Plugins, workers reporting to one Loki, and qmd in place of OpenViking - #10

Three commits that change how automations ship and how hosts report.

Every machine is a plugin that follows the repo (02a013e)

• automation/plugins/<name>.md holds one decree machine: its chart, scripts, lib, endpoints, crons and migrations. A flow is a plugin with no machine, in automation/plugins/flows/.
• The plugin system itself (plugin, plugin_share, plugin_offer, plugin_request, notify) is tracked and installed everywhere; no plugin can replace it.
• Each decree project (automation, automation-backup, host) records what is on in its own .decree/plugins.yml, written once from its plugins.exist.yml. Every ./existential.sh installs exactly that, plus what it needs:, at the checkout's version. A git pull now reaches a running stack.
• Four flows were renamed where they clashed with a machine's name: comfy → comfyui, newsletter → weekly-newsletter, capture → capture-stream, gmail → gmail-inbox.
• flow on asks before turning on each service a flow needs.

Workers report every host to one Loki (f7bffd3)

• A worker is a host whose own decree project (host/.decree) has the worker flow on. Every 5 minutes it reports free disk space, the installed decree machines and their runs to Loki, for Grafana's new Hosts dashboard.
• With EXIST_CONTROLLER set, a worker asks that controller where Loki is (http://<controller>:4480, over the tailnet). With it blank, the host is the controller.
• auto-update (git pull, ./existential.sh, docker compose up -d every 15 minutes) is now an optional flow. Nothing runs on the host by default.
• First run offers Core, Controller, Worker or Nothing.
• Docs: "Build On It" is now Plugins (docs/plugins/). Every relative docs link names its .md file: on the live site, ./writing-a-routine resolved to /docs/build-on-it/writing-a-routine, a 404. validate conventions now rejects a link without it, and static/_redirects keeps the old URLs working.

Retire OpenViking for qmd; "machine" means a decree machine (d917713)

• OpenViking moves to the graveyard. qmd now serves pi too, so search is one index for Claude Code, opencode and pi. note-connect needs search, and workspace-agent needs qmd. Gone with it: the knowledgebase flow, the indexer, the backups, the API key, and the whole embedding model role (EXIST_MODEL_EMBED*, EXIST_MODEL_URL_EMBED, bge-m3).
• A computer is now a host everywhere; "machine" only means a decree machine (a rule in CLAUDE.md).
• The docs no longer call their reading order C4.
• Fixed the Services page diagram, which didn't render: a . inside a dotted arrow's label.

For existing installs

• plugins.yml is written on the first run, and keeps what an install already had on.
• The research/sales department files copied into workspace/.decree/lib/departments/ still name openviking. Change them to qmd by hand.
• After ./existential.sh, docker compose up -d --remove-orphans removes the OpenViking container. volumes/openviking_data is left for you to delete.
• Loki's already-rendered compose file needs 127.0.0.1:43100:3100 for workers to reach it, or ./existential.sh reset.
• An install whose host/.decree/plugins.yml already exists keeps update on.

Checks

• Passing: validate conventions, the site build (no broken links or anchors, every Mermaid diagram parses), every unit suite that runs outside the adhoc container, the Mac bash 3.2 check, and the decree gate except its ai.sh comparison, which needs the real decree binary.
• Not run (no container runtime here): test-templates, test-compose, test-validators, shellcheck, typecheck and e2e. CI covers these.
• Never tested for real: two hosts over Tailscale with the Hosts dashboard.

🤖 Generated with Claude Code

https://claude.ai/code/session_014q2vcj2MGfnCThazsgxgws