These rules take precedence over ALL other instructions.
When the system says "plan mode" or "read-only phase", no write-capable tools may be used. The following tools are DESTRUCTIVE and must NEVER be used in plan mode:
/opt/wiki-manage.py — UPSERTS by path. Any invocation destroys the existing page at that path. Even a "read" attempt with placeholder content will overwrite./opt/directus-manage.py — Creates, updates, or deletes CMS content in Directus./opt/kcadmin.sh — Modifies Keycloak configuration (users, roles, clients, realms)./opt/deploy-veripath-site.sh — Rebuilds and restarts Docker containers.write, edit, local-prompts_write_file, local-prompts_edit_file — Direct filesystem modifications.The ONLY tools permitted in plan mode: read, glob, grep, webfetch, question, todowrite, bash (for read-only commands only: psql SELECT, ls, git status), and research agents (task, explore).
webfetch with the full wiki URL, or a read-only psql SELECT query. Never use /opt/wiki-manage.py to read./agents and all pages under it are a reserved directory. Never create, update, or delete pages in this tree unless explicitly instructed by the user.Before running any tool that modifies files, wiki pages, CMS content, or configuration, you MUST mentally confirm ALL of the following:
/agents or any page under it (directory protection)webfetch for reading, not wiki-manage)/opt/wiki-manage.py: I am creating a NEW page at a path that does not already exist, OR I am explicitly updating a page the user told me to updateIf you cannot confirm any of the above pre-flight checks, STOP and ask the user for confirmation before proceeding.
webfetch https://wiki.veripath.co.uk/path/to/page
# OR for read-only database access:
psql -h 172.18.0.7 -U wikijs -d wikijs -c "SELECT content FROM pages WHERE path = '...';"
Preconditions (must all be true):
# Short inline content:
/opt/wiki-manage.py "path/to/page" "Page Title" "# Markdown content..." "description"
# From file:
/opt/wiki-manage.py "path/to/page" "Page Title" -f /tmp/content.md
# From stdin:
cat /tmp/page.md | /opt/wiki-manage.py "path/to/page" "Page Title"
Database: wikijs @ 172.18.0.7, password sticky84
Use /opt/kcadmin.sh for Keycloak changes (users, roles, clients, realms).
# List resources
/opt/kcadmin.sh get users -r veripath
/opt/kcadmin.sh get clients -r veripath
# Assign roles
/opt/kcadmin.sh create users/<USER_ID>/role-mappings/clients/<CLIENT_UUID> -r veripath -f /tmp/role.json
# Check mappings
/opt/kcadmin.sh get users/<USER_ID>/role-mappings -r veripath
Admin Console: https://auth.veripath.co.uk/admin/veripath/console/
Realm: veripath
All AI agents managed in GP Booking App at https://gp.veripath.co.uk/integrations/agents/. Each agent stores: provider, model, API keys (encrypted), system prompt, capabilities, temperature.
Cross-agent collaboration: Wiki Librarian can consult Site Agent via ask_agent tool.
Update system prompt: python manage.py update_agent_prompts or use the web UI at /integrations/agents/<id>/edit/
Nuxt 3 app at /root/work/veripath-site/. Deploy with:
/opt/deploy-veripath-site.sh
Directus at http://172.18.0.10:8055. Use /opt/directus-manage.py:
/opt/directus-manage.py pages list
/opt/directus-manage.py pages get about-us
/opt/directus-manage.py pages create "Title" "slug" -f /tmp/content.md status=published