skillwiki 0.9.62 → 0.9.63

package/dist/skillwiki-mcp.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runSkillwikiMcpStdio
-} from "./chunk-2PENIQ3A.js";
+} from "./chunk-TUFQZ5K4.js";
 import "./chunk-7I2TPIV5.js";
 
 // src/mcp-entry.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.9.62",
+  "version": "0.9.63",
   "type": "module",
   "bin": {
     "skillwiki": "dist/cli.js",

package/skills/.claude-plugin/plugin.json

@@ -1,8 +1,8 @@
 {
   "name": "skillwiki",
-  "version": "0.9.62",
+  "version": "0.9.63",
   "skills": "./",
-  "description": "Project-aware Karpathy-style knowledge base for Claude Code: 18 prompt-only skills (wiki-*, proj-*, using-skillwiki) backed by the deterministic `skillwiki` CLI.",
+  "description": "Project-aware Karpathy-style knowledge base for Claude Code: 19 prompt-only skills (wiki-*, proj-*, using-skillwiki) backed by the deterministic `skillwiki` CLI.",
   "author": {
     "name": "karlorz",
     "url": "https://github.com/karlorz"

package/skills/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "skillwiki",
-  "version": "0.9.62",
-  "description": "Project-aware Karpathy-style knowledge base for Codex with 18 prompt-only skills backed by the deterministic skillwiki CLI.",
+  "version": "0.9.63",
+  "description": "Project-aware Karpathy-style knowledge base for Codex with 19 prompt-only skills backed by the deterministic skillwiki CLI.",
   "author": {
     "name": "karlorz",
     "url": "https://github.com/karlorz"
@@ -22,7 +22,7 @@
   "interface": {
     "displayName": "SkillWiki",
     "shortDescription": "Project-aware wiki skills for Codex agents",
-    "longDescription": "18 prompt-only skills (wiki-*, proj-*, using-skillwiki) for deterministic, project-aware knowledge workflows.",
+    "longDescription": "19 prompt-only skills (wiki-*, proj-*, using-skillwiki) for deterministic, project-aware knowledge workflows.",
     "developerName": "karlorz",
     "category": "Productivity",
     "capabilities": [

package/skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillwiki/skills",
-  "version": "0.9.62",
+  "version": "0.9.63",
   "private": true,
   "files": [
     "wiki-*",

package/skills/skills/using-skillwiki/SKILL.md

@@ -27,6 +27,7 @@ Invoke a skillwiki skill when the user:
 - Talks about project workspaces, ADRs, or distillation
 - Wants to quickly capture an idea, bug, task, or note without interrupting their workflow
 - Wants to archive or clean up old vault pages
+- Wants to hard-delete a vault path without snapshot resurrection (`wiki-remove`)
 - Needs to detect source drift or re-ingest updated content
 - Has a spec/plan in a non-skillwiki format (CodeStable, RFC, AIDE)
 - Asks about their skillwiki configuration or setup health
@@ -74,6 +75,18 @@ path, run publisher dry-run, then run the same command with `--write`.
 - Non-typed project work items and immutable raw sources keep their existing
   workflows.
 
+## CLI probe and failsafe (vault-mutating skills)
+
+Vault fleets that combine S3 + GitHub need an explicit delete-intent path. Prefer the skillwiki CLI; when it is missing, agents that still have **git/gh access to the private vault remote** use **FAILSAFE-GIT**.
+
+1. Prefer `skillwiki <subcommand> --help` when the skill requires the CLI.
+2. If skillwiki is missing/unusable but `git` (and optionally `gh`) can reach the private vault remote (`fleet.yaml` `vault_remote` / `origin` → `karlorz/wiki`):
+   - Use **FAILSAFE-GIT** documented in the skill (tombstone under `meta/delete-intents/` + commit + push). Applies to `wiki-remove` and intentional archive/delete paths.
+3. If neither skillwiki nor git/gh private-repo access works: **FAIL CLOSED**.
+   Never bare `rm` / bare `git rm` as a fleet delete (snapshot will resurrect from S3).
+4. Do not auto `npm install -g` skillwiki in headless/goal/satellite sessions.
+5. Delete-intent schema: `vault-delete-intent/v1` JSON under `meta/delete-intents/` (see `wiki-remove`). Git is SSOT for path absence; S3 is a working cache.
+
 ## Portable Source References
 The vault is shared across hosts, so host-local absolute paths are not durable source identity.
 
@@ -99,7 +112,8 @@ The vault is shared across hosts, so host-local absolute paths are not durable s
 | `wiki-lint` | Vault health and lint checks; use `health` for whole-system reports and `lint --summary` for bounded lint buckets |
 | `wiki-crystallize` | Distill the current working session into a typed-knowledge page |
 | `wiki-audit` | Verify raw provenance references and source frontmatter integrity |
-| `wiki-archive` | Archive a typed-knowledge page — move to `_archive/`, remove from index |
+| `wiki-archive` | Archive a typed-knowledge page — move to `_archive/`, remove from index (writes delete-intent) |
+| `wiki-remove` | Hard-delete a path with delete-intent tombstone; failsafe-git if CLI missing |
 | `wiki-reingest` | Detect drift in raw sources (sha256 comparison) and re-ingest updated content |
 | `wiki-add-task` | Quick-capture ideas, bugs, tasks, notes into `raw/transcripts/` without leaving the current workflow |
 | `wiki-adapter-prd` | Map foreign PRD formats (CodeStable, RFC, AIDE, Hermes) into vault pages |
@@ -135,7 +149,7 @@ Use `prd_layer` + `prd_pipeline` from `.claude/dev-loop.config.md` as source of
 
 ## CLI Backbone
 All skills are backed by the `skillwiki` CLI — a deterministic tool with no LLM calls. It handles path resolution, config management, validation, health reporting, and linting. Skills invoke it via Bash for the mechanical parts and use Claude for the creative parts.
-Key CLI subcommands: `init`, `health`, `lint`, `config`, `doctor`, `path`, `lang`, `install`, `fleet context`, `fleet validate`, `graph build`, `archive`, `drift`, `compound`, `tag-sync`, `tag reconcile`, `page publish`, `sync status`, `seed`, `stale`, `observe`, `canvas generate`.
+Key CLI subcommands: `init`, `health`, `lint`, `config`, `doctor`, `path`, `lang`, `install`, `fleet context`, `fleet validate`, `graph build`, `archive`, `remove`, `drift`, `compound`, `tag-sync`, `tag reconcile`, `page publish`, `sync status`, `seed`, `stale`, `observe`, `canvas generate`.
 Run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail` for a bounded whole-system report that includes doctor, lint, vault-sync, query-readiness, source-freshness, risk flags, and self-check coverage. Run `skillwiki lint <vault> --summary` for lint-only bucket counts with capped examples and details commands. Run `skillwiki doctor` to diagnose setup/runtime issues only. Run `skillwiki config list` to see current configuration.
 
 ## Runtime Host Context and Fleet Freshness

package/skills/skills/wiki-archive/SKILL.md

@@ -18,23 +18,36 @@ Run `skillwiki lang` at the start. Generate log entries in the resolved language
 
 Standard four reads (SCHEMA, index, log, project context if applicable).
 
-## Steps
+## Probe
+
+Same matrix as `using-skillwiki` → **CLI probe and failsafe**: PRIMARY (`skillwiki archive`), FAILSAFE-GIT (hand tombstone + `git mv` to `_archive/` + push), or FAIL CLOSED.
+
+## Steps (PRIMARY)
 
 0. Resolve vault: `skillwiki path` and `skillwiki lang`.
 1. Identify the target page. Confirm with the user which page to archive (show full relPath).
-2. Run `skillwiki archive <page> [vault]`. On a vault-sync leaf host where S3 stale originals must be pruned, use `skillwiki archive <page> [vault] --remote seaweed-wiki:cloud/wiki --remote-delete --max-remote-deletes 1` only when that remote path deletion is explicitly intended. Read the JSON output.
+2. Run `skillwiki archive <page> [vault]`. On a vault-sync leaf host where S3 stale originals must be pruned, use `skillwiki archive <page> [vault] --remote seaweed-wiki:cloud/wiki --remote-delete --max-remote-deletes 1` only when that remote path deletion is explicitly intended. Read the JSON output. Successful archive **always** writes a live-path tombstone under `meta/delete-intents/` so snapshot cannot resurrect the live key.
 3. Verify with `skillwiki index-check [vault]` — confirm no ghost entries remain.
 4. Run `skillwiki lint [vault]` — check for broken wikilinks from other pages that still reference the archived page. If found, update those pages to point to the replacement or remove the stale link.
 5. **Raw file archiving (N9 Reingest Protocol only):** When archiving a `raw/` file due to content drift, update ALL `^[raw/...]` citation markers and `sources:` frontmatter entries that reference the old path. Change `raw/articles/foo.md` to `_archive/raw/articles/foo.md` in every referencing page. Verify with `skillwiki audit` that no broken markers remain.
 6. Append a `log.md` entry: `## [{date}] archive | {relPath} → _archive/{subdir}/`.
+7. Commit/push so tombstone + archive land on private `main`.
+
+## FAILSAFE-GIT (no skillwiki)
+
+1. Confirm path. Write `meta/delete-intents/<slug>.json` with `action: "archive"`, `source: "failsafe-git"`, schema `vault-delete-intent/v1`.
+2. `git mv` live path → `_archive/<same relPath>` (create dirs as needed); update `index.md` if typed.
+3. Commit with `Delete-Intent` / `Delete-Source: failsafe-git` trailers; push to private `main`.
+4. Optional single-path `rclone deletefile` for the **live** path if remote configured.
 
 ## Reversibility
 
-Archiving is locally reversible: move the file back from `_archive/` to its original directory and re-add the wikilink entry to `index.md`. If `--remote-delete` was used, the stale active-path object is pruned from the remote after the archive move, but the archived copy remains and a restore will republish the active path on the next push.
+Archiving is locally reversible: move the file back from `_archive/` to its original directory, re-add the wikilink entry to `index.md`, and **delete the matching tombstone** under `meta/delete-intents/`. If `--remote-delete` was used, the stale active-path object is pruned from the remote after the archive move, but the archived copy remains and a restore will republish the active path on the next push once the tombstone is cleared.
 
 ## Stop conditions
 
 - `skillwiki archive` returns non-zero exit code (page not found, already archived, invalid vault).
+- FAIL CLOSED when neither CLI nor private git/gh access is available.
 - User declines to proceed.
 
 ## Forbidden
@@ -42,4 +55,5 @@ Archiving is locally reversible: move the file back from `_archive/` to its orig
 - Archiving `raw/` files outside the N9 Reingest Protocol (raw is immutable except during content-drift reingestion).
 - Archiving raw files without updating all `^[raw/...]` citation markers that reference them.
 - Archiving without user confirmation.
-- Deleting local vault files directly (archive moves locally; remote stale-path pruning is only allowed through the explicit `skillwiki archive --remote ... --remote-delete --max-remote-deletes 1` path).
+- Deleting local vault files with bare `rm` / bare `git rm` without a delete-intent tombstone (causes snapshot resurrection).
+- Remote stale-path pruning only via explicit `skillwiki archive --remote ... --remote-delete` (PRIMARY) or bounded single-path rclone in FAILSAFE-GIT.

package/skills/skills/wiki-remove/SKILL.md

@@ -0,0 +1,96 @@
+---
+name: wiki-remove
+description: Hard-delete a vault path with a durable delete-intent tombstone so S3+snapshot cannot resurrect it. Prefer skillwiki remove; if CLI missing, failsafe-git via private GitHub.
+---
+
+# wiki-remove
+
+## When This Skill Activates
+
+- User wants to permanently remove a vault path (not archive-for-reference).
+- Cleanup of stale pages that should not return via snapshot resurrection.
+- User says hard delete, remove for real, stop resurrecting.
+
+## Output language
+
+If `skillwiki` is available: run `skillwiki lang` at the start. Otherwise default to English log prose.
+
+## Pre-orientation
+
+Read SCHEMA/index only as needed. Confirm full vault-relative path with the user before delete.
+
+## Probe (required)
+
+1. `command -v skillwiki && skillwiki remove --help`
+2. `git -C <vault> rev-parse --is-inside-work-tree` and `git remote get-url origin` (expect private `karlorz/wiki` / fleet `vault_remote`)
+3. Auth: `gh auth status` **or** `git ls-remote origin HEAD`
+
+| Result | Mode |
+|--------|------|
+| skillwiki OK | **PRIMARY** |
+| skillwiki fail, git/gh + private repo OK | **FAILSAFE-GIT** |
+| neither | **FAIL CLOSED** — stop; never bare `rm` for fleet effect |
+
+Do not auto `npm install -g skillwiki` in headless/goal/satellite sessions.
+
+## PRIMARY steps
+
+1. Resolve vault: `skillwiki path`.
+2. Confirm path with user.
+3. On a vault-sync leaf when S3 prune is intentional:
+   `skillwiki remove <page> [vault] --remote seaweed-wiki:cloud/wiki --remote-delete --max-remote-deletes 1 --reason "<text>"`
+   Otherwise: `skillwiki remove <page> [vault] --reason "<text>"`
+4. Read JSON: expect `tombstone_path` under `meta/delete-intents/`, `removed` set.
+5. Commit + push via normal wiki-sync / git (tombstone + deletion must reach private `main` for durability).
+6. Report MODE=primary, paths, and whether remote-delete ran.
+
+## FAILSAFE-GIT steps (no skillwiki CLI)
+
+Agent **must** have git (and preferably gh) access to private vault remote.
+
+1. Confirm path with user. Set `PATH_REL` (vault-relative, no `..`).
+2. Write tombstone `meta/delete-intents/<slug>.json` where slug is path with `/` → `__`, e.g. `summaries/foo.md` → `summaries__foo.md.json`:
+
+```json
+{
+  "schema": "vault-delete-intent/v1",
+  "path": "PATH_REL",
+  "action": "remove",
+  "created": "ISO-8601-UTC",
+  "host": "SKILLWIKI_HOST_ID-or-unknown",
+  "actor": "agent-failsafe-git",
+  "reason": "user requested remove; skillwiki CLI unavailable",
+  "source": "failsafe-git",
+  "expires": null
+}
+```
+
+3. Delete local file at `PATH_REL` (and index line for `[[slug]]` if typed page).
+4. `git add` tombstone + path change; commit with trailers:
+
+```text
+Delete-Intent: PATH_REL
+Delete-Source: failsafe-git
+```
+
+5. `git pull --rebase origin main` (or merge fallback per vault-sync ADR) then **`git push origin HEAD:main`**. Require successful push before claiming durable success.
+6. Optional: if `rclone` and `WIKI_REMOTE` exist: `rclone deletefile "$WIKI_REMOTE/PATH_REL"` (single path only).
+7. Report `MODE=failsafe-git`, commit SHA, `S3_PRUNE=done|deferred`.
+
+## Stop conditions
+
+- User declines.
+- FAIL CLOSED (no CLI and no private git access).
+- Push to private wiki fails.
+- Path invalid or under `_archive/` without explicit restore/remove policy.
+
+## Forbidden
+
+- Bare `rm` / bare `git rm` without tombstone.
+- Force-push.
+- Unbounded `rclone sync` / mass remote delete.
+- Claiming fleet delete complete without tombstone on `origin/main` (and push success).
+
+## Reversibility
+
+Hard remove is not locally reversible from `_archive`. Restore requires re-authoring content and deleting the tombstone file under `meta/delete-intents/`, then normal push.

package/skills/using-skillwiki/SKILL.md

@@ -27,6 +27,7 @@ Invoke a skillwiki skill when the user:
 - Talks about project workspaces, ADRs, or distillation
 - Wants to quickly capture an idea, bug, task, or note without interrupting their workflow
 - Wants to archive or clean up old vault pages
+- Wants to hard-delete a vault path without snapshot resurrection (`wiki-remove`)
 - Needs to detect source drift or re-ingest updated content
 - Has a spec/plan in a non-skillwiki format (CodeStable, RFC, AIDE)
 - Asks about their skillwiki configuration or setup health
@@ -74,6 +75,18 @@ path, run publisher dry-run, then run the same command with `--write`.
 - Non-typed project work items and immutable raw sources keep their existing
   workflows.
 
+## CLI probe and failsafe (vault-mutating skills)
+
+Vault fleets that combine S3 + GitHub need an explicit delete-intent path. Prefer the skillwiki CLI; when it is missing, agents that still have **git/gh access to the private vault remote** use **FAILSAFE-GIT**.
+
+1. Prefer `skillwiki <subcommand> --help` when the skill requires the CLI.
+2. If skillwiki is missing/unusable but `git` (and optionally `gh`) can reach the private vault remote (`fleet.yaml` `vault_remote` / `origin` → `karlorz/wiki`):
+   - Use **FAILSAFE-GIT** documented in the skill (tombstone under `meta/delete-intents/` + commit + push). Applies to `wiki-remove` and intentional archive/delete paths.
+3. If neither skillwiki nor git/gh private-repo access works: **FAIL CLOSED**.
+   Never bare `rm` / bare `git rm` as a fleet delete (snapshot will resurrect from S3).
+4. Do not auto `npm install -g` skillwiki in headless/goal/satellite sessions.
+5. Delete-intent schema: `vault-delete-intent/v1` JSON under `meta/delete-intents/` (see `wiki-remove`). Git is SSOT for path absence; S3 is a working cache.
+
 ## Portable Source References
 The vault is shared across hosts, so host-local absolute paths are not durable source identity.
 
@@ -99,7 +112,8 @@ The vault is shared across hosts, so host-local absolute paths are not durable s
 | `wiki-lint` | Vault health and lint checks; use `health` for whole-system reports and `lint --summary` for bounded lint buckets |
 | `wiki-crystallize` | Distill the current working session into a typed-knowledge page |
 | `wiki-audit` | Verify raw provenance references and source frontmatter integrity |
-| `wiki-archive` | Archive a typed-knowledge page — move to `_archive/`, remove from index |
+| `wiki-archive` | Archive a typed-knowledge page — move to `_archive/`, remove from index (writes delete-intent) |
+| `wiki-remove` | Hard-delete a path with delete-intent tombstone; failsafe-git if CLI missing |
 | `wiki-reingest` | Detect drift in raw sources (sha256 comparison) and re-ingest updated content |
 | `wiki-add-task` | Quick-capture ideas, bugs, tasks, notes into `raw/transcripts/` without leaving the current workflow |
 | `wiki-adapter-prd` | Map foreign PRD formats (CodeStable, RFC, AIDE, Hermes) into vault pages |
@@ -135,7 +149,7 @@ Use `prd_layer` + `prd_pipeline` from `.claude/dev-loop.config.md` as source of
 
 ## CLI Backbone
 All skills are backed by the `skillwiki` CLI — a deterministic tool with no LLM calls. It handles path resolution, config management, validation, health reporting, and linting. Skills invoke it via Bash for the mechanical parts and use Claude for the creative parts.
-Key CLI subcommands: `init`, `health`, `lint`, `config`, `doctor`, `path`, `lang`, `install`, `fleet context`, `fleet validate`, `graph build`, `archive`, `drift`, `compound`, `tag-sync`, `tag reconcile`, `page publish`, `sync status`, `seed`, `stale`, `observe`, `canvas generate`.
+Key CLI subcommands: `init`, `health`, `lint`, `config`, `doctor`, `path`, `lang`, `install`, `fleet context`, `fleet validate`, `graph build`, `archive`, `remove`, `drift`, `compound`, `tag-sync`, `tag reconcile`, `page publish`, `sync status`, `seed`, `stale`, `observe`, `canvas generate`.
 Run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail` for a bounded whole-system report that includes doctor, lint, vault-sync, query-readiness, source-freshness, risk flags, and self-check coverage. Run `skillwiki lint <vault> --summary` for lint-only bucket counts with capped examples and details commands. Run `skillwiki doctor` to diagnose setup/runtime issues only. Run `skillwiki config list` to see current configuration.
 
 ## Runtime Host Context and Fleet Freshness

package/skills/wiki-archive/SKILL.md

@@ -18,23 +18,36 @@ Run `skillwiki lang` at the start. Generate log entries in the resolved language
 
 Standard four reads (SCHEMA, index, log, project context if applicable).
 
-## Steps
+## Probe
+
+Same matrix as `using-skillwiki` → **CLI probe and failsafe**: PRIMARY (`skillwiki archive`), FAILSAFE-GIT (hand tombstone + `git mv` to `_archive/` + push), or FAIL CLOSED.
+
+## Steps (PRIMARY)
 
 0. Resolve vault: `skillwiki path` and `skillwiki lang`.
 1. Identify the target page. Confirm with the user which page to archive (show full relPath).
-2. Run `skillwiki archive <page> [vault]`. On a vault-sync leaf host where S3 stale originals must be pruned, use `skillwiki archive <page> [vault] --remote seaweed-wiki:cloud/wiki --remote-delete --max-remote-deletes 1` only when that remote path deletion is explicitly intended. Read the JSON output.
+2. Run `skillwiki archive <page> [vault]`. On a vault-sync leaf host where S3 stale originals must be pruned, use `skillwiki archive <page> [vault] --remote seaweed-wiki:cloud/wiki --remote-delete --max-remote-deletes 1` only when that remote path deletion is explicitly intended. Read the JSON output. Successful archive **always** writes a live-path tombstone under `meta/delete-intents/` so snapshot cannot resurrect the live key.
 3. Verify with `skillwiki index-check [vault]` — confirm no ghost entries remain.
 4. Run `skillwiki lint [vault]` — check for broken wikilinks from other pages that still reference the archived page. If found, update those pages to point to the replacement or remove the stale link.
 5. **Raw file archiving (N9 Reingest Protocol only):** When archiving a `raw/` file due to content drift, update ALL `^[raw/...]` citation markers and `sources:` frontmatter entries that reference the old path. Change `raw/articles/foo.md` to `_archive/raw/articles/foo.md` in every referencing page. Verify with `skillwiki audit` that no broken markers remain.
 6. Append a `log.md` entry: `## [{date}] archive | {relPath} → _archive/{subdir}/`.
+7. Commit/push so tombstone + archive land on private `main`.
+
+## FAILSAFE-GIT (no skillwiki)
+
+1. Confirm path. Write `meta/delete-intents/<slug>.json` with `action: "archive"`, `source: "failsafe-git"`, schema `vault-delete-intent/v1`.
+2. `git mv` live path → `_archive/<same relPath>` (create dirs as needed); update `index.md` if typed.
+3. Commit with `Delete-Intent` / `Delete-Source: failsafe-git` trailers; push to private `main`.
+4. Optional single-path `rclone deletefile` for the **live** path if remote configured.
 
 ## Reversibility
 
-Archiving is locally reversible: move the file back from `_archive/` to its original directory and re-add the wikilink entry to `index.md`. If `--remote-delete` was used, the stale active-path object is pruned from the remote after the archive move, but the archived copy remains and a restore will republish the active path on the next push.
+Archiving is locally reversible: move the file back from `_archive/` to its original directory, re-add the wikilink entry to `index.md`, and **delete the matching tombstone** under `meta/delete-intents/`. If `--remote-delete` was used, the stale active-path object is pruned from the remote after the archive move, but the archived copy remains and a restore will republish the active path on the next push once the tombstone is cleared.
 
 ## Stop conditions
 
 - `skillwiki archive` returns non-zero exit code (page not found, already archived, invalid vault).
+- FAIL CLOSED when neither CLI nor private git/gh access is available.
 - User declines to proceed.
 
 ## Forbidden
@@ -42,4 +55,5 @@ Archiving is locally reversible: move the file back from `_archive/` to its orig
 - Archiving `raw/` files outside the N9 Reingest Protocol (raw is immutable except during content-drift reingestion).
 - Archiving raw files without updating all `^[raw/...]` citation markers that reference them.
 - Archiving without user confirmation.
-- Deleting local vault files directly (archive moves locally; remote stale-path pruning is only allowed through the explicit `skillwiki archive --remote ... --remote-delete --max-remote-deletes 1` path).
+- Deleting local vault files with bare `rm` / bare `git rm` without a delete-intent tombstone (causes snapshot resurrection).
+- Remote stale-path pruning only via explicit `skillwiki archive --remote ... --remote-delete` (PRIMARY) or bounded single-path rclone in FAILSAFE-GIT.

package/skills/wiki-remove/SKILL.md

@@ -0,0 +1,96 @@
+---
+name: wiki-remove
+description: Hard-delete a vault path with a durable delete-intent tombstone so S3+snapshot cannot resurrect it. Prefer skillwiki remove; if CLI missing, failsafe-git via private GitHub.
+---
+
+# wiki-remove
+
+## When This Skill Activates
+
+- User wants to permanently remove a vault path (not archive-for-reference).
+- Cleanup of stale pages that should not return via snapshot resurrection.
+- User says hard delete, remove for real, stop resurrecting.
+
+## Output language
+
+If `skillwiki` is available: run `skillwiki lang` at the start. Otherwise default to English log prose.
+
+## Pre-orientation
+
+Read SCHEMA/index only as needed. Confirm full vault-relative path with the user before delete.
+
+## Probe (required)
+
+1. `command -v skillwiki && skillwiki remove --help`
+2. `git -C <vault> rev-parse --is-inside-work-tree` and `git remote get-url origin` (expect private `karlorz/wiki` / fleet `vault_remote`)
+3. Auth: `gh auth status` **or** `git ls-remote origin HEAD`
+
+| Result | Mode |
+|--------|------|
+| skillwiki OK | **PRIMARY** |
+| skillwiki fail, git/gh + private repo OK | **FAILSAFE-GIT** |
+| neither | **FAIL CLOSED** — stop; never bare `rm` for fleet effect |
+
+Do not auto `npm install -g skillwiki` in headless/goal/satellite sessions.
+
+## PRIMARY steps
+
+1. Resolve vault: `skillwiki path`.
+2. Confirm path with user.
+3. On a vault-sync leaf when S3 prune is intentional:
+   `skillwiki remove <page> [vault] --remote seaweed-wiki:cloud/wiki --remote-delete --max-remote-deletes 1 --reason "<text>"`
+   Otherwise: `skillwiki remove <page> [vault] --reason "<text>"`
+4. Read JSON: expect `tombstone_path` under `meta/delete-intents/`, `removed` set.
+5. Commit + push via normal wiki-sync / git (tombstone + deletion must reach private `main` for durability).
+6. Report MODE=primary, paths, and whether remote-delete ran.
+
+## FAILSAFE-GIT steps (no skillwiki CLI)
+
+Agent **must** have git (and preferably gh) access to private vault remote.
+
+1. Confirm path with user. Set `PATH_REL` (vault-relative, no `..`).
+2. Write tombstone `meta/delete-intents/<slug>.json` where slug is path with `/` → `__`, e.g. `summaries/foo.md` → `summaries__foo.md.json`:
+
+```json
+{
+  "schema": "vault-delete-intent/v1",
+  "path": "PATH_REL",
+  "action": "remove",
+  "created": "ISO-8601-UTC",
+  "host": "SKILLWIKI_HOST_ID-or-unknown",
+  "actor": "agent-failsafe-git",
+  "reason": "user requested remove; skillwiki CLI unavailable",
+  "source": "failsafe-git",
+  "expires": null
+}
+```
+
+3. Delete local file at `PATH_REL` (and index line for `[[slug]]` if typed page).
+4. `git add` tombstone + path change; commit with trailers:
+
+```text
+Delete-Intent: PATH_REL
+Delete-Source: failsafe-git
+```
+
+5. `git pull --rebase origin main` (or merge fallback per vault-sync ADR) then **`git push origin HEAD:main`**. Require successful push before claiming durable success.
+6. Optional: if `rclone` and `WIKI_REMOTE` exist: `rclone deletefile "$WIKI_REMOTE/PATH_REL"` (single path only).
+7. Report `MODE=failsafe-git`, commit SHA, `S3_PRUNE=done|deferred`.
+
+## Stop conditions
+
+- User declines.
+- FAIL CLOSED (no CLI and no private git access).
+- Push to private wiki fails.
+- Path invalid or under `_archive/` without explicit restore/remove policy.
+
+## Forbidden
+
+- Bare `rm` / bare `git rm` without tombstone.
+- Force-push.
+- Unbounded `rclone sync` / mass remote delete.
+- Claiming fleet delete complete without tombstone on `origin/main` (and push success).
+
+## Reversibility
+
+Hard remove is not locally reversible from `_archive`. Restore requires re-authoring content and deleting the tombstone file under `meta/delete-intents/`, then normal push.