owfadev 0.3.2 → 0.4.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "owfadev",
-  "version": "0.3.2",
+  "version": "0.4.1",
   "description": "OWFA — One Workspace For All (agents). Install, initialize and upgrade the owfa agent workspace framework.",
   "keywords": [
     "owfa",
@@ -28,9 +28,10 @@
     "owfadev": "bin/owfa.js"
   },
   "files": [
-    ".meta",
+    ".owfa",
     ".agents",
     "bin",
+    "payloads",
     "templates"
   ],
   "engines": {

package/payloads/personal/PKG.yaml

@@ -0,0 +1,15 @@
+schema_version: 1
+id: personal
+kind: suite
+version: 0.1.0
+compat: ">= 0.4"
+members: [calendar, cron, device, domain, hot, index, instance-git, language, link, log, mapping, notes, sessions, structure, tag, tmp, todo, trust, user-profile, vault, wiki]
+depends: [framework]
+skeleton: [vault/, wiki/notes/, wiki/sessions/, wiki/vault/]
+uninstall:
+  anchors: [wiki/profile.md, wiki/language.md, wiki/calendar.md, wiki/todo.md, wiki/cron/]
+  retains: [vault/, wiki/]
+  credentials: []
+  bridges: []
+  processes: []
+disclosure: "Purely local information organization (calendar / todo / notes / sessions / vault proxies / tags / index / logs / cron intents); no network services, no credentials, no external data sources — all content stays on this machine's repository."

package/payloads/personal/README.md

@@ -0,0 +1,7 @@
+# payloads/personal/ — the embedded blessed suite copy
+
+Embedded copy of the **personal suite** package (source: `owfadev/owfa-personal`,
+synced by `scripts/sync-blessed.sh` before each release). `owfa init` installs this
+copy via `kernel install --path payloads/personal` — the default bootstrap stays
+100% offline. See the channel repository's own docs for the package's members,
+skeleton and teardown anchors (PKG.yaml).

package/{.meta/plugins/core → payloads/personal}/calendar/PLUGIN.md

@@ -31,5 +31,6 @@ A derivation-destination bridge governing schedules: domain plugins one-way deri
 
 ## Changelog
 
+- 0.5 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.4 (2026-10-06) inject line: sections lost to the kernel comment-strip clip restored (quoted values are now protected), tightened for budget headroom — issue #12 post-migration nit- 0.3 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.2 2026-10-02: global-domain batch two — established the on-demand bridge as the derivation destination; domain-plugin self-descriptions retained with a pointer
 - 0.1 2026-09-19: established — month-page two-section scheme, the open source model, the freezing regime; lark-calendar as the first source adapter

package/{.meta/plugins/core → payloads/personal}/calendar/PLUGIN.yaml

@@ -1,17 +1,17 @@
 id: calendar
 schema_version: 1
-version: 0.4
+version: 0.5
 bridge: 按需
 depends:
   - wiki
   - trust
-updated: 2026-10-06
+updated: 2026-11-09
 attachment:
   - "wiki/calendar.md — declaration page (`calendar` block mapping = source key → source declaration; self-created when the first source attaches, manual-only may be absent)"
   - "wiki/calendar/ — month pages YYYY-MM.md (one page per month, two-section scheme)"
 fields:
   calendar: "block mapping (declaration page) — source key → source declaration (value syntax belongs to the adapter: lark-calendar uses `lark/<profile> <calendar_id|primary>`); the source key is the end-of-line tag on schedule lines"
-inject: "Time territory: declaration page wiki/calendar.md (calendar block mapping = source key → declaration; absent = manual-only) + month pages wiki/calendar/YYYY-MM.md — ## Schedule source projection refreshed wholesale + ## Manual Notes append-only; event lines may wikilink, events get no pages; future rolling, past frozen; month stale_after default 2 days; boundary — calendar stores what happens when, todo what is pending; on-demand bridge (domains derive source-keyed lines into the current month)"
+inject: "Time territory: `wiki/calendar.md` (source keys; absent = manual-only) + month pages `wiki/calendar/YYYY-MM.md` (`## Schedule` refreshed wholesale, `## Manual Notes` append-only); calendar = what happens when, todo = what is pending; details PLUGIN.md"
 usage:
   - Sync (mechanical): read the declaration page's source list → each source pulled for the current and next month by its adapter → wholesale section refresh of each month page's `## Schedule` (lines tagged with the source key) → `pipeline.py verify` + log line + commit (`映射: calendar`)
   - Daily refresh (unattended session): deployment-side cron triggers the sync session on schedule, fully mechanical, no confirmation needed; failed sources are reported via log and do not block other sources; semantic enhancements (event notes, link completion) are left to interactive sessions

package/{.agents/skills/map → payloads/personal/command/owfa-map}/SKILL.md

@@ -1,26 +1,26 @@
 ---
-name: map
+name: owfa-map
 owner: mapping
 consumes: [mapping, trust, tag, index, hot, log]
 description: "Map assets in vault/ into wiki proxy pages: SHA-256, mirror path, frontmatter, index/hot-cache/log linkage. Triggers on: map, 映射, process this source, add this to the wiki."
 ---
 
-# map: mapping
+# owfa-map: mapping
 
 Map assets in `vault/` into `wiki/vault/` proxy pages — mapping and understanding are decoupled: a pure registration action (registration fields, body scale, and other write-side contracts are in the injection region). It targets only assets already in vault and does no vault-side processing (organizing and polishing belong to vault governance, discussed separately).
 
 ## Scope
 
 Write: mapping (proxy pages), log, hot, index
-Read: registry (`.meta/protocol/registry.yaml`, field and value-set anchor), tag (vocabulary `wiki/tags.md`), trust (generated), vault (originals)
+Read: registry (`.owfa/protocol/registry.yaml`, field and value-set anchor), tag (vocabulary `wiki/tags.md`), trust (generated), vault (originals)
 
 ## Steps
 
-1. **Anchor (one-time read)**: read `.meta/protocol/registry.yaml` and `wiki/tags.md` — value sets and the existing vocabulary are visible before writing
+1. **Anchor (one-time read)**: read `.owfa/protocol/registry.yaml` and `wiki/tags.md` — value sets and the existing vocabulary are visible before writing
 2. Read the target asset in vault/
 3. Assemble the proxy-page draft per the write-side contracts in the injection region (mapping mirror and registration fields, trust generated, tag labeling); **present the mapping preview** (path / hash / description / tags) and wait for user confirmation
 4. After confirmation, write the proxy page
-5. **Post-write pipeline** (deterministic, mechanical and automatic, no prompting): execute each plugin's write calls in injection-region order, then finish with `python .meta/scripts/pipeline.py verify` (post-write self-verification; on failure, go back and fix); then commit per the commit discipline (`映射: <asset name>`, see the vocabulary in `.meta/protocol/actions.md`)
+5. **Post-write pipeline** (deterministic, mechanical and automatic, no prompting): execute each plugin's write calls in injection-region order, then finish with `python .owfa/scripts/pipeline.py verify` (post-write self-verification; on failure, go back and fix); then commit per the commit discipline (`映射: <asset name>`, see the vocabulary in `.owfa/protocol/actions.md`)
 6. Report: path / hash / description / tags
 
 ## Prohibitions
@@ -37,7 +37,7 @@ Output language takes the default key of the language declaration page `wiki/lan
 
 ## Injected Section (plugin usage blocks)
 
-> This region is a wiki_plugin_kernel projection: consumes pulls merged with usage_routes source-side routing; disclosure order = owner first, routed blocks in the middle, pulled blocks last (rebuilt by inject / all); handwritten content does not belong here — to change the write-side contract, edit PLUGIN.yaml.
+> This region is a owfa-kernel projection: consumes pulls merged with usage_routes source-side routing; disclosure order = owner first, routed blocks in the middle, pulled blocks last (rebuilt by inject / all); handwritten content does not belong here — to change the write-side contract, edit PLUGIN.yaml.
 
 <!-- cmd-inject:start -->
 <!-- usage:mapping -->
@@ -59,14 +59,14 @@ Output language takes the default key of the language declaration page `wiki/lan
 <!-- /usage:tag -->
 
 <!-- usage:index -->
-- Post-write rebuild (mechanical, automatic): `python .meta/scripts/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
+- Post-write rebuild (mechanical, automatic): `python .owfa/scripts/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
 <!-- /usage:index -->
 
 <!-- usage:hot -->
-- Writing entries (mechanical, automatic): `python .meta/scripts/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
+- Writing entries (mechanical, automatic): `python .owfa/scripts/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
 <!-- /usage:hot -->
 
 <!-- usage:log -->
-- Writing lines (mechanical, automatic): `python .meta/scripts/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
+- Writing lines (mechanical, automatic): `python .owfa/scripts/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
 <!-- /usage:log -->
 <!-- cmd-inject:end -->

package/{.meta/command/profile → payloads/personal/command/owfa-profile}/SKILL.md

@@ -1,26 +1,26 @@
 ---
-name: profile
+name: owfa-profile
 owner: user-profile
 consumes: [user-profile, trust, index, hot, log]
 description: "Maintain the user profile wiki/profile.md: recognize self-description and behavioral signals, update assertions convergently (new values replace old, changes leave traces in the body, evidence wikilinks); construction and consolidation go through a whole-page rewrite preview. Triggers on: profile, 更新画像, 画像更新, update profile."
 ---
 
-# profile: profile update
+# owfa-profile: profile update
 
 Write the continuing cognition about the user into a checkable page: assertions carry evidence, preferences expire, updates leave traces. The direction is "inner → user cognition" — orthogonal to map (outer → inner translation) and save (sessions landing on disk); convergent across sessions, not a transactional one-shot. Write-side contracts (signal criteria, layered placement, assertion format, convergence traces) are in the injection region.
 
 ## Scope
 
 Write: user-profile (wiki/profile.md), log, hot, index
-Read: registry (`.meta/protocol/registry.yaml`, field and value-set anchor), trust (generated / stale_after), the current profile page (may be absent)
+Read: registry (`.owfa/protocol/registry.yaml`, field and value-set anchor), trust (generated / stale_after), the current profile page (may be absent)
 
 ## Steps
 
-1. **Anchor (one-time read)**: read `.meta/protocol/registry.yaml` and `wiki/profile.md` — a missing page = first creation (construction), no reliance on an initialization mechanism
-2. **Judge signals** (criteria in the injection region): if this session's and recent observations do not qualify, report and exit — never force a write
+1. **Anchor (one-time read)**: read `.owfa/protocol/registry.yaml` and `wiki/profile.md` — a missing page = first creation (construction), no reliance on an initialization mechanism
+2. **Judge signals** (criteria in the user-profile usage block below): if this session's and recent observations do not qualify, report and exit — never force a write
 3. Assemble the update: incremental assertions (new value replaces old + body trace) or construction / consolidation (whole-page rewrite) — construction and consolidation **present a profile preview** (assertions / evidence / layers) and wait for user confirmation
-4. Write the page (layered placement and stale_after renewal in the injection region)
-5. **Post-write pipeline** (deterministic, mechanical and automatic, no prompting): execute each plugin's write calls in injection-region order, then finish with `python .meta/scripts/pipeline.py verify` (post-write self-verification; on failure, go back and fix); then commit per the commit discipline (`画像: <one line>`, see the vocabulary in `.meta/protocol/actions.md`)
+4. Write the page (layered placement and stale_after renewal per the usage block below)
+5. **Post-write pipeline** (deterministic, mechanical and automatic, no prompting): execute each plugin's write calls in injection-region order, then finish with `python .owfa/scripts/pipeline.py verify` (post-write self-verification; on failure, go back and fix); then commit per the commit discipline (`画像: <one line>`, see the vocabulary in `.owfa/protocol/actions.md`)
 6. Report: what was updated / the evidence chain / which layer it landed in
 
 ## Prohibitions
@@ -39,7 +39,7 @@ Output language takes the default key of the language declaration page `wiki/lan
 
 ## Injected Section (plugin usage blocks)
 
-> This region is a wiki_plugin_kernel projection: consumes pulls merged with usage_routes source-side routing; disclosure order = owner first, routed blocks in the middle, pulled blocks last (rebuilt by inject / all); handwritten content does not belong here — to change the write-side contract, edit PLUGIN.yaml.
+> This region is a owfa-kernel projection: consumes pulls merged with usage_routes source-side routing; disclosure order = owner first, routed blocks in the middle, pulled blocks last (rebuilt by inject / all); handwritten content does not belong here — to change the write-side contract, edit PLUGIN.yaml.
 
 <!-- cmd-inject:start -->
 <!-- usage:user-profile -->
@@ -62,14 +62,14 @@ Output language takes the default key of the language declaration page `wiki/lan
 <!-- /usage:trust -->
 
 <!-- usage:index -->
-- Post-write rebuild (mechanical, automatic): `python .meta/scripts/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
+- Post-write rebuild (mechanical, automatic): `python .owfa/scripts/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
 <!-- /usage:index -->
 
 <!-- usage:hot -->
-- Writing entries (mechanical, automatic): `python .meta/scripts/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
+- Writing entries (mechanical, automatic): `python .owfa/scripts/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
 <!-- /usage:hot -->
 
 <!-- usage:log -->
-- Writing lines (mechanical, automatic): `python .meta/scripts/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
+- Writing lines (mechanical, automatic): `python .owfa/scripts/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
 <!-- /usage:log -->
 <!-- cmd-inject:end -->

package/{.agents/skills/save → payloads/personal/command/owfa-save}/SKILL.md

@@ -1,18 +1,18 @@
 ---
-name: save
+name: owfa-save
 owner: [notes, sessions]
 consumes: [notes, sessions, trust, index, hot, log]
 description: "Save the current conversation, answers, or insights as wiki native notes. Deduplicate before filing, infer type and title, chunk-extract long sessions, update index/log/hot cache. Triggers on: save this, /save, file this, save to wiki, 保存."
 ---
 
-# save: capture
+# owfa-save: capture
 
 Good answers should not vanish in chat history. Save what was just discussed as permanent wiki pages. The wiki compounds through it — save often.
 
 ## Scope
 
 Write: sessions (session backbone pages), notes (native notes), log, hot, index
-Read: registry (`.meta/protocol/registry.yaml`, field and value-set anchor), tag (vocabulary `wiki/tags.md`), trust (generated), index / hot (dedup prerequisites)
+Read: registry (`.owfa/protocol/registry.yaml`, field and value-set anchor), tag (vocabulary `wiki/tags.md`), trust (generated), index / hot (dedup prerequisites)
 
 ## Dedup Before Filing (required)
 
@@ -27,13 +27,13 @@ type / status value sets defer to the registry (a one-time read anchor; do not r
 
 ## Workflow
 
-1. **Anchor (one-time read)**: read `.meta/protocol/registry.yaml` and `wiki/tags.md` — type / status value sets and the existing vocabulary are visible before writing
+1. **Anchor (one-time read)**: read `.owfa/protocol/registry.yaml` and `wiki/tags.md` — type / status value sets and the existing vocabulary are visible before writing
 2. Scan the conversation for high-value content (non-obvious insights, decisions with reasons, hard-won analyses, comparisons that will be cited again); skip mechanical Q&A / debugging processes / content already in the repository
 3. Set the type (ask only on genuine ambiguity) and title (ask only on ambiguity or conflict)
 4. Rewrite in declarative present tense: write knowledge, not dialogue
 5. Create the page per the write-side contracts in the injection region (notes / sessions destinations and shapes, trust generated, tag labeling); the session type goes to the long-sessions section
 6. Write wiki pages mentioned in the conversation into related with wikilinks
-7. **Post-write pipeline** (deterministic, mechanical, automatic): execute each plugin's write calls in injection-region order, then finish with `python .meta/scripts/pipeline.py verify` (post-write self-verification; on failure, go back and fix); then commit per the commit discipline (`保存: <page title>`, see `.meta/protocol/actions.md`)
+7. **Post-write pipeline** (deterministic, mechanical, automatic): execute each plugin's write calls in injection-region order, then finish with `python .owfa/scripts/pipeline.py verify` (post-write self-verification; on failure, go back and fix); then commit per the commit discipline (`保存: <page title>`, see `.owfa/protocol/actions.md`)
 8. Report: `Saved as [[title]] in wiki/notes/` (session type: `... in wiki/sessions/`)
 
 ## Long Sessions (session backbone)
@@ -52,7 +52,7 @@ Declarative present tense; output language takes the default key of the language
 
 ## Injected Section (plugin usage blocks)
 
-> This region is a wiki_plugin_kernel projection: consumes pulls merged with usage_routes source-side routing; disclosure order = owner first, routed blocks in the middle, pulled blocks last (rebuilt by inject / all); handwritten content does not belong here — to change the write-side contract, edit PLUGIN.yaml.
+> This region is a owfa-kernel projection: consumes pulls merged with usage_routes source-side routing; disclosure order = owner first, routed blocks in the middle, pulled blocks last (rebuilt by inject / all); handwritten content does not belong here — to change the write-side contract, edit PLUGIN.yaml.
 
 <!-- cmd-inject:start -->
 <!-- usage:notes -->
@@ -62,7 +62,7 @@ Declarative present tense; output language takes the default key of the language
 
 <!-- usage:sessions -->
 - Landing spot `wiki/sessions/YYYY-MM-DD-<topic>.md` (default naming), type: session, participants required (actor list)
-- Backbone page five-section shape: Core Conclusions / Decisions & Rationale / Non-obvious Insights / Open Questions / Related Pages (full-shape sample in the Example section of `.meta/plugins/sessions/PLUGIN.md`)
+- Backbone page five-section shape: Core Conclusions / Decisions & Rationale / Non-obvious Insights / Open Questions / Related Pages (full-shape sample in the Example section of `.owfa/plugins/sessions/PLUGIN.md`)
 - Standalone high-value topics promoted to `wiki/notes/` pages, the backbone page keeping a wikilink; dedupe before promotion
 <!-- /usage:sessions -->
 
@@ -81,14 +81,14 @@ Declarative present tense; output language takes the default key of the language
 <!-- /usage:trust -->
 
 <!-- usage:index -->
-- Post-write rebuild (mechanical, automatic): `python .meta/scripts/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
+- Post-write rebuild (mechanical, automatic): `python .owfa/scripts/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
 <!-- /usage:index -->
 
 <!-- usage:hot -->
-- Writing entries (mechanical, automatic): `python .meta/scripts/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
+- Writing entries (mechanical, automatic): `python .owfa/scripts/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
 <!-- /usage:hot -->
 
 <!-- usage:log -->
-- Writing lines (mechanical, automatic): `python .meta/scripts/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
+- Writing lines (mechanical, automatic): `python .owfa/scripts/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
 <!-- /usage:log -->
 <!-- cmd-inject:end -->

package/{.meta/plugins/core → payloads/personal}/cron/PLUGIN.md

@@ -26,12 +26,14 @@
 - Executor names never enter invariants, the inject line, or field vocabulary — the replay recipes (usage) are their only home; trigger semantics declared wiki-side must remain translatable to any executor
 - Trigger vocabulary is open (extend words, not machinery); condition declarations carry executor-portable semantics only — what condition, edge, budget, cooldown; never how to probe or deliver
 - System-state writes require user confirmation: the script edition landing system tasks or watches, status changes syncing deletes/stops on the execution side — following the device attached-audit delegation precedent
+- Intent-change sync runs both directions; failures report via log only, never blocking other tasks (moved from the inject line, issue #49)
 - Normal runs write no task-page history; run notes take only anomalies and changes; last_run is machine-maintained
 - status: paused / deprecated pages are never deleted (kept for the record); deprecated tasks remain in the directory for lineage reference
 - Three-way boundary: todo one-shot delegations (the human states the trigger) · calendar event facts (what happens when — reality states the trigger) · cron deferred-trigger automation intent, systematically recorded and archived (machine conditions state the trigger); task outputs land per each domain's discipline (e.g. lark-calendar's daily-refresh output goes into the month page's schedule section, bili digest refreshes the digest page)
 
 ## Changelog
 
+- 0.5 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.4 (2026-10-08) deferred-trigger generalization (issue #29): schedule → trigger (time | condition forms, open kind vocabulary file|command|http|process|port|webhook), executor names withdrawn from the inject line into the replay recipes, trigger × form 2×2 matrix, per-form best-effort reconciliation (unreadable executor → info); executor-agnostic positioning ruled by the owner 2026-10-08
 - 0.3 (2026-10-06) inject line: sections lost to the kernel comment-strip clip restored (quoted values are now protected), tightened for budget headroom — issue #12 post-migration nit
 - 0.2 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills

package/{.meta/plugins/core → payloads/personal}/cron/PLUGIN.yaml

@@ -1,18 +1,18 @@
 id: cron
 schema_version: 1
-version: 0.4
+version: 0.5
 bridge: 按需
 depends:
   - wiki
   - trust
   - log
-updated: 2026-10-08
+updated: 2026-11-09
 attachment:
   - "wiki/cron/ — deferred-trigger territory (one page per task, pure-directory scheme — the directory is the full declaration set, no root declaration page, quick views via the derived index)"
   - "wiki/cron/<task name>.md — task page (type: cron; cron block mapping mechanical zone + two body sections)"
 fields:
   cron: "block mapping (task page) — trigger (deferred-trigger declaration; v0.4 generalizes the v0.3 schedule key, schedule reads as the time form): time form = crontab 5-field or human-readable cadence, local timezone by default; condition form = condition <kind> <target> [pattern] [interval] [max_fires] [cooldown], kind first batch file|command|http|process|port|webhook (open vocabulary — extend words, not machinery), pattern semantics fixed as no-match→match edge (default any change after baseline) / action (the action in one sentence) / form (execution shape: session edition | script edition — criterion: any agent-judgment step means session, purely mechanical means script; orthogonal to trigger, all four combinations legal) / domain (owning domain, tagged when a domain plugin registers via the bridge, omittable for cross-domain tasks) / status (active in-service | paused suspended | deprecated retired) / last_run (most recent run or fire time, machine-maintained) / machine (optional: executing-machine anchor for multi-device location; no linkage built)"
-inject: "Deferred-trigger territory wiki/cron/ (one page per task, the pure directory = the full declaration set): task page type: cron + cron block mapping (trigger: time (crontab 5-field) | condition <kind: file|command|http|process|port|webhook>, condition grammar in PLUGIN.md; action/form session|script/domain/status/last_run/machine) + ## Task + ## Run Notes append-only; declaration-as-source, every executor a replaceable projection — executor names live only in the replay recipes (usage), wiki records intent and traces, probing/delivery semantics stay executor-side; replay lands active pages execution-side upon user confirmation; reconciliation per-form diff against readable executor lists in the check attached audit; intent-change sync both directions; failures report via log only, never blocking others; boundaries — todo one-shot, calendar facts, cron deferred-trigger automation intent; on-demand bridge (domain tasks: page + depends)"
+inject: "Deferred triggers `wiki/cron/`: one page per task (`cron` block: trigger time|condition, action, form session|script, status; `## Run Notes` append-only); the page is the source, executors replayable projections on user confirmation; grammar PLUGIN.md"
 usage:
   - Registration (domain plugin via the bridge / direct human creation): build wiki/cron/<task name>.md — cron block mapping minimal key set (trigger/action/form/status) + a `## Task` section (action details: which command to call or what the session opening reads, back-linking the owning domain's skill); condition-form triggers declare executor-portable semantics only — what condition, edge, budget and cooldown; never executor-specific probes or delivery details; domain-plugin registrations tag domain and hang depends cron
   - Replay — the 2×2 translations (executor names live here and only here): time+session → harness-scheduler unattended session, prompt self-contained (read wiki/cron/<task name>.md and execute per the page, report failures with a log line, never block other tasks); time+script → system timer / crontab; condition+session → the deployment's conditional executor as a watch (name = page name, note self-contained pointing at the task page); condition+script → system timer running a stateful edge-detection script (state file holds the last-seen match, fire on no-match→match, zero harness dependency — inline recipe, v1 ships no script artifact); system-state writes upon user confirmation; when execution-side tasks diff against the declarations, add and delete with the declaration pages as the authority

package/{.meta/plugins/core → payloads/personal}/device/PLUGIN.md

@@ -34,5 +34,6 @@
 
 ## Changelog
 
+- 0.5 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.4 (2026-10-06) inject line: sections lost to the kernel comment-strip clip restored (quoted values are now protected), tightened for budget headroom — issue #12 post-migration nit- 0.3 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.2 2026-10-04: added the tool-environment summary section — the body's `## Tool Environment` records presence-level info on connectors/runtimes/channels, a cross-device lookup registry, the AGENTS shell pointing to the pages; presence-level granularity, (un)install syncing, no full inventory
 - 0.1 2026-10-04: established — reusing the notes territory (type: entity suggested), the device block mapping minimal key set, the attached-audit expiry scan (30-day window), expiry entering todo via delegation and confirmation; zero commands; depends wiki

package/{.meta/plugins/core → payloads/personal}/device/PLUGIN.yaml

@@ -1,15 +1,15 @@
 id: device
 schema_version: 1
-version: 0.4
+version: 0.5
 depends:
   - wiki
-updated: 2026-10-06
+updated: 2026-11-09
 attachment:
   - "wiki/notes/ — home of device profile pages (one page per device, type: entity suggested, device block mapping registering serial/purchase/warranty)"
   - "scripts/check.py — attached audit (warranty_until within 30 days of expiry / already expired → warning list)"
 fields:
   device: block mapping (device profile page in notes) — serial (serial number) / purchased (purchase date YYYY-MM-DD) / warranty_until (warranty or coverage end date YYYY-MM-DD, the attached-audit scan item), a three-key minimal set; remaining keys open (model, vendor, etc.; the architecture does not enumerate)
-inject: "Device profiles: one page per personal device in wiki/notes/ (type: entity suggested); device block mapping minimal keys serial/purchased/warranty_until, rest open; body ## Tool Environment = presence-level connector/runtime/channel registry for cross-device lookup (synced on (un)install, no full inventory); invoice assets via vault + wikilink; attached audit scans warranty_until (30-day window → warning list; todo line only upon confirmation); no real-time monitoring, no team lending"
+inject: "Device profiles: one page per device in `wiki/notes/` (`device` block serial/purchased/warranty_until; `## Tool Environment` connector/runtime registry, synced on (un)install); audit warns 30 days before warranty ends; details PLUGIN.md"
 usage:
   - Registration: natural-language editing in conversation suffices (no command) — one page per device in `wiki/notes/`, type: entity (suggested form); page name free, same names disambiguated by suffix; `device` block mapping minimal keys serial / purchased / warranty_until, remaining keys open
   - Tool environment: the device page body's `## Tool Environment` summary section — records connector presence (lark-cli, bb-cli, etc.), runtimes (python, node), channels (ssh, web entries) and the device's purpose; only presence-level, never exact versions (look up live); sync this section when software is (un)installed; no full software inventory; this section is the cross-device lookup registry — the AGENTS shell reaches only this machine, device pages cover all relevant devices, the shell pointing to the device pages

package/{.meta/plugins/core → payloads/personal}/domain/PLUGIN.md

@@ -40,4 +40,6 @@ Where the entropy goes: cross-domain semantic disambiguation is completed at ada
 
 ## Changelog
 
+- 0.3 2026-11-11: the pointer line now carries the dual-track skill preference rule (v0.4 A4, work order #56) — core skills are `owfa-*` and preferred over same-type foreign skills (correctness: the framework defines what they mean); connectors pick the registered/best-fitting transport, the official one is only the default recommendation (capability fit wins). Core command skills renamed with the 0.4 layout batch (`owfa-check/docs/map/plugin/profile/query/save/kernel`); natural-language triggers keep the old words so muscle memory still fires.
+- 0.2 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.1 2026-09-22: established — distilled from the 2026-09-19 domain problem report and four rounds of discussion; the three instances vault, lark, and project brought into compliance first

package/payloads/personal/domain/PLUGIN.yaml

@@ -0,0 +1,8 @@
+id: domain
+schema_version: 1
+version: 0.3
+depends: []
+updated: 2026-11-11
+attachment: []
+fields: {}
+inject: "Domains: wiki knows inner/outer; each domain declares its adapter contract, members inherit. Blocks are routing pointers — read `.owfa/plugins/**/<id>/PLUGIN.md` before acting. Core skills are owfa-* (prefer); connectors: fit wins, official is default."

package/{.meta/plugins/core → payloads/personal}/hot/PLUGIN.yaml

@@ -9,7 +9,7 @@ attachment:
 fields: {}
 inject: "Hot cache `wiki/hot.md`: recent-change digest (≤25 entries, <5 days, ≤200 chars per entry); agents read this page first on entering the repository; evict out-of-window entries before writing"
 usage:
-  - Writing entries (mechanical, automatic): `python .meta/scripts/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
+  - Writing entries (mechanical, automatic): `python .owfa/scripts/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
 checks:
   - Window out of bounds (>25 entries / >5 days / >200 chars per entry) → run `pipeline.py hot <type> "<backfill>"` once, or wait for the next write to converge naturally then re-check
   - Contradiction with log (log has records while hot shows no trace) → warning

package/{.meta/plugins/core → payloads/personal}/index/PLUGIN.md

@@ -25,6 +25,7 @@
 
 ## Changelog
 
+- 0.14 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.13 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.12 2026-09-23: added the wiki dependency edge — inner-side plugins attach to wiki, aligning with the domain 0.1 declaration; omitted from the 2026-09-22 domain-ization batch
 - 0.11 2026-09-19: concept-page detection excluded wiki/tmp/ — the temporary zone stays out of indexes and tags, in step with the tmp plugin's establishment
 - 0.10 2026-09-19: the per-directory scheme changed to the overflow-offloading scheme — list window of at most M, subtree-descending splits, the root always present, empty-subtree visibility lines; small repositories collapse to a single index, the engineering repository 4-to-1, test-repo measured 8-to-1; invariants gained "pure-function rebuild" and "indexes do not invent structure"

package/{.meta/plugins/core → payloads/personal}/index/PLUGIN.yaml

@@ -1,18 +1,18 @@
 id: index
 schema_version: 1
-version: 0.13
+version: 0.14
 depends:
   - tag
   - wiki
-updated: 2026-10-06
+updated: 2026-11-09
 attachment:
   - "wiki/index.md — root index (always present; carries format_version; directly lists reachable pages)"
   - "Per-directory index.md — born of the overflow-offloading scheme (split out when a list overflows the window, disappearing on rebuild once merged back into the parent)"
   - "wiki/tags.md — tag reverse index"
 fields: {}
-inject: "Index overflow-offloading: root wiki/index.md always present (carries format_version), listing all reachable pages full-path; a list over the window (params in pipeline source) splits subtrees into their own index.md by descending page count; wiki/tags.md unchanged; aggregate only, never hand-edited, pure-function rebuild (pipeline.py index); indexes invent no structure — overflow lists in full as-is, the cure is subdirectories"
+inject: "Index `wiki/index.md` (+ subtree index.md on overflow): derived, never hand-edited — rebuild via `pipeline.py index`; lists every reachable page by full path; the overflow cure is subdirectories; details PLUGIN.md"
 usage:
-  - Post-write rebuild (mechanical, automatic): `python .meta/scripts/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
+  - Post-write rebuild (mechanical, automatic): `python .owfa/scripts/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
 checks:
   - Deviation between indexes and the actual page set (including merged-back indexes pending deletion) → fixed by running `pipeline.py index` to rebuild (idempotent; no diff means consistent); same for tags (`pipeline.py tags`)
   - Traces of hand editing → warning

package/{.meta/plugins/core → payloads/personal}/instance-git/PLUGIN.md

@@ -37,3 +37,8 @@ Not a git repository at the root (no `.git`)? The contract is dormant — one in
 ## One upgrade path, FYI
 
 Pure local (the default) → a `git bundle` file copied elsewhere → a private remote. Before any remote, sweep the sensitive faces (vault/ assets, cuhksz course records — anything you would not hand to a stranger); public remotes are out of the question for an instance.
+
+## Changelog
+
+- 0.2 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
+- 0.1 2026-10-13: established (see git history)

package/{.meta/plugins/core → payloads/personal}/instance-git/PLUGIN.yaml

@@ -1,11 +1,11 @@
 id: instance-git
 schema_version: 1
-version: 0.1
+version: 0.2
 depends: []
-updated: 2026-10-13
+updated: 2026-11-09
 attachment: []
 fields: {}
-inject: "Instance git = the snapshot ledger of real use (rollback + time machine), never a collaboration face: three authors — the kernel never touches git (the journal is its ledger), the agent commits at transaction close (type: summary, log-shaped), humans snapshot freely; red lines — credentials/session files never tracked, adding an ignore sweeps tracked matches out, project entities keep their own git (the instance discloses, never hosts); recovery entrance: git log -- <page> → git checkout -- <page>; beyond this contract, usage is the human's own"
+inject: "Instance git = snapshot ledger of real use (rollback + time machine), never a collaboration face: the agent commits at transaction close (`type: summary`), the kernel never touches git; credentials/session files never tracked; contract PLUGIN.md"
 usage:
   - Package transactions: after validate goes green, one commit at close — mechanical + semantic in one snapshot (message `plugin: <verb> <pkg> [v<version>]`); see the plugin command's Transaction close section
   - Session close: commit the dirty tree the session leaves (`type: summary`, optional `[domain]` tag — the same shape as a log entry); no other rhythm is mandated

package/{.meta/plugins/core → payloads/personal}/language/PLUGIN.md

@@ -32,6 +32,7 @@
 
 ## Changelog
 
+- 0.6 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.5 (2026-10-23): restore the register discipline in manifest usage routed to save and align the field description; generated command projections now retain it across rebuilds (issue #26).
 - 0.4 (2026-10-07): register key — the `register` canonical key governs the audience reading level (program default first/second-year undergraduates, AGENTS principle 12), consumed by bb-teach (teaching) / bb-quiz (annotation) / save (PR #23, renumbered past master's 0.3 compression)
 - 0.3 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.2 2026-10-04: language neutralization — the absence fallback changed from 'Chinese-first' to 'follow the session language', Chinese demoted to a development-period instance fact; layered ruling: source alignment belongs to domain plugins, reader alignment to this page's canonical keys (the teaching/annotation precedent); same batch as bb-teach/bb-quiz v0.4

package/{.meta/plugins/core → payloads/personal}/language/PLUGIN.yaml

@@ -1,9 +1,9 @@
 id: language
 schema_version: 1
-version: 0.5
+version: 0.6
 depends:
   - wiki
-updated: 2026-10-23
+updated: 2026-11-09
 attachment:
   - "wiki/language.md — the writing declaration page (output-language and writing-baseline ontology: frontmatter language/terms block mappings + body distillation section)"
   - "scripts/check.py — attached audit (territory placement / terms empty values / declaration page presence)"
@@ -11,8 +11,8 @@ fields:
   language: block mapping (declaration page) — canonical key → one-sentence rule (open vocabulary, e.g. default/teaching/annotation/register); output language and writing baseline — register = the writing register (audience reading level, default first/second-year undergraduates), consumed by bb-teach, bb-quiz and save
   terms: block mapping (declaration page) — term original → unified translation (single-line value); the cross-session translation-consistency lookup piece
 usage_routes:
-  - save
-inject: "Writing declaration page wiki/language.md (type: language): language block mapping = key → one-sentence rule (consumer precedents: teaching bb-teach, annotation bb-quiz, register = audience reading level, program default first/second-year undergraduates per AGENTS principle 12) + terms = original → unified translation; body distillation notes append-only; the agent reads it before producing written artifacts; page or key absent → session language (proper nouns/code/paths keep original); default baseline not a mandate — domain source-alignment disciplines take precedence; terms emergence-based (register after recurring hits); direct human edits legitimate"
+  - owfa-save
+inject: "Writing declaration `wiki/language.md`: read it before writing artifacts — `language` keys → one-sentence rules (e.g. register), `terms` → unified translations; page/key absent → session language; domain source-alignment wins; details PLUGIN.md"
 usage:
   - Register discipline: follow the language.register audience reading level when writing saved artifacts; absent register uses the program baseline (first/second-year undergraduates), while explicit user audience requirements and domain source-alignment rules take precedence
   - When to read: read the declaration page before writing any artifact (wiki pages, documents, lecture distillates); page or key absent = follow the session language (conversation language is the output language); proper nouns, code, paths, commands, and file names always keep their original form (language neutrality, invariant under configuration) — the framework presets no specific language; Chinese is merely an instance fact of this project's development period (AGENTS principle 7)

package/{.meta/plugins/core → payloads/personal}/link/PLUGIN.md

@@ -23,6 +23,7 @@
 
 ## Changelog
 
+- 0.15 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.14 2026-09-23: added the wiki dependency edge — inner-side plugins attach to wiki, aligning with the domain 0.1 declaration; omitted from the 2026-09-22 domain-ization batch
 - 0.13 2026-09-19: _concept excluded wiki/tmp/ — the temporary zone is not a link source and is exempt from graph checks; a draft's broken link = not yet written down, closed upon promotion
 - 0.12 2026-09-19: the orphan info set changed to dynamically reading registry type.values except session — new territory types covered automatically, the hardcoded set retired, prerequisite for project's establishment

package/{.meta/plugins/core → payloads/personal}/link/PLUGIN.yaml

@@ -1,16 +1,16 @@
 id: link
 schema_version: 1
-version: 0.14
+version: 0.15
 depends:
   - wiki
-updated: 2026-10-06
+updated: 2026-11-09
 attachment:
   - "Cross-cutting plugin, no files of its own: owns the link-syntax conventions and the related / aliases fields"
   - "scripts/check.py — attached audit (broken links / garbled text / alias ambiguity / orphans / one-way related)"
 fields:
   related: "YAML list, full-name wikilinks of related pages"
   aliases: "YAML list, aliases/short names, for link resolution"
-inject: "Link syntax `[[page full name]]` — full name = the relative path within wiki/ minus the trailing .md (e.g. `notes/X`, pdf asset proxy `vault/a.pdf`, md asset proxy `vault/<name>.md`, only one removed); truncated references forbidden, same-name ambiguity resolved by path; fields `related` / `aliases`; broken link = warning (not yet written down), orphan (no inbound links and no references, derived pages don't count as sources) = warning for notes knowledge pages, info for territory-value registration pages (dynamically reads registry type.values, except session)"
+inject: "Link syntax `[[full name]]`: full name = path within `wiki/` minus trailing `.md` (`notes/X`, pdf proxy `vault/a.pdf`, md proxy `vault/<name>.md` — strip one .md only); never truncate; fields `related`/`aliases`; broken/orphan grading PLUGIN.md"
 checks:
   - Mechanical items (attached-audit script `scripts/check.py`, executed on audit discovery): broken link (target is neither a page full name nor any page's aliases) → warning; hand-written broken link in hot → warning (not counted as an inbound-link source); garbled link (target contains the U+FFFD replacement character, including related items) → error; alias ambiguity (two pages declaring the same aliases, resolution indeterminate) → error; orphan page (no inbound links and no related references, inbound sources counting concept pages only) → warning for notes knowledge pages, info for territory-value registration pages (registry territory values except session, having no inbound links yet being the registration norm); one-way related (A lists B while B does not list back) → info
   - Semantic items (check command): inbound-link density top list → info item (evidence for hub emergence, no alert)

package/{.meta/plugins/core → payloads/personal}/link/scripts/check.py

@@ -53,7 +53,7 @@ TERRITORY_LABELS = {"source": "proxy page", "lark": "pointer page", "calendar":
 def _territory_types(root):
     """Read registry type.values (closed set of territory values) dynamically; session excluded (knowledge backbone, orphan hint is meaningful there)."""
     try:
-        text = open(os.path.join(root, ".meta", "protocol", "registry.yaml"), encoding="utf-8").read()
+        text = open(os.path.join(root, ".owfa", "protocol", "registry.yaml"), encoding="utf-8").read()
         m = re.search(r"values: \[([^\]]+)\]", text)
         return {v.strip() for v in m.group(1).split(",") if v.strip()} - {"session"}
     except OSError:

package/{.meta/plugins/core → payloads/personal}/log/PLUGIN.md

@@ -42,6 +42,7 @@ log.max_chars: 14000     # window character cap, approximate
 
 ## Changelog
 
+- 0.16 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.15 2026-10-02: global-domain batch one — established the mandatory bridge, i.e. the recording bridge; domain bases must depend on it, kernel verifies completeness; entries gained the omissible `[domain]` tag; pipeline log gained the `--domain` parameter
 - 0.13 2026-09-23: added the wiki dependency edge — inner-side plugins attach to wiki, aligning with the domain 0.1 declaration; omitted from the 2026-09-22 domain-ization batch
 - 0.12 2026-09-14: type value set extended with todo — the home of the todo plugin's task-settlement events; history goes to log, the todo page keeps only the active working set

package/{.meta/plugins/core → payloads/personal}/log/PLUGIN.yaml

@@ -1,18 +1,18 @@
 id: log
 schema_version: 1
-version: 0.15
+version: 0.16
 bridge: 必依
 depends:
   - wiki
-updated: 2026-10-06
+updated: 2026-11-09
 attachment:
   - "wiki/log.md — single-file operation journal (rolling window)"
   - "wiki/archive/YYYY-MM/log.md — archive spillover (immutable zone, grouped by entry month)"
   - "scripts/check.py — attached audit (entry date contract)"
 fields: {}
-inject: "Run log `wiki/log.md`: new entries prepended at the top, entries never rewritten; entry = date + type (map/save/query/check/plugin/todo/profile/other) + [domain] (omissible — domainless transactions; log is a mandatory bridge: domain bases must depend on this plugin, constitution principle 11) + one sentence; window ≤100 entries, overflow is mechanically archived to `wiki/archive/<month>/log.md`"
+inject: "Run log `wiki/log.md`: prepend, never rewrite; entry = date + type (map/save/query/check/plugin/todo/profile/other) + optional [domain] + one sentence, written via `pipeline.py log`; >100 entries auto-archived; details PLUGIN.md"
 usage:
-  - Writing lines (mechanical, automatic): `python .meta/scripts/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
+  - Writing lines (mechanical, automatic): `python .owfa/scripts/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
 checks:
   - Mechanical items (attached-audit script `scripts/check.py`, executed on audit discovery): undated entries (starting with `- ` yet not matching the date format, main file and archive checked alike) → error
   - Semantic items (check command): historical entries modified (verifiable via git) → error; capacity over the limit → re-check after mechanical archiving

package/{.meta/plugins/core → payloads/personal}/mapping/PLUGIN.yaml

@@ -12,7 +12,7 @@ fields:
   raw_file: "root-relative path, always present on proxy pages"
   raw_sha256: "hexadecimal SHA-256, mechanically recomputable from vault"
 commands:
-  - map
+  - owfa-map
 inject: "Proxy layer `wiki/vault/`: 1:1 mirror of root `vault/` (proxy name = original name + .md), pages always carry raw_file / raw_sha256; the path is the origin proof"
 usage:
   - Mirror locating: proxy path = `wiki/vault/<original-path>.md` (original name + .md, prevents name collisions); md assets also get proxies, no exceptions

package/{.meta/plugins/core → payloads/personal}/notes/PLUGIN.md

@@ -25,6 +25,7 @@ A derivation-destination bridge governing high-value conclusions: domain plugins
 
 ## Changelog
 
+- 0.16 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.15 2026-10-02: global-domain batch two — established the on-demand bridge as the derivation destination; domain-plugin self-descriptions retained with a pointer
 - 0.14 2026-09-23: added the wiki dependency edge — inner plugins attach to wiki, aligning with the domain 0.1 declaration; missed in the 2026-09-22 domainization batch
 - 0.13 2026-09-14: slimmed down; ruling: the architecture takes no responsibility for form classification — the form enumeration removed from body and inject line; 'concept/question/decision/entity' was personal-library migration residue, drifted from registry, comparison missed; type layering: territory values closed, namely source, session, profile — the basis for mechanical checks; form values demoted to an instance default vocabulary, registry defaults, open to self-extension