**Bead document** from Bead: Wiki Facet For Beads · [canonical source](https://redfish.acequia.io/guerin/.agents/3a66d5c4-b77c-48e1-9a02-a6f924b76f2f/bead-bind-startup.md) · discussion: Talk: Wiki Facet For Beads
**Current focus:** v0.2.0 live (origin-enforcement gate + cleanup); next frontier is the auth build order in [notes/04](2026-07-09/notes/04-oauth-wellknown-signing.md) and the edit-back loop. **Do this first:** read [2026-07-09/notes/03-token-scoped-exposure.md](2026-07-09/notes/03-token-scoped-exposure.md) and [notes/04](2026-07-09/notes/04-oauth-wellknown-signing.md), then check [https://wiki.harvardviz.live/beads.html](https://wiki.harvardviz.live/beads.html) still renders.
## Todo - [ ] Stephen: answer [2026-07-09/notes/02-open-questions.md](2026-07-09/notes/02-open-questions.md) (regeneration cadence, welcome-visitors link, per-note pages, edit-back lane, auth build order) - [ ] Auth build order (notes/04): (1) JWKS + openid-configuration at `.well-known` on redfish origin; (2) `/auth/create-token` + `/auth/revoke` signer on this machine; (3) Caddy forward_auth verifier + `wiki.redfish.com` team tier with token-vantage generation; (4) OIDC face + wiki-security-passportjs login; (5) signed edit-back - [ ] Wiki claim: switch `~/.wiki/config.json` to `"security_type": "friends"`, restart service `wiki`, claim via footer padlock IMMEDIATELY (site currently unclaimed, legacy security, unclaimable) - [ ] Phase 2: edit-back watcher — wiki journal deltas on `bead-*` pages become deposits in the source bead's `uploads/` dock (design in notes/01 §Edit-back; identity via notes/04 step 5) - [ ] Slug collisions: same-named beads overwrite one another's page (suffix `-<guid8>` on collision) - [ ] Consider NSSM service or scheduled task for regeneration (currently manual `node bead-wiki-facet.mjs`; the gate makes each run ~190 anon HTTP probes) - [ ] Offer the pattern to Oscar's dock (`4c6470f9`) for ratification
## Key facts - Wiki data: `C:/Users/steph/.wiki` (fedwiki, Windows service `wiki` via NSSM, port 3000) - Public: Caddy `C:\caddy\caddyfile.txt` routes `wiki.harvardviz.live` to `localhost:3000`; `Cloudflared` service carries the tunnel (token-based, no local config.yml) - Generator: [2026-07-09/skills/bead-wiki-facet.mjs](2026-07-09/skills/bead-wiki-facet.mjs); backups in `C:/Users/steph/.wiki/bead-facet-backups/` - Prior art: bead [1057235a](https://redfish.acequia.io/guerin/.agents/1057235a-f575-4046-8c63-67475a33374d/) (agentic route-flip for this same hostname) - Sibling person bead: [ward-cunningham 639158e8](https://redfish.acequia.io/guerin/.agents/639158e8-0801-4c2a-8277-9bf271f7bc00/)
## References (bead cross-links) - Bead: Agentic Route Flip · [canonical](https://redfish.acequia.io/guerin/.agents/1057235a-f575-4046-8c63-67475a33374d/) - Bead: Ward Cunningham · [canonical](https://redfish.acequia.io/guerin/.agents/639158e8-0801-4c2a-8277-9bf271f7bc00/)