@dotdrelle/wiki-manager 0.15.26 → 0.15.27

package/.env.example

@@ -78,10 +78,15 @@ CONNECTORS_ENABLED=false
 
 # ── Documents LLM OCR / Mermaid (optional) ─────────────────────────────────────
 
-# All image OCR is delegated to an OpenAI-compatible vision LLM. The default
-# Default target is the Albert API (etalab); set DOCUMENT_LLM_API_KEY.
-# DOCUMENT_LLM_BASE_URL=https://albert.api.etalab.gouv.fr/v1
-# DOCUMENT_LLM_MODEL=lightonai/LightOnOCR-2-1B
+# All image OCR is delegated to an OpenAI-compatible vision LLM, and it is OFF
+# until you configure it here. The compose file passes empty defaults on
+# purpose, so no deployment ever calls a provider it was not pointed at.
+#
+# Uncomment the three keys together — the agent disables LLM OCR when any of
+# the endpoint, the model or the key is missing.
+#
+# DOCUMENT_LLM_BASE_URL=
+# DOCUMENT_LLM_MODEL=
 # DOCUMENT_LLM_API_KEY=
 # DOCUMENT_LLM_TIMEOUT_SECONDS=120
 
@@ -99,7 +104,15 @@ CONNECTORS_ENABLED=false
 # WIKI_MANAGER_RUNTIME_PORT=7788
 # Set to 0 to skip pulling and renewing already-running containers at startup.
 # WIKI_MANAGER_AUTO_UPDATE=1
-# WIKI_MANAGER_RUNTIME_HOST=0.0.0.0
+#
+# Active by default, and required: `serve` runs in Docker and reaches the host
+# runtime through host.docker.internal. A runtime bound to 127.0.0.1 only
+# accepts connections from the host itself, so the container gets ECONNREFUSED
+# and the workspace UI shows no runtime at all. Binding all interfaces always
+# generates WIKI_MANAGER_RUNTIME_TOKEN (0600 in .wiki/runtime/runtime.token),
+# so the exposed port is never unauthenticated.
+# Set to 127.0.0.1 only when nothing runs in a container.
+WIKI_MANAGER_RUNTIME_HOST=0.0.0.0
 
 
 # ── Parallelism & throughput ───────────────────────────────────────────────────

package/README.md

@@ -729,17 +729,33 @@ capabilityRouting:
     allowedAgents: [connectors]
 ```
 
-#### Optional agents and user overrides
+#### Compose overrides — optional agents, proxies, local fixes
 
-Anything beyond the packaged stack is an external connector operated and
-configured independently by the user. To run one alongside the packaged
-agents, create a file named
-`agents.docker-compose.override.yml` **next to your `.env`**:
+Two override files sit **next to your `.env`**, one per stack:
 
-`agents up` includes it automatically when present (standard Docker Compose
-merge: new services are added, same-name keys override the defaults — you can
-also use it to pin a port or a variable of a default agent). The file is
-yours: wiki-manager never generates or overwrites it. Complete the setup by
+| File | Applies to |
+| --- | --- |
+| `docker-compose.override.yml` | workspace stack (`serve`, `mcp-http`, `production-mcp`, `wiki`) |
+| `agents.docker-compose.override.yml` | agents stack (`cme`, `documents`, `connectors`) |
+
+Both are created for you on first use, from packaged templates full of
+ready-to-uncomment examples, and are **never rewritten afterwards** — your edits
+survive package updates. Do not confuse them with `.wiki/runtime/*.compose.yml`,
+which the manager regenerates on every Compose command; editing those is always
+lost.
+
+Compose merge is standard: new services are added, same-name keys override the
+defaults, `environment` merges per variable name. Only extend services the
+packaged file declares — an invented service name becomes a phantom service
+Compose keeps trying to start.
+
+The most common use behind a VPN is proxy passthrough: containers do not inherit
+the host environment, and only `connectors` ships proxy variables by default. See
+[`docs/configuration.md`](docs/configuration.md) § "Compose overrides" for a
+copy-paste block and the `host.docker.internal` / `NO_PROXY` pitfalls.
+
+The second use is running an external connector alongside the packaged agents.
+Complete the setup by
 adding the connector's variables to your `.env` and its endpoint block to
 your `mcp.endpoints.json` — every variable an external MCP endpoint needs
 lives in the `.env` and is referenced as `${VAR_NAME}` from
@@ -872,11 +888,17 @@ The TUI uses a two-pane layout:
 - **Left** — scrollable conversation thread with a chat input at the bottom.
   Typing `/` opens a slash-command completion overlay just above the input.
   Mouse wheel scrolls the conversation, and selecting text copies it through the
-  TUI clipboard bridge. Message headers also expose a `[ copy ]` target for
-  copying one message. PageUp/PageDown remain available for keyboard scrolling.
+  TUI clipboard bridge. Message headers expose a `[ copy ]` target for copying
+  one message, and user questions also carry `[ redo ]`: it discards every
+  answer, plan step and activity recorded after that question — in the runtime
+  as well as on screen — then re-asks it. Redo is refused while a run is still
+  active; cancel it first. PageUp/PageDown remain available for keyboard
+  scrolling.
 - **Right** — Plan/Queue tabs, active MCP jobs, plus a live log/trace panel.
-  `Ctrl+Q` toggles the tabs; clicking `Plan` or `Queue (N)` selects that tab
-  directly. MCP connection details remain available through `/mcp status`.
+  Click `Plan` or `Queue (N)` to select a tab. `Queue (N)` counts run requests
+  sent while the runtime is already busy, so it reads `(0)` whenever you submit
+  one request at a time. MCP connection details remain available through
+  `/mcp status`.
 
 In the served browser Activity panel, `Clear` is a per-tab display cleanup and
 `Clear all` applies it to Plan, Local activity, Runtime activity, and Logs. It

package/agents.docker-compose.override.example.yml

@@ -0,0 +1,82 @@
+# agents.docker-compose.override.yml — user-owned overrides for the agents stack
+#
+# Copied here once by wiki-manager when absent, then NEVER touched again:
+# your edits survive every package update. Do not confuse it with
+# .wiki/runtime/agents.cacert.compose.yml, which is generated state and is
+# rewritten on every compose command — editing that one is always lost.
+#
+# Merge order: agents.docker-compose.yml → this file → generated CA override.
+# `environment` entries merge per variable name; `volumes`, `extra_hosts` and
+# other sequences are appended. Only services declared in the packaged file
+# (cme, documents, connectors) should be extended — inventing a service name
+# here creates a phantom service that compose will try to start.
+#
+# To activate anything below: replace the `services: {}` line at the bottom
+# with your own `services:` block, then `wiki-workspace agents up`.
+# Check the result with `wiki-workspace agents config` before restarting.
+#
+# ── Corporate proxy / VPN ─────────────────────────────────────────────────────
+#
+# Docker never inherits the host environment: exporting HTTP_PROXY in your shell
+# does NOT reach a container. Only `connectors` declares proxy variables in the
+# packaged file, so cme and documents try to reach Confluence and the LLM APIs
+# directly. Declare the variables here, and set their values in the manager .env:
+#
+#     HTTP_PROXY=http://host.docker.internal:3128
+#     HTTPS_PROXY=http://host.docker.internal:3128
+#     NO_PROXY=localhost,127.0.0.1,host.docker.internal
+#
+# Use `host.docker.internal` (never `localhost`, which is the container itself)
+# when the proxy listens on the host — this requires the extra_hosts mapping
+# below on Linux. Set both the upper- and lower-case spellings: Node reads the
+# upper-case ones, Python/requests accepts either but some libraries only look
+# at the lower-case ones.
+#
+#     services:
+#       cme:
+#         environment:
+#           - HTTP_PROXY=${HTTP_PROXY:-}
+#           - HTTPS_PROXY=${HTTPS_PROXY:-}
+#           - http_proxy=${HTTP_PROXY:-}
+#           - https_proxy=${HTTPS_PROXY:-}
+#           - NO_PROXY=${NO_PROXY:-localhost,127.0.0.1,host.docker.internal}
+#           - no_proxy=${NO_PROXY:-localhost,127.0.0.1,host.docker.internal}
+#         extra_hosts:
+#           - host.docker.internal:host-gateway
+#       documents:
+#         environment:
+#           - HTTP_PROXY=${HTTP_PROXY:-}
+#           - HTTPS_PROXY=${HTTPS_PROXY:-}
+#           - http_proxy=${HTTP_PROXY:-}
+#           - https_proxy=${HTTPS_PROXY:-}
+#           - NO_PROXY=${NO_PROXY:-localhost,127.0.0.1,host.docker.internal}
+#           - no_proxy=${NO_PROXY:-localhost,127.0.0.1,host.docker.internal}
+#         extra_hosts:
+#           - host.docker.internal:host-gateway
+#
+# A TLS-intercepting proxy also needs its CA inside the containers. Do not mount
+# it here: pass it once with `wiki-workspace --cacert /absolute/path/to/ca.pem`
+# and the manager mounts it into every service with the right env variables
+# (NODE_EXTRA_CA_CERTS, SSL_CERT_FILE, REQUESTS_CA_BUNDLE, CURL_CA_BUNDLE).
+#
+# ── Optional external agents ──────────────────────────────────────────────────
+#
+# The MailerSend agent is built and version-checked but not part of the default
+# delivery. Enable it by declaring it here (credentials stay in the container
+# environment; set MAILERSEND_API_KEY in the manager .env):
+#
+#     services:
+#       mailer:
+#         image: dotdrelle/agent-mailer-api:latest
+#         user: "${UID:-1000}:${GID:-1000}"
+#         ports:
+#           - "${MAILER_MCP_PORT:-3339}:8080"
+#         environment:
+#           - MCP_AUTH_TOKEN=${MAILER_MCP_AUTH_TOKEN:-}
+#           - MAILERSEND_API_KEY=${MAILERSEND_API_KEY:-}
+#         restart: unless-stopped
+#
+# Remember to declare the matching endpoint in mcp.endpoints.json, otherwise
+# Donna never discovers the agent.
+
+services: {}

package/agents.docker-compose.yml

@@ -72,8 +72,14 @@ services:
       - DOCUMENT_OUTPUT_DIR=/documents/output
       - WORKSPACES_ROOT=/workspaces
       - DOCUMENT_MAX_UPLOAD_BYTES=${DOCUMENT_MAX_UPLOAD_BYTES:-52428800}
-      - DOCUMENT_LLM_BASE_URL=${DOCUMENT_LLM_BASE_URL:-https://albert.api.etalab.gouv.fr/v1}
-      - DOCUMENT_LLM_MODEL=${DOCUMENT_LLM_MODEL:-lightonai/LightOnOCR-2-1B}
+      # Deliberately empty defaults: the .env is the only source. A hardcoded
+      # default here sent every deployment to a provider the operator never
+      # chose and could not see, since the keys ship commented. An empty value
+      # also overrides the image's own ENV fallback, so nothing is called until
+      # the operator opts in. The agent already disables LLM OCR when the key or
+      # the model is unset, so this degrades cleanly rather than failing.
+      - DOCUMENT_LLM_BASE_URL=${DOCUMENT_LLM_BASE_URL:-}
+      - DOCUMENT_LLM_MODEL=${DOCUMENT_LLM_MODEL:-}
       - DOCUMENT_LLM_API_KEY=${DOCUMENT_LLM_API_KEY:-}
       - DOCUMENT_LLM_TIMEOUT_SECONDS=${DOCUMENT_LLM_TIMEOUT_SECONDS:-120}
       # HTTPS — uncomment and place cert files in AGENTS_DATA_DIR/certs/

package/docker-compose.override.example.yml

@@ -0,0 +1,81 @@
+# docker-compose.override.yml — user-owned overrides for the workspace stack
+#
+# Copied here once by wiki-manager when absent, then NEVER touched again:
+# your edits survive every package update. Do not confuse it with
+# .wiki/runtime/cacert.compose.yml, which is generated state and is rewritten
+# on every compose command — editing that one is always lost.
+#
+# This file is GLOBAL: it lives next to the manager .env and applies to every
+# workspace stack (`wiki-workspace up <workspace>`, `/start` in the shell). A
+# proxy or a private registry is a property of the machine, not of a workspace,
+# so there is deliberately no per-workspace variant. For values that really do
+# differ per workspace, use workspaces/<name>/.env and reference them here with
+# ${VARIABLE}.
+#
+# Merge order: docker-compose.yml → this file → generated CA override.
+# `environment` entries merge per variable name; `volumes`, `extra_hosts` and
+# other sequences are appended. Only services declared in the packaged file
+# (wiki, serve, mcp-http, production-mcp) should be extended — inventing a
+# service name here creates a phantom service that compose will try to start.
+#
+# To activate anything below: replace the `services: {}` line at the bottom
+# with your own `services:` block, then restart the workspace.
+# Check the result with `wiki-workspace compose <workspace> config`.
+#
+# ── Corporate proxy / VPN ─────────────────────────────────────────────────────
+#
+# Docker never inherits the host environment: exporting HTTP_PROXY in your shell
+# does NOT reach a container. None of the workspace services declares proxy
+# variables, so serve and production-mcp reach LLM endpoints directly. Declare
+# them here and set the values in the manager .env:
+#
+#     HTTP_PROXY=http://host.docker.internal:3128
+#     HTTPS_PROXY=http://host.docker.internal:3128
+#     NO_PROXY=localhost,127.0.0.1,host.docker.internal
+#
+# NO_PROXY must keep host.docker.internal: serve, the runtime and the MCP
+# servers talk to each other through it, and routing that traffic through the
+# proxy breaks the workspace even when the outside world works.
+#
+#     services:
+#       serve:
+#         environment:
+#           - HTTP_PROXY=${HTTP_PROXY:-}
+#           - HTTPS_PROXY=${HTTPS_PROXY:-}
+#           - http_proxy=${HTTP_PROXY:-}
+#           - https_proxy=${HTTPS_PROXY:-}
+#           - NO_PROXY=${NO_PROXY:-localhost,127.0.0.1,host.docker.internal}
+#           - no_proxy=${NO_PROXY:-localhost,127.0.0.1,host.docker.internal}
+#       production-mcp:
+#         environment:
+#           - HTTP_PROXY=${HTTP_PROXY:-}
+#           - HTTPS_PROXY=${HTTPS_PROXY:-}
+#           - http_proxy=${HTTP_PROXY:-}
+#           - https_proxy=${HTTPS_PROXY:-}
+#           - NO_PROXY=${NO_PROXY:-localhost,127.0.0.1,host.docker.internal}
+#           - no_proxy=${NO_PROXY:-localhost,127.0.0.1,host.docker.internal}
+#         # production-mcp has no host mapping in the packaged file; add it when
+#         # the proxy (or an LLM endpoint) listens on the host.
+#         extra_hosts:
+#           - host.docker.internal:host-gateway
+#
+# A TLS-intercepting proxy also needs its CA inside the containers. Do not mount
+# it here: pass it once with `wiki-workspace --cacert /absolute/path/to/ca.pem`
+# and the manager mounts it into every service with the right env variables
+# (NODE_EXTRA_CA_CERTS, SSL_CERT_FILE, REQUESTS_CA_BUNDLE, CURL_CA_BUNDLE).
+#
+# ── Other common uses ─────────────────────────────────────────────────────────
+#
+#     services:
+#       serve:
+#         # Extra read-only mount, e.g. a shared templates directory.
+#         volumes:
+#           - /srv/shared/templates:/templates:ro
+#       production-mcp:
+#         # Pin resources on a loaded host.
+#         deploy:
+#           resources:
+#             limits:
+#               cpus: '2.0'
+
+services: {}

package/docker-compose.yml

@@ -25,7 +25,7 @@ services:
       - ${WIKI_WORKSPACE_PATH:-/tmp/llm-wiki-workspace-not-set}:/workspace
     environment:
       - WIKI_WORKSPACE_PATH=/workspace
-      - WIKI_CONFIG_PATH
+      - WIKI_CONFIG_PATH=${WIKI_CONFIG_PATH:-}
     extra_hosts:
       - host.docker.internal:host-gateway
 
@@ -47,22 +47,28 @@ services:
       #- ${WIKI_SERVE_CERTS_DIR:-./certs}:/certs:ro
     environment:
       - WIKI_WORKSPACE_PATH=/workspace
-      - WIKI_CONFIG_PATH
+      # Every variable below is written as ${VAR:-default}, never as a bare
+      # `- VAR` passthrough. The bare form makes Compose emit
+      # `The "VAR" variable is not set. Defaulting to a blank string.` on stderr
+      # for any key the operator has not written in a .env — the ports and
+      # tokens shipped as commented placeholders in .env.example. The warning is
+      # noise that surfaces in the ShellUI as if it were a failure.
+      - WIKI_CONFIG_PATH=${WIKI_CONFIG_PATH:-}
       - WIKI_MCP_HTTP_PORT=${WIKI_MCP_PORT:-3101}
-      - WIKI_MCP_AUTH_TOKEN
-      - PRODUCTION_MCP_AUTH_TOKEN
-      - PRODUCTION_MCP_PORT
-      - CME_MCP_PORT
-      - DOCUMENTS_MCP_PORT
-      - CME_MCP_AUTH_TOKEN
-      - DOCUMENTS_MCP_AUTH_TOKEN
+      - WIKI_MCP_AUTH_TOKEN=${WIKI_MCP_AUTH_TOKEN:-}
+      - PRODUCTION_MCP_AUTH_TOKEN=${PRODUCTION_MCP_AUTH_TOKEN:-}
+      - PRODUCTION_MCP_PORT=${PRODUCTION_MCP_PORT:-3102}
+      - CME_MCP_PORT=${CME_MCP_PORT:-3336}
+      - DOCUMENTS_MCP_PORT=${DOCUMENTS_MCP_PORT:-3337}
+      - CME_MCP_AUTH_TOKEN=${CME_MCP_AUTH_TOKEN:-}
+      - DOCUMENTS_MCP_AUTH_TOKEN=${DOCUMENTS_MCP_AUTH_TOKEN:-}
       # Connectors MCP: the serve panel resolves ${CONNECTORS_MCP_AUTH_TOKEN} in
       # /mcp.endpoints.json from process.env only, so it must be forwarded here
       # (symmetric with cme/documents) or the panel sends an empty Bearer → 401.
-      - CONNECTORS_MCP_PORT
-      - CONNECTORS_MCP_AUTH_TOKEN
+      - CONNECTORS_MCP_PORT=${CONNECTORS_MCP_PORT:-3338}
+      - CONNECTORS_MCP_AUTH_TOKEN=${CONNECTORS_MCP_AUTH_TOKEN:-}
       - CONNECTORS_OAUTH_START_TOKEN=${OAUTH_START_TOKEN:-}
-      - WORKSPACE_NAME
+      - WORKSPACE_NAME=${WORKSPACE_NAME:-}
       - DOCUMENT_INPUT_DIR=/documents/input
       - DOCUMENT_UPLOADS_DIR=/documents/uploads
       - DOCUMENT_MAX_UPLOAD_BYTES=${DOCUMENT_MAX_UPLOAD_BYTES:-52428800}
@@ -92,12 +98,12 @@ services:
       #- ${WIKI_MCP_CERTS_DIR:-./certs}:/certs:ro
     environment:
       - WIKI_WORKSPACE_PATH=/workspace
-      - WIKI_CONFIG_PATH
-      - WIKI_MCP_AUTH_TOKEN
+      - WIKI_CONFIG_PATH=${WIKI_CONFIG_PATH:-}
+      - WIKI_MCP_AUTH_TOKEN=${WIKI_MCP_AUTH_TOKEN:-}
       # HTTPS — set paths inside the container (e.g. /certs/server.crt) and uncomment the volume above
-      - WIKI_MCP_TLS_CERT_PATH
-      - WIKI_MCP_TLS_KEY_PATH
-      - WIKI_MCP_TLS_CA_PATH
+      - WIKI_MCP_TLS_CERT_PATH=${WIKI_MCP_TLS_CERT_PATH:-}
+      - WIKI_MCP_TLS_KEY_PATH=${WIKI_MCP_TLS_KEY_PATH:-}
+      - WIKI_MCP_TLS_CA_PATH=${WIKI_MCP_TLS_CA_PATH:-}
     ports:
       - '${WIKI_MCP_PORT:-3101}:3333'
     extra_hosts:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dotdrelle/wiki-manager",
-  "version": "0.15.26",
+  "version": "0.15.27",
   "description": "Agentic shell and orchestration cockpit for llm-wiki workspaces.",
   "license": "PolyForm-Noncommercial-1.0.0",
   "author": "dotrelle",
@@ -11,7 +11,7 @@
   },
   "scripts": {
     "start": "bun ./bin/wiki-manager.js",
-    "test": "node --test src/cli/runtimeStartup.test.js src/cli/wiki-manager.test.js src/agent/graph.test.js src/contracts/schemas.test.js src/core/activity.test.js src/core/env.test.js src/core/buildInfo.test.js src/core/agentEvents.test.js src/core/runtimeLog.test.js src/activity/activityAggregator.test.js src/graph/runGraphProjector.test.js src/core/workflow.test.js src/core/planPatch.test.js src/core/agentLoop.test.js src/core/plan.test.js src/core/mcp.test.js src/core/toolLoop.test.js src/core/documentIntake.test.js src/core/dockerCompose.test.js src/core/wikiWorkspace.test.js src/core/wikirc.test.js src/core/cacert.test.js src/core/modelFetch.test.js src/core/startupCheck.test.js src/core/queueStore.test.js src/orchestrator/agentRegistry.test.js src/orchestrator/capabilityRegistry.test.js src/orchestrator/capabilityResolver.test.js src/orchestrator/planValidator.test.js src/orchestrator/planIntegrator.test.js src/orchestrator/scheduler.test.js src/orchestrator/attemptManager.test.js src/orchestrator/resultAggregator.test.js src/orchestrator/approvalPolicy.test.js src/orchestrator/dispatcher.test.js src/orchestrator/objectiveResolver.test.js src/commands/slash.test.js src/shell/repl.test.js src/runtime/store.test.js src/runtime/controlMessages.test.js src/runtime/recoveryManager.test.js src/runtime/server.test.js src/runtime/supervisor.test.js src/runtime/runner.test.js src/runtime/runner.e2e.test.js src/runtime/donna-contract.test.js src/runtime/auth.test.js",
+    "test": "node --test src/cli/runtimeStartup.test.js src/cli/wiki-manager.test.js src/agent/graph.test.js src/contracts/schemas.test.js src/core/activity.test.js src/core/env.test.js src/core/buildInfo.test.js src/core/agentEvents.test.js src/core/runtimeLog.test.js src/activity/activityAggregator.test.js src/graph/runGraphProjector.test.js src/core/workflow.test.js src/core/planPatch.test.js src/core/agentLoop.test.js src/core/plan.test.js src/core/mcp.test.js src/core/toolLoop.test.js src/core/documentIntake.test.js src/core/dockerCompose.test.js src/core/wikiWorkspace.test.js src/core/wikirc.test.js src/core/cacert.test.js src/core/composeOverrides.test.js src/core/setEnvValue.test.js src/core/commandFailure.test.js src/core/modelFetch.test.js src/core/startupCheck.test.js src/core/queueStore.test.js src/orchestrator/agentRegistry.test.js src/orchestrator/capabilityRegistry.test.js src/orchestrator/capabilityResolver.test.js src/orchestrator/planValidator.test.js src/orchestrator/planIntegrator.test.js src/orchestrator/scheduler.test.js src/orchestrator/attemptManager.test.js src/orchestrator/resultAggregator.test.js src/orchestrator/approvalPolicy.test.js src/orchestrator/dispatcher.test.js src/orchestrator/objectiveResolver.test.js src/commands/slash.test.js src/shell/repl.test.js src/shell/setupWizardPlaceholders.test.js src/runtime/store.test.js src/runtime/controlMessages.test.js src/runtime/recoveryManager.test.js src/runtime/server.test.js src/runtime/supervisor.test.js src/runtime/runner.test.js src/runtime/runner.e2e.test.js src/runtime/donna-contract.test.js src/runtime/auth.test.js",
     "check-versions": "node scripts/check-versions.js",
     "prepack": "node scripts/check-versions.js",
     "prepublishOnly": "node scripts/check-versions.js",
@@ -27,6 +27,8 @@
     "wiki-workspace",
     "docker-compose.yml",
     "agents.docker-compose.yml",
+    "docker-compose.override.example.yml",
+    "agents.docker-compose.override.example.yml",
     "mcp.endpoints.example.json",
     ".env.example",
     "tsconfig.json",

package/src/cli/wiki-manager.js

@@ -660,7 +660,9 @@ async function runRuntime(argv, agent) {
   const { createApprovalManager } = await import('../runtime/approvals.js');
   const { conversationSeed, runRuntimeAgenticWorkflow } = await import('../runtime/runner.js');
 
-  const host = valueAfter(argv, '--host') ?? process.env.WIKI_MANAGER_RUNTIME_HOST ?? '127.0.0.1';
+  // Same default as wiki-workspace runtime up and ensureRuntime: a loopback
+  // bind is invisible to the serve container.
+  const host = valueAfter(argv, '--host') ?? process.env.WIKI_MANAGER_RUNTIME_HOST ?? '0.0.0.0';
   const port = Number(valueAfter(argv, '--port') ?? process.env.WIKI_MANAGER_RUNTIME_PORT ?? 7788);
   const stateDir = valueAfter(argv, '--state-dir') ?? defaultRuntimeStateDir();
   const auth = resolveRuntimeAuthToken({ host, stateDir });

package/src/commands/slash.js

@@ -1,7 +1,8 @@
-import { execFileSync } from 'node:child_process';
 import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { openExternalUrl } from '../shell/openExternal.js';
+import { classifyCommandFailure, failureHint, rawFailureText } from '../core/commandFailure.js';
 import { join, relative } from 'node:path';
-import { composeServices, listServices, runWikiCli, serviceLogs, serviceStates, startService, stopService } from '../core/compose.js';
+import { composeServices, listServices, runWikiCli, serviceLogs, serviceNames, serviceStates, startService, stopService } from '../core/compose.js';
 import {
   applyMcpRuntimeStatus,
   buildMcpStatus,
@@ -187,17 +188,7 @@ function countIndexLinks(workspacePath) {
 function folderStats(files) {
   const totalBytes = files.reduce((sum, file) => sum + file.size, 0);
   const latest = files.reduce((best, file) => (file.mtimeMs > (best?.mtimeMs ?? 0) ? file : best), null);
-  const largest = files.reduce((best, file) => (file.size > (best?.size ?? 0) ? file : best), null);
-  return { count: files.length, totalBytes, latest, largest };
-}
-
-function formatRecentFiles(files, limit = 3) {
-  const recent = [...files].sort((a, b) => b.mtimeMs - a.mtimeMs).slice(0, limit);
-  if (recent.length === 0) return '  recent: -';
-  return [
-    '  recent:',
-    ...recent.map((file) => `    - ${file.relativePath} (${formatBytes(file.size)})`),
-  ].join('\n');
+  return { count: files.length, totalBytes, latest };
 }
 
 function collectWorkspaceStats(session) {
@@ -224,7 +215,6 @@ function collectWorkspaceStats(session) {
     deliverables: folderStats(deliverables),
     logs: folderStats(logs),
     index,
-    untrackedFiles: untracked,
   };
 }
 
@@ -265,11 +255,12 @@ function workspaceStatsColumns(stats) {
     statLine('answers', stats.answers),
     `index: ${stats.index.exists ? 'ok' : 'missing'} (${stats.index.links} links)`,
   ]);
+  // Counts only. `largest:` and the `recent:` list printed full relative paths
+  // in a half-width column, so every line wrapped or was clipped and the block
+  // read as noise. The file listing belongs to a command with room for it.
   const rawColumn = sectionBlock('Raw sources', [
     statLine('untracked', stats.untracked),
     statLine('ingested', stats.ingested),
-    stats.untracked.largest ? `largest: ${stats.untracked.largest.relativePath} (${formatBytes(stats.untracked.largest.size)})` : 'largest: -',
-    ...formatRecentFiles(stats.untrackedFiles).split('\n'),
   ]);
   const deliveryColumn = sectionBlock(`Deliverables: ${deliverablesLatest}`, [
     statLine('templates', stats.templates),
@@ -723,6 +714,32 @@ export function localizedOperationResult({ operation, target, status = 'succeede
   };
 }
 
+// Failure counterpart of localizedOperationResult. The raw docker output never
+// reaches the conversation: it goes to the runtime log lane through `step()`,
+// while Donna gets a stable reason code she can phrase — and act on, since
+// every reason maps to something the operator can actually do.
+export function localizedOperationFailure({ operation, target, error }) {
+  const reason = classifyCommandFailure(error);
+  const hint = reason === 'unknown' ? failureHint(error) : '';
+  const facts = JSON.stringify({
+    operation,
+    target,
+    status: 'failed',
+    reason,
+    ...(hint ? { detail: hint } : {}),
+  });
+  return {
+    output: facts,
+    rawOutput: true,
+    agentTrigger: [
+      "Formule l'échec structuré suivant dans la langue et le ton demandés par le profil du workspace.",
+      "Réponds en une ou deux phrases humaines: ce qui a échoué, et l'action concrète que la personne peut faire.",
+      'Ne cite aucune commande, aucun chemin de fichier, aucun drapeau shell ni sortie docker.',
+      `Résultat: ${facts}`,
+    ].join('\n'),
+  };
+}
+
 function formatRuntimeRunStatus(state) {
   const status = state?.status ?? 'unknown';
   const runId = state?.runId ? ` run=${state.runId}` : '';
@@ -770,7 +787,8 @@ export async function handleSlashCommand(line, context) {
       });
     } catch (err) {
       step(formatActivityError('agents', verb, err));
-      return { output: err instanceof Error ? err.message : String(err) };
+      step(`Agents: docker output — ${rawFailureText(err)}`);
+      return localizedOperationFailure({ operation: verb, target: 'agents', error: err });
     }
   };
 
@@ -915,9 +933,9 @@ export async function handleSlashCommand(line, context) {
         const output = await listServices(context.session);
         return rawCommandResult('/services', output);
       } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
         step(formatActivityError('services', 'list', err));
-        return { output: message };
+        step(`Services: docker output — ${rawFailureText(err)}`);
+        return localizedOperationFailure({ operation: 'list', target: 'workspace-services', error: err });
       }
     }
     case 'start': {
@@ -939,9 +957,9 @@ export async function handleSlashCommand(line, context) {
           images: missingImages,
         });
       } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        step(formatActivityError('services', 'stop', err));
-        return { output: message };
+        step(formatActivityError('services', 'start', err));
+        step(`Services: docker output — ${rawFailureText(err)}`);
+        return localizedOperationFailure({ operation: 'start', target: service || 'workspace-services', error: err });
       }
     }
     case 'stop': {
@@ -957,21 +975,25 @@ export async function handleSlashCommand(line, context) {
           target: service || 'workspace-services',
         });
       } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        step(formatActivityError('services', 'logs', err));
-        return { output: message };
+        step(formatActivityError('services', 'stop', err));
+        step(`Services: docker output — ${rawFailureText(err)}`);
+        return localizedOperationFailure({ operation: 'stop', target: service || 'workspace-services', error: err });
       }
     }
     case 'logs': {
       const service = args[1];
+      // A usage mistake is not a runtime failure: keep it a plain instruction
+      // rather than sending it to Donna to be rephrased.
+      if (!service) return { output: `Usage: /logs <service> [tail] — services: ${serviceNames().join(', ')}` };
       const tail = args[2] ? Number(args[2]) : 120;
       try {
         step(`Services: reading logs for ${service ?? 'service'}…`);
         const output = await serviceLogs(context.session, service, { tail });
         return rawCommandResult(`/logs ${[service, args[2]].filter(Boolean).join(' ')}`.trim(), output);
       } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { output: message };
+        step(formatActivityError('services', 'logs', err));
+        step(`Services: docker output — ${rawFailureText(err)}`);
+        return localizedOperationFailure({ operation: 'logs', target: service || 'workspace-services', error: err });
       }
     }
     case 'mcp': {
@@ -1070,13 +1092,10 @@ export async function handleSlashCommand(line, context) {
           if (payload?.ok !== true || typeof authorizationUrl !== 'string') {
             return connectorResult(`Google authorization could not start (${payload?.error ?? 'missing authorization URL'}).`);
           }
-          const opener = process.platform === 'darwin' ? 'open' : 'xdg-open';
-          try {
-            execFileSync(opener, [authorizationUrl], { stdio: 'ignore' });
+          if (openExternalUrl(authorizationUrl)) {
             return connectorResult('Google authorization opened successfully in the user browser.');
-          } catch {
-            return connectorResult(`Google authorization requires the user to open this URL: ${authorizationUrl}`);
           }
+          return connectorResult(`Google authorization requires the user to open this URL: ${authorizationUrl}`);
         } catch (err) {
           return connectorResult(`Google authorization could not start (${err instanceof Error ? err.message : String(err)}).`);
         }
@@ -1362,13 +1381,8 @@ export async function handleSlashCommand(line, context) {
       const port = context.session.workspaceEnv?.WIKI_SERVE_PORT ?? '3100';
       const url = `http://localhost:${port}`;
       const note = context.session.workspaceEnv ? '' : ' (no workspace loaded — using default port)';
-      const opener = process.platform === 'darwin' ? 'open' : 'xdg-open';
-      try {
-        execFileSync(opener, [url], { stdio: 'ignore' });
-        return { output: `Opening web UI: ${url}${note}` };
-      } catch {
-        return { output: `Web UI: ${url}${note}` };
-      }
+      if (openExternalUrl(url)) return { output: `Opening web UI: ${url}${note}` };
+      return { output: `Web UI: ${url}${note}` };
     }
     case 'clear': {
       const key = context.session.workspace || '__global__';

package/src/core/agentEvents.js

@@ -151,6 +151,26 @@ export function reduceAgentEvents(events = []) {
   return publicProjection(state);
 }
 
+// Maps every projected conversation entry back to the sequence of the event
+// that produced it. The conversation is derived from the event log, never
+// stored, so "delete everything below this question" can only be expressed as
+// "delete every event after the one that appended it". Replays the same
+// applyEvent used by reduceAgentEvents, so the mapping cannot drift from the
+// projection it describes.
+export function conversationEventSequences(events = []) {
+  const state = createProjectionState();
+  const sequences = [];
+  for (const event of events) {
+    applyEvent(state, event);
+    const sequence = Number.isFinite(Number(event?.sequence)) ? Number(event.sequence) : null;
+    // Streaming deltas mutate the last entry in place instead of appending, so
+    // an entry keeps the sequence of the event that first created it.
+    while (sequences.length < state.conversation.length) sequences.push(sequence);
+    if (sequences.length > state.conversation.length) sequences.length = state.conversation.length;
+  }
+  return sequences;
+}
+
 function createProjectionState() {
   return {
     conversation: [],