@plurnk/plurnk-service 2.0.0 → 3.1.0

package/.env.defaults

@@ -35,18 +35,11 @@ PLURNK_SERVICE_SQLITE_READERS=0
 
 # --- Permissions and membership ---
 # CapabilityPolicy JSON: deny removes matching demands; only admits only matches.
-# Workspace, Worker, and loop policies may narrow this ceiling, never widen it.
+# Workspace policy may narrow this ceiling, never widen it.
 PLURNK_SERVICE_CAPABILITIES={}
-# What a loop does with a proposal when its creator did not say: review holds it for a
-# client's answer; accept applies it and reject refuses it inside the loop.
+# Proposal settlement: review asks the worker's owner; accept or reject settles in core.
+# Review without a capable owner rejects. Disconnect alone never removes that capability.
 PLURNK_SERVICE_PROPOSALS=review
-# Whether anyone is attending a loop when its creator did not say: 1 = someone can answer;
-# 0 = unattended, so no human-in-the-loop surface is offered and a wait nobody could end concludes.
-PLURNK_SERVICE_ATTENDED=1
-# What an unattended loop does with a proposal when its creator did not say: accept | reject.
-# Nobody is present to review, so review is not a choice here. Rejecting is the honest default: an
-# effect nobody approved does not run. A harness that means to run unattended states accept.
-PLURNK_SERVICE_UNATTENDED_PROPOSALS=reject
 # New filesystem files: none | root | namespace (also outside root). Existing-member writes unchanged.
 PLURNK_SERVICE_FILE_CREATE_SCOPE=root
 # Model-added membership: none | root | namespace. Workspaces may narrow it.
@@ -57,6 +50,8 @@ PLURNK_MEMBERS_ENABLED=1
 # PLURNK_MEMBERS_docs=docs/**
 # PLURNK_MEMBERS_no_locks=!**/*.lock
 # PLURNK_MEMBERS_docs_ENABLED=0
+# Any alias: its glob, and its own _ENABLED control.
+# PLURNK_MEMBERS_<alias>=<glob>
 # Matched paths a members definition lists as its sample; the rest are counted.
 PLURNK_SERVICE_MEMBERS_SAMPLE=20
 # Git membership, status, and branch integration: 1 = permitted; 0 = denied service-wide.
@@ -71,11 +66,12 @@ PLURNK_SERVICE_FILE_MATERIALIZE_MAX_BYTES=104857600
 # --- Loop limits and recovery ---
 # Default child model: alias or provider/model. Unset = inherit the spawning loop's model.
 # PLURNK_MODEL_CHILD=fast
-# Model calls across the worker tree, including BARE and resumes; -1 = unlimited. Clients may tighten it.
+# Opt-in model-call ceiling shared by the worker tree, including BARE and resumes; -1 = uncapped.
+# Runtime (_plurnk) ancestry supplies no ceiling. Clients may tighten the model tree's limit.
 PLURNK_SERVICE_MAX_TURNS=-1
 # Actions per emission; -1 = unlimited. Final disposition remains; excess actions report an error.
 PLURNK_SERVICE_MAX_COMMANDS=-1
-# Concurrent nonterminal runs per workspace; -1 = unlimited. Excess spawns return 508, not a queue.
+# Concurrent live workers per workspace; -1 = unlimited. Excess spawns return 508, not a queue.
 PLURNK_SERVICE_WORKSPACE_WORKERS_MAX_ACTIVE=-1
 # Active execution allowance per task, positive ms; WAIT pauses it, wakes retain it. Exhaustion: 504.
 PLURNK_SERVICE_LOOP_TIMEOUT=86400000
@@ -83,8 +79,8 @@ PLURNK_SERVICE_LOOP_TIMEOUT=86400000
 PLURNK_SERVICE_LIVE_TIMEOUT=600000
 # End-to-end shutdown budget, positive ms; includes database and listener cleanup.
 PLURNK_SERVICE_STOP_TIMEOUT_MS=30000
-# Provider recovery window, ms; 0 = no reissue. Expiry parks attended loops until a prompt/wake;
-# unattended loops conclude and BARE returns the provider failure.
+# Provider recovery window, ms; 0 = no reissue. Expiry parks workers with a reviewer;
+# without one the loop concludes. BARE returns the provider failure.
 PLURNK_SERVICE_PROVIDER_RECOVERY=900000
 # First recovery delay, ms; doubles on failure up to PROVIDER_RECOVERY_BACKOFF_MAX below.
 PLURNK_SERVICE_PROVIDER_RECOVERY_BACKOFF=5000
@@ -132,7 +128,7 @@ PLURNK_SERVICE_EFFECT_READ=auto
 PLURNK_SERVICE_EFFECT_PURE=auto
 # Brief settlement wait for new streams/completing siblings, ms; 0 = off; quiescence ends it early.
 PLURNK_SERVICE_OPTIMISTIC_WAIT_MS=5000
-# Maximum park before reassessing live work, positive seconds; WAIT <seconds> overrides one park.
+# Maximum park before reassessing live work, positive seconds; WAIT [seconds] overrides one park.
 PLURNK_SERVICE_WAIT_SEC=300
 # Ambient environment an EXEC subprocess may inherit from the host: exact names, or one
 # trailing-* prefix glob. This is a CEILING — a worker or a heading modifier narrows it,
@@ -155,7 +151,10 @@ PLURNK_SERVICE_EDIT_RECEIPT_CONTEXT_LINES=4
 PLURNK_SERVICE_EDIT_RECEIPT_REMOVED_LINES=40
 # Paths named per class in the packet's git status; the rest are counted.
 PLURNK_SERVICE_GIT_STATUS_PATHS=8
-# Heaviest retained log rows the Context gauge names, as {path, tokens}; 0 names none.
+# Above this share of the budget, measured before adding either, the Context gauge names its largest rows
+# and a packet within its budget carries the budget_pressure notice ({§context-pressure-notice}).
+PLURNK_SERVICE_BUDGET_PRESSURE=80%
+# Heaviest retained log rows the pressured Context gauge names, as {path, tokens}; 0 names none.
 PLURNK_SERVICE_BUDGET_LARGEST_ITEMS=5
 # First page of everything that comes back unasked in size: a READ or FIND without a scope, a stream's
 # delivery, a peer worker's message, a receipt the model did not author ({§markerless-first-page}).
@@ -163,12 +162,17 @@ PLURNK_SERVICE_BUDGET_LARGEST_ITEMS=5
 PLURNK_SERVICE_PREVIEW_LINES=100
 # Independent bound on the same page, Unicode code points; CRLF counts as one separator.
 PLURNK_SERVICE_PREVIEW_CHARS=16000
+# Assistant replay ({§emission-history}): none, latest, or all eligible turns from this loop, each as the
+# NOTEs it wrote, in the model's voice; every other operation is omitted. The context wall may omit
+# the whole section; source evidence never changes.
+PLURNK_SERVICE_EMISSION_HISTORY=all
 # Optional reasoning memory ({§reasoning-row}): 1 adds the turn's preview before its emission or results,
 # only when room remains after all requested results and diagnostics. Otherwise omit it silently. 0 disables it.
-PLURNK_SERVICE_REASONING_ROWS=1
+PLURNK_SERVICE_REASONING_ROWS=0
 # The row's page ({§reasoning-row}): reasoning that fits it lands whole; longer reasoning lands as its last page,
 # this many lines within PLURNK_SERVICE_PREVIEW_CHARS, because a turn's conclusions and plan sit at its end; the
-# rest stays readable at reasoning://. Unset/empty = the shared page, PLURNK_SERVICE_PREVIEW_LINES.
+# rest stays readable at reasoning://. -1 returns the complete reasoning without either preview bound,
+# still only if it fits. Unset/empty = the shared page, PLURNK_SERVICE_PREVIEW_LINES; 0 is invalid.
 # PLURNK_SERVICE_REASONING_TRAILING_LINES=40
 # Code points of an entry's prose summary the catalog shows whole.
 PLURNK_SERVICE_CATALOG_SUMMARY_CHARS=256
@@ -197,6 +201,10 @@ PLURNK_SERVICE_ROOTS=project,plurnk,global
 # PLURNK_SERVICE_POLICY=
 # Recap file, relative to the package root; unset = packaged recap.md; empty file omits the section.
 # PLURNK_SERVICE_RECAP=
+# Recap lines, one per key: PLURNK_SERVICE_RECAP_LINE_<alias>=<line> ({§recap-lines}). Each opens with YOU MUST,
+# YOU MUST NOT, YOU MUST ONLY, YOU SHOULD, YOU SHOULD NOT or YOU MAY and renders as one callout, in alias order,
+# ahead of the Recap source. An empty value turns a shipped line off.
+# PLURNK_SERVICE_RECAP_LINE_<alias>=
 
 # --- Search indexing ---
 # Comma-separated globs excluded from derivation, not READ. No slash = basename; slash = pathname.
@@ -215,7 +223,7 @@ PLURNK_SERVICE_DERIVE_PROGRESS_HEARTBEAT_MS=15000
 # Packet compositions kept per loop, newest first; -1 = every packet, forever.
 PLURNK_SERVICE_RETAIN_PACKET_TURNS=-1
 # Packet compositions kept by age, ms since the turn completed; -1 = no age limit. Thirty days:
-# no session reads its own packets back that late, and a daemon left running for months stops growing.
+# no worker reads its own packets back that late, and a daemon left running for months stops growing.
 PLURNK_SERVICE_RETAIN_PACKET_MS=2592000000
 # Model response bodies kept per loop, newest first; -1 = every body, forever. The call's
 # evidence, admission and accounting always stay.

package/INSTALL.md

@@ -33,8 +33,9 @@ or enables the unit.
 | Plurnk-only MCP servers | `$XDG_CONFIG_HOME/plurnk/mcp.json` |
 
 Use `plurnk-service config` for paths and precedence, `config edit` to edit the
-user file, and `config check` to validate it. An old `~/.plurnk` is not read
-implicitly; `plurnk-service paths migrate` relocates it with the daemon stopped.
+user file, and `config check` to validate it. A `PLURNK_*` key that file sets and
+no installed package declares is named at startup and by `config check`, which
+still passes; `config defaults` lists every declared key.
 
 Invalid optional configuration stays visible without removing the repair environment.
 `config check` is strict; ordinary startup keeps unrelated capabilities and client
@@ -100,6 +101,24 @@ Extension settings remain environment/configuration values; they do not extend t
 service CLI. Boolean flags use `1` and `0`. An empty value is not an unset value;
 the owning declaration specifies its meaning.
 
+## Manual and shell completions
+
+The installed package includes a generated manual and static completions. They
+require no running daemon. Find the global npm package at
+`$(npm root -g)/@plurnk/plurnk-service`; the paths below are relative to it.
+
+| Artifact | Use |
+| --- | --- |
+| `dist/man/plurnk-service.1` | Open with `man /path/to/plurnk-service.1`, or copy into a directory on `MANPATH` (commonly `~/.local/share/man/man1/`). |
+| `dist/completions/plurnk-service.bash` | Source from your Bash configuration. |
+| `dist/completions/_plurnk-service` | Copy into a directory on Zsh's `fpath` before `compinit`. |
+| `dist/completions/plurnk-service.fish` | Copy into `~/.config/fish/completions/`, or the corresponding `XDG_CONFIG_HOME` location. |
+
+Completion offers command names, long options and filenames. Configuration
+values remain in `plurnk-service config defaults`, not a separate static catalog.
+Package installation does not edit shell configuration or install these files
+outside the package.
+
 ## Choose the right scope
 
 | Change | Owner and effect |

package/README.md

@@ -5,6 +5,9 @@ operation dispatch. Its client surface is AG-UI over HTTP/SSE through
 `@plurnk/plurnk-agui`. The user-facing CLI lives in
 [plurnk](https://github.com/plurnk/plurnk).
 
+See [installation and configuration](INSTALL.md), including the packaged
+[manual and shell completions](INSTALL.md#manual-and-shell-completions).
+
 ## What an agent can do
 
 The exact model-facing language and operation set are owned by
@@ -47,8 +50,7 @@ Configuration follows XDG at `$XDG_CONFIG_HOME/plurnk` (normally
 `plurnk-service config defaults` for
 the complete installed option catalog and `plurnk-service config check` to
 validate without contacting a provider. **[`INSTALL.md`](./INSTALL.md) is the
-configuration guide.** A legacy mixed `~/.plurnk` is moved only by the explicit
-`plurnk-service paths migrate` command.
+configuration guide.**
 
 Protect durable history with a [consistent database backup](./INSTALL.md#backup-and-restore).
 The `share` command exports diagnostic reports, not a restorable database.