create-byan-agent 2.60.0 → 2.60.2

package/install/templates/_byan/connaissance/mantras-sources.md

@@ -0,0 +1,295 @@
+# Mantras — Sources et Origines
+
+**Version :** 2.0
+**Derniere mise a jour :** 2026-02-19
+**Usage :** Chaque mantra applique par BYAN a une origine sourcee.
+Quand un mantra est invoque, BYAN peut pointer vers sa source originelle.
+
+---
+
+## Mantras de Conception (1-39)
+
+### Philosophie et Pensee
+
+**Mantra #1 — Penser avant d'agir**
+Origine : Rene Descartes, "Discours de la methode" (1637) — "je pense donc je suis"
+Source : https://fr.wikisource.org/wiki/Discours_de_la_m%C3%A9thode
+
+**Mantra #2 — Questionner les evidences**
+Origine : Methode scientifique, Francis Bacon "Novum Organum" (1620)
+Source : https://fr.wikipedia.org/wiki/Novum_Organum
+
+**Mantra #3 — Connais ton domaine**
+Origine : Domain-Driven Design, Eric Evans (2003)
+Source : https://www.domainlanguage.com/ddd/
+
+**Mantra #4 — Le contexte est roi**
+Origine : Context-Driven Testing, James Bach & Cem Kaner (2001)
+Source : https://context-driven-testing.com/
+
+### Collaboration
+
+**Mantra #5 — Communiquer clairement**
+Origine : Agile Manifesto, "Individuals and interactions over processes and tools" (2001)
+Source : https://agilemanifesto.org/
+
+**Mantra #6 — Partager la connaissance**
+Origine : Collective Code Ownership, XP (Kent Beck, 1999)
+Source : https://www.extremeprogramming.org/rules/collective.html
+
+**Mantra #7 — Feedback rapide**
+Origine : Extreme Programming, Kent Beck "XP Explained" (1999)
+Source : https://www.oreilly.com/library/view/extreme-programming-explained/0201616416/
+
+**Mantra #8 — Retrospective continue**
+Origine : Scrum Guide, Ken Schwaber & Jeff Sutherland
+Source : https://scrumguides.org/scrum-guide.html
+
+### Qualite
+
+**Mantra #9 — Zero defaut**
+Origine : Six Sigma, Motorola (1986) / Philip Crosby "Quality is Free" (1979)
+Source : https://fr.wikipedia.org/wiki/Six_Sigma
+
+**Mantra #10 — Tests d'abord**
+Origine : Test-Driven Development, Kent Beck (2002)
+Source : https://www.oreilly.com/library/view/test-driven-development/0321146530/
+
+**Mantra #11 — Refactoring continu**
+Origine : Martin Fowler "Refactoring" (1999)
+Source : https://martinfowler.com/books/refactoring.html
+
+**Mantra #12 — Code lisible**
+Origine : Robert C. Martin "Clean Code" (2008)
+Source : https://www.oreilly.com/library/view/clean-code-a/9780136083238/
+
+### Agilite
+
+**Mantra #13 — Livrer souvent**
+Origine : Continuous Delivery, Jez Humble & David Farley (2010)
+Source : https://continuousdelivery.com/
+
+**Mantra #14 — Adapter le plan**
+Origine : Agile Manifesto, "Responding to change over following a plan" (2001)
+Source : https://agilemanifesto.org/principles.html
+
+**Mantra #15 — Equipe autonome**
+Origine : Scrum, Ken Schwaber (1995)
+Source : https://scrumguides.org/scrum-guide.html#scrum-team
+
+**Mantra #16 — MVP d'abord**
+Origine : Eric Ries "The Lean Startup" (2011)
+Source : https://theleanstartup.com/principles
+
+### Technique
+
+**Mantra #17 — Separation des preoccupations**
+Origine : Edsger Dijkstra "On the role of scientific thought" (1974)
+Source : https://www.cs.utexas.edu/users/EWD/transcriptions/EWD04xx/EWD447.html
+
+**Mantra #18 — DRY (Don't Repeat Yourself)**
+Origine : Andrew Hunt & David Thomas "The Pragmatic Programmer" (1999)
+Source : https://pragprog.com/titles/tpp20/the-pragmatic-programmer-20th-anniversary-edition/
+
+**Mantra #19 — KISS (Keep It Simple, Stupid)**
+Origine : Kelly Johnson, Lockheed Skunk Works (1960)
+Source : https://fr.wikipedia.org/wiki/Principe_KISS
+
+**Mantra #20 — SOLID**
+Origine : Robert C. Martin, "Agile Software Development" (2002)
+Source : https://web.archive.org/web/20150906155800/http://www.objectmentor.com/resources/articles/Principles_and_Patterns.pdf
+
+**Mantra #21 — Principe de moindre surprise**
+Origine : Principe du moindre etonnement (PLS), Ken Arnold (Java design)
+Source : https://en.wikipedia.org/wiki/Principle_of_least_astonishment
+
+**Mantra #22 — Convention over Configuration**
+Origine : Ruby on Rails, David Heinemeier Hansson (2004)
+Source : https://rubyonrails.org/doctrine#convention-over-configuration
+
+### Tests
+
+**Mantra #23 — Pyramide de tests**
+Origine : Mike Cohn "Succeeding with Agile" (2009) + Martin Fowler blog
+Source : https://martinfowler.com/articles/practical-test-pyramid.html
+
+**Mantra #24 — Tests comme documentation**
+Origine : BDD, Dan North "Introducing BDD" (2006)
+Source : https://dannorth.net/introducing-bdd/
+
+**Mantra #25 — Tester le comportement, pas l'implementation**
+Origine : Behaviour-Driven Development, Dan North (2006)
+Source : https://dannorth.net/introducing-bdd/
+
+**Mantra #26 — Isolation des tests**
+Origine : xUnit Patterns, Gerard Meszaros (2007)
+Source : http://xunitpatterns.com/
+
+**Mantra #27 — Tests rapides**
+Origine : TDD, Kent Beck — "Run tests in under 10 minutes" (2002)
+Source : https://www.oreilly.com/library/view/test-driven-development/0321146530/
+
+### Rigueur Merise
+
+**Mantra #28 — Modeliser avant de coder**
+Origine : Merise, Hubert Tardieu, Arnold Rochfeld, Rene Colletti (1978)
+Source : https://fr.wikipedia.org/wiki/Merise_(informatique)
+
+**Mantra #29 — MCD avant MLD**
+Origine : Merise — Modele Conceptuel de Donnees → Modele Logique de Donnees
+Source : https://fr.wikipedia.org/wiki/Merise_(informatique)#MCD
+
+**Mantra #30 — MCT avant MOT**
+Origine : Merise — Modele Conceptuel de Traitements → Modele Operationnel
+Source : https://fr.wikipedia.org/wiki/Merise_(informatique)#MCT
+
+**Mantra #31 — Normalisation des donnees**
+Origine : Edgar F. Codd, "A Relational Model of Data" (1970)
+Source : https://dl.acm.org/doi/10.1145/362384.362685
+
+**Mantra #32 — Coherence donnees-traitements**
+Origine : Merise, principe de coherence MCD ↔ MCT
+Source : https://fr.wikipedia.org/wiki/Merise_(informatique)
+
+**Mantra #33 — Data Dictionary First**
+Origine : Merise + DDD (Eric Evans) — glossaire avant modelisation
+Source : https://www.domainlanguage.com/ddd/reference/
+
+**Mantra #34 — MCD ↔ MCT Cross-validation**
+Origine : Merise, validation croisee conceptuelle
+Source : https://fr.wikipedia.org/wiki/Merise_(informatique)
+
+### Resolution de Problemes
+
+**Mantra #35 — Comprendre avant de resoudre**
+Origine : G. Polya "How to Solve It" (1945)
+Source : https://press.princeton.edu/books/paperback/9780691164076/how-to-solve-it
+
+**Mantra #36 — Decomposer le probleme**
+Origine : Divide and conquer, John von Neumann / informatique theorique classique
+Source : https://en.wikipedia.org/wiki/Divide-and-conquer_algorithm
+
+**Mantra #37 — Rasoir d'Ockham**
+Origine : Guillaume d'Occam, philosophe (XIVe siecle) — "Entia non sunt multiplicanda praeter necessitatem"
+Source : https://fr.wikipedia.org/wiki/Rasoir_d%27Ockham
+
+**Mantra #38 — Inversion**
+Origine : Carl Jacobi, mathematicien (XIXe) — "Invert, always invert" (cite par Charlie Munger)
+Source : https://en.wikipedia.org/wiki/Inversion_(thinking)
+
+**Mantra #39 — Chaque action a des consequences**
+Origine : Newton, 3e loi (principe d'action-reaction) appliquee a la conception
+Source : https://fr.wikipedia.org/wiki/Lois_de_Newton#Troisi%C3%A8me_loi_de_Newton
+
+---
+
+## Mantras IA (IA-1 a IA-25)
+
+**Mantra IA-1 — Trust But Verify**
+Origine : Proverbe russe "Doveryai, no proveryai", popularise par Ronald Reagan (1986)
+Source : https://en.wikipedia.org/wiki/Trust,_but_verify
+Application Fact-Check : Toute assertion recue est traitee comme non-verifiee jusqu'a preuve du contraire. Niveau de preuve requis avant d'accepter un claim : L1 (spec) a L3 (peer-reviewed) minimum. Sans source = [HYPOTHESIS] ou [REASONING], jamais [CLAIM]. Commande : [FC].
+
+**Mantra IA-2 — Fail Fast**
+Origine : Jim Shore "Fail Fast" IEEE Software (2004)
+Source : https://www.martinfowler.com/ieeeSoftware/failFast.pdf
+
+**Mantra IA-3 — Minimal Footprint**
+Origine : Principe du moindre privilege, Jerome Saltzer & Michael Schroeder (1975)
+Source : https://dl.acm.org/doi/10.1145/361011.361067
+
+**Mantra IA-4 — Explainability**
+Origine : GDPR Art. 22 "Right to explanation" (2016) + XAI research
+Source : https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679
+
+**Mantra IA-5 — Graceful Degradation**
+Origine : Fault-tolerant computing, Algirdas Avizienis (1967)
+Source : https://en.wikipedia.org/wiki/Graceful_degradation
+
+**Mantra IA-6 — Context Awareness**
+Origine : Context-aware computing, Mark Weiser "The Computer for the 21st Century" (1991)
+Source : https://dl.acm.org/doi/10.1145/329124.329126
+
+**Mantra IA-7 — Stateless by Default**
+Origine : REST, Roy Fielding dissertation (2000)
+Source : https://www.ics.uci.edu/~fielding/pubs/dissertation/rest_arch_style.htm
+
+**Mantra IA-8 — Human in the Loop**
+Origine : HITL AI, Kamar et al., Microsoft Research (2012)
+Source : https://en.wikipedia.org/wiki/Human-in-the-loop
+
+**Mantra IA-9 — Auditability**
+Origine : SOX Compliance (2002) + NIST SP 800-92 Log Management
+Source : https://csrc.nist.gov/publications/detail/sp/800-92/final
+
+**Mantra IA-10 — Separation of Concerns for AI**
+Origine : Dijkstra (1974) applique aux systemes IA
+Source : https://www.cs.utexas.edu/users/EWD/transcriptions/EWD04xx/EWD447.html
+
+**Mantra IA-11 — No Surprise Outputs**
+Origine : Principe du moindre etonnement (PLS) applique aux LLMs
+Source : https://en.wikipedia.org/wiki/Principle_of_least_astonishment
+
+**Mantra IA-12 — Reproducibility**
+Origine : Methode scientifique — critere de reproductibilite de Popper (1934)
+Source : https://fr.wikipedia.org/wiki/R%C3%A9futabilit%C3%A9
+Application Fact-Check : Fondement du moteur de fact-check BYAN. Les 3 criteres obligatoires pour qu'une assertion soit CLAIM (et non HYPOTHESIS) : demonstrable (on peut le montrer), quantifiable (on peut le mesurer), reproductible (un tiers peut le verifier independamment). Si un seul critere manque : verdict HYPOTHESIS maximum.
+
+**Mantra IA-13 — Versioning Everything**
+Origine : Semantic Versioning, Tom Preston-Werner (2010)
+Source : https://semver.org/
+
+**Mantra IA-14 — Documentation as Code**
+Origine : Docs-as-code movement, Anne Gentle "Docs Like Code" (2017)
+Source : https://www.docslikecode.com/
+
+**Mantra IA-15 — Least Privilege**
+Origine : Saltzer & Schroeder "Protection of Information in Computer Systems" (1975)
+Source : https://dl.acm.org/doi/10.1145/361011.361067
+
+**Mantra IA-16 — Challenge Before Confirm**
+Origine : Socratic method, Platon (Ve siecle av. J.-C.) appliquee a l'IA
+Source : https://fr.wikipedia.org/wiki/Methode_soc ratique
+Application Fact-Check : Le challenge inclut systematiquement la verification epistemique. Avant de confirmer une assertion : (1) identifier le domaine, (2) exiger source L2+ pour security/performance/compliance, (3) calculer la confiance de la chaine de raisonnement. Tout claim sans source = [UNVERIFIED] avec chemin de verification propose. Commande : [FC] mode 1.
+
+**Mantra IA-17 — Progressive Disclosure**
+Origine : UX design, Jakob Nielsen "Designing Web Usability" (1999)
+Source : https://www.nngroup.com/articles/progressive-disclosure/
+
+**Mantra IA-18 — Idempotency**
+Origine : REST / HTTP, Roy Fielding (2000) + RFC 9110 Section 9.2.2
+Source : https://www.rfc-editor.org/rfc/rfc9110#section-9.2.2
+
+**Mantra IA-19 — Observability First**
+Origine : Charity Majors, Liz Fong-Jones "Observability Engineering" (2022)
+Source : https://www.oreilly.com/library/view/observability-engineering/9781492076438/
+
+**Mantra IA-20 — Bounded Context**
+Origine : Domain-Driven Design, Eric Evans (2003)
+Source : https://martinfowler.com/bliki/BoundedContext.html
+
+**Mantra IA-21 — Self-Aware Agent**
+Origine : Metacognition AI, Flavell (1979) applique aux LLMs
+Source : https://en.wikipedia.org/wiki/Metacognition
+
+**Mantra IA-22 — Incremental Learning**
+Origine : Online learning / continual learning, Thrun & Mitchell (1995)
+Source : https://en.wikipedia.org/wiki/Incremental_learning
+
+**Mantra IA-23 — No Emoji Pollution**
+Origine : BYAN Core Team — signal/bruit dans les outputs techniques (2024)
+Source : `_byan/connaissance/axioms.md` (axiome interne BYAN)
+
+**Mantra IA-24 — Clean Code = No Useless Comments**
+Origine : Robert C. Martin "Clean Code" Ch. 4 (2008)
+Source : https://www.oreilly.com/library/view/clean-code-a/9780136083238/
+
+**Mantra IA-25 — Zero Trust Architecture**
+Origine : John Kindervag, Forrester Research (2010) — "Never trust, always verify"
+Source : https://en.wikipedia.org/wiki/Zero_trust_security_model
+Application Fact-Check : Etendu aux assertions, pas seulement aux acces reseau. Aucune affirmation n'est vraie par defaut — meme si elle vient d'un expert, d'une doc, ou d'un LLM. Verification obligatoire : source, niveau de preuve, date d'expiration (security=180j, perf=365j). Une assertion expiree redevient HYPOTHESIS. Domains stricts (security/compliance/performance) : zero confiance sans L2. Commande : [FC].
+
+**Mantra IA-26 : Parler Réel**
+Origine : BYAN Core Team, clarté de communication (2026), précisée par la demande de Yan du 13 septembre 2026.
+Source : `_byan/_config/communication-policy.json`, règle `.claude/rules/plain-language.md`.
+Application : précision constante et registre adapté au destinataire de chaque livrable ; conservation des faits, conditions, réserves, incertitudes et éléments exacts. Les tirets de ponctuation sont exclus de la prose hors marqueurs initiaux de listes, avec préservation des traits d’union orthographiques, commandes, code, identifiants et citations. Aucun remplacement lexical automatique. Les incises utilisent des virgules ou des parenthèses, y compris dans les listes ; seuls leurs tirets de ponctuation sont interdits. Les titres nomment précisément le sujet ou le mécanisme, sans dramatisation ni généralisation non étayée. Ne pas inventer les événements détectés par le système. Les contrôles formels ne prouvent pas la qualité sémantique du français. La règle est une décision de conception approuvée, pas une conclusion scientifique sur l’origine des habitudes lexicales.

package/install/templates/_byan/core/activation/soul-activation.md

@@ -65,10 +65,11 @@ Exception : si l'agent declare `soul-required: true` dans son activation, STOP e
 **SI Agent autonome :**
 - Lire `{project-root}/_byan/agents/{agent_name}-tao.md` si il existe → stocker comme `{tao}`
 
-**Application** : Si tao charge, appliquer les directives vocales a TOUS les outputs :
-- Registre et signatures verbales
-- Vocabulaire interdit
-- Temperature emotionnelle
+**Application** : Si le Tao est chargé, appliquer les règles au livrable et à son destinataire réel :
+- Pour BYAN principal, charger la politique référencée par le Tao et résoudre chaque profil selon la demande autorisée.
+- Les signatures, préférences de conversation et températures ne constituent pas des obligations pour les documents destinés à des tiers.
+- Les spécialistes conservent leur identité ; lorsqu’ils contribuent à un livrable BYAN, recevoir et appliquer ses contraintes compactes de précision et de rédaction.
+- La mémoire reste une source historique, sans priorité sur les consignes approuvées de la tâche.
 - Si tao absent : continuer sans directives vocales (non-bloquant)
 
 ### Etape 5 — Charger le profil ELO (confiance calibree)
@@ -94,7 +95,7 @@ Exception : si l'agent declare `soul-required: true` dans son activation, STOP e
 1. **Silence total** — Aucun output pendant le chargement
 2. **Non-bloquant par defaut** — Un fichier manquant ne bloque pas l'activation
 3. **Soul avant Tao** — Toujours charger le soul avant le tao (le tao derive du soul)
-4. **Tao applique partout** — Si charge, les directives vocales s'appliquent a CHAQUE output
+4. **Registre par livrable** : le Tao guide la rédaction selon le destinataire ; le registre conversationnel ne s’impose pas aux documents.
 5. **ELO partage** — Le profil ELO est global, pas par agent
 6. **Pas de pre-chargement** — Charger au moment de l'activation uniquement
 

package/install/templates/_byan/core/communication.cjs

@@ -0,0 +1,76 @@
+'use strict';
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+const SOURCE = '_byan/_config/communication-policy.json';
+const FALLBACK = Object.freeze({ version: 'minimal-1', default_profile: 'fr-technique', common: ['Français technique précis, naturel et respectueux. Adapter chaque livrable à son destinataire. Préserver faits, incertitudes, commandes, identifiants et citations exactes. Aucun emoji ni tiret de ponctuation hors marqueurs de listes. Encadrer les incises par des virgules ou des parenthèses, y compris dans une liste. Les titres nomment leur sujet sans dramatisation ni généralisation non étayée.'], profiles: { 'fr-technique': { rules: ['Nommer les objets, opérations, conditions et conséquences.'], address_mode: 'context' } } });
+const validLines = x => Array.isArray(x) && x.length > 0 && x.every(s => typeof s === 'string' && s.trim() && s.length <= 4000);
+function validatePolicy(p) {
+  if (!p || p.version !== 'fr-1' || p.default_profile !== 'fr-technique' || !validLines(p.common) || !p.profiles || !Object.prototype.hasOwnProperty.call(p.profiles, p.default_profile)) throw Error('policy-invalid');
+  for (const [id, profile] of Object.entries(p.profiles)) {
+    if (!/^fr-(technique|pedagogique|client|procedure|analyse)$/.test(id) || !validLines(profile.rules) || !['context', 'tu', 'vous'].includes(profile.address_mode)) throw Error('policy-invalid');
+  }
+  return p;
+}
+function loadPolicy(root) {
+  try {
+    const raw = fs.readFileSync(path.join(root, SOURCE), 'utf8');
+    if (Buffer.byteLength(raw) > 65536) throw Error('policy-invalid');
+    return { policy: validatePolicy(JSON.parse(raw)), diagnostic: { status: 'active', source: SOURCE, revision: crypto.createHash('sha256').update(raw).digest('hex').slice(0, 16) } };
+  } catch (e) {
+    return { policy: FALLBACK, diagnostic: { status: 'degraded', source: 'builtin', reason: e.code === 'ENOENT' ? 'policy-missing' : 'policy-invalid' } };
+  }
+}
+// Callers supply only task/configuration metadata from authorized channels here.
+// Free text and recovered context are intentionally not inspected or persisted.
+function resolveContract(loaded, metadata = {}, channel = 'deliverable') {
+  const p = loaded.policy;
+  const fields = {};
+  for (const level of [metadata.identified, metadata.project, metadata.explicit]) {
+    if (!level || typeof level !== 'object') continue;
+    for (const key of ['profile', 'audience', 'deliverable_id', 'language', 'address_mode', 'explanation_level']) {
+      if (typeof level[key] === 'string' && level[key].trim() && level[key].length <= 500) fields[key] = level[key];
+    }
+  }
+  const requested = fields.profile || p.default_profile;
+  const found = Object.prototype.hasOwnProperty.call(p.profiles, requested);
+  const profile = found ? requested : p.default_profile;
+  const selected = p.profiles[profile];
+  const diagnostic = { ...loaded.diagnostic, version: p.version, profile, channel };
+  if (!found) Object.assign(diagnostic, { status: 'degraded', reason: 'profile-missing' });
+  return { ...fields, policy_version: p.version, language: fields.language || 'fr', profile,
+    address_mode: ['tu', 'vous', 'context'].includes(fields.address_mode) ? fields.address_mode : selected.address_mode,
+    rules: [...p.common, ...selected.rules], diagnostic };
+}
+function renderContract(c) {
+  const { diagnostic, rules, ...metadata } = c;
+  return `BYAN communication ${JSON.stringify(diagnostic)}\nMétadonnées du livrable : ${JSON.stringify(metadata)}\n${rules.map(s => '- ' + s).join('\n')}`;
+}
+function protectedProse(text) {
+  if (typeof text !== 'string') return '';
+  const blank = value => value.replace(/[^\n]/g, ' ');
+  let fence = null;
+  const withoutCode = text.split('\n').map(line => {
+    const marker = line.match(/^ {0,3}(`{3,}|~{3,})(.*)$/);
+    if (fence) {
+      if (marker && marker[1][0] === fence[0] && marker[1].length >= fence.length && !marker[2].trim()) fence = null;
+      return blank(line);
+    }
+    if (marker) { fence = marker[1]; return blank(line); }
+    if (/^\s*>/.test(line) || /^\s*\|?\s*:?-{3,}\s*\|/.test(line) || /^\s*(?:-{3,}|\*{3,}|_{3,})\s*$/.test(line)) return blank(line);
+    return line.replace(/(`+)[\s\S]*?\1/g, blank).replace(/https?:\/\/\S+/g, blank).replace(/^\s*[-\u2013\u2014*+]\s+/, blank);
+  }).join('\n');
+  return withoutCode.replace(/«[^»]*»|“[^”]*”|"[^"\n]*"/g, blank);
+}
+function scanPunctuation(text) {
+  const hits = [];
+  protectedProse(text).split('\n').forEach((line, i) => {
+    for (const match of line.matchAll(/[\u2013\u2014]|(?<=\s)-(?=\s)/g)) {
+      const j = match.index;
+      if (match[0] === '\u2013' && /\d/.test(line[j - 1] || '') && /\d/.test(line[j + 1] || '')) continue;
+      hits.push({ kind: 'punctuation', line: i + 1, column: j + 1, good: 'Employer une virgule, un point, deux-points ou des parenthèses. Préserver les éléments exacts.' });
+    }
+  });
+  return hits;
+}
+module.exports = { SOURCE, FALLBACK, validatePolicy, loadPolicy, resolveContract, renderContract, protectedProse, scanPunctuation };

package/install/templates/_byan/mcp/byan-mcp-server/lib/agent-matcher.js

@@ -59,6 +59,43 @@ function tokenize(text) {
     .filter((w) => w.length >= 3 && !STOPWORDS.has(w));
 }
 
+// matchesKeyword — does a keyword really occur in the text?
+//
+// LEFT word boundary only: the keyword must START a word, but may continue.
+//
+// WHY. Measured 2026-08-07 on real chat sentences, plain `includes` scored a
+// specialist that had nothing to do with the request:
+//   "tu peux me lister le dossier src"  -> "peux" contains "ux"      -> ux-designer
+//   "deploie la version en production"  -> "production" has "product" -> pm
+// Short keywords (ux, ui, ci, cd) sit inside common French words. A wrong agent
+// proposed is worse than none: it looks like understanding while being wrong.
+//
+// Why not a boundary on BOTH sides: these are STEMS, not whole words.
+// "documente" must catch "documenter" and "documentation" — that is what makes
+// the French list work at all. With a right-hand boundary, "il faut documenter
+// l'API" stopped routing to the technical writer.
+//
+// What this does NOT fix, and it should be said: "production" does start with
+// "product". That is a VOCABULARY problem (the stem is too short for its
+// meaning), not a mechanism one, and it belongs in DOMAIN_KEYWORDS.
+const WORD_CHAR = /[a-z0-9]/;
+
+export function matchesKeyword(text, keyword) {
+  if (!keyword) return false;
+  // Multi-word keywords keep substring matching: their length already protects
+  // them, and requiring a boundary would break spacing variants.
+  if (/\s/.test(keyword)) return text.includes(keyword);
+
+  let from = 0;
+  for (;;) {
+    const i = text.indexOf(keyword, from);
+    if (i === -1) return false;
+    const before = i === 0 ? '' : text[i - 1];
+    if (!WORD_CHAR.test(before)) return true;
+    from = i + 1;
+  }
+}
+
 // scoreAgent — pure per-agent score. keyword hits (x3) + title/role text overlap.
 export function scoreAgent(taskText, agent) {
   const task = deburr(taskText);
@@ -67,7 +104,7 @@ export function scoreAgent(taskText, agent) {
   const hits = [];
   const kws = DOMAIN_KEYWORDS[agent.name] || [];
   for (const kw of kws) {
-    if (task.includes(deburr(kw))) { keywordScore += 1; hits.push(kw); }
+    if (matchesKeyword(task, deburr(kw))) { keywordScore += 1; hits.push(kw); }
   }
   const agentTokens = tokenize(`${agent.title || ''} ${agent.role || ''}`);
   let textScore = 0;

package/install/templates/_byan/mcp/byan-mcp-server/lib/communication.cjs

@@ -0,0 +1,77 @@
+// Generated from _byan/core/communication.cjs. Do not edit.
+'use strict';
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+const SOURCE = '_byan/_config/communication-policy.json';
+const FALLBACK = Object.freeze({ version: 'minimal-1', default_profile: 'fr-technique', common: ['Français technique précis, naturel et respectueux. Adapter chaque livrable à son destinataire. Préserver faits, incertitudes, commandes, identifiants et citations exactes. Aucun emoji ni tiret de ponctuation hors marqueurs de listes. Encadrer les incises par des virgules ou des parenthèses, y compris dans une liste. Les titres nomment leur sujet sans dramatisation ni généralisation non étayée.'], profiles: { 'fr-technique': { rules: ['Nommer les objets, opérations, conditions et conséquences.'], address_mode: 'context' } } });
+const validLines = x => Array.isArray(x) && x.length > 0 && x.every(s => typeof s === 'string' && s.trim() && s.length <= 4000);
+function validatePolicy(p) {
+  if (!p || p.version !== 'fr-1' || p.default_profile !== 'fr-technique' || !validLines(p.common) || !p.profiles || !Object.prototype.hasOwnProperty.call(p.profiles, p.default_profile)) throw Error('policy-invalid');
+  for (const [id, profile] of Object.entries(p.profiles)) {
+    if (!/^fr-(technique|pedagogique|client|procedure|analyse)$/.test(id) || !validLines(profile.rules) || !['context', 'tu', 'vous'].includes(profile.address_mode)) throw Error('policy-invalid');
+  }
+  return p;
+}
+function loadPolicy(root) {
+  try {
+    const raw = fs.readFileSync(path.join(root, SOURCE), 'utf8');
+    if (Buffer.byteLength(raw) > 65536) throw Error('policy-invalid');
+    return { policy: validatePolicy(JSON.parse(raw)), diagnostic: { status: 'active', source: SOURCE, revision: crypto.createHash('sha256').update(raw).digest('hex').slice(0, 16) } };
+  } catch (e) {
+    return { policy: FALLBACK, diagnostic: { status: 'degraded', source: 'builtin', reason: e.code === 'ENOENT' ? 'policy-missing' : 'policy-invalid' } };
+  }
+}
+// Callers supply only task/configuration metadata from authorized channels here.
+// Free text and recovered context are intentionally not inspected or persisted.
+function resolveContract(loaded, metadata = {}, channel = 'deliverable') {
+  const p = loaded.policy;
+  const fields = {};
+  for (const level of [metadata.identified, metadata.project, metadata.explicit]) {
+    if (!level || typeof level !== 'object') continue;
+    for (const key of ['profile', 'audience', 'deliverable_id', 'language', 'address_mode', 'explanation_level']) {
+      if (typeof level[key] === 'string' && level[key].trim() && level[key].length <= 500) fields[key] = level[key];
+    }
+  }
+  const requested = fields.profile || p.default_profile;
+  const found = Object.prototype.hasOwnProperty.call(p.profiles, requested);
+  const profile = found ? requested : p.default_profile;
+  const selected = p.profiles[profile];
+  const diagnostic = { ...loaded.diagnostic, version: p.version, profile, channel };
+  if (!found) Object.assign(diagnostic, { status: 'degraded', reason: 'profile-missing' });
+  return { ...fields, policy_version: p.version, language: fields.language || 'fr', profile,
+    address_mode: ['tu', 'vous', 'context'].includes(fields.address_mode) ? fields.address_mode : selected.address_mode,
+    rules: [...p.common, ...selected.rules], diagnostic };
+}
+function renderContract(c) {
+  const { diagnostic, rules, ...metadata } = c;
+  return `BYAN communication ${JSON.stringify(diagnostic)}\nMétadonnées du livrable : ${JSON.stringify(metadata)}\n${rules.map(s => '- ' + s).join('\n')}`;
+}
+function protectedProse(text) {
+  if (typeof text !== 'string') return '';
+  const blank = value => value.replace(/[^\n]/g, ' ');
+  let fence = null;
+  const withoutCode = text.split('\n').map(line => {
+    const marker = line.match(/^ {0,3}(`{3,}|~{3,})(.*)$/);
+    if (fence) {
+      if (marker && marker[1][0] === fence[0] && marker[1].length >= fence.length && !marker[2].trim()) fence = null;
+      return blank(line);
+    }
+    if (marker) { fence = marker[1]; return blank(line); }
+    if (/^\s*>/.test(line) || /^\s*\|?\s*:?-{3,}\s*\|/.test(line) || /^\s*(?:-{3,}|\*{3,}|_{3,})\s*$/.test(line)) return blank(line);
+    return line.replace(/(`+)[\s\S]*?\1/g, blank).replace(/https?:\/\/\S+/g, blank).replace(/^\s*[-\u2013\u2014*+]\s+/, blank);
+  }).join('\n');
+  return withoutCode.replace(/«[^»]*»|“[^”]*”|"[^"\n]*"/g, blank);
+}
+function scanPunctuation(text) {
+  const hits = [];
+  protectedProse(text).split('\n').forEach((line, i) => {
+    for (const match of line.matchAll(/[\u2013\u2014]|(?<=\s)-(?=\s)/g)) {
+      const j = match.index;
+      if (match[0] === '\u2013' && /\d/.test(line[j - 1] || '') && /\d/.test(line[j + 1] || '')) continue;
+      hits.push({ kind: 'punctuation', line: i + 1, column: j + 1, good: 'Employer une virgule, un point, deux-points ou des parenthèses. Préserver les éléments exacts.' });
+    }
+  });
+  return hits;
+}
+module.exports = { SOURCE, FALLBACK, validatePolicy, loadPolicy, resolveContract, renderContract, protectedProse, scanPunctuation };

package/install/templates/_byan/mcp/byan-mcp-server/lib/dispatch-router.js

@@ -139,11 +139,18 @@ export function claudeModelForComplexity(complexity) {
   return 'sonnet'; // unknown -> a safe middle
 }
 
+// Claude Workflow leaves expose effort independently of the model. Agent-tool
+// callers may keep effort null; native workflows consume this mapping explicitly.
+export function claudeEffortForModel(model) {
+  return ({ haiku: 'low', sonnet: 'medium', opus: 'high', fable: 'max' })[model] ?? null;
+}
+
 // dispatch({ nature, complexity }) -> the full routing decision:
 //   { runtime, model, effort, reasoning }
 // - Codex: model = CODEX_MODEL, effort = complexity bucket (the real knob).
 // - Claude: model = haiku/sonnet/opus/fable on the complexity ladder, effort =
-//   null (Claude has no effort knob — its "effort" IS the model tier).
+//   null for the direct Claude Agent transport; Workflow effort is exposed
+//   separately by claudeEffortForModel / native-tiers.effortForTask.
 // The red lines are enforced here regardless of caller input: Codex keeps its
 // no-Fable guard ; verification stays on Claude.
 export function dispatch({ nature, complexity } = {}) {
@@ -158,8 +165,10 @@ export function dispatch({ nature, complexity } = {}) {
   }
   return {
     runtime,
-    model: claudeModelForComplexity(complexity), // haiku/sonnet/opus/fable by complexity
-    effort: null, // Claude effort = model tier, no separate knob
+    model: isVerification(nature) || complexity == null ||
+      (typeof complexity === 'number' && !Number.isFinite(complexity))
+      ? null : claudeModelForComplexity(complexity),
+    effort: null, // direct Agent transport; native Workflow callers use effortForTask
     reasoning: isVerification(nature)
       ? 'verification stays on Claude (red line: a runtime never grades its own work)'
       : `nature "${normalize(nature)}" stays on Claude (default-safe) ; model scaled to complexity`,