@dotdrelle/wiki-manager 0.15.64 → 0.15.70

package/src/runtime/supervisor.js

@@ -1,11 +1,11 @@
 import { openSync, readSync, closeSync, fstatSync } from 'node:fs';
 import { isAbsolute, join, normalize, resolve } from 'node:path';
-import { createAgentEvent, dispatchAgentEvent } from '../core/agentEvents.js';
+import { createAgentEvent, dispatchAgentEvent, dispatchRuntimeLog } from '../core/agentEvents.js';
 import { extractActivity, mergePolledActivity, parseJsonText, sessionActivities } from '../core/activity.js';
 import { callMcpTool, formatMcpToolResult } from '../core/mcp.js';
-import { normalizeRuntimeLog } from '../core/runtimeLog.js';
 import { startNextQueuedJob, syncQueueWithActivity } from '../core/jobQueue.js';
 import { createAgentRegistry } from '../orchestrator/agentRegistry.js';
+import { discoverRuntimeProvidersOnce } from '../orchestrator/providers/runtimeProviders.js';
 
 export function startActivitySupervisor(session, {
   intervalMs = 1000,
@@ -52,11 +52,13 @@ export function startActivitySupervisor(session, {
         }
       }
       void discoverAgentsOnce(session, { registry, signal: runSignal });
+      void discoverRuntimeProvidersOnce(session, { signal: runSignal });
     }, agentRegistryIntervalMs)
     : null;
 
   void pollActivitiesOnce(session, { pollBusy, callTool, signal: runSignal });
   void discoverAgentsOnce(session, { registry, signal: runSignal });
+  void discoverRuntimeProvidersOnce(session, { signal: runSignal });
 
   return {
     pollBusy,
@@ -199,14 +201,7 @@ export async function pollActivitiesOnce(session, {
 }
 
 export function emitRuntimeLog(session, message) {
-  const payload = normalizeRuntimeLog(message, { session });
-  dispatchAgentEvent(session, createAgentEvent('runtime_log', {
-    origin: 'runtime',
-    runId: payload.runId ?? null,
-    taskId: payload.taskId ?? null,
-    workspace: payload.workspaceId ?? null,
-    payload,
-  }));
+  dispatchRuntimeLog(session, message);
 }
 
 function registryIntervalFromEnv() {

package/src/shell/RightPane.tsx

@@ -263,16 +263,27 @@ export function PlanPanel(props: { plan: PlanStep[]; width: number; jobName?: st
 
 export function ActivityPanel(props: { activities: any[]; width: number }) {
   const lineWidth = () => Math.max(8, props.width - 2);
-  const visible = () => props.activities.slice(-ACTIVITY_SLOTS.length).reverse();
-  const visibleSlots = () => visible().map((_activity, index) => index);
-  const activityAt = (index: number) => visible()[index] ?? null;
+  // session.activities is never pruned within a run (see core/agentEvents.js),
+  // so a long batch job's activity count is unbounded — render only the most
+  // recent slice, memoized like LogPanel's allLines, instead of copying and
+  // re-wrapping the entire lifetime history on every reactive tick.
+  const visible = createMemo(() => props.activities.slice(-200).reverse());
   return (
-    <box flexShrink={0} flexDirection="column" paddingX={1} backgroundColor="#111318">
+    <box flexGrow={1} flexDirection="column" paddingX={1} backgroundColor="#111318">
       <text width={lineWidth()} fg="#D6DEE8" content="Activity" />
       <Show when={visible().length > 0} fallback={<text width={lineWidth()} fg="#7F8C8D" content="no active jobs" />}>
-        <Index each={visibleSlots()}>
-          {(slot) => {
-            const activity = () => activityAt(slot());
+        <scrollbox
+          flexGrow={1}
+          flexShrink={1}
+          focusable={false}
+          scrollY={true}
+          scrollX={false}
+          stickyStart="top"
+          viewportCulling={true}
+          verticalScrollbarOptions={{ visible: visible().length > 3 }}
+        >
+        <Index each={visible()}>
+          {(activity) => {
             // Wrap instead of hard-truncating: a 40-column pane cut labels to
             // "Appliquer la config recommandée (doct…" and hid the one thing
             // that mattered. Labels get up to 2 lines, the status/error line
@@ -320,6 +331,7 @@ export function ActivityPanel(props: { activities: any[]; width: number }) {
             );
           }}
         </Index>
+        </scrollbox>
       </Show>
     </box>
   );
@@ -332,6 +344,10 @@ type LogSegment = { text: string; fg: string };
 // Continuation lines of a wrapped entry are indented and dimmed so each
 // entry reads as one visual block instead of an undifferentiated wall.
 function logMessageColor(message: string): string {
+  // A doctor summary with ZERO errors is a warning by construction
+  // ("⚠ 0 error(s), 2 warning(s)") — amber, never red, even though it
+  // mentions the word "error".
+  if (/(?<!\d)0 error\(s\)/i.test(message)) return '#FBBF24';
   if (/\b(?:trace:\s*)?WARN\b/i.test(message)) return '#FBBF24';
   if (/\b(error|failed|exception|unavailable|introuvable|HTTP 4\d\d|HTTP 5\d\d)\b/i.test(message)) return '#F38BA8';
   if (/\b(warn|warning|avertissement|fallback|retry|expired|stale)\b/i.test(message)) return '#FBBF24';
@@ -536,8 +552,8 @@ export function RightPane(props: {
       <TabHeader active={props.activeTab} queueCount={props.queueInfo.active} onTabClick={props.onTabClick} />
       <Show when={props.pendingApprovals.length > 0}>
         <box height={2} flexDirection="column" border={['left']} borderStyle="heavy" borderColor="#FBBF24" paddingX={1}>
-          <text fg="#FBBF24" content={`${props.pendingApprovals.length} approbation(s) requise(s)`} />
-          <text fg="#0B1020" bg="#FBBF24" content=" Approuver le run " onMouseUp={props.onApprove} />
+          <text fg="#FBBF24" content={`${props.pendingApprovals.length} approval(s) required`} />
+          <text fg="#0B1020" bg="#FBBF24" content=" Approve run " onMouseUp={props.onApprove} />
         </box>
       </Show>
       <Show when={props.activeTab === 'queue'} fallback={(

package/src/shell/StartupScreen.tsx

@@ -238,9 +238,36 @@ export function StartupScreen(props: {
   });
 
   const preflightChecks = createMemo(() => props.preflight?.checks ?? []);
+  const checkByKind = createMemo(() => {
+    const map = new Map<string, any>();
+    for (const check of preflightChecks()) map.set(check.kind, check);
+    return map;
+  });
+  // Docker and Internet leave the check list: they are ambient state, shown in
+  // the header (top right), not among the startup rows.
+  const dockerCheck = createMemo(() => checkByKind().get('docker'));
+  const internetCheck = createMemo(() => checkByKind().get('internet'));
+  const listChecks = createMemo(() => {
+    const order = ['workspace', 'runtime', 'agentic', 'agents', 'containers', 'mcp'];
+    const seen = new Set<string>(['docker', 'internet']);
+    const ordered: Array<{ kind: string; ok?: boolean; skipped?: boolean; pending?: boolean; detail?: string }> = [];
+    for (const kind of order) {
+      const check = checkByKind().get(kind);
+      if (!check) continue;
+      // An optional engine is not part of the startup story: when nothing is
+      // enabled, its row disappears instead of showing a misleading green ✓.
+      if (kind === 'agentic' && check.skipped) continue;
+      ordered.push(check);
+      seen.add(kind);
+    }
+    for (const check of preflightChecks()) {
+      if (!seen.has(check.kind)) ordered.push(check);
+    }
+    return ordered;
+  });
   const checkLabel = (kind: string) => ({
     docker: 'Docker', internet: 'Internet', agents: 'Agents', workspace: 'Workspaces',
-    containers: 'Containers', mcp: 'MCP', runtime: 'Runtime',
+    containers: 'Containers', mcp: 'MCP', agentic: 'Agentic runtime', runtime: 'Runtime',
   } as Record<string, string>)[kind] ?? kind;
 
   const subtitle = createMemo(() => {
@@ -281,10 +308,20 @@ export function StartupScreen(props: {
         overflow="hidden"
       >
         <box height={1} flexDirection="row">
-          <text fg="#8BD5CA" content={fit(`DONNA v${props.version}`, Math.floor(innerWidth() * 0.5))} />
-          <text fg={statusColor()} content={fit(` ${props.preflightBusy ? '◐' : statusDot(props.preflight?.status === 'ready')} ${status()}`, Math.floor(innerWidth() * 0.45))} />
+          <text fg="#8BD5CA" content={fit(`DONNA v${props.version}`, Math.floor(innerWidth() * 0.4))} />
+          <text fg={statusColor()} content={fit(` ${props.preflightBusy ? '◐' : statusDot(props.preflight?.status === 'ready')} ${status()}`, Math.floor(innerWidth() * 0.32))} />
+          <box flexGrow={1} />
+          <text fg="#7F8C8D" content={dockerCheck() ? fit(`Docker — ${dockerCheck()?.detail ?? '—'}`, Math.floor(innerWidth() * 0.28)) : ''} />
+        </box>
+        <box height={1} flexDirection="row">
+          <text height={1} fg="#7F8C8D" content={fit(subtitle(), Math.floor(innerWidth() * 0.6))} />
+          <box flexGrow={1} />
+          <text
+            height={1}
+            fg={internetCheck() ? (internetCheck()?.ok ? '#8BD5CA' : '#FBBF24') : '#7F8C8D'}
+            content={internetCheck() ? fit(`Internet — ${internetCheck()?.ok ? 'OK' : 'KO'}`, Math.floor(innerWidth() * 0.28)) : ''}
+          />
         </box>
-        <text height={1} fg="#7F8C8D" content={fit(subtitle(), innerWidth())} />
         <text height={1}>{''}</text>
         <box
           height={8}
@@ -295,7 +332,7 @@ export function StartupScreen(props: {
           overflow="hidden"
         >
           <text fg="#d6a85f">{DONNA_LOGO}</text>
-          <text fg="#888888">Intelligent workspace</text>
+          <text fg="#888888">Intelligent Agentic workspace(s)</text>
         </box>
         <text height={1}>{''}</text>
         <text height={1} fg="#7F8C8D" content={menuTitle()} />
@@ -320,8 +357,8 @@ export function StartupScreen(props: {
           </For>
         </box>
         <text height={1}>{''}</text>
-        <box height={Math.max(3, preflightChecks().length)} flexDirection="column" border={['left']} borderStyle="heavy" borderColor="#5DADE2" paddingX={1} overflow="hidden">
-          <For each={preflightChecks().length ? preflightChecks() : [
+        <box height={Math.max(3, listChecks().length)} flexDirection="column" border={['left']} borderStyle="heavy" borderColor="#5DADE2" paddingX={1} overflow="hidden">
+          <For each={listChecks().length ? listChecks() : [
             { kind: 'workspace', ok: props.wikiReady, detail: props.wikiReady ? 'default profile ready' : 'init required' },
             { kind: 'mcp', ok: props.connectedMcpServers > 0, detail: `${props.connectedMcpServers} server(s) configured` },
             { kind: 'llm', ok: Boolean(props.model), detail: props.model || 'not configured' },

package/src/shell/repl.js

@@ -127,12 +127,12 @@ const SUBCOMMAND_COMPLETION_DESCRIPTIONS = {
 export function runtimeUnavailableReason(runtime) {
   if (runtime?.url) return null;
   const reason = runtime?.error ?? runtime?.unavailableReason ?? runtime?.reason ?? null;
-  return reason ? String(reason) : 'runtime introuvable';
+  return reason ? String(reason) : 'runtime unavailable';
 }
 
 export function runtimeUnavailableAgentMessage(runtime) {
   const reason = runtimeUnavailableReason(runtime);
-  return reason ? `⚠ Runtime indisponible : ${reason} — /agent désactivé, /chat reste possible` : null;
+  return reason ? `⚠ Runtime unavailable: ${reason} — /agent disabled, /chat still available` : null;
 }
 
 export function runtimeStatusLine(runtime, session) {
@@ -145,7 +145,7 @@ export function runtimeStatusLine(runtime, session) {
 export function recordRuntimeUnavailableAgentInput(session, line, runtime) {
   const message = runtimeUnavailableAgentMessage(runtime);
   conversationMessages(session).push({ role: 'user', content: line });
-  conversationMessages(session).push({ role: 'command', content: message ?? 'Runtime indisponible.' });
+  conversationMessages(session).push({ role: 'command', content: message ?? 'Runtime unavailable.' });
   return message;
 }
 
@@ -1422,10 +1422,10 @@ async function runAgentTurn(input, {
     if (donnaMessage) {
       donnaMessage.content = stripDsmlArtifacts(donnaMessage.content).trimEnd();
       if (!donnaMessage.content.trim()) {
-        donnaMessage.content = formatLlmUnavailableMessage('flux vide');
+        donnaMessage.content = formatLlmUnavailableMessage('empty stream');
       }
     } else {
-      messages.push({ role: 'donna', content: formatLlmUnavailableMessage('flux vide') });
+      messages.push({ role: 'donna', content: formatLlmUnavailableMessage('empty stream') });
     }
     onUpdate?.();
     return {};
@@ -1464,7 +1464,7 @@ async function runAgentTurn(input, {
       }
       donnaMessage.content = stripDsmlArtifacts(donnaMessage.content).trimEnd();
       if (!donnaMessage.content.trim()) {
-        donnaMessage.content = formatLlmUnavailableMessage('flux vide');
+        donnaMessage.content = formatLlmUnavailableMessage('empty stream');
         onUpdate?.();
       }
     } catch (err) {
@@ -1481,9 +1481,9 @@ async function runAgentTurn(input, {
   }
 
   if (donnaMessage) {
-    donnaMessage.content = formatLlmUnavailableMessage('reponse vide');
+    donnaMessage.content = formatLlmUnavailableMessage('empty response');
   } else {
-    messages.push({ role: 'donna', content: formatLlmUnavailableMessage('reponse vide') });
+    messages.push({ role: 'donna', content: formatLlmUnavailableMessage('empty response') });
   }
   onUpdate?.();
   return {};
@@ -1533,8 +1533,8 @@ async function runChatToolLoop({ input, session, history, donnaMessage, onUpdate
     onTextReset,
   });
   donnaMessage.content = capped
-    ? 'Je n’ai pas pu conclure dans la limite d’itérations du mode chat. Passe en /agent si besoin.'
-    : (stripDsmlArtifacts(content).trimEnd() || formatLlmUnavailableMessage('reponse vide'));
+    ? 'Could not finish within the chat mode iteration limit. Switch to /agent if needed.'
+    : (stripDsmlArtifacts(content).trimEnd() || formatLlmUnavailableMessage('empty response'));
   onUpdate?.();
 }
 
@@ -1580,7 +1580,7 @@ async function runDirectChatTurn(input, { session, onUpdate, onStep }) {
       }
       donnaMessage.content = stripDsmlArtifacts(donnaMessage.content).trimEnd();
       if (!donnaMessage.content.trim()) {
-        donnaMessage.content = formatLlmUnavailableMessage('flux vide');
+        donnaMessage.content = formatLlmUnavailableMessage('empty stream');
         onUpdate?.();
       }
     }
@@ -1639,7 +1639,7 @@ export async function runHeadlessChatTurn(session, input, { history = [], onStep
       const clean = stripDsmlArtifacts(delta);
       if (clean) { content += clean; onTextDelta?.(clean); }
     }
-    return stripDsmlArtifacts(content).trimEnd() || formatLlmUnavailableMessage('flux vide');
+    return stripDsmlArtifacts(content).trimEnd() || formatLlmUnavailableMessage('empty stream');
   }
   return directChatUnavailableText(session);
 }

package/src/shell/repl.test.js

@@ -114,7 +114,7 @@ test('Activity uses only visible jobs and leaves remaining height to Flow/Trace'
     source.indexOf('export function ActivityPanel'),
     source.indexOf('type LogSegment'),
   );
-  assert.match(activityPanel, /<Index each=\{visibleSlots\(\)\}>/);
+  assert.match(activityPanel, /<Index each=\{visible\(\)\}>/);
   assert.doesNotMatch(activityPanel, /<Index each=\{ACTIVITY_SLOTS\}>/);
   assert.match(activityPanel, /paddingX=\{1\}/);
   assert.doesNotMatch(activityPanel, /updatedLine\(activity\(\)\)/);
@@ -144,7 +144,7 @@ test('ShellUI launcher never starts agents or workspace services implicitly', as
 test('ShellUI lets the right pane extend to the terminal edge', async () => {
   const tui = await readFile(new URL('./tui.tsx', import.meta.url), 'utf8');
   const pane = await readFile(new URL('./RightPane.tsx', import.meta.url), 'utf8');
-  assert.match(tui, /Math\.min\(58, Math\.floor\(width \* 0\.38\) \+ 2\)/);
+  assert.match(tui, /Math\.max\(32, Math\.floor\(width \* 0\.38\) \+ 2\)/);
   assert.match(pane, /paddingLeft=\{1\}/);
   assert.doesNotMatch(pane, /height="100%" flexDirection="column" padding=\{1\}/);
 });
@@ -173,6 +173,19 @@ test('Flow/Trace does not repeat the runtime source prefix on every line', async
   assert.match(entryRenderer, /prefix\.push\(\{ text: `\$\{parts\.time\} /);
 });
 
+test('a doctor summary with a nonzero error count is colored as an error, not a warning', async () => {
+  const source = await readFile(new URL('./RightPane.tsx', import.meta.url), 'utf8');
+  const colorFn = source.slice(
+    source.indexOf('function logMessageColor'),
+    source.indexOf('function logRenderLines'),
+  );
+  // The "0 error(s)" amber shortcut must be digit-anchored: "10 error(s)"
+  // ends in "0 error(s)" too, and an unanchored test painted a 10-error
+  // doctor failure the same colour as a clean run.
+  assert.match(colorFn, /\(\?<!\\d\)0 error\\\(s\\\)/);
+  assert.doesNotMatch(colorFn, /\/0 error\\\(s\\\)\/i\.test/);
+});
+
 test('runtime logs have a separator and a concise Runtime tab label', async () => {
   const source = await readFile(new URL('./RightPane.tsx', import.meta.url), 'utf8');
   const logPanel = source.slice(
@@ -742,7 +755,7 @@ test('agent mode without runtime records a visible error instead of falling back
 
   const message = recordRuntimeUnavailableAgentInput(session, 'salut', { error: 'port 7788 already in use' });
 
-  assert.equal(message, '⚠ Runtime indisponible : port 7788 already in use — /agent désactivé, /chat reste possible');
+  assert.equal(message, '⚠ Runtime unavailable: port 7788 already in use — /agent disabled, /chat still available');
   // `at` est posé à l'insertion : on compare le reste.
   assert.deepEqual(
     conversationMessages(session).map(({ at, ...rest }) => rest),
@@ -760,7 +773,7 @@ test('runtime status exposes the disconnected reason', () => {
   );
   assert.equal(
     runtimeUnavailableAgentMessage({ error: 'token mismatch' }),
-    '⚠ Runtime indisponible : token mismatch — /agent désactivé, /chat reste possible',
+    '⚠ Runtime unavailable: token mismatch — /agent disabled, /chat still available',
   );
 });
 
@@ -806,7 +819,7 @@ test('/queue cancel on a runtime workflow id points to run cancellation commands
   });
 
   assert.equal(result.exit, false);
-  assert.match(conversationMessages(session).at(-1).content, /Item géré par le runtime/);
+  assert.match(conversationMessages(session).at(-1).content, /Runtime-managed item/);
   assert.match(conversationMessages(session).at(-1).content, /\/run kill/);
 });
 

package/src/shell/tui.tsx

@@ -156,7 +156,7 @@ function App(props: {
   const exitShell = () => {
     if (exiting) return;
     exiting = true;
-    setExitStatus('Fermeture enclenchée…');
+    setExitStatus('Shutting down…');
     const task = Promise.resolve().then(async () => {
       renderer.destroy();
       console.log('[wiki-manager] shell closed; shared runtime left running.');
@@ -180,11 +180,11 @@ function App(props: {
   const conversationRows = createMemo(() => Math.max(4, dimensions().height - 5 - chatInputHeight() - 4));
   const rightColumns = createMemo(() => {
     const width = dimensions().width;
-    // 38% + 2 columns / cap 58: the Plan/Activity/Logs panes carry job
-    // labels, file names and error messages — 40 columns truncated everything
-    // into unreadable stubs. The small addition uses the terminal's right-side
-    // slack without making the conversation pane noticeably narrower.
-    return Math.max(32, Math.min(58, Math.floor(width * 0.38) + 2));
+    // 38% + 2 columns: the Plan/Activity/Logs panes carry job labels, file
+    // names and error messages. The pane scales with the terminal instead of
+    // being capped, so a wide screen widens the detail pane rather than leaving
+    // it narrow while the conversation column absorbs all the extra slack.
+    return Math.max(32, Math.floor(width * 0.38) + 2);
   });
   const leftColumns = createMemo(() => Math.max(32, dimensions().width - rightColumns() - 1));
   const conversationColumns = createMemo(() => {

package/src/shell/useAgent.ts

@@ -52,7 +52,7 @@ export function useAgent(props: { agent: unknown; packageJson: Record<string, un
       }
       if (!props.chatMode() && !trimmed.startsWith('/') && !freeTextRouting?.local) {
         const message = recordRuntimeUnavailableAgentInput(props.session, trimmed, {
-          error: props.runtimeUnavailableReason ?? 'runtime introuvable',
+          error: props.runtimeUnavailableReason ?? 'runtime unavailable',
         });
         props.addLog(message ?? 'runtime: disconnected');
         props.refresh();

package/src/shell/useSession.ts

@@ -158,7 +158,7 @@ export function useSession(props: { agent: unknown; packageJson: Record<string,
   const runtimeHint = createMemo(() => {
     version();
     if (props.runtime?.url) return null;
-    return runtimeUnavailableAgentMessage({ error: runtimeUnavailableReason() ?? 'runtime introuvable' });
+    return runtimeUnavailableAgentMessage({ error: runtimeUnavailableReason() ?? 'runtime unavailable' });
   });
   const matchContext = createMemo(() => {
     if (input() === dismissedSlashInput()) return null;

package/wiki-workspace

@@ -299,7 +299,12 @@ agents_compose() {
     local cacert_args=()
     local profile_args=()
     connectors_enabled && profile_args+=(--profile connectors)
-    WORKSPACES_ROOT="$workspaces_root" AGENTS_DATA_DIR="$agents_data_dir" \
+    gateway_enabled && profile_args+=(--profile gateway)
+    # The gateway mounts the MANAGER's agent-runtimes.json — absolute path:
+    # compose resolves relative volume paths against the compose file's
+    # directory (the installed package), never the operator's state dir.
+    local agent_runtimes_file="$(dirname "$MANAGER_ENV_FILE")/agent-runtimes.json"
+    WORKSPACES_ROOT="$workspaces_root" AGENTS_DATA_DIR="$agents_data_dir" AGENT_RUNTIMES_FILE="$agent_runtimes_file" \
       read_lines_into_array cacert_args cacert_compose_args "$agents_compose_file" "agents.cacert.compose.yml"
     # User-owned override: optional external agents, proxy passthrough and
     # any local fix live in a file the user maintains under .wiki/compose —
@@ -307,7 +312,7 @@ agents_compose() {
     local override_args=()
     local user_override="$MANAGER_COMPOSE_DIR/agents.docker-compose.override.yml"
     [[ -f "$user_override" ]] && override_args+=(-f "$user_override")
-    WORKSPACES_ROOT="$workspaces_root" AGENTS_DATA_DIR="$agents_data_dir" \
+    WORKSPACES_ROOT="$workspaces_root" AGENTS_DATA_DIR="$agents_data_dir" AGENT_RUNTIMES_FILE="$agent_runtimes_file" \
       COMPOSE_PROFILES= \
       docker compose --project-directory "$DEFAULT_MANAGER_DIR" \
         ${compose_env_args[@]+"${compose_env_args[@]}"} -f "$agents_compose_file" ${override_args[@]+"${override_args[@]}"} ${cacert_args[@]+"${cacert_args[@]}"} ${profile_args[@]+"${profile_args[@]}"} -p wiki-agents "$@"
@@ -331,6 +336,7 @@ agents_compose() {
       [[ -f "$MANAGER_ENV_FILE" ]] && compose_env_args+=(--env-file "$MANAGER_ENV_FILE")
       mkdir -p "$agents_data_dir/cme" "$agents_data_dir/documents/input" "$agents_data_dir/documents/output" "$agents_data_dir/documents/uploads"
       connectors_enabled && mkdir -p "$agents_data_dir/connectors"
+      gateway_enabled && mkdir -p "$agents_data_dir/gateway"
       mkdir -p "$workspaces_root"
       $do_pull && _agents_dc pull
       local up_args=(up -d)
@@ -345,6 +351,7 @@ agents_compose() {
       printf 'Agents: cme=:%s  documents=:%s' \
         "${CME_MCP_PORT:-3336}" "${DOCUMENTS_MCP_PORT:-3337}"
       connectors_enabled && printf '  connectors=:%s' "${CONNECTORS_MCP_PORT:-3338}"
+      gateway_enabled && printf '  gateway=:%s' "${GATEWAY_PORT:-7789}"
       printf '\n'
       [[ ! -f "$MANAGER_COMPOSE_DIR/agents.docker-compose.override.yml" ]] || printf 'User override: %s\n' "$MANAGER_COMPOSE_DIR/agents.docker-compose.override.yml"
       ;;
@@ -509,7 +516,7 @@ ensure_agent_tokens() {
   # workspace and runtime tokens are generated. Leaving them empty made a
   # fresh install start agents nobody could talk to.
   local key token
-  for key in CME_MCP_AUTH_TOKEN DOCUMENTS_MCP_AUTH_TOKEN; do
+  for key in CME_MCP_AUTH_TOKEN DOCUMENTS_MCP_AUTH_TOKEN GATEWAY_AUTH_TOKEN; do
     token="$(env_value "$MANAGER_ENV_FILE" "$key" "")"
     if [[ -z "$token" ]]; then
       token="$(generate_token)"
@@ -558,6 +565,15 @@ connectors_enabled() {
   esac
 }
 
+gateway_enabled() {
+  local enabled
+  enabled="$(env_value "$MANAGER_ENV_FILE" GATEWAY_ENABLED "${GATEWAY_ENABLED:-true}")"
+  case "$enabled" in
+    1|[Tt][Rr][Uu][Ee]|[Yy][Ee][Ss]|[Oo][Nn]) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
 ensure_endpoints_file() {
   # Without mcp.endpoints.json the shell never connects to the agents it
   # just started (and `agents status` refuses to run). Seed it from the