@plurnk/plurnk-service 3.2.0 → 4.0.0

package/migrations/026_message_obligations.sql

@@ -0,0 +1,32 @@
+-- MIGRATE: 26 message obligations
+-- Released in 3.3.0 and frozen ({§db-migrations}): a shape change is the next MIGRATE version, never an edit here.
+-- {§worker-obligations}: a message a worker sent to another worker holds the sender, beside its live children
+-- and open streams, until the recipient completes it ({§message-completion}) or the recipient's loop ends
+-- ({§message-abandonment}). The two liveness views are recreated with that third column; no row changes.
+DROP VIEW IF EXISTS loop_obligations;
+DROP VIEW IF EXISTS worker_obligations;
+
+CREATE VIEW worker_obligations AS
+SELECT w.id AS worker_id,
+       EXISTS (
+           SELECT 1 FROM subscriptions s
+           WHERE s.worker_id = w.id AND s.closed_at IS NULL AND s.detached = 0
+       ) AS streams,
+       EXISTS (
+           SELECT 1 FROM workers c JOIN loops l ON l.worker_id = c.id
+           WHERE c.parent_worker_id = w.id AND l.status IN (100, 102, 202)
+       ) AS workers,
+       EXISTS (
+           SELECT 1 FROM loop_messages m
+           JOIN loops l ON l.id = m.loop_id
+           JOIN workers r ON r.id = l.worker_id
+           WHERE r.workspace_id = w.workspace_id
+             AND m.source = 'worker://' || w.name
+             AND l.status IN (100, 102, 202)
+             AND NOT EXISTS (SELECT 1 FROM message_completions c WHERE c.message_id = m.id)
+       ) AS messages
+FROM workers w;
+
+CREATE VIEW loop_obligations AS
+SELECT l.id AS loop_id, held.streams, held.workers, held.messages
+FROM loops l JOIN worker_obligations held ON held.worker_id = l.worker_id;

package/migrations/027_members_identity.sql

@@ -0,0 +1,20 @@
+-- MIGRATE: 27 members identity
+-- Released in 3.3.0 and frozen ({§db-migrations}): a shape change is the next MIGRATE version, never an edit here.
+-- {§members-functionality} {§functionality-addressing}: a members definition is its glob. Workspace
+-- definitions are re-keyed by their glob. A service-origin row held only an enabledness override
+-- keyed by the operator's environment alias, which no longer names a definition, so it is dropped;
+-- a state left with no definition is removed, as the coordinator persists none.
+UPDATE workspace_module_state
+SET state = (
+    SELECT json_object(
+        'version', 1,
+        'definitions', COALESCE(json_group_object(json_extract(value, '$.definition.glob'), json(value)), json('{}'))
+    )
+    FROM json_each(workspace_module_state.state, '$.definitions')
+    WHERE json_extract(value, '$.origin') = 'workspace'
+)
+WHERE namespace_owner = '@plurnk/plurnk-core/members';
+
+DELETE FROM workspace_module_state
+WHERE namespace_owner = '@plurnk/plurnk-core/members'
+  AND (SELECT COUNT(*) FROM json_each(workspace_module_state.state, '$.definitions')) = 0;

package/migrations/028_mutation_patch.sql

@@ -0,0 +1,20 @@
+-- MIGRATE: 28 mutation patch
+-- Released in 3.3.0 and frozen ({§db-migrations}): a shape change is the next MIGRATE version, never an edit here.
+-- {§log-mutation-patch}: a settled file mutation's row keeps the unified diff of what it did, for the
+-- life of the row; it is served as the row's `patch` channel and never enters a receipt or a packet.
+-- Rows settled before this version, byte writes and operations that changed no text hold NULL.
+ALTER TABLE log_entries ADD COLUMN patch TEXT;
+
+DROP VIEW active_log_entries;
+CREATE VIEW active_log_entries AS
+SELECT le.id, le.version, le.worker_id, le.loop_id, le.turn_id, le.sequence,
+       le.at, le.origin, le.source, le.ambient_event_id, le.inherited_history,
+       le.deep_hash, le.model_call_id, le.subscription_publication_id,
+       le.op, le.signal, le.scheme, le.username, le.password,
+       le.hostname, le.port, le.pathname, le.query, le.fragment, le.lineMarker,
+       le.tx, le.mimetype_tx,
+       le.rx, le.mimetype_rx, le.status_rx, le.weight,
+       le.state, le.outcome, le.attrs, le.initial_folded, le.patch, projection.folded
+FROM log_entries le
+JOIN log_entry_projections projection ON projection.log_entry_id = le.id
+WHERE projection.active = 1;

package/migrations/029_default_worker.sql

@@ -0,0 +1,9 @@
+-- MIGRATE: 29 default worker
+-- Released in 4.0.0 and frozen ({§db-migrations}).
+-- The column that marks a workspace's one flagged root model worker takes the worker vocabulary.
+-- Renaming it rewrites its CHECK and the partial index in place; the index then takes its name.
+ALTER TABLE workers RENAME COLUMN default_conversation TO default_worker;
+
+DROP INDEX workers_workspace_default_conversation;
+CREATE UNIQUE INDEX workers_workspace_default_worker
+    ON workers (workspace_id) WHERE default_worker = 1;

package/migrations/030_client_workers.sql

@@ -0,0 +1,105 @@
+-- MIGRATE: 30 client workers
+-- Released in 4.0.0 and frozen ({§db-migrations}).
+-- {§connection-lifecycle} A worker is a model's identity: a person's client operations are the workspace's and
+-- journal in its runtime worker. Each client worker's history moves there, and the emptied worker goes.
+-- Rows keep their identity; only their worker, and their loop's place in that worker's numbering, change.
+
+-- The runtime worker of every workspace that holds a client worker.
+INSERT INTO workers (workspace_id, name, origin)
+SELECT DISTINCT client.workspace_id, '_plurnk', '_plurnk'
+FROM workers client
+WHERE client.origin = 'client'
+  AND NOT EXISTS (SELECT 1 FROM workers runtime WHERE runtime.workspace_id = client.workspace_id AND runtime.origin = '_plurnk');
+
+-- {§actor-boundary-client-operations} The person who owned a client worker acted in each of its loops.
+CREATE TEMP TABLE rehomed_workers AS
+SELECT client.id AS client_id, runtime.id AS runtime_id,
+       CASE WHEN client.owner = '_plurnk' THEN NULL ELSE client.owner END AS person
+FROM workers client
+JOIN workers runtime ON runtime.workspace_id = client.workspace_id AND runtime.origin = '_plurnk'
+WHERE client.origin = 'client';
+
+-- Each client loop follows the runtime worker's own loops, in the order the loops ran.
+CREATE TEMP TABLE rehomed_loops AS
+SELECT l.id AS loop_id, l.worker_id AS client_id, l.sequence AS client_sequence, moved.runtime_id,
+       (SELECT coalesce(max(own.sequence), 0) FROM loops own WHERE own.worker_id = moved.runtime_id)
+           + row_number() OVER (PARTITION BY moved.runtime_id ORDER BY l.id) AS sequence,
+       moved.person
+FROM loops l
+JOIN rehomed_workers moved ON moved.client_id = l.worker_id;
+
+UPDATE loops
+SET worker_id = moved.runtime_id,
+    sequence = moved.sequence,
+    prompt_source = coalesce(loops.prompt_source, moved.person)
+FROM rehomed_loops moved
+WHERE moved.loop_id = loops.id;
+
+-- The two identity guards are redeclared verbatim once their rows have moved.
+DROP TRIGGER log_entries_immutable_core;
+
+UPDATE log_entries SET worker_id = moved.runtime_id
+FROM rehomed_workers moved
+WHERE moved.client_id = log_entries.worker_id;
+
+CREATE TRIGGER log_entries_immutable_core
+BEFORE UPDATE OF
+    worker_id, loop_id, turn_id, sequence, at, origin, source, inherited_history, model_call_id,
+    op, signal,
+    scheme, username, password, hostname,
+    port, pathname, query, fragment,
+    lineMarker, tx, mimetype_tx, mimetype_rx, initial_folded
+ON log_entries
+BEGIN
+    SELECT RAISE(ABORT, 'log_entries core fields are immutable; only lifecycle outcome and derived attachments may change');
+END;
+
+-- An execution's source names its row by log coordinate, so it takes its loop's new number.
+DROP TRIGGER subscriptions_identity_update;
+
+UPDATE subscriptions
+SET worker_id = moved.runtime_id,
+    source = coalesce(
+        'log:///' || (
+            SELECT l.sequence FROM rehomed_loops l
+            WHERE l.client_id = moved.client_id
+              AND l.client_sequence = CAST(substr(subscriptions.source, 8, instr(substr(subscriptions.source, 8), '/') - 1) AS INTEGER)
+        ) || substr(subscriptions.source, 7 + instr(substr(subscriptions.source, 8), '/')),
+        subscriptions.source)
+FROM rehomed_workers moved
+WHERE moved.client_id = subscriptions.worker_id;
+
+CREATE TRIGGER subscriptions_identity_update
+BEFORE UPDATE OF worker_id, entry_id, scheme, source ON subscriptions
+WHEN NEW.entry_id != OLD.entry_id OR NEW.scheme != OLD.scheme OR NEW.source IS NOT OLD.source
+  OR (NEW.worker_id IS NOT OLD.worker_id AND NOT (NEW.worker_id IS NULL AND NEW.closed_at IS NOT NULL))
+BEGIN
+    SELECT RAISE(ABORT, 'subscription identity is immutable');
+END;
+
+UPDATE ambient_events SET producer_worker_id = moved.runtime_id
+FROM rehomed_workers moved
+WHERE moved.client_id = ambient_events.producer_worker_id;
+
+UPDATE ambient_events SET recipient_worker_id = moved.runtime_id
+FROM rehomed_workers moved
+WHERE moved.client_id = ambient_events.recipient_worker_id;
+
+UPDATE client_interactions SET worker_id = moved.runtime_id
+FROM rehomed_workers moved
+WHERE moved.client_id = client_interactions.worker_id;
+
+-- A worker a client worker parented is a root worker, owned as before, as a person's WORK starts one now.
+UPDATE workers SET parent_worker_id = NULL
+WHERE parent_worker_id IN (SELECT client_id FROM rehomed_workers);
+
+-- {§env-scheme} A person's environment is the runtime worker's; overrides several persons kept have no one owner.
+DELETE FROM worker_module_state WHERE worker_id IN (SELECT client_id FROM rehomed_workers);
+
+DELETE FROM workers WHERE id IN (SELECT client_id FROM rehomed_workers);
+
+DROP TABLE rehomed_loops;
+DROP TABLE rehomed_workers;
+
+-- No worker carries the default flag any longer.
+DROP INDEX workers_workspace_default_worker;

package/migrations/031_message_openers.sql

@@ -0,0 +1,83 @@
+-- MIGRATE: 31 message openers
+-- Released in 4.0.0 and frozen ({§db-migrations}).
+-- {§worker-obligations} A message a worker's own operation sends records that operation, by the row it writes:
+-- its turn and its sequence there. The message's obligation then holds that worker by identity, its reply
+-- reaches that worker, and a child's answer to its first message is its conclusion. A message a person, a
+-- client or the daemon sends names no opener. Messages that predate the record name none either, so they hold
+-- no worker and route no reply.
+ALTER TABLE loop_messages ADD COLUMN opened_turn_id INTEGER REFERENCES turns(id) ON DELETE SET NULL;
+ALTER TABLE loop_messages ADD COLUMN opened_sequence INTEGER CHECK (opened_sequence IS NULL OR opened_sequence >= 1);
+
+-- {§methods-invocation}: the delivery that discharges a message finds it from either side.
+CREATE INDEX loop_messages_opener ON loop_messages (opened_turn_id, opened_sequence) WHERE opened_turn_id IS NOT NULL;
+CREATE INDEX message_completions_response ON message_completions (response_id);
+
+DROP VIEW IF EXISTS delivered_message_replies;
+DROP VIEW IF EXISTS message_reply_deliveries;
+DROP VIEW IF EXISTS delegated_task_answers;
+DROP VIEW IF EXISTS loop_obligations;
+DROP VIEW IF EXISTS worker_obligations;
+
+-- The worker whose own operation sent each message.
+CREATE VIEW message_senders AS
+SELECT m.id AS message_id, sender.worker_id AS sender_worker_id
+FROM loop_messages m
+JOIN turns opened ON opened.id = m.opened_turn_id
+JOIN loops sender ON sender.id = opened.loop_id;
+
+CREATE VIEW worker_obligations AS
+SELECT w.id AS worker_id,
+       EXISTS (
+           SELECT 1 FROM subscriptions s
+           WHERE s.worker_id = w.id AND s.closed_at IS NULL AND s.detached = 0
+       ) AS streams,
+       EXISTS (
+           SELECT 1 FROM workers c JOIN loops l ON l.worker_id = c.id
+           WHERE c.parent_worker_id = w.id AND l.status IN (100, 102, 202)
+       ) AS workers,
+       EXISTS (
+           SELECT 1 FROM message_senders s
+           JOIN loop_messages m ON m.id = s.message_id
+           JOIN loops l ON l.id = m.loop_id
+           WHERE s.sender_worker_id = w.id
+             AND l.status IN (100, 102, 202)
+             AND NOT EXISTS (SELECT 1 FROM message_completions c WHERE c.message_id = m.id)
+       ) AS messages
+FROM workers w;
+
+CREATE VIEW loop_obligations AS
+SELECT l.id AS loop_id, held.streams, held.workers, held.messages
+FROM loops l JOIN worker_obligations held ON held.worker_id = l.worker_id;
+
+-- {§message-reply-delivery}: a reply reaches the message's own worker and the worker that sent it.
+CREATE VIEW message_reply_deliveries AS
+SELECT DISTINCT r.id AS source_record_id, r.loop_id, m.workspace_id,
+       r.worker_id AS producer_worker_id, m.worker_id AS recipient_worker_id
+FROM log_responses r
+JOIN workers producer ON producer.id = r.worker_id
+JOIN json_each(r.rx, '$.answers') answer
+JOIN message_sources m ON m.path = answer.value AND m.workspace_id = producer.workspace_id
+UNION
+SELECT r.id, r.loop_id, m.workspace_id, r.worker_id, s.sender_worker_id
+FROM log_responses r
+JOIN workers producer ON producer.id = r.worker_id
+JOIN json_each(r.rx, '$.answers') answer
+JOIN message_sources m ON m.path = answer.value AND m.workspace_id = producer.workspace_id
+JOIN message_senders s ON s.message_id = m.id;
+
+-- {§worker-scheme-collect}: a child's answer to the first message its parent sent is its conclusion, not a reply.
+CREATE VIEW delegated_task_answers AS
+SELECT r.id AS source_record_id, producer.parent_worker_id AS recipient_worker_id
+FROM log_responses r
+JOIN workers producer ON producer.id = r.worker_id
+JOIN json_each(r.rx, '$.answers') answer
+JOIN message_sources m ON m.path = answer.value AND m.workspace_id = producer.workspace_id
+JOIN message_senders s ON s.message_id = m.id
+WHERE m.loop_id = r.loop_id AND m.ordinal = 1 AND s.sender_worker_id = producer.parent_worker_id;
+
+CREATE VIEW delivered_message_replies AS
+SELECT d.* FROM message_reply_deliveries d
+WHERE NOT EXISTS (
+    SELECT 1 FROM delegated_task_answers t
+    WHERE t.source_record_id = d.source_record_id AND t.recipient_worker_id = d.recipient_worker_id
+);

package/migrations/032_worker_references.sql

@@ -0,0 +1,29 @@
+-- MIGRATE: 32 worker references
+-- Released in 4.0.0 and frozen ({§db-migrations}).
+-- {§worker-external-reference} Protocol adapters own the opaque key; core owns its durable target.
+CREATE TABLE worker_references (
+    namespace TEXT NOT NULL CHECK (length(namespace) > 0),
+    reference TEXT NOT NULL,
+    worker_id INTEGER NOT NULL REFERENCES workers(id) ON DELETE CASCADE,
+    PRIMARY KEY (namespace, reference)
+) STRICT, WITHOUT ROWID;
+
+CREATE INDEX worker_references_worker ON worker_references (worker_id);
+
+CREATE TRIGGER worker_reference_identity
+BEFORE UPDATE ON worker_references
+BEGIN
+    SELECT RAISE(ABORT, 'worker reference is immutable');
+END;
+
+CREATE TRIGGER worker_reference_model
+BEFORE INSERT ON worker_references
+WHEN EXISTS (SELECT 1 FROM workers WHERE id = NEW.worker_id AND origin != 'model')
+BEGIN
+    SELECT RAISE(ABORT, 'worker reference requires a model worker');
+END;
+
+CREATE VIEW worker_reference_allocations AS
+SELECT r.namespace, r.reference, s.name AS workspace_name, w.name AS worker_name
+FROM worker_references r JOIN workers w ON w.id = r.worker_id
+JOIN workspaces s ON s.id = w.workspace_id;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plurnk/plurnk-service",
-  "version": "3.2.0",
+  "version": "4.0.0",
   "description": "Plurnk agent runtime — the server / engine / core. Implements the @plurnk/plurnk-contracts contract.",
   "keywords": [
     "plurnk",
@@ -38,6 +38,7 @@
     "README.md",
     "INSTALL.md",
     "plurnk.service",
+    "plurnk.nginx.conf",
     "SPEC.md"
   ],
   "publishConfig": {
@@ -50,14 +51,13 @@
     "test:lint": "npm run types:sqlrite:check && tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
     "test:unit": "node --conditions=plurnk-dev --import=./test/setup.ts --env-file-if-exists=.env.defaults --test --test-timeout=30000 scripts/*.test.mjs src/**/*.test.ts",
     "test:intg": "export PLURNK_TEST_RUN=$(date -u +%Y%m%dT%H%M%SZ); PLURNK_SERVICE_FILES_ITEMS=0 node --conditions=plurnk-dev --import=./test/setup.ts --env-file-if-exists=.env.defaults --test --test-concurrency=8 --test-timeout=30000 test/intg/*.test.ts && node ../scripts/reclaim-green-run.mjs core",
-    "test:mcp:dogfood": "PLURNK_TEST_MCP_DOGFOOD=1 node --conditions=plurnk-dev --import=./test/setup.ts --env-file-if-exists=.env.defaults --test --test-concurrency=1 --test-timeout=120000 test/intg/mcp-agui-composition.test.ts",
-    "test:a2a:tck": "node scripts/a2a-tck.mjs",
     "test:live": "bash ../scripts/operator-environment.sh node --conditions=plurnk-dev scripts/live.mjs",
     "test:live:specimen": "bash ../scripts/operator-environment.sh node --conditions=plurnk-dev scripts/live.mjs --specimen",
     "test:live:zeropin": "PLURNK_ZERO_PIN=1 npm run test:live",
     "test:demo": "bash ../scripts/operator-environment.sh node --conditions=plurnk-dev scripts/demo.mjs",
     "test:demo:specimen": "bash ../scripts/operator-environment.sh node --conditions=plurnk-dev scripts/demo.mjs --specimen",
     "test:demo:zeropin": "PLURNK_ZERO_PIN=1 npm run test:demo",
+    "tier:history": "node --conditions=plurnk-dev scripts/tier-history.mjs",
     "test:benchlet": "bash ../scripts/operator-environment.sh node scripts/benchlet.mjs",
     "fixture:demo": "node --conditions=plurnk-dev test/demo/_fixture.ts",
     "test": "npm run test:lint && npm run test:unit && npm run test:intg",
@@ -73,7 +73,7 @@
     "build:global:uninstall": "npm uninstall -g @plurnk/plurnk-service",
     "build:local:install": "node --conditions=plurnk-dev scripts/install-sandbox.mjs install",
     "build:local:uninstall": "node --conditions=plurnk-dev scripts/install-sandbox.mjs uninstall",
-    "test:installation": "node --conditions=plurnk-dev scripts/test-installation.mjs",
+    "test:installation": "node scripts/test-installation.mjs",
     "deps:audit": "node --conditions=plurnk-dev scripts/deps-audit.ts",
     "release:check": "npm run deps:audit && npm run test:installation",
     "prepublishOnly": "npm run deps:audit && npm run test:installation",
@@ -89,22 +89,22 @@
     "@opentelemetry/resources": "^2.12.0",
     "@opentelemetry/sdk-metrics": "^2.12.0",
     "@opentelemetry/sdk-trace-base": "^2.12.0",
-    "@plurnk/plurnk-a2a": "3.1.1",
-    "@plurnk/plurnk-agui": "3.0.0",
-    "@plurnk/plurnk-contracts": "3.2.0",
-    "@plurnk/plurnk-parser": "3.0.3",
-    "@plurnk/plurnk-schedule": "3.0.1",
-    "@plurnk/plurnk-skills": "3.0.1",
-    "@plurnk/plurnk-execs": "3.1.1",
-    "@plurnk/plurnk-execs-common": "2.0.2",
-    "@plurnk/plurnk-execs-jq": "2.0.2",
-    "@plurnk/plurnk-execs-sqlite": "2.0.2",
-    "@plurnk/plurnk-hooks": "2.0.1",
-    "@plurnk/plurnk-mcp": "3.0.1",
+    "@plurnk/plurnk-a2a": "4.0.0",
+    "@plurnk/plurnk-agui": "4.0.0",
+    "@plurnk/plurnk-contracts": "4.0.0",
+    "@plurnk/plurnk-parser": "4.0.0",
+    "@plurnk/plurnk-schedule": "3.0.3",
+    "@plurnk/plurnk-skills": "3.0.2",
+    "@plurnk/plurnk-execs": "4.0.0",
+    "@plurnk/plurnk-execs-common": "3.0.0",
+    "@plurnk/plurnk-execs-jq": "2.0.3",
+    "@plurnk/plurnk-execs-sqlite": "2.0.3",
+    "@plurnk/plurnk-hooks": "2.0.2",
+    "@plurnk/plurnk-mcp": "3.2.0",
     "@plurnk/plurnk-meta": "2.1.1",
     "@plurnk/plurnk-agent-plugins": "2.0.0",
-    "@plurnk/plurnk-agent-skills": "2.0.1",
-    "@plurnk/plurnk-mimetypes": "3.0.2",
+    "@plurnk/plurnk-agent-skills": "2.0.2",
+    "@plurnk/plurnk-mimetypes": "3.0.3",
     "@plurnk/plurnk-mimetypes-application-ipynb": "2.0.1",
     "@plurnk/plurnk-mimetypes-application-json": "2.0.1",
     "@plurnk/plurnk-mimetypes-application-jsonl": "2.0.1",
@@ -146,15 +146,15 @@
     "@plurnk/plurnk-mimetypes-text-markdown": "2.0.1",
     "@plurnk/plurnk-mimetypes-text-plain": "2.0.1",
     "@plurnk/plurnk-models": "3.0.1",
-    "@plurnk/plurnk-modules": "3.1.0",
-    "@plurnk/plurnk-providers": "3.0.2",
-    "@plurnk/plurnk-schemes": "3.1.1",
-    "@plurnk/plurnk-schemes-http": "2.0.1",
+    "@plurnk/plurnk-modules": "4.0.0",
+    "@plurnk/plurnk-providers": "3.0.3",
+    "@plurnk/plurnk-schemes": "3.2.1",
+    "@plurnk/plurnk-schemes-http": "2.0.2",
     "@possumtech/sqlrite": "^6.6.1",
     "diff": "^9.0.0",
     "glob": "^13.0.6",
     "minimatch": "^10.2.6",
-    "@plurnk/plurnk-digest": "3.2.0"
+    "@plurnk/plurnk-digest": "3.2.1"
   },
   "devDependencies": {
     "@a2a-js/sdk": "1.3.0",
@@ -172,5 +172,5 @@
     "url": "git+https://github.com/plurnk/plurnk-service.git",
     "directory": "plurnk-core"
   },
-  "gitHead": "f96502a26d62a6f87b22950a9e2006348ac8a6bc"
+  "gitHead": "9f92ceac0af7bdb64e57ebc73c0288bb0f36b720"
 }

package/plurnk.nginx.conf

@@ -0,0 +1,71 @@
+# plurnk-service behind nginx: an example to adapt, never installed by the package.
+# The daemon answers whoever reaches it at whatever address they used and refuses nobody for it.
+# TLS, security headers, sign-in throttling and network allow-lists belong here, in front of it.
+#
+# Install:  cp "$(npm root -g)/@plurnk/plurnk-service/plurnk.nginx.conf" /etc/nginx/conf.d/plurnk.conf
+#           replace plurnk.example.com and the certificate paths, then: nginx -t && systemctl reload nginx
+# Certificates: certbot --nginx -d plurnk.example.com, or any certificate you hold.
+# The daemon: keep it on loopback (the default PLURNK_HOST=127.0.0.1) so nginx is the one way in, and
+#           tell it the public origin, which it cannot see through the TLS in front of it:
+#           PLURNK_AGUI_ISSUER=https://plurnk.example.com in ~/.config/plurnk/.env, and
+#           PLURNK_A2A_ENDPOINT_URL=https://plurnk.example.com/a2a when PLURNK_A2A_EXPOSE=1.
+# nginx older than 1.25.1: drop `http2 on;` and write `listen 443 ssl http2;` instead.
+
+# Sign-in throttling, per real client address: the daemon behind nginx sees only nginx's.
+limit_req_zone $binary_remote_addr zone=plurnk_signin:10m rate=10r/m;
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name plurnk.example.com;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    http2 on;
+    server_name plurnk.example.com;
+
+    ssl_certificate     /etc/letsencrypt/live/plurnk.example.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/plurnk.example.com/privkey.pem;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_prefer_server_ciphers off;
+    ssl_session_timeout 1d;
+    ssl_session_cache shared:plurnk_tls:10m;
+    ssl_session_tickets off;
+
+    add_header Strict-Transport-Security "max-age=63072000" always;
+    add_header X-Content-Type-Options nosniff always;
+    proxy_hide_header X-Frame-Options;
+    add_header X-Frame-Options DENY always;
+    add_header Referrer-Policy same-origin always;
+
+    # Optional: admit only your own networks.
+    # allow 192.168.1.0/24;
+    # allow 10.0.0.0/8;
+    # deny all;
+
+    # Messages and their attachments arrive in request bodies.
+    client_max_body_size 64m;
+
+    proxy_http_version 1.1;
+    proxy_set_header Host $host;
+    proxy_set_header Connection "";
+
+    location / {
+        proxy_pass http://127.0.0.1:1066;
+        # AG-UI answers over server-sent events: a buffered or timed-out stream looks like a hang.
+        proxy_buffering off;
+        proxy_cache off;
+        proxy_read_timeout 1h;
+        proxy_send_timeout 1h;
+    }
+
+    # The browser sign-in form takes the operator's password.
+    location = /oauth/authorize {
+        limit_req zone=plurnk_signin burst=5 nodelay;
+        limit_req_status 429;
+        proxy_pass http://127.0.0.1:1066;
+    }
+}

package/plurnk.service

@@ -10,6 +10,8 @@
 # systemd does not source your interactive shell. Adjust EnvironmentFile for
 # a non-default XDG_CONFIG_HOME. Preserve the file's private permissions.
 # Logs land in the user journal: journalctl --user -u plurnk -f
+# Other machines on your network: add Environment=PLURNK_HOST=0.0.0.0 under [Service] and browse to
+# any of this machine's addresses. Beyond a network you trust, front it with plurnk.nginx.conf.
 [Unit]
 Description=PLURNK agentic-development daemon
 After=network.target