confirmed: ALWAYS store credentials in Hammer's Credentials org → Default collection
• Updated TOOLS.md with org/collection IDs

Lessons learned

• Always create BW items in shared org vault from the start
• Dokploy compose services: use sourceType: raw with git URL in build context (not sourceType: git)
• BetterAuth password hashing: don't try to manually hash with bcrypt — use auth.api.setPassword() or auth.api.signUpEmail()
• APP_URL must point to frontend, not API (used for invite link generation)

Hammer Queue — Task System

• URL: https://queue.donovankelly.xyz
• API auth: Bearer token from BW "Hammer Queue (donovankelly.xyz)" → API_BEARER_TOKEN
• Creds saved to: ~/.clawdbot/.env as HAMMER_QUEUE_URL + HAMMER_QUEUE_TOKEN
• Purpose: When Donovan asks me to do something, log it here immediately so it survives context compaction
• Active tasks: "update queue app" (detail panel, webhook integration)
• High priority queued: That2ndGuy pitch deck, Network App dev
• Lesson: ALWAYS write tasks to the queue when asked to do something. Don't rely on conversation memory.

Dokploy API Key Rotated

• Donovan added new key to BW "dokploy api key" (64 chars)
• Updated ~/.clawdbot/.env with DOKPLOY_API_KEY
• Old key was expiring/rotating — new one works

Hammer Queue — Continued Development (Late Session)

Dokploy Access

• Created Dokploy account: hammer7839283@gmail.com, role: member
• Creds in BW: "Dokploy (app.dokploy.com)" in shared org vault
• Member role can't access compose services (authorization error) — need admin for full UI access
• Dokploy API has NO endpoint to read deployment build logs — logs only via UI WebSocket or SSH
• Learned: deployment.allByCompose works with API key auth for listing deployments

Deploy Debugging Saga

• 7 consecutive deploy failures, root causes:
  1. Unused useState import in TaskCard.tsx — TypeScript strict mode (tsc -b) rejected it, Docker frontend build failed silently
  2. serial column type — drizzle-kit push can't add serial to existing table with data. Fixed by using integer + app-level sequencing + startup backfill
• Key lesson: ALWAYS run bun run build locally before deploying. A 2-second local build catches what 30 minutes of API spelunking can't.
• Created debugging skill at skills/debugging/SKILL.md — living document, update with every new lesson

Features Shipped (HQ-15 completed)

• Sequential task IDs: HQ-1, HQ-2, etc. (integer column + backfill on startup)
• API resolves tasks by UUID, number, or HQ-N prefix
• GET /api/tasks/:id endpoint
• Editable task fields in detail panel: click-to-edit title/description, clickable priority/source selectors
• Webhook env vars (CLAWDBOT_HOOK_URL, CLAWDBOT_HOOK_TOKEN) deployed to Dokploy compose
• Compose file updated to pass webhook vars to backend service

Queue App Infrastructure

• Compose ID: kBdwrcZodIRyNIvQ-wrzG
• Git remote: origin → https://git.infra.nkode.tech/hammer/hammer-queue.git
• Deploy pattern: push to Gitea → compose.deploy via Dokploy API → poll deployment.allByCompose
• Frontend: Vite + React + TS + Tailwind, builds with bun run build (tsc -b && vite build)
• Backend: Elysia + Drizzle + Postgres, starts with bun run db:push && bun run start

Task Management Rules (from Donovan)

• When asked to do something → add to Hammer Queue immediately (survives context compaction)
• If task stalls or stops → mark it as such, move out of active
• Don't leave tasks "active" while doing something else
• Break large tasks into smaller ones when shipping partial work

New Tasks Created

• HQ-16: Maintain Debugging Skill (living document)
• HQ-17: Queue App: Projects with Context (remaining from HQ-15)

Hammer Queue Connection Info

• URL: https://queue.donovankelly.xyz
• API auth: Bearer token from BW "Hammer Queue (donovankelly.xyz)" → API_BEARER_TOKEN
• Creds in ~/.clawdbot/.env: HAMMER_QUEUE_URL, HAMMER_QUEUE_TOKEN
• Also has HAMMER_QUEUE_API_KEY (older, may be redundant)