@dotdrelle/wiki-manager 0.15.66 → 0.15.70

package/.env.example

@@ -39,11 +39,8 @@ WORKSPACES_ROOT=/path/to/workspaces
 #   "documents": { "headers": { "Authorization": "Bearer <DOCUMENTS_MCP_AUTH_TOKEN>" } }
 #
 # Leave empty to disable authentication on that agent (not recommended in production).
-
 CME_MCP_AUTH_TOKEN=
 DOCUMENTS_MCP_AUTH_TOKEN=
-# Generated by `wiki-workspace agents up` when missing.
-CONNECTORS_MCP_AUTH_TOKEN=
 
 # ── Agent ports (optional, change only if defaults conflict) ───────────────────
 
@@ -55,6 +52,16 @@ CONNECTORS_MCP_AUTH_TOKEN=
 #
 # Enable the opt-in agent-connectors service:
 CONNECTORS_ENABLED=false
+CONNECTORS_MCP_AUTH_TOKEN=
+
+# Agentic runtime gateway (Deep Agents) — enabled by default, started by
+# `agents up`. The manager never starts it, only discovers it via
+# agent-runtimes.json; set GATEWAY_ENABLED=false to opt out.
+GATEWAY_ENABLED=true
+# GATEWAY_PORT=7789
+# Generated by `agents up` if empty, like the other agent tokens; the manager
+# sends it as the Bearer header on every gateway call.
+GATEWAY_AUTH_TOKEN=
 #
 # The wikiLLM Google OAuth application is baked into the agent-connectors image
 # at build time, from agent-external/agent-connectors/.env.build.local. Neither

package/README.md

@@ -120,6 +120,59 @@ in isolated workspaces.
 
 ![wikiLLM functional diagram — inputs, MCP calls and outputs around the agentic orchestrator and workspaces](https://raw.githubusercontent.com/dotdrelle/llm-wiki-manager/main/docs/architecture.png)
 
+## How wikiLLM compares
+
+Several open projects now build a Markdown wiki with an LLM. They target
+**different problems** — the useful questions are *what goes in, what comes out,
+and who operates it*. Snapshot as of 2026; all of these move quickly.
+
+Each cell keeps its detail and carries a score — ✅ first-class · 🟡 partial or
+indirect · ❌ not a goal — and the last column names the project that **covers
+that need best**.
+
+| Dimension / need | **wikiLLM** (this project) | **OpenWiki** — `langchain-ai/openwiki` | **DeepWiki-Open** — `asyncfuncai/deepwiki-open` | **GraphRAG** — `microsoft/graphrag` | Best coverage |
+| --- | --- | --- | --- | --- | --- |
+| Built for | Turning scattered **business documents** into a team wiki, then regenerating deliverables from it | Giving **coding agents** a readable map of a codebase | Auto-documenting a **code repository** with diagrams | Answering **global questions** over a large text corpus | *depends on your goal* |
+| Ingest arbitrary business documents (Confluence, PDF, Office, SaaS) | ✅ Confluence exports, PDF/Office files, notes, SaaS connectors | 🟡 personal-mode connectors only — Notion, Gmail, Slack | ❌ code repos only | 🟡 plain-text files only, and no wiki as output | **wikiLLM** |
+| Document a source-code repository | ❌ nothing to ingest from a repo | ✅ *code mode*, with claims linked to source evidence (OKF) | ✅ repo → interactive wiki + Mermaid diagrams | ❌ not a goal | **OpenWiki / DeepWiki-Open** |
+| Primary output | ✅ Maintained wiki **+ regenerated deliverables** from your templates (reports, pages, exports) | 🟡 A wiki about the codebase, for agents to read | 🟡 An interactive wiki + architecture diagrams | ❌ An entity graph + community summaries (Parquet), not a wiki | **wikiLLM** (only one producing deliverables) |
+| Keep the wiki current over time | ✅ Re-ingest on demand or on a schedule | ✅ `--update` flag / CI action | 🟡 Regenerated per run | ✅ `graphrag update` (delta merge) | **wikiLLM / OpenWiki** |
+| Knowledge structure | Deterministic concept folders + a derived community graph | Linked pages + evidence-grounded claims | LLM-generated pages + diagrams | Leiden communities over an entity/relationship graph | *task-dependent* |
+| Browsable wiki UI for a team | ✅ Web UI: wiki browser, dependency graph, chat, run/execution view (single-user today) | 🟡 Local-only browser visualiser (127.0.0.1) + CLI chat | ✅ Self-hostable web app (Next.js + Python) with RAG chat | ❌ Library / CLI — no UI | **DeepWiki-Open / wikiLLM** |
+| Evidence-grounded claims & citations | 🟡 Cites retrieved context, never invents facts | ✅ Grounded claims tied to versioned source | 🟡 RAG-cited answers | ✅ Citations to source text units | **OpenWiki / GraphRAG** |
+| Corpus-wide graph Q&A over the knowledge | 🟡 BM25 + vector retrieval feeding generation | ❌ not a goal | 🟡 RAG chat scoped to one repo | ✅ Entity graph + local/global community search | **GraphRAG** |
+| Multiple isolated projects on one install | ✅ Workspaces, each with its own services, ports and secrets | ❌ one wiki per run | ❌ one wiki per repo | ❌ one index per corpus | **wikiLLM** |
+| Orchestration & governance | ✅ Capability-based dispatcher (**Donna**): human approval by default, per-run budgets, idempotent writes, crash recovery | ❌ One Deep Agent loop (LangGraph) | ❌ One generation pipeline | ❌ Deterministic indexing pipeline | **wikiLLM** |
+| Durable runs — crash recovery, queued work | ✅ Boot-time re-attachment + extra runs queued | 🟡 Resumable page-job queue (`.run.json`) | ❌ regenerate from scratch | ❌ re-run the index | **wikiLLM** |
+| Source connectors as separate services | ✅ Confluence, document conversion, e-mail — each an independent MCP agent | 🟡 Built-in connector set | ❌ | ❌ | **wikiLLM** |
+| Run fully offline with local models | ✅ Per-workspace provider config, OpenAI-compatible or a gateway (Ollama, vLLM, MLX…) | ✅ 13+ providers incl. Ollama / LM Studio | ✅ incl. Ollama | ✅ any OpenAI-compatible endpoint | *any* |
+| License | ❌ PolyForm **Noncommercial** | ✅ MIT | ✅ MIT | ✅ MIT | **OpenWiki / DeepWiki-Open / GraphRAG** |
+
+**The short version:**
+
+- **OpenWiki** and **DeepWiki-Open** document *source code*. Point wikiLLM at a
+  repository and there is nothing for it to ingest; point either of them at a
+  stack of Confluence pages and a Word document and that is not their job.
+- **GraphRAG** builds *retrieval structure*, not a wiki you read or deliverables
+  you ship — it is a strong back end for corpus-wide Q&A, and complementary
+  rather than competing.
+- **wikiLLM** is the only one of the four whose output is *both* a browsable wiki
+  *and* regenerated business documents, and the only one with the operational
+  layer — isolated projects, bounded approvals, automatic recovery, a web
+  console — that a shared internal tool needs.
+
+**What wikiLLM does *not* try to do (today):**
+
+- Document a codebase for coding agents — that is OpenWiki / DeepWiki-Open
+  territory.
+- Serve a true multi-user instance with per-user identity and an attributed
+  audit trail. This is a single-user deployment baseline (see the scope note
+  above); multi-user is specified and planned next.
+- Expose a graph-query API over the corpus the way GraphRAG does; retrieval is
+  BM25 plus a vector index feeding generation.
+- Ship or host the multi-provider AI gateway — routing to several providers is
+  supported, the gateway itself is infrastructure you bring.
+
 ## Quick start — your first wiki in ~5 minutes
 
 The fastest way in: a **browsable wiki, its dependency graph, and a grounded
@@ -402,6 +455,7 @@ answer "what is this and how do I start it", and stop there.
 | [`docs/configuration.md`](docs/configuration.md) | Every configuration key: root `.env`, Compose overrides, `mcp.endpoints.json`, workspace `.env`, `.wikirc.yaml`, parallelism |
 | [`docs/technical-reference.md`](docs/technical-reference.md) | Workspace model, services, the `donna` shell, agent tooling, orchestration and activity contracts, security model |
 | [`docs/authoring-skills.md`](docs/authoring-skills.md) | Writing a workspace skill: what splits a body into runs, chains, concurrency, parameters, and the interpretation rules |
+| [`docs/agentic-runtime.md`](docs/agentic-runtime.md) | The external agentic runtime: `agent-runtimes.json`, the `RuntimeProvider` contract, the gateway, and governance |
 | [`docs/claude-desktop.md`](docs/claude-desktop.md) | Using a workspace from Claude Desktop |
 | [`CLAUDE.md`](CLAUDE.md) | Repository guidance: invariants to preserve when changing this code |
 

package/agent-runtimes.example.json

@@ -0,0 +1,68 @@
+{
+  "_comment": "Agentic runtimes for this manager (RFC § 37), seeded to agent-runtimes.json on first scaffold — enabled by default, matching the scaffold's GATEWAY_ENABLED=true (set GATEWAY_ENABLED=false in .env, or enabled:false here, to opt out). Rules: (1) a capability is read-only unless it declares mutationClass or defaultRequiresApproval; (2) the 'plan' operation is always a dry-run and never pauses for approval; (3) read/write pairs are TWO capabilities, not two operations, so the approval class stays per-capability; (4) the runtime has eyes (read tools), ideas (free reasoning) and a mouth (gated side-effects), but no hands on the workspace — the hands are the DAG. See llm-wiki-manager/docs/agentic-runtime.md.",
+  "runtimes": [
+    {
+      "id": "deepagents",
+      "type": "deepagents",
+      "endpoint": "http://localhost:7789",
+      "enabled": true,
+      "capabilities": [
+        {
+          "name": "agent.review",
+          "operations": ["run"],
+          "description": "Read-only audit of a wiki workspace: compare source documents against the existing concept pages, identify missing or under-covered classes, and produce a structured gap report. No mutation.",
+          "aliases": ["audit", "review", "analyze", "compare", "check"]
+        },
+        {
+          "name": "agent.consistency",
+          "operations": ["run"],
+          "description": "Read-only detection of contradictions and inconsistencies between wiki pages and their sources, citing the conflicting passages. No mutation.",
+          "aliases": ["consistency", "coherence", "contradictions", "conflicts"]
+        },
+        {
+          "name": "agent.synthesize",
+          "operations": ["run"],
+          "description": "Read-only cross-source synthesis: build a structured summary of several documents on one subject, using web search tools when available to complement the sources. No mutation.",
+          "aliases": ["synthesize", "summarize", "synthesis"]
+        },
+        {
+          "_comment": "operations: 'plan' reports the proposal only (no pause, dry-run); 'run' integrates it and waits for human approval (defaultRequiresApproval).",
+          "name": "agent.plan",
+          "operations": ["plan", "run"],
+          "description": "Given an analysis, propose a deterministic DAG plan (ingest, build, sync) as a validated fragment. The 'plan' operation only reports the proposal; 'run' integrates it and waits for human approval.",
+          "aliases": ["plan", "propose"],
+          "aliasOperations": { "plan": "plan", "propose": "plan", "apply": "run", "execute": "run" },
+          "defaultRequiresApproval": true
+        },
+        {
+          "name": "agent.answer",
+          "operations": ["run"],
+          "description": "Read-only research answer: investigate a question using the wiki sources and web search, and reply with a grounded answer. No mutation.",
+          "aliases": ["answer", "question", "explain"]
+        },
+        {
+          "_comment": "mutationClass 'ingest': writes the findings into the workspace inbox, approval required.",
+          "name": "agent.research",
+          "operations": ["run"],
+          "description": "Web research grounded in the wiki: answer a complex question using wiki sources and web search, then write the findings into the workspace inbox. Mutation, approval required.",
+          "aliases": ["research", "investigate"],
+          "mutationClass": "ingest"
+        },
+        {
+          "name": "agent.preview",
+          "operations": ["run"],
+          "description": "Compose the notification report from the workspace profile and show it, without sending. No mutation.",
+          "aliases": ["preview", "draft", "compose"]
+        },
+        {
+          "_comment": "defaultRequiresApproval: sending the mail pauses for human approval.",
+          "name": "agent.notify",
+          "operations": ["run"],
+          "description": "Read the workspace profile for the notification recipient, then send the report by email. Mutation, approval required.",
+          "aliases": ["notify", "send", "email", "report"],
+          "defaultRequiresApproval": true
+        }
+      ]
+    }
+  ]
+}

package/agents.docker-compose.yml

@@ -25,6 +25,12 @@
 #   DOCUMENT_LLM_MODEL     — lightonai/LightOnOCR-2-1B
 #   DOCUMENT_LLM_API_KEY   — OpenAI/OpenAI-compatible API key for document OCR
 #   DOCUMENT_LLM_TIMEOUT_SECONDS — 120
+#   GATEWAY_PORT           — 7789
+#   GATEWAY_ENABLED        — false; true to start the agentic runtime gateway
+#   GATEWAY_AUTH_TOKEN     — bearer token for the gateway (generated if empty);
+#                            the manager sends it on every call. The model is
+#                            NOT configured here: the manager sends its active
+#                            profile model with every run.
 #
 # Set these variables in a .env file at the directory where you run wiki-workspace,
 # or export them in your shell before running wiki-workspace agents up.
@@ -62,7 +68,7 @@ services:
     restart: unless-stopped
 
   documents:
-    image: dotdrelle/agent-wiki-documents:latest
+    image: dotdrelle/agent-documents:latest
     user: "${UID:-1000}:${GID:-1000}"
     ports:
       - "${DOCUMENTS_MCP_PORT:-3337}:8080"
@@ -134,3 +140,31 @@ services:
       - ${AGENTS_DATA_DIR:-./.agents-data}/connectors:/data
       - ${WORKSPACES_ROOT:?Set WORKSPACES_ROOT to the directory containing all workspace folders}:/workspaces
     restart: unless-stopped
+
+  # Agentic runtime gateway — the external Deep Agents service the manager
+  # routes open-ended analysis to (agent-runtimes.json, endpoint 7789).
+  # Opt-in like connectors: set GATEWAY_ENABLED=true. The manager never starts
+  # this service, only discovers it; its failure leaves every DAG untouched.
+  gateway:
+    profiles: [gateway]
+    image: dotdrelle/wiki-agentic-gateway:latest
+    user: "${UID:-1000}:${GID:-1000}"
+    ports:
+      - "${GATEWAY_PORT:-7789}:7789"
+    environment:
+      - GATEWAY_CONFIG_DIR=/config
+      - GATEWAY_AUTH_TOKEN=${GATEWAY_AUTH_TOKEN:-}
+      - NODE_USE_ENV_PROXY=${NODE_USE_ENV_PROXY:-}
+      - HTTPS_PROXY=${HTTPS_PROXY:-}
+      - HTTP_PROXY=${HTTP_PROXY:-}
+      - NO_PROXY=${NO_PROXY:-localhost,127.0.0.1,host.docker.internal}
+    extra_hosts:
+      - host.docker.internal:host-gateway
+    volumes:
+      # One file, two readers: the manager routes on agent-runtimes.json, the
+      # gateway serves the capabilities of its own entry from the same file.
+      # Absolute path, computed by wiki-workspace from the manager state dir.
+      - ${AGENT_RUNTIMES_FILE:?Set AGENT_RUNTIMES_FILE}:/config/agent-runtimes.json:ro
+      - ${AGENTS_DATA_DIR:-./.agents-data}/gateway:/config
+      - ${WORKSPACES_ROOT:?Set WORKSPACES_ROOT to the directory containing all workspace folders}:/workspaces
+    restart: unless-stopped

package/docker-compose.yml

@@ -110,10 +110,10 @@ services:
       - host.docker.internal:host-gateway
     restart: unless-stopped
 
-  # ── agent-wiki-production ─────────────────────────────────────────────────
+  # ── agent-production ─────────────────────────────────────────────────
 
   production-mcp:
-    image: dotdrelle/agent-wiki-production:latest
+    image: dotdrelle/agent-production:latest
     user: "${UID:-1000}:${GID:-1000}"
     labels:
       wiki-manager.description: "Production MCP server for ingest/build/export jobs."
@@ -130,7 +130,7 @@ services:
       # error. Every compose-deployed ingest then ran without the Lot 4 barrier
       # and left the published map stale — the very defect that work fixed.
       # `copy` stays out on purpose: it is the legacy step, opt-in only.
-      - PRODUCTION_ALLOWED_STEPS=${PRODUCTION_ALLOWED_STEPS:-doctor,ingest,ingest_plan,ingest_apply,concepts,reclassify-concepts,taxonomy,build,export,polish,restore,pipeline}
+      - PRODUCTION_ALLOWED_STEPS=${PRODUCTION_ALLOWED_STEPS:-doctor,ingest,ingest_plan,ingest_apply,build,export,polish,restore,pipeline}
       - PRODUCTION_REQUIRE_CONFIRMATION=${PRODUCTION_REQUIRE_CONFIRMATION:-false}
       # Parallelism levers — effective concurrency ≈ recommendedConcurrency.
       # Intermediate defaults (4/8). Low profile 2/4, high profile 8/16.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dotdrelle/wiki-manager",
-  "version": "0.15.66",
+  "version": "0.15.70",
   "description": "Agentic shell and orchestration cockpit for llm-wiki workspaces.",
   "repository": {
     "type": "git",
@@ -19,7 +19,7 @@
   },
   "scripts": {
     "start": "bun ./bin/wiki-manager.js",
-    "test": "node --test src/core/skillInvocation.test.js src/core/skillCompiler.test.js src/runtime/skillRun.test.js src/runtime/controlDrain.test.js src/runtime/controlCancellation.test.js src/cli/runtimeStartup.test.js src/cli/wiki-manager.test.js src/agent/graph.test.js src/agent/skillRecursion.test.js src/contracts/schemas.test.js src/core/activity.test.js src/core/env.test.js src/core/agentsCompose.test.js src/core/profileServiceStatus.test.js src/core/workspaceProfile.test.js src/core/buildInfo.test.js src/core/agentEvents.test.js src/core/skillChainView.test.js src/core/runtimeLog.test.js src/activity/activityAggregator.test.js src/graph/runGraphProjector.test.js src/core/workflow.test.js src/core/planPatch.test.js src/core/agentLoop.test.js src/core/plan.test.js src/core/mcp.test.js src/core/toolLoop.test.js src/core/documentIntake.test.js src/core/dockerCompose.test.js src/core/otherWorkspacesRunning.test.js src/core/wikiSetup.test.js src/core/wikiWorkspace.test.js src/core/wikirc.test.js src/core/workspaceInherit.test.js src/core/cacert.test.js src/core/composeOverrides.test.js src/core/setEnvValue.test.js src/core/commandFailure.test.js src/core/currentArtifact.test.js src/core/googleGrants.test.js src/core/modelFetch.test.js src/core/startupCheck.test.js src/core/queueStore.test.js src/orchestrator/agentRegistry.test.js src/orchestrator/capabilityRegistry.test.js src/orchestrator/capabilityResolver.test.js src/orchestrator/planValidator.test.js src/orchestrator/planIntegrator.test.js src/orchestrator/taskStatuses.test.js src/orchestrator/scheduler.test.js src/orchestrator/attemptManager.test.js src/orchestrator/resultAggregator.test.js src/orchestrator/approvalPolicy.test.js src/orchestrator/dispatcher.test.js src/orchestrator/objectiveResolver.test.js src/commands/slash.test.js src/shell/repl.test.js src/shell/setupWizardModality.test.js src/shell/setupWizardPlaceholders.test.js src/shell/setupWizardSuggestions.test.js src/shell/setupWizardDiscovery.test.js src/shell/wrapText.test.js src/runtime/lifecycle.test.js src/runtime/store.test.js src/runtime/workspaceIsolation.test.js src/runtime/controlMessages.test.js src/runtime/recoveryManager.test.js src/runtime/server.test.js src/runtime/supervisor.test.js src/runtime/delegation.test.js src/runtime/runner.test.js src/runtime/runner.e2e.test.js src/runtime/skillChain.e2e.test.js src/runtime/donna-contract.test.js src/runtime/approvals.test.js src/runtime/auth.test.js",
+    "test": "node --test src/core/skillInvocation.test.js src/core/skillCompiler.test.js src/runtime/skillRun.test.js src/runtime/controlDrain.test.js src/runtime/controlCancellation.test.js src/cli/runtimeStartup.test.js src/cli/wiki-manager.test.js src/agent/graph.test.js src/agent/skillRecursion.test.js src/contracts/schemas.test.js src/core/activity.test.js src/core/env.test.js src/core/agentsCompose.test.js src/core/profileServiceStatus.test.js src/core/workspaceProfile.test.js src/core/buildInfo.test.js src/core/agentEvents.test.js src/core/skillChainView.test.js src/core/runtimeLog.test.js src/core/runtimeEventAdapter.test.js src/activity/activityAggregator.test.js src/graph/runGraphProjector.test.js src/core/workflow.test.js src/core/planPatch.test.js src/core/agentLoop.test.js src/core/plan.test.js src/core/mcp.test.js src/core/toolLoop.test.js src/core/documentIntake.test.js src/core/dockerCompose.test.js src/core/otherWorkspacesRunning.test.js src/core/wikiSetup.test.js src/core/wikiWorkspace.test.js src/core/wikirc.test.js src/core/workspaceInherit.test.js src/core/cacert.test.js src/core/composeOverrides.test.js src/core/setEnvValue.test.js src/core/commandFailure.test.js src/core/currentArtifact.test.js src/core/googleGrants.test.js src/core/modelFetch.test.js src/core/startupCheck.test.js src/core/queueStore.test.js src/orchestrator/agentRegistry.test.js src/orchestrator/capabilityRegistry.test.js src/orchestrator/capabilityResolver.test.js src/orchestrator/planValidator.test.js src/orchestrator/planIntegrator.test.js src/orchestrator/taskStatuses.test.js src/orchestrator/scheduler.test.js src/orchestrator/attemptManager.test.js src/orchestrator/resultAggregator.test.js src/orchestrator/approvalPolicy.test.js src/orchestrator/dispatcher.test.js src/orchestrator/objectiveResolver.test.js src/orchestrator/providers/fakeRuntimeProvider.test.js src/orchestrator/providers/runtimeProviders.test.js src/orchestrator/providers/dispatcherExternalRuntime.test.js src/orchestrator/providers/deepAgentsProvider.test.js src/commands/slash.test.js src/shell/repl.test.js src/shell/setupWizardModality.test.js src/shell/setupWizardPlaceholders.test.js src/shell/setupWizardSuggestions.test.js src/shell/setupWizardDiscovery.test.js src/shell/wrapText.test.js src/runtime/lifecycle.test.js src/runtime/store.test.js src/runtime/workspaceIsolation.test.js src/runtime/controlMessages.test.js src/runtime/recoveryManager.test.js src/runtime/server.test.js src/runtime/supervisor.test.js src/runtime/delegation.test.js src/runtime/runner.test.js src/runtime/runner.e2e.test.js src/runtime/skillChain.e2e.test.js src/runtime/donna-contract.test.js src/runtime/approvals.test.js src/runtime/auth.test.js",
     "check-versions": "node scripts/check-versions.js",
     "prepack": "node scripts/check-versions.js",
     "prepublishOnly": "node scripts/check-versions.js",
@@ -38,6 +38,7 @@
     "docker-compose.override.example.yml",
     "agents.docker-compose.override.example.yml",
     "mcp.endpoints.example.json",
+    "agent-runtimes.example.json",
     ".env.example",
     "tsconfig.json",
     "bunfig.toml",

package/src/agent/graph.js

@@ -891,7 +891,7 @@ export async function handleRuntimeControlTool(session, tool, args = {}) {
           delegated: true,
           runId: inRun.runId,
           summary: inRun.summary ?? null,
-          message: `Action lancée (${String(inRun.runId).slice(0, 8)}) après validation du plan réel : ${inRun.summary?.tasks ?? 0} tâche(s), ${inRun.summary?.agent ?? 'agent résolu'}. Exécution en cours.`,
+          message: `Action started (${String(inRun.runId).slice(0, 8)}) after real-plan validation: ${inRun.summary?.tasks ?? 0} task(s), ${inRun.summary?.agent ?? 'resolved agent'}. Execution in progress.`,
         });
       }
       const result = await postRuntimeDelegate(objective, { url, workspace });
@@ -900,9 +900,9 @@ export async function handleRuntimeControlTool(session, tool, args = {}) {
             delegated: true,
             runId: result.runId,
             summary: result.delegation ?? null,
-            message: `Action lancée (${String(result.runId).slice(0, 8)}) après validation du plan réel : ${result.delegation?.tasks ?? 0} tâche(s), ${result.delegation?.agent ?? 'agent résolu'}. Exécution en cours.`,
+            message: `Action started (${String(result.runId).slice(0, 8)}) after real-plan validation: ${result.delegation?.tasks ?? 0} task(s), ${result.delegation?.agent ?? 'resolved agent'}. Execution in progress.`,
           })
-        : `Délégation refusée : ${result?.error ?? JSON.stringify(result)}`;
+        : `Delegation refused: ${result?.error ?? JSON.stringify(result)}`;
     }
     if (tool === 'run_skill') {
       const skillName = String(args.skillName ?? '').trim();
@@ -952,12 +952,13 @@ export async function handleRuntimeControlTool(session, tool, args = {}) {
        par ressemblance.
 
        La garde de cycle ci-dessus ne voit que les répétitions. Elle laissait
-       donc passer la cascade réellement observée sur un `/wiki-ingest` :
-       l'intention n°2 du corps est mot pour mot celui de
-       `/wiki-rebuild-concepts`, dont l'intention décrit à son tour
-       `/wiki-reclassify`, puis `/wiki-taxonomy`. Trois compétences distinctes,
-       aucun cycle, et la grille de concepts comme la taxonomie reconstruites
-       plusieurs fois pour une seule demande.
+       donc passer la cascade réellement observée sur un `/wiki-ingest` : une
+       intention compilée décrivait mot pour mot le corps d'une compétence
+       sœur, dont l'intention décrivait à son tour la suivante. Trois
+       compétences distinctes, aucun cycle, et la grille de concepts comme la
+       taxonomie reconstruites plusieurs fois pour une seule demande.
+       (Ces compétences sœurs ont disparu avec la simplification 0.15.66 ; la
+       garde, elle, reste.)
 
        Une intention compilée EST déjà le travail à faire : elle se délègue.
        La composition explicite reste ouverte — un corps qui nomme sa cible dit
@@ -1266,7 +1267,7 @@ export function buildAgentSystemPrompt(state) {
       ? `Workspace profile (.wiki/profile.md) — durable user preferences, apply these to every reply (tone, tutoiement/vouvoiement, formatting, etc.):\n${workspaceProfile}`
       : null,
     currentArtifactPromptLine(currentArtifactFor(state.session)),
-    'Runtime control: you have runtime__status, runtime__cancel, runtime__kill and runtime__enqueue. When the user asks to stop, remove, clean or kill the current run, its jobs or the queue ("supprime le job et la queue", "arr\u00eate tout"), call runtime__kill (or runtime__cancel for a soft stop of just the run) and confirm what was stopped. When the user explicitly asks to delete, reset, abandon or replace the current plan, call runtime__kill with purge=true; never set purge=true for a simple stop. For questions about what is running or queued, call runtime__status and answer from its data. You have no approval tool: a pending approval is granted only by the user through the approval button or the /approve command. Never grant, claim or report an approval yourself; when the user asks to proceed with pending mutations, tell them to use those controls. When the user asks for a NEW action while a run is active, do not execute it: propose runtime__enqueue (run it after) or, if they insist it replaces the current work, runtime__kill then the new action.',
+    'Runtime control: you have runtime__status, runtime__cancel, runtime__kill and runtime__enqueue. When the user asks to stop, remove, clean or kill the current run, its jobs or the queue ("supprime le job et la queue", "arr\u00eate tout"), call runtime__kill (or runtime__cancel for a soft stop of just the run) and confirm what was stopped. When the user explicitly asks to delete, reset, abandon or replace the current plan, call runtime__kill with purge=true; never set purge=true for a simple stop. For questions about what is running or queued, call runtime__status and answer from its data. You have no approval tool: a pending approval is granted only by the user through the approval button or the /approve command. Never grant, claim or report an approval yourself; when the user asks to proceed with pending mutations, tell them to use those controls. A request to approve, validate, confirm or accept a pending run is a human control action: NEVER call runtime__delegate (or any capability) for it — answer with the control to use and nothing else. When the user asks for a NEW action while a run is active, do not execute it: propose runtime__enqueue (run it after) or, if they insist it replaces the current work, runtime__kill then the new action.',
     'When the user asks to refresh, show, or update the displayed plan or status, call runtime__status. This is a state refresh request, not a new business capability, and must never be delegated.',
     'Report every runtime control outcome exactly as the tool returned it \u2014 never embellish. If runtime__kill reports 0 run(s)/0 task(s)/0 purged, say there was nothing active to stop or purge; do NOT claim a run, plan, pending approval or queue item was removed. If runtime__status returns an error or could not be read, say the runtime state could not be retrieved and do not describe a state you never obtained. Never assert that something was cleaned, cancelled, approved or purged unless that specific tool result confirms it.',
     'Durable profile updates are actions in this stabilized version: delegate them instead of writing directly.',
@@ -1751,7 +1752,7 @@ export function createAgentGraph(options = {}) {
             forceDelegation: canDelegate,
           };
         }
-        const failure = 'Réponse rejetée : Donna a exposé une instruction interne ou une procédure manuelle incorrecte.';
+        const failure = 'Response rejected: Donna exposed an internal instruction or an incorrect manual procedure.';
         emitAgentEvent(state.session, 'assistant_message', 'agent_guard', { content: failure });
         return { response: failure, pendingToolCalls: null, readyToStream: false };
       }

package/src/agent/skillRecursion.test.js

@@ -98,21 +98,22 @@ test('borne la profondeur même sans cycle', async () => {
 });
 
 /*
- Cascade observée sur un `/wiki-ingest` : deux `/wiki-rebuild-concepts`, puis
- `/wiki-reclassify`, puis `/wiki-taxonomy`. Aucun cycle — trois compétences
- distinctes — mais la grille de concepts et la taxonomie reconstruites
- plusieurs fois pour une seule demande. La deuxième intention compilée de
- `/wiki-ingest` est mot pour mot le corps de `/wiki-rebuild-concepts` : le
- sélecteur par description la reconnaissait légitimement.
+ Cascade observée à l'époque des compétences concepts : un `/wiki-ingest`
+ relançait les compétences voisines plusieurs fois pour une seule demande,
+ parce que la deuxième intention compilée était mot pour mot le corps d'une
+ compétence sœur et que le sélecteur par description la reconnaissait
+ légitimement. Ces compétences (rebuild-concepts/reclassify/taxonomy) ont
+ disparu avec la simplification 0.15.66 ; la garde contre la récursion, elle,
+ reste — c'est elle que ces tests verrouillent.
 */
 const callWithObjective = (state, skillName, objective) =>
   handleRuntimeControlTool(state, 'run_skill', { skillName, _userInput: objective })
     .then((raw) => JSON.parse(raw));
 
 test('refuse une compétence voisine que l’intention décrit sans la nommer', async () => {
-  const objective = 'Run the production pipeline steps concepts, reclassify-concepts and taxonomy, in that order.';
+  const objective = 'Run the production pipeline steps ingest, build, export and polish, in that order.';
   const ran = [];
-  const result = await callWithObjective(session(['wiki-ingest'], ran), 'wiki-rebuild-concepts', objective);
+  const result = await callWithObjective(session(['wiki-ingest'], ran), 'wiki-build', objective);
 
   assert.equal(result.ok, false);
   assert.equal(result.code, 'nested_skill_match_blocked');
@@ -145,20 +146,20 @@ test('un chemin de fichier commençant par un nom de compétence ne vaut pas inv
 });
 
 test('hors de toute chaîne, la sélection par description reste permise', async () => {
-  const result = await callWithObjective(session(undefined), 'wiki-taxonomy', 'republish the graph taxonomy');
+  const result = await callWithObjective(session(undefined), 'wiki-build', 'regenerate the deliverables from the templates');
 
   assert.equal(result.ok, true);
 });
 
 /*
  Le nom seul ne prouve rien. Plusieurs compétences du scaffold portent un nom
- qui est aussi un mot courant : « Run the production pipeline steps concepts,
- reclassify-concepts and taxonomy » nomme `pipeline`, dont le lancement rejoue
+ qui est aussi un mot courant : « Run the production pipeline steps ingest,
+ build, export and polish » nomme `pipeline`, dont le lancement rejoue
  ingest + build + export + polish. Une intention doit citer sa cible EN TANT QUE
  compétence, pas l'employer comme mot.
 */
 test('un nom employé comme mot courant ne vaut pas invocation', async () => {
-  const objective = 'Run the production pipeline steps concepts, reclassify-concepts and taxonomy, in that order.';
+  const objective = 'Run the production pipeline steps ingest, build, export and polish, in that order.';
   const ran = [];
   const result = await callWithObjective(session(['wiki-ingest'], ran), 'pipeline', objective);